last executing test programs: 7m49.94915414s ago: executing program 0 (id=492): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x800, 0x0) syz_clone(0x4000, &(0x7f00000002c0)="f03f0b0b", 0x4, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2, 0x1, 0x0) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x70) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) r1 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) write$auto_fuse_dev_operations_fuse_i(r1, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) r2 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r2, &(0x7f0000000040)=""/4096, 0xfffffe82) ioctl$auto_PPPIOCBRIDGECHAN(0xffffffffffffffff, 0x40047435, 0x0) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x40100, 0x0) mmap$auto(0x0, 0x40, 0x5, 0x8000000008012, r3, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendto$auto(0x3, 0x0, 0x5, 0x5d9, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) write$auto(0xca, &(0x7f0000000040)='\x04>\x01\r\xfb\xff\xf6OL\xc8\xbe\x94\xf2\xa2\x00\x00', 0x2d9) 7m47.016684767s ago: executing program 0 (id=496): mmap$auto(0xa544, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x0) io_uring_setup$auto(0x6, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r1 = socket(0x10, 0x2, 0x4) statmount$auto(0x0, &(0x7f0000000180)={0x3, 0x1, 0x9, 0x7352, 0x3d, 0x65f, 0x1ffde, 0xa, 0x0, 0x2, 0xb, 0x3, 0x5, 0x101, 0xb4, 0x9, 0x6, 0x7ff, 0x84, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x0, 0xb4, 0x4, 0x0, 0x0, 0x0, 0xfffffff9, [0x7, 0x0, 0x68, 0x0, 0x800000100000000, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000009d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x8, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x2, 0x9, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x800000000000000, 0x7e30e0be]}, 0x1fe, 0xf) r2 = setfsgid$auto(0xee01) fsconfig$auto(0xffffffffffffffff, 0x175, &(0x7f00000000c0)='/proc/thread-self/fail-nth\x00', &(0x7f0000000380)="4e39b1701e5f7726e019f92128b1a691fb56d0c3122c633e17643ca2d2bfac4d58baf3545b3b02c7f4a5fa7bf81d072424dffd419253c22b7a7ebf79c1c2c4b128c0ca1a726afcb9f9914b4ccc4f398a7df40f5ab9226a84aa2704711309254cec3aa402e4bc67487e24ea89f109c3072c7a536a2454d1ee2418e654f93e21bfaca3ac155603a4a6721734650c43d223ecc7383884a88c50232f40830ed628d8df76aad2a60c55e1f71668f048b2139430728cb4541f5b9098a0a34df6964292e44b7b36289835baf5a4", r2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x24008004) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_tipcv2(0x0, r3) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0x200007, 0x19) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x8a240, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x2b7cb0f0) openat$auto_fops_atomic_t_ro_(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xdc5e}, 0x3aad6dc7}, 0x7, 0x4008) io_submit$auto(0x2, 0x7f, &(0x7f0000000040)=&(0x7f0000000000)={0x2, 0xb, 0x8, 0x3, 0x2, 0x3b, 0xfffffffffffffc00, 0x2, 0x1001, 0x0, 0x6, 0xffffffffffffffff}) ioctl$auto_TUNSETNOCSUM(r4, 0x400454c8, &(0x7f0000000300)=0x7ff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x400c801) write$auto(r1, 0x0, 0x2fb) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) openat$auto_percpu_stats_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x4282, 0x0) mmap$auto(0x5, 0xf, 0x40000000000002, 0x8012, 0xffffffffffffffff, 0x7fff) 7m44.478515937s ago: executing program 0 (id=500): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x106) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/controlC2\x00', 0x1e9581, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0x5452, &(0x7f0000000080)={0x80, 0xbed0}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = io_uring_setup$auto(0x401, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) ioctl$auto_MEMLOCK(r1, 0x40084d05, &(0x7f00000000c0)={0xfffffffe, 0x7fffffff}) timer_gettime$auto(0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xcff, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x1, 0xffffffffffff0001, 0x15) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) munmap$auto(0x4, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto_PR_SET_MM(0x23, 0x7fffffff, r2, 0x80000001, 0x5) memfd_create$auto(0x0, 0x9) mmap$auto(0x7c, 0x20009, 0xffffffffffffffc0, 0xeb1, 0x401, 0x10001) statmount$auto(0x0, 0x0, 0x1fe, 0x10081) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008) write$auto(0xffffffffffffffff, &(0x7f0000000040)='\xce*+#\x00', 0x80) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x10b042, 0x0) sendfile$auto(r3, r3, 0x0, 0x2) socket(0x1d, 0x2, 0x6) mmap$auto(0x0, 0x10000040009, 0xde, 0x9b74, 0x7, 0x28000) capset$auto(0x0, 0x0) bpf$auto_BPF_LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) 7m38.899729861s ago: executing program 0 (id=511): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, r0, 0x8000) mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0xe983, 0xdf, 0x80000000eb1, 0x401, 0x8000) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) writev$auto(r1, &(0x7f0000000200)={0x0, 0x5}, 0x3) r3 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sg0\x00', 0x141040, 0x0) ioctl$auto_SCSI_IOCTL_PROBE_HOST(r3, 0x5385, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x3, 0x5) lseek$auto(0x3, 0x0, 0x1) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) munmap$auto(0x8000, 0x100000002) r4 = userfaultfd$auto(0x1) statx$auto(r4, 0x0, 0x1000, 0x8, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/suspend_stats/success\x00', 0x200, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') ioctl$auto(0x1, 0x890c, 0x8) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) 7m35.081207975s ago: executing program 0 (id=522): socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x400c890}, 0x800) openat$auto_l2cap_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r0 = socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) read$auto(r0, &(0x7f0000000140)='\x00', 0x9) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x18, 0x3, 0x2) sendmmsg$auto(0x3, 0x0, 0x2, 0x0) r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) read$auto_proc_fault_inject_operations_base(r1, &(0x7f00000014c0)=""/35, 0x23) epoll_create$auto(0x4) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) sendfile$auto(0x1, 0xffffffffffffffff, 0x0, 0x8fb5) request_key$auto(&(0x7f0000000000)='}\x00', &(0x7f0000000040)='\x00', &(0x7f0000000080)='\x00', 0x8) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r2) sendmsg$auto_NL80211_CMD_SET_PMK(r0, &(0x7f0000001480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001440)={&(0x7f0000002c00)={0x1338, r3, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_PROBE_RESP={0x185, 0x91, "c8b034bb07e0cf10c12ca590bb8bb10a68b24d32d469f738b7fe495d53405a791a70acd56210b720c54c8ab35f1ed4912666e05640bcd30d17b524f00696e3f0b3c543f1bf2e8a5adb6f7f007bfd7b86e348736b7b09336231ddc0f0c44bfc770010809993e82aa6852267bd637884cfac2299823691c1bde577d25910f1574e08dc7e3c70451c0ced2559a2b158a226055ed1c693eaa82c6bb17cef5e47e345c7aed542ec856743ce50f416442f61b0038cf540184b1bca0d99e21356aac709a7d4f4d569c9ad8e0258a8e03b403c40ca462ae729d937a083d2e5be77bbb1a3191f639dd8b9beb47e1b035746527cd997369e5d8a52fd3ebf6f346d7be4a79b5e3b35b24c5522380b0b425d5a8e38a55f4d51e091273a7a273fdcfcd3422c52e48a731cd1cc175f7004e83a0e95de765e0f284754830d95fefbc45af22f7c8ad6e14cc14371d24308bdbbd000b51cf19d56bc7e4fe422efc4305718add584a0495c3bf1a80294a39423d45a33b929826b030df3fa3b205d834d5b5abcb45701c5"}, @NL80211_ATTR_MPATH_NEXT_HOP={0x1004, 0x1a, "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"}, @NL80211_ATTR_STA_FLAGS={0x196, 0x11, 0x0, 0x1, [@nested={0x10f, 0x5d, 0x0, 0x1, [@generic="7d68a6430ca4d6cc0d0f83494c5044016055f14be94cda3d8f4f535b4840055f383002cb4ad2eade1fc3093c0d71c93611aee5741a431117c9e9f0047fa2c922ddde417809", @generic="036fb5495210deebb31d53b808de22114592e62136b40517159b404f6868453e162176d7c9b68e9e1d3bc31518c6af9b0e5657882335aeba1ecfb394c891abc2e368089b02153610c1d01b2cc5957b79abbb7f00000000000000000000000000364466bfe49917351390b3d4f1f1b942feaf404587e530c8a2c883da105db51f7d40d89e95d2c3c0a5606004afbf3b8012d2e9691256299f9ae90358d9bed91fb1271f0909b82423afe6ab28623d50affe9259c6f0556e9c84b5b94dca324a63251335cfe72b"]}, @generic="9881cde03986136b3e465ae73bc812aa6734c6b1f46629b9860de4c477e9b55db11334cf2e0ac4c3cb3a8713a57a48cbe619a1a3e25e7b553fe3ee6d8417cb7c1c9ee0406ce78a9da5f202280838198ab987936b137fda1f7c6f8d5befe715d0266346bcd50230ae1a58fd9e3487255b9424b6a9deb172360081dfa8c2d3b915eaf1"]}]}, 0x1338}, 0x1, 0x0, 0x0, 0x80}, 0x808) fcntl$auto(0x0, 0x408, 0x100000) setsockopt$auto_SO_OOBINLINE(0xffffffffffffffff, 0x3, 0xa, 0x0, 0x2) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) 7m33.043140042s ago: executing program 0 (id=535): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb2, 0xffffffffffffffff, 0x100000000) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x400008, 0x3, 0x9b72, 0x2, 0x8000) listmount$auto(&(0x7f0000000080)={0x1f, @raw, 0x80000022, 0xfffffffffffffff7, 0x8}, 0x0, 0xf4240, 0x1) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080)=0x4, 0x4) write$auto(r0, &(0x7f00000000c0)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k]_\\\xf5\xc15\xe3-H\xff\xb1K\xd5)\xc5\x1e\xf9 \x8a\x7f^\x01\xcc', 0x4009) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) 7m17.67905241s ago: executing program 32 (id=535): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb2, 0xffffffffffffffff, 0x100000000) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x400008, 0x3, 0x9b72, 0x2, 0x8000) listmount$auto(&(0x7f0000000080)={0x1f, @raw, 0x80000022, 0xfffffffffffffff7, 0x8}, 0x0, 0xf4240, 0x1) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080)=0x4, 0x4) write$auto(r0, &(0x7f00000000c0)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k]_\\\xf5\xc15\xe3-H\xff\xb1K\xd5)\xc5\x1e\xf9 \x8a\x7f^\x01\xcc', 0x4009) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) 1m43.922197792s ago: executing program 4 (id=1553): r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x10003c, 0x1, 0x1ffde, 0x7, 0x3, 0xfffffffffffffffe, 0x9, 0x3, 0x6, 0x4, 0x7, 0x9, 0x9, 0x10005, 0x80, 0x4, 0xffefffff, 0x7, 0x2080, 0x203, 0x0, 0x20e9d17d, 0x400300000000000, 0xdb, 0x0, 0x6, 0xf04, [0xfffffffffffffffe, 0x0, 0x2, 0xfffffffffffffffd, 0x2, 0xfffffffffffffffe, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8f, 0x10000, 0x8000000, 0x7, 0x0, 0x1, 0xfffffffefffffffd, 0x5, 0xff5b, 0xc72, 0x0, 0x9, 0x0, 0x66, 0x3, 0x1, 0x0, 0x0, 0xfffffffffffffffb, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000003, 0x1, 0x8c]}, 0x2, 0xd) ioctl$auto_EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)=0x2) write$auto(r0, &(0x7f0000000040)='/dev/input/event1\x00', 0x10001) 1m43.050826341s ago: executing program 4 (id=1555): r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) write$auto_fuse_dev_operations_fuse_i(r0, &(0x7f0000000440)="11000000070000000000000000000e0001", 0x11) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) listxattrat$auto(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x10000000000000) close_range$auto(r1, r1, 0x29f) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x2, 0x5, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x11, 0xa, 0x300) sendmmsg$auto(0x4, 0x0, 0x9a6, 0xa) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x20009, 0xde, 0xeb1, 0x3fd, 0x8000) r2 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) newfstatat$auto(r2, 0x0, 0x0, 0x1000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/irq/2/name\x00', 0x800, 0x0) read$auto(r3, 0x0, 0x1) statmount$auto(0x0, &(0x7f0000000180)={0x9, 0xfffffffe, 0x44f, 0xa, 0x10, 0x1007181, 0x0, 0x62, 0x7, 0x800, 0x0, 0x26, 0x4, 0x200003fffffe, 0x5, 0x6, 0x0, 0x0, 0x0, 0x401, 0x862, 0xd, 0xfffffff8, 0x200, 0x0, 0x5dff, 0x6, 0xa3, 0x0, 0x0, 0xb626, [0xfffffffffffffffc, 0xffffffffffff04ef, 0x4, 0x7, 0x0, 0x0, 0x52d2, 0x0, 0x0, 0x9e, 0x0, 0xa7, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x1000000040, 0x81, 0x8a3, 0x6, 0x81, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x100002, 0x0, 0x3ff, 0x8, 0x3, 0x0, 0x0, 0x0, 0x4000000000000]}, 0x800000000000b, 0xbc) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(0xffffffffffffffff, 0xfffffff7effffd0c, &(0x7f0000000080)="6b2739c2338631d424f4fc3dfc0c6661f678cb7119dd72a0b85d565342c9a81ae0193926dd3852240a06312151c3d6445ad134271df9faacd29df0d362124f26c205024f2590b64ba7b110306c027de78b10c9a646a7bb4c133f9b47ad8597895ea1f1445b1fe637e47d432a08d33eb452c636c5f27ac7a01fe37df6e13dcc31e132105182815d6fa9ef21cdae3f3a8dcd32f0e2402156626d03a7354cca8b6f4ec305208ea1adbc") sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0x400000000e31, 0xffffffffffffffff, 0x0) io_uring_setup$auto(0x6, 0x0) madvise$auto(0x0, 0x200204, 0x15) mincore$auto(0x0, 0x10007f, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) wait4$auto(0x0, 0x0, 0xc, &(0x7f00000004c0)={{0x8000000000000000, 0x6}, {0x208, 0x5}, 0xffffffffffff0001, 0x8d4, 0x1, 0x6, 0x3, 0xac6, 0x4, 0x8, 0x8, 0x9f0, 0x8, 0xfffffffffffffffe, 0x9, 0x4}) shmctl$auto_SHM_STAT(0x1, 0xd, &(0x7f0000000680)={{0xc, 0xee00, 0x0, 0x5, 0x0, 0x10000, 0x90}, 0x9, 0x631, 0x8, 0x7, @inferred, @inferred, 0x3, 0x0, &(0x7f0000000400)="b69eaf360b9d493bd8a82a", 0x0}) 1m42.767959016s ago: executing program 4 (id=1557): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/neigh/batadv0/mcast_solicit\x00', 0x2000, 0x0) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) setresgid$auto(0x81, 0x800000a0, 0x8) adjtimex$auto(0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0xffffffffffffffff, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0x1002}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0x401}, 0x6, 0x0) close_range$auto(r0, r0, 0x6) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20b42, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\\ u', @ANYRES16=r3, @ANYBLOB="01002dbd7000f9dbdf250100000006000200000000000500070010000000080009000101000008000a000200000014001f000000000000000000000000000000000114002000fc0200"/86], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0xfdf31875370e1716) r4 = socket(0x1d, 0x3, 0x1) setsockopt$auto(r4, 0x65, 0x1, 0x0, 0x800) syz_genetlink_get_family_id$auto_net_shaper(0x0, 0xffffffffffffffff) r5 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r6, 0xfd}, 0x6a) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, 0x0, 0xfd}, 0x6a) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) futex_waitv$auto(&(0x7f0000000180)={0x3fb, 0x6, 0x2, 0xfff}, 0x3, 0xbffffffc, 0x0, 0x81) socket(0x2, 0x80802, 0x0) semtimedop$auto(0x8, &(0x7f00000001c0)={0x3, 0x4baa, 0x20}, 0x1, &(0x7f0000000200)={0x1, 0x7f}) socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x83) r7 = openat$auto_clk_summary_fops_(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/clk/clk_summary\x00', 0x0, 0x0) bpf$auto(0x5, &(0x7f0000000100)=@task_fd_query={r1, r7, 0x4, 0x0, 0x85, 0x5dc, 0x9, 0x6, 0x8001}, 0x101) openat$auto_proc_page_owner_threshold_(0xffffffffffffff9c, &(0x7f0000000340), 0x7ff7969646e276e5, 0x0) 1m41.969940109s ago: executing program 4 (id=1568): r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x88880, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto(r0, 0x0, 0x7f) close_range$auto(0x0, 0xffffffffffffffff, 0x2) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x181902, 0x0) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) open(0x0, 0x5c9343, 0x34) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r1 = socket(0xa, 0x3, 0x3b) connect$auto(r1, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r2 = epoll_create$auto(0x2) epoll_pwait2$auto(r2, 0x0, 0x8, 0x0, 0x0, 0x8) epoll_pwait$auto(r2, 0x0, 0x9, 0x1, 0x0, 0x8) mount$auto(0x0, 0x0, 0x0, 0x144000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendto$auto(r2, 0x0, 0x4, 0xfffffffe, 0x0, 0x1b) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r3, 0x0, 0x24048084) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x6a) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4e32, @rand_addr=0x64010101}, 0x51) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd11/queue/iostats_passthrough\x00', 0x2a001, 0x0) write$auto(r4, &(0x7f0000000040)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) 1m40.99516221s ago: executing program 4 (id=1561): r0 = socket(0x2, 0x1, 0x106) sendmsg$auto_OVS_VPORT_CMD_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4100}, 0x20000000) setsockopt$auto(r0, 0x2, 0x6, &(0x7f0000000180)='*\x1b\xfe>\xfe\n\x885w\xda\xafw\xe9\x00\x00\x00\x00\f\xc8\xa48\xb2\xee\x88\xcd\xf1@\xc9\xbf\xcc\xa1l\xd6\\)\xa2\xce\x0f\xba\xb8\x00\x00\x00\x00vd\xff\x9e&\x9a\xd0\xe9h\xaa;\xef?\xca\xf3tI\xc9\xe6+', 0x8) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/pagemap\x00', 0x80240, 0x0) ioctl$auto_PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000080)={0x64, 0x2, 0x3, 0x7fffffffef78, 0x4, 0x0, 0x1, 0x8f5, 0x2001, 0x30, 0x8000000000000000, 0x3}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) ioctl$auto_PPPIOCGFLAGS(r2, 0x8004745a, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0xffffffffffffffff, &(0x7f0000000080)='V\x89Zn\xbd\x93\x8e\x91$\x11\xddM\n\xc292\xb6$\xde|\x85\x83R\xe7*\x9bY\xce\xa9\x10\xf6\x8c|\xfb\xd0x\xd8\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6f\xa8\xe0RV\x91\xd4\x16\xa9\xafWW\xb1\xf4o\x1d \xc6\xef\x9dB\xce\xde\xac\x97v\\n\x00\xc6L\xa8\x01~\xe9\x8d\xc7\x18\xcc\xed\xfe\xe3\xe6!\x9e\x9d\x04\xe9\xfc', 0xdda) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) r3 = socket(0xa, 0x1, 0x84) pwrite64$auto(r0, &(0x7f0000000040)='++\x00', 0x7fffffffffffffff, 0x2b0f4f06) setsockopt$auto(r3, 0x0, 0x40, 0x0, 0x6f7250c4) ioctl$auto_FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, &(0x7f0000000280)="8258435fcc7b72875ce2e4f43909429e418d030c5d460a634ec28abb3d8409968f26a5fe2363ace544e51a48f70cf85761830a899f282cca3b083ed4904dd480a4b9c2c669d3c8e596828be85b7ec68154f35bf5d484617efe0f409c527622136fc46468aaa4dd8125a4e4e5611f645d19ddf3ba8dc3062eed1259b1275a924842fd") 1m40.347135599s ago: executing program 4 (id=1566): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mlock$auto(0xfbe8, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x80000008000) r0 = socket(0x18, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0\x00'}) socket(0xa, 0x801, 0x84) socket(0x18, 0x5, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x80487436, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x1a1000, 0x0) ioctl$auto_PROCMAP_QUERY(r2, 0xc0686611, &(0x7f0000000080)={0x67, 0x3f, 0x7fff, 0x5, 0x80000000007, 0x1, 0x6, 0xff, 0x5, 0x7f, 0xfbfffffe, 0xfff, 0x7fb, 0x4, 0x9}) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC0\x00', 0x0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/batadv0/accept_untracked_na\x00', 0x2a2000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f0000000080)={{@raw=0x7, 0x5, 0xfffff7bb, 0x2f, "984e784f697ebcc30053822c357eb55df43e9e037b650dfc7a3df9aa20e32749384f515111de5da4403cab68", @raw=0x7}, 0x200000, 0x1, 0x4, @raw=0x3, @enumerated={0x8, 0x0, "3544fac47a801d819cb534605db6a893115890fe4787b893bf2d3f312883af26fc4d92993388bae934e26fa2157468e873f1359a98377e7310a5f19b224938a6", 0xf}, "b210e8ae72f3052d09004297cc39fbd4fe51f972eb62ed41cec2ea5c1e45264907d818e9711e2b57cd159b796ab9e6c81a2f47680e3d2a7f677dccfd260d82fe"}) mlock$auto(0x1a81, 0x2) r4 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) r5 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/pcmC0D0p\x00', 0x80000, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_PVERSION(r5, 0x80044100, 0x0) write$auto(r4, 0x0, 0x400000000005) rseq$auto(&(0x7f0000000300)={0x9, 0x401, 0x0, 0x7, 0xffffffff, 0x2}, 0x4000007, 0x0, 0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_wireguard(&(0x7f00000001c0), r6) poll$auto(0x0, 0x0, 0x9f) unshare$auto(0x40000080) mlock$auto(0x7c88, 0x7fff) 1m24.989266832s ago: executing program 33 (id=1566): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mlock$auto(0xfbe8, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x80000008000) r0 = socket(0x18, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0\x00'}) socket(0xa, 0x801, 0x84) socket(0x18, 0x5, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x80487436, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x1a1000, 0x0) ioctl$auto_PROCMAP_QUERY(r2, 0xc0686611, &(0x7f0000000080)={0x67, 0x3f, 0x7fff, 0x5, 0x80000000007, 0x1, 0x6, 0xff, 0x5, 0x7f, 0xfbfffffe, 0xfff, 0x7fb, 0x4, 0x9}) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC0\x00', 0x0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/batadv0/accept_untracked_na\x00', 0x2a2000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f0000000080)={{@raw=0x7, 0x5, 0xfffff7bb, 0x2f, "984e784f697ebcc30053822c357eb55df43e9e037b650dfc7a3df9aa20e32749384f515111de5da4403cab68", @raw=0x7}, 0x200000, 0x1, 0x4, @raw=0x3, @enumerated={0x8, 0x0, "3544fac47a801d819cb534605db6a893115890fe4787b893bf2d3f312883af26fc4d92993388bae934e26fa2157468e873f1359a98377e7310a5f19b224938a6", 0xf}, "b210e8ae72f3052d09004297cc39fbd4fe51f972eb62ed41cec2ea5c1e45264907d818e9711e2b57cd159b796ab9e6c81a2f47680e3d2a7f677dccfd260d82fe"}) mlock$auto(0x1a81, 0x2) r4 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) r5 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/pcmC0D0p\x00', 0x80000, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_PVERSION(r5, 0x80044100, 0x0) write$auto(r4, 0x0, 0x400000000005) rseq$auto(&(0x7f0000000300)={0x9, 0x401, 0x0, 0x7, 0xffffffff, 0x2}, 0x4000007, 0x0, 0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_wireguard(&(0x7f00000001c0), r6) poll$auto(0x0, 0x0, 0x9f) unshare$auto(0x40000080) mlock$auto(0x7c88, 0x7fff) 25.288147935s ago: executing program 3 (id=1725): syz_clone3(0x0, 0x0) mmap$auto(0x0, 0x400008, 0x800df, 0x9b72, 0xfffffffffffffffe, 0x8000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x8600, 0x0) fcntl$auto(0x3, 0x4, 0xa553) socketpair$auto(0x1e, 0x5, 0x3, 0x0) r0 = open(0x0, 0x22240, 0x155) socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, 0x0, 0x80201, 0x0) r1 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) pidfd_open$auto(0x1, 0x0) newfstatat$auto(0xffffffffffffff9c, 0x0, 0x0, 0x1000) accept$auto(r1, 0xffffffffffffffff, 0xfffffffffffffffd) sendmmsg$auto(r0, &(0x7f0000000080)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) ioctl$auto(0x4000000000000c8, 0x400454cf, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = getpid() process_vm_readv$auto(r2, 0x0, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) 24.822695094s ago: executing program 3 (id=1727): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x86, 0x0) close_range$auto(0x2, r0, 0xfffffffc) (async) socket(0x2, 0x1, 0x0) (async) r1 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) r2 = openat$auto_ptdump_fops_(0xffffffffffffff9c, &(0x7f0000005b80), 0x101000, 0x0) preadv$auto(r2, &(0x7f0000005c40)={0x0, 0x3ff}, 0x1, 0x9, 0x1) (async) ioctl$auto(r1, 0x6f3f, 0x38) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) (async) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/ptp/ptp0/n_alarms\x00', 0x42080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000240)=""/217, 0x115) (async) ioctl$auto(r3, 0x40104d08, 0xffffffffffffffff) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$auto_TUNSETVNETBE2(r0, 0x400454de, &(0x7f0000000040)=0x100) (async) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r6) (async) ioctl$auto_KVM_CREATE_VM(r5, 0x4008ae8a, 0x0) 14.491404897s ago: executing program 2 (id=1753): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram10/queue/max_sectors_kb\x00', 0xe3102, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_UBI_IOCDET(0xffffffffffffffff, 0x40046f41, 0x0) unshare$auto(0x40000080) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) mount_setattr$auto(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={0x8, 0x100009}, 0x283) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/pts/ptmx\x00', 0xa0540, 0x0) lstat$auto(0x0, 0x0) ioctl$auto(r1, 0x5419, 0x38) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/pcmC1D0p\x00', 0x4000, 0x0) ioctl$auto_FBIO_CURSOR(0xffffffffffffffff, 0xc0684608, &(0x7f00000001c0)={0x6, 0x1, 0x600, &(0x7f0000000240)='!\x00', {0x1003, 0x9b72}, {0x5, 0x3, 0x2, 0x9, 0x4, 0x7f, 0x9, 0x0, {0x1fe, 0xffffff81, 0x0, 0x0, 0x0, 0x0}}}) write$auto(0xca, &(0x7f0000000040)='\x04>\x01\r\xfb\xff\xf6OL\xc8\xbe\x94\xf2\xa2\x00\x00', 0x2d9) r2 = socket(0x2, 0x1, 0x0) mmap$auto(0x5, 0x1395383a, 0x0, 0xffffffffffffffde, r2, 0x80) getsockopt$auto(r2, 0x6, 0x22, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0x18000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/nfs/parameters/nfs_mountpoint_expiry_timeout\x00', 0xa001, 0x0) write$auto(r3, &(0x7f0000000040)='1\xadk\xf8\x02\x00\x00\x00\x00\x00\x00\x00\f\x03', 0x7f) mremap$auto(0x8, 0x100000001, 0x8000000000000000, 0x7fffffff, 0x5) r4 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/input/event1\x00', 0x1, 0x0) ioctl$auto_EVIOCGKEYCODE(r4, 0x80084504, 0x0) mmap$auto(0xfffffffffffffffc, 0x0, 0x4000000000df, 0x10000000000078, 0xffffffffffffffff, 0x2ffffffffffe) madvise$auto(0x0, 0x86, 0x17) 13.139810315s ago: executing program 2 (id=1757): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0xffffffffffffffff, 0x40008000) capget$auto(0x0, 0xfffffffffffffffe) r2 = epoll_create$auto(0x4) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video48\x00', 0x18a041, 0x0) epoll_ctl$auto(r2, 0x1, r3, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="010029bd693840f03c423aa0000008000300", @ANYRES32=r1], 0x24}, 0x1, 0x0, 0x0, 0x404c050}, 0x80) connect$auto(r0, &(0x7f0000000080)=@xdp={0x2c, 0x0, r1, 0x3e}, 0xffffffff) sendmmsg$auto(0x3, &(0x7f0000000100)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc2}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 12.663639144s ago: executing program 2 (id=1759): syz_clone3(0x0, 0x0) mmap$auto(0x0, 0x400008, 0x800df, 0x9b72, 0xfffffffffffffffe, 0x8000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x8600, 0x0) fcntl$auto(0x3, 0x4, 0xa553) socketpair$auto(0x1e, 0x5, 0x3, 0x0) r0 = open(0x0, 0x22240, 0x155) socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, 0x0, 0x80201, 0x0) r1 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) pidfd_open$auto(0x1, 0x0) newfstatat$auto(0xffffffffffffff9c, 0x0, 0x0, 0x1000) accept$auto(r1, 0xffffffffffffffff, 0xfffffffffffffffd) sendmmsg$auto(r0, &(0x7f0000000080)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) ioctl$auto(0x4000000000000c8, 0x400454cf, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x1, 0x0, 0x6, 0x0) 10.881636015s ago: executing program 2 (id=1765): r0 = socket(0xa, 0x801, 0x84) mmap$auto(0xfffffffffffffffd, 0x12, 0xdf, 0x2000000009b7f, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b73, r0, 0x408000) unshare$auto(0x40000080) unshare$auto(0x21) getrandom$auto(0x0, 0x3, 0x7) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/036/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f00000000c0)={0x3, 0x81, 0x5b, 0x4, &(0x7f0000000380)="b0e7effef53b64afcd9b417a54be4976aa0b02c61fb7d55ffec529c0e837537d20d06b3db5caeb657bca370c84484807dfefe2d3366ef9b5d193e2de8b145fbcd05ddd565c7c5d77d6309ec4918aa48f44e272ca13863a97e80de7cd23616cb36de0e83a4ef2a4a56501dae2a58c9fa1e7e850ee1fc8c3000000000000000000", 0xd22ff64, 0xeb90, 0x2, @number_of_packets=0x4, 0x7, 0x476, 0x0}) write$auto(0xffffffffffffffff, 0x0, 0xfff) semget$auto(0x1, 0x3, 0x3ff) r2 = openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, &(0x7f0000000200), 0xc0400, 0x0) ioctl$auto_BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000240)={"afc2b1ca92f66d6202000000000000000b20551d19ecba0a4aba723aa74284078ca298c23c09ce2f013cf795fb146dbb52f4c2c591720393044153446ead73a6d0d4e1aaee41af1ec4c0bf648f4702619de28dab3e030000000000000076f0e4246fa36f846c02cc2402d0fc7f8b6f84841c7bd4816934fe9754c906cf66454d154b0a198706f27ab92651e1aa6856ee9bb79124f4712e6f117b13c3b8704e9ec9344c4b59ce49bbf943968bd8bb951575d5932d08a387b96e6679d40511096c5aa292672f18a47748befa7cc5b10cc721f41e62982ebb5543972030b39cc4dea1cc387fc6ebbf4e9c917507ad84e3315313192786fde94536de560500", 0x4, 0x1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) io_uring_register$auto_IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, 0x0, 0x80) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) r4 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r4, 0x0, 0x400018) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) r5 = socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) getsockopt$auto(r5, 0x84, 0x6d, 0x0, 0x0) init_module$auto(0x0, 0xffff9, 0x0) syz_genetlink_get_family_id$auto_ovs_ct_limit(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0xa, 0x0) modify_ldt$auto(0x1, 0x0, 0x10) openat$auto_trace_time_stamp_mode_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/timestamp_mode\x00', 0x40101, 0x0) mmap$auto(0x0, 0x400009, 0xffb, 0x8000000008011, 0x3, 0x0) 10.807912192s ago: executing program 3 (id=1766): mmap$auto(0x0, 0x8, 0xdf, 0xeb1, 0x0, 0x8000) socket(0xa, 0x5, 0x84) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0xf3, 0x4, 0x8, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/tty60\x00', 0xa2102, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001180), r1) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000440)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fddbdf250400000008000c0003000000040010"], 0x8c}, 0x1, 0x0, 0x0, 0x404c091}, 0x20044000) r3 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ppoll$auto(&(0x7f0000000040)={r3, 0xfffc, 0x8}, 0x4, 0x0, 0x0, 0x8) openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x40901, 0x0) r4 = epoll_create$auto(0x3e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000000c0), r6) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x3c, r7, 0x1, 0x70bd2d, 0x25dfdbf9, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x58}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_FD={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_GET(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r7, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000080}, 0x20040810) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x20000001}, 0x48080) close_range$auto(0x2, 0x8, 0x0) 10.765441029s ago: executing program 1 (id=1767): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/firmware/acpi/interrupts/ff_pmtimer\x00', 0xa0000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000000)=""/45, 0x2d) (fail_nth: 1) 10.626951012s ago: executing program 5 (id=1768): sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084) (async) msgctl$auto_IPC_STAT(0x6, 0x2, &(0x7f0000000340)={{0x6, 0xffffffffffffffff, 0x0, 0x4, 0x100, 0xa}, &(0x7f00000002c0)=0xee, &(0x7f0000000300)=0x8, 0x4000000, 0x7, 0x10001, 0x6, 0x3, 0x3ff, 0x81, 0x1f6, @raw=0xc73e, @inferred=0xffffffffffffffff}) (async) r1 = open(0x0, 0x22240, 0x155) (async, rerun: 64) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) (rerun: 64) ioctl$auto(r2, 0x64c7, 0x1e2) (async) r3 = socket(0x18, 0xa, 0x1) r4 = syz_genetlink_get_family_id$auto_thermal(&(0x7f00000000c0), r3) r5 = getuid() (async) r6 = fcntl$getown(r2, 0x9) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_DELETE(r1, &(0x7f0000001640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001600)={&(0x7f0000000140)={0x14bc, r4, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@THERMAL_GENL_ATTR_TZ_ID={0x8, 0x2, 0x4}, @THERMAL_GENL_ATTR_CPU_CAPABILITY_EFFICIENCY={0x8, 0x17, 0x7}, @THERMAL_GENL_ATTR_TZ_CDEV_WEIGHT={0x8, 0xb, 0x4}, @THERMAL_GENL_ATTR_TZ_TEMP={0x8, 0x3, 0x7}, @THERMAL_GENL_ATTR_TZ={0x1485, 0x1, 0x0, 0x1, [@generic="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", @nested={0xb7, 0x147, 0x0, 0x1, [@typed={0xc, 0x7, 0x0, 0x0, @u64}, @generic="1ba5a7f7155a", @generic="4fe9668d91f5ffaadbb3c4dd0ab77e7e35f1454f36fc2eaca35436e1ece1ee2632d06823cb701161307f2230a17f360db36e318e254626531e37a28a0fd42ca9b4da9b7d539ce6a2106cc321a7cde44bd5266a4692418479de0046054ecf731da22dde4356b3", @typed={0x8, 0x0, 0x0, 0x0, @u32=0x200}, @generic="6da068790127e94ebe936237b34104168220312c9743b34993d29dd0c4228c515bc0c558aae4c880fe0a54aae9cabb", @typed={0x4, 0x73}]}, @generic="f6d4f245566133a10a9c5219c5dff07c16218927aac7dd77cfcf5ca8712532aee642620e0df503ed83fc4e5b3a7b027a60fefdf4b28db855c81651850364796b2951a4b72805f58620a90dd1d81c2bad5af0aa448282c453c67ccf6f0a25d0b40f6dbc0ab880f2d7083fbdb863b7aded5e6848bada0033c66ce8d0ad560e103b294d4214fd3fbf972a77f97428f51ff6dd606f4f07678cc7def4d22755ce8b7656e5b86c6cc54b61d72f2f08f59398", @generic="f16ed51e3993ae6d762173c04a9e1879767f15997b031a637e5e83f333eea9e651c35551e55e69fe16e5c37259978b42ab8371ba7a7a701dd2c09f2688a5f76e7bcd4cde2efca0735c62aeb9652f776dc81f7e70fda2", @typed={0x8, 0xc7, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @nested={0x19e, 0x13a, 0x0, 0x1, [@typed={0x8, 0xcf, 0x0, 0x0, @uid=r5}, @generic="8782ee72960aeac15cd2b3f30f1416d9a8ad23e1fb82ad76bb842b2bd2311eefca6d931dba936dd7f18734dd05b4fdf86336fbd12115a391faafeb0e050ea38944a1", @nested={0x4, 0x62}, @generic="7e61e45946045a643e218d5400365b6ee043ee01450611677ba2d1ddded44dc1679b34ee689b71efb50e101be9e4baca12e379bddfe6806a12d19e17a1aacdfd0c4a079cc53ced993abded8e33af9de8c84463a4603cf3f6cb2c20bdb3a7bd2ebef5883dc5f633587bb723219013442bd3d6b2d2816319148b6ce5afff96", @generic="0620f1e7bb8a46d29e4637b4bbc4e03e476887b005e22fcd3465544031644b35d4e70968a292ea99ebfa17fc95a312088d74c7c8ab10a1b57437aabb6dfb3b6cf3a6a87911a530edf87bfc46bebe0aebcbed0384149d8d49c8d54a0a1c4e474078f1185afb32623d339af85910b49a405b7243f1d50e99a0df55ea6711806ea186385438d1330fb317ce30959a54ead022190d5f3c8a7a0e4cf365712be3b55f8b887083095ad7e44a12dc02ae895c2f23a6ed6f5a737a2e72c773d296d119335a9e54be13ad", @typed={0x8, 0x69, 0x0, 0x0, @fd=r2}]}, @nested={0x111, 0x11d, 0x0, 0x1, [@typed={0x13, 0x2d, 0x0, 0x0, @str='/dev/dri/card1\x00'}, @generic="0210570b88aabf19b42855bf81c54487f0bbf7c782018e58704934c2b83d86358a63bea5a950fdc92be8a96dc68f0abed895644c2ee31928c799c9ef8ee05759c3e31d02086bab9a3e843a9a81845ac1a6f7a7b11511d6e563219c72a83513241976b4d6d7bc34349a3daf47df10443fa5b0cb4fd26ddb6f6aa208905cad10cf88b842c29c90d784b8a3974305b37a348ad7654aab8f33ee8a3530c2f62475abea43bcf56c85cac23fa9b12d927e46fa09e2e9003592771e38a24ad37fcc1fa52b177731c96b7eefe2b6ac81c0651f780f85fe0474de5ed579e0395a5dd506b73105af73357f149fdee630645930a8a50936e91238", @typed={0x4, 0x2f}]}, @typed={0x8, 0x25, 0x0, 0x0, @pid=r6}]}]}, 0x14bc}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000860) (async) statx$auto(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0xed95, 0x7, &(0x7f0000000400)={0x7, 0x9, 0xcba, 0x4, 0xee01, 0xee01, 0x8, 0x6, 0xb95, 0x1, 0x7, 0x3, {0x6, 0xffff}, {0x6, 0x3}, {0x1, 0x7}, {0x8, 0x19}, 0x0, 0x10001, 0x8, 0xb64, 0x1, 0x1, 0x8875, 0x4, 0xfffffff7, 0x4, 0xce2f, 0xfff, [0x7fff, 0x7, 0x3, 0x150, 0x0, 0xfb, 0x3, 0xb, 0x609]}) (async) r8 = waitid$auto(0x1, 0xffffffffffffffff, &(0x7f0000000500)={@_si_pad}, 0x0, &(0x7f0000000580)={{0xe46, 0xfffffffffffffff8}, {0x2, 0x3}, 0x2, 0x0, 0x5, 0x4, 0xa, 0x81, 0x0, 0x0, 0x100000000000, 0xc, 0x4, 0x5, 0xffffffffffffffff, 0x8000000000000001}) (async, rerun: 64) r9 = socket(0xa, 0x801, 0x84) (rerun: 64) sendto$auto(r9, 0x0, 0x2000f, 0x20009, &(0x7f0000000000)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x1c) (async) sendmsg$auto_NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000640)={0x63c, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0xbf}, @NL80211_ATTR_MLO_LINKS={0x5fc, 0x138, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x6}]}, {0x428, 0x0, 0x0, 0x1, [@NL80211_ATTR_RECEIVE_MULTICAST={0x4}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x322, 0x25, 0x0, 0x1, [@generic="1adacf23818a4b6db6b3f31c0f111129f17815a680c194e926709b288895bfe931efbfbf1daa6368a980f0e9fa95f1f668d884f9a0834b", @typed={0xf3, 0x7a, 0x0, 0x0, @binary="7115a2f8f5a971186d40b5b43dca6c38f08a1ddbf0ed805c9c7796e5cdc38d16c3ad1af5c988db0fcc31ed0fc48de94e37835ecb87c003d2e84ccc7777406c3841741b165b6a9c5f8f6f00d4f1adb633bf043c053b7c6c8d0d44be19523486203892446293fd2b72574dadb191b5163f6a09b78ccd44dad371390b222d7cb0996e3675d5c82a3623aee0da31f299244460ad23e2e082d0147fbd56d48a464836c972aec8d61ab2d7eb433fd28ced986f7d8bebed8859dab62791a7cab0dc6c9fc14fd283b8a5b61f11eaf8a6d4280f812f0263ebbc6516205da76306f6f95f3fe4e0e7f85a204b50111ed7f74c17f7"}, @generic="d321706c0a9415733a0cd16f077d755efd63507d0793a141088267e7619d78860fa80c6ee16114491df9fc87eca44e89209a77cc16a3accfbd482dfb86999f24670b498d414aaa20a6fa72e0084dda0ab4710f9549501d", @nested={0x5c, 0x44, 0x0, 0x1, [@typed={0x4, 0xe9}, @nested={0x4, 0xa4}, @nested={0x4, 0x63}, @typed={0x8, 0xd7, 0x0, 0x0, @uid=r0}, @generic="dafc7cf83752b32e18dbdd748a79012d77cf5c14b51ea9cb50ef6b45b6be79d5c5903f3e989707cbbc1bd8a6e872ad0a2e3a02c5", @nested={0x4, 0xa0}, @nested={0x4, 0xea}, @typed={0x8, 0x5a, 0x0, 0x0, @ipv4=@multicast2}]}, @typed={0x4, 0x82}, @generic="129b9acf4a3219164cc147452cda176264ebe95540c89e7a1b3a82775149851ba9442dc94d72459b4504fb245b5ec376a790338835c7ca9fb591ae1e3ddf18031cc277fb0efa5c09771cbf424ba978ad", @nested={0xec, 0x62, 0x0, 0x1, [@nested={0x4, 0xe7}, @nested={0x4, 0x125}, @typed={0xd6, 0xef, 0x0, 0x0, @binary="ff9bdefcc8706c80c4a2e294c6d6825089b26166c22d47fae82db11f8325ca7c9bd5b91fa2104e8cd4673c76243f1cb14a5b0075668986528583a65ce959a7bd8e2c958942317b7bb05029913ddcf3cb9c07a84c5d696f455b606d7f86e9856602167f6441dbaec049cee1d75922a4d5488c59822b41d56a16c4ffd737a67b1fca9afb90dab37b78f87d679b880d3e0fe552b3c4c998ab43dbb8137b2a96de4042b3c7bbb1ed0c84cd0cdf4227eaf8cba54dcf1ebbcdac3913dab48f4566abf5973c671050b144a498ca111bbdc60c8e31eb"}, @typed={0x8, 0xf7, 0x0, 0x0, @u32=0x74077668}]}]}, @NL80211_ATTR_AUTH_DATA={0x95, 0x9c, "aa686a52484591e1fed0f68327e53459cbd610fdb60328ca99801876e6a04409271fd66ecd440da652ee6cc3fa4331c188acd4519c7592e4ad4b68c9422f50e6b53806909a786d91510fbbd27915a7630b99da27d748f55a0bbfd364151f3cca8dd26f7d6ae50d7a69214580e0e7f610873d1d39240f0704ba4e92ad73f0b9991cd82ab98120940672fd814ad2065bafa2"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x30}, @NL80211_ATTR_SSID={0x1a, 0x34, "16b5cec460cff8d2ae09f7380607305810dfc0fc4849"}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x8001}, @NL80211_ATTR_FILS_ERP_RRK={0x2e, 0xfc, "73042f56fce7d0585fd6e9aaa0bb8e655a4404a1b2dd514a4476df593c0b5a8e493e70ee86dea1cc963c"}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, 0x3}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, {0x1b4, 0x0, 0x0, 0x1, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0xe}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x81}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_HT_CAPABILITY={0x71, 0x1f, "ed0fd6c5dd5d923ea92eec7baaf3d215e10e3b3060951fc4fe5f5b1b958a7ca035352f71d4debe6f4212e7ac360e97125ffeabe4fcb9aaf7e147a9245881264aea44932dce36e968669392c9e8a9ac91f5f845d3232347dd4b486de536f596b42528cc024a452313fa0a9ba6e1"}, @NL80211_ATTR_CENTER_FREQ1_OFFSET={0x8, 0x123, 0x6}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x10b, 0x75, 0x0, 0x1, [@generic="3d2e0f7677beef8d965b275e243e24f7e6309628a6c8d772dbf1022d721ef9f56e89c82e2e348d4c782971e53b7a6e09de52c26c3c3bea90592ac9921e06a4", @nested={0x1c, 0x115, 0x0, 0x1, [@typed={0x14, 0x14, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x32}}, @nested={0x4, 0x3e}]}, @nested={0x34, 0x2e, 0x0, 0x1, [@nested={0x4, 0x5d}, @nested={0x4, 0x16}, @nested={0x4, 0x96}, @nested={0x4, 0x15}, @nested={0x4, 0x134}, @nested={0x4, 0x86}, @typed={0x7, 0x61, 0x0, 0x0, @str='**\x00'}, @typed={0x8, 0x85, 0x0, 0x0, @uid=r5}, @nested={0x4, 0x7d}, @typed={0x4, 0x3d}]}, @generic, @nested={0x64, 0x117, 0x0, 0x1, [@typed={0xc, 0xed, 0x0, 0x0, @u64=0x8644}, @typed={0x8, 0x2d, 0x0, 0x0, @uid=r7}, @nested={0x4, 0xbb}, @nested={0x4, 0x5c}, @nested={0x4, 0x1b}, @typed={0x8, 0x97, 0x0, 0x0, @pid=r8}, @nested={0x4, 0x74}, @typed={0x31, 0x79, 0x0, 0x0, @binary="aea8862f9dd3df3648a538a15989b2eaf016fbf71c0ce449e9b9e4fb79bce3af4bbbea56da801360dbfd13af4a"}]}, @typed={0x8, 0x84, 0x0, 0x0, @fd=r9}, @nested={0xc, 0x18, 0x0, 0x1, [@nested={0x4, 0x63}, @typed={0x4, 0x11c}]}]}]}]}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, "2f1629fca3145a41f3e7d58f"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x8}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x63c}, 0x1, 0x0, 0x0, 0x840}, 0x0) (async, rerun: 64) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000001680)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x2, 0x0) (rerun: 64) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) (async) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0xffc, 0x8, 0x80000000000000a, 0x0, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103}) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) r11 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000001900)='/dev/adsp1\x00', 0x28082, 0x0) (rerun: 32) ioctl$auto_SNDCTL_DSP_GETCAPS(r11, 0x8004500f, &(0x7f0000000040)) (async) socket(0x1d, 0x2, 0x2) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) r12 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000003880), 0x20000, 0x0) (async) r13 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SEND_BEACONS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="eb04655bd04700a3fa228ec79b21ad1c0000001f21ca1751e1597d20aa9341d5182d3bec322e7de2da4ed54deea2a9f4c8363e33169ea2dfa397f8c9b88efde51f0c9f5b9e79db7fcf8d9112e0ab44d6d7bfa2", @ANYRES16=r13, @ANYBLOB="30032bbd7000fbdbdf252600000008000b00fcffffff"], 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x20040004) (async) mmap$auto(0x0, 0x6, 0x7c4, 0x16, r12, 0xc1) (async, rerun: 64) ioctl$auto_BTRFS_IOC_FORGET_DEV(r12, 0x50009405, 0x0) (rerun: 64) 10.227806655s ago: executing program 1 (id=1769): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$auto_SOUND_MIXER_READ_RECSRC(0xffffffffffffffff, 0x80044dff, &(0x7f00000012c0)) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x23, 0x0) r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r0, 0x0, 0x4) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x10, 0x2, 0x4) socket(0xa, 0x1, 0x84) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000240), 0x840, 0x0) pidfd_open$auto(0x1, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000340)={[0x1ff, 0x7, 0xd, 0x5, 0x9487, 0x445f, 0x15f4da0a, 0x1, 0x81, 0xf8bd, 0x100, 0x4, 0x392, 0xfffffffffffffffd, 0x2, 0x2]}, 0x0) close_range$auto(0x2, 0x8, 0x0) 9.807374204s ago: executing program 1 (id=1770): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c000}, 0x20004880) 9.575676241s ago: executing program 1 (id=1771): semctl$auto_IPC_RMID(0x1, 0x7, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) setreuid$auto(0xffffffffffffffff, 0x8) prctl$auto_PR_SET_VMA_ANON_NAME(0x401, 0x0, 0x0, 0x30000001, 0x3) keyctl$auto(0x5, 0xffffffffffffffff, 0x0, 0x0, 0x80000000) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) setresuid$auto(0x0, 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x181500, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.stat\x00', 0x280, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000003c0)=""/20, 0xfffffcc4) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) fanotify_mark$auto(0xffffffffffffffff, 0x9, 0x9, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_GTP_CMD_ECHOREQ(r2, 0x0, 0x80) getdents$auto(0xffffffffffffffff, 0x0, 0x400018) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) semctl$auto_IPC_RMID(0x0, 0x4, 0x0, 0xfffffffffffffffb) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80302, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x10, 0x3, 0x8) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) msgctl$auto_IPC_INFO(0x80000001, 0x3, &(0x7f00000001c0)={{0x3, 0x0, 0x0, 0xfffffffb, 0x47a5d01f, 0x2, 0x7}, &(0x7f0000000080)=0x80, &(0x7f0000000180)=0x1, 0x7ff, 0x1, 0x6, 0x4, 0x401, 0x7df, 0x5, 0x180, @raw, @inferred=0xffffffffffffffff}) setfsuid$auto(r3) 9.260511464s ago: executing program 3 (id=1772): r0 = socket(0x2, 0x1, 0x106) r1 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r2 = socket(0x10, 0x2, 0xc) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="2f212cbd7000fcdbdf252100000008000300", @ANYRES32=0x0, @ANYBLOB="b531203fbdb5bc718654def816abc8440f2f6710387fc348222171776ad11f930685cdcc5ea337e8761b54a6e3f89cd891987c39997a0685"], 0x1c}}, 0x4000000) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r2, @ANYBLOB="01"], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) write$auto(r1, &(0x7f0000000000)='-\x00', 0xfdef) sendmsg$auto_NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="01002dbd7000fedbdf250300000008000b00000a00000500010003000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040840) sendmsg$auto_NET_DM_CMD_START(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020030bd7000fddbdf25e2000000"], 0xff89}, 0x1, 0x0, 0x0, 0x20000040}, 0x4040004) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/vlan/config\x00', 0xc0000, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/conf/veth0_vlan/drop_unicast_in_l2_multicast\x00', 0x101300, 0x0) signalfd$auto(0xffffffff, 0x0, 0x8) socket(0x1d, 0x2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) ioctl$auto_TCFLSH2(r3, 0x5411, 0x0) 8.786372232s ago: executing program 3 (id=1773): socket(0x2, 0x1, 0x106) setsockopt$auto(0x3, 0x1, 0x1d, 0x0, 0x9) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x11, 0x3, 0xfffff958) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x100) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x80040, 0x40, 0xe}, 0x18) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000002e80)='/sys/kernel/debug/tracing/per_cpu/cpu0/stats\x00', 0x101040, 0x0) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000004c0), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_TSCONFIG_SET(r5, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000600)={0x20, r4, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_TSCONFIG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc084}, 0x4000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'netdevsim0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'team0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000480), 0xc, &(0x7f00000018c0)={&(0x7f0000000580)={0x1324, r2, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x80000000}]}, @ETHTOOL_A_FEATURES_WANTED={0x129b, 0x3, 0x0, 0x1, [@generic="00eeb9483a7bc85c28b0445d0483ad8b4d4da8e81c9e2703a0212d1e997315cfbc3deb28b2b4c498472e0f2dc31fa4445c83ab0e3948277951ea439302e696eb197200ad7b14cd919498317365fbd7f295708eac0bc3d83dec8054fe8e07", @nested={0x20, 0x32, 0x0, 0x1, [@nested={0x4, 0x10f}, @nested={0x4, 0x19}, @typed={0x14, 0xc1, 0x0, 0x0, @ipv6=@loopback}]}, @generic="f304d8de79ee0de98941e84479e4a58c7a3d31a9124e660b055ecfa9273636848db5b7beac21ffd897fac9aa8eedee7cf6352756ac46661db3da7304b97c91b1116107f2292a220ea826a2566a60070378e1cb35b09892e8f2ed1617b4f9438364da27843dfd16fa98066b20ebede6bacf312b00a83b8b835faea21ddc6b70b437ab42e22c418b342e522e976339508e48", @nested={0x1069, 0x124, 0x0, 0x1, [@generic="2ec3729df13da7c8f56a28c960f0fdb14cb378b49c64054c3eadc5af3e19ead31a92a2bc1201c17e191e3a99d97b0365d568da20d2f8e48b87caae3684abcf6ba52f4f77d18dadab08dc615e5610e3c78d15ab5ccc4e16456be25599c4fb6897a0cfd54c7f", @generic="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"]}, @nested={0xfc, 0x3e, 0x0, 0x1, [@generic, @generic="d5cc8c4d44e5cc37d505298d4866ab82396df73812f65f13595c8d5794c8c41a942b7c78b29ccf07ac2bdc5043d31add1d65f84aecdd63609a0b7ffb54249dd05c180d9a6c49", @generic="023e57de2f5ac6ed0ed66d53822ac7547af543a415b5a814e3ce10d025e71772d1f0648e5949ad2ba806d677750254566a35b8bb96315b042c2ea64810d0519acd02d0538904a413323387755486f23679f6228ce6d90d5f9c8240406e914265a2ee8d8eeca49e4c58778d4bbc0d65dd1ca567235aae0bd9fd418494b707a846225abdabb10df6b950917937c40a9dbd38b9f310f430db81270d3ce84717128100065ea54e21b730bb59", @typed={0x8, 0x10b, 0x0, 0x0, @ipv4=@empty}]}, @typed={0x1f, 0xc2, 0x0, 0x0, @str='/proc/thread-self/fail-nth\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x101}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}]}, 0x1324}, 0x1, 0x0, 0x0, 0x4000004}, 0x20048094) mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x999, 0x0) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) socket(0x2, 0x1, 0x106) 8.696092478s ago: executing program 5 (id=1774): syz_clone3(0x0, 0x0) mmap$auto(0x0, 0x400008, 0x800df, 0x9b72, 0xfffffffffffffffe, 0x8000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x8600, 0x0) fcntl$auto(0x3, 0x4, 0xa553) socketpair$auto(0x1e, 0x5, 0x3, 0x0) r0 = open(0x0, 0x22240, 0x155) socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, 0x0, 0x80201, 0x0) r1 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) pidfd_open$auto(0x1, 0x0) newfstatat$auto(0xffffffffffffff9c, 0x0, 0x0, 0x1000) accept$auto(r1, 0xffffffffffffffff, 0xfffffffffffffffd) sendmmsg$auto(r0, &(0x7f0000000080)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) ioctl$auto(0x4000000000000c8, 0x400454cf, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={0x0, 0xffffffff}, 0x6, 0x0) 8.46247558s ago: executing program 2 (id=1775): socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$auto_IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) rseq$auto(&(0x7f00000001c0)={0xe, 0xfffffff7, 0x1, 0x9, 0xffffffff, 0x9}, 0x8000, 0x0, 0x6) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x3) r1 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x3, 0x3}, 0x18, 0x0) bpf$auto(0x0, &(0x7f00000003c0)=@task_fd_query={0x5, r1, 0x454f, 0xfff, 0x0, 0x0, r0, 0x80000000}, 0x6d4) flock$auto(r0, 0xc6) r3 = open(0x0, 0x4242, 0x59) flock$auto(r3, 0x6) mmap$auto(0x800, 0x9, 0x4, 0x40eb2, 0xffffffffffffffff, 0x300000000000) connect$auto(0x3, 0x0, 0x55) ioctl$auto(0x3, 0x5411, 0x10000000000402) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1ff, 0x7c9, 0x25, 0x4909b6f5, 0x1ffe0, 0x7, 0x3, 0x20000009, 0x9, 0x3, 0x4, 0x1, 0x68d, 0x9, 0x8, 0x10003, 0x80, 0x3, 0x0, 0xa, 0x22000, 0x200, 0xffffff28, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x8000000000000000, 0x101, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x6, 0xfffffffffffffffc, 0x0, 0x0, 0x80000, 0x0, 0xffff, 0x10, 0x0, 0x8, 0x10000, 0x0, 0x0, 0x90, 0x6, 0xbdcc, 0x0, 0xfffffffffffffffe]}, 0x1fe, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20000008}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) prctl$auto(0x9, 0x4, r2, 0x7, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x1892, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0xb, 0xa505}, 0x800}, 0x7, 0x4008) 8.410787586s ago: executing program 1 (id=1776): mmap$auto(0x0, 0x2020009, 0x40000003, 0xeb1, 0xffffffffffffffff, 0x8000) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x8, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = mq_open$auto(0x0, 0x1, 0x7d, &(0x7f0000000040)={0xfffffffffffffffd, 0x6, 0xffffffffffffffc0, 0x800000000000006}) socket(0x2, 0x80805, 0x0) r1 = eventfd$auto(0x9) writev$auto(0x4, &(0x7f0000000080)={&(0x7f0000000040), 0x8}, 0x1) read$auto_vhci_fops_hci_vhci(r1, &(0x7f0000000280)=""/27, 0xfe52) socket(0x11, 0xa, 0x300) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video3\x00', 0x2aa01, 0x0) socket(0x2, 0x2, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0040, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x20000000001ff, 0x7, 0xd3e, 0x1, 0x3a00000000000, 0x6, 0x8000000000000001, 0xfffffffffffffffd, 0x10001, 0xaa9, 0x10007ffffffd, 0x3, 0x6d3f, 0x2000009, 0x2, 0xfffffffffffffffa]}, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0) sendmsg$auto_NL80211_CMD_NEW_KEY(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="596dd982", @ANYRES16=r2, @ANYBLOB="00022dbd7000ffdbdf250b00000005003e0005000000050030015e00000005002900060000004000fe00bf8e6a83ef5127b6bdeb07fa94e0b577f14cf42b5be0e16a7959876c67d36b9b67d0b31c31ce2111aec605748a6f5d16ae6fef64eb564325bedb8aca"], 0x6c}, 0x1, 0x0, 0x0, 0x4004040}, 0x14) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x7, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2ca2c0, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 8.200318718s ago: executing program 5 (id=1777): socket(0x2, 0x1, 0x106) setsockopt$auto(0x3, 0x1, 0x1d, 0x0, 0x9) close_range$auto(0x2, 0x8, 0x0) socket(0x11, 0x3, 0xfffff958) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x80040, 0x40, 0xe}, 0x18) fremovexattr$auto(r0, &(0x7f0000000100)='syutem.posix_acl_a\xe7\xa4\x84\x89\x7f\xe4') truncate$auto(&(0x7f00000000c0)='./file0\x00', 0x6) 7.579275308s ago: executing program 3 (id=1778): r0 = pipe$auto(0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xcfk', 0x81) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sg0\x00', 0x103002, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_XFS_IOC_FREESP(r0, 0x4030580b, &(0x7f00000000c0)={0x4b0b, 0x4e, 0x800, 0xfffffffffffffffa, 0x6, 0x0}) capget$auto(&(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)={0xfffffff9, 0x6}) kcmp$auto(r3, r4, 0x60537ad3, r1, r1) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/security/tomoyo/query\x00', 0x82a02, 0x0) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/filter\x00', 0x2, 0x0) r5 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r5, 0xffffffffffdffe00, 0x0) write$auto(0x3, 0x0, 0x5c8) write$auto_sg_fops_sg(r2, 0x0, 0x0) r6 = gettid() kcmp$auto(r6, r6, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) syz_open_procfs$namespace(r6, &(0x7f0000000140)='ns/uts\x00') openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nullb0/queue/discard_granularity\x00', 0x37c7c16f7626c9d4, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/kernel/kexec_load_limit_panic\x00', 0x840141, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r7, 0x0, 0x0) r8 = socket(0x2, 0x1, 0x106) bind$auto(r8, &(0x7f0000000000)=@in={0x2, 0x3, @multicast1}, 0x6a) connect$auto(r8, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x36}}, 0x54) ioctl$auto(0x3, 0x80000541b, 0x38) 7.554169425s ago: executing program 5 (id=1779): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0xffffffffffffffff, 0x40008000) capget$auto(0x0, 0xfffffffffffffffe) r2 = epoll_create$auto(0x4) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video48\x00', 0x18a041, 0x0) epoll_ctl$auto(r2, 0x1, r3, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r3, @ANYBLOB="010029bd693840f03c423aa0000008000300", @ANYRES32=r1], 0x24}, 0x1, 0x0, 0x0, 0x404c050}, 0x80) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 7.089833408s ago: executing program 5 (id=1780): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/firmware/acpi/interrupts/ff_pmtimer\x00', 0xa0000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000000)=""/45, 0x2d) (fail_nth: 2) 6.990641829s ago: executing program 2 (id=1781): r0 = mq_open$auto(&(0x7f0000000080)='\\*)A\x00', 0xb3cc2fe3, 0x9, 0x0) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) ioctl$auto(r1, 0x40104d14, r1) (async, rerun: 32) mq_timedsend$auto(r0, 0x0, 0x200, 0x6, 0x0) (async, rerun: 32) ioctl$auto_SNAPSHOT_POWER_OFF(r0, 0xc0045878, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE_EXT(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x201, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000810) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r4) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd0100fddbdf251900000018000180140002006d6163766c616e3000000000000000003c0007800800010005000000080001000600004008000100ff0100000800010005000000080002000000000008000100ff00000008000100"], 0x68}, 0x1, 0x0, 0x0, 0x20040840}, 0x40000) (async) r6 = socket(0x29, 0x2, 0x0) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0245720, &(0x7f0000000140)={0xbf, 0x4, 0x6, 0x101, 0x2, "a94d77c3ec8ca62cd6bb8f8a442dc09d"}) (async) socket(0x2, 0x80002, 0x73) socket(0x25, 0x1, 0x84) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x3}, 0x1, 0x0, 0x123, 0x9}, 0x7}, 0x0, 0x5) (async) r7 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r7, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x11}, 0x6}, 0xfffffff9, 0x10, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async, rerun: 32) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) personality$auto(0xc) (async) seccomp$auto(0x3, 0x2, 0x0) ioctl$auto(r6, 0x8919, 0x24) 6.539939226s ago: executing program 1 (id=1782): r0 = socket(0x2, 0x1, 0x106) r1 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r2 = socket(0x10, 0x2, 0xc) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="2f212cbd7000fcdbdf252100000008000300", @ANYRES32=0x0, @ANYBLOB="b531203fbdb5bc718654def816abc8440f2f6710387fc348222171776ad11f930685cdcc5ea337e8761b54a6e3f89cd891987c39997a0685"], 0x1c}}, 0x4000000) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r2, @ANYBLOB="01"], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) write$auto(r1, &(0x7f0000000000)='-\x00', 0xfdef) sendmsg$auto_NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="01002dbd7000fedbdf250300000008000b00000a00000500010003000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040840) sendmsg$auto_NET_DM_CMD_START(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020030bd7000fddbdf25e2000000"], 0xff89}, 0x1, 0x0, 0x0, 0x20000040}, 0x4040004) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/vlan/config\x00', 0xc0000, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/conf/veth0_vlan/drop_unicast_in_l2_multicast\x00', 0x101300, 0x0) signalfd$auto(0xffffffff, 0x0, 0x8) socket(0x1d, 0x2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) socketpair$auto(0x4004, 0xf, 0x4, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) ioctl$auto_TCFLSH2(0xffffffffffffffff, 0x5411, 0x0) 0s ago: executing program 5 (id=1783): syz_clone3(0x0, 0x0) mmap$auto(0x0, 0x400008, 0x800df, 0x9b72, 0xfffffffffffffffe, 0x8000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x8600, 0x0) fcntl$auto(0x3, 0x4, 0xa553) socketpair$auto(0x1e, 0x5, 0x3, 0x0) r0 = open(0x0, 0x22240, 0x155) socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, 0x0, 0x80201, 0x0) r1 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) pidfd_open$auto(0x1, 0x0) newfstatat$auto(0xffffffffffffff9c, 0x0, 0x0, 0x1000) accept$auto(r1, 0xffffffffffffffff, 0xfffffffffffffffd) sendmmsg$auto(r0, &(0x7f0000000080)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) ioctl$auto(0x4000000000000c8, 0x400454cf, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x1, 0x0, 0x6, 0x0) kernel console output (not intermixed with test programs): 620.611227][T12303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 620.611242][T12303] Call Trace: [ 620.611250][T12303] [ 620.611260][T12303] dump_stack_lvl+0x16c/0x1f0 [ 620.611302][T12303] should_fail_ex+0x512/0x640 [ 620.611331][T12303] ? __kmalloc_node_track_caller_noprof+0xcb/0x930 [ 620.611372][T12303] should_failslab+0xc2/0x120 [ 620.611412][T12303] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 620.611450][T12303] ? kstrdup_const+0x63/0x80 [ 620.611485][T12303] ? kstrdup+0x53/0x100 [ 620.611512][T12303] kstrdup+0x53/0x100 [ 620.611542][T12303] kstrdup_const+0x63/0x80 [ 620.611572][T12303] __kernfs_new_node+0x9b/0x9b0 [ 620.611605][T12303] ? __pfx___kernfs_new_node+0x10/0x10 [ 620.611645][T12303] ? find_held_lock+0x2b/0x80 [ 620.611678][T12303] ? kernfs_root+0xee/0x2a0 [ 620.611711][T12303] kernfs_new_node+0x13c/0x1e0 [ 620.611750][T12303] __kernfs_create_file+0x53/0x350 [ 620.611801][T12303] cgroup_addrm_files+0x546/0xc20 [ 620.611849][T12303] ? __lock_acquire+0x436/0x2890 [ 620.611871][T12303] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 620.611919][T12303] ? css_next_child+0xcf/0x2d0 [ 620.611951][T12303] ? css_next_descendant_pre+0x58/0x1a0 [ 620.611987][T12303] css_populate_dir+0x343/0x570 [ 620.612023][T12303] cgroup_mkdir+0x5c4/0x12e0 [ 620.612063][T12303] ? __pfx_cgroup_mkdir+0x10/0x10 [ 620.612101][T12303] kernfs_iop_mkdir+0x111/0x190 [ 620.612133][T12303] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 620.612160][T12303] vfs_mkdir+0x731/0xb60 [ 620.612195][T12303] do_mkdirat+0x442/0x5e0 [ 620.612236][T12303] ? __pfx_do_mkdirat+0x10/0x10 [ 620.612275][T12303] ? strncpy_from_user+0x203/0x2e0 [ 620.612304][T12303] ? getname_flags.part.0+0x1c5/0x550 [ 620.612334][T12303] __x64_sys_mkdir+0xef/0x140 [ 620.612375][T12303] do_syscall_64+0xcd/0xf80 [ 620.612415][T12303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.612441][T12303] RIP: 0033:0x7fcaa7f8f7c9 [ 620.612460][T12303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 620.612485][T12303] RSP: 002b:00007fcaa8e56038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 620.612508][T12303] RAX: ffffffffffffffda RBX: 00007fcaa81e5fa0 RCX: 00007fcaa7f8f7c9 [ 620.612525][T12303] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 620.612540][T12303] RBP: 00007fcaa8013f91 R08: 0000000000000000 R09: 0000000000000000 [ 620.612556][T12303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 620.612571][T12303] R13: 00007fcaa81e6038 R14: 00007fcaa81e5fa0 R15: 00007fff6016f1c8 [ 620.612603][T12303] [ 621.127754][T12298] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 621.174900][T12303] cgroup: cgroup_addrm_files: failed to add tasks, err=-12 [ 621.645878][T12318] FAULT_INJECTION: forcing a failure. [ 621.645878][T12318] name failslab, interval 1, probability 0, space 0, times 0 [ 621.739216][T12318] CPU: 0 UID: 0 PID: 12318 Comm: syz.4.1304 Tainted: G L syzkaller #0 PREEMPT(full) [ 621.739256][T12318] Tainted: [L]=SOFTLOCKUP [ 621.739265][T12318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 621.739280][T12318] Call Trace: [ 621.739288][T12318] [ 621.739298][T12318] dump_stack_lvl+0x16c/0x1f0 [ 621.739340][T12318] should_fail_ex+0x512/0x640 [ 621.739368][T12318] ? kmem_cache_alloc_noprof+0x62/0x770 [ 621.739402][T12318] should_failslab+0xc2/0x120 [ 621.739441][T12318] kmem_cache_alloc_noprof+0x83/0x770 [ 621.739471][T12318] ? vm_area_dup+0x27/0x8d0 [ 621.739502][T12318] ? vm_area_dup+0x27/0x8d0 [ 621.739526][T12318] vm_area_dup+0x27/0x8d0 [ 621.739553][T12318] __split_vma+0x18e/0x1050 [ 621.739585][T12318] ? __pfx___split_vma+0x10/0x10 [ 621.739620][T12318] ? __pfx_mas_prev+0x10/0x10 [ 621.739656][T12318] vms_gather_munmap_vmas+0x3aa/0x1340 [ 621.739691][T12318] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 621.739726][T12318] ? mas_walk+0x6f5/0x980 [ 621.739769][T12318] __mmap_region+0x47c/0x2a00 [ 621.739801][T12318] ? __lock_acquire+0x436/0x2890 [ 621.739825][T12318] ? __pfx___mmap_region+0x10/0x10 [ 621.739863][T12318] ? lock_acquire+0x179/0x330 [ 621.739885][T12318] ? find_held_lock+0x2b/0x80 [ 621.739918][T12318] ? finish_task_switch.isra.0+0x202/0xbd0 [ 621.739953][T12318] ? rcu_is_watching+0x12/0xc0 [ 621.739987][T12318] ? finish_task_switch.isra.0+0x207/0xbd0 [ 621.740020][T12318] ? lockdep_hardirqs_on+0x7c/0x110 [ 621.740057][T12318] ? finish_task_switch.isra.0+0x207/0xbd0 [ 621.740144][T12318] ? rcu_is_watching+0x12/0xc0 [ 621.740185][T12318] mmap_region+0x1ab/0x3f0 [ 621.740215][T12318] ? __get_unmapped_area+0x267/0x3f0 [ 621.740255][T12318] do_mmap+0xa3e/0x1210 [ 621.740296][T12318] ? __pfx_do_mmap+0x10/0x10 [ 621.740333][T12318] ? __pfx_down_write_killable+0x10/0x10 [ 621.740377][T12318] vm_mmap_pgoff+0x29e/0x470 [ 621.740417][T12318] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 621.740460][T12318] ? __x64_sys_futex+0x1e0/0x4c0 [ 621.740488][T12318] ? __x64_sys_futex+0x1e9/0x4c0 [ 621.740520][T12318] ksys_mmap_pgoff+0x7d/0x5c0 [ 621.740556][T12318] ? xfd_validate_state+0x61/0x180 [ 621.740578][T12318] ? __pfx_ksys_write+0x10/0x10 [ 621.740618][T12318] __x64_sys_mmap+0x125/0x190 [ 621.740650][T12318] do_syscall_64+0xcd/0xf80 [ 621.740691][T12318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.740716][T12318] RIP: 0033:0x7f3ef058f7c9 [ 621.740742][T12318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 621.740767][T12318] RSP: 002b:00007f3ef13e8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 621.740795][T12318] RAX: ffffffffffffffda RBX: 00007f3ef07e5fa0 RCX: 00007f3ef058f7c9 [ 621.740817][T12318] RDX: 000000003ff57696 RSI: 0000000000008001 RDI: 0000000000000000 [ 621.740832][T12318] RBP: 00007f3ef0613f91 R08: 0000000000000002 R09: 8000000000008000 [ 621.740848][T12318] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 621.740863][T12318] R13: 00007f3ef07e6038 R14: 00007f3ef07e5fa0 R15: 00007fff1412da38 [ 621.740895][T12318] [ 622.517139][T12316] FAULT_INJECTION: forcing a failure. [ 622.517139][T12316] name failslab, interval 1, probability 0, space 0, times 0 [ 622.579441][T12316] CPU: 0 UID: 0 PID: 12316 Comm: syz.3.1303 Tainted: G L syzkaller #0 PREEMPT(full) [ 622.579480][T12316] Tainted: [L]=SOFTLOCKUP [ 622.579489][T12316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 622.579503][T12316] Call Trace: [ 622.579511][T12316] [ 622.579521][T12316] dump_stack_lvl+0x16c/0x1f0 [ 622.579563][T12316] should_fail_ex+0x512/0x640 [ 622.579596][T12316] should_failslab+0xc2/0x120 [ 622.579635][T12316] __kmalloc_cache_noprof+0x80/0x800 [ 622.579663][T12316] ? __task_pid_nr_ns+0x1f5/0x500 [ 622.579685][T12316] ? proc_thread_self_get_link+0x1c6/0x240 [ 622.579721][T12316] ? proc_thread_self_get_link+0x1c6/0x240 [ 622.579751][T12316] proc_thread_self_get_link+0x1c6/0x240 [ 622.579782][T12316] pick_link+0xb09/0x13b0 [ 622.579812][T12316] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 622.579847][T12316] step_into_slowpath+0x6c6/0xf50 [ 622.579884][T12316] ? __pfx_step_into_slowpath+0x10/0x10 [ 622.579921][T12316] ? lookup_fast+0x156/0x610 [ 622.579949][T12316] ? inode_permission+0x37b/0x640 [ 622.579979][T12316] link_path_walk+0xd26/0x1c70 [ 622.580022][T12316] path_openat+0x1bd/0x3140 [ 622.580057][T12316] ? do_syscall_64+0xcd/0xf80 [ 622.580093][T12316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.580127][T12316] ? __pfx_path_openat+0x10/0x10 [ 622.580175][T12316] do_filp_open+0x20b/0x470 [ 622.580213][T12316] ? __pfx_do_filp_open+0x10/0x10 [ 622.580271][T12316] ? alloc_fd+0x471/0x7d0 [ 622.580315][T12316] do_sys_openat2+0x121/0x290 [ 622.580342][T12316] ? __pfx_do_sys_openat2+0x10/0x10 [ 622.580388][T12316] __x64_sys_openat+0x174/0x210 [ 622.580416][T12316] ? __pfx___x64_sys_openat+0x10/0x10 [ 622.580447][T12316] ? syscall_user_dispatch+0x78/0x140 [ 622.580487][T12316] do_syscall_64+0xcd/0xf80 [ 622.580526][T12316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.580551][T12316] RIP: 0033:0x7f9996f8f7c9 [ 622.580571][T12316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 622.580596][T12316] RSP: 002b:00007f9997e4b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 622.580620][T12316] RAX: ffffffffffffffda RBX: 00007f99971e5fa0 RCX: 00007f9996f8f7c9 [ 622.580637][T12316] RDX: 0000000000101000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 622.580654][T12316] RBP: 00007f9997013f91 R08: 0000000000000000 R09: 0000000000000000 [ 622.580669][T12316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 622.580684][T12316] R13: 00007f99971e6038 R14: 00007f99971e5fa0 R15: 00007ffcd16e2af8 [ 622.580716][T12316] [ 623.574133][T12327] Invalid ELF header magic: != ELF [ 623.879395][T12334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.963600][T12334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 624.190629][T12335] zswap: compressor not available [ 624.559682][T12340] zswap: compressor not available [ 624.795431][T12359] FAULT_INJECTION: forcing a failure. [ 624.795431][T12359] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 624.856507][T12359] CPU: 0 UID: 0 PID: 12359 Comm: syz.1.1312 Tainted: G L syzkaller #0 PREEMPT(full) [ 624.856548][T12359] Tainted: [L]=SOFTLOCKUP [ 624.856557][T12359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 624.856573][T12359] Call Trace: [ 624.856581][T12359] [ 624.856590][T12359] dump_stack_lvl+0x16c/0x1f0 [ 624.856630][T12359] should_fail_ex+0x512/0x640 [ 624.856661][T12359] _copy_from_user+0x2e/0xd0 [ 624.856687][T12359] input_event_from_user+0xb9/0x290 [ 624.856721][T12359] ? __pfx_input_event_from_user+0x10/0x10 [ 624.856754][T12359] ? __pfx___might_resched+0x10/0x10 [ 624.856786][T12359] ? input_inject_event+0x1c0/0x3b0 [ 624.856821][T12359] evdev_write+0x26b/0x440 [ 624.856855][T12359] ? __pfx_evdev_write+0x10/0x10 [ 624.856886][T12359] ? bpf_lsm_file_permission+0x9/0x10 [ 624.856914][T12359] ? security_file_permission+0x71/0x210 [ 624.856944][T12359] ? rw_verify_area+0xcf/0x6c0 [ 624.856975][T12359] ? __pfx_evdev_write+0x10/0x10 [ 624.857008][T12359] vfs_write+0x2a0/0x11d0 [ 624.857048][T12359] ? __pfx_vfs_write+0x10/0x10 [ 624.857080][T12359] ? find_held_lock+0x2b/0x80 [ 624.857114][T12359] ? __fget_files+0x204/0x3c0 [ 624.857161][T12359] ? __fget_files+0x20e/0x3c0 [ 624.857203][T12359] ksys_write+0x1f8/0x250 [ 624.857237][T12359] ? __pfx_ksys_write+0x10/0x10 [ 624.857279][T12359] do_syscall_64+0xcd/0xf80 [ 624.857319][T12359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.857343][T12359] RIP: 0033:0x7f948318f7c9 [ 624.857362][T12359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 624.857391][T12359] RSP: 002b:00007f9483f99038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 624.857414][T12359] RAX: ffffffffffffffda RBX: 00007f94833e5fa0 RCX: 00007f948318f7c9 [ 624.857430][T12359] RDX: 0000000000010001 RSI: 0000200000000040 RDI: 0000000000000003 [ 624.857446][T12359] RBP: 00007f9483f99090 R08: 0000000000000000 R09: 0000000000000000 [ 624.857461][T12359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 624.857476][T12359] R13: 00007f94833e6038 R14: 00007f94833e5fa0 R15: 00007ffc3e885e88 [ 624.857507][T12359] [ 626.065668][T12372] usb usb36: usbfs: process 12372 (syz.1.1316) did not claim interface 0 before use [ 626.819122][T12372] Invalid ELF header magic: != ELF [ 628.178916][T12387] zswap: compressor not available [ 630.208911][T12427] usb usb36: usbfs: process 12427 (syz.4.1329) did not claim interface 0 before use [ 630.359571][T12427] Invalid ELF header magic: != ELF [ 630.573079][T12430] zswap: compressor not available [ 631.446649][T12455] zswap: compressor not available [ 632.116041][T12477] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1340'. [ 632.305546][T12477] vhci_hcd vhci_hcd.1: invalid port number 37 [ 632.311680][T12477] vhci_hcd vhci_hcd.1: default hub control req: 600d v002b i0025 l1 [ 633.176827][T12493] Invalid ELF header magic: != ELF [ 634.823307][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 634.830579][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 635.099778][T12522] zswap: compressor not available [ 635.596813][T12527] zswap: compressor not available [ 636.357462][T12552] FAULT_INJECTION: forcing a failure. [ 636.357462][T12552] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 636.387472][T12552] CPU: 0 UID: 0 PID: 12552 Comm: syz.4.1357 Tainted: G L syzkaller #0 PREEMPT(full) [ 636.387516][T12552] Tainted: [L]=SOFTLOCKUP [ 636.387526][T12552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 636.387543][T12552] Call Trace: [ 636.387552][T12552] [ 636.387564][T12552] dump_stack_lvl+0x16c/0x1f0 [ 636.387612][T12552] should_fail_ex+0x512/0x640 [ 636.387648][T12552] strncpy_from_user+0x3b/0x2e0 [ 636.387680][T12552] getname_flags.part.0+0x8f/0x550 [ 636.387716][T12552] getname_flags+0x93/0xf0 [ 636.387754][T12552] do_sys_openat2+0xb9/0x290 [ 636.387785][T12552] ? __pfx_do_sys_openat2+0x10/0x10 [ 636.387829][T12552] __x64_sys_openat+0x174/0x210 [ 636.387862][T12552] ? __pfx___x64_sys_openat+0x10/0x10 [ 636.387908][T12552] do_syscall_64+0xcd/0xf80 [ 636.387960][T12552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.387989][T12552] RIP: 0033:0x7f3ef058e010 [ 636.388011][T12552] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 636.388039][T12552] RSP: 002b:00007f3ef13e7f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 636.388064][T12552] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f3ef058e010 [ 636.388082][T12552] RDX: 0000000000000002 RSI: 00007f3ef13e7fa0 RDI: 00000000ffffff9c [ 636.388099][T12552] RBP: 00007f3ef13e7fa0 R08: 0000000000000000 R09: 0000000000000000 [ 636.388115][T12552] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 636.388131][T12552] R13: 00007f3ef07e6038 R14: 00007f3ef07e5fa0 R15: 00007fff1412da38 [ 636.388173][T12552] [ 638.631673][T12581] zswap: compressor not available [ 639.519879][T12606] zswap: compressor not available [ 639.544920][T12608] FAULT_INJECTION: forcing a failure. [ 639.544920][T12608] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 639.594645][T12608] CPU: 0 UID: 0 PID: 12608 Comm: syz.2.1371 Tainted: G L syzkaller #0 PREEMPT(full) [ 639.594683][T12608] Tainted: [L]=SOFTLOCKUP [ 639.594691][T12608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 639.594706][T12608] Call Trace: [ 639.594713][T12608] [ 639.594722][T12608] dump_stack_lvl+0x16c/0x1f0 [ 639.594764][T12608] should_fail_ex+0x512/0x640 [ 639.594795][T12608] _copy_to_iter+0x29f/0x1710 [ 639.594822][T12608] ? __mutex_unlock_slowpath+0x161/0x790 [ 639.594864][T12608] ? __pfx__copy_to_iter+0x10/0x10 [ 639.594895][T12608] ? kernfs_seq_stop+0xcd/0x120 [ 639.594934][T12608] ? kernfs_put_active+0x86/0xe0 [ 639.594968][T12608] seq_read_iter+0xd02/0x12d0 [ 639.595012][T12608] kernfs_fop_read_iter+0x46c/0x610 [ 639.595048][T12608] ? rw_verify_area+0xcf/0x6c0 [ 639.595081][T12608] vfs_read+0x8bf/0xcf0 [ 639.595119][T12608] ? __pfx_vfs_read+0x10/0x10 [ 639.595168][T12608] ksys_read+0x12a/0x250 [ 639.595201][T12608] ? __pfx_ksys_read+0x10/0x10 [ 639.595241][T12608] do_syscall_64+0xcd/0xf80 [ 639.595279][T12608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.595302][T12608] RIP: 0033:0x7fcaa7f8f7c9 [ 639.595320][T12608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 639.595344][T12608] RSP: 002b:00007fcaa8e35038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 639.595366][T12608] RAX: ffffffffffffffda RBX: 00007fcaa81e6090 RCX: 00007fcaa7f8f7c9 [ 639.595383][T12608] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 0000000000000004 [ 639.595398][T12608] RBP: 00007fcaa8e35090 R08: 0000000000000000 R09: 0000000000000000 [ 639.595412][T12608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 639.595427][T12608] R13: 00007fcaa81e6128 R14: 00007fcaa81e6090 R15: 00007fff6016f1c8 [ 639.595458][T12608] [ 641.090447][T12636] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1377'. [ 641.606904][T12641] zswap: compressor not available [ 641.844163][T12655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1381'. [ 641.884705][T12655] FAULT_INJECTION: forcing a failure. [ 641.884705][T12655] name failslab, interval 1, probability 0, space 0, times 0 [ 641.925159][T12655] CPU: 0 UID: 0 PID: 12655 Comm: syz.2.1381 Tainted: G L syzkaller #0 PREEMPT(full) [ 641.925198][T12655] Tainted: [L]=SOFTLOCKUP [ 641.925207][T12655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 641.925223][T12655] Call Trace: [ 641.925231][T12655] [ 641.925240][T12655] dump_stack_lvl+0x16c/0x1f0 [ 641.925282][T12655] should_fail_ex+0x512/0x640 [ 641.925310][T12655] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 641.925344][T12655] should_failslab+0xc2/0x120 [ 641.925383][T12655] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 641.925415][T12655] ? hugetlbfs_alloc_inode+0x8c/0x1d0 [ 641.925462][T12655] ? hugetlbfs_alloc_inode+0x8c/0x1d0 [ 641.925505][T12655] hugetlbfs_alloc_inode+0x8c/0x1d0 [ 641.925546][T12655] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 641.925587][T12655] alloc_inode+0x64/0x240 [ 641.925615][T12655] new_inode+0x22/0x1c0 [ 641.925645][T12655] hugetlbfs_get_inode+0x354/0x700 [ 641.925674][T12655] hugetlb_file_setup+0x15b/0x620 [ 641.925703][T12655] ksys_mmap_pgoff+0x189/0x5c0 [ 641.925753][T12655] __x64_sys_mmap+0x125/0x190 [ 641.925782][T12655] do_syscall_64+0xcd/0xf80 [ 641.925822][T12655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.925847][T12655] RIP: 0033:0x7fcaa7f8f7c9 [ 641.925867][T12655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 641.925892][T12655] RSP: 002b:00007fcaa8e56038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 641.925915][T12655] RAX: ffffffffffffffda RBX: 00007fcaa81e5fa0 RCX: 00007fcaa7f8f7c9 [ 641.925931][T12655] RDX: ffffffffffffffff RSI: 0000000000000002 RDI: 0000000000000000 [ 641.925946][T12655] RBP: 00007fcaa8013f91 R08: 0000000000000602 R09: 0000300000000000 [ 641.925962][T12655] R10: 0000000000044eb1 R11: 0000000000000246 R12: 0000000000000000 [ 641.925977][T12655] R13: 00007fcaa81e6038 R14: 00007fcaa81e5fa0 R15: 00007fff6016f1c8 [ 641.926009][T12655] [ 642.149217][T12640] Process accounting paused [ 642.890625][T12660] zswap: compressor not available [ 645.607983][T12723] zswap: compressor not available [ 648.059458][T12761] Process accounting paused [ 648.553495][T12781] FAULT_INJECTION: forcing a failure. [ 648.553495][T12781] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 648.609609][T12781] CPU: 0 UID: 0 PID: 12781 Comm: syz.4.1413 Tainted: G L syzkaller #0 PREEMPT(full) [ 648.609659][T12781] Tainted: [L]=SOFTLOCKUP [ 648.609667][T12781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 648.609681][T12781] Call Trace: [ 648.609708][T12781] [ 648.609718][T12781] dump_stack_lvl+0x16c/0x1f0 [ 648.609759][T12781] should_fail_ex+0x512/0x640 [ 648.609791][T12781] _copy_from_user+0x2e/0xd0 [ 648.609818][T12781] input_event_from_user+0xb9/0x290 [ 648.609853][T12781] ? __pfx_input_event_from_user+0x10/0x10 [ 648.609888][T12781] ? __pfx___might_resched+0x10/0x10 [ 648.609921][T12781] ? input_inject_event+0x1c0/0x3b0 [ 648.609957][T12781] evdev_write+0x26b/0x440 [ 648.609992][T12781] ? __pfx_evdev_write+0x10/0x10 [ 648.610025][T12781] ? bpf_lsm_file_permission+0x9/0x10 [ 648.610054][T12781] ? security_file_permission+0x71/0x210 [ 648.610086][T12781] ? rw_verify_area+0xcf/0x6c0 [ 648.610128][T12781] ? __pfx_evdev_write+0x10/0x10 [ 648.610158][T12781] vfs_write+0x2a0/0x11d0 [ 648.610199][T12781] ? __pfx_vfs_write+0x10/0x10 [ 648.610232][T12781] ? find_held_lock+0x2b/0x80 [ 648.610264][T12781] ? __fget_files+0x204/0x3c0 [ 648.610305][T12781] ? __fget_files+0x20e/0x3c0 [ 648.610348][T12781] ksys_write+0x1f8/0x250 [ 648.610383][T12781] ? __pfx_ksys_write+0x10/0x10 [ 648.610426][T12781] do_syscall_64+0xcd/0xf80 [ 648.610466][T12781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.610492][T12781] RIP: 0033:0x7f3ef058f7c9 [ 648.610511][T12781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 648.610535][T12781] RSP: 002b:00007f3ef13e8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 648.610557][T12781] RAX: ffffffffffffffda RBX: 00007f3ef07e5fa0 RCX: 00007f3ef058f7c9 [ 648.610578][T12781] RDX: 0000000000010001 RSI: 0000200000000040 RDI: 0000000000000003 [ 648.610594][T12781] RBP: 00007f3ef13e8090 R08: 0000000000000000 R09: 0000000000000000 [ 648.610608][T12781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 648.610622][T12781] R13: 00007f3ef07e6038 R14: 00007f3ef07e5fa0 R15: 00007fff1412da38 [ 648.610654][T12781] [ 649.702253][T12739] syz.2.1405 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 649.768956][T12783] FAULT_INJECTION: forcing a failure. [ 649.768956][T12783] name failslab, interval 1, probability 0, space 0, times 0 [ 649.818917][T12739] CPU: 0 UID: 0 PID: 12739 Comm: syz.2.1405 Tainted: G L syzkaller #0 PREEMPT(full) [ 649.818955][T12739] Tainted: [L]=SOFTLOCKUP [ 649.818964][T12739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 649.818979][T12739] Call Trace: [ 649.818987][T12739] [ 649.818997][T12739] dump_stack_lvl+0x16c/0x1f0 [ 649.819044][T12739] dump_header+0x101/0x960 [ 649.819093][T12739] oom_kill_process+0x176/0x910 [ 649.819123][T12739] out_of_memory+0x350/0x1700 [ 649.819151][T12739] ? __lock_acquire+0x436/0x2890 [ 649.819178][T12739] ? __pfx_out_of_memory+0x10/0x10 [ 649.819227][T12739] mem_cgroup_out_of_memory+0x118/0x130 [ 649.819256][T12739] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 649.819291][T12739] ? do_raw_spin_unlock+0x172/0x230 [ 649.819328][T12739] try_charge_memcg+0x695/0xd30 [ 649.819370][T12739] ? __pfx_try_charge_memcg+0x10/0x10 [ 649.819408][T12739] ? find_held_lock+0x11/0x80 [ 649.819441][T12739] ? rcu_read_unlock+0x17/0x60 [ 649.819471][T12739] charge_memcg+0x8a/0x230 [ 649.819509][T12739] __mem_cgroup_charge+0x2b/0x1e0 [ 649.819535][T12739] do_anonymous_page+0xca9/0x2190 [ 649.819571][T12739] __handle_mm_fault+0x1ecf/0x2bb0 [ 649.819605][T12739] ? __pfx___handle_mm_fault+0x10/0x10 [ 649.819647][T12739] ? find_vma+0xbf/0x140 [ 649.819678][T12739] ? __pfx_find_vma+0x10/0x10 [ 649.819715][T12739] handle_mm_fault+0x3fe/0xad0 [ 649.819746][T12739] do_user_addr_fault+0x7a6/0x1370 [ 649.819779][T12739] ? rcu_is_watching+0x12/0xc0 [ 649.819817][T12739] exc_page_fault+0x64/0xc0 [ 649.819854][T12739] asm_exc_page_fault+0x26/0x30 [ 649.819878][T12739] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 649.819907][T12739] Code: cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 649.819932][T12739] RSP: 0018:ffffc90004b67740 EFLAGS: 00050206 [ 649.819951][T12739] RAX: 0000000000000001 RBX: 0000000000001000 RCX: 0000000000000ff8 [ 649.819966][T12739] RDX: 0000000000000000 RSI: ffff88802f273008 RDI: 0000000000236000 [ 649.819982][T12739] RBP: 0000000000001000 R08: 0000000000000000 R09: ffffed1005e4e7ff [ 649.819997][T12739] R10: ffff88802f273fff R11: 0000000000000000 R12: 0000000000235ff8 [ 649.820013][T12739] R13: ffffc90004b67d60 R14: ffff88802f273000 R15: 0000000000235ff8 [ 649.820052][T12739] _copy_to_iter+0x4eb/0x1710 [ 649.820085][T12739] ? __pfx__copy_to_iter+0x10/0x10 [ 649.820112][T12739] ? const_folio_flags+0x5b/0x100 [ 649.820138][T12739] ? folio_mark_accessed+0xc1/0xbf0 [ 649.820168][T12739] ? __pfx_folio_mark_accessed+0x10/0x10 [ 649.820202][T12739] copy_page_to_iter+0x12a/0x1e0 [ 649.820230][T12739] filemap_read+0x6b1/0xe40 [ 649.820269][T12739] ? __pfx_filemap_read+0x10/0x10 [ 649.820316][T12739] ? __pfx_down_read+0x10/0x10 [ 649.820339][T12739] ? __pfx_aa_file_perm+0x10/0x10 [ 649.820377][T12739] blkdev_read_iter+0x1ac/0x500 [ 649.820411][T12739] do_iter_readv_writev+0x743/0x9e0 [ 649.820445][T12739] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 649.820475][T12739] ? common_file_perm+0x1b1/0x500 [ 649.820505][T12739] ? bpf_lsm_file_permission+0x9/0x10 [ 649.820532][T12739] ? security_file_permission+0x71/0x210 [ 649.820563][T12739] ? rw_verify_area+0xcf/0x6c0 [ 649.820594][T12739] vfs_readv+0x4cb/0x8b0 [ 649.820630][T12739] ? __pfx_vfs_readv+0x10/0x10 [ 649.820680][T12739] ? __fget_files+0x20e/0x3c0 [ 649.820720][T12739] ? do_preadv+0x1a6/0x270 [ 649.820748][T12739] do_preadv+0x1a6/0x270 [ 649.820778][T12739] ? __pfx_do_preadv+0x10/0x10 [ 649.820817][T12739] do_syscall_64+0xcd/0xf80 [ 649.820853][T12739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.820881][T12739] RIP: 0033:0x7fcaa7f8f7c9 [ 649.820900][T12739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 649.820922][T12739] RSP: 002b:00007fcaa8e56038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 649.820944][T12739] RAX: ffffffffffffffda RBX: 00007fcaa81e5fa0 RCX: 00007fcaa7f8f7c9 [ 649.820959][T12739] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0040000000000003 [ 649.820975][T12739] RBP: 00007fcaa8013f91 R08: 000000000000000e R09: 0000000000000000 [ 649.820989][T12739] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 649.821004][T12739] R13: 00007fcaa81e6038 R14: 00007fcaa81e5fa0 R15: 00007fff6016f1c8 [ 649.821040][T12739] [ 650.262366][T12783] CPU: 0 UID: 0 PID: 12783 Comm: syz.1.1414 Tainted: G L syzkaller #0 PREEMPT(full) [ 650.262406][T12783] Tainted: [L]=SOFTLOCKUP [ 650.262415][T12783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 650.262430][T12783] Call Trace: [ 650.262438][T12783] [ 650.262448][T12783] dump_stack_lvl+0x16c/0x1f0 [ 650.262491][T12783] should_fail_ex+0x512/0x640 [ 650.262519][T12783] ? fs_reclaim_acquire+0xae/0x150 [ 650.262562][T12783] should_failslab+0xc2/0x120 [ 650.262601][T12783] __kmalloc_noprof+0xeb/0x910 [ 650.262629][T12783] ? tomoyo_encode2+0x100/0x3e0 [ 650.262667][T12783] ? tomoyo_encode2+0x100/0x3e0 [ 650.262700][T12783] tomoyo_encode2+0x100/0x3e0 [ 650.262738][T12783] tomoyo_encode+0x29/0x50 [ 650.262771][T12783] tomoyo_realpath_from_path+0x18f/0x6e0 [ 650.262815][T12783] tomoyo_check_open_permission+0x2ab/0x3c0 [ 650.262847][T12783] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 650.262905][T12783] ? lock_acquire+0x179/0x330 [ 650.262929][T12783] ? find_held_lock+0x2b/0x80 [ 650.262962][T12783] ? mnt_get_write_access+0x52/0x2f0 [ 650.263001][T12783] tomoyo_file_open+0x6b/0x90 [ 650.263042][T12783] security_file_open+0x84/0x1e0 [ 650.263076][T12783] do_dentry_open+0x597/0x1590 [ 650.263131][T12783] ? security_inode_permission+0xbf/0x260 [ 650.263164][T12783] vfs_open+0x82/0x3f0 [ 650.263194][T12783] path_openat+0x2078/0x3140 [ 650.263259][T12783] ? __pfx_path_openat+0x10/0x10 [ 650.263308][T12783] do_filp_open+0x20b/0x470 [ 650.263347][T12783] ? __pfx_do_filp_open+0x10/0x10 [ 650.263406][T12783] ? alloc_fd+0x471/0x7d0 [ 650.263451][T12783] do_sys_openat2+0x121/0x290 [ 650.263479][T12783] ? __pfx_do_sys_openat2+0x10/0x10 [ 650.263519][T12783] __x64_sys_openat+0x174/0x210 [ 650.263548][T12783] ? __pfx___x64_sys_openat+0x10/0x10 [ 650.263589][T12783] do_syscall_64+0xcd/0xf80 [ 650.263629][T12783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.263655][T12783] RIP: 0033:0x7f948318f7c9 [ 650.263674][T12783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 650.263700][T12783] RSP: 002b:00007f9483f99038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 650.263724][T12783] RAX: ffffffffffffffda RBX: 00007f94833e5fa0 RCX: 00007f948318f7c9 [ 650.263740][T12783] RDX: 0000000000004282 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 650.263756][T12783] RBP: 00007f9483213f91 R08: 0000000000000000 R09: 0000000000000000 [ 650.263771][T12783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 650.263786][T12783] R13: 00007f94833e6038 R14: 00007f94833e5fa0 R15: 00007ffc3e885e88 [ 650.263819][T12783] [ 650.263900][T12783] ERROR: Out of memory at tomoyo_realpath_from_path. [ 651.462741][T12800] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(896.8192.24), cmd(3) [ 651.884367][T12739] memory: usage 3072kB, limit 3072kB, failcnt 62669 [ 651.928133][T12739] memory+swap: usage 3204kB, limit 9007199254740988kB, failcnt 0 [ 651.963798][T12739] kmem: usage 1032kB, limit 9007199254740988kB, failcnt 0 [ 652.015400][T12739] Memory cgroup stats for /syz2: [ 652.015570][T12739] cache 126976 [ 652.023899][T12739] rss 1777664 [ 652.104385][T12739] rss_huge 0 [ 652.110347][T12739] shmem 0 [ 652.134890][T12739] mapped_file 0 [ 652.138390][T12739] dirty 0 [ 652.141331][T12739] writeback 0 [ 652.209847][T12739] workingset_refault_anon 25040 [ 652.237118][T12739] workingset_refault_file 12215 [ 652.274378][T12739] swap 135168 [ 652.284340][T12739] swapcached 184320 [ 652.288180][T12739] pgpgin 310621 [ 652.291646][T12739] pgpgout 317358 [ 652.344370][T12739] pgfault 345396 [ 652.368448][T12739] pgmajfault 6707 [ 652.372156][T12739] inactive_anon 0 [ 652.394884][T12810] zswap: compressor not available [ 652.400211][T12739] active_anon 0 [ 652.403711][T12739] inactive_file 1904640 [ 652.434420][T12739] active_file 0 [ 652.448100][T12739] unevictable 0 [ 652.451599][T12739] hierarchical_memory_limit 3145728 [ 652.483079][T12739] hierarchical_memsw_limit 9223372036854771712 [ 652.509623][T12739] total_cache 126976 [ 652.513576][T12739] total_rss 1777664 [ 652.541155][T12739] total_rss_huge 0 [ 652.571212][T12739] total_shmem 0 [ 652.582768][T12739] total_mapped_file 0 [ 652.600313][T12739] total_dirty 0 [ 652.614741][T12739] total_writeback 0 [ 652.634855][T12739] total_workingset_refault_anon 25040 [ 652.657015][T12739] total_workingset_refault_file 12215 [ 652.682844][T12739] total_swap 135168 [ 652.703072][T12739] total_swapcached 184320 [ 652.736720][T12739] total_pgpgin 310621 [ 652.753954][T12739] total_pgpgout 317358 [ 652.771824][T12818] zswap: compressor not available [ 652.777686][T12739] total_pgfault 345396 [ 652.791997][T12739] total_pgmajfault 6707 [ 652.818299][T12739] total_inactive_anon 0 [ 652.822499][T12739] total_active_anon 0 [ 652.864405][T12739] total_inactive_file 1904640 [ 652.879051][T12739] total_active_file 0 [ 652.904385][T12739] total_unevictable 0 [ 652.908406][T12739] anon_cost 0 [ 652.911712][T12739] file_cost 0 [ 652.956773][T12739] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1405,pid=12738,uid=0 [ 653.039525][T12739] Memory cgroup out of memory: Killed process 12738 (syz.2.1405) total-vm:135196kB, anon-rss:2804kB, file-rss:22864kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 653.099168][T12826] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 655.162670][ T32] oom_reaper: reaped process 12738 (syz.2.1405), now anon-rss:68kB, file-rss:21680kB, shmem-rss:0kB [ 655.263137][T12873] FAULT_INJECTION: forcing a failure. [ 655.263137][T12873] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 655.321768][T12873] CPU: 0 UID: 0 PID: 12873 Comm: syz.3.1434 Tainted: G L syzkaller #0 PREEMPT(full) [ 655.321809][T12873] Tainted: [L]=SOFTLOCKUP [ 655.321818][T12873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 655.321833][T12873] Call Trace: [ 655.321843][T12873] [ 655.321853][T12873] dump_stack_lvl+0x16c/0x1f0 [ 655.321894][T12873] should_fail_ex+0x512/0x640 [ 655.321924][T12873] _copy_from_user+0x2e/0xd0 [ 655.321951][T12873] input_event_from_user+0xb9/0x290 [ 655.321985][T12873] ? __pfx_input_event_from_user+0x10/0x10 [ 655.322018][T12873] ? __pfx___might_resched+0x10/0x10 [ 655.322050][T12873] ? input_inject_event+0x51/0x3b0 [ 655.322085][T12873] evdev_write+0x26b/0x440 [ 655.322119][T12873] ? __pfx_evdev_write+0x10/0x10 [ 655.322151][T12873] ? bpf_lsm_file_permission+0x9/0x10 [ 655.322179][T12873] ? security_file_permission+0x71/0x210 [ 655.322210][T12873] ? rw_verify_area+0xcf/0x6c0 [ 655.322240][T12873] ? __pfx_evdev_write+0x10/0x10 [ 655.322269][T12873] vfs_write+0x2a0/0x11d0 [ 655.322307][T12873] ? __pfx_vfs_write+0x10/0x10 [ 655.322338][T12873] ? find_held_lock+0x2b/0x80 [ 655.322368][T12873] ? __fget_files+0x204/0x3c0 [ 655.322405][T12873] ? __fget_files+0x20e/0x3c0 [ 655.322444][T12873] ksys_write+0x1f8/0x250 [ 655.322476][T12873] ? __pfx_ksys_write+0x10/0x10 [ 655.322517][T12873] do_syscall_64+0xcd/0xf80 [ 655.322571][T12873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.322596][T12873] RIP: 0033:0x7f9996f8f7c9 [ 655.322619][T12873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 655.322643][T12873] RSP: 002b:00007f9997e4b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 655.322665][T12873] RAX: ffffffffffffffda RBX: 00007f99971e5fa0 RCX: 00007f9996f8f7c9 [ 655.322682][T12873] RDX: 0000000000010001 RSI: 0000200000000040 RDI: 0000000000000003 [ 655.322697][T12873] RBP: 00007f9997e4b090 R08: 0000000000000000 R09: 0000000000000000 [ 655.322712][T12873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 655.322726][T12873] R13: 00007f99971e6038 R14: 00007f99971e5fa0 R15: 00007ffcd16e2af8 [ 655.322758][T12873] [ 655.990260][T12875] zswap: compressor not available [ 658.405260][T12921] zswap: compressor not available [ 659.091216][T12939] zswap: compressor not available [ 659.120423][T12941] FAULT_INJECTION: forcing a failure. [ 659.120423][T12941] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 659.188614][T12941] CPU: 0 UID: 0 PID: 12941 Comm: syz.4.1450 Tainted: G L syzkaller #0 PREEMPT(full) [ 659.188654][T12941] Tainted: [L]=SOFTLOCKUP [ 659.188663][T12941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 659.188678][T12941] Call Trace: [ 659.188686][T12941] [ 659.188696][T12941] dump_stack_lvl+0x16c/0x1f0 [ 659.188737][T12941] should_fail_ex+0x512/0x640 [ 659.188768][T12941] _copy_to_iter+0x29f/0x1710 [ 659.188795][T12941] ? __mutex_unlock_slowpath+0x161/0x790 [ 659.188838][T12941] ? __pfx__copy_to_iter+0x10/0x10 [ 659.188865][T12941] ? kernfs_seq_stop+0xcd/0x120 [ 659.188905][T12941] ? kernfs_put_active+0x86/0xe0 [ 659.188940][T12941] seq_read_iter+0xd02/0x12d0 [ 659.188984][T12941] kernfs_fop_read_iter+0x46c/0x610 [ 659.189022][T12941] ? rw_verify_area+0xcf/0x6c0 [ 659.189056][T12941] vfs_read+0x8bf/0xcf0 [ 659.189101][T12941] ? __pfx_vfs_read+0x10/0x10 [ 659.189152][T12941] ksys_read+0x12a/0x250 [ 659.189191][T12941] ? __pfx_ksys_read+0x10/0x10 [ 659.189233][T12941] do_syscall_64+0xcd/0xf80 [ 659.189272][T12941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.189297][T12941] RIP: 0033:0x7f3ef058f7c9 [ 659.189316][T12941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 659.189340][T12941] RSP: 002b:00007f3ef13c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 659.189362][T12941] RAX: ffffffffffffffda RBX: 00007f3ef07e6090 RCX: 00007f3ef058f7c9 [ 659.189378][T12941] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 0000000000000009 [ 659.189393][T12941] RBP: 00007f3ef13c7090 R08: 0000000000000000 R09: 0000000000000000 [ 659.189408][T12941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 659.189422][T12941] R13: 00007f3ef07e6128 R14: 00007f3ef07e6090 R15: 00007fff1412da38 [ 659.189453][T12941] [ 660.674936][T12955] ======================================================= [ 660.674936][T12955] WARNING: The mand mount option has been deprecated and [ 660.674936][T12955] and is ignored by this kernel. Remove the mand [ 660.674936][T12955] option from the mount to silence this warning. [ 660.674936][T12955] ======================================================= [ 660.869323][T12953] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(896.8192.24), cmd(3) [ 662.856735][T12982] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1458'. [ 663.023250][T12987] Invalid ELF header magic: != ELF [ 663.528708][T12982] mac80211_hwsim hwsim16 wlan1: entered allmulticast mode [ 664.400149][T12951] syz.2.1452 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 664.539793][T12951] CPU: 0 UID: 0 PID: 12951 Comm: syz.2.1452 Tainted: G L syzkaller #0 PREEMPT(full) [ 664.539832][T12951] Tainted: [L]=SOFTLOCKUP [ 664.539841][T12951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 664.539856][T12951] Call Trace: [ 664.539864][T12951] [ 664.539873][T12951] dump_stack_lvl+0x16c/0x1f0 [ 664.539914][T12951] dump_header+0x101/0x960 [ 664.539944][T12951] oom_kill_process+0x176/0x910 [ 664.539973][T12951] out_of_memory+0x350/0x1700 [ 664.539999][T12951] ? __lock_acquire+0x436/0x2890 [ 664.540026][T12951] ? __pfx_out_of_memory+0x10/0x10 [ 664.540060][T12951] mem_cgroup_out_of_memory+0x118/0x130 [ 664.540090][T12951] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 664.540125][T12951] ? do_raw_spin_unlock+0x172/0x230 [ 664.540159][T12951] try_charge_memcg+0x695/0xd30 [ 664.540202][T12951] ? __pfx_try_charge_memcg+0x10/0x10 [ 664.540246][T12951] ? find_held_lock+0x2b/0x80 [ 664.540281][T12951] charge_memcg+0x8a/0x230 [ 664.540319][T12951] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 664.540348][T12951] __read_swap_cache_async+0x397/0x500 [ 664.540383][T12951] ? __pfx___read_swap_cache_async+0x10/0x10 [ 664.540419][T12951] ? mlock_drain_local+0x1f0/0x4e0 [ 664.540456][T12951] swap_cluster_readahead+0x432/0x770 [ 664.540493][T12951] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 664.540527][T12951] ? __lock_acquire+0x436/0x2890 [ 664.540562][T12951] ? get_vma_policy+0x242/0x3c0 [ 664.540586][T12951] swapin_readahead+0x160/0x1220 [ 664.540626][T12951] ? __pfx_swapin_readahead+0x10/0x10 [ 664.540657][T12951] ? find_held_lock+0x2b/0x80 [ 664.540686][T12951] ? swap_cache_get_folio+0x267/0x8e0 [ 664.540713][T12951] ? swap_cache_get_folio+0x267/0x8e0 [ 664.540738][T12951] ? swap_cache_get_folio+0x267/0x8e0 [ 664.540774][T12951] ? swap_cache_get_folio+0x267/0x8e0 [ 664.540802][T12951] ? swap_cache_get_folio+0x293/0x8e0 [ 664.540832][T12951] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 664.540858][T12951] ? __pfx_get_swap_device+0x10/0x10 [ 664.540893][T12951] ? rcu_read_unlock+0x2d/0xb0 [ 664.540925][T12951] ? do_swap_page+0x962/0x64a0 [ 664.540947][T12951] do_swap_page+0x962/0x64a0 [ 664.540976][T12951] ? __lock_acquire+0x436/0x2890 [ 664.541005][T12951] ? __pfx_do_swap_page+0x10/0x10 [ 664.541032][T12951] ? __pfx_default_wake_function+0x10/0x10 [ 664.541074][T12951] ? rcu_is_watching+0x12/0xc0 [ 664.541108][T12951] ? ___pte_offset_map+0x175/0x380 [ 664.541145][T12951] __handle_mm_fault+0x19cb/0x2bb0 [ 664.541177][T12951] ? reacquire_held_locks+0xcd/0x1f0 [ 664.541200][T12951] ? __pfx___handle_mm_fault+0x10/0x10 [ 664.541230][T12951] ? lock_vma_under_rcu+0x176/0x580 [ 664.541265][T12951] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 664.541307][T12951] handle_mm_fault+0x3fe/0xad0 [ 664.541338][T12951] do_user_addr_fault+0x60c/0x1370 [ 664.541371][T12951] ? rcu_is_watching+0x12/0xc0 [ 664.541408][T12951] exc_page_fault+0x64/0xc0 [ 664.541445][T12951] asm_exc_page_fault+0x26/0x30 [ 664.541469][T12951] RIP: 0033:0x7fcaa7e6eff4 [ 664.541489][T12951] Code: 82 b5 03 00 00 c6 44 24 1e 01 45 31 ff 45 31 f6 44 0f b6 e6 85 c0 0f 84 9e 00 00 00 44 89 f9 49 8b 50 40 4c 89 f0 49 03 14 ca <80> 3d ad 8d 37 00 00 49 89 d6 48 89 d5 74 28 25 ff 0f 00 00 83 f0 [ 664.541513][T12951] RSP: 002b:00007fff6016f200 EFLAGS: 00010282 [ 664.541532][T12951] RAX: ffffffff823a1751 RBX: 00007fcaa8d15720 RCX: 0000000000000001 [ 664.541549][T12951] RDX: ffffffff823a154a RSI: 0000000000000008 RDI: 00007fcaa8d15720 [ 664.541564][T12951] RBP: ffffffff823a1e3b R08: 00007fcaa81e6308 R09: 00007fcaa81d2000 [ 664.541581][T12951] R10: 00007fcaa5df6008 R11: 000000000000000d R12: 000000000000000d [ 664.541596][T12951] R13: 0000000000000001 R14: ffffffff823a1751 R15: 0000000000000001 [ 664.541612][T12951] ? __x64_sys_write+0x11/0xb0 [ 664.541648][T12951] ? __ia32_sys_pread64+0x16b/0x220 [ 664.541687][T12951] ? __x64_sys_write+0x11/0xb0 [ 664.541721][T12951] ? ksys_write+0x6a/0x250 [ 664.541766][T12951] [ 664.985610][T12951] memory: usage 3072kB, limit 3072kB, failcnt 63368 [ 664.992259][T12951] memory+swap: usage 3216kB, limit 9007199254740988kB, failcnt 0 [ 665.000058][T12951] kmem: usage 1100kB, limit 9007199254740988kB, failcnt 0 [ 665.007206][T12951] Memory cgroup stats for /syz2: [ 665.007368][T12951] cache 1839104 [ 665.015951][T12951] rss 0 [ 665.018722][T12951] rss_huge 0 [ 665.021946][T12951] shmem 0 [ 665.024931][T12951] mapped_file 0 [ 665.028390][T12951] dirty 0 [ 665.031331][T12951] writeback 0 [ 665.035715][T12951] workingset_refault_anon 25231 [ 665.040574][T12951] workingset_refault_file 12293 [ 665.045475][T12951] swap 147456 [ 665.048763][T12951] swapcached 180224 [ 665.052569][T12951] pgpgin 312858 [ 665.059848][T12951] pgpgout 319977 [ 665.063421][T12951] pgfault 347121 [ 665.067039][T12951] pgmajfault 6801 [ 665.070672][T12951] inactive_anon 176128 [ 665.074868][T12951] active_anon 4096 [ 665.078596][T12951] inactive_file 1839104 [ 665.082752][T12951] active_file 0 [ 665.086267][T12951] unevictable 0 [ 665.089728][T12951] hierarchical_memory_limit 3145728 [ 665.094966][T12951] hierarchical_memsw_limit 9223372036854771712 [ 665.101118][T12951] total_cache 1839104 [ 665.105145][T12951] total_rss 0 [ 665.108430][T12951] total_rss_huge 0 [ 665.112151][T12951] total_shmem 0 [ 665.115805][T12951] total_mapped_file 0 [ 665.119791][T12951] total_dirty 0 [ 665.123253][T12951] total_writeback 0 [ 665.127096][T12951] total_workingset_refault_anon 25231 [ 665.132466][T12951] total_workingset_refault_file 12293 [ 665.137961][T12951] total_swap 147456 [ 665.141766][T12951] total_swapcached 180224 [ 665.146891][T12951] total_pgpgin 312858 [ 665.150880][T12951] total_pgpgout 319977 [ 665.155015][T12951] total_pgfault 347121 [ 665.160739][T12951] total_pgmajfault 6801 [ 665.167395][T12951] total_inactive_anon 176128 [ 665.172009][T12951] total_active_anon 4096 [ 665.176301][T12951] total_inactive_file 1839104 [ 665.180977][T12951] total_active_file 0 [ 665.184993][T12951] total_unevictable 0 [ 665.188974][T12951] anon_cost 0 [ 665.192280][T12951] file_cost 0 [ 665.195607][T12951] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1452,pid=12951,uid=0 [ 665.210589][T12951] Memory cgroup out of memory: Killed process 12951 (syz.2.1452) total-vm:114792kB, anon-rss:1268kB, file-rss:26016kB, shmem-rss:0kB, UID:0 pgtables:156kB oom_score_adj:1000 [ 665.768750][T13023] random: crng reseeded on system resumption [ 665.794951][T13021] bond0: invalid ARP target specified [ 665.930227][ T30] audit: type=1800 audit(4294967786.480:16): pid=13023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1463" name="trace_pipe" dev="tracefs" ino=1232 res=0 errno=0 [ 666.420801][T13031] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 667.156342][T13011] zswap: compressor not available [ 667.193924][T13010] zswap: compressor not available [ 667.495082][T13011] FAULT_INJECTION: forcing a failure. [ 667.495082][T13011] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 667.802676][T13011] CPU: 0 UID: 0 PID: 13011 Comm: syz.3.1461 Tainted: G L syzkaller #0 PREEMPT(full) [ 667.802714][T13011] Tainted: [L]=SOFTLOCKUP [ 667.802723][T13011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 667.802738][T13011] Call Trace: [ 667.802746][T13011] [ 667.802756][T13011] dump_stack_lvl+0x16c/0x1f0 [ 667.802797][T13011] should_fail_ex+0x512/0x640 [ 667.802827][T13011] _copy_to_user+0x32/0xd0 [ 667.802855][T13011] simple_read_from_buffer+0xcb/0x170 [ 667.802889][T13011] proc_fail_nth_read+0x197/0x240 [ 667.802929][T13011] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 667.802969][T13011] ? rw_verify_area+0xcf/0x6c0 [ 667.802999][T13011] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 667.803037][T13011] vfs_read+0x1e4/0xcf0 [ 667.803070][T13011] ? __pfx___mutex_lock+0x10/0x10 [ 667.803109][T13011] ? __pfx_vfs_read+0x10/0x10 [ 667.803149][T13011] ? __fget_files+0x20e/0x3c0 [ 667.803190][T13011] ksys_read+0x12a/0x250 [ 667.803222][T13011] ? __pfx_ksys_read+0x10/0x10 [ 667.803262][T13011] do_syscall_64+0xcd/0xf80 [ 667.803300][T13011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.803324][T13011] RIP: 0033:0x7f9996f8e1dc [ 667.803343][T13011] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 667.803366][T13011] RSP: 002b:00007f9997e4b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 667.803388][T13011] RAX: ffffffffffffffda RBX: 00007f99971e5fa0 RCX: 00007f9996f8e1dc [ 667.803404][T13011] RDX: 000000000000000f RSI: 00007f9997e4b0a0 RDI: 000000000000000a [ 667.803419][T13011] RBP: 00007f9997e4b090 R08: 0000000000000000 R09: 0000000000000000 [ 667.803433][T13011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 667.803447][T13011] R13: 00007f99971e6038 R14: 00007f99971e5fa0 R15: 00007ffcd16e2af8 [ 667.803484][T13011] [ 668.838667][T13058] zswap: compressor not available [ 670.063550][T13094] sd 0:0:1:0: PR command failed: 1026 [ 670.092208][T13094] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 670.128197][T13094] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 670.565868][T13103] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1475'. [ 670.636632][T13103] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1475'. [ 670.676053][T13101] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 671.109199][T13106] zswap: compressor not available [ 671.343501][T13107] zswap: compressor not available [ 673.477076][T13167] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1487'. [ 673.962182][T13179] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 674.030458][T13182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.091276][T13182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 674.910012][T13192] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1490'. [ 675.033694][T13192] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 677.172507][T13210] FAULT_INJECTION: forcing a failure. [ 677.172507][T13210] name failslab, interval 1, probability 0, space 0, times 0 [ 677.235105][T13210] CPU: 0 UID: 0 PID: 13210 Comm: syz.1.1495 Tainted: G L syzkaller #0 PREEMPT(full) [ 677.235151][T13210] Tainted: [L]=SOFTLOCKUP [ 677.235160][T13210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 677.235176][T13210] Call Trace: [ 677.235184][T13210] [ 677.235194][T13210] dump_stack_lvl+0x16c/0x1f0 [ 677.235238][T13210] should_fail_ex+0x512/0x640 [ 677.235266][T13210] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 677.235305][T13210] should_failslab+0xc2/0x120 [ 677.235344][T13210] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 677.235377][T13210] ? shmem_alloc_inode+0x25/0x50 [ 677.235417][T13210] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 677.235450][T13210] ? shmem_alloc_inode+0x25/0x50 [ 677.235484][T13210] shmem_alloc_inode+0x25/0x50 [ 677.235517][T13210] alloc_inode+0x64/0x240 [ 677.235545][T13210] new_inode+0x22/0x1c0 [ 677.235574][T13210] shmem_get_inode+0x19a/0xfb0 [ 677.235613][T13210] ? __vm_enough_memory+0x184/0x3f0 [ 677.235650][T13210] __shmem_file_setup+0x290/0x350 [ 677.235699][T13210] shmem_zero_setup+0x93/0x1b0 [ 677.235731][T13210] __mmap_region+0x2271/0x2a00 [ 677.235763][T13210] ? __lock_acquire+0x436/0x2890 [ 677.235786][T13210] ? __pfx___mmap_region+0x10/0x10 [ 677.235824][T13210] ? lock_acquire+0x179/0x330 [ 677.235858][T13210] ? finish_task_switch.isra.0+0x207/0xbd0 [ 677.235947][T13210] ? rcu_is_watching+0x12/0xc0 [ 677.235989][T13210] mmap_region+0x1ab/0x3f0 [ 677.236018][T13210] ? __get_unmapped_area+0x267/0x3f0 [ 677.236059][T13210] do_mmap+0xa3e/0x1210 [ 677.236101][T13210] ? __pfx_do_mmap+0x10/0x10 [ 677.236139][T13210] ? __pfx_down_write_killable+0x10/0x10 [ 677.236171][T13210] vm_mmap_pgoff+0x29e/0x470 [ 677.236211][T13210] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 677.236253][T13210] ? __x64_sys_futex+0x1e0/0x4c0 [ 677.236281][T13210] ? __x64_sys_futex+0x1e9/0x4c0 [ 677.236314][T13210] ksys_mmap_pgoff+0x7d/0x5c0 [ 677.236349][T13210] ? xfd_validate_state+0x61/0x180 [ 677.236372][T13210] ? __pfx___do_sys_close_range+0x10/0x10 [ 677.236415][T13210] __x64_sys_mmap+0x125/0x190 [ 677.236443][T13210] do_syscall_64+0xcd/0xf80 [ 677.236496][T13210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.236521][T13210] RIP: 0033:0x7f948318f7c9 [ 677.236540][T13210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 677.236565][T13210] RSP: 002b:00007f9483f99038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 677.236587][T13210] RAX: ffffffffffffffda RBX: 00007f94833e5fa0 RCX: 00007f948318f7c9 [ 677.236603][T13210] RDX: 00004000000000df RSI: 0000000000020009 RDI: 0000000000000000 [ 677.236619][T13210] RBP: 00007f9483213f91 R08: 000000000000000a R09: 0000000000008000 [ 677.236634][T13210] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 677.236649][T13210] R13: 00007f94833e6038 R14: 00007f94833e5fa0 R15: 00007ffc3e885e88 [ 677.236680][T13210] [ 679.170599][T13220] zswap: compressor not available [ 679.355570][T13212] Process accounting resumed [ 680.005726][T13230] zswap: compressor not available [ 680.140888][T13239] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1502'. [ 680.598420][ T32] oom_reaper: reaped process 13143 (syz.2.1478), now anon-rss:12kB, file-rss:20504kB, shmem-rss:0kB [ 682.235408][T13266] Invalid ELF header magic: != ELF [ 683.486156][T13282] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1513'. [ 683.602518][T13285] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1514'. [ 683.652618][T13280] zswap: compressor not available [ 684.712660][T13316] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1521'. [ 684.786490][T13318] program syz.1.1522 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 685.057369][T13318] zswap: compressor not available [ 686.502451][T13342] zswap: compressor not available [ 686.598115][T13350] phram: not enough arguments [ 687.273695][T13360] zswap: compressor not available [ 688.145409][ T30] audit: type=1806 audit(4294968831.690:17): xattr="." res=0 [ 688.166534][T13382] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1539'. [ 688.198153][T13382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 688.233685][T13382] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 688.271235][T13385] FAULT_INJECTION: forcing a failure. [ 688.271235][T13385] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 688.320985][T13385] CPU: 0 UID: 0 PID: 13385 Comm: syz.4.1539 Tainted: G L syzkaller #0 PREEMPT(full) [ 688.321026][T13385] Tainted: [L]=SOFTLOCKUP [ 688.321035][T13385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 688.321050][T13385] Call Trace: [ 688.321059][T13385] [ 688.321068][T13385] dump_stack_lvl+0x16c/0x1f0 [ 688.321111][T13385] should_fail_ex+0x512/0x640 [ 688.321143][T13385] _copy_from_user+0x2e/0xd0 [ 688.321170][T13385] restore_altstack+0x93/0x170 [ 688.321195][T13385] ? __pfx_restore_altstack+0x10/0x10 [ 688.321220][T13385] ? _raw_spin_unlock_irq+0x23/0x50 [ 688.321253][T13385] ? lockdep_hardirqs_on+0x7c/0x110 [ 688.321291][T13385] ? _raw_spin_unlock_irq+0x2e/0x50 [ 688.321328][T13385] ? set_current_blocked+0xdd/0x120 [ 688.321359][T13385] __do_sys_rt_sigreturn+0x1ab/0x2c0 [ 688.321396][T13385] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 688.321431][T13385] ? rcu_is_watching+0x12/0xc0 [ 688.321474][T13385] do_syscall_64+0xcd/0xf80 [ 688.321514][T13385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.321540][T13385] RIP: 0033:0x7f3ef052b889 [ 688.321559][T13385] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 688.321584][T13385] RSP: 002b:00007f3ef13c6a80 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 688.321608][T13385] RAX: ffffffffffffffda RBX: 00007f3ef07e6090 RCX: 00007f3ef052b889 [ 688.321625][T13385] RDX: 00007f3ef13c6a80 RSI: 00007f3ef13c6bb0 RDI: 0000000000000011 [ 688.321641][T13385] RBP: 00007f3ef0613f91 R08: 0000000000000000 R09: 0000000000000000 [ 688.321656][T13385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 688.321672][T13385] R13: 00007f3ef07e6128 R14: 00007f3ef07e6090 R15: 00007fff1412da38 [ 688.321703][T13385] [ 688.503863][T13382] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 688.511266][T13382] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 688.583484][T13378] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1537'. [ 689.200115][T13397] cgroup: fork rejected by pids controller in /syz1 [ 690.331102][T13474] zswap: compressor not available [ 690.755567][T13489] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1549'. [ 692.971206][T13517] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1563'. [ 693.321514][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 693.333477][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 693.342582][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 693.351974][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 693.365136][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 693.819426][T13522] chnl_net:caif_netlink_parms(): no params data found [ 694.050995][T13536] Invalid ELF header magic: != ELF [ 694.397338][T13522] bridge0: port 1(bridge_slave_0) entered blocking state [ 694.413628][T13522] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.436344][T13522] bridge_slave_0: entered allmulticast mode [ 694.462426][T13522] bridge_slave_0: entered promiscuous mode [ 694.502303][T13522] bridge0: port 2(bridge_slave_1) entered blocking state [ 694.586518][T13522] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.611052][T13522] bridge_slave_1: entered allmulticast mode [ 694.642400][T13522] bridge_slave_1: entered promiscuous mode [ 694.784766][T13522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 694.840311][T13522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 695.195357][T13522] team0: Port device team_slave_0 added [ 695.237416][T13522] team0: Port device team_slave_1 added [ 695.397092][ T5837] Bluetooth: hci2: command tx timeout [ 695.473053][T13522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 695.514906][T13522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 695.635756][T13522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 695.770699][T13522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 695.794199][T13522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 695.821926][T13572] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1567'. [ 695.883385][T13522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 696.281355][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 696.299566][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 696.404691][T13522] hsr_slave_0: entered promiscuous mode [ 696.431538][T13522] hsr_slave_1: entered promiscuous mode [ 696.451236][T13522] debugfs: 'hsr0' already exists in 'hsr' [ 696.457004][T13522] Cannot create hsr debugfs directory [ 697.026100][T13582] can: request_module (can-proto-0) failed. [ 697.468557][ T5837] Bluetooth: hci2: command tx timeout [ 697.798097][T13586] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 698.009058][T13522] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.193247][T13522] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.549147][ T5837] Bluetooth: hci2: command tx timeout [ 700.541549][T13522] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.225949][T13522] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.630183][ T5837] Bluetooth: hci2: command tx timeout [ 703.005996][T13522] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 703.069834][T13522] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 703.242191][T13522] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 703.303156][T13522] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 703.745083][T13522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 703.814565][T13522] 8021q: adding VLAN 0 to HW filter on device team0 [ 703.873349][ T3465] bridge0: port 1(bridge_slave_0) entered blocking state [ 703.880610][ T3465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 703.962842][ T3465] bridge0: port 2(bridge_slave_1) entered blocking state [ 703.969986][ T3465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 704.782935][T13522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 704.946939][T13522] veth0_vlan: entered promiscuous mode [ 704.992185][T13522] veth1_vlan: entered promiscuous mode [ 705.005298][T13650] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1584'. [ 705.162803][T13650] mac80211_hwsim hwsim4 in: renamed from wlan0 (while UP) [ 705.755336][T13522] veth0_macvtap: entered promiscuous mode [ 705.790871][T13522] veth1_macvtap: entered promiscuous mode [ 705.874577][T13522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 705.932616][T13522] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 706.004541][ T1132] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.055413][ T1132] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.103048][ T1132] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.980641][ T1132] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.036484][ T12] bridge_slave_1: left allmulticast mode [ 707.042172][ T12] bridge_slave_1: left promiscuous mode [ 707.103081][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.159532][ T12] bridge_slave_0: left allmulticast mode [ 707.174867][ T12] bridge_slave_0: left promiscuous mode [ 707.180622][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.884701][ T1132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 709.892644][ T1132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 710.086853][ T1132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 710.122994][ T1132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 710.433465][T13664] zswap: compressor uGހ=ŲBJ M┲DBC|$ő not available [ 710.935145][T13671] netlink: 146 bytes leftover after parsing attributes in process `syz.1.1554'. [ 711.245958][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 711.255938][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 711.264712][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 711.276963][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 711.284539][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 711.397315][T13646] Process accounting paused [ 711.805360][ T12] hsr_slave_0: left promiscuous mode [ 712.035814][ T12] hsr_slave_1: left promiscuous mode [ 712.072190][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 712.104154][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 712.190966][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 712.235650][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 712.360265][ T12] veth1_vlan: left promiscuous mode [ 712.389679][ T12] veth0_vlan: left promiscuous mode [ 713.397247][ T5843] Bluetooth: hci3: command tx timeout [ 714.999200][ T12] team0 (unregistering): Port device team_slave_1 removed [ 715.117934][ T12] team0 (unregistering): Port device team_slave_0 removed [ 715.478891][ T5843] Bluetooth: hci3: command tx timeout [ 716.484529][T13694] usb usb36: usbfs: process 13694 (syz.1.1592) did not claim interface 0 before use [ 716.618992][T13694] Invalid ELF header magic: != ELF [ 716.904638][T13705] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 717.106672][T13705] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 717.335529][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.559014][ T5843] Bluetooth: hci3: command tx timeout [ 717.574900][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.050266][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.270002][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.529359][T13672] chnl_net:caif_netlink_parms(): no params data found [ 719.296224][ T12] bridge_slave_1: left allmulticast mode [ 719.339023][ T12] bridge_slave_1: left promiscuous mode [ 719.361316][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.422278][ T12] bridge_slave_0: left allmulticast mode [ 719.458927][ T12] bridge_slave_0: left promiscuous mode [ 719.492803][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.640595][ T5843] Bluetooth: hci3: command tx timeout [ 720.737790][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 720.761070][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 720.785198][ T12] bond0 (unregistering): Released all slaves [ 721.008560][T13672] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.020328][T13672] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.049227][T13672] bridge_slave_0: entered allmulticast mode [ 721.077433][T13672] bridge_slave_0: entered promiscuous mode [ 721.145202][T13672] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.168716][T13672] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.193818][T13672] bridge_slave_1: entered allmulticast mode [ 721.241143][T13672] bridge_slave_1: entered promiscuous mode [ 721.287560][T13762] zswap: compressor not available [ 721.451795][T13672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 721.573089][T13672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 721.802293][ T12] hsr_slave_0: left promiscuous mode [ 721.823364][ T12] hsr_slave_1: left promiscuous mode [ 721.856112][ T12] veth1_vlan: left promiscuous mode [ 721.887941][ T12] veth0_vlan: left promiscuous mode [ 723.274718][T13778] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 723.468207][ T12] team0 (unregistering): Port device team_slave_1 removed [ 723.683950][ T12] team0 (unregistering): Port device team_slave_0 removed [ 724.758281][T13672] team0: Port device team_slave_0 added [ 724.847903][T13672] team0: Port device team_slave_1 added [ 725.099571][T13672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 725.142027][T13672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 725.269774][T13672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 725.300101][T13791] FAULT_INJECTION: forcing a failure. [ 725.300101][T13791] name failslab, interval 1, probability 0, space 0, times 0 [ 725.330395][T13672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 725.362166][T13672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 725.403464][T13791] CPU: 0 UID: 0 PID: 13791 Comm: syz.2.1603 Tainted: G L syzkaller #0 PREEMPT(full) [ 725.403504][T13791] Tainted: [L]=SOFTLOCKUP [ 725.403512][T13791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 725.403528][T13791] Call Trace: [ 725.403537][T13791] [ 725.403546][T13791] dump_stack_lvl+0x16c/0x1f0 [ 725.403590][T13791] should_fail_ex+0x512/0x640 [ 725.403616][T13791] ? kmem_cache_alloc_noprof+0x62/0x770 [ 725.403647][T13791] should_failslab+0xc2/0x120 [ 725.403684][T13791] kmem_cache_alloc_noprof+0x83/0x770 [ 725.403712][T13791] ? mas_alloc_nodes+0x27b/0x380 [ 725.403747][T13791] ? mas_alloc_nodes+0x27b/0x380 [ 725.403775][T13791] mas_alloc_nodes+0x27b/0x380 [ 725.403808][T13791] mas_preallocate+0x5e3/0xee0 [ 725.403853][T13791] ? __memcg_slab_post_alloc_hook+0x472/0x880 [ 725.403896][T13791] ? __pfx_mas_preallocate+0x10/0x10 [ 725.403939][T13791] ? vm_area_alloc+0x1f/0x160 [ 725.403966][T13791] ? lockdep_init_map_type+0x5c/0x270 [ 725.403994][T13791] __mmap_region+0x1262/0x2a00 [ 725.404025][T13791] ? __lock_acquire+0x436/0x2890 [ 725.404046][T13791] ? __pfx___mmap_region+0x10/0x10 [ 725.404072][T13791] ? rcu_read_lock_sched_held+0x3e/0x70 [ 725.404121][T13791] ? lock_acquire+0x179/0x330 [ 725.404153][T13791] ? finish_task_switch.isra.0+0x207/0xbd0 [ 725.404240][T13791] ? rcu_is_watching+0x12/0xc0 [ 725.404280][T13791] mmap_region+0x1ab/0x3f0 [ 725.404309][T13791] ? __get_unmapped_area+0x267/0x3f0 [ 725.404347][T13791] do_mmap+0xa3e/0x1210 [ 725.404387][T13791] ? __pfx_do_mmap+0x10/0x10 [ 725.404437][T13791] ? __pfx_down_write_killable+0x10/0x10 [ 725.404468][T13791] vm_mmap_pgoff+0x29e/0x470 [ 725.404507][T13791] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 725.404542][T13791] ? count_memcg_events+0x122/0x290 [ 725.404594][T13791] ? __x64_sys_futex+0x1e0/0x4c0 [ 725.404622][T13791] ? __x64_sys_futex+0x1e9/0x4c0 [ 725.404653][T13791] ksys_mmap_pgoff+0x7d/0x5c0 [ 725.404687][T13791] ? xfd_validate_state+0x61/0x180 [ 725.404713][T13791] __x64_sys_mmap+0x125/0x190 [ 725.404741][T13791] do_syscall_64+0xcd/0xf80 [ 725.404781][T13791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.404805][T13791] RIP: 0033:0x7fcaa7f8f7c9 [ 725.404830][T13791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 725.404855][T13791] RSP: 002b:00007fcaa8e35038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 725.404878][T13791] RAX: ffffffffffffffda RBX: 00007fcaa81e6090 RCX: 00007fcaa7f8f7c9 [ 725.404894][T13791] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 725.404909][T13791] RBP: 00007fcaa8013f91 R08: 0000000000000002 R09: 0000000000008000 [ 725.404925][T13791] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 725.404939][T13791] R13: 00007fcaa81e6128 R14: 00007fcaa81e6090 R15: 00007fff6016f1c8 [ 725.404970][T13791] [ 725.753459][T13672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 726.127423][T13672] hsr_slave_0: entered promiscuous mode [ 726.145196][T13672] hsr_slave_1: entered promiscuous mode [ 726.158236][T13672] debugfs: 'hsr0' already exists in 'hsr' [ 726.186428][T13672] Cannot create hsr debugfs directory [ 727.732541][T13672] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 727.790062][T13672] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 727.898846][T13672] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 727.929055][T13672] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 728.841101][T13672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 729.118433][T13672] 8021q: adding VLAN 0 to HW filter on device team0 [ 729.278284][ T8646] bridge0: port 1(bridge_slave_0) entered blocking state [ 729.285490][ T8646] bridge0: port 1(bridge_slave_0) entered forwarding state [ 729.378659][ T8646] bridge0: port 2(bridge_slave_1) entered blocking state [ 729.385855][ T8646] bridge0: port 2(bridge_slave_1) entered forwarding state [ 730.851654][T13672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 732.809747][T13672] veth0_vlan: entered promiscuous mode [ 732.866100][T13672] veth1_vlan: entered promiscuous mode [ 733.004552][T13672] veth0_macvtap: entered promiscuous mode [ 733.076272][T13672] veth1_macvtap: entered promiscuous mode [ 733.182591][T13672] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 733.253157][T13672] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 733.333708][ T8646] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.380743][ T8646] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.426562][T13938] FAULT_INJECTION: forcing a failure. [ 733.426562][T13938] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 733.455853][ T8646] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.519090][ T8646] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.529942][T13938] CPU: 0 UID: 0 PID: 13938 Comm: syz.3.1624 Tainted: G L syzkaller #0 PREEMPT(full) [ 733.529979][T13938] Tainted: [L]=SOFTLOCKUP [ 733.529988][T13938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 733.530003][T13938] Call Trace: [ 733.530011][T13938] [ 733.530020][T13938] dump_stack_lvl+0x16c/0x1f0 [ 733.530061][T13938] should_fail_ex+0x512/0x640 [ 733.530093][T13938] _copy_from_user+0x2e/0xd0 [ 733.530121][T13938] core_sys_select+0x35b/0xc20 [ 733.530163][T13938] ? __pfx_core_sys_select+0x10/0x10 [ 733.530203][T13938] ? proc_fail_nth_write+0x9f/0x220 [ 733.530250][T13938] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 733.530297][T13938] kern_select+0x15d/0x1e0 [ 733.530331][T13938] ? __pfx_kern_select+0x10/0x10 [ 733.530369][T13938] ? __pfx_ksys_write+0x10/0x10 [ 733.530409][T13938] __x64_sys_select+0xbd/0x160 [ 733.530441][T13938] ? do_syscall_64+0x91/0xf80 [ 733.530478][T13938] ? lockdep_hardirqs_on+0x7c/0x110 [ 733.530514][T13938] do_syscall_64+0xcd/0xf80 [ 733.530553][T13938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.530578][T13938] RIP: 0033:0x7f9996f8f7c9 [ 733.530596][T13938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 733.530619][T13938] RSP: 002b:00007f9997e4b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 733.530642][T13938] RAX: ffffffffffffffda RBX: 00007f99971e5fa0 RCX: 00007f9996f8f7c9 [ 733.530659][T13938] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 733.530674][T13938] RBP: 00007f9997e4b090 R08: 0000000000000000 R09: 0000000000000000 [ 733.530689][T13938] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001 [ 733.530704][T13938] R13: 00007f99971e6038 R14: 00007f99971e5fa0 R15: 00007ffcd16e2af8 [ 733.530735][T13938] [ 734.731326][ T3600] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 734.775959][ T3600] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 734.999939][ T8646] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 735.052004][ T8646] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 735.569025][T13973] Invalid ELF header magic: != ELF [ 738.783804][T14007] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 738.995490][T14009] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 739.407836][T14002] FAULT_INJECTION: forcing a failure. [ 739.407836][T14002] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 739.469595][T14002] CPU: 0 UID: 0 PID: 14002 Comm: syz.3.1633 Tainted: G L syzkaller #0 PREEMPT(full) [ 739.469634][T14002] Tainted: [L]=SOFTLOCKUP [ 739.469642][T14002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 739.469657][T14002] Call Trace: [ 739.469665][T14002] [ 739.469674][T14002] dump_stack_lvl+0x16c/0x1f0 [ 739.469715][T14002] should_fail_ex+0x512/0x640 [ 739.469746][T14002] core_sys_select+0x4c5/0xc20 [ 739.469788][T14002] ? __pfx_core_sys_select+0x10/0x10 [ 739.469829][T14002] ? proc_fail_nth_write+0x9f/0x220 [ 739.469875][T14002] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 739.469922][T14002] kern_select+0x15d/0x1e0 [ 739.469956][T14002] ? __pfx_kern_select+0x10/0x10 [ 739.469994][T14002] ? __pfx_ksys_write+0x10/0x10 [ 739.470034][T14002] __x64_sys_select+0xbd/0x160 [ 739.470066][T14002] ? do_syscall_64+0x91/0xf80 [ 739.470103][T14002] ? lockdep_hardirqs_on+0x7c/0x110 [ 739.470139][T14002] do_syscall_64+0xcd/0xf80 [ 739.470178][T14002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.470203][T14002] RIP: 0033:0x7f9996f8f7c9 [ 739.470222][T14002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 739.470247][T14002] RSP: 002b:00007f9997e4b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 739.470270][T14002] RAX: ffffffffffffffda RBX: 00007f99971e5fa0 RCX: 00007f9996f8f7c9 [ 739.470287][T14002] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 739.470301][T14002] RBP: 00007f9997e4b090 R08: 0000000000000000 R09: 0000000000000000 [ 739.470316][T14002] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001 [ 739.470331][T14002] R13: 00007f99971e6038 R14: 00007f99971e5fa0 R15: 00007ffcd16e2af8 [ 739.470362][T14002] [ 742.397575][T14033] Process accounting resumed [ 742.755058][T14047] usb usb36: usbfs: process 14047 (syz.3.1644) did not claim interface 0 before use [ 742.886858][T14047] Invalid ELF header magic: != ELF [ 746.370716][T14081] zswap: compressor not available [ 746.814622][T14099] usb usb36: usbfs: process 14099 (syz.1.1654) did not claim interface 0 before use [ 746.904958][T14102] Invalid ELF header magic: != ELF [ 749.825694][T14150] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1661'. [ 750.256986][T14154] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1661'. [ 751.815072][T14176] dlm: non-version read from control device 1 [ 753.535734][T14200] zswap: compressor not available [ 753.975239][T14220] zswap: compressor not available [ 754.011287][T14226] size and base must be multiples of 4 kiB [ 754.026985][T14222] zswap: compressor not available [ 754.132824][T14226] CPU: 0 UID: 0 PID: 14226 Comm: syz.5.1674 Tainted: G L syzkaller #0 PREEMPT(full) [ 754.132867][T14226] Tainted: [L]=SOFTLOCKUP [ 754.132876][T14226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 754.132891][T14226] Call Trace: [ 754.132899][T14226] [ 754.132909][T14226] dump_stack_lvl+0x16c/0x1f0 [ 754.132950][T14226] mtrr_del+0xd1/0x110 [ 754.132991][T14226] mtrr_ioctl+0x922/0xcf0 [ 754.133014][T14226] ? __pfx_mtrr_ioctl+0x10/0x10 [ 754.133042][T14226] ? find_held_lock+0x2b/0x80 [ 754.133083][T14226] ? __fget_files+0x20e/0x3c0 [ 754.133120][T14226] ? __pfx_mtrr_ioctl+0x10/0x10 [ 754.133163][T14226] proc_reg_unlocked_ioctl+0x229/0x320 [ 754.133197][T14226] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 754.133232][T14226] __x64_sys_ioctl+0x18e/0x210 [ 754.133265][T14226] do_syscall_64+0xcd/0xf80 [ 754.133306][T14226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.133331][T14226] RIP: 0033:0x7fae2038f7c9 [ 754.133351][T14226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 754.133375][T14226] RSP: 002b:00007fae2116e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 754.133399][T14226] RAX: ffffffffffffffda RBX: 00007fae205e5fa0 RCX: 00007fae2038f7c9 [ 754.133416][T14226] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000006 [ 754.133432][T14226] RBP: 00007fae20413f91 R08: 0000000000000000 R09: 0000000000000000 [ 754.133447][T14226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 754.133463][T14226] R13: 00007fae205e6038 R14: 00007fae205e5fa0 R15: 00007ffc2364ee88 [ 754.133495][T14226] [ 756.400169][T14271] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(2) [ 757.743026][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 757.749566][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 758.239726][T14291] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1687'. [ 758.278823][T14291] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1687'. [ 758.358053][T14301] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1687'. [ 758.413630][T14301] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1687'. [ 758.709953][T14306] usb usb36: usbfs: process 14306 (syz.1.1689) did not claim interface 0 before use [ 758.868268][T14311] Invalid ELF header magic: != ELF [ 759.150334][T14320] Invalid ELF header magic: != ELF [ 761.341247][T14350] size and base must be multiples of 4 kiB [ 761.450336][T14350] CPU: 0 UID: 0 PID: 14350 Comm: syz.2.1699 Tainted: G L syzkaller #0 PREEMPT(full) [ 761.450376][T14350] Tainted: [L]=SOFTLOCKUP [ 761.450385][T14350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 761.450401][T14350] Call Trace: [ 761.450409][T14350] [ 761.450418][T14350] dump_stack_lvl+0x16c/0x1f0 [ 761.450460][T14350] mtrr_del+0xd1/0x110 [ 761.450506][T14350] mtrr_ioctl+0x922/0xcf0 [ 761.450529][T14350] ? __pfx_mtrr_ioctl+0x10/0x10 [ 761.450558][T14350] ? find_held_lock+0x2b/0x80 [ 761.450597][T14350] ? __fget_files+0x20e/0x3c0 [ 761.450634][T14350] ? __pfx_mtrr_ioctl+0x10/0x10 [ 761.450657][T14350] proc_reg_unlocked_ioctl+0x229/0x320 [ 761.450689][T14350] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 761.450723][T14350] __x64_sys_ioctl+0x18e/0x210 [ 761.450758][T14350] do_syscall_64+0xcd/0xf80 [ 761.450798][T14350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.450824][T14350] RIP: 0033:0x7fcaa7f8f7c9 [ 761.450844][T14350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 761.450869][T14350] RSP: 002b:00007fcaa8e56038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 761.450893][T14350] RAX: ffffffffffffffda RBX: 00007fcaa81e5fa0 RCX: 00007fcaa7f8f7c9 [ 761.450909][T14350] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000006 [ 761.450925][T14350] RBP: 00007fcaa8013f91 R08: 0000000000000000 R09: 0000000000000000 [ 761.450941][T14350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 761.450956][T14350] R13: 00007fcaa81e6038 R14: 00007fcaa81e5fa0 R15: 00007fff6016f1c8 [ 761.450987][T14350] [ 762.463269][T14368] usb usb36: usbfs: process 14368 (syz.3.1703) did not claim interface 0 before use [ 762.548660][T14370] Invalid ELF header magic: != ELF [ 766.686328][ T5843] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 766.686363][ T5843] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 766.701612][ T5843] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 766.701657][ T5843] Bluetooth: hci3: adv larger than maximum supported [ 766.712418][ T5843] Bluetooth: hci3: adv larger than maximum supported [ 766.719282][ T5843] Bluetooth: hci3: Malformed LE Event: 0x0d [ 767.855501][T14422] usb usb36: usbfs: process 14422 (syz.1.1718) did not claim interface 0 before use [ 767.939305][T14424] Invalid ELF header magic: != ELF [ 768.906782][T14429] zswap: compressor not available [ 770.252837][T14446] input: jJǸ-9%vJ86 as /devices/virtual/input/input15 [ 773.445061][T14482] usb usb36: usbfs: process 14482 (syz.5.1732) did not claim interface 0 before use [ 773.562255][T14484] Invalid ELF header magic: != ELF [ 775.216937][T14494] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1734'. [ 775.808716][T14511] FAULT_INJECTION: forcing a failure. [ 775.808716][T14511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 775.874667][T14511] CPU: 0 UID: 0 PID: 14511 Comm: syz.5.1738 Tainted: G L syzkaller #0 PREEMPT(full) [ 775.874706][T14511] Tainted: [L]=SOFTLOCKUP [ 775.874714][T14511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 775.874729][T14511] Call Trace: [ 775.874737][T14511] [ 775.874746][T14511] dump_stack_lvl+0x16c/0x1f0 [ 775.874787][T14511] should_fail_ex+0x512/0x640 [ 775.874818][T14511] _copy_from_user+0x2e/0xd0 [ 775.874846][T14511] core_sys_select+0x35b/0xc20 [ 775.874887][T14511] ? __pfx_core_sys_select+0x10/0x10 [ 775.874925][T14511] ? proc_fail_nth_write+0x9f/0x220 [ 775.874971][T14511] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 775.875017][T14511] kern_select+0x15d/0x1e0 [ 775.875050][T14511] ? __pfx_kern_select+0x10/0x10 [ 775.875087][T14511] ? __pfx_ksys_write+0x10/0x10 [ 775.875126][T14511] __x64_sys_select+0xbd/0x160 [ 775.875157][T14511] ? do_syscall_64+0x91/0xf80 [ 775.875193][T14511] ? lockdep_hardirqs_on+0x7c/0x110 [ 775.875229][T14511] do_syscall_64+0xcd/0xf80 [ 775.875267][T14511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.875299][T14511] RIP: 0033:0x7fae2038f7c9 [ 775.875319][T14511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 775.875343][T14511] RSP: 002b:00007fae2116e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 775.875366][T14511] RAX: ffffffffffffffda RBX: 00007fae205e5fa0 RCX: 00007fae2038f7c9 [ 775.875382][T14511] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 775.875397][T14511] RBP: 00007fae2116e090 R08: 0000000000000000 R09: 0000000000000000 [ 775.875411][T14511] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001 [ 775.875427][T14511] R13: 00007fae205e6038 R14: 00007fae205e5fa0 R15: 00007ffc2364ee88 [ 775.875457][T14511] [ 777.105251][T14532] FAULT_INJECTION: forcing a failure. [ 777.105251][T14532] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 777.188646][T14532] CPU: 0 UID: 0 PID: 14532 Comm: syz.5.1742 Tainted: G L syzkaller #0 PREEMPT(full) [ 777.188690][T14532] Tainted: [L]=SOFTLOCKUP [ 777.188699][T14532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 777.188714][T14532] Call Trace: [ 777.188722][T14532] [ 777.188732][T14532] dump_stack_lvl+0x16c/0x1f0 [ 777.188773][T14532] should_fail_ex+0x512/0x640 [ 777.188805][T14532] _copy_to_iter+0x29f/0x1710 [ 777.188838][T14532] ? __pfx__copy_to_iter+0x10/0x10 [ 777.188863][T14532] ? __lock_acquire+0x436/0x2890 [ 777.188884][T14532] ? const_folio_flags+0x5b/0x100 [ 777.188911][T14532] ? folio_mark_accessed+0xc1/0xbf0 [ 777.188941][T14532] ? __pfx_folio_mark_accessed+0x10/0x10 [ 777.188976][T14532] copy_page_to_iter+0x12a/0x1e0 [ 777.189005][T14532] filemap_read+0x6b1/0xe40 [ 777.189045][T14532] ? __pfx_filemap_read+0x10/0x10 [ 777.189092][T14532] ? __pfx_down_read+0x10/0x10 [ 777.189117][T14532] ? __pfx_aa_file_perm+0x10/0x10 [ 777.189149][T14532] ? find_held_lock+0x2b/0x80 [ 777.189183][T14532] blkdev_read_iter+0x1ac/0x500 [ 777.189218][T14532] do_iter_readv_writev+0x743/0x9e0 [ 777.189252][T14532] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 777.189284][T14532] ? common_file_perm+0x1b1/0x500 [ 777.189313][T14532] ? bpf_lsm_file_permission+0x9/0x10 [ 777.189342][T14532] ? security_file_permission+0x71/0x210 [ 777.189373][T14532] ? rw_verify_area+0xcf/0x6c0 [ 777.189405][T14532] vfs_readv+0x4cb/0x8b0 [ 777.189446][T14532] ? __pfx_vfs_readv+0x10/0x10 [ 777.189498][T14532] ? __fget_files+0x20e/0x3c0 [ 777.189531][T14532] ? __fget_files+0x170/0x3c0 [ 777.189572][T14532] ? do_readv+0x132/0x340 [ 777.189602][T14532] do_readv+0x132/0x340 [ 777.189633][T14532] ? __pfx_do_readv+0x10/0x10 [ 777.189677][T14532] do_syscall_64+0xcd/0xf80 [ 777.189715][T14532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.189739][T14532] RIP: 0033:0x7fae2038f7c9 [ 777.189758][T14532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 777.189782][T14532] RSP: 002b:00007fae1e5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 777.189805][T14532] RAX: ffffffffffffffda RBX: 00007fae205e6180 RCX: 00007fae2038f7c9 [ 777.189821][T14532] RDX: 0000000000000001 RSI: 0000200000000a80 RDI: 0000000000000003 [ 777.189837][T14532] RBP: 00007fae1e5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 777.189852][T14532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 777.189866][T14532] R13: 00007fae205e6218 R14: 00007fae205e6180 R15: 00007ffc2364ee88 [ 777.189897][T14532] [ 777.606115][T14538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1743'. [ 777.616024][T14538] netlink: 'syz.1.1743': attribute type 2 has an invalid length. [ 777.623845][T14538] netlink: 'syz.1.1743': attribute type 3 has an invalid length. [ 777.631714][T14538] netlink: 20232 bytes leftover after parsing attributes in process `syz.1.1743'. [ 777.641383][T14538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1743'. [ 778.759176][ T5843] Bluetooth: hci3: unexpected event 0x14 length: 16 > 6 [ 779.789992][T14545] zswap: compressor not available [ 780.454429][T14579] FAULT_INJECTION: forcing a failure. [ 780.454429][T14579] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 780.546468][T14579] CPU: 0 UID: 0 PID: 14579 Comm: syz.2.1751 Tainted: G L syzkaller #0 PREEMPT(full) [ 780.546507][T14579] Tainted: [L]=SOFTLOCKUP [ 780.546516][T14579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 780.546530][T14579] Call Trace: [ 780.546539][T14579] [ 780.546548][T14579] dump_stack_lvl+0x16c/0x1f0 [ 780.546588][T14579] should_fail_ex+0x512/0x640 [ 780.546618][T14579] _copy_to_user+0x32/0xd0 [ 780.546645][T14579] simple_read_from_buffer+0xcb/0x170 [ 780.546680][T14579] proc_fail_nth_read+0x197/0x240 [ 780.546719][T14579] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 780.546759][T14579] ? rw_verify_area+0xcf/0x6c0 [ 780.546789][T14579] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 780.546828][T14579] vfs_read+0x1e4/0xcf0 [ 780.546860][T14579] ? __pfx___mutex_lock+0x10/0x10 [ 780.546907][T14579] ? __pfx_vfs_read+0x10/0x10 [ 780.546947][T14579] ? __fget_files+0x20e/0x3c0 [ 780.546990][T14579] ksys_read+0x12a/0x250 [ 780.547024][T14579] ? __pfx_ksys_read+0x10/0x10 [ 780.547066][T14579] do_syscall_64+0xcd/0xf80 [ 780.547106][T14579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.547131][T14579] RIP: 0033:0x7fcaa7f8e1dc [ 780.547150][T14579] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 780.547174][T14579] RSP: 002b:00007fcaa8e56030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 780.547196][T14579] RAX: ffffffffffffffda RBX: 00007fcaa81e5fa0 RCX: 00007fcaa7f8e1dc [ 780.547213][T14579] RDX: 000000000000000f RSI: 00007fcaa8e560a0 RDI: 0000000000000004 [ 780.547227][T14579] RBP: 00007fcaa8e56090 R08: 0000000000000000 R09: 0000000000000000 [ 780.547242][T14579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 780.547257][T14579] R13: 00007fcaa81e6038 R14: 00007fcaa81e5fa0 R15: 00007fff6016f1c8 [ 780.547288][T14579] [ 781.495738][T14591] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1754'. [ 781.681751][ T5843] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 781.681783][ T5843] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 781.696627][ T5843] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 781.696652][ T5843] Bluetooth: hci1: adv larger than maximum supported [ 781.703960][ T5843] Bluetooth: hci1: adv larger than maximum supported [ 781.712908][ T5843] Bluetooth: hci1: Malformed LE Event: 0x0d [ 784.404079][T14630] sp0: Synchronizing with TNC [ 784.907065][T14461] Process accounting paused [ 785.118283][T14648] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1766'. [ 785.156146][T14651] FAULT_INJECTION: forcing a failure. [ 785.156146][T14651] name failslab, interval 1, probability 0, space 0, times 0 [ 785.223015][T14651] CPU: 0 UID: 0 PID: 14651 Comm: syz.1.1767 Tainted: G L syzkaller #0 PREEMPT(full) [ 785.223053][T14651] Tainted: [L]=SOFTLOCKUP [ 785.223062][T14651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 785.223076][T14651] Call Trace: [ 785.223085][T14651] [ 785.223094][T14651] dump_stack_lvl+0x16c/0x1f0 [ 785.223135][T14651] should_fail_ex+0x512/0x640 [ 785.223162][T14651] ? __kvmalloc_node_noprof+0x129/0xa40 [ 785.223198][T14651] should_failslab+0xc2/0x120 [ 785.223234][T14651] __kvmalloc_node_noprof+0x14a/0xa40 [ 785.223268][T14651] ? seq_read_iter+0x830/0x12d0 [ 785.223305][T14651] ? seq_read_iter+0x830/0x12d0 [ 785.223335][T14651] seq_read_iter+0x830/0x12d0 [ 785.223377][T14651] kernfs_fop_read_iter+0x46c/0x610 [ 785.223415][T14651] ? rw_verify_area+0xcf/0x6c0 [ 785.223447][T14651] vfs_read+0x8bf/0xcf0 [ 785.223486][T14651] ? __pfx_vfs_read+0x10/0x10 [ 785.223545][T14651] ksys_read+0x12a/0x250 [ 785.223577][T14651] ? __pfx_ksys_read+0x10/0x10 [ 785.223619][T14651] do_syscall_64+0xcd/0xf80 [ 785.223659][T14651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.223683][T14651] RIP: 0033:0x7f3c0038f7c9 [ 785.223702][T14651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 785.223727][T14651] RSP: 002b:00007f3c01171038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 785.223750][T14651] RAX: ffffffffffffffda RBX: 00007f3c005e5fa0 RCX: 00007f3c0038f7c9 [ 785.223766][T14651] RDX: 000000000000002d RSI: 0000200000000000 RDI: 0000000000000003 [ 785.223781][T14651] RBP: 00007f3c01171090 R08: 0000000000000000 R09: 0000000000000000 [ 785.223796][T14651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 785.223811][T14651] R13: 00007f3c005e6038 R14: 00007f3c005e5fa0 R15: 00007ffda849d158 [ 785.223843][T14651] [ 785.231236][T14652] usb usb36: usbfs: process 14652 (syz.2.1765) did not claim interface 0 before use [ 785.795007][T14656] bridge0: port 3(veth0_to_bridge) entered blocking state [ 785.808507][T14656] bridge0: port 3(veth0_to_bridge) entered disabled state [ 785.821432][T14656] veth0_to_bridge: entered allmulticast mode [ 785.833248][T14656] veth0_to_bridge: entered promiscuous mode [ 785.847464][T14656] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 785.876652][T14656] bridge0: port 3(veth0_to_bridge) entered blocking state [ 785.884196][T14656] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 786.756666][T14669] Invalid ELF header magic: != ELF [ 787.794738][T14699] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1775'. [ 788.267008][T14699] team0: Port device team_slave_0 removed [ 788.716244][T14707] FAULT_INJECTION: forcing a failure. [ 788.716244][T14707] name failslab, interval 1, probability 0, space 0, times 0 [ 788.857680][T14710] FAULT_INJECTION: forcing a failure. [ 788.857680][T14710] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 788.881240][T14707] CPU: 0 UID: 0 PID: 14707 Comm: syz.3.1778 Tainted: G L syzkaller #0 PREEMPT(full) [ 788.881278][T14707] Tainted: [L]=SOFTLOCKUP [ 788.881288][T14707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 788.881303][T14707] Call Trace: [ 788.881311][T14707] [ 788.881320][T14707] dump_stack_lvl+0x16c/0x1f0 [ 788.881363][T14707] should_fail_ex+0x512/0x640 [ 788.881391][T14707] ? fs_reclaim_acquire+0xae/0x150 [ 788.881434][T14707] should_failslab+0xc2/0x120 [ 788.881473][T14707] __kmalloc_noprof+0xeb/0x910 [ 788.881501][T14707] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 788.881542][T14707] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 788.881577][T14707] tomoyo_realpath_from_path+0xc2/0x6e0 [ 788.881621][T14707] tomoyo_check_open_permission+0x2ab/0x3c0 [ 788.881657][T14707] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 788.881720][T14707] ? do_raw_spin_lock+0x12c/0x2b0 [ 788.881757][T14707] tomoyo_file_open+0x6b/0x90 [ 788.881797][T14707] security_file_open+0x84/0x1e0 [ 788.881830][T14707] do_dentry_open+0x597/0x1590 [ 788.881870][T14707] ? security_inode_permission+0xbf/0x260 [ 788.881904][T14707] vfs_open+0x82/0x3f0 [ 788.881934][T14707] path_openat+0x2078/0x3140 [ 788.881981][T14707] ? __pfx_path_openat+0x10/0x10 [ 788.882030][T14707] do_filp_open+0x20b/0x470 [ 788.882069][T14707] ? __pfx_do_filp_open+0x10/0x10 [ 788.882128][T14707] ? alloc_fd+0x471/0x7d0 [ 788.882179][T14707] do_sys_openat2+0x121/0x290 [ 788.882207][T14707] ? __pfx_do_sys_openat2+0x10/0x10 [ 788.882246][T14707] __x64_sys_openat+0x174/0x210 [ 788.882275][T14707] ? __pfx___x64_sys_openat+0x10/0x10 [ 788.882317][T14707] do_syscall_64+0xcd/0xf80 [ 788.882357][T14707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.882383][T14707] RIP: 0033:0x7f9996f8f7c9 [ 788.882403][T14707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 788.882428][T14707] RSP: 002b:00007f9997e4b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 788.882452][T14707] RAX: ffffffffffffffda RBX: 00007f99971e5fa0 RCX: 00007f9996f8f7c9 [ 788.882468][T14707] RDX: 0000000000103002 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 788.882485][T14707] RBP: 00007f9997013f91 R08: 0000000000000000 R09: 0000000000000000 [ 788.882500][T14707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 788.882515][T14707] R13: 00007f99971e6038 R14: 00007f99971e5fa0 R15: 00007ffcd16e2af8 [ 788.882547][T14707] [ 789.409834][T14707] ERROR: Out of memory at tomoyo_realpath_from_path. [ 793.331901][T14710] CPU: 0 UID: 0 PID: 14710 Comm: syz.5.1780 Tainted: G L syzkaller #0 PREEMPT(full) [ 793.331939][T14710] Tainted: [L]=SOFTLOCKUP [ 793.331947][T14710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 793.331961][T14710] Call Trace: [ 793.331969][T14710] [ 793.331978][T14710] dump_stack_lvl+0x16c/0x1f0 [ 793.332017][T14710] should_fail_ex+0x512/0x640 [ 793.332048][T14710] _copy_to_iter+0x29f/0x1710 [ 793.332074][T14710] ? __mutex_unlock_slowpath+0x161/0x790 [ 793.332135][T14710] ? __pfx__copy_to_iter+0x10/0x10 [ 793.332161][T14710] ? kernfs_seq_stop+0xcd/0x120 [ 793.332202][T14710] ? kernfs_put_active+0x86/0xe0 [ 793.332237][T14710] seq_read_iter+0xd02/0x12d0 [ 793.332283][T14710] kernfs_fop_read_iter+0x46c/0x610 [ 793.332321][T14710] ? rw_verify_area+0xcf/0x6c0 [ 793.332356][T14710] vfs_read+0x8bf/0xcf0 [ 793.332396][T14710] ? __pfx_vfs_read+0x10/0x10 [ 793.332448][T14710] ksys_read+0x12a/0x250 [ 793.332482][T14710] ? __pfx_ksys_read+0x10/0x10 [ 793.332525][T14710] do_syscall_64+0xcd/0xf80 [ 793.332564][T14710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.332590][T14710] RIP: 0033:0x7fae2038f7c9 [ 793.332610][T14710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 793.332634][T14710] RSP: 002b:00007fae2116e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 793.332658][T14710] RAX: ffffffffffffffda RBX: 00007fae205e5fa0 RCX: 00007fae2038f7c9 [ 793.332674][T14710] RDX: 000000000000002d RSI: 0000200000000000 RDI: 0000000000000003 [ 793.332690][T14710] RBP: 00007fae2116e090 R08: 0000000000000000 R09: 0000000000000000 [ 793.332705][T14710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 793.332720][T14710] R13: 00007fae205e6038 R14: 00007fae205e5fa0 R15: 00007ffc2364ee88 [ 793.332752][T14710] [ 794.247283][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 794.259659][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 794.272805][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 794.285142][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 794.298250][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 794.310576][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 794.323675][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 794.335984][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 794.349122][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 794.361494][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 794.520437][ C0] sched: DL replenish lagged too much [ 799.258960][ C0] net_ratelimit: 6792 callbacks suppressed [ 799.258981][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 799.277285][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 799.289587][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 799.302646][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 799.314994][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 799.327510][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 799.340680][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 799.353129][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 799.365500][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 799.378683][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 804.271558][ C0] net_ratelimit: 8260 callbacks suppressed [ 804.271580][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 804.290799][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 804.303216][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 804.315560][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 804.328710][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 804.341198][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 804.353591][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 804.367073][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 804.379545][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 804.391907][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 809.284548][ C0] net_ratelimit: 8457 callbacks suppressed [ 809.284570][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 809.302831][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 809.315241][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 809.328402][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 809.340785][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 809.353165][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 809.366284][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 809.378711][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 809.391019][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 809.404133][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 814.296510][ C0] net_ratelimit: 8277 callbacks suppressed [ 814.296532][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 814.314733][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 814.327785][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 814.340118][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 814.352396][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 814.365427][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 814.377775][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 814.390076][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 814.403110][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 814.415447][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 819.309817][ C0] net_ratelimit: 8476 callbacks suppressed [ 819.309839][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 819.328019][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 819.340336][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 819.353313][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 819.365729][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 819.378054][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 819.391045][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 819.403536][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 819.415860][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 819.428843][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 824.321413][ C0] net_ratelimit: 8554 callbacks suppressed [ 824.321435][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 824.340350][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 824.352672][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 824.365271][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 824.378404][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 824.390738][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 824.403167][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 824.416337][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 824.428749][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 824.441205][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 829.334078][ C0] net_ratelimit: 8266 callbacks suppressed [ 829.334101][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 829.352275][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 829.365300][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 829.377624][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 829.389948][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 829.402981][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 829.415375][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 829.427682][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 829.440683][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 829.453070][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 834.347057][ C0] net_ratelimit: 8515 callbacks suppressed [ 834.347079][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 834.365307][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 834.377709][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 834.391178][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 834.403591][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 834.416008][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 834.429077][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 834.441429][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 834.453757][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 834.466858][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 836.803047][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 838.971716][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 839.359957][ C0] net_ratelimit: 8243 callbacks suppressed [ 839.359979][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 839.378252][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 839.390577][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 839.403670][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 839.416018][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 839.428331][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 839.441381][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 839.453695][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 839.466040][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 839.479149][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 844.371543][ C0] net_ratelimit: 9376 callbacks suppressed [ 844.371564][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 844.389772][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:ec:fa:2d:5a:dc, vlan:0) [ 844.402138][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 844.414435][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 844.427486][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 844.439798][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:ec:fa:2d:5a:dc, vlan:0) [ 844.452161][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 844.464453][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 844.477511][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 844.489881][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:ec:fa:2d:5a:dc, vlan:0) [ 849.384096][ C0] net_ratelimit: 9672 callbacks suppressed [ 849.384117][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 849.402282][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 849.415311][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 849.427685][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:ec:fa:2d:5a:dc, vlan:0) [ 849.440025][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 849.452376][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 849.465447][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 849.478052][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:ec:fa:2d:5a:dc, vlan:0) [ 849.490433][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 849.502708][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 854.397115][ C0] net_ratelimit: 9408 callbacks suppressed [ 854.397136][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 854.415419][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:ec:fa:2d:5a:dc, vlan:0) [ 854.427964][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 854.440328][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 854.453403][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 854.465783][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:ec:fa:2d:5a:dc, vlan:0) [ 854.478196][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 854.490579][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 854.503653][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 854.517724][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:ec:fa:2d:5a:dc, vlan:0) [ 859.409136][ C0] net_ratelimit: 7580 callbacks suppressed [ 859.409157][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 859.427610][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 859.440666][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 859.453044][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:ec:fa:2d:5a:dc, vlan:0) [ 859.466117][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 859.478523][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 859.491503][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 859.504665][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:ec:fa:2d:5a:dc, vlan:0) [ 859.517808][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 859.530252][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 864.421616][ C0] net_ratelimit: 7178 callbacks suppressed [ 864.421638][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 864.439947][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 864.453097][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 864.465629][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:ec:fa:2d:5a:dc, vlan:0) [ 864.478735][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 864.491118][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 864.504162][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 864.516558][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:ec:fa:2d:5a:dc, vlan:0) [ 864.529650][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 864.541994][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 869.434556][ C0] net_ratelimit: 8616 callbacks suppressed [ 869.434577][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 869.452726][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 869.465698][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 869.477967][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 869.490263][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 869.502584][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:ec:fa:2d:5a:dc, vlan:0) [ 869.515748][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 869.528056][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 869.541037][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 869.553276][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 874.447229][ C0] net_ratelimit: 9112 callbacks suppressed [ 874.447250][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 874.465613][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 874.477961][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 874.490340][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 874.502780][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:ec:fa:2d:5a:dc, vlan:0) [ 874.516118][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 874.528542][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 874.541859][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 874.554235][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 874.566750][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 879.458938][ C0] net_ratelimit: 9117 callbacks suppressed [ 879.458960][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 879.477843][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 879.490126][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 879.502401][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 879.514751][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 879.527145][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:ec:fa:2d:5a:dc, vlan:0) [ 879.540197][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 879.552569][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 879.565658][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 879.577954][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 884.472401][ C0] net_ratelimit: 9019 callbacks suppressed [ 884.472422][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 884.490647][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 884.503851][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 884.516261][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 884.528595][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 884.540959][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 884.553408][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:ec:fa:2d:5a:dc, vlan:0) [ 884.566668][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 884.579016][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 884.592220][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 889.484171][ C0] net_ratelimit: 9137 callbacks suppressed [ 889.484191][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 889.502513][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:ec:fa:2d:5a:dc, vlan:0) [ 889.515587][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 889.527939][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 889.540889][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 889.553270][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 889.565691][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 889.578103][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 889.590567][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:ec:fa:2d:5a:dc, vlan:0) [ 889.603708][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 894.476408][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 894.483406][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P13522/1:b..l [ 894.491822][ C0] rcu: (detected by 0, t=10502 jiffies, g=99537, q=1145 ncpus=1) [ 894.499635][ C0] task:syz-executor state:R running task stack:24024 pid:13522 tgid:13522 ppid:13510 task_flags:0x400140 flags:0x00080001 [ 894.513798][ C0] Call Trace: [ 894.517098][ C0] [ 894.520037][ C0] ? __schedule+0x10b9/0x6150 [ 894.524742][ C0] __schedule+0x1139/0x6150 [ 894.529274][ C0] ? __lock_acquire+0x436/0x2890 [ 894.534226][ C0] ? __pfx___schedule+0x10/0x10 [ 894.539094][ C0] ? mark_held_locks+0x49/0x80 [ 894.543869][ C0] preempt_schedule_irq+0x51/0x90 [ 894.548917][ C0] irqentry_exit+0x1d8/0x8c0 [ 894.553533][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 894.559526][ C0] RIP: 0010:unwind_next_frame+0xf8/0x20b0 [ 894.565265][ C0] Code: 0e 2d 00 e8 da f0 08 0a 5a 85 c0 0f 85 a2 09 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8d 65 50 4c 89 e2 48 c1 ea 03 80 3c 02 00 <0f> 85 27 18 00 00 4d 8b 75 50 4d 85 f6 74 36 49 8d be 88 00 00 00 [ 894.584879][ C0] RSP: 0018:ffffc90004e87628 EFLAGS: 00000246 [ 894.590955][ C0] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: 0000000043a33b09 [ 894.598931][ C0] RDX: 1ffff920009d0edd RSI: ffffffff8bf2b580 RDI: ffffffff8dd74f20 [ 894.606934][ C0] RBP: ffffc90004e876e0 R08: 00000000bc1c290d R09: 00000000dbc1c290 [ 894.614910][ C0] R10: 0000000000000002 R11: ffff88802697a9b0 R12: ffffc90004e876e8 [ 894.622899][ C0] R13: ffffc90004e87698 R14: 0000000000000000 R15: ffff888026979e80 [ 894.630892][ C0] ? unwind_next_frame+0xa86/0x20b0 [ 894.636111][ C0] ? __x64_sys_unlink+0xc5/0x110 [ 894.641062][ C0] ? arch_stack_walk+0xa6/0x100 [ 894.645928][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 894.652112][ C0] arch_stack_walk+0x94/0x100 [ 894.656814][ C0] ? __x64_sys_unlink+0xc5/0x110 [ 894.661766][ C0] stack_trace_save+0x8e/0xc0 [ 894.666470][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 894.671869][ C0] ? __lock_acquire+0x436/0x2890 [ 894.676902][ C0] kasan_save_stack+0x33/0x60 [ 894.681596][ C0] ? kasan_save_stack+0x33/0x60 [ 894.686464][ C0] ? kasan_save_track+0x14/0x30 [ 894.691335][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 894.696219][ C0] ? __kmalloc_noprof+0x33d/0x910 [ 894.701285][ C0] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 894.707065][ C0] ? tomoyo_path_perm+0x274/0x460 [ 894.712205][ C0] ? tomoyo_path_unlink+0x91/0xe0 [ 894.717266][ C0] ? security_path_unlink+0x145/0x2b0 [ 894.722761][ C0] ? do_unlinkat+0x318/0x660 [ 894.727393][ C0] ? __x64_sys_unlink+0xc5/0x110 [ 894.732390][ C0] kasan_save_track+0x14/0x30 [ 894.737095][ C0] __kasan_kmalloc+0xaa/0xb0 [ 894.741714][ C0] __kmalloc_noprof+0x33d/0x910 [ 894.746588][ C0] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 894.752340][ C0] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 894.758083][ C0] tomoyo_realpath_from_path+0xc2/0x6e0 [ 894.763654][ C0] ? tomoyo_profile+0x47/0x60 [ 894.768354][ C0] tomoyo_path_perm+0x274/0x460 [ 894.773215][ C0] ? tomoyo_path_perm+0x260/0x460 [ 894.778255][ C0] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 894.783669][ C0] ? __d_lookup+0x25c/0x4a0 [ 894.788201][ C0] tomoyo_path_unlink+0x91/0xe0 [ 894.793075][ C0] ? __pfx_tomoyo_path_unlink+0x10/0x10 [ 894.798648][ C0] ? lookup_dcache+0x66/0x170 [ 894.803344][ C0] security_path_unlink+0x145/0x2b0 [ 894.808558][ C0] do_unlinkat+0x318/0x660 [ 894.812999][ C0] ? __pfx_do_unlinkat+0x10/0x10 [ 894.817974][ C0] ? getname_flags.part.0+0x1c5/0x550 [ 894.823363][ C0] __x64_sys_unlink+0xc5/0x110 [ 894.828138][ C0] do_syscall_64+0xcd/0xf80 [ 894.832667][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.838571][ C0] RIP: 0033:0x7f3c0038ed77 [ 894.842992][ C0] RSP: 002b:00007ffda849c3e8 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 894.851420][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3c0038ed77 [ 894.859413][ C0] RDX: 00007ffda849c410 RSI: 00007ffda849c4a0 RDI: 00007ffda849c4a0 [ 894.867392][ C0] RBP: 00007ffda849c4a0 R08: 0000000000000000 R09: 0000000000000000 [ 894.875370][ C0] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffda849d530 [ 894.883348][ C0] R13: 00007f3c00413d7d R14: 00000000000c0725 R15: 00007ffda849d570 [ 894.891340][ C0] [ 894.894378][ C0] rcu: rcu_preempt kthread starved for 245 jiffies! g99537 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 894.905408][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 894.915398][ C0] rcu: RCU grace-period kthread stack dump: [ 894.921286][ C0] task:rcu_preempt state:R running task stack:28328 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 894.934825][ C0] Call Trace: [ 894.938117][ C0] [ 894.941060][ C0] ? __schedule+0x10b9/0x6150 [ 894.945756][ C0] __schedule+0x1139/0x6150 [ 894.950284][ C0] ? __lock_acquire+0x436/0x2890 [ 894.955256][ C0] ? __mod_timer+0x8f2/0xd30 [ 894.959883][ C0] ? __pfx___schedule+0x10/0x10 [ 894.964753][ C0] ? find_held_lock+0x2b/0x80 [ 894.969447][ C0] ? schedule+0x2d7/0x3a0 [ 894.973800][ C0] schedule+0xe7/0x3a0 [ 894.977900][ C0] schedule_timeout+0x123/0x290 [ 894.982767][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 894.988151][ C0] ? __pfx_process_timeout+0x10/0x10 [ 894.993468][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 894.999298][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 895.004786][ C0] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 895.009568][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 895.014867][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 895.020088][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 895.025039][ C0] ? rcu_gp_cleanup+0x7c1/0xe90 [ 895.029903][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 895.035744][ C0] rcu_gp_kthread+0x26d/0x380 [ 895.040435][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 895.045642][ C0] ? rcu_is_watching+0x12/0xc0 [ 895.050421][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 895.055640][ C0] ? __kthread_parkme+0x19e/0x250 [ 895.060685][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 895.065893][ C0] kthread+0x3c5/0x780 [ 895.069975][ C0] ? __pfx_kthread+0x10/0x10 [ 895.074590][ C0] ? rcu_is_watching+0x12/0xc0 [ 895.079370][ C0] ? __pfx_kthread+0x10/0x10 [ 895.083971][ C0] ret_from_fork+0x983/0xb10 [ 895.088577][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 895.093701][ C0] ? __switch_to+0x7af/0x10d0 [ 895.098394][ C0] ? __pfx_kthread+0x10/0x10 [ 895.102995][ C0] ret_from_fork_asm+0x1a/0x30 [ 895.107799][ C0] [ 895.110832][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 895.117180][ C0] CPU: 0 UID: 0 PID: 8854 Comm: kworker/0:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 895.128125][ C0] Tainted: [L]=SOFTLOCKUP [ 895.132447][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 895.142519][ C0] Workqueue: events_power_efficient neigh_periodic_work [ 895.149478][ C0] RIP: 0010:rcu_is_watching+0x5/0xc0 [ 895.154786][ C0] Code: 8f 3c 03 e9 51 ff ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 <53> 65 ff 05 83 95 0f 12 e8 8e e4 d2 09 48 c7 c3 e8 79 b3 93 89 c5 [ 895.174412][ C0] RSP: 0018:ffffc900000073c0 EFLAGS: 00000202 [ 895.180505][ C0] RAX: 0000000000000001 RBX: 0000000000000003 RCX: ffffffff8a1e2a2a [ 895.188498][ C0] RDX: 0000000000000001 RSI: ffffffff8a1e2a3e RDI: 0000000000000001 [ 895.196488][ C0] RBP: ffffc900000074e0 R08: 0000000000000001 R09: 0000000000000000 [ 895.204473][ C0] R10: 0000000000000000 R11: ffff8880261666b0 R12: ffff88807a65a0df [ 895.212460][ C0] R13: ffff88807a65a0c8 R14: 1ffff92000000e8a R15: ffff888059138000 [ 895.220464][ C0] FS: 0000000000000000(0000) GS:ffff8881248fc000(0000) knlGS:0000000000000000 [ 895.229411][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 895.236003][ C0] CR2: 00007ffcd16e1d9c CR3: 000000000e184000 CR4: 00000000003526f0 [ 895.243987][ C0] Call Trace: [ 895.247277][ C0] [ 895.250149][ C0] rcu_read_lock_held+0x1e/0x50 [ 895.255030][ C0] find_match+0x373/0x15d0 [ 895.259458][ C0] ? br_pass_frame_up+0x31f/0x490 [ 895.264506][ C0] ? __pfx_find_match+0x10/0x10 [ 895.269391][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 895.275343][ C0] __find_rr_leaf+0x140/0xe00 [ 895.280101][ C0] ? __pfx___find_rr_leaf+0x10/0x10 [ 895.285320][ C0] ? fib6_node_lookup+0x12d/0x190 [ 895.290387][ C0] ? __pfx_fib6_node_lookup+0x10/0x10 [ 895.295798][ C0] fib6_table_lookup+0x57c/0xa30 [ 895.300759][ C0] ? __pfx_fib6_table_lookup+0x10/0x10 [ 895.306240][ C0] ip6_pol_route+0x1cc/0x1250 [ 895.310951][ C0] ? __pfx_ip6_pol_route+0x10/0x10 [ 895.316085][ C0] ? __pfx_rt6_multipath_hash+0x10/0x10 [ 895.321653][ C0] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 895.327311][ C0] fib6_rule_lookup+0x536/0x720 [ 895.332190][ C0] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 895.337583][ C0] ? nf_nat_ipv6_fn+0xff/0x2e0 [ 895.342365][ C0] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 895.347588][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 895.353516][ C0] ip6_route_input+0x662/0xc70 [ 895.358302][ C0] ? __pfx_ip6_route_input+0x10/0x10 [ 895.363601][ C0] ? lock_acquire+0x179/0x330 [ 895.368314][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 895.373544][ C0] ip6_rcv_finish_core.constprop.0+0x1a0/0x5d0 [ 895.379736][ C0] ipv6_rcv+0x1e8/0x650 [ 895.383918][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 895.388614][ C0] __netif_receive_skb_one_core+0x12d/0x1e0 [ 895.394545][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 895.401005][ C0] ? lock_acquire+0x179/0x330 [ 895.405725][ C0] ? process_backlog+0x450/0x1650 [ 895.410766][ C0] __netif_receive_skb+0x1d/0x160 [ 895.415805][ C0] process_backlog+0x4a2/0x1650 [ 895.420765][ C0] __napi_poll.constprop.0+0xb3/0x540 [ 895.426158][ C0] net_rx_action+0x9f9/0xfa0 [ 895.430771][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 895.435895][ C0] ? mark_held_locks+0x49/0x80 [ 895.440663][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 895.445883][ C0] ? tmigr_handle_remote+0x132/0x380 [ 895.451197][ C0] ? run_timer_base+0x121/0x190 [ 895.456145][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 895.461372][ C0] handle_softirqs+0x219/0x950 [ 895.466162][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 895.471466][ C0] ? neigh_periodic_work+0x6da/0xc10 [ 895.476775][ C0] do_softirq+0xb2/0xf0 [ 895.480950][ C0] [ 895.483886][ C0] [ 895.486819][ C0] __local_bh_enable_ip+0x100/0x120 [ 895.492038][ C0] neigh_periodic_work+0x6da/0xc10 [ 895.497179][ C0] ? __pfx_neigh_periodic_work+0x10/0x10 [ 895.502842][ C0] ? rcu_is_watching+0x12/0xc0 [ 895.507627][ C0] process_one_work+0x9ba/0x1b20 [ 895.512586][ C0] ? __pfx_defense_work_handler+0x10/0x10 [ 895.518330][ C0] ? __pfx_process_one_work+0x10/0x10 [ 895.523722][ C0] ? assign_work+0x1a0/0x250 [ 895.528324][ C0] worker_thread+0x6c8/0xf10 [ 895.532931][ C0] ? __kthread_parkme+0x19e/0x250 [ 895.537973][ C0] ? __pfx_worker_thread+0x10/0x10 [ 895.543122][ C0] kthread+0x3c5/0x780 [ 895.547226][ C0] ? __pfx_kthread+0x10/0x10 [ 895.551824][ C0] ? rcu_is_watching+0x12/0xc0 [ 895.556636][ C0] ? __pfx_kthread+0x10/0x10 [ 895.561270][ C0] ret_from_fork+0x983/0xb10 [ 895.565889][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 895.571028][ C0] ? __switch_to+0x7af/0x10d0 [ 895.575735][ C0] ? __pfx_kthread+0x10/0x10 [ 895.580368][ C0] ret_from_fork_asm+0x1a/0x30 [ 895.585187][ C0] [ 895.588682][ C0] net_ratelimit: 9005 callbacks suppressed [ 895.588700][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 895.606933][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 895.619395][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:ec:fa:2d:5a:dc, vlan:0) [ 895.632500][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 895.644829][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 895.657893][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 895.670215][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 895.682495][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 895.694843][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 895.708989][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:ec:fa:2d:5a:dc, vlan:0) [ 900.599703][ C0] net_ratelimit: 8861 callbacks suppressed [ 900.599725][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:ec:fa:2d:5a:dc, vlan:0) [ 900.618706][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 900.631077][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 900.644160][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 900.656472][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 900.668775][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 900.681180][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 900.693670][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:ec:fa:2d:5a:dc, vlan:0) [ 900.708214][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 900.720743][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)