last executing test programs: 29.404224151s ago: executing program 3 (id=698): close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/pids.peak\x00', 0x8000, 0x0) pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8\x11\x00\x00\x00\x00\x00\x04!\x02\xba\xae\xb8-\x14\xe4\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\x00\x9f\x1e\xf6\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9\xc5\x93\x1dD\x811\xb9_\xdd*j\xfd\xeb\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;\x9e\x83\x120\x81\x11\x9a?g`sFh\x00\x00\xda,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xdex\xd8\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/228, 0xfdef, 0x2) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x80840, 0x0) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC0\x00', 0x0, 0x0) ioctl$auto(r3, 0xc0045520, r2) writev$auto(r1, &(0x7f0000001100)={0x0, 0xe5e7}, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) r4 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r4, 0x107, 0xf, 0x0, 0x6) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_5={@target_fd=0x5, 0x7f, 0x9c, 0x7b2, 0x1, @relative_fd=0x2, 0x80}, 0x96) capset$auto(0x0, &(0x7f0000000000)={0x80000001, 0x6, 0x5c}) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={0x0, 0x7}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x4, 0x100) r5 = openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$auto(r5, &(0x7f0000000200)='&\x00', 0x8) 29.019604372s ago: executing program 3 (id=701): mmap$auto(0x0, 0x9, 0x72, 0x8b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) r1 = socket(0x10, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(r2, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000003080)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYBLOB="0456ed"], 0x14}, 0x1, 0x0, 0x0, 0x4854}, 0x40) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003900), r2) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r2) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) write$auto(r0, 0x0, 0xfffffdf1) utimes$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x3}) r3 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x40, r3, 0x1b, 0x78bd29, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x11, 0x0, 0x1, [@nested={0x4, 0xf2}, @typed={0x4, 0x131}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044}, 0xc800) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) mprotect$auto(0x0, 0x8000000000000001, 0x8) 27.537969445s ago: executing program 3 (id=709): statmount$auto(&(0x7f0000000000)={0x5, @raw=0xd7, 0x3, 0x1, 0x5}, 0x0, 0xe, 0xfffffff8) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xf3, 0xb0, @raw=0xfffff038}}) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sda\x00', 0x84100, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) read$auto(r2, 0x0, 0xfffffdef) mmap$auto(0x0, 0x200009, 0x2, 0x48eb1, 0xffffffffffffffff, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ram9\x00', 0xe180, 0x0) shmctl$auto_SHM_INFO(0x6748ff4d, 0xe, &(0x7f0000000100)={{0xffffb4d2, 0x0, 0xee01, 0x8, 0x1, 0x5, 0x6}, 0x101, 0x8, 0xe, 0x4, @inferred, @inferred, 0x3, 0x0, &(0x7f0000000000)="61873448b96e77fc5a275410654c77d4e5bc", &(0x7f0000000040)="bed11e806d3a9c73cc86f074cff95a388bfc374ffc34055c08e47f454722794fab88fea4f834faab8cd4239457899ec9bed5213d02664efba36a8dada2d0736953c278fd75e14d486190fbb3c9d6e1cfa441ee32665bf1375b7935b961f7a0ea3da32cdbb8b1961f0385d978979cae2120babc016c2d8171c938fbe1eb5598b9b5"}) sysfs$auto(0x400, 0x8, 0xb548) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x10, 0x0, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4048) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/bus/pci/00/01.3\x00', 0x7f7041, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x5}, 0xa) setresuid$auto(0x8, r3, 0x0) r5 = open(&(0x7f0000000000)='./file0\x00', 0xa61c2, 0x84) ioctl$auto_FS_IOC_GETFLAGS(r5, 0x80086601, 0x7fffffffbfffffff) ioctl$auto_SNDRV_CTL_IOCTL_TLV_COMMAND(r5, 0xc008551c, &(0x7f0000000180)={0x1, 0x1, [0x2, 0x8, 0x81, 0x6, 0x9, 0x0, 0x9, 0xf20, 0x1, 0x0]}) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/rpc/auth.unix.gid/channel\x00', 0x481, 0x0) write$auto_proc_reg_file_ops_compat_inode(r6, &(0x7f0000000040)="5c7820d1027e0dc0023af10e9bfa1babfa3a3753ca9aee370a", 0x19) setsockopt$auto_SO_DOMAIN(r6, 0xbb2, 0x27, &(0x7f00000001c0)='/dev/ptye9\x00', 0x6) ioctl$auto_IOC_PR_RELEASE(r1, 0x801070cf, 0x0) 26.919758206s ago: executing program 3 (id=712): r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fb0\x00', 0x3000, 0x0) ioctl$auto_FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000180)="e13e45a5b8400b92e47d689ad6798814ac4c60f9c0dee564162c4052c29571c64e35639845f8bebc6b7dc8e716e308d591ac226d6c1dbdaa9c1385472b4bb36063c0e312838cde8c55b6375fd82f4b8d17e7dea75c60dd91092a8eb88d90d541cf7ffa654d") exit$auto(0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), r1) r3 = getpgrp(0x0) sendmsg$auto_TASKSTATS_CMD_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r2, 0xa01, 0x70bd2b, 0x25dfdbfb, {}, [@TASKSTATS_CMD_ATTR_TGID={0x8, 0x2, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000) 25.898846553s ago: executing program 3 (id=718): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x10, 0x70bd25, 0x3ff, {}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0xf}, @NL80211_ATTR_MLO_LINK_DISABLED={0x4}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x28, 0x25, 0x0, 0x1, [@nested={0x24, 0x55, 0x0, 0x1, [@generic="3ac14846573b8bb7fc35789143655f662b5a0e732fc73aeee77384ec101537a4"]}]}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'netdevsim0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4001}, 0x4) fcntl$auto_F_ADD_SEALS(r0, 0x409, 0xfffffffffffffffe) r1 = waitid$auto_P_PID(0x1, 0x0, &(0x7f0000000140)={@siginfo_0_0={0x9, 0x7, 0x61, @_timer={0x0, 0xfffffffb, @sival_int=0x1000, 0x7}}}, 0x9, &(0x7f00000001c0)={{0x4, 0xe}, {0x8, 0x5}, 0x7, 0xffffffffffff96c4, 0x7, 0x4, 0x9, 0x9, 0x5, 0x8, 0x3ff000000000, 0x7, 0x80, 0x5, 0xf}) r3 = prctl$auto(0x1, 0x7f, r1, 0x5, 0x7) listmount$auto(0xffffffffffffffff, &(0x7f0000000280)=0x400, 0x200, 0x6) execveat$auto(r3, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)=&(0x7f0000000300)='netdevsim0\x00', &(0x7f00000003c0)=&(0x7f0000000380)=')\x00', 0x6) ioctl$auto_MEMGETINFO(r3, 0x80204d01, &(0x7f0000000400)={0x9, 0x0, 0x6, 0xb, 0x7, 0x5}) r4 = socketcall$auto_SYS_ACCEPT(0x5, &(0x7f0000000440)=0x400080000000000) r5 = syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$auto_MAC802154_HWSIM_CMD_DEL_EDGE(r4, &(0x7f0000001b40)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001b00)={&(0x7f0000000500)={0x15c8, r5, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@MAC802154_HWSIM_ATTR_RADIO_EDGE={0x1154, 0x2, 0x0, 0x1, [@generic="cfd8ade3c3e79ecf233109d5d7d46f942ca7ef25", @generic="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", @nested={0x133, 0xf5, 0x0, 0x1, [@generic="9a710f8ec609bde52934163ffc251eb902f4cfea2f5bde141c5e0c81b1a2e3d938ef0b73d0e2a17ecf300bced22a78d8a79a0fb7a287bfdcb383f52ff4484777e096ab1a60ed43345dc04d752fa817e8452a092a40ce00bb8d9fb2cc875a2dcabd3696e30bbd2c48d5d8c1e1502202fb193f593d40a136a378d5dc149880fc52db88022c8b88ecf9ef6d73eb5a0b830d603fb2bb488d2ed652d83d50a02c9054eaf04bbc4c1e2d5834677465202c6442b418a2049e0a36f56bdaa69a35b5a0339425224914ed254c0118167c58c58728bcfef40b14a73f24a9caba4fcbc0112b945bb9f4773a42", @nested={0x4, 0xad}, @generic="d8fa239c4f5d18ccf60756adf7c2480aec1c42ab0a3de99ebbdbb97df0f2553d4d9c379d2ef7b108a5fe0234d73e099408d82009285e419ed42e7f27fa31b6257085f57d"]}, @typed={0x8, 0x9b, 0x0, 0x0, @pid=r1}]}, @MAC802154_HWSIM_ATTR_RADIO_EDGE={0x384, 0x2, 0x0, 0x1, [@nested={0x1d5, 0x49, 0x0, 0x1, [@generic="6caaef2d6a545e232a408644cb6963a8", @generic="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", @generic="189ab03c38479f92c67d0b47818148092aa74a80f78b4507ac73824223f6c48e82bf6512dc80b72f4a8af39b692e8411d765d21dd03b3fbbd4dafd19477c887da238b34681e3478a1608e852dd106ad7739f004bb1702d3b3d2f7f93b68f7f4e79e38a7a407d75a60898cc5c98ad607c09682c841b1e00cecae344d7742b8205fef6a313bbe2db8b353ad2300e2ebc645cd24f8182f5b30a98eeffaa05e69398035342ef15e74e91236d51c89a0242b5faa14a0afe35a2dc96248b22ffa0d2", @nested={0x4, 0xa6}]}, @nested={0x1a6, 0xdb, 0x0, 0x1, [@generic="03b52081a7feb26ee032295293367c3d3bd9fbd70de49d04709bb41dcbbf842ed5a1348693e4236c639499dfe9890828166d18a2ada8532072d04560a5e0319aab8b6e7bb3fe2f9b2d40fd7ae6bdad4520636b26dfd500153c7ae253510f", @generic="f9b93fbf846515309cc1ba7e5c0099eb6ac337a9f3d2005bdd87072812f47ab031abdcc7413f5118bc60ad4dce94077acebd355b9c2ccce358", @typed={0x8, 0x142, 0x0, 0x0, @u32=0x35}, @generic="35e8a379ea45bcfabb932c5c195a4d24644fbd4fa77b3bebd6fc51926628a975eafa22358146ef468fdfdc4edd84b3239f13df1e5892c3799d59142b15ea8b566451e380a4bdca5c90a48afd946364ee3e28e1892e27f0697d4b55bbd3a9203531167f5b356b8e5da713dbcbd2a3a4aaf68d88994183b7a5247b", @generic="1f04ba75cf536309709e5f2ece53c9736a0dc3145c80fc1742c01a9cbbdfd470e8f424f58ce949e53e2830761b2a2ef1309400ad08b9f72a581e4f08b838c4091509cf994825de4bc211e18e99b900746a7cb5d962f6c18d833c9425269aef8f00c132b3f3e6f2e88ad10f48a5b5fa41174a9dc581c3de5c91dec0d864aae39644f7f248d0", @nested={0x4, 0x10c}]}]}, @MAC802154_HWSIM_ATTR_RADIO_EDGES={0x8, 0x3, 0x0, 0x1, [@typed={0x4, 0x33}]}, @MAC802154_HWSIM_ATTR_RADIO_EDGE={0x24, 0x2, 0x0, 0x1, [@nested={0x8, 0x136, 0x0, 0x1, [@nested={0x4, 0x5}]}, @nested={0x18, 0x1b, 0x0, 0x1, [@typed={0x14, 0x69, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}]}]}, @MAC802154_HWSIM_ATTR_RADIO_EDGES={0x80, 0x3, 0x0, 0x1, [@nested={0x4, 0xbc}, @typed={0x6f, 0xb, 0x0, 0x0, @binary="3ead3842823a8b8db6dac657cdbb1141045b485e2c49d5fdf40492bd17731ddd1e04175a54c3c073753d8bbd4232739e14a59c8a9cb8c67152820951a66c2d0a8fd7baed57fc9af3d36dd377bcf2dfb73e562c2d484aae57abc07823c2298bd79457870b4ae2ff5482f5cb"}, @typed={0x8, 0x2f, 0x0, 0x0, @ipv4=@broadcast}]}, @MAC802154_HWSIM_ATTR_RADIO_EDGE={0x30, 0x2, 0x0, 0x1, [@nested={0x24, 0x76, 0x0, 0x1, [@typed={0x8, 0x5f, 0x0, 0x0, @pid=r2}, @typed={0x14, 0x45, 0x0, 0x0, @ipv6=@private2}, @typed={0x4, 0xc4}]}, @typed={0x8, 0xfe, 0x0, 0x0, @pid=r2}]}]}, 0x15c8}, 0x1, 0x0, 0x0, 0x84}, 0x4000001) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001bc0)={'macvtap0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001c00)={'pim6reg0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001c40)={'pimreg1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001c80)={'bond_slave_1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000001dc0)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001d80)={&(0x7f0000001cc0)={0xa4, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CHANNELS_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4040080}, 0x7e2bdd0bb04c4a28) r10 = prctl$auto_PR_SET_SECCOMP(0x16, 0x8, 0x8, 0xc5f, 0xfffffffffffffffc) r11 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000001e40), r3) statx$auto(r4, &(0x7f0000001e80)='./file0\x00', 0x0, 0xdb8, &(0x7f0000001ec0)={0x1, 0x7, 0x1ff, 0x1, 0x0, 0xee00, 0x19d8, 0x7, 0x800, 0xfffffffffffffff7, 0x7, 0x0, {0x7, 0x8001}, {0x180000000, 0x6}, {0x9, 0x400}, {0x2, 0x2}, 0xfff, 0xe74c0000, 0x2, 0x9, 0x5, 0x2, 0x118, 0x5, 0x9, 0x4, 0x6, 0x72784324, [0xffffffff, 0x7fff, 0x5, 0x3, 0xb, 0x3, 0xfffffffffffffff7, 0x3, 0xfffffffffffffff9]}) shmctl$auto_SHM_STAT(0x0, 0xd, &(0x7f00000030c0)={{0xfffffc6f, 0xee01, 0xffffffffffffffff, 0x10001, 0x401, 0x1, 0x9}, 0x8f77, 0x101, 0x31, 0x7fffffffffffffff, @inferred=r2, @raw=0x3, 0x8, 0x0, &(0x7f0000001fc0)="aa301c52c2e8e521d9c770b27dfee8d2bc454d9f5a29b857b2d11e6d249b553b5904022e50cacdb1a94dfd5a468a2e3588e7d1fbd78a3fbd55093612513e72790345bd6ac5d57989e289bc0fa198378907738bfb87793afa60089f567e8130df25c7b3d0ca550e908ea1b6f9c6381c08d6581c05aabea2b4414476a8427d6a6ab3938e78069a2fb8c270105ce45c68c71f4e0f1c90d8755434259b1388a7842c22a7949b0e1a2f42be234f96ca3caa106ed516d1667f17db26a63db5c5006dbc7512a8d9424b873b551512ef667913e694035e0a1bfa20643e0418f639748c", &(0x7f00000020c0)="9403eb5785dbe4d38292183090bb4d2a2932c08bcdce27c6599dbcc4648643592436cacada0c255f1d598e7b4eaa21b8fab47ade29016241e7f723db00d9821286c94fd633762dac6bd137df23459da2035bdc8bd566795585ef9da5bbe7639be9f7e1156a4beb85bdef7bb10123c5c58ac62b0d6d76bb427876ba48f716faf90318246ca07a49af1c0dfe8d739182e14e32638b0ffc693af99c18edeb4ddaa2ae6f7038330a1fbf12fb5f788b1067df6a27af0848215c5ff1bd6e3c072198b6eddbf0d6d491d2c8abaa19489d2629e810b69a6baf1111d9a9eef5148eff079156296be30ae1ada904f8175e150f13e0c83301362583ef2192d1abc05a1830fe80b5e8c9ab88ff627665b643bf1481d2fcd36bdaf06c1a17b966d833e3bf398ee5e8dc206ab51d9ba0523378736a669c09ee6e6a99f1329a613d0d6bd4e35a25048eefb254cb8b3d01d2f6f99997a78506418ef063c15977bf6372eb7a0e696a38560de0c533e2a3bff7a8f468391d047c440ac61a44030dba8ee7b7bfe1cef5e1dc8814f28f4f83b22bf4b831cad23f47a3734e24f82d1bce89329ae2afeb87e37d832e58c0a5b73753e2a31c20d6c273aa46fb78f06028f6254c9eeb0514ac9dd5ed8581d204e61b005f077490280b42e8636911cef2db6702289a797d4bf19be180f07a3fa0b38fa2b52e3197d560ae5bd42a85bf22f11fad3b95c87fc2a76e403a9b66de466032efb6082821387f0d9c45c03effbd24fd89ed5ec8ec36286797e18609322b3d67503115ddf42e0ea4b74f5b3746dbc4d9551834e52fe07844e331b9f1d44647ac51a4867eba775d830ea9ead2b80a8f56f80c6a85262a3b89f29913cc4895dc0ad79402a6c839939cf9e1daaeedf93b407bbc0c7aac93423a460fe4d240a4216749093562e09ac9aa5cbab11554d0367ad606f492b3dd59099679a6c552a498ec066855e07f52eee2c0095894d2162ba6d5f89e8a7fbcc0b955bfb04763761d1871d64dc2b1cb9e73c8e25bfb3c147c5dd549561d6f8a2c24675403e45b7e0ee9668f9c2bfc5e9a23ff6c8fece379994fa790a07c0c3a84cf1f940734a47f35ed7f25c7a62f5e2ccf1e4983bcc23d371da02bbd29c1d8255bfe731a5210c769ce16d28b84f1d447df020390981b0bd42b5c65c014e5858437109a593de5efe0bdf0b32d43f910a9ac4519573de1f6d9195811fe9fafb9f7136bd85573d21b80f50c3ccc7f07f9260ef5cc8980e6604f42e30b77c2df561f7b79194c90cc899a8e74f33077e0489c31a8b1a9d605da055e74b4de18bd059e57990e0e7da091d20971cfa08c3939e39a9787dd681fca63fc5ef1e36349ea8a44f0a0ce8b7675d5224fc961d7a8833805c41bdaf54a7130acff29962f90a7ad7afbdcd4ea4abfc7a7528e7b20efafd1cf98b579fc11764c971b00724b17834217a72dc550929ab0ec324aacc153ceae2e161a0cf795cd755a391d11ccbadcfb01bca3ca55c0a959387ca89f4d52cc1a0ebe6785e945ec2f6cf7b14b08d0e370295ff27dcf38ce9a77e18b9657e94533e00b3a1f195fd60f8df8867cac05a17feae6e17f35834228c8cf613a20d72ec794582c165430f7190ae26a04b8b53060bef07cd6bbab23c7a074f8e96cf1eefad6cad551926b9162efa6a8d96058588d7f6362a27d1d4d875702fb33998f1a89ad0184e1c78730e7ca16dc55c6b674c3d534ab5425fefbd43b906198ab9ddc868326ca4fbc85b2b550de5c430d6aeabe7f15a9ed1a996cd87ab6348c77c959510934adf228bb813a9dae47202efd48b868493f7bcca0aa63530070e0f29d05660220ffc29766bd4186e5d0d52b7e138803eec661706db2e5e73187e0c298584fc4e4179f066a3d072f82d3c50fd87ef08163c24ce06753d596fc93dd47666b066f95eedf6149d21e41078207a2926d155274136fc49894c38eb3bf2dac0b32709e33699e4272bb5fc9f48d8afbf8fc89c508737f271c9ac630dc6deff58cfd0f62c18014f1c67f4f2405340dcef176250b70241236824c4f53a3d4ebd3700204d398baa08474f666df68019ae252872ef48556f7b4e30826f407e25b5cbfdc83b9a2bd2c3a854e3db74708237701bc58ff9c725a1c451f4029440ed42456071c6730be7ff3f49fcb4d2f944c4a7d67b1eb18432a93ba8d8bab6c4ed35968e1e350f026a79a9604a7c244e3d42adc284a56a3ef8b380c3be0904f46a87dafb6184c1fc8bbace29e5ee411c8b6706945d34ba0b802e9c631e559bdfdf4b5bea94e8937ddbe5e57b4ebf0966fdff4caa882ad9d5a3f72fcf9be508cb3435a70409c2c6d810b04920deffdacc48ce88907342c41fdbf5febccf3dc7194dadcc7120b472d8d5cc4134c07bde12775c0d8fd276e553f504cc061f631af9b8cf61425563145903d710c91d947da1f81f174f0ecebb418ef23c69cbf3640a32171111a1b86209baa27abfc12085f0b9a118c209a73357879d75e4ceeb1b031741566fc9222d5ee05c6aea70fe7d21d6e2d7de3867fc9d33c9c407cf6ce48622ddc640614b26ffa0ab1c4a258a187c11489ce2cb617fc444ca6956b403723dd8f710663ac7120f3ac11ebc28bbfed935412686d362df50ce35518bb1814199e3f80cabb4f08f893e1bd6b00cf93a0de2cf1fd761297c8b2a95f09ba08eb6177617df930aba3ad5ff2a5303d80a42161dfc16ef9448af2cef178b777f521858c862441d8cb1844e1042a9cf2fb76b037a3b35bb8946e097a6ec417e8e20350bf6edc2bdf6cbc5d35a0991edea3feb3b73e1e642a78ca44b555d506d0208c0607cc8c23e48e2054525a62df2666b3c3cb9e1a6e9be023f99fc2c7c2712def764f01270f9b835cf4496a4057ae70f4e6be00668b8b070347e7248712fdfbb2bcbdf1df2f81b61f3a6958b093a65b5fcfe345806393fa990866aeedbaea965f83e31ed46552e559d4287fd2f4d322873f4755912d5f6348e37b10f1312cecd0cec1b7ab1a84d567ec75ffd8f5e30848a966e8bce77ba6674b22269b4bf6ab3be2733894d3e1c603be6f4d3f63b07d4dcf35a23ea544864f933998ffe110cecfebc9df8e7887456352ae7ad417155c06e93cfdf06a14246cd047cbca5b824cb973a4ec615da941cc4bc8d8c67903d9797330b33984ae8d0a179ca79c93dd2f2fb1f712af5e0056e54b4fb9e7e3f6cecd5093ef55945711d01e14b2462fd303d7479ea7662d79e20eb15663d513c92e0f16ec0fd9243609d89c45962ba14edf209072b5148be1bd4d9484593019ec44d5d23dae65cf1c6d6b372a8d1f4c52dd9c02f154579b7f191b34b38e59eacdf3f66b1ef4aaf400c51bd24e00de1fe385d3b8b45cbb8dc0823837e942be994014beee3cee348ea1049f3a28124054ebb251aad7424dc3fb2e156156d4ea3da49833fdf7fc06c08af8c3480a16e2aaa4e7a02a5ea6a8a151b5a7423f4a83c16dcfbb6240dc47fcafb53b703604938f302a75a528bcc8abb91c1cffb20436ca2b15ec979f96ead86f40097ef427e18081ee3af0d5adad6a30523b6a0a41d7da1381509191b980a8a38a49b33dc8705fd917535ad7b7302e5f6f56b1223e4f392a49b30eea51031fc1e7ec88201a7bbef5cd7fce85c83bb991f3660e3cdeb509444c93d7ce90193f03ab0202e95a5f0139784bdc9ecad14a5e3dc2be928d6d45b306a067a10bc3f27ba313bbf77a51cb18bc6a456c460345775dba643d8e578d90d76b92b81ae84694c4c91f5b7055bb94f3d07bdf1c1eb645c03f0893d8a5e7af4b8134f057a6e0bd95377c10448fd5d4031c161ccb6258a6e3cdebc8dd0ab6cd2b27e87ff0d408059a992352317cb0ad3d9d7d1aebf6ccd116a1b0700ef9779878d4db8de5a4445220683f264e502d7667f85fcf3369cb9f73ff79cb348b91fecebe6f921353f1f07fe574020922e8a9e36d1970203207ee06ddf82e12e086bbe0019057c8214452cb409d7ced9ad185e3bc58fb4caeac608d33b561e6947e976e41b081bf4de9479b0a02b5d972923874fe8be97def1a95e9f751bbd13e56cf06c9deccf45e295b2e5bd670d8bc40498a4d3e0f07383cd58a546a1ecd8e1bf927d25655466a394f50f9fffa6830a56db067de47cda6c904e1584e798c8941006ac60d2a45ec3a23b1f86996b225f8c44c4e738947f325fad9caea0a692e5cc8ca6e3a0bc6c0621ec1b51beca6fcee3ba1e4db453a7d958a3dd1826511cabdc46b2bda6c4e7a97d17051c9c3b062e529e923ab1ddaa8a0726882be13118bf4c5aa64ef5cd5f4f4c462bb0a8faedf2f799ef91d163bb5a5a798c225bf86ca90b76545adf6b81ce1bc297614fcc1a110b130852a4c1f74da616fcbf2a1b3b8c5e7727a5beee6241eed6a0c28dc4267156dd25f165d2e297d3c820515448db3851488068f446a2692a5df9c351a2c30176e2261a096fc22bd99b2e07e15bf12e689fd99388f1226fa24c21274859a8b83e879f5581f9000fc2cb55e36deaf7174f20088366e610daa7506e342a8d88dc3ba4b4665d7fc8f4a77e66f8af703f8d8fe65b3ef7e4c3a6fc80d94c1655b3447183210db810e0c38c0d826f2aa44338cc5a7339df62d811259545d2df3bbcc5fb194e70af68a04bf581179e4a168971130aa1e1403c3ba6635a9e49202a2e660f7e1c081babe2e9ad7914e83e79a64ad5ba086780deb44ba4040bb15563b3678cd55e25f98ec85eef85ddae622f5383989850b120ff063c6fbc9aef240f1e02f2cdfd24a8f58b1c391ece4d85d68d465e42c42f22ab12019fc21f7081e67755d6981a277af7771149983d7ca47fbb2ecf76fb2b868b7417489d94f5d6baf9098ca465595853ebe87875777745b191923f22a2977176d7a479837b8140f5042aae9f08c71b45e7ba3936d589f13e72f5cca832a12593625eb79d3bce063b34441634ca3c3f7b6890ff91d78b38ef3762e6eeb896521ec485b88b9d8205bdae9a03d2d857b6b9df685f4b1a2d6b97dfcccc977a2124fe3c52871507b1096c7615c5d7e1da85bf6e9b43fff94effc31ffaf2b661ccc477b214c5c8dad3a2ae388a04f3f7ccbb38a80cef812c3212621f8fbe4f82f4eae1284565f4a279d9684db6123ac3029edb890d62e7d88c203cce6a5d991ce2e20834c76254cf673873c974d03dd49592ee056c7b2be47b68ee9f72dc2ae2e9830cb592e3d0f97d48ce80b631c7d9affd8dc92a3e455ccf1102475780a45a1447ba95cabf2948054b7c22f87f6524087a540eab6ca9e4cfda1c3d65633ef7fd1dcdaf1218230a273cb44fe9d7f2b24c00f7cf4bf9d5951d19f769acd3efc8533d51db0add10c92fd4d1a775fa86443a8f621e87511e7efb6d0cc4edca1c563f4dc78486c8cd8f34baf4640b61810dd7a0edf2d3d0ee0db72148e9f5fc1116d9cf59565b2c2d3c1f94b317817e23b429dda53b3e1258280577e5d704e4883dd73f8349dd922553fb6dcf381a98fcc0326d8b3d2dc68d92ec8062e960b0c42c033eca71fc67f13108b65ea2ddd869a1289ed4e1e240773d0dd0eeceaf2ee8a565744729a97086dd49df2c561c482a40ec685b5ba518c18f6b9c9c42295e8278faaf03ca38e6d92470de3f053a157dc8f319d2d6ded98d66dddbc8b2713b338446a38c65ae7d8c1a66b6416203fd8d5672e484dee8aa459fae96e7e30f60d32e48d7851f17d99ecb6bd81300e641394920a7294a538054880ed16673d6a8ad1db5b16706980adcafbff07137738cc2d371753581bdcd9e4770732dea30b3a422337b034cba710cb"}) sendmsg$auto_TIPC_NL_NODE_GET(r10, &(0x7f0000003540)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003500)={&(0x7f0000003140)={0x3a0, r11, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x38c, 0x9, 0x0, 0x1, [@generic="c584a73f86a3d1b34ea969d9123c8ace83f009052a2b6438180be175de202bdd9cc937cd02c77948e98dad213e4bbb9871f9c94ec8b90f4b2916d424fc07252688221780f0643f79c393d9a9a73863ea680e0a5d0e48b54f843960e28eba68691adfa671260d1dfbf4756bd6d90cb7dd1318372bb5b4095553044c2d47e20018577bfa16", @nested={0x110, 0x124, 0x0, 0x1, [@nested={0x4, 0x9a}, @generic="1c10e555e8f00ae15da57df50326a0304e90159cd8800beda089fb7fec1703453d1005966b41ac7fe19eadf64e3d047d0fba22a2db2fb3e37660989f1e511d31fc1309d166472d78765ae9941451d0d629f792f296fef65142f739a06d6588b11f5ac7b626a6496b427f1eb8bed74e8d4141a81e705775d6c3574a48aeb0df420fa0f879e100e04699ef90835471d3426baf4646b1138278", @generic="310eedee48718d49b0dcc012684d45080e046009de9371a59538e7d49644ac7e9a018e097346f74f6d89528ce0fb8fc1a21091fbf78cbf937909d213296e75c352333d6ec0ec3f4577a2a989a78dc0259d39a4d5a9fb0cf1daeac28b02259222bc2c16073dafc0de6e272060a5d9589e"]}, @typed={0x7, 0xf1, 0x0, 0x0, @str='#[\x00'}, @generic="1a163825ef76ec58703990e85701436b0ab961fd421f698eff14593356fb0c56388347b7d889561dbad33a43e428821f55c51bb81531e2ecfaf209400557ef3c5a13a7b8695c4459d0a34434c1fa01961c4c5bea8a666aa6aed03ee059ee756e146b5bb79ed145a2ed13e789cdddccce23a7fc7ffcfc8dddd2a0f911cd83a5f617e3ee083269258079ffcdfbe2acd9e78bed5e2ffe06cff70f9ae56018372a3d786d7767f7fb2704daa145fd157b3f76", @nested={0x117, 0x6a, 0x0, 0x1, [@typed={0x8, 0xac, 0x0, 0x0, @uid=r12}, @typed={0x8, 0xbb, 0x0, 0x0, @ipv4=@multicast2}, @generic="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", @typed={0x8, 0x5, 0x0, 0x0, @u32=0x5}]}, @typed={0xf, 0x111, 0x0, 0x0, @str='netdevsim0\x00'}, @nested={0xc, 0x11e, 0x0, 0x1, [@typed={0x8, 0x4d, 0x0, 0x0, @fd=r4}]}, @typed={0x8, 0x15b, 0x0, 0x0, @uid=r13}]}]}, 0x3a0}, 0x1, 0x0, 0x0, 0x88881}, 0x20000801) r14 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000035c0), r3) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000003740)={&(0x7f0000003580), 0xc, &(0x7f0000003700)={&(0x7f0000003600)={0xcc, r14, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@HWSIM_ATTR_ADDR_TRANSMITTER={0xad, 0x2, "cb8ffabfebc146bdb2f3bdd9090c199bb3b58d3da426464219507c628113d20bf5544bdac9962d32260bb0b5e9a392398e4af41a54d92af1fd91734a8f8e0ca61f7835545c43e2ee066e97faa17c2c9a3c2d87d27ae14d73a732bc690af4d5d365dec7e1f6a818aab5d90db4ce4098cd859c37af45ee33bcca59819c0027331ffac79cc3de6aaa284bfe13f145799d0c7b57434b317c23375e0233b3a4f36801619d60b5bf260fff31"}, @HWSIM_ATTR_FLAGS={0x8, 0x4, 0x3d24}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4004000}, 0x4) unshare$auto(0x97bc) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000003780)='/dev/binderfs/binder1\x00', 0x101341, 0x0) r15 = openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f00000037c0), 0x20000, 0x0) write$auto_bm_register_operations_binfmt_misc(r15, &(0x7f0000003800)="2c5832e5d4bd0fdf4f3e7f9e", 0xc) r16 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000003840)='/dev/ptyq4\x00', 0x40, 0x0) ioctl$auto_TIOCSTI2(r16, 0x5412, &(0x7f0000003880)="bbbbd4b03289034c3d24814792e61c80b93507a71dc745aff8fed30eaa060a6c59e00446c8b54754d5e5e526967a7abd6bfbb621c687fdcdf44cb4f3084590f5f74bf50fca75035122f90d9861671a73c1b8359800f539e6763a21bbd86e3a6259c2d759a26c01359247f6e700f4c5652cb3e31e42808f7a4661e0d0") socketpair$auto(0x9, 0x400, 0x8, &(0x7f0000003900)=0x6) 25.714093349s ago: executing program 3 (id=719): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x22, 0x800, 0xfff7fffa) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0) r0 = socket(0x25, 0x1, 0x0) mmap$auto(0x0, 0x20109, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x0) mmap$auto(0x4, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8003) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, 0x0, 0x48880) shutdown$auto(0x200000003, 0x2) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) read$auto(0xffffffffffffffff, 0x0, 0x10001) writev$auto(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x7}, 0x2) prctl$auto(0x26, 0x17000000, 0x0, 0x0, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) setsockopt$auto_SO_RESERVE_MEM(r0, 0xf7bc, 0x49, &(0x7f0000000040)='\x00', 0x6) r1 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000180), 0x40900, 0x0) r2 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000200), 0x40, 0x0) getsockopt$auto_SO_PRIORITY(r2, 0x5, 0xc, 0x0, &(0x7f00000002c0)=0x3) ioctl$auto_UBI_IOCATT(r1, 0x40186f40, 0x0) ioctl$auto_UBI_IOCDET(r1, 0x40046f41, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r1, 0x8000) r3 = epoll_create$auto(0x3e) r4 = getegid() newfstatat$auto(r3, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180)={0xf267, 0xffffffffffffff69, 0x94, 0x1, 0xffffffffffffffff, r4, 0x0, 0x8001, 0x4, 0x8, 0x8, 0x40, 0x1, 0xde1, 0x4, 0x4, 0x9}, 0x1) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/irq/0/smp_affinity_list\x00', 0x81, 0x0) 10.622452479s ago: executing program 32 (id=719): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x22, 0x800, 0xfff7fffa) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0) r0 = socket(0x25, 0x1, 0x0) mmap$auto(0x0, 0x20109, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x0) mmap$auto(0x4, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8003) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, 0x0, 0x48880) shutdown$auto(0x200000003, 0x2) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) read$auto(0xffffffffffffffff, 0x0, 0x10001) writev$auto(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x7}, 0x2) prctl$auto(0x26, 0x17000000, 0x0, 0x0, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) setsockopt$auto_SO_RESERVE_MEM(r0, 0xf7bc, 0x49, &(0x7f0000000040)='\x00', 0x6) r1 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000180), 0x40900, 0x0) r2 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000200), 0x40, 0x0) getsockopt$auto_SO_PRIORITY(r2, 0x5, 0xc, 0x0, &(0x7f00000002c0)=0x3) ioctl$auto_UBI_IOCATT(r1, 0x40186f40, 0x0) ioctl$auto_UBI_IOCDET(r1, 0x40046f41, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r1, 0x8000) r3 = epoll_create$auto(0x3e) r4 = getegid() newfstatat$auto(r3, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180)={0xf267, 0xffffffffffffff69, 0x94, 0x1, 0xffffffffffffffff, r4, 0x0, 0x8001, 0x4, 0x8, 0x8, 0x40, 0x1, 0xde1, 0x4, 0x4, 0x9}, 0x1) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/irq/0/smp_affinity_list\x00', 0x81, 0x0) 5.904182169s ago: executing program 2 (id=770): mmap$auto(0x0, 0x9, 0x72, 0x8b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) socket(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(r1, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000003080)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYBLOB="0456ed"], 0x14}, 0x1, 0x0, 0x0, 0x4854}, 0x40) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003900), r1) write$auto(r0, 0x0, 0xfffffdf1) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x40, 0x0, 0x1b, 0x78bd29, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x11, 0x0, 0x1, [@nested={0x4, 0xf2}, @typed={0x4, 0x131}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044}, 0xc800) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) mprotect$auto(0x0, 0x8000000000000001, 0x8) 5.754472605s ago: executing program 0 (id=771): close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xa4e00, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) socket(0xa, 0x801, 0x84) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace\x00', 0x240100, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) close_range$auto(0x2, 0x8000, 0x0) r1 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, 0x0, 0x60e83, 0x0) ioctl$auto(r1, 0x3b8e, r0) write$auto(0x3, 0x0, 0x0) 5.212792176s ago: executing program 0 (id=774): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xfffe, 0xfffff0b6, 0xfffe, 0x84, 0xac1, 0x2, 0x36242398, 0x645, 0x3b8, 0x7, 0xffff, 0x6, 0x81, 0x68198}, 0x401) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r1 = socket(0xa, 0x1, 0x84) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/admmidi2\x00', 0x0, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(r1, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x23, 0x4000000000000001, 0x2009, 0x0, 0x0) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(0xffffffffffffffff, 0x0, 0x20004804) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x1d, 0x2, 0x7) socket(0x2, 0x1, 0x0) openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, 0x0, 0x501002, 0x0) bind$auto(0x3, &(0x7f0000000040)=@can, 0x6a) connect$auto(0x3, &(0x7f00000018c0)=@can, 0x18) r2 = socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000804) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001500), r0) sendmsg$auto_NL80211_CMD_SET_CHANNEL(r0, &(0x7f00000018c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001880)={&(0x7f0000001540)=ANY=[@ANYBLOB="27030000", @ANYRES16=r3, @ANYBLOB="200025bd7000fddbdf254100000040008480892cf4c90826bdeaa8d19de727546837d6cc2b90b771510971ad833c069522a4c2235135237d4b9633ff68482e05e192b9adbe1b0600c20024000000080061000600000004005f00060065007f00000008006b000c00000088022c800800010001000000300002802c000080080002000300000008000100ff7f0000080002000300000008000100feffffff08000200040000004c00028034000080080001000500000008000200ff00000008000200cb5500000800010004000000080001000600000008000100080000001400008008000100f108000008000100080000008c00028024000080080001000c000000080002000100000008000100a602000008000100070000003c00008008000200a0000000080001000100000008000200c71000000800020040000000080001000100000008000100ff000000080001000d0000000c00008008000200020000001c000080080002000000008008000100a30c000008000200030000007c0002803c00008008000200030000000800020006000000080001006e0000000800020006000000080002000900000008000200b8f0ffff08000200070000003c0000800800010003000000080001000500000008000100ff010000080001000b000000080001000200000008000100050000000800010005000000380002803400008008000100000000000800020010000000080001000400000008000100ffffffff08000200040000000800020006000000c00002800c000080080002000500000054000080080001000300000008000100ffff00000800020006000000080002005c9a000008000200050000000800010009000000080001000100000008000200040000000800020004000000080001000100000014000080080002000400000008000200010000001c0000800800020006000000080001000900000008000200070000002c00008008000100b4dc000008000200000200000800020005000000080002000000000008000100c20000000800b700ffffffff0400d000"], 0x304}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r4 = socket(0xa, 0x3, 0x3a) ioctl$auto(r4, 0x8982, 0x1) capget$auto(0x0, 0xfffffffffffffffe) socket(0x1d, 0x3, 0x1) 5.015575083s ago: executing program 2 (id=775): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd10/queue/virt_boundary_mask\x00', 0x181840, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8008000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/vidtv.0/i2c-0/delete_device\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x4) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) io_uring_setup$auto(0x2, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyyb\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) socketpair$auto(0x5b, 0x2, 0x420000, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r3, 0x5437, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000000)=""/46, 0x2e) close_range$auto(r0, r1, 0x2) open_by_handle_at$auto(r1, &(0x7f00000004c0)={0x1, 0x0, "ed"}, 0xffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) setfsuid$auto(0xee00) statmount$auto(0x0, &(0x7f0000000180)={0x315, 0xfffffffd, 0x401bf, 0x734f, 0x3c, 0x65f, 0x1ffde, 0x6, 0x6, 0x2, 0x9, 0x2, 0x4000006, 0x4, 0xb6, 0x80000000009, 0x6, 0x10003, 0xb, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x1fe, 0xd) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf25030000000600070008000000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a00"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r4 = socket(0xa, 0x3, 0x4000000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1ff, 0x3, 0x21, 0x4909b6f5, 0x1, 0x7, 0x3, 0x100000001, 0x6, 0x3, 0x4, 0x5, 0xb4, 0x9, 0x1, 0x10003, 0x80, 0x3, 0x80, 0xa, 0x22000, 0x200, 0x7, 0x85, 0x0, 0xb, 0xffffffff, 0xfffffffc, 0x0, [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x2, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x200200000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8000000000000000]}, 0x3, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='^\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0x4}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) 4.667350121s ago: executing program 1 (id=777): socket(0xa, 0x4, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r0, 0x4b3a, r0) sysfs$auto(0x2, 0x0, 0x0) r1 = fsopen$auto(0x0, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x2, 0x10000002, 0x6}) fsconfig$auto(r1, 0x8, 0x0, 0x0, 0x0) r2 = socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) setsockopt$auto(r2, 0x1, 0x12, &(0x7f0000000400)='\'\ak\xb6\xc8\vFx\xed\xd6\xf8\x00\x10\xa4#\x92`\xdb\xafL\x0f\xfbUV\xa6KH]Cv\xbf\xf2a\v', 0xeb66) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) 4.512524346s ago: executing program 0 (id=778): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x60342, 0x0) sysfs$auto(0x1, 0x5, 0x5) mmap$auto(0x0, 0x101, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) symlink$auto(&(0x7f0000000080)='.\x00', &(0x7f0000000040)='./file0\x00') lremovexattr$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00') mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x80e42, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) read$auto(r1, 0x0, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) socket(0x22, 0x3, 0x0) bind$auto(0x3, &(0x7f0000000080)=@isdn={0x22, 0x3d, 0x7, 0x64, 0x7}, 0x6b) sendfile$auto(r0, r2, 0x0, 0x1000200) mmap$auto(0x0, 0x5, 0x4000, 0xeb1, r2, 0x8001) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/cuse\x00', 0x200, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x801, 0x106) select$auto(0x5, 0x0, &(0x7f0000000140)={[0x9, 0x8, 0x3, 0x10, 0x3, 0x9, 0x9, 0xff, 0x3, 0x2, 0x2, 0x7, 0x100000001, 0x8000000000000001, 0x4, 0x9]}, 0x0, 0x0) r3 = socket(0x2, 0x1, 0x84) setsockopt$auto(r3, 0x84, 0x15, 0x0, 0x1) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000000)="c80d1b5d399b3f", 0xfdef) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/pci0000:00/0000:00:00.0/msi_bus\x00', 0x149b01, 0x0) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000140), 0x7111}, 0x8) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0x2) 4.24409674s ago: executing program 2 (id=779): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf250400000005001100000000000400120006000b00f94000"], 0x28}, 0x1, 0x0, 0x0, 0x4000084}, 0x10) 4.093377491s ago: executing program 1 (id=780): openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710}, 0x55) setsockopt$auto(0x400000000000003, 0x28, 0x0, 0x0, 0x56b) 3.892921439s ago: executing program 1 (id=781): close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xa4e00, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) socket(0xa, 0x801, 0x84) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace\x00', 0x240100, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) close_range$auto(0x2, 0x8000, 0x0) r1 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, 0x0, 0x60e83, 0x0) ioctl$auto(r1, 0x3b8e, r0) write$auto(0x3, 0x0, 0x0) 3.564132663s ago: executing program 1 (id=782): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x3, 0x20009, 0x0, 0x12, 0xffffffffffffffff, 0xffffffffffffffff) r0 = wait4$auto(0xffffffffffffffff, &(0x7f0000001040)=0xd8de95b, 0x4, &(0x7f00000001c0)={{0xffffffffffff0000}, {0x0, 0x6}, 0xa3, 0x1, 0x80000001, 0xfffffffffffffffc, 0x400, 0x3, 0xf9e, 0x4, 0x2, 0x9, 0x462c, 0x1, 0x3, 0x6}) prctl$auto(0x3e, 0x1, r0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/free_buffer\x00', 0x4c000, 0xebff) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@in={0x2, 0x4e25, @multicast2}, 0x6d) write$auto(0xffffffffffffffff, 0x0, 0x2008000000000a9f) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x131982, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x9000, 0x8002, 0x2) r1 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r1, &(0x7f0000000040)=""/4096, 0xfffffe82) futimesat$auto(0xffffffffffffffff, 0x0, &(0x7f0000001280)={0xa, 0x1000}) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x400004, 0x0) write$auto(r2, &(0x7f0000000440)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xe7k\xc9\xb7\x80T\xd0\xc2\xa0\a\xf6*:\xb7_\xf1\xb1yx\xc8\x00\xf1\xf9\x87\xa4D\xf4S\xda\xa9Y4*\x1a[\xcdv\x83q\xab\x1aK8 \xe9\xf7TU\xc6\xe3~\x92S\xef\x9c\xc0\xc9\x04/\x18\xf1\xe2\xe4_\xfa{\xe0DB\x1d\x83e\x12*\xa0K\xc0`\nt\xf5\xac$\x94\xf0>\xceXs\xb5\xd8dV\xc4lG\b~\x1cn\x80\xde?\xed~\xcfV\xcd\xdc\xdd\'\xc4^.=\xc4\x86\xce*\xba<\xbf\x19N\xc5~zFY\xc6\x90\xf6o>\xf7\x1a$\xfd\xc7\xf1[-9\xf5v/\x10\x87@\'1\xf3\xd7\xcd\xbf\xac\x84\xe2\x98\x96>\xff1\x8a\x1d\xdalWU\x1c\xc7N\xdf\xcbR\xf6\xea\x89\x01\x04\x00[\x1eP3\xec\x13\x1eh\xab#\x1do\xa1?s\n\xb6\xcc{\x9e\xbb\x06\xe4>J\xbew\xc2K\x1c\x97_=\xe6]\x06)`\xad*\x88k\x1d\x87&\n\xdf#?\x03\x06(\xef;\x7f\x1d\x7f\xb8\xd5\xe9\xfe`M\xe7\x95\xb2\xa6\v\x190\xce\xc4\x15`\xa5C\x9ar\ta\xec\x17\x16\xc6\xf0\x03\xc6\x85U).\xf5\xc5\a\x94\xc5\x86\xb6\xce\r,M\xd2]r\xe5m\x83X\xa82&\x01r3\x8dW\xb0\xf8/\xbf6\xee\x88\xf9LD\r\n\x17\x901\xa1\x10K\x85Yk\x99{\x88\x94\x13rp\xbb\xe18\xbdK\x92\xd8i\x89!l\xad\x1e\xf3M/W3E\xebZ\x92\x1c\xa34\xd2\x84vkf\n6z\x10!\x85\xd9(\xa17\xeb\x82\x97\xd2\x94Nu\x86\xac\x12a\xedp\xa3D\xf7_\x11\x96|V>\xbdj\xb6\x85/\xa6\x17\x11n%\xbe~\x15\x91\xe6\xa9z\xd4\x91\x8f\xac\xc5}\xe4\a\x9an\xa8\xf0\xda\xa1\xb2\xee\xef\xed+S\x1b&X\x82{\x8d\xe3m\xc7\xe8x\xe8V\xf7\xec\xcaH\tQ\xaehU+\x87@\x9b\xe3\xbc\x8e\x99\x8e\x8e\x06/\x0f\ax\xcc\xb0\x88*\xffsuV', 0x2) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) socket(0x2, 0xa, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000680)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82902, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) timer_create$auto(0x3, 0x0, &(0x7f0000000140)=0x6) exit$auto(0x6) timer_delete$auto(0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) 3.168810962s ago: executing program 0 (id=783): mmap$auto(0x0, 0x9, 0x72, 0x8b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) socket(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(r1, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000003080)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYBLOB="0456ed"], 0x14}, 0x1, 0x0, 0x0, 0x4854}, 0x40) write$auto(r0, 0x0, 0xfffffdf1) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x40, 0x0, 0x1b, 0x78bd29, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x11, 0x0, 0x1, [@nested={0x4, 0xf2}, @typed={0x4, 0x131}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044}, 0xc800) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) mprotect$auto(0x0, 0x8000000000000001, 0x8) 3.111170241s ago: executing program 2 (id=784): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x11, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x6, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0) ioctl$auto(0x3, 0x40103e05, r0) r2 = socket(0xa, 0xa, 0xf) socket(0x10, 0x1, 0x106) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) getsockopt$auto(r2, 0x84, 0x73, 0x0, &(0x7f00000002c0)=0x5) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x43502, 0x0) sendfile$auto(r3, r3, 0x0, 0x2) mmap$auto(0x0, 0x0, 0x6, 0xeb1, r3, 0x7ffffffffffffffe) mmap$auto(0x0, 0xe985, 0xdb, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000894}, 0x800) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_11={0x1, 0x6, 0x6, 0x7, 0x1bb080, 0x97, 0xff, r4}, 0x6f3) rt_tgsigqueueinfo$auto(0x3, 0x96, 0x7, &(0x7f0000000180)={@siginfo_0_0={0x0, 0x9c2a, 0xffffffff, @_sigsys={0x0, 0x5d36, 0x6}}}) open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x6f) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x8040) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000140)='/dev/media11\x00', 0x40, 0x0) socket(0x27, 0x5, 0x4) 2.57541334s ago: executing program 2 (id=785): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/ptp/ptp0/max_vclocks\x00', 0x103841, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex, 0x7f, 0x99, 0x8, 0x1, @relative_fd, 0xd}, 0x3) socketpair$auto(0x1e, 0x5, 0x200000, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, 0x0, 0x55) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{0x0, 0xbb, 0x0, 0x8, &(0x7f0000000040), 0x81, 0x9}, 0xfffffffb}, 0x5, 0x6586, 0x0) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20050001}, 0x80) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) read$auto(r0, 0x0, 0x20) unshare$auto(0x40000080) write$auto(0x3, 0x0, 0x100082) 2.214907771s ago: executing program 0 (id=786): r0 = memfd_create$auto(&(0x7f0000000040)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00\x00\v\x00\x82\xcc\"K\xe1IIT\x00'/54, 0x4) bind$auto(r0, &(0x7f0000000000)=@sco, 0x5672) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptyw5\x00', 0x20000, 0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@phonet={0x23, 0x1, 0x10, 0x5}, 0x53) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/sctp/assocs\x00', 0x101080, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x3) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/006/001\x00', 0x40942, 0x0) mmap$auto(0x2000, 0x9, 0x8, 0x8000000008011, r1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/fs/orangefs/op_timeout_secs\x00', 0x20001, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000000)="b2", 0x1) r4 = socketpair$auto(0x1e, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r3, 0x8000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) epoll_ctl$auto(0xffffffffffffffff, 0x1, r2, 0x0) mmap$auto(0xfffffffffffffff4, 0x5, 0x3, 0x110, r4, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x40006) arch_prctl$auto_ARCH_MAP_VDSO_64(0x2003, 0x8) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2ac842, 0x0) mmap$auto(0x0, 0x2, 0x412, 0xeb1, r2, 0xbd) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) 1.905789021s ago: executing program 1 (id=787): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000640)='/sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x103400, 0x0) sendfile$auto(0x2, 0x3, 0x0, 0xc3e0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_TCP_METRICS_CMD_DEL(r0, 0x0, 0x840) unshare$auto(0x40000080) mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0) setsockopt$auto_SO_ERROR(r1, 0x2ce0, 0x4, &(0x7f0000000100)='\x00', 0x1) syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000140), r0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x4000000000, 0x2, 0xd) r2 = socket(0xa, 0x1, 0x84) r3 = open(&(0x7f0000000040)='./file0\x00', 0x4242, 0x40) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/ext4/sda1/reserved_clusters\x00', 0x63102, 0x0) sendfile$auto(r4, r4, 0x0, 0x1) flock$auto(r3, 0x1) ioctl$auto_TIOCSETD2(r3, 0x5423, &(0x7f00000002c0)="b0bdadb4cc3786b0a3e4e24cf9bac4ef56f48252969cb8ff371cbc26db293f8fc1b3522598fbaae1bd1285b0db586568be2cb686aba5e4e605938b334147426a8e3c61d7149d77b3ebb2399f394481429b1376ea62ee62649d1e56e9a1b3c68e0a25e551428af5b10335cf2fecc4ffa0bf667d58d053670c8f07619e3f12d328dc925f39924fb8e3faa8c0c4fa6cf1b9de4816ac03fbd68a431187926c0dedbaf7") flock$auto(r3, 0x2) read$auto_mon_fops_text_t_mon_text(r3, &(0x7f0000000200)=""/142, 0x8e) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/spi/drivers_autoprobe\x00', 0xca481, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) bpf$auto(0x5, &(0x7f0000000100)=@task_fd_query={0x2, 0x2, 0x4, 0x0, 0x8, 0x7, 0xffffffffffffffff, 0x6, 0x8001}, 0x101) write$auto(r5, &(0x7f00000000c0)='\x14\xf4\xb6\xc6\x97\xdb\x18B\f\xef\x1dQZ\xa66\xe7\x06\\\xe0)+\x86\xa7\x9bv\xe1\x18\xf5\x83\b\x11\x19\xdd\x1c', 0x8) getsockopt$auto(r2, 0x84, 0x66, 0x0, &(0x7f0000000000)=0x7ffe) 693.47804ms ago: executing program 0 (id=788): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$auto_rb_simple_fops_trace(r2, &(0x7f0000000400)="416d23c22541f392ef9b29d44df98e49351b85c809c512284e46d404b144e21f1cd36a6c392840705d211b60c62a4b37d84c130c3f0cb3c5aacb4fb3724283c2c9915c78ac66f4de3ba2491f6bffc7fb0154f97b2e64c83f7eb1d9c3996d9489f485c5f4b008f906a770b540ded75019a985c451efe9b25ecd2c5844cc9083fb48cb600caa37d436794f907fc49ff7188239ce1bfac93bc822997943305444c5d5a71d76a86b68eb84c734c9e46a5d6da75edad04b8cd8db9276d05b258c5c3ce7f5eea45c6cbb4cabceba17b029d7c31c1a3472a72c594e86479c0eb25e93fc6e5738277af8d016a93599ab517b9ecec4a861e4da971794a5997c46", 0xfc) syz_genetlink_get_family_id$auto_nl80211(0x0, r3) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r4 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0x2}) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e1000000ff00"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r5 = socket(0x15, 0x5, 0x0) getsockopt$auto(r5, 0x114, 0x2720, 0xfffffffffffffffc, 0x0) 424.207638ms ago: executing program 2 (id=789): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000540), 0x40102, 0x0) bpf$auto(0x3, 0x0, 0x7) setresuid$auto(0xffffffffffffffff, 0x8, 0x8000) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) sendmsg$auto_IPVS_CMD_GET_SERVICE(r0, &(0x7f0000005640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040090}, 0x40000) (async) sendmsg$auto_IPVS_CMD_GET_SERVICE(r0, &(0x7f0000005640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040090}, 0x40000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) sysfs$auto(0x2, 0x20, 0x6) r1 = fsopen$auto(0x0, 0x1) write$auto(0x3, 0x0, 0x7fffffff) sendmsg$auto_IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x40081) (async) sendmsg$auto_IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x40081) read$auto(0x3, 0x0, 0x80) ioctl$auto_TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f00000002c0)={0x7, 0x0}) (async) ioctl$auto_TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f00000002c0)={0x7, 0x0}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/cgroup.kill\x00', 0xa001, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/cgroup.kill\x00', 0xa001, 0x0) write$auto(0x3, 0x0, 0x100000000) (async) write$auto(0x3, 0x0, 0x100000000) syz_genetlink_get_family_id$auto_nl80211(0x0, r0) (async) syz_genetlink_get_family_id$auto_nl80211(0x0, r0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, r1, 0x320000000000) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x1a9) fcntl$auto(r2, 0x400, 0x1) fcntl$auto(r2, 0xb, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/amidi2\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x64, 0xdb, 0xeb1, r3, 0x800200000008001) (async) mmap$auto(0x0, 0x64, 0xdb, 0xeb1, r3, 0x800200000008001) socket(0xa, 0x2, 0x0) (async) r4 = socket(0xa, 0x2, 0x0) getsockopt$auto(r4, 0x1, 0x49, 0x0, 0x0) (async) getsockopt$auto(r4, 0x1, 0x49, 0x0, 0x0) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec26\x00', 0x88000, 0x0) 0s ago: executing program 1 (id=790): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf250400000005001100000000000400120006000b00f94000"], 0x28}, 0x1, 0x0, 0x0, 0x4000084}, 0x10) kernel console output (not intermixed with test programs): etdevsim2: renamed from eth2 [ 95.848115][ T5829] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.857133][ T5829] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.867199][ T5829] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.908882][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.969000][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.985716][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.018494][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.026295][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.053936][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.061369][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.101663][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.136698][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.143884][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.170903][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.178446][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.242124][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.308642][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.332204][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.362616][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.369937][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.406023][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.426335][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.433584][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.447292][ T5826] Bluetooth: hci0: command tx timeout [ 96.473387][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.480610][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.512580][ T1125] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.519985][ T1125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.536125][ T5826] Bluetooth: hci2: command tx timeout [ 96.541712][ T5823] Bluetooth: hci1: command tx timeout [ 96.542276][ T5834] Bluetooth: hci3: command tx timeout [ 96.790236][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.851547][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.058081][ T5828] veth0_vlan: entered promiscuous mode [ 97.107195][ T5821] veth0_vlan: entered promiscuous mode [ 97.138310][ T5828] veth1_vlan: entered promiscuous mode [ 97.170663][ T5821] veth1_vlan: entered promiscuous mode [ 97.193870][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.240018][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.248357][ T5828] veth0_macvtap: entered promiscuous mode [ 97.269769][ T5828] veth1_macvtap: entered promiscuous mode [ 97.299512][ T5821] veth0_macvtap: entered promiscuous mode [ 97.337811][ T5821] veth1_macvtap: entered promiscuous mode [ 97.353281][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.386132][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.424877][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.443212][ T5829] veth0_vlan: entered promiscuous mode [ 97.452612][ T5825] veth0_vlan: entered promiscuous mode [ 97.460614][ T35] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.470937][ T35] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.488073][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.498382][ T35] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.507401][ T35] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.531411][ T47] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.541173][ T47] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.558452][ T5825] veth1_vlan: entered promiscuous mode [ 97.566426][ T47] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.577579][ T47] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.589533][ T5829] veth1_vlan: entered promiscuous mode [ 97.775825][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.787182][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.788747][ T5825] veth0_macvtap: entered promiscuous mode [ 97.813111][ T5829] veth0_macvtap: entered promiscuous mode [ 97.830784][ T5825] veth1_macvtap: entered promiscuous mode [ 97.847465][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.858908][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.870655][ T5829] veth1_macvtap: entered promiscuous mode [ 97.901561][ T1125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.922175][ T1125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.933369][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.956395][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.992897][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.010296][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.032409][ T1125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.059577][ T47] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.060614][ T5821] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.069506][ T1125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.084985][ T47] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.103936][ T47] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.121733][ T47] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.138127][ T47] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.148446][ T47] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.173145][ T47] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.182917][ T47] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.503119][ T1125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.521733][ T1125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.529447][ T5834] Bluetooth: hci0: command tx timeout [ 98.598164][ T172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.606523][ T5834] Bluetooth: hci2: command tx timeout [ 98.616201][ T5834] Bluetooth: hci3: command tx timeout [ 98.617168][ T5826] Bluetooth: hci1: command tx timeout [ 98.654191][ T172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.843359][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.865596][ T5915] mmap: syz.1.2 (5915) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 98.868212][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.922037][ T5918] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 98.962896][ T1125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.973024][ T1125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.495749][ T5941] FAULT_INJECTION: forcing a failure. [ 100.495749][ T5941] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 100.546364][ T5941] CPU: 0 UID: 0 PID: 5941 Comm: syz.2.8 Not tainted syzkaller #0 PREEMPT(full) [ 100.546391][ T5941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 100.546401][ T5941] Call Trace: [ 100.546408][ T5941] [ 100.546415][ T5941] dump_stack_lvl+0x100/0x190 [ 100.546450][ T5941] should_fail_ex.cold+0x5/0xa [ 100.546473][ T5941] _copy_from_user+0x2e/0xd0 [ 100.546498][ T5941] move_addr_to_kernel+0x65/0x170 [ 100.546524][ T5941] __sys_connect+0xb5/0x170 [ 100.546548][ T5941] ? __pfx___sys_connect+0x10/0x10 [ 100.546585][ T5941] __x64_sys_connect+0x72/0xb0 [ 100.546606][ T5941] ? lockdep_hardirqs_on+0x78/0x100 [ 100.546630][ T5941] do_syscall_64+0x10b/0xf80 [ 100.546650][ T5941] ? clear_bhb_loop+0x40/0x90 [ 100.546672][ T5941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.546692][ T5941] RIP: 0033:0x7f777a39c819 [ 100.546708][ T5941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.546724][ T5941] RSP: 002b:00007f777b19e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 100.546742][ T5941] RAX: ffffffffffffffda RBX: 00007f777a615fa0 RCX: 00007f777a39c819 [ 100.546753][ T5941] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000003 [ 100.546763][ T5941] RBP: 00007f777a432c91 R08: 0000000000000000 R09: 0000000000000000 [ 100.546773][ T5941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.546783][ T5941] R13: 00007f777a616038 R14: 00007f777a615fa0 R15: 00007ffdc8dd9918 [ 100.546805][ T5941] [ 100.714142][ T5826] Bluetooth: hci0: command tx timeout [ 100.720931][ T5826] Bluetooth: hci3: command tx timeout [ 100.726719][ T5826] Bluetooth: hci2: command tx timeout [ 100.732323][ T5826] Bluetooth: hci1: command tx timeout [ 100.739019][ T5941] process 'syz.2.8' launched '/dev/fd/6/./file0' with NULL argv: empty string added [ 101.949207][ T5958] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 101.979309][ T5958] netlink: 524 bytes leftover after parsing attributes in process `syz.3.12'. [ 101.996577][ T5958] openvswitch: netlink: Flow key attr not present in new flow. [ 103.299673][ T5972] sp0: Synchronizing with TNC [ 104.097625][ T5987] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 114.292920][ T6108] netlink: 12 bytes leftover after parsing attributes in process `syz.3.46'. [ 114.581354][ T6107] HfR: entered promiscuous mode [ 114.599367][ T6108] HfR: left promiscuous mode [ 117.048463][ T6127] netlink: 'syz.0.49': attribute type 9 has an invalid length. [ 117.078519][ T6127] Zero length message leads to an empty skb [ 117.705406][ T5834] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 121.288781][ T6176] random: crng reseeded on system resumption [ 121.727898][ T6176] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 122.194226][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 122.306071][ T6188] netlink: 28 bytes leftover after parsing attributes in process `syz.0.63'. [ 126.239063][ T29] audit: type=1800 audit(1776319646.351:2): pid=6236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.72" name="discovery_nqn" dev="configfs" ino=9975 res=0 errno=0 [ 127.695039][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 128.568885][ T6260] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 129.245553][ T6263] Unable to find swap-space signature [ 129.328158][ T6268] vivid-007: ================= START STATUS ================= [ 129.337245][ T6268] vivid-007: Generate PTS: true [ 129.343635][ T6268] vivid-007: Generate SCR: true [ 129.348723][ T6268] tpg source WxH: 320x240 (Y'CbCr) [ 129.353892][ T6268] tpg field: 1 [ 129.357609][ T6268] tpg crop: (0,0)/320x240 [ 129.364599][ T6268] tpg compose: (0,0)/320x240 [ 129.391197][ T6268] tpg colorspace: 8 [ 129.431288][ T6268] tpg transfer function: 0/0 [ 129.456020][ T6268] tpg Y'CbCr encoding: 0/0 [ 129.473305][ T6268] tpg quantization: 0/0 [ 129.515079][ T6268] tpg RGB range: 0/2 [ 129.518664][ T6271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.80'. [ 129.531034][ T6268] vivid-007: ================== END STATUS ================== [ 130.536288][ T6281] netlink: 12 bytes leftover after parsing attributes in process `syz.3.82'. [ 130.751068][ T6284] netlink: 12 bytes leftover after parsing attributes in process `syz.1.83'. [ 130.888086][ T6286] netlink: 28 bytes leftover after parsing attributes in process `syz.2.84'. [ 131.264975][ T5834] Bluetooth: hci2: unexpected event 0x1d length: 6 > 5 [ 132.205742][ T6310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.90'. [ 133.336354][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.350500][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.085108][ T6338] netlink: 350 bytes leftover after parsing attributes in process `syz.2.97'. [ 136.859253][ T6340] netlink: 'syz.1.98': attribute type 2 has an invalid length. [ 137.831437][ T6384] netlink: 8 bytes leftover after parsing attributes in process `syz.3.108'. [ 139.868634][ T6397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.111'. [ 140.507455][ T6420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.118'. [ 142.377422][ T6467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.128'. [ 143.025500][ T6473] netlink: 28 bytes leftover after parsing attributes in process `syz.2.131'. [ 143.585530][ T6487] [U] " [ 143.588880][ T6487] [U] [ 143.591584][ T6487] [U] [ 143.594506][ T6487] [U] [ 143.600334][ T6487] [U] [ 143.603734][ T6487] [U] [ 143.606698][ T6487] [U] [ 143.609452][ T6487] [U] [ 143.632495][ T6487] [U] [ 143.635351][ T6487] [U] [ 143.638139][ T6487] [U] [ 143.640945][ T6487] [U] [ 143.673263][ T6487] [U] [ 143.676153][ T6487] [U] [ 143.679338][ T6487] [U] [ 143.682252][ T6487] [U] [ 143.862831][ T6487] [U] [ 143.865960][ T6487] [U] [ 143.868858][ T6487] [U] [ 143.871649][ T6487] [U] [ 143.884244][ T6493] scsi_dev_info_list_add_str: bad dev info string '' '' '' [ 144.014982][ T6487] [U] [ 144.018138][ T6487] [U] [ 144.021620][ T6487] [U] [ 144.024753][ T6487] [U] [ 144.029899][ T6487] [U] [ 144.033148][ T6487] [U] [ 144.036185][ T6487] [U] [ 144.039130][ T6487] [U] [ 144.125360][ T6487] [U] [ 144.128400][ T6487] [U] [ 144.131108][ T6487] [U] [ 144.133996][ T6487] [U] [ 144.171367][ T6487] [U] [ 144.174264][ T6487] [U] [ 144.177014][ T6487] [U] [ 144.179759][ T6487] [U] [ 144.183171][ T6487] [U] [ 144.185924][ T6487] [U] [ 144.188850][ T6487] [U] [ 144.191560][ T6487] [U] [ 144.224803][ T6487] [U] [ 144.227693][ T6487] [U] [ 144.230634][ T6487] [U] [ 144.233375][ T6487] [U] [ 144.260378][ T6487] [U] [ 144.293988][ T6489] FAULT_INJECTION: forcing a failure. [ 144.293988][ T6489] name failslab, interval 1, probability 0, space 0, times 1 [ 144.318134][ T6489] CPU: 1 UID: 0 PID: 6489 Comm: syz.0.134 Not tainted syzkaller #0 PREEMPT(full) [ 144.318174][ T6489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 144.318189][ T6489] Call Trace: [ 144.318198][ T6489] [ 144.318208][ T6489] dump_stack_lvl+0x100/0x190 [ 144.318261][ T6489] should_fail_ex.cold+0x5/0xa [ 144.318298][ T6489] should_failslab+0xc2/0x120 [ 144.318349][ T6489] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 144.318390][ T6489] ? sock_alloc_inode+0x26/0x290 [ 144.318442][ T6489] ? __pfx_sock_alloc_inode+0x10/0x10 [ 144.318492][ T6489] sock_alloc_inode+0x26/0x290 [ 144.318538][ T6489] ? __pfx_sock_alloc_inode+0x10/0x10 [ 144.318567][ T6489] alloc_inode+0x68/0x250 [ 144.318589][ T6489] sock_alloc+0x44/0x280 [ 144.318617][ T6489] ? security_socket_create+0x7f/0x250 [ 144.318636][ T6489] __sock_create+0xc2/0x860 [ 144.318659][ T6489] __sys_socketpair+0x261/0x5b0 [ 144.318682][ T6489] ? __pfx___sys_socketpair+0x10/0x10 [ 144.318703][ T6489] ? xfd_validate_state+0x129/0x190 [ 144.318726][ T6489] __x64_sys_socketpair+0x96/0x100 [ 144.318747][ T6489] ? lockdep_hardirqs_on+0x78/0x100 [ 144.318768][ T6489] do_syscall_64+0x10b/0xf80 [ 144.318789][ T6489] ? clear_bhb_loop+0x40/0x90 [ 144.318812][ T6489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.318830][ T6489] RIP: 0033:0x7fe954f9c819 [ 144.318854][ T6489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.318871][ T6489] RSP: 002b:00007fe9531d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 144.318889][ T6489] RAX: ffffffffffffffda RBX: 00007fe955216090 RCX: 00007fe954f9c819 [ 144.318900][ T6489] RDX: 8000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 144.318910][ T6489] RBP: 00007fe955032c91 R08: 0000000000000000 R09: 0000000000000000 [ 144.318921][ T6489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.318931][ T6489] R13: 00007fe955216128 R14: 00007fe955216090 R15: 00007ffe7ccc7f08 [ 144.318954][ T6489] [ 144.320066][ T6489] socket: no more sockets [ 146.239666][ T6519] random: crng reseeded on system resumption [ 146.416109][ T6522] FAULT_INJECTION: forcing a failure. [ 146.416109][ T6522] name failslab, interval 1, probability 0, space 0, times 0 [ 146.460214][ T6522] CPU: 1 UID: 0 PID: 6522 Comm: syz.0.141 Not tainted syzkaller #0 PREEMPT(full) [ 146.460256][ T6522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 146.460273][ T6522] Call Trace: [ 146.460282][ T6522] [ 146.460292][ T6522] dump_stack_lvl+0x100/0x190 [ 146.460346][ T6522] should_fail_ex.cold+0x5/0xa [ 146.460384][ T6522] should_failslab+0xc2/0x120 [ 146.460426][ T6522] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 146.460467][ T6522] ? kvasprintf_const+0x66/0x1a0 [ 146.460504][ T6522] ? nci_allocate_device+0x23b/0x410 [ 146.460542][ T6522] ? virtual_ncidev_open+0x6f/0x220 [ 146.460591][ T6522] kvasprintf+0xbc/0x150 [ 146.460624][ T6522] ? __pfx_kvasprintf+0x10/0x10 [ 146.460659][ T6522] ? ida_alloc_range+0x70d/0x830 [ 146.460693][ T6522] ? rcu_is_watching+0x12/0xc0 [ 146.460722][ T6522] ? ida_alloc_range+0x70d/0x830 [ 146.460755][ T6522] ? kfree+0x1dd/0x6c0 [ 146.460789][ T6522] kvasprintf_const+0x66/0x1a0 [ 146.460826][ T6522] kobject_set_name_vargs+0x5a/0x140 [ 146.460871][ T6522] dev_set_name+0xc7/0x100 [ 146.460918][ T6522] ? __pfx_dev_set_name+0x10/0x10 [ 146.460980][ T6522] nfc_allocate_device+0x206/0x5e0 [ 146.461023][ T6522] nci_allocate_device+0x23b/0x410 [ 146.461067][ T6522] virtual_ncidev_open+0x6f/0x220 [ 146.461094][ T6522] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 146.461120][ T6522] misc_open+0x26d/0x450 [ 146.461159][ T6522] ? __pfx_misc_open+0x10/0x10 [ 146.461202][ T6522] chrdev_open+0x234/0x6a0 [ 146.461254][ T6522] ? __pfx_apparmor_file_open+0x10/0x10 [ 146.461287][ T6522] ? __pfx_chrdev_open+0x10/0x10 [ 146.461333][ T6522] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 146.461387][ T6522] do_dentry_open+0x6d8/0x1660 [ 146.461431][ T6522] ? __pfx_chrdev_open+0x10/0x10 [ 146.461488][ T6522] vfs_open+0x82/0x3f0 [ 146.461526][ T6522] path_openat+0x208c/0x31a0 [ 146.461596][ T6522] ? __pfx_path_openat+0x10/0x10 [ 146.461659][ T6522] do_file_open+0x20e/0x430 [ 146.461703][ T6522] ? __pfx_do_file_open+0x10/0x10 [ 146.461775][ T6522] ? alloc_fd+0x476/0x790 [ 146.461823][ T6522] ? do_getname+0x191/0x390 [ 146.461857][ T6522] do_sys_openat2+0x10d/0x1e0 [ 146.461892][ T6522] ? __pfx_do_sys_openat2+0x10/0x10 [ 146.461941][ T6522] __x64_sys_openat+0x12d/0x210 [ 146.461978][ T6522] ? __pfx___x64_sys_openat+0x10/0x10 [ 146.462022][ T6522] ? rcu_is_watching+0x12/0xc0 [ 146.462059][ T6522] do_syscall_64+0x10b/0xf80 [ 146.462096][ T6522] ? clear_bhb_loop+0x40/0x90 [ 146.462148][ T6522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.462180][ T6522] RIP: 0033:0x7fe954f9c819 [ 146.462209][ T6522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.462235][ T6522] RSP: 002b:00007fe9531b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 146.462263][ T6522] RAX: ffffffffffffffda RBX: 00007fe955216180 RCX: 00007fe954f9c819 [ 146.462282][ T6522] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 146.462301][ T6522] RBP: 00007fe955032c91 R08: 0000000000000000 R09: 0000000000000000 [ 146.462318][ T6522] R10: 000000000000003e R11: 0000000000000246 R12: 0000000000000000 [ 146.462334][ T6522] R13: 00007fe955216218 R14: 00007fe955216180 R15: 00007ffe7ccc7f08 [ 146.462375][ T6522] [ 148.363411][ T6550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.149'. [ 149.675405][ T6557] FAULT_INJECTION: forcing a failure. [ 149.675405][ T6557] name failslab, interval 1, probability 0, space 0, times 0 [ 149.720780][ T6566] netlink: 'syz.1.152': attribute type 11 has an invalid length. [ 149.746730][ T6557] CPU: 0 UID: 0 PID: 6557 Comm: syz.2.150 Not tainted syzkaller #0 PREEMPT(full) [ 149.746771][ T6557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 149.746799][ T6557] Call Trace: [ 149.746809][ T6557] [ 149.746820][ T6557] dump_stack_lvl+0x100/0x190 [ 149.746868][ T6557] should_fail_ex.cold+0x5/0xa [ 149.746892][ T6557] should_failslab+0xc2/0x120 [ 149.746920][ T6557] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 149.746944][ T6557] ? sock_alloc_inode+0x26/0x290 [ 149.746975][ T6557] ? __pfx_sock_alloc_inode+0x10/0x10 [ 149.747005][ T6557] sock_alloc_inode+0x26/0x290 [ 149.747034][ T6557] ? __pfx_sock_alloc_inode+0x10/0x10 [ 149.747062][ T6557] alloc_inode+0x68/0x250 [ 149.747083][ T6557] sock_alloc+0x44/0x280 [ 149.747108][ T6557] ? security_socket_create+0x7f/0x250 [ 149.747128][ T6557] __sock_create+0xc2/0x860 [ 149.747151][ T6557] __sys_socketpair+0x261/0x5b0 [ 149.747173][ T6557] ? __pfx___sys_socketpair+0x10/0x10 [ 149.747194][ T6557] ? xfd_validate_state+0x129/0x190 [ 149.747217][ T6557] __x64_sys_socketpair+0x96/0x100 [ 149.747238][ T6557] ? lockdep_hardirqs_on+0x78/0x100 [ 149.747260][ T6557] do_syscall_64+0x10b/0xf80 [ 149.747280][ T6557] ? clear_bhb_loop+0x40/0x90 [ 149.747302][ T6557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.747321][ T6557] RIP: 0033:0x7f777a39c819 [ 149.747337][ T6557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.747354][ T6557] RSP: 002b:00007f777b17d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 149.747372][ T6557] RAX: ffffffffffffffda RBX: 00007f777a616090 RCX: 00007f777a39c819 [ 149.747383][ T6557] RDX: 8000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 149.747393][ T6557] RBP: 00007f777a432c91 R08: 0000000000000000 R09: 0000000000000000 [ 149.747403][ T6557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.747413][ T6557] R13: 00007f777a616128 R14: 00007f777a616090 R15: 00007ffdc8dd9918 [ 149.747434][ T6557] [ 149.752127][ T6557] socket: no more sockets [ 151.418048][ T6590] netlink: 'syz.2.158': attribute type 2 has an invalid length. [ 151.659441][ T6597] capability: warning: `syz.1.160' uses 32-bit capabilities (legacy support in use) [ 152.543486][ T6618] FAULT_INJECTION: forcing a failure. [ 152.543486][ T6618] name failslab, interval 1, probability 0, space 0, times 0 [ 152.587091][ T6618] CPU: 0 UID: 0 PID: 6618 Comm: syz.1.164 Not tainted syzkaller #0 PREEMPT(full) [ 152.587125][ T6618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 152.587136][ T6618] Call Trace: [ 152.587142][ T6618] [ 152.587150][ T6618] dump_stack_lvl+0x100/0x190 [ 152.587185][ T6618] should_fail_ex.cold+0x5/0xa [ 152.587208][ T6618] ? lsm_blob_alloc+0x68/0x90 [ 152.587234][ T6618] should_failslab+0xc2/0x120 [ 152.587262][ T6618] __kmalloc_noprof+0xe0/0x850 [ 152.587285][ T6618] ? trace_kmem_cache_alloc+0xd5/0x100 [ 152.587317][ T6618] lsm_blob_alloc+0x68/0x90 [ 152.587345][ T6618] security_prepare_creds+0x2d/0x290 [ 152.587372][ T6618] prepare_creds+0x5d6/0x950 [ 152.587393][ T6618] __sys_setresuid+0x458/0x1280 [ 152.587418][ T6618] do_syscall_64+0x10b/0xf80 [ 152.587440][ T6618] ? clear_bhb_loop+0x40/0x90 [ 152.587462][ T6618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.587481][ T6618] RIP: 0033:0x7f3ee419c819 [ 152.587497][ T6618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.587516][ T6618] RSP: 002b:00007f3ee23f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 152.587540][ T6618] RAX: ffffffffffffffda RBX: 00007f3ee4415fa0 RCX: 00007f3ee419c819 [ 152.587552][ T6618] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000002 [ 152.587561][ T6618] RBP: 00007f3ee4232c91 R08: 0000000000000000 R09: 0000000000000000 [ 152.587571][ T6618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.587582][ T6618] R13: 00007f3ee4416038 R14: 00007f3ee4415fa0 R15: 00007ffd2a795a18 [ 152.587603][ T6618] [ 152.784837][ T6606] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 152.833725][ T6606] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 152.947690][ T6606] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 153.002614][ T6606] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 153.025009][ T6606] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 153.115363][ T6606] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 153.144573][ T6606] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 153.152947][ T6606] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 153.181227][ T6606] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 153.197647][ T6606] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 153.237664][ T6606] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 153.246868][ T6606] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 153.266025][ T6606] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 153.410464][ T6629] FAULT_INJECTION: forcing a failure. [ 153.410464][ T6629] name failslab, interval 1, probability 0, space 0, times 0 [ 153.506604][ T6629] CPU: 0 UID: 0 PID: 6629 Comm: syz.0.165 Not tainted syzkaller #0 PREEMPT(full) [ 153.506650][ T6629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 153.506666][ T6629] Call Trace: [ 153.506676][ T6629] [ 153.506687][ T6629] dump_stack_lvl+0x100/0x190 [ 153.506763][ T6629] should_fail_ex.cold+0x5/0xa [ 153.506955][ T6629] should_failslab+0xc2/0x120 [ 153.507004][ T6629] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 153.507042][ T6629] ? security_inode_alloc+0x3b/0x2c0 [ 153.507073][ T6629] ? lockdep_init_map_type+0x5c/0x250 [ 153.507125][ T6629] security_inode_alloc+0x3b/0x2c0 [ 153.507161][ T6629] inode_init_always_gfp+0xcc0/0x1000 [ 153.507219][ T6629] alloc_inode+0x8e/0x250 [ 153.507254][ T6629] new_inode+0x22/0x1c0 [ 153.507293][ T6629] proc_get_inode+0x1d/0x780 [ 153.507339][ T6629] proc_lookup_de+0x236/0x360 [ 153.507391][ T6629] proc_lookup+0xcf/0x110 [ 153.507435][ T6629] lookup_open.isra.0+0x631/0x11b0 [ 153.507483][ T6629] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 153.507555][ T6629] ? mnt_get_write_access+0x1e9/0x2f0 [ 153.507599][ T6629] path_openat+0xa98/0x31a0 [ 153.507658][ T6629] ? __pfx_path_openat+0x10/0x10 [ 153.507714][ T6629] do_file_open+0x20e/0x430 [ 153.507759][ T6629] ? __pfx_do_file_open+0x10/0x10 [ 153.507828][ T6629] ? alloc_fd+0x476/0x790 [ 153.507875][ T6629] ? do_getname+0x191/0x390 [ 153.507909][ T6629] do_sys_openat2+0x10d/0x1e0 [ 153.507944][ T6629] ? __pfx_do_sys_openat2+0x10/0x10 [ 153.507981][ T6629] ? __fget_files+0x21f/0x3d0 [ 153.508035][ T6629] __x64_sys_openat+0x12d/0x210 [ 153.508073][ T6629] ? __pfx___x64_sys_openat+0x10/0x10 [ 153.508115][ T6629] ? rcu_is_watching+0x12/0xc0 [ 153.508152][ T6629] do_syscall_64+0x10b/0xf80 [ 153.508189][ T6629] ? clear_bhb_loop+0x40/0x90 [ 153.508229][ T6629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.508261][ T6629] RIP: 0033:0x7fe954f9c819 [ 153.508289][ T6629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.508316][ T6629] RSP: 002b:00007fe9531b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 153.508348][ T6629] RAX: ffffffffffffffda RBX: 00007fe955216180 RCX: 00007fe954f9c819 [ 153.508369][ T6629] RDX: 0000000000189c02 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 153.508388][ T6629] RBP: 00007fe955032c91 R08: 0000000000000000 R09: 0000000000000000 [ 153.508405][ T6629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.508420][ T6629] R13: 00007fe955216218 R14: 00007fe955216180 R15: 00007ffe7ccc7f08 [ 153.508455][ T6629] [ 154.089514][ T6638] netlink: 'syz.2.175': attribute type 11 has an invalid length. [ 154.125163][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout [ 154.557513][ T6645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.169'. [ 154.843787][ T6636] FAULT_INJECTION: forcing a failure. [ 154.843787][ T6636] name failslab, interval 1, probability 0, space 0, times 0 [ 154.876456][ T6636] CPU: 1 UID: 0 PID: 6636 Comm: syz.3.167 Not tainted syzkaller #0 PREEMPT(full) [ 154.876499][ T6636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 154.876514][ T6636] Call Trace: [ 154.876525][ T6636] [ 154.876537][ T6636] dump_stack_lvl+0x100/0x190 [ 154.876593][ T6636] should_fail_ex.cold+0x5/0xa [ 154.876630][ T6636] should_failslab+0xc2/0x120 [ 154.876672][ T6636] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 154.876711][ T6636] ? sock_alloc_inode+0x26/0x290 [ 154.876754][ T6636] ? __pfx_sock_alloc_inode+0x10/0x10 [ 154.876786][ T6636] sock_alloc_inode+0x26/0x290 [ 154.876816][ T6636] ? __pfx_sock_alloc_inode+0x10/0x10 [ 154.876844][ T6636] alloc_inode+0x68/0x250 [ 154.876865][ T6636] sock_alloc+0x44/0x280 [ 154.876891][ T6636] ? security_socket_create+0x7f/0x250 [ 154.876913][ T6636] __sock_create+0xc2/0x860 [ 154.876936][ T6636] __sys_socketpair+0x261/0x5b0 [ 154.876958][ T6636] ? __pfx___sys_socketpair+0x10/0x10 [ 154.876980][ T6636] ? xfd_validate_state+0x129/0x190 [ 154.877003][ T6636] __x64_sys_socketpair+0x96/0x100 [ 154.877024][ T6636] ? lockdep_hardirqs_on+0x78/0x100 [ 154.877046][ T6636] do_syscall_64+0x10b/0xf80 [ 154.877067][ T6636] ? clear_bhb_loop+0x40/0x90 [ 154.877089][ T6636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.877107][ T6636] RIP: 0033:0x7f242499c819 [ 154.877123][ T6636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.877140][ T6636] RSP: 002b:00007f24257fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 154.877158][ T6636] RAX: ffffffffffffffda RBX: 00007f2424c16090 RCX: 00007f242499c819 [ 154.877169][ T6636] RDX: 8000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 154.877179][ T6636] RBP: 00007f2424a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 154.877189][ T6636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.877199][ T6636] R13: 00007f2424c16128 R14: 00007f2424c16090 R15: 00007fffe9199a98 [ 154.877228][ T6636] [ 154.880505][ T6636] socket: no more sockets [ 155.014241][ T5834] Bluetooth: hci1: command 0x0c1a tx timeout [ 155.164276][ T5834] Bluetooth: hci3: command 0x0c1a tx timeout [ 155.244162][ T5834] Bluetooth: hci2: command 0x0c1a tx timeout [ 155.420641][ T6654] netlink: 'syz.1.171': attribute type 2 has an invalid length. [ 156.204324][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout [ 157.165953][ T5834] Bluetooth: hci1: command 0x0c1a tx timeout [ 157.244291][ T5834] Bluetooth: hci3: command 0x0c1a tx timeout [ 157.324153][ T5834] Bluetooth: hci2: command 0x0c1a tx timeout [ 158.139476][ T29] audit: type=1804 audit(1776319678.241:3): pid=6701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.182" name="/newroot/46/file0" dev="tmpfs" ino=257 res=1 errno=0 [ 158.293586][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout [ 159.254141][ T5826] Bluetooth: hci1: command 0x0c1a tx timeout [ 159.324310][ T5826] Bluetooth: hci3: command 0x0c1a tx timeout [ 159.404184][ T5826] Bluetooth: hci2: command 0x0c1a tx timeout [ 160.764361][ T5834] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 161.405409][ T5834] Bluetooth: hci3: command 0x0c1a tx timeout [ 161.987103][ T6758] ubi31: attaching mtd0 [ 162.111987][ T6758] ubi31: scanning is finished [ 162.144178][ T6758] ubi31: empty MTD device detected [ 162.434909][ T6773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.199'. [ 163.312367][ T6758] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 168.829668][ T6838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.210'. [ 169.397677][ T6852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.214'. [ 170.133091][ T6859] misc userio: Invalid payload size [ 173.744422][ T6908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.224'. [ 174.055876][ T6868] kexec: Could not allocate control_code_buffer [ 175.331658][ T6941] misc userio: Invalid payload size [ 177.609757][ T6984] FAULT_INJECTION: forcing a failure. [ 177.609757][ T6984] name failslab, interval 1, probability 0, space 0, times 0 [ 177.654109][ T6984] CPU: 1 UID: 0 PID: 6984 Comm: syz.3.238 Not tainted syzkaller #0 PREEMPT(full) [ 177.654147][ T6984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 177.654162][ T6984] Call Trace: [ 177.654172][ T6984] [ 177.654183][ T6984] dump_stack_lvl+0x100/0x190 [ 177.654237][ T6984] should_fail_ex.cold+0x5/0xa [ 177.654285][ T6984] should_failslab+0xc2/0x120 [ 177.654330][ T6984] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 177.654373][ T6984] ? dst_alloc+0x99/0x1a0 [ 177.654415][ T6984] dst_alloc+0x99/0x1a0 [ 177.654453][ T6984] rt_dst_alloc+0x35/0x3a0 [ 177.654492][ T6984] ip_route_output_key_hash_rcu+0x87a/0x2870 [ 177.654542][ T6984] ip_route_output_key_hash+0x118/0x2b0 [ 177.654582][ T6984] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 177.654626][ T6984] ? __call_rcu_common.constprop.0+0x3f0/0x9b0 [ 177.654670][ T6984] ? lockdep_hardirqs_on+0x78/0x100 [ 177.654715][ T6984] ip_route_output_flow+0x27/0x150 [ 177.654753][ T6984] tcp_v4_connect+0x8e8/0x1b40 [ 177.654802][ T6984] ? __pfx_tcp_v4_connect+0x10/0x10 [ 177.654848][ T6984] mptcp_connect+0x4c6/0xaf0 [ 177.654883][ T6984] __inet_stream_connect+0x208/0xfa0 [ 177.654915][ T6984] ? __pfx___schedule+0x10/0x10 [ 177.654951][ T6984] ? __pfx___inet_stream_connect+0x10/0x10 [ 177.654982][ T6984] ? preempt_schedule_thunk+0x16/0x30 [ 177.655025][ T6984] ? __pfx_inet_stream_connect+0x10/0x10 [ 177.655055][ T6984] ? preempt_schedule_common+0x42/0xc0 [ 177.655090][ T6984] ? preempt_schedule_thunk+0x16/0x30 [ 177.655141][ T6984] ? __pfx_inet_stream_connect+0x10/0x10 [ 177.655171][ T6984] inet_stream_connect+0x57/0xa0 [ 177.655207][ T6984] __sys_connect_file+0x141/0x1a0 [ 177.655248][ T6984] __sys_connect+0x141/0x170 [ 177.655293][ T6984] ? __pfx___sys_connect+0x10/0x10 [ 177.655325][ T6984] ? __fget_files+0x21f/0x3d0 [ 177.655382][ T6984] ? __pfx_ksys_write+0x10/0x10 [ 177.655432][ T6984] __x64_sys_connect+0x72/0xb0 [ 177.655465][ T6984] ? lockdep_hardirqs_on+0x78/0x100 [ 177.655499][ T6984] do_syscall_64+0x10b/0xf80 [ 177.655528][ T6984] ? clear_bhb_loop+0x40/0x90 [ 177.655561][ T6984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.655591][ T6984] RIP: 0033:0x7f242499c819 [ 177.655616][ T6984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.655642][ T6984] RSP: 002b:00007f24257fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 177.655670][ T6984] RAX: ffffffffffffffda RBX: 00007f2424c16090 RCX: 00007f242499c819 [ 177.655688][ T6984] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000003 [ 177.655705][ T6984] RBP: 00007f24257fb090 R08: 0000000000000000 R09: 0000000000000000 [ 177.655722][ T6984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.655738][ T6984] R13: 00007f2424c16128 R14: 00007f2424c16090 R15: 00007fffe9199a98 [ 177.655778][ T6984] [ 178.362272][ T6992] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 178.613073][ T6992] can: request_module (can-proto-4) failed. [ 179.038817][ T7009] synth uevent: /module/null_blk: unknown uevent action string [ 180.170412][ T7037] FAULT_INJECTION: forcing a failure. [ 180.170412][ T7037] name failslab, interval 1, probability 0, space 0, times 0 [ 180.195203][ T7037] CPU: 0 UID: 0 PID: 7037 Comm: syz.2.251 Not tainted syzkaller #0 PREEMPT(full) [ 180.195230][ T7037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 180.195241][ T7037] Call Trace: [ 180.195248][ T7037] [ 180.195255][ T7037] dump_stack_lvl+0x100/0x190 [ 180.195291][ T7037] should_fail_ex.cold+0x5/0xa [ 180.195317][ T7037] should_failslab+0xc2/0x120 [ 180.195347][ T7037] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 180.195370][ T7037] ? ext4_alloc_io_end_vec+0x2b/0x1c0 [ 180.195406][ T7037] ext4_alloc_io_end_vec+0x2b/0x1c0 [ 180.195439][ T7037] ext4_do_writepages+0x1765/0x3f20 [ 180.195462][ T7037] ? do_raw_spin_lock+0x128/0x260 [ 180.195491][ T7037] ? hrtimer_start_range_ns+0x860/0x1a50 [ 180.195515][ T7037] ? __pfx_ext4_do_writepages+0x10/0x10 [ 180.195551][ T7037] ? ext4_writepages+0x347/0x790 [ 180.195582][ T7037] ext4_writepages+0x347/0x790 [ 180.195607][ T7037] ? __pfx_ext4_writepages+0x10/0x10 [ 180.195642][ T7037] ? __pfx_ext4_writepages+0x10/0x10 [ 180.195667][ T7037] do_writepages+0x278/0x600 [ 180.195688][ T7037] ? __pfx_do_writepages+0x10/0x10 [ 180.195704][ T7037] ? do_raw_spin_unlock+0x145/0x1e0 [ 180.195723][ T7037] ? _raw_spin_unlock+0x28/0x50 [ 180.195745][ T7037] filemap_writeback+0x22d/0x2e0 [ 180.195766][ T7037] ? __pfx_filemap_writeback+0x10/0x10 [ 180.195809][ T7037] ? mt_find+0x45e/0x8e0 [ 180.195834][ T7037] ? __pfx_mt_find+0x10/0x10 [ 180.195859][ T7037] file_write_and_wait_range+0xcd/0x140 [ 180.195884][ T7037] ext4_sync_file+0x358/0xb90 [ 180.195907][ T7037] ? __pfx_ext4_sync_file+0x10/0x10 [ 180.195928][ T7037] ? __up_read+0x210/0x6e0 [ 180.195947][ T7037] ? __pfx___up_read+0x10/0x10 [ 180.195969][ T7037] ? __do_sys_msync+0x39b/0x590 [ 180.196005][ T7037] ? __pfx_ext4_sync_file+0x10/0x10 [ 180.196036][ T7037] vfs_fsync_range+0x9b/0x190 [ 180.196065][ T7037] __do_sys_msync+0x3ca/0x590 [ 180.196108][ T7037] do_syscall_64+0x10b/0xf80 [ 180.196139][ T7037] ? clear_bhb_loop+0x40/0x90 [ 180.196188][ T7037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.196217][ T7037] RIP: 0033:0x7f777a39c819 [ 180.196245][ T7037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.196274][ T7037] RSP: 002b:00007f777b19e028 EFLAGS: 00000246 ORIG_RAX: 000000000000001a [ 180.196304][ T7037] RAX: ffffffffffffffda RBX: 00007f777a615fa0 RCX: 00007f777a39c819 [ 180.196322][ T7037] RDX: 0000000400000004 RSI: 01800000000000fe RDI: 000000001ffff000 [ 180.196341][ T7037] RBP: 00007f777a432c91 R08: 0000000000000000 R09: 0000000000000000 [ 180.196357][ T7037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.196373][ T7037] R13: 00007f777a616038 R14: 00007f777a615fa0 R15: 00007ffdc8dd9918 [ 180.196414][ T7037] [ 181.197335][ T7047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.253'. [ 184.322631][ T7083] FAULT_INJECTION: forcing a failure. [ 184.322631][ T7083] name failslab, interval 1, probability 0, space 0, times 0 [ 184.360194][ T7083] CPU: 1 UID: 0 PID: 7083 Comm: syz.1.261 Not tainted syzkaller #0 PREEMPT(full) [ 184.360325][ T7083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 184.360344][ T7083] Call Trace: [ 184.360355][ T7083] [ 184.360364][ T7083] dump_stack_lvl+0x100/0x190 [ 184.360423][ T7083] should_fail_ex.cold+0x5/0xa [ 184.360463][ T7083] should_failslab+0xc2/0x120 [ 184.360520][ T7083] __kmalloc_cache_noprof+0x7a/0x6f0 [ 184.360558][ T7083] ? snd_pcm_attach_substream+0x436/0xd20 [ 184.360600][ T7083] ? snd_ctl_get_preferred_subdevice+0x17a/0x1f0 [ 184.360650][ T7083] snd_pcm_attach_substream+0x436/0xd20 [ 184.360704][ T7083] snd_pcm_open_substream+0x90/0x1850 [ 184.360747][ T7083] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 184.360801][ T7083] snd_pcm_oss_open+0x735/0x1390 [ 184.360848][ T7083] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 184.360889][ T7083] ? __lock_acquire+0x4a5/0x2630 [ 184.360935][ T7083] ? __pfx_default_wake_function+0x10/0x10 [ 184.360974][ T7083] ? __lock_acquire+0x4a5/0x2630 [ 184.361022][ T7083] ? do_raw_spin_lock+0x128/0x260 [ 184.361055][ T7083] ? soundcore_open+0x231/0x5a0 [ 184.361087][ T7083] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 184.361122][ T7083] soundcore_open+0x2e3/0x5a0 [ 184.361153][ T7083] ? __pfx_soundcore_open+0x10/0x10 [ 184.361182][ T7083] chrdev_open+0x234/0x6a0 [ 184.361227][ T7083] ? __pfx_chrdev_open+0x10/0x10 [ 184.361274][ T7083] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 184.361331][ T7083] do_dentry_open+0x6d8/0x1660 [ 184.361376][ T7083] ? __pfx_chrdev_open+0x10/0x10 [ 184.361430][ T7083] vfs_open+0x82/0x3f0 [ 184.361479][ T7083] path_openat+0x208c/0x31a0 [ 184.361536][ T7083] ? __pfx_path_openat+0x10/0x10 [ 184.361590][ T7083] do_file_open+0x20e/0x430 [ 184.361632][ T7083] ? __pfx_do_file_open+0x10/0x10 [ 184.361702][ T7083] ? alloc_fd+0x476/0x790 [ 184.361746][ T7083] ? do_getname+0x191/0x390 [ 184.361779][ T7083] do_sys_openat2+0x10d/0x1e0 [ 184.361811][ T7083] ? __pfx_do_sys_openat2+0x10/0x10 [ 184.361845][ T7083] ? __fget_files+0x21f/0x3d0 [ 184.361893][ T7083] __x64_sys_openat+0x12d/0x210 [ 184.361926][ T7083] ? __pfx___x64_sys_openat+0x10/0x10 [ 184.361965][ T7083] ? rcu_is_watching+0x12/0xc0 [ 184.362000][ T7083] do_syscall_64+0x10b/0xf80 [ 184.362033][ T7083] ? clear_bhb_loop+0x40/0x90 [ 184.362067][ T7083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.362096][ T7083] RIP: 0033:0x7f3ee419c819 [ 184.362121][ T7083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.362147][ T7083] RSP: 002b:00007f3ee23f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 184.362176][ T7083] RAX: ffffffffffffffda RBX: 00007f3ee4415fa0 RCX: 00007f3ee419c819 [ 184.362195][ T7083] RDX: 0000000000101001 RSI: 00002000000003c0 RDI: ffffffffffffff9c [ 184.362213][ T7083] RBP: 00007f3ee4232c91 R08: 0000000000000000 R09: 0000000000000000 [ 184.362228][ T7083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.362241][ T7083] R13: 00007f3ee4416038 R14: 00007f3ee4415fa0 R15: 00007ffd2a795a18 [ 184.362272][ T7083] [ 184.765261][ T5834] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 187.145050][ T5834] Bluetooth: hci0: unexpected subevent 0x18 length: 123 > 19 [ 187.153921][ T5834] Bluetooth: hci0: Unable to find connection for dst f9:56:cc:cc:70:a9 sid 0x00 [ 187.618845][ T7139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.275'. [ 190.574213][ T7167] netlink: 52 bytes leftover after parsing attributes in process `syz.3.281'. [ 191.405400][ T5834] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 192.440493][ T7206] netlink: 314 bytes leftover after parsing attributes in process `syz.1.292'. [ 192.739958][ T5834] Bluetooth: hci1: unexpected subevent 0x18 length: 123 > 19 [ 192.748543][ T5834] Bluetooth: hci1: Unable to find connection for dst f9:56:cc:cc:70:a9 sid 0x00 [ 192.823496][ T7210] smpboot: CPU 1 is now offline [ 193.250937][ T7217] FAULT_INJECTION: forcing a failure. [ 193.250937][ T7217] name failslab, interval 1, probability 0, space 0, times 0 [ 193.322362][ T7217] CPU: 0 UID: 0 PID: 7217 Comm: syz.1.296 Not tainted syzkaller #0 PREEMPT(full) [ 193.322394][ T7217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 193.322405][ T7217] Call Trace: [ 193.322411][ T7217] [ 193.322418][ T7217] dump_stack_lvl+0x100/0x190 [ 193.322454][ T7217] should_fail_ex.cold+0x5/0xa [ 193.322478][ T7217] should_failslab+0xc2/0x120 [ 193.322508][ T7217] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 193.322533][ T7217] ? __d_alloc+0x34/0xa80 [ 193.322555][ T7217] __d_alloc+0x34/0xa80 [ 193.322574][ T7217] d_alloc_pseudo+0x1c/0xc0 [ 193.322597][ T7217] alloc_file_pseudo+0xcf/0x230 [ 193.322620][ T7217] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 193.322647][ T7217] __shmem_file_setup+0x205/0x460 [ 193.322669][ T7217] ? __pfx___shmem_file_setup+0x10/0x10 [ 193.322692][ T7217] ? vm_area_alloc+0x1f/0x160 [ 193.322716][ T7217] shmem_zero_setup+0x96/0x1b0 [ 193.322745][ T7217] __mmap_region+0x2590/0x2dc0 [ 193.322772][ T7217] ? __pfx___mmap_region+0x10/0x10 [ 193.322797][ T7217] ? __lock_acquire+0x4a5/0x2630 [ 193.322825][ T7217] ? rcu_is_watching+0x12/0xc0 [ 193.322845][ T7217] ? trace_pelt_se_tp+0x13b/0x190 [ 193.322882][ T7217] ? __lock_acquire+0x4a5/0x2630 [ 193.322909][ T7217] ? do_raw_spin_unlock+0x145/0x1e0 [ 193.322928][ T7217] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 193.322958][ T7217] ? __lock_acquire+0x4a5/0x2630 [ 193.322985][ T7217] ? rcu_is_watching+0x12/0xc0 [ 193.323013][ T7217] ? rcu_is_watching+0x12/0xc0 [ 193.323037][ T7217] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 193.323059][ T7217] ? lockdep_hardirqs_on+0x78/0x100 [ 193.323116][ T7217] mmap_region+0x35d/0x620 [ 193.323141][ T7217] ? rcu_is_watching+0x12/0xc0 [ 193.323160][ T7217] ? __pfx_mmap_region+0x10/0x10 [ 193.323187][ T7217] ? cap_mmap_addr+0x4b/0x120 [ 193.323204][ T7217] ? bpf_lsm_mmap_addr+0x9/0x30 [ 193.323230][ T7217] ? security_mmap_addr+0x71/0x1e0 [ 193.323254][ T7217] ? __get_unmapped_area+0x255/0x3e0 [ 193.323288][ T7217] do_mmap+0xc63/0x12f0 [ 193.323309][ T7217] ? __pfx_do_mmap+0x10/0x10 [ 193.323326][ T7217] ? __pfx_down_write_killable+0x10/0x10 [ 193.323357][ T7217] vm_mmap_pgoff+0x29e/0x470 [ 193.323379][ T7217] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 193.323405][ T7217] ? do_futex+0x192/0x350 [ 193.323423][ T7217] ? __pfx_do_futex+0x10/0x10 [ 193.323443][ T7217] ksys_mmap_pgoff+0xe4/0x610 [ 193.323474][ T7217] ? __x64_sys_futex+0x358/0x4d0 [ 193.323491][ T7217] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 193.323521][ T7217] ? xfd_validate_state+0x129/0x190 [ 193.323538][ T7217] ? ksys_write+0x1ac/0x250 [ 193.323567][ T7217] __x64_sys_mmap+0x125/0x190 [ 193.323589][ T7217] do_syscall_64+0x10b/0xf80 [ 193.323610][ T7217] ? clear_bhb_loop+0x40/0x90 [ 193.323633][ T7217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.323652][ T7217] RIP: 0033:0x7f3ee419c819 [ 193.323667][ T7217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.323685][ T7217] RSP: 002b:00007f3ee23f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 193.323702][ T7217] RAX: ffffffffffffffda RBX: 00007f3ee4415fa0 RCX: 00007f3ee419c819 [ 193.323714][ T7217] RDX: 00004000000000df RSI: 0000000000030009 RDI: 0000000000000000 [ 193.323724][ T7217] RBP: 00007f3ee4232c91 R08: 0000000000000401 R09: 0000000000008000 [ 193.323735][ T7217] R10: 0000000004000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 193.323745][ T7217] R13: 00007f3ee4416038 R14: 00007f3ee4415fa0 R15: 00007ffd2a795a18 [ 193.323768][ T7217] [ 194.809509][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.819511][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.423580][ T7248] random: crng reseeded on system resumption [ 195.971877][ T7249] hub 1-0:1.0: USB hub found [ 196.000124][ T7249] hub 1-0:1.0: 1 port detected [ 197.058858][ T7278] netlink: 'syz.2.312': attribute type 33 has an invalid length. [ 197.300812][ T7283] random: crng reseeded on system resumption [ 197.487012][ T7283] hub 1-0:1.0: USB hub found [ 197.544207][ T7283] hub 1-0:1.0: 1 port detected [ 199.345730][ T7315] mkiss: ax0: crc mode is auto. [ 200.085484][ T7324] random: crng reseeded on system resumption [ 200.869277][ T7335] zswap: compressor not available [ 201.339928][ T7364] syz.1.329 uses obsolete (PF_INET,SOCK_PACKET) [ 201.779383][ T7378] netlink: 12 bytes leftover after parsing attributes in process `syz.2.334'. [ 203.032031][ T7398] netlink: 146 bytes leftover after parsing attributes in process `syz.3.339'. [ 204.585914][ T7417] syz.1.346 (7417) used greatest stack depth: 18296 bytes left [ 208.235707][ T7484] HfR: entered promiscuous mode [ 208.292457][ T7484] netlink: 12 bytes leftover after parsing attributes in process `syz.0.365'. [ 208.333123][ T7484] HfR: left promiscuous mode [ 213.210469][ T5834] Bluetooth: hci3: unexpected event 0x1d length: 6 > 5 [ 213.791812][ T7564] QAT: Invalid ioctl 35077 [ 214.670986][ T7574] random: crng reseeded on system resumption [ 216.500941][ T5834] Bluetooth: hci1: unexpected event 0x1c length: 725 > 5 [ 216.778970][ T5834] Bluetooth: hci1: unexpected event 0x1d length: 6 > 5 [ 219.476886][ T5834] Bluetooth: hci1: unexpected event 0x1d length: 6 > 5 [ 220.096842][ T7657] program syz.2.399 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 220.209929][ T7658] program syz.2.399 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 223.127600][ T5834] Bluetooth: hci3: unexpected event 0x1d length: 6 > 5 [ 223.201905][ T7729] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 223.278645][ T7727] netlink: 354 bytes leftover after parsing attributes in process `syz.0.410'. [ 223.604634][ T7729] File: /dev/nullb0 PID: 7729 Comm: syz.1.411 [ 225.447567][ T7761] netlink: 350 bytes leftover after parsing attributes in process `syz.0.417'. [ 225.589604][ T7764] program syz.2.418 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 227.560614][ T5834] Bluetooth: hci3: unexpected event 0x1d length: 6 > 5 [ 227.948242][ T7806] random: crng reseeded on system resumption [ 230.040637][ T7832] FAULT_INJECTION: forcing a failure. [ 230.040637][ T7832] name failslab, interval 1, probability 0, space 0, times 0 [ 230.164755][ T7832] CPU: 0 UID: 0 PID: 7832 Comm: syz.0.432 Tainted: G L syzkaller #0 PREEMPT(full) [ 230.164787][ T7832] Tainted: [L]=SOFTLOCKUP [ 230.164794][ T7832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 230.164804][ T7832] Call Trace: [ 230.164811][ T7832] [ 230.164818][ T7832] dump_stack_lvl+0x100/0x190 [ 230.164855][ T7832] should_fail_ex.cold+0x5/0xa [ 230.164880][ T7832] should_failslab+0xc2/0x120 [ 230.164910][ T7832] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 230.164933][ T7832] ? security_inode_alloc+0x3b/0x2c0 [ 230.164953][ T7832] ? lockdep_init_map_type+0x5c/0x250 [ 230.164984][ T7832] security_inode_alloc+0x3b/0x2c0 [ 230.165004][ T7832] inode_init_always_gfp+0xcc0/0x1000 [ 230.165035][ T7832] alloc_inode+0x8e/0x250 [ 230.165064][ T7832] create_pipe_files+0x4c/0x970 [ 230.165096][ T7832] do_pipe2+0xbd/0x1e0 [ 230.165124][ T7832] ? __pfx_do_pipe2+0x10/0x10 [ 230.165159][ T7832] __x64_sys_pipe2+0x54/0x80 [ 230.165187][ T7832] do_syscall_64+0x10b/0xf80 [ 230.165210][ T7832] ? clear_bhb_loop+0x40/0x90 [ 230.165231][ T7832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.165250][ T7832] RIP: 0033:0x7fe954f9c819 [ 230.165265][ T7832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.165282][ T7832] RSP: 002b:00007fe9531f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 230.165300][ T7832] RAX: ffffffffffffffda RBX: 00007fe955215fa0 RCX: 00007fe954f9c819 [ 230.165311][ T7832] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 230.165321][ T7832] RBP: 00007fe955032c91 R08: 0000000000000000 R09: 0000000000000000 [ 230.165331][ T7832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 230.165341][ T7832] R13: 00007fe955216038 R14: 00007fe955215fa0 R15: 00007ffe7ccc7f08 [ 230.165362][ T7832] [ 231.672268][ T7863] netlink: 12 bytes leftover after parsing attributes in process `syz.0.440'. [ 232.807918][ T7868] zram: Removed device: zram0 [ 234.402606][ T7897] FAULT_INJECTION: forcing a failure. [ 234.402606][ T7897] name failslab, interval 1, probability 0, space 0, times 0 [ 234.467217][ T7897] CPU: 0 UID: 0 PID: 7897 Comm: syz.2.448 Tainted: G L syzkaller #0 PREEMPT(full) [ 234.467248][ T7897] Tainted: [L]=SOFTLOCKUP [ 234.467254][ T7897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 234.467265][ T7897] Call Trace: [ 234.467272][ T7897] [ 234.467279][ T7897] dump_stack_lvl+0x100/0x190 [ 234.467317][ T7897] should_fail_ex.cold+0x5/0xa [ 234.467341][ T7897] should_failslab+0xc2/0x120 [ 234.467370][ T7897] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 234.467394][ T7897] ? __proc_create+0x2cb/0x8c0 [ 234.467426][ T7897] __proc_create+0x2cb/0x8c0 [ 234.467455][ T7897] ? __pfx___proc_create+0x10/0x10 [ 234.467497][ T7897] proc_create_reg+0x75/0x170 [ 234.467529][ T7897] proc_create_net_data+0x8e/0x1c0 [ 234.467558][ T7897] ? __pfx_proc_create_net_data+0x10/0x10 [ 234.467590][ T7897] ? fib_default_rule_add+0x341/0x420 [ 234.467620][ T7897] ? __pfx_ip6_route_net_init_late+0x10/0x10 [ 234.467645][ T7897] ip6_route_net_init_late+0x55/0x110 [ 234.467669][ T7897] ops_init+0x1e2/0x5f0 [ 234.467699][ T7897] setup_net+0x118/0x3a0 [ 234.467725][ T7897] ? __pfx_setup_net+0x10/0x10 [ 234.467753][ T7897] ? mutex_init_lockdep+0xf1/0x120 [ 234.467793][ T7897] copy_net_ns+0x46f/0x7c0 [ 234.467824][ T7897] create_new_namespaces+0x3ea/0xac0 [ 234.467851][ T7897] unshare_nsproxy_namespaces+0xf2/0x220 [ 234.467877][ T7897] ksys_unshare+0x438/0xa90 [ 234.467905][ T7897] ? __pfx_ksys_unshare+0x10/0x10 [ 234.467930][ T7897] ? xfd_validate_state+0x129/0x190 [ 234.467957][ T7897] __x64_sys_unshare+0x31/0x40 [ 234.467984][ T7897] do_syscall_64+0x10b/0xf80 [ 234.468006][ T7897] ? clear_bhb_loop+0x40/0x90 [ 234.468027][ T7897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.468046][ T7897] RIP: 0033:0x7f777a39c819 [ 234.468063][ T7897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.468080][ T7897] RSP: 002b:00007f777b19e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 234.468098][ T7897] RAX: ffffffffffffffda RBX: 00007f777a615fa0 RCX: 00007f777a39c819 [ 234.468109][ T7897] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 234.468120][ T7897] RBP: 00007f777a432c91 R08: 0000000000000000 R09: 0000000000000000 [ 234.468130][ T7897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.468141][ T7897] R13: 00007f777a616038 R14: 00007f777a615fa0 R15: 00007ffdc8dd9918 [ 234.468163][ T7897] [ 234.874944][ T7901] device-mapper: ioctl: Invalid ioctl structure: name þÿÿÿÿÿÿÿd, dev 3000000000 [ 236.121855][ T29] audit: type=1800 audit(1776319756.231:4): pid=7920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.452" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 236.283453][ T7924] netlink: 346 bytes leftover after parsing attributes in process `syz.2.454'. [ 237.216598][ T7937] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 237.280451][ T7937] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 238.644928][ T7970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.462'. [ 238.745886][ T5834] Bluetooth: hci0: unexpected event 0x1d length: 6 > 5 [ 238.817028][ T7956] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 238.878098][ T7956] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 238.902411][ T7956] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 238.921514][ T7956] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 239.212546][ T7980] netlink: 186 bytes leftover after parsing attributes in process `syz.1.464'. [ 239.769388][ T8006] Kernel: The 'panic_print' parameter is now deprecated. Please use 'panic_sys_info' and 'panic_console_replay' instead. [ 240.451760][ T8029] random: crng reseeded on system resumption [ 240.857289][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout [ 240.924645][ T5834] Bluetooth: hci2: command 0x0c1a tx timeout [ 240.931333][ T5826] Bluetooth: hci3: command 0x0c1a tx timeout [ 240.937686][ T5823] Bluetooth: hci1: command 0x0c1a tx timeout [ 241.029429][ T5826] Bluetooth: hci1: unexpected event 0x1d length: 6 > 5 [ 241.977444][ T8061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.478'. [ 242.670696][ T5826] Bluetooth: hci0: unknown advertising packet type: 0xea [ 243.819626][ T5826] Bluetooth: hci0: unexpected event 0x1d length: 6 > 5 [ 244.920441][ T8136] netlink: Conntrack attr has 5 unknown bytes [ 245.003852][ T8139] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 245.032909][ T8136] bond0: invalid ARP target specified [ 245.108214][ T8136] nbd: socks must be embedded in a SOCK_ITEM attr [ 245.179883][ T8136] block nbd0: shutting down sockets [ 246.146062][ T8147] ima: policy update failed [ 246.178719][ T29] audit: type=1802 audit(1776319766.281:5): pid=8147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.497" res=0 errno=0 [ 246.435735][ T5826] Bluetooth: hci1: unexpected event 0x1d length: 6 > 5 [ 247.783248][ T8199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.509'. [ 248.069083][ T8199] HfR: entered promiscuous mode [ 249.056030][ T8226] futex_wake_op: syz.0.514 tries to shift op by -2048; fix this program [ 249.102272][ T8227] 0x000000000001-0x000000020000 : "" [ 249.203783][ T8227] ftl_cs: FTL header corrupt! [ 249.378845][ T5826] Bluetooth: hci3: unexpected event 0x1d length: 6 > 5 [ 249.646817][ T8232] FAULT_INJECTION: forcing a failure. [ 249.646817][ T8232] name failslab, interval 1, probability 0, space 0, times 0 [ 249.729027][ T8232] CPU: 0 UID: 0 PID: 8232 Comm: syz.1.516 Tainted: G L syzkaller #0 PREEMPT(full) [ 249.729060][ T8232] Tainted: [L]=SOFTLOCKUP [ 249.729066][ T8232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 249.729076][ T8232] Call Trace: [ 249.729083][ T8232] [ 249.729090][ T8232] dump_stack_lvl+0x100/0x190 [ 249.729130][ T8232] should_fail_ex.cold+0x5/0xa [ 249.729153][ T8232] should_failslab+0xc2/0x120 [ 249.729182][ T8232] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 249.729206][ T8232] ? __mpol_dup+0x74/0x390 [ 249.729228][ T8232] __mpol_dup+0x74/0x390 [ 249.729246][ T8232] ? __pfx___mpol_dup+0x10/0x10 [ 249.729263][ T8232] ? kmem_cache_alloc_noprof+0x292/0x6e0 [ 249.729285][ T8232] ? sp_alloc+0x27/0x160 [ 249.729306][ T8232] sp_alloc+0x4d/0x160 [ 249.729325][ T8232] mpol_set_shared_policy+0xa5/0x890 [ 249.729349][ T8232] ? __pfx_shmem_set_policy+0x10/0x10 [ 249.729379][ T8232] mbind_range+0x339/0x550 [ 249.729401][ T8232] do_mbind+0x7dc/0xfd0 [ 249.729424][ T8232] ? __might_fault+0xc5/0x140 [ 249.729447][ T8232] ? __pfx_do_mbind+0x10/0x10 [ 249.729470][ T8232] ? _copy_from_user+0x59/0xd0 [ 249.729498][ T8232] ? __pfx_get_nodes+0x10/0x10 [ 249.729529][ T8232] kernel_mbind+0x1b7/0x200 [ 249.729550][ T8232] ? __pfx_kernel_mbind+0x10/0x10 [ 249.729572][ T8232] ? rcu_is_watching+0x12/0xc0 [ 249.729594][ T8232] do_syscall_64+0x10b/0xf80 [ 249.729615][ T8232] ? clear_bhb_loop+0x40/0x90 [ 249.729637][ T8232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.729663][ T8232] RIP: 0033:0x7f3ee419c819 [ 249.729679][ T8232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.729696][ T8232] RSP: 002b:00007f3ee23f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 249.729714][ T8232] RAX: ffffffffffffffda RBX: 00007f3ee4415fa0 RCX: 00007f3ee419c819 [ 249.729725][ T8232] RDX: 0000000000008003 RSI: 0000000000800605 RDI: 0000000000000000 [ 249.729735][ T8232] RBP: 00007f3ee4232c91 R08: 0000000000000003 R09: 0000000000000003 [ 249.729745][ T8232] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 249.729756][ T8232] R13: 00007f3ee4416038 R14: 00007f3ee4415fa0 R15: 00007ffd2a795a18 [ 249.729778][ T8232] [ 251.240719][ T8271] FAULT_INJECTION: forcing a failure. [ 251.240719][ T8271] name failslab, interval 1, probability 0, space 0, times 0 [ 251.318990][ T8271] CPU: 0 UID: 0 PID: 8271 Comm: syz.0.525 Tainted: G L syzkaller #0 PREEMPT(full) [ 251.319021][ T8271] Tainted: [L]=SOFTLOCKUP [ 251.319027][ T8271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 251.319037][ T8271] Call Trace: [ 251.319043][ T8271] [ 251.319051][ T8271] dump_stack_lvl+0x100/0x190 [ 251.319085][ T8271] should_fail_ex.cold+0x5/0xa [ 251.319109][ T8271] should_failslab+0xc2/0x120 [ 251.319137][ T8271] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 251.319160][ T8271] ? do_epoll_ctl+0xc6c/0x36a0 [ 251.319176][ T8271] ? bpf_lsm_capable+0x9/0x10 [ 251.319192][ T8271] ? percpu_counter_add_batch+0xb9/0x230 [ 251.319224][ T8271] do_epoll_ctl+0xc6c/0x36a0 [ 251.319240][ T8271] ? __pfx_do_recvmmsg+0x10/0x10 [ 251.319259][ T8271] ? find_held_lock+0x2b/0x80 [ 251.319280][ T8271] ? __might_fault+0xc5/0x140 [ 251.319310][ T8271] ? __pfx_do_epoll_ctl+0x10/0x10 [ 251.319337][ T8271] ? find_held_lock+0x2b/0x80 [ 251.319357][ T8271] ? __might_fault+0xc5/0x140 [ 251.319379][ T8271] ? __might_fault+0xc5/0x140 [ 251.319410][ T8271] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 251.319427][ T8271] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 251.319445][ T8271] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 251.319465][ T8271] ? rcu_is_watching+0x12/0xc0 [ 251.319487][ T8271] do_syscall_64+0x10b/0xf80 [ 251.319509][ T8271] ? clear_bhb_loop+0x40/0x90 [ 251.319531][ T8271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.319549][ T8271] RIP: 0033:0x7fe954f9c819 [ 251.319565][ T8271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.319582][ T8271] RSP: 002b:00007fe9531f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 251.319599][ T8271] RAX: ffffffffffffffda RBX: 00007fe955215fa0 RCX: 00007fe954f9c819 [ 251.319610][ T8271] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 251.319620][ T8271] RBP: 00007fe955032c91 R08: 0000000000000000 R09: 0000000000000000 [ 251.319630][ T8271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 251.319640][ T8271] R13: 00007fe955216038 R14: 00007fe955215fa0 R15: 00007ffe7ccc7f08 [ 251.319662][ T8271] [ 252.012029][ T5826] Bluetooth: hci1: unexpected event 0x1d length: 6 > 5 [ 252.469432][ T8307] FAULT_INJECTION: forcing a failure. [ 252.469432][ T8307] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.563241][ T8307] CPU: 0 UID: 0 PID: 8307 Comm: syz.2.534 Tainted: G L syzkaller #0 PREEMPT(full) [ 252.563272][ T8307] Tainted: [L]=SOFTLOCKUP [ 252.563278][ T8307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 252.563289][ T8307] Call Trace: [ 252.563298][ T8307] [ 252.563305][ T8307] dump_stack_lvl+0x100/0x190 [ 252.563340][ T8307] should_fail_ex.cold+0x5/0xa [ 252.563364][ T8307] _copy_from_user+0x2e/0xd0 [ 252.563388][ T8307] snd_seq_oss_write+0x4f6/0x800 [ 252.563415][ T8307] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 252.563439][ T8307] ? apparmor_file_permission+0x13f/0x1c0 [ 252.563462][ T8307] ? bpf_lsm_file_permission+0x9/0x10 [ 252.563490][ T8307] odev_write+0x51/0xa0 [ 252.563511][ T8307] vfs_write+0x2aa/0x1070 [ 252.563537][ T8307] ? __pfx_odev_write+0x10/0x10 [ 252.563555][ T8307] ? __pfx_vfs_write+0x10/0x10 [ 252.563579][ T8307] ? find_held_lock+0x2b/0x80 [ 252.563614][ T8307] ? __fget_files+0x215/0x3d0 [ 252.563640][ T8307] ? __fget_files+0x215/0x3d0 [ 252.563670][ T8307] ? __fget_files+0x21f/0x3d0 [ 252.563703][ T8307] ksys_write+0x12a/0x250 [ 252.563728][ T8307] ? __pfx_ksys_write+0x10/0x10 [ 252.563757][ T8307] ? rcu_is_watching+0x12/0xc0 [ 252.563781][ T8307] do_syscall_64+0x10b/0xf80 [ 252.563803][ T8307] ? clear_bhb_loop+0x40/0x90 [ 252.563825][ T8307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.563843][ T8307] RIP: 0033:0x7f777a39c819 [ 252.563859][ T8307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.563875][ T8307] RSP: 002b:00007f777b19e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 252.563892][ T8307] RAX: ffffffffffffffda RBX: 00007f777a615fa0 RCX: 00007f777a39c819 [ 252.563904][ T8307] RDX: 0000000000000318 RSI: 0000200000000740 RDI: 0000000000000005 [ 252.563914][ T8307] RBP: 00007f777a432c91 R08: 0000000000000000 R09: 0000000000000000 [ 252.563924][ T8307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.563934][ T8307] R13: 00007f777a616038 R14: 00007f777a615fa0 R15: 00007ffdc8dd9918 [ 252.563956][ T8307] [ 253.075887][ T8316] netlink: 40 bytes leftover after parsing attributes in process `syz.1.537'. [ 253.515532][ T8331] netlink: 504 bytes leftover after parsing attributes in process `syz.1.539'. [ 254.666269][ T8348] netlink: 28 bytes leftover after parsing attributes in process `syz.0.544'. [ 254.799975][ T8348] macsec0: entered promiscuous mode [ 254.831858][ T8348] macsec0: entered allmulticast mode [ 254.868997][ T8348] veth1_macvtap: entered allmulticast mode [ 255.377833][ T8360] netlink: 28 bytes leftover after parsing attributes in process `syz.2.547'. [ 255.400306][ T8356] FAULT_INJECTION: forcing a failure. [ 255.400306][ T8356] name fail_futex, interval 1, probability 0, space 0, times 1 [ 255.560214][ T8356] CPU: 0 UID: 0 PID: 8356 Comm: syz.1.543 Tainted: G L syzkaller #0 PREEMPT(full) [ 255.560246][ T8356] Tainted: [L]=SOFTLOCKUP [ 255.560252][ T8356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 255.560262][ T8356] Call Trace: [ 255.560269][ T8356] [ 255.560276][ T8356] dump_stack_lvl+0x100/0x190 [ 255.560312][ T8356] should_fail_ex.cold+0x5/0xa [ 255.560335][ T8356] get_futex_key+0x1d2/0x1510 [ 255.560366][ T8356] ? __pfx_get_futex_key+0x10/0x10 [ 255.560400][ T8356] futex_wake+0xea/0x530 [ 255.560423][ T8356] ? __pfx_futex_wake+0x10/0x10 [ 255.560446][ T8356] ? rcu_is_watching+0x12/0xc0 [ 255.560466][ T8356] ? __call_rcu_common.constprop.0+0x3f0/0x9b0 [ 255.560503][ T8356] do_futex+0x32b/0x350 [ 255.560520][ T8356] ? __pfx_do_futex+0x10/0x10 [ 255.560536][ T8356] ? __pfx___might_resched+0x10/0x10 [ 255.560553][ T8356] ? blkcg_maybe_throttle_current+0x5e7/0xeb0 [ 255.560592][ T8356] __x64_sys_futex+0x34f/0x4d0 [ 255.560612][ T8356] ? __pfx___x64_sys_futex+0x10/0x10 [ 255.560633][ T8356] ? rcu_is_watching+0x12/0xc0 [ 255.560654][ T8356] do_syscall_64+0x10b/0xf80 [ 255.560675][ T8356] ? clear_bhb_loop+0x40/0x90 [ 255.560697][ T8356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.560716][ T8356] RIP: 0033:0x7f3ee419c819 [ 255.560731][ T8356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.560748][ T8356] RSP: 002b:00007f3ee23b40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 255.560765][ T8356] RAX: ffffffffffffffda RBX: 00007f3ee4416188 RCX: 00007f3ee419c819 [ 255.560776][ T8356] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3ee441618c [ 255.560787][ T8356] RBP: 00007f3ee4416180 R08: 0000000000000001 R09: 0000000000000000 [ 255.560797][ T8356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.560807][ T8356] R13: 00007f3ee4416218 R14: 00007ffd2a795930 R15: 00007ffd2a795a18 [ 255.560831][ T8356] [ 256.210309][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.216805][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.935371][ T8383] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 257.120103][ T8392] bridge0: port 3(veth0_to_bridge) entered blocking state [ 257.158828][ T8392] bridge0: port 3(veth0_to_bridge) entered disabled state [ 257.193081][ T8392] veth0_to_bridge: entered allmulticast mode [ 257.229042][ T8392] veth0_to_bridge: entered promiscuous mode [ 257.257822][ T8383] CIFS mount error: No usable UNC path provided in device string! [ 257.257822][ T8383] [ 257.274705][ T8392] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 257.329607][ T8392] bridge0: port 3(veth0_to_bridge) entered blocking state [ 257.338176][ T8392] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 257.400635][ T8383] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 257.793473][ T8390] netlink: 4 bytes leftover after parsing attributes in process `syz.0.554'. [ 258.089215][ T8412] FAULT_INJECTION: forcing a failure. [ 258.089215][ T8412] name failslab, interval 1, probability 0, space 0, times 0 [ 258.153130][ T8412] CPU: 0 UID: 0 PID: 8412 Comm: syz.2.559 Tainted: G L syzkaller #0 PREEMPT(full) [ 258.153161][ T8412] Tainted: [L]=SOFTLOCKUP [ 258.153167][ T8412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 258.153177][ T8412] Call Trace: [ 258.153183][ T8412] [ 258.153189][ T8412] dump_stack_lvl+0x100/0x190 [ 258.153225][ T8412] should_fail_ex.cold+0x5/0xa [ 258.153249][ T8412] should_failslab+0xc2/0x120 [ 258.153277][ T8412] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 258.153303][ T8412] ? __alloc_skb+0x140/0x710 [ 258.153326][ T8412] ? __alloc_skb+0x5b7/0x710 [ 258.153353][ T8412] __alloc_skb+0x140/0x710 [ 258.153375][ T8412] ? __alloc_skb+0x5b7/0x710 [ 258.153398][ T8412] ? __pfx___alloc_skb+0x10/0x10 [ 258.153424][ T8412] ? __lock_acquire+0x4a5/0x2630 [ 258.153454][ T8412] alloc_skb_with_frags+0xdd/0x760 [ 258.153489][ T8412] sock_alloc_send_pskb+0x801/0x980 [ 258.153513][ T8412] ? is_bpf_text_address+0x8a/0x1a0 [ 258.153547][ T8412] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 258.153570][ T8412] ? kernel_text_address+0x8d/0x100 [ 258.153587][ T8412] ? __kernel_text_address+0xd/0x30 [ 258.153608][ T8412] ? __lock_acquire+0x4a5/0x2630 [ 258.153634][ T8412] ? __lock_acquire+0x4a5/0x2630 [ 258.153663][ T8412] __ip_append_data+0x2039/0x4410 [ 258.153698][ T8412] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 258.153727][ T8412] ? find_held_lock+0x2b/0x80 [ 258.153753][ T8412] ? ip_dst_mtu_maybe_forward.constprop.0+0x3e9/0x750 [ 258.153776][ T8412] ? __pfx___ip_append_data+0x10/0x10 [ 258.153812][ T8412] ip_make_skb+0x28b/0x310 [ 258.153833][ T8412] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 258.153864][ T8412] ? __pfx_ip_make_skb+0x10/0x10 [ 258.153895][ T8412] ? udp_sendmsg+0x171c/0x2720 [ 258.153922][ T8412] udp_sendmsg+0x171c/0x2720 [ 258.153964][ T8412] ? __pfx_udp_sendmsg+0x10/0x10 [ 258.154016][ T8412] ? __import_iovec+0x1d2/0x640 [ 258.154042][ T8412] ? __pfx_udp_sendmsg+0x10/0x10 [ 258.154072][ T8412] inet_sendmsg+0x105/0x140 [ 258.154093][ T8412] ____sys_sendmsg+0x98d/0xb70 [ 258.154110][ T8412] ? __pfx_inet_sendmsg+0x10/0x10 [ 258.154132][ T8412] ? __pfx_____sys_sendmsg+0x10/0x10 [ 258.154154][ T8412] ? futex_unqueue+0x133/0x2c0 [ 258.154187][ T8412] ___sys_sendmsg+0x190/0x1e0 [ 258.154208][ T8412] ? __pfx____sys_sendmsg+0x10/0x10 [ 258.154228][ T8412] ? __pfx___futex_wait+0x10/0x10 [ 258.154257][ T8412] ? find_held_lock+0x2b/0x80 [ 258.154291][ T8412] __sys_sendmmsg+0x205/0x430 [ 258.154320][ T8412] ? __pfx___sys_sendmmsg+0x10/0x10 [ 258.154352][ T8412] ? __pfx_do_futex+0x10/0x10 [ 258.154367][ T8412] ? __pfx_do_sys_openat2+0x10/0x10 [ 258.154401][ T8412] ? xfd_validate_state+0x129/0x190 [ 258.154426][ T8412] __x64_sys_sendmmsg+0x9c/0x100 [ 258.154452][ T8412] ? lockdep_hardirqs_on+0x78/0x100 [ 258.154478][ T8412] do_syscall_64+0x10b/0xf80 [ 258.154501][ T8412] ? clear_bhb_loop+0x40/0x90 [ 258.154533][ T8412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.154552][ T8412] RIP: 0033:0x7f777a39c819 [ 258.154568][ T8412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.154585][ T8412] RSP: 002b:00007f777b17d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 258.154602][ T8412] RAX: ffffffffffffffda RBX: 00007f777a616090 RCX: 00007f777a39c819 [ 258.154614][ T8412] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 258.154624][ T8412] RBP: 00007f777a432c91 R08: 0000000000000000 R09: 0000000000000000 [ 258.154634][ T8412] R10: 0000000007000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.154645][ T8412] R13: 00007f777a616128 R14: 00007f777a616090 R15: 00007ffdc8dd9918 [ 258.154666][ T8412] [ 260.167862][ T5826] Bluetooth: hci2: unexpected event 0x1d length: 6 > 5 [ 260.633275][ T8445] netlink: 28 bytes leftover after parsing attributes in process `syz.1.562'. [ 261.054496][ T8445] bridge_slave_1: left allmulticast mode [ 261.109847][ T8445] bridge_slave_1: left promiscuous mode [ 261.145973][ T8445] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.227705][ T8445] bridge_slave_0: left allmulticast mode [ 261.262050][ T8445] bridge_slave_0: left promiscuous mode [ 261.291428][ T8445] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.392501][ T8457] warning: `syz.3.567' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 261.722743][ T8472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.571'. [ 261.976620][ T8469] zswap: compressor û not available [ 262.741177][ T8487] FAULT_INJECTION: forcing a failure. [ 262.741177][ T8487] name failslab, interval 1, probability 0, space 0, times 0 [ 262.810598][ T8487] CPU: 0 UID: 0 PID: 8487 Comm: syz.3.574 Tainted: G L syzkaller #0 PREEMPT(full) [ 262.810637][ T8487] Tainted: [L]=SOFTLOCKUP [ 262.810644][ T8487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 262.810654][ T8487] Call Trace: [ 262.810661][ T8487] [ 262.810668][ T8487] dump_stack_lvl+0x100/0x190 [ 262.810703][ T8487] should_fail_ex.cold+0x5/0xa [ 262.810727][ T8487] should_failslab+0xc2/0x120 [ 262.810765][ T8487] __kmalloc_cache_noprof+0x7a/0x6f0 [ 262.810786][ T8487] ? percpu_ref_init+0xec/0x3f0 [ 262.810807][ T8487] ? __pfx_blk_queue_usage_counter_release+0x10/0x10 [ 262.810834][ T8487] percpu_ref_init+0xec/0x3f0 [ 262.810853][ T8487] blk_alloc_queue+0x574/0x790 [ 262.810878][ T8487] blk_mq_alloc_queue+0x174/0x290 [ 262.810908][ T8487] ? __pfx_blk_mq_alloc_queue+0x10/0x10 [ 262.810948][ T8487] ? blk_mq_alloc_tag_set+0xe2c/0x1330 [ 262.810983][ T8487] __blk_mq_alloc_disk+0x29/0x120 [ 262.811013][ T8487] loop_add+0x498/0xb60 [ 262.811043][ T8487] ? __pfx_loop_add+0x10/0x10 [ 262.811085][ T8487] ? find_held_lock+0x2b/0x80 [ 262.811106][ T8487] ? __fget_files+0x215/0x3d0 [ 262.811134][ T8487] loop_control_ioctl+0xae/0x620 [ 262.811153][ T8487] ? __pfx_loop_control_ioctl+0x10/0x10 [ 262.811180][ T8487] ? __pfx_loop_control_ioctl+0x10/0x10 [ 262.811200][ T8487] __x64_sys_ioctl+0x18e/0x210 [ 262.811224][ T8487] do_syscall_64+0x10b/0xf80 [ 262.811247][ T8487] ? clear_bhb_loop+0x40/0x90 [ 262.811268][ T8487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.811287][ T8487] RIP: 0033:0x7f242499c819 [ 262.811302][ T8487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.811318][ T8487] RSP: 002b:00007f24257fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 262.811336][ T8487] RAX: ffffffffffffffda RBX: 00007f2424c16090 RCX: 00007f242499c819 [ 262.811347][ T8487] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000007 [ 262.811358][ T8487] RBP: 00007f2424a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 262.811369][ T8487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.811379][ T8487] R13: 00007f2424c16128 R14: 00007f2424c16090 R15: 00007fffe9199a98 [ 262.811402][ T8487] [ 265.412240][ T8548] random: crng reseeded on system resumption [ 266.698281][ T8575] Unable to find swap-space signature [ 266.824989][ T5826] Bluetooth: hci3: unexpected event 0x1d length: 6 > 5 [ 267.641817][ T8602] FAULT_INJECTION: forcing a failure. [ 267.641817][ T8602] name failslab, interval 1, probability 0, space 0, times 0 [ 267.801360][ T8602] CPU: 0 UID: 0 PID: 8602 Comm: syz.1.594 Tainted: G L syzkaller #0 PREEMPT(full) [ 267.801392][ T8602] Tainted: [L]=SOFTLOCKUP [ 267.801398][ T8602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 267.801408][ T8602] Call Trace: [ 267.801415][ T8602] [ 267.801421][ T8602] dump_stack_lvl+0x100/0x190 [ 267.801466][ T8602] should_fail_ex.cold+0x5/0xa [ 267.801496][ T8602] should_failslab+0xc2/0x120 [ 267.801525][ T8602] __kvmalloc_node_noprof+0xfa/0xa00 [ 267.801549][ T8602] ? io_alloc_cache_init+0x38/0x170 [ 267.801569][ T8602] ? lockdep_init_map_type+0x5c/0x250 [ 267.801602][ T8602] io_alloc_cache_init+0x38/0x170 [ 267.801621][ T8602] io_uring_setup.cold+0x3cd/0x1c6e [ 267.801653][ T8602] ? __pfx_io_uring_setup+0x10/0x10 [ 267.801682][ T8602] ? do_futex+0x192/0x350 [ 267.801699][ T8602] ? __pfx_do_futex+0x10/0x10 [ 267.801724][ T8602] ? xfd_validate_state+0x129/0x190 [ 267.801744][ T8602] ? ksys_write+0x1ac/0x250 [ 267.801774][ T8602] __x64_sys_io_uring_setup+0xc2/0x170 [ 267.801801][ T8602] do_syscall_64+0x10b/0xf80 [ 267.801822][ T8602] ? clear_bhb_loop+0x40/0x90 [ 267.801844][ T8602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.801863][ T8602] RIP: 0033:0x7f3ee419c819 [ 267.801879][ T8602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.801895][ T8602] RSP: 002b:00007f3ee23f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 267.801913][ T8602] RAX: ffffffffffffffda RBX: 00007f3ee4415fa0 RCX: 00007f3ee419c819 [ 267.801924][ T8602] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000001 [ 267.801935][ T8602] RBP: 00007f3ee4232c91 R08: 0000000000000000 R09: 0000000000000000 [ 267.801945][ T8602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 267.801955][ T8602] R13: 00007f3ee4416038 R14: 00007f3ee4415fa0 R15: 00007ffd2a795a18 [ 267.801977][ T8602] [ 268.252205][ T8614] futex_wake_op: syz.2.595 tries to shift op by -2048; fix this program [ 268.265035][ T5826] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 268.286932][ T8614] futex_wake_op: syz.2.595 tries to shift op by -2048; fix this program [ 271.138312][ T8681] futex_wake_op: syz.0.605 tries to shift op by -2048; fix this program [ 271.230526][ T8681] futex_wake_op: syz.0.605 tries to shift op by -2048; fix this program [ 272.705839][ T8690] can: request_module (can-proto-0) failed. [ 273.414867][ T8714] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff81b1325a (__mcheck_cpu_init_prepare_banks+0x18a/0x380) [ 273.430842][ T8714] Call Trace: [ 273.434159][ T8714] [ 273.437214][ T8714] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 273.444012][ T8714] ? irqentry_exit+0x246/0x790 [ 273.448886][ T8714] ? lockdep_hardirqs_on+0x78/0x100 [ 273.454493][ T8714] mce_cpu_restart+0xd5/0x1f0 [ 273.459204][ T8714] ? __pfx_mce_cpu_restart+0x10/0x10 [ 273.464501][ T8714] smp_call_function_many_cond+0x1216/0x1500 [ 273.470807][ T8714] ? __pfx_mce_cpu_restart+0x10/0x10 [ 273.476246][ T8714] ? _raw_spin_unlock_irqrestore+0x31/0x80 [ 273.482084][ T8714] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 273.488045][ T8714] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 273.495064][ T8714] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 273.501626][ T8714] ? __timer_delete_sync+0x151/0x1c0 [ 273.507495][ T8714] ? __pfx_mce_cpu_restart+0x10/0x10 [ 273.513194][ T8714] on_each_cpu_cond_mask+0x40/0x90 [ 273.518445][ T8714] set_bank+0x240/0x3a0 [ 273.522717][ T8714] ? __pfx_set_bank+0x10/0x10 [ 273.527602][ T8714] ? find_held_lock+0x2b/0x80 [ 273.532465][ T8714] ? sysfs_file_kobj+0xe4/0x290 [ 273.537439][ T8714] ? sysfs_file_kobj+0xe4/0x290 [ 273.542770][ T8714] ? __pfx_set_bank+0x10/0x10 [ 273.547646][ T8714] dev_attr_store+0x58/0x80 [ 273.552273][ T8714] ? __pfx_dev_attr_store+0x10/0x10 [ 273.557507][ T8714] sysfs_kf_write+0xf2/0x150 [ 273.562216][ T8714] kernfs_fop_write_iter+0x3e0/0x5f0 [ 273.567606][ T8714] ? __pfx_sysfs_kf_write+0x10/0x10 [ 273.572921][ T8714] vfs_write+0x6ac/0x1070 [ 273.577421][ T8714] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 273.583469][ T8714] ? __pfx_vfs_write+0x10/0x10 [ 273.588551][ T8714] ksys_write+0x12a/0x250 [ 273.593000][ T8714] ? __pfx_ksys_write+0x10/0x10 [ 273.597924][ T8714] ? rcu_is_watching+0x12/0xc0 [ 273.602815][ T8714] do_syscall_64+0x10b/0xf80 [ 273.607428][ T8714] ? clear_bhb_loop+0x40/0x90 [ 273.612120][ T8714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.619251][ T8714] RIP: 0033:0x7fe954f9c819 [ 273.624061][ T8714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.643792][ T8714] RSP: 002b:00007fe9531f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 273.652274][ T8714] RAX: ffffffffffffffda RBX: 00007fe955215fa0 RCX: 00007fe954f9c819 [ 273.660373][ T8714] RDX: 0000000000000003 RSI: 0000200000000240 RDI: 0000000000000004 [ 273.668460][ T8714] RBP: 00007fe955032c91 R08: 0000000000000000 R09: 0000000000000000 [ 273.676638][ T8714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.685087][ T8714] R13: 00007fe955216038 R14: 00007fe955215fa0 R15: 00007ffe7ccc7f08 [ 273.693348][ T8714] [ 273.800576][ T5834] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 279.476091][ T5834] Bluetooth: hci1: unexpected event 0x1d length: 6 > 5 [ 280.204214][ T8863] netlink: 4 bytes leftover after parsing attributes in process `syz.1.630'. [ 280.796305][ T8873] random: crng reseeded on system resumption [ 280.948228][ T8877] FAULT_INJECTION: forcing a failure. [ 280.948228][ T8877] name failslab, interval 1, probability 0, space 0, times 0 [ 281.018128][ T8877] CPU: 0 UID: 0 PID: 8877 Comm: syz.0.635 Tainted: G L syzkaller #0 PREEMPT(full) [ 281.018175][ T8877] Tainted: [L]=SOFTLOCKUP [ 281.018182][ T8877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 281.018193][ T8877] Call Trace: [ 281.018199][ T8877] [ 281.018206][ T8877] dump_stack_lvl+0x100/0x190 [ 281.018242][ T8877] should_fail_ex.cold+0x5/0xa [ 281.018266][ T8877] should_failslab+0xc2/0x120 [ 281.018295][ T8877] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 281.018319][ T8877] ? __d_alloc+0x34/0xa80 [ 281.018336][ T8877] ? __pfx_stack_trace_save+0x10/0x10 [ 281.018362][ T8877] __d_alloc+0x34/0xa80 [ 281.018386][ T8877] d_alloc_parallel+0x111/0x14e0 [ 281.018416][ T8877] ? find_held_lock+0x2b/0x80 [ 281.018436][ T8877] ? __d_lookup+0x25c/0x4a0 [ 281.018458][ T8877] ? __pfx_d_alloc_parallel+0x10/0x10 [ 281.018484][ T8877] ? __d_lookup+0x266/0x4a0 [ 281.018511][ T8877] lookup_open.isra.0+0x57c/0x11b0 [ 281.018535][ T8877] ? kernfs_iop_getattr+0xd0/0xf0 [ 281.018561][ T8877] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 281.018597][ T8877] ? lookup_fast+0x2da/0x600 [ 281.018630][ T8877] path_openat+0xa98/0x31a0 [ 281.018665][ T8877] ? __pfx_path_openat+0x10/0x10 [ 281.018700][ T8877] do_file_open+0x20e/0x430 [ 281.018730][ T8877] ? __pfx_do_file_open+0x10/0x10 [ 281.018773][ T8877] ? alloc_fd+0x476/0x790 [ 281.018802][ T8877] ? do_getname+0x191/0x390 [ 281.018824][ T8877] do_sys_openat2+0x10d/0x1e0 [ 281.018845][ T8877] ? __pfx_do_sys_openat2+0x10/0x10 [ 281.018878][ T8877] __x64_sys_openat+0x12d/0x210 [ 281.018899][ T8877] ? __pfx___x64_sys_openat+0x10/0x10 [ 281.018920][ T8877] ? ksys_write+0x1ac/0x250 [ 281.018948][ T8877] ? rcu_is_watching+0x12/0xc0 [ 281.018970][ T8877] do_syscall_64+0x10b/0xf80 [ 281.018991][ T8877] ? clear_bhb_loop+0x40/0x90 [ 281.019013][ T8877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.019031][ T8877] RIP: 0033:0x7fe954f9c819 [ 281.019052][ T8877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.019069][ T8877] RSP: 002b:00007fe9531f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 281.019087][ T8877] RAX: ffffffffffffffda RBX: 00007fe955215fa0 RCX: 00007fe954f9c819 [ 281.019098][ T8877] RDX: 0000000000008080 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 281.019108][ T8877] RBP: 00007fe955032c91 R08: 0000000000000000 R09: 0000000000000000 [ 281.019118][ T8877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 281.019128][ T8877] R13: 00007fe955216038 R14: 00007fe955215fa0 R15: 00007ffe7ccc7f08 [ 281.019150][ T8877] [ 281.620555][ T5834] Bluetooth: hci2: unexpected event 0x1d length: 6 > 5 [ 281.773781][ T8894] futex_wake_op: syz.0.636 tries to shift op by -2048; fix this program [ 281.826445][ T8894] 0x000100000001-0x000100100001 : "" [ 281.854211][ T8894] mtd: partition "" is out of reach -- disabled [ 281.956068][ T8894] ftl_cs: FTL header not found. [ 282.396503][ T5834] block nbd0: Receive control failed (result -32) [ 283.207811][ T8900] zswap: compressor not available [ 283.436212][ T8901] zswap: compressor not available [ 283.840919][ T8909] netlink: 'syz.1.642': attribute type 19 has an invalid length. [ 283.882343][ T8909] netlink: 226 bytes leftover after parsing attributes in process `syz.1.642'. [ 283.900311][ T8932] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input10 [ 284.509177][ T8940] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11 [ 285.197211][ T8949] netlink: 346 bytes leftover after parsing attributes in process `syz.3.649'. [ 286.093659][ T8969] mkiss: ax0: crc mode is auto. [ 286.666439][ T8970] sp0: Synchronizing with TNC [ 287.065668][ T8991] netlink: 'syz.2.658': attribute type 1 has an invalid length. [ 287.313739][ T8985] usb usb22: usbfs: process 8985 (syz.1.655) did not claim interface 1 before use [ 288.582659][ T9014] random: crng reseeded on system resumption [ 291.020684][ T9052] bond0: invalid ARP target specified [ 292.508140][ T9074] random: crng reseeded on system resumption [ 292.597177][ T9081] QAT: Device 0 not found [ 293.711264][ T9093] zswap: compressor not available [ 295.148686][ T29] audit: type=1800 audit(1776319815.261:6): pid=9127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.684" name="lu_gp_id" dev="configfs" ino=27182 res=0 errno=0 [ 295.269461][ T9138] random: crng reseeded on system resumption [ 296.726120][ T9157] random: crng reseeded on system resumption [ 299.435830][ T5834] Bluetooth: hci1: unexpected event 0x3e length: 358 > 260 [ 299.435859][ T5834] Bluetooth: hci1: unexpected subevent 0x1b length: 357 > 260 [ 299.455819][ T5834] Bluetooth: hci1: Malformed LE Event: 0x1b [ 299.480765][ T5834] Bluetooth: hci1: unexpected event 0x3e length: 358 > 260 [ 299.480794][ T5834] Bluetooth: hci1: unexpected subevent 0x1b length: 357 > 260 [ 299.497828][ T5834] Bluetooth: hci1: Malformed LE Event: 0x1b [ 301.427153][ T5834] Bluetooth: hci1: unexpected event 0x1d length: 6 > 5 [ 301.921067][ T9282] ubi0: attaching mtd0 [ 302.000742][ T9282] ubi0 error: validate_ec_hdr: bad VID header offset 514, expected 64 [ 302.046491][ T9282] ubi0 error: validate_ec_hdr: bad EC header [ 302.088566][ T9282] Erase counter header dump: [ 302.142870][ T9282] magic 0x55424923 [ 302.178322][ T9282] version 1 [ 302.202091][ T9282] ec 1 [ 302.243056][ T9282] vid_hdr_offset 514 [ 302.324946][ T9282] data_offset 578 [ 302.372897][ T9282] image_seq -283817305 [ 302.422066][ T9282] hdr_crc 0xc10179a3 [ 302.471476][ T9282] erase counter header hexdump: [ 302.523083][ T9282] CPU: 0 UID: 0 PID: 9282 Comm: syz.3.719 Tainted: G L syzkaller #0 PREEMPT(full) [ 302.523108][ T9282] Tainted: [L]=SOFTLOCKUP [ 302.523115][ T9282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 302.523125][ T9282] Call Trace: [ 302.523132][ T9282] [ 302.523141][ T9282] dump_stack_lvl+0x100/0x190 [ 302.523175][ T9282] validate_ec_hdr+0x2d0/0x330 [ 302.523206][ T9282] ubi_io_read_ec_hdr+0x656/0x6d0 [ 302.523239][ T9282] ubi_attach+0x601/0x4d30 [ 302.523268][ T9282] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 302.523290][ T9282] ? ubi_msg+0x114/0x159 [ 302.523307][ T9282] ? __pfx_ubi_msg+0x10/0x10 [ 302.523325][ T9282] ? __pfx_ubi_attach+0x10/0x10 [ 302.523346][ T9282] ? lockdep_init_map_type+0x5c/0x250 [ 302.523377][ T9282] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 302.523408][ T9282] ? __vmalloc_node_noprof+0xad/0xf0 [ 302.523426][ T9282] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 302.523454][ T9282] ubi_attach_mtd_dev+0x139f/0x32a0 [ 302.523487][ T9282] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 302.523509][ T9282] ? __pfx_get_mtd_device+0x10/0x10 [ 302.523531][ T9282] ctrl_cdev_ioctl+0x36a/0x400 [ 302.523555][ T9282] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 302.523584][ T9282] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 302.523608][ T9282] __x64_sys_ioctl+0x18e/0x210 [ 302.523633][ T9282] do_syscall_64+0x10b/0xf80 [ 302.523655][ T9282] ? clear_bhb_loop+0x40/0x90 [ 302.523677][ T9282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.523695][ T9282] RIP: 0033:0x7f242499c819 [ 302.523711][ T9282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.523727][ T9282] RSP: 002b:00007f242581c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 302.523745][ T9282] RAX: ffffffffffffffda RBX: 00007f2424c15fa0 RCX: 00007f242499c819 [ 302.523756][ T9282] RDX: 0000000000000000 RSI: 0000000040186f40 RDI: 0000000000000006 [ 302.523767][ T9282] RBP: 00007f2424a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 302.523777][ T9282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 302.523787][ T9282] R13: 00007f2424c16038 R14: 00007f2424c15fa0 R15: 00007fffe9199a98 [ 302.523809][ T9282] [ 302.523816][ T9282] ubi0 error: ubi_io_read_ec_hdr: validation failed for PEB 0 [ 304.886295][ T9282] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 307.758695][ T9359] FAULT_INJECTION: forcing a failure. [ 307.758695][ T9359] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 307.817611][ T9359] CPU: 0 UID: 0 PID: 9359 Comm: syz.2.738 Tainted: G L syzkaller #0 PREEMPT(full) [ 307.817651][ T9359] Tainted: [L]=SOFTLOCKUP [ 307.817658][ T9359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 307.817668][ T9359] Call Trace: [ 307.817674][ T9359] [ 307.817681][ T9359] dump_stack_lvl+0x100/0x190 [ 307.817717][ T9359] should_fail_ex.cold+0x5/0xa [ 307.817746][ T9359] _copy_to_user+0x32/0xd0 [ 307.817771][ T9359] simple_read_from_buffer+0xcb/0x170 [ 307.817800][ T9359] proc_fail_nth_read+0x1af/0x230 [ 307.817823][ T9359] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 307.817845][ T9359] ? rw_verify_area+0xce/0x6d0 [ 307.817868][ T9359] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 307.817889][ T9359] vfs_read+0x1e4/0xb30 [ 307.817935][ T9359] ? __pfx_vfs_read+0x10/0x10 [ 307.817960][ T9359] ? __fget_files+0x215/0x3d0 [ 307.817992][ T9359] ? __fget_files+0x21f/0x3d0 [ 307.818024][ T9359] ksys_read+0x12a/0x250 [ 307.818050][ T9359] ? __pfx_ksys_read+0x10/0x10 [ 307.818078][ T9359] ? rcu_is_watching+0x12/0xc0 [ 307.818101][ T9359] do_syscall_64+0x10b/0xf80 [ 307.818124][ T9359] ? clear_bhb_loop+0x40/0x90 [ 307.818155][ T9359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.818242][ T9359] RIP: 0033:0x7f777a35d04e [ 307.818269][ T9359] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 307.818288][ T9359] RSP: 002b:00007f777b19dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 307.818306][ T9359] RAX: ffffffffffffffda RBX: 00007f777b19e6c0 RCX: 00007f777a35d04e [ 307.818317][ T9359] RDX: 000000000000000f RSI: 00007f777b19e0a0 RDI: 0000000000000004 [ 307.818328][ T9359] RBP: 00007f777b19e090 R08: 0000000000000000 R09: 0000000000000000 [ 307.818346][ T9359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.818357][ T9359] R13: 00007f777a616038 R14: 00007f777a615fa0 R15: 00007ffdc8dd9918 [ 307.818380][ T9359] [ 313.034340][ T9431] FAULT_INJECTION: forcing a failure. [ 313.034340][ T9431] name fail_futex, interval 1, probability 0, space 0, times 0 [ 313.124064][ T9431] CPU: 0 UID: 0 PID: 9431 Comm: syz.2.751 Tainted: G L syzkaller #0 PREEMPT(full) [ 313.124103][ T9431] Tainted: [L]=SOFTLOCKUP [ 313.124109][ T9431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 313.124119][ T9431] Call Trace: [ 313.124125][ T9431] [ 313.124132][ T9431] dump_stack_lvl+0x100/0x190 [ 313.124168][ T9431] should_fail_ex.cold+0x5/0xa [ 313.124192][ T9431] get_futex_key+0x1d2/0x1510 [ 313.124222][ T9431] ? __pfx_get_futex_key+0x10/0x10 [ 313.124251][ T9431] ? putname+0xb1/0x110 [ 313.124267][ T9431] ? kasan_save_stack+0x3f/0x50 [ 313.124290][ T9431] ? kasan_save_stack+0x30/0x50 [ 313.124313][ T9431] ? kasan_save_track+0x14/0x30 [ 313.124336][ T9431] ? kasan_save_free_info+0x3b/0x70 [ 313.124354][ T9431] ? __kasan_slab_free+0x5f/0x80 [ 313.124379][ T9431] ? kmem_cache_free+0x127/0x6c0 [ 313.124402][ T9431] futex_wake+0xea/0x530 [ 313.124424][ T9431] ? __pfx_futex_wake+0x10/0x10 [ 313.124453][ T9431] do_futex+0x32b/0x350 [ 313.124470][ T9431] ? __pfx_do_futex+0x10/0x10 [ 313.124491][ T9431] __x64_sys_futex+0x34f/0x4d0 [ 313.124511][ T9431] ? __pfx___x64_sys_futex+0x10/0x10 [ 313.124532][ T9431] ? rcu_is_watching+0x12/0xc0 [ 313.124559][ T9431] do_syscall_64+0x10b/0xf80 [ 313.124580][ T9431] ? clear_bhb_loop+0x40/0x90 [ 313.124602][ T9431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.124621][ T9431] RIP: 0033:0x7f777a39c819 [ 313.124637][ T9431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 313.124653][ T9431] RSP: 002b:00007f777b17d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 313.124671][ T9431] RAX: ffffffffffffffda RBX: 00007f777a616098 RCX: 00007f777a39c819 [ 313.124682][ T9431] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f777a61609c [ 313.124692][ T9431] RBP: 00007f777a616090 R08: 0000000000000001 R09: 0000000000000000 [ 313.124702][ T9431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 313.124712][ T9431] R13: 00007f777a616128 R14: 00007ffdc8dd9830 R15: 00007ffdc8dd9918 [ 313.124734][ T9431] [ 316.669942][ T29] audit: type=1800 audit(1776319836.781:7): pid=9467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.759" name="dbroot" dev="configfs" ino=28891 res=0 errno=0 [ 317.522748][ T5826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 317.537955][ T5826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 317.548034][ T5826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 317.560823][ T5826] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 317.568920][ T5826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 317.648676][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.655198][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.060956][ T5834] Bluetooth: hci2: unexpected event 0x1d length: 6 > 5 [ 318.326101][ T9487] futex_wake_op: syz.2.763 tries to shift op by -2048; fix this program [ 318.517990][ T9487] futex_wake_op: syz.2.763 tries to shift op by -2048; fix this program [ 319.647924][ T9515] Bluetooth: hci4: command tx timeout [ 320.066580][ T9479] chnl_net:caif_netlink_parms(): no params data found [ 320.273337][ T9525] random: crng reseeded on system resumption [ 321.030159][ T9479] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.090869][ T9479] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.149906][ T9479] bridge_slave_0: entered allmulticast mode [ 321.208224][ T9479] bridge_slave_0: entered promiscuous mode [ 321.224710][ T29] audit: type=1804 audit(1776319841.331:8): pid=9539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.767" name="/newroot/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=3310 res=1 errno=0 [ 321.291345][ T9479] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.337830][ T9479] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.375700][ T9479] bridge_slave_1: entered allmulticast mode [ 321.428128][ T9479] bridge_slave_1: entered promiscuous mode [ 321.653455][ T9479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.724694][ T9479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.735377][ T9515] Bluetooth: hci4: command tx timeout [ 322.058999][ T9479] team0: Port device team_slave_0 added [ 322.111846][ T9479] team0: Port device team_slave_1 added [ 322.286717][ T9479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.339718][ T9479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.506878][ T9479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.589047][ T9479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.636693][ T9479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.782128][ T9479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.882324][ T9566] can0: slcan on pty155. [ 323.114461][ T9570] can0 (unregistered): slcan off pty155. [ 323.303695][ T9479] hsr_slave_0: entered promiscuous mode [ 323.365359][ T9479] hsr_slave_1: entered promiscuous mode [ 323.404880][ T9479] debugfs: 'hsr0' already exists in 'hsr' [ 323.445477][ T9479] Cannot create hsr debugfs directory [ 323.804079][ T9515] Bluetooth: hci4: command tx timeout [ 324.617718][ T9600] random: crng reseeded on system resumption [ 325.884385][ T9515] Bluetooth: hci4: command tx timeout [ 326.392536][ T9479] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 326.455877][ T9479] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 326.492589][ T9479] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 326.551912][ T9479] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 326.656020][ T9479] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 326.709884][ T9479] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 326.741109][ T9479] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 326.774492][ T9479] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 327.305437][ T9479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.398568][ T9479] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.467041][ T9507] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.474395][ T9507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.822121][ T9507] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.829524][ T9507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.043944][ C0] sched: DL replenish lagged too much [ 343.255375][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 343.269087][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 343.282142][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 343.294574][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 343.307814][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 343.320472][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 343.333727][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 343.346295][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 343.359232][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 343.371750][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 348.264692][ C0] net_ratelimit: 9326 callbacks suppressed [ 348.264719][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 348.283042][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 348.296197][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 348.308456][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 348.321716][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 348.334365][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 348.347706][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 348.360181][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 348.373336][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 348.386387][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 353.274267][ C0] net_ratelimit: 11422 callbacks suppressed [ 353.274288][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 353.293431][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 353.305995][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 353.319369][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 353.331950][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 353.344339][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 353.357041][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 353.369773][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 353.382150][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 353.394989][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 358.284340][ C0] net_ratelimit: 12929 callbacks suppressed [ 358.284363][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 358.304311][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 358.316962][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:1a:72:37:4b:b7, vlan:0) [ 358.330856][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 358.344036][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 358.356857][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 358.369316][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:1a:72:37:4b:b7, vlan:0) [ 358.381845][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 358.394715][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 358.408109][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 363.294044][ C0] net_ratelimit: 13015 callbacks suppressed [ 363.294064][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 363.312521][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:1a:72:37:4b:b7, vlan:0) [ 363.325107][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 363.338223][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 363.351186][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 363.364103][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:1a:72:37:4b:b7, vlan:0) [ 363.376734][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 363.389805][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 363.402466][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 363.414988][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:1a:72:37:4b:b7, vlan:0) [ 368.303931][ C0] net_ratelimit: 12921 callbacks suppressed [ 368.303951][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 368.323718][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 368.337153][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:1a:72:37:4b:b7, vlan:0) [ 368.349673][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 368.362441][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 368.375102][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 368.387673][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:1a:72:37:4b:b7, vlan:0) [ 368.400629][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 368.413191][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 368.425813][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 373.314395][ C0] net_ratelimit: 12871 callbacks suppressed [ 373.314418][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 373.332909][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:1a:72:37:4b:b7, vlan:0) [ 373.345400][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 373.357999][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 373.370938][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 373.383266][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:1a:72:37:4b:b7, vlan:0) [ 373.395552][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 373.408546][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 373.421346][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 373.433922][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:1a:72:37:4b:b7, vlan:0) [ 378.324086][ C0] net_ratelimit: 12848 callbacks suppressed [ 378.324106][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 378.343284][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 378.356081][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 378.368617][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:1a:72:37:4b:b7, vlan:0) [ 378.381075][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 378.393790][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 378.406329][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 378.418572][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:1a:72:37:4b:b7, vlan:0) [ 378.431019][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 378.443599][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 379.191008][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.334025][ C0] net_ratelimit: 13043 callbacks suppressed [ 383.334044][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 383.355070][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 383.367754][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:1a:72:37:4b:b7, vlan:0) [ 383.380157][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 383.392934][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 383.405974][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 383.418522][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:1a:72:37:4b:b7, vlan:0) [ 383.430910][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 383.443519][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 383.456291][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 388.344017][ C0] net_ratelimit: 12962 callbacks suppressed [ 388.344037][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 388.362786][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 388.375429][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:1a:72:37:4b:b7, vlan:0) [ 388.388246][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 388.401281][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 388.413999][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 388.426350][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:1a:72:37:4b:b7, vlan:0) [ 388.438854][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 388.451441][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 388.464510][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 393.354348][ C0] net_ratelimit: 13054 callbacks suppressed [ 393.354368][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 393.373105][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 393.385716][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:1a:72:37:4b:b7, vlan:0) [ 393.398303][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 393.410964][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 393.426741][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 393.438997][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:1a:72:37:4b:b7, vlan:0) [ 393.451252][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 393.464043][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 393.476477][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 398.364143][ C0] net_ratelimit: 13011 callbacks suppressed [ 398.364163][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 398.382876][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:1a:72:37:4b:b7, vlan:0) [ 398.395625][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 398.408372][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 398.421301][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 398.433641][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:1a:72:37:4b:b7, vlan:0) [ 398.446128][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 398.458898][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 398.471975][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 398.484601][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:1a:72:37:4b:b7, vlan:0) [ 403.374126][ C0] net_ratelimit: 13038 callbacks suppressed [ 403.374146][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 403.392712][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:1a:72:37:4b:b7, vlan:0) [ 403.405261][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 403.417989][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 403.430436][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 403.442826][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:1a:72:37:4b:b7, vlan:0) [ 403.460339][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 403.472927][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 403.485543][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 403.498972][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:1a:72:37:4b:b7, vlan:0) [ 408.384268][ C0] net_ratelimit: 13101 callbacks suppressed [ 408.384288][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 408.403721][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 408.416919][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:1a:72:37:4b:b7, vlan:0) [ 408.429272][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 408.441959][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 408.454598][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 408.466891][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:1a:72:37:4b:b7, vlan:0) [ 408.479299][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 408.492079][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 408.504806][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.394369][ C0] net_ratelimit: 13167 callbacks suppressed [ 413.394388][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.412857][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:1a:72:37:4b:b7, vlan:0) [ 413.425679][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.438503][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 413.451214][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.463732][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:1a:72:37:4b:b7, vlan:0) [ 413.476147][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.488797][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 413.501301][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.513722][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:1a:72:37:4b:b7, vlan:0) [ 418.403968][ C0] net_ratelimit: 13044 callbacks suppressed [ 418.403988][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 418.422958][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 418.435516][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 418.447919][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:1a:72:37:4b:b7, vlan:0) [ 418.460590][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 418.473673][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 418.486160][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 418.498645][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:1a:72:37:4b:b7, vlan:0) [ 418.511006][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 418.523915][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 423.414349][ C0] net_ratelimit: 13127 callbacks suppressed [ 423.414370][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 423.432888][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 423.445354][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:1a:72:37:4b:b7, vlan:0) [ 423.457734][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 423.470673][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 423.483561][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 423.496159][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:1a:72:37:4b:b7, vlan:0) [ 423.508740][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 423.521315][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 423.534161][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.424271][ C0] net_ratelimit: 13226 callbacks suppressed [ 428.424291][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 428.442797][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.455077][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:1a:72:37:4b:b7, vlan:0) [ 428.467680][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.480394][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 428.493099][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.505381][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:1a:72:37:4b:b7, vlan:0) [ 428.517742][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.530545][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 428.543150][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.433964][ C0] net_ratelimit: 13314 callbacks suppressed [ 433.433984][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 433.452557][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.464845][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:1a:72:37:4b:b7, vlan:0) [ 433.477316][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.490054][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 433.502866][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.515089][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:1a:72:37:4b:b7, vlan:0) [ 433.527459][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.540086][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 433.552567][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.413868][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 438.420855][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9284/1:b..l [ 438.429153][ C0] rcu: (detected by 0, t=10502 jiffies, g=74045, q=1057 ncpus=1) [ 438.437017][ C0] task:syz.3.719 state:R running task stack:25592 pid:9284 tgid:9281 ppid:5829 task_flags:0x400140 flags:0x00080003 [ 438.451443][ C0] Call Trace: [ 438.454755][ C0] [ 438.457708][ C0] __schedule+0x10e9/0x6820 [ 438.462273][ C0] ? __pfx_mt_find+0x10/0x10 [ 438.466968][ C0] ? __pfx___schedule+0x10/0x10 [ 438.471915][ C0] ? mark_held_locks+0x40/0x70 [ 438.476702][ C0] preempt_schedule_irq+0x50/0x90 [ 438.481749][ C0] irqentry_exit+0x1fe/0x790 [ 438.486422][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 438.492400][ C0] RIP: 0010:mtree_load+0x4bb/0xa90 [ 438.497601][ C0] Code: 48 8b 44 24 08 48 8d 58 08 e8 81 bb 7f f6 48 83 3c 24 05 0f 83 7b 05 00 00 48 8b 04 24 48 8d b8 e0 6b 2c 8d 48 89 f8 48 89 fa <48> c1 e8 03 83 e2 07 42 0f b6 04 30 38 d0 7f 08 84 c0 0f 85 3b 05 [ 438.517481][ C0] RSP: 0018:ffffc900032179c0 EFLAGS: 00000293 [ 438.523562][ C0] RAX: ffffffff8d2c6be3 RBX: ffff888031954408 RCX: ffffc90010ec3000 [ 438.531547][ C0] RDX: ffffffff8d2c6be3 RSI: ffffffff8b88ba3f RDI: ffffffff8d2c6be3 [ 438.539540][ C0] RBP: 0000000000000002 R08: 0000000000000005 R09: 0000000000000004 [ 438.547505][ C0] R10: 0000000000000003 R11: 0000000000000000 R12: dffffc0000000000 [ 438.555475][ C0] R13: 0000000000000300 R14: dffffc0000000000 R15: 0000000000000003 [ 438.563458][ C0] ? mtree_load+0x49f/0xa90 [ 438.567978][ C0] ? __pfx_mtree_load+0x10/0x10 [ 438.573014][ C0] do_pages_stat+0x3d1/0x7f0 [ 438.577614][ C0] ? __pfx_do_pages_stat+0x10/0x10 [ 438.582733][ C0] ? get_task_cred+0x17f/0x360 [ 438.587506][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 438.592794][ C0] kernel_move_pages+0xecf/0x13f0 [ 438.597844][ C0] ? do_futex+0x192/0x350 [ 438.602171][ C0] ? __pfx_do_futex+0x10/0x10 [ 438.606852][ C0] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 438.612492][ C0] ? __pfx_kernel_move_pages+0x10/0x10 [ 438.617948][ C0] ? __x64_sys_futex+0x34f/0x4d0 [ 438.622916][ C0] ? __x64_sys_futex+0x358/0x4d0 [ 438.627873][ C0] ? xfd_validate_state+0x129/0x190 [ 438.633106][ C0] __x64_sys_move_pages+0xe0/0x1c0 [ 438.638360][ C0] ? do_syscall_64+0x90/0xf80 [ 438.643049][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 438.648249][ C0] do_syscall_64+0x10b/0xf80 [ 438.652857][ C0] ? clear_bhb_loop+0x40/0x90 [ 438.657653][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.663737][ C0] RIP: 0033:0x7f242499c819 [ 438.668171][ C0] RSP: 002b:00007f24257da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 438.676672][ C0] RAX: ffffffffffffffda RBX: 00007f2424c16180 RCX: 00007f242499c819 [ 438.684649][ C0] RDX: 0000000000000000 RSI: 0002000000000003 RDI: 0000000000000001 [ 438.692699][ C0] RBP: 00007f2424a32c91 R08: 0000000000000000 R09: 8000400000000000 [ 438.700764][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 438.708875][ C0] R13: 00007f2424c16218 R14: 00007f2424c16180 R15: 00007fffe9199a98 [ 438.716854][ C0] [ 438.719873][ C0] rcu: rcu_preempt kthread starved for 279 jiffies! g74045 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 438.730889][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 438.741132][ C0] rcu: RCU grace-period kthread stack dump: [ 438.747187][ C0] task:rcu_preempt state:R running task stack:27848 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 438.760941][ C0] Call Trace: [ 438.764227][ C0] [ 438.767164][ C0] __schedule+0x10e9/0x6820 [ 438.771741][ C0] ? __pfx___schedule+0x10/0x10 [ 438.776590][ C0] ? find_held_lock+0x2b/0x80 [ 438.781269][ C0] ? schedule+0x2bf/0x390 [ 438.785595][ C0] schedule+0xdd/0x390 [ 438.789658][ C0] schedule_timeout+0x127/0x280 [ 438.794516][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 438.799890][ C0] ? __pfx_process_timeout+0x10/0x10 [ 438.805176][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 438.810979][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 438.816457][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 438.821227][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 438.826515][ C0] ? prepare_to_swait_event+0xae/0x4a0 [ 438.831986][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 438.836926][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 438.842130][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 438.847951][ C0] rcu_gp_kthread+0x179/0x230 [ 438.852662][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 438.857964][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 438.863885][ C0] ? __kthread_parkme+0x18c/0x230 [ 438.869082][ C0] ? kthread+0x13a/0x450 [ 438.873368][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 438.878587][ C0] kthread+0x370/0x450 [ 438.882664][ C0] ? __pfx_kthread+0x10/0x10 [ 438.887357][ C0] ret_from_fork+0x72b/0xd50 [ 438.891958][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 438.897221][ C0] ? __switch_to+0x800/0x1100 [ 438.901926][ C0] ? __switch_to_asm+0x39/0x70 [ 438.906824][ C0] ? __pfx_kthread+0x10/0x10 [ 438.911454][ C0] ret_from_fork_asm+0x1a/0x30 [ 438.916619][ C0] [ 438.919646][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 438.925971][ C0] CPU: 0 UID: 0 PID: 3410 Comm: kworker/R-bat_e Tainted: G L syzkaller #0 PREEMPT(full) [ 438.937273][ C0] Tainted: [L]=SOFTLOCKUP [ 438.941601][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 438.951809][ C0] Workqueue: bat_events batadv_tt_purge [ 438.957557][ C0] RIP: 0010:lock_acquire+0x5e/0x370 [ 438.962760][ C0] Code: 05 bb 7d 2c 12 83 f8 07 0f 87 d9 02 00 00 48 0f a3 05 86 fc f6 0e 0f 82 a4 02 00 00 8b 35 0e 30 f7 0e 85 f6 0f 85 bf 00 00 00 <48> 8b 44 24 30 65 48 2b 05 5d 7d 2c 12 0f 85 ed 02 00 00 48 83 c4 [ 438.982624][ C0] RSP: 0018:ffffc900000075a0 EFLAGS: 00000206 [ 438.988698][ C0] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000003 [ 438.996751][ C0] RDX: 0000000000000000 RSI: ffffffff8df1baa5 RDI: ffffffff8c1b80e0 [ 439.004808][ C0] RBP: ffffffff8e7e73e0 R08: 0000000006fa0785 R09: 0000000000000007 [ 439.012861][ C0] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 439.020899][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 439.028882][ C0] FS: 0000000000000000(0000) GS:ffff888124310000(0000) knlGS:0000000000000000 [ 439.037865][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 439.044456][ C0] CR2: 000020000052e000 CR3: 0000000033f88000 CR4: 00000000003526f0 [ 439.052622][ C0] Call Trace: [ 439.055927][ C0] [ 439.058832][ C0] ? unwind_next_frame+0x3be/0x2090 [ 439.064055][ C0] ? unwind_next_frame+0x3be/0x2090 [ 439.069256][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 439.075527][ C0] unwind_next_frame+0xd1/0x2090 [ 439.080564][ C0] ? unwind_next_frame+0xbd/0x2090 [ 439.085675][ C0] ? rescuer_thread+0x905/0x14a0 [ 439.090609][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 439.096769][ C0] arch_stack_walk+0x94/0xf0 [ 439.101364][ C0] ? rescuer_thread+0x905/0x14a0 [ 439.106296][ C0] ? kfree_skbmem+0x19a/0x210 [ 439.110981][ C0] stack_trace_save+0x8e/0xc0 [ 439.115754][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 439.121138][ C0] ? __lock_acquire+0x4a5/0x2630 [ 439.126090][ C0] ? __pfx_rt6_multipath_hash+0x10/0x10 [ 439.131651][ C0] kasan_save_stack+0x30/0x50 [ 439.136343][ C0] ? kasan_save_stack+0x30/0x50 [ 439.141193][ C0] ? kasan_save_track+0x14/0x30 [ 439.146042][ C0] ? kasan_save_free_info+0x3b/0x70 [ 439.151248][ C0] ? __kasan_slab_free+0x5f/0x80 [ 439.156286][ C0] ? kmem_cache_free+0x127/0x6c0 [ 439.161227][ C0] ? kfree_skbmem+0x19a/0x210 [ 439.165903][ C0] ? sk_skb_reason_drop+0x10f/0x1b0 [ 439.171128][ C0] ? ip6_mc_input+0x832/0xf50 [ 439.175850][ C0] ? ipv6_rcv+0x34c/0x3d0 [ 439.180217][ C0] ? __netif_receive_skb_one_core+0x12d/0x1e0 [ 439.186389][ C0] ? __netif_receive_skb+0x1f/0x120 [ 439.191609][ C0] ? process_backlog+0x37a/0x1580 [ 439.196737][ C0] ? __napi_poll.constprop.0+0xaf/0x450 [ 439.202328][ C0] ? net_rx_action+0xa40/0xf20 [ 439.207135][ C0] ? handle_softirqs+0x1ea/0xa00 [ 439.212180][ C0] ? do_softirq+0xac/0xe0 [ 439.216515][ C0] ? __local_bh_enable_ip+0xf8/0x120 [ 439.221801][ C0] ? batadv_tt_local_purge+0x21c/0x3d0 [ 439.227294][ C0] ? batadv_tt_purge+0x8b/0xbd0 [ 439.232171][ C0] ? process_one_work+0xa0e/0x1980 [ 439.237299][ C0] ? rescuer_thread+0x905/0x14a0 [ 439.242261][ C0] kasan_save_track+0x14/0x30 [ 439.247031][ C0] kasan_save_free_info+0x3b/0x70 [ 439.252150][ C0] __kasan_slab_free+0x5f/0x80 [ 439.256940][ C0] kmem_cache_free+0x127/0x6c0 [ 439.261813][ C0] ? skb_release_data+0x6ca/0x8e0 [ 439.266868][ C0] kfree_skbmem+0x19a/0x210 [ 439.271632][ C0] sk_skb_reason_drop+0x10f/0x1b0 [ 439.276675][ C0] ip6_mc_input+0x832/0xf50 [ 439.281220][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 439.286273][ C0] ? ip6_rcv_finish_core.isra.0+0x113/0x1260 [ 439.292274][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 439.297383][ C0] ipv6_rcv+0x34c/0x3d0 [ 439.301551][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 439.306391][ C0] __netif_receive_skb_one_core+0x12d/0x1e0 [ 439.312412][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 439.318839][ C0] ? lock_acquire+0x1b1/0x370 [ 439.323549][ C0] ? process_backlog+0x32a/0x1580 [ 439.328596][ C0] ? process_backlog+0x32a/0x1580 [ 439.333615][ C0] __netif_receive_skb+0x1f/0x120 [ 439.338642][ C0] process_backlog+0x37a/0x1580 [ 439.343677][ C0] __napi_poll.constprop.0+0xaf/0x450 [ 439.349053][ C0] net_rx_action+0xa40/0xf20 [ 439.353659][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 439.358778][ C0] ? mark_held_locks+0x40/0x70 [ 439.363581][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 439.369012][ C0] ? tmigr_handle_remote+0x132/0x380 [ 439.374356][ C0] ? run_timer_base+0x121/0x190 [ 439.379367][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 439.384594][ C0] handle_softirqs+0x1ea/0xa00 [ 439.389409][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 439.394834][ C0] ? __hrtimer_rearm_deferred+0x9b/0x740 [ 439.400666][ C0] ? batadv_tt_local_purge+0x21c/0x3d0 [ 439.406268][ C0] do_softirq+0xac/0xe0 [ 439.410440][ C0] [ 439.413368][ C0] [ 439.416570][ C0] __local_bh_enable_ip+0xf8/0x120 [ 439.421749][ C0] batadv_tt_local_purge+0x21c/0x3d0 [ 439.427064][ C0] ? do_raw_spin_lock+0x128/0x260 [ 439.432116][ C0] ? __pfx_batadv_tt_local_purge+0x10/0x10 [ 439.438020][ C0] batadv_tt_purge+0x8b/0xbd0 [ 439.442718][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 439.447916][ C0] ? __pfx_batadv_tt_purge+0x10/0x10 [ 439.453209][ C0] ? rcu_is_watching+0x12/0xc0 [ 439.457978][ C0] process_one_work+0xa0e/0x1980 [ 439.462930][ C0] ? __pfx_process_one_work+0x10/0x10 [ 439.468306][ C0] ? __pfx_batadv_tt_purge+0x10/0x10 [ 439.473618][ C0] rescuer_thread+0x905/0x14a0 [ 439.478386][ C0] ? rescuer_thread+0x240/0x14a0 [ 439.483417][ C0] ? rescuer_thread+0x118/0x14a0 [ 439.488348][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 439.493550][ C0] ? __kthread_parkme+0x18c/0x230 [ 439.498577][ C0] ? kthread+0x13a/0x450 [ 439.502835][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 439.508036][ C0] kthread+0x370/0x450 [ 439.512106][ C0] ? __pfx_kthread+0x10/0x10 [ 439.516848][ C0] ret_from_fork+0x72b/0xd50 [ 439.521452][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 439.526740][ C0] ? __switch_to+0x800/0x1100 [ 439.531430][ C0] ? __switch_to_asm+0x39/0x70 [ 439.536218][ C0] ? __pfx_kthread+0x10/0x10 [ 439.540824][ C0] ret_from_fork_asm+0x1a/0x30 [ 439.545782][ C0] [ 439.549251][ C0] net_ratelimit: 13016 callbacks suppressed [ 439.549267][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:1a:72:37:4b:b7, vlan:0) [ 439.567866][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 439.580529][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 439.593281][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 439.605636][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:1a:72:37:4b:b7, vlan:0) [ 439.619566][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 439.632383][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 439.644906][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 439.657936][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:1a:72:37:4b:b7, vlan:0) [ 439.670361][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 444.554162][ C0] net_ratelimit: 12286 callbacks suppressed [ 444.554183][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:1a:72:37:4b:b7, vlan:0) [ 444.572579][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 444.585219][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 444.598014][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 444.610343][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:1a:72:37:4b:b7, vlan:0) [ 444.622836][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 444.635702][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 444.648622][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 444.661284][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:1a:72:37:4b:b7, vlan:0) [ 444.673912][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)