last executing test programs: 36.21001063s ago: executing program 2 (id=498): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x20003, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x3c, r1, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @fd}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "016a76f37bf001ca2200000100"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) mmap$auto(0x0, 0xd561, 0x10000000000df, 0xeb2, 0xffffffffffffffff, 0x8000) timer_create$auto(0x2, 0x0, 0x0) timer_settime$auto(0x0, 0x34, 0x0, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_GTP_CMD_NEWPDP(r2, 0x0, 0x4048040) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nullb0/queue/zone_append_max_bytes\x00', 0x48500, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) ioctl$auto(0xffffffffffffffff, 0x5100, 0xffffffffffffffff) 35.784847664s ago: executing program 0 (id=500): r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$auto_output_bpc_fops_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/dri/vkms/Virtual-1/output_bpc\x00', 0x101040, 0x0) lseek$auto(r1, 0x7fffffffffffffff, 0x1) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/auto_online_blocks\x00', 0x2, 0x0) readv$auto(r0, &(0x7f0000000a80)={0x0, 0x2}, 0x2) 35.568581841s ago: executing program 0 (id=501): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x28, 0x5, 0x0) setsockopt$auto(0x1, 0x1, 0x25, &(0x7f0000000000)='\x00', 0x4) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/scsi_mod/parameters/scan\x00', 0x102, 0x0) write$auto_evdev_fops_evdev(r0, &(0x7f0000000080)="538fe380e2f631", 0x7) r1 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0xb2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000080)={0x2c, r3, 0x705, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_TUNNEL_INFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x2c}}, 0x40d0) r4 = openat$auto_ht40allow_map_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/ieee80211/phy14/ht40allow_map\x00', 0x80000, 0x0) mmap$auto(0x7, 0x7ffffffffffffffc, 0x3, 0x8012, r4, 0x8001) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) r5 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000200), r2) sendmsg$auto_IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r5, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x4}, @IEEE802154_ATTR_ED_LIST={0x1f, 0x16, "27bf7a416aed6cd095a40f26f50cad3804da3fec1bdc0e541391e9"}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000000c0)=""/148, 0x94) fallocate$auto(0x8000000000000003, 0x3, 0xf, 0x200000004) 35.568400824s ago: executing program 2 (id=502): sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0xffc, 0x8, 0x80000000000000a, 0x0, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r1, @ANYBLOB="040027bd7000fddbdf2545000000220034005442699d5cce25715eb4ce6068b486bd18168bb0101debba285c9780a898000064005e805d0013005e3938785ac7d8c6d97dc1a196f17983ff1bb6268527d129458a7d9ab836397ec59e27ec36932dd8b269684e8a4adf3b6f6cb744e5bac302b34cc74c2855daa48fce14c0112f93ebb9ee0e500732198dfbdd78ed79423ed949bc859552a6f45f0000000500a300100000002be8b09f8bcc93e7548a48243768ceadc890210519ab29eab30e000081915e9a601c50ad4f8ffe5e1a370e47c9743f41c77dd4effadf73fcc49bac15d4efa72b3757d8e5282a3dffe3c69e12892f83d7332d82ce50e5cfc71c7d336f96a63c98223338f9e8fbde06564291a3c722f324a4fa0c37de7cf3fa8a1ef3ccba4a6bbf134612887a2845c41b51a5577cb73e38f7e3810ad464f919ef1df3a3018013caafb538e8d8a81d63d30bb1e90a009ccd8eee04e6580769b6eca227a190de32ae43a17eabf0bf070000000000000033e367ab188f2c3222dd51894532dee9503377cc96743a6298f89eedced9515b22d80e6a8d5876c64b58e80300000000000000289b9c1cb0c08b723f6d551a9d68ac5f9f70a1b02b5e80893320ed8c90ad77a41b7d7dfccaf4412ad7ae343c2d52c3ad3b6e7fe05c69130403b0d06a10d0cf3960d36afaeaae531d9e74ed8d33b668abeb37954c135f27235eb1e652f3cc9329ed5704946175dfb080244d963dcae80049625827bc82c21a4d5b58bb507153f4727f7e16a09c5f6536795ebcc107f6bac429256fac7ed4731313f40df92cb1e9c284024f7bd5f1194316bfe003913ac40d60284dae81a5b52122dc07dfeb1522cef916f382aace9071aa08551c639b3b5e477a22d23d308a4d0b34f816492409bec44e3d5cad4c43ab45614ebe5c4db7f5a73c185d1af36937ca46b8b54033850ce0a7fcc21c6fbf902e48eaf8722b59c148c61f"], 0xa4}, 0x1, 0x0, 0x0, 0x20004000}, 0x13) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) r2 = socket(0xa, 0x5, 0x84) getsockopt$auto(r2, 0x84, 0x1d, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_CREATE_VM(r3, 0x8004ae98, 0x0) socket(0x2, 0x3, 0x2) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x38}}, 0x54) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) openat$auto_page_owner_stack_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) write$auto(0x3, 0x0, 0x800) 35.294936881s ago: executing program 0 (id=504): bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0xe, 0x4, 0x4, 0x10001, 0x8, 0xc, 0xffffffffffffffff, 0x9, 0x7ff}, 0xee) openat$auto_generic(0xffffffffffffff9c, 0x0, 0x301483, 0x0) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3, 0x1, r0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x5, 0xfffffffd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) fcntl$auto_F_NOTIFY(0xffffffffffffffff, 0x402, 0x9000) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f00, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) mremap$auto(0xfffffffffffffe01, 0x40000000100005, 0x843, 0x3, 0x2) fsopen$auto(0x0, 0x1) prctl$auto(0x38, 0x3, r0, 0x0, 0x3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) shutdown$auto(0x200000003, 0x2) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, r2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) close_range$auto(0x2, 0xffffffffffffffff, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0xe0180, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/bus/usb/drivers/gnss-usb/new_id\x00', 0x100, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/statistics/tx_compressed\x00', 0x80000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0x4030ae7b, r4) setsockopt$auto(0xffffffffffffffff, 0x100, 0x5, &(0x7f0000000040)='#)@$$:]+)]\x00', 0x8001) 35.011431948s ago: executing program 1 (id=506): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x10, 0x0, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4048) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x149041, 0x0) writev$auto(r0, &(0x7f0000000200)={0x0, 0x5}, 0xa) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/pci0000:00/0000:00:01.3/power/control\x00', 0xe3182, 0x0) r2 = fsopen$auto(0x0, 0x1) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi15\x00', 0x802, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x10, 0x2, 0x0) socket(0x28, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptytc\x00', 0x128100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_CREATE_VM(r3, 0xc048aeca, 0x0) write$auto_tty_fops_tty_io(r2, &(0x7f0000000000)="99285ad9c7a0e81bafecd2bb90df72341f37e9ed982fbb48e1422b0e98d3f915f2297a02aeb219e7abc9a9561887b6429497acd6f87a94b7151a", 0x3a) sendfile$auto(r1, r1, 0x0, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000db, 0xeb1, 0x400, 0x8000) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r5, 0x40045010, 0x0) 34.042946278s ago: executing program 2 (id=507): socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x30480, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0) close_range$auto(0x2, r1, 0x449) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = open(&(0x7f0000000080)='./file0\x00', 0x261c2, 0x84) r3 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) mlock$auto(0x112, 0x80006) mlockall$auto(0x800000000000005) madvise$auto(0x20000, 0x200007, 0x19) mbind$auto(0x5, 0x401, 0x1000003, 0x0, 0x7, 0x40) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_fd=r2, r4, 0x4, 0x302f, r3, @relative_id=0x13, 0xe600}, 0xf) bpf$auto(0x2, &(0x7f00000000c0)=@raw_tracepoint={0x5, r6, 0x0, 0x3}, 0x91) socket(0x10, 0x2, 0x4) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x400b0}, 0x80000) close_range$auto(0x2, 0x8, 0x0) r7 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES8=r0, @ANYRES8], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) 33.862351788s ago: executing program 3 (id=509): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) socket(0x1e, 0x805, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyv1\x00', 0x82800, 0x0) ioctl$auto_TIOCMSET2(r1, 0x5418, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x5, 0x0) fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x1, &(0x7f00000001c0)='+\x00', &(0x7f0000000280), 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/workqueue/writeback/max_active\x00', 0x1a2b02, 0x0) sendfile$auto(r2, r2, 0x0, 0x3) 33.755706284s ago: executing program 3 (id=510): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) mmap$auto(0x0, 0xd561, 0x10000000000df, 0xeb2, 0xffffffffffffffff, 0x8000) timer_create$auto(0x2, 0x0, 0x0) timer_settime$auto(0x0, 0x34, 0x0, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_GTP_CMD_NEWPDP(r0, 0x0, 0x4048040) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (fail_nth: 12) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nullb0/queue/zone_append_max_bytes\x00', 0x48500, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) ioctl$auto(0xffffffffffffffff, 0x5100, 0xffffffffffffffff) 33.158943643s ago: executing program 0 (id=511): openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x484080, 0x0) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) r1 = prctl$auto_PR_SET_MM_START_STACK(0x5, 0x5, 0xffffffffffffffff, 0x100000000, 0x5) (async) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_vport(0xfffffffffffffffe, r2) (async) close_range$auto(0x2, 0x8, 0x0) (async) pread64$auto(0xffffffffffffffff, &(0x7f00000000c0)='veth1\xe7#\x16T+\xee\x03\xc4\x1c\a\xdfa\x8b[,>\xa9\xd2\xef\xb0\xfb{b^\xef\x93\x97\x06H\xcb\xe7g\xca\x9dE\xc0\xdc\x1e\x02`\x00Z\x9d|\x8f\x92\xe09\xe1hBJL\x1e\x97.]\x95H\f&_\x8d1\x83\x90,\x01\x8ab\xe6P\xb8J\xc4\xc3&\xe3\x05\x7fl\x18\xf40\x18x\x88\x86\xe6{\xdb\x1c\xfef\xf1x\xc9vKq\xd4/N&\x1f\xae\xa8\x9b\xb2\xdbZ\xed\x16a}\xa9gj\xc2mt\x87&\xf7Z\xf1u\xf0\x14\x00\x00\x00\x00\x00\x00\x00i\xb9\xc8\xc6V5]\x06/\xb1`\xd9X\xe5\xfc$\a\xf3S\xbb\xe99\xf1PZ\x81\x8f\xfc\xa4w\\\x84B\x03+\xa2\xe1\xb4\x9dv\xe1\xd7\b9\xc3.\x96I\x98\x00'/207, 0x200000000006, 0xfc) r3 = socket(0xa, 0x2, 0x3a) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r1) sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, r4, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x37fa}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x1}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x7}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x85ea}, @NL80211_ATTR_VIF_RADIO_MASK={0x8, 0x14d, 0xe}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x33}]}, 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x81) (async) setsockopt$auto(r3, 0x29, 0x18, &(0x7f0000000140)='!\x00', 0x1ff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000001f00), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000003a80)={0x0, 0x1f, &(0x7f0000003a40)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="01002abd7000fddbdf2503"], 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) (async) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000300)={{&(0x7f0000000040), 0x84c, 0x0, 0x6, 0x0, 0x3, 0x10b}, 0xfffffc01}, 0x1, 0x20000000) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000180), 0x7112}, 0x8) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae47, r0) 32.966823231s ago: executing program 1 (id=512): mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) fstat$auto(r0, 0x0) remap_file_pages$auto(0x5, 0x9, 0x0, 0x2, 0x9) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r1, 0x4b47, 0x1) io_uring_setup$auto(0x6, 0x0) r2 = openat$auto_ptdump_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x84000, 0x0) ioctl$auto(r2, 0x8, r0) fdatasync$auto(0xffffffffffffffff) openat$auto_hpet_fops_hpet(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) 32.849568531s ago: executing program 3 (id=513): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r1, @ANYBLOB], 0xa8}}, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000180)={0x0, 0x38, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, r3, 0x1, 0x70bd28, 0x25dfdbfb, {0x2, 0x0, 0x38}, [@NFSD_A_SERVER_SCOPE={0xf, 0x4, '/proc/mtrr\x00'}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x800}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x93b}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x90) 32.807866345s ago: executing program 3 (id=514): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) r0 = openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002640)='/sys/kernel/debug/tracing/set_event_pid\x00', 0x2002, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) ioctl$auto(r1, 0x540a, r1) mmap$auto(0x1, 0x202000d, 0x3, 0xebe, 0xfffffffffffffffa, 0x1) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r2 = open(&(0x7f00000000c0)='&&\x00', 0x595002, 0x60d) write$auto(r0, 0x0, 0x3) linkat$auto(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) io_uring_setup$auto(0x3, 0x0) open(0x0, 0x22040, 0x80) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, 0x0, 0x8800, 0x0) open(0x0, 0x149443, 0x0) mprotect$auto(0x0, 0x8000000000000001, 0x8) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/ax88179_178a/remove_id\x00', 0x488081, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x2a6300, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x47, 0x8000) clone$auto(0x20003b46, 0x10000008, 0x0, 0x0, 0x5) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(0xffffffffffffffff, 0x0, 0x40) mincore$auto(0x1000, 0x8001, 0x0) timerfd_gettime$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x1, 0xc8}, {0x7, 0x1}}) fcntl$auto(0x8000000000000001, 0x7, 0x8) 32.734771075s ago: executing program 0 (id=515): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) r0 = openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002640)='/sys/kernel/debug/tracing/set_event_pid\x00', 0x2002, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) ioctl$auto(r1, 0x540a, r1) mmap$auto(0x1, 0x202000d, 0x3, 0xebe, 0xfffffffffffffffa, 0x1) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r2 = open(&(0x7f00000000c0)='&&\x00', 0x595002, 0x60d) write$auto(r0, 0x0, 0x3) linkat$auto(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) io_uring_setup$auto(0x3, 0x0) open(0x0, 0x22040, 0x80) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, 0x0, 0x8800, 0x0) open(0x0, 0x149443, 0x0) mprotect$auto(0x0, 0x8000000000000001, 0x8) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/ax88179_178a/remove_id\x00', 0x488081, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x2a6300, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x47, 0x8000) clone$auto(0x20003b46, 0x10000008, 0x0, 0x0, 0x5) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(0xffffffffffffffff, 0x0, 0x40) mincore$auto(0x1000, 0x8001, 0x0) timerfd_create$auto(0x9, 0x0) fcntl$auto(0x8000000000000001, 0x7, 0x8) 32.559569005s ago: executing program 2 (id=516): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.6/usb7/version\x00', 0x20040, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/devices.deny\x00', 0x8ea182, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(0x3, 0x10000000084, 0x77, 0x0, 0xc) read$auto(r0, &(0x7f0000000240)='$\x00', 0xb) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x0) getsockopt$auto_SO_PEEK_OFF(r1, 0x7f, 0x2a, &(0x7f00000002c0)='-[{\'\x00', &(0x7f0000000300)) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="2f212cbd7010ca705d845526cc0008000380", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8810) rt_sigsuspend$auto(&(0x7f0000000280)={0x6}, 0x8) sendmsg$auto_NL80211_CMD_FRAME(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, r4, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_SPLIT_WIPHY_DUMP={0x4}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x7}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pimreg\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x1) fremovexattr$auto(r2, &(0x7f0000000040)='s}stem.\xa5\x1aE\x8d\x9e\xb9\x81\xf0\x01\xc2\xa9\xe9\x8d\x87/\xe7') 32.311809276s ago: executing program 1 (id=517): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000002340), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r0, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000006580)={0x28, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_MAX_METERS={0x8, 0x7, 0x7}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 32.008098745s ago: executing program 3 (id=518): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x10, 0x0, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4048) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x149041, 0x0) writev$auto(r0, &(0x7f0000000200)={0x0, 0x5}, 0xa) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/pci0000:00/0000:00:01.3/power/control\x00', 0xe3182, 0x0) r2 = fsopen$auto(0x0, 0x1) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi15\x00', 0x802, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x10, 0x2, 0x0) socket(0x28, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptytc\x00', 0x128100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_CREATE_VM(r3, 0xc048aeca, 0x0) fsconfig$auto_EROFS_MOUNT_DAX_NEVER(r2, 0x4, &(0x7f0000000100)='\x00', &(0x7f0000000140), 0xffffff9c) write$auto_tty_fops_tty_io(r2, &(0x7f0000000000)="99285ad9c7a0e81bafecd2bb90df72341f37e9ed982fbb48e1422b0e98d3f915f2297a02aeb219e7abc9a9561887b6429497acd6f87a94b7151a", 0x3a) sendfile$auto(r1, r1, 0x0, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000db, 0xeb1, 0x400, 0x8000) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r5, 0x40045010, 0x0) 31.978062259s ago: executing program 1 (id=519): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = socket(0x21, 0x4, 0x87) ioctl$auto_SOUND_MIXER_READ_DEVMASK2(0xffffffffffffffff, 0x40044620, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) r1 = openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000040)='/dev/media1\x00', 0x22001, 0x0) write$auto_media_devnode_fops_mc_devnode(r1, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000007ec0)=""/254, 0xfe) pread64$auto(0xffffffffffffffff, &(0x7f0000000040)='/dev/tty0\x00', 0x3, 0xe9) r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) ioctl$auto_XFS_IOC_ALLOCSP64(r2, 0x40305824, &(0x7f0000000340)={0x7ff, 0x8000, 0x81, 0x7, 0xffffffff, 0x0}) sendmsg$auto_NL802154_CMD_ABORT_SCAN(r0, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100028bd7000fbdbdf25240000000e0002002f6465762f74747950f6482f08002a000200000008001c00", @ANYRES32=r3, @ANYBLOB="08000e000400000006000a00030000000800270006000000"], 0x4c}, 0x1, 0x0, 0x0, 0xc014}, 0x2084) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) getsockopt$auto_SO_RCVMARK(0xffffffffffffffff, 0x0, 0x4b, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000) recvmmsg$auto(0xffffffffffffffff, 0x0, 0x1, 0xfffffffb, &(0x7f0000001480)={0xb, 0x3}) select$auto(0x6, &(0x7f0000000640)={[0x6, 0x401, 0x1, 0x20000000009f, 0x8000, 0xab, 0xffffffff7fffffff, 0x2, 0x8, 0x100000000, 0x400, 0x1, 0x724d, 0x7, 0x2, 0x644]}, &(0x7f00000006c0)={[0x6, 0xb, 0x7fff, 0x0, 0x1ff, 0x2, 0x0, 0x3ff, 0x100000000, 0x8, 0x6, 0x9, 0xa, 0xa, 0x27015fa0, 0x7]}, &(0x7f0000000740)={[0x10001, 0x4000, 0x0, 0x3, 0x8, 0x1, 0x0, 0x5, 0x0, 0x7, 0x2, 0x5, 0x9, 0x1, 0x1000, 0x5]}, &(0x7f00000007c0)={0x3, 0x7}) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) sendmsg$auto_TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000002c00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x80) readv$auto(0xca, &(0x7f0000000040)={&(0x7f0000000000), 0x9}, 0x10) r4 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x0, 0xe8, 0x0, 0x2, 0xe4, 0x2}) setsockopt$auto(r0, 0x10000000084, 0x1, 0x0, 0x1) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r0) shmctl$auto_SHM_LOCK(0x7, 0xb, &(0x7f00000004c0)={{0x8, 0xffffffffffffffff, 0xee00, 0x82f, 0x7ff, 0x81, 0x8}, 0xffff63f9, 0x200, 0x0, 0x7fffffff, @raw=0x2, @raw=0xcaf2, 0x100, 0x0, &(0x7f0000000380)="952ab04cdad5db0ea5d153e145948b870a28c5488028b3bfdf4a85d5e83e7f6576642b6f09d77b97412929ebe3e72b3dca4e659782bd077e81b06c4eb03a91b0bdd55c97b69a67b10a181063f292bde3968694b160f56ae3d8dc478c48e15073b00369cad178cb39c2a92b25ddcaaff0eb797d93f9de781779adb3e3aab71cc16a76be47edc5a714cb6b03029c5a11ded1abd78f7949b03ed745bee78835c8209d734ff7f14990a90feeb6c40fb2680706ac7ab06905223444ac11da4d48b8cd469e4be11358f170194aa0a3ad1ef7e48f", &(0x7f0000000480)="7d05985e757a06fb9e8290b359dae07b8f990f60e035f7e102427e7de5b08390af66f0248f417f63b5d522e15efb83b031aec36ebc7f251d1c5e02"}) waitid$auto_P_ALL(0x0, 0x4, &(0x7f0000000080)={@siginfo_0_0={0x80000001, 0x0, 0x1, @_rt={0xffffffffffffffff, r5, @sival_int=0xab4}}}, 0x4, &(0x7f0000000200)={{0xb98c, 0xe}, {0x9, 0x10}, 0x2, 0x1, 0x8, 0x8, 0x6, 0x0, 0x8, 0xffffffff, 0x9, 0x8, 0xcf7, 0x8001, 0xff, 0x7fff}) 31.676594048s ago: executing program 0 (id=520): openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x82202, 0x0) mmap$auto(0x0, 0x400008, 0x20000000000000df, 0x9b72, 0xffffffffffffffff, 0x8000) (async) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) fcntl$auto(r0, 0x402, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) r1 = socket(0x11, 0x80003, 0x300) (rerun: 64) setsockopt$auto(r1, 0x107, 0x12, 0x0, 0x4) (async) r2 = socket(0x10, 0x2, 0x4) (async) io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0xfe, 0x6fb3, 0x8a, 0x9, 0xffffffffffffffff, [0x100, 0x9, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0x4, 0xf08a2b3}, {0x0, 0xfc, 0x10001, 0x0, 0x2, 0xf89, 0x9, 0x839, 0x6}}) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) (async, rerun: 64) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') (async, rerun: 64) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x181081, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x1f, 0x0) (async, rerun: 32) openat$auto_rfkill_fops_core(0xffffffffffffff9c, 0x0, 0x40, 0x0) (async, rerun: 32) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x0, 0x0) (async) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0xc0c02, 0x0) ioctl$auto(r4, 0xc0045543, r5) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) (async) write$auto(r2, &(0x7f0000000000)='-\x00', 0x2fb) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) (rerun: 64) ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0) (async, rerun: 64) ioctl$auto(0x3, 0x4038ae7a, r6) (rerun: 64) 31.403655344s ago: executing program 2 (id=521): set_mempolicy$auto(0x2, &(0x7f0000000080)=0x8000007f, 0x401) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x6, 0x50b301a, 0x1, 0x1, 0x0, 0x2}) r1 = socket(0xa, 0x801, 0x84) recvfrom$auto(0xffffffffffffffff, &(0x7f0000000180)="2512683702c78aa366adde5483233ba62b5f1b0aa86d8137bc9e30cb56cbc69805ea2abbfb20dbed8e619f86d21290031ad3ff89dccea2abedcc8754725987450ef20d0111117f0b641631eecdaa6e7b0de194b5487fa6496ac851c8ba202961d0048e96c98298407192a22aab433167b74e190835b5c5f049a17f4e1b0e2c0bdb7c72dd3279a7eb42e48f26ecf8f7daee9d38c811405c0fe91bfeca6449723bebfc04628d49189a73f80d8a642a2306139006be", 0x100, 0xc0a, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) capset$auto(0x0, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x805aa, 0x0, 0x2e, 0x0, 0x7, 0x80001083}, 0x5}, 0xaf2, 0x100) sendmsg$auto_MACSEC_CMD_DEL_TXSA(0xffffffffffffffff, &(0x7f00000056c0)={0x0, 0x0, &(0x7f0000005680)={&(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES16, @ANYBLOB="0000c74f1bb724785a9500"], 0x28}, 0x1, 0x0, 0x0, 0x20000050}, 0x40094) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0xa, 0x2, 0x0) r3 = socket(0x2, 0x3, 0x9) close_range$auto(0x2, 0x8000, 0x0) open(0x0, 0xa22c0, 0x155) r4 = socket(0x11, 0x80003, 0x3ff) setsockopt$auto(r4, 0xff, 0xf, 0x0, 0x6) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x48080}, 0x4004) sendmmsg$auto(r3, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x49}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x2, 0x3) getsockopt$auto(r1, 0x84, 0x76, 0x0, 0x0) timer_create$auto(0x2, 0x0, 0x0) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@isdn={0x22, 0x8, 0x2, 0x7, 0x7f}, 0x5) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa001, 0x0) write$auto(r5, &(0x7f0000000740)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3U\xf7\t;\xa4\xc2\x11#\xc0S$\xd4\xf4\xb5\xe6\xd0 \xb9', 0x1) write$auto(0xffffffffffffffff, &(0x7f00000005c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r6 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) readv$auto(r6, &(0x7f0000000240)={0x0, 0xc}, 0x9) 31.135779036s ago: executing program 3 (id=522): close_range$auto(0x0, 0xfffffffffffff000, 0x2) unshare$auto(0x40000080) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/ttyS0\x00', 0xa102, 0x0) ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f00000000c0)) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/smaps_rollup\x00', 0x840, 0x0) getsockopt$auto(0xffffffffffffffff, 0x84, 0x82, 0x0, &(0x7f0000000300)=0x1000c) write$auto(0x3, 0x0, 0xfdef) (fail_nth: 1) 30.622631188s ago: executing program 1 (id=523): close_range$auto(0x0, 0xfffffffffffff000, 0x2) unshare$auto(0x40000080) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/ttyS0\x00', 0xa102, 0x0) ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f00000000c0)) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) setresuid$auto(0x2, 0x7, 0x0) mincore$auto(0x0, 0x10000, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/smaps_rollup\x00', 0x840, 0x0) getsockopt$auto(0xffffffffffffffff, 0x84, 0x82, 0x0, &(0x7f0000000300)=0x1000c) write$auto(0x3, 0x0, 0xfdef) 29.841356995s ago: executing program 2 (id=524): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) semctl$auto_SEM_STAT(0x0, 0x80000000, 0x12, 0x0) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\b\x00', @ANYRES16=0x0, @ANYBLOB="00042abd7000fddbdf250800000014000400767863616e31000000000000000000000c0006000400000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) ioctl$auto_BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000500)={0x40a, 0x6b2, 0x3ac, 0x8, {0x1, 0x4, 0xb, 0x3, 0x9, 0x4, 0x9, 0x2, 0xe, 0x0, 0x4000000000001, 0x4, 0x0, 0xf, 0x800}}) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x1, 0x0) bpf$auto_BPF_OBJ_GET_INFO_BY_FD(0xf, &(0x7f00000002c0)=@test={0xffffffffffffffff, 0x0, 0x2, 0x189, 0x4, 0x7fff, 0x8003, 0x10000, 0xc91a, 0x7, 0x5, 0x3, 0x3, 0x3, 0x6}, 0x1) pipe2$auto(&(0x7f00000000c0)=r0, 0xfffffff7) mmap$auto(0x0, 0xa00006, 0x400002, 0x40ebe, 0xffffffffffffffff, 0x300000000000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) sendmsg$auto_ETHTOOL_MSG_PSE_SET(0xffffffffffffffff, 0x0, 0x0) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) write$auto(r2, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) socket$nl_generic(0x10, 0x3, 0x10) read$auto_proc_sys_file_operations_proc_sysctl(r1, &(0x7f00000003c0)=""/232, 0xe8) set_tid_address$auto(0x0) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0) sendfile$auto(r4, r4, 0x0, 0x1) write$auto_proc_mem_operations_base(r3, 0x0, 0x0) 29.748710575s ago: executing program 1 (id=525): prctl$auto(0x3e, 0x1, 0x0, 0x4001, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000001240)='\t', 0x1) io_uring_setup$auto(0x6, 0x0) r0 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$auto_mISDN_fops_timerdev(r0, &(0x7f0000001a00)=""/4097, 0x1001) r1 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) ioctl$auto_I2C_SLAVE(r1, 0x703, 0x0) ioctl$auto_IMADDTIMER(r0, 0x80044940, 0x0) socket(0x2, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x20000a, 0x4) mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0x2, 0x8000) r2 = getpgrp(0x0) ioprio_get$auto_IOPRIO_WHO_PGRP(0x2, r2) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0x1010001, 0x100000003) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x40400, 0x0) acct$auto(&(0x7f0000000000)='/sys//block/nbd3/que\xd6D\xf0\xfa^!\"B\xf9\xd2\x0f]r\xd4\xed\xf9ue/rotational\x00\xda\xc8\x83\x8b\x82;\xf4\n\xcfn\thz\x8f\x17\xfc\x1aK^\xb1\x8b\x96\xfdPw\xa4M@.(\xa6[\xc2\xfcn\x115\xfbHX\x83\xbf\x021\xd6s\xa8\xb1\a-HG\xae\x03\xc3\x1f`\x84\x1b\x81\xda2r{$3dr\xfd\f\xae\x96u\x91\x11ru\xa5\x9f\xec\xe7\x99\xbe\xcb\bN:\xe9\xf0KFJ\aD\xb4(\x03h\xa0%\xf6N\xeb3\x1c\xdcQ+\xa2\xc1wM\xde)J[\xe6O%\xa1\xda\xa9\x9c \x18pD\xb0P\xa3\x86\xfd[\x05\xdb\xcc\xb4d\xab\xc4\a#3.\xfb>\xb0\xf7\x8cp\xab\xd1\xaa\x9d\x8djz\xb2\xcf\xa5\xb5lS\xd7\x80\x8eI\"eH\x9f+o\x8d\xff\x7f!\x9f0\xd2n\xb8/Gy9\x9f\x85EP\x99\xf4\xfcN\xfe\x1e\b\x84G\x8a\x0f\xab\x14vVy*\x1f\xe6\xdf\xe6^\b\x1ecm\xc5\xfe+\x8d\xd5\x17\'oQb\xc1\x89l\xd2\x9d7C\xbf\tdB(\xb6\x93\xdfj~`\x94\xc2\x99t\xbf)|A\x05\x1b\xf7^\xd9\xa1\xee\xfb\'\xaa\x13\xb33\xe7\xc3G!}\x18\a\xbd@\xea\xfd>f\xb7\xb9\xe4\xb1\x1b\x1b\x95\x01\xe4i\x82\xda\x82~1cT\xdb\x92Q\xbd\xc1z\xc0\xf8\x88~\xe3id\xceg\x98\x8a\xa0Rq\x0f^\x11r:\xe1\xd1a\x15\xbb\xd6]\xc6\xfb\xbf`\xd1\\\xfd\xeeW\xc4\x0f\x10bv5\xa2\xde|&\xee\xaf\xa9Y\xc1\x1d\x8a$\xd61Uq\xe3\x94\x9e;8\x7f\x18J\xaf\xbd\xf6\x950W\x03\xdbrf\xe6\xfb\xe5\xf1\xc4a8\xcfo#R\xaa\xfb\xbc\x00') read$auto(r3, 0x0, 0x1ff) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/sysname\x00', 0xaa902, 0x0) write$auto(r4, &(0x7f0000000240)='.G\x1f*@sy\b\x00\xe7\xc9 \x8f\x10!\x11\xd4\x9by\xa8\xb2\x89c\xf8\xc41\xd4\x0f\x82\x8d\xd2\x04\x0f\xf6\xa0\xf7,O\x1d\t8\xb9H\xd5\xc4\xbb\x8f\x13\x94%\xcc\x0e\x9eT\xc1}+\x02J\xb9\x80\xe7\xb3<\x9a\xf1B\x13\xb7P\x9b\xce~\xff&zQ\xa8\x97\n\xb2\xf7\x15Z\x05\x8cl\x04\xca\x954\xdd3\xf9\xa3\x1e#,\xb7\xd2\xa6\x8d\x13\xd0\xf0\x14\x9a\xfa\xed\x9d\xa1\x98P.\'\xccA\x8b\xff\x82\xf8\xc3\xa9\xb6\xc3\x80E\xfc\xe3\xc6\x8d\xb8uh\x9f\xd1!\xa3\xe0dR\xda?\xdc:\xbd\x15X%\x84\xd2yL\x05\xaeV$\xda\xcd\xa1}_\xe0\x9c\x87\xaa\xa1\x1f\x93(\x96}\"sU.2\x1e\xb8\x01U\x8f\xe5\x7f]L\xca\xa2\x9b\x92ZYE\xd2\xe1<4\x9c\x85\x04\x86l2\x8e\xb2\x9e\x11\x82s\xd7\xe3\xdd\xdb\x041\xb2\x1c\xac@\x16\xb3sn\xec\r\x11J*\xbb\xd6\xde\x86v\x83T\xb1\xae\x91{_\xd7JK\xda\x01i#\xe89\x17\xaf\x03j5\r\xce\a\x1dl/#\x96If\xb7\xb9\xe4\xb1\x1b\x1b\x95\x01\xe4i\x82\xda\x82~1cT\xdb\x92Q\xbd\xc1z\xc0\xf8\x88~\xe3id\xceg\x98\x8a\xa0Rq\x0f^\x11r:\xe1\xd1a\x15\xbb\xd6]\xc6\xfb\xbf`\xd1\\\xfd\xeeW\xc4\x0f\x10bv5\xa2\xde|&\xee\xaf\xa9Y\xc1\x1d\x8a$\xd61Uq\xe3\x94\x9e;8\x7f\x18J\xaf\xbd\xf6\x950W\x03\xdbrf\xe6\xfb\xe5\xf1\xc4a8\xcfo#R\xaa\xfb\xbc\x00') read$auto(r3, 0x0, 0x1ff) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/sysname\x00', 0xaa902, 0x0) write$auto(r4, &(0x7f0000000240)='.G\x1f*@sy\b\x00\xe7\xc9 \x8f\x10!\x11\xd4\x9by\xa8\xb2\x89c\xf8\xc41\xd4\x0f\x82\x8d\xd2\x04\x0f\xf6\xa0\xf7,O\x1d\t8\xb9H\xd5\xc4\xbb\x8f\x13\x94%\xcc\x0e\x9eT\xc1}+\x02J\xb9\x80\xe7\xb3<\x9a\xf1B\x13\xb7P\x9b\xce~\xff&zQ\xa8\x97\n\xb2\xf7\x15Z\x05\x8cl\x04\xca\x954\xdd3\xf9\xa3\x1e#,\xb7\xd2\xa6\x8d\x13\xd0\xf0\x14\x9a\xfa\xed\x9d\xa1\x98P.\'\xccA\x8b\xff\x82\xf8\xc3\xa9\xb6\xc3\x80E\xfc\xe3\xc6\x8d\xb8uh\x9f\xd1!\xa3\xe0dR\xda?\xdc:\xbd\x15X%\x84\xd2yL\x05\xaeV$\xda\xcd\xa1}_\xe0\x9c\x87\xaa\xa1\x1f\x93(\x96}\"sU.2\x1e\xb8\x01U\x8f\xe5\x7f]L\xca\xa2\x9b\x92ZYE\xd2\xe1<4\x9c\x85\x04\x86l2\x8e\xb2\x9e\x11\x82s\xd7\xe3\xdd\xdb\x041\xb2\x1c\xac@\x16\xb3sn\xec\r\x11J*\xbb\xd6\xde\x86v\x83T\xb1\xae\x91{_\xd7JK\xda\x01i#\xe89\x17\xaf\x03j5\r\xce\a\x1dl/#\x96Ir0, 0xfffffff7) mmap$auto(0x0, 0xa00006, 0x400002, 0x40ebe, 0xffffffffffffffff, 0x300000000000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) sendmsg$auto_ETHTOOL_MSG_PSE_SET(0xffffffffffffffff, 0x0, 0x0) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) write$auto(r2, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) socket$nl_generic(0x10, 0x3, 0x10) read$auto_proc_sys_file_operations_proc_sysctl(r1, &(0x7f00000003c0)=""/232, 0xe8) set_tid_address$auto(0x0) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0) sendfile$auto(r4, r4, 0x0, 0x1) write$auto_proc_mem_operations_base(r3, 0x0, 0x0) 0s ago: executing program 35 (id=522): close_range$auto(0x0, 0xfffffffffffff000, 0x2) unshare$auto(0x40000080) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/ttyS0\x00', 0xa102, 0x0) ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f00000000c0)) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/smaps_rollup\x00', 0x840, 0x0) getsockopt$auto(0xffffffffffffffff, 0x84, 0x82, 0x0, &(0x7f0000000300)=0x1000c) write$auto(0x3, 0x0, 0xfdef) (fail_nth: 1) kernel console output (not intermixed with test programs): [ 114.534881][ T6260] kstrtoul() returned -22 for lu_gp_id [ 114.581407][ T30] audit: type=1800 audit(1775712005.482:6): pid=6260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.78" name="lu_gp_id" dev="configfs" ino=10224 res=0 errno=0 [ 114.827226][ T6270] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [1]. [ 115.903078][ T30] audit: type=1800 audit(1775712006.861:7): pid=6287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.86" name="lu_gp_id" dev="configfs" ino=11173 res=0 errno=0 [ 115.927450][ T6285] kstrtoul() returned -22 for lu_gp_id [ 117.391884][ T6321] capability: warning: `syz.1.97' uses deprecated v2 capabilities in a way that may be insecure [ 117.589063][ T5825] Bluetooth: hci2: unexpected subevent 0x03 length: 253 > 9 [ 117.875616][ T6326] netlink: 342 bytes leftover after parsing attributes in process `syz.1.97'. [ 118.774147][ T6337] ptp ptp0: delete virtual clock ptp1 [ 118.833402][ T6337] ptp ptp0: only physical clock in use now [ 118.962417][ T6332] delete_channel: no stack [ 119.464750][ T30] audit: type=1800 audit(1775712010.420:8): pid=6352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.104" name="lu_gp_id" dev="configfs" ino=12569 res=0 errno=0 [ 119.471768][ T6352] kstrtoul() returned -22 for lu_gp_id [ 121.368735][ T6384] vivid-007: ================= START STATUS ================= [ 121.383517][ T6384] vivid-007: Generate PTS: true [ 121.388634][ T6384] vivid-007: Generate SCR: true [ 121.423951][ T6371] delete_channel: no stack [ 121.428758][ T6384] tpg source WxH: 320x240 (Y'CbCr) [ 121.444848][ T6384] tpg field: 1 [ 121.448309][ T6384] tpg crop: (0,0)/320x240 [ 121.478446][ T6384] tpg compose: (0,0)/320x240 [ 121.503674][ T6384] tpg colorspace: 8 [ 121.507545][ T6384] tpg transfer function: 0/0 [ 121.532206][ T6384] tpg Y'CbCr encoding: 0/0 [ 121.547265][ T6384] tpg quantization: 0/0 [ 121.551474][ T6384] tpg RGB range: 0/2 [ 121.614959][ T6384] vivid-007: ================== END STATUS ================== [ 123.150737][ T6433] futex_wake_op: syz.3.120 tries to shift op by -2048; fix this program [ 123.645793][ T6438] block2mtd: illegal erase size [ 124.150114][ T6444] vhci_hcd vhci_hcd.1: invalid port number 14 [ 125.257811][ T13] netdevsim netdevsim1335 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.493698][ T6471] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(16) [ 125.517161][ T6471] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 125.968509][ T6477] can: request_module (can-proto-5) failed. [ 126.253555][ T6489] FAULT_INJECTION: forcing a failure. [ 126.253555][ T6489] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 126.317339][ T6492] FAULT_INJECTION: forcing a failure. [ 126.317339][ T6492] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 126.331801][ T6489] CPU: 1 UID: 0 PID: 6489 Comm: syz.1.132 Not tainted syzkaller #0 PREEMPT(full) [ 126.331840][ T6489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 126.331866][ T6489] Call Trace: [ 126.331876][ T6489] [ 126.331890][ T6489] dump_stack_lvl+0x100/0x190 [ 126.331956][ T6489] should_fail_ex.cold+0x5/0xa [ 126.331990][ T6489] _copy_from_user+0x2e/0xd0 [ 126.332029][ T6489] load_msg+0x19e/0x4a0 [ 126.332077][ T6489] do_mq_timedsend+0x3ce/0xc40 [ 126.332110][ T6489] ? __pfx_do_mq_timedsend+0x10/0x10 [ 126.332139][ T6489] ? __mutex_unlock_slowpath+0x15c/0x790 [ 126.332174][ T6489] ? __fget_files+0x215/0x3d0 [ 126.332204][ T6489] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 126.332242][ T6489] ? __fget_files+0x21f/0x3d0 [ 126.332279][ T6489] __x64_sys_mq_timedsend+0x1cd/0x260 [ 126.332310][ T6489] ? ksys_write+0x1ac/0x250 [ 126.332339][ T6489] ? __pfx___x64_sys_mq_timedsend+0x10/0x10 [ 126.332382][ T6489] do_syscall_64+0x106/0xf80 [ 126.332411][ T6489] ? clear_bhb_loop+0x40/0x90 [ 126.332446][ T6489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.332483][ T6489] RIP: 0033:0x7f604119c819 [ 126.332510][ T6489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.332537][ T6489] RSP: 002b:00007f6042109028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f2 [ 126.332563][ T6489] RAX: ffffffffffffffda RBX: 00007f6041415fa0 RCX: 00007f604119c819 [ 126.332582][ T6489] RDX: 0000000000002000 RSI: 0000000000000000 RDI: 0000000000000003 [ 126.332598][ T6489] RBP: 00007f6042109090 R08: 0000000000000000 R09: 0000000000000000 [ 126.332615][ T6489] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000001 [ 126.332631][ T6489] R13: 00007f6041416038 R14: 00007f6041415fa0 R15: 00007fff35f05208 [ 126.332668][ T6489] [ 126.364894][ T6492] CPU: 0 UID: 0 PID: 6492 Comm: syz.0.133 Not tainted syzkaller #0 PREEMPT(full) [ 126.365000][ T6492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 126.365054][ T6492] Call Trace: [ 126.365086][ T6492] [ 126.365097][ T6492] dump_stack_lvl+0x100/0x190 [ 126.365254][ T6492] should_fail_ex.cold+0x5/0xa [ 126.365357][ T6492] ? prepare_alloc_pages+0x16d/0x5f0 [ 126.365450][ T6492] should_fail_alloc_page+0xeb/0x140 [ 126.365535][ T6492] prepare_alloc_pages+0x1f0/0x5f0 [ 126.365657][ T6492] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 126.365820][ T6492] ? find_held_lock+0x2b/0x80 [ 126.365905][ T6492] ? unwind_next_frame+0x3be/0x1ea0 [ 126.365991][ T6492] ? unwind_next_frame+0x3be/0x1ea0 [ 126.366104][ T6492] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 126.366239][ T6492] ? exc_page_fault+0x6f/0xd0 [ 126.366324][ T6492] ? asm_exc_page_fault+0x26/0x30 [ 126.366416][ T6492] ? __kernel_text_address+0xd/0x30 [ 126.366538][ T6492] ? unwind_get_return_address+0x59/0xa0 [ 126.366648][ T6492] ? arch_stack_walk+0x88/0xf0 [ 126.366777][ T6492] ? __lock_acquire+0x4a5/0x2630 [ 126.366886][ T6492] ? stack_trace_save+0x8e/0xc0 [ 126.366969][ T6492] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 126.367062][ T6492] ? policy_nodemask+0xed/0x4f0 [ 126.367159][ T6492] alloc_pages_mpol+0x1fb/0x550 [ 126.367248][ T6492] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 126.367343][ T6492] ? __lock_acquire+0x4a5/0x2630 [ 126.367463][ T6492] folio_alloc_mpol_noprof+0x36/0x340 [ 126.367577][ T6492] shmem_alloc_folio+0x135/0x160 [ 126.367685][ T6492] shmem_alloc_and_add_folio+0x371/0xd40 [ 126.367854][ T6492] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 126.368018][ T6492] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 126.368229][ T6492] shmem_get_folio_gfp+0x6ab/0x1900 [ 126.368384][ T6492] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 126.368518][ T6492] ? __lock_acquire+0x4a5/0x2630 [ 126.368654][ T6492] shmem_fault+0x1f9/0xa20 [ 126.368797][ T6492] ? __lock_acquire+0x4a5/0x2630 [ 126.368896][ T6492] ? __pfx_shmem_fault+0x10/0x10 [ 126.369012][ T6492] ? __lock_acquire+0x4a5/0x2630 [ 126.369163][ T6492] ? __pfx_filemap_map_pages+0x10/0x10 [ 126.369289][ T6492] __do_fault+0x10d/0x550 [ 126.369389][ T6492] ? __pfx_filemap_map_pages+0x10/0x10 [ 126.369518][ T6492] do_fault+0x2db/0x18e0 [ 126.369632][ T6492] __handle_mm_fault+0x1815/0x2b60 [ 126.369787][ T6492] ? __pfx___handle_mm_fault+0x10/0x10 [ 126.369889][ T6492] ? pte_offset_map_lock+0x174/0x320 [ 126.370011][ T6492] ? find_held_lock+0x2b/0x80 [ 126.370146][ T6492] ? follow_page_pte+0x5b3/0x1400 [ 126.370261][ T6492] handle_mm_fault+0x36d/0xa20 [ 126.370400][ T6492] __get_user_pages+0xf9c/0x34d0 [ 126.370530][ T6492] ? down_read_killable+0x30e/0x4c0 [ 126.370626][ T6492] ? __lock_acquire+0x4a5/0x2630 [ 126.370758][ T6492] ? __pfx___get_user_pages+0x10/0x10 [ 126.370925][ T6492] __gup_longterm_locked+0x279/0x16f0 [ 126.371066][ T6492] ? __pfx___gup_longterm_locked+0x10/0x10 [ 126.371173][ T6492] ? __get_pfnblock_flags_mask+0x140/0x250 [ 126.371268][ T6492] ? find_held_lock+0x2b/0x80 [ 126.371329][ T6492] ? sanity_check_pinned_pages+0x5f6/0x1250 [ 126.371460][ T6492] gup_fast_fallback+0x18c6/0x2460 [ 126.371664][ T6492] ? __pfx_gup_fast_fallback+0x10/0x10 [ 126.371828][ T6492] pin_user_pages_fast+0xa7/0xf0 [ 126.371922][ T6492] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 126.372028][ T6492] ? io_pin_pages+0xc3/0x1e0 [ 126.372139][ T6492] io_pin_pages+0xe6/0x1e0 [ 126.372246][ T6492] io_sqe_buffer_register+0x1e8/0x2000 [ 126.372334][ T6492] ? find_held_lock+0x2b/0x80 [ 126.372471][ T6492] ? __pfx_io_sqe_buffer_register+0x10/0x10 [ 126.372575][ T6492] ? io_rsrc_data_alloc+0x2c/0xa0 [ 126.372717][ T6492] ? copy_iovec_from_user+0x102/0x140 [ 126.372902][ T6492] ? iovec_from_user+0xda/0x140 [ 126.373025][ T6492] io_sqe_buffers_register.cold+0x345/0x4c2 [ 126.373220][ T6492] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 126.373309][ T6492] ? __fget_files+0x215/0x3d0 [ 126.373417][ T6492] ? __fget_files+0x21f/0x3d0 [ 126.373541][ T6492] __do_sys_io_uring_register+0x12f9/0x1ac0 [ 126.373651][ T6492] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 126.373749][ T6492] ? __fget_files+0x21f/0x3d0 [ 126.373858][ T6492] ? fput+0x79/0x100 [ 126.373956][ T6492] ? ksys_write+0x1ac/0x250 [ 126.374034][ T6492] ? __pfx_ksys_write+0x10/0x10 [ 126.374160][ T6492] do_syscall_64+0x106/0xf80 [ 126.374245][ T6492] ? clear_bhb_loop+0x40/0x90 [ 126.374364][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.374447][ T6492] RIP: 0033:0x7fe5c959c819 [ 126.374493][ T6492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.374591][ T6492] RSP: 002b:00007fe5ca4e9028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 126.374683][ T6492] RAX: ffffffffffffffda RBX: 00007fe5c9816090 RCX: 00007fe5c959c819 [ 126.374743][ T6492] RDX: 0000200000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 126.374793][ T6492] RBP: 00007fe5ca4e9090 R08: 0000000000000000 R09: 0000000000000000 [ 126.374839][ T6492] R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000001 [ 126.374891][ T6492] R13: 00007fe5c9816128 R14: 00007fe5c9816090 R15: 00007ffffeff83d8 [ 126.374997][ T6492] [ 128.093804][ T6515] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(16) [ 128.628702][ T6526] netlink: 'syz.3.142': attribute type 10 has an invalid length. [ 128.637072][ T6526] netlink: 330 bytes leftover after parsing attributes in process `syz.3.142'. [ 128.648549][ T6529] program syz.2.143 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 128.949955][ T6538] netlink: 28 bytes leftover after parsing attributes in process `syz.2.144'. [ 128.976237][ T6538] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.062704][ T6538] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.559969][ T6570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.154'. [ 130.739037][ T5825] Bluetooth: hci2: unexpected subevent 0x01 length: 3 < 18 [ 132.905327][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.918461][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.719845][ T6627] block2mtd: illegal erase size [ 134.747980][ T6648] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 134.777520][ T6648] futex_wake_op: syz.2.173 tries to shift op by -2048; fix this program [ 134.786143][ T6648] futex_wake_op: syz.2.173 tries to shift op by -2048; fix this program [ 135.348873][ T6658] scsi_mod.scan: string doesn't fit in 6 chars. [ 135.595811][ T6665] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 137.010401][ T6702] block2mtd: illegal erase size [ 138.710922][ T6751] ptp ptp0: only physical clock in use now [ 138.742720][ T6740] syz.1.190 (6740) used greatest stack depth: 19672 bytes left [ 138.956295][ T6754] openvswitch: netlink: IP tunnel dst address not specified [ 139.656262][ T6765] [U] ^\ [ 140.014945][ T6788] ptp ptp0: only physical clock in use now [ 140.183112][ T6793] FAULT_INJECTION: forcing a failure. [ 140.183112][ T6793] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.198569][ T6790] netlink: 338 bytes leftover after parsing attributes in process `syz.1.203'. [ 140.202379][ T6793] CPU: 1 UID: 0 PID: 6793 Comm: syz.3.204 Tainted: G L syzkaller #0 PREEMPT(full) [ 140.202501][ T6793] Tainted: [L]=SOFTLOCKUP [ 140.202519][ T6793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 140.202563][ T6793] Call Trace: [ 140.202586][ T6793] [ 140.202610][ T6793] dump_stack_lvl+0x100/0x190 [ 140.202754][ T6793] should_fail_ex.cold+0x5/0xa [ 140.202860][ T6793] _copy_from_user+0x2e/0xd0 [ 140.203014][ T6793] copy_msghdr_from_user+0x9f/0x4f0 [ 140.203129][ T6793] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 140.203245][ T6793] ? rcu_is_watching+0x12/0xc0 [ 140.203390][ T6793] ? ___sys_recvmsg+0x177/0x1a0 [ 140.203494][ T6793] ? kfree+0x2ec/0x6b0 [ 140.203633][ T6793] ___sys_recvmsg+0xdd/0x1a0 [ 140.203742][ T6793] ? __pfx____sys_recvmsg+0x10/0x10 [ 140.203915][ T6793] ? __pfx___might_resched+0x10/0x10 [ 140.204053][ T6793] do_recvmmsg+0x301/0x760 [ 140.204177][ T6793] ? __pfx_do_recvmmsg+0x10/0x10 [ 140.204287][ T6793] ? ksys_write+0x190/0x250 [ 140.204392][ T6793] ? ksys_write+0x190/0x250 [ 140.204489][ T6793] ? __mutex_unlock_slowpath+0x15c/0x790 [ 140.204622][ T6793] ? __fget_files+0x21f/0x3d0 [ 140.204728][ T6793] __x64_sys_recvmmsg+0x22a/0x280 [ 140.204814][ T6793] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 140.204929][ T6793] do_syscall_64+0x106/0xf80 [ 140.205011][ T6793] ? clear_bhb_loop+0x40/0x90 [ 140.205117][ T6793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.205201][ T6793] RIP: 0033:0x7f5657f9c819 [ 140.205258][ T6793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.205337][ T6793] RSP: 002b:00007f5658e1a028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 140.205411][ T6793] RAX: ffffffffffffffda RBX: 00007f5658215fa0 RCX: 00007f5657f9c819 [ 140.205456][ T6793] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000003 [ 140.205508][ T6793] RBP: 00007f5658e1a090 R08: 0000000000000000 R09: 0000000000000000 [ 140.205558][ T6793] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 140.205595][ T6793] R13: 00007f5658216038 R14: 00007f5658215fa0 R15: 00007ffd71910c48 [ 140.205700][ T6793] [ 141.389297][ T6824] ptp ptp0: only physical clock in use now [ 141.598093][ T6830] FAULT_INJECTION: forcing a failure. [ 141.598093][ T6830] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.655734][ T6830] CPU: 1 UID: 0 PID: 6830 Comm: syz.2.215 Tainted: G L syzkaller #0 PREEMPT(full) [ 141.655785][ T6830] Tainted: [L]=SOFTLOCKUP [ 141.655796][ T6830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 141.655814][ T6830] Call Trace: [ 141.655824][ T6830] [ 141.655836][ T6830] dump_stack_lvl+0x100/0x190 [ 141.655891][ T6830] should_fail_ex.cold+0x5/0xa [ 141.655931][ T6830] _copy_from_iter+0x1f4/0x1690 [ 141.655985][ T6830] ? __pfx__copy_from_iter+0x10/0x10 [ 141.656027][ T6830] ? trace_kmalloc+0x101/0x130 [ 141.656078][ T6830] ? __kasan_kmalloc+0xaa/0xb0 [ 141.656109][ T6830] ? file_tty_write.isra.0+0x694/0x890 [ 141.656163][ T6830] ? rcu_is_watching+0x12/0xc0 [ 141.656213][ T6830] ? file_tty_write.isra.0+0x694/0x890 [ 141.656264][ T6830] ? kfree+0x2ec/0x6b0 [ 141.656316][ T6830] file_tty_write.isra.0+0x45b/0x890 [ 141.656380][ T6830] redirected_tty_write+0xd4/0x120 [ 141.656435][ T6830] vfs_write+0x6ac/0x1070 [ 141.656475][ T6830] ? __pfx_redirected_tty_write+0x10/0x10 [ 141.656533][ T6830] ? __pfx_vfs_write+0x10/0x10 [ 141.656562][ T6830] ? find_held_lock+0x2b/0x80 [ 141.656622][ T6830] ksys_write+0x12a/0x250 [ 141.656653][ T6830] ? __pfx_ksys_write+0x10/0x10 [ 141.656698][ T6830] do_syscall_64+0x106/0xf80 [ 141.656732][ T6830] ? clear_bhb_loop+0x40/0x90 [ 141.656778][ T6830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.656811][ T6830] RIP: 0033:0x7f9d2db9c819 [ 141.656836][ T6830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.656866][ T6830] RSP: 002b:00007f9d2eaad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 141.656896][ T6830] RAX: ffffffffffffffda RBX: 00007f9d2de15fa0 RCX: 00007f9d2db9c819 [ 141.656916][ T6830] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000003 [ 141.656935][ T6830] RBP: 00007f9d2eaad090 R08: 0000000000000000 R09: 0000000000000000 [ 141.656954][ T6830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.656972][ T6830] R13: 00007f9d2de16038 R14: 00007f9d2de15fa0 R15: 00007ffea6fc7cf8 [ 141.657015][ T6830] [ 142.019397][ T6836] Invalid ELF header magic: != ELF [ 142.308436][ T6836] Unable to find swap-space signature [ 142.930000][ T6851] ptp ptp0: only physical clock in use now [ 144.038158][ T6886] ubi0: attaching mtd0 [ 144.046576][ T6886] ubi0: scanning is finished [ 144.051318][ T6886] ubi0: empty MTD device detected [ 144.217514][ T6886] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 144.237655][ T6886] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 144.260021][ T6886] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 144.283331][ T6886] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 144.307296][ T6886] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 144.327808][ T6886] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 144.352194][ T6886] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 4140363218 [ 144.380515][ T6886] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 144.411908][ T6892] ubi0: background thread "ubi_bgt0d" started, PID 6892 [ 145.363094][ T6919] block loop4: the capability attribute has been deprecated. [ 145.859664][ T6933] Falling back ldisc for ttyS2. [ 146.726621][ T6964] FAULT_INJECTION: forcing a failure. [ 146.726621][ T6964] name fail_futex, interval 1, probability 0, space 0, times 1 [ 146.829758][ T6964] CPU: 0 UID: 0 PID: 6964 Comm: syz.2.247 Tainted: G L syzkaller #0 PREEMPT(full) [ 146.829795][ T6964] Tainted: [L]=SOFTLOCKUP [ 146.829802][ T6964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 146.829814][ T6964] Call Trace: [ 146.829821][ T6964] [ 146.829829][ T6964] dump_stack_lvl+0x100/0x190 [ 146.829868][ T6964] should_fail_ex.cold+0x5/0xa [ 146.829894][ T6964] get_futex_key+0x1d2/0x1620 [ 146.829925][ T6964] ? __pfx_get_futex_key+0x10/0x10 [ 146.829955][ T6964] ? __lock_acquire+0x4a5/0x2630 [ 146.829989][ T6964] futex_wake+0xea/0x530 [ 146.830026][ T6964] ? __pfx_futex_wake+0x10/0x10 [ 146.830069][ T6964] ? find_held_lock+0x2b/0x80 [ 146.830090][ T6964] ? do_sys_openat2+0x1b4/0x1e0 [ 146.830120][ T6964] ? do_sys_openat2+0x1b4/0x1e0 [ 146.830154][ T6964] do_futex+0x32b/0x350 [ 146.830184][ T6964] ? __pfx_do_futex+0x10/0x10 [ 146.830211][ T6964] ? __pfx_do_sys_openat2+0x10/0x10 [ 146.830249][ T6964] __x64_sys_futex+0x34f/0x4d0 [ 146.830298][ T6964] ? __x64_sys_openat+0x12d/0x210 [ 146.830332][ T6964] ? __pfx___x64_sys_futex+0x10/0x10 [ 146.830374][ T6964] do_syscall_64+0x106/0xf80 [ 146.830398][ T6964] ? clear_bhb_loop+0x40/0x90 [ 146.830426][ T6964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.830449][ T6964] RIP: 0033:0x7f9d2db9c819 [ 146.830467][ T6964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.830489][ T6964] RSP: 002b:00007f9d2eaad0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 146.830510][ T6964] RAX: ffffffffffffffda RBX: 00007f9d2de15fa8 RCX: 00007f9d2db9c819 [ 146.830525][ T6964] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9d2de15fac [ 146.830539][ T6964] RBP: 00007f9d2de15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 146.830552][ T6964] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 146.830565][ T6964] R13: 00007f9d2de16038 R14: 00007ffea6fc7c10 R15: 00007ffea6fc7cf8 [ 146.830594][ T6964] [ 147.821660][ T6991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.252'. [ 148.279249][ T7006] block2mtd: illegal erase size [ 148.998834][ T7021] FAULT_INJECTION: forcing a failure. [ 148.998834][ T7021] name failslab, interval 1, probability 0, space 0, times 0 [ 149.053892][ T7021] CPU: 0 UID: 0 PID: 7021 Comm: syz.3.258 Tainted: G L syzkaller #0 PREEMPT(full) [ 149.053927][ T7021] Tainted: [L]=SOFTLOCKUP [ 149.053935][ T7021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 149.053947][ T7021] Call Trace: [ 149.053954][ T7021] [ 149.053962][ T7021] dump_stack_lvl+0x100/0x190 [ 149.054001][ T7021] should_fail_ex.cold+0x5/0xa [ 149.054027][ T7021] ? tomoyo_realpath_from_path+0xb6/0x690 [ 149.054061][ T7021] should_failslab+0xc2/0x120 [ 149.054086][ T7021] __kmalloc_noprof+0xe0/0x850 [ 149.054128][ T7021] tomoyo_realpath_from_path+0xb6/0x690 [ 149.054167][ T7021] tomoyo_check_open_permission+0x2af/0x3c0 [ 149.054198][ T7021] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 149.054252][ T7021] ? lock_acquire+0x1cf/0x380 [ 149.054281][ T7021] ? find_held_lock+0x2b/0x80 [ 149.054310][ T7021] tomoyo_file_open+0x6b/0x90 [ 149.054332][ T7021] security_file_open+0xb5/0x1e0 [ 149.054364][ T7021] do_dentry_open+0x5aa/0x1660 [ 149.054396][ T7021] vfs_open+0x82/0x3f0 [ 149.054429][ T7021] path_openat+0x208c/0x31a0 [ 149.054462][ T7021] ? __pfx_path_openat+0x10/0x10 [ 149.054509][ T7021] do_file_open+0x20e/0x430 [ 149.054536][ T7021] ? __pfx_do_file_open+0x10/0x10 [ 149.054570][ T7021] ? __pfx_kfree_link+0x10/0x10 [ 149.054611][ T7021] ? alloc_fd+0x476/0x790 [ 149.054643][ T7021] ? do_getname+0x191/0x390 [ 149.054675][ T7021] do_sys_openat2+0x10d/0x1e0 [ 149.054706][ T7021] ? __pfx_do_sys_openat2+0x10/0x10 [ 149.054747][ T7021] __x64_sys_openat+0x12d/0x210 [ 149.054779][ T7021] ? __pfx___x64_sys_openat+0x10/0x10 [ 149.054840][ T7021] do_syscall_64+0x106/0xf80 [ 149.054874][ T7021] ? clear_bhb_loop+0x40/0x90 [ 149.054915][ T7021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.054949][ T7021] RIP: 0033:0x7f5657f5d04e [ 149.054966][ T7021] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 149.054987][ T7021] RSP: 002b:00007f5658e19f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 149.055007][ T7021] RAX: ffffffffffffffda RBX: 00007f5658e1a6c0 RCX: 00007f5657f5d04e [ 149.055021][ T7021] RDX: 0000000000000002 RSI: 00007f5658032598 RDI: ffffffffffffff9c [ 149.055035][ T7021] RBP: 00007f5658032c91 R08: 0000000000000000 R09: 0000000000000000 [ 149.055048][ T7021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 149.055061][ T7021] R13: 00007f5658216038 R14: 00007f5658215fa0 R15: 00007ffd71910c48 [ 149.055089][ T7021] [ 149.055169][ T7021] ERROR: Out of memory at tomoyo_realpath_from_path. [ 149.374871][ T7021] FAULT_INJECTION: forcing a failure. [ 149.374871][ T7021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.389868][ T7021] CPU: 0 UID: 0 PID: 7021 Comm: syz.3.258 Tainted: G L syzkaller #0 PREEMPT(full) [ 149.389918][ T7021] Tainted: [L]=SOFTLOCKUP [ 149.389928][ T7021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 149.389945][ T7021] Call Trace: [ 149.389955][ T7021] [ 149.389966][ T7021] dump_stack_lvl+0x100/0x190 [ 149.390020][ T7021] should_fail_ex.cold+0x5/0xa [ 149.390058][ T7021] _copy_from_iter+0x1f4/0x1690 [ 149.390102][ T7021] ? rcu_is_watching+0x12/0xc0 [ 149.390152][ T7021] ? trace_kmem_cache_alloc+0xf3/0x120 [ 149.390188][ T7021] ? __kasan_slab_alloc+0x89/0x90 [ 149.390221][ T7021] ? __pfx__copy_from_iter+0x10/0x10 [ 149.390265][ T7021] ? __asan_memset+0x23/0x50 [ 149.390311][ T7021] ? __build_skb_around+0x278/0x390 [ 149.390359][ T7021] ? is_vmalloc_addr+0x86/0xa0 [ 149.390412][ T7021] netlink_sendmsg+0x808/0xda0 [ 149.390452][ T7021] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.390485][ T7021] ? __import_iovec+0x1d2/0x640 [ 149.390530][ T7021] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 149.390582][ T7021] ____sys_sendmsg+0x9e1/0xb70 [ 149.390617][ T7021] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.390653][ T7021] ? __pfx_____sys_sendmsg+0x10/0x10 [ 149.390707][ T7021] ___sys_sendmsg+0x190/0x1e0 [ 149.390749][ T7021] ? __pfx____sys_sendmsg+0x10/0x10 [ 149.390835][ T7021] __sys_sendmsg+0x170/0x220 [ 149.390865][ T7021] ? __pfx___sys_sendmsg+0x10/0x10 [ 149.390924][ T7021] do_syscall_64+0x106/0xf80 [ 149.390954][ T7021] ? clear_bhb_loop+0x40/0x90 [ 149.390989][ T7021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.391019][ T7021] RIP: 0033:0x7f5657f9c819 [ 149.391040][ T7021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.391067][ T7021] RSP: 002b:00007f5658e1a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.391111][ T7021] RAX: ffffffffffffffda RBX: 00007f5658215fa0 RCX: 00007f5657f9c819 [ 149.391131][ T7021] RDX: 0000000020008804 RSI: 00002000000054c0 RDI: 0000000000000003 [ 149.391149][ T7021] RBP: 00007f5658e1a090 R08: 0000000000000000 R09: 0000000000000000 [ 149.391167][ T7021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.391185][ T7021] R13: 00007f5658216038 R14: 00007f5658215fa0 R15: 00007ffd71910c48 [ 149.391236][ T7021] [ 150.440914][ T7038] zswap: compressor not available [ 150.978591][ T7062] netlink: 186 bytes leftover after parsing attributes in process `syz.0.265'. [ 151.045583][ T7070] netlink: 186 bytes leftover after parsing attributes in process `syz.0.265'. [ 151.455711][ T7084] block2mtd: illegal erase size [ 152.833948][ T7111] netlink: 330 bytes leftover after parsing attributes in process `syz.2.275'. [ 153.428363][ T7122] kvm: vcpu 4: requested lapic timer restore with starting count register 0x390=4294967104 (137438947328 ns) > initial count (6624 ns). Using initial count to start timer. [ 153.481964][ T7126] FAULT_INJECTION: forcing a failure. [ 153.481964][ T7126] name failslab, interval 1, probability 0, space 0, times 0 [ 153.546845][ T7126] CPU: 0 UID: 0 PID: 7126 Comm: syz.1.278 Tainted: G L syzkaller #0 PREEMPT(full) [ 153.546890][ T7126] Tainted: [L]=SOFTLOCKUP [ 153.546899][ T7126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 153.546915][ T7126] Call Trace: [ 153.546925][ T7126] [ 153.546934][ T7126] dump_stack_lvl+0x100/0x190 [ 153.546983][ T7126] should_fail_ex.cold+0x5/0xa [ 153.547018][ T7126] ? tomoyo_realpath_from_path+0xb6/0x690 [ 153.547063][ T7126] should_failslab+0xc2/0x120 [ 153.547095][ T7126] __kmalloc_noprof+0xe0/0x850 [ 153.547149][ T7126] tomoyo_realpath_from_path+0xb6/0x690 [ 153.547200][ T7126] tomoyo_path_number_perm+0x23c/0x580 [ 153.547232][ T7126] ? tomoyo_path_number_perm+0x22e/0x580 [ 153.547271][ T7126] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 153.547346][ T7126] ? find_held_lock+0x2b/0x80 [ 153.547375][ T7126] ? __fget_files+0x215/0x3d0 [ 153.547401][ T7126] ? hook_file_ioctl_common+0x146/0x410 [ 153.547444][ T7126] ? __fget_files+0x21f/0x3d0 [ 153.547477][ T7126] security_file_ioctl+0xd3/0x230 [ 153.547521][ T7126] __x64_sys_ioctl+0xb7/0x210 [ 153.547568][ T7126] do_syscall_64+0x106/0xf80 [ 153.547598][ T7126] ? clear_bhb_loop+0x40/0x90 [ 153.547634][ T7126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.547662][ T7126] RIP: 0033:0x7f604119c819 [ 153.547684][ T7126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.547711][ T7126] RSP: 002b:00007f60420e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 153.547737][ T7126] RAX: ffffffffffffffda RBX: 00007f6041416090 RCX: 00007f604119c819 [ 153.547754][ T7126] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000004 [ 153.547771][ T7126] RBP: 00007f60420e7090 R08: 0000000000000000 R09: 0000000000000000 [ 153.547786][ T7126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.547802][ T7126] R13: 00007f6041416128 R14: 00007f6041416090 R15: 00007fff35f05208 [ 153.547858][ T7126] [ 153.547870][ T7126] ERROR: Out of memory at tomoyo_realpath_from_path. [ 153.759527][ T7127] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 153.810741][ T7116] ptp ptp0: only physical clock in use now [ 153.816850][ T7127] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 153.854764][ T7127] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 153.872316][ T7127] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 153.893464][ T7127] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 153.941409][ T7127] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 154.038405][ T7127] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 154.058797][ T7127] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 154.100853][ T7127] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 154.124667][ T7127] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 154.134740][ T7127] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 154.155092][ T7127] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 154.519816][ T7140] Falling back ldisc for ttyS2. [ 154.544777][ T7143] block2mtd: illegal erase size [ 154.708252][ T7145] block2mtd: illegal erase size [ 154.953328][ T7153] FAULT_INJECTION: forcing a failure. [ 154.953328][ T7153] name failslab, interval 1, probability 0, space 0, times 0 [ 154.983946][ T7153] CPU: 0 UID: 0 PID: 7153 Comm: syz.3.287 Tainted: G L syzkaller #0 PREEMPT(full) [ 154.983980][ T7153] Tainted: [L]=SOFTLOCKUP [ 154.983987][ T7153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 154.983999][ T7153] Call Trace: [ 154.984005][ T7153] [ 154.984013][ T7153] dump_stack_lvl+0x100/0x190 [ 154.984049][ T7153] should_fail_ex.cold+0x5/0xa [ 154.984074][ T7153] ? copy_splice_read+0x1a3/0xb90 [ 154.984094][ T7153] should_failslab+0xc2/0x120 [ 154.984118][ T7153] __kmalloc_noprof+0xe0/0x850 [ 154.984157][ T7153] copy_splice_read+0x1a3/0xb90 [ 154.984192][ T7153] ? __pfx_copy_splice_read+0x10/0x10 [ 154.984216][ T7153] ? look_up_lock_class+0x55/0x120 [ 154.984243][ T7153] ? lockdep_init_map_type+0x5c/0x250 [ 154.984276][ T7153] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 154.984299][ T7153] ? __pfx_copy_splice_read+0x10/0x10 [ 154.984320][ T7153] do_splice_read+0x285/0x370 [ 154.984344][ T7153] splice_direct_to_actor+0x2a1/0xa30 [ 154.984368][ T7153] ? __pfx_direct_splice_actor+0x10/0x10 [ 154.984395][ T7153] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 154.984425][ T7153] do_splice_direct+0x174/0x240 [ 154.984465][ T7153] ? __pfx_do_splice_direct+0x10/0x10 [ 154.984490][ T7153] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 154.984517][ T7153] ? rw_verify_area+0xce/0x6d0 [ 154.984553][ T7153] do_sendfile+0xadc/0xe20 [ 154.984579][ T7153] ? __pfx_do_sendfile+0x10/0x10 [ 154.984615][ T7153] ? __fget_files+0x21f/0x3d0 [ 154.984644][ T7153] __x64_sys_sendfile64+0x1d8/0x220 [ 154.984670][ T7153] ? ksys_write+0x1ac/0x250 [ 154.984691][ T7153] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 154.984726][ T7153] do_syscall_64+0x106/0xf80 [ 154.984749][ T7153] ? clear_bhb_loop+0x40/0x90 [ 154.984776][ T7153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.984798][ T7153] RIP: 0033:0x7f5657f9c819 [ 154.984815][ T7153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.984836][ T7153] RSP: 002b:00007f5658e1a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 154.984857][ T7153] RAX: ffffffffffffffda RBX: 00007f5658215fa0 RCX: 00007f5657f9c819 [ 154.984871][ T7153] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 154.984884][ T7153] RBP: 00007f5658e1a090 R08: 0000000000000000 R09: 0000000000000000 [ 154.984897][ T7153] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 154.984909][ T7153] R13: 00007f5658216038 R14: 00007f5658215fa0 R15: 00007ffd71910c48 [ 154.984937][ T7153] [ 155.809491][ T5825] Bluetooth: hci0: command 0x0c1a tx timeout [ 155.952013][ T5825] Bluetooth: hci1: command 0x0c1a tx timeout [ 156.031437][ T7157] FAULT_INJECTION: forcing a failure. [ 156.031437][ T7157] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.092959][ T7157] CPU: 1 UID: 0 PID: 7157 Comm: syz.3.290 Tainted: G L syzkaller #0 PREEMPT(full) [ 156.093008][ T7157] Tainted: [L]=SOFTLOCKUP [ 156.093019][ T7157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 156.093036][ T7157] Call Trace: [ 156.093046][ T7157] [ 156.093057][ T7157] dump_stack_lvl+0x100/0x190 [ 156.093111][ T7157] should_fail_ex.cold+0x5/0xa [ 156.093149][ T7157] _copy_from_user+0x2e/0xd0 [ 156.093192][ T7157] copy_msghdr_from_user+0x9f/0x4f0 [ 156.093236][ T7157] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 156.093285][ T7157] ? rcu_is_watching+0x12/0xc0 [ 156.093343][ T7157] ? ___sys_recvmsg+0x177/0x1a0 [ 156.093381][ T7157] ? kfree+0x2ec/0x6b0 [ 156.093431][ T7157] ___sys_recvmsg+0xdd/0x1a0 [ 156.093474][ T7157] ? __pfx____sys_recvmsg+0x10/0x10 [ 156.093538][ T7157] ? __pfx___might_resched+0x10/0x10 [ 156.093596][ T7157] do_recvmmsg+0x301/0x760 [ 156.093645][ T7157] ? __pfx_do_recvmmsg+0x10/0x10 [ 156.093685][ T7157] ? ksys_write+0x190/0x250 [ 156.093716][ T7157] ? ksys_write+0x190/0x250 [ 156.093754][ T7157] ? __mutex_unlock_slowpath+0x15c/0x790 [ 156.093803][ T7157] ? __fget_files+0x21f/0x3d0 [ 156.093845][ T7157] __x64_sys_recvmmsg+0x22a/0x280 [ 156.093881][ T7157] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 156.093941][ T7157] do_syscall_64+0x106/0xf80 [ 156.093979][ T7157] ? clear_bhb_loop+0x40/0x90 [ 156.094017][ T7157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.094050][ T7157] RIP: 0033:0x7f5657f9c819 [ 156.094075][ T7157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.094103][ T7157] RSP: 002b:00007f5658e1a028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 156.094133][ T7157] RAX: ffffffffffffffda RBX: 00007f5658215fa0 RCX: 00007f5657f9c819 [ 156.094153][ T7157] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000003 [ 156.094171][ T7157] RBP: 00007f5658e1a090 R08: 0000000000000000 R09: 0000000000000000 [ 156.094189][ T7157] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 156.094207][ T7157] R13: 00007f5658216038 R14: 00007f5658215fa0 R15: 00007ffd71910c48 [ 156.094248][ T7157] [ 156.109709][ T5825] Bluetooth: hci2: command 0x0c1a tx timeout [ 156.191108][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout [ 157.199193][ T7173] ptp ptp0: only physical clock in use now [ 157.649213][ T7189] block2mtd: illegal erase size [ 157.871487][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout [ 158.030838][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout [ 158.088845][ T7197] block2mtd: illegal erase size [ 158.270535][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout [ 158.350643][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout [ 159.232029][ T7205] FAULT_INJECTION: forcing a failure. [ 159.232029][ T7205] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 159.252156][ T7205] CPU: 1 UID: 0 PID: 7205 Comm: syz.3.301 Tainted: G L syzkaller #0 PREEMPT(full) [ 159.252204][ T7205] Tainted: [L]=SOFTLOCKUP [ 159.252215][ T7205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 159.252232][ T7205] Call Trace: [ 159.252242][ T7205] [ 159.252253][ T7205] dump_stack_lvl+0x100/0x190 [ 159.252320][ T7205] should_fail_ex.cold+0x5/0xa [ 159.252352][ T7205] ? prepare_alloc_pages+0x16d/0x5f0 [ 159.252394][ T7205] should_fail_alloc_page+0xeb/0x140 [ 159.252432][ T7205] prepare_alloc_pages+0x1f0/0x5f0 [ 159.252479][ T7205] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 159.252533][ T7205] ? stack_trace_save+0x8e/0xc0 [ 159.252565][ T7205] ? __pfx_stack_trace_save+0x10/0x10 [ 159.252600][ T7205] ? stack_depot_save_flags+0x27/0x9d0 [ 159.252652][ T7205] ? kasan_save_stack+0x3f/0x50 [ 159.252680][ T7205] ? kasan_save_stack+0x30/0x50 [ 159.252707][ T7205] ? kasan_save_track+0x14/0x30 [ 159.252736][ T7205] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 159.252786][ T7205] ? __handle_mm_fault+0xa9e/0x2b60 [ 159.252863][ T7205] ? handle_mm_fault+0x36d/0xa20 [ 159.252902][ T7205] ? do_user_addr_fault+0x74c/0x12f0 [ 159.252949][ T7205] ? asm_exc_page_fault+0x26/0x30 [ 159.252980][ T7205] ? do_syscall_64+0x106/0xf80 [ 159.253022][ T7205] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.253071][ T7205] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 159.253105][ T7205] ? policy_nodemask+0xed/0x4f0 [ 159.253143][ T7205] alloc_pages_mpol+0x1fb/0x550 [ 159.253168][ T7205] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 159.253198][ T7205] alloc_pages_noprof+0x136/0x390 [ 159.253223][ T7205] pte_alloc_one+0x1c/0x3d0 [ 159.253247][ T7205] do_fault+0x88e/0x18e0 [ 159.253272][ T7205] ? __pmd_alloc+0x3fb/0x950 [ 159.253299][ T7205] __handle_mm_fault+0x1815/0x2b60 [ 159.253333][ T7205] ? mt_find+0x45e/0x8e0 [ 159.253358][ T7205] ? __pfx___handle_mm_fault+0x10/0x10 [ 159.253386][ T7205] ? __pfx_mt_find+0x10/0x10 [ 159.253424][ T7205] ? find_vma+0xbf/0x140 [ 159.253444][ T7205] ? __pfx_find_vma+0x10/0x10 [ 159.253468][ T7205] handle_mm_fault+0x36d/0xa20 [ 159.253503][ T7205] do_user_addr_fault+0x74c/0x12f0 [ 159.253530][ T7205] exc_page_fault+0x6f/0xd0 [ 159.253552][ T7205] asm_exc_page_fault+0x26/0x30 [ 159.253572][ T7205] RIP: 0010:__do_sys_io_uring_enter+0x12b9/0x1b60 [ 159.253606][ T7205] Code: 00 f0 ff ff ff 7f 00 00 4c 89 ee 48 89 ef e8 ee df 1e fd 4c 39 ed 0f 82 d0 04 00 00 e8 c0 e5 1e fd 0f 01 cb 0f ae e8 4d 89 ec <49> 8b 45 00 48 89 44 24 18 e8 a9 e5 1e fd 45 8b 6d 08 e8 a0 e5 1e [ 159.253625][ T7205] RSP: 0018:ffffc9000724fd90 EFLAGS: 00050293 [ 159.253642][ T7205] RAX: 0000000000000000 RBX: 000000000000008b RCX: ffffffff84e95db2 [ 159.253654][ T7205] RDX: ffff88804ab19e80 RSI: ffffffff84e95dc0 RDI: ffff88804ab19e80 [ 159.253667][ T7205] RBP: 00007ffffffff000 R08: 0000000000000006 R09: 00007ffffffff000 [ 159.253691][ T7205] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 159.253702][ T7205] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888027f2a000 [ 159.253721][ T7205] ? __do_sys_io_uring_enter+0x12a2/0x1b60 [ 159.253753][ T7205] ? __do_sys_io_uring_enter+0x12b0/0x1b60 [ 159.253793][ T7205] ? __fget_files+0x21f/0x3d0 [ 159.253837][ T7205] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 159.253875][ T7205] ? fput+0x79/0x100 [ 159.253925][ T7205] do_syscall_64+0x106/0xf80 [ 159.253946][ T7205] ? clear_bhb_loop+0x40/0x90 [ 159.253971][ T7205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.254010][ T7205] RIP: 0033:0x7f5657f9c819 [ 159.254028][ T7205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.254048][ T7205] RSP: 002b:00007f5658e1a028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 159.254067][ T7205] RAX: ffffffffffffffda RBX: 00007f5658215fa0 RCX: 00007f5657f9c819 [ 159.254084][ T7205] RDX: 000000000000820e RSI: 0000000000000009 RDI: 0000000000000003 [ 159.254097][ T7205] RBP: 00007f5658e1a090 R08: 0000000000000000 R09: 0000000000000018 [ 159.254110][ T7205] R10: 000000000000008b R11: 0000000000000246 R12: 0000000000000001 [ 159.254122][ T7205] R13: 00007f5658216038 R14: 00007f5658215fa0 R15: 00007ffd71910c48 [ 159.254151][ T7205] [ 159.951472][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout [ 160.111547][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout [ 160.353302][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout [ 160.433525][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout [ 161.855782][ T7241] device-mapper: ioctl: Invalid ioctl structure: name þÿÿÿÿÿÿÿd, dev 3000000000 [ 163.519252][ T7276] block nbd2: not configured, cannot reconfigure [ 163.542342][ T7274] ovs_ÿþÿþ?: entered promiscuous mode [ 164.087284][ T7285] FAULT_INJECTION: forcing a failure. [ 164.087284][ T7285] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.188204][ T7285] CPU: 1 UID: 0 PID: 7285 Comm: syz.0.319 Tainted: G L syzkaller #0 PREEMPT(full) [ 164.188239][ T7285] Tainted: [L]=SOFTLOCKUP [ 164.188246][ T7285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 164.188282][ T7285] Call Trace: [ 164.188293][ T7285] [ 164.188302][ T7285] dump_stack_lvl+0x100/0x190 [ 164.188363][ T7285] should_fail_ex.cold+0x5/0xa [ 164.188397][ T7285] _copy_to_user+0x32/0xd0 [ 164.188444][ T7285] simple_read_from_buffer+0xcb/0x170 [ 164.188499][ T7285] proc_fail_nth_read+0x1af/0x230 [ 164.188530][ T7285] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 164.188562][ T7285] ? rw_verify_area+0xce/0x6d0 [ 164.188597][ T7285] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 164.188627][ T7285] vfs_read+0x1e4/0xb30 [ 164.188652][ T7285] ? __pfx_vfs_read+0x10/0x10 [ 164.188673][ T7285] ? __fget_files+0x215/0x3d0 [ 164.188708][ T7285] ? __fget_files+0x21f/0x3d0 [ 164.188739][ T7285] ksys_read+0x12a/0x250 [ 164.188760][ T7285] ? __pfx_ksys_read+0x10/0x10 [ 164.188791][ T7285] do_syscall_64+0x106/0xf80 [ 164.188815][ T7285] ? clear_bhb_loop+0x40/0x90 [ 164.188843][ T7285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.188865][ T7285] RIP: 0033:0x7fe5c955d04e [ 164.188884][ T7285] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 164.188905][ T7285] RSP: 002b:00007fe5ca509fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 164.188927][ T7285] RAX: ffffffffffffffda RBX: 00007fe5ca50a6c0 RCX: 00007fe5c955d04e [ 164.188942][ T7285] RDX: 000000000000000f RSI: 00007fe5ca50a0a0 RDI: 0000000000000004 [ 164.188955][ T7285] RBP: 00007fe5ca50a090 R08: 0000000000000000 R09: 0000000000000000 [ 164.188969][ T7285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.188982][ T7285] R13: 00007fe5c9816038 R14: 00007fe5c9815fa0 R15: 00007ffffeff83d8 [ 164.189011][ T7285] [ 164.656242][ T7289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.320'. [ 165.365455][ T7297] ptp ptp0: only physical clock in use now [ 165.806373][ T7306] netlink: 252 bytes leftover after parsing attributes in process `syz.1.326'. [ 166.148110][ T7317] block2mtd: illegal erase size [ 168.247523][ T7343] bridge0: port 3(gretap0) entered blocking state [ 168.285667][ T7343] bridge0: port 3(gretap0) entered disabled state [ 168.292423][ T7343] gretap0: entered allmulticast mode [ 168.407705][ T7343] gretap0: entered promiscuous mode [ 168.413714][ T7343] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 168.422387][ T7343] bridge0: port 3(gretap0) entered blocking state [ 168.429127][ T7343] bridge0: port 3(gretap0) entered forwarding state [ 168.477275][ T30] audit: type=1800 audit(1775712059.375:9): pid=7345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.335" name="lu_gp_id" dev="configfs" ino=17794 res=0 errno=0 [ 170.939940][ T7389] ptp ptp0: only physical clock in use now [ 171.573601][ T7405] ima: policy update failed [ 171.592415][ T30] audit: type=1802 audit(1775712062.504:10): pid=7405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.349" res=0 errno=0 [ 172.417506][ T7427] netlink: 4 bytes leftover after parsing attributes in process `syz.3.355'. [ 172.457708][ T7427] netlink: 12 bytes leftover after parsing attributes in process `syz.3.355'. [ 172.486222][ T7427] netlink: 4 bytes leftover after parsing attributes in process `syz.3.355'. [ 175.779065][ T7458] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 175.804685][ T7458] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 175.816140][ T7458] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 175.847401][ T7458] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 176.784608][ T7465] FAULT_INJECTION: forcing a failure. [ 176.784608][ T7465] name failslab, interval 1, probability 0, space 0, times 0 [ 176.889867][ T7465] CPU: 0 UID: 0 PID: 7465 Comm: syz.1.362 Tainted: G L syzkaller #0 PREEMPT(full) [ 176.889915][ T7465] Tainted: [L]=SOFTLOCKUP [ 176.889926][ T7465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 176.889943][ T7465] Call Trace: [ 176.889953][ T7465] [ 176.889965][ T7465] dump_stack_lvl+0x100/0x190 [ 176.890020][ T7465] should_fail_ex.cold+0x5/0xa [ 176.890071][ T7465] should_failslab+0xc2/0x120 [ 176.890107][ T7465] __kvmalloc_node_noprof+0xfa/0xa00 [ 176.890137][ T7465] ? io_alloc_cache_init+0x38/0x170 [ 176.890173][ T7465] ? lockdep_init_map_type+0x5c/0x250 [ 176.890228][ T7465] io_alloc_cache_init+0x38/0x170 [ 176.890265][ T7465] io_uring_setup.cold+0x3cd/0x1d79 [ 176.890320][ T7465] ? __pfx_io_uring_setup+0x10/0x10 [ 176.890369][ T7465] ? __pfx_vfs_write+0x10/0x10 [ 176.890399][ T7465] ? do_sys_openat2+0x157/0x1e0 [ 176.890443][ T7465] ? __pfx_do_sys_openat2+0x10/0x10 [ 176.890514][ T7465] ? ksys_write+0x1ac/0x250 [ 176.890545][ T7465] ? __pfx_ksys_write+0x10/0x10 [ 176.890584][ T7465] __x64_sys_io_uring_setup+0xc2/0x170 [ 176.890634][ T7465] do_syscall_64+0x106/0xf80 [ 176.890686][ T7465] ? clear_bhb_loop+0x40/0x90 [ 176.890727][ T7465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.890760][ T7465] RIP: 0033:0x7f604119c819 [ 176.890786][ T7465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.890816][ T7465] RSP: 002b:00007f6042109028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 176.890846][ T7465] RAX: ffffffffffffffda RBX: 00007f6041415fa0 RCX: 00007f604119c819 [ 176.890866][ T7465] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000084 [ 176.890885][ T7465] RBP: 00007f6042109090 R08: 0000000000000000 R09: 0000000000000000 [ 176.890903][ T7465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.890922][ T7465] R13: 00007f6041416038 R14: 00007f6041415fa0 R15: 00007fff35f05208 [ 176.890964][ T7465] [ 177.567567][ T7477] zram0: detected capacity change from 0 to 16 [ 177.800597][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout [ 177.895227][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout [ 177.900454][ T5825] Bluetooth: hci2: command 0x0c1a tx timeout [ 177.901436][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 178.271144][ T7488] netlink: 28 bytes leftover after parsing attributes in process `syz.0.368'. [ 178.761501][ T7488] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.891430][ T7488] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.928492][ T7488] bond0 (unregistering): Released all slaves [ 179.144372][ T7492] ubi3: attaching mtd1 [ 180.547076][ T7510] binder: BINDER_SET_CONTEXT_MGR already set [ 180.554008][ T7510] binder: 7509:7510 ioctl 4018620d 2000000027c0 returned -16 [ 180.915992][ T7520] netlink: Unknown NAT attribute (type=304, max=9) [ 181.667915][ T7533] ubi3: attaching mtd1 [ 182.483315][ T7543] FAULT_INJECTION: forcing a failure. [ 182.483315][ T7543] name failslab, interval 1, probability 0, space 0, times 0 [ 182.522720][ T7543] CPU: 1 UID: 0 PID: 7543 Comm: syz.2.387 Tainted: G L syzkaller #0 PREEMPT(full) [ 182.522767][ T7543] Tainted: [L]=SOFTLOCKUP [ 182.522774][ T7543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 182.522787][ T7543] Call Trace: [ 182.522794][ T7543] [ 182.522802][ T7543] dump_stack_lvl+0x100/0x190 [ 182.522841][ T7543] should_fail_ex.cold+0x5/0xa [ 182.522867][ T7543] ? tomoyo_realpath_from_path+0xb6/0x690 [ 182.522900][ T7543] should_failslab+0xc2/0x120 [ 182.522925][ T7543] __kmalloc_noprof+0xe0/0x850 [ 182.522966][ T7543] tomoyo_realpath_from_path+0xb6/0x690 [ 182.523005][ T7543] tomoyo_path_number_perm+0x23c/0x580 [ 182.523032][ T7543] ? tomoyo_path_number_perm+0x22e/0x580 [ 182.523063][ T7543] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 182.523119][ T7543] ? find_held_lock+0x2b/0x80 [ 182.523140][ T7543] ? __fget_files+0x215/0x3d0 [ 182.523161][ T7543] ? hook_file_ioctl_common+0x146/0x410 [ 182.523214][ T7543] ? __fget_files+0x21f/0x3d0 [ 182.523242][ T7543] security_file_ioctl+0xd3/0x230 [ 182.523316][ T7543] __x64_sys_ioctl+0xb7/0x210 [ 182.523367][ T7543] do_syscall_64+0x106/0xf80 [ 182.523423][ T7543] ? clear_bhb_loop+0x40/0x90 [ 182.523452][ T7543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.523475][ T7543] RIP: 0033:0x7f9d2db9c819 [ 182.523493][ T7543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.523515][ T7543] RSP: 002b:00007f9d2eaad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 182.523537][ T7543] RAX: ffffffffffffffda RBX: 00007f9d2de15fa0 RCX: 00007f9d2db9c819 [ 182.523552][ T7543] RDX: 0000000000000007 RSI: 0000000040a0ae49 RDI: 0000000000000003 [ 182.523565][ T7543] RBP: 00007f9d2eaad090 R08: 0000000000000000 R09: 0000000000000000 [ 182.523579][ T7543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.523592][ T7543] R13: 00007f9d2de16038 R14: 00007f9d2de15fa0 R15: 00007ffea6fc7cf8 [ 182.523621][ T7543] [ 182.523922][ T7543] ERROR: Out of memory at tomoyo_realpath_from_path. [ 183.504493][ T7559] netlink: 4 bytes leftover after parsing attributes in process `syz.1.391'. [ 183.520450][ T7559] netlink: 25 bytes leftover after parsing attributes in process `syz.1.391'. [ 185.159058][ T7588] FAULT_INJECTION: forcing a failure. [ 185.159058][ T7588] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.254258][ T7588] CPU: 0 UID: 0 PID: 7588 Comm: syz.1.399 Tainted: G L syzkaller #0 PREEMPT(full) [ 185.254303][ T7588] Tainted: [L]=SOFTLOCKUP [ 185.254313][ T7588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 185.254329][ T7588] Call Trace: [ 185.254338][ T7588] [ 185.254348][ T7588] dump_stack_lvl+0x100/0x190 [ 185.254399][ T7588] should_fail_ex.cold+0x5/0xa [ 185.254435][ T7588] _copy_from_user+0x2e/0xd0 [ 185.254476][ T7588] copy_msghdr_from_user+0x9f/0x4f0 [ 185.254518][ T7588] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 185.254566][ T7588] ? __lock_acquire+0x4a5/0x2630 [ 185.254612][ T7588] ___sys_recvmsg+0xdd/0x1a0 [ 185.254653][ T7588] ? __pfx____sys_recvmsg+0x10/0x10 [ 185.254697][ T7588] ? find_held_lock+0x2b/0x80 [ 185.254750][ T7588] do_recvmmsg+0x301/0x760 [ 185.254796][ T7588] ? __pfx_do_recvmmsg+0x10/0x10 [ 185.254833][ T7588] ? ksys_write+0x190/0x250 [ 185.254862][ T7588] ? ksys_write+0x190/0x250 [ 185.254897][ T7588] ? __mutex_unlock_slowpath+0x15c/0x790 [ 185.254962][ T7588] ? __fget_files+0x21f/0x3d0 [ 185.255005][ T7588] __x64_sys_recvmmsg+0x22a/0x280 [ 185.255041][ T7588] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 185.255094][ T7588] do_syscall_64+0x106/0xf80 [ 185.255127][ T7588] ? clear_bhb_loop+0x40/0x90 [ 185.255167][ T7588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.255199][ T7588] RIP: 0033:0x7f604119c819 [ 185.255224][ T7588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.255253][ T7588] RSP: 002b:00007f6042109028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 185.255286][ T7588] RAX: ffffffffffffffda RBX: 00007f6041415fa0 RCX: 00007f604119c819 [ 185.255306][ T7588] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000003 [ 185.255324][ T7588] RBP: 00007f6042109090 R08: 0000000000000000 R09: 0000000000000000 [ 185.255342][ T7588] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000001 [ 185.255360][ T7588] R13: 00007f6041416038 R14: 00007f6041415fa0 R15: 00007fff35f05208 [ 185.255400][ T7588] [ 186.075482][ T7607] futex_wake_op: syz.0.401 tries to shift op by -2048; fix this program [ 187.225152][ T7623] futex_wake_op: syz.0.410 tries to shift op by -2048; fix this program [ 187.233790][ T7623] futex_wake_op: syz.0.410 tries to shift op by -2048; fix this program [ 187.677164][ T7637] FAULT_INJECTION: forcing a failure. [ 187.677164][ T7637] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 187.691903][ T7637] CPU: 0 UID: 0 PID: 7637 Comm: syz.1.413 Tainted: G L syzkaller #0 PREEMPT(full) [ 187.691936][ T7637] Tainted: [L]=SOFTLOCKUP [ 187.691943][ T7637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 187.691956][ T7637] Call Trace: [ 187.691963][ T7637] [ 187.691971][ T7637] dump_stack_lvl+0x100/0x190 [ 187.692009][ T7637] should_fail_ex.cold+0x5/0xa [ 187.692032][ T7637] ? prepare_alloc_pages+0x16d/0x5f0 [ 187.692061][ T7637] should_fail_alloc_page+0xeb/0x140 [ 187.692089][ T7637] prepare_alloc_pages+0x1f0/0x5f0 [ 187.692120][ T7637] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 187.692156][ T7637] ? find_held_lock+0x2b/0x80 [ 187.692182][ T7637] ? __lock_acquire+0x4a5/0x2630 [ 187.692213][ T7637] ? is_bpf_text_address+0x94/0x1a0 [ 187.692250][ T7637] ? kernel_text_address+0x8d/0x100 [ 187.692284][ T7637] ? __kernel_text_address+0xd/0x30 [ 187.692320][ T7637] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 187.692358][ T7637] ? do_raw_spin_lock+0x128/0x260 [ 187.692393][ T7637] ? find_held_lock+0x2b/0x80 [ 187.692414][ T7637] ? stack_depot_save_flags+0x479/0x9d0 [ 187.692447][ T7637] ? rcu_is_watching+0x12/0xc0 [ 187.692485][ T7637] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 187.692553][ T7637] ? stack_depot_save_flags+0x479/0x9d0 [ 187.692603][ T7637] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 187.692638][ T7637] ? policy_nodemask+0xed/0x4f0 [ 187.692678][ T7637] alloc_pages_mpol+0x1fb/0x550 [ 187.692716][ T7637] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 187.692763][ T7637] alloc_pages_noprof+0x136/0x390 [ 187.692801][ T7637] kimage_alloc_pages+0x72/0x380 [ 187.692853][ T7637] kimage_alloc_control_pages+0x157/0xa20 [ 187.692899][ T7637] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 187.692938][ T7637] ? kasan_save_track+0x14/0x30 [ 187.692974][ T7637] do_kexec_load+0x275/0x810 [ 187.693014][ T7637] ? __pfx_do_kexec_load+0x10/0x10 [ 187.693067][ T7637] ? _copy_from_user+0x59/0xd0 [ 187.693109][ T7637] __x64_sys_kexec_load+0x1bf/0x230 [ 187.693148][ T7637] do_syscall_64+0x106/0xf80 [ 187.693177][ T7637] ? clear_bhb_loop+0x40/0x90 [ 187.693213][ T7637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.693243][ T7637] RIP: 0033:0x7f604119c819 [ 187.693266][ T7637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.693293][ T7637] RSP: 002b:00007f6042109028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 187.693319][ T7637] RAX: ffffffffffffffda RBX: 00007f6041415fa0 RCX: 00007f604119c819 [ 187.693338][ T7637] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 0000200000000007 [ 187.693356][ T7637] RBP: 00007f6042109090 R08: 0000000000000000 R09: 0000000000000000 [ 187.693372][ T7637] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 187.693389][ T7637] R13: 00007f6041416038 R14: 00007f6041415fa0 R15: 00007fff35f05208 [ 187.693426][ T7637] [ 187.693483][ T7637] kexec: Could not allocate control_code_buffer [ 189.956900][ T7667] netlink: 28 bytes leftover after parsing attributes in process `syz.1.417'. [ 189.976657][ T7667] vlan1: entered promiscuous mode [ 189.998269][ T7667] vlan1: entered allmulticast mode [ 190.003556][ T7667] veth0_vlan: entered allmulticast mode [ 190.897406][ T7675] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„ [ 191.057670][ T7675] ptp ptp0: only physical clock in use now [ 193.110296][ T7707] aoe: copy from user failed [ 193.117947][ T7707] aoe: could not set interface list: too many interfaces [ 194.374749][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.381337][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.536916][ T7722] netlink: 342 bytes leftover after parsing attributes in process `syz.1.432'. [ 195.704435][ T7742] netlink: 29 bytes leftover after parsing attributes in process `syz.1.437'. [ 195.722686][ T7742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.437'. [ 196.431890][ T30] audit: type=1800 audit(1775712087.351:11): pid=7757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.440" name="SYSV02000008" dev="tmpfs" ino=0 res=0 errno=0 [ 197.004995][ T30] audit: type=1800 audit(1775712087.921:12): pid=7758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.439" name="sr0" dev="devtmpfs" ino=2840 res=0 errno=0 [ 197.738624][ T7765] FAULT_INJECTION: forcing a failure. [ 197.738624][ T7765] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 197.815595][ T7765] CPU: 0 UID: 0 PID: 7765 Comm: syz.0.449 Tainted: G L syzkaller #0 PREEMPT(full) [ 197.815643][ T7765] Tainted: [L]=SOFTLOCKUP [ 197.815654][ T7765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 197.815671][ T7765] Call Trace: [ 197.815681][ T7765] [ 197.815692][ T7765] dump_stack_lvl+0x100/0x190 [ 197.815747][ T7765] should_fail_ex.cold+0x5/0xa [ 197.815780][ T7765] ? prepare_alloc_pages+0x16d/0x5f0 [ 197.815823][ T7765] should_fail_alloc_page+0xeb/0x140 [ 197.815861][ T7765] prepare_alloc_pages+0x1f0/0x5f0 [ 197.815908][ T7765] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 197.815968][ T7765] ? look_up_lock_class+0x55/0x120 [ 197.816005][ T7765] ? register_lock_class+0x40/0x560 [ 197.816054][ T7765] ? find_held_lock+0x2b/0x80 [ 197.816086][ T7765] ? ima_match_policy+0x8c4/0x2350 [ 197.816126][ T7765] ? ima_match_policy+0x8c4/0x2350 [ 197.816171][ T7765] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 197.816221][ T7765] ? __lock_acquire+0x4a5/0x2630 [ 197.816281][ T7765] ? __lock_acquire+0x4a5/0x2630 [ 197.816330][ T7765] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 197.816367][ T7765] ? policy_nodemask+0xed/0x4f0 [ 197.816406][ T7765] alloc_pages_mpol+0x1fb/0x550 [ 197.816455][ T7765] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 197.816500][ T7765] alloc_pages_noprof+0x136/0x390 [ 197.816536][ T7765] __pmd_alloc+0x3b/0x950 [ 197.816576][ T7765] __handle_mm_fault+0xa9e/0x2b60 [ 197.816626][ T7765] ? mt_find+0x45e/0x8e0 [ 197.816662][ T7765] ? __pfx___handle_mm_fault+0x10/0x10 [ 197.816702][ T7765] ? __pfx_mt_find+0x10/0x10 [ 197.816757][ T7765] ? find_vma+0xbf/0x140 [ 197.816788][ T7765] ? __pfx_find_vma+0x10/0x10 [ 197.816824][ T7765] handle_mm_fault+0x36d/0xa20 [ 197.816875][ T7765] do_user_addr_fault+0x74c/0x12f0 [ 197.816916][ T7765] exc_page_fault+0x6f/0xd0 [ 197.816948][ T7765] asm_exc_page_fault+0x26/0x30 [ 197.816978][ T7765] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 197.817020][ T7765] Code: 93 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 cf 93 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 197.817047][ T7765] RSP: 0018:ffffc90007397b08 EFLAGS: 00050206 [ 197.817077][ T7765] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 000000000000020c [ 197.817094][ T7765] RDX: 0000000000000001 RSI: ffff88807cc50100 RDI: 0000000000000000 [ 197.817111][ T7765] RBP: ffffc90007397d78 R08: 0000000000000000 R09: ffffed100f98a061 [ 197.817129][ T7765] R10: ffff88807cc5030b R11: 0000000000000000 R12: 000000000000020c [ 197.817146][ T7765] R13: 00007ffffffff000 R14: ffff88807cc50100 R15: 000000000000020c [ 197.817184][ T7765] _copy_to_iter+0x391/0x1720 [ 197.817221][ T7765] ? filesystems_proc_show+0xdd/0x110 [ 197.817267][ T7765] ? __pfx__copy_to_iter+0x10/0x10 [ 197.817303][ T7765] ? filesystems_proc_show+0xdd/0x110 [ 197.817342][ T7765] ? single_next+0xd/0x40 [ 197.817380][ T7765] ? single_stop+0x9/0x10 [ 197.817417][ T7765] ? traverse.part.0.constprop.0+0x2c5/0x650 [ 197.817479][ T7765] seq_read_iter+0x691/0x1270 [ 197.817524][ T7765] proc_reg_read_iter+0x220/0x310 [ 197.817570][ T7765] ? __pfx_proc_reg_read_iter+0x10/0x10 [ 197.817637][ T7765] vfs_read+0x825/0xb30 [ 197.817674][ T7765] ? __pfx_vfs_read+0x10/0x10 [ 197.817702][ T7765] ? find_held_lock+0x2b/0x80 [ 197.817759][ T7765] __x64_sys_pread64+0x1eb/0x250 [ 197.817806][ T7765] ? __pfx___x64_sys_pread64+0x10/0x10 [ 197.817869][ T7765] do_syscall_64+0x106/0xf80 [ 197.817901][ T7765] ? clear_bhb_loop+0x40/0x90 [ 197.817940][ T7765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.817973][ T7765] RIP: 0033:0x7fe5c959c819 [ 197.817998][ T7765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.818027][ T7765] RSP: 002b:00007fe5ca50a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 197.818063][ T7765] RAX: ffffffffffffffda RBX: 00007fe5c9815fa0 RCX: 00007fe5c959c819 [ 197.818084][ T7765] RDX: 0000000100000001 RSI: 0000000000000000 RDI: 0000000000000003 [ 197.818101][ T7765] RBP: 00007fe5ca50a090 R08: 0000000000000000 R09: 0000000000000000 [ 197.818120][ T7765] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001 [ 197.818138][ T7765] R13: 00007fe5c9816038 R14: 00007fe5c9815fa0 R15: 00007ffffeff83d8 [ 197.818179][ T7765] [ 199.298746][ T7775] ubi3: attaching mtd1 [ 200.945208][ T7806] FAULT_INJECTION: forcing a failure. [ 200.945208][ T7806] name failslab, interval 1, probability 0, space 0, times 0 [ 200.987965][ T7806] CPU: 0 UID: 0 PID: 7806 Comm: syz.0.453 Tainted: G L syzkaller #0 PREEMPT(full) [ 200.988014][ T7806] Tainted: [L]=SOFTLOCKUP [ 200.988025][ T7806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 200.988042][ T7806] Call Trace: [ 200.988053][ T7806] [ 200.988064][ T7806] dump_stack_lvl+0x100/0x190 [ 200.988120][ T7806] should_fail_ex.cold+0x5/0xa [ 200.988159][ T7806] ? tomoyo_encode2+0xfb/0x3c0 [ 200.988203][ T7806] should_failslab+0xc2/0x120 [ 200.988241][ T7806] __kmalloc_noprof+0xe0/0x850 [ 200.988292][ T7806] ? d_absolute_path+0x136/0x1b0 [ 200.988358][ T7806] tomoyo_encode2+0xfb/0x3c0 [ 200.988410][ T7806] tomoyo_encode+0x29/0x50 [ 200.988454][ T7806] tomoyo_realpath_from_path+0x18c/0x690 [ 200.988511][ T7806] tomoyo_path_number_perm+0x23c/0x580 [ 200.988550][ T7806] ? tomoyo_path_number_perm+0x22e/0x580 [ 200.988593][ T7806] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 200.988681][ T7806] ? find_held_lock+0x2b/0x80 [ 200.988710][ T7806] ? __fget_files+0x215/0x3d0 [ 200.988737][ T7806] ? hook_file_ioctl_common+0x146/0x410 [ 200.988785][ T7806] ? __fget_files+0x21f/0x3d0 [ 200.988827][ T7806] security_file_ioctl+0xd3/0x230 [ 200.988866][ T7806] __x64_sys_ioctl+0xb7/0x210 [ 200.988914][ T7806] do_syscall_64+0x106/0xf80 [ 200.988945][ T7806] ? clear_bhb_loop+0x40/0x90 [ 200.988983][ T7806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.989013][ T7806] RIP: 0033:0x7fe5c959c819 [ 200.989036][ T7806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.989063][ T7806] RSP: 002b:00007fe5ca50a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 200.989090][ T7806] RAX: ffffffffffffffda RBX: 00007fe5c9815fa0 RCX: 00007fe5c959c819 [ 200.989108][ T7806] RDX: 0000000000000000 RSI: 00000000c4c85512 RDI: 0000000000000003 [ 200.989125][ T7806] RBP: 00007fe5ca50a090 R08: 0000000000000000 R09: 0000000000000000 [ 200.989141][ T7806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.989158][ T7806] R13: 00007fe5c9816038 R14: 00007fe5c9815fa0 R15: 00007ffffeff83d8 [ 200.989196][ T7806] [ 200.989221][ T7806] ERROR: Out of memory at tomoyo_realpath_from_path. [ 201.473283][ T30] audit: type=1800 audit(1775712092.379:13): pid=7813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.454" name="sr0" dev="devtmpfs" ino=2840 res=0 errno=0 [ 201.572980][ T7816] ubi3: attaching mtd1 [ 201.922807][ T7822] page: refcount:9 mapcount:8 mapping:0000000000000000 index:0x7ff3f31a7 pfn:0x78000 [ 201.942988][ T7822] flags: 0xfff18000000214(referenced|dirty|workingset|node=0|zone=1|lastcpupid=0x7ff) [ 201.952786][ T7822] raw: 00fff18000000214 0000000000000000 dead000000000122 0000000000000000 [ 201.972503][ T7822] raw: 00000007ff3f31a7 0000000000000000 0000000900000007 0000000000000000 [ 201.981646][ T7822] page dumped because: unmovable page [ 202.003553][ T7822] page_owner tracks the page as allocated [ 202.012448][ T7822] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 5818, tgid 5818 (syz-executor), ts 87629307061, free_ts 87391264616 [ 202.052496][ T7822] post_alloc_hook+0x153/0x170 [ 202.059975][ T7822] get_page_from_freelist+0x111d/0x3140 [ 202.071283][ T7822] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 202.085261][ T7822] alloc_pages_mpol+0x1fb/0x550 [ 202.105327][ T7822] alloc_pages_noprof+0x136/0x390 [ 202.115445][ T7822] __vmalloc_node_range_noprof+0xe5c/0x1530 [ 202.125584][ T7822] vmalloc_user_noprof+0x9e/0xe0 [ 202.142553][ T7822] kcov_ioctl+0x4c/0x720 [ 202.146955][ T7822] __x64_sys_ioctl+0x18e/0x210 [ 202.188376][ T7822] do_syscall_64+0x106/0xf80 [ 202.212983][ T7822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.229217][ T7822] page last free pid 5810 tgid 5810 stack trace: [ 202.250748][ T7822] free_unref_folios+0xaea/0x1790 [ 202.282547][ T7822] folios_put_refs+0x53c/0x840 [ 202.312800][ T7822] free_pages_and_swap_cache+0x242/0x480 [ 202.326102][ T7822] __tlb_batch_free_encoded_pages+0xe9/0x280 [ 202.349824][ T7822] tlb_finish_mmu+0x1b0/0x810 [ 202.369017][ T7822] unmap_region+0x2d9/0x3b0 [ 202.374190][ T7822] vms_complete_munmap_vmas+0xa4b/0xdd0 [ 202.379867][ T7822] do_vmi_align_munmap+0x44f/0x5f0 [ 202.385252][ T7822] do_vmi_munmap+0x1f8/0x3e0 [ 202.389917][ T7822] __vm_munmap+0x196/0x390 [ 202.395597][ T7822] __x64_sys_munmap+0x59/0x80 [ 202.400353][ T7822] do_syscall_64+0x106/0xf80 [ 202.405121][ T7822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.425955][ T7837] netlink: 16 bytes leftover after parsing attributes in process `syz.2.462'. [ 202.791403][ T7838] FAULT_INJECTION: forcing a failure. [ 202.791403][ T7838] name failslab, interval 1, probability 0, space 0, times 0 [ 202.812630][ T7838] CPU: 0 UID: 0 PID: 7838 Comm: syz.2.462 Tainted: G L syzkaller #0 PREEMPT(full) [ 202.812679][ T7838] Tainted: [L]=SOFTLOCKUP [ 202.812691][ T7838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 202.812729][ T7838] Call Trace: [ 202.812739][ T7838] [ 202.812751][ T7838] dump_stack_lvl+0x100/0x190 [ 202.812806][ T7838] should_fail_ex.cold+0x5/0xa [ 202.812844][ T7838] should_failslab+0xc2/0x120 [ 202.812881][ T7838] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 202.812933][ T7838] ? vm_area_alloc+0x1f/0x160 [ 202.812978][ T7838] ? vma_merge_new_range+0x38b/0xa30 [ 202.813026][ T7838] ? __pfx___sanitizer_cov_trace_const_cmp2+0x10/0x10 [ 202.813069][ T7838] vm_area_alloc+0x1f/0x160 [ 202.813114][ T7838] __mmap_region+0x118c/0x2a50 [ 202.813180][ T7838] ? __pfx___mmap_region+0x10/0x10 [ 202.813244][ T7838] ? process_measurement+0x1f4/0x2350 [ 202.813298][ T7838] ? __pfx_css_rstat_updated+0x10/0x10 [ 202.813365][ T7838] ? __lock_acquire+0x4a5/0x2630 [ 202.813437][ T7838] ? lock_acquire+0x1cf/0x380 [ 202.813479][ T7838] ? find_held_lock+0x2b/0x80 [ 202.813530][ T7838] ? trace_sched_exit_tp+0x13a/0x180 [ 202.813627][ T7838] ? rcu_is_watching+0x12/0xc0 [ 202.813678][ T7838] ? cap_capable+0x107/0x460 [ 202.813719][ T7838] mmap_region+0x180/0x3e0 [ 202.813779][ T7838] do_mmap+0xc63/0x12f0 [ 202.813826][ T7838] ? __pfx_do_mmap+0x10/0x10 [ 202.813865][ T7838] ? __pfx_down_write_killable+0x10/0x10 [ 202.813918][ T7838] vm_mmap_pgoff+0x29e/0x470 [ 202.813965][ T7838] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 202.814009][ T7838] ? do_futex+0x192/0x350 [ 202.814054][ T7838] ? __pfx_do_futex+0x10/0x10 [ 202.814106][ T7838] ksys_mmap_pgoff+0xe1/0x650 [ 202.814144][ T7838] ? __x64_sys_futex+0x34f/0x4d0 [ 202.814186][ T7838] ? __x64_sys_futex+0x358/0x4d0 [ 202.814231][ T7838] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 202.814269][ T7838] ? xfd_validate_state+0x129/0x190 [ 202.814326][ T7838] __x64_sys_mmap+0x125/0x190 [ 202.814382][ T7838] do_syscall_64+0x106/0xf80 [ 202.814414][ T7838] ? clear_bhb_loop+0x40/0x90 [ 202.814526][ T7838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.814559][ T7838] RIP: 0033:0x7f9d2db9c819 [ 202.814586][ T7838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.814616][ T7838] RSP: 002b:00007f9d2ea8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 202.814646][ T7838] RAX: ffffffffffffffda RBX: 00007f9d2de16090 RCX: 00007f9d2db9c819 [ 202.814667][ T7838] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 202.814687][ T7838] RBP: 00007f9d2dc32c91 R08: fffffffffffffffa R09: 0000000000008000 [ 202.814708][ T7838] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 202.814727][ T7838] R13: 00007f9d2de16128 R14: 00007f9d2de16090 R15: 00007ffea6fc7cf8 [ 202.814771][ T7838] [ 203.922124][ T7874] aoe: copy from user failed [ 203.952963][ T7874] aoe: could not set interface list: too many interfaces [ 204.137529][ T7639] Bluetooth: hci1: unexpected subevent 0x03 length: 253 > 9 [ 204.504202][ T7875] netlink: 342 bytes leftover after parsing attributes in process `syz.2.472'. [ 205.505521][ T7902] FAULT_INJECTION: forcing a failure. [ 205.505521][ T7902] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.570131][ T7902] CPU: 0 UID: 0 PID: 7902 Comm: syz.0.480 Tainted: G L syzkaller #0 PREEMPT(full) [ 205.570167][ T7902] Tainted: [L]=SOFTLOCKUP [ 205.570175][ T7902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 205.570213][ T7902] Call Trace: [ 205.570221][ T7902] [ 205.570229][ T7902] dump_stack_lvl+0x100/0x190 [ 205.570269][ T7902] should_fail_ex.cold+0x5/0xa [ 205.570297][ T7902] _copy_to_user+0x32/0xd0 [ 205.570328][ T7902] simple_read_from_buffer+0xcb/0x170 [ 205.570368][ T7902] proc_fail_nth_read+0x1af/0x230 [ 205.570398][ T7902] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 205.570430][ T7902] ? rw_verify_area+0xce/0x6d0 [ 205.570464][ T7902] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 205.570494][ T7902] vfs_read+0x1e4/0xb30 [ 205.570519][ T7902] ? __pfx_vfs_read+0x10/0x10 [ 205.570540][ T7902] ? __fget_files+0x215/0x3d0 [ 205.570568][ T7902] ? __fget_files+0x21f/0x3d0 [ 205.570599][ T7902] ksys_read+0x12a/0x250 [ 205.570620][ T7902] ? __pfx_ksys_read+0x10/0x10 [ 205.570650][ T7902] do_syscall_64+0x106/0xf80 [ 205.570674][ T7902] ? clear_bhb_loop+0x40/0x90 [ 205.570702][ T7902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.570725][ T7902] RIP: 0033:0x7fe5c955d04e [ 205.570743][ T7902] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 205.570765][ T7902] RSP: 002b:00007fe5ca509fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 205.570786][ T7902] RAX: ffffffffffffffda RBX: 00007fe5ca50a6c0 RCX: 00007fe5c955d04e [ 205.570801][ T7902] RDX: 000000000000000f RSI: 00007fe5ca50a0a0 RDI: 0000000000000004 [ 205.570814][ T7902] RBP: 00007fe5ca50a090 R08: 0000000000000000 R09: 0000000000000000 [ 205.570827][ T7902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.570840][ T7902] R13: 00007fe5c9816038 R14: 00007fe5c9815fa0 R15: 00007ffffeff83d8 [ 205.570870][ T7902] [ 206.658301][ T7924] netlink: 29 bytes leftover after parsing attributes in process `syz.2.487'. [ 206.679637][ T7924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.487'. [ 207.547858][ T7940] FAULT_INJECTION: forcing a failure. [ 207.547858][ T7940] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.605731][ T7940] CPU: 0 UID: 0 PID: 7940 Comm: syz.1.492 Tainted: G L syzkaller #0 PREEMPT(full) [ 207.605778][ T7940] Tainted: [L]=SOFTLOCKUP [ 207.605788][ T7940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 207.605805][ T7940] Call Trace: [ 207.605815][ T7940] [ 207.605826][ T7940] dump_stack_lvl+0x100/0x190 [ 207.605880][ T7940] should_fail_ex.cold+0x5/0xa [ 207.605919][ T7940] _copy_from_user+0x2e/0xd0 [ 207.605963][ T7940] csum_and_copy_from_iter_full+0x21a/0x1fd0 [ 207.606022][ T7940] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 207.606075][ T7940] ? rcu_is_watching+0x12/0xc0 [ 207.606127][ T7940] ? trace_kmalloc+0x101/0x130 [ 207.606161][ T7940] ? __kasan_kmalloc+0xaa/0xb0 [ 207.606192][ T7940] ? __kmalloc_node_track_caller_noprof+0x321/0x850 [ 207.606225][ T7940] ? __alloc_skb+0x185/0x710 [ 207.606272][ T7940] ? trace_kmem_cache_alloc+0xa1/0x120 [ 207.606314][ T7940] ip_generic_getfrag+0x172/0x270 [ 207.606348][ T7940] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 207.606380][ T7940] ? __asan_memset+0x23/0x50 [ 207.606427][ T7940] ? __alloc_skb+0x4e9/0x710 [ 207.606473][ T7940] ? __alloc_skb+0x5b7/0x710 [ 207.606525][ T7940] raw_getfrag+0x235/0x2a0 [ 207.606572][ T7940] __ip_append_data+0x3b10/0x4690 [ 207.606613][ T7940] ? __pfx_raw_getfrag+0x10/0x10 [ 207.606669][ T7940] ? __pfx___ip_append_data+0x10/0x10 [ 207.606705][ T7940] ? __asan_memcpy+0x3c/0x60 [ 207.606763][ T7940] ip_append_data+0x10f/0x1a0 [ 207.606801][ T7940] ? __pfx_raw_getfrag+0x10/0x10 [ 207.606845][ T7940] raw_sendmsg+0xcb6/0x35f0 [ 207.606889][ T7940] ? bpf_ksym_find+0xe0/0x1c0 [ 207.606941][ T7940] ? __pfx_raw_sendmsg+0x10/0x10 [ 207.606981][ T7940] ? unwind_get_return_address+0x59/0xa0 [ 207.607016][ T7940] ? arch_stack_walk+0xa6/0xf0 [ 207.607060][ T7940] ? __lock_acquire+0x4a5/0x2630 [ 207.607153][ T7940] ? __pfx_raw_sendmsg+0x10/0x10 [ 207.607199][ T7940] inet_sendmsg+0x11c/0x140 [ 207.607244][ T7940] sock_write_iter+0x4ea/0x5a0 [ 207.607284][ T7940] ? __pfx_inet_sendmsg+0x10/0x10 [ 207.607326][ T7940] ? __pfx_sock_write_iter+0x10/0x10 [ 207.607381][ T7940] ? bpf_lsm_file_permission+0x9/0x10 [ 207.607412][ T7940] ? security_file_permission+0x76/0x210 [ 207.607458][ T7940] ? rw_verify_area+0xce/0x6d0 [ 207.607510][ T7940] vfs_write+0x6ac/0x1070 [ 207.607543][ T7940] ? __pfx_sock_write_iter+0x10/0x10 [ 207.607588][ T7940] ? __pfx_vfs_write+0x10/0x10 [ 207.607617][ T7940] ? find_held_lock+0x2b/0x80 [ 207.607674][ T7940] ksys_write+0x1f8/0x250 [ 207.607707][ T7940] ? __pfx_ksys_write+0x10/0x10 [ 207.607751][ T7940] do_syscall_64+0x106/0xf80 [ 207.607784][ T7940] ? clear_bhb_loop+0x40/0x90 [ 207.607823][ T7940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.607856][ T7940] RIP: 0033:0x7f604119c819 [ 207.607881][ T7940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.607911][ T7940] RSP: 002b:00007f60420e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 207.607939][ T7940] RAX: ffffffffffffffda RBX: 00007f6041416090 RCX: 00007f604119c819 [ 207.607960][ T7940] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 0000000000000003 [ 207.607978][ T7940] RBP: 00007f60420e8090 R08: 0000000000000000 R09: 0000000000000000 [ 207.607996][ T7940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.608014][ T7940] R13: 00007f6041416128 R14: 00007f6041416090 R15: 00007fff35f05208 [ 207.608061][ T7940] [ 208.587995][ T7955] netlink: ct family unspecified [ 208.603387][ T7949] netlink: 342 bytes leftover after parsing attributes in process `syz.1.495'. [ 209.111623][ T7964] scsi_mod.scan: string doesn't fit in 6 chars. [ 209.172476][ T7968] bridge0: port 3(veth0_to_bridge) entered blocking state [ 209.188959][ T7967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.503'. [ 209.211693][ T7968] bridge0: port 3(veth0_to_bridge) entered disabled state [ 209.299787][ T7968] veth0_to_bridge: entered allmulticast mode [ 209.349299][ T7968] veth0_to_bridge: entered promiscuous mode [ 209.426301][ T7968] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 209.512139][ T7968] bridge0: port 3(veth0_to_bridge) entered blocking state [ 209.519499][ T7968] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 210.949993][ T7995] FAULT_INJECTION: forcing a failure. [ 210.949993][ T7995] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 210.966974][ T7995] CPU: 1 UID: 0 PID: 7995 Comm: syz.3.510 Tainted: G L syzkaller #0 PREEMPT(full) [ 210.967011][ T7995] Tainted: [L]=SOFTLOCKUP [ 210.967019][ T7995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 210.967032][ T7995] Call Trace: [ 210.967045][ T7995] [ 210.967054][ T7995] dump_stack_lvl+0x100/0x190 [ 210.967094][ T7995] should_fail_ex.cold+0x5/0xa [ 210.967116][ T7995] ? prepare_alloc_pages+0x16d/0x5f0 [ 210.967146][ T7995] should_fail_alloc_page+0xeb/0x140 [ 210.967174][ T7995] prepare_alloc_pages+0x1f0/0x5f0 [ 210.967206][ T7995] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 210.967246][ T7995] ? __pfx_stack_trace_save+0x10/0x10 [ 210.967272][ T7995] ? stack_depot_save_flags+0x27/0x9d0 [ 210.967303][ T7995] ? kasan_save_stack+0x3f/0x50 [ 210.967329][ T7995] ? kasan_save_stack+0x30/0x50 [ 210.967349][ T7995] ? kasan_save_track+0x14/0x30 [ 210.967377][ T7995] ? kasan_save_stack+0x3f/0x50 [ 210.967402][ T7995] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 210.967443][ T7995] ? __lock_acquire+0x4a5/0x2630 [ 210.967473][ T7995] ? look_up_lock_class+0x55/0x120 [ 210.967505][ T7995] ? lock_acquire+0x1cf/0x380 [ 210.967535][ T7995] ? find_held_lock+0x2b/0x80 [ 210.967556][ T7995] ? page_table_check_set+0x49a/0xa10 [ 210.967579][ T7995] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 210.967603][ T7995] ? cpuset_nodemask_valid_mems_allowed+0x5f/0x80 [ 210.967638][ T7995] ? policy_nodemask+0xed/0x4f0 [ 210.967666][ T7995] alloc_pages_mpol+0x1fb/0x550 [ 210.967692][ T7995] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 210.967726][ T7995] folio_alloc_mpol_noprof+0x36/0x340 [ 210.967757][ T7995] vma_alloc_folio_noprof+0xed/0x1d0 [ 210.967788][ T7995] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 210.967829][ T7995] do_anonymous_page+0xb3a/0x1fb0 [ 210.967871][ T7995] __handle_mm_fault+0x1d48/0x2b60 [ 210.967912][ T7995] ? __pfx___handle_mm_fault+0x10/0x10 [ 210.967946][ T7995] ? pte_offset_map_lock+0x174/0x320 [ 210.967971][ T7995] ? find_held_lock+0x2b/0x80 [ 210.968002][ T7995] ? follow_page_pte+0x5b3/0x1400 [ 210.968040][ T7995] handle_mm_fault+0x36d/0xa20 [ 210.968079][ T7995] __get_user_pages+0xf9c/0x34d0 [ 210.968117][ T7995] ? __pfx___get_user_pages+0x10/0x10 [ 210.968153][ T7995] populate_vma_page_range+0x267/0x3f0 [ 210.968185][ T7995] ? __pfx_populate_vma_page_range+0x10/0x10 [ 210.968214][ T7995] ? __pfx_find_vma_intersection+0x10/0x10 [ 210.968241][ T7995] ? do_mmap+0x93f/0x12f0 [ 210.968271][ T7995] __mm_populate+0x107/0x3a0 [ 210.968301][ T7995] ? __pfx___mm_populate+0x10/0x10 [ 210.968332][ T7995] ? up_write+0x290/0x4f0 [ 210.968369][ T7995] vm_mmap_pgoff+0x37f/0x470 [ 210.968400][ T7995] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 210.968431][ T7995] ? __fget_files+0x215/0x3d0 [ 210.968455][ T7995] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 210.968486][ T7995] ksys_mmap_pgoff+0xe1/0x650 [ 210.968516][ T7995] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 210.968540][ T7995] ? fput+0x79/0x100 [ 210.968567][ T7995] ? ksys_write+0x1ac/0x250 [ 210.968589][ T7995] ? __pfx_ksys_write+0x10/0x10 [ 210.968615][ T7995] __x64_sys_mmap+0x125/0x190 [ 210.968654][ T7995] do_syscall_64+0x106/0xf80 [ 210.968677][ T7995] ? clear_bhb_loop+0x40/0x90 [ 210.968705][ T7995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.968728][ T7995] RIP: 0033:0x7f5657f9c819 [ 210.968746][ T7995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.968768][ T7995] RSP: 002b:00007f5658e1a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 210.968791][ T7995] RAX: ffffffffffffffda RBX: 00007f5658215fa0 RCX: 00007f5657f9c819 [ 210.968806][ T7995] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 210.968819][ T7995] RBP: 00007f5658e1a090 R08: 0000000000000002 R09: 0000000000008000 [ 210.968833][ T7995] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000002 [ 210.968846][ T7995] R13: 00007f5658216038 R14: 00007f5658215fa0 R15: 00007ffd71910c48 [ 210.968876][ T7995] [ 211.437289][ T7997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.511'. [ 213.883179][ T8045] FAULT_INJECTION: forcing a failure. [ 213.883179][ T8045] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.983230][ T8045] CPU: 0 UID: 0 PID: 8045 Comm: syz.3.522 Tainted: G L syzkaller #0 PREEMPT(full) [ 213.983275][ T8045] Tainted: [L]=SOFTLOCKUP [ 213.983285][ T8045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 213.983301][ T8045] Call Trace: [ 213.983311][ T8045] [ 213.983321][ T8045] dump_stack_lvl+0x100/0x190 [ 213.983371][ T8045] should_fail_ex.cold+0x5/0xa [ 213.983406][ T8045] _copy_to_user+0x32/0xd0 [ 213.983448][ T8045] simple_read_from_buffer+0xcb/0x170 [ 213.983499][ T8045] proc_fail_nth_read+0x1af/0x230 [ 213.983546][ T8045] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 213.983587][ T8045] ? rw_verify_area+0xce/0x6d0 [ 213.983632][ T8045] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 213.983670][ T8045] vfs_read+0x1e4/0xb30 [ 213.983703][ T8045] ? __pfx_vfs_read+0x10/0x10 [ 213.983731][ T8045] ? do_sys_openat2+0x157/0x1e0 [ 213.983791][ T8045] ? __pfx_do_sys_openat2+0x10/0x10 [ 213.983838][ T8045] ? __x64_sys_close_range+0x2d9/0x5d0 [ 213.983890][ T8045] ksys_read+0x12a/0x250 [ 213.983920][ T8045] ? __pfx_ksys_read+0x10/0x10 [ 213.983962][ T8045] do_syscall_64+0x106/0xf80 [ 213.983994][ T8045] ? clear_bhb_loop+0x40/0x90 [ 213.984033][ T8045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.984064][ T8045] RIP: 0033:0x7f5657f5d04e [ 213.984089][ T8045] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 213.984118][ T8045] RSP: 002b:00007f5658e19fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 213.984147][ T8045] RAX: ffffffffffffffda RBX: 00007f5658e1a6c0 RCX: 00007f5657f5d04e [ 213.984167][ T8045] RDX: 000000000000000f RSI: 00007f5658e1a0a0 RDI: 0000000000000001 [ 213.984185][ T8045] RBP: 00007f5658e1a090 R08: 0000000000000000 R09: 0000000000000000 [ 213.984203][ T8045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.984221][ T8045] R13: 00007f5658216038 R14: 00007f5658215fa0 R15: 00007ffd71910c48 [ 213.984265][ T8045] [ 214.885435][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 214.900577][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 214.913129][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 214.925665][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 214.938156][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 214.950639][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 214.963185][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 214.975753][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 214.988265][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 215.000787][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 219.891703][ C1] net_ratelimit: 9350 callbacks suppressed [ 219.891728][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 219.910193][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 219.922736][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 219.935414][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 219.947906][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 219.960403][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 219.972898][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 219.985400][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 219.997949][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 220.010751][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 223.613155][ C0] sched: DL replenish lagged too much [ 224.903794][ C1] net_ratelimit: 9588 callbacks suppressed [ 224.903821][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.922424][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 224.934941][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.948080][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.960681][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 224.973190][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.985749][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.998336][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 225.010834][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.023397][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.916315][ C1] net_ratelimit: 10413 callbacks suppressed [ 229.916341][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.934673][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 229.947139][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.959675][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 229.972069][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.984469][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 229.997382][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.009900][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 230.022321][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.034746][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 234.929065][ C1] net_ratelimit: 10636 callbacks suppressed [ 234.929091][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.947541][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 234.959936][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.972360][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 234.984832][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.997312][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 235.009719][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.022107][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 235.034624][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.047188][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 239.941326][ C1] net_ratelimit: 10070 callbacks suppressed [ 239.941354][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.959860][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 239.972296][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.984772][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 239.997242][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.009789][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 240.022214][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.034606][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 240.047718][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.060229][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 244.953898][ C1] net_ratelimit: 9036 callbacks suppressed [ 244.953925][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.972189][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 244.984688][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.997161][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 245.009571][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.021987][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 245.034457][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.046929][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 245.059386][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.071863][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 249.966298][ C1] net_ratelimit: 9653 callbacks suppressed [ 249.966323][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 249.984729][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.997165][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 250.009682][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.022205][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 250.034659][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.047106][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 250.059678][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.072210][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 250.084643][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.979179][ C1] net_ratelimit: 9377 callbacks suppressed [ 254.979206][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.997711][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 255.010332][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.022845][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 255.035476][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.048071][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 255.060606][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.073214][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 255.085801][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.098522][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 256.259959][ T7639] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 256.313132][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.333225][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.991389][ C1] net_ratelimit: 10080 callbacks suppressed [ 259.991416][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.009895][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 260.022491][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.035118][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 260.047657][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.060180][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 260.072856][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.085512][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 260.098061][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.110572][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 265.004264][ C1] net_ratelimit: 9564 callbacks suppressed [ 265.004290][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.022695][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 265.035148][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.047607][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 265.060097][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.072591][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 265.085003][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.097429][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 265.109910][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.122444][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 270.016323][ C1] net_ratelimit: 10089 callbacks suppressed [ 270.016350][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 270.036520][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.049277][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 270.062446][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.075005][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 270.087700][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.100355][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 270.112922][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.125497][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 270.138167][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.029180][ C1] net_ratelimit: 9496 callbacks suppressed [ 275.029207][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 275.047505][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.060127][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 275.072603][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.085102][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 275.097515][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.109960][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 275.122420][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.134949][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 275.147428][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.706751][ T8081] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 276.423257][ T8079] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 276.837258][ T7639] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 276.865874][ T7632] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 280.041510][ C1] net_ratelimit: 9518 callbacks suppressed [ 280.041536][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 280.059901][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.072452][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 280.085046][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.097614][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 280.110090][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.122585][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 280.135170][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.147744][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 280.160216][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.277064][ T8081] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 283.474242][ T8087] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 283.771353][ T8086] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 285.053969][ C1] net_ratelimit: 9489 callbacks suppressed [ 285.053996][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.072416][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 285.084856][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.097298][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 285.109834][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.122406][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 285.134995][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.147448][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 285.159973][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.172693][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 285.624016][ T8082] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 290.066488][ C1] net_ratelimit: 10075 callbacks suppressed [ 290.066516][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 290.084891][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.097288][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 290.109740][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.122314][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 290.134717][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.147124][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 290.159577][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.172059][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 290.184458][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.474564][ T8087] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 294.074920][ T8087] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 294.572721][ T7632] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 294.656016][ T8087] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 295.078902][ C1] net_ratelimit: 9869 callbacks suppressed [ 295.078928][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.097425][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 295.109865][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.122311][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 295.134865][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.147429][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 295.159915][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.172419][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 295.184980][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.197593][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 296.040386][ T8087] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 296.172435][ T7632] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 296.254464][ T7632] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 298.990516][ T8083] Bluetooth: hci5: Opcode 0x1009 failed: -110 [ 299.757894][ T8088] Bluetooth: hci7: Opcode 0x0c1a failed: -110 [ 300.091424][ C1] net_ratelimit: 9485 callbacks suppressed [ 300.091450][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 300.109774][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.122351][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 300.134772][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.147201][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 300.159694][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.172251][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 300.184684][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.197179][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 300.209729][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.103866][ C1] net_ratelimit: 9610 callbacks suppressed [ 305.103894][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 305.122515][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.135094][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 305.147604][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.160107][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 305.172706][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.185296][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 305.197835][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.210368][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 305.223001][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.116632][ C1] net_ratelimit: 9865 callbacks suppressed [ 310.116663][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.135112][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 310.147645][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.160203][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 310.172679][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.185146][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 310.197691][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.210249][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 310.222698][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.235164][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 311.018237][ T8081] Bluetooth: hci7: command tx timeout [ 315.128885][ C1] net_ratelimit: 10457 callbacks suppressed [ 315.128911][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 315.147468][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.159998][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 315.172577][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.185230][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 315.197842][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.210453][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 315.223129][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.235796][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 315.248372][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.795854][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.815783][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.141438][ C1] net_ratelimit: 10244 callbacks suppressed [ 320.141464][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 320.159934][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.172487][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 320.184937][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.197387][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 320.209900][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.222417][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 320.234829][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.247289][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 320.259798][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.791631][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 320.798918][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P8061/1:b..l [ 320.807279][ C0] rcu: (detected by 0, t=10503 jiffies, g=29285, q=4552 ncpus=2) [ 320.815143][ C0] task:modprobe state:R running task stack:24800 pid:8061 tgid:8061 ppid:7714 task_flags:0x400000 flags:0x00080000 [ 320.829685][ C0] Call Trace: [ 320.833192][ C0] [ 320.836170][ C0] __schedule+0xfee/0x6120 [ 320.840661][ C0] ? __pfx___schedule+0x10/0x10 [ 320.845579][ C0] ? mark_held_locks+0x40/0x70 [ 320.850413][ C0] preempt_schedule_irq+0x50/0x90 [ 320.855488][ C0] irqentry_exit+0x17b/0x670 [ 320.860140][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 320.866192][ C0] RIP: 0010:debug_lockdep_rcu_enabled+0x18/0x40 [ 320.872492][ C0] Code: 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 8b 05 82 73 4b 05 85 c0 74 20 8b 05 60 a6 4b 05 85 c0 74 16 <65> 48 8b 05 88 70 7f 08 8b 80 54 0b 00 00 85 c0 0f 94 c0 0f b6 c0 [ 320.892154][ C0] RSP: 0018:ffffc90007566680 EFLAGS: 00000202 [ 320.898289][ C0] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 0000000000000002 [ 320.906300][ C0] RDX: 0000000000000000 RSI: ffffffff8de5d715 RDI: ffffffff8c1b1e20 [ 320.914310][ C0] RBP: ffffc90007566748 R08: 000000004ae53567 R09: 0000000000000007 [ 320.922321][ C0] R10: 0000000000000200 R11: 0000000000000000 R12: ffffffff81f2e690 [ 320.930339][ C0] R13: ffffc90007566700 R14: 0000000000000000 R15: ffff888020348000 [ 320.938386][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 320.944620][ C0] unwind_next_frame+0xd6/0x1ea0 [ 320.949610][ C0] ? unwind_next_frame+0xbd/0x1ea0 [ 320.954771][ C0] ? __x64_sys_mmap+0x125/0x190 [ 320.959687][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 320.965897][ C0] arch_stack_walk+0x94/0xf0 [ 320.970547][ C0] ? __x64_sys_mmap+0x125/0x190 [ 320.975469][ C0] stack_trace_save+0x8e/0xc0 [ 320.980198][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 320.985634][ C0] kasan_save_stack+0x30/0x50 [ 320.990354][ C0] ? kasan_save_stack+0x30/0x50 [ 320.995258][ C0] ? kasan_save_track+0x14/0x30 [ 321.000154][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 321.005223][ C0] ? kmem_cache_alloc_from_sheaf_noprof+0xa9/0x190 [ 321.011772][ C0] ? mas_split+0x972/0x16b0 [ 321.016331][ C0] ? mas_commit_b_node.isra.0+0x76/0xc0 [ 321.021939][ C0] ? mas_wr_bnode+0x140/0x1d0 [ 321.026669][ C0] ? mas_wr_store_entry+0x7e3/0x2390 [ 321.032009][ C0] ? mas_store_prealloc+0x6e5/0xfb0 [ 321.037259][ C0] ? vma_complete+0x9f4/0xf70 [ 321.041994][ C0] ? __split_vma+0xa4b/0xd90 [ 321.046650][ C0] ? vms_gather_munmap_vmas+0x39f/0x1500 [ 321.052349][ C0] ? __mmap_region+0x492/0x2a50 [ 321.057273][ C0] ? mmap_region+0x180/0x3e0 [ 321.061922][ C0] ? do_mmap+0xc63/0x12f0 [ 321.066305][ C0] ? vm_mmap_pgoff+0x29e/0x470 [ 321.071118][ C0] ? ksys_mmap_pgoff+0x3c8/0x650 [ 321.076106][ C0] ? __x64_sys_mmap+0x125/0x190 [ 321.081085][ C0] kasan_save_track+0x14/0x30 [ 321.085802][ C0] __kasan_slab_alloc+0x89/0x90 [ 321.090712][ C0] kmem_cache_alloc_from_sheaf_noprof+0xa9/0x190 [ 321.097091][ C0] mas_split+0x972/0x16b0 [ 321.101503][ C0] ? __pfx_mas_split+0x10/0x10 [ 321.106342][ C0] ? find_held_lock+0x2b/0x80 [ 321.111069][ C0] ? __kfree_rcu_sheaf+0x195/0x720 [ 321.116255][ C0] ? __asan_memcpy+0x3c/0x60 [ 321.120890][ C0] ? mas_mab_cp+0x452/0x7b0 [ 321.125436][ C0] ? mas_store_b_node+0x4f5/0xc60 [ 321.130673][ C0] mas_commit_b_node.isra.0+0x76/0xc0 [ 321.136077][ C0] mas_wr_bnode+0x140/0x1d0 [ 321.140623][ C0] ? __pfx_mas_wr_bnode+0x10/0x10 [ 321.145710][ C0] ? __lock_acquire+0x4a5/0x2630 [ 321.150665][ C0] ? kasan_save_stack+0x3f/0x50 [ 321.155540][ C0] ? kasan_save_stack+0x30/0x50 [ 321.160405][ C0] ? kasan_save_track+0x14/0x30 [ 321.165271][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 321.170301][ C0] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 321.175956][ C0] ? vm_area_dup+0x27/0x8e0 [ 321.180483][ C0] ? __split_vma+0x18c/0xd90 [ 321.185087][ C0] ? vms_gather_munmap_vmas+0x39f/0x1500 [ 321.190768][ C0] ? __mmap_region+0x492/0x2a50 [ 321.195650][ C0] ? mmap_region+0x180/0x3e0 [ 321.200266][ C0] ? do_mmap+0xc63/0x12f0 [ 321.204616][ C0] mas_wr_store_entry+0x7e3/0x2390 [ 321.209740][ C0] ? find_held_lock+0x10/0x80 [ 321.214429][ C0] ? trace_ma_write+0x7d/0x230 [ 321.219221][ C0] mas_store_prealloc+0x6e5/0xfb0 [ 321.224269][ C0] ? __pfx_mas_store_prealloc+0x10/0x10 [ 321.229847][ C0] ? __vma_link_file+0x194/0x220 [ 321.234887][ C0] ? vma_iter_store_overwrite+0x392/0x650 [ 321.240627][ C0] vma_complete+0x9f4/0xf70 [ 321.245168][ C0] __split_vma+0xa4b/0xd90 [ 321.249635][ C0] ? __pfx___split_vma+0x10/0x10 [ 321.254609][ C0] ? __pfx_mas_prev+0x10/0x10 [ 321.259306][ C0] vms_gather_munmap_vmas+0x39f/0x1500 [ 321.264789][ C0] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 321.270707][ C0] ? mas_walk+0x6ef/0x9b0 [ 321.275076][ C0] __mmap_region+0x492/0x2a50 [ 321.279880][ C0] ? __pfx___mmap_region+0x10/0x10 [ 321.285012][ C0] ? lock_acquire+0x1cf/0x380 [ 321.289717][ C0] ? find_held_lock+0x2b/0x80 [ 321.294418][ C0] ? process_measurement+0x109c/0x2350 [ 321.299895][ C0] ? process_measurement+0x109c/0x2350 [ 321.305369][ C0] ? __mutex_unlock_slowpath+0x15c/0x790 [ 321.311017][ C0] ? __pfx___might_resched+0x10/0x10 [ 321.316339][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 321.322342][ C0] ? process_measurement+0x1f4/0x2350 [ 321.327756][ C0] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 321.333759][ C0] mmap_region+0x180/0x3e0 [ 321.338206][ C0] do_mmap+0xc63/0x12f0 [ 321.342383][ C0] ? __pfx_do_mmap+0x10/0x10 [ 321.346983][ C0] ? __pfx_down_write_killable+0x10/0x10 [ 321.352631][ C0] vm_mmap_pgoff+0x29e/0x470 [ 321.357262][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 321.362411][ C0] ? __fget_files+0x215/0x3d0 [ 321.367115][ C0] ? __fget_files+0x21f/0x3d0 [ 321.371813][ C0] ksys_mmap_pgoff+0x3c8/0x650 [ 321.376602][ C0] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 321.381912][ C0] ? __x64_sys_pread64+0x196/0x250 [ 321.387052][ C0] ? __pfx___x64_sys_pread64+0x10/0x10 [ 321.392532][ C0] __x64_sys_mmap+0x125/0x190 [ 321.397253][ C0] do_syscall_64+0x106/0xf80 [ 321.401861][ C0] ? clear_bhb_loop+0x40/0x90 [ 321.406555][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.412453][ C0] RIP: 0033:0x7fcf09053242 [ 321.416870][ C0] RSP: 002b:00007ffd9d932888 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 321.425303][ C0] RAX: ffffffffffffffda RBX: 00007fcf08dad000 RCX: 00007fcf09053242 [ 321.433289][ C0] RDX: 0000000000000005 RSI: 000000000014e000 RDI: 00007fcf08dad000 [ 321.441304][ C0] RBP: 0000000000000812 R08: 0000000000000000 R09: 0000000000028000 [ 321.449310][ C0] R10: 0000000000000812 R11: 0000000000000206 R12: 00007ffd9d9328d8 [ 321.457311][ C0] R13: 00007fcf090275f0 R14: 00007ffd9d9330c0 R15: 00000fffb3b26514 [ 321.465307][ C0] [ 325.154273][ C1] net_ratelimit: 9272 callbacks suppressed [ 325.154300][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 325.173066][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.185501][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 325.197995][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.210613][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 325.223059][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.235469][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 325.247973][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.260501][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 325.272926][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.166700][ C1] net_ratelimit: 9475 callbacks suppressed [ 330.166728][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.185056][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 330.197566][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.210131][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 330.222612][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.235056][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 330.247594][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.260117][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:02:f2:f6:3e:09:4e, vlan:0) [ 330.272568][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.285016][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)