last executing test programs: 3m42.716568152s ago: executing program 0 (id=292): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x8) madvise$auto(0x0, 0xffffffffffff0001, 0x15) futex_wake$auto(0x0, 0x8, 0x2, 0x7) 3m41.956968336s ago: executing program 0 (id=295): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x7fffffff) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80480, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) r1 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000180), 0x280140, 0x0) unshare$auto(0x40000080) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40040, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x20000080) syz_clone3(&(0x7f0000000300)={0x2c022000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) splice$auto(0x4, 0x0, r2, 0x0, 0x80000004, 0x9) write$auto(0x6, &(0x7f00000000c0)='#\a\x1cFnJ\x04\xc76c0\xf6D\xf0\t\b:-\x01\x11\xb1\xd1ldc=\x14\xf6\x91`\xe8\rs\xf1UI\x91\x04\x90\xfd\x9f\xd7|\xf6\xb2lD\x03\xc7\xc8\xe8/cDT%\xa3\xa5n\xb9D\xc6h', 0x1) write$auto(r1, &(0x7f0000000400)='/dev\x1eau\xa4\xa4%\xcb\x00', 0x6) sendmsg$auto_TASKSTATS_CMD_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x20004000) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r3, 0x0, 0x101) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x200, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/v4l-subdev6\x00', 0x2d0c00, 0x0) ioctl$auto_XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, 0x0) r5 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0) pread64$auto(r5, 0x0, 0x0, 0x9) read$auto_mon_fops_text_t_mon_text(r5, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r1, 0x40026f33, 0x0) r6 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r6, 0xc004743e, 0x0) 3m41.077786393s ago: executing program 0 (id=297): r0 = socket(0x10, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/block/nbd14/sched/write1_fifo_list\x00', 0x189e42, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="1b0026bd7400fddbdf250300000004000800100003800c000980"], 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRESDEC=r0, @ANYBLOB="0100"/11], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 3m40.873993637s ago: executing program 0 (id=299): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) socketpair$auto(0x1e, 0x5, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) futex$auto(0xfffffffffffffffd, 0x9, 0x402, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x21) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r1) bpf$auto_BPF_PROG_BIND_MAP(0x23, &(0x7f00000000c0)=@test={0xffffffffffffffff, 0x0, 0x6, 0x42ca, 0x0, 0x6, 0x0, 0x3, 0x4, 0xfffff001, 0x0, 0x8, 0xffffdcc6, 0x0, 0x3}, 0x9) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x2b8, r2, 0x100, 0x70bd29, 0x25dfdbff, {}, [@HWSIM_ATTR_PERM_ADDR={0xec, 0x16, "76847a8dbe8c7b0d3931f646ee31b210c68a50edfedc6fe4f0a9d0e2bb1701c51b6fd72163a939d6f9a4d1038db37e804e4ce1d2ed7657b8aadf3acd923499f5fd7d4dd133a8eb85bff0e135e6871e8e18519cd43f73f8b4edd1644cdb3dbe98b74c1eba673f89ddd6e0d3ec3e3ae906f6b6d37926ce2dddde9752273006ce817f3f0097ca9b9348028ad30d3af53bbae4040502fd527ac8844015aa7ea5070c1d0892e2b5050745dc054f1033591b1aae6410fee6bbf262fac46feb8b0f3d49a005753d690666c30d1cd96408d22c0223e2b7705d645293f1d3d7879f6378710434f6eb3215bf95"}, @HWSIM_ATTR_PERM_ADDR={0xb3, 0x16, "3c6e3a00a778ebc2350940c2d445fec591481dc1c6a6dc51c49595a021d5a0c4188e43d0f6fd3deb45aa84c79113cda51f027b18b7f842bcd73208299fbdd29e85388b2756b1f2b1163a982720c6093456b13b1accbc620e7f2ec89eab514cdbd54b22c9ff48d1885f00716183840b697929f0a2890cf66fef5c1840b6c17672fd35fbf88188f7908936bb35e82470a55348d07ae5f6ecc92e7f4b303255394c168e4b286a9bda2793c908aeedcac0"}, @HWSIM_ATTR_RADIO_ID={0x8, 0xa, 0x7}, @HWSIM_ATTR_IFTYPE_SUPPORT={0x8, 0x17, 0x7}, @HWSIM_ATTR_PMSR_SUPPORT={0xe0, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_RANDOMIZE_MAC_ADDR={0x4}, @NL80211_PMSR_ATTR_TYPE_CAPA={0xc4, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_PREAMBLES={0x8, 0x5, 0xf8000000}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_NON_ASAP={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_BANDWIDTHS={0x8, 0x6, 0x7}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_LCI={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_LCI={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_REQ_LCI={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0xbd}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_MAX_FTMS_PER_BURST={0x5, 0x8, 0xe}, @NL80211_PMSR_FTM_CAPA_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_CAPA_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_PREAMBLES={0x8, 0x5, 0xfffffffa}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_MAX_FTMS_PER_BURST={0x5, 0x8, 0x7}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_ASAP={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_MAX_FTMS_PER_BURST={0x5, 0x8, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_MAX_FTMS_PER_BURST={0x5, 0x8, 0xb7}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0x80}]}]}, @NL80211_PMSR_ATTR_REPORT_AP_TSF={0x4}, @NL80211_PMSR_ATTR_MAX_PEERS={0x8, 0x1, 0x1}, @NL80211_PMSR_ATTR_REPORT_AP_TSF={0x4}, @NL80211_PMSR_ATTR_RANDOMIZE_MAC_ADDR={0x4}]}, @HWSIM_ATTR_DESTROY_RADIO_ON_CLOSE={0x4}, @HWSIM_ATTR_COOKIE={0xc, 0x8, 0xffff}, @HWSIM_ATTR_TX_INFO={0x4}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x4004040}, 0x8000) socket(0x2, 0x1, 0x6) socket(0x2, 0x1, 0x106) close_range$auto(0xffffffffffffffff, r0, 0x80000001) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/addr_prefs\x00', 0x102, 0x0) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000080)={0x9, 0x5, 0x6, 0x883, 0x8, 0x1a1, 0x0, 0x101, 0x6, 0x0, 0x2, 0x20}) writev$auto(r3, &(0x7f0000000040)={&(0x7f0000000080), 0x6}, 0x3) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(0x3, 0x1, 0xf, 0x0, 0x8) listen$auto(0x3, 0x8) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) close_range$auto(0x2, 0x8, 0x0) 3m40.571209437s ago: executing program 0 (id=302): socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x3c, 0x0) fsopen$auto(0x0, 0x1) r0 = socket(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2004d081}, 0x4010) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x5, 0xeb2, 0x8, 0x1008000) socket(0x10, 0x2, 0x0) openat$auto_short_retry_limit_ops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/short_retry_limit\x00', 0x0, 0x0) tkill$auto(0x1, 0x7) r2 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x82, 0x0) write$auto_nvram_misc_fops_nvram(r2, 0x0, 0x0) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x0, 0x0, 0x0, 0x48eafc79) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x10, &(0x7f0000001700)=@query={@target_ifindex, 0x11, 0x1, 0x9, 0x7f, @prog_cnt=0x2, 0x0, 0x1000f, 0xa, 0x7, 0x400000000001}, 0x7) ioctl$auto_FS_IOC_SETFLAGS2(0xffffffffffffffff, 0x40086602, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r3 = socket(0x29, 0x2, 0x0) ioctl$auto(r3, 0x8923, 0x24) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x6, 0x1, 0x9, 0x5, 0x1f, 0x940, 0x1ffde, 0x2000003, 0x10001, 0x8000006, 0x9, 0x5, 0x0, 0x4, 0x200, 0x7, 0x2, 0x3, 0x201, 0x7, 0x0, 0x3ffff, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x13, 0x4b80000, 0x40003, [0xfffffffffffffffc, 0xa, 0x0, 0x1, 0x0, 0x8000004, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x4, 0x2, 0x0, 0x1, 0x3, 0x0, 0x0, 0x201, 0x0, 0x86, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x401, 0x2, 0x34, 0x80000, 0x3, 0x100000000, 0x0, 0x8000000000000002, 0x80000000, 0x0, 0x0, 0xbb5, 0x20, 0x10, 0x0, 0x0, 0x2000000000000000, 0x2]}, 0x203, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r4 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 3m39.708151143s ago: executing program 0 (id=304): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r0, 0x4, 0x7ff) r1 = wait4$auto(r0, 0x0, 0x3, &(0x7f0000000040)={{0xff, 0xffffffffffffffff}, {0x6, 0xffffffffffffffaf}, 0x4, 0x10, 0x3, 0xa5a5, 0x3, 0x1, 0x1, 0x2, 0x401, 0x7, 0x1, 0x0, 0x5, 0x8000000004000001}) r2 = getsid$auto(r1) prctl$auto(0x1000000003b, 0x1, r2, 0xb322, 0x8) madvise$auto(0x0, 0xffffffffffff0001, 0x15) futex_wake$auto(0x0, 0x100000000, 0xfffffff7, 0x40) 3m39.157391343s ago: executing program 32 (id=304): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r0, 0x4, 0x7ff) r1 = wait4$auto(r0, 0x0, 0x3, &(0x7f0000000040)={{0xff, 0xffffffffffffffff}, {0x6, 0xffffffffffffffaf}, 0x4, 0x10, 0x3, 0xa5a5, 0x3, 0x1, 0x1, 0x2, 0x401, 0x7, 0x1, 0x0, 0x5, 0x8000000004000001}) r2 = getsid$auto(r1) prctl$auto(0x1000000003b, 0x1, r2, 0xb322, 0x8) madvise$auto(0x0, 0xffffffffffff0001, 0x15) futex_wake$auto(0x0, 0x100000000, 0xfffffff7, 0x40) 1m8.593789684s ago: executing program 2 (id=780): sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4c0c4}, 0x40008dc) (async, rerun: 64) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x3d, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x1000000006, 0x10001, 0x7, 0x400, 0x7ffffffb, 0x400005, 0xdd79, 0x5, 0x61, 0x104}) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x302, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/cpu1/hotplug/fail\x00', 0x100, 0x0) r0 = set_tid_address$auto(0x0) ioprio_get$auto_IOPRIO_WHO_PROCESS(0x1, r0) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000180)='/:$]\x00', 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x88001, 0x0) (async, rerun: 32) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd5\x00', 0x14f602, 0x0) close_range$auto(0x2, r1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000000340)="3203b5ad06c20f3eb51a6b912f5669c359ee625599119566bb2303d62b4a2eeeeb3bc807c1cc8a2913b71ea7d621b63c04483904479e877fbb2ecbb7b7f90b57ed1c7b", 0x43) sysfs$auto(0x2, 0x4d, 0x0) (async) r4 = fsopen$auto(0x0, 0x1) fsconfig$auto(r4, 0x6, 0x0, 0x0, 0x0) (async) kexec_load$auto(0x0, 0x9b1b, 0x0, 0x200) (async) close_range$auto(0x2, 0x8, 0x0) (async) connect$auto(0x3, &(0x7f00000000c0)=@isdn={0x22, 0xf3, 0x6, 0xf9, 0x4}, 0x10) (async) fsconfig$auto_EROFS_MOUNT_DAX_NEVER(r3, 0x5, &(0x7f0000000300)='\x00', &(0x7f00000003c0)="8a682e049fb89180f2b86541bd4a546bc1334212b1c7367392806936c7d277562dd84a77d901e4d241c0347f2940fb630d05af2f2bf70f40a601f85809d8370e1cce2a7b9bf1a6233773e6639d55f12e8bcef2bf9bc929a83dd0572c3c494e3454a17a3febdc2f64df43639d61c0f8639e9b2e1ab783dce314eeeabccd2363bed023f2eead110b70b1de9a629510fc70bc9c2ddddd8514c031a64dd696d2be80f73b97d4268f189f349daa59260e2afb767c306006308debe2001a333a37ca546137beac9778297fcf282524be2a5303159c9f2e5e669b4ccfa780e485963bab7ad39fff11413f323097ab0fd03b0d000000000000000000", 0x80) (async) unshare$auto(0x4000017a) (async) io_uring_setup$auto(0x4c2, 0x0) (async) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x270e02, 0x0) pwrite64$auto(r5, 0x0, 0x1, 0x27) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/buffer_size_kb\x00', 0x40a00, 0x0) 1m7.917950396s ago: executing program 3 (id=784): mmap$auto(0x100000000000, 0x5, 0x400000000000006, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x801, 0x100) preadv$auto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x6}, 0x7, 0xbbf, 0x69bf) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) write$auto(0xffffffffffffffff, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r1 = socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000140)=@sco={0x1f, @none}, 0x7) connect$auto(0x3, &(0x7f0000000080)=@nl=@unspec, 0x81) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x7ffd) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x80000000, 0x3) unshare$auto(0x40000080) r2 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) ptrace$auto(0xf106, 0x0, 0x8, 0x0) ptrace$auto(0x5, 0x0, 0xfffffffffffffffa, 0x8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) mmap$auto(0x1fd, 0x6, 0xfd5, 0x1e, r1, 0x0) writev$auto(0x3, &(0x7f0000004100)={0x0, 0x2000000b}, 0x3ff) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x200042, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) 1m7.424474258s ago: executing program 2 (id=786): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xf6f6, 0x8000) r0 = socket(0x11, 0x80003, 0x300) sysfs$auto(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001300)={'xfrm0\x00'}) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1c\x00\x19\x8a>c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xf3, 0xb0, @raw=0xfffff018}}) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/vivid.0/video4linux/video10/dev_debug\x00', 0x40000, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) futex$auto(&(0x7f0000000080)=0x1, 0x8, 0x3d, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x1, 0x84) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) symlink$auto(&(0x7f0000000300)='\\\':.\x00', &(0x7f0000000100)='\xfb\x00') readlink$auto(&(0x7f0000000b00)='\xfb\x00', 0x0, 0x800) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) sendto$auto(0x3, 0x0, 0x2000f, 0x101, &(0x7f0000000000)=@in={0x2, 0x4e22, @loopback}, 0x1c) shutdown$auto(0x200000003, 0x2) setsockopt$auto(r0, 0x107, 0x8, 0x0, 0x6) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r4 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x80800, 0x0) read$auto(r4, 0x0, 0x39b8) 1m6.38935073s ago: executing program 2 (id=788): mmap$auto(0xfffffffffffffffc, 0x400008, 0xdf, 0x12, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0xfffffdef) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd0/queue/iostats_passthrough\x00', 0x183481, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0x7}, 0x3) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x6041, 0x0) socket(0x21, 0x4, 0x3) semctl$auto_SETVAL(0x4, 0xfffffff7, 0x10, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r0, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/bond0/bonding/ad_actor_system\x00', 0x480000, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xfffffeff, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x2, 0x83, 0x101, 0x17f, 0x2}, {0xff, 0x1, 0x52, 0x5, 0x1, 0x40, 0x4, 0x8, 0x100000004}}) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/fs/lockd/nlm_end_grace\x00', 0x8282, 0x0) write$auto(0x3, 0x0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) lseek$auto(0xffffffffffffffff, 0x7fffffffffffffff, 0x2) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r2 = open_tree$auto(0xffffffffffffff9c, &(0x7f00000000c0)=':,\x00', 0x0) close_range$auto(r2, r2, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xc0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(r3, 0xffffffff, 0xffffffffffffffff) ioctl$auto(0x3, 0xae64, 0x38) close_range$auto(r3, r3, 0x2b) 1m6.280370939s ago: executing program 4 (id=789): mmap$auto(0x0, 0x7, 0x7f, 0xeb5, 0x8000000000000024, 0x7) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x2, 0x80002, 0x4b) r2 = socket(0xa, 0x1, 0x84) bind$auto(r2, &(0x7f0000000040)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3}, 0x6a) connect$auto(r1, &(0x7f00000000c0)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x12}}, 0x54) close_range$auto(r1, 0xfffffffffffff000, 0x2) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x400000000, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x1, 0x1, 0xeb1, 0xfffffffffffffffa, 0x8001) madvise$auto(0x0, 0xffffffffffff0005, 0x17) close_range$auto(0x2, 0xa, 0x0) bpf$auto_BPF_LINK_GET_NEXT_ID(0x1f, 0x0, 0xd2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setfsuid$auto(0x0) syz_clone(0x108011, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x4, 0x6, 0x40eb2, 0x402, 0x875) semctl$auto(0x1ff, 0x2, 0x13, 0x4) setsockopt$auto(0x3, 0x84, 0x17, 0x0, 0x27) eventfd$auto(0x4) r3 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000000), 0x12b002, 0x0) write$auto(r3, 0x0, 0x1a) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/pagemap\x00', 0xc4302, 0x0) socketpair$auto(0xfffffffd, 0x8005, 0xffffffff, 0x0) sync_file_range$auto(r0, 0x8, 0x5277, 0x8) unshare$auto(0x40000080) 1m5.643306524s ago: executing program 3 (id=790): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004540)={0x4c, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x34, 0x1, 0x0, 0x1, [@nested={0x30, 0xc9, 0x0, 0x1, [@nested={0x2c, 0x90, 0x0, 0x1, [@nested={0x28, 0x9, 0x0, 0x1, [@nested={0x24, 0xa4, 0x0, 0x1, [@nested={0x4, 0x64}, @typed={0x8, 0x136, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0x14, 0x87, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}}]}]}]}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48080}, 0x20000000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="7425b024000220", @ANYRES16=0x0, @ANYBLOB="0d566b3dd008e4edd9650200000000000008"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000c4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) r2 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x9, 0x8, 0x1ff, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [0x0, 0x6], {0x6, 0x6, 0x8c48, 0x29b, 0x6, 0x80, 0x104, 0x6, 0x4}, {0x100, 0x1, 0x101, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) open(0x0, 0x480102, 0x142) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1b000000", @ANYBLOB="1e00279e"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) eventfd$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r4, @new_prog_fd=0x4, 0x4, @old_prog_fd=r3}, 0xa3) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/neigh/veth0/mcast_resolicit\x00', 0x224080, 0x0) close_range$auto(0x2, 0x8000, 0x4000000000) r5 = socket(0x10, 0x2, 0x0) setsockopt$auto_SO_BUSY_POLL_BUDGET(r2, 0x7, 0x46, &(0x7f0000000180)='%\x00', 0x2) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 1m5.642597045s ago: executing program 1 (id=798): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/virt_wifi0/router_solicitations\x00', 0x101202, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/conf/netdevsim1/ignore_routes_with_linkdown\x00', 0x202, 0x0) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x4080, 0x0) ioctl$auto_PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f0000000100)={0x40, 0x3}) sendfile$auto(r1, r0, 0x0, 0x48) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/v4l-subdev4\x00', 0x169000, 0x0) r4 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) ioctl$auto(r4, 0x2285, 0x1cfc4b42) ioctl$auto(r3, 0xc0905664, r3) 1m5.551773499s ago: executing program 2 (id=791): madvise$auto(0x0, 0x2000040080000006, 0xe) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYRES16, @ANYBLOB="1b0026bd7000fddbdf400000000004000800100003800c007d0380080015", @ANYRES32, @ANYBLOB="12000100898771f1c19f1779048590828847000004000280"], 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f00000000c0), 0xffffffff}, 0x6, 0x0) r4 = prctl$auto(0x1000000003b, 0x8, r2, 0x8, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r5 = socket(0x2, 0x3, 0x1) getsockopt$auto_SO_DEBUG(r5, 0xff, 0x1, 0x0, 0x0) r6 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto_dvb_dvr_fops_dmxdev(r6, &(0x7f00000002c0)="206adb18a66430134faa096ddf929a9a2a2db999539baf545f32be51396acabebaf4c1bdce6713fd6cec7f7cc973d934aacead65db80d76076732c779bc33e274645d618006e18e06d8e2ae33047cd639f75b67ea0aee90bc7abd7f92a45496de438e6370d000c1b219a725f9a6183063bf48abc646d74ff83ba395bee5097da0f29eb2663fd1795d7c8017be5d48fc14d77eb40264be7b46519a56b87958d149e01f852", 0xa4) r7 = fsopen$auto(0x0, 0x1) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(r4, &(0x7f00000001c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[], 0x194}, 0x1, 0x0, 0x0, 0x20004885}, 0x20000005) madvise$auto(0x0, 0x200007, 0x19) syslog$auto(0xffffb6b1, 0x0, 0x5) socket(0x25, 0x5, 0x6) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r8, @ANYBLOB="0100c1a10f412dbd7000fedbdf257e0000000400870008006200001000007c001501c3991eff9f839e066026e213626609002100b805414f5b112a44d6875b15c4562e7fd8502d7cc067902bf55ce2c5c11d4225f128db3dec1907e02bcf361e22fa649e8610ccef1ef63d274d664ea74441c76891de999e8c4f69131d6669b8c097cab0cf92a7d0c3663de237820b905caf4c1063fc543b92850600eb0007000000"], 0xa4}, 0x1, 0x68, 0x0, 0x24040080}, 0xd0) sendmsg$auto_NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x21}, 0x40051) sendmsg$auto_NL80211_CMD_START_NAN(r7, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="8cf8080018aa5161bc3e5085c802a2f08921e397346fc0165332e7de3b884a9bd834eebd0497bcbba45e9786b55f6844f6599429d612a720d7ed44f43e7b769beffcc9386bff619401a3516dba1e2dd97926ba1c2e05ad7d6df2a4f2ba7faf75763be151304000000064ea09", @ANYRESDEC=r0, @ANYRESOCT, @ANYBLOB="cb1fd269010b50a3eb2524842ce7f84bb267b6b12f3d0cf40406b549f74d51f42d75dcb6a36bcdff3d857ee93cd5ed3ad39903cbd597af86efd3159f941bb8b7103964f820e9319503a1bda8543198ce8cfda227097c9eb21e510605f450daec33fdca5e35eee1f55245842435283eaee4cb994cb925692ec086539f0bca21132b34edee60b98d6827a6674c41ad771ebb2f4a9945a775fc2db83f5d14ce83bdb2b98f37bc45a988f18004172e12e11158ab61be7bbd1d6507f4a9b9dce5936c010f3acf2e2744f71b00047c344fdac60e8f766de97ccc4f951f041ca6b10038fc73dfc394d842adc78cfa", @ANYRESDEC=r8], 0x8c}, 0x1, 0x0, 0x0, 0x48010}, 0x2000c000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) madvise$auto(0x3, 0x36, 0xfffffffd) 1m5.437144499s ago: executing program 1 (id=792): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0xf000, 0x8000000000000001, 0x100000000, 0x0, 0x6, 0x2) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x691b, 0xfffffffffffffffa, 0x8000) ioctl$auto(0xffffffffffffffff, 0x8001, r0) close_range$auto(0x2, 0x8, 0x0) socket(0x29, 0x5, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x9, 0x6, 0x80003, 0x4, 0x1ffffffffffd, 0xb4, 0xffffffffffffffff, 0x8, 0x10007, 0x80, 0x4, 0x0, 0xa, 0xffffffff, 0x200, 0x0, 0x84, 0x0, 0xfff, 0x0, 0x0, 0x2, [0x9a8, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}, 0x1fe, 0xd) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) readv$auto(r1, 0x0, 0x3) ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.7/usb8/bConfigurationValue\x00', 0x10b042, 0x0) sendfile$auto(r2, r2, 0x0, 0x2) 1m5.396508047s ago: executing program 4 (id=793): socket(0x10, 0x4, 0xffffffc0) (async) socket(0x10, 0x4, 0xffffffc0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, 0x0) ioctl$auto(r1, 0x4008af13, r1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x406, 0x0, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x4000000000005, 0x6, 0x62, 0x8, 0x7, 0x1, 0xb, 0x100, 0x18]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r2, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x4, 0x15) open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) (async) r3 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) fchdir$auto(r3) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x400000, 0x0) mkdir$auto(&(0x7f0000000480)='./cgroup\x00', 0x6) socket(0xa, 0x2, 0x88) (async) r4 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r4, @new_prog_fd=0x4, 0x4, @old_map_fd}, 0xa3) mmap$auto(0x5, 0x4020008, 0x1001, 0xeb1, r4, 0x8003) (async) mmap$auto(0x5, 0x4020008, 0x1001, 0xeb1, r4, 0x8003) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mremap$auto(0x4fff, 0xb8, 0x13fd4, 0x3, 0xfffff000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x4002, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0xa, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) (async) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x4002, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0xa, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) mmap$auto(0x0, 0x400008, 0xdc, 0x9b72, 0x2, 0x8000) 1m5.012948129s ago: executing program 3 (id=794): mmap$auto(0x0, 0x400008, 0xcc8, 0x9b72, 0x2, 0x8000) r0 = socket(0x8, 0x1, 0xfffff870) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) (async) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0x2, 0x400007, 0xe895, 0x16, r0, 0x401) openat$auto_ima_ascii_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000300), 0x220882, 0x0) (async) openat$auto_ima_ascii_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000300), 0x220882, 0x0) fadvise64$auto_POSIX_FADV_NORMAL(r0, 0x7, 0xd, 0x0) write$auto(0x3, 0x0, 0x7fffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) write$auto(0x3, 0x0, 0xfffffdef) (async) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x70, 0xdf, 0x9b72, 0x2, 0x80000000008000) (async) mmap$auto(0x0, 0x70, 0xdf, 0x9b72, 0x2, 0x80000000008000) setsockopt$auto(0xffffffffffffffff, 0x107, 0x5, 0x0, 0xce24) connect$auto(0x3, 0x0, 0x55) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) (async) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_HANDSHAKE_CMD_DONE(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000fcdbdf25030000000800030000010000080001000000120008000200", @ANYRES32=r1, @ANYBLOB="f62184a90f3134"], 0x2c}, 0x1, 0x0, 0x0, 0x8814}, 0x20004081) (async) sendmsg$auto_HANDSHAKE_CMD_DONE(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000fcdbdf25030000000800030000010000080001000000120008000200", @ANYRES32=r1, @ANYBLOB="f62184a90f3134"], 0x2c}, 0x1, 0x0, 0x0, 0x8814}, 0x20004081) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r3 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r3, 0xc0603d06, 0x0) getresgid$auto(&(0x7f0000000080)=0x4, 0x0, 0x0) read$auto(0x3, 0x0, 0x80) ioctl$auto_BLKRRPART(r2, 0x125f, 0x0) (async) ioctl$auto_BLKRRPART(r2, 0x125f, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x8000, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x8000, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) open(0x0, 0x0, 0x64) 1m4.709733617s ago: executing program 1 (id=795): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000000)=@task_fd_query={0x0, 0xffffffffffffffff, 0xb0, 0x8bd, 0x8, 0x2, 0xffffffffffffffff, 0x6, 0x6}, 0xa3) bpf$auto(0x0, &(0x7f0000000000)=@link_update={0xa, @new_map_fd=0x2, 0x7, @old_map_fd=r0}, 0xa3) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x1fe, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x2, 0x62, 0x7ffffffe, 0x9, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) getpid() mlockall$auto(0x5) rt_sigprocmask$auto(0x6, &(0x7f0000000080)={0x6}, 0xffffffffffffffff, 0x8) close_range$auto(r0, r1, 0x0) io_uring_setup$auto(0x6, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c0090000", @ANYRES16, @ANYBLOB="131f2cbd700023723ab36bf877ac08000300", @ANYRES32], 0x9c0}, 0x1, 0x0, 0x0, 0x2400c884}, 0x20040894) sendmsg$auto_NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x128, 0x0, 0x728, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x401}, @NL80211_ATTR_RECEIVE_MULTICAST={0x4}, @NL80211_ATTR_VHT_CAPABILITY={0x89, 0x9d, "4c0181dcb9678dca5d7f5ea978aa55cdafc510a62ce879a4fa3cbbba758f79254e4b736e8179320de190cfa506e72e4c275abe14e441970d2500b7b6dad75206ef76ed1267bb00a1a94d86ebb5127de5551d9a5dbb29381188ed737ef1fa6bd713d0bd9d134ceec47c23579065960844fbb186e65b31c0844fc5df98f49f85269c0b81b632"}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x65, 0x1f, "adb0be6c229ebc7776b41868e44ec9ac503ee213c6504961c6ffdc76916b3006c18989ee9cd209f210cd1863d8829d9154e24a22ca466d0f655ab3bd3533d41310e30f4fd548c5a49a2951f16778ba75b12c02600c38e25406b95bad52e1347a7b"}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x2}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x4f}]}, 0x128}, 0x1, 0x0, 0x0, 0x4000001}, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x4) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0x11, 0xa, 0x300) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x400, 0x7) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) socket(0x11, 0x80003, 0x300) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) 1m4.412910138s ago: executing program 2 (id=796): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) memfd_create$auto(0x0, 0x9) socket(0x1a, 0x6, 0x968c) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) sendmsg$auto_NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, 0x0, 0x51) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x9, 0x3, 0x16, 0x93f, 0x1ffe0, 0x3, 0x6, 0x2, 0x0, 0xf3, 0xfff, 0x11, 0xb0, 0x1, 0x5, 0x4, 0x9, 0x6, 0x0, 0x0, 0x0, 0x200, 0xfffffffa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, [0x6, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000003, 0x6, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3043, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x10000000000, 0x0, 0x3, 0x0, 0x0, 0xffffffffffff0000, 0x11, 0x8000000000000001, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x1]}, 0x1fe, 0x10081) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="980e2d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x0, 0xa503}, 0x800}, 0x7, 0x4008) socket$nl_generic(0x10, 0x3, 0x10) write$auto(0xffffffffffffffff, &(0x7f0000000040)='\xce*+#\x00', 0x80) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.7/usb8/bConfigurationValue\x00', 0x10b042, 0x0) sendfile$auto(r1, r1, 0x0, 0x2) socket(0x1d, 0x2, 0x6) mmap$auto(0x0, 0x40009, 0xde, 0x9b72, 0x7, 0x28000) capset$auto(0x0, 0x0) socket(0x6, 0x5, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$auto(0x0, 0x0, 0xf) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) write$auto(0x3, 0x0, 0xfffffdef) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/rpc/auth.rpcsec.context/channel\x00', 0xc8841, 0x0) poll$auto(0x0, 0x4, 0xffffff80) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x8000) write$auto(0x3, 0x0, 0x100082) pipe2$auto(0x0, 0x80) 1m3.977108335s ago: executing program 1 (id=797): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/admmidi2\x00', 0x55bd43, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/012/001\x00', 0x40001, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x5, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) (async) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) (async) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0x2, 0x8000) (async) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/mtd\x00', 0xc40, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, 0x0, 0x4d) r3 = socket(0x27, 0x1, 0x8) bind$auto(0x3, &(0x7f0000000000)=@sco={0x1d, @none}, 0x6c) mmap$auto(0x0, 0x810004, 0xf7b, 0x15, r3, 0x7) (async) r4 = gettid() process_vm_writev$auto(r4, &(0x7f0000002980)={0x0, 0x802}, 0x4, &(0x7f0000002a40)={0x0, 0x100000004007}, 0x4, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x7c3d00, 0x0) (async) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TCFLSH2(r6, 0x80045439, 0x0) ioctl$auto_TIOCSETD2(r5, 0x5423, 0x0) (async) ioctl$auto_TUNSETVNETLE2(0xffffffffffffffff, 0x400454dc, &(0x7f0000000040)) (async) syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000180), 0xffffffffffffffff) (async) mmap$auto(0x58bd56e4, 0x2, 0xffffffffffffffff, 0x13, 0xfffffffffffffff7, 0x7ffd) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x6a1, 0x3) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/modalias\x00', 0x40000, 0x0) (async, rerun: 32) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/loop11/queue/io_poll_delay\x00', 0xa8002, 0x0) (rerun: 32) 1m3.976549772s ago: executing program 3 (id=799): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/neigh/ipvlan1/retrans_time\x00', 0x242, 0x0) sendfile$auto(r0, r0, 0x0, 0x200) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x280, 0x0) socket(0xf, 0x3, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = ioctl$auto_SIOCSIFHWADDR2(r2, 0x8924, &(0x7f0000000440)) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000100), r2) socket(0x2, 0x2, 0x0) socket(0x1a, 0x5, 0xfffffffd) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) ioctl$auto_posix_clock_file_operations_posix_clock(0xffffffffffffffff, 0x2, 0x0) write$auto(r1, &(0x7f0000000240)='/\xc46\x9e\xe4audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x90, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3, 0x8000001f, 0x2, 0x6d3c, 0x9, 0x2, 0x6]}, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_DEL_PMK(0xffffffffffffffff, 0x0, 0x8000) close_range$auto(0x2, 0x8, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100cda4429629bd7100f9db5f250200000000", @ANYRESOCT=r4], 0x24}, 0x1, 0x0, 0x0, 0x2c0080c0}, 0x80) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_MODULE_FW_FLASH_FILE_NAME={0x8, 0x2, '}%$\x00'}, @ETHTOOL_A_MODULE_FW_FLASH_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @ETHTOOL_A_MODULE_FW_FLASH_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x200}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x24000010) unshare$auto(0x40000080) madvise$auto(0x110c234000, 0x1, 0x9) ioctl$auto_SOUND_MIXER_READ_DEVMASK2(0xffffffffffffffff, 0x80044dfe, &(0x7f0000000040)) unshare$auto(0x40000080) r6 = socket(0xa, 0x2, 0x3a) bind$auto(r6, 0x0, 0x66) pwrite64$auto(r0, &(0x7f0000000000)=')\x00', 0x0, 0x9) 1m3.764438589s ago: executing program 4 (id=800): mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) (async) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xf, 0x3, 0x2) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) (async) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) (async) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) (async) select$auto(0x135e, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0xd3e, 0x1, 0x948a, 0x3, 0x95f4da0a, 0x9, 0x4000000000003, 0x5, 0x80000001, 0x9, 0x6d3f, 0x20000000000009, 0x1d8ff856, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x4, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3, 0x208000001f, 0x2, 0x6d3c, 0x9, 0x2, 0x6]}, 0x0) (async) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x20342, 0x0) mmap$auto(0xea, 0x4020009, 0x800000000000df, 0xeb1, r3, 0x6) (async, rerun: 32) r4 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x102, 0x0) (rerun: 32) ioctl$auto(r4, 0x900064b7, r4) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) shmctl$auto_SHM_STAT_ANY(0x7, 0xf, &(0x7f0000000300)={{0x3fe, 0xee00, 0xffffffffffffffff, 0x9, 0xc53a, 0x29, 0xe}, 0x4, 0xffffffffffffffff, 0xff, 0x81, @raw=0x1, @raw=0x3, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) setfsgid$auto(0xee00) (async) mmap$auto(0x0, 0x10018, 0xdf, 0xeb1, 0x40000000000a5, 0x808000) statx$auto(r2, &(0x7f0000000380)='./file0\x00', 0x6e9b, 0xca0d, &(0x7f0000000440)={0x5, 0x9, 0x3ff, 0x3, r5, r6, 0x4, 0x4280, 0xa54, 0x6, 0xa32, 0xf940, {0xd774, 0xaec1}, {0x9, 0x8}, {0x200, 0x3}, {0x3, 0x2}, 0x1, 0x3, 0x0, 0x5, 0x0, 0x7, 0x8001, 0x80, 0x27b, 0xffffffff, 0x2, 0x6, [0x6, 0x8, 0x5, 0x2, 0x1, 0xe91, 0x3000, 0x10001, 0x8000]}) (async, rerun: 64) r7 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (rerun: 64) ioctl$auto_UBI_IOCATT(r7, 0x40186f40, 0x0) (async, rerun: 64) select$auto(0x7fffffff, &(0x7f0000000100)={[0x6, 0x1, 0xffff, 0xf93e, 0xff, 0x0, 0x9, 0x4, 0x9, 0x9, 0x8000000000000000, 0xf1, 0x57, 0x1, 0x8, 0x2]}, &(0x7f0000000180)={[0x8000, 0x1, 0x2, 0xffffffff, 0x1, 0x4, 0x7, 0x5, 0x100000001, 0xcb, 0xe32, 0x400, 0x41d6, 0x5, 0x3, 0x3]}, &(0x7f0000000200)={[0x1, 0x3, 0x1ff, 0x868a, 0x629, 0x9, 0x40, 0x6, 0x6, 0x401, 0xdc, 0xfffffffffffffffc, 0x3, 0x8000, 0x0, 0xffffffffffffff1f]}, &(0x7f0000000280)={0x21, 0x2}) (rerun: 64) ioctl$auto_UBI_IOCDET(r7, 0x40046f41, 0x0) (async) ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0) (async) pipe$auto(0x0) close_range$auto(0x2, 0x8000, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) 1m3.387094653s ago: executing program 1 (id=801): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x2000b, 0xdd, 0x40eb1, 0x401, 0x8000) openat$auto_msr_fops_msr(0xffffffffffffff9c, 0x0, 0x1011c0, 0x0) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002e00), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003640)={&(0x7f0000002f80)={0x2c, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20000810) write$auto(0xffffffffffffffff, 0x0, 0x58c) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000180)="fe3eef5c013a7dcbca7b56a9cf898fe5ce", 0x8) socket(0x18, 0x80000, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x4, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x40001, 0x0) write$auto(0x3, 0x0, 0xfdef) ioctl$auto(0x3, 0x541b, 0x38) 1m3.205914806s ago: executing program 2 (id=802): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0xc0400, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x1d, 0x3, 0x1) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) memfd_secret$auto(0x0) write$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffffff, &(0x7f0000000140)="d1807307", 0x4) r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r0, 0xffffffffffdffe00, &(0x7f0000000140)) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x2081, 0x0) unshare$auto(0x40000080) pread64$auto(0xffffffffffffffff, 0x0, 0x8, 0x2aa00b6e) mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) msgrcv$auto(0x0, 0x0, 0x1000, 0x8000000000000000, 0xb5) poll$auto(0x0, 0x4, 0x100004) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x40) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd4/queue/atomic_write_unit_max_bytes\x00', 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/workqueue/ib-comp-unb-wq/max_active\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000002140)=""/64, 0x40) 1m2.776470756s ago: executing program 4 (id=803): madvise$auto(0x0, 0x2000040080000004, 0xe) (async, rerun: 32) bpf$auto_BPF_TOKEN_CREATE(0x24, &(0x7f0000000080)=@link_create={@prog_fd=0xffffffffffffffff, @target_ifindex=0x0, 0x8, 0x2, @perf_event={0x4}}, 0x7) (async, rerun: 32) r2 = openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000002e80)='/sys/kernel/debug/tracing/per_cpu/cpu0/stats\x00', 0x101040, 0x0) readv$auto(r2, &(0x7f0000000040)={&(0x7f00000009c0)="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", 0x9}, 0x1005) (async) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dmmidi2\x00', 0x1, 0x0) (async) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000007c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00\x00\x00\x00\x00\xcf\xd0\x01\xf1ZO\xf6\xe0v\x95\xf4', 0x7) (async) ioctl$auto_TUNSETVNETLE2(r5, 0x400454dc, &(0x7f0000000500)=0x636) mmap$auto(0x5, 0xffff, 0x3, 0x18, r5, 0x7) (async) madvise$auto(0x6, 0xffffffffffffffff, 0x400) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f00000000c0), 0x3}, 0x6, 0x0) r6 = prctl$auto(0x39, 0x8000000000000000, 0x0, 0x9, 0x7) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async, rerun: 32) madvise$auto(0x0, 0x2003f2, 0x15) (async, rerun: 32) r7 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) write$auto_dvb_dvr_fops_dmxdev(r7, &(0x7f00000002c0)="206adb18a66430134faa096ddf929a9a2a2db999539baf545f32be51396acabebaf4c1bdce6713fd6cec7f7cc973d934aacead65db80d76076732c779bc33e274645d618006e18e06d8e2ae33047cd639f75b67ea0aee90bc7abd7f92a45496de438e6370d000c1b219a725f9a6183063bf48abc646d74ff83ba395bee5097da0f29eb2663fd1795d7c8017be5d48fc14d77eb40264be7b46519a56b87958d149e01f8520f6b8dbed15f0201b476", 0xae) (async, rerun: 32) madvise$auto(0x1, 0xfff, 0xfffffffe) r9 = fsopen$auto(0x0, 0x1) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(r6, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYRES64=r9, @ANYBLOB="6be18e710a977f97e6774a6223f7d76b281e8f9a04bef086866cb32aea917e1874ea31313675fd7b96c4158ea29bda7189ee028dac957f0841a9dda556f9109e970df11b0a1d59ddfe729dc97117a3ffb8daef1ec3fdd38fd7d72b5ab56899fc006dac7cd673f19516abda3db22668985b56de463f00397d09c4aa5de8434ca84c40bf067b64687ed6f5e1a01efef98891224d09ca38895ae761d4328232", @ANYBLOB="040029bd7000fedbdf2508000000270002002e2f6367726f75702e6370752f6d656d6f72792e6c696d69745f696e5f6279746573000008000d000000008008001d00", @ANYRES32=r7, @ANYRES8=r1, @ANYRES8, @ANYRES16=r3, @ANYRES16=r4, @ANYRESHEX=r8], 0x190}, 0x1, 0x0, 0x0, 0x200400c4}, 0x20008001) (async, rerun: 64) madvise$auto(0x0, 0x200007, 0x3) (rerun: 64) syslog$auto(0x9, 0x0, 0x5) socket(0x25, 0x5, 0x6) syz_clone(0x441c1000, &(0x7f0000000580)="ed9db9efeedafda05355d7e15fe4a5c03551890f3aba14477271e90e8e6df7b27e49d8c54b259978f2f28db7a97f54bba86444a00af600e1fe413717aff41908b73483d1719bc0f1b9bfe63e44ba80538680d34a1fcec6776f299cbd18a9766e4182c362e2918cb060e545b0f754486925bfaa0e04a1eb90153f99894e6b657d391a0966ff748b40fdb90d269ae7f98af54b55f0c5643c3de4becb54ab79872e1ece447d04f3c944ac755d0b2ab405f3dabe44ac425eb35a4273c3b685496b1ac5d6fcdc", 0xc4, &(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000880)="4658d2d944b717b303c2815c44139d83526053c9cce0efca120e51a2d1e44af6e03c05e2000b6d8858162161abc9f6603308e46e9c5b8454b07fd4dccbf7c18e1fd0cbee8df786ecb981b8924d94509c08ef8fa8931cb2da79d0078e3fcbb3d90bf214cedf7d2cec36f487a92ac4ceba43042de340d046aa0a7a01c43210b3b915c00325332de1137129c34faf8f7e4295d3df58c06528a83c86311028e5355d4014e92f4cfc46a511069a3f39b1a3f847a2820d9e2c45cf999f504bef97c05193aa99de9842fc50d5ad1bd510aa661b5d3b45ae1f466e93c9f703e940cb5002732568cd5adba01fa6baf2c879096c2e9ea9216b86e36ab1eff89e2b7f94d3e1a071a23620b01a2e6061ddfcda008be6d22f2a1e8073d3409b395a51eab940dad2c83142e9e9") openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) madvise$auto(0x3, 0x10000000, 0xfffbfffa) pidfd_open$auto(0x0, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/devices/virtual/net/dummy0/operstate\x00', 0x182b02, 0x0) 1m2.596685888s ago: executing program 4 (id=804): socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0xf, 0x3, 0x0, 0x6, 0x7fffffffffffffff) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/tty/ttya9/power/autosuspend_delay_ms\x00', 0x80302, 0x0) preadv$auto(0x3, &(0x7f0000000040)={0x0, 0x5}, 0x3, 0xf8, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,v\xf58\x83\xcf\xc5D\xcc', 0x100000a3d9) write$auto(0xffffffffffffffff, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000140)=@sco={0x1f, @none}, 0x7) connect$auto(0x3, 0x0, 0x81) mmap$auto(0x0, 0x802000c, 0x8, 0x10, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) pread64$auto(r1, 0x0, 0x100000001, 0x100) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) writev$auto(0x3, &(0x7f0000004100)={0x0, 0x2000000b}, 0x3ff) mlockall$auto(0x7) 1m2.514643602s ago: executing program 1 (id=805): socket(0x2, 0x801, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f00000023c0)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/enable\x00', 0x40000, 0x0) fchmod$auto(r0, 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x5, 0x8, 0xe3, 0x9b7f, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) syz_clone(0x68000000, 0x0, 0x0, 0x0, 0x0, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x6}, 0x2000000003) futex$auto(0x0, 0x6, 0x9, 0x0, 0x0, 0x6) socket(0xa, 0x1, 0x84) r3 = pidfd_open$auto(0x1, 0x0) setns(r3, 0x60020000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) 1m1.988933871s ago: executing program 3 (id=806): openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x11) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x2, 0x88) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) sysfs$auto(0x2, 0x10000000000048, 0x0) close_range$auto(0x2, r1, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_CREATE_VM(r1, 0x4040aea0, 0x0) epoll_create$auto(0x4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0xa, 0x3, 0x3, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0x8000]}, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) 1m0.615647929s ago: executing program 4 (id=807): mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) semctl$auto_GETZCNT(0x0, 0x3, 0xf, 0xffffffffffff6c4e) r0 = socket(0x2, 0x801, 0x106) getsockopt$auto(r0, 0x11c, 0x2, 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1ac}}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 1m0.581753644s ago: executing program 3 (id=808): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/lapb5/broadcast\x00', 0x800, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) getresgid$auto(&(0x7f0000000080)=0x4, 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/21, 0x15) r1 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000040)='/proc/kmsg\x00', 0x80900, 0x0) (async) r2 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x20282, 0x0) ioctl$auto_UI_DEV_CREATE(r2, 0x5501, 0x0) (async) read$auto_proc_single_file_operations_base(r1, &(0x7f0000000500)=""/214, 0xd6) (async) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r3, 0x8000) (async) madvise$auto(0x0, 0x2, 0x9) (async) r4 = prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_GET(0x7, 0x2, 0x0, 0xb380, 0x1) (async) r5 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) io_uring_setup$auto(0x2, 0x0) r6 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev$auto(r6, &(0x7f0000000040)={0x0, 0x4}, 0x4) (async) ioctl$auto_PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x0, 0x0, 0x50b301a, 0x2c, 0x2c, 0x0, 0x2}) (async) bind$auto(r5, &(0x7f00000002c0)=@isdn={0x22, 0x9d, 0x8, 0xbe, 0xf3}, 0xb0000000) sendmsg$auto_TIPC_NL_SOCK_GET(r4, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x4002000) (async) r7 = getpid() process_vm_readv$auto(r7, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x10) (async) sendmsg$auto_NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="40010000", @ANYRES16=0x0, @ANYBLOB="b3a329bd7000fcdb9200000000050007000800000023012f8008005b0000", @ANYRES32=r7, @ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x880}, 0x10) 0s ago: executing program 33 (id=805): socket(0x2, 0x801, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f00000023c0)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/enable\x00', 0x40000, 0x0) fchmod$auto(r0, 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x5, 0x8, 0xe3, 0x9b7f, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) syz_clone(0x68000000, 0x0, 0x0, 0x0, 0x0, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x6}, 0x2000000003) futex$auto(0x0, 0x6, 0x9, 0x0, 0x0, 0x6) socket(0xa, 0x1, 0x84) r3 = pidfd_open$auto(0x1, 0x0) setns(r3, 0x60020000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): T(full) [ 203.071413][ T8029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 203.071421][ T8029] Call Trace: [ 203.071427][ T8029] [ 203.071432][ T8029] dump_stack_lvl+0x16c/0x1f0 [ 203.071456][ T8029] warn_alloc+0x248/0x3a0 [ 203.071474][ T8029] ? __pfx_warn_alloc+0x10/0x10 [ 203.071493][ T8029] ? alloc_pages_mpol+0x25a/0x550 [ 203.071513][ T8029] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 203.071538][ T8029] __vmalloc_node_range_noprof+0x11d4/0x14b0 [ 203.071557][ T8029] ? kernel_clone+0xfc/0x930 [ 203.071580][ T8029] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 203.071599][ T8029] ? kernel_clone+0xfc/0x930 [ 203.071615][ T8029] __vmalloc_node_noprof+0xad/0xf0 [ 203.071627][ T8029] ? kernel_clone+0xfc/0x930 [ 203.071645][ T8029] copy_process+0x2c70/0x7690 [ 203.071670][ T8029] ? __pfx_copy_process+0x10/0x10 [ 203.071686][ T8029] ? futex_private_hash_put+0x176/0x300 [ 203.071705][ T8029] ? futex_private_hash_put+0x18a/0x300 [ 203.071724][ T8029] kernel_clone+0xfc/0x930 [ 203.071740][ T8029] ? __pfx_futex_wake+0x10/0x10 [ 203.071759][ T8029] ? __pfx_kernel_clone+0x10/0x10 [ 203.071774][ T8029] ? __pfx_vfs_writev+0x10/0x10 [ 203.071805][ T8029] __do_sys_clone+0xce/0x120 [ 203.071822][ T8029] ? __pfx___do_sys_clone+0x10/0x10 [ 203.071847][ T8029] ? xfd_validate_state+0x61/0x180 [ 203.071867][ T8029] ? __task_pid_nr_ns+0x17c/0x500 [ 203.071890][ T8029] do_syscall_64+0xcd/0x490 [ 203.071910][ T8029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.071925][ T8029] RIP: 0033:0x7f708558ebe9 [ 203.071936][ T8029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.071949][ T8029] RSP: 002b:00007f70837f5fe8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 203.071962][ T8029] RAX: ffffffffffffffda RBX: 00007f70857b6180 RCX: 00007f708558ebe9 [ 203.071971][ T8029] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010500080 [ 203.071979][ T8029] RBP: 00007f7085611e19 R08: 0000000000000000 R09: 0000000000000000 [ 203.071987][ T8029] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 203.071994][ T8029] R13: 00007f70857b6218 R14: 00007f70857b6180 R15: 00007ffe72601d38 [ 203.072012][ T8029] [ 203.072017][ T8029] Mem-Info: [ 203.318078][ T8033] random: crng reseeded on system resumption [ 204.005372][ T8029] active_anon:8955 inactive_anon:7 isolated_anon:0 [ 204.005372][ T8029] active_file:14278 inactive_file:53110 isolated_file:0 [ 204.005372][ T8029] unevictable:1760 dirty:254 writeback:0 [ 204.005372][ T8029] slab_reclaimable:11689 slab_unreclaimable:95820 [ 204.005372][ T8029] mapped:25003 shmem:1620 pagetables:1155 [ 204.005372][ T8029] sec_pagetables:0 bounce:0 [ 204.005372][ T8029] kernel_misc_reclaimable:0 [ 204.005372][ T8029] free:1310211 free_pcp:9459 free_cma:0 [ 204.309426][ T8029] Node 0 active_anon:41592kB inactive_anon:28kB active_file:57112kB inactive_file:212240kB unevictable:5504kB isolated(anon):0kB isolated(file):0kB mapped:101832kB dirty:1012kB writeback:0kB shmem:6764kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12688kB pagetables:4444kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 204.492429][ T8029] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 204.724895][ T8029] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 204.896972][ T8029] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 204.902827][ T8029] Node 0 DMA32 free:1311960kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:43572kB inactive_anon:28kB active_file:57112kB inactive_file:210916kB unevictable:5504kB writepending:1012kB present:3129332kB managed:2539588kB mlocked:3968kB bounce:0kB free_pcp:29400kB local_pcp:29400kB free_cma:0kB [ 205.107633][ T8029] lowmem_reserve[]: 0 0 1 1 1 [ 205.136869][ T8029] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1324kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 205.268084][ T8029] lowmem_reserve[]: 0 0 0 0 0 [ 205.322058][ T8029] Node 1 Normal free:3913524kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:224kB local_pcp:224kB free_cma:0kB [ 205.481639][ T8029] lowmem_reserve[]: 0 0 0 0 0 [ 205.504009][ T8029] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 205.604897][ T8029] Node 0 DMA32: 5348*4kB (M) 1445*8kB (UM) 802*16kB (ME) 600*32kB (UME) 368*64kB (UM) 180*128kB (UME) 101*256kB (UME) 42*512kB (UM) 56*1024kB (UME) 15*2048kB (UM) 260*4096kB (UM) = 1311960kB [ 205.729001][ T8029] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 205.787973][ T8029] Node 1 Normal: 183*4kB (UME) 57*8kB (UME) 21*16kB (UME) 210*32kB (UME) 78*64kB (UME) 29*128kB (UME) 11*256kB (UME) 3*512kB (UM) 5*1024kB (UME) 2*2048kB (UE) 948*4096kB (M) = 3913524kB [ 205.890428][ T8029] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 206.001646][ T8029] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 206.086397][ T8029] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 206.142436][ T8029] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 206.197442][ T8029] 70068 total pagecache pages [ 206.224753][ T8029] 0 pages in swap cache [ 206.244794][ T8029] Free swap = 124836kB [ 206.261870][ T8029] Total swap = 124996kB [ 206.286588][ T8029] 2097051 pages RAM [ 206.305199][ T8029] 0 pages HighMem/MovableOnly [ 206.335040][ T8029] 430192 pages reserved [ 206.357145][ T8029] 0 pages cma reserved [ 206.394246][ T8093] hub 8-0:1.0: USB hub found [ 206.424619][ T8093] hub 8-0:1.0: 1 port detected [ 206.446882][ T8093] FAULT_INJECTION: forcing a failure. [ 206.446882][ T8093] name failslab, interval 1, probability 0, space 0, times 0 [ 206.504643][ T8093] CPU: 0 UID: 0 PID: 8093 Comm: syz.2.424 Not tainted syzkaller #0 PREEMPT(full) [ 206.504665][ T8093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 206.504674][ T8093] Call Trace: [ 206.504679][ T8093] [ 206.504685][ T8093] dump_stack_lvl+0x16c/0x1f0 [ 206.504710][ T8093] should_fail_ex+0x512/0x640 [ 206.504730][ T8093] ? __kmalloc_noprof+0xbf/0x510 [ 206.504749][ T8093] ? hub_probe+0x12c4/0x3480 [ 206.504775][ T8093] should_failslab+0xc2/0x120 [ 206.504795][ T8093] __kmalloc_noprof+0xd2/0x510 [ 206.504817][ T8093] hub_probe+0x12c4/0x3480 [ 206.504844][ T8093] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 206.504866][ T8093] ? __pfx_hub_probe+0x10/0x10 [ 206.504886][ T8093] ? mark_held_locks+0x49/0x80 [ 206.504903][ T8093] ? setup_data_data_read+0x460/0x530 [ 206.504919][ T8093] ? mark_held_locks+0x49/0x80 [ 206.504936][ T8093] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 206.504955][ T8093] usb_probe_interface+0x300/0xa40 [ 206.504973][ T8093] ? __pfx_usb_probe_interface+0x10/0x10 [ 206.504988][ T8093] really_probe+0x241/0xa90 [ 206.505010][ T8093] __driver_probe_device+0x1de/0x440 [ 206.505031][ T8093] driver_probe_device+0x4c/0x1b0 [ 206.505087][ T8093] __device_attach_driver+0x1df/0x310 [ 206.505109][ T8093] ? __pfx___device_attach_driver+0x10/0x10 [ 206.505128][ T8093] bus_for_each_drv+0x159/0x1e0 [ 206.505145][ T8093] ? __pfx_bus_for_each_drv+0x10/0x10 [ 206.505162][ T8093] ? lockdep_hardirqs_on+0x7c/0x110 [ 206.505180][ T8093] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 206.505202][ T8093] __device_attach+0x1e4/0x4b0 [ 206.505222][ T8093] ? __pfx___device_attach+0x10/0x10 [ 206.505241][ T8093] ? do_raw_spin_unlock+0x172/0x230 [ 206.505265][ T8093] bus_probe_device+0x17f/0x1c0 [ 206.505285][ T8093] device_add+0x1148/0x1aa0 [ 206.505299][ T8093] ? __pfx_device_add+0x10/0x10 [ 206.505312][ T8093] ? mark_held_locks+0x49/0x80 [ 206.505335][ T8093] usb_set_configuration+0x1187/0x1e20 [ 206.505378][ T8093] bConfigurationValue_store+0x100/0x180 [ 206.505402][ T8093] ? __pfx_bConfigurationValue_store+0x10/0x10 [ 206.505424][ T8093] ? find_held_lock+0x2b/0x80 [ 206.505439][ T8093] ? sysfs_file_kobj+0xe4/0x290 [ 206.505456][ T8093] ? __pfx_bConfigurationValue_store+0x10/0x10 [ 206.505477][ T8093] dev_attr_store+0x55/0x80 [ 206.505497][ T8093] ? __pfx_dev_attr_store+0x10/0x10 [ 206.505517][ T8093] sysfs_kf_write+0xf2/0x150 [ 206.505533][ T8093] kernfs_fop_write_iter+0x354/0x510 [ 206.505546][ T8093] ? __pfx_sysfs_kf_write+0x10/0x10 [ 206.505563][ T8093] iter_file_splice_write+0xa24/0x12e0 [ 206.505592][ T8093] ? __pfx_iter_file_splice_write+0x10/0x10 [ 206.505611][ T8093] ? __pfx_copy_splice_read+0x10/0x10 [ 206.505635][ T8093] ? __pfx_iter_file_splice_write+0x10/0x10 [ 206.505661][ T8093] direct_splice_actor+0x18f/0x6c0 [ 206.505682][ T8093] splice_direct_to_actor+0x345/0xa30 [ 206.505699][ T8093] ? __pfx_direct_splice_actor+0x10/0x10 [ 206.505718][ T8093] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 206.505739][ T8093] do_splice_direct+0x174/0x240 [ 206.505754][ T8093] ? __pfx_do_splice_direct+0x10/0x10 [ 206.505775][ T8093] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 206.505793][ T8093] ? rw_verify_area+0xcf/0x6c0 [ 206.505810][ T8093] do_sendfile+0xb06/0xe50 [ 206.505830][ T8093] ? __pfx_do_sendfile+0x10/0x10 [ 206.505849][ T8093] ? __x64_sys_futex+0x1e0/0x4c0 [ 206.505867][ T8093] ? __x64_sys_futex+0x1e9/0x4c0 [ 206.505887][ T8093] __x64_sys_sendfile64+0x1d8/0x220 [ 206.505907][ T8093] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 206.505932][ T8093] do_syscall_64+0xcd/0x490 [ 206.505953][ T8093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.505968][ T8093] RIP: 0033:0x7fc093b8ebe9 [ 206.505980][ T8093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.505995][ T8093] RSP: 002b:00007fc094a43038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 206.506009][ T8093] RAX: ffffffffffffffda RBX: 00007fc093db5fa0 RCX: 00007fc093b8ebe9 [ 206.506019][ T8093] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 206.506028][ T8093] RBP: 00007fc093c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 206.506037][ T8093] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 206.506045][ T8093] R13: 00007fc093db6038 R14: 00007fc093db5fa0 R15: 00007ffd01d09fd8 [ 206.506065][ T8093] [ 206.940045][ T8093] hub 8-0:1.0: config failed, out of memory (err -12) [ 207.976779][ T8135] netlink: 32 bytes leftover after parsing attributes in process `syz.3.432'. [ 207.996763][ T8136] netlink: 32 bytes leftover after parsing attributes in process `syz.3.432'. [ 208.496304][ T8142] FAULT_INJECTION: forcing a failure. [ 208.496304][ T8142] name fail_futex, interval 1, probability 0, space 0, times 0 [ 208.610305][ T8142] CPU: 0 UID: 0 PID: 8142 Comm: syz.1.434 Not tainted syzkaller #0 PREEMPT(full) [ 208.610327][ T8142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 208.610336][ T8142] Call Trace: [ 208.610341][ T8142] [ 208.610346][ T8142] dump_stack_lvl+0x16c/0x1f0 [ 208.610369][ T8142] should_fail_ex+0x512/0x640 [ 208.610392][ T8142] get_futex_key+0x1d0/0x1560 [ 208.610412][ T8142] ? __pfx_get_futex_key+0x10/0x10 [ 208.610428][ T8142] ? __mutex_trylock_common+0xe9/0x250 [ 208.610452][ T8142] futex_wake+0xea/0x530 [ 208.610479][ T8142] ? __pfx_futex_wake+0x10/0x10 [ 208.610507][ T8142] do_futex+0x1e3/0x350 [ 208.610524][ T8142] ? __pfx_do_futex+0x10/0x10 [ 208.610539][ T8142] ? __might_fault+0xe3/0x190 [ 208.610560][ T8142] mm_release+0x24e/0x300 [ 208.610577][ T8142] do_exit+0x68e/0x2bf0 [ 208.610600][ T8142] ? __pfx_do_exit+0x10/0x10 [ 208.610617][ T8142] ? do_raw_spin_lock+0x12c/0x2b0 [ 208.610637][ T8142] ? find_held_lock+0x2b/0x80 [ 208.610653][ T8142] do_group_exit+0xd3/0x2a0 [ 208.610673][ T8142] get_signal+0x2673/0x26d0 [ 208.610696][ T8142] ? __pfx_get_signal+0x10/0x10 [ 208.610715][ T8142] ? do_futex+0x122/0x350 [ 208.610731][ T8142] ? __pfx_do_futex+0x10/0x10 [ 208.610750][ T8142] arch_do_signal_or_restart+0x8f/0x790 [ 208.610769][ T8142] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 208.610792][ T8142] ? __pfx_do_writev+0x10/0x10 [ 208.610811][ T8142] exit_to_user_mode_loop+0x84/0x110 [ 208.610832][ T8142] do_syscall_64+0x3f6/0x490 [ 208.610851][ T8142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.610866][ T8142] RIP: 0033:0x7f0c37b8ebe9 [ 208.610877][ T8142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.610891][ T8142] RSP: 002b:00007f0c38ab10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 208.610904][ T8142] RAX: fffffffffffffe00 RBX: 00007f0c37db5fa8 RCX: 00007f0c37b8ebe9 [ 208.610915][ T8142] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0c37db5fa8 [ 208.610924][ T8142] RBP: 00007f0c37db5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 208.610933][ T8142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.610940][ T8142] R13: 00007f0c37db6038 R14: 00007ffe87802810 R15: 00007ffe878028f8 [ 208.610958][ T8142] [ 209.098833][ T8149] hub 8-0:1.0: USB hub found [ 209.142264][ T8149] hub 8-0:1.0: 1 port detected [ 209.360776][ T8158] hub 8-0:1.0: USB hub found [ 209.369087][ T8158] hub 8-0:1.0: 1 port detected [ 210.947723][ T8186] bdi 43:96: the stable_pages_required attribute has been removed. Use the stable_writes queue attribute instead. [ 211.075455][ T8184] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 211.104334][ T8184] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 211.132314][ T8184] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 211.139580][ T8196] Invalid input. Must be >= 4608 [ 211.183408][ T8184] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 211.202683][ T8184] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 211.232320][ T8184] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 212.122339][ T8228] netlink: 28 bytes leftover after parsing attributes in process `syz.2.451'. [ 212.855851][ T8238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.454'. [ 213.093423][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 213.173423][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 213.179472][ T5882] Bluetooth: hci0: command 0x0c1a tx timeout [ 213.256218][ T5882] Bluetooth: hci1: command 0x0c1a tx timeout [ 214.993059][ T8280] hub 8-0:1.0: USB hub found [ 215.020157][ T8280] hub 8-0:1.0: 1 port detected [ 215.055338][ T8290] ACPI: Can not change Invalid GPE/Fixed Event status [ 215.336491][ T5882] Bluetooth: hci1: command 0x0c1a tx timeout [ 215.562112][ T30] audit: type=1804 audit(6051267252.069:8): pid=8309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.464" name="/newroot/139/file0" dev="tmpfs" ino=737 res=1 errno=0 [ 216.623562][ T8330] openvswitch: HfR: Dropping previously announced user features [ 217.273101][ T8350] Device name cannot be null; rc = [-22] [ 217.418457][ T5882] Bluetooth: hci1: command 0x0c1a tx timeout [ 217.765877][ T8357] hub 8-0:1.0: USB hub found [ 217.835348][ T8357] hub 8-0:1.0: 1 port detected [ 218.090536][ T30] audit: type=1326 audit(6051267254.598:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8375 comm="syz.4.477" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f708558ebe9 code=0x0 [ 218.161188][ T8381] FAULT_INJECTION: forcing a failure. [ 218.161188][ T8381] name failslab, interval 1, probability 0, space 0, times 0 [ 218.276340][ T8381] CPU: 0 UID: 0 PID: 8381 Comm: syz.4.477 Not tainted syzkaller #0 PREEMPT(full) [ 218.276362][ T8381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 218.276371][ T8381] Call Trace: [ 218.276377][ T8381] [ 218.276383][ T8381] dump_stack_lvl+0x16c/0x1f0 [ 218.276407][ T8381] should_fail_ex+0x512/0x640 [ 218.276427][ T8381] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 218.276448][ T8381] should_failslab+0xc2/0x120 [ 218.276467][ T8381] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 218.276482][ T8381] ? debug_mutex_init+0x37/0x70 [ 218.276499][ T8381] ? seq_open+0x55/0x170 [ 218.276521][ T8381] seq_open+0x55/0x170 [ 218.276541][ T8381] blk_mq_debugfs_open+0x106/0x1b0 [ 218.276559][ T8381] ? __pfx_blk_mq_debugfs_open+0x10/0x10 [ 218.276574][ T8381] full_proxy_open_regular+0x1b9/0x360 [ 218.276591][ T8381] do_dentry_open+0x982/0x1530 [ 218.276609][ T8381] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 218.276626][ T8381] vfs_open+0x82/0x3f0 [ 218.276648][ T8381] path_openat+0x1de4/0x2cb0 [ 218.276671][ T8381] ? __pfx_path_openat+0x10/0x10 [ 218.276692][ T8381] do_filp_open+0x20b/0x470 [ 218.276708][ T8381] ? __pfx_do_filp_open+0x10/0x10 [ 218.276737][ T8381] ? alloc_fd+0x471/0x7d0 [ 218.276770][ T8381] do_sys_openat2+0x11b/0x1d0 [ 218.276797][ T8381] ? __pfx_do_sys_openat2+0x10/0x10 [ 218.276826][ T8381] __x64_sys_openat+0x174/0x210 [ 218.276848][ T8381] ? __pfx___x64_sys_openat+0x10/0x10 [ 218.276877][ T8381] do_syscall_64+0xcd/0x490 [ 218.276897][ T8381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.276912][ T8381] RIP: 0033:0x7f708558ebe9 [ 218.276924][ T8381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.276938][ T8381] RSP: 002b:00007f7086327038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 218.276952][ T8381] RAX: ffffffffffffffda RBX: 00007f70857b6090 RCX: 00007f708558ebe9 [ 218.276961][ T8381] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 218.276969][ T8381] RBP: 00007f7085611e19 R08: 0000000000000000 R09: 0000000000000000 [ 218.276977][ T8381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.276986][ T8381] R13: 00007f70857b6128 R14: 00007f70857b6090 R15: 00007ffe72601d38 [ 218.277005][ T8381] [ 219.357842][ T30] audit: type=1800 audit(6051267255.867:10): pid=8406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.482" name="members" dev="configfs" ino=20751 res=0 errno=0 [ 219.449823][ T8404] mkiss: ax0: crc mode is auto. [ 220.305626][ T8416] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 220.429109][ T8418] netlink: 302 bytes leftover after parsing attributes in process `syz.3.485'. [ 220.595107][ T8416] zswap: compressor not available [ 221.282419][ T8432] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.483644][ T8432] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.680350][ T8432] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.856884][ T8432] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.399543][ T8454] netlink: 342 bytes leftover after parsing attributes in process `syz.4.491'. [ 222.448849][ T8454] netlink: 342 bytes leftover after parsing attributes in process `syz.4.491'. [ 222.533206][ T8452] hub 8-0:1.0: USB hub found [ 222.561220][ T8452] hub 8-0:1.0: 1 port detected [ 224.822652][ T8507] bridge0: port 3(veth0_to_bridge) entered blocking state [ 224.870719][ T8507] bridge0: port 3(veth0_to_bridge) entered disabled state [ 224.935949][ T8507] veth0_to_bridge: entered allmulticast mode [ 224.970483][ T8507] veth0_to_bridge: entered promiscuous mode [ 224.997724][ T8507] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 225.067676][ T8507] bridge0: port 3(veth0_to_bridge) entered blocking state [ 225.075415][ T8507] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 225.551853][ T8513] hub 8-0:1.0: USB hub found [ 225.589300][ T8513] hub 8-0:1.0: 1 port detected [ 226.410522][ T8535] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„ [ 226.806332][ T8555] netlink: 28 bytes leftover after parsing attributes in process `syz.3.511'. [ 226.869166][ T8554] netlink: 28 bytes leftover after parsing attributes in process `syz.3.511'. [ 226.953410][ T8555] geneve1: entered promiscuous mode [ 226.958744][ T8555] geneve1: entered allmulticast mode syzkaller syzkaller login: [ 228.168392][ T8583] hub 8-0:1.0: USB hub found [ 228.269142][ T8583] hub 8-0:1.0: 1 port detected [ 229.614233][ T8618] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 229.620677][ T8618] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 230.106626][ T8631] FAULT_INJECTION: forcing a failure. [ 230.106626][ T8631] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.179623][ T8631] CPU: 0 UID: 0 PID: 8631 Comm: syz.4.526 Not tainted syzkaller #0 PREEMPT(full) [ 230.179646][ T8631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 230.179656][ T8631] Call Trace: [ 230.179662][ T8631] [ 230.179667][ T8631] dump_stack_lvl+0x16c/0x1f0 [ 230.179693][ T8631] should_fail_ex+0x512/0x640 [ 230.179717][ T8631] _copy_from_user+0x2e/0xd0 [ 230.179741][ T8631] do_pages_stat+0x24c/0x820 [ 230.179768][ T8631] ? __pfx_do_pages_stat+0x10/0x10 [ 230.179804][ T8631] ? do_raw_spin_unlock+0x172/0x230 [ 230.179830][ T8631] kernel_move_pages+0xfa8/0x1380 [ 230.179853][ T8631] ? do_futex+0x122/0x350 [ 230.179871][ T8631] ? __pfx_do_futex+0x10/0x10 [ 230.179888][ T8631] ? fput+0x9b/0xd0 [ 230.179906][ T8631] ? __pfx_kernel_move_pages+0x10/0x10 [ 230.179926][ T8631] ? __sys_sendmsg+0x18c/0x220 [ 230.179946][ T8631] ? __x64_sys_futex+0x1e0/0x4c0 [ 230.179963][ T8631] ? __x64_sys_futex+0x1e9/0x4c0 [ 230.179983][ T8631] ? xfd_validate_state+0x61/0x180 [ 230.180006][ T8631] __x64_sys_move_pages+0xe0/0x1c0 [ 230.180027][ T8631] ? do_syscall_64+0x91/0x490 [ 230.180045][ T8631] ? lockdep_hardirqs_on+0x7c/0x110 [ 230.180063][ T8631] do_syscall_64+0xcd/0x490 [ 230.180082][ T8631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.180096][ T8631] RIP: 0033:0x7f708558ebe9 [ 230.180108][ T8631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.180130][ T8631] RSP: 002b:00007f7086348038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 230.180144][ T8631] RAX: ffffffffffffffda RBX: 00007f70857b5fa0 RCX: 00007f708558ebe9 [ 230.180154][ T8631] RDX: 0000000000000000 RSI: 0002000000000003 RDI: 0000000000000001 [ 230.180162][ T8631] RBP: 00007f7085611e19 R08: 0000000000000000 R09: 8000400000000000 [ 230.180171][ T8631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 230.180180][ T8631] R13: 00007f70857b6038 R14: 00007f70857b5fa0 R15: 00007ffe72601d38 [ 230.180198][ T8631] [ 231.143409][ T8650] FAULT_INJECTION: forcing a failure. [ 231.143409][ T8650] name failslab, interval 1, probability 0, space 0, times 0 [ 231.196709][ T8650] CPU: 0 UID: 0 PID: 8650 Comm: syz.2.529 Not tainted syzkaller #0 PREEMPT(full) [ 231.196733][ T8650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 231.196742][ T8650] Call Trace: [ 231.196749][ T8650] [ 231.196755][ T8650] dump_stack_lvl+0x16c/0x1f0 [ 231.196780][ T8650] should_fail_ex+0x512/0x640 [ 231.196810][ T8650] ? __kvmalloc_node_noprof+0x124/0x620 [ 231.196833][ T8650] should_failslab+0xc2/0x120 [ 231.196853][ T8650] __kvmalloc_node_noprof+0x137/0x620 [ 231.196870][ T8650] ? __pfx___mutex_lock+0x10/0x10 [ 231.196890][ T8650] ? traverse.part.0.constprop.0+0x392/0x640 [ 231.196908][ T8650] ? traverse.part.0.constprop.0+0x392/0x640 [ 231.196922][ T8650] traverse.part.0.constprop.0+0x392/0x640 [ 231.196937][ T8650] ? find_held_lock+0x2b/0x80 [ 231.196956][ T8650] seq_read_iter+0x932/0x12c0 [ 231.196977][ T8650] proc_reg_read_iter+0x21d/0x310 [ 231.196998][ T8650] vfs_read+0x8bc/0xcf0 [ 231.197020][ T8650] ? __pfx_vfs_read+0x10/0x10 [ 231.197034][ T8650] ? find_held_lock+0x2b/0x80 [ 231.197064][ T8650] __x64_sys_pread64+0x1eb/0x250 [ 231.197083][ T8650] ? __pfx___x64_sys_pread64+0x10/0x10 [ 231.197106][ T8650] do_syscall_64+0xcd/0x490 [ 231.197127][ T8650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.197141][ T8650] RIP: 0033:0x7fc093b8ebe9 [ 231.197153][ T8650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.197167][ T8650] RSP: 002b:00007fc094a43038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 231.197181][ T8650] RAX: ffffffffffffffda RBX: 00007fc093db5fa0 RCX: 00007fc093b8ebe9 [ 231.197190][ T8650] RDX: 0000000100000001 RSI: 0000000000000000 RDI: 0000000000000008 [ 231.197198][ T8650] RBP: 00007fc093c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 231.197206][ T8650] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000000 [ 231.197214][ T8650] R13: 00007fc093db6038 R14: 00007fc093db5fa0 R15: 00007ffd01d09fd8 [ 231.197233][ T8650] [ 231.508220][ T8654] CIFS: VFS: Invalid SecurityFlags: [ 234.595849][ T8714] hub 8-0:1.0: USB hub found [ 234.612587][ T8714] hub 8-0:1.0: 1 port detected [ 234.868984][ T8716] hub 8-0:1.0: USB hub found [ 234.892625][ T8716] hub 8-0:1.0: 1 port detected [ 235.738114][ T5882] Bluetooth: hci1: unexpected subevent 0x12 length: 123 > 5 [ 236.005397][ T8740] Console: switching to colour VGA+ 80x25 [ 236.031199][ T8737] FAULT_INJECTION: forcing a failure. [ 236.031199][ T8737] name failslab, interval 1, probability 0, space 0, times 0 [ 236.081717][ T8737] CPU: 0 UID: 0 PID: 8737 Comm: syz.1.546 Not tainted syzkaller #0 PREEMPT(full) [ 236.081740][ T8737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 236.081748][ T8737] Call Trace: [ 236.081754][ T8737] [ 236.081760][ T8737] dump_stack_lvl+0x16c/0x1f0 [ 236.081783][ T8737] should_fail_ex+0x512/0x640 [ 236.081802][ T8737] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 236.081824][ T8737] should_failslab+0xc2/0x120 [ 236.081842][ T8737] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 236.081860][ T8737] ? net_generic+0xea/0x2a0 [ 236.081872][ T8737] ? mptcp_net_init+0x29c/0x620 [ 236.081888][ T8737] kmemdup_noprof+0x29/0x60 [ 236.081906][ T8737] mptcp_net_init+0x29c/0x620 [ 236.081923][ T8737] ? __pfx_mptcp_net_init+0x10/0x10 [ 236.081936][ T8737] ops_init+0x1e2/0x5f0 [ 236.081958][ T8737] setup_net+0x10f/0x380 [ 236.081975][ T8737] ? lockdep_init_map_type+0x5c/0x280 [ 236.081995][ T8737] ? __pfx_setup_net+0x10/0x10 [ 236.082014][ T8737] ? debug_mutex_init+0x37/0x70 [ 236.082030][ T8737] copy_net_ns+0x2a6/0x5f0 [ 236.082052][ T8737] create_new_namespaces+0x3ea/0xa90 [ 236.082074][ T8737] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 236.082091][ T8737] ksys_unshare+0x45b/0xa40 [ 236.082111][ T8737] ? __pfx_ksys_unshare+0x10/0x10 [ 236.082129][ T8737] ? xfd_validate_state+0x61/0x180 [ 236.082155][ T8737] __x64_sys_unshare+0x31/0x40 [ 236.082173][ T8737] do_syscall_64+0xcd/0x490 [ 236.082193][ T8737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.082207][ T8737] RIP: 0033:0x7f0c37b8ebe9 [ 236.082219][ T8737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.082232][ T8737] RSP: 002b:00007f0c38a90038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 236.082246][ T8737] RAX: ffffffffffffffda RBX: 00007f0c37db6090 RCX: 00007f0c37b8ebe9 [ 236.082255][ T8737] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 236.082263][ T8737] RBP: 00007f0c37c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 236.082272][ T8737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.082280][ T8737] R13: 00007f0c37db6128 R14: 00007f0c37db6090 R15: 00007ffe878028f8 [ 236.082297][ T8737] [ 236.949264][ T8752] random: crng reseeded on system resumption [ 237.167098][ T8759] hub 8-0:1.0: USB hub found [ 237.189027][ T8759] hub 8-0:1.0: 1 port detected [ 238.560118][ T8789] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input10 [ 238.797027][ T8794] Process accounting resumed [ 240.718777][ T8828] hub 8-0:1.0: USB hub found [ 240.765072][ T8828] hub 8-0:1.0: 1 port detected [ 241.657743][ T8868] ACPI: Can not change Invalid GPE/Fixed Event status [ 243.095477][ T30] audit: type=1326 audit(6051267279.575:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8891 comm="syz.4.572" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f708558ebe9 code=0x0 [ 243.437250][ T30] audit: type=1800 audit(6051267279.925:12): pid=8903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.573" name="members" dev="configfs" ino=23335 res=0 errno=0 [ 243.468578][ T8902] vivid-003: ================= START STATUS ================= [ 243.580799][ T8902] vivid-003: Radio HW Seek Mode: Bounded [ 243.587040][ T8902] vivid-003: Radio Programmable HW Seek: false [ 243.770990][ T8902] vivid-003: RDS Rx I/O Mode: Block I/O [ 243.896577][ T8902] vivid-003: Generate RBDS Instead of RDS: false [ 243.981503][ T8902] vivid-003: RDS Reception: true [ 244.091907][ T8902] vivid-003: RDS Program Type: 0 inactive [ 244.171668][ T8902] vivid-003: RDS PS Name: inactive [ 244.200715][ T8902] vivid-003: RDS Radio Text: inactive [ 244.206223][ T8902] vivid-003: RDS Traffic Announcement: false inactive [ 244.285303][ T8902] vivid-003: RDS Traffic Program: false inactive [ 244.321594][ T8902] vivid-003: RDS Music: false inactive [ 244.327115][ T8902] vivid-003: ================== END STATUS ================== [ 244.548910][ T8909] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(3839069728.127229266.3521664029), cmd(5) [ 245.792847][ T8941] netlink: 28 bytes leftover after parsing attributes in process `syz.4.579'. [ 245.882288][ T8943] hub 8-0:1.0: USB hub found [ 245.964629][ T8943] hub 8-0:1.0: 1 port detected [ 246.090947][ T8954] netlink: 25 bytes leftover after parsing attributes in process `syz.2.581'. [ 246.618842][ T8967] HfR: entered promiscuous mode [ 247.229250][ T30] audit: type=1800 audit(6051267283.713:13): pid=8974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.585" name="features" dev="configfs" ino=23713 res=0 errno=0 [ 248.429257][ T8997] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 249.531213][ T9014] FAULT_INJECTION: forcing a failure. [ 249.531213][ T9014] name fail_futex, interval 1, probability 0, space 0, times 0 [ 249.588269][ T9014] CPU: 0 UID: 0 PID: 9014 Comm: syz.4.594 Not tainted syzkaller #0 PREEMPT(full) [ 249.588290][ T9014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 249.588299][ T9014] Call Trace: [ 249.588304][ T9014] [ 249.588310][ T9014] dump_stack_lvl+0x16c/0x1f0 [ 249.588333][ T9014] should_fail_ex+0x512/0x640 [ 249.588355][ T9014] get_futex_key+0x293/0x1560 [ 249.588375][ T9014] ? __pfx_get_futex_key+0x10/0x10 [ 249.588391][ T9014] ? __mutex_trylock_common+0xe9/0x250 [ 249.588415][ T9014] futex_wake+0xea/0x530 [ 249.588436][ T9014] ? __pfx_futex_wake+0x10/0x10 [ 249.588470][ T9014] do_futex+0x1e3/0x350 [ 249.588487][ T9014] ? __pfx_do_futex+0x10/0x10 [ 249.588502][ T9014] ? __might_fault+0xe3/0x190 [ 249.588523][ T9014] mm_release+0x24e/0x300 [ 249.588540][ T9014] do_exit+0x68e/0x2bf0 [ 249.588563][ T9014] ? __pfx_do_exit+0x10/0x10 [ 249.588580][ T9014] ? do_raw_spin_lock+0x12c/0x2b0 [ 249.588600][ T9014] ? find_held_lock+0x2b/0x80 [ 249.588616][ T9014] do_group_exit+0xd3/0x2a0 [ 249.588636][ T9014] get_signal+0x2673/0x26d0 [ 249.588655][ T9014] ? __fget_files+0x204/0x3c0 [ 249.588673][ T9014] ? __pfx_get_signal+0x10/0x10 [ 249.588691][ T9014] ? do_futex+0x122/0x350 [ 249.588707][ T9014] ? __pfx_do_futex+0x10/0x10 [ 249.588726][ T9014] arch_do_signal_or_restart+0x8f/0x790 [ 249.588745][ T9014] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 249.588773][ T9014] exit_to_user_mode_loop+0x84/0x110 [ 249.588799][ T9014] do_syscall_64+0x3f6/0x490 [ 249.588819][ T9014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.588834][ T9014] RIP: 0033:0x7f708558ebe9 [ 249.588846][ T9014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.588859][ T9014] RSP: 002b:00007f70837b40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 249.588873][ T9014] RAX: fffffffffffffe00 RBX: 00007f70857b6368 RCX: 00007f708558ebe9 [ 249.588882][ T9014] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f70857b6368 [ 249.588890][ T9014] RBP: 00007f70857b6360 R08: 0000000000000000 R09: 0000000000000000 [ 249.588899][ T9014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.588906][ T9014] R13: 00007f70857b63f8 R14: 00007ffe72601c50 R15: 00007ffe72601d38 [ 249.588924][ T9014] [ 250.073265][ T9032] netlink: 'syz.3.597': attribute type 1 has an invalid length. [ 250.094432][ T9032] netlink: 4 bytes leftover after parsing attributes in process `syz.3.597'. [ 252.479387][ T9078] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(3127722783.3259643496.3266857115), cmd(5) [ 252.598479][ T9084] program syz.3.608 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 252.801111][ T9086] random: crng reseeded on system resumption [ 254.072917][ T30] audit: type=1326 audit(6051267290.550:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9111 comm="syz.4.615" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f708558ebe9 code=0x0 [ 254.124696][ T9110] FAULT_INJECTION: forcing a failure. [ 254.124696][ T9110] name fail_futex, interval 1, probability 0, space 0, times 0 [ 254.205733][ T9117] Process accounting resumed [ 254.211299][ T9110] CPU: 0 UID: 0 PID: 9110 Comm: syz.3.614 Not tainted syzkaller #0 PREEMPT(full) [ 254.211322][ T9110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 254.211331][ T9110] Call Trace: [ 254.211336][ T9110] [ 254.211342][ T9110] dump_stack_lvl+0x16c/0x1f0 [ 254.211366][ T9110] should_fail_ex+0x512/0x640 [ 254.211389][ T9110] get_futex_key+0x1d0/0x1560 [ 254.211409][ T9110] ? __pfx_get_futex_key+0x10/0x10 [ 254.211424][ T9110] ? rcu_is_watching+0x12/0xc0 [ 254.211440][ T9110] ? kfree+0x24f/0x4d0 [ 254.211453][ T9110] ? bpf_lsm_file_permission+0x9/0x10 [ 254.211473][ T9110] ? security_file_permission+0x71/0x210 [ 254.211501][ T9110] futex_wake+0xea/0x530 [ 254.211521][ T9110] ? __lock_acquire+0x62e/0x1ce0 [ 254.211540][ T9110] ? __pfx_futex_wake+0x10/0x10 [ 254.211561][ T9110] ? __pfx_vfs_writev+0x10/0x10 [ 254.211583][ T9110] do_futex+0x1e3/0x350 [ 254.211600][ T9110] ? __pfx_do_futex+0x10/0x10 [ 254.211623][ T9110] __x64_sys_futex+0x1e0/0x4c0 [ 254.211643][ T9110] ? __pfx___x64_sys_futex+0x10/0x10 [ 254.211661][ T9110] ? __pfx_do_writev+0x10/0x10 [ 254.211681][ T9110] do_syscall_64+0xcd/0x490 [ 254.211701][ T9110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.211715][ T9110] RIP: 0033:0x7fb67598ebe9 [ 254.211727][ T9110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.211741][ T9110] RSP: 002b:00007fb6767250e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 254.211754][ T9110] RAX: ffffffffffffffda RBX: 00007fb675bb5fa8 RCX: 00007fb67598ebe9 [ 254.211764][ T9110] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb675bb5fac [ 254.211772][ T9110] RBP: 00007fb675bb5fa0 R08: 00007fb676726000 R09: 0000000000000000 [ 254.211781][ T9110] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 254.211789][ T9110] R13: 00007fb675bb6038 R14: 00007ffce383e030 R15: 00007ffce383e118 [ 254.211808][ T9110] [ 255.268523][ T9137] FAULT_INJECTION: forcing a failure. [ 255.268523][ T9137] name failslab, interval 1, probability 0, space 0, times 0 [ 255.354019][ T9137] CPU: 0 UID: 0 PID: 9137 Comm: syz.2.619 Not tainted syzkaller #0 PREEMPT(full) [ 255.354050][ T9137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 255.354059][ T9137] Call Trace: [ 255.354065][ T9137] [ 255.354072][ T9137] dump_stack_lvl+0x16c/0x1f0 [ 255.354097][ T9137] should_fail_ex+0x512/0x640 [ 255.354117][ T9137] ? __kmalloc_noprof+0xbf/0x510 [ 255.354137][ T9137] ? kobject_get_path+0xd2/0x2a0 [ 255.354154][ T9137] should_failslab+0xc2/0x120 [ 255.354173][ T9137] __kmalloc_noprof+0xd2/0x510 [ 255.354193][ T9137] kobject_get_path+0xd2/0x2a0 [ 255.354216][ T9137] kobject_uevent_env+0x289/0x1870 [ 255.354237][ T9137] ? __pfx_dev_uevent_name+0x10/0x10 [ 255.354258][ T9137] ? kobject_put+0xab/0x5a0 [ 255.354279][ T9137] device_add+0x10dd/0x1aa0 [ 255.354295][ T9137] ? __pfx_device_add+0x10/0x10 [ 255.354308][ T9137] ? mark_held_locks+0x49/0x80 [ 255.354332][ T9137] usb_set_configuration+0x1187/0x1e20 [ 255.354367][ T9137] bConfigurationValue_store+0x100/0x180 [ 255.354390][ T9137] ? __pfx_bConfigurationValue_store+0x10/0x10 [ 255.354416][ T9137] ? find_held_lock+0x2b/0x80 [ 255.354430][ T9137] ? sysfs_file_kobj+0xe4/0x290 [ 255.354450][ T9137] ? __pfx_bConfigurationValue_store+0x10/0x10 [ 255.354471][ T9137] dev_attr_store+0x55/0x80 [ 255.354492][ T9137] ? __pfx_dev_attr_store+0x10/0x10 [ 255.354512][ T9137] sysfs_kf_write+0xf2/0x150 [ 255.354529][ T9137] kernfs_fop_write_iter+0x354/0x510 [ 255.354546][ T9137] ? __pfx_sysfs_kf_write+0x10/0x10 [ 255.354563][ T9137] iter_file_splice_write+0xa24/0x12e0 [ 255.354591][ T9137] ? __pfx_iter_file_splice_write+0x10/0x10 [ 255.354611][ T9137] ? __pfx_copy_splice_read+0x10/0x10 [ 255.354636][ T9137] ? __pfx_iter_file_splice_write+0x10/0x10 [ 255.354652][ T9137] direct_splice_actor+0x18f/0x6c0 [ 255.354669][ T9137] splice_direct_to_actor+0x345/0xa30 [ 255.354686][ T9137] ? __pfx_direct_splice_actor+0x10/0x10 [ 255.354704][ T9137] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 255.354724][ T9137] do_splice_direct+0x174/0x240 [ 255.354739][ T9137] ? __pfx_do_splice_direct+0x10/0x10 [ 255.354754][ T9137] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 255.354772][ T9137] ? rw_verify_area+0xcf/0x6c0 [ 255.354788][ T9137] do_sendfile+0xb06/0xe50 [ 255.354807][ T9137] ? __pfx_do_sendfile+0x10/0x10 [ 255.354825][ T9137] ? __x64_sys_futex+0x1e0/0x4c0 [ 255.354842][ T9137] ? __x64_sys_futex+0x1e9/0x4c0 [ 255.354861][ T9137] __x64_sys_sendfile64+0x1d8/0x220 [ 255.354881][ T9137] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 255.354906][ T9137] do_syscall_64+0xcd/0x490 [ 255.354926][ T9137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.354941][ T9137] RIP: 0033:0x7fc093b8ebe9 [ 255.354954][ T9137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.354968][ T9137] RSP: 002b:00007fc094a43038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 255.354983][ T9137] RAX: ffffffffffffffda RBX: 00007fc093db5fa0 RCX: 00007fc093b8ebe9 [ 255.354993][ T9137] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 255.355002][ T9137] RBP: 00007fc093c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 255.355011][ T9137] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 255.355020][ T9137] R13: 00007fc093db6038 R14: 00007fc093db5fa0 R15: 00007ffd01d09fd8 [ 255.355046][ T9137] [ 255.360660][ T9137] hub 8-0:1.0: USB hub found [ 255.766953][ T9157] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 255.976321][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.982652][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.137813][ T9173] netlink: zone id is out of range [ 256.163452][ T9173] netlink: zone id is out of range [ 256.175550][ T9173] netlink: zone id is out of range [ 256.191528][ T9173] netlink: zone id is out of range [ 256.220186][ T9173] netlink: zone id is out of range [ 256.265949][ T9173] netlink: zone id is out of range [ 256.311966][ T9173] netlink: zone id is out of range [ 256.327496][ T9173] netlink: zone id is out of range [ 256.363863][ T9173] netlink: zone id is out of range [ 256.371455][ T9169] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 256.378295][ T9173] netlink: zone id is out of range syzkaller syzkaller login: [ 256.954109][ T9137] hub 8-0:1.0: 1 port detected [ 257.393074][ T9198] FAULT_INJECTION: forcing a failure. [ 257.393074][ T9198] name fail_futex, interval 1, probability 0, space 0, times 0 [ 257.455590][ T9198] CPU: 0 UID: 0 PID: 9198 Comm: syz.2.629 Not tainted syzkaller #0 PREEMPT(full) [ 257.455613][ T9198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 257.455622][ T9198] Call Trace: [ 257.455628][ T9198] [ 257.455634][ T9198] dump_stack_lvl+0x16c/0x1f0 [ 257.455657][ T9198] should_fail_ex+0x512/0x640 [ 257.455681][ T9198] get_futex_key+0x1d0/0x1560 [ 257.455702][ T9198] ? __pfx_get_futex_key+0x10/0x10 [ 257.455717][ T9198] ? rcu_is_watching+0x12/0xc0 [ 257.455731][ T9198] ? kfree+0x24f/0x4d0 [ 257.455743][ T9198] ? bpf_lsm_file_permission+0x9/0x10 [ 257.455763][ T9198] ? security_file_permission+0x71/0x210 [ 257.455787][ T9198] futex_wake+0xea/0x530 [ 257.455808][ T9198] ? __lock_acquire+0x62e/0x1ce0 [ 257.455826][ T9198] ? __pfx_futex_wake+0x10/0x10 [ 257.455848][ T9198] ? __pfx_vfs_writev+0x10/0x10 [ 257.455879][ T9198] do_futex+0x1e3/0x350 [ 257.455897][ T9198] ? __pfx_do_futex+0x10/0x10 [ 257.455920][ T9198] __x64_sys_futex+0x1e0/0x4c0 [ 257.455941][ T9198] ? __pfx___x64_sys_futex+0x10/0x10 [ 257.455960][ T9198] ? __pfx_do_writev+0x10/0x10 [ 257.455981][ T9198] do_syscall_64+0xcd/0x490 [ 257.456001][ T9198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.456015][ T9198] RIP: 0033:0x7fc093b8ebe9 [ 257.456027][ T9198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.456042][ T9198] RSP: 002b:00007fc094a430e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 257.456055][ T9198] RAX: ffffffffffffffda RBX: 00007fc093db5fa8 RCX: 00007fc093b8ebe9 [ 257.456065][ T9198] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc093db5fac [ 257.456073][ T9198] RBP: 00007fc093db5fa0 R08: 00007fc094a44000 R09: 0000000000000000 [ 257.456082][ T9198] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 257.456090][ T9198] R13: 00007fc093db6038 R14: 00007ffd01d09ef0 R15: 00007ffd01d09fd8 [ 257.456108][ T9198] [ 257.461249][ T9197] netlink: 28 bytes leftover after parsing attributes in process `syz.4.628'. [ 258.139940][ T9197] hub 8-0:1.0: USB hub found [ 258.174065][ T30] audit: type=1800 audit(6051267294.658:15): pid=9223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.634" name="dbroot" dev="configfs" ino=24803 res=0 errno=0 [ 258.287355][ T9197] hub 8-0:1.0: 1 port detected [ 258.346457][ T9236] netlink: 36 bytes leftover after parsing attributes in process `syz.1.636'. [ 258.534731][ T30] audit: type=1326 audit(6051267295.018:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9237 comm="syz.2.637" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc093b8ebe9 code=0x0 [ 259.423104][ T9262] FAULT_INJECTION: forcing a failure. [ 259.423104][ T9262] name fail_futex, interval 1, probability 0, space 0, times 0 [ 259.521365][ T9262] CPU: 0 UID: 0 PID: 9262 Comm: syz.4.640 Not tainted syzkaller #0 PREEMPT(full) [ 259.521387][ T9262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 259.521397][ T9262] Call Trace: [ 259.521402][ T9262] [ 259.521408][ T9262] dump_stack_lvl+0x16c/0x1f0 [ 259.521431][ T9262] should_fail_ex+0x512/0x640 [ 259.521454][ T9262] get_futex_key+0x1d0/0x1560 [ 259.521471][ T9262] ? lockdep_hardirqs_on+0x7c/0x110 [ 259.521497][ T9262] ? __pfx_get_futex_key+0x10/0x10 [ 259.521513][ T9262] ? __pfx_tcp_sendmsg+0x10/0x10 [ 259.521528][ T9262] ? inet_sendmsg+0xc0/0x140 [ 259.521543][ T9262] ? sock_write_iter+0x325/0x5b0 [ 259.521559][ T9262] futex_wait_setup+0x9d/0x550 [ 259.521586][ T9262] __futex_wait+0x194/0x2f0 [ 259.521608][ T9262] ? __pfx___futex_wait+0x10/0x10 [ 259.521631][ T9262] ? __pfx_futex_wake_mark+0x10/0x10 [ 259.521653][ T9262] ? futex_private_hash_put+0x176/0x300 [ 259.521673][ T9262] ? futex_private_hash_put+0x18a/0x300 [ 259.521691][ T9262] futex_wait+0xe8/0x380 [ 259.521711][ T9262] ? __pfx_futex_wait+0x10/0x10 [ 259.521735][ T9262] ? __lock_acquire+0x62e/0x1ce0 [ 259.521765][ T9262] do_futex+0x229/0x350 [ 259.521784][ T9262] ? __pfx_do_futex+0x10/0x10 [ 259.521807][ T9262] __x64_sys_futex+0x1e0/0x4c0 [ 259.521828][ T9262] ? __pfx___x64_sys_futex+0x10/0x10 [ 259.521847][ T9262] ? __pfx_do_writev+0x10/0x10 [ 259.521867][ T9262] do_syscall_64+0xcd/0x490 [ 259.521887][ T9262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.521902][ T9262] RIP: 0033:0x7f708558ebe9 [ 259.521913][ T9262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.521927][ T9262] RSP: 002b:00007f70863480e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 259.521940][ T9262] RAX: ffffffffffffffda RBX: 00007f70857b5fa8 RCX: 00007f708558ebe9 [ 259.521950][ T9262] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f70857b5fa8 [ 259.521958][ T9262] RBP: 00007f70857b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 259.521966][ T9262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.521974][ T9262] R13: 00007f70857b6038 R14: 00007ffe72601c50 R15: 00007ffe72601d38 [ 259.521992][ T9262] [ 262.349007][ T9324] FAULT_INJECTION: forcing a failure. [ 262.349007][ T9324] name failslab, interval 1, probability 0, space 0, times 0 [ 262.428740][ T9324] CPU: 0 UID: 0 PID: 9324 Comm: syz.4.651 Not tainted syzkaller #0 PREEMPT(full) [ 262.428764][ T9324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 262.428774][ T9324] Call Trace: [ 262.428781][ T9324] [ 262.428787][ T9324] dump_stack_lvl+0x16c/0x1f0 [ 262.428812][ T9324] should_fail_ex+0x512/0x640 [ 262.428833][ T9324] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 262.428854][ T9324] should_failslab+0xc2/0x120 [ 262.428873][ T9324] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 262.428890][ T9324] ? __alloc_skb+0x2b2/0x380 [ 262.428912][ T9324] __alloc_skb+0x2b2/0x380 [ 262.428928][ T9324] ? __pfx___alloc_skb+0x10/0x10 [ 262.428949][ T9324] ? netlink_has_listeners+0x20f/0x430 [ 262.428970][ T9324] alloc_uevent_skb+0x7d/0x210 [ 262.428994][ T9324] kobject_uevent_env+0xca4/0x1870 [ 262.429019][ T9324] ? kobject_put+0xab/0x5a0 [ 262.429041][ T9324] device_add+0x10dd/0x1aa0 [ 262.429057][ T9324] ? __pfx_device_add+0x10/0x10 [ 262.429070][ T9324] ? mark_held_locks+0x49/0x80 [ 262.429094][ T9324] usb_set_configuration+0x1187/0x1e20 [ 262.429130][ T9324] bConfigurationValue_store+0x100/0x180 [ 262.429152][ T9324] ? __pfx_bConfigurationValue_store+0x10/0x10 [ 262.429174][ T9324] ? find_held_lock+0x2b/0x80 [ 262.429189][ T9324] ? sysfs_file_kobj+0xe4/0x290 [ 262.429206][ T9324] ? __pfx_bConfigurationValue_store+0x10/0x10 [ 262.429226][ T9324] dev_attr_store+0x55/0x80 [ 262.429247][ T9324] ? __pfx_dev_attr_store+0x10/0x10 [ 262.429267][ T9324] sysfs_kf_write+0xf2/0x150 [ 262.429284][ T9324] kernfs_fop_write_iter+0x354/0x510 [ 262.429297][ T9324] ? __pfx_sysfs_kf_write+0x10/0x10 [ 262.429314][ T9324] iter_file_splice_write+0xa24/0x12e0 [ 262.429342][ T9324] ? __pfx_iter_file_splice_write+0x10/0x10 [ 262.429361][ T9324] ? __pfx_copy_splice_read+0x10/0x10 [ 262.429387][ T9324] ? __pfx_iter_file_splice_write+0x10/0x10 [ 262.429403][ T9324] direct_splice_actor+0x18f/0x6c0 [ 262.429420][ T9324] splice_direct_to_actor+0x345/0xa30 [ 262.429436][ T9324] ? __pfx_direct_splice_actor+0x10/0x10 [ 262.429455][ T9324] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 262.429475][ T9324] do_splice_direct+0x174/0x240 [ 262.429490][ T9324] ? __pfx_do_splice_direct+0x10/0x10 [ 262.429505][ T9324] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 262.429523][ T9324] ? rw_verify_area+0xcf/0x6c0 [ 262.429547][ T9324] do_sendfile+0xb06/0xe50 [ 262.429567][ T9324] ? __pfx_do_sendfile+0x10/0x10 [ 262.429587][ T9324] ? __x64_sys_futex+0x1e0/0x4c0 [ 262.429604][ T9324] ? __x64_sys_futex+0x1e9/0x4c0 [ 262.429625][ T9324] __x64_sys_sendfile64+0x1d8/0x220 [ 262.429645][ T9324] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 262.429671][ T9324] do_syscall_64+0xcd/0x490 [ 262.429691][ T9324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.429706][ T9324] RIP: 0033:0x7f708558ebe9 [ 262.429719][ T9324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.429733][ T9324] RSP: 002b:00007f7086348038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 262.429747][ T9324] RAX: ffffffffffffffda RBX: 00007f70857b5fa0 RCX: 00007f708558ebe9 [ 262.429757][ T9324] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 262.429765][ T9324] RBP: 00007f7085611e19 R08: 0000000000000000 R09: 0000000000000000 [ 262.429774][ T9324] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 262.429783][ T9324] R13: 00007f70857b6038 R14: 00007f70857b5fa0 R15: 00007ffe72601d38 [ 262.429802][ T9324] [ 262.432239][ T9324] hub 8-0:1.0: USB hub found [ 262.935758][ T5882] Bluetooth: hci0: unexpected event 0x1d length: 10 > 5 [ 262.944167][ T9332] FAULT_INJECTION: forcing a failure. [ 262.944167][ T9332] name failslab, interval 1, probability 0, space 0, times 0 [ 263.027786][ T9332] CPU: 0 UID: 0 PID: 9332 Comm: syz.1.653 Not tainted syzkaller #0 PREEMPT(full) [ 263.027811][ T9332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 263.027822][ T9332] Call Trace: [ 263.027827][ T9332] [ 263.027833][ T9332] dump_stack_lvl+0x16c/0x1f0 [ 263.027858][ T9332] should_fail_ex+0x512/0x640 [ 263.027879][ T9332] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 263.027900][ T9332] should_failslab+0xc2/0x120 [ 263.027918][ T9332] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 263.027935][ T9332] ? __alloc_skb+0x2b2/0x380 [ 263.027957][ T9332] __alloc_skb+0x2b2/0x380 [ 263.027973][ T9332] ? __pfx___alloc_skb+0x10/0x10 [ 263.027990][ T9332] ? __pfx_debug_object_assert_init+0x10/0x10 [ 263.028006][ T9332] ? do_softirq+0xf0/0xf0 [ 263.028023][ T9332] ? __igmp_group_dropped+0x26a/0xe80 [ 263.028046][ T9332] inet_ifmcaddr_notify+0xc7/0x1c0 [ 263.028065][ T9332] ? __pfx_inet_ifmcaddr_notify+0x10/0x10 [ 263.028091][ T9332] __ip_mc_dec_group+0x442/0x5b0 [ 263.028116][ T9332] inetdev_event+0x3b2/0x18a0 [ 263.028138][ T9332] ? ib_netdevice_event+0xfc/0x330 [ 263.028153][ T9332] ? __pfx_inetdev_event+0x10/0x10 [ 263.028174][ T9332] ? cfg802154_netdev_notifier_call+0x391/0xa00 [ 263.028192][ T9332] ? do_raw_spin_unlock+0x172/0x230 [ 263.028213][ T9332] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 263.028241][ T9332] notifier_call_chain+0xbc/0x410 [ 263.028258][ T9332] ? __pfx_inetdev_event+0x10/0x10 [ 263.028284][ T9332] call_netdevice_notifiers_info+0xbe/0x140 [ 263.028309][ T9332] __dev_notify_flags+0x1f7/0x2e0 [ 263.028328][ T9332] ? __pfx___dev_notify_flags+0x10/0x10 [ 263.028352][ T9332] ? __pfx___dev_change_flags+0x10/0x10 [ 263.028376][ T9332] netif_change_flags+0x108/0x160 [ 263.028398][ T9332] dev_change_flags+0xba/0x250 [ 263.028420][ T9332] flags_store+0x187/0x1e0 [ 263.028438][ T9332] ? __pfx_flags_store+0x10/0x10 [ 263.028455][ T9332] ? find_held_lock+0x2b/0x80 [ 263.028471][ T9332] ? __pfx_flags_store+0x10/0x10 [ 263.028487][ T9332] dev_attr_store+0x55/0x80 [ 263.028510][ T9332] ? __pfx_dev_attr_store+0x10/0x10 [ 263.028531][ T9332] sysfs_kf_write+0xf2/0x150 [ 263.028554][ T9332] kernfs_fop_write_iter+0x354/0x510 [ 263.028568][ T9332] ? __pfx_sysfs_kf_write+0x10/0x10 [ 263.028587][ T9332] iter_file_splice_write+0xa24/0x12e0 [ 263.028616][ T9332] ? __pfx_iter_file_splice_write+0x10/0x10 [ 263.028636][ T9332] ? __pfx_copy_splice_read+0x10/0x10 [ 263.028662][ T9332] ? __pfx_iter_file_splice_write+0x10/0x10 [ 263.028680][ T9332] direct_splice_actor+0x18f/0x6c0 [ 263.028697][ T9332] splice_direct_to_actor+0x345/0xa30 [ 263.028713][ T9332] ? __pfx_direct_splice_actor+0x10/0x10 [ 263.028732][ T9332] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 263.028752][ T9332] do_splice_direct+0x174/0x240 [ 263.028767][ T9332] ? __pfx_do_splice_direct+0x10/0x10 [ 263.028782][ T9332] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 263.028799][ T9332] ? rw_verify_area+0xcf/0x6c0 [ 263.028816][ T9332] do_sendfile+0xb06/0xe50 [ 263.028835][ T9332] ? __pfx_do_sendfile+0x10/0x10 [ 263.028854][ T9332] ? __x64_sys_futex+0x1e0/0x4c0 [ 263.028871][ T9332] ? __x64_sys_futex+0x1e9/0x4c0 [ 263.028891][ T9332] __x64_sys_sendfile64+0x1d8/0x220 [ 263.028911][ T9332] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 263.028936][ T9332] do_syscall_64+0xcd/0x490 [ 263.028957][ T9332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.028972][ T9332] RIP: 0033:0x7f0c37b8ebe9 [ 263.028987][ T9332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.029001][ T9332] RSP: 002b:00007f0c38ab1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 263.029016][ T9332] RAX: ffffffffffffffda RBX: 00007f0c37db5fa0 RCX: 00007f0c37b8ebe9 [ 263.029025][ T9332] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000009 [ 263.029034][ T9332] RBP: 00007f0c37c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 263.029043][ T9332] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 263.029051][ T9332] R13: 00007f0c37db6038 R14: 00007f0c37db5fa0 R15: 00007ffe878028f8 [ 263.029071][ T9332] syzkaller syzkaller login: [ 264.216166][ T9324] hub 8-0:1.0: 1 port detected [ 264.420080][ T9354] blktrace: Concurrent blktraces are not allowed on loop2 [ 267.386087][ T8550] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.942288][ T8550] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.475835][ T8550] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.728678][ T8550] bridge_slave_1: left allmulticast mode [ 269.774889][ T8550] bridge_slave_1: left promiscuous mode [ 269.816599][ T8550] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.997963][ T8550] bridge_slave_0: left allmulticast mode [ 269.997994][ T8550] bridge_slave_0: left promiscuous mode [ 269.998172][ T8550] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.186651][ T8550] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.232382][ T8550] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.266615][ T8550] bond0 (unregistering): Released all slaves [ 271.338914][ T9469] lo: entered allmulticast mode [ 271.345887][ T9469] lo: left allmulticast mode [ 273.021475][ T8550] hsr_slave_0: left promiscuous mode [ 273.037610][ T9490] FAULT_INJECTION: forcing a failure. [ 273.037610][ T9490] name failslab, interval 1, probability 0, space 0, times 0 [ 273.067474][ T8550] hsr_slave_1: left promiscuous mode [ 273.094579][ T8550] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.127047][ T9490] CPU: 0 UID: 0 PID: 9490 Comm: syz.4.673 Not tainted syzkaller #0 PREEMPT(full) [ 273.127070][ T9490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 273.127079][ T9490] Call Trace: [ 273.127085][ T9490] [ 273.127091][ T9490] dump_stack_lvl+0x16c/0x1f0 [ 273.127116][ T9490] should_fail_ex+0x512/0x640 [ 273.127137][ T9490] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 273.127158][ T9490] should_failslab+0xc2/0x120 [ 273.127177][ T9490] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 273.127194][ T9490] ? skb_clone+0x190/0x3f0 [ 273.127217][ T9490] skb_clone+0x190/0x3f0 [ 273.127236][ T9490] netlink_broadcast_filtered+0xb76/0xf90 [ 273.127263][ T9490] ? __pfx_netlink_broadcast_filtered+0x10/0x10 [ 273.127281][ T9490] ? sprintf+0xcc/0x100 [ 273.127304][ T9490] ? netlink_has_listeners+0x20f/0x430 [ 273.127325][ T9490] netlink_broadcast+0x39/0x50 [ 273.127344][ T9490] kobject_uevent_env+0xc6a/0x1870 [ 273.127370][ T9490] ? kobject_put+0xab/0x5a0 [ 273.127392][ T9490] device_add+0x10dd/0x1aa0 [ 273.127408][ T9490] ? __pfx_device_add+0x10/0x10 [ 273.127421][ T9490] ? mark_held_locks+0x49/0x80 [ 273.127445][ T9490] usb_set_configuration+0x1187/0x1e20 [ 273.127481][ T9490] bConfigurationValue_store+0x100/0x180 [ 273.127504][ T9490] ? __pfx_bConfigurationValue_store+0x10/0x10 [ 273.127526][ T9490] ? find_held_lock+0x2b/0x80 [ 273.127540][ T9490] ? sysfs_file_kobj+0xe4/0x290 [ 273.127557][ T9490] ? __pfx_bConfigurationValue_store+0x10/0x10 [ 273.127578][ T9490] dev_attr_store+0x55/0x80 [ 273.127598][ T9490] ? __pfx_dev_attr_store+0x10/0x10 [ 273.127618][ T9490] sysfs_kf_write+0xf2/0x150 [ 273.127634][ T9490] kernfs_fop_write_iter+0x354/0x510 [ 273.127648][ T9490] ? __pfx_sysfs_kf_write+0x10/0x10 [ 273.127665][ T9490] iter_file_splice_write+0xa24/0x12e0 [ 273.127693][ T9490] ? __pfx_iter_file_splice_write+0x10/0x10 [ 273.127712][ T9490] ? __pfx_copy_splice_read+0x10/0x10 [ 273.127737][ T9490] ? __pfx_iter_file_splice_write+0x10/0x10 [ 273.127754][ T9490] direct_splice_actor+0x18f/0x6c0 [ 273.127771][ T9490] splice_direct_to_actor+0x345/0xa30 [ 273.127787][ T9490] ? __pfx_direct_splice_actor+0x10/0x10 [ 273.127806][ T9490] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 273.127835][ T9490] do_splice_direct+0x174/0x240 [ 273.127850][ T9490] ? __pfx_do_splice_direct+0x10/0x10 [ 273.127866][ T9490] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 273.127885][ T9490] ? rw_verify_area+0xcf/0x6c0 [ 273.127902][ T9490] do_sendfile+0xb06/0xe50 [ 273.127922][ T9490] ? __pfx_do_sendfile+0x10/0x10 [ 273.127940][ T9490] ? __x64_sys_futex+0x1e0/0x4c0 [ 273.127957][ T9490] ? __x64_sys_futex+0x1e9/0x4c0 [ 273.127976][ T9490] __x64_sys_sendfile64+0x1d8/0x220 [ 273.127996][ T9490] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 273.128022][ T9490] do_syscall_64+0xcd/0x490 [ 273.128042][ T9490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.128057][ T9490] RIP: 0033:0x7f708558ebe9 [ 273.128070][ T9490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.128088][ T9490] RSP: 002b:00007f7086348038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 273.128103][ T9490] RAX: ffffffffffffffda RBX: 00007f70857b5fa0 RCX: 00007f708558ebe9 [ 273.128112][ T9490] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 273.128121][ T9490] RBP: 00007f7085611e19 R08: 0000000000000000 R09: 0000000000000000 [ 273.128130][ T9490] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 273.128139][ T9490] R13: 00007f70857b6038 R14: 00007f70857b5fa0 R15: 00007ffe72601d38 [ 273.128158][ T9490] [ 273.132539][ T9490] hub 8-0:1.0: USB hub found [ 273.506401][ T8550] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.699439][ T8550] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.733114][ T8550] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.132909][ T8550] veth1_macvtap: left promiscuous mode [ 274.174356][ T8550] veth0_macvtap: left promiscuous mode [ 274.206589][ T8550] veth1_vlan: left promiscuous mode [ 274.223499][ T8550] veth0_vlan: left promiscuous mode syzkaller syzkaller login: [ 275.057974][ T9490] hub 8-0:1.0: 1 port detected [ 275.406204][ T9518] ptp ptp0: only physical clock in use now [ 276.194846][ T8550] team0 (unregistering): Port device team_slave_1 removed [ 276.500321][ T8550] team0 (unregistering): Port device team_slave_0 removed [ 278.880928][ T9542] random: crng reseeded on system resumption [ 279.215640][ T9541] FAULT_INJECTION: forcing a failure. [ 279.215640][ T9541] name failslab, interval 1, probability 0, space 0, times 0 [ 279.321977][ T9541] CPU: 0 UID: 0 PID: 9541 Comm: syz.1.682 Not tainted syzkaller #0 PREEMPT(full) [ 279.321998][ T9541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 279.322007][ T9541] Call Trace: [ 279.322014][ T9541] [ 279.322019][ T9541] dump_stack_lvl+0x16c/0x1f0 [ 279.322043][ T9541] should_fail_ex+0x512/0x640 [ 279.322064][ T9541] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 279.322085][ T9541] should_failslab+0xc2/0x120 [ 279.322104][ T9541] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 279.322120][ T9541] ? __asan_memcpy+0x3c/0x60 [ 279.322134][ T9541] ? __kernfs_new_node+0xd2/0x8e0 [ 279.322154][ T9541] __kernfs_new_node+0xd2/0x8e0 [ 279.322175][ T9541] ? __pfx___kernfs_new_node+0x10/0x10 [ 279.322198][ T9541] ? find_held_lock+0x2b/0x80 [ 279.322213][ T9541] ? kernfs_root+0xee/0x2a0 [ 279.322234][ T9541] kernfs_new_node+0x13c/0x1e0 [ 279.322257][ T9541] kernfs_create_link+0xcc/0x240 [ 279.322273][ T9541] sysfs_do_create_link_sd+0x90/0x140 [ 279.322292][ T9541] sysfs_create_link+0x61/0xc0 [ 279.322318][ T9541] bus_add_device+0x13f/0x480 [ 279.322338][ T9541] device_add+0x986/0x1aa0 [ 279.322354][ T9541] ? __pfx_device_add+0x10/0x10 [ 279.322367][ T9541] ? mark_held_locks+0x49/0x80 [ 279.322391][ T9541] usb_set_configuration+0x1187/0x1e20 [ 279.322427][ T9541] bConfigurationValue_store+0x100/0x180 [ 279.322449][ T9541] ? __pfx_bConfigurationValue_store+0x10/0x10 [ 279.322471][ T9541] ? find_held_lock+0x2b/0x80 [ 279.322486][ T9541] ? sysfs_file_kobj+0xe4/0x290 [ 279.322501][ T9541] ? __pfx_bConfigurationValue_store+0x10/0x10 [ 279.322522][ T9541] dev_attr_store+0x55/0x80 [ 279.322553][ T9541] ? __pfx_dev_attr_store+0x10/0x10 [ 279.322573][ T9541] sysfs_kf_write+0xf2/0x150 [ 279.322590][ T9541] kernfs_fop_write_iter+0x354/0x510 [ 279.322604][ T9541] ? __pfx_sysfs_kf_write+0x10/0x10 [ 279.322622][ T9541] iter_file_splice_write+0xa24/0x12e0 [ 279.322650][ T9541] ? __pfx_iter_file_splice_write+0x10/0x10 [ 279.322669][ T9541] ? __pfx_copy_splice_read+0x10/0x10 [ 279.322694][ T9541] ? __pfx_iter_file_splice_write+0x10/0x10 [ 279.322711][ T9541] direct_splice_actor+0x18f/0x6c0 [ 279.322728][ T9541] splice_direct_to_actor+0x345/0xa30 [ 279.322744][ T9541] ? __pfx_direct_splice_actor+0x10/0x10 [ 279.322763][ T9541] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 279.322783][ T9541] do_splice_direct+0x174/0x240 [ 279.322798][ T9541] ? __pfx_do_splice_direct+0x10/0x10 [ 279.322813][ T9541] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 279.322830][ T9541] ? rw_verify_area+0xcf/0x6c0 [ 279.322846][ T9541] do_sendfile+0xb06/0xe50 [ 279.322865][ T9541] ? __pfx_do_sendfile+0x10/0x10 [ 279.322884][ T9541] ? __x64_sys_futex+0x1e0/0x4c0 [ 279.322901][ T9541] ? __x64_sys_futex+0x1e9/0x4c0 [ 279.322920][ T9541] __x64_sys_sendfile64+0x1d8/0x220 [ 279.322940][ T9541] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 279.322965][ T9541] do_syscall_64+0xcd/0x490 [ 279.322986][ T9541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.323001][ T9541] RIP: 0033:0x7f0c37b8ebe9 [ 279.323017][ T9541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.323031][ T9541] RSP: 002b:00007f0c38ab1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 279.323046][ T9541] RAX: ffffffffffffffda RBX: 00007f0c37db5fa0 RCX: 00007f0c37b8ebe9 [ 279.323056][ T9541] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 279.323065][ T9541] RBP: 00007f0c37c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 279.323073][ T9541] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 279.323082][ T9541] R13: 00007f0c37db6038 R14: 00007f0c37db5fa0 R15: 00007ffe878028f8 [ 279.323102][ T9541] [ 279.691260][ T9541] usb usb8: device_add(8-0:1.0) --> -12 syzkaller syzkaller login: [ 281.669316][ T9580] FAULT_INJECTION: forcing a failure. [ 281.669316][ T9580] name failslab, interval 1, probability 0, space 0, times 0 [ 281.745643][ T9584] netlink: 80 bytes leftover after parsing attributes in process `syz.1.689'. [ 281.760628][ T30] audit: type=1800 audit(6051267318.216:17): pid=9583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.689" name="discovery_nqn" dev="configfs" ino=26730 res=0 errno=0 [ 281.793167][ T9580] CPU: 0 UID: 0 PID: 9580 Comm: syz.4.688 Not tainted syzkaller #0 PREEMPT(full) [ 281.793191][ T9580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 281.793200][ T9580] Call Trace: [ 281.793206][ T9580] [ 281.793212][ T9580] dump_stack_lvl+0x16c/0x1f0 [ 281.793270][ T9580] should_fail_ex+0x512/0x640 [ 281.793291][ T9580] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 281.793311][ T9580] should_failslab+0xc2/0x120 [ 281.793331][ T9580] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 281.793348][ T9580] ? __d_alloc+0x32/0xae0 [ 281.793368][ T9580] __d_alloc+0x32/0xae0 [ 281.793387][ T9580] d_alloc_pseudo+0x1c/0xc0 [ 281.793408][ T9580] alloc_file_pseudo+0xcf/0x230 [ 281.793429][ T9580] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 281.793451][ T9580] ? alloc_fd+0x471/0x7d0 [ 281.793468][ T9580] sock_alloc_file+0x50/0x210 [ 281.793489][ T9580] __sys_socket+0x1c0/0x260 [ 281.793504][ T9580] ? __pfx___sys_socket+0x10/0x10 [ 281.793518][ T9580] ? xfd_validate_state+0x61/0x180 [ 281.793538][ T9580] ? __pfx_ksys_write+0x10/0x10 [ 281.793557][ T9580] __x64_sys_socket+0x72/0xb0 [ 281.793571][ T9580] ? lockdep_hardirqs_on+0x7c/0x110 [ 281.793588][ T9580] do_syscall_64+0xcd/0x490 [ 281.793608][ T9580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.793622][ T9580] RIP: 0033:0x7f708558ebe9 [ 281.793634][ T9580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.793648][ T9580] RSP: 002b:00007f70837f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 281.793662][ T9580] RAX: ffffffffffffffda RBX: 00007f70857b6180 RCX: 00007f708558ebe9 [ 281.793671][ T9580] RDX: 000000000000003a RSI: 0000000000000002 RDI: 000000000000000a [ 281.793679][ T9580] RBP: 00007f7085611e19 R08: 0000000000000000 R09: 0000000000000000 [ 281.793688][ T9580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 281.793697][ T9580] R13: 00007f70857b6218 R14: 00007f70857b6180 R15: 00007ffe72601d38 [ 281.793715][ T9580] [ 282.270969][ T9584] netlink: 80 bytes leftover after parsing attributes in process `syz.1.689'. [ 282.317841][ T9584] netlink: 80 bytes leftover after parsing attributes in process `syz.1.689'. [ 282.367318][ T9584] netlink: 80 bytes leftover after parsing attributes in process `syz.1.689'. [ 282.390363][ T9568] zswap: compressor not available [ 282.413979][ T9584] netlink: 80 bytes leftover after parsing attributes in process `syz.1.689'. [ 286.225194][ T9610] Process accounting paused [ 287.432783][ T9665] syz.2.698 (9665): attempted to duplicate a private mapping with mremap. This is not supported. [ 287.513890][ T9678] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(5) [ 288.770840][ T9700] lo: entered allmulticast mode [ 288.934189][ T9700] lo: left allmulticast mode [ 289.842994][ T9734] FAULT_INJECTION: forcing a failure. [ 289.842994][ T9734] name failslab, interval 1, probability 0, space 0, times 0 [ 290.039599][ T9734] CPU: 0 UID: 0 PID: 9734 Comm: syz.4.708 Not tainted syzkaller #0 PREEMPT(full) [ 290.039635][ T9734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 290.039644][ T9734] Call Trace: [ 290.039650][ T9734] [ 290.039656][ T9734] dump_stack_lvl+0x16c/0x1f0 [ 290.039682][ T9734] should_fail_ex+0x512/0x640 [ 290.039703][ T9734] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 290.039721][ T9734] should_failslab+0xc2/0x120 [ 290.039740][ T9734] __kmalloc_cache_noprof+0x6a/0x3e0 [ 290.039755][ T9734] ? mark_held_locks+0x49/0x80 [ 290.039772][ T9734] ? rfkill_fop_open+0x1b6/0x750 [ 290.039790][ T9734] rfkill_fop_open+0x1b6/0x750 [ 290.039806][ T9734] ? __pfx_rfkill_fop_open+0x10/0x10 [ 290.039821][ T9734] misc_open+0x35a/0x420 [ 290.039837][ T9734] ? __pfx_misc_open+0x10/0x10 [ 290.039851][ T9734] chrdev_open+0x234/0x6a0 [ 290.039869][ T9734] ? __pfx_apparmor_file_open+0x10/0x10 [ 290.039885][ T9734] ? __pfx_chrdev_open+0x10/0x10 [ 290.039904][ T9734] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 290.039923][ T9734] do_dentry_open+0x982/0x1530 [ 290.039941][ T9734] ? __pfx_chrdev_open+0x10/0x10 [ 290.039963][ T9734] vfs_open+0x82/0x3f0 [ 290.039986][ T9734] path_openat+0x1de4/0x2cb0 [ 290.040009][ T9734] ? __pfx_path_openat+0x10/0x10 [ 290.040031][ T9734] do_filp_open+0x20b/0x470 [ 290.040048][ T9734] ? __pfx_do_filp_open+0x10/0x10 [ 290.040078][ T9734] ? alloc_fd+0x471/0x7d0 [ 290.040099][ T9734] do_sys_openat2+0x11b/0x1d0 [ 290.040119][ T9734] ? __pfx_do_sys_openat2+0x10/0x10 [ 290.040147][ T9734] __x64_sys_openat+0x174/0x210 [ 290.040169][ T9734] ? __pfx___x64_sys_openat+0x10/0x10 [ 290.040197][ T9734] do_syscall_64+0xcd/0x490 [ 290.040218][ T9734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.040232][ T9734] RIP: 0033:0x7f708558ebe9 [ 290.040245][ T9734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.040259][ T9734] RSP: 002b:00007f7086327038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 290.040273][ T9734] RAX: ffffffffffffffda RBX: 00007f70857b6090 RCX: 00007f708558ebe9 [ 290.040282][ T9734] RDX: 0000000000000400 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 290.040291][ T9734] RBP: 00007f7085611e19 R08: 0000000000000000 R09: 0000000000000000 [ 290.040299][ T9734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 290.040307][ T9734] R13: 00007f70857b6128 R14: 00007f70857b6090 R15: 00007ffe72601d38 [ 290.040327][ T9734] [ 291.242908][ T9749] hub 8-0:1.0: USB hub found [ 291.256917][ T9749] hub 8-0:1.0: 1 port detected [ 291.256938][ T9749] FAULT_INJECTION: forcing a failure. [ 291.256938][ T9749] name failslab, interval 1, probability 0, space 0, times 0 [ 291.256960][ T9749] CPU: 0 UID: 0 PID: 9749 Comm: syz.4.712 Not tainted syzkaller #0 PREEMPT(full) [ 291.256977][ T9749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 291.256986][ T9749] Call Trace: [ 291.256992][ T9749] [ 291.256998][ T9749] dump_stack_lvl+0x16c/0x1f0 [ 291.257020][ T9749] should_fail_ex+0x512/0x640 [ 291.257044][ T9749] ? __kmalloc_noprof+0xbf/0x510 [ 291.257062][ T9749] ? hub_probe+0x12c4/0x3480 [ 291.257084][ T9749] should_failslab+0xc2/0x120 [ 291.257103][ T9749] __kmalloc_noprof+0xd2/0x510 [ 291.257125][ T9749] hub_probe+0x12c4/0x3480 [ 291.257151][ T9749] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 291.257173][ T9749] ? __pfx_hub_probe+0x10/0x10 [ 291.257192][ T9749] ? mark_held_locks+0x49/0x80 [ 291.257209][ T9749] ? setup_data_data_read+0x460/0x530 [ 291.257226][ T9749] ? mark_held_locks+0x49/0x80 [ 291.257243][ T9749] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 291.257262][ T9749] usb_probe_interface+0x300/0xa40 [ 291.257279][ T9749] ? __pfx_usb_probe_interface+0x10/0x10 [ 291.257295][ T9749] really_probe+0x241/0xa90 [ 291.257317][ T9749] __driver_probe_device+0x1de/0x440 [ 291.257338][ T9749] driver_probe_device+0x4c/0x1b0 [ 291.257359][ T9749] __device_attach_driver+0x1df/0x310 [ 291.257379][ T9749] ? __pfx___device_attach_driver+0x10/0x10 [ 291.257398][ T9749] bus_for_each_drv+0x159/0x1e0 [ 291.257414][ T9749] ? __pfx_bus_for_each_drv+0x10/0x10 [ 291.257431][ T9749] ? lockdep_hardirqs_on+0x7c/0x110 [ 291.257448][ T9749] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 291.257467][ T9749] __device_attach+0x1e4/0x4b0 [ 291.257486][ T9749] ? __pfx___device_attach+0x10/0x10 [ 291.257506][ T9749] ? do_raw_spin_unlock+0x172/0x230 [ 291.257530][ T9749] bus_probe_device+0x17f/0x1c0 [ 291.257558][ T9749] device_add+0x1148/0x1aa0 [ 291.257573][ T9749] ? __pfx_device_add+0x10/0x10 [ 291.257587][ T9749] ? mark_held_locks+0x49/0x80 [ 291.257611][ T9749] usb_set_configuration+0x1187/0x1e20 [ 291.257646][ T9749] bConfigurationValue_store+0x100/0x180 [ 291.257669][ T9749] ? __pfx_bConfigurationValue_store+0x10/0x10 [ 291.257692][ T9749] ? find_held_lock+0x2b/0x80 [ 291.257705][ T9749] ? sysfs_file_kobj+0xe4/0x290 [ 291.257722][ T9749] ? __pfx_bConfigurationValue_store+0x10/0x10 [ 291.257743][ T9749] dev_attr_store+0x55/0x80 [ 291.257763][ T9749] ? __pfx_dev_attr_store+0x10/0x10 [ 291.257783][ T9749] sysfs_kf_write+0xf2/0x150 [ 291.257800][ T9749] kernfs_fop_write_iter+0x354/0x510 [ 291.257813][ T9749] ? __pfx_sysfs_kf_write+0x10/0x10 [ 291.257830][ T9749] iter_file_splice_write+0xa24/0x12e0 [ 291.257858][ T9749] ? __pfx_iter_file_splice_write+0x10/0x10 [ 291.257877][ T9749] ? __pfx_copy_splice_read+0x10/0x10 [ 291.257902][ T9749] ? __pfx_iter_file_splice_write+0x10/0x10 [ 291.257919][ T9749] direct_splice_actor+0x18f/0x6c0 [ 291.257937][ T9749] splice_direct_to_actor+0x345/0xa30 [ 291.257952][ T9749] ? __pfx_direct_splice_actor+0x10/0x10 [ 291.257971][ T9749] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 291.257992][ T9749] do_splice_direct+0x174/0x240 [ 291.258007][ T9749] ? __pfx_do_splice_direct+0x10/0x10 [ 291.258022][ T9749] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 291.258039][ T9749] ? rw_verify_area+0xcf/0x6c0 [ 291.258055][ T9749] do_sendfile+0xb06/0xe50 [ 291.258074][ T9749] ? __pfx_do_sendfile+0x10/0x10 [ 291.258093][ T9749] ? __x64_sys_futex+0x1e0/0x4c0 [ 291.258110][ T9749] ? __x64_sys_futex+0x1e9/0x4c0 [ 291.258129][ T9749] __x64_sys_sendfile64+0x1d8/0x220 [ 291.258149][ T9749] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 291.258174][ T9749] do_syscall_64+0xcd/0x490 [ 291.258195][ T9749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.258209][ T9749] RIP: 0033:0x7f708558ebe9 [ 291.258223][ T9749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.258236][ T9749] RSP: 002b:00007f7086327038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 291.258251][ T9749] RAX: ffffffffffffffda RBX: 00007f70857b6090 RCX: 00007f708558ebe9 [ 291.258260][ T9749] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 291.258269][ T9749] RBP: 00007f7085611e19 R08: 0000000000000000 R09: 0000000000000000 [ 291.258277][ T9749] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 291.258286][ T9749] R13: 00007f70857b6128 R14: 00007f70857b6090 R15: 00007ffe72601d38 [ 291.258306][ T9749] [ 291.269403][ T9749] hub 8-0:1.0: config failed, out of memory (err -12) [ 291.880681][ T9767] binder: 9759:9767 ioctl c00c620f 200000000180 returned -22 [ 292.784194][ T9785] Invalid ELF header magic: != ELF [ 293.260852][ T9787] Invalid ELF header magic: != ELF [ 293.367741][ T9783] netlink: 28 bytes leftover after parsing attributes in process `syz.1.716'. [ 293.432432][ T9792] hub 8-0:1.0: USB hub found [ 293.444113][ T9792] hub 8-0:1.0: 1 port detected [ 295.257337][ T9813] program syz.1.721 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 296.189256][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 296.189310][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 296.190957][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 296.190989][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 296.247257][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 296.247315][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 296.281883][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 296.281925][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 297.824183][ T9754] tty tty48: ldisc open failed (-12), clearing slot 47 [ 297.861991][ T9811] tty tty53: ldisc open failed (-12), clearing slot 52 [ 297.889313][ T9815] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 297.896820][ T9817] ttyS ttyS2: ldisc open failed (-12), clearing slot 2 syzkaller syzkaller login: [ 298.304071][ T9845] FAULT_INJECTION: forcing a failure. [ 298.304071][ T9845] name failslab, interval 1, probability 0, space 0, times 0 [ 298.364294][ T9845] CPU: 0 UID: 0 PID: 9845 Comm: syz.1.724 Not tainted syzkaller #0 PREEMPT(full) [ 298.364318][ T9845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 298.364328][ T9845] Call Trace: [ 298.364334][ T9845] [ 298.364340][ T9845] dump_stack_lvl+0x16c/0x1f0 [ 298.364365][ T9845] should_fail_ex+0x512/0x640 [ 298.364385][ T9845] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 298.364406][ T9845] should_failslab+0xc2/0x120 [ 298.364425][ T9845] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 298.364441][ T9845] ? __pfx_tcp_current_mss+0x10/0x10 [ 298.364457][ T9845] ? __alloc_skb+0x2b2/0x380 [ 298.364477][ T9845] __alloc_skb+0x2b2/0x380 [ 298.364494][ T9845] ? __pfx___alloc_skb+0x10/0x10 [ 298.364518][ T9845] tcp_stream_alloc_skb+0x34/0x570 [ 298.364535][ T9845] tcp_sendmsg_locked+0x12d0/0x42a0 [ 298.364554][ T9845] ? __lock_acquire+0xb97/0x1ce0 [ 298.364579][ T9845] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 298.364595][ T9845] ? do_raw_spin_lock+0x12c/0x2b0 [ 298.364616][ T9845] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 298.364641][ T9845] ? __local_bh_enable_ip+0xa4/0x120 [ 298.364660][ T9845] tcp_sendmsg+0x2e/0x50 [ 298.364672][ T9845] ? __pfx_tcp_sendmsg+0x10/0x10 [ 298.364685][ T9845] inet_sendmsg+0xb9/0x140 [ 298.364701][ T9845] sock_write_iter+0x4aa/0x5b0 [ 298.364715][ T9845] ? __pfx_sock_write_iter+0x10/0x10 [ 298.364736][ T9845] ? __futex_wait+0x24c/0x2f0 [ 298.364756][ T9845] ? copy_iovec_from_user+0x131/0x170 [ 298.364779][ T9845] do_iter_readv_writev+0x65f/0x9e0 [ 298.364796][ T9845] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 298.364815][ T9845] ? bpf_lsm_file_permission+0x9/0x10 [ 298.364839][ T9845] ? security_file_permission+0x71/0x210 [ 298.364859][ T9845] ? rw_verify_area+0xcf/0x6c0 [ 298.364876][ T9845] vfs_writev+0x35f/0xde0 [ 298.364894][ T9845] ? __lock_acquire+0x62e/0x1ce0 [ 298.364913][ T9845] ? __pfx_vfs_writev+0x10/0x10 [ 298.364950][ T9845] ? __fget_files+0x20e/0x3c0 [ 298.364972][ T9845] ? do_writev+0x28c/0x340 [ 298.364987][ T9845] do_writev+0x28c/0x340 [ 298.365002][ T9845] ? __pfx_do_writev+0x10/0x10 [ 298.365024][ T9845] do_syscall_64+0xcd/0x490 [ 298.365045][ T9845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.365060][ T9845] RIP: 0033:0x7f0c37b8ebe9 [ 298.365072][ T9845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.365087][ T9845] RSP: 002b:00007f0c38a90038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 298.365101][ T9845] RAX: ffffffffffffffda RBX: 00007f0c37db6090 RCX: 00007f0c37b8ebe9 [ 298.365110][ T9845] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 298.365119][ T9845] RBP: 00007f0c37c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 298.365127][ T9845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 298.365136][ T9845] R13: 00007f0c37db6128 R14: 00007f0c37db6090 R15: 00007ffe878028f8 [ 298.365154][ T9845] [ 299.358612][ T9848] hub 8-0:1.0: USB hub found [ 299.403613][ T9848] hub 8-0:1.0: 1 port detected [ 299.459232][ T9851] netlink: 28 bytes leftover after parsing attributes in process `syz.2.728'. [ 299.678088][ T9856] hub 8-0:1.0: USB hub found [ 299.704783][ T9856] hub 8-0:1.0: 1 port detected [ 301.189679][ T9880] sctp: [Deprecated]: syz.4.732 (pid 9880) Use of int in max_burst socket option deprecated. [ 301.189679][ T9880] Use struct sctp_assoc_value instead [ 302.024541][ T9889] Console: switching to colour frame buffer device 128x48 [ 302.558931][ T9901] FAULT_INJECTION: forcing a failure. [ 302.558931][ T9901] name failslab, interval 1, probability 0, space 0, times 0 [ 302.658729][ T9901] CPU: 0 UID: 0 PID: 9901 Comm: syz.2.736 Not tainted syzkaller #0 PREEMPT(full) [ 302.658752][ T9901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 302.658762][ T9901] Call Trace: [ 302.658767][ T9901] [ 302.658774][ T9901] dump_stack_lvl+0x16c/0x1f0 [ 302.658799][ T9901] should_fail_ex+0x512/0x640 [ 302.658820][ T9901] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 302.658842][ T9901] should_failslab+0xc2/0x120 [ 302.658861][ T9901] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 302.658877][ T9901] ? __pfx_tcp_current_mss+0x10/0x10 [ 302.658893][ T9901] ? __alloc_skb+0x2b2/0x380 [ 302.658914][ T9901] __alloc_skb+0x2b2/0x380 [ 302.658931][ T9901] ? __pfx___alloc_skb+0x10/0x10 [ 302.658954][ T9901] tcp_stream_alloc_skb+0x34/0x570 [ 302.658971][ T9901] tcp_sendmsg_locked+0x12d0/0x42a0 [ 302.658990][ T9901] ? __lock_acquire+0xb97/0x1ce0 [ 302.659015][ T9901] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 302.659031][ T9901] ? do_raw_spin_lock+0x12c/0x2b0 [ 302.659052][ T9901] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 302.659077][ T9901] ? __local_bh_enable_ip+0xa4/0x120 [ 302.659096][ T9901] tcp_sendmsg+0x2e/0x50 [ 302.659107][ T9901] ? __pfx_tcp_sendmsg+0x10/0x10 [ 302.659120][ T9901] inet_sendmsg+0xb9/0x140 [ 302.659136][ T9901] sock_write_iter+0x4aa/0x5b0 [ 302.659150][ T9901] ? __pfx_sock_write_iter+0x10/0x10 [ 302.659171][ T9901] ? __futex_wait+0x24c/0x2f0 [ 302.659191][ T9901] ? copy_iovec_from_user+0x131/0x170 [ 302.659215][ T9901] do_iter_readv_writev+0x65f/0x9e0 [ 302.659232][ T9901] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 302.659251][ T9901] ? bpf_lsm_file_permission+0x9/0x10 [ 302.659270][ T9901] ? security_file_permission+0x71/0x210 [ 302.659290][ T9901] ? rw_verify_area+0xcf/0x6c0 [ 302.659306][ T9901] vfs_writev+0x35f/0xde0 [ 302.659323][ T9901] ? __lock_acquire+0x62e/0x1ce0 [ 302.659342][ T9901] ? __pfx_vfs_writev+0x10/0x10 [ 302.659370][ T9901] ? __fget_files+0x20e/0x3c0 [ 302.659390][ T9901] ? do_writev+0x28c/0x340 [ 302.659404][ T9901] do_writev+0x28c/0x340 [ 302.659418][ T9901] ? __pfx_do_writev+0x10/0x10 [ 302.659438][ T9901] do_syscall_64+0xcd/0x490 [ 302.659458][ T9901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.659473][ T9901] RIP: 0033:0x7fc093b8ebe9 [ 302.659486][ T9901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.659500][ T9901] RSP: 002b:00007fc094a43038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 302.659514][ T9901] RAX: ffffffffffffffda RBX: 00007fc093db5fa0 RCX: 00007fc093b8ebe9 [ 302.659523][ T9901] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 302.659531][ T9901] RBP: 00007fc093c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 302.659539][ T9901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 302.659548][ T9901] R13: 00007fc093db6038 R14: 00007fc093db5fa0 R15: 00007ffd01d09fd8 [ 302.659567][ T9901] [ 302.955167][ C0] vkms_vblank_simulate: vblank timer overrun [ 303.801759][ T30] audit: type=1800 audit(6051267340.253:18): pid=9912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.737" name="SYSV00000400" dev="tmpfs" ino=0 res=0 errno=0 [ 303.823008][ C0] vkms_vblank_simulate: vblank timer overrun [ 305.265840][ T9946] zero sized request [ 307.644527][T10006] ubi0: attaching mtd1 [ 307.651668][T10004] FAULT_INJECTION: forcing a failure. [ 307.651668][T10004] name fail_futex, interval 1, probability 0, space 0, times 0 [ 307.675882][T10006] ubi0 error: ubi_attach_mtd_dev: bad VID header (16389) or data offsets (16453) [ 307.842774][T10004] CPU: 0 UID: 0 PID: 10004 Comm: syz.4.750 Not tainted syzkaller #0 PREEMPT(full) [ 307.842797][T10004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 307.842817][T10004] Call Trace: [ 307.842825][T10004] [ 307.842830][T10004] dump_stack_lvl+0x16c/0x1f0 [ 307.842854][T10004] should_fail_ex+0x512/0x640 [ 307.842876][T10004] get_futex_key+0x1d0/0x1560 [ 307.842895][T10004] ? __pfx_get_futex_key+0x10/0x10 [ 307.842911][T10004] ? __mutex_trylock_common+0xe9/0x250 [ 307.842935][T10004] futex_wake+0xea/0x530 [ 307.842956][T10004] ? __pfx_futex_wake+0x10/0x10 [ 307.842983][T10004] do_futex+0x1e3/0x350 [ 307.843001][T10004] ? __pfx_do_futex+0x10/0x10 [ 307.843016][T10004] ? __might_fault+0xe3/0x190 [ 307.843038][T10004] mm_release+0x24e/0x300 [ 307.843054][T10004] do_exit+0x68e/0x2bf0 [ 307.843077][T10004] ? __pfx_do_exit+0x10/0x10 [ 307.843095][T10004] ? do_raw_spin_lock+0x12c/0x2b0 [ 307.843120][T10004] ? find_held_lock+0x2b/0x80 [ 307.843141][T10004] do_group_exit+0xd3/0x2a0 [ 307.843228][T10004] get_signal+0x2673/0x26d0 [ 307.843263][T10004] ? __pfx_get_signal+0x10/0x10 [ 307.843279][T10004] ? do_futex+0x122/0x350 [ 307.843296][T10004] ? __pfx_do_futex+0x10/0x10 [ 307.843315][T10004] arch_do_signal_or_restart+0x8f/0x790 [ 307.843335][T10004] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 307.843359][T10004] ? fdget+0x187/0x210 [ 307.843377][T10004] exit_to_user_mode_loop+0x84/0x110 [ 307.843399][T10004] do_syscall_64+0x3f6/0x490 [ 307.843428][T10004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.843443][T10004] RIP: 0033:0x7f708558ebe9 [ 307.843456][T10004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.843473][T10004] RSP: 002b:00007f70863480e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 307.843489][T10004] RAX: fffffffffffffe00 RBX: 00007f70857b5fa8 RCX: 00007f708558ebe9 [ 307.843501][T10004] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f70857b5fa8 [ 307.843510][T10004] RBP: 00007f70857b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 307.843518][T10004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 307.843526][T10004] R13: 00007f70857b6038 R14: 00007ffe72601c50 R15: 00007ffe72601d38 [ 307.843545][T10004] [ 312.843082][T10077] net_ratelimit: 250 callbacks suppressed [ 312.843099][T10077] netlink: zone id is out of range [ 312.936547][T10077] netlink: zone id is out of range [ 314.767476][T10112] FAULT_INJECTION: forcing a failure. [ 314.767476][T10112] name failslab, interval 1, probability 0, space 0, times 0 [ 314.847777][T10112] CPU: 0 UID: 0 PID: 10112 Comm: syz.3.765 Not tainted syzkaller #0 PREEMPT(full) [ 314.847800][T10112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 314.847810][T10112] Call Trace: [ 314.847816][T10112] [ 314.847822][T10112] dump_stack_lvl+0x16c/0x1f0 [ 314.847848][T10112] should_fail_ex+0x512/0x640 [ 314.847868][T10112] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 314.847888][T10112] should_failslab+0xc2/0x120 [ 314.847909][T10112] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 314.847924][T10112] ? __asan_memcpy+0x3c/0x60 [ 314.847938][T10112] ? __kernfs_new_node+0xd2/0x8e0 [ 314.847959][T10112] __kernfs_new_node+0xd2/0x8e0 [ 314.847979][T10112] ? __pfx___kernfs_new_node+0x10/0x10 [ 314.848011][T10112] ? find_held_lock+0x2b/0x80 [ 314.848027][T10112] ? kernfs_root+0xee/0x2a0 [ 314.848050][T10112] kernfs_new_node+0x13c/0x1e0 [ 314.848075][T10112] kernfs_create_link+0xcc/0x240 [ 314.848092][T10112] sysfs_do_create_link_sd+0x90/0x140 [ 314.848112][T10112] sysfs_create_link+0x61/0xc0 [ 314.848129][T10112] bus_add_device+0x13f/0x480 [ 314.848149][T10112] device_add+0x986/0x1aa0 [ 314.848164][T10112] ? __pfx_device_add+0x10/0x10 [ 314.848177][T10112] ? mark_held_locks+0x49/0x80 [ 314.848199][T10112] usb_set_configuration+0x1187/0x1e20 [ 314.848234][T10112] bConfigurationValue_store+0x100/0x180 [ 314.848256][T10112] ? __pfx_bConfigurationValue_store+0x10/0x10 [ 314.848279][T10112] ? find_held_lock+0x2b/0x80 [ 314.848293][T10112] ? sysfs_file_kobj+0xe4/0x290 [ 314.848308][T10112] ? __pfx_bConfigurationValue_store+0x10/0x10 [ 314.848329][T10112] dev_attr_store+0x55/0x80 [ 314.848350][T10112] ? __pfx_dev_attr_store+0x10/0x10 [ 314.848370][T10112] sysfs_kf_write+0xf2/0x150 [ 314.848386][T10112] kernfs_fop_write_iter+0x354/0x510 [ 314.848399][T10112] ? __pfx_sysfs_kf_write+0x10/0x10 [ 314.848417][T10112] iter_file_splice_write+0xa24/0x12e0 [ 314.848444][T10112] ? __pfx_iter_file_splice_write+0x10/0x10 [ 314.848463][T10112] ? __pfx_copy_splice_read+0x10/0x10 [ 314.848488][T10112] ? __pfx_iter_file_splice_write+0x10/0x10 [ 314.848505][T10112] direct_splice_actor+0x18f/0x6c0 [ 314.848522][T10112] splice_direct_to_actor+0x345/0xa30 [ 314.848538][T10112] ? __pfx_direct_splice_actor+0x10/0x10 [ 314.848556][T10112] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 314.848577][T10112] do_splice_direct+0x174/0x240 [ 314.848592][T10112] ? __pfx_do_splice_direct+0x10/0x10 [ 314.848607][T10112] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 314.848624][T10112] ? rw_verify_area+0xcf/0x6c0 [ 314.848640][T10112] do_sendfile+0xb06/0xe50 [ 314.848659][T10112] ? __pfx_do_sendfile+0x10/0x10 [ 314.848674][T10112] ? arch_do_signal_or_restart+0x211/0x790 [ 314.848695][T10112] ? __x64_sys_futex+0x1e0/0x4c0 [ 314.848711][T10112] ? __x64_sys_futex+0x1e9/0x4c0 [ 314.848731][T10112] __x64_sys_sendfile64+0x1d8/0x220 [ 314.848750][T10112] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 314.848775][T10112] do_syscall_64+0xcd/0x490 [ 314.848796][T10112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.848814][T10112] RIP: 0033:0x7fb67598ebe9 [ 314.848828][T10112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.848842][T10112] RSP: 002b:00007fb676725038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 314.848857][T10112] RAX: ffffffffffffffda RBX: 00007fb675bb5fa0 RCX: 00007fb67598ebe9 [ 314.848867][T10112] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 314.848875][T10112] RBP: 00007fb675a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 314.848884][T10112] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 314.848893][T10112] R13: 00007fb675bb6038 R14: 00007fb675bb5fa0 R15: 00007ffce383e118 [ 314.848912][T10112] [ 314.849437][T10112] usb usb8: device_add(8-0:1.0) --> -12 [ 315.335729][T10124] netlink: 28 bytes leftover after parsing attributes in process `syz.2.766'. [ 315.886296][T10130] netlink: 330 bytes leftover after parsing attributes in process `syz.4.767'. syzkaller syzkaller login: [ 316.340052][T10114] Process accounting resumed [ 317.067967][T10154] hub 8-0:1.0: USB hub found [ 317.080251][T10154] hub 8-0:1.0: 1 port detected [ 317.296123][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.310367][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.030378][T10177] random: crng reseeded on system resumption [ 319.470085][T10190] random: crng reseeded on system resumption [ 321.621319][ T30] audit: type=1806 audit(6051267358.103:19): res=-14 [ 322.122966][T10254] netlink: zone id is out of range [ 322.172959][T10254] netlink: zone id is out of range [ 322.384581][T10261] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11 [ 322.603405][T10257] hub 8-0:1.0: USB hub found [ 322.669035][T10257] hub 8-0:1.0: 1 port detected [ 323.130748][T10264] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input12 [ 323.397808][T10284] hub 8-0:1.0: USB hub found [ 323.430309][T10284] hub 8-0:1.0: 1 port detected [ 323.663056][T10289] ICMPv6: process `syz.3.799' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead syzkaller syzkaller login: [ 324.853990][T10309] [U]  [ 324.857235][T10309] [U] [ 324.859933][T10309] [U] [ 324.862609][T10309] [U] [ 324.926364][T10308] [U] [ 325.464890][T10328] FAULT_INJECTION: forcing a failure. [ 325.464890][T10328] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 325.582187][T10328] CPU: 0 UID: 0 PID: 10328 Comm: syz.1.805 Not tainted syzkaller #0 PREEMPT(full) [ 325.582211][T10328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 325.582220][T10328] Call Trace: [ 325.582226][T10328] [ 325.582232][T10328] dump_stack_lvl+0x16c/0x1f0 [ 325.582256][T10328] should_fail_ex+0x512/0x640 [ 325.582280][T10328] should_fail_alloc_page+0xe7/0x130 [ 325.582310][T10328] prepare_alloc_pages+0x3c2/0x610 [ 325.582336][T10328] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 325.582356][T10328] ? find_held_lock+0x2b/0x80 [ 325.582372][T10328] ? page_table_check_set+0x627/0x750 [ 325.582393][T10328] ? page_table_check_set+0x631/0x750 [ 325.582410][T10328] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 325.582428][T10328] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 325.582449][T10328] ? const_folio_flags+0x5b/0x100 [ 325.582469][T10328] ? const_folio_flags+0x5b/0x100 [ 325.582492][T10328] ? folio_remove_rmap_pmd+0x2eb/0x7d0 [ 325.582509][T10328] ? split_huge_pmd_locked+0x116/0x3a10 [ 325.582530][T10328] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 325.582551][T10328] ? policy_nodemask+0xea/0x4e0 [ 325.582571][T10328] alloc_pages_mpol+0x1fb/0x550 [ 325.582590][T10328] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 325.582608][T10328] ? __split_huge_pmd+0x203/0x350 [ 325.582632][T10328] folio_alloc_mpol_noprof+0x36/0x2f0 [ 325.582654][T10328] vma_alloc_folio_noprof+0xed/0x1e0 [ 325.582674][T10328] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 325.582702][T10328] ? rcu_read_unlock+0x2d/0xb0 [ 325.582723][T10328] do_wp_page+0x1e5b/0x4f00 [ 325.582749][T10328] ? __pfx_do_wp_page+0x10/0x10 [ 325.582772][T10328] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 325.582795][T10328] ? ___pte_offset_map+0x2ad/0x4f0 [ 325.582818][T10328] __handle_mm_fault+0x1b2d/0x2a50 [ 325.582840][T10328] ? __pfx___handle_mm_fault+0x10/0x10 [ 325.582858][T10328] ? __lock_acquire+0xb97/0x1ce0 [ 325.582912][T10328] handle_mm_fault+0x589/0xd10 [ 325.582931][T10328] __get_user_pages+0x551/0x34a0 [ 325.582962][T10328] ? __pfx___get_user_pages+0x10/0x10 [ 325.582989][T10328] __gup_longterm_locked+0xa92/0x17e0 [ 325.583013][T10328] ? is_bpf_text_address+0x8a/0x1a0 [ 325.583040][T10328] ? __pfx___gup_longterm_locked+0x10/0x10 [ 325.583064][T10328] ? find_held_lock+0x2b/0x80 [ 325.583083][T10328] gup_fast_fallback+0xf78/0x23f0 [ 325.583110][T10328] ? __pfx_stack_trace_save+0x10/0x10 [ 325.583133][T10328] ? __kasan_kmalloc+0xaa/0xb0 [ 325.583149][T10328] ? __pfx_gup_fast_fallback+0x10/0x10 [ 325.583169][T10328] ? __x64_sys_futex+0x1e0/0x4c0 [ 325.583186][T10328] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.583209][T10328] get_user_pages_fast+0xa7/0xf0 [ 325.583230][T10328] ? __pfx_get_user_pages_fast+0x10/0x10 [ 325.583256][T10328] get_futex_key+0x2c6/0x1560 [ 325.583275][T10328] ? __pfx_get_futex_key+0x10/0x10 [ 325.583303][T10328] ? kasan_save_track+0x14/0x30 [ 325.583320][T10328] ? __kasan_kmalloc+0xaa/0xb0 [ 325.583342][T10328] futex_lock_pi+0x1cc/0x7c0 [ 325.583366][T10328] ? __pfx_futex_lock_pi+0x10/0x10 [ 325.583389][T10328] ? __futex_wait+0x24c/0x2f0 [ 325.583427][T10328] ? futex_private_hash_put+0x18a/0x300 [ 325.583461][T10328] ? __pfx_futex_wake_mark+0x10/0x10 [ 325.583488][T10328] ? do_writev+0x218/0x340 [ 325.583507][T10328] do_futex+0x11a/0x350 [ 325.583525][T10328] ? __pfx_do_futex+0x10/0x10 [ 325.583541][T10328] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 325.583567][T10328] __x64_sys_futex+0x1e0/0x4c0 [ 325.583587][T10328] ? __pfx___x64_sys_futex+0x10/0x10 [ 325.583605][T10328] ? xfd_validate_state+0x61/0x180 [ 325.583624][T10328] ? __pfx_do_writev+0x10/0x10 [ 325.583644][T10328] do_syscall_64+0xcd/0x490 [ 325.583664][T10328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.583679][T10328] RIP: 0033:0x7f0c37b8ebe9 [ 325.583691][T10328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.583705][T10328] RSP: 002b:00007f0c38a90038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 325.583720][T10328] RAX: ffffffffffffffda RBX: 00007f0c37db6090 RCX: 00007f0c37b8ebe9 [ 325.583730][T10328] RDX: 0000000000000009 RSI: 0000000000000006 RDI: 0000000000000000 [ 325.583738][T10328] RBP: 00007f0c37c11e19 R08: 0000000000000000 R09: 0000000000000006 [ 325.583747][T10328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 325.583756][T10328] R13: 00007f0c37db6128 R14: 00007f0c37db6090 R15: 00007ffe878028f8 [ 325.583775][T10328] [ 326.020376][ C0] vkms_vblank_simulate: vblank timer overrun [ 327.534498][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 327.546922][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 327.559184][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 327.571465][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 327.583742][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 327.596123][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 327.608473][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 327.620862][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 327.633135][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 327.645481][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 332.537256][ C0] net_ratelimit: 22513 callbacks suppressed [ 332.537275][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 332.555424][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 332.567689][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 332.579945][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 332.592171][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 332.604366][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 332.616632][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 332.628968][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 332.641221][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 332.653371][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 332.762864][ T5219] sched: DL replenish lagged too much [ 337.547173][ C0] net_ratelimit: 22012 callbacks suppressed [ 337.547191][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 337.565905][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 337.578700][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 337.590999][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 337.603284][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 337.615772][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 337.627945][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 337.640378][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 337.652642][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 337.664975][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 342.557158][ C0] net_ratelimit: 22164 callbacks suppressed [ 342.557175][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 342.575479][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 342.587868][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 342.600255][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 342.612612][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 342.624975][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 342.637329][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 342.649549][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 342.661815][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 342.674180][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 347.567077][ C0] net_ratelimit: 23099 callbacks suppressed [ 347.567094][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 347.585360][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 347.597666][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 347.610197][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 347.623107][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 347.635724][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 347.648129][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 347.660556][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 347.672789][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 347.685508][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 352.577672][ C0] net_ratelimit: 13714 callbacks suppressed [ 352.577690][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.596739][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 352.609149][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.621519][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.634391][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 352.646544][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.658866][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.671653][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 352.684307][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.696659][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 357.587194][ C0] net_ratelimit: 13947 callbacks suppressed [ 357.587212][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 357.605825][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 357.618115][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:a1:e0:2c:18:e1, vlan:0) [ 357.630461][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 357.643389][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 357.655619][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 357.667856][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:a1:e0:2c:18:e1, vlan:0) [ 357.680524][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 357.693329][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 357.705836][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.597461][ C0] net_ratelimit: 13314 callbacks suppressed [ 362.597478][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 362.615854][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.628247][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:a1:e0:2c:18:e1, vlan:0) [ 362.640642][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.653733][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 362.665952][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.678380][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:a1:e0:2c:18:e1, vlan:0) [ 362.690701][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.703600][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 362.716010][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.607564][ C0] net_ratelimit: 13346 callbacks suppressed [ 367.607582][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 367.625787][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.638084][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:a1:e0:2c:18:e1, vlan:0) [ 367.650505][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.663605][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 367.676021][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.688649][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:a1:e0:2c:18:e1, vlan:0) [ 367.701034][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.714048][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 367.726403][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.617242][ C0] net_ratelimit: 13577 callbacks suppressed [ 372.617260][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.636179][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 372.648478][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.660740][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:a1:e0:2c:18:e1, vlan:0) [ 372.673083][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.686085][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 372.698532][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.711057][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:a1:e0:2c:18:e1, vlan:0) [ 372.723667][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.736554][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 377.627088][ C0] net_ratelimit: 13512 callbacks suppressed [ 377.627105][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.645223][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:a1:e0:2c:18:e1, vlan:0) [ 377.657635][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.670599][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 377.682863][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.695223][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:a1:e0:2c:18:e1, vlan:0) [ 377.707822][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.720617][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 377.733053][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.745299][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:a1:e0:2c:18:e1, vlan:0) [ 380.488476][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 381.548094][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.637111][ C0] net_ratelimit: 13630 callbacks suppressed [ 382.637129][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.655815][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:a1:e0:2c:18:e1, vlan:0) [ 382.668101][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.680993][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 382.693564][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.705854][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:a1:e0:2c:18:e1, vlan:0) [ 382.718844][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.731716][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 382.743982][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.756300][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:a1:e0:2c:18:e1, vlan:0) [ 387.647227][ C0] net_ratelimit: 13365 callbacks suppressed [ 387.647244][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 387.665356][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 387.678122][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:a1:e0:2c:18:e1, vlan:0) [ 387.690735][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 387.703950][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 387.716193][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 387.728553][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:a1:e0:2c:18:e1, vlan:0) [ 387.740821][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 387.753722][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 387.766108][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 392.657354][ C0] net_ratelimit: 13410 callbacks suppressed [ 392.657371][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 392.675763][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 392.688354][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:a1:e0:2c:18:e1, vlan:0) [ 392.701032][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 392.714507][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 392.727377][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 392.739961][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:a1:e0:2c:18:e1, vlan:0) [ 392.752305][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 392.765354][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 392.777692][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 397.667313][ C0] net_ratelimit: 13378 callbacks suppressed [ 397.667330][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 397.685485][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 397.698097][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:a1:e0:2c:18:e1, vlan:0) [ 397.710637][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 397.723715][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 397.736189][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 397.748906][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:a1:e0:2c:18:e1, vlan:0) [ 397.761346][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 397.774356][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 397.786722][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 402.677028][ C0] net_ratelimit: 13466 callbacks suppressed [ 402.677047][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 402.695556][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 402.708066][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:a1:e0:2c:18:e1, vlan:0) [ 402.720491][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 402.733430][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 402.745851][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 402.758239][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:a1:e0:2c:18:e1, vlan:0) [ 402.770610][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 402.783826][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 402.796128][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 407.687252][ C0] net_ratelimit: 13556 callbacks suppressed [ 407.687275][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:a1:e0:2c:18:e1, vlan:0) [ 407.706110][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 407.718980][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 407.731496][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 407.743856][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:a1:e0:2c:18:e1, vlan:0) [ 407.756924][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 407.769895][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 407.782211][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 407.794490][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:a1:e0:2c:18:e1, vlan:0) [ 407.806905][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.697371][ C0] net_ratelimit: 13620 callbacks suppressed [ 412.697388][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 412.716097][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.728404][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:a1:e0:2c:18:e1, vlan:0) [ 412.740778][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.753850][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 412.766221][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.778547][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:a1:e0:2c:18:e1, vlan:0) [ 412.791103][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.804037][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 412.816331][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.707483][ C0] net_ratelimit: 14090 callbacks suppressed [ 417.707501][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 417.725897][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.738518][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:a1:e0:2c:18:e1, vlan:0) [ 417.750917][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.763736][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 417.776016][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.788330][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:a1:e0:2c:18:e1, vlan:0) [ 417.800911][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.813953][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 417.826485][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.717213][ C0] net_ratelimit: 14134 callbacks suppressed [ 422.717233][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 422.735727][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.748425][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:a1:e0:2c:18:e1, vlan:0) [ 422.760806][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.773804][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 422.786469][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.798910][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:a1:e0:2c:18:e1, vlan:0) [ 422.811361][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.824274][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 422.836641][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.727456][ C0] net_ratelimit: 14218 callbacks suppressed [ 427.727474][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 427.745858][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.758251][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:a1:e0:2c:18:e1, vlan:0) [ 427.770682][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.783636][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 427.795950][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.808241][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:a1:e0:2c:18:e1, vlan:0) [ 427.820787][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.833822][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 427.846293][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 431.746988][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 431.754004][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P10331/1:b..l [ 431.762706][ C0] rcu: (detected by 0, t=10502 jiffies, g=41305, q=9863 ncpus=1) [ 431.770520][ C0] task:syz.1.805 state:R running task stack:29112 pid:10331 tgid:10324 ppid:5864 task_flags:0x400040 flags:0x00004002 [ 431.785468][ C0] Call Trace: [ 431.788835][ C0] [ 431.791758][ C0] __schedule+0x1190/0x5de0 [ 431.796276][ C0] ? find_held_lock+0x2b/0x80 [ 431.800985][ C0] ? __page_table_check_zero+0x346/0x5d0 [ 431.806722][ C0] ? __pfx___schedule+0x10/0x10 [ 431.811588][ C0] preempt_schedule_irq+0x51/0x90 [ 431.816613][ C0] irqentry_exit+0x36/0x90 [ 431.821034][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 431.827009][ C0] RIP: 0010:lock_release+0x183/0x2f0 [ 431.832378][ C0] Code: 0f c1 05 a8 b6 3e 12 83 f8 01 0f 85 1d 01 00 00 9c 58 f6 c4 02 0f 85 08 01 00 00 41 f7 c5 00 02 00 00 74 01 fb 48 8b 44 24 10 <65> 48 2b 05 bd 74 3e 12 0f 85 58 01 00 00 48 83 c4 18 5b 41 5c 41 [ 431.852095][ C0] RSP: 0018:ffffc9000ad9f850 EFLAGS: 00000206 [ 431.858170][ C0] RAX: 16810db1dfdae700 RBX: ffffffff8e5c10a0 RCX: ffffc9000ad9f85c [ 431.866298][ C0] RDX: 0000000000000000 RSI: ffffffff8de2760d RDI: ffffffff8c162d00 [ 431.874312][ C0] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 431.882518][ C0] R10: 0000000000000000 R11: 00000000000061b4 R12: ffffffff816ab8a4 [ 431.890501][ C0] R13: 0000000000000202 R14: ffff888030f30000 R15: 0000000000000001 [ 431.898557][ C0] ? unwind_next_frame+0x3f4/0x20a0 [ 431.903858][ C0] unwind_next_frame+0x3f9/0x20a0 [ 431.908879][ C0] ? arch_stack_walk+0x73/0x100 [ 431.914219][ C0] __unwind_start+0x45f/0x7f0 [ 431.918908][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 431.925261][ C0] arch_stack_walk+0x73/0x100 [ 431.930079][ C0] ? stack_trace_save+0x8e/0xc0 [ 431.934952][ C0] stack_trace_save+0x8e/0xc0 [ 431.939825][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 431.945198][ C0] ? stack_trace_save+0x8e/0xc0 [ 431.950132][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 431.955582][ C0] ? __lock_acquire+0x62e/0x1ce0 [ 431.960525][ C0] ? stack_depot_save_flags+0x29/0x9c0 [ 431.966168][ C0] kasan_save_stack+0x33/0x60 [ 431.970879][ C0] kasan_save_track+0x14/0x30 [ 431.975726][ C0] __kasan_slab_alloc+0x89/0x90 [ 431.980589][ C0] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 431.986148][ C0] ? security_file_alloc+0x34/0x2b0 [ 431.991346][ C0] security_file_alloc+0x34/0x2b0 [ 431.996538][ C0] init_file+0x93/0x4c0 [ 432.000800][ C0] alloc_empty_file+0x73/0x1e0 [ 432.005658][ C0] dentry_open+0x46/0xd0 [ 432.009995][ C0] pidfs_alloc_file+0x18f/0x290 [ 432.014932][ C0] ? __pfx_pidfs_alloc_file+0x10/0x10 [ 432.020325][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 432.025539][ C0] pidfd_prepare+0x129/0x200 [ 432.030121][ C0] __x64_sys_pidfd_open+0x105/0x1a0 [ 432.035395][ C0] ? __pfx___x64_sys_pidfd_open+0x10/0x10 [ 432.041237][ C0] ? rcu_is_watching+0x12/0xc0 [ 432.046093][ C0] do_syscall_64+0xcd/0x490 [ 432.050783][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.056778][ C0] RIP: 0033:0x7f0c37b8ebe9 [ 432.061379][ C0] RSP: 002b:00007f0c38a6f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b2 [ 432.069886][ C0] RAX: ffffffffffffffda RBX: 00007f0c37db6180 RCX: 00007f0c37b8ebe9 [ 432.077974][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 432.086255][ C0] RBP: 00007f0c37c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 432.094590][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 432.102558][ C0] R13: 00007f0c37db6218 R14: 00007f0c37db6180 R15: 00007ffe878028f8 [ 432.110531][ C0] [ 432.113534][ C0] rcu: rcu_preempt kthread starved for 250 jiffies! g41305 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 432.124546][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 432.134534][ C0] rcu: RCU grace-period kthread stack dump: [ 432.140414][ C0] task:rcu_preempt state:R running task stack:28728 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 432.154064][ C0] Call Trace: [ 432.157425][ C0] [ 432.160457][ C0] __schedule+0x1190/0x5de0 [ 432.164963][ C0] ? __lock_acquire+0x62e/0x1ce0 [ 432.170091][ C0] ? __pfx___schedule+0x10/0x10 [ 432.174982][ C0] ? find_held_lock+0x2b/0x80 [ 432.179666][ C0] ? schedule+0x2d7/0x3a0 [ 432.184138][ C0] schedule+0xe7/0x3a0 [ 432.188220][ C0] schedule_timeout+0x123/0x290 [ 432.193060][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 432.198600][ C0] ? __pfx_process_timeout+0x10/0x10 [ 432.203886][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 432.209685][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 432.215429][ C0] rcu_gp_fqs_loop+0x1ea/0xb00 [ 432.220291][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 432.225578][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 432.230778][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 432.235714][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 432.240594][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 432.246514][ C0] rcu_gp_kthread+0x270/0x380 [ 432.251328][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 432.256556][ C0] ? rcu_is_watching+0x12/0xc0 [ 432.261581][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 432.266804][ C0] ? __kthread_parkme+0x19e/0x250 [ 432.271897][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 432.277161][ C0] kthread+0x3c5/0x780 [ 432.281242][ C0] ? __pfx_kthread+0x10/0x10 [ 432.285872][ C0] ? rcu_is_watching+0x12/0xc0 [ 432.290661][ C0] ? __pfx_kthread+0x10/0x10 [ 432.295450][ C0] ret_from_fork+0x5d4/0x6f0 [ 432.300051][ C0] ? __pfx_kthread+0x10/0x10 [ 432.304740][ C0] ret_from_fork_asm+0x1a/0x30 [ 432.309642][ C0] [ 432.312667][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 432.318994][ C0] CPU: 0 UID: 0 PID: 9740 Comm: kworker/u11:2 Not tainted syzkaller #0 PREEMPT(full) [ 432.328611][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 432.338658][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 432.345005][ C0] RIP: 0010:__kasan_check_byte+0x6/0x50 [ 432.350748][ C0] Code: 50 ff a8 01 48 0f 45 da e9 9c fe ff ff 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 41 54 <49> 89 f4 55 48 89 fd 53 e8 6d 24 00 00 89 c3 84 c0 74 0b 89 d8 5b [ 432.370629][ C0] RSP: 0018:ffffc90000006a80 EFLAGS: 00000202 [ 432.376781][ C0] RAX: 0000000000000001 RBX: ffffffff8e5c10a0 RCX: 0000000000000002 [ 432.384828][ C0] RDX: 0000000000000000 RSI: ffffffff816ab581 RDI: ffffffff8e5c10a0 [ 432.393139][ C0] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 432.401287][ C0] R10: 0000000000000006 R11: 0000000000006033 R12: 0000000000000000 [ 432.409333][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 432.417289][ C0] FS: 0000000000000000(0000) GS:ffff8881246c3000(0000) knlGS:0000000000000000 [ 432.426299][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 432.432869][ C0] CR2: 00007f7085585453 CR3: 0000000075a78000 CR4: 00000000003526f0 [ 432.441097][ C0] Call Trace: [ 432.444364][ C0] [ 432.447212][ C0] lock_acquire+0xfc/0x350 [ 432.451649][ C0] ? unwind_next_frame+0x3f4/0x20a0 [ 432.456942][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 432.463099][ C0] unwind_next_frame+0xd1/0x20a0 [ 432.468261][ C0] ? unwind_next_frame+0xbd/0x20a0 [ 432.473355][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 432.478638][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 432.484792][ C0] arch_stack_walk+0x94/0x100 [ 432.489466][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 432.494400][ C0] stack_trace_save+0x8e/0xc0 [ 432.499063][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 432.504419][ C0] ? __lock_acquire+0xb97/0x1ce0 [ 432.509462][ C0] kasan_save_stack+0x33/0x60 [ 432.514138][ C0] ? kasan_save_stack+0x33/0x60 [ 432.518972][ C0] ? kasan_save_track+0x14/0x30 [ 432.523897][ C0] ? kasan_save_free_info+0x3b/0x60 [ 432.529083][ C0] ? __kasan_slab_free+0x60/0x70 [ 432.534004][ C0] ? kmem_cache_free+0x2d1/0x4d0 [ 432.538925][ C0] ? kfree_skbmem+0x1a4/0x1f0 [ 432.543676][ C0] ? sk_skb_reason_drop+0x136/0x1a0 [ 432.548880][ C0] ? ip6_mc_input+0x774/0xeb0 [ 432.553572][ C0] ? ip6_rcv_finish+0x3df/0x580 [ 432.558588][ C0] ? ip_sabotage_in+0x21b/0x290 [ 432.563605][ C0] ? nf_hook_slow+0xbb/0x200 [ 432.568283][ C0] ? nf_hook.constprop.0+0x422/0x750 [ 432.573578][ C0] ? ipv6_rcv+0xa4/0x650 [ 432.577842][ C0] ? __netif_receive_skb_one_core+0x12d/0x1e0 [ 432.583899][ C0] ? __netif_receive_skb+0x1d/0x160 [ 432.589083][ C0] ? netif_receive_skb+0x137/0x7b0 [ 432.594195][ C0] ? br_pass_frame_up+0x346/0x490 [ 432.599412][ C0] ? br_handle_frame_finish+0xf5a/0x1ca0 [ 432.605124][ C0] ? br_nf_hook_thresh+0x307/0x410 [ 432.610256][ C0] ? br_nf_pre_routing_finish_ipv6+0x76a/0xfb0 [ 432.616500][ C0] ? br_nf_pre_routing_ipv6+0x3cd/0x8c0 [ 432.622137][ C0] ? br_nf_pre_routing+0x860/0x15b0 [ 432.627325][ C0] ? br_handle_frame+0xad5/0x14b0 [ 432.632370][ C0] ? __netif_receive_skb_core.constprop.0+0xa25/0x48c0 [ 432.639206][ C0] ? __netif_receive_skb_one_core+0xb0/0x1e0 [ 432.645445][ C0] ? __netif_receive_skb+0x1d/0x160 [ 432.650645][ C0] ? process_backlog+0x442/0x15e0 [ 432.655670][ C0] ? __napi_poll.constprop.0+0xba/0x550 [ 432.661222][ C0] ? net_rx_action+0xa9f/0xfe0 [ 432.665969][ C0] ? handle_softirqs+0x219/0x8e0 [ 432.670894][ C0] ? do_softirq+0xb2/0xf0 [ 432.675226][ C0] ? __local_bh_enable_ip+0x100/0x120 [ 432.680582][ C0] ? cfg80211_inform_single_bss_data+0x9ae/0x1df0 [ 432.686983][ C0] ? cfg80211_inform_bss_data+0x224/0x3bd0 [ 432.692774][ C0] ? cfg80211_inform_bss_frame_data+0x26f/0x750 [ 432.699025][ C0] ? ieee80211_bss_info_update+0x310/0xab0 [ 432.704826][ C0] ? ieee80211_ibss_rx_queued_mgmt+0x1905/0x2fd0 [ 432.711148][ C0] ? ieee80211_iface_work+0xe2e/0x1360 [ 432.716594][ C0] ? cfg80211_wiphy_work+0x2c7/0x580 [ 432.721865][ C0] ? process_one_work+0x9cf/0x1b70 [ 432.726969][ C0] ? worker_thread+0x6c8/0xf10 [ 432.731802][ C0] ? kthread+0x3c5/0x780 [ 432.736136][ C0] ? ret_from_fork+0x5d4/0x6f0 [ 432.741182][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 432.746291][ C0] kasan_save_track+0x14/0x30 [ 432.751115][ C0] kasan_save_free_info+0x3b/0x60 [ 432.756333][ C0] __kasan_slab_free+0x60/0x70 [ 432.761098][ C0] kmem_cache_free+0x2d1/0x4d0 [ 432.765860][ C0] ? kfree_skbmem+0x1a4/0x1f0 [ 432.770547][ C0] kfree_skbmem+0x1a4/0x1f0 [ 432.775070][ C0] sk_skb_reason_drop+0x136/0x1a0 [ 432.780314][ C0] ip6_mc_input+0x774/0xeb0 [ 432.785001][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 432.790072][ C0] ip6_rcv_finish+0x3df/0x580 [ 432.794762][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 432.799955][ C0] ? __pfx_ip_sabotage_in+0x10/0x10 [ 432.805170][ C0] ip_sabotage_in+0x21b/0x290 [ 432.809843][ C0] nf_hook_slow+0xbb/0x200 [ 432.814371][ C0] nf_hook.constprop.0+0x422/0x750 [ 432.819598][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 432.824796][ C0] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 432.830421][ C0] ? ip6_rcv_core+0xbd4/0x1c30 [ 432.835261][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 432.840470][ C0] ? ip6_rcv_core+0xc70/0x1c30 [ 432.845319][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 432.849986][ C0] ipv6_rcv+0xa4/0x650 [ 432.854132][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 432.858813][ C0] __netif_receive_skb_one_core+0x12d/0x1e0 [ 432.864802][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 432.871435][ C0] ? lock_acquire+0x179/0x350 [ 432.876116][ C0] __netif_receive_skb+0x1d/0x160 [ 432.881133][ C0] netif_receive_skb+0x137/0x7b0 [ 432.886150][ C0] ? __pfx_netif_receive_skb+0x10/0x10 [ 432.891615][ C0] ? br_netif_receive_skb+0xff/0x200 [ 432.896915][ C0] br_pass_frame_up+0x346/0x490 [ 432.901958][ C0] br_handle_frame_finish+0xf5a/0x1ca0 [ 432.907424][ C0] ? net_rx_action+0xa9f/0xfe0 [ 432.912193][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 432.918101][ C0] ? cfg80211_inform_single_bss_data+0x9ae/0x1df0 [ 432.924608][ C0] ? cfg80211_inform_bss_data+0x223/0x3bd0 [ 432.930559][ C0] ? cfg80211_inform_bss_frame_data+0x26f/0x750 [ 432.936891][ C0] ? trace_drv_return_int+0x130/0x210 [ 432.942358][ C0] ? ieee80211_ibss_rx_queued_mgmt+0x1905/0x2fd0 [ 432.948775][ C0] ? cfg80211_wiphy_work+0x2c7/0x580 [ 432.954057][ C0] ? process_one_work+0x9cf/0x1b70 [ 432.959234][ C0] ? worker_thread+0x6c8/0xf10 [ 432.964006][ C0] ? ret_from_fork+0x5d4/0x6f0 [ 432.968775][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 432.973735][ C0] ? nf_hook_slow+0x132/0x200 [ 432.978418][ C0] br_nf_hook_thresh+0x307/0x410 [ 432.983351][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 432.989314][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 432.994778][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 433.000757][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 433.006850][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 433.013032][ C0] br_nf_pre_routing_finish_ipv6+0x76a/0xfb0 [ 433.019113][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 433.025372][ C0] br_nf_pre_routing_ipv6+0x3cd/0x8c0 [ 433.030902][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 433.037011][ C0] ? lock_acquire+0x179/0x350 [ 433.041805][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 433.048507][ C0] ? net_generic+0xea/0x2a0 [ 433.053048][ C0] br_nf_pre_routing+0x860/0x15b0 [ 433.058260][ C0] br_handle_frame+0xad5/0x14b0 [ 433.063112][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 433.068761][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 433.074660][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 433.080118][ C0] __netif_receive_skb_core.constprop.0+0xa25/0x48c0 [ 433.087001][ C0] ? kmem_cache_free+0x2d1/0x4d0 [ 433.091939][ C0] ? kfree_skbmem+0x1a4/0x1f0 [ 433.096881][ C0] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 433.104159][ C0] ? kfree_skbmem+0x1a4/0x1f0 [ 433.108845][ C0] ? sk_skb_reason_drop+0x136/0x1a0 [ 433.114035][ C0] ? ip6_mc_input+0x4f2/0xeb0 [ 433.118738][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 433.123932][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 433.129136][ C0] ? __lock_acquire+0x62e/0x1ce0 [ 433.134066][ C0] ? process_backlog+0x3f0/0x15e0 [ 433.139074][ C0] __netif_receive_skb_one_core+0xb0/0x1e0 [ 433.145135][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 433.151756][ C0] ? lock_acquire+0x179/0x350 [ 433.156432][ C0] ? process_backlog+0x3f0/0x15e0 [ 433.161541][ C0] __netif_receive_skb+0x1d/0x160 [ 433.166584][ C0] process_backlog+0x442/0x15e0 [ 433.171431][ C0] __napi_poll.constprop.0+0xba/0x550 [ 433.176868][ C0] net_rx_action+0xa9f/0xfe0 [ 433.181580][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 433.186696][ C0] ? __print_lock_name+0x70/0xe0 [ 433.191715][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 433.196993][ C0] ? sched_clock+0x38/0x60 [ 433.201405][ C0] ? sched_clock_cpu+0x6c/0x530 [ 433.206442][ C0] ? mark_held_locks+0x49/0x80 [ 433.211296][ C0] handle_softirqs+0x219/0x8e0 [ 433.216342][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 433.221628][ C0] ? cfg80211_inform_single_bss_data+0x9ae/0x1df0 [ 433.228038][ C0] do_softirq+0xb2/0xf0 [ 433.232235][ C0] [ 433.235243][ C0] [ 433.238335][ C0] __local_bh_enable_ip+0x100/0x120 [ 433.243553][ C0] cfg80211_inform_single_bss_data+0x9ae/0x1df0 [ 433.249890][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 433.256552][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 433.261536][ C0] ? ieee802_11_parse_elems_full+0x1db/0x3780 [ 433.267764][ C0] ? stack_trace_save+0x8e/0xc0 [ 433.272606][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 433.278099][ C0] ? cfg80211_inform_bss_data+0x224/0x3bd0 [ 433.284013][ C0] cfg80211_inform_bss_data+0x224/0x3bd0 [ 433.289762][ C0] ? kasan_save_stack+0x33/0x60 [ 433.294807][ C0] ? kasan_save_track+0x14/0x30 [ 433.300018][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 433.304807][ C0] ? __kmalloc_noprof+0x223/0x510 [ 433.309836][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xc69/0x2fd0 [ 433.316281][ C0] ? process_one_work+0x9cf/0x1b70 [ 433.321581][ C0] ? worker_thread+0x6c8/0xf10 [ 433.326438][ C0] ? kthread+0x3c5/0x780 [ 433.330689][ C0] ? ret_from_fork+0x5d4/0x6f0 [ 433.335715][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 433.340649][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 433.346802][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 433.353004][ C0] ? _ieee802_11_parse_elems_full+0x626/0x44e0 [ 433.359243][ C0] ? __lock_acquire+0x62e/0x1ce0 [ 433.364262][ C0] ? ieee802_11_parse_elems_full+0x143/0x3780 [ 433.370328][ C0] cfg80211_inform_bss_frame_data+0x26f/0x750 [ 433.376570][ C0] ieee80211_bss_info_update+0x310/0xab0 [ 433.382498][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 433.388767][ C0] ? find_held_lock+0x2b/0x80 [ 433.393482][ C0] ? ieee80211_ibss_rx_queued_mgmt+0x18cb/0x2fd0 [ 433.400092][ C0] ieee80211_ibss_rx_queued_mgmt+0x1905/0x2fd0 [ 433.406272][ C0] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 433.412809][ C0] ? kcov_remote_start+0x3c9/0x6d0 [ 433.418010][ C0] ieee80211_iface_work+0xe2e/0x1360 [ 433.423316][ C0] ? rcu_is_watching+0x12/0xc0 [ 433.428071][ C0] cfg80211_wiphy_work+0x2c7/0x580 [ 433.433179][ C0] process_one_work+0x9cf/0x1b70 [ 433.438316][ C0] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 433.444690][ C0] ? __pfx_process_one_work+0x10/0x10 [ 433.450167][ C0] ? assign_work+0x1a0/0x250 [ 433.454766][ C0] worker_thread+0x6c8/0xf10 [ 433.459352][ C0] ? __pfx_worker_thread+0x10/0x10 [ 433.464481][ C0] kthread+0x3c5/0x780 [ 433.468689][ C0] ? __pfx_kthread+0x10/0x10 [ 433.473286][ C0] ? rcu_is_watching+0x12/0xc0 [ 433.478212][ C0] ? __pfx_kthread+0x10/0x10 [ 433.482812][ C0] ret_from_fork+0x5d4/0x6f0 [ 433.487413][ C0] ? __pfx_kthread+0x10/0x10 [ 433.492013][ C0] ret_from_fork_asm+0x1a/0x30 [ 433.496808][ C0] [ 433.500267][ C0] net_ratelimit: 11093 callbacks suppressed [ 433.500282][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.519374][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 433.532183][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.544638][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:a1:e0:2c:18:e1, vlan:0) [ 433.557364][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.570309][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 433.582673][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.595108][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:a1:e0:2c:18:e1, vlan:0) [ 433.607676][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.620695][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 438.507400][ C0] net_ratelimit: 10991 callbacks suppressed [ 438.507419][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 438.525720][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.538052][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:a1:e0:2c:18:e1, vlan:0) [ 438.550520][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.563433][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 438.575808][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.588198][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:a1:e0:2c:18:e1, vlan:0) [ 438.600696][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.613803][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 438.626149][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)