last executing test programs: 28.828019074s ago: executing program 0 (id=5536): mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xfffffffffffeffff, 0x15) (async) madvise$auto(0x0, 0xfffffffffffeffff, 0x15) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/system/machinecheck/machinecheck0/bank2\x00', 0x68542, 0x0) pread64$auto(r0, 0x0, 0xb, 0xffe) (async) pread64$auto(r0, 0x0, 0xb, 0xffe) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x7, 0x28000) sysfs$auto(0x2, 0x400000000008, 0x0) (async) sysfs$auto(0x2, 0x400000000008, 0x0) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto(r1, 0x6, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020005, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000dc0), r2) sendmsg$auto_IPVS_CMD_GET_DEST(r2, &(0x7f0000003a40)={0x0, 0x0, &(0x7f0000003a00)={&(0x7f0000000e80)={0x1c, r3, 0xc0dce8a66cb0a7ff, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x5, 0x2, 0x0, 0x1, [@generic="f1"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040011}, 0x40010) (async) sendmsg$auto_IPVS_CMD_GET_DEST(r2, &(0x7f0000003a40)={0x0, 0x0, &(0x7f0000003a00)={&(0x7f0000000e80)={0x1c, r3, 0xc0dce8a66cb0a7ff, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x5, 0x2, 0x0, 0x1, [@generic="f1"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040011}, 0x40010) socket(0xa, 0x5, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop13\x00', 0x60742, 0x0) write$auto(r4, &(0x7f0000000040)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) timer_create$auto(0x0, 0x0, 0x0) (async) timer_create$auto(0x0, 0x0, 0x0) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000cc0), r6) (async) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000cc0), r6) mmap$auto(0x2000000000000, 0x9, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8400) madvise$auto(0x0, 0xffffffffffff0005, 0x17) getsockopt$auto_SO_SNDLOWAT(r5, 0xf44, 0x13, &(0x7f00000001c0)='*][\x00', &(0x7f0000000200)=0x2b) r7 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x141000, 0x0) poll$auto(&(0x7f0000000180)={r7, 0xa0b, 0x9816}, 0x7f, 0x0) ioctl$auto_VHOST_SET_OWNER(r8, 0xaf01, 0x0) (async) ioctl$auto_VHOST_SET_OWNER(r8, 0xaf01, 0x0) gettid() rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) rt_sigtimedwait$auto(&(0x7f0000000100)={0xfffffffffffffbff}, 0x0, 0x0, 0x8) 28.545650273s ago: executing program 0 (id=5537): io_uring_setup$auto(0xa, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(0x3, 0x10000000084, 0x19, 0x0, 0x8) 28.328221094s ago: executing program 0 (id=5538): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) (async) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r0) mmap$auto(0x0, 0x4003, 0x2, 0x91, r0, 0x300000000000) (async) mmap$auto(0x0, 0x4003, 0x2, 0x91, r0, 0x300000000000) mmap$auto(0x0, 0x40, 0x40000e2, 0xeb1, 0x401, 0x8000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0xa8c2ee1297fd591d, 0x0) (async) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0xa8c2ee1297fd591d, 0x0) ioctl$auto_VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r1}) write$auto(0x1, 0x0, 0x80000000) 28.101593261s ago: executing program 0 (id=5539): unshare$auto(0x40000080) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/net/rpc/auth.rpcsec.init/flush\x00', 0x28102, 0x0) write$auto(r0, 0x0, 0x7ff) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x22, 0x2, 0x2) mmap$auto(0x4ebf, 0x4, 0x6, 0xebd, 0x400, 0xa000) socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16], 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0xc0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x81, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000680)='/dev/v4l-subdev5\x00', 0x20281, 0x0) ioctl$auto(r2, 0xc038563c, r1) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000200bd7000fedbdf25020000080013"], 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/apparmor/parameters/rawdata_compression_level\x00', 0x80, 0x0) io_uring_setup$auto(0x7, 0x0) r3 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000140), 0x2200, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, 0x0) r4 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r4, 0x40383d0c, 0x0) 27.184327308s ago: executing program 0 (id=5545): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) kcmp$auto(0x1, 0x1, 0x0, 0x100000004, 0x100000001) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) (async) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/cgroups\x00', 0x10b502, 0x0) (async) readv$auto(0x3, &(0x7f0000003080)={&(0x7f0000003040), 0x4}, 0x5) socket(0x10, 0x2, 0x0) (async, rerun: 64) statmount$auto(0x0, &(0x7f0000000040)={0x0, 0x0, 0x38, 0xffffff01, 0x9, 0x9, 0x80000006, 0x7, 0x8, 0x5, 0x5, 0x9, 0x2, 0x8, 0x1, 0xf, 0xffffffffffffffff, 0x9, 0x1, 0x5, 0x40010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x800, 0x0) (async, rerun: 64) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000dddbdf25020001000800030000000000080015"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) (async, rerun: 32) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1800"], 0x1ac}, 0x1, 0x0, 0x0, 0x4000044}, 0x40000) (async, rerun: 32) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x1f00) 26.889465554s ago: executing program 0 (id=5546): sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) mmap$auto(0x0, 0x40000a, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x1e, 0x1, 0x0) mmap$auto(0x3, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x3, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r1, 0x0, 0x5f) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) getsockname$auto(r0, &(0x7f0000000000), &(0x7f0000000040)=0x3) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) (async) socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) (async) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14) (async) setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vivid.0/video4linux/vbi0/name\x00', 0x14f063, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x1, 0x84) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) (async) io_uring_setup$auto(0x1, 0x0) socket(0xa, 0x801, 0x84) (async) socket(0xa, 0x801, 0x84) io_uring_setup$auto(0x4, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) io_uring_enter$auto(0x3, 0x0, 0x1, 0x3, 0x0, 0x2) io_uring_enter$auto(0x3, 0x1, 0x2688, 0x5, 0x0, 0x7) (async) io_uring_enter$auto(0x3, 0x1, 0x2688, 0x5, 0x0, 0x7) setsockopt$auto(0x3, 0x10000000084, 0x77, 0x0, 0xc) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) 11.709330044s ago: executing program 32 (id=5546): sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) mmap$auto(0x0, 0x40000a, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x1e, 0x1, 0x0) mmap$auto(0x3, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x3, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r1, 0x0, 0x5f) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) getsockname$auto(r0, &(0x7f0000000000), &(0x7f0000000040)=0x3) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) (async) socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) (async) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14) (async) setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vivid.0/video4linux/vbi0/name\x00', 0x14f063, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x1, 0x84) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) (async) io_uring_setup$auto(0x1, 0x0) socket(0xa, 0x801, 0x84) (async) socket(0xa, 0x801, 0x84) io_uring_setup$auto(0x4, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) io_uring_enter$auto(0x3, 0x0, 0x1, 0x3, 0x0, 0x2) io_uring_enter$auto(0x3, 0x1, 0x2688, 0x5, 0x0, 0x7) (async) io_uring_enter$auto(0x3, 0x1, 0x2688, 0x5, 0x0, 0x7) setsockopt$auto(0x3, 0x10000000084, 0x77, 0x0, 0xc) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) 5.16821857s ago: executing program 1 (id=5615): r0 = socket(0x2, 0x6, 0x0) openat$auto_trace_time_stamp_mode_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/timestamp_mode\x00', 0xa0800, 0x0) r1 = openat$auto_dmaengine_summary_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x3b3282, 0x0) mmap$auto(0x0, 0xe987, 0x20000000000df, 0xeb1, r0, 0x2) r2 = socket(0x11, 0x80003, 0x800) setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4) r3 = socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb2, 0x40000000000a1, 0x8000) setsockopt$auto(r3, 0x107, 0x12, 0x0, 0x4) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socket(0x10, 0x2, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000000)='3\xc7\xff\xff\xff\xdd\x00\b(Ks\x0f\x87|P\x11\xd1li0\x89\x85\x90QM\xd6wfF\xf1x\xb3;c\tP\x03\x84\x97\x99\x83\x97\x81:\xf3\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xff\xdak\xb0m\xe1U\xb3\xa2\xee\xdcTJQO\x98\xc8w\x8c\xe7\x00\x00\x00\x1dj\x1e\xebQT\xdd\x9b\x00'/101, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYBLOB="1800"], 0x1ac}, 0x1, 0x0, 0x0, 0x4000044}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="dd195ebfd213ee8e96017721fee5516532c7a8c8edf6ecdf4cf3a852851c636d34491719ba4d61888e05bd761682862c9f0dc09bed3ffecabccfdd51cb6f65fae96bf7d474dc8b919ce9608aaf34a4a8d699893d71a6d5c4e41bf3eeac55a26dcfd04cc8324815d4646a78cc67e9180465b77072a2ae172b67436fe722e4a06a2d526b3a815400a59f4853679bb48bd3563de8e8586aebb545ab0f436ee6595e6c0fd4c7a63bb79011401338", @ANYRES64=r1, @ANYBLOB="010027bd70"], 0x34}, 0x1, 0x0, 0x0, 0x20008840}, 0x40000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xfffff4a4, 0x0, 0xfffffffffffffffd) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000400)='/dev/amidi2\x00', 0x201, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8) 4.494540601s ago: executing program 3 (id=5616): unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) read$auto(0x3, 0x0, 0x7) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0xf8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x1, 0x4, 0x3, 0x3, 0x6, 0xffffffffffffffff, 0x3, 0x8000000000400000, 0x3, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/iforce/bind\x00', 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) ioctl$auto_TIOCGDEV2(r2, 0x542f, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap$auto(0xfffffffffffffffd, 0x40009, 0xbe, 0x9b72, 0x7, 0x6) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x2, 0x10000002, 0x6}) r3 = epoll_create$auto(0x8) epoll_ctl$auto(r3, 0x1, 0x8000000000000000, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x1, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) mremap$auto(0x0, 0x7, 0x3fd6, 0x0, 0x1ffffffe) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/003/001\x00', 0x402, 0x0) socket(0xa, 0x5, 0x84) 4.254823448s ago: executing program 1 (id=5617): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/transparent_hugepage/shmem_enabled\x00', 0x466002, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/drm/parameters/timestamp_precision_usec\x00', 0x0, 0x0) (async) r1 = prctl$auto_PR_SET_MM_END_DATA(0xffff0ac8, 0x4, 0x0, 0x400, 0x8) r2 = ioctl$auto_TUNGETVNETHDRSZ2(r1, 0x800454d7, &(0x7f0000000140)=0x5) ioctl$auto_SNDRV_PCM_IOCTL_TTSTAMP(r2, 0x40044103, &(0x7f0000000100)=0x622) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000010c0)=""/4096, 0x1000) (async) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000000)=""/52, 0x34) 4.021277486s ago: executing program 1 (id=5618): sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x4, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r0 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) setresuid$auto(0x0, 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto(r2, 0x40004580, r2) sendfile$auto(r1, r1, 0x0, 0x2) ioctl$auto_SNAPSHOT_FREE(r0, 0x3314, 0x0) socket(0x29, 0x2, 0x0) socket(0x10, 0x2, 0x0) mmap$auto(0x101, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x3a) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000001700), r3) sendmsg$auto_NETDEV_CMD_DEV_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="010326bd7000fedbdf2501000000169004ef873359f869c911dafb831026af8bd0211f0d343424edc93940437695ba93cdfbb8999163f9f638cff08a69679a08e92604c68c9a77c3f8bbb2a986097260d706feddabd1a6b008aad508"], 0x14}, 0x1, 0xf0ffff, 0x0, 0x4005}, 0x28044004) mmap$auto(0x0, 0x400008, 0xdf, 0x9b76, 0x2, 0x8000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0xa, 0x1, 0x84) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) connect$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0xe0}, 0x55) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000894}, 0x4000000) bpf$auto(0x0, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xffff, 0xfffff0b6, 0xffff, 0x84, 0xac1, 0x2, 0x36242398, 0xfffff5b2, 0x3bb, 0x8000007, 0xffff, 0x6, 0x81, 0x68198}, 0x6f3) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) 3.564398191s ago: executing program 1 (id=5620): mmap$auto(0x0, 0x2000d, 0x4000000200de, 0xeb1, 0x404, 0x8000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r0, 0x4, 0x100000000) ptrace$auto_PTRACE_ARCH_PRCTL(0x1e, r0, 0x6, 0x7fff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:03.0/resource0\x00', 0x103000, 0x0) readv$auto(0x3, &(0x7f0000000040)={&(0x7f0000003040), 0x1}, 0x9) io_uring_setup$auto(0xa, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(0x3, 0x10000000084, 0x19, 0x0, 0x8) 3.42280588s ago: executing program 3 (id=5621): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) r0 = socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) setsockopt$auto(r0, 0x6, 0x1e, 0x0, 0x7) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000100), 0x80840, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x4242, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22200, 0x154) lseek$auto(r1, 0x0, 0x2) select$auto(0xd, 0x0, &(0x7f0000000300)={[0xa2, 0x2e79, 0x3, 0xc, 0xa2, 0x8d, 0xc44, 0x1, 0x9, 0xdf6a, 0x9, 0x8, 0x1, 0xfffffffffffffffa, 0x80000000, 0x3]}, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x104, r3, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@NFSD_A_SERVER_SCOPE={0xe5, 0x4, 'nfs\x81\x9b\xb6$\x10\x16\xfb:\xb3\x15Y\x90\xf9\xc0\xc0\x88.!s\x1f\xe9\x1d\'&Hvn\xb1\x88\xbf\x15<\xa6e\xbc\xa1\xfa\xbeG\t*_kW_m\x1b:,\xc6\xa6\xfd\xba\xcd\xbe\xbe=\xc3\xbf\xd3f2!\xc4\x05EA\xac\x04\x83\xf1\x99\xa05\xfb\xf3\xf4?(\x9c\x8b\x9d\xdcV\xc5\x00\tm\xdez\xc9\xdbn\xb1\t\n\xe7\x8cd\xca\xd49\r\x1a@\xe1_\xb1_\xf8\xf3\xb1]\xad\xaf\xd9\xd0\xa8:\xd4<\x8d\xbc\rg[\x1d\x98\xb2r\xac\x83\xf8s\xafh@\x8c\xa7\xcd\xb3+Qy\"\xe8\b\x00\x00\x00\x00\x00\x00\x00Ha\xdb\xa3F\nGU&7\x15\x19\xeb\x9b\x9eU\xab\x86\x10\x9d\xaf>\xda(R\xcb\xe6\xf7\x8c\xf8\xb1\xdf\xe4t\xe6\x9f\x81\xb3\xbb\xc3\xbf\x8e\xd9VC\xa7\x03rJ.\xf6L\x94b\xc5\x03\xea\x84u\x92\xc0\xcd\x16\xfb<\x03\x00\x00'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x2}]}, 0x104}}, 0x4000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) (async) socket(0x2, 0x1, 0x106) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) setsockopt$auto(r0, 0x6, 0x1e, 0x0, 0x7) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000100), 0x80840, 0x0) (async) open(&(0x7f00000001c0)='./file0\x00', 0x4242, 0x0) (async) open(&(0x7f0000000800)='./file0\x00', 0x22200, 0x154) (async) lseek$auto(r1, 0x0, 0x2) (async) select$auto(0xd, 0x0, &(0x7f0000000300)={[0xa2, 0x2e79, 0x3, 0xc, 0xa2, 0x8d, 0xc44, 0x1, 0x9, 0xdf6a, 0x9, 0x8, 0x1, 0xfffffffffffffffa, 0x80000000, 0x3]}, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x104, r3, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@NFSD_A_SERVER_SCOPE={0xe5, 0x4, 'nfs\x81\x9b\xb6$\x10\x16\xfb:\xb3\x15Y\x90\xf9\xc0\xc0\x88.!s\x1f\xe9\x1d\'&Hvn\xb1\x88\xbf\x15<\xa6e\xbc\xa1\xfa\xbeG\t*_kW_m\x1b:,\xc6\xa6\xfd\xba\xcd\xbe\xbe=\xc3\xbf\xd3f2!\xc4\x05EA\xac\x04\x83\xf1\x99\xa05\xfb\xf3\xf4?(\x9c\x8b\x9d\xdcV\xc5\x00\tm\xdez\xc9\xdbn\xb1\t\n\xe7\x8cd\xca\xd49\r\x1a@\xe1_\xb1_\xf8\xf3\xb1]\xad\xaf\xd9\xd0\xa8:\xd4<\x8d\xbc\rg[\x1d\x98\xb2r\xac\x83\xf8s\xafh@\x8c\xa7\xcd\xb3+Qy\"\xe8\b\x00\x00\x00\x00\x00\x00\x00Ha\xdb\xa3F\nGU&7\x15\x19\xeb\x9b\x9eU\xab\x86\x10\x9d\xaf>\xda(R\xcb\xe6\xf7\x8c\xf8\xb1\xdf\xe4t\xe6\x9f\x81\xb3\xbb\xc3\xbf\x8e\xd9VC\xa7\x03rJ.\xf6L\x94b\xc5\x03\xea\x84u\x92\xc0\xcd\x16\xfb<\x03\x00\x00'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x2}]}, 0x104}}, 0x4000) (async) 3.421302186s ago: executing program 2 (id=5622): socket(0xa, 0x801, 0x84) setsockopt$auto(0x3, 0x29, 0x43, 0x0, 0x9) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/tunl0/napi_defer_hard_irqs\x00', 0x28b42, 0x0) sendfile$auto(r0, r0, 0x0, 0x1ff) mmap$auto(0x0, 0x20008, 0xdf, 0xeb1, 0x401, 0x8000) open(0x0, 0x0, 0x408) mmap$auto(0x0, 0x27, 0xdf, 0x9b72, 0x1000, 0x28000) openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, 0x0, 0x22282, 0x0) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x0, 0x0, 0x0}, 0x58) clock_nanosleep$auto(0xfffffff9, 0x200000, 0x0, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x1, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x14d27e, 0x56) fallocate$auto(0x8000000000000003, 0x3, 0xd, 0x7fffffffffffffff) ioctl$auto_XFS_IOC_FREESP64(0xffffffffffffffff, 0x40305825, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x10, 0x2, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0xffffffeb) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x1c1080, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0xc, 0x7, 0xa, 0x3, 0x10, 0x5, 0x0, 0x3, 0x6, 0x10000000000002, 0x6c8, 0x5, 0xea, 0x5, 0x1, 0x7, 0x10000002, 0x3, 0x5, 0x7, 0x1, 0x0, 0x400004, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, [0xffffffffffffffff, 0x20000000, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x6, 0xf, 0x0, 0x0, 0x8000, 0x5f23, 0x0, 0x40, 0x0, 0x0, 0x4, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1ff, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2]}, 0x5fe, 0x40081) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40080c1) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0xc20f0000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x8) socket(0x28, 0x5, 0x0) shutdown$auto(0x200000003, 0x5) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x84) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x0) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r2) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0022e816575f18eec18a4176fe", @ANYRES16=r3, @ANYBLOB="010026bd7000f7dbdf2503000000180001801400020073797a5f74756e0000000000000000000500020000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000040}, 0x2000c840) 3.298969908s ago: executing program 1 (id=5623): r0 = mq_open$auto(&(0x7f0000000280)='\\3.\x0e\x80', 0x9, 0x21, 0x0) ioctl$auto_XFS_IOC_ALLOCSP(r0, 0x4030580a, &(0x7f0000000240)={0x7fff, 0x200, 0xef2, 0x4d93, 0x3}) mq_notify$auto(r0, &(0x7f00000002c0)={@sival_ptr=0x0, @raw=0x1, 0x1}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_GET(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r2, 0x1, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xc800}, 0x20004080) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x585241, 0x0) pread64$auto(r3, 0x0, 0x40000000f42c, 0x80002) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_severities_coverage_fops_severity(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) ioctl$auto_HPET_IE_OFF(r0, 0x6802, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r4 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x1, 0x7) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_WIPHY(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="13002cbd7000dddbdf250200000008000300", @ANYRES32, @ANYBLOB="08006100010000000c006200ffffff9e3c6728d4037ca81045d2614f9892d80400206c38be026b0400000000000000db860000000000000009c83af350edfae3cc442443e492efaea8184aeba426f33428e8d0b72f8e87ebe0a31fa46ecc4f284f820b929d2aac15ed014d56a9269b982d731961084f89e428427c2700b69865d145130715f060f2bfe2bf9bf8e2776f941e8177fffae4d7b534a19acf0fa0232711257d7ff281c893"], 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) r7 = getpid() process_vm_readv$auto(r7, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) ioctl$auto_XFS_IOC_FREESP64(r4, 0x40305825, &(0x7f0000000200)={0x2704, 0xffff, 0x1, 0x1, 0x1, 0xffffffffffffffff}) sendmsg$auto_NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000440)={0x35c, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_SUPPORTED_COMMANDS={0x2a3, 0x19, 0x0, 0x1, [@typed={0x8, 0x116, 0x0, 0x0, @fd=r0}, @typed={0x9, 0xe4, 0x0, 0x0, @str='$./$\x00'}, @typed={0x8, 0x102, 0x0, 0x0, @str=')(-\x00'}, @nested={0x19f, 0x103, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@multicast2}, @generic="7c6e3e682282", @nested={0x4, 0xae}, @generic="90410da743a85a05e6a8973af2f3a396177debf1243741327ab12e50d05b25c90a90e4c6c7b9ad007bee5db0837f7b8cb37e4dc010b80d413dffea07714126bfa3f7a573ab5904865e30bdd57dfd5c6ed160754832bb96f819851984f1eeea49a4211272d258446be4185481ba4809a81e28d6f82bd384aa3fcaa0769bd1", @nested={0x4, 0x57}, @generic="8ee355a163787ee93e2a46b86f8e9f4d1ba9fe4212ebdc08fb4d478fa3b3a745e340c7db0b32fcd606740c58227e21343df7fc051fc2d194c820c82f78232956f4a88917ee898ef676a06878a6b71d8de60f7ecc1ed9e0", @typed={0x8, 0x148, 0x0, 0x0, @pid=r7}, @generic="5149d0db03e16ec615eac0d36ec73b9b37d8faf9b72674b3065a", @generic="c44019dd9de4a796bbc864ad8682c1cbd609c115bfc73ec3c8ee3024bb1665ee5e0cbc834d821a1f9390fbff0876d1cffb390f7bdfa30bbfdc8b042ad54cdd0349eca78796622e61ebca30c373ca0ac2fb68516b782522632165c45d3e530b0fe78051aac4cde8772aa751b3fd8b34a4ae76cefd5a6db1eaaec1137e7db242b5f0c076f63661b2e43082", @nested={0x4, 0x3e}]}, @typed={0x14, 0x48, 0x0, 0x0, @ipv6=@local}, @generic="accf76bfb9c4e78c384b0991a78d6c4cbef9f4ec6bbd14d7e117b9f96d760729d6efa3c831658cdcb5409b44dc5ebd9c7b4892e55aa0a54dd9942e4b60e194f8c6120f6686350a6cbdd7b20487cb785cac78cab1e2e1b5d3198bcfc6fb48ea9688688e41e1d9339fa22ebbe5d1f4c51490fdadc88da2a7e9ee0a94c6763050611e1b296aba06a54c64538b2fa8e368c52a13cbba521d967eb44facd48b04efff84ba0981e6dbdddf525baf7e6b9428e8c5384ef2da2de8fb328452a651791fe6656992861bbfcf", @typed={0x8, 0xc6, 0x0, 0x0, @pid=r8}]}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_SEC_LEVEL={0x97, 0x2d, 0x0, 0x1, [@generic="9cdfcea488b9443ceb47f40f5adae204e943c72574d5658c3ba96ebc83affe81ed500336e104da2428f5c57f7895cad2c9739fe094b5d2953191cbe5c97404d068d55ba3fb466da28b349d63d6195999c57ec3dd9dedec8cd395df6d6fa39bf2b30d954c3c2f68551b90457438edd5188ee6b2a40b539ec6407b0ab5d9966edd7879bf6ca799d9e0a412f00545efeae4ad86fd"]}, @NL802154_ATTR_PEER={0x4}]}, 0x35c}, 0x1, 0x0, 0x0, 0x4008806}, 0x4800) madvise$auto(0x0, 0xffffffffffff0005, 0x19) munlock$auto(0xf, 0x6) r9 = openat$auto_nsim_dev_take_snapshot_fops_dev(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/netdevsim/netdevsim4/take_snapshot\x00', 0x80000, 0x0) r10 = openat$auto_rfcomm_dlc_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x40c40, 0x0) bpf$auto_BPF_LINK_CREATE(0x1c, &(0x7f0000000000)=@bpf_attr_0={0x10000, 0x8, 0x3, 0x80, 0x1, r9, 0x100, "a8515114c12a0f95808879b0da2de213", 0x0, r10, 0x6190ae07, 0x3, 0x8, 0x3, r6, r0}, 0x4) 3.171942002s ago: executing program 3 (id=5624): r0 = getsockopt$auto_SO_PEERPIDFD(0xffffffffffffffff, 0x4, 0x4d, &(0x7f0000000040)='/dev/sequencer2\x00', &(0x7f0000000080)=0x4) epoll_ctl$auto_EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f00000000c0)={0x5, 0x3ff}) mmap$auto(0x14, 0x20009, 0x2000000df, 0x1018, 0x401, 0x8000) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f0000000100)=0x8000) r2 = epoll_create$auto(0x87ffffd) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000500)='/proc/sys/fs/xfs/stats_clear\x00', 0x1, 0x0) write$auto(r3, 0x0, 0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(r2, 0x1, r1, 0x0) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) r5 = fanotify_init$auto(0x5, 0x0) fanotify_mark$auto(r5, 0x205, 0xa, 0x4, 0x0) fanotify_mark$auto(r4, 0x8, 0x3, r5, &(0x7f0000000140)='./file0\x00') 2.942442457s ago: executing program 3 (id=5625): r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event2\x00', 0x20201, 0x0) ioctl$auto_EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000140)={0x0, 0x6, 0x2, 0x7, "7a875bcd50a1beebe087bd46308f1ceb09ba983248beed06f5659d0d48045518"}) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) open$dir(&(0x7f00000001c0)='./file0\x00', 0x201, 0x14) open(&(0x7f00000002c0)='./file0\x00', 0x40a00, 0x0) io_uring_setup$auto(0x406, 0x0) mmap$auto(0x80000000000, 0x9, 0xffb, 0xffffffffffffdc5c, 0x3, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) io_uring_enter$auto(0x3, 0x5, 0x5f3, 0x3, 0x0, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto_F_SETPIPE_SZ(r0, 0x407, 0x9) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), 0xffffffffffffffff) r3 = setfsuid$auto(0xee00) r4 = waitid$auto_P_PID(0x1, 0x0, &(0x7f00000000c0)={@_si_pad}, 0xea, &(0x7f0000000180)={{0x12, 0x8}, {0x4, 0xbcc8}, 0x3, 0x7, 0x4, 0x1, 0x8, 0x7f1, 0x0, 0x10001, 0x10, 0x6, 0x1b73, 0xe5ea, 0x1, 0x5}) ioctl$auto_BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000240)={"85869a5fa8491dc29a378e816e411a20dee7b7d911e423340344caf146911718", 0x8, 0x2, 0x4, 0xfffffffffffffffc, 0x8, 0xffffffffffffffff}) r6 = getpgid$auto(0x0) sched_setscheduler$auto(r6, 0x0, &(0x7f0000000040)={0x7}) r7 = getpgrp(0xffffffffffffffff) sendmsg$auto_TIPC_NL_PUBL_GET(r1, &(0x7f00000009c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000980)={&(0x7f00000002c0)=ANY=[@ANYBLOB="94060000", @ANYRES16=r2, @ANYBLOB="020026bd7000fcdbdf25070000009d0208801800088004009e8008009900", @ANYRES32=r3, @ANYBLOB="04008c8004001c800800cd000a00000008007d00", @ANYRES32=r4, @ANYBLOB="0800c40008000000b001d980f9abf68d3c52bec3cfe3cdc3c804e054a064a600b926a09555ac40e803d47eca4b0a5b4a257832e508a7a3a0883686ba9356c7393965fb063d3da8b37aac6eabd4463b95c14fbf22b7d8213c9c46de25edeb1700541bea277db753552192d258d5658550c3d195a6f9b05d3967456eaaca62f728da71407ed36dceac2b48d88b81a810873262e09814f7a12690e0e8d3c7764dc32c35e594fea37d820db4a737314531ac51741e5b916b607f712533da46a5e6c9710c0c66d9baafdf6cb4654844ddb47f77fb61d5f2717c1d04bc7e1014fb3429147fba9c6f5a0e41fe9904b20d17ff8794036716e15b1fedf54c82c7511b5935b540d5d528ca313e1f9bfa7a36c23f1dfb4b0a936d3fe3dc08003a00", @ANYRES32=r0, @ANYBLOB="83cc1dc2de0bbf13b69b57b5b7aed8be3cfc0b63575979cdd7fe278873069abf86e464446d70a15e473f98d97b5a1e881c4aa148de88f21976e4daca4594ab662d4d533f32a67713d06f9c8643fbdce10625a37138f8eb5ddf5cd6dee728e0b844da02a3daf43895b3cd73d83566e7c64b1dd22c1072f045cddc69a43fc15d38e3100400d08008001a00", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="0c00140008000000000000000000006e820b8d206af24f95ebbb138503f2486e07e7d60322ab915706b36fc6c6f828cdf768156e8e682a49a28c3ec21bbfc74ee6424b0a4cb152406c89450d67e32c1b1e75f4729c3038d7cd8362f6d17d43f3f401c141cd29e386d75e1fc144846d41025a5a9088071d6ae0aaa9cb5a7e2d3ab9fb16e8595040863404b577b3d791584d1abec45a11bbab6e21f65c592024d832d9e13be6b04980d888a70800a700", @ANYRES32=r7, @ANYBLOB="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"], 0x694}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) 2.611194192s ago: executing program 2 (id=5626): r0 = ioctl$auto_SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, &(0x7f0000000000)=0x1000) ioctl$auto_SOUND_MIXER_READ_DEVMASK2(r0, 0x80044dfe, &(0x7f0000000080)="7fbcfb80cffbf8df09ab15f3aa10eda889ad866731100c22eaa2495d2ad7fe46de20ae20cd379b0883fdc800a458d87e8951a4c5d1f744151f3381cbacc7f2bab256fcb86cdc82789cc885c79adafc30372c8aecdffeee7e370a4fffe7397fb82a8dbeb9cd023bba6883ce4476d61a885b7fe4c801e826fc99914aaf636183e7864a483e") (async) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) 2.234739437s ago: executing program 3 (id=5627): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x900000a3d9) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) mmap$auto(0x0, 0xd561, 0x10000000000df, 0xeb2, 0xffffffffffffffff, 0x8000) timer_create$auto(0x2, 0x0, 0x0) timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x26b, 0x4}, {0x0, 0x83}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) r2 = socket(0xa, 0x1, 0x0) setsockopt$auto(r2, 0x29, 0x3b, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x1) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x19, 0x0, 0x9, 0x0, 0x1f, 0x3}, 0x4}, 0x7, 0x20020004) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000840}, 0x2000c840) write$auto(0x3, 0x0, 0x7fffffff) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nullb0/queue/zone_append_max_bytes\x00', 0x48500, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x4000084) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0x5, 0x8, 0x10001, 0x0, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000010c0)=""/4090, 0xffa) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r5, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) 2.233355168s ago: executing program 2 (id=5634): mmap$auto(0x3, 0x420009, 0x4000000000e2, 0x10, 0x401, 0x6) socket(0x1f, 0x0, 0x14) (async) socket(0x1f, 0x0, 0x14) socket(0x11, 0x80003, 0x300) (async) socket(0x11, 0x80003, 0x300) socket(0x1a, 0x2, 0x7) (async) socket(0x1a, 0x2, 0x7) socket(0x2, 0x1, 0x0) socket(0x1d, 0x2, 0x7) socket(0xa, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) pidfd_open$auto(0x1, 0x0) socket(0x10, 0x2, 0x14) socket(0x11, 0x80003, 0x300) socket(0x1d, 0x2, 0x7) socket(0x2, 0x1, 0x0) (async) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) (async) r0 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r0, 0x40103d0b, 0x0) (async) ioctl$auto_posix_clock_file_operations_posix_clock(r0, 0x40103d0b, 0x0) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) r2 = socket(0x10, 0x2, 0x2) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000140), r1) (async) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000140), r1) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) (async) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="72010000", @ANYRESOCT=r1], 0x1ac}, 0x1, 0x0, 0x0, 0x24040081}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/zoneinfo\x00', 0x388a40, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) prctl$auto_SECCOMP_MODE_FILTER(0x6, 0x2, 0x0, 0x6, 0x8) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1803, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x2}, 0x3, 0x80) 2.025659156s ago: executing program 2 (id=5628): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x848000000015, 0x805, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/mtd/mtd0/mtd0/nvmem\x00', 0x0, 0x0) read$auto(r1, &(0x7f0000002440)='\x00', 0xd) r2 = socket(0x22, 0x80003, 0x300) setsockopt$auto(r2, 0x107, 0x2, 0x0, 0x28) r3 = openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000001080), 0x4400, 0x0) r4 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$auto_qrtr_tun_ops_tun(r4, &(0x7f0000000300)="01000000d80746ebe4fa29705e2e654014f2bc90628546cda7e9ce67b7d2ab52b096b449a312a437bac96a8cbd5f23dc7bf6f14d15f2f273c36ef21cef7aeb39937ef4ea2f4dd48bc81624c1ed60c83c39ba4d4ebee5b273c9888dbd978927b4b89795bcfc7ce379345bea07636878f456f4e82905ddfef781fbf9825f22c3d1af4a2295e2fad62ed1a9fa2db5eff40233560c88004511ae", 0x98) bind$auto(r3, &(0x7f0000000000)=@generic={0xa, "dfffffffffffffff00"}, 0x4) r5 = socket(0x2, 0x1, 0x0) getsockopt$auto(r5, 0x6, 0x7, &(0x7f00000003c0)='/dev/ptys4\x00', &(0x7f0000000000)=0x6) fsconfig$auto_HIDEPID_NOT_PTRACEABLE(r5, 0xdb4, &(0x7f0000000000)='\x00', &(0x7f0000000080)="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", 0x4) kexec_load$auto(0x200000000007, 0x1, &(0x7f0000000040)={@kbuf=0x0, 0x2aaa, 0x6c0000c000, 0xc000}, 0x4) sendfile$auto(r0, r5, &(0x7f00000010c0)=0xa9, 0x1) 1.757330851s ago: executing program 1 (id=5629): unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x200, 0x0) read$auto(0x3, 0x0, 0x7) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0xf8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x1, 0x4, 0x3, 0x3, 0x6, 0xffffffffffffffff, 0x3, 0x8000000000400000, 0x3, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/iforce/bind\x00', 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) ioctl$auto_TIOCGDEV2(r2, 0x542f, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap$auto(0xfffffffffffffffd, 0x40009, 0xbe, 0x9b72, 0x7, 0x6) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x2, 0x10000002, 0x6}) r3 = epoll_create$auto(0x8) epoll_ctl$auto(r3, 0x1, 0x8000000000000000, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x1, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) mremap$auto(0x0, 0x7, 0x3fd6, 0x0, 0x1ffffffe) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/003/001\x00', 0x402, 0x0) socket(0xa, 0x5, 0x84) 1.566951527s ago: executing program 2 (id=5630): socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x0, @multicast2}, 0x6b) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x13}}, 0x54) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0xa, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x10bb41, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x0, 0x0) r0 = openat$auto_nsim_nexthop_bucket_activity_fops_fib(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$auto(0x3, 0x4611, r0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/vhci_hcd.8/usb25/25-0:1.0/usb25-port7/state\x00', 0x22902, 0x0) mmap$auto(0x0, 0xa, 0x72, 0x8b72, 0x2, 0x8000) sysfs$auto(0x2, 0x1f, 0x0) r2 = socket(0x2, 0x801, 0x106) listen$auto(r2, 0xf52b) getsockopt$auto(r2, 0x11c, 0x2, 0x0, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) socketcall$auto(0xa, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_register$auto_IORING_REGISTER_PBUF_STATUS(r1, 0x1a, &(0x7f0000000380)="399d2baa72191a8b1f16d6bce712d83c797ed3a89f9788f55915082ff5bfc74e71360a538436338defbc7817d17c3d8f1edb899829c74db19866b42f1548334be1ff8bf12bd22eb98d0cfef33ab4c39317afb3486db2775413246404f721528f9c52f315f2a15a63abf643d7300096f4b389607abe20559e04287220d0788c824bd3d8d6b61cc42dc6adcc3ce6c82ea5e07897", 0x1) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0xffffffffffffffff) open(&(0x7f0000000000)='./file0\x00', 0x161343, 0x580f790b2ef4c33) 581.188474ms ago: executing program 4 (id=5591): mmap$auto(0x0, 0x2000d, 0x4000000200de, 0xeb1, 0x404, 0x8000) io_uring_setup$auto(0xa, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66) connect$auto(0x3, 0x0, 0x54) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) setsockopt$auto(0x3, 0x10000000084, 0x19, 0x0, 0x8) 580.11171ms ago: executing program 2 (id=5639): unshare$auto(0x40000080) unshare$auto(0x93a3) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2c, 0x1, 0x0) listen$auto(0x3, 0x81) r2 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) fcntl$auto_F_NOTIFY(r2, 0x402, 0x9000) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f00, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) mremap$auto(0x1ff000, 0x100005, 0x843, 0x3, 0x2) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r4 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/ieee80211/phy1/aql_txq_limit\x00', 0x822, 0x0) write$auto(r4, 0x0, 0x5) fsopen$auto(0x0, 0x1) prctl$auto(0x1000000003b, 0x1, 0x4, 0xd73, 0x7) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2f212cbd7000fcdbdf252100000008000300", @ANYRES32, @ANYBLOB="10002c8008004b0020f598629c"], 0x2c}}, 0x4000000) sendmsg$auto_NL80211_CMD_SET_COALESCE(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x24, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x7}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x80) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r5, r5, 0x0, 0x3) close_range$auto(0x2, 0x8, 0x0) 381.182473ms ago: executing program 4 (id=5631): mmap$auto(0x0, 0x202000a, 0x3, 0x3d3b76d4, 0xfffffffffffffffa, 0x5) io_uring_setup$auto(0x6, 0x0) openat$auto_proc_timers_operations_base(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) timer_create$auto(0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000180), 0x40900, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000e2, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0xffffffffffffffff, 0x5, 0x7) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42400, 0x48) faccessat$auto(r0, &(0x7f0000000140)='./cgroup\x00', 0x2) fcntl$auto_F_OFD_GETLK(0xffffffffffffffff, 0x24, 0x1) close_range$auto(0x0, 0x5, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') socket(0x2, 0xa, 0x1) statx$auto(0xffffff9c, 0x0, 0x1000, 0x972, 0x0) ioctl$auto(0x1, 0x890b, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0xb2) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) mlock$auto(0x81, 0xffff) lseek$auto(0x3, 0x8, 0x3) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_MODIFY_LINK_STA(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002abd7000fe03df25970000000400e2000000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x845) r1 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) write$auto(r1, 0x0, 0xfffffdf1) linkat$auto(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) mknod$auto(&(0x7f0000000280)='&&\x00', 0xcb, 0x9) 0s ago: executing program 3 (id=5632): close_range$auto(0x0, 0xfffffffffffff000, 0x2) signalfd$auto(0xffffffffffffffff, 0x0, 0x8) r0 = epoll_create$auto(0x3e) epoll_ctl$auto(r0, 0x1, 0x8000000000000000, 0x0) timer_create$auto(0x3, 0x0, 0x0) sendmsg$auto_SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x4) connect$auto(r0, &(0x7f0000000180)=@l2tp={0x2, 0x0, @multicast2, 0x2}, 0x2) mmap$auto(0x0, 0x4020005, 0xe2, 0xebf, 0x401, 0x8000) r1 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) recvmsg$auto(r0, 0x0, 0x10000007) migrate_pages$auto(0x0, 0x8, 0x0, &(0x7f00000001c0)=0x7b) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x40440, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f00000001c0)) readv$auto(r1, &(0x7f0000000200)={0x0, 0x800000000000fffc}, 0xfffffffffffffffb) unshare$auto(0x40000080) socket(0xa, 0x3, 0x3) ioctl$auto_KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xd0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x8080, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) write$auto(0xffffffffffffffff, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa) unshare$auto(0x40000080) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dmmidi2\x00', 0x101, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100200400f) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) kernel console output (not intermixed with test programs): x50 [ 1094.539306][T28210] ? kasan_save_stack+0x30/0x50 [ 1094.539319][T28210] ? kasan_save_track+0x14/0x30 [ 1094.539333][T28210] ? __kasan_kmalloc+0xaa/0xb0 [ 1094.539346][T28210] ? __kvmalloc_node_noprof+0x360/0xa00 [ 1094.539360][T28210] ? cache_write_procfs+0xd7/0x160 [ 1094.539375][T28210] ? proc_reg_write+0x240/0x330 [ 1094.539400][T28210] ? __pfx_rsc_parse+0x10/0x10 [ 1094.539412][T28210] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1094.539449][T28210] ? find_held_lock+0x2b/0x80 [ 1094.539465][T28210] ? __might_fault+0xc5/0x140 [ 1094.539487][T28210] ? __might_fault+0xc5/0x140 [ 1094.539517][T28210] cache_do_downcall+0xbd/0x130 [ 1094.539533][T28210] cache_write_procfs+0xf5/0x160 [ 1094.539550][T28210] ? __pfx_cache_write_procfs+0x10/0x10 [ 1094.539567][T28210] proc_reg_write+0x240/0x330 [ 1094.539592][T28210] ? __pfx_proc_reg_write+0x10/0x10 [ 1094.539615][T28210] vfs_writev+0x5ea/0xe10 [ 1094.539628][T28210] ? rcu_is_watching+0x12/0xc0 [ 1094.539657][T28210] ? __pfx_vfs_writev+0x10/0x10 [ 1094.539670][T28210] ? fdget_pos+0x2aa/0x380 [ 1094.539688][T28210] ? find_held_lock+0x2b/0x80 [ 1094.539715][T28210] ? __fget_files+0x21f/0x3d0 [ 1094.539735][T28210] ? do_writev+0x13e/0x340 [ 1094.539748][T28210] do_writev+0x13e/0x340 [ 1094.539762][T28210] ? __pfx_do_writev+0x10/0x10 [ 1094.539782][T28210] do_syscall_64+0x106/0xf80 [ 1094.539799][T28210] ? clear_bhb_loop+0x40/0x90 [ 1094.539818][T28210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1094.539834][T28210] RIP: 0033:0x7fd64279c819 [ 1094.539847][T28210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1094.539862][T28210] RSP: 002b:00007fd643597028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1094.539877][T28210] RAX: ffffffffffffffda RBX: 00007fd642a15fa0 RCX: 00007fd64279c819 [ 1094.539887][T28210] RDX: 0000000000000003 RSI: 0000200000000200 RDI: 0000000000000002 [ 1094.539897][T28210] RBP: 00007fd643597090 R08: 0000000000000000 R09: 0000000000000000 [ 1094.539905][T28210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1094.539914][T28210] R13: 00007fd642a16038 R14: 00007fd642a15fa0 R15: 00007fff30fe9598 [ 1094.539934][T28210] [ 1095.065213][T28216] openvswitch: netlink: Message has 4 unknown bytes. [ 1095.118543][T28222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4869'. [ 1095.816375][T28246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4875'. [ 1095.840101][T26481] Bluetooth: hci0: command 0x0406 tx timeout [ 1095.896140][T28249] netlink: 25 bytes leftover after parsing attributes in process `syz.2.4875'. [ 1096.178827][T28253] FAULT_INJECTION: forcing a failure. [ 1096.178827][T28253] name failslab, interval 1, probability 0, space 0, times 0 [ 1096.244436][T28253] CPU: 0 UID: 0 PID: 28253 Comm: syz.0.4876 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1096.244464][T28253] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1096.244470][T28253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1096.244479][T28253] Call Trace: [ 1096.244485][T28253] [ 1096.244492][T28253] dump_stack_lvl+0x100/0x190 [ 1096.244520][T28253] should_fail_ex.cold+0x5/0xa [ 1096.244539][T28253] should_failslab+0xc2/0x120 [ 1096.244557][T28253] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1096.244578][T28253] ? sunrpc_cache_lookup_rcu+0x60f/0x14d0 [ 1096.244598][T28253] ? sunrpc_cache_lookup_rcu+0x5ab/0x14d0 [ 1096.244622][T28253] sunrpc_cache_lookup_rcu+0x60f/0x14d0 [ 1096.244643][T28253] ? __kasan_kmalloc+0xaa/0xb0 [ 1096.244659][T28253] ? __pfx_sunrpc_cache_lookup_rcu+0x10/0x10 [ 1096.244682][T28253] ? kstrtoll+0x118/0x1f0 [ 1096.244696][T28253] ? __pfx_kstrtoll+0x10/0x10 [ 1096.244711][T28253] ? qword_get+0x5ab/0x870 [ 1096.244723][T28253] ? ns_to_timespec64+0x59/0xc0 [ 1096.244744][T28253] rsc_parse+0x25d/0xdf0 [ 1096.244760][T28253] ? kasan_save_stack+0x3f/0x50 [ 1096.244773][T28253] ? kasan_save_stack+0x30/0x50 [ 1096.244786][T28253] ? kasan_save_track+0x14/0x30 [ 1096.244799][T28253] ? __kasan_kmalloc+0xaa/0xb0 [ 1096.244812][T28253] ? __kvmalloc_node_noprof+0x360/0xa00 [ 1096.244827][T28253] ? cache_write_procfs+0xd7/0x160 [ 1096.244842][T28253] ? proc_reg_write+0x240/0x330 [ 1096.244867][T28253] ? __pfx_rsc_parse+0x10/0x10 [ 1096.244880][T28253] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1096.244917][T28253] ? find_held_lock+0x2b/0x80 [ 1096.244932][T28253] ? __might_fault+0xc5/0x140 [ 1096.244964][T28253] cache_do_downcall+0xbd/0x130 [ 1096.244980][T28253] cache_write_procfs+0xf5/0x160 [ 1096.245002][T28253] ? __pfx_cache_write_procfs+0x10/0x10 [ 1096.245019][T28253] proc_reg_write+0x240/0x330 [ 1096.245044][T28253] ? __pfx_proc_reg_write+0x10/0x10 [ 1096.245066][T28253] vfs_writev+0x5ea/0xe10 [ 1096.245080][T28253] ? rcu_is_watching+0x12/0xc0 [ 1096.245109][T28253] ? __pfx_vfs_writev+0x10/0x10 [ 1096.245122][T28253] ? fdget_pos+0x2aa/0x380 [ 1096.245140][T28253] ? find_held_lock+0x2b/0x80 [ 1096.245166][T28253] ? __fget_files+0x21f/0x3d0 [ 1096.245187][T28253] ? do_writev+0x13e/0x340 [ 1096.245199][T28253] do_writev+0x13e/0x340 [ 1096.245214][T28253] ? __pfx_do_writev+0x10/0x10 [ 1096.245234][T28253] do_syscall_64+0x106/0xf80 [ 1096.245250][T28253] ? clear_bhb_loop+0x40/0x90 [ 1096.245269][T28253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1096.245285][T28253] RIP: 0033:0x7fd64279c819 [ 1096.245298][T28253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1096.245313][T28253] RSP: 002b:00007fd643597028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1096.245328][T28253] RAX: ffffffffffffffda RBX: 00007fd642a15fa0 RCX: 00007fd64279c819 [ 1096.245339][T28253] RDX: 0000000000000003 RSI: 0000200000000200 RDI: 0000000000000002 [ 1096.245348][T28253] RBP: 00007fd643597090 R08: 0000000000000000 R09: 0000000000000000 [ 1096.245357][T28253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1096.245366][T28253] R13: 00007fd642a16038 R14: 00007fd642a15fa0 R15: 00007fff30fe9598 [ 1096.245387][T28253] [ 1096.740647][T28270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4879'. [ 1096.784477][T26481] Bluetooth: hci1: command 0x0c1a tx timeout [ 1096.790675][T26481] Bluetooth: hci4: command 0x0c1a tx timeout [ 1096.796715][T26481] Bluetooth: hci2: command 0x0c1a tx timeout [ 1097.943584][T26481] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1097.955965][T26481] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1097.963652][T26481] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1097.971560][T26481] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1097.983376][T26481] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1098.474388][T28308] futex_wake_op: syz.2.4888 tries to shift op by -2048; fix this program [ 1098.747370][T28300] bridge0: port 7(veth1_macvtap) entered blocking state [ 1098.825780][T28300] bridge0: port 7(veth1_macvtap) entered disabled state [ 1098.866327][T28300] veth1_macvtap: entered allmulticast mode [ 1098.909498][T28300] veth1_macvtap: left allmulticast mode [ 1099.278042][T26473] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.424642][T28327] FAULT_INJECTION: forcing a failure. [ 1099.424642][T28327] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1099.490193][T28327] CPU: 0 UID: 0 PID: 28327 Comm: syz.2.4894 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1099.490221][T28327] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1099.490227][T28327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1099.490236][T28327] Call Trace: [ 1099.490242][T28327] [ 1099.490248][T28327] dump_stack_lvl+0x100/0x190 [ 1099.490277][T28327] should_fail_ex.cold+0x5/0xa [ 1099.490296][T28327] _copy_to_iter+0x1f3/0x1720 [ 1099.490321][T28327] ? __pfx__copy_to_iter+0x10/0x10 [ 1099.490340][T28327] ? kernfs_seq_stop+0xcd/0x120 [ 1099.490361][T28327] ? kernfs_put_active+0x93/0xe0 [ 1099.490378][T28327] seq_read_iter+0xdab/0x1270 [ 1099.490402][T28327] kernfs_fop_read_iter+0x46c/0x610 [ 1099.490420][T28327] ? rw_verify_area+0xce/0x6d0 [ 1099.490443][T28327] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 1099.490463][T28327] vfs_read+0x825/0xb30 [ 1099.490480][T28327] ? __pfx_vfs_read+0x10/0x10 [ 1099.490507][T28327] ksys_read+0x12a/0x250 [ 1099.490522][T28327] ? __pfx_ksys_read+0x10/0x10 [ 1099.490542][T28327] do_syscall_64+0x106/0xf80 [ 1099.490560][T28327] ? clear_bhb_loop+0x40/0x90 [ 1099.490579][T28327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1099.490600][T28327] RIP: 0033:0x7f21e6d9c819 [ 1099.490613][T28327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1099.490628][T28327] RSP: 002b:00007f21e7b8d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1099.490643][T28327] RAX: ffffffffffffffda RBX: 00007f21e7015fa0 RCX: 00007f21e6d9c819 [ 1099.490654][T28327] RDX: 00000000000000be RSI: 0000200000000140 RDI: 0000000000000003 [ 1099.490663][T28327] RBP: 00007f21e7b8d090 R08: 0000000000000000 R09: 0000000000000000 [ 1099.490672][T28327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1099.490681][T28327] R13: 00007f21e7016038 R14: 00007f21e7015fa0 R15: 00007fffcaec59d8 [ 1099.490701][T28327] [ 1099.992571][T26473] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.070705][T28293] chnl_net:caif_netlink_parms(): no params data found [ 1100.078102][T26481] Bluetooth: hci3: command tx timeout [ 1100.158837][T26473] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.300870][T26473] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.755849][T26481] Bluetooth: hci1: ISO packet too small [ 1100.779757][T28293] bridge0: port 1(bridge_slave_0) entered blocking state [ 1100.811387][T28293] bridge0: port 1(bridge_slave_0) entered disabled state [ 1100.820787][T28342] Process accounting resumed [ 1100.852041][T28293] bridge_slave_0: entered allmulticast mode [ 1100.878410][T28293] bridge_slave_0: entered promiscuous mode [ 1100.905927][T28293] bridge0: port 2(bridge_slave_1) entered blocking state [ 1100.935302][T28373] FAULT_INJECTION: forcing a failure. [ 1100.935302][T28373] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1100.948629][T28293] bridge0: port 2(bridge_slave_1) entered disabled state [ 1100.971664][T28293] bridge_slave_1: entered allmulticast mode [ 1100.980273][T28373] CPU: 0 UID: 0 PID: 28373 Comm: syz.2.4905 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1100.980298][T28373] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1100.980304][T28373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1100.980317][T28373] Call Trace: [ 1100.980323][T28373] [ 1100.980329][T28373] dump_stack_lvl+0x100/0x190 [ 1100.980360][T28373] should_fail_ex.cold+0x5/0xa [ 1100.980378][T28373] _copy_to_user+0x32/0xd0 [ 1100.980401][T28373] simple_read_from_buffer+0xcb/0x170 [ 1100.980433][T28373] proc_fail_nth_read+0x1af/0x230 [ 1100.980454][T28373] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1100.980475][T28373] ? rw_verify_area+0xce/0x6d0 [ 1100.980497][T28373] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1100.980520][T28373] vfs_read+0x1e4/0xb30 [ 1100.980539][T28373] ? __pfx_vfs_read+0x10/0x10 [ 1100.980553][T28373] ? __fget_files+0x215/0x3d0 [ 1100.980573][T28373] ? __fget_files+0x21f/0x3d0 [ 1100.980593][T28373] ksys_read+0x12a/0x250 [ 1100.980608][T28373] ? __pfx_ksys_read+0x10/0x10 [ 1100.980628][T28373] do_syscall_64+0x106/0xf80 [ 1100.980645][T28373] ? clear_bhb_loop+0x40/0x90 [ 1100.980664][T28373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1100.980680][T28373] RIP: 0033:0x7f21e6d5d04e [ 1100.980693][T28373] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1100.980710][T28373] RSP: 002b:00007f21e7b8cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1100.980725][T28373] RAX: ffffffffffffffda RBX: 00007f21e7b8d6c0 RCX: 00007f21e6d5d04e [ 1100.980736][T28373] RDX: 000000000000000f RSI: 00007f21e7b8d0a0 RDI: 0000000000000004 [ 1100.980745][T28373] RBP: 00007f21e7b8d090 R08: 0000000000000000 R09: 0000000000000000 [ 1100.980754][T28373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1100.980763][T28373] R13: 00007f21e7016038 R14: 00007f21e7015fa0 R15: 00007fffcaec59d8 [ 1100.980786][T28373] [ 1101.188023][T28293] bridge_slave_1: entered promiscuous mode [ 1101.253647][T28293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1101.265005][T28293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1101.292807][T28293] team0: Port device team_slave_0 added [ 1101.300286][T28293] team0: Port device team_slave_1 added [ 1101.321915][T28293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1101.328910][T28293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1101.354935][T28293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1101.367051][T28293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1101.376033][T28293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1101.441621][T28293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1101.728177][T26473] geneve0: left allmulticast mode [ 1101.733247][T26473] geneve0: left promiscuous mode [ 1101.761215][T26473] bridge0: port 2(geneve0) entered disabled state [ 1101.803275][T26473] dummy0: left allmulticast mode [ 1101.813692][T26473] dummy0: left promiscuous mode [ 1101.837330][T26473] bridge0: port 3(dummy0) entered disabled state [ 1101.863522][T26473] bridge_slave_0: left allmulticast mode [ 1101.880424][T26473] bridge_slave_0: left promiscuous mode [ 1101.903969][T26473] bridge0: port 1(bridge_slave_0) entered disabled state [ 1102.155358][T26481] Bluetooth: hci3: command tx timeout [ 1102.283611][T26473] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1102.313668][T26473] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1102.332257][T26473] bond0 (unregistering): Released all slaves [ 1102.480035][T28293] hsr_slave_0: entered promiscuous mode [ 1102.513100][T28293] hsr_slave_1: entered promiscuous mode [ 1102.545777][T28293] debugfs: 'hsr0' already exists in 'hsr' [ 1102.551544][T28293] Cannot create hsr debugfs directory [ 1102.582162][T26473] tipc: Left network mode [ 1103.482800][T28404] Process accounting paused [ 1104.134468][T26473] hsr_slave_0: left promiscuous mode [ 1104.189260][T26473] hsr_slave_1: left promiscuous mode [ 1104.233249][T26473] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1104.241565][T26481] Bluetooth: hci3: command tx timeout [ 1104.297623][T26473] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1104.356300][T26473] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1104.398001][T26473] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1104.476917][T26473] veth1_macvtap: left promiscuous mode [ 1104.482455][T26473] veth0_macvtap: left promiscuous mode [ 1104.551576][T26473] veth1_vlan: left promiscuous mode [ 1104.582154][T26473] veth0_vlan: left promiscuous mode [ 1104.770900][T28469] random: crng reseeded on system resumption [ 1105.136785][T28472] FAULT_INJECTION: forcing a failure. [ 1105.136785][T28472] name failslab, interval 1, probability 0, space 0, times 0 [ 1105.210838][T26473] team0 (unregistering): Port device team_slave_1 removed [ 1105.221922][T28472] CPU: 0 UID: 0 PID: 28472 Comm: syz.3.4919 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1105.221950][T28472] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1105.221956][T28472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1105.221966][T28472] Call Trace: [ 1105.221971][T28472] [ 1105.221978][T28472] dump_stack_lvl+0x100/0x190 [ 1105.222006][T28472] should_fail_ex.cold+0x5/0xa [ 1105.222026][T28472] ? tomoyo_init_log+0x1224/0x20c0 [ 1105.222047][T28472] should_failslab+0xc2/0x120 [ 1105.222064][T28472] __kmalloc_noprof+0xe0/0x850 [ 1105.222092][T28472] tomoyo_init_log+0x1224/0x20c0 [ 1105.222116][T28472] ? vsnprintf+0x4ee/0x1240 [ 1105.222136][T28472] ? __pfx_tomoyo_init_log+0x10/0x10 [ 1105.222158][T28472] ? tomoyo_profile+0x47/0x60 [ 1105.222172][T28472] ? tomoyo_domain_quota_is_ok+0x367/0x580 [ 1105.222194][T28472] tomoyo_supervisor+0x506/0x1340 [ 1105.222213][T28472] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 1105.222241][T28472] ? tomoyo_check_path_acl+0x141/0x210 [ 1105.222260][T28472] ? tomoyo_check_acl+0x1f7/0x410 [ 1105.222280][T28472] tomoyo_path_permission+0x270/0x3b0 [ 1105.222300][T28472] tomoyo_check_open_permission+0x34d/0x3c0 [ 1105.222320][T28472] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1105.222358][T28472] ? do_raw_spin_lock+0x128/0x260 [ 1105.222382][T28472] ? path_get+0x61/0x80 [ 1105.222403][T28472] tomoyo_file_open+0x6b/0x90 [ 1105.222418][T28472] security_file_open+0xb5/0x1e0 [ 1105.222439][T28472] do_dentry_open+0x5aa/0x1660 [ 1105.222458][T28472] ? security_inode_permission+0xbf/0x250 [ 1105.222480][T28472] vfs_open+0x82/0x3f0 [ 1105.222502][T28472] path_openat+0x208c/0x31a0 [ 1105.222525][T28472] ? __pfx_path_openat+0x10/0x10 [ 1105.222549][T28472] do_file_open+0x20e/0x430 [ 1105.222567][T28472] ? __pfx_do_file_open+0x10/0x10 [ 1105.222597][T28472] ? alloc_fd+0x476/0x790 [ 1105.222615][T28472] ? do_getname+0x191/0x390 [ 1105.222637][T28472] do_sys_openat2+0x10d/0x1e0 [ 1105.222657][T28472] ? __pfx_do_sys_openat2+0x10/0x10 [ 1105.222685][T28472] __x64_sys_openat+0x12d/0x210 [ 1105.222705][T28472] ? __pfx___x64_sys_openat+0x10/0x10 [ 1105.222734][T28472] do_syscall_64+0x106/0xf80 [ 1105.222750][T28472] ? clear_bhb_loop+0x40/0x90 [ 1105.222768][T28472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1105.222784][T28472] RIP: 0033:0x7f00b919c819 [ 1105.222797][T28472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1105.222812][T28472] RSP: 002b:00007f00b9fb1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1105.222827][T28472] RAX: ffffffffffffffda RBX: 00007f00b9415fa0 RCX: 00007f00b919c819 [ 1105.222837][T28472] RDX: 0000000000000001 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1105.222847][T28472] RBP: 00007f00b9232c91 R08: 0000000000000000 R09: 0000000000000000 [ 1105.222856][T28472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1105.222865][T28472] R13: 00007f00b9416038 R14: 00007f00b9415fa0 R15: 00007fffcc229598 [ 1105.222896][T28472] [ 1105.587664][T26473] team0 (unregistering): Port device team_slave_0 removed [ 1106.316578][T26481] Bluetooth: hci3: command tx timeout [ 1106.520504][T28498] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4922'. [ 1106.583536][T28293] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1106.712508][T28293] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1106.759661][T28504] block loop4: the capability attribute has been deprecated. [ 1106.776882][T28293] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1106.833995][T28293] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1106.893042][T28507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4923'. [ 1107.328040][T28293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1107.408747][T28293] 8021q: adding VLAN 0 to HW filter on device team0 [ 1107.454405][T26470] bridge0: port 1(bridge_slave_0) entered blocking state [ 1107.461605][T26470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1107.543193][T26470] bridge0: port 2(bridge_slave_1) entered blocking state [ 1107.550349][T26470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1107.923042][T28293] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1107.987668][T28293] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1108.829660][T28293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1109.042889][T28293] veth0_vlan: entered promiscuous mode [ 1109.094135][T28293] veth1_vlan: entered promiscuous mode [ 1109.202872][T28293] veth0_macvtap: entered promiscuous mode [ 1109.243067][T28293] veth1_macvtap: entered promiscuous mode [ 1109.310939][T28293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1109.398206][T28293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1109.473983][T26670] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.518389][T26670] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.591029][T26670] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.628766][T26670] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.128900][T26474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1110.173188][T26474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1110.449154][T26487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1110.482937][T26487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1111.215326][T28618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4938'. [ 1111.224608][T28602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4934'. [ 1112.531919][T27527] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1112.543402][T27527] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1112.551286][T27527] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1112.560735][T27527] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1112.568280][T27527] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1113.300815][T28191] bridge0: port 3(syz_tun) entered disabled state [ 1113.375418][T28191] syz_tun (unregistering): left allmulticast mode [ 1113.381869][T28191] syz_tun (unregistering): left promiscuous mode [ 1113.432632][T28191] bridge0: port 3(syz_tun) entered disabled state [ 1113.509474][T28633] chnl_net:caif_netlink_parms(): no params data found [ 1113.762196][T26487] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1113.892494][T26487] bridge0: port 5(netdevsim2) entered disabled state [ 1113.969330][T26487] netdevsim netdevsim1 netdevsim2 (unregistering): left allmulticast mode [ 1114.006535][T26487] netdevsim netdevsim1 netdevsim2 (unregistering): left promiscuous mode [ 1114.063810][T26487] bridge0: port 5(netdevsim2) entered disabled state [ 1114.118650][T26487] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.254283][T26487] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.557693][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1114.564005][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1114.635277][T27527] Bluetooth: hci0: command tx timeout [ 1114.663130][T26487] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.749685][T28633] bridge0: port 1(bridge_slave_0) entered blocking state [ 1114.773636][T28633] bridge0: port 1(bridge_slave_0) entered disabled state [ 1114.807179][T28633] bridge_slave_0: entered allmulticast mode [ 1114.826393][T28633] bridge_slave_0: entered promiscuous mode [ 1114.897386][T28633] bridge0: port 2(bridge_slave_1) entered blocking state [ 1114.923818][T28633] bridge0: port 2(bridge_slave_1) entered disabled state [ 1114.965685][T28633] bridge_slave_1: entered allmulticast mode [ 1114.981809][T28633] bridge_slave_1: entered promiscuous mode [ 1115.261947][T28633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1115.323316][T28633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1115.948923][T28633] team0: Port device team_slave_0 added [ 1115.981784][T28633] team0: Port device team_slave_1 added [ 1116.090319][T26487] geneve0: left allmulticast mode [ 1116.115803][T26487] geneve0: left promiscuous mode [ 1116.142784][T26487] bridge0: port 6(geneve0) entered disabled state [ 1116.180516][T26487] dummy0: left allmulticast mode [ 1116.209287][T26487] dummy0: left promiscuous mode [ 1116.214306][T26487] bridge0: port 4(dummy0) entered disabled state [ 1116.286976][T26487] bridge_slave_1: left allmulticast mode [ 1116.324637][T26487] bridge_slave_1: left promiscuous mode [ 1116.354366][T26487] bridge0: port 2(bridge_slave_1) entered disabled state [ 1116.400562][T26487] bridge_slave_0: left allmulticast mode [ 1116.427032][T26487] bridge_slave_0: left promiscuous mode [ 1116.459446][T26487] bridge0: port 1(bridge_slave_0) entered disabled state [ 1116.715028][T27527] Bluetooth: hci0: command tx timeout [ 1116.992616][T26487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1117.042252][T26487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1117.073284][T26487] bond0 (unregistering): Released all slaves [ 1117.241705][T28633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1117.264868][T28633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1117.331275][T28633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1117.403857][T28633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1117.429402][T28633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1117.495134][T28633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1117.651201][T28706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4950'. [ 1117.686938][T28633] hsr_slave_0: entered promiscuous mode [ 1117.730878][T28633] hsr_slave_1: entered promiscuous mode [ 1117.764341][T28633] debugfs: 'hsr0' already exists in 'hsr' [ 1117.795311][T28633] Cannot create hsr debugfs directory [ 1118.380301][T28724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4952'. [ 1118.795660][T27527] Bluetooth: hci0: command tx timeout [ 1119.384229][T26487] hsr_slave_0: left promiscuous mode [ 1119.419747][T26487] hsr_slave_1: left promiscuous mode [ 1119.469352][T26487] veth1_macvtap: left promiscuous mode [ 1119.502899][T26487] veth0_macvtap: left promiscuous mode [ 1119.527297][T26487] veth1_vlan: left promiscuous mode [ 1119.565808][T26487] veth0_vlan: left promiscuous mode [ 1119.772758][T26487] pim6reg (unregistering): left allmulticast mode [ 1120.247067][T26487] team0 (unregistering): Port device team_slave_1 removed [ 1120.307597][T26487] team0 (unregistering): Port device team_slave_0 removed [ 1120.880156][T27527] Bluetooth: hci0: command tx timeout [ 1121.773825][T28633] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1121.885595][T28633] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1121.945527][T28633] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1121.997046][T28633] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1122.512851][T28804] netlink: 334 bytes leftover after parsing attributes in process `syz.2.4963'. [ 1122.967679][T28633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1123.031453][T28633] 8021q: adding VLAN 0 to HW filter on device team0 [ 1123.141501][T26470] bridge0: port 1(bridge_slave_0) entered blocking state [ 1123.148635][T26470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1123.217005][T26470] bridge0: port 2(bridge_slave_1) entered blocking state [ 1123.224093][T26470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1123.344548][T28633] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1123.421381][T28633] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1123.709658][T28781] Process accounting resumed [ 1124.120044][T28633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1124.273684][T28633] veth0_vlan: entered promiscuous mode [ 1124.337467][T28633] veth1_vlan: entered promiscuous mode [ 1124.355298][T28830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4965'. [ 1124.615859][T28633] veth0_macvtap: entered promiscuous mode [ 1124.687572][T28633] veth1_macvtap: entered promiscuous mode [ 1124.743592][T28633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1124.851837][T28633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1124.933278][T26670] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.956115][T26670] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.002435][T26670] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.276673][T26670] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.417023][T28863] netlink: 342 bytes leftover after parsing attributes in process `syz.2.4970'. [ 1125.806321][T26487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1125.859081][T26487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1126.157413][T26470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1126.203265][T28891] netlink: 342 bytes leftover after parsing attributes in process `syz.0.4980'. [ 1126.234517][T26470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1127.209852][T28919] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1127.283844][T28919] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4978'. [ 1127.935006][T28934] netlink: 306 bytes leftover after parsing attributes in process `syz.0.4981'. [ 1130.268457][T26481] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1130.284871][T26481] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1130.292567][T26481] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1130.300732][T26481] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1130.309883][T26481] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1130.366518][T28998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4993'. [ 1130.766812][T29008] netlink: 342 bytes leftover after parsing attributes in process `syz.1.4995'. [ 1130.893859][T29015] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4998'. [ 1131.087305][T29018] FAULT_INJECTION: forcing a failure. [ 1131.087305][T29018] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1131.178217][T29018] CPU: 0 UID: 0 PID: 29018 Comm: syz.1.4999 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1131.178246][T29018] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1131.178253][T29018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1131.178262][T29018] Call Trace: [ 1131.178268][T29018] [ 1131.178275][T29018] dump_stack_lvl+0x100/0x190 [ 1131.178303][T29018] should_fail_ex.cold+0x5/0xa [ 1131.178322][T29018] get_futex_key+0x1d2/0x1620 [ 1131.178344][T29018] ? __pfx_get_futex_key+0x10/0x10 [ 1131.178362][T29018] ? do_syscall_64+0x106/0xf80 [ 1131.178385][T29018] futex_wake+0xea/0x530 [ 1131.178410][T29018] ? __pfx_futex_wake+0x10/0x10 [ 1131.178434][T29018] ? __lock_acquire+0x4a5/0x2630 [ 1131.178459][T29018] do_futex+0x32b/0x350 [ 1131.178480][T29018] ? __pfx_do_futex+0x10/0x10 [ 1131.178501][T29018] ? find_held_lock+0x2b/0x80 [ 1131.178518][T29018] __x64_sys_futex+0x34f/0x4d0 [ 1131.178541][T29018] ? __pfx___x64_sys_futex+0x10/0x10 [ 1131.178562][T29018] ? safesetid_task_fix_setuid+0x64/0x1e0 [ 1131.178595][T29018] do_syscall_64+0x106/0xf80 [ 1131.178611][T29018] ? clear_bhb_loop+0x40/0x90 [ 1131.178630][T29018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1131.178646][T29018] RIP: 0033:0x7f1ee559c819 [ 1131.178660][T29018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1131.178675][T29018] RSP: 002b:00007f1ee64340e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1131.178690][T29018] RAX: ffffffffffffffda RBX: 00007f1ee5815fa8 RCX: 00007f1ee559c819 [ 1131.178700][T29018] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1ee5815fac [ 1131.178710][T29018] RBP: 00007f1ee5815fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1131.178719][T29018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1131.178728][T29018] R13: 00007f1ee5816038 R14: 00007ffd374ebc30 R15: 00007ffd374ebd18 [ 1131.178747][T29018] [ 1131.427548][T29022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5000'. [ 1132.036221][T28995] chnl_net:caif_netlink_parms(): no params data found [ 1132.396777][T26481] Bluetooth: hci1: command tx timeout [ 1132.456563][T28995] bridge0: port 1(bridge_slave_0) entered blocking state [ 1132.478663][T28995] bridge0: port 1(bridge_slave_0) entered disabled state [ 1132.503639][T28995] bridge_slave_0: entered allmulticast mode [ 1132.536540][T28995] bridge_slave_0: entered promiscuous mode [ 1132.690069][T26470] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.773391][T28995] bridge0: port 2(bridge_slave_1) entered blocking state [ 1132.808028][T28995] bridge0: port 2(bridge_slave_1) entered disabled state [ 1132.825187][T29055] block2mtd: illegal erase size [ 1132.845056][T28995] bridge_slave_1: entered allmulticast mode [ 1132.868192][T29057] netlink: 342 bytes leftover after parsing attributes in process `syz.3.5008'. [ 1132.880492][T28995] bridge_slave_1: entered promiscuous mode [ 1132.976914][T26470] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.191749][T26470] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.304558][T28995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1133.374585][T28995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1133.471306][T26470] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.608544][T28995] team0: Port device team_slave_0 added [ 1133.768017][T28995] team0: Port device team_slave_1 added [ 1134.028446][T28995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1134.067494][T28995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1134.184599][T28995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1134.266457][T28995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1134.303649][T28995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1134.397456][T28995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1134.475092][T26481] Bluetooth: hci1: command tx timeout [ 1134.649795][T28995] hsr_slave_0: entered promiscuous mode [ 1134.683723][T28995] hsr_slave_1: entered promiscuous mode [ 1134.719547][T26470] veth1_macvtap: left allmulticast mode [ 1134.743189][T26470] veth1_macvtap: left promiscuous mode [ 1134.769239][T26470] bridge0: port 4(veth1_macvtap) entered disabled state [ 1134.821513][T26470] dummy0: left allmulticast mode [ 1134.847593][T29088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5012'. [ 1134.857709][T26470] dummy0: left promiscuous mode [ 1134.862850][T26470] bridge0: port 3(dummy0) entered disabled state [ 1134.912302][T26470] bridge_slave_1: left allmulticast mode [ 1134.934723][T26470] bridge_slave_1: left promiscuous mode [ 1134.940402][T26470] bridge0: port 2(bridge_slave_1) entered disabled state [ 1135.004332][T26470] bridge_slave_0: left allmulticast mode [ 1135.039314][T26470] bridge_slave_0: left promiscuous mode [ 1135.066891][T26470] bridge0: port 1(bridge_slave_0) entered disabled state [ 1135.602803][T26470] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1135.654548][T26470] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1135.697583][T26470] bond0 (unregistering): Released all slaves [ 1136.516398][T26470] hsr_slave_0: left promiscuous mode [ 1136.553313][T26470] hsr_slave_1: left promiscuous mode [ 1136.559501][T26481] Bluetooth: hci1: command tx timeout [ 1136.598381][T26470] veth1_vlan: left promiscuous mode [ 1136.627985][T26470] veth0_vlan: left promiscuous mode [ 1137.071181][T26470] team0 (unregistering): Port device team_slave_1 removed [ 1137.122844][T26470] team0 (unregistering): Port device team_slave_0 removed [ 1138.034234][T29171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5025'. [ 1138.164813][T28995] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1138.206297][T28995] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1138.330000][T29182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5026'. [ 1138.381040][T29186] netlink: 13 bytes leftover after parsing attributes in process `syz.3.5026'. [ 1138.422024][T28995] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1138.555876][T28995] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1138.638135][T26481] Bluetooth: hci1: command tx timeout [ 1138.942964][T29206] netlink: 'syz.3.5029': attribute type 10 has an invalid length. [ 1138.991144][T28995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1139.014944][T29206] netlink: 330 bytes leftover after parsing attributes in process `syz.3.5029'. [ 1139.086146][T28995] 8021q: adding VLAN 0 to HW filter on device team0 [ 1139.140693][T26470] bridge0: port 1(bridge_slave_0) entered blocking state [ 1139.147853][T26470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1139.286785][T26487] bridge0: port 2(bridge_slave_1) entered blocking state [ 1139.293902][T26487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1140.219569][T29244] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5034'. [ 1140.382094][T28995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1140.548682][T28995] veth0_vlan: entered promiscuous mode [ 1140.610518][T28995] veth1_vlan: entered promiscuous mode [ 1140.786313][T28995] veth0_macvtap: entered promiscuous mode [ 1140.838332][T28995] veth1_macvtap: entered promiscuous mode [ 1140.893542][T28995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1141.110822][T28995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1141.192299][T26487] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1141.231498][T26487] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1141.317115][T26487] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1141.348231][T29269] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5039'. [ 1141.364230][T26487] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1141.715187][T29261] misc userio: Invalid payload size [ 1141.722825][T28868] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1141.769850][T28868] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1141.874365][T26474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1141.907146][T26474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1142.089443][T29306] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1142.137874][T29306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4991'. [ 1142.342647][T29313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5046'. [ 1142.914252][T29323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5056'. [ 1143.585486][T29347] netlink: 342 bytes leftover after parsing attributes in process `syz.3.5052'. [ 1144.551931][T29394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5060'. [ 1144.672251][T29366] misc userio: Invalid payload size [ 1144.680586][T29394] program syz.0.5060 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1144.835961][T29399] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.085085][T29407] netlink: 342 bytes leftover after parsing attributes in process `syz.2.5065'. [ 1145.462912][T29419] QAT: Invalid ioctl 35077 [ 1145.772214][T29414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5066'. [ 1146.696735][T29444] FAULT_INJECTION: forcing a failure. [ 1146.696735][T29444] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1146.857147][T29444] CPU: 0 UID: 0 PID: 29444 Comm: syz.1.5071 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1146.857174][T29444] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1146.857180][T29444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1146.857189][T29444] Call Trace: [ 1146.857195][T29444] [ 1146.857201][T29444] dump_stack_lvl+0x100/0x190 [ 1146.857230][T29444] should_fail_ex.cold+0x5/0xa [ 1146.857250][T29444] _copy_from_user+0x2e/0xd0 [ 1146.857271][T29444] core_sys_select+0x472/0xbb0 [ 1146.857291][T29444] ? __pfx_core_sys_select+0x10/0x10 [ 1146.857306][T29444] ? get_pid_task+0xfc/0x250 [ 1146.857330][T29444] ? get_pid_task+0x106/0x250 [ 1146.857362][T29444] ? __mutex_unlock_slowpath+0x15c/0x790 [ 1146.857380][T29444] ? __fget_files+0x215/0x3d0 [ 1146.857397][T29444] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1146.857418][T29444] kern_select+0x20c/0x270 [ 1146.857434][T29444] ? __pfx_kern_select+0x10/0x10 [ 1146.857452][T29444] ? __pfx_ksys_write+0x10/0x10 [ 1146.857470][T29444] __x64_sys_select+0xbd/0x160 [ 1146.857485][T29444] ? do_syscall_64+0x95/0xf80 [ 1146.857501][T29444] ? lockdep_hardirqs_on+0x78/0x100 [ 1146.857518][T29444] do_syscall_64+0x106/0xf80 [ 1146.857533][T29444] ? clear_bhb_loop+0x40/0x90 [ 1146.857552][T29444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1146.857568][T29444] RIP: 0033:0x7f1ee559c819 [ 1146.857582][T29444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1146.857597][T29444] RSP: 002b:00007f1ee63d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 1146.857612][T29444] RAX: ffffffffffffffda RBX: 00007f1ee5816270 RCX: 00007f1ee559c819 [ 1146.857622][T29444] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 1146.857631][T29444] RBP: 00007f1ee63d1090 R08: 0000000000000000 R09: 0000000000000000 [ 1146.857640][T29444] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 1146.857650][T29444] R13: 00007f1ee5816308 R14: 00007f1ee5816270 R15: 00007ffd374ebd18 [ 1146.857669][T29444] [ 1147.144251][T29446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5072'. [ 1147.307012][T29452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5074'. [ 1147.953902][T29450] misc userio: Invalid payload size [ 1148.560775][T29483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5082'. [ 1148.740937][T29491] netlink: 266 bytes leftover after parsing attributes in process `syz.3.5084'. [ 1148.777727][T29491] IPv6: NLM_F_CREATE should be specified when creating new route [ 1148.836503][T29491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5084'. [ 1150.642577][T29526] sctp: [Deprecated]: syz.3.5089 (pid 29526) Use of int in maxseg socket option. [ 1150.642577][T29526] Use struct sctp_assoc_value instead [ 1151.154128][T29545] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5095'. [ 1151.850384][T29555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5098'. [ 1152.644439][T29586] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1152.725256][T29586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5106'. [ 1152.781230][T29590] sd 0:0:1:0: PR command failed: 1026 [ 1152.815054][T29590] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1152.864822][T29590] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1154.517931][T29569] Process accounting paused [ 1154.641542][T29637] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5119'. [ 1154.665723][T29631] netlink: 342 bytes leftover after parsing attributes in process `syz.2.5117'. [ 1154.715476][T29631] netlink: 342 bytes leftover after parsing attributes in process `syz.2.5117'. [ 1155.216495][T29638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5118'. [ 1156.117406][T29667] netlink: 342 bytes leftover after parsing attributes in process `syz.1.5127'. [ 1156.875715][T29695] ubi0: attaching mtd0 [ 1156.900909][T29695] ubi0: scanning is finished [ 1156.922550][T29695] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1156.948715][T29687] FAULT_INJECTION: forcing a failure. [ 1156.948715][T29687] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1157.034308][T29687] CPU: 0 UID: 0 PID: 29687 Comm: syz.2.5129 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1157.034337][T29687] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1157.034344][T29687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1157.034354][T29687] Call Trace: [ 1157.034360][T29687] [ 1157.034366][T29687] dump_stack_lvl+0x100/0x190 [ 1157.034395][T29687] should_fail_ex.cold+0x5/0xa [ 1157.034415][T29687] _copy_to_iter+0x5a4/0x1720 [ 1157.034439][T29687] ? __pfx__copy_to_iter+0x10/0x10 [ 1157.034458][T29687] ? __schedule+0x1000/0x6120 [ 1157.034474][T29687] ? folio_mark_accessed+0xf3/0x1040 [ 1157.034490][T29687] ? __pfx_filemap_get_pages+0x10/0x10 [ 1157.034515][T29687] ? __pfx_folio_mark_accessed+0x10/0x10 [ 1157.034542][T29687] copy_page_to_iter+0x12a/0x1e0 [ 1157.034565][T29687] filemap_read+0x7a9/0x10a0 [ 1157.034590][T29687] ? __pfx_filemap_read+0x10/0x10 [ 1157.034619][T29687] ? __pfx_down_read+0x10/0x10 [ 1157.034639][T29687] ? futex_unqueue+0x133/0x2c0 [ 1157.034662][T29687] ? __pfx_aa_file_perm+0x10/0x10 [ 1157.034688][T29687] blkdev_read_iter+0x2c4/0x4f0 [ 1157.034715][T29687] do_iter_readv_writev+0x60d/0x920 [ 1157.034741][T29687] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1157.034767][T29687] ? bpf_lsm_file_permission+0x9/0x10 [ 1157.034782][T29687] ? security_file_permission+0x76/0x210 [ 1157.034803][T29687] ? rw_verify_area+0xce/0x6d0 [ 1157.034827][T29687] vfs_readv+0x4d3/0x8d0 [ 1157.034855][T29687] ? __pfx_vfs_readv+0x10/0x10 [ 1157.034876][T29687] ? __pfx_futex_wait+0x10/0x10 [ 1157.034912][T29687] ? __fget_files+0x21f/0x3d0 [ 1157.034932][T29687] ? do_preadv+0x1ac/0x270 [ 1157.034954][T29687] do_preadv+0x1ac/0x270 [ 1157.034978][T29687] ? __pfx_do_preadv+0x10/0x10 [ 1157.035000][T29687] ? xfd_validate_state+0x129/0x190 [ 1157.035026][T29687] __x64_sys_preadv2+0xef/0x160 [ 1157.035045][T29687] do_syscall_64+0x106/0xf80 [ 1157.035061][T29687] ? clear_bhb_loop+0x40/0x90 [ 1157.035080][T29687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1157.035095][T29687] RIP: 0033:0x7f16a019c819 [ 1157.035109][T29687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1157.035125][T29687] RSP: 002b:00007f16a10ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 [ 1157.035141][T29687] RAX: ffffffffffffffda RBX: 00007f16a0416180 RCX: 00007f16a019c819 [ 1157.035152][T29687] RDX: 0000000000000006 RSI: 0000200000000280 RDI: 0000000000000006 [ 1157.035162][T29687] RBP: 00007f16a0232c91 R08: 0000000000000004 R09: 000000000000002e [ 1157.035172][T29687] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 1157.035181][T29687] R13: 00007f16a0416218 R14: 00007f16a0416180 R15: 00007ffe752cbc38 [ 1157.035202][T29687] [ 1157.615851][T29695] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1158.407493][T29724] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5141'. [ 1159.003732][T29725] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input38 [ 1159.624868][T29743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5146'. [ 1161.433059][T29782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5154'. [ 1161.727915][T29795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5157'. [ 1162.277284][T29813] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5161'. [ 1162.514217][T29793] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1162.520953][T29793] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1162.534441][T29793] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1162.553006][T29793] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1162.574077][T29793] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1162.588578][T29793] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1162.609424][T29793] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1162.628385][T29793] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1162.644504][T29793] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1162.664346][T29793] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1163.171654][T29840] sp0: Synchronizing with TNC [ 1163.496775][T29847] netlink: zone id is out of range [ 1163.538272][T29847] netlink: zone id is out of range [ 1163.569347][T29847] netlink: zone id is out of range [ 1163.602050][T29847] netlink: zone id is out of range [ 1163.621215][T29847] netlink: zone id is out of range [ 1163.641778][T29847] netlink: zone id is out of range [ 1163.659100][T29847] netlink: zone id is out of range [ 1163.681385][T29847] netlink: zone id is out of range [ 1163.693228][T29847] netlink: zone id is out of range [ 1163.711656][T29847] netlink: zone id is out of range [ 1163.835303][T26481] Bluetooth: hci2: command 0x0c1a tx timeout [ 1163.899167][T29854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5172'. [ 1163.993347][T29850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5171'. [ 1164.449677][T27527] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1164.460362][T27527] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1164.475073][T27527] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1164.482751][T27527] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1164.492874][T27527] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1164.554724][T27527] Bluetooth: hci3: command 0x0c1a tx timeout [ 1164.638155][T27527] Bluetooth: hci1: command 0x0c1a tx timeout [ 1164.644201][T27527] Bluetooth: hci0: command 0x0c1a tx timeout [ 1165.653842][T26487] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.737179][T29870] chnl_net:caif_netlink_parms(): no params data found [ 1165.827660][T26487] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.968439][T26487] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.980423][T29897] futex_wake_op: syz.2.5180 tries to shift op by -2048; fix this program [ 1166.138303][T26487] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1166.506006][T29914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5184'. [ 1166.551762][T29916] vivid-007: ================= START STATUS ================= [ 1166.560462][T27527] Bluetooth: hci4: command tx timeout [ 1166.571962][T29870] bridge0: port 1(bridge_slave_0) entered blocking state [ 1166.589935][T29916] vivid-007: Generate PTS: true [ 1166.595188][T29870] bridge0: port 1(bridge_slave_0) entered disabled state [ 1166.605851][T29916] vivid-007: Generate SCR: true [ 1166.610737][T29916] tpg source WxH: 320x240 (Y'CbCr) [ 1166.625274][T29870] bridge_slave_0: entered allmulticast mode [ 1166.634817][T27527] Bluetooth: hci3: command 0x0c1a tx timeout [ 1166.647249][T29916] tpg field: 1 [ 1166.650622][T29916] tpg crop: (0,0)/320x240 [ 1166.655238][T29870] bridge_slave_0: entered promiscuous mode [ 1166.677943][T29916] tpg compose: (0,0)/320x240 [ 1166.682551][T29916] tpg colorspace: 8 [ 1166.710526][T29870] bridge0: port 2(bridge_slave_1) entered blocking state [ 1166.718453][T27527] Bluetooth: hci0: command 0x0c1a tx timeout [ 1166.724444][T27527] Bluetooth: hci1: command 0x0c1a tx timeout [ 1166.739963][T29916] tpg transfer function: 0/0 [ 1166.744584][T29916] tpg Y'CbCr encoding: 0/0 [ 1166.749577][T29870] bridge0: port 2(bridge_slave_1) entered disabled state [ 1166.757197][T29870] bridge_slave_1: entered allmulticast mode [ 1166.763172][T29916] tpg quantization: 0/0 [ 1166.767748][T29916] tpg RGB range: 0/2 [ 1166.771634][T29916] vivid-007: ================== END STATUS ================== [ 1166.781585][T29870] bridge_slave_1: entered promiscuous mode [ 1166.876457][T29870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1166.913555][T29870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1166.954403][T29916] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5185'. [ 1166.979960][T26487] geneve0: left allmulticast mode [ 1166.980007][T26487] geneve0: left promiscuous mode [ 1166.980142][T26487] bridge0: port 4(geneve0) entered disabled state [ 1166.982714][T26487] dummy0: left allmulticast mode [ 1166.982757][T26487] dummy0: left promiscuous mode [ 1166.982880][T26487] bridge0: port 3(dummy0) entered disabled state [ 1166.984393][T26487] bridge_slave_1: left allmulticast mode [ 1166.984409][T26487] bridge_slave_1: left promiscuous mode [ 1166.984515][T26487] bridge0: port 2(bridge_slave_1) entered disabled state [ 1166.986514][T26487] bridge_slave_0: left allmulticast mode [ 1166.986530][T26487] bridge_slave_0: left promiscuous mode [ 1166.986633][T26487] bridge0: port 1(bridge_slave_0) entered disabled state [ 1167.220544][T26487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1167.237423][T26487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1167.253682][T26487] bond0 (unregistering): Released all slaves [ 1167.301214][T29870] team0: Port device team_slave_0 added [ 1167.335759][T29870] team0: Port device team_slave_1 added [ 1167.396842][T26487] tipc: Left network mode [ 1167.544340][T29927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5188'. [ 1167.587907][T29870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1167.618233][T29870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1167.736884][T29870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1167.857760][T29870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1167.897903][T29870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1168.049326][T29870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1168.099345][T29934] zswap: compressor not available [ 1168.554114][T29870] hsr_slave_0: entered promiscuous mode [ 1168.586316][T29870] hsr_slave_1: entered promiscuous mode [ 1168.622899][T29870] debugfs: 'hsr0' already exists in 'hsr' [ 1168.634871][T27527] Bluetooth: hci4: command tx timeout [ 1168.660625][T29870] Cannot create hsr debugfs directory [ 1168.718923][T27527] Bluetooth: hci3: command 0x0c1a tx timeout [ 1168.746212][T29962] FAULT_INJECTION: forcing a failure. [ 1168.746212][T29962] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1168.803416][T27527] Bluetooth: hci1: command 0x0c1a tx timeout [ 1168.809468][T26481] Bluetooth: hci0: command 0x0c1a tx timeout [ 1168.831013][T29966] FAULT_INJECTION: forcing a failure. [ 1168.831013][T29966] name failslab, interval 1, probability 0, space 0, times 0 [ 1168.831076][T29966] CPU: 0 UID: 0 PID: 29966 Comm: syz.1.5195 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1168.831100][T29966] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1168.831107][T29966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1168.831117][T29966] Call Trace: [ 1168.831123][T29966] [ 1168.831130][T29966] dump_stack_lvl+0x100/0x190 [ 1168.831171][T29966] should_fail_ex.cold+0x5/0xa [ 1168.831190][T29966] should_failslab+0xc2/0x120 [ 1168.831208][T29966] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 1168.831225][T29966] ? kvasprintf_const+0x66/0x1a0 [ 1168.831250][T29966] kvasprintf+0xbc/0x150 [ 1168.831270][T29966] ? __pfx_kvasprintf+0x10/0x10 [ 1168.831291][T29966] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1168.831307][T29966] ? lockdep_init_map_type+0x5c/0x250 [ 1168.831332][T29966] kvasprintf_const+0x66/0x1a0 [ 1168.831353][T29966] kobject_set_name_vargs+0x5a/0x140 [ 1168.831374][T29966] device_create_groups_vargs+0x1b1/0x270 [ 1168.831399][T29966] device_create+0xed/0x130 [ 1168.831421][T29966] ? __pfx_device_create+0x10/0x10 [ 1168.831443][T29966] ? is_console_locked+0x9/0x20 [ 1168.831462][T29966] ? con_is_visible+0x65/0x150 [ 1168.831480][T29966] ? csi_J+0x57e/0xad0 [ 1168.831506][T29966] vcs_make_sysfs+0x32/0x80 [ 1168.831526][T29966] vc_allocate+0x539/0x880 [ 1168.831548][T29966] ? __pfx_vc_allocate+0x10/0x10 [ 1168.831576][T29966] con_install+0xa1/0x620 [ 1168.831600][T29966] ? __pfx_con_install+0x10/0x10 [ 1168.831627][T29966] ? __pfx_con_install+0x10/0x10 [ 1168.831650][T29966] tty_init_dev.part.0+0x9e/0x470 [ 1168.831668][T29966] tty_open+0xa63/0xfa0 [ 1168.831687][T29966] ? __pfx_tty_open+0x10/0x10 [ 1168.831701][T29966] ? chrdev_open+0x10b/0x6a0 [ 1168.831718][T29966] ? chrdev_open+0x10b/0x6a0 [ 1168.831737][T29966] ? __pfx_tty_open+0x10/0x10 [ 1168.831752][T29966] chrdev_open+0x234/0x6a0 [ 1168.831768][T29966] ? __pfx_apparmor_file_open+0x10/0x10 [ 1168.831786][T29966] ? __pfx_chrdev_open+0x10/0x10 [ 1168.831803][T29966] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1168.831826][T29966] do_dentry_open+0x6d8/0x1660 [ 1168.831841][T29966] ? __pfx_chrdev_open+0x10/0x10 [ 1168.831863][T29966] vfs_open+0x82/0x3f0 [ 1168.831885][T29966] path_openat+0x208c/0x31a0 [ 1168.831909][T29966] ? __pfx_path_openat+0x10/0x10 [ 1168.831933][T29966] do_file_open+0x20e/0x430 [ 1168.831951][T29966] ? __pfx_do_file_open+0x10/0x10 [ 1168.831983][T29966] ? alloc_fd+0x476/0x790 [ 1168.832001][T29966] ? do_getname+0x191/0x390 [ 1168.832022][T29966] do_sys_openat2+0x10d/0x1e0 [ 1168.832043][T29966] ? __pfx_do_sys_openat2+0x10/0x10 [ 1168.832073][T29966] ? __fget_files+0x21f/0x3d0 [ 1168.832093][T29966] __x64_sys_openat+0x12d/0x210 [ 1168.832115][T29966] ? __pfx___x64_sys_openat+0x10/0x10 [ 1168.832144][T29966] do_syscall_64+0x106/0xf80 [ 1168.832161][T29966] ? clear_bhb_loop+0x40/0x90 [ 1168.832180][T29966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.832196][T29966] RIP: 0033:0x7f1ee559c819 [ 1168.832214][T29966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1168.832230][T29966] RSP: 002b:00007f1ee6434028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1168.832246][T29966] RAX: ffffffffffffffda RBX: 00007f1ee5815fa0 RCX: 00007f1ee559c819 [ 1168.832257][T29966] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1168.832267][T29966] RBP: 00007f1ee5632c91 R08: 0000000000000000 R09: 0000000000000000 [ 1168.832277][T29966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1168.832286][T29966] R13: 00007f1ee5816038 R14: 00007f1ee5815fa0 R15: 00007ffd374ebd18 [ 1168.832308][T29966] [ 1168.897123][T29962] CPU: 0 UID: 0 PID: 29962 Comm: syz.2.5193 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1168.897152][T29962] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1168.897158][T29962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1168.897168][T29962] Call Trace: [ 1168.897174][T29962] [ 1168.897180][T29962] dump_stack_lvl+0x100/0x190 [ 1168.897209][T29962] should_fail_ex.cold+0x5/0xa [ 1168.897228][T29962] get_futex_key+0x1d2/0x1620 [ 1168.897250][T29962] ? __pfx_get_futex_key+0x10/0x10 [ 1168.897268][T29962] ? vfs_writev+0x1d5/0xe10 [ 1168.897281][T29962] ? kfree+0x1f6/0x6b0 [ 1168.897302][T29962] ? import_iovec+0x82/0xb0 [ 1168.897326][T29962] futex_wake+0xea/0x530 [ 1168.897347][T29962] ? trace_contention_end+0x140/0x180 [ 1168.897371][T29962] ? __pfx_futex_wake+0x10/0x10 [ 1168.897396][T29962] ? do_writev+0x214/0x340 [ 1168.897414][T29962] do_futex+0x32b/0x350 [ 1168.897434][T29962] ? __pfx_do_futex+0x10/0x10 [ 1168.897456][T29962] ? __fget_files+0x21f/0x3d0 [ 1168.897474][T29962] __x64_sys_futex+0x34f/0x4d0 [ 1168.897496][T29962] ? __pfx___x64_sys_futex+0x10/0x10 [ 1168.897517][T29962] ? __pfx_do_writev+0x10/0x10 [ 1168.897536][T29962] do_syscall_64+0x106/0xf80 [ 1168.897553][T29962] ? clear_bhb_loop+0x40/0x90 [ 1168.897571][T29962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.897586][T29962] RIP: 0033:0x7f16a019c819 [ 1168.897600][T29962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1168.897615][T29962] RSP: 002b:00007f16a110d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1168.897630][T29962] RAX: ffffffffffffffda RBX: 00007f16a0416098 RCX: 00007f16a019c819 [ 1168.897641][T29962] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f16a041609c [ 1168.897650][T29962] RBP: 00007f16a0416090 R08: 0000000000000000 R09: 0000000000000000 [ 1168.897660][T29962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1168.897670][T29962] R13: 00007f16a0416128 R14: 00007ffe752cbb50 R15: 00007ffe752cbc38 [ 1168.897690][T29962] [ 1169.776225][T26487] hsr_slave_0: left promiscuous mode [ 1169.776627][T26487] hsr_slave_1: left promiscuous mode [ 1169.777025][T26487] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1169.777041][T26487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1169.782778][T26487] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1169.782795][T26487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1169.798323][T26487] veth1_macvtap: left promiscuous mode [ 1169.798349][T26487] veth0_macvtap: left promiscuous mode [ 1169.798410][T26487] veth1_vlan: left promiscuous mode [ 1169.798447][T26487] veth0_vlan: left promiscuous mode [ 1170.518801][T26487] team0 (unregistering): Port device team_slave_1 removed [ 1170.542000][T26487] team0 (unregistering): Port device team_slave_0 removed [ 1170.714965][T27527] Bluetooth: hci4: command tx timeout [ 1171.989819][T29870] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1172.000984][T29870] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1172.014229][T29870] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1172.027784][T29870] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1172.242678][T29870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1172.285638][T29870] 8021q: adding VLAN 0 to HW filter on device team0 [ 1172.325233][T26470] bridge0: port 1(bridge_slave_0) entered blocking state [ 1172.325326][T26470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1172.326539][T26470] bridge0: port 2(bridge_slave_1) entered blocking state [ 1172.326600][T26470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1172.403149][T29870] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1172.403173][T29870] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1172.801824][T27527] Bluetooth: hci4: command tx timeout [ 1172.906076][T29870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1173.082667][T29870] veth0_vlan: entered promiscuous mode [ 1173.132435][T29870] veth1_vlan: entered promiscuous mode [ 1173.243880][T30033] snd_aloop snd_aloop.0: Parsing timer source 'L' failed with -22 [ 1173.335206][T30026] netlink: 342 bytes leftover after parsing attributes in process `syz.1.5198'. [ 1173.501665][T29870] veth0_macvtap: entered promiscuous mode [ 1173.572927][T29870] veth1_macvtap: entered promiscuous mode [ 1173.668118][T29870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1173.912732][T29870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1174.013085][T26511] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1174.067460][T26511] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1174.128578][T26511] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1174.185285][T26511] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1174.483042][T26470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1174.534799][T26470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1174.676255][T26487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1174.719327][T26487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1175.213482][T30084] ubi0: attaching mtd0 [ 1175.259716][T30084] ubi0: scanning is finished [ 1175.288783][T30084] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1175.576224][T30084] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1175.665536][T30086] ubi0: attaching mtd0 [ 1175.686169][T30086] ubi0: scanning is finished [ 1175.716653][T30086] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1175.946965][T30086] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1176.987906][T30131] __vm_enough_memory: pid: 30131, comm: syz.3.5214, bytes: 4398046457856 not enough memory for the allocation [ 1177.178015][T30131] __vm_enough_memory: pid: 30131, comm: syz.3.5214, bytes: 4398046457856 not enough memory for the allocation [ 1177.288445][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.295411][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.325216][T30126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5212'. [ 1177.345878][T30131] __vm_enough_memory: pid: 30131, comm: syz.3.5214, bytes: 4398046457856 not enough memory for the allocation [ 1177.522850][T30131] __vm_enough_memory: pid: 30131, comm: syz.3.5214, bytes: 4398046457856 not enough memory for the allocation [ 1178.833453][T30171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5220'. [ 1179.426784][T30186] binder: 30185:30186 ioctl 400c620e 0 returned -22 [ 1180.202620][T30213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5227'. [ 1180.276306][T30219] nbd: couldn't find a device at index 35644 [ 1180.321666][T30221] nbd: must specify at least one socket [ 1181.612477][T30249] random: crng reseeded on system resumption [ 1183.727191][T30276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5245'. [ 1186.167450][T30334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5254'. [ 1186.987567][T30348] program syz.1.5258 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1187.145840][T30344] size and base must be multiples of 4 kiB [ 1187.151691][T30344] CPU: 0 UID: 0 PID: 30344 Comm: syz.3.5256 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1187.151718][T30344] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1187.151724][T30344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1187.151734][T30344] Call Trace: [ 1187.151740][T30344] [ 1187.151746][T30344] dump_stack_lvl+0x100/0x190 [ 1187.151775][T30344] mtrr_add.cold+0x74/0x87 [ 1187.151794][T30344] mtrr_ioctl+0x25a/0xcf0 [ 1187.151816][T30344] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1187.151850][T30344] ? __x64_sys_openat+0x12d/0x210 [ 1187.151873][T30344] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1187.151894][T30344] proc_reg_unlocked_ioctl+0x229/0x320 [ 1187.151918][T30344] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 1187.151944][T30344] __x64_sys_ioctl+0x18e/0x210 [ 1187.151968][T30344] do_syscall_64+0x106/0xf80 [ 1187.151984][T30344] ? clear_bhb_loop+0x40/0x90 [ 1187.152003][T30344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1187.152020][T30344] RIP: 0033:0x7f710fb9c819 [ 1187.152034][T30344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1187.152049][T30344] RSP: 002b:00007f7110a60028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1187.152073][T30344] RAX: ffffffffffffffda RBX: 00007f710fe15fa0 RCX: 00007f710fb9c819 [ 1187.152084][T30344] RDX: 0000000000000003 RSI: 00000000400c4d01 RDI: 0000000000000003 [ 1187.152093][T30344] RBP: 00007f710fc32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1187.152103][T30344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1187.152112][T30344] R13: 00007f710fe16038 R14: 00007f710fe15fa0 R15: 00007ffc6a73aeb8 [ 1187.152133][T30344] [ 1188.075793][T30360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5260'. [ 1188.976338][T30379] ima: policy update failed [ 1189.042120][ T30] audit: type=1802 audit(63930.770:61): pid=30379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.5266" res=0 errno=0 [ 1189.459014][T30391] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5269'. [ 1190.091728][T30409] ======================================================= [ 1190.091728][T30409] WARNING: The mand mount option has been deprecated and [ 1190.091728][T30409] and is ignored by this kernel. Remove the mand [ 1190.091728][T30409] option from the mount to silence this warning. [ 1190.091728][T30409] ======================================================= [ 1191.937377][T30427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5277'. [ 1192.019414][T30432] snd_aloop snd_aloop.0: Parsing timer source 'L' failed with -22 [ 1192.115565][T30432] snd_aloop snd_aloop.0: Parsing timer source 'L' failed with -22 [ 1192.240690][T30441] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1192.354989][T30441] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5281'. [ 1192.437264][T30445] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5281'. [ 1193.273216][T30459] FAULT_INJECTION: forcing a failure. [ 1193.273216][T30459] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1193.353858][T30459] CPU: 0 UID: 0 PID: 30459 Comm: syz.3.5287 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1193.353885][T30459] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1193.353892][T30459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1193.353901][T30459] Call Trace: [ 1193.353907][T30459] [ 1193.353913][T30459] dump_stack_lvl+0x100/0x190 [ 1193.353941][T30459] should_fail_ex.cold+0x5/0xa [ 1193.353960][T30459] get_futex_key+0x107c/0x1620 [ 1193.353982][T30459] ? __pfx_get_futex_key+0x10/0x10 [ 1193.354000][T30459] ? lock_acquire+0x1cf/0x380 [ 1193.354027][T30459] futex_wake+0xea/0x530 [ 1193.354051][T30459] ? __pfx_futex_wake+0x10/0x10 [ 1193.354075][T30459] ? exit_mm_release+0x19/0x30 [ 1193.354110][T30459] do_futex+0x32b/0x350 [ 1193.354131][T30459] ? __pfx_do_futex+0x10/0x10 [ 1193.354150][T30459] ? __might_fault+0xc5/0x140 [ 1193.354177][T30459] mm_release+0x24a/0x2f0 [ 1193.354194][T30459] do_exit+0x704/0x2b60 [ 1193.354218][T30459] ? __pfx_do_exit+0x10/0x10 [ 1193.354238][T30459] ? do_raw_spin_lock+0x128/0x260 [ 1193.354260][T30459] ? find_held_lock+0x2b/0x80 [ 1193.354275][T30459] ? get_signal+0x7e0/0x21e0 [ 1193.354293][T30459] do_group_exit+0xd5/0x2a0 [ 1193.354315][T30459] get_signal+0x1ec7/0x21e0 [ 1193.354336][T30459] ? madvise_unlock+0xa9/0x220 [ 1193.354355][T30459] ? __pfx_get_signal+0x10/0x10 [ 1193.354373][T30459] ? do_futex+0x192/0x350 [ 1193.354395][T30459] arch_do_signal_or_restart+0x91/0x770 [ 1193.354417][T30459] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1193.354442][T30459] ? __pfx___x64_sys_futex+0x10/0x10 [ 1193.354467][T30459] exit_to_user_mode_loop+0x86/0x4a0 [ 1193.354490][T30459] do_syscall_64+0x668/0xf80 [ 1193.354507][T30459] ? clear_bhb_loop+0x40/0x90 [ 1193.354526][T30459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1193.354542][T30459] RIP: 0033:0x7f710fb9c819 [ 1193.354555][T30459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1193.354570][T30459] RSP: 002b:00007f7110a600e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1193.354585][T30459] RAX: fffffffffffffe00 RBX: 00007f710fe15fa8 RCX: 00007f710fb9c819 [ 1193.354595][T30459] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f710fe15fa8 [ 1193.354605][T30459] RBP: 00007f710fe15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1193.354614][T30459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1193.354622][T30459] R13: 00007f710fe16038 R14: 00007ffc6a73add0 R15: 00007ffc6a73aeb8 [ 1193.354650][T30459] [ 1194.525510][T30496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5295'. [ 1195.696836][T30524] snd_aloop snd_aloop.0: Parsing timer source 'L' failed with -22 [ 1196.319678][T27527] Bluetooth: hci0: unexpected event 0x03 length: 1022 > 11 [ 1196.510596][T30557] random: crng reseeded on system resumption [ 1197.518773][T30581] bond0: invalid ARP target specified [ 1197.558659][ T30] audit: type=1807 audit(63939.290:62): UNKNOWN=0"]$|1j0B|dӉO+/xWӦ^gq%ḦrO res=0 [ 1197.577368][T30582] ima: policy update failed [ 1197.598451][ T30] audit: type=1802 audit(63939.320:63): pid=30584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.5314" res=0 errno=0 [ 1197.696741][ T30] audit: type=1802 audit(63939.340:64): pid=30582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.5314" res=0 errno=0 [ 1198.318414][T30619] snd_aloop snd_aloop.0: Parsing timer source 'L' failed with -22 [ 1201.830771][T30721] tipc: Started in network mode [ 1201.868391][T30721] tipc: Node identity ffffffff, cluster identity 4711 [ 1201.906553][T30721] tipc: Node number set to 4294967295 [ 1202.094252][T30738] snd_aloop snd_aloop.0: Parsing timer source 'L' failed with -22 [ 1203.705308][T30809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5354'. [ 1204.528186][T30826] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5357'. [ 1204.586409][T30826] veth1_macvtap: left promiscuous mode [ 1204.618802][T30826] macsec0: entered promiscuous mode [ 1204.662417][T30826] macsec0: entered allmulticast mode [ 1204.700770][T30828] bonding: no command found in bonding_masters - use +ifname or -ifname [ 1205.752899][T30860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5367'. [ 1205.947354][T30872] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5371'. [ 1206.845584][T30877] futex_wake_op: syz.3.5373 tries to shift op by -2048; fix this program [ 1208.624947][T30938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5385'. [ 1209.593797][T30977] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5393'. [ 1211.520625][T31025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5404'. [ 1213.664386][T31067] kexec: Could not allocate control_code_buffer [ 1214.215528][T31093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5422'. [ 1215.372291][T31138] FAULT_INJECTION: forcing a failure. [ 1215.372291][T31138] name failslab, interval 1, probability 0, space 0, times 0 [ 1215.443810][T31138] CPU: 0 UID: 0 PID: 31138 Comm: Tainted: G U L syzkaller #0 PREEMPT(full) [ 1215.443839][T31138] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1215.443846][T31138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1215.443855][T31138] Call Trace: [ 1215.443862][T31138] [ 1215.443869][T31138] dump_stack_lvl+0x100/0x190 [ 1215.443897][T31138] should_fail_ex.cold+0x5/0xa [ 1215.443917][T31138] should_failslab+0xc2/0x120 [ 1215.443935][T31138] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1215.443958][T31138] ? security_inode_alloc+0x3b/0x2c0 [ 1215.443977][T31138] ? lockdep_init_map_type+0x5c/0x250 [ 1215.444000][T31138] security_inode_alloc+0x3b/0x2c0 [ 1215.444018][T31138] inode_init_always_gfp+0xced/0x1040 [ 1215.444039][T31138] alloc_inode+0x8e/0x250 [ 1215.444060][T31138] new_inode+0x22/0x1c0 [ 1215.444090][T31138] proc_pid_make_inode+0x22/0x160 [ 1215.444114][T31138] proc_ns_dir_lookup+0x25b/0x390 [ 1215.444141][T31138] lookup_open.isra.0+0x631/0x11b0 [ 1215.444169][T31138] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1215.444202][T31138] ? mnt_get_write_access+0x1e9/0x2f0 [ 1215.444227][T31138] path_openat+0xa98/0x31a0 [ 1215.444250][T31138] ? __pfx_path_openat+0x10/0x10 [ 1215.444274][T31138] do_file_open+0x20e/0x430 [ 1215.444292][T31138] ? __pfx_do_file_open+0x10/0x10 [ 1215.444316][T31138] ? __pfx_kfree_link+0x10/0x10 [ 1215.444343][T31138] ? alloc_fd+0x476/0x790 [ 1215.444367][T31138] ? do_getname+0x191/0x390 [ 1215.444389][T31138] do_sys_openat2+0x10d/0x1e0 [ 1215.444411][T31138] ? __pfx_do_sys_openat2+0x10/0x10 [ 1215.444434][T31138] ? __fget_files+0x21f/0x3d0 [ 1215.444454][T31138] __x64_sys_openat+0x12d/0x210 [ 1215.444476][T31138] ? __pfx___x64_sys_openat+0x10/0x10 [ 1215.444505][T31138] do_syscall_64+0x106/0xf80 [ 1215.444521][T31138] ? clear_bhb_loop+0x40/0x90 [ 1215.444540][T31138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1215.444556][T31138] RIP: 0033:0x7f710fb5d04e [ 1215.444570][T31138] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1215.444586][T31138] RSP: 002b:00007f7110a5fec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1215.444601][T31138] RAX: ffffffffffffffda RBX: 00007f7110a606c0 RCX: 00007f710fb5d04e [ 1215.444612][T31138] RDX: 0000000000000002 RSI: 00007f7110a5ff90 RDI: ffffffffffffff9c [ 1215.444625][T31138] RBP: 00007f710fc32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1215.444635][T31138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1215.444643][T31138] R13: 00007f710fe16038 R14: 00007f710fe15fa0 R15: 00007ffc6a73aeb8 [ 1215.444664][T31138] [ 1217.353196][T31173] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5441'. [ 1217.547215][T27527] Bluetooth: hci0: unexpected event 0x0f length: 123 > 4 [ 1217.547244][T27527] Bluetooth: hci0: unexpected event for opcode 0x6118 [ 1218.915943][T31228] : Can't lookup blockdev [ 1219.013233][T31231] snd_aloop snd_aloop.0: Parsing timer source 'L' failed with -22 [ 1219.981775][T31246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5458'. [ 1220.596749][T31262] random: crng reseeded on system resumption [ 1220.837669][T31268] FAULT_INJECTION: forcing a failure. [ 1220.837669][T31268] name failslab, interval 1, probability 0, space 0, times 0 [ 1220.898081][T31268] CPU: 0 UID: 0 PID: 31268 Comm: syz.3.5463 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1220.898110][T31268] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1220.898117][T31268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1220.898126][T31268] Call Trace: [ 1220.898132][T31268] [ 1220.898139][T31268] dump_stack_lvl+0x100/0x190 [ 1220.898169][T31268] should_fail_ex.cold+0x5/0xa [ 1220.898189][T31268] should_failslab+0xc2/0x120 [ 1220.898207][T31268] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1220.898230][T31268] ? alloc_empty_file+0x55/0x1c0 [ 1220.898250][T31268] ? __pfx_stack_trace_save+0x10/0x10 [ 1220.898269][T31268] alloc_empty_file+0x55/0x1c0 [ 1220.898290][T31268] path_openat+0xe8/0x31a0 [ 1220.898306][T31268] ? kasan_save_stack+0x3f/0x50 [ 1220.898320][T31268] ? kasan_save_stack+0x30/0x50 [ 1220.898333][T31268] ? kasan_save_track+0x14/0x30 [ 1220.898346][T31268] ? __kasan_slab_alloc+0x89/0x90 [ 1220.898361][T31268] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1220.898383][T31268] ? do_getname+0x35/0x390 [ 1220.898401][T31268] ? do_sys_openat2+0xc5/0x1e0 [ 1220.898422][T31268] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1220.898440][T31268] ? __pfx_path_openat+0x10/0x10 [ 1220.898464][T31268] do_file_open+0x20e/0x430 [ 1220.898482][T31268] ? __pfx_do_file_open+0x10/0x10 [ 1220.898511][T31268] ? alloc_fd+0x476/0x790 [ 1220.898529][T31268] ? do_getname+0x191/0x390 [ 1220.898550][T31268] do_sys_openat2+0x10d/0x1e0 [ 1220.898572][T31268] ? __pfx_do_sys_openat2+0x10/0x10 [ 1220.898599][T31268] __x64_sys_openat+0x12d/0x210 [ 1220.898620][T31268] ? __pfx___x64_sys_openat+0x10/0x10 [ 1220.898648][T31268] do_syscall_64+0x106/0xf80 [ 1220.898665][T31268] ? clear_bhb_loop+0x40/0x90 [ 1220.898694][T31268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1220.898711][T31268] RIP: 0033:0x7f710fb9c819 [ 1220.898731][T31268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1220.898747][T31268] RSP: 002b:00007f7110a60028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1220.898763][T31268] RAX: ffffffffffffffda RBX: 00007f710fe15fa0 RCX: 00007f710fb9c819 [ 1220.898774][T31268] RDX: 0000000000103200 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 1220.898785][T31268] RBP: 00007f710fc32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1220.898794][T31268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1220.898803][T31268] R13: 00007f710fe16038 R14: 00007f710fe15fa0 R15: 00007ffc6a73aeb8 [ 1220.898823][T31268] [ 1222.456414][T31300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5472'. [ 1222.653732][T31311] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5474'. [ 1222.816989][T31313] can0: slcan on pty238. [ 1222.999481][T31312] can0 (unregistered): slcan off pty238. [ 1224.766915][T31372] netlink: 98 bytes leftover after parsing attributes in process `syz.0.5486'. [ 1226.440409][T31412] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1226.455482][T31418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5493'. [ 1226.643435][T31412] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1226.831631][T31412] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1226.958902][T31412] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.478669][T31446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5500'. [ 1227.563593][T31450] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1227.965943][T31452] netlink: 334 bytes leftover after parsing attributes in process `syz.3.5501'. [ 1228.581613][T31487] random: crng reseeded on system resumption [ 1228.804047][T31487] snd_aloop snd_aloop.0: Parsing timer source 'L' failed with -22 [ 1232.813708][T31587] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 1234.573192][T31622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5529'. [ 1235.105492][T31640] snd_aloop snd_aloop.0: Parsing timer source 'L' failed with -22 [ 1236.695802][T31666] netlink: 342 bytes leftover after parsing attributes in process `syz.0.5539'. [ 1236.727519][T31672] netlink: 330 bytes leftover after parsing attributes in process `syz.2.5543'. [ 1236.762131][T31672] netlink: 330 bytes leftover after parsing attributes in process `syz.2.5543'. [ 1237.529532][T31680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5544'. [ 1238.725089][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.731413][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.605613][T31736] FAULT_INJECTION: forcing a failure. [ 1239.605613][T31736] name failslab, interval 1, probability 0, space 0, times 0 [ 1239.704811][T31736] CPU: 0 UID: 0 PID: 31736 Comm: syz.3.5554 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1239.704840][T31736] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1239.704846][T31736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1239.704856][T31736] Call Trace: [ 1239.704862][T31736] [ 1239.704869][T31736] dump_stack_lvl+0x100/0x190 [ 1239.704897][T31736] should_fail_ex.cold+0x5/0xa [ 1239.704916][T31736] ? lsm_blob_alloc+0x68/0x90 [ 1239.704939][T31736] should_failslab+0xc2/0x120 [ 1239.704958][T31736] __kmalloc_noprof+0xe0/0x850 [ 1239.704982][T31736] ? trace_kmalloc+0x101/0x130 [ 1239.705002][T31736] lsm_blob_alloc+0x68/0x90 [ 1239.705025][T31736] security_sk_alloc+0x2d/0x290 [ 1239.705043][T31736] sk_prot_alloc+0x12a/0x2a0 [ 1239.705063][T31736] sk_alloc+0x36/0xe80 [ 1239.705086][T31736] caif_create+0x10b/0x430 [ 1239.705103][T31736] __sock_create+0x339/0x860 [ 1239.705127][T31736] __sys_socket+0x14d/0x260 [ 1239.705148][T31736] ? __pfx___sys_socket+0x10/0x10 [ 1239.705175][T31736] __x64_sys_socket+0x72/0xb0 [ 1239.705195][T31736] ? lockdep_hardirqs_on+0x78/0x100 [ 1239.705212][T31736] do_syscall_64+0x106/0xf80 [ 1239.705228][T31736] ? clear_bhb_loop+0x40/0x90 [ 1239.705247][T31736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1239.705262][T31736] RIP: 0033:0x7f710fb9c819 [ 1239.705276][T31736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1239.705290][T31736] RSP: 002b:00007f7110a1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1239.705306][T31736] RAX: ffffffffffffffda RBX: 00007f710fe16180 RCX: 00007f710fb9c819 [ 1239.705316][T31736] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000025 [ 1239.705325][T31736] RBP: 00007f710fc32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1239.705334][T31736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1239.705343][T31736] R13: 00007f710fe16218 R14: 00007f710fe16180 R15: 00007ffc6a73aeb8 [ 1239.705363][T31736] [ 1241.150536][T31754] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1245.029083][T31815] FAULT_INJECTION: forcing a failure. [ 1245.029083][T31815] name failslab, interval 1, probability 0, space 0, times 0 [ 1245.134776][T31815] CPU: 0 UID: 0 PID: 31815 Comm: syz.1.5570 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1245.134805][T31815] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1245.134812][T31815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1245.134822][T31815] Call Trace: [ 1245.134828][T31815] [ 1245.134835][T31815] dump_stack_lvl+0x100/0x190 [ 1245.134864][T31815] should_fail_ex.cold+0x5/0xa [ 1245.134883][T31815] should_failslab+0xc2/0x120 [ 1245.134902][T31815] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1245.134924][T31815] ? vm_area_alloc+0x1f/0x160 [ 1245.134949][T31815] ? vma_merge_new_range+0x38b/0xa30 [ 1245.134970][T31815] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1245.134989][T31815] vm_area_alloc+0x1f/0x160 [ 1245.135010][T31815] __mmap_region+0x118c/0x2a50 [ 1245.135036][T31815] ? __pfx___mmap_region+0x10/0x10 [ 1245.135079][T31815] ? is_bpf_text_address+0x94/0x1a0 [ 1245.135102][T31815] ? kernel_text_address+0x8d/0x100 [ 1245.135125][T31815] ? __kernel_text_address+0xd/0x30 [ 1245.135153][T31815] ? __pfx_hugetlb_file_mmap_prepare_success+0x10/0x10 [ 1245.135174][T31815] ? stack_trace_save+0x8e/0xc0 [ 1245.135213][T31815] ? rcu_is_watching+0x12/0xc0 [ 1245.135237][T31815] ? cap_capable+0x107/0x460 [ 1245.135256][T31815] mmap_region+0x180/0x3e0 [ 1245.135283][T31815] do_mmap+0xc63/0x12f0 [ 1245.135305][T31815] ? __pfx_do_mmap+0x10/0x10 [ 1245.135322][T31815] ? __pfx_down_write_killable+0x10/0x10 [ 1245.135346][T31815] vm_mmap_pgoff+0x29e/0x470 [ 1245.135368][T31815] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1245.135385][T31815] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1245.135408][T31815] ? hugetlbfs_get_inode+0x36e/0x750 [ 1245.135431][T31815] ksys_mmap_pgoff+0x273/0x650 [ 1245.135449][T31815] ? __x64_sys_futex+0x358/0x4d0 [ 1245.135469][T31815] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1245.135487][T31815] ? xfd_validate_state+0x129/0x190 [ 1245.135512][T31815] __x64_sys_mmap+0x125/0x190 [ 1245.135537][T31815] do_syscall_64+0x106/0xf80 [ 1245.135553][T31815] ? clear_bhb_loop+0x40/0x90 [ 1245.135572][T31815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1245.135588][T31815] RIP: 0033:0x7f1ee559c819 [ 1245.135603][T31815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1245.135618][T31815] RSP: 002b:00007f1ee6434028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1245.135634][T31815] RAX: ffffffffffffffda RBX: 00007f1ee5815fa0 RCX: 00007f1ee559c819 [ 1245.135644][T31815] RDX: 00004000000000e3 RSI: 0000000000200004 RDI: 0000000000000000 [ 1245.135654][T31815] RBP: 00007f1ee5632c91 R08: 000000000000000d R09: 0000300000000000 [ 1245.135664][T31815] R10: 0000000000040eb2 R11: 0000000000000246 R12: 0000000000000000 [ 1245.135673][T31815] R13: 00007f1ee5816038 R14: 00007f1ee5815fa0 R15: 00007ffd374ebd18 [ 1245.135693][T31815] [ 1246.380325][T31822] snd_aloop snd_aloop.0: Parsing timer source 'L' failed with -22 [ 1246.618598][T31829] snd_aloop snd_aloop.0: Parsing timer source 'L' failed with -22 [ 1246.666206][T31816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5571'. [ 1247.795688][T31839] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1247.804946][T31839] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1247.844975][T31839] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1247.870966][T31839] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1247.891270][T31839] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1247.958358][T31839] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1249.114825][T27527] Bluetooth: hci3: command 0x0c1a tx timeout [ 1249.192506][T31866] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5585'. [ 1249.834798][T27527] Bluetooth: hci1: command 0x0c1a tx timeout [ 1249.840831][T26481] Bluetooth: hci0: command 0x0c1a tx timeout [ 1249.916420][T27527] Bluetooth: hci4: command 0x0c1a tx timeout [ 1251.995207][T27527] Bluetooth: hci4: command 0x0c1a tx timeout [ 1252.910948][T26481] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1252.923196][T26481] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1252.931580][T26481] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1252.940296][T26481] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1252.950283][T26481] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1253.830420][T31924] netlink: 342 bytes leftover after parsing attributes in process `syz.2.5595'. [ 1254.048597][T31924] input input41: cannot allocate more than FF_MAX_EFFECTS effects [ 1254.081007][T26481] Bluetooth: hci4: command 0x0c1a tx timeout [ 1254.213754][T31898] chnl_net:caif_netlink_parms(): no params data found [ 1254.880349][T31898] bridge0: port 1(bridge_slave_0) entered blocking state [ 1254.902461][T31898] bridge0: port 1(bridge_slave_0) entered disabled state [ 1254.902634][T31898] bridge_slave_0: entered allmulticast mode [ 1254.903678][T31898] bridge_slave_0: entered promiscuous mode [ 1255.035112][T26481] Bluetooth: hci2: command tx timeout [ 1255.171501][T31898] bridge0: port 2(bridge_slave_1) entered blocking state [ 1255.171566][T31898] bridge0: port 2(bridge_slave_1) entered disabled state [ 1255.171719][T31898] bridge_slave_1: entered allmulticast mode [ 1255.172782][T31898] bridge_slave_1: entered promiscuous mode [ 1255.437914][T31898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1255.439903][T31898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1255.627104][T31898] team0: Port device team_slave_0 added [ 1255.628916][T31898] team0: Port device team_slave_1 added [ 1255.746640][T31898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1255.746656][T31898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1255.746676][T31898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1255.774137][T31898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1255.774152][T31898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1255.774173][T31898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1255.930476][T31898] hsr_slave_0: entered promiscuous mode [ 1255.943004][T31898] hsr_slave_1: entered promiscuous mode [ 1255.943469][T31898] debugfs: 'hsr0' already exists in 'hsr' [ 1255.943484][T31898] Cannot create hsr debugfs directory [ 1257.114684][T26481] Bluetooth: hci2: command tx timeout [ 1257.874153][T31898] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1258.105560][T31898] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1258.197854][T31898] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1258.312819][T31898] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1258.752495][T32040] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input42 [ 1258.838339][T31898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1258.942548][T32026] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1259.001703][T32026] bridge0: port 3(veth0_to_bridge) entered disabled state [ 1259.060988][T32026] veth0_to_bridge: entered allmulticast mode [ 1259.161228][T32026] veth0_to_bridge: entered promiscuous mode [ 1259.197022][T26481] Bluetooth: hci2: command tx timeout [ 1259.254259][T32026] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1259.383251][T32026] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1259.390492][T32026] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 1259.544503][T31898] 8021q: adding VLAN 0 to HW filter on device team0 [ 1259.586606][T30786] bridge0: port 1(bridge_slave_0) entered blocking state [ 1259.593736][T30786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1259.636004][T30786] bridge0: port 2(bridge_slave_1) entered blocking state [ 1259.643125][T30786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1260.300917][T32063] random: crng reseeded on system resumption [ 1260.341030][T31898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1260.436084][T32063] hub 1-0:1.0: USB hub found [ 1260.459343][T32063] hub 1-0:1.0: 1 port detected [ 1261.202660][T32077] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5622'. [ 1261.276901][T26481] Bluetooth: hci2: command tx timeout [ 1261.416443][T32077] team0 (unregistering): Port device team_slave_0 removed [ 1261.464197][T32077] team0 (unregistering): Port device team_slave_1 removed [ 1261.579584][T31898] veth0_vlan: entered promiscuous mode [ 1261.621119][T32090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5623'. [ 1261.648123][T31898] veth1_vlan: entered promiscuous mode [ 1261.777599][T31898] veth0_macvtap: entered promiscuous mode [ 1261.821789][T31898] veth1_macvtap: entered promiscuous mode [ 1261.891158][T31898] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1261.945979][T31898] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1262.000397][T30797] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1262.032726][T30797] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1262.087340][T30797] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1262.131468][T30797] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1262.462716][T30797] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1262.496111][T30797] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1262.639400][T30789] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1262.666812][T30789] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1262.880654][T32105] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1262.938744][T32105] bridge0: port 3(veth0_to_bridge) entered disabled state [ 1263.071120][T32105] veth0_to_bridge: entered allmulticast mode [ 1263.155051][T32105] veth0_to_bridge: entered promiscuous mode [ 1263.286397][T32105] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1263.490912][T32105] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1263.498129][T32105] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 1264.317687][ C0] net_ratelimit: 804 callbacks suppressed [ 1264.317704][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1264.335659][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1264.348717][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1264.360897][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1264.373634][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1264.385812][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1264.398531][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1264.410724][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1264.423437][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1264.435601][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1269.324636][ C0] net_ratelimit: 10623 callbacks suppressed [ 1269.324654][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1269.343367][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1269.355539][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1269.368780][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1269.380966][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1269.393630][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1269.405770][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1269.418451][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1269.430601][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1269.443314][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1274.334809][ C0] net_ratelimit: 12899 callbacks suppressed [ 1274.334827][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1274.353133][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1274.365278][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1274.377731][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1274.390131][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1274.402269][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1274.414716][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1274.427216][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1274.439382][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1274.451812][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1278.282047][ C0] sched: DL replenish lagged too much [ 1279.344810][ C0] net_ratelimit: 13000 callbacks suppressed [ 1279.344827][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1279.363155][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1279.375530][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1279.387682][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1279.400091][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1279.412442][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1279.424574][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1279.436996][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1279.449395][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1279.461536][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1284.354958][ C0] net_ratelimit: 13333 callbacks suppressed [ 1284.354974][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1284.373049][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1284.385477][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1284.397836][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1284.410019][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1284.422445][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1284.434887][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1284.447028][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1284.459436][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1284.471783][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1289.364658][ C0] net_ratelimit: 14089 callbacks suppressed [ 1289.364676][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1289.383075][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1289.395226][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:ad:61:ca:8a:31, vlan:0) [ 1289.407666][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1289.419817][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1289.432239][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1289.444382][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:ad:61:ca:8a:31, vlan:0) [ 1289.456862][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1289.469002][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1289.481428][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1294.374644][ C0] net_ratelimit: 14497 callbacks suppressed [ 1294.374667][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1294.392815][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1294.405329][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1294.418110][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:ad:61:ca:8a:31, vlan:0) [ 1294.430602][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1294.442757][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1294.455195][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1294.467416][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:ad:61:ca:8a:31, vlan:0) [ 1294.479862][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1294.492032][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1299.384715][ C0] net_ratelimit: 13538 callbacks suppressed [ 1299.384733][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1299.402842][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1299.415368][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1299.427538][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:ad:61:ca:8a:31, vlan:0) [ 1299.440040][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1299.452217][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1299.464718][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1299.476895][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:ad:61:ca:8a:31, vlan:0) [ 1299.489498][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1299.501682][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1304.394722][ C0] net_ratelimit: 13400 callbacks suppressed [ 1304.394739][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1304.412785][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:ad:61:ca:8a:31, vlan:0) [ 1304.425006][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1304.437234][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1304.449399][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1304.462389][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:15:58:af:18:39, vlan:0) [ 1304.474858][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1304.486994][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1304.499469][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1304.511608][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:ad:61:ca:8a:31, vlan:0) [ 1309.404933][ C0] net_ratelimit: 13995 callbacks suppressed [ 1309.404951][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:15:58:af:18:39, vlan:0) [ 1309.423430][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1309.435694][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1309.448176][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1309.460347][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:ad:61:ca:8a:31, vlan:0) [ 1309.472525][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1309.484710][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1309.496887][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1309.509692][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:15:58:af:18:39, vlan:0) [ 1309.522222][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1314.414671][ C0] net_ratelimit: 14633 callbacks suppressed [ 1314.414690][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1314.432827][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:ad:61:ca:8a:31, vlan:0) [ 1314.445022][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1314.457200][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1314.469502][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1314.482281][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:15:58:af:18:39, vlan:0) [ 1314.494821][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1314.507016][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1314.519507][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1314.531672][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:ad:61:ca:8a:31, vlan:0) [ 1319.425126][ C0] net_ratelimit: 13764 callbacks suppressed [ 1319.425144][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1319.443283][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1319.455799][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1319.468006][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:ad:61:ca:8a:31, vlan:0) [ 1319.480240][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1319.492468][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1319.504771][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1319.517573][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:15:58:af:18:39, vlan:0) [ 1319.530104][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1319.542304][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1324.435246][ C0] net_ratelimit: 13285 callbacks suppressed [ 1324.435263][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:15:58:af:18:39, vlan:0) [ 1324.453711][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1324.465899][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1324.478376][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1324.490576][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:ad:61:ca:8a:31, vlan:0) [ 1324.502780][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1324.515025][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1324.527297][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1324.540090][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:15:58:af:18:39, vlan:0) [ 1324.553365][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1325.485608][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1326.947538][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1329.444744][ C0] net_ratelimit: 13394 callbacks suppressed [ 1329.444763][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:ad:61:ca:8a:31, vlan:0) [ 1329.462904][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1329.475102][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1329.487305][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1329.500133][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:15:58:af:18:39, vlan:0) [ 1329.512753][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1329.524947][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1329.537423][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1329.549588][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:ad:61:ca:8a:31, vlan:0) [ 1329.561774][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1334.454847][ C0] net_ratelimit: 13396 callbacks suppressed [ 1334.454865][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1334.473281][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1334.485457][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:ad:61:ca:8a:31, vlan:0) [ 1334.497641][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1334.509849][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1334.522086][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1334.534982][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:15:58:af:18:39, vlan:0) [ 1334.547476][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1334.559635][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1334.572155][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1339.464772][ C0] net_ratelimit: 13644 callbacks suppressed [ 1339.464790][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:15:58:af:18:39, vlan:0) [ 1339.483184][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1339.495368][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1339.507824][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1339.520044][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:ad:61:ca:8a:31, vlan:0) [ 1339.532233][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1339.544550][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1339.556867][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1339.569659][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:15:58:af:18:39, vlan:0) [ 1339.582249][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1344.475434][ C0] net_ratelimit: 14496 callbacks suppressed [ 1344.475452][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1344.493811][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1344.506011][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:ad:61:ca:8a:31, vlan:0) [ 1344.518178][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1344.530344][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1344.542524][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1344.555186][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:15:58:af:18:39, vlan:0) [ 1344.567692][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1344.579846][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1344.592258][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1349.484628][ C0] net_ratelimit: 14895 callbacks suppressed [ 1349.484646][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1349.502719][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:ad:61:ca:8a:31, vlan:0) [ 1349.514890][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1349.527063][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1349.539262][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1349.551980][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:15:58:af:18:39, vlan:0) [ 1349.564426][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1349.576576][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1349.588993][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1349.601131][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:ad:61:ca:8a:31, vlan:0) [ 1354.494598][ C0] net_ratelimit: 13872 callbacks suppressed [ 1354.494616][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1354.512704][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1354.524898][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1354.537653][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:15:58:af:18:39, vlan:0) [ 1354.550190][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1354.562408][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1354.574900][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1354.587065][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:ad:61:ca:8a:31, vlan:0) [ 1354.599263][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1354.611474][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1359.504766][ C0] net_ratelimit: 13579 callbacks suppressed [ 1359.504785][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1359.523149][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1359.535298][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:ad:61:ca:8a:31, vlan:0) [ 1359.547461][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1359.559638][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1359.571823][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1359.584602][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:15:58:af:18:39, vlan:0) [ 1359.597136][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1359.609508][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1359.622047][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1361.708598][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1364.514769][ C0] net_ratelimit: 13354 callbacks suppressed [ 1364.514787][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1364.532951][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1364.545715][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:15:58:af:18:39, vlan:0) [ 1364.558310][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1364.570497][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1364.583011][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1364.595175][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:ad:61:ca:8a:31, vlan:0) [ 1364.607411][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1364.619601][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1364.631829][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1365.441818][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1369.324574][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1369.331565][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P31693/1:b..l P32121/1:b..l P31694/1:b..l [ 1369.342479][ C0] rcu: (detected by 0, t=10502 jiffies, g=211809, q=1949 ncpus=1) [ 1369.350378][ C0] task:syz.0.5546 state:R running task stack:25816 pid:31694 tgid:31691 ppid:28293 task_flags:0x400040 flags:0x00080003 [ 1369.364911][ C0] Call Trace: [ 1369.368192][ C0] [ 1369.371112][ C0] __schedule+0xfee/0x6120 [ 1369.375526][ C0] ? css_rstat_updated+0x1ce/0x5a0 [ 1369.380634][ C0] ? __pfx_css_rstat_updated+0x10/0x10 [ 1369.386096][ C0] ? __pfx___schedule+0x10/0x10 [ 1369.390948][ C0] ? mark_held_locks+0x40/0x70 [ 1369.395712][ C0] preempt_schedule_irq+0x50/0x90 [ 1369.400736][ C0] irqentry_exit+0x17b/0x670 [ 1369.405327][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1369.411312][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x2a/0x70 [ 1369.417469][ C0] Code: f3 0f 1e fa 65 8b 05 a5 bc 05 12 48 8b 34 24 65 48 8b 15 81 bc 05 12 a9 00 01 ff 00 74 1b f6 c4 01 74 07 a9 00 00 ff 00 74 05 cc cc cc cc 8b 82 a4 16 00 00 85 c0 74 f1 8b 82 80 16 00 00 83 [ 1369.437071][ C0] RSP: 0018:ffffc9000527f9b8 EFLAGS: 00000293 [ 1369.443124][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8b868edf [ 1369.451079][ C0] RDX: ffff888031c20000 RSI: ffffffff8b868eec RDI: ffff888031c20000 [ 1369.459033][ C0] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 1369.466983][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880414218c0 [ 1369.474933][ C0] R13: 000000000000000f R14: dffffc0000000000 R15: 000000110c22ffff [ 1369.482905][ C0] ? mtree_load+0x67f/0xa40 [ 1369.487404][ C0] ? mtree_load+0x68c/0xa40 [ 1369.491904][ C0] mtree_load+0x68c/0xa40 [ 1369.496225][ C0] ? __pfx_mtree_load+0x10/0x10 [ 1369.501071][ C0] do_pages_stat+0x3d1/0x7f0 [ 1369.505667][ C0] ? __pfx_do_pages_stat+0x10/0x10 [ 1369.510777][ C0] ? get_task_cred+0x17f/0x360 [ 1369.515546][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 1369.520738][ C0] kernel_move_pages+0xecf/0x13f0 [ 1369.525751][ C0] ? do_futex+0x192/0x350 [ 1369.530068][ C0] ? __pfx_do_futex+0x10/0x10 [ 1369.534731][ C0] ? do_sock_setsockopt+0x101/0x1d0 [ 1369.539920][ C0] ? rcu_is_watching+0x12/0xc0 [ 1369.544678][ C0] ? __pfx_kernel_move_pages+0x10/0x10 [ 1369.550127][ C0] ? __x64_sys_futex+0x34f/0x4d0 [ 1369.555055][ C0] ? __x64_sys_futex+0x358/0x4d0 [ 1369.559997][ C0] ? xfd_validate_state+0x129/0x190 [ 1369.565200][ C0] __x64_sys_move_pages+0xe0/0x1c0 [ 1369.570300][ C0] ? do_syscall_64+0x95/0xf80 [ 1369.574961][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 1369.580142][ C0] do_syscall_64+0x106/0xf80 [ 1369.584719][ C0] ? clear_bhb_loop+0x40/0x90 [ 1369.589394][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1369.595304][ C0] RIP: 0033:0x7f2043d9c819 [ 1369.599710][ C0] RSP: 002b:00007f2044cd0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 1369.608113][ C0] RAX: ffffffffffffffda RBX: 00007f2044016180 RCX: 00007f2043d9c819 [ 1369.616071][ C0] RDX: 0000000000000000 RSI: 0002000000000003 RDI: 0000000000000001 [ 1369.624033][ C0] RBP: 00007f2043e32c91 R08: 0000000000000000 R09: 8000400000000000 [ 1369.632006][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1369.639960][ C0] R13: 00007f2044016218 R14: 00007f2044016180 R15: 00007ffc735d6f88 [ 1369.647923][ C0] [ 1369.650923][ C0] task:syz.2.5639 state:R running task stack:27256 pid:32121 tgid:32120 ppid:28995 task_flags:0x400140 flags:0x00080000 [ 1369.664400][ C0] Call Trace: [ 1369.667677][ C0] [ 1369.670601][ C0] __schedule+0xfee/0x6120 [ 1369.675010][ C0] ? is_bpf_text_address+0x94/0x1a0 [ 1369.680216][ C0] ? __pfx___schedule+0x10/0x10 [ 1369.685057][ C0] ? mark_held_locks+0x40/0x70 [ 1369.689812][ C0] preempt_schedule_irq+0x50/0x90 [ 1369.694822][ C0] irqentry_exit+0x17b/0x670 [ 1369.699403][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1369.705372][ C0] RIP: 0010:lock_acquire+0x20/0x380 [ 1369.710577][ C0] Code: 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 41 89 f6 41 55 45 89 c5 41 54 41 89 cc 55 48 89 fd 53 89 d3 48 83 ec 38 <65> 4c 8b 3d a0 92 29 12 4c 89 7c 24 30 4d 89 cf 66 90 65 8b 05 bb [ 1369.730184][ C0] RSP: 0018:ffffc90003a97218 EFLAGS: 00000296 [ 1369.736239][ C0] RAX: ffffffff81b7bd3d RBX: 0000000000000000 RCX: 0000000000000002 [ 1369.744194][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e7e7760 [ 1369.752143][ C0] RBP: ffffffff8e7e7760 R08: 0000000000000000 R09: 0000000000000000 [ 1369.760093][ C0] R10: 0000000000000200 R11: 00000000000a8e11 R12: 0000000000000002 [ 1369.768046][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880644a3d00 [ 1369.776022][ C0] ? unwind_next_frame+0xbd/0x1ea0 [ 1369.781127][ C0] ? find_held_lock+0x2b/0x80 [ 1369.785786][ C0] ? unwind_next_frame+0x3be/0x1ea0 [ 1369.790964][ C0] ? unwind_next_frame+0x3be/0x1ea0 [ 1369.796144][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1369.802280][ C0] unwind_next_frame+0xd1/0x1ea0 [ 1369.807196][ C0] ? unwind_next_frame+0xbd/0x1ea0 [ 1369.812288][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1369.818347][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1369.824482][ C0] arch_stack_walk+0x94/0xf0 [ 1369.829057][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1369.835109][ C0] stack_trace_save+0x8e/0xc0 [ 1369.839770][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1369.845123][ C0] ? kasan_save_stack+0x30/0x50 [ 1369.849957][ C0] kasan_save_stack+0x30/0x50 [ 1369.854613][ C0] ? kasan_save_stack+0x30/0x50 [ 1369.859443][ C0] ? kasan_save_track+0x14/0x30 [ 1369.864278][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 1369.869281][ C0] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1369.874902][ C0] ? __kernfs_new_node+0xd2/0x960 [ 1369.879915][ C0] ? kernfs_new_node+0x11b/0x1a0 [ 1369.884836][ C0] ? __kernfs_create_file+0x53/0x350 [ 1369.890103][ C0] ? sysfs_add_file_mode_ns+0x207/0x3c0 [ 1369.895632][ C0] ? internal_create_group+0x593/0xf40 [ 1369.901077][ C0] ? internal_create_groups+0x9d/0x150 [ 1369.906535][ C0] ? netdev_queue_update_kobjects+0x115/0x6f0 [ 1369.912588][ C0] ? netdev_register_kobject+0x2b3/0x3d0 [ 1369.918202][ C0] ? register_netdevice+0x12e0/0x2210 [ 1369.923557][ C0] ? register_netdev+0x34/0x50 [ 1369.928298][ C0] ? sit_init_net+0x2c0/0x5f0 [ 1369.932960][ C0] ? ops_init+0x1e2/0x5f0 [ 1369.937278][ C0] ? setup_net+0x118/0x3a0 [ 1369.941676][ C0] ? copy_net_ns+0x46f/0x7c0 [ 1369.946250][ C0] ? create_new_namespaces+0x3ea/0xac0 [ 1369.951692][ C0] ? unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1369.957481][ C0] ? ksys_unshare+0x473/0xad0 [ 1369.962142][ C0] ? __x64_sys_unshare+0x31/0x40 [ 1369.967061][ C0] ? do_syscall_64+0x106/0xf80 [ 1369.971806][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1369.977872][ C0] kasan_save_track+0x14/0x30 [ 1369.982538][ C0] __kasan_slab_alloc+0x89/0x90 [ 1369.987372][ C0] kmem_cache_alloc_noprof+0x241/0x6e0 [ 1369.992828][ C0] ? __kernfs_new_node+0xd2/0x960 [ 1369.997843][ C0] __kernfs_new_node+0xd2/0x960 [ 1370.002683][ C0] ? __pfx___kernfs_new_node+0x10/0x10 [ 1370.008133][ C0] ? find_held_lock+0x2b/0x80 [ 1370.012790][ C0] ? kernfs_root+0xee/0x2a0 [ 1370.017280][ C0] ? kernfs_root+0xee/0x2a0 [ 1370.021774][ C0] kernfs_new_node+0x11b/0x1a0 [ 1370.026525][ C0] __kernfs_create_file+0x53/0x350 [ 1370.031626][ C0] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1370.036993][ C0] internal_create_group+0x593/0xf40 [ 1370.042269][ C0] ? kobject_init_and_add+0x129/0x180 [ 1370.047625][ C0] ? __pfx_internal_create_group+0x10/0x10 [ 1370.053430][ C0] ? __pfx_kobject_init_and_add+0x10/0x10 [ 1370.059133][ C0] ? ops_init+0x1e2/0x5f0 [ 1370.063446][ C0] ? ksys_unshare+0x473/0xad0 [ 1370.068109][ C0] ? __x64_sys_unshare+0x31/0x40 [ 1370.073031][ C0] ? do_syscall_64+0x106/0xf80 [ 1370.077794][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1370.083845][ C0] internal_create_groups+0x9d/0x150 [ 1370.089122][ C0] netdev_queue_update_kobjects+0x115/0x6f0 [ 1370.095009][ C0] netdev_register_kobject+0x2b3/0x3d0 [ 1370.100457][ C0] register_netdevice+0x12e0/0x2210 [ 1370.105641][ C0] ? __pfx_register_netdevice+0x10/0x10 [ 1370.111176][ C0] register_netdev+0x34/0x50 [ 1370.115745][ C0] sit_init_net+0x2c0/0x5f0 [ 1370.120236][ C0] ? __pfx_sit_init_net+0x10/0x10 [ 1370.125248][ C0] ops_init+0x1e2/0x5f0 [ 1370.129389][ C0] setup_net+0x118/0x3a0 [ 1370.133615][ C0] ? __pfx_setup_net+0x10/0x10 [ 1370.138358][ C0] ? lockdep_init_map_type+0x5c/0x250 [ 1370.143719][ C0] ? mutex_init_lockep+0x110/0x150 [ 1370.148817][ C0] copy_net_ns+0x46f/0x7c0 [ 1370.153218][ C0] create_new_namespaces+0x3ea/0xac0 [ 1370.158487][ C0] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1370.164102][ C0] ksys_unshare+0x473/0xad0 [ 1370.168586][ C0] ? kfree+0x2ec/0x6b0 [ 1370.172636][ C0] ? rcu_is_watching+0x12/0xc0 [ 1370.177385][ C0] ? __pfx_ksys_unshare+0x10/0x10 [ 1370.182393][ C0] ? kcov_ioctl+0x16a/0x720 [ 1370.186877][ C0] __x64_sys_unshare+0x31/0x40 [ 1370.191623][ C0] do_syscall_64+0x106/0xf80 [ 1370.196194][ C0] ? clear_bhb_loop+0x40/0x90 [ 1370.200854][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1370.206729][ C0] RIP: 0033:0x7f16a019c819 [ 1370.211122][ C0] RSP: 002b:00007f16a112e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1370.219511][ C0] RAX: ffffffffffffffda RBX: 00007f16a0415fa0 RCX: 00007f16a019c819 [ 1370.227461][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1370.235411][ C0] RBP: 00007f16a0232c91 R08: 0000000000000000 R09: 0000000000000000 [ 1370.243361][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1370.251309][ C0] R13: 00007f16a0416038 R14: 00007f16a0415fa0 R15: 00007ffe752cbc38 [ 1370.259267][ C0] [ 1370.262264][ C0] task:syz.0.5546 state:R running task stack:25816 pid:31693 tgid:31691 ppid:28293 task_flags:0x400040 flags:0x00080003 [ 1370.275725][ C0] Call Trace: [ 1370.278981][ C0] [ 1370.281894][ C0] __schedule+0xfee/0x6120 [ 1370.286289][ C0] ? __handle_mm_fault+0x4f0/0x2b60 [ 1370.291476][ C0] ? __lock_acquire+0x4a5/0x2630 [ 1370.296399][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 1370.301838][ C0] ? __pfx_mt_find+0x10/0x10 [ 1370.306411][ C0] ? __pfx_css_rstat_updated+0x10/0x10 [ 1370.311853][ C0] ? __pfx___schedule+0x10/0x10 [ 1370.316684][ C0] ? mark_held_locks+0x40/0x70 [ 1370.321434][ C0] preempt_schedule_irq+0x50/0x90 [ 1370.326438][ C0] irqentry_exit+0x17b/0x670 [ 1370.331013][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1370.336973][ C0] RIP: 0010:__sanitizer_cov_trace_switch+0x3b/0x90 [ 1370.343454][ C0] Code: 53 48 8b 46 08 48 83 f8 20 74 63 77 48 48 83 f8 08 74 63 41 be 03 00 00 00 48 83 f8 10 75 29 4c 8b 6d 00 31 db 4d 85 ed 74 1e <48> 8b 74 dd 10 48 8b 4c 24 28 4c 89 e2 4c 89 f7 48 83 c3 01 e8 8c [ 1370.363039][ C0] RSP: 0018:ffffc900054af990 EFLAGS: 00000202 [ 1370.369083][ C0] RAX: 0000000000000020 RBX: 0000000000000000 RCX: ffffffff8b868edf [ 1370.377033][ C0] RDX: ffff888033abbd00 RSI: ffffffff8d28c740 RDI: 0000000000000001 [ 1370.384998][ C0] RBP: ffffffff8d28c740 R08: 0000000000000005 R09: 0000000000000000 [ 1370.392962][ C0] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000000001 [ 1370.400912][ C0] R13: 0000000000000002 R14: 0000000000000005 R15: ffff888034664200 [ 1370.408870][ C0] ? mtree_load+0x67f/0xa40 [ 1370.413361][ C0] mtree_load+0x475/0xa40 [ 1370.417677][ C0] ? __pfx_mtree_load+0x10/0x10 [ 1370.422519][ C0] do_pages_stat+0x3d1/0x7f0 [ 1370.427096][ C0] ? __pfx_do_pages_stat+0x10/0x10 [ 1370.432194][ C0] ? get_task_cred+0x17f/0x360 [ 1370.436961][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 1370.442150][ C0] kernel_move_pages+0xecf/0x13f0 [ 1370.447162][ C0] ? do_futex+0x192/0x350 [ 1370.451475][ C0] ? __pfx_do_futex+0x10/0x10 [ 1370.456155][ C0] ? __pfx_kernel_move_pages+0x10/0x10 [ 1370.461603][ C0] ? __x64_sys_futex+0x34f/0x4d0 [ 1370.466526][ C0] ? __x64_sys_futex+0x358/0x4d0 [ 1370.471447][ C0] ? __sys_socket+0xac/0x260 [ 1370.476023][ C0] ? xfd_validate_state+0x129/0x190 [ 1370.481209][ C0] __x64_sys_move_pages+0xe0/0x1c0 [ 1370.486302][ C0] ? do_syscall_64+0x95/0xf80 [ 1370.490962][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 1370.496140][ C0] do_syscall_64+0x106/0xf80 [ 1370.500725][ C0] ? clear_bhb_loop+0x40/0x90 [ 1370.505384][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1370.511261][ C0] RIP: 0033:0x7f2043d9c819 [ 1370.515655][ C0] RSP: 002b:00007f2044cf1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 1370.524046][ C0] RAX: ffffffffffffffda RBX: 00007f2044016090 RCX: 00007f2043d9c819 [ 1370.531997][ C0] RDX: 0000000000000000 RSI: 0002000000000003 RDI: 0000000000000001 [ 1370.539947][ C0] RBP: 00007f2043e32c91 R08: 0000000000000000 R09: 8000400000000000 [ 1370.547897][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1370.555847][ C0] R13: 00007f2044016128 R14: 00007f2044016090 R15: 00007ffc735d6f88 [ 1370.563808][ C0] [ 1370.567522][ C0] net_ratelimit: 12760 callbacks suppressed [ 1370.567535][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:15:58:af:18:39, vlan:0) [ 1370.585943][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1370.598161][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1370.610705][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1370.622901][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:ad:61:ca:8a:31, vlan:0) [ 1370.635080][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1370.647277][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1370.659484][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1370.672235][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:15:58:af:18:39, vlan:0) [ 1370.684769][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1375.574693][ C0] net_ratelimit: 13517 callbacks suppressed [ 1375.574710][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1375.593315][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:15:58:af:18:39, vlan:0) [ 1375.605789][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1375.617947][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1375.630384][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1375.642533][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:ad:61:ca:8a:31, vlan:0) [ 1375.654730][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1375.666918][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1375.679140][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1375.691815][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:15:58:af:18:39, vlan:0)