last executing test programs: 12m55.409832964s ago: executing program 2 (id=1110): r0 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0) ioctl$auto(r0, 0x3b82, 0x38) 12m55.237037439s ago: executing program 2 (id=1112): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x7, 0x1, 0x0, 0x1, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x0) r1 = socket(0x2, 0x80802, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/irq.pressure\x00', 0x101102, 0x0) r2 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace\x00', 0x82000, 0x0) read$auto_tracing_fops_trace(r2, &(0x7f0000000580)=""/4096, 0x1000) mmap$auto(0x0, 0x1, 0xdf, 0x9b72, 0x2, 0x40008000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r3 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x0, 0xfffffffffffff000, 0x2) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/rxrpc/calls\x00', 0x40280, 0x0) pread64$auto(r3, &(0x7f0000000140)='ve\xc8)\xb2\x8e\xc1Ph\x93D\a[\x99\xf7\xa0\xb1#\xa1\x97\x05\x9b\xd9', 0x200000000004, 0x101) statmount$auto(0x0, &(0x7f0000000180)={0x3, 0xb9, 0x44b, 0xa, 0x1, 0xa, 0x8a10, 0x4, 0x7, 0x7, 0x89, 0x26, 0x4, 0x200000000000, 0xfffffffffffff340, 0xfffffffffffffffa, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffe, 0x6, 0x401, 0x22000, 0x9, 0xfffffffc, 0x84, 0x0, 0x6, 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x0, 0x0, 0xb7, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x81000000000009, 0x0, 0x10000, 0x15b, 0x7, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0xfffffffffffffffa, 0x0, 0xbe8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xa, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd]}, 0x7, 0xd) r4 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r4, 0xfffffff7effffd04, &(0x7f00000001c0)) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000002c0), r1) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) sendmsg$auto_NL80211_CMD_ADD_LINK(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="14850a00", @ANYRES16=r5, @ANYBLOB="00042abd7000fedbdf2594000000"], 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x44) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth0_virt_wifi\x00'}) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), 0xffffffffffffffff) 12m54.64563677s ago: executing program 2 (id=1116): close_range$auto(0x2, 0x8, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r3 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0x4008ae89, &(0x7f00000000c0)={0xdd, 0x0, [{0x571, 0x2, 0x8000b70d}]}) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r4, 0x0, 0x1f40) r5 = openat$auto_buffer_subbuf_size_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/buffer_subbuf_size_kb\x00', 0x2, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x9}, 0x2) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptyt8\x00', 0x149242, 0x0) write$auto(0x3, 0x0, 0xfffffdef) close_range$auto(0x2, 0x8, 0x0) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) sendmsg$auto_NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="470854e4ce806a0ecbe647825ea654596e5e4815c8d910e238cd3181e98a25cf01be4cbfbda52f2b24810f6bd982d6703cfa589bdefd93d31cf57e16bc967ac8ed3a94d69a31a9209bc22b367379f34d1b2d06d49a29e26e80f6e99be912f2da5595e220b96ce88d57146fbbf0afbcb2371107ca59c4fbdd4070471f6296a1cb87b258d1b687bd332213b51d0761e3eca856f86cc653b1af59", @ANYRES16=r6, @ANYBLOB="00032dbd7000fcdbdf2527000000040044000600b3000080000005003d0004000000"], 0x28}}, 0x4048801) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000100)="af79f1ba912e2f4fa5fb97b884d0468c0b6417af470c4dd24a34326b6fb0c67c9804677c2790ad86e40fd9d8494732035def34a1fc6103cb0568f41e4c633a") 12m54.220032125s ago: executing program 2 (id=1118): openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x242e40, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) ioctl$auto(0xffffffffffffffff, 0x540a, 0x0) (async) unshare$auto(0x40000080) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) r0 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(r0, 0xc, 0x0, 0x7) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) close_range$auto(0xffffffffffffffff, r0, 0xfffffffc) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) (async) open(&(0x7f00000001c0)='./file0\x00', 0x60142, 0x130) (async) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) (async) rename$auto(&(0x7f0000000500)='./file0\x00', &(0x7f0000000100)='./cgroup\x00') (async) open(&(0x7f0000000040)='./file0\x00', 0x1e9e02, 0x40) (async) mincore$auto(0x80000000001, 0x2, 0x0) write$auto(0xca, &(0x7f0000000000)='\x04\x1d\x19\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa4Cn\xb2./jn>9\xd2\xdb\x88\xf4\x1aVj\x13j\xe1\x96\xf7\xc2\xd3qm\xe6q\xf9\xa6u\x8eZ\x00\xf8*C]\xfd)/\xf3\xa1\x92|\x06|\xd0\x82\x93\xa5\x9a5if\xd0\x8e%g,\xc5\xec\xef\x87\x19\x17\xb0\xe1s\xf6U\xc0\x90r\xc5\xc8H\xa3\x9d\xce\x98\xe7\xb1B:\x179\xdc8\xa8) \x15\xce\xd8\x86\xff-\x80\xf5jMj\xda\x8f\x03EO\xe6\xa4Q\x81+v\xc9\xb8\x00\xcf\x94_\xa7\xadV\xc9\x7f;1R\xa0\x7f\xbe\x1e\x83\an/w[i\th\x9c\xb8\xd1\xed\xba\\\v\xe1\v\x81\xcc\xba\x03-N@ \x14\x1e\n\xe9g\x9fF\x05\xc8\x9f\xe5[\xba\xd2V\x9b\xc1\x9f\xf1%\x9c\xba\xf9\xb4\xa8\xd4\x05G\xf6\x82\xf3m\xe6V\xba\xa0\xf9K\x15\xcc_H\xce\xfd\xe2\x88\"\xe0\xd5Ld\x7f\x1c\x90^\x8d%\xb4', 0x9) kexec_load$auto(0x7ceb, 0x5, &(0x7f00000000c0)={@buf=&(0x7f0000000200)="16bb7121efb6c76cfee141b86b1fed232c61234fa32a9df33d0e2a71fbad3c70ec8e79c22ac59fdd76fadc54675644557bd3bf618ac8cbbf09207d6dd8f815bc7ca737dbbd88bfe2f7f7233b05c34c8ea51310fc95b4699c2fdbf56a68085fbd841771e1848e9ac633827217c6923f83b435e211fc29124634ea66719acae9101429", 0x0, 0x800, 0xfffffffffeffffff}, 0xfc) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) sysfs$auto(0x9, 0x100000000000030, 0x40) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) (async) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TCFLSH2(r2, 0x80045439, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) socketpair$auto(0x1, 0x20000a, 0x200006, 0x0) (async) ioctl$auto(r1, 0x89f2, r1) 12m53.381745088s ago: executing program 2 (id=1120): socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x5, 0xfffffffffffffe01, 0x8011, 0x3, 0x8000) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x8) (async) mmap$auto(0x0, 0x0, 0xdf, 0x4df, 0xffffffffffffffff, 0x0) (async) openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/dummy_hcd.2/usb3/authorized\x00', 0xa080, 0x0) write$auto(r0, 0x0, 0x48da548d) 12m53.215701182s ago: executing program 2 (id=1121): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x23, 0x80805, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) poll$auto(&(0x7f0000000000)={r0, 0x1, 0x8}, 0x5, 0x400) setsockopt$auto(r1, 0x113, 0x3, 0x0, 0x79ad226b) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='Mdev/audi\t1\x01', 0x100000a3d6) connect$auto(0xffffffffffffffff, 0x0, 0x4c85) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0xd561, 0x10000000000df, 0xeb2, 0xffffffffffffffff, 0x8000) timer_create$auto(0x2, 0x0, 0x0) timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x26b, 0x4}, {0x0, 0x83}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) kexec_load$auto(0x200000000007, 0x1, &(0x7f0000000040)={@kbuf=0x0, 0x2aaa, 0x6c0000c000, 0xc000}, 0x4) setsockopt$auto(0x400000000000003, 0x28, 0x6, 0x0, 0x56d) mmap$auto(0x0, 0x20000a00006, 0x100, 0x91, 0xffffffffffffffff, 0x2ffffffffffe) mmap$auto(0x8, 0x400008, 0x0, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x106) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0xb, 0x734f, 0x36, 0x67f, 0x1ffde, 0x7, 0x3, 0x20000002, 0xd, 0x3, 0x1, 0x2091, 0xb4, 0x9, 0x6, 0x6, 0x80, 0x4, 0x1cd7, 0x1000, 0x2000, 0x203, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x1fe, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="f91c5acc2195a6f094ff08ba6d02e4ec504acd62e103e5fd6f7244bf2e9918a0327ba444e173af560aa2670921addde8898c95a405f377b62e74091b15b18845a838c74a7977f468e20b2259bedb931b2f635995c57742df7936f0869b7632bf38b60754b308fe6edb977eb731219f922d02dfde4c4acca3e0f6893ff30f4d5fd8", @ANYRESDEC], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x7980, 0x6}, 0x2, 0x0, 0x0, 0x8) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x2) 12m38.072761739s ago: executing program 32 (id=1121): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x23, 0x80805, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) poll$auto(&(0x7f0000000000)={r0, 0x1, 0x8}, 0x5, 0x400) setsockopt$auto(r1, 0x113, 0x3, 0x0, 0x79ad226b) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='Mdev/audi\t1\x01', 0x100000a3d6) connect$auto(0xffffffffffffffff, 0x0, 0x4c85) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0xd561, 0x10000000000df, 0xeb2, 0xffffffffffffffff, 0x8000) timer_create$auto(0x2, 0x0, 0x0) timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x26b, 0x4}, {0x0, 0x83}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) kexec_load$auto(0x200000000007, 0x1, &(0x7f0000000040)={@kbuf=0x0, 0x2aaa, 0x6c0000c000, 0xc000}, 0x4) setsockopt$auto(0x400000000000003, 0x28, 0x6, 0x0, 0x56d) mmap$auto(0x0, 0x20000a00006, 0x100, 0x91, 0xffffffffffffffff, 0x2ffffffffffe) mmap$auto(0x8, 0x400008, 0x0, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x106) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0xb, 0x734f, 0x36, 0x67f, 0x1ffde, 0x7, 0x3, 0x20000002, 0xd, 0x3, 0x1, 0x2091, 0xb4, 0x9, 0x6, 0x6, 0x80, 0x4, 0x1cd7, 0x1000, 0x2000, 0x203, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x1fe, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="f91c5acc2195a6f094ff08ba6d02e4ec504acd62e103e5fd6f7244bf2e9918a0327ba444e173af560aa2670921addde8898c95a405f377b62e74091b15b18845a838c74a7977f468e20b2259bedb931b2f635995c57742df7936f0869b7632bf38b60754b308fe6edb977eb731219f922d02dfde4c4acca3e0f6893ff30f4d5fd8", @ANYRESDEC], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x7980, 0x6}, 0x2, 0x0, 0x0, 0x8) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x2) 7m33.849782875s ago: executing program 3 (id=2403): bpf$auto_BPF_LINK_DETACH(0x22, &(0x7f0000000000)=@link_detach, 0x8) unshare$auto(0x40000080) 7m33.246101046s ago: executing program 3 (id=2406): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) prctl$auto(0x35, 0x1, 0x10, 0x0, 0x0) ptrace$auto(0x10, r0, 0x4, 0x7ff) wait4$auto(r0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x2, 0x8000) mount_setattr$auto(0x5, 0x0, 0x8000, 0x0, 0x283) r2 = gettid() get_robust_list$auto(r2, &(0x7f0000000140)=&(0x7f0000000100)={{&(0x7f0000000000)}, 0x5, &(0x7f00000000c0)={&(0x7f0000000080)={&(0x7f0000000040)}}}, &(0x7f0000000180)=0x2d3) getsockopt$auto(r1, 0x10e, 0xb, 0x0, 0x0) 7m33.003115488s ago: executing program 3 (id=2408): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) socket(0x2, 0x3, 0x2) setsockopt$auto(0x3, 0x0, 0xc8, 0xfffffffffffffffc, 0x4) madvise$auto(0x400, 0x8, 0xffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/dummy_hcd.6/usb7/devnum\x00', 0x102, 0x0) ioctl$auto(0x3, 0x80108907, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) migrate_pages$auto(0x0, 0x2b59, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$auto_SOUND_MIXER_READ_RECSRC(0xffffffffffffffff, 0x80044dff, &(0x7f00000012c0)) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x23, 0x0) r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r0, 0x0, 0x4) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x10, 0x2, 0x4) socket(0xa, 0x1, 0x84) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, 0x0, 0x80240, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000340)={[0x1ff, 0x7, 0xd, 0x5, 0x9487, 0x445f, 0x15f4da0a, 0x1, 0x81, 0xf8bd, 0x100, 0x4, 0x392, 0xfffffffffffffffd, 0x2, 0x2]}, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xffff, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) 7m32.40575096s ago: executing program 3 (id=2410): close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x3, @broadcast}, 0x6a) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xffffeffe, 0x2) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r0, @new_prog_fd=0x4, 0x4, @old_map_fd=r1}, 0xa3) bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x4, 0xdf, 0xeb1, r2, 0x7fff) io_uring_setup$auto(0x6, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0xb, 0x0) r3 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r3, &(0x7f0000000100)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) 7m31.45704505s ago: executing program 3 (id=2413): rseq$auto(&(0x7f0000000040)={0x5, 0x7, 0x80000001, 0x806, 0xffffffff, 0x2}, 0x8004, 0x0, 0x8000006) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}]}, 0x1c}, 0x1, 0x0, 0x92ffffffffffffff, 0x4002000}, 0x40010) mbind$auto(0x2000, 0x800000100000004, 0x100000000, 0x0, 0x1003, 0x2) 7m31.226363638s ago: executing program 3 (id=2415): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r0 = syz_clone(0x5000400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid$auto(r0, r0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x31, 0x8000, 0x1ffde, 0x1, 0x2, 0x1, 0x9, 0x3, 0x5, 0x8, 0x3002, 0x9, 0xb, 0x80010002, 0x80, 0xd8f9, 0x0, 0x7, 0x2, 0x203, 0x400, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000002]}, 0x400, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) socket(0xa, 0x4, 0x7) socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x23, 0x0, 0x9) read$auto(0x3, 0x0, 0x80) mbind$auto(0x5, 0x8, 0x0, 0x0, 0x5, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x7, 0x0) mmap$auto(0x0, 0x104, 0xdf, 0xeb1, 0x401, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) fcntl$auto(0x8000000000000001, 0x26, 0x8) io_uring_setup$auto(0x1, 0x0) fcntl$auto(0x8000000000000001, 0x24, 0x4) move_pages$auto(0x0, 0x200000000f54, 0x0, 0x0, 0x0, 0x2) socket(0x29, 0x2, 0x0) 7m26.979128115s ago: executing program 1 (id=2424): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="1b0026bd7400fddbdf2503000000040008005400038004000f800400110008001e00", @ANYRES32=0x0, @ANYBLOB="3e00ba809bdd3500e6006e4f74b952aa5712f88a7a8fb419c8806810e9132c14bc81998b9330fea5b928ceda31c689e030e397a640b5db26e4077700000000001200010089877148000000000000000000000000040002"], 0x84}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) ioctl$auto_FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000140)="58fcb282bcbc38bfaef257e019406ea6c445cd4f7f7662ac0f8834baa918d5b3cea133243c4f2b9a39e536b67f5a1a2bfdf589da2b1c980e1ce53883444996d1721d7f3ae627c6c604000000000000007910fbc02d899ab93d002d849884a5377ff11be2ed012110f2f520") r3 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f00000000c0)={0x1, "e6c26c22ab89af11056b0001ac097e0a0728d9300000c500", @inferred=0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = getpid() sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYRESHEX=r3, @ANYRESOCT=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYRES64=r6, @ANYRESHEX=r3, @ANYRES16=r3, @ANYRES64=r5], 0x14}, 0x1, 0x0, 0x0, 0x24044024}, 0x800) process_vm_readv$auto(r6, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={r6, r0, 0x6, 0x6, 0xa, 0x8100000d, 0x5f, 0x0, 0x3}, 0xc) epoll_create$auto(0x10001b) io_uring_setup$auto(0x4, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cpu.pressure\x00', 0x183142, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0xc0400, 0x0) sched_setattr$auto(r7, &(0x7f0000000040)={0x6, 0x0, 0x80000000, 0x4, 0x2, 0x7fffffff, 0x5, 0x8, 0x7, 0xd57d}, 0x4) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x7, 0x3, 0x10001, 0x3, 0x5e, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) 7m26.761869763s ago: executing program 1 (id=2426): close_range$auto(0x2, 0xa, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0x2, 0x1c, 0x5, 0x0) r1 = socket(0xa, 0x801, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'geneve0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'vlan0\x00'}) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000040)=0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) write$auto_proc_mem_operations_base(r3, &(0x7f0000001680)="a7", 0xfffffc96) bpf$auto_BPF_BTF_LOAD(0x12, &(0x7f0000000480)=@test={r3, 0x7, 0xc45, 0x80000000, 0x4c, 0x4, 0x7643, 0xa, 0x200, 0x40, 0x633, 0x7, 0x1ff, 0x2, 0x8}, 0x9) ioctl$auto_RTC_UIE_ON(r4, 0x7003, 0x0) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r5 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r6 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) recvmmsg$auto(r6, &(0x7f0000000140)={{0x0, 0x3, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) write$auto_proc_clear_refs_operations_internal(r5, 0x0, 0xffffff4b) r7 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) write$auto_proc_mem_operations_base(r7, &(0x7f0000001680)="a7", 0xfffffc96) r8 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r8, 0xc1105517, &(0x7f00000006c0)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00", @raw=0x1}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2000000b756, 0x10001}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r8, 0xc1105511, &(0x7f0000000080)={{@raw=0x1002, 0x6, 0xa, 0x7, "26d718b7d3ee69350e4ede7079dcb0c24c8aa1e3c7ee2e00308b8a7d74b0a707f7045e6d035b196ca83379bb", @inferred=0x0}, 0x7, 0xfffffffc, 0x82, @inferred, @enumerated={0x0, 0x6, "ad75b255b5cdd64a6b7a755de55f8e3b81e6c4e6fbf4f15a5ca5dc29f056113e9b60cd7bd82081ec90b01a6c1ae79b9fd0930da366e011ae30c0a636577776a6", 0x2003, 0xcac}, "18a801006a0900000000000000c4bd5359eeadc8357752b72fa176254d8797cdffd02555ac83a07983eeddcd24b626f54ad9d763dcdc9120af8b7c848ceb55a7"}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000340)={{@raw=0x6, 0x308, 0xffff, 0x9, "cd9ac857d737bb20feeb0c005eb571a89986bbec6f001887a4d49e096afdf3bb0959c5432aadf71c2f91af00", @raw=0x4}, 0x9, 0xf, 0x1, @inferred=r9, @enumerated={0x7133, 0x5, "8e4ccd6746972c6ac28bdde69c5070d317980efcb9b3e8d7b8176a709302cefa4e7ad3920798a929a43f165472bdaab2c5d1c3f67faea7d8cf5430450d8da99c", 0xffffffff, 0xfffffff6}, "842e773e1652f754bc887e438da1a21b2bb21f22fdee260a7182c53b299693a64e7c248a610a2fc8edae9b434d3ad49e011705988084914add78fa45450688a7"}) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x810}, 0x48800) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) 7m25.419247439s ago: executing program 1 (id=2428): mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x242, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2c, 0x3, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x80805, 0x0) clone$auto(0x20003b4a, 0x8, 0x0, 0x0, 0x2) pidfd_getfd$auto(0x3, 0x1, 0x100000000) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r3, r2, 0x99, 0x8, 0x1, @relative_id=0x8, 0x5}, 0x92) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) bpf$auto(0x1, &(0x7f0000000380)=@raw_tracepoint={0x5, r1, 0x0, 0x6}, 0xc) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/trace\x00', 0x600, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/vt/parameters/default_blu\x00', 0xe0244, 0x0) socket(0x10, 0x2, 0x4) r4 = socket(0x1d, 0x2, 0x7) r5 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(r4, &(0x7f0000000000)=@can={0x1d, r6}, 0x6a) 7m25.139618256s ago: executing program 1 (id=2429): unshare$auto(0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000180), r0) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES8=r1, @ANYBLOB="010026bd7000f8dbdf250100000008000200", @ANYRES32=0x4, @ANYBLOB='\x00', @ANYRES32=0x9, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_DEL(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20055015}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0xffffffffffffff3c) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kcore\x00', 0x101000, 0x0) preadv$auto(r2, 0x0, 0x200001000020007, 0x800000fb, 0x8300000004) mlockall$auto(0x7) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) mmap$auto(0x0, 0x84020009, 0xe, 0x16, 0xffffffffffffffff, 0x7ffd) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x40000, 0x0) r3 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b) read$auto(r3, 0x0, 0x1) write$auto(0xffffffffffffffff, 0x0, 0x6) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x2c201, 0x0) socket(0x1d, 0x2, 0x2) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socketpair$auto(0x1, 0xa2, 0x8000000000000000, 0x0) socket(0x10, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) read$auto(0x3, 0x0, 0x10) write$auto(0x3, 0x0, 0xffd8) 7m24.619896963s ago: executing program 1 (id=2430): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r0 = socket(0x11, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8953, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) r1 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e) ioctl$sock_SIOCGIFINDEX(r1, 0x401c5820, 0x0) rename$auto(&(0x7f0000000480)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x2, 0x73) r2 = pipe2$auto(0x0, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) sendmsg$auto_NL802154_CMD_SET_PAN_ID(r2, 0x0, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/tty36\x00', 0x40401, 0x0) 7m22.74088859s ago: executing program 1 (id=2436): rseq$auto(&(0x7f0000000040)={0x5, 0x7, 0x80000001, 0x806, 0xffffffff, 0x2}, 0x8004, 0x0, 0x8000006) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}]}, 0x1c}, 0x1, 0x0, 0xf5ffffffffffffff, 0x4002000}, 0x40010) mbind$auto(0x2000, 0x800000100000004, 0x100000000, 0x0, 0x1003, 0x2) 7m16.152906125s ago: executing program 33 (id=2415): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r0 = syz_clone(0x5000400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid$auto(r0, r0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x31, 0x8000, 0x1ffde, 0x1, 0x2, 0x1, 0x9, 0x3, 0x5, 0x8, 0x3002, 0x9, 0xb, 0x80010002, 0x80, 0xd8f9, 0x0, 0x7, 0x2, 0x203, 0x400, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000002]}, 0x400, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) socket(0xa, 0x4, 0x7) socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x23, 0x0, 0x9) read$auto(0x3, 0x0, 0x80) mbind$auto(0x5, 0x8, 0x0, 0x0, 0x5, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x7, 0x0) mmap$auto(0x0, 0x104, 0xdf, 0xeb1, 0x401, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) fcntl$auto(0x8000000000000001, 0x26, 0x8) io_uring_setup$auto(0x1, 0x0) fcntl$auto(0x8000000000000001, 0x24, 0x4) move_pages$auto(0x0, 0x200000000f54, 0x0, 0x0, 0x0, 0x2) socket(0x29, 0x2, 0x0) 7m7.654468969s ago: executing program 34 (id=2436): rseq$auto(&(0x7f0000000040)={0x5, 0x7, 0x80000001, 0x806, 0xffffffff, 0x2}, 0x8004, 0x0, 0x8000006) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}]}, 0x1c}, 0x1, 0x0, 0xf5ffffffffffffff, 0x4002000}, 0x40010) mbind$auto(0x2000, 0x800000100000004, 0x100000000, 0x0, 0x1003, 0x2) 4m34.762769321s ago: executing program 5 (id=3039): mmap$auto(0x0, 0x2000c, 0x800000000de, 0xe31, 0x40000000000a5, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(r0, 0x0, 0x4) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/pcmC1D0c\x00', 0x20000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmsg$auto_NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4008081}, 0x8080) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) lseek$auto(r0, 0x7, 0x401) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/radio18\x00', 0x8aa40, 0x0) ioctl$auto(r1, 0x5646, r1) read$auto_v4l2_fops_v4l2_dev(r1, &(0x7f0000000000)=""/22, 0x16) ioctl$auto(r1, 0x2400000, 0xffffffffffffffff) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000000), 0x180, 0x0) r2 = socket(0xa, 0x2, 0x120000) close_range$auto(0x2, 0x8, 0x0) bind$auto(r2, 0x0, 0x66) 4m32.453930783s ago: executing program 5 (id=3047): mkdir$auto(&(0x7f0000000080)='./file0\x00', 0x7ff) open$dir(0x0, 0x10000, 0x6) mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) fstat$auto(0xffffffffffffffff, &(0x7f0000000300)={0xff, 0x7, 0x45, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x803, 0x4, 0x6, 0x0, 0x1000073, 0x1, 0x1, 0x8}) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kcore\x00', 0x101000, 0x0) preadv$auto(r0, &(0x7f0000000440)={0x0, 0xbe78}, 0x5, 0x800000fb, 0x8100000001) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="29601d05ad327d12ce2d3141bd0e9166", @ANYRES16, @ANYBLOB="01002bbd7400fcdbdf250800000008000b"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000044) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002740), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_GET_SEC_DEV(r1, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000400)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4c800}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000100), 0x1b5c40, 0x0) r2 = fanotify_init$auto(0x602, 0x1) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x541c02, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x408000, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) openat$auto_percpu_stats_fops_(0xffffffffffffff9c, &(0x7f0000000240), 0x303101, 0x0) ioctl$auto_FS_IOC_ENABLE_VERITY3(0xffffffffffffffff, 0x40806685, &(0x7f0000000280)={0x1c0, 0x3, 0x9, 0x6, 0x1, 0xa, 0x0, 0x1}) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000080)={0x1, "36a2662b59209f6bd4aafa4ed15fdb9c791daf044ae6ff089930def80ce28999"}) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, 0x0, 0x8) 4m31.941154237s ago: executing program 5 (id=3052): close_range$auto(0x2, 0xa, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0x2, 0x1c, 0x5, 0x0) r1 = socket(0xa, 0x801, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'vlan0\x00', 0x0}) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000000040)=0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r6 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) r7 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) ioctl$auto_SNDCTL_SYNTH_ID(r7, 0xc08c5114, &(0x7f0000000440)="84f91a942a28715ba4713e58fc875cd8456fef6695efb97056388a335f3a68df6f86dcdb") write$auto_proc_mem_operations_base(r6, &(0x7f0000001680)="a7", 0xfffffc96) bpf$auto_BPF_BTF_LOAD(0x12, &(0x7f0000000480)=@test={r6, 0x7, 0xc45, 0x80000000, 0x4c, 0x4, 0x7643, 0xa, 0x200, 0x40, 0x633, 0x7, 0x1ff, 0x2, 0x8}, 0x9) ioctl$auto_RTC_UIE_ON(r8, 0x7003, 0x0) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r9 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r10 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) recvmmsg$auto(r10, &(0x7f0000000140)={{0x0, 0x3, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) write$auto_proc_clear_refs_operations_internal(r9, 0x0, 0xffffff4b) r11 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) write$auto_proc_mem_operations_base(r11, &(0x7f0000001680)="a7", 0xfffffc96) r12 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r12, 0xc1105517, &(0x7f00000006c0)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00", @raw=0x1}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2000000b756, 0x10001}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r12, 0xc1105511, &(0x7f0000000080)={{@raw=0x1002, 0x6, 0xa, 0x7, "26d718b7d3ee69350e4ede7079dcb0c24c8aa1e3c7ee2e00308b8a7d74b0a707f7045e6d035b196ca83379bb", @inferred=0x0}, 0x7, 0xfffffffc, 0x82, @raw=0xe, @enumerated={0x0, 0x6, "ad75b255b5cdd64a6b7a755de55f8e3b81e6c4e6fbf4f15a5ca5dc29f056113e9b60cd7bd82081ec90b01a6c1ae79b9fd0930da366e011ae30c0a636577776a6", 0x2003, 0xcac}, "18a801006a0900000000000000c4bd5359eeadc8357752b72fa176254d8797cdffd02555ac83a07983eeddcd24b626f54ad9d763dcdc9120af8b7c848ceb55a7"}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, &(0x7f0000000340)={{@raw=0x6, 0x308, 0xffff, 0x9, "cd9ac857d737bb20feeb0c005eb571a89986bbec6f001887a4d49e096afdf3bb0959c5432aadf71c2f91af00", @raw=0x4}, 0x9, 0xf, 0x1, @inferred=r13, @enumerated={0x7133, 0x5, "8e4ccd6746972c6ac28bdde69c5070d317980efcb9b3e8d7b8176a709302cefa4e7ad3920798a929a43f165472bdaab2c5d1c3f67faea7d8cf5430450d8da99c", 0xffffffff, 0xfffffff6}, "842e773e1652f754bc887e438da1a21b2bb21f22fdee260a7182c53b299693a64e7c248a610a2fc8edae9b434d3ad49e011705988084914add78fa45450688a7"}) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002bbd7000fcdbdf250c00000040000180080003000600000008000100", @ANYRES32=r2, @ANYBLOB="1400020076657468315f746f5f6272696467650008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="080003000800e8041aa74516660639660000"], 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x48800) 4m27.7684416s ago: executing program 5 (id=3064): bpf$auto(0x80000400, &(0x7f0000000000)=@bpf_attr_3={0x9, 0x9, 0x6, 0x5, 0x1fe, 0x2, 0x1, 0x4, 0x4007, "0108a5172d53c2dc73bf58e1423b2178", 0x0, 0x9, 0xffffffffffffffff, 0x81, 0x7fffffffffffffff, 0x89, 0x9, 0xffff, 0x3ff, 0x7, @attach_btf_obj_fd, 0x440, 0xa, 0x7, 0x1ff, 0x9}, 0x9) r0 = socket(0x11, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000040), 0x10}, 0x2, &(0x7f0000000140), 0x8, 0x1}, 0x5}, 0x2, 0x101) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x8}, 0x3, 0x0) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) socket(0xa, 0x1, 0x84) io_uring_setup$auto(0x2, 0x0) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0) getsockopt$auto_SO_TXREHASH(r1, 0xffffff00, 0x4a, &(0x7f00000001c0)='\x00', &(0x7f0000000200)=0x4) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x10, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x4, 0xd3e, 0x1, 0x948b, 0x3, 0x800295f4da0a, 0x2, 0x3, 0x5, 0x80000001, 0x40, 0x200, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7f, 0xd, 0x1, 0x948f, 0x1005, 0x206, 0x7, 0xfffffffffffffff6, 0x7, 0x9, 0x79d, 0x6, 0x100000000000000, 0xfffffffffffffffe, 0xf]}, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x100000001, 0x100) r3 = socket(0x2b, 0x1, 0x1) ioctl$auto(r3, 0x89a0, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/mac80211_hwsim/hwsim0/ieee80211/phy0/rfkill2/hard\x00', 0x0, 0x0) read$auto(r4, 0x0, 0xe8) madvise$auto(0x2000, 0x20499d, 0x9) 4m26.47536173s ago: executing program 5 (id=3067): r0 = socket(0x10, 0x2, 0x14) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) (async) bpf$auto(0x1, &(0x7f0000000000)=@batch={0xfffffffffffffffb, 0x44, 0x2, 0x9, 0x81, 0xffffffffffffffff, 0x2, 0x8}, 0x100000cf) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r1 = socket(0x29, 0x2, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200"], 0x1ac}}, 0x40000) (async) recvmmsg$auto(r2, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) (async) ioctl$auto(r1, 0x89f1, 0x24) (async) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="100000000214af"], 0x14}, 0x1, 0x0, 0x0, 0x20000045}, 0x24000044) (async) mmap$auto(0x0, 0x1, 0x2, 0xeb1, 0x401, 0x3) socketpair$auto(0x1, 0x525d, 0x7, 0x0) (async) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) fcntl$auto_F_OFD_SETLKW(r3, 0x26, 0x1298) 4m25.287752736s ago: executing program 5 (id=3074): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) setgroups$auto(0x9, &(0x7f0000000080)=0xc8) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x88, 0x3, 0xeb1, r0, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) socket(0xa, 0x1, 0x84) r1 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) open_by_handle_at$auto(r1, &(0x7f00000001c0)={0x8, 0x2, "750000000000001b"}, 0x2) socket(0xa, 0x5, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x8100, 0x0) socket(0x80000000000002d, 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) sendfile$auto(r2, r2, 0x0, 0x2) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) sysfs$auto(0x2, 0x2, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, 0x0, 0x40080) socket(0x2, 0x3, 0x100) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0xa02, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc0002, 0x0) 4m9.807676391s ago: executing program 35 (id=3074): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) setgroups$auto(0x9, &(0x7f0000000080)=0xc8) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x88, 0x3, 0xeb1, r0, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) socket(0xa, 0x1, 0x84) r1 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) open_by_handle_at$auto(r1, &(0x7f00000001c0)={0x8, 0x2, "750000000000001b"}, 0x2) socket(0xa, 0x5, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x8100, 0x0) socket(0x80000000000002d, 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) sendfile$auto(r2, r2, 0x0, 0x2) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) sysfs$auto(0x2, 0x2, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, 0x0, 0x40080) socket(0x2, 0x3, 0x100) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0xa02, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc0002, 0x0) 1m32.172323904s ago: executing program 6 (id=3706): modify_ldt$auto(0x1, &(0x7f00000001c0), 0x10) mmap$auto(0x0, 0x2020006, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/dev_mcast\x00', 0x6901, 0x0) statx$auto(0x2, 0x0, 0x1000, 0x8, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x7ff, 0x400) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) r2 = bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0x1000b5, 0x4010, 0x8, 0x4, 0xffffffffffffffff, 0xa, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x1, 0x7, 0xe5, 0x3, 0xffffffffffffffff, 0xffffffffffffffff}, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'pimreg\x00'}) ioctl$auto_VHOST_SET_LOG_FD2(r3, 0x4004af07, &(0x7f0000000340)=r1) bpf$auto(0x9, &(0x7f0000000280)=@bpf_attr_0={0xf, 0x2f, 0x1, 0x8000, 0x9c1, r5, 0x6, "214ef295134e535778f9503103c2c226", r4, r6, 0xa, 0x81, 0x101, 0x0, r7, r8}, 0x92) ioctl$auto_TIOCSETD2(r2, 0x5423, &(0x7f00000004c0)="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") prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) ioctl$auto__ctl_fops_dm_ioctl(0xffffffffffffffff, 0xfffffffffffffd03, &(0x7f00000001c0)) connect$auto(0x3, 0x0, 0x8) mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000) unshare$auto(0x8000000) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000440)=""/82, 0x52) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_UDP_GET_REMOTEIP(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002500)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000080) mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x1000, 0x2) 1m31.291070755s ago: executing program 6 (id=3708): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001180), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0100c0bfa387366ff83e4dcb53d1782abd7000fdfbc6"], 0x1c}, 0x1, 0x0, 0x0, 0x404c0c1}, 0x40000) timerfd_create$auto_CLOCK_TAI(0xb, 0x35be) 1m31.117721969s ago: executing program 6 (id=3709): ioperm$auto(0x800000005f4, 0x5ad2, 0xffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/026/001\x00', 0x2, 0x0) ioctl$auto_USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f0000000040)=0x63384e20) ioctl$auto_USBDEVFS_RESET(r0, 0x5514, 0x0) socket(0x2, 0x1, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x22a02, 0x0) write$auto(r1, &(0x7f0000000140)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7\xe6\x04\x8c\x83k', 0x1000000007e) mremap$auto(0x200000000000, 0x4, 0x4, 0x3, 0x100000000) mremap$auto(0x5, 0x6, 0xe, 0x82000000, 0x2) 1m30.204558403s ago: executing program 6 (id=3711): r0 = socket(0x2, 0x3, 0xa) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async, rerun: 64) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r2) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/zswap/parameters/enabled\x00', 0x62, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2051df00d6740db125daf7ee4fb3d009058b0757812e9006e2b66728a8ee5e63d5b854ea3d90e1712bc969f9db6c7e2edf031ab499f14582b78af0d18fd05f72e256c35b3857fa2df5d43189b678bdef52fa2633f47836a76655d929f8cb08d28f76b27c2d9c63ade16c74cd694f117f0fd2e5fa2bf9a476e97a339cb14069d36c7f150c10981323516739d3d619a95d7ec42c0a1fe593d40d13a8b0d8", @ANYRES16=r3, @ANYBLOB="010027bd7000fbdbdf2504000000080017000800000004000e00"], 0x20}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0) bpf$auto_BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000001c0)=@enable_stats={0xb7}, 0x5) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) sendmsg$auto_NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1ae6a8b4e2ead4fb}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x3}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x6e}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x4008000) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) (async) write$auto_fuse_dev_operations_fuse_i(0xffffffffffffffff, &(0x7f0000000440)="1100", 0x2) (async) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x20401, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) (async) kill$auto(0x0, 0x11) getrandom$auto(&(0x7f0000000300)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0xb69, 0x4) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) (async) mmap$auto(0x0, 0x40006, 0xe3, 0x9b72, 0xffffffffffffffff, 0x7fff800000100000) (async) socket(0x22, 0xa, 0xa) ioctl$auto_TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000002c0)={0x0, &(0x7f0000000280)={0xffff, 0x7, 0x8, @inferred=r4}}) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/controlC1\x00', 0x40, 0x0) sendfile$auto(r5, r6, 0x0, 0x1000200) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x8600, 0x0) 1m30.125596905s ago: executing program 6 (id=3712): fallocate$auto(0x1, 0x8, 0x0, 0x5) openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/saved_cmdlines\x00', 0xc01, 0x0) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/sync_on_suspend\x00', 0x8102, 0x0) write$auto(r1, &(0x7f0000000000)='/sys/power/sync_on_suspend\x00', 0x1cf7) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e) ftruncate$auto(r0, 0x5) ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0) rename$auto(&(0x7f0000000480)='./file0\x00', 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/acpi/wakeup\x00', 0x48041, 0x0) 1m30.0216792s ago: executing program 6 (id=3713): unshare$auto(0x40000080) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv6/conf/default/ignore_routes_with_linkdown\x00', 0x42a81, 0x0) statmount$auto(0x0, 0x0, 0x1fe, 0x5) mmap$auto(0x0, 0x20005, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r1 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) read$auto(r1, 0x0, 0x80000000006) close_range$auto(r0, 0xffffffffffffffff, 0x100) signalfd$auto(r1, 0x0, 0x80) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mlock$auto(0xfbe8, 0xe2f) mlock$auto(0x7c88, 0x7fff) socket(0xa, 0x3, 0x3b) connect$auto(0x3, 0x0, 0x58) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card0/dummy_pcm\x00', 0x8f3b7a51b804b702, 0x0) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x181506, 0x0) ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0) write$auto(r3, 0x0, 0x208) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="2b00e2ffb78dc58964d9f9122d93ff2a4d0735d934b9e7a61678523bfb617934a9630a9ce1d04b02dc1fd97cdac315f645c449aefd807efcf12918c680ea0ce5d6a6b3a49dd9db4c1996f8590958a3e636466cf3468e223391c511f07bb9d7251e5fc4f632adf5c5d0f2e69d6f8d30280464dbdf880c4dcc070b377e4195fb3c21ab30f6e79790d7846a4d324705d45a88a8f2f91a9e9cae931d27366c0cd4d108fbec756f0630083e568722384853d0dec1355922cdfd64f6c6e45786e6b85e7bc38297df91a307a96f8ee8be498140da95cf975b6856e4b92e24eafd420c7555809143d6cc3607e98f014494", @ANYRES16=r5, @ANYRES8=r2], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) socket(0x2b, 0x800, 0x1) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) getrandom$auto(&(0x7f0000000440)='\x00', 0x5, 0x2) r6 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/apparmor/parameters/mode\x00', 0x321183, 0x0) pwrite64$auto(r7, &(0x7f0000000400)=']\x00', 0x3, 0xd) ioctl$auto_SNDCTL_DSP_SUBDIVIDE(r6, 0xc0045009, &(0x7f0000000040)) write$auto(0xffffffffffffffff, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d8) fallocate$auto(0xffffffffffffffff, 0x1, 0x9, 0x7fff) 1m14.639484893s ago: executing program 36 (id=3713): unshare$auto(0x40000080) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv6/conf/default/ignore_routes_with_linkdown\x00', 0x42a81, 0x0) statmount$auto(0x0, 0x0, 0x1fe, 0x5) mmap$auto(0x0, 0x20005, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r1 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) read$auto(r1, 0x0, 0x80000000006) close_range$auto(r0, 0xffffffffffffffff, 0x100) signalfd$auto(r1, 0x0, 0x80) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mlock$auto(0xfbe8, 0xe2f) mlock$auto(0x7c88, 0x7fff) socket(0xa, 0x3, 0x3b) connect$auto(0x3, 0x0, 0x58) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card0/dummy_pcm\x00', 0x8f3b7a51b804b702, 0x0) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x181506, 0x0) ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0) write$auto(r3, 0x0, 0x208) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="2b00e2ffb78dc58964d9f9122d93ff2a4d0735d934b9e7a61678523bfb617934a9630a9ce1d04b02dc1fd97cdac315f645c449aefd807efcf12918c680ea0ce5d6a6b3a49dd9db4c1996f8590958a3e636466cf3468e223391c511f07bb9d7251e5fc4f632adf5c5d0f2e69d6f8d30280464dbdf880c4dcc070b377e4195fb3c21ab30f6e79790d7846a4d324705d45a88a8f2f91a9e9cae931d27366c0cd4d108fbec756f0630083e568722384853d0dec1355922cdfd64f6c6e45786e6b85e7bc38297df91a307a96f8ee8be498140da95cf975b6856e4b92e24eafd420c7555809143d6cc3607e98f014494", @ANYRES16=r5, @ANYRES8=r2], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) socket(0x2b, 0x800, 0x1) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) getrandom$auto(&(0x7f0000000440)='\x00', 0x5, 0x2) r6 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/apparmor/parameters/mode\x00', 0x321183, 0x0) pwrite64$auto(r7, &(0x7f0000000400)=']\x00', 0x3, 0xd) ioctl$auto_SNDCTL_DSP_SUBDIVIDE(r6, 0xc0045009, &(0x7f0000000040)) write$auto(0xffffffffffffffff, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d8) fallocate$auto(0xffffffffffffffff, 0x1, 0x9, 0x7fff) 4.857776699s ago: executing program 4 (id=4052): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, r0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) socket(0xf, 0x3, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x20401, 0x0) acct$auto(0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x5, 0xfffff05e, 0x0, 0x0, 0x80000001) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb2, 0x401, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2506, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x3a32182}, 0xed7138b}, 0x2, 0x9) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) 4.0612559s ago: executing program 7 (id=4058): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001180), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@HWSIM_ATTR_REG_CUSTOM_REG={0x8, 0xc, 0x3}]}, 0x1c}, 0x1, 0x12, 0x0, 0x404c0c1}, 0x40000) 4.044502264s ago: executing program 0 (id=4059): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x2, 0x6, 0x0, 0x6) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/rpc/auth.unix.ip/content\x00', 0x2000, 0x0) pread64$auto(r0, 0x0, 0xf42c, 0x38) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/pci0000:00/0000:00:00.0/enable\x00', 0x18b042, 0x0) read$auto(0x3, 0x0, 0x1f40) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r2, &(0x7f0000000000)="c80d1b5d399b4d", 0xfdef) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_GET_MSRS(r3, 0x8140aecc, &(0x7f0000000180)={0x2, 0x0, [{0x2, 0x7e8, 0x4}, {0x8, 0x4, 0x8000000000000}, {0x2, 0x7, 0x10001}, {0x0, 0x7, 0x2}, {0x7, 0xfffffff8, 0x7}]}) socket(0xa, 0x2, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$auto(0xfffffff9, &(0x7f0000000040)=@prog_bind_map={r1, r2, 0x7}, 0x8000) ptrace$auto(0x4206, r5, 0x0, 0x200005) waitid$auto_P_ALL(0x0, 0xf, 0x0, 0x5, 0x0) ustat$auto(0x12, &(0x7f0000000340)={0x2, 0x80, "417acc606935", "df5f19b5a360"}) 4.012728522s ago: executing program 4 (id=4060): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/bond0/bonding/ad_aggregator\x00', 0x80500, 0x0) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/033/001\x00', 0x8002, 0x0) mmap$auto_usbdev_file_operations_usb(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x3) r2 = socket(0x2, 0x3, 0x2) setsockopt$auto(r2, 0x0, 0x8, 0xfffffffffffffffc, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000080)=""/28, 0x1c) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000140)) read$auto(0x3, 0x0, 0x8080) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/software/power/runtime_active_time\x00', 0x24a000, 0x0) sendfile$auto(r4, r3, &(0x7f0000000040)=0x7, 0x3) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000002780)=""/75, 0x4b) setsockopt$auto(r1, 0x3, 0x0, &(0x7f0000000100)='\'-+\x00', 0x7f) 3.867246567s ago: executing program 4 (id=4061): mmap$auto(0x0, 0x9, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) sendmsg$auto(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) (fail_nth: 5) 3.81941754s ago: executing program 7 (id=4062): acct$auto(&(0x7f0000000200)='/dev/virtual_nci\x00') mmap$auto(0x2f0, 0x20009, 0x80000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000080), 0xffffffffffffffff) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @host}, 0x55) listen$auto(0x3, 0x81) accept$auto(r0, 0xffffffffffffffff, 0xffffffffffffffff) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x14) socket(0x19, 0x80000, 0x303) socket(0x2, 0x3, 0x100) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2a, 0x2, 0x0) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sda\x00', 0x48001, 0x0) socket(0x3, 0x4, 0x0) socket(0xa, 0x2, 0x73) io_uring_setup$auto(0xa, 0x0) openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000000), 0x303a00, 0x0) socket(0x1e, 0x1, 0x0) pipe$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x500, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x10bb41, 0x0) 3.305253076s ago: executing program 7 (id=4063): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x2, 0x6, 0x0, 0x6) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/rpc/auth.unix.ip/content\x00', 0x2000, 0x0) pread64$auto(r0, 0x0, 0xf42c, 0x38) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/pci0000:00/0000:00:00.0/enable\x00', 0x18b042, 0x0) read$auto(0x3, 0x0, 0x1f40) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r2, &(0x7f0000000000)="c80d1b5d399b4d", 0xfdef) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_GET_MSRS(r3, 0x8140aecc, &(0x7f0000000180)={0x2, 0x0, [{0x2, 0x7e8, 0x4}, {0x8, 0x4, 0x8000000000000}, {0x2, 0x7, 0x10001}, {0x0, 0x7, 0x2}, {0x7, 0xfffffff8, 0x7}]}) (fail_nth: 5) socket(0xa, 0x2, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0) r5 = syz_clone(0x941b2411, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$auto(0xfffffff9, &(0x7f0000000040)=@prog_bind_map={r1, r2, 0x7}, 0x8000) ptrace$auto(0x4206, r5, 0x0, 0x200005) waitid$auto_P_ALL(0x0, 0xf, 0x0, 0x5, 0x0) ustat$auto(0x12, &(0x7f0000000340)={0x2, 0x80, "417acc606935", "df5f19b5a360"}) 2.923232117s ago: executing program 4 (id=4065): openat$auto_dma_buf_debug_fops_(0xffffffffffffff9c, &(0x7f00000000c0), 0x249982, 0x0) r0 = getpid() r1 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2a801, 0x0) poll$auto(&(0x7f0000000240)={r1, 0x20, 0x2}, 0x5, 0x104) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x2008000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x82002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000000100)="fb", 0x1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mount$auto(&(0x7f0000000280)='veth1_to_bridge\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='\x00', 0x7, &(0x7f0000000340)="336d2e8742921d21d5fc536fbc1966031ccdc90aec72e8ccd6de99a32296b164e46de9") timerfd_create$auto(0x8, 0x800) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/vxlan/parameters/udp_port\x00', 0x2400, 0x0) read$auto(r3, 0x0, 0x20) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0x1007ff, 0x7, 0x4, 0xffffffffffffffff, 0xa, "2af051a940800002000076cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) r6 = open(&(0x7f00000001c0)='./cgroup\x00', 0x80400, 0x42) r7 = open_by_handle_at$auto(r6, &(0x7f0000000200)={0x8, 0x2, "0200000000000000"}, 0x100004) r8 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x202, 0x0) sendfile$auto(r8, r7, 0x0, 0x6) bpf$auto(0x18, &(0x7f0000000380)=@bpf_attr_11={0x0, 0x9, 0x866b, 0x100005, 0x80000009, 0xfffffe01, 0xe6d9, r4}, 0x92) r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x54, r9, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_RADAR_BACKGROUND={0x4}, @NL80211_ATTR_IE_ASSOC_RESP={0x3a, 0x80, "76c7d42bb3e8a3b0f58df9651061b494963d6cee076bb24cfa37a7dec9743400a327d78658d8908846faa4ab4862025e3d6916e74684"}]}, 0x54}, 0x1, 0x0, 0x0, 0x51}, 0x4000040) capset$auto(&(0x7f0000000100)={0x20080522}, 0x0) r10 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x68140, 0x0) ioctl$auto(r10, 0x80000001, r5) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0x10000000fff}, 0x6, &(0x7f0000000180)={0x0, 0x8000}, 0x1000000005, 0x7f) 2.630385731s ago: executing program 0 (id=4066): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) pread64$auto(r1, 0x0, 0xa75, 0x4) (async) pread64$auto(r1, 0x0, 0xa75, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000000), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_SET_MESH(r0, &(0x7f00000005c0)={0x0, 0x9e, &(0x7f0000000580)={&(0x7f0000000100)={0x24, r3, 0x1, 0x70bd2c, 0x25dfdbfa, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x140000e4) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'veth0_to_bridge\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_5={@target_ifindex=r5, 0x7f, 0x9c, 0x0, 0x1, @relative_id=0x4, 0x80}, 0x96) (async) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_5={@target_ifindex=r5, 0x7f, 0x9c, 0x0, 0x1, @relative_id=0x4, 0x80}, 0x96) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000009c0), 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) sendmsg$auto_IPVS_CMD_SET_SERVICE(r6, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000005400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="014f873b33ad010a8c250200000008000180040001"], 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x4000000) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x1, 0x1, 0x0) bind$auto(0x3, 0x0, 0x6b) bind$auto(0x3, 0x0, 0x2) 2.389965631s ago: executing program 4 (id=4067): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r1 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)={0x14, r1, 0x1, 0x70bd31, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x24048084) madvise$auto(0x3, 0x0, 0x6) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x103003, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) r2 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r3 = io_uring_setup$auto(0x6, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(r3, 0x0, 0x4048810) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) io_uring_register$auto(0x2, 0x1e, &(0x7f0000000000), 0x1) pread64$auto(r2, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r4, 0x1261, 0x0) msgctl$auto_MSG_INFO(0x4b, 0xc, &(0x7f00000000c0)={{0x1, 0xee01, 0xee00, 0x80, 0xc, 0x7, 0x38}, 0x0, 0x0, 0x40, 0x56, 0x5, 0xf8, 0x8, 0x1, 0x0, 0x5}) 2.325582503s ago: executing program 7 (id=4068): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) (async) r0 = socket(0x2, 0x2, 0x0) (async) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x20401, 0x0) (async) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0x166, 0x9, 0x2, 0x4000000000000d]}, 0x0) (async) pwrite64$auto(r1, &(0x7f00000006c0)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00,\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t,\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\f,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00~=\xc7\x8c\xbdR\x86\xc8\'\x0fA\xbe&g\xcc+Q\x00\v\xe8\xddk\x152\xfapO\xc7\xc7\x9b\x8d;w\xd0\xaf\x9c\xbd\x91\x8c7\x9a\xafx\x85\xcdy~O\xe0j\x19\xf1\x82\x7f_|\x1f\x9d\xf0d\xf95\xa3\x03Y\xea?eS\xfc\x11I\x8czV.QL8\x12\x8d\xb5S\x17\xcf\x03\xe3K\x9ak\x9e3(\x1f*6>\n\xf9\x89*p2\xce\x8cO\x98\xb2\x8d\xe7/\xb9\xfbY\xbem\x10\xedL\n\\\xf9\xeci\xef\xf9\xf3\xf9o.\x8b9\xfd\xa36\x91\xf80\xff\"\x93Il\xaf\xdd}\x80T\xb2\"\x13\x1c\xca\xf3\x1a!v\x13\xe7\x14k\xa1\xa5>\xa9\xc7\b\x04T\x0f\x8b\xe3\x8am\xb7\x03b\xc6\x98\xfblO\x8dA\xad\xf5\xe9H\xbcUs', 0x81, 0x9) ioctl$auto_BTRFS_IOC_ADD_DEV(r1, 0x5000940a, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) bind$auto(r0, &(0x7f0000000240)=@sco, 0xfffffffb) (async) socket(0x8d2231b74d3a9361, 0xa, 0x10) (async) mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) (async) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async) socket(0x2, 0x80802, 0x0) (async) r2 = socket(0x10, 0x2, 0x0) (async) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x2, 0x7, 0x48, 0x7ff, 0x5, 0x7, 0x4, 0x6, 0x8, 0x3, 0x5, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x80, 0x100000000, 0x800000, 0x7, 0x8, 0x200, 0xfffffffd, 0x84, 0x0, 0x6, 0x2, 0x0, 0x0, [0x0, 0x1ff, 0x1, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8003, 0x4000000, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x20000000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xec4e, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x24, 0x4008) 2.073741006s ago: executing program 0 (id=4069): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xffffffffffffffff, 0x53b9) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) connect$auto(r0, &(0x7f0000000080)=@can={0x1d, r1}, 0x3) r2 = socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) lseek$auto(0xffffffffffffffff, 0xffffffffffffbaeb, 0xcd06) mmap$auto(0x0, 0x20009, 0x4000000000db, 0xeb1, 0x400, 0x8000) sysfs$auto(0x2, 0x10000000000002a, 0x81) r4 = io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x8, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x52, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) io_uring_register$auto(r4, 0x15, 0x0, 0x9) sendmsg$auto_ETHTOOL_MSG_EEE_SET(r2, 0x0, 0x4048010) prctl$auto(0x5, 0x4, 0x0, 0x3, 0x0) write$auto(r3, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/mem\x00', 0x402, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x8}, 0x1) sendmsg$auto_NFC_CMD_DEV_DOWN(r5, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)={0x1b8, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NFC_ATTR_SE_APDU={0x5b, 0x19, "f43eb1ee285663e50cc539f6d3474570dcd30ded34a3d63710c58e12a94450a3de5c364628ec282c5ef055610061e01a1ed7c6cbb5e0822dee239af46082b83efd5b8cda558b8bfa9429e9b8c7c16407fb41da089e4585"}, @NFC_ATTR_FIRMWARE_NAME={0xf, 0x14, 'netdevsim0\x00'}, @NFC_ATTR_SE_APDU={0x91, 0x19, "1a538841d7792d85d15d0592b989b37f660d684c30483185bf4441f273b5e236249c0551b8fb7f707784613484c00f560460df55ea5065bfe151315019ff26dba48db06dd8c82bc574737bd9a96666956af973d9c517b655b178be142b5f3ebe132482f923da11e493a964b13522a5c26665b7b22d26361f0088b990ae1ef8bbf7e2280608e8f51754b81b6990"}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xc}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x7}, @NFC_ATTR_VENDOR_DATA={0x92, 0x1f, "1575a0bd144afebb8788920ffabc531beb0e6c42cc25af25d433e75c639e3ab2b48ad075e026f748df1a1fe9e0f90b395f7d3967e765e6449e925f1752bccff2fcdb770c8038cc80d09fa168c24c2e59a268e4d4a959195b596351a8b107556f3ea97ab42b0eb787d310eb88e541433698ec66418598e3aea7e99144ea9ec93969223f2c17d28f5819a508c56a63"}]}, 0x1b8}}, 0x804) write$auto(0x3, 0x0, 0xffd8) modify_ldt$auto(0x11, 0x0, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x7) r6 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r6, 0xc004743e, 0x0) 1.411883654s ago: executing program 0 (id=4072): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001180), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@HWSIM_ATTR_REG_CUSTOM_REG={0x8, 0xc, 0x3}]}, 0x1c}, 0x1, 0x20, 0x0, 0x404c0c1}, 0x40000) 1.25763364s ago: executing program 7 (id=4073): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/block/ram3/queue/iostats_passthrough\x00', 0x80202, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x80040, 0x40, 0xe}, 0x18) fremovexattr$auto(r1, &(0x7f0000000000)='system.posix_acl_access\x00') r2 = syz_clone(0x52044200, 0x0, 0xffffffffffffffa7, 0x0, 0x0, 0x0) ptrace$auto(0x80000001, r2, 0x200000000000001, 0x26c3) 1.146182841s ago: executing program 8 (id=4074): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001980)={0x3c, r1, 0x1b, 0x70bc26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x4}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}, @OVS_PACKET_ATTR_MRU={0x6, 0x9, 0xfffc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ptycd/uevent\x00', 0x210100, 0x0) 1.117382438s ago: executing program 0 (id=4075): mmap$auto(0x0, 0x9, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) sendmsg$auto(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) (fail_nth: 6) 1.108861336s ago: executing program 7 (id=4076): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x2, 0x6, 0x0, 0x6) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/rpc/auth.unix.ip/content\x00', 0x2000, 0x0) pread64$auto(r0, 0x0, 0xf42c, 0x38) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/pci0000:00/0000:00:00.0/enable\x00', 0x18b042, 0x0) read$auto(0x3, 0x0, 0x1f40) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r2, &(0x7f0000000000)="c80d1b5d399b4d", 0xfdef) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x11, 0x80000, 0xa2) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_GET_MSRS(r3, 0x8140aecc, &(0x7f0000000180)={0x2, 0x0, [{0x2, 0x7e8, 0x4}, {0x8, 0x4, 0x8000000000000}, {0x2, 0x7, 0x10001}, {0x0, 0x7, 0x2}, {0x7, 0xfffffff8, 0x7}]}) socket(0xa, 0x2, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0) r5 = syz_clone(0x941b2411, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$auto(0xfffffff9, &(0x7f0000000040)=@prog_bind_map={r1, r2, 0x7}, 0x8000) ptrace$auto(0x4206, r5, 0x0, 0x200005) waitid$auto_P_ALL(0x0, 0xf, 0x0, 0x5, 0x0) ustat$auto(0x12, &(0x7f0000000340)={0x2, 0x80, "417acc606935", "df5f19b5a360"}) 941.301972ms ago: executing program 8 (id=4077): r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x202000, 0x0) pread64$auto(r0, &(0x7f0000000040)='/\x00', 0x100000001, 0x5) (async) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0xa02, 0x0) r2 = openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/error_log\x00', 0x141400, 0x0) write$auto_tracing_err_log_fops_trace(r2, &(0x7f0000000100)="b04255ddfa4ef40267bc349aadb091a93a49cc2e0073c6df98606d5bab2a27a277258a6258dbb91efbe10cbcab5f80d68613b8b833b0ade95f1e315bddaf63b17a90f1edb53fc8dce77cf891ed4519032651e6e199d8ad7b2f5e1123f0fab427ef637ce11b6e0084ab55edbc8bb34bec19e9e8286c", 0x75) (async) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) ioctl$auto_PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000200)={0x0, &(0x7f00000001c0)={0xa24, 0x5, 0x3, @inferred=r2}}) sendmsg$auto_GTP_CMD_NEWPDP(r4, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast2}]}, 0x34}}, 0x0) (async) write$auto(r4, &(0x7f0000000340)='/sys/kernel/tracing/error_log\x00', 0x10000) (async) unshare$auto(0x9) (async) r5 = open_by_handle_at$auto(r4, &(0x7f0000000380)={0x9c, 0xc, "60420e45ae51ee79b519215dc3645400bb2f507b97bde828e4dc992f898ab2c78ea3e65fd5b6de59c4dcbb79f140426ecd70c736b6b24e4a82a2c55d3b5b4e259f31ad0acf6ff9a5067060ae3e1e5e0e02c6c377973b25fc6ac1f6da427b2cbdcbe37fe13fd896883fda47ecdd6bcf08fba0b0f7b5040226cb37e2fa424583c0b10bc6c574a4ff17e799c4d0bd72cdd75d2efad4f1eb8a56ca7dedef"}, 0x8001) (async) r6 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000480), r4) (async) r7 = geteuid() sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000ac0)={&(0x7f00000004c0)={0x5d8, r6, 0x4, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [@typed={0x8, 0x25, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x4, 0x3c}]}, @NBD_ATTR_SOCKETS={0x242, 0x7, 0x0, 0x1, [@nested={0xb3, 0x146, 0x0, 0x1, [@nested={0x4, 0x1a}, @nested={0x4, 0x13}, @generic="77c3ef5c38126e863a618e0345ab5c64d9aa9866fec08c1e3304cec265cbaa5897dee2f55ea2165517769f91394873943314c70409a655971a9af80a4d5e81c8a55bd80597d12791636dffccdd849885017bc34b9442e8c0b1cdff952303b8a88a0f15e65f", @typed={0x4, 0x4d, 0x0, 0x0, @binary}, @generic="ec5c009cea21a45466af0aaa2a32030e7b507fa4dd52293c8a5253abafd5b142c9465fc80dfa19d40c61ce875533eb3b625bde821e2c", @nested={0x4, 0x12a}, @typed={0x4, 0x68}]}, @generic="e4753192e878d287ffd81439708bdc2989331cfb63b95ed73e7a628dcfdfafad5ab9c16ae4ceb5a45bb00f97d5fda32b36b14570b3b04e79b58862610dd186d4145393fd1b3dba6f97865c4bdb19af60f7ef19f436e9d45bf9327855db94d3e0406a77466c459280c122ed32e3159f2e998a82d9e265b67dbec076f5ddff4c0b088ed2443d19c02e7baec0c1ecf7b2936b287fe4d631a1a4581ea439a20e4203f07480df40c26430e2829a8c24b8d959d26bad84b71d3a113c5cbcaeda0980b2572d728242665800783c4759e7587ee6076dd135ea876c3a82a48d4ca578", @typed={0x8, 0xc1, 0x0, 0x0, @u32=0xb4cd}, @nested={0x2c, 0xd3, 0x0, 0x1, [@nested={0x4, 0x40}, @typed={0xc, 0xed, 0x0, 0x0, @u64=0x8}, @typed={0x8, 0xec, 0x0, 0x0, @uid=r7}, @nested={0x4, 0x90}, @nested={0x4, 0xcd}, @typed={0x8, 0x14f, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @nested={0x14, 0x109, 0x0, 0x1, [@generic="38936098", @typed={0x8, 0x85, 0x0, 0x0, @ipv4=@multicast2}, @nested={0x4, 0x3c}]}, @typed={0x62, 0x6e, 0x0, 0x0, @binary="f0cf012a7d3c3061317652a80865730eae490b5ec235200647389a112cb5f222cd669fc24cbb26e167d47757a7e556df341fd3ce5a48fd29270a9fb459b335037f8d6e4cf8361cae2242555b4b3b9bcedb783721db23b915e736829b65f8"}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x93}, @NBD_ATTR_BACKEND_IDENTIFIER={0x23, 0xa, '/sys/kernel/debug/sync/sw_sync\x00'}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, ']:'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x8000000000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x401}, @NBD_ATTR_DEVICE_LIST={0x305, 0x9, 0x0, 0x1, [@generic="0997c3f55ad853eb0914b435d88bb29f", @generic="64eee375cbd11aa19d3b96a8365a86a87e8aa065d761063b378cfd0ae550de12c55bd4d53938ae47a27ca4ecc6a3782e4efbbdbaa91ed2f4a85eaa509ef0150d7046128b77e46af2c41eb3c14f6b21d3", @generic="58f94cc33bff50344e0ac4381352982a94a9cc2d3ddb45b478268f78a454b6e229356b7d26cce38bad4f3f81280238e4a2deca5456f3f05f6d066410e71a7679d8e8cb8bab0b47a12bff71457e9adb75cdc67cf86a8e3e8c425b5877e33f549c9882c2a6543e526855e5676afaa91d4268c24f70fda4f938c5e3b99d57515a663e4a7ddd29a8346093a4bba0b1f34233243a474a52eaa6c1e4c1c87ca6c3d4d5c655519555c9c6f630af3da966e29efbd05dedaba1e6f7043b78655435d716933568a2f5363d1d6da022e8b1f45ee4257b32fccb236686bfb501402772dc80f523a8255083ebb92581", @nested={0x1aa, 0x41, 0x0, 0x1, [@nested={0x4, 0x89}, @nested={0x4, 0x8c}, @nested={0x4, 0xaa}, @generic="27afd61a89c9642cbca9ae6fd57311bffc860f4aed0c8628cf065f5069262c6fb09a6b3c0c10ac604e85064e67ffff089ff561acce729c97ab3aec137ac00b1b7be86a38712c29ef82aefc0cec1f6f845dde9cecd54eb91aad04469bd43293ef5b46611fcff4a7b325208a8417df19f65554832d5898b214e6547b8271ddfed7915fabb4ed02f0b4d7cea1657579959385eeb8813a1be2a4a05fd9bb0b48f1b68eebb3fed9e38dab", @generic="a49b655111f2837f673c96695eaf23d91ab72b39cb428e63f0f3574c6fb9a5de91211f0c1c4f159e36c1f54ecde94108976df49a3ddf104f3a358aef2dfb7580b0a0ebcaaea0b38940ab4105435d17ff55f63dfe8c84023aa05ad5e52796ae14e0a473f5e5e0b3ade0ffdaa876f2187e84a80e215862792bfb109084b576cac41af988f820170e44bcdafc26bad1959891c54c6af2cdbea822fb3a947084b523450cc784461bcb1cb84336643d411ad890b5b94cac60a293141365c65e6f63e670d03fb0b9bb3fd20f6f0e76cfb65e052c63e13470ea46b4f134bda99a2f5cce536b3d69aae3d900d6b45f476e4e", @nested={0x4, 0x41}]}, @typed={0xc, 0xad, 0x0, 0x0, @u64=0x1}]}]}, 0x5d8}, 0x1, 0x0, 0x0, 0x4000}, 0x20) (async) fsync$auto(r1) (async) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000b80), r4) sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x98, r8, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_MLO_TTLM_DLINK={0x7e, 0x148, "d49012a03f184c667362e23f011b52730da22ccd5ea4431c9eac547a969f5dd37fa6d0f2f2d41ea51a886ccdf550d6b2c00476b0333196c4e223827a51b8e4ff823534b66fabf6f1e5a682a76221e7ef8aad03c77849336fec8021998e9564ceb35096fcaf6053267bde1f1c6fc454bcac6d2c62e9d3654cf282"}, @NL80211_ATTR_REG_INDOOR={0x4}]}, 0x98}, 0x1, 0x0, 0x0, 0x4004000}, 0x8090) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000d00), 0x10600, 0x0) (async) r9 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000d40), 0x10800, 0x0) (async) r10 = io_uring_setup$auto(0xfffffffd, &(0x7f0000000d80)={0x2, 0x8, 0xf, 0xab, 0x7, 0x6836, r2, [0x1, 0xffff, 0xb79], {0xfffffff7, 0x2, 0x80000001, 0x21e3, 0x973, 0x7fffffff, 0x0, 0x7, 0x100}, {0x714, 0x99, 0x6, 0xe4, 0xe, 0x3, 0xc, 0x10, 0x1}}) r11 = clone$auto(0x599, 0x1, &(0x7f0000000e00)=0x8000, &(0x7f0000000e40)=0x5, 0x2b) syz_open_procfs$namespace(r11, &(0x7f0000000e80)='ns/cgroup\x00') (async) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r10, 0xc1105517, &(0x7f0000000ec0)={{@inferred=r11, 0x8, 0x8e8, 0x8, "f6df3b41f4b28110748d40ef621eb3c7ba53a632a0120650dbb7f007246bf82fc2871fb0fe72bc7355a4f78b", @inferred=r11}, 0xffff101c, 0x3, 0x9, @inferred=r11, @reserved="11e4bb1340476a9ab92b852e91ac28073529406c9ed660ad2cc61309c65075aa0859a3ad277f804227623b89f3c7e842e8b6d306b525824570c74708a0011ac963f7610abf77a745add8dfcfb99fcb633b6c89204f24d196adf219f1c422edc8eb7b7331f1680eb125d98c2d96338044b465955687fd0a8a02806fa4df3c6224", "f2f45d44a558ed5702325cbeb4de9f063e858ba138ae667d1a381e913e561965da8f1f26db6c56e72d936e9142a03d8634f9bd8a0b11fd40400228b7bf40dc64"}) waitid$auto_P_PID(0x1, r11, &(0x7f0000001080)={@siginfo_0_0={0x4, 0x40, 0x7fffffff, @_rt={r12, r7, @sival_ptr=&(0x7f0000001000)="eddc7b08229541d6b13891cb889b76b765535eb76991e4f04bb1f7492835c8c146a60d20547769beb5ea6d36ec06df3533c0c38b6e323a12847770d453085ee6336da1ccd2c29e670c597ef74d36410320385a8b5cfe60543f5debe3524feac23523fe82fad0343960a4fcbce0"}}}, 0xe75, &(0x7f0000001100)={{0x1, 0xfffffffffffffff1}, {0x628000000, 0x33d1f544}, 0x0, 0x8, 0x0, 0x2, 0xb088, 0x9, 0x9, 0x4, 0x4, 0xd2000000000000, 0x455, 0x400, 0xe, 0x6}) (async) write$auto(r9, &(0x7f00000011c0)='&]/\x00', 0x0) (async) getrandom$auto(&(0x7f0000001200)='\xde:\x00', 0x10001, 0x5) (async) r13 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000001280), r5) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(r4, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, r13, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000804) bpf$auto_BPF_OBJ_PIN(0x6, &(0x7f0000001380)=@bpf_attr_4={0x100000001, r1, 0x73c, r4}, 0xb239) (async) statmount$auto(&(0x7f0000001440)={0xa54e, @inferred=r0, 0x7f, 0x9, 0x1}, &(0x7f0000001480)={0x9, 0x2, 0xdee, 0x0, 0x2, 0x8, 0x6, 0x2, 0x1, 0x6, 0x1, 0x17, 0xa33, 0x96, 0x680d55f1, 0x9, 0x5ca, 0x80000001, 0xb7, 0x9, 0x7, 0xfc, 0x0, 0x800, 0xb506, 0x1ff, 0x800, 0xc370, 0xfffffff8, 0x7, 0x5, [0x32, 0x7ff, 0xf18, 0x4f2b, 0x7, 0x8000000000000000, 0x8, 0x4, 0x9, 0x6b2, 0x6, 0x8000000000000001, 0x7fffffffffffffff, 0x2, 0x3a, 0x2, 0xff, 0x2, 0x3, 0xfff, 0x1, 0x9, 0x8, 0x6, 0x9, 0x2, 0x3ff, 0x8f, 0x0, 0xee, 0xb4f0, 0x8, 0x200, 0x3, 0x697, 0x5, 0x7, 0x4af4038b, 0x363, 0x4, 0x2, 0x6, 0x4], "45247f7da6fc8a004e501376e979da62b47e05f5c7aead1b681bed0c464e8f62b3e853bf132f7f9bcb287179d790a8fcbc10ce9ddcfa0e7c9761f66023817059d4e773ad8699c997656b71fa00bf537fad697cb00e18374e4731e8cfc046e5e0a5ddae4ec3cbcf1acf1286c111fed313cc471aa06c8f3a3f598c3de73722cd0317fa721f919e6b96db653385aa256c6ff5f5a54e3e9e250f20148c"}, 0x5, 0x5) 846.741657ms ago: executing program 8 (id=4078): mmap$auto(0xfffffffffffffffe, 0x2020009, 0x100003, 0x18, 0xfffffffffffffffa, 0x0) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x325f01, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x5) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x0) (async) socket(0xa, 0x1, 0x0) socket(0x2, 0x1, 0x84) listen$auto(0x3, 0x81) accept$auto(r0, 0x0, 0x0) (async) accept$auto(r0, 0x0, 0x0) listen$auto(0x3, 0x200) (async) listen$auto(0x3, 0x200) shutdown$auto(0x200000003, 0x2) (async) shutdown$auto(0x200000003, 0x2) ioctl$auto(r1, 0xc008af12, r1) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/event1\x00', 0x40001, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x5) (async) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x5) fcntl$auto(0x3, 0x4, 0xa553) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f00000002c0)={{@raw=0x80, 0x5, 0x7, 0x1, "4941aa833e2fc65b6b3cf7cec76d6778ad00ac3cda35ba9c2b2d43eeb0dc59c8dd3500f11581916caa0d3053"}, 0x4, 0xfffffff9, 0x1, @inferred, @integer64={0x8, 0x1, 0xf}, "6cc1888a6393f1b4285854c5368de438f8cc142ef6df1259b05ba1183bedbd31b642b4051bc7955610c61c329794e5311121c760cb8211c78e6947a99807bcc1"}) mmap$auto(0x101, 0x1, 0xb, 0x17, 0x401, 0x6) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0xb) madvise$auto(0x12, 0x3003f0, 0x3) clone$auto(0xff2d, 0xffff, &(0x7f0000000080)=0x9, &(0x7f00000000c0)=0x8, 0x4) (async) clone$auto(0xff2d, 0xffff, &(0x7f0000000080)=0x9, &(0x7f00000000c0)=0x8, 0x4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/nilfs2/features/README\x00', 0x40, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/nilfs2/features/README\x00', 0x40, 0x0) r3 = gettid() mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) times$auto(0x0) (async) times$auto(0x0) rt_sigqueueinfo$auto(r3, 0xe, &(0x7f0000000000)={@siginfo_0_0={0x76bb, 0x3, 0x4, @_sigfault={0x0}}}) 561.166184ms ago: executing program 8 (id=4079): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000002740)='/sys/devices/virtual/mtd/mtd0/mtdblock0/trace/start_lba\x00', 0x2000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vhci_hcd.0/detach\x00', 0x101001, 0x0) write$auto(r1, &(0x7f0000000000)='0\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000002780)=""/75, 0x4b) 443.069192ms ago: executing program 4 (id=4080): openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/kernel/watchdog_cpumask\x00', 0x141241, 0x0) write$auto(0x3, 0x0, 0xfdef) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$auto_ILA_CMD_ADD(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x20, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@ILA_ATTR_LOCATOR_MATCH={0xc, 0x3, 0x40024000000000}]}, 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x0) write$auto(0x1, 0x0, 0x80000000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) modify_ldt$auto(0xd, 0x0, 0x4) semget$auto(0x6, 0x100001, 0xcb51) socketpair$auto(0x7, 0xf, 0x1, 0x0) acct$auto(&(0x7f00000000c0)='/proc/net/ipv\a\x00c\x00n\x05\x00\x00\x00\x00\x00\x00\t\x01\x05\xef\x16\x06\xd91\x00\x00\x00\x00\x00\x00\xda\x1a?\xde\xe9LJ^\xc6\x98-\xb3\x8e\xa8\xfc\x9e\xfc*\x18 \x9b\xdaq\x8b\xc9X\x9d\x06\xaf\xb6\xcf?\xa1\xd0Cadu\xf21\x96\xd0#{\x1b\x99\xe3\xe9\x00\x00\x00\x00\xf6\xfb\xbe\xf7\xa1\xbf\x89\xb2\\f\xa6J\xb6\xc5\x00\xc9\x00\x00\x8a\xcb\xe1t\xecU\x9e\x00\x00\x00\x00\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r3, 0x0, 0x800) socket(0x5, 0xa, 0x25) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r4, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) ioctl$auto_TIOCVHANGUP(r5, 0x5437, 0x0) ioctl$auto_TIOCVHANGUP(r5, 0x5437, 0x0) epoll_create$auto(0x2) sendmsg$auto_ILA_CMD_FLUSH(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@ILA_ATTR_CSUM_MODE={0x5, 0x7, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x40008c4) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000440), 0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0005, 0x17) 379.794097ms ago: executing program 8 (id=4081): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'hsr0\x00', 0x0}) connect$auto(r0, &(0x7f0000000080)=@can={0x1d, r1}, 0x3) r2 = socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) lseek$auto(0xffffffffffffffff, 0xffffffffffffbaeb, 0xcd06) mmap$auto(0x0, 0x20009, 0x4000000000db, 0xeb1, 0x400, 0x8000) sysfs$auto(0x2, 0x10000000000002a, 0x81) r4 = io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x8, 0x8, 0x80000000, 0x100, 0x8, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x52, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) io_uring_register$auto(r4, 0x15, 0x0, 0x9) sendmsg$auto_ETHTOOL_MSG_EEE_SET(r2, 0x0, 0x4048010) prctl$auto(0x5, 0x4, 0x0, 0x3, 0x0) write$auto(r3, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x101000, 0x180) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/mem\x00', 0x402, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x8}, 0x1) write$auto(0x3, 0x0, 0xffd8) modify_ldt$auto(0x11, 0x0, 0x10) pwrite64$auto(0xc8, &(0x7f00000001c0)='\vX\xb5o\x91p\xff\x1eRN8\x99\x00\b\x00\x14\xaf\f\x94\x1a\xd3\xd3\x1d\xf8\xbebR\xddL\'\x03\xf1`\x9f5\xc0|<\x89\x85c\nn-$\xf9\xa4\xf8\x15\xdd\xac\x00\x00\x00\x00\x00\x00\"\x01\x0e\xa4\xdf\xdav\x1c\xff\xeeq\xf0\xcd\xfcH\xa2@X\xb9_\x9d*\xd1\x14^\xbe\xa2\x00\x00\x00\x01\x00\x00\x00nb\xa1\a\x15\xaf\xaa\x12\x04K_\x85\xd8\x17]\xfc\xc3d\xd6\x84\x16\xf4\xc3\xa6|{\xdd\xc74\xa0\x19WA\x90\x1b\xe5\x16\xc6\xf2\xcfX\nI\xce\xfb\xf2\x82\x89C', 0xfdf0, 0x4ffffffffffc) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r5 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r5, 0xc004743e, 0x0) 100.875309ms ago: executing program 0 (id=4082): openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) r0 = epoll_create$auto(0x4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace_marker_raw\x00', 0x401, 0x0) write$auto(0x3, 0x0, 0x5c8) statmount$auto(0x0, &(0x7f0000000180)={0x770, 0xfffffffe, 0x8, 0x4, 0x4005, 0x0, 0x5, 0x400, 0x7, 0x9, 0x6, 0x6, 0xa, 0x11ffffffffffb, 0xb2, 0x2, 0x6, 0x10, 0x80, 0x7ff, 0x8000, 0x1, 0x1, 0x80000001, 0x9, 0xbca7, 0x4, 0x0, 0x0, 0x0, 0x694, [0x2, 0x6, 0x0, 0x5, 0x0, 0x0, 0x20000000000, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffc01, 0x7fffffff, 0xfffffffffffffffb, 0x0, 0x9, 0x2000000, 0xfffffffffffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x1, 0x0, 0x7fffffff, 0x0, 0x0, 0x20000000000000, 0x0, 0x1000000000000200, 0x0, 0x400, 0x96, 0x4000000000009, 0x4, 0xe17, 0x0, 0x6]}, 0x1fe, 0x1) r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioprio_get$auto_IOPRIO_WHO_PROCESS(0x1, 0x0) writev$auto(r0, &(0x7f0000000100)={&(0x7f00000000c0), 0x80000000}, 0x9) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x480001, 0x0) write$auto(r2, 0x0, 0x100000a3d9) r3 = getpgid(0x0) sendmsg$auto_IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="70020000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="0c008480080057d9", @ANYRES32=0x0, @ANYBLOB="0800d500e000000200b30003807aed0671370ab6ea6b628171ef438ca4fb8654d40af28ff7888699a19425ddfd9edea5a0bce73f6ac47232f770fbd9b6e3b419133f8ac4d989375c73ad572a199c772b90a5b4629725b2ca369c84bf05c5a1f75d9dbbed5dc91709cfbc5a195069a3e7b6a3ac6d3fc4e99fd855c2c9f31a46fbbe23cf070f6f02ea14d13c7a3f7c53fe9e566bda1eb1a424071035151800ac801400c2000000000000000000000000000000000108002a00", @ANYRES32=r3, @ANYBLOB="0008000600b0720000"], 0x270}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x40003b, 0x1, r3, 0x5, 0x10000000000007) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) ioctl$auto_KVM_CHECK_EXTENSION(r4, 0xae03, 0xf4) madvise$auto(0x0, 0xffffffffffff0005, 0x19) timerfd_gettime$auto(0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x19, 0xffffffffffffffff, 0x28000) madvise$auto(0x0, 0x2003f0, 0x15) ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffffffffffd03, &(0x7f00000001c0)) socket(0x2, 0x1, 0x106) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdc, 0xeb5, 0x401, 0x41) 0s ago: executing program 8 (id=4083): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8000, 0xffff) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x25, 0x0, 0x1) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/tracing_cpumask\x00', 0x8301, 0x0) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x1) getsockopt$auto(r0, 0x40000000029, 0x48, 0xfffffffffffffffe, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x8201, 0x8, 0x0, 0xc, 0xe3, 0x4e, 0x3}, 0x6f4) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000040)='/proc/kmsg\x00', 0x20d00, 0x0) lseek$auto(0x3, 0x8, 0x1) r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$auto_RTC_PARAM_GET(r1, 0x40187013, &(0x7f0000000100)={0x1, @ptr=0x10000, 0x1}) kernel console output (not intermixed with test programs): [T24453] [ 1076.832127][T24511] FAULT_INJECTION: forcing a failure. [ 1076.832127][T24511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1076.938965][T24511] CPU: 0 UID: 0 PID: 24511 Comm: syz.8.3892 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1076.939006][T24511] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1076.939014][T24511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1076.939023][T24511] Call Trace: [ 1076.939028][T24511] [ 1076.939034][T24511] dump_stack_lvl+0x100/0x190 [ 1076.939060][T24511] should_fail_ex.cold+0x5/0xa [ 1076.939076][T24511] _copy_from_user+0x2e/0xd0 [ 1076.939098][T24511] write_ldt+0xfd/0xd40 [ 1076.939120][T24511] ? __fget_files+0x21f/0x3d0 [ 1076.939139][T24511] ? __pfx_write_ldt+0x10/0x10 [ 1076.939159][T24511] ? fput+0x79/0x100 [ 1076.939178][T24511] ? ksys_write+0x1ac/0x250 [ 1076.939195][T24511] ? __pfx_ksys_write+0x10/0x10 [ 1076.939216][T24511] __x64_sys_modify_ldt+0xdb/0x170 [ 1076.939238][T24511] do_syscall_64+0x106/0xf80 [ 1076.939257][T24511] ? clear_bhb_loop+0x40/0x90 [ 1076.939275][T24511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1076.939290][T24511] RIP: 0033:0x7fc27739bf79 [ 1076.939302][T24511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1076.939317][T24511] RSP: 002b:00007fc27828c028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 1076.939331][T24511] RAX: ffffffffffffffda RBX: 00007fc277616090 RCX: 00007fc27739bf79 [ 1076.939341][T24511] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000011 [ 1076.939349][T24511] RBP: 00007fc27828c090 R08: 0000000000000000 R09: 0000000000000000 [ 1076.939357][T24511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1076.939366][T24511] R13: 00007fc277616128 R14: 00007fc277616090 R15: 00007fff6784fc38 [ 1076.939385][T24511] [ 1077.494844][T24542] FAULT_INJECTION: forcing a failure. [ 1077.494844][T24542] name failslab, interval 1, probability 0, space 0, times 0 [ 1077.585241][T24542] CPU: 0 UID: 0 PID: 24542 Comm: syz.8.3897 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1077.585275][T24542] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1077.585283][T24542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1077.585292][T24542] Call Trace: [ 1077.585297][T24542] [ 1077.585303][T24542] dump_stack_lvl+0x100/0x190 [ 1077.585330][T24542] should_fail_ex.cold+0x5/0xa [ 1077.585347][T24542] should_failslab+0xc2/0x120 [ 1077.585367][T24542] __kvmalloc_node_noprof+0xfa/0xa00 [ 1077.585385][T24542] ? seq_read_iter+0x819/0x1270 [ 1077.585406][T24542] seq_read_iter+0x819/0x1270 [ 1077.585430][T24542] kernfs_fop_read_iter+0x46c/0x610 [ 1077.585449][T24542] ? rw_verify_area+0xce/0x6d0 [ 1077.585464][T24542] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 1077.585483][T24542] vfs_read+0x825/0xb30 [ 1077.585507][T24542] ? __pfx_vfs_read+0x10/0x10 [ 1077.585536][T24542] ksys_read+0x12a/0x250 [ 1077.585553][T24542] ? __pfx_ksys_read+0x10/0x10 [ 1077.585575][T24542] do_syscall_64+0x106/0xf80 [ 1077.585595][T24542] ? clear_bhb_loop+0x40/0x90 [ 1077.585613][T24542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1077.585628][T24542] RIP: 0033:0x7fc27739bf79 [ 1077.585641][T24542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1077.585656][T24542] RSP: 002b:00007fc2782ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1077.585670][T24542] RAX: ffffffffffffffda RBX: 00007fc277615fa0 RCX: 00007fc27739bf79 [ 1077.585679][T24542] RDX: 000000000000004b RSI: 0000200000002780 RDI: 0000000000000003 [ 1077.585688][T24542] RBP: 00007fc2782ad090 R08: 0000000000000000 R09: 0000000000000000 [ 1077.585697][T24542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1077.585705][T24542] R13: 00007fc277616038 R14: 00007fc277615fa0 R15: 00007fff6784fc38 [ 1077.585725][T24542] [ 1079.143385][T24567] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1079.479882][T24558] FAULT_INJECTION: forcing a failure. [ 1079.479882][T24558] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1079.566140][T24558] CPU: 0 UID: 0 PID: 24558 Comm: syz.0.3899 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1079.566174][T24558] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1079.566188][T24558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1079.566196][T24558] Call Trace: [ 1079.566210][T24558] [ 1079.566216][T24558] dump_stack_lvl+0x100/0x190 [ 1079.566241][T24558] should_fail_ex.cold+0x5/0xa [ 1079.566258][T24558] get_futex_key+0x106f/0x1620 [ 1079.566284][T24558] ? __pfx_get_futex_key+0x10/0x10 [ 1079.566304][T24558] ? lock_acquire+0x17c/0x330 [ 1079.566325][T24558] futex_wake+0xea/0x530 [ 1079.566348][T24558] ? __pfx_futex_wake+0x10/0x10 [ 1079.566365][T24558] ? exit_mm_release+0x19/0x30 [ 1079.566386][T24558] do_futex+0x32b/0x350 [ 1079.566400][T24558] ? __pfx_do_futex+0x10/0x10 [ 1079.566413][T24558] ? __might_fault+0xc5/0x140 [ 1079.566434][T24558] mm_release+0x24a/0x2f0 [ 1079.566456][T24558] do_exit+0x675/0x2a30 [ 1079.566475][T24558] ? __pfx_do_exit+0x10/0x10 [ 1079.566490][T24558] ? do_raw_spin_lock+0x128/0x260 [ 1079.566507][T24558] ? find_held_lock+0x2b/0x80 [ 1079.566527][T24558] ? get_signal+0x7e0/0x21e0 [ 1079.566550][T24558] do_group_exit+0xd5/0x2a0 [ 1079.566567][T24558] get_signal+0x1ec7/0x21e0 [ 1079.566595][T24558] ? __pfx_get_signal+0x10/0x10 [ 1079.566616][T24558] ? do_futex+0x192/0x350 [ 1079.566633][T24558] arch_do_signal_or_restart+0x91/0x770 [ 1079.566649][T24558] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1079.566675][T24558] ? __pfx___x64_sys_futex+0x10/0x10 [ 1079.566689][T24558] ? xfd_validate_state+0x129/0x190 [ 1079.566711][T24558] exit_to_user_mode_loop+0x86/0x4a0 [ 1079.566726][T24558] ? rcu_is_watching+0x12/0xc0 [ 1079.566745][T24558] do_syscall_64+0x668/0xf80 [ 1079.566766][T24558] ? clear_bhb_loop+0x40/0x90 [ 1079.566783][T24558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1079.566798][T24558] RIP: 0033:0x7f9929b9bf79 [ 1079.566810][T24558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1079.566824][T24558] RSP: 002b:00007f992a9720e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1079.566838][T24558] RAX: fffffffffffffe00 RBX: 00007f9929e16188 RCX: 00007f9929b9bf79 [ 1079.566848][T24558] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9929e16188 [ 1079.566857][T24558] RBP: 00007f9929e16180 R08: 0000000000000000 R09: 0000000000000000 [ 1079.566865][T24558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1079.566874][T24558] R13: 00007f9929e16218 R14: 00007fff64b33980 R15: 00007fff64b33a68 [ 1079.566893][T24558] [ 1080.297957][T24587] FAULT_INJECTION: forcing a failure. [ 1080.297957][T24587] name failslab, interval 1, probability 0, space 0, times 0 [ 1080.331239][T24587] CPU: 0 UID: 0 PID: 24587 Comm: syz.8.3903 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1080.331274][T24587] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1080.331282][T24587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1080.331291][T24587] Call Trace: [ 1080.331296][T24587] [ 1080.331302][T24587] dump_stack_lvl+0x100/0x190 [ 1080.331327][T24587] should_fail_ex.cold+0x5/0xa [ 1080.331344][T24587] should_failslab+0xc2/0x120 [ 1080.331364][T24587] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1080.331387][T24587] ? alloc_ldt_struct+0x5d/0x1b0 [ 1080.331407][T24587] ? __pfx_down_write_killable+0x10/0x10 [ 1080.331434][T24587] alloc_ldt_struct+0x5d/0x1b0 [ 1080.331455][T24587] write_ldt+0x62b/0xd40 [ 1080.331475][T24587] ? __fget_files+0x21f/0x3d0 [ 1080.331495][T24587] ? __pfx_write_ldt+0x10/0x10 [ 1080.331515][T24587] ? fput+0x79/0x100 [ 1080.331535][T24587] ? ksys_write+0x1ac/0x250 [ 1080.331552][T24587] ? __pfx_ksys_write+0x10/0x10 [ 1080.331573][T24587] __x64_sys_modify_ldt+0xdb/0x170 [ 1080.331595][T24587] do_syscall_64+0x106/0xf80 [ 1080.331621][T24587] ? clear_bhb_loop+0x40/0x90 [ 1080.331639][T24587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1080.331654][T24587] RIP: 0033:0x7fc27739bf79 [ 1080.331667][T24587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1080.331681][T24587] RSP: 002b:00007fc27828c028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 1080.331695][T24587] RAX: ffffffffffffffda RBX: 00007fc277616090 RCX: 00007fc27739bf79 [ 1080.331705][T24587] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000011 [ 1080.331713][T24587] RBP: 00007fc27828c090 R08: 0000000000000000 R09: 0000000000000000 [ 1080.331721][T24587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1080.331730][T24587] R13: 00007fc277616128 R14: 00007fc277616090 R15: 00007fff6784fc38 [ 1080.331750][T24587] [ 1081.627384][T24612] random: crng reseeded on system resumption [ 1082.431907][T24651] FAULT_INJECTION: forcing a failure. [ 1082.431907][T24651] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1082.544752][T24651] CPU: 0 UID: 0 PID: 24651 Comm: syz.7.3917 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1082.544790][T24651] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1082.544799][T24651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1082.544809][T24651] Call Trace: [ 1082.544815][T24651] [ 1082.544822][T24651] dump_stack_lvl+0x100/0x190 [ 1082.544849][T24651] should_fail_ex.cold+0x5/0xa [ 1082.544864][T24651] ? prepare_alloc_pages+0x16d/0x5f0 [ 1082.544888][T24651] should_fail_alloc_page+0xeb/0x140 [ 1082.544912][T24651] prepare_alloc_pages+0x1f0/0x5f0 [ 1082.544934][T24651] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1082.544960][T24651] __alloc_frozen_pages_noprof+0x19a/0x2ae0 [ 1082.544977][T24651] ? __kernel_text_address+0xd/0x30 [ 1082.545001][T24651] ? __lock_acquire+0x4a5/0x2630 [ 1082.545021][T24651] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1082.545037][T24651] ? __lock_acquire+0x4a5/0x2630 [ 1082.545053][T24651] ? look_up_lock_class+0x55/0x120 [ 1082.545074][T24651] ? look_up_lock_class+0x55/0x120 [ 1082.545094][T24651] ? register_lock_class+0x40/0x560 [ 1082.545116][T24651] ? __lock_acquire+0x4a5/0x2630 [ 1082.545132][T24651] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1082.545156][T24651] ? policy_nodemask+0xed/0x4f0 [ 1082.545177][T24651] alloc_pages_mpol+0x1fb/0x550 [ 1082.545198][T24651] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1082.545222][T24651] ? __pfx___might_resched+0x10/0x10 [ 1082.545242][T24651] ? __pfx___mutex_lock+0x10/0x10 [ 1082.545267][T24651] alloc_pages_noprof+0x131/0x390 [ 1082.545289][T24651] __pmd_alloc+0x3b/0x9c0 [ 1082.545310][T24651] ? mt_find+0x687/0x8e0 [ 1082.545333][T24651] huge_pte_alloc+0x5ee/0x730 [ 1082.545358][T24651] hugetlb_fault+0x363/0x1500 [ 1082.545383][T24651] ? __pfx_hugetlb_fault+0x10/0x10 [ 1082.545413][T24651] ? find_vma+0xbf/0x140 [ 1082.545431][T24651] ? __pfx_find_vma+0x10/0x10 [ 1082.545460][T24651] handle_mm_fault+0x5f1/0xa20 [ 1082.545480][T24651] do_user_addr_fault+0x74c/0x12f0 [ 1082.545508][T24651] exc_page_fault+0x6f/0xd0 [ 1082.545530][T24651] asm_exc_page_fault+0x26/0x30 [ 1082.545545][T24651] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 1082.545563][T24651] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 1082.545579][T24651] RSP: 0018:ffffc9000b95fa20 EFLAGS: 00050246 [ 1082.545593][T24651] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000008 [ 1082.545602][T24651] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc9000b95fc68 [ 1082.545612][T24651] RBP: 0000000000000008 R08: 0000000000000001 R09: fffff5200172bf8d [ 1082.545622][T24651] R10: ffffc9000b95fc6f R11: 0000000000000000 R12: 0000000000000000 [ 1082.545632][T24651] R13: ffffc9000b95fc68 R14: 0000000000000000 R15: 1ffff9200172bf59 [ 1082.545652][T24651] _copy_from_user+0x98/0xd0 [ 1082.545674][T24651] sctp_getsockopt+0x96b/0x7080 [ 1082.545694][T24651] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1082.545721][T24651] ? futex_unqueue+0x13d/0x2c0 [ 1082.545735][T24651] ? __pfx_sctp_getsockopt+0x10/0x10 [ 1082.545750][T24651] ? __futex_wait+0x256/0x300 [ 1082.545770][T24651] ? __pfx___futex_wait+0x10/0x10 [ 1082.545787][T24651] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1082.545814][T24651] ? __lock_acquire+0x4a5/0x2630 [ 1082.545829][T24651] ? find_held_lock+0x2b/0x80 [ 1082.545851][T24651] ? aa_sk_perm+0x2de/0xb40 [ 1082.545879][T24651] ? __might_fault+0xc5/0x140 [ 1082.545902][T24651] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1082.545925][T24651] do_sock_getsockopt+0x259/0x3d0 [ 1082.545941][T24651] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1082.545955][T24651] ? __pfx_do_futex+0x10/0x10 [ 1082.545979][T24651] __sys_getsockopt+0x133/0x1d0 [ 1082.546005][T24651] ? __x64_sys_getsockopt+0xbd/0x160 [ 1082.546024][T24651] __x64_sys_getsockopt+0xbd/0x160 [ 1082.546043][T24651] ? do_syscall_64+0x95/0xf80 [ 1082.546063][T24651] ? lockdep_hardirqs_on+0x78/0x100 [ 1082.546083][T24651] do_syscall_64+0x106/0xf80 [ 1082.546103][T24651] ? clear_bhb_loop+0x40/0x90 [ 1082.546121][T24651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.546136][T24651] RIP: 0033:0x7f86d479bf79 [ 1082.546153][T24651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1082.546168][T24651] RSP: 002b:00007f86d573c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1082.546182][T24651] RAX: ffffffffffffffda RBX: 00007f86d4a15fa0 RCX: 00007f86d479bf79 [ 1082.546193][T24651] RDX: 000000000000006d RSI: 0000000000000084 RDI: 0000000000000005 [ 1082.546203][T24651] RBP: 00007f86d48327e0 R08: 0000200000000280 R09: 0000000000000000 [ 1082.546213][T24651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1082.546222][T24651] R13: 00007f86d4a16038 R14: 00007f86d4a15fa0 R15: 00007fff8f1af2c8 [ 1082.546244][T24651] [ 1083.066494][T24658] FAULT_INJECTION: forcing a failure. [ 1083.066494][T24658] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1083.079854][T24658] CPU: 0 UID: 0 PID: 24658 Comm: syz.0.3918 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1083.079887][T24658] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1083.079895][T24658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1083.079904][T24658] Call Trace: [ 1083.079909][T24658] [ 1083.079915][T24658] dump_stack_lvl+0x100/0x190 [ 1083.079940][T24658] should_fail_ex.cold+0x5/0xa [ 1083.079954][T24658] ? prepare_alloc_pages+0x16d/0x5f0 [ 1083.079976][T24658] should_fail_alloc_page+0xeb/0x140 [ 1083.079998][T24658] prepare_alloc_pages+0x1f0/0x5f0 [ 1083.080021][T24658] __alloc_frozen_pages_noprof+0x19a/0x2ae0 [ 1083.080042][T24658] ? stack_trace_save+0x8e/0xc0 [ 1083.080063][T24658] ? __pfx_stack_trace_save+0x10/0x10 [ 1083.080083][T24658] ? stack_depot_save_flags+0x27/0x9d0 [ 1083.080107][T24658] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1083.080124][T24658] ? kasan_save_stack+0x3f/0x50 [ 1083.080140][T24658] ? kasan_save_track+0x14/0x30 [ 1083.080155][T24658] ? alloc_ldt_struct+0x5d/0x1b0 [ 1083.080175][T24658] ? write_ldt+0x62b/0xd40 [ 1083.080193][T24658] ? __x64_sys_modify_ldt+0xdb/0x170 [ 1083.080212][T24658] ? do_syscall_64+0x106/0xf80 [ 1083.080232][T24658] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1083.080256][T24658] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1083.080277][T24658] ? policy_nodemask+0xed/0x4f0 [ 1083.080298][T24658] alloc_pages_mpol+0x1fb/0x550 [ 1083.080318][T24658] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1083.080342][T24658] alloc_pages_noprof+0x131/0x390 [ 1083.080362][T24658] get_zeroed_page_noprof+0x18/0xb0 [ 1083.080381][T24658] alloc_ldt_struct+0x9f/0x1b0 [ 1083.080406][T24658] write_ldt+0x62b/0xd40 [ 1083.080426][T24658] ? __fget_files+0x21f/0x3d0 [ 1083.080445][T24658] ? __pfx_write_ldt+0x10/0x10 [ 1083.080465][T24658] ? fput+0x79/0x100 [ 1083.080485][T24658] ? ksys_write+0x1ac/0x250 [ 1083.080502][T24658] ? __pfx_ksys_write+0x10/0x10 [ 1083.080522][T24658] __x64_sys_modify_ldt+0xdb/0x170 [ 1083.080544][T24658] do_syscall_64+0x106/0xf80 [ 1083.080562][T24658] ? clear_bhb_loop+0x40/0x90 [ 1083.080579][T24658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1083.080594][T24658] RIP: 0033:0x7f9929b9bf79 [ 1083.080607][T24658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1083.080620][T24658] RSP: 002b:00007f992a993028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 1083.080634][T24658] RAX: ffffffffffffffda RBX: 00007f9929e16090 RCX: 00007f9929b9bf79 [ 1083.080644][T24658] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000011 [ 1083.080653][T24658] RBP: 00007f992a993090 R08: 0000000000000000 R09: 0000000000000000 [ 1083.080661][T24658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1083.080670][T24658] R13: 00007f9929e16128 R14: 00007f9929e16090 R15: 00007fff64b33a68 [ 1083.080689][T24658] [ 1084.108226][T24682] bridge0: port 4(veth0_to_bridge) entered blocking state [ 1084.122708][T24682] bridge0: port 4(veth0_to_bridge) entered disabled state [ 1084.138119][T24682] veth0_to_bridge: entered allmulticast mode [ 1084.150947][T24682] veth0_to_bridge: entered promiscuous mode [ 1084.156985][T24682] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1084.204094][T24682] bridge0: port 4(veth0_to_bridge) entered blocking state [ 1084.211335][T24682] bridge0: port 4(veth0_to_bridge) entered forwarding state [ 1084.362278][T24691] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1085.000012][T24694] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3927'. [ 1085.263578][T24701] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3929'. [ 1085.321853][T24701] mac80211_hwsim hwsim55 wlan1: entered promiscuous mode [ 1085.342985][T24701] mac80211_hwsim hwsim55 wlan1: entered allmulticast mode [ 1085.432687][T24709] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3929'. [ 1087.569603][T24774] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1087.780998][T24778] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1088.712050][T24801] FAULT_INJECTION: forcing a failure. [ 1088.712050][T24801] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1088.749637][T24805] FAULT_INJECTION: forcing a failure. [ 1088.749637][T24805] name failslab, interval 1, probability 0, space 0, times 0 [ 1088.795039][T24805] CPU: 0 UID: 0 PID: 24805 Comm: syz.4.3946 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1088.795076][T24805] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1088.795086][T24805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1088.795095][T24805] Call Trace: [ 1088.795102][T24805] [ 1088.795108][T24805] dump_stack_lvl+0x100/0x190 [ 1088.795135][T24805] should_fail_ex.cold+0x5/0xa [ 1088.795153][T24805] ? lsm_blob_alloc+0x68/0x90 [ 1088.795169][T24805] should_failslab+0xc2/0x120 [ 1088.795189][T24805] __kmalloc_noprof+0xe0/0x850 [ 1088.795206][T24805] ? audit_alloc+0xa2/0x7b0 [ 1088.795231][T24805] lsm_blob_alloc+0x68/0x90 [ 1088.795247][T24805] security_task_alloc+0x2a/0x260 [ 1088.795271][T24805] copy_process+0x2531/0x79b0 [ 1088.795285][T24805] ? futex_unqueue+0x133/0x2c0 [ 1088.795308][T24805] ? __pfx_copy_process+0x10/0x10 [ 1088.795328][T24805] ? _copy_from_user+0x59/0xd0 [ 1088.795351][T24805] kernel_clone+0xfc/0x930 [ 1088.795367][T24805] ? __pfx_kernel_clone+0x10/0x10 [ 1088.795386][T24805] ? __pfx_futex_wait+0x10/0x10 [ 1088.795408][T24805] __do_sys_clone3+0x214/0x290 [ 1088.795423][T24805] ? __pfx___do_sys_clone3+0x10/0x10 [ 1088.795462][T24805] do_syscall_64+0x106/0xf80 [ 1088.795482][T24805] ? clear_bhb_loop+0x40/0x90 [ 1088.795500][T24805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.795516][T24805] RIP: 0033:0x7fe3e879bf79 [ 1088.795530][T24805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1088.795544][T24805] RSP: 002b:00007fe3e96f9ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1088.795560][T24805] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fe3e879bf79 [ 1088.795569][T24805] RDX: 00007fe3e96f9f10 RSI: 0000000000000058 RDI: 00007fe3e96f9f10 [ 1088.795579][T24805] RBP: 00007fe3e88327e0 R08: 0000000000000000 R09: 0000000000000058 [ 1088.795589][T24805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1088.795598][T24805] R13: 00007fe3e8a16128 R14: 00007fe3e8a16090 R15: 00007ffe6c6cfa38 [ 1088.795618][T24805] [ 1088.796502][T24801] CPU: 0 UID: 0 PID: 24801 Comm: syz.8.3945 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1088.796533][T24801] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1088.796541][T24801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1088.796550][T24801] Call Trace: [ 1088.796555][T24801] [ 1088.796560][T24801] dump_stack_lvl+0x100/0x190 [ 1088.796584][T24801] should_fail_ex.cold+0x5/0xa [ 1088.796600][T24801] get_futex_key+0x1d2/0x1620 [ 1088.796625][T24801] ? __pfx_get_futex_key+0x10/0x10 [ 1088.796647][T24801] ? rcu_is_watching+0x12/0xc0 [ 1088.796665][T24801] ? trace_sched_set_need_resched_tp+0xe0/0x120 [ 1088.796694][T24801] futex_wait_setup+0x81/0x500 [ 1088.796717][T24801] __futex_wait+0x19f/0x300 [ 1088.796736][T24801] ? __pfx___futex_wait+0x10/0x10 [ 1088.796756][T24801] ? __pfx_futex_wake_mark+0x10/0x10 [ 1088.796776][T24801] ? __hrtimer_setup+0x178/0x280 [ 1088.796794][T24801] ? ktime_add_safe+0x60/0x70 [ 1088.796812][T24801] futex_wait+0xed/0x380 [ 1088.796829][T24801] ? __pfx_futex_wait+0x10/0x10 [ 1088.796845][T24801] ? __lock_acquire+0x4a5/0x2630 [ 1088.796862][T24801] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1088.796892][T24801] do_futex+0x1ef/0x350 [ 1088.796907][T24801] ? __pfx_do_futex+0x10/0x10 [ 1088.796920][T24801] ? rcu_is_watching+0x12/0xc0 [ 1088.796937][T24801] ? ktime_get+0x200/0x300 [ 1088.796956][T24801] ? lockdep_hardirqs_on+0x78/0x100 [ 1088.796977][T24801] ? read_tsc+0x9/0x20 [ 1088.796993][T24801] __x64_sys_futex+0x34f/0x4d0 [ 1088.797010][T24801] ? __pfx___x64_sys_futex+0x10/0x10 [ 1088.797024][T24801] ? xfd_validate_state+0x129/0x190 [ 1088.797049][T24801] do_syscall_64+0x106/0xf80 [ 1088.797067][T24801] ? clear_bhb_loop+0x40/0x90 [ 1088.797085][T24801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.797099][T24801] RIP: 0033:0x7fc27739bf79 [ 1088.797112][T24801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1088.797125][T24801] RSP: 002b:00007fff6784fd98 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1088.797139][T24801] RAX: ffffffffffffffda RBX: 000000000010a885 RCX: 00007fc27739bf79 [ 1088.797149][T24801] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc277615fac [ 1088.797157][T24801] RBP: 0000000000000032 R08: 0000000000000000 R09: 0000000000000000 [ 1088.797165][T24801] R10: 00007fff6784fea0 R11: 0000000000000246 R12: 00007fff6784fec0 [ 1088.797174][T24801] R13: 00007fc277615fac R14: 000000000010a8b7 R15: 00007fff6784fea0 [ 1088.797193][T24801] [ 1090.176671][ T51] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1091.392111][T24824] FAULT_INJECTION: forcing a failure. [ 1091.392111][T24824] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1091.473025][T24824] CPU: 0 UID: 0 PID: 24824 Comm: syz.7.3950 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1091.473061][T24824] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1091.473069][T24824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1091.473078][T24824] Call Trace: [ 1091.473084][T24824] [ 1091.473090][T24824] dump_stack_lvl+0x100/0x190 [ 1091.473116][T24824] should_fail_ex.cold+0x5/0xa [ 1091.473129][T24824] ? prepare_alloc_pages+0x16d/0x5f0 [ 1091.473153][T24824] should_fail_alloc_page+0xeb/0x140 [ 1091.473174][T24824] prepare_alloc_pages+0x1f0/0x5f0 [ 1091.473194][T24824] ? rcu_is_watching+0x12/0xc0 [ 1091.473214][T24824] __alloc_frozen_pages_noprof+0x19a/0x2ae0 [ 1091.473231][T24824] ? __alloc_frozen_pages_noprof+0x2b3/0x2ae0 [ 1091.473248][T24824] ? __pfx_css_rstat_updated+0x10/0x10 [ 1091.473276][T24824] ? find_held_lock+0x2b/0x80 [ 1091.473295][T24824] ? rcu_read_unlock+0x17/0x60 [ 1091.473316][T24824] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1091.473335][T24824] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1091.473350][T24824] ? page_counter_charge+0x1d2/0x240 [ 1091.473375][T24824] ? rcu_is_watching+0x12/0xc0 [ 1091.473393][T24824] ? trace_mm_page_alloc+0x10e/0x160 [ 1091.473424][T24824] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1091.473445][T24824] ? policy_nodemask+0xed/0x4f0 [ 1091.473466][T24824] alloc_pages_mpol+0x1fb/0x550 [ 1091.473485][T24824] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1091.473504][T24824] ? do_raw_spin_lock+0x128/0x260 [ 1091.473522][T24824] ? find_held_lock+0x2b/0x80 [ 1091.473541][T24824] ? __pud_alloc+0x575/0x760 [ 1091.473563][T24824] alloc_pages_noprof+0x131/0x390 [ 1091.473583][T24824] __pmd_alloc+0x3b/0x9c0 [ 1091.473608][T24824] ? __pud_alloc+0x57a/0x760 [ 1091.473629][T24824] walk_to_pmd+0x3a3/0x4c0 [ 1091.473651][T24824] get_locked_pte+0x25/0xc0 [ 1091.473673][T24824] map_ldt_struct+0x3c1/0xa70 [ 1091.473699][T24824] ? __pfx_map_ldt_struct+0x10/0x10 [ 1091.473720][T24824] ? alloc_pages_noprof+0x233/0x390 [ 1091.473742][T24824] write_ldt+0x6d3/0xd40 [ 1091.473763][T24824] ? __fget_files+0x21f/0x3d0 [ 1091.473782][T24824] ? __pfx_write_ldt+0x10/0x10 [ 1091.473802][T24824] ? fput+0x79/0x100 [ 1091.473822][T24824] ? ksys_write+0x1ac/0x250 [ 1091.473839][T24824] ? __pfx_ksys_write+0x10/0x10 [ 1091.473859][T24824] __x64_sys_modify_ldt+0xdb/0x170 [ 1091.473882][T24824] do_syscall_64+0x106/0xf80 [ 1091.473901][T24824] ? clear_bhb_loop+0x40/0x90 [ 1091.473919][T24824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1091.473933][T24824] RIP: 0033:0x7f86d479bf79 [ 1091.473946][T24824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1091.473960][T24824] RSP: 002b:00007f86d573c028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 1091.473975][T24824] RAX: ffffffffffffffda RBX: 00007f86d4a15fa0 RCX: 00007f86d479bf79 [ 1091.473984][T24824] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000011 [ 1091.473993][T24824] RBP: 00007f86d573c090 R08: 0000000000000000 R09: 0000000000000000 [ 1091.474002][T24824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1091.474010][T24824] R13: 00007f86d4a16038 R14: 00007f86d4a15fa0 R15: 00007fff8f1af2c8 [ 1091.474030][T24824] [ 1093.364370][ T30] audit: type=1800 audit(2147483745.608:77): pid=24860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3956" name="dbroot" dev="configfs" ino=118315 res=0 errno=0 [ 1093.608695][ T30] audit: type=1800 audit(2147483745.839:78): pid=24872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3958" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 1093.996200][T24884] FAULT_INJECTION: forcing a failure. [ 1093.996200][T24884] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1094.070185][T24884] CPU: 0 UID: 0 PID: 24884 Comm: syz.8.3960 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1094.070222][T24884] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1094.070232][T24884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1094.070241][T24884] Call Trace: [ 1094.070247][T24884] [ 1094.070254][T24884] dump_stack_lvl+0x100/0x190 [ 1094.070282][T24884] should_fail_ex.cold+0x5/0xa [ 1094.070296][T24884] ? prepare_alloc_pages+0x16d/0x5f0 [ 1094.070331][T24884] should_fail_alloc_page+0xeb/0x140 [ 1094.070354][T24884] prepare_alloc_pages+0x1f0/0x5f0 [ 1094.070375][T24884] ? rcu_is_watching+0x12/0xc0 [ 1094.070397][T24884] __alloc_frozen_pages_noprof+0x19a/0x2ae0 [ 1094.070421][T24884] ? stack_trace_save+0x8e/0xc0 [ 1094.070448][T24884] ? __pfx_stack_trace_save+0x10/0x10 [ 1094.070470][T24884] ? stack_depot_save_flags+0x27/0x9d0 [ 1094.070495][T24884] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1094.070513][T24884] ? kasan_save_stack+0x3f/0x50 [ 1094.070533][T24884] ? kasan_save_track+0x14/0x30 [ 1094.070549][T24884] ? __kasan_kmalloc+0xaa/0xb0 [ 1094.070565][T24884] ? snd_pcm_attach_substream+0x451/0xd60 [ 1094.070586][T24884] ? snd_pcm_oss_open+0x735/0x1390 [ 1094.070604][T24884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1094.070625][T24884] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1094.070647][T24884] ? policy_nodemask+0xed/0x4f0 [ 1094.070669][T24884] alloc_pages_mpol+0x1fb/0x550 [ 1094.070691][T24884] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1094.070711][T24884] ? __split_page_owner+0x1fe/0x350 [ 1094.070733][T24884] alloc_pages_noprof+0x131/0x390 [ 1094.070754][T24884] alloc_pages_exact_noprof+0x32/0xf0 [ 1094.070777][T24884] snd_pcm_attach_substream+0x4cb/0xd60 [ 1094.070803][T24884] snd_pcm_open_substream+0x90/0x1850 [ 1094.070824][T24884] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 1094.070850][T24884] snd_pcm_oss_open+0x735/0x1390 [ 1094.070873][T24884] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 1094.070890][T24884] ? __lock_acquire+0x4a5/0x2630 [ 1094.070906][T24884] ? __pfx_default_wake_function+0x10/0x10 [ 1094.070929][T24884] ? __lock_acquire+0x4a5/0x2630 [ 1094.070949][T24884] ? do_raw_spin_lock+0x128/0x260 [ 1094.070968][T24884] ? soundcore_open+0x231/0x5a0 [ 1094.070983][T24884] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 1094.071000][T24884] soundcore_open+0x2e3/0x5a0 [ 1094.071016][T24884] ? __pfx_soundcore_open+0x10/0x10 [ 1094.071030][T24884] chrdev_open+0x234/0x6a0 [ 1094.071048][T24884] ? __pfx_apparmor_file_open+0x10/0x10 [ 1094.071068][T24884] ? __pfx_chrdev_open+0x10/0x10 [ 1094.071088][T24884] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1094.071112][T24884] do_dentry_open+0x6d8/0x1660 [ 1094.071131][T24884] ? __pfx_chrdev_open+0x10/0x10 [ 1094.071154][T24884] vfs_open+0x82/0x3f0 [ 1094.071182][T24884] path_openat+0x208c/0x31a0 [ 1094.071208][T24884] ? __pfx_path_openat+0x10/0x10 [ 1094.071235][T24884] do_file_open+0x20e/0x430 [ 1094.071256][T24884] ? __pfx_do_file_open+0x10/0x10 [ 1094.071290][T24884] ? alloc_fd+0x476/0x790 [ 1094.071310][T24884] ? do_getname+0x191/0x390 [ 1094.071334][T24884] do_sys_openat2+0x10d/0x1e0 [ 1094.071356][T24884] ? __pfx_do_sys_openat2+0x10/0x10 [ 1094.071380][T24884] ? __do_sys_capset+0xfb/0x460 [ 1094.071405][T24884] __x64_sys_openat+0x12d/0x210 [ 1094.071420][T24884] ? __pfx___x64_sys_openat+0x10/0x10 [ 1094.071439][T24884] ? xfd_validate_state+0x129/0x190 [ 1094.071465][T24884] do_syscall_64+0x106/0xf80 [ 1094.071486][T24884] ? clear_bhb_loop+0x40/0x90 [ 1094.071504][T24884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1094.071520][T24884] RIP: 0033:0x7fc27739bf79 [ 1094.071533][T24884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1094.071547][T24884] RSP: 002b:00007fc2782ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1094.071562][T24884] RAX: ffffffffffffffda RBX: 00007fc277615fa0 RCX: 00007fc27739bf79 [ 1094.071572][T24884] RDX: 0000000000020342 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1094.071582][T24884] RBP: 00007fc2774327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1094.071591][T24884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1094.071601][T24884] R13: 00007fc277616038 R14: 00007fc277615fa0 R15: 00007fff6784fc38 [ 1094.071622][T24884] [ 1094.702059][T24890] FAULT_INJECTION: forcing a failure. [ 1094.702059][T24890] name failslab, interval 1, probability 0, space 0, times 0 [ 1094.714774][T24890] CPU: 0 UID: 0 PID: 24890 Comm: syz.8.3961 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1094.714806][T24890] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1094.714814][T24890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1094.714823][T24890] Call Trace: [ 1094.714828][T24890] [ 1094.714835][T24890] dump_stack_lvl+0x100/0x190 [ 1094.714860][T24890] should_fail_ex.cold+0x5/0xa [ 1094.714877][T24890] should_failslab+0xc2/0x120 [ 1094.714897][T24890] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1094.714913][T24890] ? __pmd_alloc+0xbf/0x9c0 [ 1094.714937][T24890] __pmd_alloc+0xbf/0x9c0 [ 1094.714955][T24890] ? __pud_alloc+0x57a/0x760 [ 1094.714976][T24890] walk_to_pmd+0x3a3/0x4c0 [ 1094.714998][T24890] get_locked_pte+0x25/0xc0 [ 1094.715020][T24890] map_ldt_struct+0x3c1/0xa70 [ 1094.715045][T24890] ? __pfx_map_ldt_struct+0x10/0x10 [ 1094.715066][T24890] ? alloc_pages_noprof+0x233/0x390 [ 1094.715089][T24890] write_ldt+0x6d3/0xd40 [ 1094.715109][T24890] ? __fget_files+0x21f/0x3d0 [ 1094.715128][T24890] ? __pfx_write_ldt+0x10/0x10 [ 1094.715149][T24890] ? fput+0x79/0x100 [ 1094.715168][T24890] ? ksys_write+0x1ac/0x250 [ 1094.715185][T24890] ? __pfx_ksys_write+0x10/0x10 [ 1094.715205][T24890] __x64_sys_modify_ldt+0xdb/0x170 [ 1094.715227][T24890] do_syscall_64+0x106/0xf80 [ 1094.715246][T24890] ? clear_bhb_loop+0x40/0x90 [ 1094.715264][T24890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1094.715278][T24890] RIP: 0033:0x7fc27739bf79 [ 1094.715292][T24890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1094.715306][T24890] RSP: 002b:00007fc2782ad028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 1094.715324][T24890] RAX: ffffffffffffffda RBX: 00007fc277615fa0 RCX: 00007fc27739bf79 [ 1094.715334][T24890] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000011 [ 1094.715343][T24890] RBP: 00007fc2782ad090 R08: 0000000000000000 R09: 0000000000000000 [ 1094.715352][T24890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1094.715360][T24890] R13: 00007fc277616038 R14: 00007fc277615fa0 R15: 00007fff6784fc38 [ 1094.715380][T24890] [ 1095.668383][T24912] serio: Serial port pty6 [ 1096.116687][T24927] FAULT_INJECTION: forcing a failure. [ 1096.116687][T24927] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1096.171608][T24927] CPU: 0 UID: 0 PID: 24927 Comm: syz.7.3966 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1096.171645][T24927] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1096.171653][T24927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1096.171663][T24927] Call Trace: [ 1096.171669][T24927] [ 1096.171675][T24927] dump_stack_lvl+0x100/0x190 [ 1096.171703][T24927] should_fail_ex.cold+0x5/0xa [ 1096.171718][T24927] ? prepare_alloc_pages+0x16d/0x5f0 [ 1096.171741][T24927] should_fail_alloc_page+0xeb/0x140 [ 1096.171763][T24927] prepare_alloc_pages+0x1f0/0x5f0 [ 1096.171788][T24927] __alloc_frozen_pages_noprof+0x19a/0x2ae0 [ 1096.171808][T24927] ? mas_wr_store_entry+0x6d2/0x2390 [ 1096.171826][T24927] ? perf_event_mmap+0xbc/0xe40 [ 1096.171846][T24927] ? mas_store_prealloc+0x893/0xfb0 [ 1096.171860][T24927] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1096.171880][T24927] ? vma_wants_writenotify+0x10b/0x390 [ 1096.171897][T24927] ? __pfx_vma_wants_writenotify+0x10/0x10 [ 1096.171920][T24927] ? vma_set_page_prot+0xb1/0x120 [ 1096.171938][T24927] ? mas_ascend+0x53d/0xb30 [ 1096.171957][T24927] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1096.171979][T24927] ? policy_nodemask+0xed/0x4f0 [ 1096.172000][T24927] alloc_pages_mpol+0x1fb/0x550 [ 1096.172021][T24927] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1096.172046][T24927] alloc_pages_noprof+0x131/0x390 [ 1096.172066][T24927] __pmd_alloc+0x3b/0x9c0 [ 1096.172090][T24927] __handle_mm_fault+0xa99/0x2b60 [ 1096.172107][T24927] ? mt_find+0x45e/0x8e0 [ 1096.172129][T24927] ? __pfx___handle_mm_fault+0x10/0x10 [ 1096.172143][T24927] ? __pfx_mt_find+0x10/0x10 [ 1096.172188][T24927] handle_mm_fault+0x36d/0xa20 [ 1096.172209][T24927] __get_user_pages+0xf9c/0x34d0 [ 1096.172238][T24927] ? __pfx___get_user_pages+0x10/0x10 [ 1096.172265][T24927] populate_vma_page_range+0x267/0x3f0 [ 1096.172288][T24927] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1096.172310][T24927] ? __pfx_find_vma_intersection+0x10/0x10 [ 1096.172330][T24927] ? do_mmap+0x93f/0x12f0 [ 1096.172352][T24927] __mm_populate+0x107/0x3a0 [ 1096.172374][T24927] ? __pfx___mm_populate+0x10/0x10 [ 1096.172396][T24927] ? up_write+0x290/0x4f0 [ 1096.172416][T24927] vm_mmap_pgoff+0x37f/0x470 [ 1096.172439][T24927] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1096.172464][T24927] ? __x64_sys_futex+0x34f/0x4d0 [ 1096.172478][T24927] ? __x64_sys_futex+0x358/0x4d0 [ 1096.172496][T24927] ksys_mmap_pgoff+0x7d/0x5b0 [ 1096.172515][T24927] ? __task_pid_nr_ns+0x1f5/0x500 [ 1096.172532][T24927] __x64_sys_mmap+0x125/0x190 [ 1096.172553][T24927] do_syscall_64+0x106/0xf80 [ 1096.172574][T24927] ? clear_bhb_loop+0x40/0x90 [ 1096.172592][T24927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1096.172607][T24927] RIP: 0033:0x7f86d479bf79 [ 1096.172621][T24927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1096.172635][T24927] RSP: 002b:00007f86d573c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1096.172652][T24927] RAX: ffffffffffffffda RBX: 00007f86d4a15fa0 RCX: 00007f86d479bf79 [ 1096.172662][T24927] RDX: 00000000000000df RSI: 0000000000040009 RDI: 0000000000000000 [ 1096.172671][T24927] RBP: 00007f86d48327e0 R08: 0000000000000007 R09: 0000000000028000 [ 1096.172681][T24927] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1096.172690][T24927] R13: 00007f86d4a16038 R14: 00007f86d4a15fa0 R15: 00007fff8f1af2c8 [ 1096.172711][T24927] [ 1097.615660][T24952] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1098.046043][T24960] FAULT_INJECTION: forcing a failure. [ 1098.046043][T24960] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1098.084736][T24952] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1098.259017][T24960] CPU: 0 UID: 0 PID: 24960 Comm: syz.8.3972 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1098.259059][T24960] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1098.259067][T24960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1098.259076][T24960] Call Trace: [ 1098.259082][T24960] [ 1098.259087][T24960] dump_stack_lvl+0x100/0x190 [ 1098.259113][T24960] should_fail_ex.cold+0x5/0xa [ 1098.259127][T24960] ? prepare_alloc_pages+0x16d/0x5f0 [ 1098.259149][T24960] should_fail_alloc_page+0xeb/0x140 [ 1098.259170][T24960] prepare_alloc_pages+0x1f0/0x5f0 [ 1098.259193][T24960] __alloc_frozen_pages_noprof+0x19a/0x2ae0 [ 1098.259211][T24960] ? stack_trace_save+0x8e/0xc0 [ 1098.259231][T24960] ? __pfx_stack_trace_save+0x10/0x10 [ 1098.259251][T24960] ? stack_depot_save_flags+0x27/0x9d0 [ 1098.259274][T24960] ? __pfx_css_rstat_updated+0x10/0x10 [ 1098.259298][T24960] ? kasan_save_stack+0x3f/0x50 [ 1098.259315][T24960] ? kasan_save_stack+0x30/0x50 [ 1098.259330][T24960] ? kasan_save_track+0x14/0x30 [ 1098.259345][T24960] ? __kasan_slab_alloc+0x89/0x90 [ 1098.259362][T24960] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1098.259378][T24960] ? get_locked_pte+0x25/0xc0 [ 1098.259397][T24960] ? map_ldt_struct+0x3c1/0xa70 [ 1098.259417][T24960] ? write_ldt+0x6d3/0xd40 [ 1098.259435][T24960] ? do_syscall_64+0x106/0xf80 [ 1098.259468][T24960] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1098.259489][T24960] ? policy_nodemask+0xed/0x4f0 [ 1098.259512][T24960] alloc_pages_mpol+0x1fb/0x550 [ 1098.259532][T24960] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1098.259556][T24960] alloc_pages_noprof+0x131/0x390 [ 1098.259576][T24960] pte_alloc_one+0x1e/0x3e0 [ 1098.259591][T24960] __pte_alloc+0x6d/0x3f0 [ 1098.259610][T24960] ? __pfx___pte_alloc+0x10/0x10 [ 1098.259629][T24960] ? walk_to_pmd+0x302/0x4c0 [ 1098.259651][T24960] get_locked_pte+0xa1/0xc0 [ 1098.259673][T24960] map_ldt_struct+0x3c1/0xa70 [ 1098.259698][T24960] ? __pfx_map_ldt_struct+0x10/0x10 [ 1098.259718][T24960] ? alloc_pages_noprof+0x233/0x390 [ 1098.259740][T24960] write_ldt+0x6d3/0xd40 [ 1098.259761][T24960] ? __fget_files+0x21f/0x3d0 [ 1098.259779][T24960] ? __pfx_write_ldt+0x10/0x10 [ 1098.259800][T24960] ? fput+0x79/0x100 [ 1098.259820][T24960] ? ksys_write+0x1ac/0x250 [ 1098.259836][T24960] ? __pfx_ksys_write+0x10/0x10 [ 1098.259857][T24960] __x64_sys_modify_ldt+0xdb/0x170 [ 1098.259879][T24960] do_syscall_64+0x106/0xf80 [ 1098.259897][T24960] ? clear_bhb_loop+0x40/0x90 [ 1098.259915][T24960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1098.259929][T24960] RIP: 0033:0x7fc27739bf79 [ 1098.259942][T24960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1098.259956][T24960] RSP: 002b:00007fc27824a028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 1098.259970][T24960] RAX: ffffffffffffffda RBX: 00007fc277616270 RCX: 00007fc27739bf79 [ 1098.259980][T24960] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000011 [ 1098.259988][T24960] RBP: 00007fc27824a090 R08: 0000000000000000 R09: 0000000000000000 [ 1098.259997][T24960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1098.260005][T24960] R13: 00007fc277616308 R14: 00007fc277616270 R15: 00007fff6784fc38 [ 1098.260025][T24960] [ 1099.322099][T24952] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1099.357044][T24952] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1099.422783][T24952] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1099.468277][T24952] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1099.630957][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 1099.642075][T24952] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1101.380341][T19246] Bluetooth: hci2: command 0x0c1a tx timeout [ 1101.387836][T19246] Bluetooth: hci0: command 0x0c1a tx timeout [ 1101.459494][T25033] Bluetooth: hci4: command 0x0c1a tx timeout [ 1101.525367][T25038] FAULT_INJECTION: forcing a failure. [ 1101.525367][T25038] name failslab, interval 1, probability 0, space 0, times 0 [ 1101.614733][T25038] CPU: 0 UID: 0 PID: 25038 Comm: syz.8.3983 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1101.614767][T25038] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1101.614775][T25038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1101.614784][T25038] Call Trace: [ 1101.614790][T25038] [ 1101.614796][T25038] dump_stack_lvl+0x100/0x190 [ 1101.614822][T25038] should_fail_ex.cold+0x5/0xa [ 1101.614839][T25038] should_failslab+0xc2/0x120 [ 1101.614859][T25038] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1101.614875][T25038] ? security_inode_alloc+0x3b/0x2c0 [ 1101.614895][T25038] ? lockdep_init_map_type+0x5c/0x250 [ 1101.614913][T25038] security_inode_alloc+0x3b/0x2c0 [ 1101.614933][T25038] inode_init_always_gfp+0xced/0x1040 [ 1101.614955][T25038] alloc_inode+0x8e/0x250 [ 1101.614968][T25038] new_inode+0x22/0x1c0 [ 1101.614982][T25038] __debugfs_create_file+0x105/0x4f0 [ 1101.615009][T25038] debugfs_create_file_full+0x41/0x60 [ 1101.615034][T25038] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 1101.615057][T25038] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1101.615096][T25038] ? lockdep_init_map_type+0x5c/0x250 [ 1101.615114][T25038] preinit_net.part.0+0x24e/0x8f0 [ 1101.615136][T25038] copy_net_ns+0x339/0x7c0 [ 1101.615160][T25038] create_new_namespaces+0x3ea/0xac0 [ 1101.615186][T25038] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1101.615208][T25038] ksys_unshare+0x455/0xab0 [ 1101.615225][T25038] ? __pfx_ksys_unshare+0x10/0x10 [ 1101.615240][T25038] ? xfd_validate_state+0x129/0x190 [ 1101.615264][T25038] __x64_sys_unshare+0x31/0x40 [ 1101.615279][T25038] do_syscall_64+0x106/0xf80 [ 1101.615299][T25038] ? clear_bhb_loop+0x40/0x90 [ 1101.615317][T25038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1101.615331][T25038] RIP: 0033:0x7fc27739bf79 [ 1101.615345][T25038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1101.615358][T25038] RSP: 002b:00007fc2782ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1101.615373][T25038] RAX: ffffffffffffffda RBX: 00007fc277615fa0 RCX: 00007fc27739bf79 [ 1101.615382][T25038] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1101.615391][T25038] RBP: 00007fc2774327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1101.615400][T25038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1101.615408][T25038] R13: 00007fc277616038 R14: 00007fc277615fa0 R15: 00007fff6784fc38 [ 1101.615428][T25038] [ 1101.616836][T25038] debugfs: out of free dentries, can not create file 'net_refcnt@ffff88808a7e2880' [ 1101.894539][T25033] Bluetooth: hci1: command 0x0c1a tx timeout [ 1102.212843][T25051] zswap: compressor not available [ 1102.897457][ T51] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1103.482398][T25083] netlink: 338 bytes leftover after parsing attributes in process `syz.8.3991'. [ 1103.527292][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 1104.669149][T25102] netlink: 338 bytes leftover after parsing attributes in process `syz.0.3997'. [ 1104.708978][T25103] netlink: 338 bytes leftover after parsing attributes in process `syz.0.3997'. [ 1104.749253][T25104] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3997'. [ 1105.224811][T25113] zswap: compressor not available [ 1105.597242][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 1105.850628][T25093] EXT4-fs error (device sda1): ext4_discard_preallocations:5704: comm syz.8.3995: Error -117 reading block bitmap for 2 [ 1106.177433][T25093] EXT4-fs error (device sda1): ext4_discard_preallocations:5704: comm syz.8.3995: Error -117 reading block bitmap for 3 [ 1106.251205][T25093] EXT4-fs error (device sda1): ext4_discard_preallocations:5704: comm syz.8.3995: Error -117 reading block bitmap for 3 [ 1106.327878][T25131] FAULT_INJECTION: forcing a failure. [ 1106.327878][T25131] name failslab, interval 1, probability 0, space 0, times 0 [ 1106.327928][T25131] CPU: 0 UID: 0 PID: 25131 Comm: syz.7.4003 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1106.327957][T25131] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1106.327965][T25131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1106.327977][T25131] Call Trace: [ 1106.327983][T25131] [ 1106.327989][T25131] dump_stack_lvl+0x100/0x190 [ 1106.328017][T25131] should_fail_ex.cold+0x5/0xa [ 1106.328041][T25131] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1106.328056][T25131] should_failslab+0xc2/0x120 [ 1106.328076][T25131] __kmalloc_noprof+0xe0/0x850 [ 1106.328097][T25131] tomoyo_realpath_from_path+0xb6/0x690 [ 1106.328115][T25131] tomoyo_path_number_perm+0x23c/0x580 [ 1106.328137][T25131] ? tomoyo_path_number_perm+0x22e/0x580 [ 1106.328158][T25131] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1106.328198][T25131] ? find_held_lock+0x2b/0x80 [ 1106.328217][T25131] ? __fget_files+0x215/0x3d0 [ 1106.328239][T25131] ? hook_file_ioctl_common+0x146/0x410 [ 1106.328264][T25131] ? __fget_files+0x21f/0x3d0 [ 1106.328284][T25131] security_file_ioctl+0xd3/0x230 [ 1106.328305][T25131] __x64_sys_ioctl+0xb7/0x210 [ 1106.328325][T25131] do_syscall_64+0x106/0xf80 [ 1106.328345][T25131] ? clear_bhb_loop+0x40/0x90 [ 1106.328363][T25131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1106.328377][T25131] RIP: 0033:0x7f86d479bf79 [ 1106.328390][T25131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1106.328404][T25131] RSP: 002b:00007f86d571b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1106.328418][T25131] RAX: ffffffffffffffda RBX: 00007f86d4a16090 RCX: 00007f86d479bf79 [ 1106.328428][T25131] RDX: 0000200000000180 RSI: 000000008140aecc RDI: 0000000000000004 [ 1106.328436][T25131] RBP: 00007f86d571b090 R08: 0000000000000000 R09: 0000000000000000 [ 1106.328445][T25131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1106.328453][T25131] R13: 00007f86d4a16128 R14: 00007f86d4a16090 R15: 00007fff8f1af2c8 [ 1106.328472][T25131] [ 1106.328478][T25131] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1107.229178][T25134] tc_dump_action: action bad kind [ 1107.289755][T25137] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1107.984838][T25152] FAULT_INJECTION: forcing a failure. [ 1107.984838][T25152] name failslab, interval 1, probability 0, space 0, times 0 [ 1107.984914][T25152] CPU: 0 UID: 0 PID: 25152 Comm: syz.7.4007 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1107.984946][T25152] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1107.984955][T25152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1107.984964][T25152] Call Trace: [ 1107.984970][T25152] [ 1107.984976][T25152] dump_stack_lvl+0x100/0x190 [ 1107.985002][T25152] should_fail_ex.cold+0x5/0xa [ 1107.985017][T25152] ? ip_finish_output2+0x883/0x24d0 [ 1107.985043][T25152] should_failslab+0xc2/0x120 [ 1107.985063][T25152] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1107.985088][T25152] ? skb_clone+0x190/0x400 [ 1107.985114][T25152] skb_clone+0x190/0x400 [ 1107.985135][T25152] dev_queue_xmit_nit+0x255/0xa60 [ 1107.985164][T25152] dev_hard_start_xmit+0x2fb/0x6c0 [ 1107.985185][T25152] __dev_queue_xmit+0x6dd/0x46f0 [ 1107.985209][T25152] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1107.985228][T25152] ? __local_bh_enable_ip+0x9e/0x120 [ 1107.985253][T25152] ? __lock_acquire+0x4a5/0x2630 [ 1107.985279][T25152] ? find_held_lock+0x2b/0x80 [ 1107.985305][T25152] ip_finish_output2+0xf4a/0x24d0 [ 1107.985333][T25152] ? __pfx_ip_finish_output2+0x10/0x10 [ 1107.985356][T25152] ? __pfx_ip_dst_mtu_maybe_forward+0x10/0x10 [ 1107.985382][T25152] __ip_finish_output.part.0+0x444/0x6f0 [ 1107.985407][T25152] ip_output+0x39b/0xec0 [ 1107.985430][T25152] ? __pfx_ip_output+0x10/0x10 [ 1107.985453][T25152] ? __pfx_ip_finish_output+0x10/0x10 [ 1107.985474][T25152] ? ip4_dst_hoplimit+0x1a9/0x400 [ 1107.985500][T25152] __ip_queue_xmit+0x1b73/0x22b0 [ 1107.985526][T25152] ? __pfx_ip_queue_xmit+0x10/0x10 [ 1107.985549][T25152] __tcp_transmit_skb+0x3347/0x4b50 [ 1107.985577][T25152] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 1107.985607][T25152] ? ktime_get+0x200/0x300 [ 1107.985630][T25152] ? lockdep_hardirqs_on+0x78/0x100 [ 1107.985657][T25152] tcp_write_xmit+0x12a2/0x8980 [ 1107.985694][T25152] __tcp_push_pending_frames+0xaf/0x3b0 [ 1107.985716][T25152] tcp_send_fin+0x11f/0x10f0 [ 1107.985739][T25152] __tcp_close+0xa0d/0x1110 [ 1107.985757][T25152] ? __local_bh_enable_ip+0x9e/0x120 [ 1107.985782][T25152] tcp_close+0x28/0x110 [ 1107.985799][T25152] inet_release+0xed/0x200 [ 1107.985816][T25152] __sock_release+0xb3/0x260 [ 1107.985837][T25152] ? __pfx_sock_close+0x10/0x10 [ 1107.985858][T25152] sock_close+0x1c/0x30 [ 1107.985877][T25152] __fput+0x3ff/0xb40 [ 1107.985903][T25152] task_work_run+0x150/0x240 [ 1107.985922][T25152] ? __pfx_task_work_run+0x10/0x10 [ 1107.985940][T25152] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1107.985966][T25152] get_signal+0x1bd/0x21e0 [ 1107.985988][T25152] ? __pfx___fput_deferred+0x10/0x10 [ 1107.986008][T25152] ? __pfx___file_ref_put+0x10/0x10 [ 1107.986032][T25152] ? __pfx_get_signal+0x10/0x10 [ 1107.986068][T25152] ? do_sendfile+0x44d/0xe20 [ 1107.986094][T25152] arch_do_signal_or_restart+0x91/0x770 [ 1107.986113][T25152] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1107.986136][T25152] ? __x64_sys_sendfile64+0x189/0x220 [ 1107.986157][T25152] ? xfd_validate_state+0x129/0x190 [ 1107.986179][T25152] exit_to_user_mode_loop+0x86/0x4a0 [ 1107.986195][T25152] ? rcu_is_watching+0x12/0xc0 [ 1107.986216][T25152] do_syscall_64+0x668/0xf80 [ 1107.986235][T25152] ? clear_bhb_loop+0x40/0x90 [ 1107.986254][T25152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.986269][T25152] RIP: 0033:0x7f86d479bf79 [ 1107.986283][T25152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1107.986298][T25152] RSP: 002b:00007f86d573c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1107.986313][T25152] RAX: fffffffffffffe00 RBX: 00007f86d4a15fa0 RCX: 00007f86d479bf79 [ 1107.986324][T25152] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000001 [ 1107.986334][T25152] RBP: 00007f86d48327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1107.986343][T25152] R10: 00000000000000a1 R11: 0000000000000246 R12: 0000000000000000 [ 1107.986353][T25152] R13: 00007f86d4a16038 R14: 00007f86d4a15fa0 R15: 00007fff8f1af2c8 [ 1107.986375][T25152] [ 1109.206094][T25179] FAULT_INJECTION: forcing a failure. [ 1109.206094][T25179] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1109.206125][T25179] CPU: 0 UID: 0 PID: 25179 Comm: syz.0.4014 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1109.206160][T25179] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1109.206168][T25179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1109.206178][T25179] Call Trace: [ 1109.206183][T25179] [ 1109.206188][T25179] dump_stack_lvl+0x100/0x190 [ 1109.206213][T25179] should_fail_ex.cold+0x5/0xa [ 1109.206230][T25179] _copy_from_user+0x2e/0xd0 [ 1109.206253][T25179] copy_msghdr_from_user+0x9f/0x4f0 [ 1109.206271][T25179] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1109.206296][T25179] ___sys_sendmsg+0x106/0x1e0 [ 1109.206313][T25179] ? __pfx____sys_sendmsg+0x10/0x10 [ 1109.206352][T25179] __sys_sendmsg+0x170/0x220 [ 1109.206372][T25179] ? __pfx___sys_sendmsg+0x10/0x10 [ 1109.206399][T25179] ? do_user_addr_fault+0x8d6/0x12f0 [ 1109.206424][T25179] do_syscall_64+0x106/0xf80 [ 1109.206444][T25179] ? clear_bhb_loop+0x40/0x90 [ 1109.206462][T25179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.206477][T25179] RIP: 0033:0x7f9929b9bf79 [ 1109.206491][T25179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1109.206505][T25179] RSP: 002b:00007f992a993028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1109.206520][T25179] RAX: ffffffffffffffda RBX: 00007f9929e16090 RCX: 00007f9929b9bf79 [ 1109.206530][T25179] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 1109.206540][T25179] RBP: 00007f992a993090 R08: 0000000000000000 R09: 0000000000000000 [ 1109.206549][T25179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1109.206559][T25179] R13: 00007f9929e16128 R14: 00007f9929e16090 R15: 00007fff64b33a68 [ 1109.206579][T25179] [ 1109.625195][T25173] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1109.625583][T25173] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1109.625680][T25173] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1109.625770][T25173] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1109.648048][T25185] FAULT_INJECTION: forcing a failure. [ 1109.648048][T25185] name failslab, interval 1, probability 0, space 0, times 0 [ 1109.648076][T25185] CPU: 0 UID: 0 PID: 25185 Comm: syz.7.4016 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1109.648106][T25185] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1109.648114][T25185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1109.648127][T25185] Call Trace: [ 1109.648132][T25185] [ 1109.648138][T25185] dump_stack_lvl+0x100/0x190 [ 1109.648163][T25185] should_fail_ex.cold+0x5/0xa [ 1109.648179][T25185] ? tomoyo_encode2+0xfb/0x3c0 [ 1109.648193][T25185] should_failslab+0xc2/0x120 [ 1109.648216][T25185] __kmalloc_noprof+0xe0/0x850 [ 1109.648236][T25185] tomoyo_encode2+0xfb/0x3c0 [ 1109.648253][T25185] tomoyo_encode+0x29/0x50 [ 1109.648266][T25185] tomoyo_realpath_from_path+0x18c/0x690 [ 1109.648285][T25185] tomoyo_path_number_perm+0x23c/0x580 [ 1109.648304][T25185] ? tomoyo_path_number_perm+0x22e/0x580 [ 1109.648325][T25185] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1109.648368][T25185] ? find_held_lock+0x2b/0x80 [ 1109.648390][T25185] ? __fget_files+0x215/0x3d0 [ 1109.648406][T25185] ? hook_file_ioctl_common+0x146/0x410 [ 1109.648431][T25185] ? __fget_files+0x21f/0x3d0 [ 1109.648451][T25185] security_file_ioctl+0xd3/0x230 [ 1109.648473][T25185] __x64_sys_ioctl+0xb7/0x210 [ 1109.648489][T25185] do_syscall_64+0x106/0xf80 [ 1109.648509][T25185] ? clear_bhb_loop+0x40/0x90 [ 1109.648527][T25185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.648542][T25185] RIP: 0033:0x7f86d479bf79 [ 1109.648555][T25185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1109.648568][T25185] RSP: 002b:00007f86d571b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1109.648582][T25185] RAX: ffffffffffffffda RBX: 00007f86d4a16090 RCX: 00007f86d479bf79 [ 1109.648591][T25185] RDX: 0000200000000180 RSI: 000000008140aecc RDI: 0000000000000004 [ 1109.648600][T25185] RBP: 00007f86d571b090 R08: 0000000000000000 R09: 0000000000000000 [ 1109.648609][T25185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1109.648617][T25185] R13: 00007f86d4a16128 R14: 00007f86d4a16090 R15: 00007fff8f1af2c8 [ 1109.648637][T25185] [ 1109.648668][T25185] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1110.398787][T25206] Invalid ELF header magic: != ELF [ 1110.672018][T25209] nvme_fcloop: unknown parameter or missing value '0' [ 1110.760114][T25216] FAULT_INJECTION: forcing a failure. [ 1110.760114][T25216] name failslab, interval 1, probability 0, space 0, times 0 [ 1110.760231][T25216] CPU: 0 UID: 0 PID: 25216 Comm: syz.0.4023 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1110.760261][T25216] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1110.760269][T25216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1110.760278][T25216] Call Trace: [ 1110.760283][T25216] [ 1110.760289][T25216] dump_stack_lvl+0x100/0x190 [ 1110.760314][T25216] should_fail_ex.cold+0x5/0xa [ 1110.760332][T25216] should_failslab+0xc2/0x120 [ 1110.760352][T25216] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1110.760368][T25216] ? vm_area_dup+0x27/0x8e0 [ 1110.760381][T25216] ? __vma_start_write+0x17f/0x280 [ 1110.760408][T25216] vm_area_dup+0x27/0x8e0 [ 1110.760423][T25216] dup_mmap+0x6c9/0x1db0 [ 1110.760451][T25216] ? __pfx_dup_mmap+0x10/0x10 [ 1110.760484][T25216] copy_process+0x7371/0x79b0 [ 1110.760509][T25216] ? __pfx_copy_process+0x10/0x10 [ 1110.760523][T25216] ? find_held_lock+0x2b/0x80 [ 1110.760551][T25216] kernel_clone+0xfc/0x930 [ 1110.760563][T25216] ? __pfx_futex_wait+0x10/0x10 [ 1110.760582][T25216] ? __pfx_kernel_clone+0x10/0x10 [ 1110.760608][T25216] __do_sys_clone+0xd9/0x120 [ 1110.760622][T25216] ? __pfx___do_sys_clone+0x10/0x10 [ 1110.760644][T25216] ? xfd_validate_state+0x129/0x190 [ 1110.760670][T25216] do_syscall_64+0x106/0xf80 [ 1110.760690][T25216] ? clear_bhb_loop+0x40/0x90 [ 1110.760708][T25216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1110.760725][T25216] RIP: 0033:0x7f9929b9bf79 [ 1110.760744][T25216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1110.760759][T25216] RSP: 002b:00007f992a971fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1110.760773][T25216] RAX: ffffffffffffffda RBX: 00007f9929e16180 RCX: 00007f9929b9bf79 [ 1110.760782][T25216] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 1110.760791][T25216] RBP: 00007f9929c327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1110.760800][T25216] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1110.760808][T25216] R13: 00007f9929e16218 R14: 00007f9929e16180 R15: 00007fff64b33a68 [ 1110.760828][T25216] [ 1110.976237][T25223] random: crng reseeded on system resumption [ 1111.008707][T25033] Bluetooth: hci1: command 0x0c1a tx timeout [ 1111.655063][T25033] Bluetooth: hci4: command 0x0c1a tx timeout [ 1111.655094][T25033] Bluetooth: hci2: command 0x0c1a tx timeout [ 1111.655123][T25033] Bluetooth: hci0: command 0x0c1a tx timeout [ 1112.616982][T25240] FAULT_INJECTION: forcing a failure. [ 1112.616982][T25240] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1112.617012][T25240] CPU: 0 UID: 0 PID: 25240 Comm: syz.0.4028 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1112.617040][T25240] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1112.617048][T25240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1112.617057][T25240] Call Trace: [ 1112.617062][T25240] [ 1112.617068][T25240] dump_stack_lvl+0x100/0x190 [ 1112.617092][T25240] should_fail_ex.cold+0x5/0xa [ 1112.617109][T25240] _copy_from_user+0x2e/0xd0 [ 1112.617131][T25240] move_addr_to_kernel+0x65/0x170 [ 1112.617148][T25240] copy_msghdr_from_user+0x417/0x4f0 [ 1112.617164][T25240] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1112.617189][T25240] ___sys_sendmsg+0x106/0x1e0 [ 1112.617205][T25240] ? __pfx____sys_sendmsg+0x10/0x10 [ 1112.617243][T25240] __sys_sendmsg+0x170/0x220 [ 1112.617263][T25240] ? __pfx___sys_sendmsg+0x10/0x10 [ 1112.617289][T25240] ? do_user_addr_fault+0x8d6/0x12f0 [ 1112.617314][T25240] do_syscall_64+0x106/0xf80 [ 1112.617334][T25240] ? clear_bhb_loop+0x40/0x90 [ 1112.617352][T25240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1112.617366][T25240] RIP: 0033:0x7f9929b9bf79 [ 1112.617379][T25240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1112.617393][T25240] RSP: 002b:00007f992a993028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1112.617408][T25240] RAX: ffffffffffffffda RBX: 00007f9929e16090 RCX: 00007f9929b9bf79 [ 1112.617417][T25240] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 1112.617426][T25240] RBP: 00007f992a993090 R08: 0000000000000000 R09: 0000000000000000 [ 1112.617434][T25240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1112.617442][T25240] R13: 00007f9929e16128 R14: 00007f9929e16090 R15: 00007fff64b33a68 [ 1112.617462][T25240] [ 1113.666943][T25242] random: crng reseeded on system resumption [ 1114.889788][T25249] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4032'. [ 1115.645499][T25272] FAULT_INJECTION: forcing a failure. [ 1115.645499][T25272] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1115.712278][T25272] CPU: 0 UID: 0 PID: 25272 Comm: syz.8.4037 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1115.712313][T25272] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1115.712321][T25272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1115.712331][T25272] Call Trace: [ 1115.712337][T25272] [ 1115.712343][T25272] dump_stack_lvl+0x100/0x190 [ 1115.712369][T25272] should_fail_ex.cold+0x5/0xa [ 1115.712386][T25272] _copy_from_user+0x2e/0xd0 [ 1115.712409][T25272] ____sys_sendmsg+0x1d1/0xc30 [ 1115.712426][T25272] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1115.712456][T25272] ___sys_sendmsg+0x190/0x1e0 [ 1115.712473][T25272] ? __pfx____sys_sendmsg+0x10/0x10 [ 1115.712511][T25272] __sys_sendmsg+0x170/0x220 [ 1115.712531][T25272] ? __pfx___sys_sendmsg+0x10/0x10 [ 1115.712562][T25272] do_syscall_64+0x106/0xf80 [ 1115.712583][T25272] ? clear_bhb_loop+0x40/0x90 [ 1115.712600][T25272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1115.712615][T25272] RIP: 0033:0x7fc27739bf79 [ 1115.712628][T25272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1115.712641][T25272] RSP: 002b:00007fc27828c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1115.712656][T25272] RAX: ffffffffffffffda RBX: 00007fc277616090 RCX: 00007fc27739bf79 [ 1115.712666][T25272] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 1115.712674][T25272] RBP: 00007fc27828c090 R08: 0000000000000000 R09: 0000000000000000 [ 1115.712683][T25272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1115.712691][T25272] R13: 00007fc277616128 R14: 00007fc277616090 R15: 00007fff6784fc38 [ 1115.712711][T25272] [ 1115.976512][T25278] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1116.098431][T25280] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1117.241621][T25308] FAULT_INJECTION: forcing a failure. [ 1117.241621][T25308] name failslab, interval 1, probability 0, space 0, times 0 [ 1117.315608][T25308] CPU: 0 UID: 0 PID: 25308 Comm: syz.0.4049 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1117.315641][T25308] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1117.315650][T25308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1117.315658][T25308] Call Trace: [ 1117.315664][T25308] [ 1117.315670][T25308] dump_stack_lvl+0x100/0x190 [ 1117.315695][T25308] should_fail_ex.cold+0x5/0xa [ 1117.315712][T25308] ? rds_message_alloc+0x48/0x220 [ 1117.315732][T25308] should_failslab+0xc2/0x120 [ 1117.315751][T25308] __kmalloc_noprof+0xe0/0x850 [ 1117.315767][T25308] ? rds_sendmsg+0x962/0x33d0 [ 1117.315783][T25308] rds_message_alloc+0x48/0x220 [ 1117.315804][T25308] rds_sendmsg+0xde6/0x33d0 [ 1117.315826][T25308] ? __pfx_rds_sendmsg+0x10/0x10 [ 1117.315844][T25308] ? __pfx_aa_sk_perm+0x10/0x10 [ 1117.315870][T25308] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1117.315889][T25308] ? ____sys_sendmsg+0xa54/0xc30 [ 1117.315903][T25308] ____sys_sendmsg+0xa54/0xc30 [ 1117.315919][T25308] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1117.315942][T25308] ___sys_sendmsg+0x190/0x1e0 [ 1117.315959][T25308] ? __pfx____sys_sendmsg+0x10/0x10 [ 1117.315996][T25308] __sys_sendmsg+0x170/0x220 [ 1117.316016][T25308] ? __pfx___sys_sendmsg+0x10/0x10 [ 1117.316042][T25308] ? do_user_addr_fault+0x8d6/0x12f0 [ 1117.316066][T25308] do_syscall_64+0x106/0xf80 [ 1117.316085][T25308] ? clear_bhb_loop+0x40/0x90 [ 1117.316103][T25308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.316118][T25308] RIP: 0033:0x7f9929b9bf79 [ 1117.316130][T25308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1117.316144][T25308] RSP: 002b:00007f992a993028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1117.316158][T25308] RAX: ffffffffffffffda RBX: 00007f9929e16090 RCX: 00007f9929b9bf79 [ 1117.316168][T25308] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 1117.316176][T25308] RBP: 00007f992a993090 R08: 0000000000000000 R09: 0000000000000000 [ 1117.316185][T25308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1117.316193][T25308] R13: 00007f9929e16128 R14: 00007f9929e16090 R15: 00007fff64b33a68 [ 1117.316220][T25308] [ 1117.621161][T25314] FAULT_INJECTION: forcing a failure. [ 1117.621161][T25314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1117.634775][T25314] CPU: 0 UID: 0 PID: 25314 Comm: syz.8.4050 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1117.634809][T25314] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1117.634817][T25314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1117.634826][T25314] Call Trace: [ 1117.634832][T25314] [ 1117.634839][T25314] dump_stack_lvl+0x100/0x190 [ 1117.634865][T25314] should_fail_ex.cold+0x5/0xa [ 1117.634881][T25314] _copy_to_user+0x32/0xd0 [ 1117.634904][T25314] kvm_arch_vcpu_ioctl+0xc34/0x53e0 [ 1117.634922][T25314] ? tomoyo_path_number_perm+0x46d/0x580 [ 1117.634944][T25314] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 1117.634958][T25314] ? __pfx_stack_trace_save+0x10/0x10 [ 1117.634980][T25314] ? stack_depot_save_flags+0x27/0x9d0 [ 1117.635002][T25314] ? __lock_acquire+0x4a5/0x2630 [ 1117.635018][T25314] ? tomoyo_path_number_perm+0x46d/0x580 [ 1117.635040][T25314] ? __lock_acquire+0x4a5/0x2630 [ 1117.635054][T25314] ? do_syscall_64+0x106/0xf80 [ 1117.635074][T25314] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.635095][T25314] ? lock_acquire+0x17c/0x330 [ 1117.635112][T25314] ? __pfx___might_resched+0x10/0x10 [ 1117.635130][T25314] ? rcu_is_watching+0x12/0xc0 [ 1117.635149][T25314] ? trace_contention_end+0xd6/0x110 [ 1117.635165][T25314] ? __mutex_lock+0x26a/0x1b90 [ 1117.635187][T25314] ? kvm_vcpu_ioctl+0x322/0x16d0 [ 1117.635209][T25314] ? __pfx___mutex_lock+0x10/0x10 [ 1117.635234][T25314] ? kasan_quarantine_put+0x104/0x240 [ 1117.635251][T25314] ? lockdep_hardirqs_on+0x78/0x100 [ 1117.635272][T25314] ? tomoyo_path_number_perm+0x28f/0x580 [ 1117.635296][T25314] ? tomoyo_path_number_perm+0x188/0x580 [ 1117.635319][T25314] ? kvm_vcpu_ioctl+0x8a0/0x16d0 [ 1117.635336][T25314] kvm_vcpu_ioctl+0x8a0/0x16d0 [ 1117.635356][T25314] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1117.635374][T25314] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1117.635395][T25314] ? do_vfs_ioctl+0x226/0x13e0 [ 1117.635411][T25314] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1117.635432][T25314] ? find_held_lock+0x2b/0x80 [ 1117.635450][T25314] ? __fget_files+0x215/0x3d0 [ 1117.635467][T25314] ? hook_file_ioctl_common+0x146/0x410 [ 1117.635491][T25314] ? __fget_files+0x21f/0x3d0 [ 1117.635511][T25314] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1117.635530][T25314] __x64_sys_ioctl+0x18e/0x210 [ 1117.635546][T25314] do_syscall_64+0x106/0xf80 [ 1117.635565][T25314] ? clear_bhb_loop+0x40/0x90 [ 1117.635583][T25314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.635598][T25314] RIP: 0033:0x7fc27739bf79 [ 1117.635613][T25314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1117.635629][T25314] RSP: 002b:00007fc2782ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1117.635644][T25314] RAX: ffffffffffffffda RBX: 00007fc277615fa0 RCX: 00007fc27739bf79 [ 1117.635653][T25314] RDX: 0000200000000180 RSI: 000000008140aecc RDI: 0000000000000004 [ 1117.635662][T25314] RBP: 00007fc2782ad090 R08: 0000000000000000 R09: 0000000000000000 [ 1117.635671][T25314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1117.635679][T25314] R13: 00007fc277616038 R14: 00007fc277615fa0 R15: 00007fff6784fc38 [ 1117.635699][T25314] [ 1117.987662][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1117.994903][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1118.747701][T25328] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 1119.145411][T25348] FAULT_INJECTION: forcing a failure. [ 1119.145411][T25348] name failslab, interval 1, probability 0, space 0, times 0 [ 1119.199748][T25348] CPU: 0 UID: 0 PID: 25348 Comm: syz.4.4061 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1119.199782][T25348] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1119.199791][T25348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1119.199800][T25348] Call Trace: [ 1119.199805][T25348] [ 1119.199812][T25348] dump_stack_lvl+0x100/0x190 [ 1119.199837][T25348] should_fail_ex.cold+0x5/0xa [ 1119.199854][T25348] should_failslab+0xc2/0x120 [ 1119.199875][T25348] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1119.199891][T25348] ? __rds_conn_create+0x734/0x2590 [ 1119.199910][T25348] ? __rds_conn_create+0x1959/0x2590 [ 1119.199932][T25348] __rds_conn_create+0x734/0x2590 [ 1119.199958][T25348] ? __pfx___rds_conn_create+0x10/0x10 [ 1119.199978][T25348] ? lockdep_init_map_type+0x5c/0x250 [ 1119.199998][T25348] rds_conn_create_outgoing+0x44/0x60 [ 1119.200028][T25348] rds_sendmsg+0x10bc/0x33d0 [ 1119.200051][T25348] ? __pfx_rds_sendmsg+0x10/0x10 [ 1119.200068][T25348] ? __pfx_aa_sk_perm+0x10/0x10 [ 1119.200095][T25348] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1119.200115][T25348] ? ____sys_sendmsg+0xa54/0xc30 [ 1119.200129][T25348] ____sys_sendmsg+0xa54/0xc30 [ 1119.200146][T25348] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1119.200173][T25348] ___sys_sendmsg+0x190/0x1e0 [ 1119.200190][T25348] ? __pfx____sys_sendmsg+0x10/0x10 [ 1119.200229][T25348] __sys_sendmsg+0x170/0x220 [ 1119.200248][T25348] ? __pfx___sys_sendmsg+0x10/0x10 [ 1119.200275][T25348] ? do_user_addr_fault+0x8d6/0x12f0 [ 1119.200299][T25348] do_syscall_64+0x106/0xf80 [ 1119.200318][T25348] ? clear_bhb_loop+0x40/0x90 [ 1119.200336][T25348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1119.200351][T25348] RIP: 0033:0x7fe3e879bf79 [ 1119.200364][T25348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1119.200378][T25348] RSP: 002b:00007fe3e96fa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1119.200393][T25348] RAX: ffffffffffffffda RBX: 00007fe3e8a16090 RCX: 00007fe3e879bf79 [ 1119.200403][T25348] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 1119.200412][T25348] RBP: 00007fe3e96fa090 R08: 0000000000000000 R09: 0000000000000000 [ 1119.200421][T25348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1119.200429][T25348] R13: 00007fe3e8a16128 R14: 00007fe3e8a16090 R15: 00007ffe6c6cfa38 [ 1119.200449][T25348] [ 1119.650179][T25357] FAULT_INJECTION: forcing a failure. [ 1119.650179][T25357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1119.663451][T25357] CPU: 0 UID: 0 PID: 25357 Comm: syz.7.4063 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1119.663484][T25357] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1119.663492][T25357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1119.663501][T25357] Call Trace: [ 1119.663507][T25357] [ 1119.663512][T25357] dump_stack_lvl+0x100/0x190 [ 1119.663538][T25357] should_fail_ex.cold+0x5/0xa [ 1119.663555][T25357] _copy_to_user+0x32/0xd0 [ 1119.663578][T25357] simple_read_from_buffer+0xcb/0x170 [ 1119.663597][T25357] proc_fail_nth_read+0x1af/0x230 [ 1119.663616][T25357] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1119.663636][T25357] ? rw_verify_area+0xce/0x6d0 [ 1119.663652][T25357] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1119.663670][T25357] vfs_read+0x1e4/0xb30 [ 1119.663689][T25357] ? __pfx_vfs_read+0x10/0x10 [ 1119.663705][T25357] ? __fget_files+0x215/0x3d0 [ 1119.663726][T25357] ? __fget_files+0x21f/0x3d0 [ 1119.663748][T25357] ksys_read+0x12a/0x250 [ 1119.663764][T25357] ? __pfx_ksys_read+0x10/0x10 [ 1119.663781][T25357] ? fput+0x79/0x100 [ 1119.663804][T25357] do_syscall_64+0x106/0xf80 [ 1119.663824][T25357] ? clear_bhb_loop+0x40/0x90 [ 1119.663841][T25357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1119.663856][T25357] RIP: 0033:0x7f86d475c84e [ 1119.663868][T25357] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1119.663882][T25357] RSP: 002b:00007f86d573bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1119.663896][T25357] RAX: ffffffffffffffda RBX: 00007f86d573c6c0 RCX: 00007f86d475c84e [ 1119.663906][T25357] RDX: 000000000000000f RSI: 00007f86d573c0a0 RDI: 0000000000000005 [ 1119.663914][T25357] RBP: 00007f86d573c090 R08: 0000000000000000 R09: 0000000000000000 [ 1119.663923][T25357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1119.663931][T25357] R13: 00007f86d4a16038 R14: 00007f86d4a15fa0 R15: 00007fff8f1af2c8 [ 1119.663951][T25357] [ 1120.135057][T25364] zswap: compressor û not available [ 1120.730691][T25388] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4068'. [ 1121.018212][T25388] mac80211_hwsim hwsim44 wlan1: entered promiscuous mode [ 1121.125694][T25388] mac80211_hwsim hwsim44 wlan1: entered allmulticast mode [ 1121.892516][T25426] FAULT_INJECTION: forcing a failure. [ 1121.892516][T25426] name failslab, interval 1, probability 0, space 0, times 0 [ 1121.892547][T25426] CPU: 0 UID: 0 PID: 25426 Comm: syz.0.4075 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1121.892576][T25426] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1121.892584][T25426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1121.892593][T25426] Call Trace: [ 1121.892598][T25426] [ 1121.892604][T25426] dump_stack_lvl+0x100/0x190 [ 1121.892628][T25426] should_fail_ex.cold+0x5/0xa [ 1121.892645][T25426] ? __rds_conn_create+0x762/0x2590 [ 1121.892663][T25426] should_failslab+0xc2/0x120 [ 1121.892684][T25426] __kmalloc_noprof+0xe0/0x850 [ 1121.892704][T25426] __rds_conn_create+0x762/0x2590 [ 1121.892730][T25426] ? __pfx___rds_conn_create+0x10/0x10 [ 1121.892751][T25426] ? lockdep_init_map_type+0x5c/0x250 [ 1121.892779][T25426] rds_conn_create_outgoing+0x44/0x60 [ 1121.892802][T25426] rds_sendmsg+0x10bc/0x33d0 [ 1121.892824][T25426] ? __pfx_rds_sendmsg+0x10/0x10 [ 1121.892841][T25426] ? __pfx_aa_sk_perm+0x10/0x10 [ 1121.892868][T25426] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1121.892888][T25426] ? ____sys_sendmsg+0xa54/0xc30 [ 1121.892902][T25426] ____sys_sendmsg+0xa54/0xc30 [ 1121.892918][T25426] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1121.892942][T25426] ___sys_sendmsg+0x190/0x1e0 [ 1121.892958][T25426] ? __pfx____sys_sendmsg+0x10/0x10 [ 1121.892996][T25426] __sys_sendmsg+0x170/0x220 [ 1121.893016][T25426] ? __pfx___sys_sendmsg+0x10/0x10 [ 1121.893042][T25426] ? do_user_addr_fault+0x8d6/0x12f0 [ 1121.893066][T25426] do_syscall_64+0x106/0xf80 [ 1121.893086][T25426] ? clear_bhb_loop+0x40/0x90 [ 1121.893103][T25426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1121.893118][T25426] RIP: 0033:0x7f9929b9bf79 [ 1121.893130][T25426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1121.893145][T25426] RSP: 002b:00007f992a993028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1121.893159][T25426] RAX: ffffffffffffffda RBX: 00007f9929e16090 RCX: 00007f9929b9bf79 [ 1121.893168][T25426] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 1121.893177][T25426] RBP: 00007f992a993090 R08: 0000000000000000 R09: 0000000000000000 [ 1121.893186][T25426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1121.893194][T25426] R13: 00007f9929e16128 R14: 00007f9929e16090 R15: 00007fff64b33a68 [ 1121.893213][T25426] [ 1122.426953][T25443] vhci_hcd: not connected 4 [ 1122.872193][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1122.872646][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1122.872955][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1122.873254][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1122.873560][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1122.873873][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1122.874165][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1122.874456][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1122.874748][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1123.722376][ C0] net_ratelimit: 2497 callbacks suppressed [ 1123.722394][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1123.722762][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1123.723119][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1123.723465][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1123.723832][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1123.724193][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1123.724538][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1123.724902][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1123.725258][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1123.725613][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1128.706349][ C0] net_ratelimit: 14884 callbacks suppressed [ 1128.706367][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1128.706748][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1128.707058][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1128.707416][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1128.707805][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1128.708110][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1128.708484][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1128.708871][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1128.709197][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1128.709550][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1133.690314][ C0] net_ratelimit: 15154 callbacks suppressed [ 1133.690334][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:ff:7e:39:2f:a9, vlan:0) [ 1133.690620][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1133.690974][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1133.692687][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1133.693110][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:ff:7e:39:2f:a9, vlan:0) [ 1133.693399][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1133.693770][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1133.694078][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1133.694447][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:ff:7e:39:2f:a9, vlan:0) [ 1133.694736][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1138.674622][ C0] net_ratelimit: 15516 callbacks suppressed [ 1138.674645][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1138.674961][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1138.675322][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:ff:7e:39:2f:a9, vlan:0) [ 1138.675611][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1138.675966][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1138.676273][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1138.676628][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:ff:7e:39:2f:a9, vlan:0) [ 1138.676908][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1138.677255][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1138.677562][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1143.658634][ C0] net_ratelimit: 14764 callbacks suppressed [ 1143.658651][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:ff:7e:39:2f:a9, vlan:0) [ 1143.659744][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1143.660161][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1143.660468][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1143.660861][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:ff:7e:39:2f:a9, vlan:0) [ 1143.661961][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1143.662342][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1143.662650][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1143.663059][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:ff:7e:39:2f:a9, vlan:0) [ 1143.664395][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1148.642636][ C0] net_ratelimit: 9481 callbacks suppressed [ 1148.642654][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1148.643019][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:ff:7e:39:2f:a9, vlan:0) [ 1148.644064][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1148.644415][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1148.644703][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1148.645306][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:ff:7e:39:2f:a9, vlan:0) [ 1148.646340][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1148.646723][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1148.647011][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1148.647379][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:ff:7e:39:2f:a9, vlan:0) [ 1153.627330][ C0] net_ratelimit: 9664 callbacks suppressed [ 1153.627346][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1153.627697][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1153.627985][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1153.628346][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:ff:7e:39:2f:a9, vlan:0) [ 1153.629375][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1153.629734][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1153.630031][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1153.630379][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:ff:7e:39:2f:a9, vlan:0) [ 1153.631383][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1153.631905][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1158.611412][ C0] net_ratelimit: 9922 callbacks suppressed [ 1158.611430][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1158.611846][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1158.612177][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1158.612577][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:ff:7e:39:2f:a9, vlan:0) [ 1158.613711][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1158.614107][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1158.614430][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1158.614842][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:ff:7e:39:2f:a9, vlan:0) [ 1158.615967][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1158.616379][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1163.595138][ C0] net_ratelimit: 9238 callbacks suppressed [ 1163.595155][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1163.595637][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1163.595972][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1163.596370][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:ff:7e:39:2f:a9, vlan:0) [ 1163.597554][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1163.597954][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1163.598301][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1163.598706][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:ff:7e:39:2f:a9, vlan:0) [ 1163.599845][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1163.600264][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1168.579116][ C0] net_ratelimit: 10086 callbacks suppressed [ 1168.579133][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1168.579498][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1168.579789][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1168.580137][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:ff:7e:39:2f:a9, vlan:0) [ 1168.581140][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1168.581489][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1168.581766][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1168.582154][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:ff:7e:39:2f:a9, vlan:0) [ 1168.583122][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1168.583490][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1173.562898][ C0] net_ratelimit: 9968 callbacks suppressed [ 1173.562915][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1173.563318][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:ff:7e:39:2f:a9, vlan:0) [ 1173.564456][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1173.564847][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1173.565178][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1173.565586][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:ff:7e:39:2f:a9, vlan:0) [ 1173.566718][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1173.567120][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1173.567481][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1173.567891][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:ff:7e:39:2f:a9, vlan:0) [ 1178.547340][ C0] net_ratelimit: 9164 callbacks suppressed [ 1178.547357][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1178.547720][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1178.547999][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1178.548345][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:ff:7e:39:2f:a9, vlan:0) [ 1178.549353][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1178.549718][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1178.549995][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1178.550347][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:ff:7e:39:2f:a9, vlan:0) [ 1178.551319][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1178.551678][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1181.687523][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1181.697756][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1183.531284][ C0] net_ratelimit: 9744 callbacks suppressed [ 1183.531301][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1183.531661][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:ff:7e:39:2f:a9, vlan:0) [ 1183.532679][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1183.533079][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1183.533387][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1183.533753][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:ff:7e:39:2f:a9, vlan:0) [ 1183.534764][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1183.535136][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1183.535435][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1183.535856][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:ff:7e:39:2f:a9, vlan:0) [ 1188.515324][ C0] net_ratelimit: 9305 callbacks suppressed [ 1188.515342][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1188.515643][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1188.516019][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:ff:7e:39:2f:a9, vlan:0) [ 1188.517058][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1188.517420][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1188.517712][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1188.518067][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:ff:7e:39:2f:a9, vlan:0) [ 1188.519132][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1188.519534][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1188.519832][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1193.499235][ C0] net_ratelimit: 9359 callbacks suppressed [ 1193.499251][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1193.499634][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:ff:7e:39:2f:a9, vlan:0) [ 1193.500739][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1193.501116][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1193.501435][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1193.501826][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:ff:7e:39:2f:a9, vlan:0) [ 1193.502909][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1193.503300][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1193.503620][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1193.503996][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:ff:7e:39:2f:a9, vlan:0) [ 1198.483534][ C0] net_ratelimit: 9282 callbacks suppressed [ 1198.483551][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1198.483914][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:ff:7e:39:2f:a9, vlan:0) [ 1198.484958][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1198.485335][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1198.485627][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1198.485998][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:ff:7e:39:2f:a9, vlan:0) [ 1198.487036][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1198.487435][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1198.487725][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1198.488112][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:ff:7e:39:2f:a9, vlan:0) [ 1203.467855][ C0] net_ratelimit: 9424 callbacks suppressed [ 1203.467872][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1203.468232][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1203.468517][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1203.469260][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:ff:7e:39:2f:a9, vlan:0) [ 1203.470241][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1203.470602][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1203.470878][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1203.471221][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:ff:7e:39:2f:a9, vlan:0) [ 1203.472227][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1203.472586][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1208.451681][ C0] net_ratelimit: 9430 callbacks suppressed [ 1208.451698][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1208.452098][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1208.452416][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1208.452835][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:ff:7e:39:2f:a9, vlan:0) [ 1208.453977][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1208.454378][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1208.454694][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1208.455238][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:ff:7e:39:2f:a9, vlan:0) [ 1208.456372][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1208.456773][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1213.435941][ C0] net_ratelimit: 9610 callbacks suppressed [ 1213.435958][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1213.436383][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1213.436702][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1213.437104][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:ff:7e:39:2f:a9, vlan:0) [ 1213.438239][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1213.438627][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1213.438939][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1213.439335][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:ff:7e:39:2f:a9, vlan:0) [ 1213.440442][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1213.440855][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1218.419661][ C0] net_ratelimit: 9513 callbacks suppressed [ 1218.419679][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:ff:7e:39:2f:a9, vlan:0) [ 1218.420842][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1218.421238][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1218.421548][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1218.421925][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:ff:7e:39:2f:a9, vlan:0) [ 1218.423220][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1218.423615][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1218.423932][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1218.424323][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:ff:7e:39:2f:a9, vlan:0) [ 1218.425438][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1223.404237][ C0] net_ratelimit: 9335 callbacks suppressed [ 1223.404255][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1223.404650][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1223.404972][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1223.405358][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:ff:7e:39:2f:a9, vlan:0) [ 1223.406464][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1223.406864][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1223.407187][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1223.407592][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:ff:7e:39:2f:a9, vlan:0) [ 1223.408714][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1223.409124][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1228.387850][ C0] net_ratelimit: 9348 callbacks suppressed [ 1228.387867][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1228.388285][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:ff:7e:39:2f:a9, vlan:0) [ 1228.389432][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1228.389824][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1228.390159][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1228.390551][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:ff:7e:39:2f:a9, vlan:0) [ 1228.391693][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1228.392113][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1228.392440][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1228.392845][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:ff:7e:39:2f:a9, vlan:0) [ 1233.372003][ C0] net_ratelimit: 9503 callbacks suppressed [ 1233.372021][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:ff:7e:39:2f:a9, vlan:0) [ 1233.373157][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1233.373547][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1233.373880][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1233.374272][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:ff:7e:39:2f:a9, vlan:0) [ 1233.375428][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1233.375832][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1233.376164][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1233.376562][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:ff:7e:39:2f:a9, vlan:0) [ 1233.377734][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1238.356079][ C0] net_ratelimit: 9576 callbacks suppressed [ 1238.356096][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1238.356422][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1238.356768][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:ff:7e:39:2f:a9, vlan:0) [ 1238.357764][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1238.358113][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1238.358409][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1238.358762][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:ff:7e:39:2f:a9, vlan:0) [ 1238.359779][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1238.360143][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1238.360421][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1240.143928][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.154279][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1243.340660][ C0] net_ratelimit: 10039 callbacks suppressed [ 1243.340679][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1243.341001][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1243.341350][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1243.341638][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1243.342008][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:ff:7e:39:2f:a9, vlan:0) [ 1243.343019][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1243.343391][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1243.343781][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1243.344089][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1243.344479][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:ff:7e:39:2f:a9, vlan:0) [ 1248.324759][ C0] net_ratelimit: 10320 callbacks suppressed [ 1248.324778][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1248.325152][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1248.325554][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1248.325873][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1248.326257][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:ff:7e:39:2f:a9, vlan:0) [ 1248.327370][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1248.327714][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1248.328092][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1248.328429][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1248.328809][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:ff:7e:39:2f:a9, vlan:0) [ 1253.308242][ C0] net_ratelimit: 11033 callbacks suppressed [ 1253.308261][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:ff:7e:39:2f:a9, vlan:0) [ 1253.309323][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1253.309643][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1253.310025][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1253.310310][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1253.310683][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1253.310989][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1253.311367][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:ff:7e:39:2f:a9, vlan:0) [ 1253.312360][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1253.312719][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1258.293452][ C0] net_ratelimit: 11538 callbacks suppressed [ 1258.293471][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1258.293802][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1258.294169][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1258.294486][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1258.294847][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:ff:7e:39:2f:a9, vlan:0) [ 1258.295174][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1258.295460][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1258.295819][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:ff:7e:39:2f:a9, vlan:0) [ 1258.296800][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1258.297129][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1263.276590][ C0] net_ratelimit: 11925 callbacks suppressed [ 1263.276610][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:ff:7e:39:2f:a9, vlan:0) [ 1263.277628][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1263.277953][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1263.278308][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1263.278587][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1263.278966][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:ff:7e:39:2f:a9, vlan:0) [ 1263.279285][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1263.279566][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1263.279921][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:ff:7e:39:2f:a9, vlan:0) [ 1263.280923][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1268.260929][ C0] net_ratelimit: 11583 callbacks suppressed [ 1268.260950][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1268.261272][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1268.261655][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1268.261939][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1268.262292][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:ff:7e:39:2f:a9, vlan:0) [ 1268.262616][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1268.262923][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1268.263276][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:ff:7e:39:2f:a9, vlan:0) [ 1268.264287][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1268.264982][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1273.244681][ C0] net_ratelimit: 11613 callbacks suppressed [ 1273.244698][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:ff:7e:39:2f:a9, vlan:0) [ 1273.245931][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1273.246266][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1273.246628][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1273.246929][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1273.247285][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:ff:7e:39:2f:a9, vlan:0) [ 1273.247615][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1273.247904][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1273.248272][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:ff:7e:39:2f:a9, vlan:0) [ 1273.249311][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1278.228575][ C0] net_ratelimit: 11843 callbacks suppressed [ 1278.228594][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:ff:7e:39:2f:a9, vlan:0) [ 1278.228920][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1278.229207][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1278.229570][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:ff:7e:39:2f:a9, vlan:0) [ 1278.230580][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1278.230892][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1278.231247][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1278.231530][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1278.231874][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:ff:7e:39:2f:a9, vlan:0) [ 1278.232197][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1283.212958][ C0] net_ratelimit: 10652 callbacks suppressed [ 1283.212976][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1283.213313][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1283.213692][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:ff:7e:39:2f:a9, vlan:0) [ 1283.214042][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1283.215126][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1283.215727][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:ff:7e:39:2f:a9, vlan:0) [ 1283.216809][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1283.217150][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1283.217531][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1283.217838][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1285.882553][ T31] INFO: task syz.4.4080:25449 blocked for more than 145 seconds. [ 1285.882577][ T31] Tainted: G U W L XTNJ syzkaller #0 [ 1285.882597][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1285.882605][ T31] task:syz.4.4080 state:D stack:28744 pid:25449 tgid:25444 ppid:22935 task_flags:0x400140 flags:0x00080002 [ 1285.882663][ T31] Call Trace: [ 1285.882669][ T31] [ 1285.882681][ T31] __schedule+0xfee/0x6020 [ 1285.882708][ T31] ? __lock_acquire+0x4a5/0x2630 [ 1285.882742][ T31] ? __pfx___schedule+0x10/0x10 [ 1285.882760][ T31] ? find_held_lock+0x2b/0x80 [ 1285.882781][ T31] ? schedule+0x2bf/0x390 [ 1285.882803][ T31] schedule+0xdd/0x390 [ 1285.882822][ T31] schedule_preempt_disabled+0x13/0x30 [ 1285.882842][ T31] __mutex_lock+0xc9a/0x1b90 [ 1285.882865][ T31] ? __tty_hangup.part.0+0xd9/0x7f0 [ 1285.882885][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1285.882908][ T31] ? find_held_lock+0x2b/0x80 [ 1285.882932][ T31] ? find_held_lock+0x2b/0x80 [ 1285.882951][ T31] ? __tty_hangup.part.0+0xcc/0x7f0 [ 1285.882966][ T31] ? __tty_hangup.part.0+0xcc/0x7f0 [ 1285.882985][ T31] ? __tty_hangup.part.0+0xd9/0x7f0 [ 1285.883000][ T31] __tty_hangup.part.0+0xd9/0x7f0 [ 1285.883015][ T31] ? bpf_lsm_capable+0x9/0x10 [ 1285.883041][ T31] tty_ioctl+0xa12/0x1690 [ 1285.883057][ T31] ? __pfx_tty_ioctl+0x10/0x10 [ 1285.883079][ T31] ? find_held_lock+0x2b/0x80 [ 1285.883099][ T31] ? __fget_files+0x215/0x3d0 [ 1285.883117][ T31] ? hook_file_ioctl_common+0x146/0x410 [ 1285.883143][ T31] ? __fget_files+0x21f/0x3d0 [ 1285.883164][ T31] ? __pfx_tty_ioctl+0x10/0x10 [ 1285.883180][ T31] __x64_sys_ioctl+0x18e/0x210 [ 1285.883199][ T31] do_syscall_64+0x106/0xf80 [ 1285.883219][ T31] ? clear_bhb_loop+0x40/0x90 [ 1285.883238][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1285.883255][ T31] RIP: 0033:0x7fe3e879bf79 [ 1285.883268][ T31] RSP: 002b:00007fe3e96fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1285.883284][ T31] RAX: ffffffffffffffda RBX: 00007fe3e8a16090 RCX: 00007fe3e879bf79 [ 1285.883294][ T31] RDX: 0000000000000000 RSI: 0000000000005437 RDI: 000000000000000a [ 1285.883304][ T31] RBP: 00007fe3e88327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1285.883314][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1285.883324][ T31] R13: 00007fe3e8a16128 R14: 00007fe3e8a16090 R15: 00007ffe6c6cfa38 [ 1285.883345][ T31] [ 1285.883352][ T31] INFO: task syz.4.4080:25453 blocked for more than 145 seconds. [ 1285.883363][ T31] Tainted: G U W L XTNJ syzkaller #0 [ 1285.883372][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1285.883379][ T31] task:syz.4.4080 state:D stack:28792 pid:25453 tgid:25444 ppid:22935 task_flags:0x400140 flags:0x00080002 [ 1285.883423][ T31] Call Trace: [ 1285.883429][ T31] [ 1285.883437][ T31] __schedule+0xfee/0x6020 [ 1285.883457][ T31] ? __lock_acquire+0x4a5/0x2630 [ 1285.883483][ T31] ? __pfx___schedule+0x10/0x10 [ 1285.883500][ T31] ? find_held_lock+0x2b/0x80 [ 1285.883521][ T31] ? schedule+0x2bf/0x390 [ 1285.883542][ T31] schedule+0xdd/0x390 [ 1285.883561][ T31] schedule_preempt_disabled+0x13/0x30 [ 1285.883580][ T31] rwsem_down_write_slowpath+0x530/0x1280 [ 1285.883608][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 1285.883693][ T31] ? __pfx___might_resched+0x10/0x10 [ 1285.883714][ T31] ? __pfx_n_tty_flush_buffer+0x10/0x10 [ 1285.883735][ T31] down_write+0x1c7/0x1f0 [ 1285.883765][ T31] ? __pfx_down_write+0x10/0x10 [ 1285.883796][ T31] n_tty_flush_buffer+0x1f/0x140 [ 1285.883816][ T31] tty_ldisc_hangup+0xdb/0x6e0 [ 1285.883842][ T31] __tty_hangup.part.0+0x3e4/0x7f0 [ 1285.883863][ T31] tty_ioctl+0xa12/0x1690 [ 1285.883879][ T31] ? __pfx_tty_ioctl+0x10/0x10 [ 1285.883900][ T31] ? find_held_lock+0x2b/0x80 [ 1285.883920][ T31] ? __fget_files+0x215/0x3d0 [ 1285.883937][ T31] ? hook_file_ioctl_common+0x146/0x410 [ 1285.883962][ T31] ? __fget_files+0x21f/0x3d0 [ 1285.883983][ T31] ? __pfx_tty_ioctl+0x10/0x10 [ 1285.883999][ T31] __x64_sys_ioctl+0x18e/0x210 [ 1285.884017][ T31] do_syscall_64+0x106/0xf80 [ 1285.884037][ T31] ? clear_bhb_loop+0x40/0x90 [ 1285.884055][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1285.884071][ T31] RIP: 0033:0x7fe3e879bf79 [ 1285.884083][ T31] RSP: 002b:00007fe3e96b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1285.884098][ T31] RAX: ffffffffffffffda RBX: 00007fe3e8a16270 RCX: 00007fe3e879bf79 [ 1285.884108][ T31] RDX: 0000000000000000 RSI: 0000000000005437 RDI: 000000000000000a [ 1285.884117][ T31] RBP: 00007fe3e88327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1285.884127][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1285.884137][ T31] R13: 00007fe3e8a16308 R14: 00007fe3e8a16270 R15: 00007ffe6c6cfa38 [ 1285.884157][ T31] [ 1285.884168][ T31] [ 1285.884168][ T31] Showing all locks held in the system: [ 1285.884177][ T31] 1 lock held by khungtaskd/31: [ 1285.884186][ T31] #0: ffffffff8e7e7460 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1285.884238][ T31] 1 lock held by kswapd0/85: [ 1285.884248][ T31] 2 locks held by kworker/0:2/104: [ 1285.884273][ T31] 3 locks held by udevd/5188: [ 1285.884282][ T31] 1 lock held by dhcpcd/5482: [ 1285.884291][ T31] 1 lock held by crond/5560: [ 1285.884300][ T31] 3 locks held by syz-executor/5804: [ 1285.884310][ T31] 4 locks held by kworker/u8:26/9062: [ 1285.884319][ T31] 4 locks held by kworker/u8:28/9064: [ 1285.884328][ T31] 3 locks held by kworker/u8:30/9066: [ 1285.884337][ T31] 3 locks held by kworker/u8:36/9072: [ 1285.884345][ T31] 2 locks held by kworker/u8:38/9074: [ 1285.884354][ T31] 4 locks held by kworker/u8:41/9077: [ 1285.884363][ T31] 2 locks held by kworker/u8:42/9078: [ 1285.884371][ T31] 3 locks held by kworker/u8:43/9079: [ 1285.884380][ T31] 3 locks held by kworker/u8:48/9084: [ 1285.884390][ T31] 4 locks held by kworker/u8:50/9086: [ 1285.884399][ T31] 3 locks held by kworker/u8:51/9087: [ 1285.884407][ T31] 5 locks held by kworker/u8:52/9088: [ 1285.884416][ T31] 3 locks held by kworker/u8:53/9090: [ 1285.884425][ T31] 3 locks held by kworker/u8:56/9093: [ 1285.884433][ T31] 3 locks held by kworker/u8:57/9094: [ 1285.884442][ T31] 3 locks held by kworker/u8:58/9095: [ 1285.884451][ T31] 3 locks held by kworker/u8:59/9096: [ 1285.884460][ T31] 3 locks held by kworker/u8:61/9098: [ 1285.884468][ T31] 3 locks held by kworker/u8:63/9100: [ 1285.884477][ T31] 3 locks held by kworker/u8:64/9101: [ 1285.884488][ T31] 3 locks held by kworker/u8:0/16137: [ 1285.884501][ T31] 2 locks held by kworker/u8:2/20777: [ 1285.884512][ T31] 2 locks held by getty/22116: [ 1285.884520][ T31] #0: ffff8880335780a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1285.884563][ T31] #1: ffffc90002f642f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 1285.884605][ T31] 2 locks held by syz-executor/23937: [ 1285.884617][ T31] 6 locks held by syz.7.4076/25425: [ 1285.884625][ T31] 1 lock held by syz.4.4080/25449: [ 1285.884634][ T31] #0: ffff88806b23f1c0 (&tty->legacy_mutex){+.+.}-{4:4}, at: __tty_hangup.part.0+0xd9/0x7f0 [ 1285.884677][ T31] 3 locks held by syz.4.4080/25453: [ 1285.884686][ T31] #0: ffff88806b23f1c0 (&tty->legacy_mutex){+.+.}-{4:4}, at: __tty_hangup.part.0+0xd9/0x7f0 [ 1285.884722][ T31] #1: ffff88806b23f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_hangup+0x3d/0x6e0 [ 1285.884764][ T31] #2: ffff88806b23f2e8 (&tty->termios_rwsem){++++}-{4:4}, at: n_tty_flush_buffer+0x1f/0x140 [ 1285.884805][ T31] 3 locks held by syz.4.4080/25456: [ 1285.884814][ T31] 2 locks held by syz.0.4082/25457: [ 1285.884822][ T31] [ 1285.884826][ T31] ============================================= [ 1285.884826][ T31] [ 1285.884838][ T31] NMI backtrace for cpu 0 [ 1285.884850][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1285.884877][ T31] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1285.884886][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1285.884893][ T31] Call Trace: [ 1285.884899][ T31] [ 1285.884904][ T31] dump_stack_lvl+0x100/0x190 [ 1285.884929][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1285.884951][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1285.884970][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1285.884988][ T31] sys_info+0x141/0x190 [ 1285.885001][ T31] watchdog+0xcc3/0xfe0 [ 1285.885025][ T31] ? __pfx_watchdog+0x10/0x10 [ 1285.885045][ T31] ? __kthread_parkme+0x18c/0x230 [ 1285.885069][ T31] ? kthread+0x13a/0x450 [ 1285.885082][ T31] ? __pfx_watchdog+0x10/0x10 [ 1285.885100][ T31] kthread+0x370/0x450 [ 1285.885114][ T31] ? __pfx_kthread+0x10/0x10 [ 1285.885131][ T31] ret_from_fork+0x754/0xd80 [ 1285.885150][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1285.885169][ T31] ? __switch_to+0x7b4/0x10c0 [ 1285.885182][ T31] ? __pfx_kthread+0x10/0x10 [ 1285.885198][ T31] ret_from_fork_asm+0x1a/0x30 [ 1285.885222][ T31] [ 1285.885235][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1285.885246][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1285.885273][ T31] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1285.885281][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1285.885289][ T31] Call Trace: [ 1285.885294][ T31] [ 1285.885299][ T31] dump_stack_lvl+0x100/0x190 [ 1285.885319][ T31] vpanic+0x552/0x970 [ 1285.885333][ T31] ? __pfx_vpanic+0x10/0x10 [ 1285.885347][ T31] ? do_raw_spin_unlock+0x145/0x1e0 [ 1285.885365][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1285.885381][ T31] ? rcu_is_watching+0x12/0xc0 [ 1285.885402][ T31] panic+0xd1/0xe0 [ 1285.885415][ T31] ? __pfx_panic+0x10/0x10 [ 1285.885430][ T31] ? nmi_cpu_backtrace+0x79/0x200 [ 1285.885446][ T31] ? nmi_trigger_cpumask_backtrace+0x1be/0x230 [ 1285.885462][ T31] ? watchdog.cold+0x198/0x1ca [ 1285.885478][ T31] ? watchdog+0xcd3/0xfe0 [ 1285.885497][ T31] watchdog.cold+0x1a9/0x1ca [ 1285.885518][ T31] ? __pfx_watchdog+0x10/0x10 [ 1285.885538][ T31] ? __kthread_parkme+0x18c/0x230 [ 1285.885561][ T31] ? kthread+0x13a/0x450 [ 1285.885575][ T31] ? __pfx_watchdog+0x10/0x10 [ 1285.885593][ T31] kthread+0x370/0x450 [ 1285.885608][ T31] ? __pfx_kthread+0x10/0x10 [ 1285.885624][ T31] ret_from_fork+0x754/0xd80 [ 1285.885647][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1285.885667][ T31] ? __switch_to+0x7b4/0x10c0 [ 1285.885681][ T31] ? __pfx_kthread+0x10/0x10 [ 1285.885697][ T31] ret_from_fork_asm+0x1a/0x30 [ 1285.885720][ T31] [ 1285.885780][ T31] Kernel Offset: disabled