last executing test programs: 10.406377649s ago: executing program 2 (id=1716): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_OVS_DP_CMD_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20044010}, 0x20000008) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xddebf7ea6cb72b33, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8842, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0) read$auto(r1, 0x0, 0x20) writev$auto(r0, &(0x7f0000000200)={0x0, 0x3}, 0x3) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, 0x0, 0x0, 0x0) 9.050254026s ago: executing program 2 (id=1720): mmap$auto(0x4, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r0, &(0x7f0000000640)={{&(0x7f0000000000), 0x5ae, &(0x7f0000000100)={0x0, 0x13}, 0x5, 0x0, 0x5, 0x1}, 0x1}, 0x1a000, 0x100) socket(0x10, 0x2, 0xc) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x1b1a01, 0x0) close_range$auto(0x2, 0x8, 0x0) keyctl$auto(0x1d, 0xfffffffffffffffd, 0x2, 0x628, 0xfffffffffffffffd) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) socket(0x2, 0x1, 0x106) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) sysfs$auto(0x2, 0x5, 0x0) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto(r3, 0x6, 0x0, 0x0, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) io_uring_setup$auto(0x401, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$auto(0xffffffffffffffff, 0x0, 0x1000001, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x18, 0x5, 0x15) mprotect$auto(0x0, 0x806121, 0x8) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0xffffffffffffffff, 0x0, 0x100082) personality$auto(0x2) ioctl$auto_TCSBRKP2(r1, 0x5425, 0x0) 8.046843368s ago: executing program 2 (id=1725): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), r0) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xcb4, 0x404, 0x8000) r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec31\x00', 0x900, 0x0) ioctl$auto_CEC_S_MODE(r1, 0x40046109, &(0x7f0000002c40)=0xd0) ioctl$auto_CEC_DQEVENT(r1, 0xc0506107, 0x0) r2 = inotify_init1$auto(0x3000000000000) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x129f00, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80302, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe98, 0x0, 0x0, &(0x7f0000000480)={[0x54e, 0x5, 0x1, 0x8fd6, 0x948b, 0x9, 0x3392, 0x4, 0x3, 0x3, 0xffffffff, 0x9, 0x3, 0x4, 0x6, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r4 = openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/buffer_percent\x00', 0x40, 0x0) read$auto(r4, &(0x7f0000000040)=',^{\'\x00', 0x7) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) waitid$auto_P_PIDFD(0x3, r2, &(0x7f0000000340)={@siginfo_0_0={0x0, 0x81, 0x9, @_rt={0x0, 0x0, @sival_int=0xfffffffe}}}, 0xd, &(0x7f00000003c0)={{0x1000, 0x7ce}, {0x10001}, 0x80000001, 0x10001, 0x800, 0x0, 0x99e1, 0x9, 0x3ff, 0x200000000009, 0xbb, 0xab1f, 0x3, 0xe, 0x0, 0xe}) msgctl$auto_MSG_INFO(0x5, 0xc, 0x0) setresgid$auto(0x0, 0xffffffffffffffff, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32=r6, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100000000000000000008000200", @ANYRES32=r6, @ANYBLOB="060006ff05000000080003009b"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) close_range$auto(0x2, 0x8, 0x0) socket(0x73, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) 6.625541352s ago: executing program 2 (id=1730): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TCFLSH2(r1, 0x80045439, 0x0) r2 = waitid$auto_P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000000c0)={@siginfo_0_0={0x7, 0x5, 0x93, @_sigpoll={0x8000000000000001, r0}}}, 0x7, &(0x7f0000000140)={{0x8, 0x1}, {0x8, 0x5}, 0x1, 0x9, 0xe, 0x4, 0x53b, 0x1, 0x2, 0x7, 0x8, 0x8, 0x4, 0x0, 0x7, 0x6}) syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/cgroup\x00') r4 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000240), r3) sendmsg$auto_SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, r4, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x61}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x3}, @SMC_PNETID_IBNAME={0x12, 0x3, '/dev/pts/ptmx\x00'}, @SMC_PNETID_IBNAME={0x7, 0x3, '}#\x00'}, @SMC_PNETID_IBNAME={0x5, 0x3, '\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c811}, 0xc0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) ioctl$auto(r0, 0x89f1, r0) 5.856950753s ago: executing program 2 (id=1736): bpf$auto(0x9, 0x0, 0x9) (async) bpf$auto(0x9, 0x0, 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, r0) sendmsg$auto_NL80211_CMD_START_NAN(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) socketcall$auto(0x8000, 0x0) (async) r2 = socketcall$auto(0x8000, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0x8400ae8e, &(0x7f00000000c0)={0xdd}) (async) ioctl$auto_KVM_GET_MSRS(r1, 0x8400ae8e, &(0x7f00000000c0)={0xdd}) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) (async) getcwd$auto(0x0, 0xffffffffffffffff) shutdown$auto(0x200000003, 0x2) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) r4 = getpid() prctl$auto(0x1000000003b, 0x800000000000001, r4, 0x4000000005, 0x20000007) (async) prctl$auto(0x1000000003b, 0x800000000000001, r4, 0x4000000005, 0x20000007) socket(0x2, 0x801, 0x100) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) (async) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) mmap$auto(0x1, 0x8, 0x3, 0x75a94c74, r0, 0x2) (async) mmap$auto(0x1, 0x8, 0x3, 0x75a94c74, r0, 0x2) remap_file_pages$auto(0x5, 0x1000, 0x0, 0x8, 0x10007) semctl$auto_SETVAL(0xb134, 0x9, 0x10, 0x3) 3.52490135s ago: executing program 2 (id=1742): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x2000, 0x0) r1 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmsg$auto_SMC_NETLINK_DUMP_SEID(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, "6eee466843b94e166e86b727b9ad9d8ded36dec47cf27f4549ae5fbc8400e8458885ae2ac5d172"}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x7d) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace\x00', 0x2, 0xeb) write$auto(0x3, 0x0, 0x0) bpf$auto(0x0, 0x0, 0x6f4) r3 = eventfd$auto(0x6) ioctl$auto_EVIOCGMASK(r0, 0x80104592, &(0x7f0000000000)={0x2000, 0x800004, 0x9}) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/Eev/audio1\x00V\xc9\xdf\x13\xb9\xe3%u\xff\xc0F\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\b\x00:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x913.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\x00\x00\x00\x00\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8\xc2Ap\xfb\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xe3*\x10\xe4i\xfd\xf6DT\x81\"\x8bl\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00\x00\x00@_mw\xd9\xb7@$\x8b\xa9\xc9\x04\x9d`J\xaa\xb46\xbf\x00&\xe0\xbf\xcex\xb2\xe4T\x04\xf5B\xf0\xd43\x92\x91\xd7%\xd8\xebG\x97K\x7f\xe48\x9c\xa4R\xe6f\xfbE\\)\x80\xbf\xa8~%]D\xceG}3\xa4\xd1J\xab\xe7-\xee\xcf\x16\xc5\xaa\x93\x82\xb6\xef\xc4\xdbM\xe1@2\xfa\xbe\xa0[`\x8f\x06\x9f\xfc\xd8\xd6\fv\xbbC\v^\xfct\x7f\xc2\xa7Bf\x8c\x8d\xf3x!\x98\x06\xc5\\\xe8j\x92u\xdf\xfcX\xb4\xe7D}\x8b\x9aT|\xdbM\xd2~^\x1650{\xcd\xba*\xe9 \x98\x84\xc6\xa7\xc5\xc1\xa0\v\xe1\xbf\bJ~\x9a,[\x9f\xef:]\x84\x80W\xd0\f)\xfd\xd0\xd7\x84', 0x100000a3d8) mmap$auto(0x9, 0xa0009, 0x4, 0x40000000000eb1, 0xffffffffffffffff, 0x7ffc) connect$auto(0x3, &(0x7f0000000080)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x4}, 0x81) close_range$auto(0x2, 0x8, 0x0) readv$auto(0x3, 0x0, 0x8) unshare$auto(0x40000080) fallocate$auto(0x8000000000000003, 0x0, 0x2, 0x4cbd5d) getsockopt$auto(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_COLOR_CHANGE_REQUEST(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001680)={&(0x7f0000002b40)=ANY=[@ANYBLOB="00140000d973f1ee10d686a7bd6f5f00001f0d403679", @ANYRESDEC, @ANYBLOB="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"], 0x1400}, 0x1, 0x0, 0x0, 0x4000}, 0x40080c4) ptrace$auto(0x5, 0x0, 0xfffffffffffffffa, 0x8) mmap$auto(0xf22, 0x8001, 0xfd5, 0x14, 0xffffffffffffffff, 0x0) openat$auto_ht40allow_map_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/ieee80211/phy4/ht40allow_map\x00', 0x28000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x1d, 0x3, 0x1) syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000080), 0xffffffffffffffff) 3.504585852s ago: executing program 3 (id=1743): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x1ac}}, 0x801) write$auto_lru_gen_rw_fops_vmscan(0xffffffffffffffff, &(0x7f0000000100)="0cbf08fb9592cae11eff39ceb5e288b8e371456531b478d43231e0230f4d4bfe1a4d6a2417a11974340d008cc69154ce07d914e32c034b0d7bf7e6ec30027dfd5d83ff88338e1551a718cf3a449e7424fec21d4b40849e4e4c45488d99071eae0af2e36bc2d1ec80804f553d516916653239271fc3bbc1ba2c6afeed3dabb3d15901376146c2e39092c4be06964b849ce7ffbc14e0cdf648f1874183d5d685c4af6ba14865a9e185e43b012fd37deaec2e69f0076bb4025453220115f499f015e7c862618323a3d0e10ce8aadacf72708977ff9fdba907ed40bccfd8d12c0dcacde4243bba70f5a05f9ab8846f0cb856a0", 0xf1) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001980)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYRES16=r0], 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2.898056417s ago: executing program 3 (id=1744): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x2, 0x0) pwritev$auto(r0, 0x0, 0x3, 0x11, 0x3) 2.689829146s ago: executing program 1 (id=1745): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) sendmsg$auto_THERMAL_GENL_CMD_CDEV_GET(r0, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x8b8) r1 = socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mlock$auto(0xfbe8, 0x4) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) munlock$auto(0xffff, 0x1) socket(0x2, 0x3, 0x6) msgctl$auto_MSG_STAT_ANY(0x2, 0xd, &(0x7f0000000240)={{0x7, 0x0, 0xffffffffffffffff, 0x4818, 0x7, 0x6, 0x9c4}, 0x0, 0x0, 0x9, 0xbe, 0x8, 0x10001, 0x101, 0x4, 0x0, 0xb, @inferred, @inferred=0xffffffffffffffff}) sendmsg$auto_SEG6_CMD_SET_TUNSRC(r1, 0x0, 0x800) r2 = socket(0x2, 0x1, 0x0) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x6a) sendmmsg$auto(r2, 0x0, 0x5, 0x20000000) r3 = socket(0x2, 0x1, 0x106) getsockopt$auto_SO_BINDTOIFINDEX(r3, 0x1, 0x3e, &(0x7f0000000080)='/dev/audio1\x00', &(0x7f00000000c0)=0x8) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(r3, 0x0, 0x0, 0x0, 0x40) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x7}, 0x3, 0xcad7) r4 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad80, 0x0) readv$auto(r4, &(0x7f0000000680)={0x0, 0x40200}, 0x3) r5 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/keycreate\x00', 0x680802, 0x0) setsockopt$auto(r5, 0x1, 0x3e, 0x0, 0x9) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) capset$auto(&(0x7f0000000100)={0x20080522}, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/nr14/tx_queue_len\x00', 0x189482, 0x0) write$auto_ocfs2_control_fops_stack_user(r6, &(0x7f0000003900)='\t', 0x1) sendmsg$auto_ETHTOOL_MSG_FEC_SET(0xffffffffffffffff, 0x0, 0x20004000) 2.689066146s ago: executing program 3 (id=1746): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x800000000805e, 0x3, 0x9) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) sched_setattr$auto(0x0, 0x0, 0x7b) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r0, 0x100000000000, 0x7ff) waitid$auto_P_PID(0x1, r0, 0x0, 0x1, 0x0) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x20a402, 0x0) read$auto(r1, &(0x7f0000000080)=',*(,\x00', 0xffffffff) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x20009, 0x2, 0x13, 0xffffffffffffffff, 0x8000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x101040, 0x0) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x800000000805e, 0x3, 0x9) (async) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) (async) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) (async) sched_setattr$auto(0x0, 0x0, 0x7b) (async) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace$auto(0x10, r0, 0x100000000000, 0x7ff) (async) waitid$auto_P_PID(0x1, r0, 0x0, 0x1, 0x0) (async) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x20a402, 0x0) (async) read$auto(r1, &(0x7f0000000080)=',*(,\x00', 0xffffffff) (async) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) (async) mmap$auto(0x0, 0x20009, 0x2, 0x13, 0xffffffffffffffff, 0x8000) (async) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) (async) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x101040, 0x0) (async) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) (async) 2.561353684s ago: executing program 1 (id=1747): openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) socket(0x2, 0x80002, 0x73) r0 = socket(0x15, 0x5, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, r0, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/error_log\x00', 0xb81, 0x0) socket(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) socket(0x10, 0x2, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/rose7/flags\x00', 0x2262, 0x0) write$auto(r3, &(0x7f0000000140)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\xfc\xb2\x00\x00\x00\x00y\x113!\x05\xa7\xd6M\xce\xd6\'\xdf@\x9f\xf5 \x8b_hw\x8em\xd0\b\xe7~1\xf5\xf8\x93*jH\x85H\x05\xae\xdf\xf0\x15A\xdb$\'\x87', 0x81) memfd_create$auto(&(0x7f00000000c0)='\xc4--:\xdd:,./-${\x00', 0x4) sendmmsg$auto(r2, &(0x7f0000000000)={{0x0, 0x8, 0x0, 0x106, 0x0, 0x1, 0xfffffff3}, 0xed7138c}, 0x7, 0x0) r4 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r4, @new_prog_fd=0x4, 0x4, @old_map_fd=r1}, 0xa8) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) 2.046849786s ago: executing program 1 (id=1748): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/memory.kmem.tcp.limit_in_bytes\x00', 0xc2481, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20004080) r0 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0xb213, 0x2c, 0x800}) sendmmsg$auto(r0, &(0x7f0000000100)={{&(0x7f0000000000), 0x5aa, &(0x7f00000000c0)={&(0x7f0000000040)='f', 0x49}, 0x1, &(0x7f0000000200), 0x5, 0x3}, 0x4}, 0x2, 0x100) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0) mmap$auto(0x0, 0x4000f, 0x7, 0x9b72, 0x7, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) inotify_init1$auto(0x3000000000000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/vm/extfrag_threshold\x00', 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/007/001\x00', 0x40000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/arch_status\x00', 0x100382, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vbi0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) io_uring_setup$auto(0x4, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_udc.3/udc/dummy_udc.3/a_hnp_support\x00', 0x100, 0x0) r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(r2, 0x4020ae46, r2) 1.858116575s ago: executing program 3 (id=1749): r0 = socket$nl_generic(0x10, 0x3, 0x10) write$auto_seq_oss_f_ops_seq_oss(0xffffffffffffffff, &(0x7f0000000040)="5f74ab2fc43781e047140a5cbc3ac5229b90633d9cddda9efb1f2c3d5d1e63f3fb5acf079b9336319d009cb514679a42eaca52b81c166d19625d173c26ece6542f2fb29712f4fb9072fc432b4cf3e6f5a7f3c9f91ee88ba5fa11d48fd3658e8f44f8423b4cd02bbec912ed34f9f4b19b03d4c62b24ede44c0c76c34edf7bde061903c2ee4c64110ac668239fa53ba42933ae74c3d173663248ff0945dd2e405e0d378b5a8e4643a7bc3b35a7248431450ca8901467ea6dc5d86de1e90f869f6a04ac10043676f3b2c7f1339b2d7468133fb8447d17846b6b78079ecc31d7d0f74caa4a3db1ac4d312bfdb34bd331f1f771a2396108561a52153d63a7b2a3a077a7e4c1a22bcb23e1f3e511fee310baa67904d2aad4d6671e8b77c7720e37e84e0efecb60a35f188cbe8b8b2fb3967b78aa482aabb103f23083baa9b2ae653731d5993db4054233dea4af25795e12eb4d6b046bdeea6adce8626e0def15dd32b0ec16a8", 0x163) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003b40)={'xfrm0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000226bd7000fedbdf25030000000800030000020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a000500000000000000000008000200", @ANYRES32], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYRES16=r2], 0x1ac}}, 0x40001) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4040044}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x60, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000080), 0x7, 0xa505}, 0x800}, 0x24, 0x4008) 1.855116278s ago: executing program 0 (id=1750): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/msr/perf_event_mux_interval_ms\x00', 0x982, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) setresuid$auto(0x0, 0x8, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x4000004) lstat$auto(0x0, &(0x7f0000000180)={0xb, 0x2, 0xbe, 0x1000, 0x0, 0x0, 0x0, 0xfa94, 0x8, 0x5, 0x8000000004, 0x100000007fffffff, 0x5, 0x0, 0x7, 0x4, 0x3}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) 1.519745141s ago: executing program 0 (id=1751): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x315, 0x1, 0x401bf, 0x7352, 0x3c, 0x65f, 0x1ffde, 0x7ff, 0x2, 0x2, 0x9, 0xfffffffe, 0x4000006, 0x4, 0xb6, 0x80000000009, 0x6, 0x10003, 0xb, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x101, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x1]}, 0x1fe, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB='\f\x00'], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x40090) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1.40581734s ago: executing program 3 (id=1752): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/netdevsim/del_device\x00', 0x501, 0x0) madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D3\x00', 0x3ece1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/timer_source\x00', 0x181002, 0x0) write$auto_proc_reg_file_ops_compat_inode(r0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) 1.244580498s ago: executing program 1 (id=1753): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) ioctl$auto(r0, 0x40084d02, r0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg1\x00', 0x82802, 0x0) mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000300), r1) read$auto(r1, &(0x7f0000000040)='nl80211\x00', 0xbe62) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4810}, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2f212dbd7000fcdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e"], 0x24}}, 0x4000000) getsockopt$auto_SO_PEERNAME(r1, 0x0, 0x1c, &(0x7f00000003c0)='/dev/sg1\x00', &(0x7f0000000540)=0x7) sendmsg$auto_NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)={0xf0, r3, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_AP_SETTINGS_FLAGS={0x8, 0x135, 0x7fffffff}, @NL80211_ATTR_HE_6GHZ_CAPABILITY={0xb4, 0x125, "f63d0fbe284ae2b606eda40e4386477aae1c952bcd853509c7b4314c384a4db6855a23c52af0a37c01c2c10ea0871861e5496cfac1a89d24a9da1564b0bda4e298df1c05747e47858f4f1910fd9786adda374ef01d544ece8dba700d4bc8343bd518888102c00ac5b4062940d96c7b534c51dc59d97c96630f5ae40c193c3530ca88be2e1905d324f70dcb1bd5c2ba7e1707ce720e9bb845eb19b5a96194548bb2d1e63e6714fd9a1b50ddbfcf5714db"}, @NL80211_ATTR_ROAM_SUPPORT={0x4}, @NL80211_ATTR_KEY_SEQ={0x5, 0xa, 'F'}, @NL80211_ATTR_KEY_SEQ={0x8, 0xa, "bd2cc510"}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0xf0}, 0x1, 0x0, 0x0, 0xc055}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB="0c001a"], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x40090) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="9a0fe73eee8454bfdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) lsm_get_self_attr$auto(0x64, 0x0, &(0x7f0000002440)=0x1fb, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) ioctl$auto(0x3, 0x2284, 0x38) 1.195498271s ago: executing program 0 (id=1754): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r1) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd700002dcdf251000030018000180140002006e657464657673696d30000000000000080011"], 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x80014) close_range$auto(r0, r0, 0x2) landlock_restrict_self$auto(r0, 0x0) close_range$auto(0xffffffffffffffff, r0, 0xfffffffe) mmap$auto(0x7, 0x2020009, 0x0, 0xeb1, 0xfffffffffffffffa, 0x8001) r3 = socket(0x2, 0x2, 0x88) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x1, 0x0) setsockopt$auto(r3, 0x1, 0xf, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8000, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto_KEYCTL_GET_SECURITY(0x11, 0xcb00, 0x0, 0x2, 0x8) io_uring_setup$auto(0xfbfffffd, 0x0) r4 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) r5 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r5, 0x40383d0c, 0x0) mbind$auto(0xc, 0x6, 0x7, &(0x7f0000000000)=0x7, 0x200, 0x3) fcntl$auto_F_CREATED_QUERY(r5, 0x404, 0x3) ioctl$sock_SIOCGIFINDEX(r4, 0x460f, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x2, 0x0) pwritev$auto(r6, 0x0, 0x3, 0x11, 0x3) 1.099656827s ago: executing program 3 (id=1755): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), r0) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xcb4, 0x404, 0x8000) r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec31\x00', 0x900, 0x0) ioctl$auto_CEC_S_MODE(r1, 0x40046109, &(0x7f0000002c40)=0xd0) ioctl$auto_CEC_DQEVENT(r1, 0xc0506107, 0x0) r2 = inotify_init1$auto(0x3000000000000) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x129f00, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80302, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe98, 0x0, 0x0, &(0x7f0000000480)={[0x54e, 0x5, 0x1, 0x8fd6, 0x948b, 0x9, 0x3392, 0x4, 0x3, 0x3, 0xffffffff, 0x9, 0x3, 0x4, 0x6, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r4 = openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/buffer_percent\x00', 0x40, 0x0) read$auto(r4, &(0x7f0000000040)=',^{\'\x00', 0x7) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) waitid$auto_P_PIDFD(0x3, r2, &(0x7f0000000340)={@siginfo_0_0={0x0, 0x81, 0x9, @_rt={0x0, 0x0, @sival_int=0xfffffffe}}}, 0xd, &(0x7f00000003c0)={{0x1000, 0x7ce}, {0x10001}, 0x80000001, 0x10001, 0x800, 0x0, 0x99e1, 0x9, 0x3ff, 0x200000000009, 0xbb, 0xab1f, 0x3, 0xe, 0x0, 0xe}) msgctl$auto_MSG_INFO(0x5, 0xc, 0x0) setresgid$auto(0x0, 0xffffffffffffffff, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32=r6, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100000000000000000008000200", @ANYRES32=r6, @ANYBLOB="060006ff05000000080003009b"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) close_range$auto(0x2, 0x8, 0x0) socket(0x73, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) 1.004488029s ago: executing program 1 (id=1756): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/firmware/acpi/interrupts/ff_slp_btn\x00', 0x8522, 0x0) socket(0xa, 0x3, 0xff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0xca, 0x0, 0x2d9) close_range$auto(0x2, 0xa, 0x0) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, 0x0, 0x40800) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0x2003f2, 0x15) 845.434505ms ago: executing program 0 (id=1757): openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) socket(0x2, 0x80002, 0x73) r0 = socket(0x15, 0x5, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, r0, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x80040, 0x40, 0xe}, 0x18) socket(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) socket(0x10, 0x2, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/rose7/flags\x00', 0x2262, 0x0) write$auto(r3, &(0x7f0000000140)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\xfc\xb2\x00\x00\x00\x00y\x113!\x05\xa7\xd6M\xce\xd6\'\xdf@\x9f\xf5 \x8b_hw\x8em\xd0\b\xe7~1\xf5\xf8\x93*jH\x85H\x05\xae\xdf\xf0\x15A\xdb$\'\x87', 0x81) memfd_create$auto(&(0x7f00000000c0)='\xc4--:\xdd:,./-${\x00', 0x4) sendmmsg$auto(r2, &(0x7f0000000000)={{0x0, 0x8, 0x0, 0x106, 0x0, 0x1, 0xfffffff3}, 0xed7138c}, 0x7, 0x0) r4 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r4, @new_prog_fd=0x4, 0x4, @old_map_fd=r1}, 0xa8) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) 632.111352ms ago: executing program 1 (id=1758): ppoll$auto(&(0x7f0000000040)={0xffffffffffffffff, 0xe}, 0x2, &(0x7f0000000080)={0xd, 0x9e}, &(0x7f00000000c0)={0x7}, 0x8) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team_slave_0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r1, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKSTATE_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1000}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000300), r0) sendmsg$auto_OVS_FLOW_CMD_DEL(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r4, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@OVS_FLOW_ATTR_UFID={0x5, 0x9, 0x10}, @OVS_FLOW_ATTR_CLEAR={0x4}, @OVS_FLOW_ATTR_UFID={0x5, 0x9, 0x2}, @OVS_FLOW_ATTR_UFID_FLAGS={0x8, 0xa, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x4000000) r5 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000440), r0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r5, 0xf260bc121b3a3e5, 0x70bd29, 0x25dfdbfb, {}, [@NETDEV_A_QUEUE_IFINDEX={0x8, 0x2, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) setsockopt$auto(r3, 0x5a9, 0x583, &(0x7f0000000540)='^\'\x00', 0x3) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nfc(&(0x7f00000005c0), r0) sendmsg$auto_NFC_CMD_DEP_LINK_UP(r6, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xf0, r7, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NFC_ATTR_SE_APDU={0xb3, 0x19, "0d3cf326a7dc935e507c39571f58560c070855b962d6d6b97f6a66d78ad85baeb4991803aebd84bbcca08c3375c9052bc0036fb5039078046c13d10c0a66552b422db9f740ecc8edeac58572a75ed882d51f7ce7e7e525dc8dbf764b77253de312857a69e482e5111f1519f456aa2f170f85ed5a228502f04a5d2387f7b4508ed96e979a92f29e3e388914be713521af5ef41edb1b8e64653e6da4447a66a0ec1c6a8d58a961b3940a55c0d1a0bb4e"}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x9}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x7f}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x8}, @NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x3}]}, 0xf0}, 0x1, 0x0, 0x0, 0x800}, 0x8010) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000780)={0x9, "918da5efeb37b51222adeae14b6c8686b5a4aac0db8a54888e82419faf838de1", @inferred=r6}) r9 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000800), r6) sendmsg$auto_L2TP_CMD_SESSION_CREATE(r8, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x70, r9, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xfe}, @L2TP_ATTR_USING_IPSEC={0x5, 0x15, 0x5}, @L2TP_ATTR_USING_IPSEC={0x5, 0x15, 0x4}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x9}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x30}}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xa0}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0xf7}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x80) r10 = getpgrp(0x0) r11 = prctl$auto(0x5, 0x8, r10, 0x2, 0x8) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r8, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, r7, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x5}, @NFC_ATTR_DEVICE_NAME={0x8, 0x2, 'nfc\x00'}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x5}, @NFC_ATTR_FIRMWARE_NAME={0x9, 0x14, '/*\xfd@&'}]}, 0x38}, 0x1, 0x0, 0x0, 0x80810}, 0x8040) r12 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/module/dvb_usb_cinergyT2/parameters/adapter_nr\x00', 0x2, 0x0) getsockopt$auto_SO_TYPE(r12, 0xe, 0x3, &(0x7f0000000a80)='[$\x00', &(0x7f0000000ac0)=0x2) ptrace$auto_PTRACE_SETREGSET(0x4205, r10, 0xac72, 0x9) stat$auto(&(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)={0x9, 0x9, 0xfffffffffffffff7, 0x8, 0xee01, 0xffffffffffffffff, 0x0, 0x608d, 0x8, 0x8000000000000001, 0x3, 0x35, 0x5d3, 0x5, 0x5, 0x101, 0x3}) setresgid$auto(0xffffffffffffffff, 0xffffffffffffffff, r13) sendto$auto(r8, &(0x7f0000000c00)="1903f8faf910bd9936bddcf22b6fe7e44736be6b0fa307932b41482b007c7464ba592cf51f1acb82ec34f48df78064d7b0b8773520cf68ee4bedfdf77d8a8b5e9a8373c7d28bf26028799d12b7", 0x201, 0x9, &(0x7f0000000c80)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x2}}, 0x200) r14 = ioctl$auto_UDMABUF_CREATE(r11, 0x40187542, &(0x7f0000000cc0)={r11, 0x1, 0x7, 0x101}) statmount$auto(&(0x7f0000000d00)={0x4, @inferred=r0, 0xb96a, 0x8, 0x1ff}, &(0x7f0000000d40)={0xf, 0x4, 0x80000001, 0x80000000, 0x5, 0x6, 0x9, 0x3, 0x7, 0x3, 0x42d, 0x1, 0x7f, 0x4, 0x8, 0x265, 0x5, 0x6, 0x0, 0x9, 0x5, 0xf9, 0x5, 0x401, 0x7fff, 0x0, 0x2, 0xb, 0x2, 0x8, 0xffff8607, [0x4, 0x4, 0x8000000000000000, 0x8, 0x1, 0x6, 0x1, 0x4, 0x6, 0x0, 0x100000000, 0x7f, 0x7, 0x7, 0x2, 0x4, 0xa, 0x53, 0x0, 0x0, 0xdb, 0x7, 0x8, 0x4, 0x9, 0x8, 0x4, 0x1, 0x76, 0x7f, 0x7fffffffffffffff, 0x8001, 0xffffffffffffffff, 0x8, 0x9, 0x7, 0x7fffffffffffffff, 0xa13f, 0xf, 0x7ff, 0x80000001, 0x3, 0x8], "89bd06722b3c112749cfc12dab91127d4e37596fb7df78e84eb64a2f94e7ec395fc803b45f0982e157bc5a349613d9a7001390ee4e564d2c5a66322fd0cc5e5504c39b3e653df7ad8086f3c26eb1d79c4fa6fd6d75f20fd90fd0bdaefa6ab75871541da8dc624bc055423642ca8b28e01db35c959c656119fd6732af7ae8"}, 0x3, 0x3) r15 = getpid() syz_clone3(&(0x7f0000001340)={0x58180, &(0x7f0000000fc0), &(0x7f0000001000), &(0x7f0000001040), {0x1e}, &(0x7f0000001080)=""/35, 0x23, &(0x7f00000010c0)=""/61, &(0x7f0000001300)=[r10, r10, r10, 0xffffffffffffffff, r10, r10, r10, r10, r15, 0x0], 0xa, {r14}}, 0x58) 352.960848ms ago: executing program 0 (id=1759): mmap$auto(0x0, 0x2020005, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0xe8) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x18dd01, 0x0) fadvise64$auto_POSIX_FADV_RANDOM(r1, 0xfffffffffffffff7, 0x3, 0x1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop2/queue/iostats\x00', 0x20b02, 0x0) sendfile$auto(r2, r2, 0x0, 0x3) eventfd$auto(0x8e) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socketpair$auto(0x1, 0x5, 0x0, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r4, 0x5393, r3) 0s ago: executing program 0 (id=1760): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/msr/perf_event_mux_interval_ms\x00', 0x982, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x4000004) lstat$auto(0x0, &(0x7f0000000180)={0xb, 0x2, 0xbe, 0x1000, 0x0, 0x0, 0x0, 0xfa94, 0x8, 0x5, 0x8000000004, 0x100000007fffffff, 0x5, 0x0, 0x7, 0x4, 0x3}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) kernel console output (not intermixed with test programs): ffffff9c [ 353.727253][T10762] RBP: 00007f5922213f91 R08: 0000000000000000 R09: 0000000000000000 [ 353.727262][T10762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 353.727270][T10762] R13: 00007f59223e6128 R14: 00007f59223e6090 R15: 00007ffdabee0828 [ 353.727289][T10762] [ 354.960649][T10777] delete_channel: no stack [ 356.811590][T10795] netlink: 226 bytes leftover after parsing attributes in process `syz.3.1176'. [ 357.675806][T10795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1176'. [ 357.685151][T10795] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 358.092496][T10806] FAULT_INJECTION: forcing a failure. [ 358.092496][T10806] name failslab, interval 1, probability 0, space 0, times 0 [ 358.259133][T10806] CPU: 1 UID: 0 PID: 10806 Comm: syz.3.1180 Not tainted syzkaller #0 PREEMPT(full) [ 358.259156][T10806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 358.259165][T10806] Call Trace: [ 358.259172][T10806] [ 358.259177][T10806] dump_stack_lvl+0x16c/0x1f0 [ 358.259200][T10806] should_fail_ex+0x512/0x640 [ 358.259222][T10806] ? fs_reclaim_acquire+0xae/0x150 [ 358.259241][T10806] should_failslab+0xc2/0x120 [ 358.259261][T10806] __kmalloc_noprof+0xdd/0x880 [ 358.259281][T10806] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 358.259302][T10806] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 358.259317][T10806] tomoyo_realpath_from_path+0xc2/0x6e0 [ 358.259334][T10806] ? tomoyo_profile+0x47/0x60 [ 358.259354][T10806] tomoyo_path_number_perm+0x245/0x580 [ 358.259366][T10806] ? tomoyo_path_number_perm+0x237/0x580 [ 358.259381][T10806] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 358.259395][T10806] ? rcu_read_unlock+0x17/0x60 [ 358.259416][T10806] ? do_raw_spin_lock+0x12c/0x2b0 [ 358.259437][T10806] ? find_held_lock+0x2b/0x80 [ 358.259459][T10806] ? find_held_lock+0x2b/0x80 [ 358.259472][T10806] ? __pfx___d_add+0x10/0x10 [ 358.259489][T10806] ? d_alloc+0x176/0x1e0 [ 358.259502][T10806] ? current_check_access_path+0x33c/0x460 [ 358.259519][T10806] ? __pfx_current_check_access_path+0x10/0x10 [ 358.259537][T10806] ? simple_lookup+0x105/0x1d0 [ 358.259554][T10806] tomoyo_path_mknod+0x10c/0x190 [ 358.259579][T10806] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 358.259600][T10806] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 358.259626][T10806] security_path_mknod+0x161/0x310 [ 358.259641][T10806] do_mknodat+0x239/0x5d0 [ 358.259658][T10806] ? __pfx_do_mknodat+0x10/0x10 [ 358.259671][T10806] ? getname_flags.part.0+0x1c5/0x550 [ 358.259695][T10806] __x64_sys_mknod+0x87/0xb0 [ 358.259711][T10806] do_syscall_64+0xcd/0xfa0 [ 358.259729][T10806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.259744][T10806] RIP: 0033:0x7fcdc158f749 [ 358.259756][T10806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.259769][T10806] RSP: 002b:00007fcdc2420038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 358.259783][T10806] RAX: ffffffffffffffda RBX: 00007fcdc17e6090 RCX: 00007fcdc158f749 [ 358.259792][T10806] RDX: 0000000000000017 RSI: 0000000000000e6c RDI: 0000200000000080 [ 358.259800][T10806] RBP: 00007fcdc1613f91 R08: 0000000000000000 R09: 0000000000000000 [ 358.259808][T10806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 358.259817][T10806] R13: 00007fcdc17e6128 R14: 00007fcdc17e6090 R15: 00007ffffdfc78e8 [ 358.259837][T10806] [ 358.259843][T10806] ERROR: Out of memory at tomoyo_realpath_from_path. [ 359.907362][T10822] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1185'. [ 359.952493][T10825] FAULT_INJECTION: forcing a failure. [ 359.952493][T10825] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 360.025152][T10825] CPU: 1 UID: 0 PID: 10825 Comm: syz.3.1186 Not tainted syzkaller #0 PREEMPT(full) [ 360.025174][T10825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 360.025184][T10825] Call Trace: [ 360.025189][T10825] [ 360.025196][T10825] dump_stack_lvl+0x16c/0x1f0 [ 360.025218][T10825] should_fail_ex+0x512/0x640 [ 360.025242][T10825] _copy_from_iter+0x29f/0x1720 [ 360.025270][T10825] ? __alloc_skb+0x200/0x380 [ 360.025293][T10825] ? __pfx__copy_from_iter+0x10/0x10 [ 360.025314][T10825] ? netlink_autobind.isra.0+0x158/0x370 [ 360.025337][T10825] netlink_sendmsg+0x820/0xdd0 [ 360.025356][T10825] ? __pfx_netlink_sendmsg+0x10/0x10 [ 360.025373][T10825] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 360.025396][T10825] __sys_sendto+0x4a3/0x520 [ 360.025416][T10825] ? __pfx___sys_sendto+0x10/0x10 [ 360.025455][T10825] ? find_held_lock+0x2b/0x80 [ 360.025485][T10825] __x64_sys_sendto+0xe0/0x1c0 [ 360.025504][T10825] ? do_syscall_64+0x91/0xfa0 [ 360.025520][T10825] ? lockdep_hardirqs_on+0x7c/0x110 [ 360.025537][T10825] do_syscall_64+0xcd/0xfa0 [ 360.025554][T10825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.025568][T10825] RIP: 0033:0x7fcdc15915dc [ 360.025581][T10825] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 360.025594][T10825] RSP: 002b:00007fcdc243fec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 360.025608][T10825] RAX: ffffffffffffffda RBX: 00007fcdc243ffc0 RCX: 00007fcdc15915dc [ 360.025617][T10825] RDX: 0000000000000024 RSI: 00007fcdc2440010 RDI: 0000000000000004 [ 360.025625][T10825] RBP: 0000000000000000 R08: 00007fcdc243ff14 R09: 000000000000000c [ 360.025633][T10825] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 360.025642][T10825] R13: 00007fcdc243ff68 R14: 00007fcdc2440010 R15: 0000000000000000 [ 360.025661][T10825] [ 360.219231][ C1] vkms_vblank_simulate: vblank timer overrun [ 360.945044][T10837] zswap: compressor not available [ 361.338628][T10852] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1194'. [ 362.090904][T10875] random: crng reseeded on system resumption [ 363.331787][T10907] sp0: Synchronizing with TNC [ 363.340602][T10904] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1199'. [ 363.948658][T10917] zswap: compressor not available [ 364.225098][T10937] openvswitch: netlink: Key type 89 is out of range max 32 [ 364.275484][T10926] zswap: compressor not available [ 366.196734][ T8211] Bluetooth: hci1: unexpected event 0x1d length: 6 > 5 [ 366.858107][T10981] random: crng reseeded on system resumption [ 367.222005][T10995] FAULT_INJECTION: forcing a failure. [ 367.222005][T10995] name failslab, interval 1, probability 0, space 0, times 0 [ 367.391822][T10995] CPU: 1 UID: 0 PID: 10995 Comm: syz.0.1218 Not tainted syzkaller #0 PREEMPT(full) [ 367.391850][T10995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 367.391859][T10995] Call Trace: [ 367.391864][T10995] [ 367.391870][T10995] dump_stack_lvl+0x16c/0x1f0 [ 367.391894][T10995] should_fail_ex+0x512/0x640 [ 367.391915][T10995] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 367.391933][T10995] should_failslab+0xc2/0x120 [ 367.391952][T10995] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 367.391967][T10995] ? __d_alloc+0x32/0xae0 [ 367.391986][T10995] ? __d_alloc+0x32/0xae0 [ 367.391999][T10995] __d_alloc+0x32/0xae0 [ 367.392017][T10995] d_alloc_parallel+0x111/0x1510 [ 367.392044][T10995] ? __pfx_d_alloc_parallel+0x10/0x10 [ 367.392065][T10995] ? lockdep_init_map_type+0x5c/0x280 [ 367.392085][T10995] ? lockdep_init_map_type+0x5c/0x280 [ 367.392107][T10995] __lookup_slow+0x193/0x460 [ 367.392126][T10995] ? __pfx___lookup_slow+0x10/0x10 [ 367.392148][T10995] ? __pfx_need_update+0x10/0x10 [ 367.392171][T10995] ? __pfx_need_update+0x10/0x10 [ 367.392190][T10995] ? d_lookup+0xe7/0x190 [ 367.392211][T10995] lookup_noperm+0xe1/0x110 [ 367.392230][T10995] simple_start_creating+0xd1/0x1b0 [ 367.392246][T10995] debugfs_start_creating.part.0+0x82/0x190 [ 367.392262][T10995] __debugfs_create_file+0xa7/0x6b0 [ 367.392278][T10995] debugfs_create_file_full+0x41/0x60 [ 367.392294][T10995] ref_tracker_dir_debugfs+0x19d/0x290 [ 367.392308][T10995] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 367.392339][T10995] ? lockdep_init_map_type+0x5c/0x280 [ 367.392361][T10995] preinit_net.part.0+0x437/0x8a0 [ 367.392378][T10995] copy_net_ns+0x3ba/0x690 [ 367.392395][T10995] create_new_namespaces+0x3ea/0xa90 [ 367.392416][T10995] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 367.392433][T10995] ksys_unshare+0x45b/0xa40 [ 367.392451][T10995] ? __pfx_ksys_unshare+0x10/0x10 [ 367.392468][T10995] ? xfd_validate_state+0x61/0x180 [ 367.392493][T10995] __x64_sys_unshare+0x31/0x40 [ 367.392510][T10995] do_syscall_64+0xcd/0xfa0 [ 367.392528][T10995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.392543][T10995] RIP: 0033:0x7fd0a218f749 [ 367.392555][T10995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.392568][T10995] RSP: 002b:00007fd0a303c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 367.392582][T10995] RAX: ffffffffffffffda RBX: 00007fd0a23e5fa0 RCX: 00007fd0a218f749 [ 367.392591][T10995] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 367.392599][T10995] RBP: 00007fd0a2213f91 R08: 0000000000000000 R09: 0000000000000000 [ 367.392607][T10995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 367.392615][T10995] R13: 00007fd0a23e6038 R14: 00007fd0a23e5fa0 R15: 00007ffd8c6e0fb8 [ 367.392635][T10995] [ 369.485340][T11021] FAULT_INJECTION: forcing a failure. [ 369.485340][T11021] name failslab, interval 1, probability 0, space 0, times 0 [ 369.567143][T11021] CPU: 1 UID: 0 PID: 11021 Comm: syz.3.1221 Not tainted syzkaller #0 PREEMPT(full) [ 369.567166][T11021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 369.567174][T11021] Call Trace: [ 369.567180][T11021] [ 369.567186][T11021] dump_stack_lvl+0x16c/0x1f0 [ 369.567208][T11021] should_fail_ex+0x512/0x640 [ 369.567229][T11021] ? fs_reclaim_acquire+0xae/0x150 [ 369.567249][T11021] should_failslab+0xc2/0x120 [ 369.567267][T11021] __kmalloc_noprof+0xdd/0x880 [ 369.567288][T11021] ? tomoyo_encode2+0x100/0x3e0 [ 369.567306][T11021] ? tomoyo_encode2+0x100/0x3e0 [ 369.567320][T11021] tomoyo_encode2+0x100/0x3e0 [ 369.567338][T11021] tomoyo_encode+0x29/0x50 [ 369.567352][T11021] tomoyo_realpath_from_path+0x18f/0x6e0 [ 369.567374][T11021] tomoyo_check_open_permission+0x2ab/0x3c0 [ 369.567388][T11021] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 369.567421][T11021] ? do_raw_spin_lock+0x12c/0x2b0 [ 369.567446][T11021] tomoyo_file_open+0x6b/0x90 [ 369.567464][T11021] security_file_open+0x84/0x1e0 [ 369.567480][T11021] do_dentry_open+0x596/0x1530 [ 369.567501][T11021] vfs_open+0x82/0x3f0 [ 369.567522][T11021] path_openat+0x1de4/0x2cb0 [ 369.567543][T11021] ? __pfx_path_openat+0x10/0x10 [ 369.567572][T11021] ? __lock_acquire+0xb8a/0x1c90 [ 369.567593][T11021] do_filp_open+0x20b/0x470 [ 369.567609][T11021] ? __pfx_do_filp_open+0x10/0x10 [ 369.567639][T11021] ? alloc_fd+0x471/0x7d0 [ 369.567659][T11021] do_sys_openat2+0x11b/0x1d0 [ 369.567679][T11021] ? __pfx_do_sys_openat2+0x10/0x10 [ 369.567706][T11021] __x64_sys_openat+0x174/0x210 [ 369.567725][T11021] ? __pfx___x64_sys_openat+0x10/0x10 [ 369.567752][T11021] do_syscall_64+0xcd/0xfa0 [ 369.567770][T11021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.567784][T11021] RIP: 0033:0x7fcdc158f749 [ 369.567796][T11021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.567810][T11021] RSP: 002b:00007fcdc2441038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 369.567824][T11021] RAX: ffffffffffffffda RBX: 00007fcdc17e5fa0 RCX: 00007fcdc158f749 [ 369.567833][T11021] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 369.567842][T11021] RBP: 00007fcdc1613f91 R08: 0000000000000000 R09: 0000000000000000 [ 369.567850][T11021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 369.567858][T11021] R13: 00007fcdc17e6038 R14: 00007fcdc17e5fa0 R15: 00007ffffdfc78e8 [ 369.567879][T11021] [ 369.567896][T11021] ERROR: Out of memory at tomoyo_realpath_from_path. [ 370.398893][T11039] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1224'. [ 370.746336][T11052] random: crng reseeded on system resumption [ 370.980258][T11053] IPVS: length: 131 != 8 [ 371.133250][T11053] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input18 [ 372.458915][T11085] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1236'. [ 373.175845][T11094] zswap: compressor not available [ 373.248956][T11103] FAULT_INJECTION: forcing a failure. [ 373.248956][T11103] name failslab, interval 1, probability 0, space 0, times 0 [ 373.419902][T11103] CPU: 1 UID: 0 PID: 11103 Comm: syz.2.1241 Not tainted syzkaller #0 PREEMPT(full) [ 373.419925][T11103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 373.419934][T11103] Call Trace: [ 373.419940][T11103] [ 373.419946][T11103] dump_stack_lvl+0x16c/0x1f0 [ 373.419969][T11103] should_fail_ex+0x512/0x640 [ 373.419989][T11103] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 373.420007][T11103] should_failslab+0xc2/0x120 [ 373.420026][T11103] kmem_cache_alloc_noprof+0x75/0x6e0 [ 373.420039][T11103] ? __x64_sys_openat+0x174/0x210 [ 373.420060][T11103] ? do_syscall_64+0xcd/0xfa0 [ 373.420075][T11103] ? fuse_request_alloc+0x22/0x200 [ 373.420099][T11103] ? fuse_request_alloc+0x22/0x200 [ 373.420117][T11103] fuse_request_alloc+0x22/0x200 [ 373.420137][T11103] fuse_get_req+0x748/0xfd0 [ 373.420162][T11103] ? __pfx_fuse_get_req+0x10/0x10 [ 373.420185][T11103] fuse_simple_background+0x464/0x5f0 [ 373.420199][T11103] ? kasan_save_track+0x14/0x30 [ 373.420217][T11103] cuse_channel_open+0x561/0x7f0 [ 373.420234][T11103] ? __pfx_cuse_channel_open+0x10/0x10 [ 373.420252][T11103] misc_open+0x26d/0x450 [ 373.420276][T11103] ? __pfx_misc_open+0x10/0x10 [ 373.420295][T11103] chrdev_open+0x234/0x6a0 [ 373.420311][T11103] ? __pfx_apparmor_file_open+0x10/0x10 [ 373.420331][T11103] ? __pfx_chrdev_open+0x10/0x10 [ 373.420348][T11103] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 373.420367][T11103] do_dentry_open+0x982/0x1530 [ 373.420383][T11103] ? __pfx_chrdev_open+0x10/0x10 [ 373.420403][T11103] vfs_open+0x82/0x3f0 [ 373.420424][T11103] path_openat+0x1de4/0x2cb0 [ 373.420445][T11103] ? __pfx_path_openat+0x10/0x10 [ 373.420461][T11103] ? __lock_acquire+0xb8a/0x1c90 [ 373.420481][T11103] do_filp_open+0x20b/0x470 [ 373.420496][T11103] ? __pfx_do_filp_open+0x10/0x10 [ 373.420532][T11103] ? alloc_fd+0x471/0x7d0 [ 373.420552][T11103] do_sys_openat2+0x11b/0x1d0 [ 373.420573][T11103] ? __pfx_do_sys_openat2+0x10/0x10 [ 373.420600][T11103] __x64_sys_openat+0x174/0x210 [ 373.420620][T11103] ? __pfx___x64_sys_openat+0x10/0x10 [ 373.420648][T11103] do_syscall_64+0xcd/0xfa0 [ 373.420666][T11103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.420680][T11103] RIP: 0033:0x7f141818f749 [ 373.420692][T11103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.420706][T11103] RSP: 002b:00007f14163f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 373.420720][T11103] RAX: ffffffffffffffda RBX: 00007f14183e5fa0 RCX: 00007f141818f749 [ 373.420729][T11103] RDX: 0000000000000000 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 373.420737][T11103] RBP: 00007f1418213f91 R08: 0000000000000000 R09: 0000000000000000 [ 373.420745][T11103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 373.420753][T11103] R13: 00007f14183e6038 R14: 00007f14183e5fa0 R15: 00007ffca14139a8 [ 373.420773][T11103] [ 374.617373][T11118] can: request_module (can-proto-4) failed. [ 375.125211][T11100] zswap: compressor not available [ 375.936475][T11138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1250'. [ 376.795813][T11150] sp0: Synchronizing with TNC [ 377.050400][T11163] random: crng reseeded on system resumption [ 377.148751][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.155312][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 377.546061][T11173] FAULT_INJECTION: forcing a failure. [ 377.546061][T11173] name failslab, interval 1, probability 0, space 0, times 0 [ 377.614034][T11168] erspan0: entered allmulticast mode [ 377.665452][T11173] CPU: 1 UID: 0 PID: 11173 Comm: syz.2.1257 Not tainted syzkaller #0 PREEMPT(full) [ 377.665475][T11173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 377.665484][T11173] Call Trace: [ 377.665490][T11173] [ 377.665495][T11173] dump_stack_lvl+0x16c/0x1f0 [ 377.665518][T11173] should_fail_ex+0x512/0x640 [ 377.665539][T11173] ? __kmalloc_node_noprof+0xcd/0x8a0 [ 377.665558][T11173] should_failslab+0xc2/0x120 [ 377.665576][T11173] __kmalloc_node_noprof+0xe0/0x8a0 [ 377.665591][T11173] ? lockdep_init_map_type+0x5c/0x280 [ 377.665610][T11173] ? blk_mq_alloc_tag_set+0x46f/0x12e0 [ 377.665630][T11173] ? blk_mq_alloc_tag_set+0x46f/0x12e0 [ 377.665645][T11173] blk_mq_alloc_tag_set+0x46f/0x12e0 [ 377.665662][T11173] ? __pfx_idr_alloc+0x10/0x10 [ 377.665682][T11173] loop_add+0x3b2/0xb70 [ 377.665699][T11173] ? __pfx_loop_add+0x10/0x10 [ 377.665725][T11173] ? find_held_lock+0x2b/0x80 [ 377.665741][T11173] loop_control_ioctl+0x13e/0x630 [ 377.665757][T11173] ? __pfx_loop_control_ioctl+0x10/0x10 [ 377.665775][T11173] ? __pfx_loop_control_ioctl+0x10/0x10 [ 377.665810][T11173] __x64_sys_ioctl+0x18e/0x210 [ 377.665832][T11173] do_syscall_64+0xcd/0xfa0 [ 377.665857][T11173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.665872][T11173] RIP: 0033:0x7f141818f749 [ 377.665885][T11173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.665899][T11173] RSP: 002b:00007f14163f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 377.665913][T11173] RAX: ffffffffffffffda RBX: 00007f14183e5fa0 RCX: 00007f141818f749 [ 377.665922][T11173] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000003 [ 377.665931][T11173] RBP: 00007f1418213f91 R08: 0000000000000000 R09: 0000000000000000 [ 377.665939][T11173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 377.665947][T11173] R13: 00007f14183e6038 R14: 00007f14183e5fa0 R15: 00007ffca14139a8 [ 377.665966][T11173] [ 379.094371][T11200] block nbd7: not configured, cannot reconfigure [ 379.243920][T11200] bond0: Unable to set up delay as MII monitoring is disabled [ 379.908811][T11215] zswap: compressor not available [ 380.172291][T11232] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1271'. [ 381.494381][T11258] zswap: compressor 000 not available [ 382.357268][T11281] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 383.343027][T11298] netlink: 226 bytes leftover after parsing attributes in process `syz.3.1284'. [ 383.449537][T11298] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1284'. [ 383.553609][T11278] kexec: Could not allocate control_code_buffer [ 383.568677][T11298] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 384.643508][T11317] netlink: 'syz.3.1289': attribute type 7 has an invalid length. [ 384.730873][T11317] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1289'. [ 386.258538][T11348] netlink: 226 bytes leftover after parsing attributes in process `syz.0.1297'. [ 386.326596][T11348] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1297'. [ 386.335803][T11348] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 386.516636][T11355] sp0: Synchronizing with TNC [ 387.233574][T11368] bridge0: port 3(veth0_to_bridge) entered blocking state [ 387.280390][T11368] bridge0: port 3(veth0_to_bridge) entered disabled state [ 387.317661][T11368] veth0_to_bridge: entered allmulticast mode [ 387.361270][T11368] veth0_to_bridge: entered promiscuous mode [ 387.391216][T11368] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 387.441103][T11368] bridge0: port 3(veth0_to_bridge) entered blocking state [ 387.448511][T11368] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 388.445983][ T8211] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 388.780651][T11398] random: crng reseeded on system resumption [ 389.227274][T11403] zswap: compressor not available [ 389.565364][T11418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1315'. [ 389.828571][T11419] HfR: entered promiscuous mode [ 390.174138][T11431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1316'. [ 390.726672][T11437] FAULT_INJECTION: forcing a failure. [ 390.726672][T11437] name failslab, interval 1, probability 0, space 0, times 0 [ 390.776028][T11437] CPU: 1 UID: 0 PID: 11437 Comm: syz.0.1319 Not tainted syzkaller #0 PREEMPT(full) [ 390.776049][T11437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 390.776058][T11437] Call Trace: [ 390.776063][T11437] [ 390.776068][T11437] dump_stack_lvl+0x16c/0x1f0 [ 390.776090][T11437] should_fail_ex+0x512/0x640 [ 390.776111][T11437] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 390.776126][T11437] should_failslab+0xc2/0x120 [ 390.776145][T11437] kmem_cache_alloc_noprof+0x75/0x6e0 [ 390.776160][T11437] ? skb_clone+0x190/0x3f0 [ 390.776178][T11437] ? skb_clone+0x190/0x3f0 [ 390.776190][T11437] skb_clone+0x190/0x3f0 [ 390.776204][T11437] netlink_deliver_tap+0xabd/0xd30 [ 390.776224][T11437] netlink_unicast+0x64c/0x870 [ 390.776242][T11437] ? __pfx_netlink_unicast+0x10/0x10 [ 390.776264][T11437] netlink_sendmsg+0x8c8/0xdd0 [ 390.776282][T11437] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.776299][T11437] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 390.776323][T11437] ____sys_sendmsg+0xa98/0xc70 [ 390.776341][T11437] ? copy_msghdr_from_user+0x10a/0x160 [ 390.776355][T11437] ? __pfx_____sys_sendmsg+0x10/0x10 [ 390.776382][T11437] ? __pfx__kstrtoull+0x10/0x10 [ 390.776403][T11437] ___sys_sendmsg+0x134/0x1d0 [ 390.776418][T11437] ? __pfx____sys_sendmsg+0x10/0x10 [ 390.776441][T11437] ? find_held_lock+0x2b/0x80 [ 390.776463][T11437] ? proc_fail_nth_write+0x9f/0x220 [ 390.776482][T11437] ? find_held_lock+0x2b/0x80 [ 390.776498][T11437] __sys_sendmmsg+0x200/0x420 [ 390.776515][T11437] ? __pfx___sys_sendmmsg+0x10/0x10 [ 390.776534][T11437] ? do_sys_openat2+0x157/0x1d0 [ 390.776554][T11437] ? __pfx_do_sys_openat2+0x10/0x10 [ 390.776583][T11437] ? ksys_write+0x1ac/0x250 [ 390.776602][T11437] ? __pfx_ksys_write+0x10/0x10 [ 390.776621][T11437] __x64_sys_sendmmsg+0x9c/0x100 [ 390.776634][T11437] ? lockdep_hardirqs_on+0x7c/0x110 [ 390.776654][T11437] do_syscall_64+0xcd/0xfa0 [ 390.776680][T11437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.776694][T11437] RIP: 0033:0x7fd0a218f749 [ 390.776705][T11437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.776719][T11437] RSP: 002b:00007fd0a303c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 390.776733][T11437] RAX: ffffffffffffffda RBX: 00007fd0a23e5fa0 RCX: 00007fd0a218f749 [ 390.776742][T11437] RDX: 0000000000000005 RSI: 0000200000000080 RDI: 0000000000000003 [ 390.776751][T11437] RBP: 00007fd0a303c090 R08: 0000000000000000 R09: 0000000000000000 [ 390.776759][T11437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.776767][T11437] R13: 00007fd0a23e6038 R14: 00007fd0a23e5fa0 R15: 00007ffd8c6e0fb8 [ 390.776786][T11437] [ 391.683643][T11450] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 391.764361][T11451] bond0: invalid ARP target specified [ 393.086480][ T30] audit: type=1800 audit(1764004892.374:10): pid=11469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1328" name="lu_gp_id" dev="configfs" ino=34825 res=0 errno=0 [ 393.459936][T11447] kexec: Could not allocate control_code_buffer [ 393.798663][ T8211] Bluetooth: hci2: Malformed Event: 0x02 [ 393.846151][T11482] random: crng reseeded on system resumption [ 395.689375][T11522] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 395.820948][T11525] nfs: Bad value for 'source' [ 395.964195][T11525] FAULT_INJECTION: forcing a failure. [ 395.964195][T11525] name failslab, interval 1, probability 0, space 0, times 0 [ 396.173711][T11525] CPU: 1 UID: 0 PID: 11525 Comm: syz.0.1342 Not tainted syzkaller #0 PREEMPT(full) [ 396.173734][T11525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 396.173744][T11525] Call Trace: [ 396.173749][T11525] [ 396.173755][T11525] dump_stack_lvl+0x16c/0x1f0 [ 396.173779][T11525] should_fail_ex+0x512/0x640 [ 396.173800][T11525] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 396.173818][T11525] should_failslab+0xc2/0x120 [ 396.173837][T11525] kmem_cache_alloc_noprof+0x75/0x6e0 [ 396.173851][T11525] ? alloc_uid+0x13d/0x4c0 [ 396.173871][T11525] ? alloc_uid+0x13d/0x4c0 [ 396.173887][T11525] alloc_uid+0x13d/0x4c0 [ 396.173903][T11525] ? __pfx_alloc_uid+0x10/0x10 [ 396.173920][T11525] ? bpf_lsm_capable+0x9/0x10 [ 396.173938][T11525] ? security_capable+0x7e/0x260 [ 396.173958][T11525] __sys_setreuid+0x79d/0xaf0 [ 396.173973][T11525] ? rcu_is_watching+0x12/0xc0 [ 396.173989][T11525] do_syscall_64+0xcd/0xfa0 [ 396.174007][T11525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.174020][T11525] RIP: 0033:0x7fd0a218f749 [ 396.174033][T11525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.174046][T11525] RSP: 002b:00007fd0a303c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000071 [ 396.174060][T11525] RAX: ffffffffffffffda RBX: 00007fd0a23e5fa0 RCX: 00007fd0a218f749 [ 396.174069][T11525] RDX: 0000000000000000 RSI: 7fffffffffffffff RDI: 0000000080000000 [ 396.174078][T11525] RBP: 00007fd0a2213f91 R08: 0000000000000000 R09: 0000000000000000 [ 396.174085][T11525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 396.174093][T11525] R13: 00007fd0a23e6038 R14: 00007fd0a23e5fa0 R15: 00007ffd8c6e0fb8 [ 396.174112][T11525] [ 396.348598][ C1] vkms_vblank_simulate: vblank timer overrun [ 396.866316][T11520] kexec: Could not allocate control_code_buffer [ 397.110801][T11535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1344'. [ 397.593681][T11549] FAULT_INJECTION: forcing a failure. [ 397.593681][T11549] name failslab, interval 1, probability 0, space 0, times 0 [ 397.654166][T11549] CPU: 1 UID: 0 PID: 11549 Comm: syz.2.1349 Not tainted syzkaller #0 PREEMPT(full) [ 397.654190][T11549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 397.654199][T11549] Call Trace: [ 397.654204][T11549] [ 397.654210][T11549] dump_stack_lvl+0x16c/0x1f0 [ 397.654231][T11549] should_fail_ex+0x512/0x640 [ 397.654252][T11549] ? __kmalloc_cache_noprof+0x5f/0x780 [ 397.654268][T11549] should_failslab+0xc2/0x120 [ 397.654287][T11549] __kmalloc_cache_noprof+0x72/0x780 [ 397.654301][T11549] ? raw_open+0x8b/0x500 [ 397.654322][T11549] ? raw_open+0x8b/0x500 [ 397.654339][T11549] raw_open+0x8b/0x500 [ 397.654355][T11549] ? __pfx_raw_open+0x10/0x10 [ 397.654372][T11549] misc_open+0x26d/0x450 [ 397.654393][T11549] ? __pfx_misc_open+0x10/0x10 [ 397.654412][T11549] chrdev_open+0x234/0x6a0 [ 397.654428][T11549] ? __pfx_apparmor_file_open+0x10/0x10 [ 397.654448][T11549] ? __pfx_chrdev_open+0x10/0x10 [ 397.654465][T11549] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 397.654484][T11549] do_dentry_open+0x982/0x1530 [ 397.654500][T11549] ? __pfx_chrdev_open+0x10/0x10 [ 397.654520][T11549] vfs_open+0x82/0x3f0 [ 397.654541][T11549] path_openat+0x1de4/0x2cb0 [ 397.654562][T11549] ? __pfx_path_openat+0x10/0x10 [ 397.654578][T11549] ? __lock_acquire+0xb8a/0x1c90 [ 397.654599][T11549] do_filp_open+0x20b/0x470 [ 397.654614][T11549] ? __pfx_do_filp_open+0x10/0x10 [ 397.654642][T11549] ? alloc_fd+0x471/0x7d0 [ 397.654661][T11549] do_sys_openat2+0x11b/0x1d0 [ 397.654680][T11549] ? __pfx_do_sys_openat2+0x10/0x10 [ 397.654706][T11549] __x64_sys_openat+0x174/0x210 [ 397.654725][T11549] ? __pfx___x64_sys_openat+0x10/0x10 [ 397.654752][T11549] do_syscall_64+0xcd/0xfa0 [ 397.654770][T11549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.654785][T11549] RIP: 0033:0x7f141818f749 [ 397.654796][T11549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 397.654810][T11549] RSP: 002b:00007f14163f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 397.654824][T11549] RAX: ffffffffffffffda RBX: 00007f14183e5fa0 RCX: 00007f141818f749 [ 397.654833][T11549] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 397.654842][T11549] RBP: 00007f1418213f91 R08: 0000000000000000 R09: 0000000000000000 [ 397.654850][T11549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 397.654858][T11549] R13: 00007f14183e6038 R14: 00007f14183e5fa0 R15: 00007ffca14139a8 [ 397.654877][T11549] [ 397.903139][ C1] vkms_vblank_simulate: vblank timer overrun [ 400.156038][T11571] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 400.723617][T11578] random: crng reseeded on system resumption [ 401.436160][T11570] kexec: Could not allocate control_code_buffer [ 401.451068][T11590] random: crng reseeded on system resumption [ 401.701691][ T8211] Bluetooth: hci2: unexpected event 0x3e length: 728 > 260 [ 401.701718][ T8211] Bluetooth: hci2: unexpected subevent 0x0c length: 727 > 5 [ 401.914293][T11599] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1363'. [ 402.354690][T11607] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1364'. [ 403.105466][T11625] random: crng reseeded on system resumption [ 403.710721][T11641] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 403.964722][T11647] random: crng reseeded on system resumption [ 404.339391][T11651] FAULT_INJECTION: forcing a failure. [ 404.339391][T11651] name fail_futex, interval 1, probability 0, space 0, times 0 [ 404.398940][T11651] CPU: 1 UID: 0 PID: 11651 Comm: syz.2.1376 Not tainted syzkaller #0 PREEMPT(full) [ 404.398963][T11651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 404.398972][T11651] Call Trace: [ 404.398978][T11651] [ 404.398984][T11651] dump_stack_lvl+0x16c/0x1f0 [ 404.399010][T11651] should_fail_ex+0x512/0x640 [ 404.399034][T11651] get_futex_key+0x1d0/0x1560 [ 404.399056][T11651] ? __pfx_get_futex_key+0x10/0x10 [ 404.399080][T11651] futex_wake+0xea/0x530 [ 404.399100][T11651] ? rcu_is_watching+0x12/0xc0 [ 404.399116][T11651] ? __pfx_futex_wake+0x10/0x10 [ 404.399138][T11651] ? kmem_cache_free+0x2d4/0x6c0 [ 404.399152][T11651] ? putname+0x154/0x1a0 [ 404.399173][T11651] do_futex+0x1e3/0x350 [ 404.399191][T11651] ? __pfx_do_futex+0x10/0x10 [ 404.399213][T11651] __x64_sys_futex+0x1e0/0x4c0 [ 404.399232][T11651] ? __x64_sys_openat+0x174/0x210 [ 404.399252][T11651] ? __pfx___x64_sys_futex+0x10/0x10 [ 404.399278][T11651] do_syscall_64+0xcd/0xfa0 [ 404.399295][T11651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.399309][T11651] RIP: 0033:0x7f141818f749 [ 404.399321][T11651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 404.399333][T11651] RSP: 002b:00007f14163f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 404.399347][T11651] RAX: ffffffffffffffda RBX: 00007f14183e5fa8 RCX: 00007f141818f749 [ 404.399356][T11651] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f14183e5fac [ 404.399364][T11651] RBP: 00007f14183e5fa0 R08: 00007f1418f28000 R09: 0000000000000000 [ 404.399382][T11651] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 404.399391][T11651] R13: 00007f14183e6038 R14: 00007ffca14138c0 R15: 00007ffca14139a8 [ 404.399410][T11651] [ 404.579930][ C1] vkms_vblank_simulate: vblank timer overrun [ 405.119166][T11634] kexec: Could not allocate control_code_buffer [ 406.149270][T11658] netlink: 'syz.1.1377': attribute type 2 has an invalid length. [ 406.635062][T11673] kexec: Could not allocate control_code_buffer [ 406.661726][T11692] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 406.897589][T11695] FAULT_INJECTION: forcing a failure. [ 406.897589][T11695] name failslab, interval 1, probability 0, space 0, times 0 [ 406.995859][T11695] CPU: 1 UID: 0 PID: 11695 Comm: syz.0.1387 Not tainted syzkaller #0 PREEMPT(full) [ 406.995882][T11695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 406.995891][T11695] Call Trace: [ 406.995896][T11695] [ 406.995901][T11695] dump_stack_lvl+0x16c/0x1f0 [ 406.995923][T11695] should_fail_ex+0x512/0x640 [ 406.995943][T11695] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 406.995960][T11695] should_failslab+0xc2/0x120 [ 406.995979][T11695] kmem_cache_alloc_node_noprof+0x78/0x770 [ 406.995993][T11695] ? __alloc_skb+0x2b2/0x380 [ 406.996018][T11695] ? __alloc_skb+0x2b2/0x380 [ 406.996038][T11695] __alloc_skb+0x2b2/0x380 [ 406.996059][T11695] ? __pfx___alloc_skb+0x10/0x10 [ 406.996079][T11695] ? is_bpf_text_address+0x94/0x1a0 [ 406.996105][T11695] alloc_skb_with_frags+0xe0/0x860 [ 406.996120][T11695] ? __might_fault+0xe3/0x190 [ 406.996139][T11695] ? __might_fault+0x13b/0x190 [ 406.996155][T11695] sock_alloc_send_pskb+0x7f9/0x980 [ 406.996177][T11695] ? _copy_from_iter+0x15d/0x1720 [ 406.996202][T11695] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 406.996222][T11695] ? aa_file_perm+0x28f/0x12e0 [ 406.996242][T11695] ? aa_file_perm+0x29e/0x12e0 [ 406.996257][T11695] ? iov_iter_advance+0x7d/0x6c0 [ 406.996280][T11695] tap_get_user+0x36e/0x1a30 [ 406.996306][T11695] ? __pfx_tap_get_user+0x10/0x10 [ 406.996328][T11695] ? common_file_perm+0x1a9/0x340 [ 406.996342][T11695] ? bpf_lsm_file_permission+0x9/0x10 [ 406.996358][T11695] ? security_file_permission+0x71/0x210 [ 406.996374][T11695] ? rw_verify_area+0xcf/0x6c0 [ 406.996389][T11695] vfs_write+0x7d3/0x11d0 [ 406.996404][T11695] ? __pfx_tap_write_iter+0x10/0x10 [ 406.996422][T11695] ? __pfx_vfs_write+0x10/0x10 [ 406.996435][T11695] ? find_held_lock+0x2b/0x80 [ 406.996462][T11695] ksys_write+0x12a/0x250 [ 406.996477][T11695] ? __pfx_ksys_write+0x10/0x10 [ 406.996497][T11695] do_syscall_64+0xcd/0xfa0 [ 406.996516][T11695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.996530][T11695] RIP: 0033:0x7fd0a218f749 [ 406.996541][T11695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 406.996562][T11695] RSP: 002b:00007fd0a303c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 406.996576][T11695] RAX: ffffffffffffffda RBX: 00007fd0a23e5fa0 RCX: 00007fd0a218f749 [ 406.996585][T11695] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 406.996593][T11695] RBP: 00007fd0a303c090 R08: 0000000000000000 R09: 0000000000000000 [ 406.996601][T11695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.996610][T11695] R13: 00007fd0a23e6038 R14: 00007fd0a23e5fa0 R15: 00007ffd8c6e0fb8 [ 406.996628][T11695] [ 407.263311][ C1] vkms_vblank_simulate: vblank timer overrun [ 407.694356][T11701] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1389'. [ 408.160541][T11715] random: crng reseeded on system resumption [ 408.335419][T11722] FAULT_INJECTION: forcing a failure. [ 408.335419][T11722] name failslab, interval 1, probability 0, space 0, times 0 [ 408.431249][ T30] audit: type=1804 audit(1764006955.789:11): pid=11726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1396" name="/newroot/sys/kernel/tracing/current_tracer" dev="tracefs" ino=1061 res=1 errno=0 [ 408.462369][T11722] CPU: 1 UID: 0 PID: 11722 Comm: syz.3.1396 Not tainted syzkaller #0 PREEMPT(full) [ 408.462392][T11722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 408.462401][T11722] Call Trace: [ 408.462406][T11722] [ 408.462413][T11722] dump_stack_lvl+0x16c/0x1f0 [ 408.462435][T11722] should_fail_ex+0x512/0x640 [ 408.462456][T11722] ? __kmalloc_noprof+0xca/0x880 [ 408.462479][T11722] should_failslab+0xc2/0x120 [ 408.462499][T11722] __kmalloc_noprof+0xdd/0x880 [ 408.462519][T11722] ? lsm_blob_alloc+0x68/0x90 [ 408.462539][T11722] ? lsm_blob_alloc+0x68/0x90 [ 408.462554][T11722] lsm_blob_alloc+0x68/0x90 [ 408.462571][T11722] security_sk_alloc+0x30/0x270 [ 408.462591][T11722] sk_prot_alloc+0xfb/0x2a0 [ 408.462610][T11722] sk_alloc+0x36/0xc20 [ 408.462630][T11722] inet6_create+0x381/0x12b0 [ 408.462649][T11722] ? inet6_create+0x7f/0x12b0 [ 408.462666][T11722] __sock_create+0x338/0x8d0 [ 408.462688][T11722] __sys_socket+0x14d/0x260 [ 408.462705][T11722] ? __pfx___sys_socket+0x10/0x10 [ 408.462723][T11722] ? xfd_validate_state+0x61/0x180 [ 408.462741][T11722] ? __pfx_do_writev+0x10/0x10 [ 408.462759][T11722] __x64_sys_socket+0x72/0xb0 [ 408.462776][T11722] ? lockdep_hardirqs_on+0x7c/0x110 [ 408.462792][T11722] do_syscall_64+0xcd/0xfa0 [ 408.462809][T11722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.462823][T11722] RIP: 0033:0x7fcdc158f749 [ 408.462835][T11722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.462848][T11722] RSP: 002b:00007fcdc2441038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 408.462862][T11722] RAX: ffffffffffffffda RBX: 00007fcdc17e5fa0 RCX: 00007fcdc158f749 [ 408.462871][T11722] RDX: 000000000000003b RSI: 0000000000000003 RDI: 000000000000000a [ 408.462880][T11722] RBP: 00007fcdc1613f91 R08: 0000000000000000 R09: 0000000000000000 [ 408.462888][T11722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 408.462896][T11722] R13: 00007fcdc17e6038 R14: 00007fcdc17e5fa0 R15: 00007ffffdfc78e8 [ 408.462915][T11722] [ 408.642241][T11732] syz.1.1400 (11732): drop_caches: 0 [ 408.955449][T11741] vcan0: tx drop: invalid da for name 0x020000000000003f [ 409.557372][T11749] syz.2.1404 (11749): drop_caches: 0 [ 409.671204][T11729] tty tty1: ldisc open failed (-12), clearing slot 0 [ 409.818786][T11757] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1405'. [ 409.909018][T11761] random: crng reseeded on system resumption [ 410.453558][T11773] FAULT_INJECTION: forcing a failure. [ 410.453558][T11773] name failslab, interval 1, probability 0, space 0, times 0 [ 410.521181][T11773] CPU: 1 UID: 0 PID: 11773 Comm: syz.0.1411 Not tainted syzkaller #0 PREEMPT(full) [ 410.521205][T11773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 410.521214][T11773] Call Trace: [ 410.521220][T11773] [ 410.521227][T11773] dump_stack_lvl+0x16c/0x1f0 [ 410.521249][T11773] should_fail_ex+0x512/0x640 [ 410.521270][T11773] ? __kmalloc_cache_noprof+0x5f/0x780 [ 410.521287][T11773] should_failslab+0xc2/0x120 [ 410.521305][T11773] __kmalloc_cache_noprof+0x72/0x780 [ 410.521322][T11773] ? raw_open+0x8b/0x500 [ 410.521344][T11773] ? raw_open+0x8b/0x500 [ 410.521362][T11773] raw_open+0x8b/0x500 [ 410.521385][T11773] ? __pfx_raw_open+0x10/0x10 [ 410.521403][T11773] misc_open+0x26d/0x450 [ 410.521424][T11773] ? __pfx_misc_open+0x10/0x10 [ 410.521445][T11773] chrdev_open+0x234/0x6a0 [ 410.521461][T11773] ? __pfx_apparmor_file_open+0x10/0x10 [ 410.521481][T11773] ? __pfx_chrdev_open+0x10/0x10 [ 410.521498][T11773] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 410.521517][T11773] do_dentry_open+0x982/0x1530 [ 410.521533][T11773] ? __pfx_chrdev_open+0x10/0x10 [ 410.521553][T11773] vfs_open+0x82/0x3f0 [ 410.521574][T11773] path_openat+0x1de4/0x2cb0 [ 410.521595][T11773] ? __pfx_path_openat+0x10/0x10 [ 410.521611][T11773] ? __lock_acquire+0xb8a/0x1c90 [ 410.521632][T11773] do_filp_open+0x20b/0x470 [ 410.521647][T11773] ? __pfx_do_filp_open+0x10/0x10 [ 410.521676][T11773] ? alloc_fd+0x471/0x7d0 [ 410.521695][T11773] do_sys_openat2+0x11b/0x1d0 [ 410.521714][T11773] ? __pfx_do_sys_openat2+0x10/0x10 [ 410.521741][T11773] __x64_sys_openat+0x174/0x210 [ 410.521760][T11773] ? __pfx___x64_sys_openat+0x10/0x10 [ 410.521787][T11773] do_syscall_64+0xcd/0xfa0 [ 410.521805][T11773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.521828][T11773] RIP: 0033:0x7fd0a218f749 [ 410.521841][T11773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 410.521856][T11773] RSP: 002b:00007fd0a303c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 410.521869][T11773] RAX: ffffffffffffffda RBX: 00007fd0a23e5fa0 RCX: 00007fd0a218f749 [ 410.521879][T11773] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 410.521888][T11773] RBP: 00007fd0a2213f91 R08: 0000000000000000 R09: 0000000000000000 [ 410.521897][T11773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 410.521905][T11773] R13: 00007fd0a23e6038 R14: 00007fd0a23e5fa0 R15: 00007ffd8c6e0fb8 [ 410.521925][T11773] [ 410.875585][T11779] FAULT_INJECTION: forcing a failure. [ 410.875585][T11779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 410.888891][T11779] CPU: 1 UID: 0 PID: 11779 Comm: syz.1.1413 Not tainted syzkaller #0 PREEMPT(full) [ 410.888911][T11779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 410.888919][T11779] Call Trace: [ 410.888926][T11779] [ 410.888932][T11779] dump_stack_lvl+0x16c/0x1f0 [ 410.888954][T11779] should_fail_ex+0x512/0x640 [ 410.888978][T11779] _copy_to_user+0x32/0xd0 [ 410.888993][T11779] simple_read_from_buffer+0xcb/0x170 [ 410.889017][T11779] proc_fail_nth_read+0x197/0x240 [ 410.889034][T11779] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 410.889050][T11779] ? rw_verify_area+0xcf/0x6c0 [ 410.889063][T11779] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 410.889078][T11779] vfs_read+0x1e4/0xcf0 [ 410.889096][T11779] ? __pfx___mutex_lock+0x10/0x10 [ 410.889115][T11779] ? __pfx_vfs_read+0x10/0x10 [ 410.889134][T11779] ? __fget_files+0x20e/0x3c0 [ 410.889154][T11779] ksys_read+0x12a/0x250 [ 410.889169][T11779] ? __pfx_ksys_read+0x10/0x10 [ 410.889189][T11779] do_syscall_64+0xcd/0xfa0 [ 410.889207][T11779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.889222][T11779] RIP: 0033:0x7f592218e15c [ 410.889234][T11779] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 410.889247][T11779] RSP: 002b:00007f592306e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 410.889261][T11779] RAX: ffffffffffffffda RBX: 00007f59223e5fa0 RCX: 00007f592218e15c [ 410.889270][T11779] RDX: 000000000000000f RSI: 00007f592306e0a0 RDI: 0000000000000004 [ 410.889278][T11779] RBP: 00007f592306e090 R08: 0000000000000000 R09: 0000000000000000 [ 410.889287][T11779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 410.889294][T11779] R13: 00007f59223e6038 R14: 00007f59223e5fa0 R15: 00007ffdabee0828 [ 410.889314][T11779] [ 411.301992][T11775] FAULT_INJECTION: forcing a failure. [ 411.301992][T11775] name failslab, interval 1, probability 0, space 0, times 0 [ 411.317278][T11775] CPU: 1 UID: 0 PID: 11775 Comm: syz.3.1412 Not tainted syzkaller #0 PREEMPT(full) [ 411.317300][T11775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 411.317310][T11775] Call Trace: [ 411.317315][T11775] [ 411.317321][T11775] dump_stack_lvl+0x16c/0x1f0 [ 411.317344][T11775] should_fail_ex+0x512/0x640 [ 411.317365][T11775] ? __kmalloc_cache_noprof+0x5f/0x780 [ 411.317381][T11775] should_failslab+0xc2/0x120 [ 411.317400][T11775] __kmalloc_cache_noprof+0x72/0x780 [ 411.317414][T11775] ? raw_open+0x8b/0x500 [ 411.317434][T11775] ? raw_open+0x8b/0x500 [ 411.317451][T11775] raw_open+0x8b/0x500 [ 411.317467][T11775] ? __pfx_raw_open+0x10/0x10 [ 411.317484][T11775] misc_open+0x26d/0x450 [ 411.317505][T11775] ? __pfx_misc_open+0x10/0x10 [ 411.317523][T11775] chrdev_open+0x234/0x6a0 [ 411.317539][T11775] ? __pfx_apparmor_file_open+0x10/0x10 [ 411.317559][T11775] ? __pfx_chrdev_open+0x10/0x10 [ 411.317576][T11775] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 411.317594][T11775] do_dentry_open+0x982/0x1530 [ 411.317611][T11775] ? __pfx_chrdev_open+0x10/0x10 [ 411.317630][T11775] vfs_open+0x82/0x3f0 [ 411.317652][T11775] path_openat+0x1de4/0x2cb0 [ 411.317673][T11775] ? __pfx_path_openat+0x10/0x10 [ 411.317689][T11775] ? __lock_acquire+0xb8a/0x1c90 [ 411.317709][T11775] do_filp_open+0x20b/0x470 [ 411.317724][T11775] ? __pfx_do_filp_open+0x10/0x10 [ 411.317752][T11775] ? alloc_fd+0x471/0x7d0 [ 411.317771][T11775] do_sys_openat2+0x11b/0x1d0 [ 411.317789][T11775] ? __pfx_do_sys_openat2+0x10/0x10 [ 411.317825][T11775] __x64_sys_openat+0x174/0x210 [ 411.317845][T11775] ? __pfx___x64_sys_openat+0x10/0x10 [ 411.317874][T11775] do_syscall_64+0xcd/0xfa0 [ 411.317893][T11775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.317907][T11775] RIP: 0033:0x7fcdc158f749 [ 411.317919][T11775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 411.317934][T11775] RSP: 002b:00007fcdc2441038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 411.317947][T11775] RAX: ffffffffffffffda RBX: 00007fcdc17e5fa0 RCX: 00007fcdc158f749 [ 411.317957][T11775] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 411.317965][T11775] RBP: 00007fcdc1613f91 R08: 0000000000000000 R09: 0000000000000000 [ 411.317973][T11775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 411.317982][T11775] R13: 00007fcdc17e6038 R14: 00007fcdc17e5fa0 R15: 00007ffffdfc78e8 [ 411.318002][T11775] [ 411.721583][T11794] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 411.848474][T11796] netlink: 226 bytes leftover after parsing attributes in process `syz.1.1417'. [ 411.868504][T11796] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1417'. [ 411.884776][T11796] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 412.155388][ T30] audit: type=1804 audit(1764006959.529:12): pid=11804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1422" name="/newroot/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=1110 res=1 errno=0 [ 412.482763][T11809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1424'. [ 413.645382][T11840] random: crng reseeded on system resumption [ 414.468522][T11830] kexec: Could not allocate control_code_buffer [ 415.665170][ T8211] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 415.773520][T11885] random: crng reseeded on system resumption [ 416.828439][T11899] zswap: compressor û not available [ 417.325074][T11911] sd 0:0:1:0: PR command failed: 1026 [ 417.339506][ T6359] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 417.365875][T11911] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 417.406273][T11911] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 417.525179][T11908] zswap: compressor not available [ 417.774081][T11894] kexec: Could not allocate control_code_buffer [ 418.038170][T11928] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 418.830086][T11941] binder: 11940:11941 ioctl c00c620f 200000000480 returned -22 [ 418.895196][T11941] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1461'. [ 419.117959][T11944] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 420.343058][ T6367] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.542380][ T6367] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.667584][T11968] random: crng reseeded on system resumption [ 420.733877][ T6367] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.929601][ T6367] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.393216][ T6367] bridge_slave_1: left allmulticast mode [ 421.411757][ T6367] bridge_slave_1: left promiscuous mode [ 421.460736][ T6367] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.503170][ T8211] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 421.512343][ T8211] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 421.521107][ T8211] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 421.529799][ T8211] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 421.538365][ T8211] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 421.656104][ T6367] bridge_slave_0: left allmulticast mode [ 421.683960][ T6367] bridge_slave_0: left promiscuous mode [ 421.689686][ T6367] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.448425][ T6367] erspan0 (unregistering): left allmulticast mode [ 423.071894][ T6367] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 423.097168][ T6367] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 423.128763][ T6367] bond0 (unregistering): Released all slaves [ 423.271990][ T6367] HfR: left promiscuous mode [ 423.514627][ C1] sd 0:0:1:0: [sda] tag#1691 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 423.525097][ C1] sd 0:0:1:0: [sda] tag#1691 CDB: Write(6) 0a 00 00 00 0b 00 00 00 00 00 00 00 [ 423.623504][ T8211] Bluetooth: hci1: command tx timeout [ 424.463052][T11986] chnl_net:caif_netlink_parms(): no params data found [ 424.773921][ T6367] hsr_slave_0: left promiscuous mode [ 424.822689][ T6367] hsr_slave_1: left promiscuous mode [ 424.852146][ T6367] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 424.900146][ T6367] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.942442][ T6367] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.970331][ T6367] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 425.047393][T12058] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1485'. [ 425.072289][ T6367] veth1_macvtap: left promiscuous mode [ 425.086296][ T6367] veth0_macvtap: left promiscuous mode [ 425.099615][ T6367] veth1_vlan: left promiscuous mode [ 425.111276][ T6367] veth0_vlan: left promiscuous mode [ 425.696923][ T8211] Bluetooth: hci1: command tx timeout [ 426.086023][ T6367] team0 (unregistering): Port device team_slave_1 removed [ 426.202351][ T6367] team0 (unregistering): Port device team_slave_0 removed [ 426.612558][T12061] kexec: Could not allocate control_code_buffer [ 427.382819][T11986] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.410712][T11986] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.443645][T11986] bridge_slave_0: entered allmulticast mode [ 427.500393][T11986] bridge_slave_0: entered promiscuous mode [ 427.536925][T11986] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.592776][T11986] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.630415][T11986] bridge_slave_1: entered allmulticast mode [ 427.666675][T11986] bridge_slave_1: entered promiscuous mode [ 427.710951][T12079] netlink: 226 bytes leftover after parsing attributes in process `syz.2.1490'. [ 427.766082][ T8211] Bluetooth: hci1: command tx timeout [ 428.127468][T12079] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1490'. [ 428.190096][T12079] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 428.658708][T11986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.744295][T11986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.153632][T11986] team0: Port device team_slave_0 added [ 429.199295][T11986] team0: Port device team_slave_1 added [ 429.371125][T12112] netlink: 226 bytes leftover after parsing attributes in process `syz.1.1496'. [ 429.528450][T12114] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1497'. [ 429.552117][T12112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1496'. [ 429.617951][T12112] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 429.698849][T11986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.720842][T11986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.823725][T11986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.834488][ T8211] Bluetooth: hci1: command tx timeout [ 429.941124][T11986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.948097][T11986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.983236][T12118] random: crng reseeded on system resumption [ 430.137991][T11986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.452736][T11986] hsr_slave_0: entered promiscuous mode [ 430.488322][T11986] hsr_slave_1: entered promiscuous mode [ 430.566213][T12141] netlink: 226 bytes leftover after parsing attributes in process `syz.1.1501'. [ 431.116446][T12148] zswap: compressor not available [ 431.453463][T12141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1501'. [ 431.481557][T12141] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 431.613139][T12163] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1505'. [ 432.627209][T12186] netlink: 226 bytes leftover after parsing attributes in process `syz.0.1508'. [ 432.679418][T12185] bond0: invalid ARP target specified [ 433.030957][T12186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1508'. [ 433.312971][T12202] random: crng reseeded on system resumption [ 433.323095][T12186] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 434.302546][T11986] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 434.468426][T11986] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 434.525736][T11986] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 434.602746][T11986] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 435.006253][ T8211] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 435.341121][T11986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.521771][T11986] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.583824][ T6367] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.591023][ T6367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.625197][ T6367] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.632465][ T6367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.477608][T11986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.663004][T11986] veth0_vlan: entered promiscuous mode [ 436.724194][T11986] veth1_vlan: entered promiscuous mode [ 437.005322][T11986] veth0_macvtap: entered promiscuous mode [ 437.013576][T11986] veth1_macvtap: entered promiscuous mode [ 437.289739][T11986] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.349010][T11986] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.426347][ T6362] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.454955][ T6362] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.620594][ T6362] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.663723][ T6362] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.233984][ T6461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.273481][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 438.287043][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 438.300485][ T6461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.441157][ T6367] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.471305][ T6367] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.020911][T12332] vcan0: tx drop: invalid da for name 0x000000000000003f [ 439.154298][T12336] random: crng reseeded on system resumption [ 439.778187][T12316] kexec: Could not allocate control_code_buffer [ 440.240894][T12364] netlink: 226 bytes leftover after parsing attributes in process `syz.3.1532'. [ 440.328460][T12364] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1532'. [ 440.389303][T12364] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 440.999264][T12378] zswap: compressor not available [ 441.333159][T12390] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1536'. [ 441.957462][T12410] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input20 [ 442.045833][T12417] Process accounting resumed [ 442.297137][T12424] vcan0: tx drop: invalid da for name 0x000000000000003f [ 442.375186][T12428] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 442.508124][T12431] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 443.001024][T12438] random: crng reseeded on system resumption [ 443.368440][T12423] kexec: Could not allocate control_code_buffer [ 443.983913][T12454] zswap: compressor not available [ 444.296699][T12461] FAULT_INJECTION: forcing a failure. [ 444.296699][T12461] name fail_futex, interval 1, probability 0, space 0, times 0 [ 444.350485][T12461] CPU: 1 UID: 0 PID: 12461 Comm: syz.0.1550 Not tainted syzkaller #0 PREEMPT(full) [ 444.350509][T12461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 444.350518][T12461] Call Trace: [ 444.350523][T12461] [ 444.350529][T12461] dump_stack_lvl+0x16c/0x1f0 [ 444.350553][T12461] should_fail_ex+0x512/0x640 [ 444.350576][T12461] get_futex_key+0x1d0/0x1560 [ 444.350597][T12461] ? __pfx_get_futex_key+0x10/0x10 [ 444.350621][T12461] futex_wake+0xea/0x530 [ 444.350641][T12461] ? rcu_is_watching+0x12/0xc0 [ 444.350657][T12461] ? __pfx_futex_wake+0x10/0x10 [ 444.350679][T12461] ? kmem_cache_free+0x2d4/0x6c0 [ 444.350693][T12461] ? putname+0x154/0x1a0 [ 444.350714][T12461] do_futex+0x1e3/0x350 [ 444.350732][T12461] ? __pfx_do_futex+0x10/0x10 [ 444.350755][T12461] __x64_sys_futex+0x1e0/0x4c0 [ 444.350774][T12461] ? __x64_sys_openat+0x174/0x210 [ 444.350793][T12461] ? __pfx___x64_sys_futex+0x10/0x10 [ 444.350827][T12461] do_syscall_64+0xcd/0xfa0 [ 444.350847][T12461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.350862][T12461] RIP: 0033:0x7fd0a218f749 [ 444.350875][T12461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 444.350895][T12461] RSP: 002b:00007fd0a303c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 444.350909][T12461] RAX: ffffffffffffffda RBX: 00007fd0a23e5fa8 RCX: 00007fd0a218f749 [ 444.350918][T12461] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd0a23e5fac [ 444.350926][T12461] RBP: 00007fd0a23e5fa0 R08: 00007fd0a303d000 R09: 0000000000000000 [ 444.350935][T12461] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 444.350944][T12461] R13: 00007fd0a23e6038 R14: 00007ffd8c6e0ed0 R15: 00007ffd8c6e0fb8 [ 444.350963][T12461] [ 445.000856][T12465] FAULT_INJECTION: forcing a failure. [ 445.000856][T12465] name fail_futex, interval 1, probability 0, space 0, times 0 [ 445.045273][T12465] CPU: 1 UID: 0 PID: 12465 Comm: syz.0.1559 Not tainted syzkaller #0 PREEMPT(full) [ 445.045296][T12465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 445.045305][T12465] Call Trace: [ 445.045310][T12465] [ 445.045316][T12465] dump_stack_lvl+0x16c/0x1f0 [ 445.045338][T12465] should_fail_ex+0x512/0x640 [ 445.045362][T12465] get_futex_key+0x1d0/0x1560 [ 445.045382][T12465] ? get_pid_task+0x106/0x250 [ 445.045400][T12465] ? __pfx_get_futex_key+0x10/0x10 [ 445.045415][T12465] ? rcu_is_watching+0x12/0xc0 [ 445.045430][T12465] ? kfree+0x252/0x6d0 [ 445.045447][T12465] futex_wake+0xea/0x530 [ 445.045469][T12465] ? __pfx_futex_wake+0x10/0x10 [ 445.045489][T12465] ? __pfx_vfs_writev+0x10/0x10 [ 445.045502][T12465] ? __mutex_lock+0x1c5/0x1060 [ 445.045520][T12465] ? do_writev+0x218/0x340 [ 445.045537][T12465] do_futex+0x1e3/0x350 [ 445.045556][T12465] ? __pfx_do_futex+0x10/0x10 [ 445.045572][T12465] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 445.045595][T12465] __x64_sys_futex+0x1e0/0x4c0 [ 445.045615][T12465] ? __pfx___x64_sys_futex+0x10/0x10 [ 445.045634][T12465] ? __pfx_do_writev+0x10/0x10 [ 445.045653][T12465] do_syscall_64+0xcd/0xfa0 [ 445.045680][T12465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.045695][T12465] RIP: 0033:0x7fd0a218f749 [ 445.045708][T12465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 445.045722][T12465] RSP: 002b:00007fd0a303c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 445.045736][T12465] RAX: ffffffffffffffda RBX: 00007fd0a23e5fa8 RCX: 00007fd0a218f749 [ 445.045745][T12465] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd0a23e5fac [ 445.045753][T12465] RBP: 00007fd0a23e5fa0 R08: 00007fd0a303d000 R09: 0000000000000000 [ 445.045762][T12465] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 445.045770][T12465] R13: 00007fd0a23e6038 R14: 00007ffd8c6e0ed0 R15: 00007ffd8c6e0fb8 [ 445.045789][T12465] [ 446.740001][T12443] kexec: Could not allocate control_code_buffer [ 446.979155][T12497] FAULT_INJECTION: forcing a failure. [ 446.979155][T12497] name fail_futex, interval 1, probability 0, space 0, times 0 [ 447.087764][T12497] CPU: 1 UID: 0 PID: 12497 Comm: syz.1.1561 Not tainted syzkaller #0 PREEMPT(full) [ 447.087787][T12497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 447.087796][T12497] Call Trace: [ 447.087801][T12497] [ 447.087807][T12497] dump_stack_lvl+0x16c/0x1f0 [ 447.087828][T12497] should_fail_ex+0x512/0x640 [ 447.087852][T12497] get_futex_key+0x1d0/0x1560 [ 447.087870][T12497] ? get_pid_task+0x106/0x250 [ 447.087889][T12497] ? __pfx_get_futex_key+0x10/0x10 [ 447.087905][T12497] ? rcu_is_watching+0x12/0xc0 [ 447.087919][T12497] ? kfree+0x252/0x6d0 [ 447.087937][T12497] futex_wake+0xea/0x530 [ 447.087958][T12497] ? __pfx_futex_wake+0x10/0x10 [ 447.087978][T12497] ? __pfx_vfs_writev+0x10/0x10 [ 447.087991][T12497] ? __mutex_lock+0x1c5/0x1060 [ 447.088010][T12497] ? do_writev+0x218/0x340 [ 447.088026][T12497] do_futex+0x1e3/0x350 [ 447.088044][T12497] ? __pfx_do_futex+0x10/0x10 [ 447.088060][T12497] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 447.088082][T12497] __x64_sys_futex+0x1e0/0x4c0 [ 447.088103][T12497] ? __pfx___x64_sys_futex+0x10/0x10 [ 447.088121][T12497] ? __pfx_do_writev+0x10/0x10 [ 447.088140][T12497] do_syscall_64+0xcd/0xfa0 [ 447.088157][T12497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.088171][T12497] RIP: 0033:0x7f592218f749 [ 447.088183][T12497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 447.088196][T12497] RSP: 002b:00007f592306e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 447.088209][T12497] RAX: ffffffffffffffda RBX: 00007f59223e5fa8 RCX: 00007f592218f749 [ 447.088218][T12497] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f59223e5fac [ 447.088226][T12497] RBP: 00007f59223e5fa0 R08: 00007f592306f000 R09: 0000000000000000 [ 447.088235][T12497] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 447.088243][T12497] R13: 00007f59223e6038 R14: 00007ffdabee0740 R15: 00007ffdabee0828 [ 447.088261][T12497] [ 447.763592][T12499] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1562'. [ 448.033829][T12504] netlink: 226 bytes leftover after parsing attributes in process `syz.2.1564'. [ 448.177549][T12504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1564'. [ 448.396074][T12504] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 448.932147][ T8211] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 449.613858][T12528] FAULT_INJECTION: forcing a failure. [ 449.613858][T12528] name fail_futex, interval 1, probability 0, space 0, times 0 [ 449.736099][T12528] CPU: 1 UID: 0 PID: 12528 Comm: syz.3.1571 Not tainted syzkaller #0 PREEMPT(full) [ 449.736123][T12528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 449.736131][T12528] Call Trace: [ 449.736137][T12528] [ 449.736143][T12528] dump_stack_lvl+0x16c/0x1f0 [ 449.736166][T12528] should_fail_ex+0x512/0x640 [ 449.736191][T12528] get_futex_key+0x1d0/0x1560 [ 449.736210][T12528] ? get_pid_task+0x106/0x250 [ 449.736229][T12528] ? __pfx_get_futex_key+0x10/0x10 [ 449.736244][T12528] ? rcu_is_watching+0x12/0xc0 [ 449.736259][T12528] ? kfree+0x252/0x6d0 [ 449.736276][T12528] futex_wake+0xea/0x530 [ 449.736298][T12528] ? __pfx_futex_wake+0x10/0x10 [ 449.736327][T12528] ? __pfx_vfs_writev+0x10/0x10 [ 449.736341][T12528] ? __mutex_lock+0x1c5/0x1060 [ 449.736361][T12528] ? do_writev+0x218/0x340 [ 449.736379][T12528] do_futex+0x1e3/0x350 [ 449.736400][T12528] ? __pfx_do_futex+0x10/0x10 [ 449.736417][T12528] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 449.736440][T12528] __x64_sys_futex+0x1e0/0x4c0 [ 449.736460][T12528] ? __pfx___x64_sys_futex+0x10/0x10 [ 449.736479][T12528] ? __pfx_do_writev+0x10/0x10 [ 449.736497][T12528] do_syscall_64+0xcd/0xfa0 [ 449.736514][T12528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.736529][T12528] RIP: 0033:0x7fd41378f749 [ 449.736542][T12528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 449.736555][T12528] RSP: 002b:00007fd41469e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 449.736569][T12528] RAX: ffffffffffffffda RBX: 00007fd4139e5fa8 RCX: 00007fd41378f749 [ 449.736579][T12528] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd4139e5fac [ 449.736587][T12528] RBP: 00007fd4139e5fa0 R08: 00007fd41469f000 R09: 0000000000000000 [ 449.736596][T12528] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 449.736605][T12528] R13: 00007fd4139e6038 R14: 00007ffce18525e0 R15: 00007ffce18526c8 [ 449.736625][T12528] [ 450.936513][T12537] FAULT_INJECTION: forcing a failure. [ 450.936513][T12537] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 451.048991][T12537] CPU: 1 UID: 0 PID: 12537 Comm: syz.1.1574 Not tainted syzkaller #0 PREEMPT(full) [ 451.049014][T12537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 451.049023][T12537] Call Trace: [ 451.049027][T12537] [ 451.049034][T12537] dump_stack_lvl+0x16c/0x1f0 [ 451.049057][T12537] should_fail_ex+0x512/0x640 [ 451.049081][T12537] should_fail_alloc_page+0xe7/0x130 [ 451.049102][T12537] prepare_alloc_pages+0x3c2/0x610 [ 451.049120][T12537] ? rcu_is_watching+0x12/0xc0 [ 451.049137][T12537] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 451.049163][T12537] ? __lock_acquire+0x622/0x1c90 [ 451.049183][T12537] ? css_rstat_updated+0x1c2/0x510 [ 451.049201][T12537] ? __pfx_css_rstat_updated+0x10/0x10 [ 451.049217][T12537] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 451.049235][T12537] ? rcu_is_watching+0x12/0xc0 [ 451.049257][T12537] ? __lock_acquire+0x622/0x1c90 [ 451.049275][T12537] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 451.049300][T12537] ? policy_nodemask+0xea/0x4e0 [ 451.049320][T12537] alloc_pages_mpol+0x1fb/0x550 [ 451.049338][T12537] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 451.049357][T12537] ? filemap_get_entry+0x1a7/0x3b0 [ 451.049375][T12537] folio_alloc_noprof+0x20/0x2d0 [ 451.049395][T12537] filemap_alloc_folio_noprof+0x3a1/0x470 [ 451.049413][T12537] ? filemap_add_folio+0x110/0x610 [ 451.049428][T12537] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 451.049448][T12537] ? alloc_file_pseudo+0x1b3/0x230 [ 451.049469][T12537] __filemap_get_folio+0x5e1/0xc30 [ 451.049488][T12537] ioctx_alloc+0x761/0x2120 [ 451.049512][T12537] ? __pfx_ioctx_alloc+0x10/0x10 [ 451.049526][T12537] ? __might_fault+0x13b/0x190 [ 451.049545][T12537] __x64_sys_io_setup+0xc9/0x210 [ 451.049561][T12537] do_syscall_64+0xcd/0xfa0 [ 451.049580][T12537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.049594][T12537] RIP: 0033:0x7f592218f749 [ 451.049607][T12537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 451.049620][T12537] RSP: 002b:00007f592306e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 451.049634][T12537] RAX: ffffffffffffffda RBX: 00007f59223e5fa0 RCX: 00007f592218f749 [ 451.049643][T12537] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 00000000000000ff [ 451.049651][T12537] RBP: 00007f5922213f91 R08: 0000000000000000 R09: 0000000000000000 [ 451.049659][T12537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 451.049667][T12537] R13: 00007f59223e6038 R14: 00007f59223e5fa0 R15: 00007ffdabee0828 [ 451.049686][T12537] [ 451.730821][ T8211] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 454.519556][T12562] sp0: Synchronizing with TNC [ 454.591355][T12564] random: crng reseeded on system resumption [ 456.961762][T12597] netlink: 226 bytes leftover after parsing attributes in process `syz.2.1593'. [ 457.050891][ T8211] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 457.099528][T12597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1593'. [ 457.232056][T12597] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 457.438157][T12600] random: crng reseeded on system resumption [ 458.515803][T12620] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1601'. [ 458.892880][T12625] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1602'. [ 458.985540][T12625] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 459.040726][ T6359] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 459.124214][T12608] svc: failed to register nfsdv3 RPC service (errno 111). [ 459.237750][T12608] svc: failed to register nfsaclv3 RPC service (errno 512). [ 459.387673][T12625] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.881705][T12635] random: crng reseeded on system resumption [ 460.169211][T12640] sp0: Synchronizing with TNC [ 460.938945][T12658] zswap: compressor not available [ 461.818664][T12679] FAULT_INJECTION: forcing a failure. [ 461.818664][T12679] name failslab, interval 1, probability 0, space 0, times 0 [ 461.924204][T12679] CPU: 1 UID: 0 PID: 12679 Comm: syz.0.1614 Not tainted syzkaller #0 PREEMPT(full) [ 461.924228][T12679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 461.924237][T12679] Call Trace: [ 461.924242][T12679] [ 461.924249][T12679] dump_stack_lvl+0x16c/0x1f0 [ 461.924272][T12679] should_fail_ex+0x512/0x640 [ 461.924293][T12679] ? __kmalloc_noprof+0xca/0x880 [ 461.924317][T12679] should_failslab+0xc2/0x120 [ 461.924336][T12679] __kmalloc_noprof+0xdd/0x880 [ 461.924357][T12679] ? nfc_llcp_build_tlv+0xfd/0x230 [ 461.924377][T12679] ? nfc_llcp_build_tlv+0xfd/0x230 [ 461.924393][T12679] nfc_llcp_build_tlv+0xfd/0x230 [ 461.924410][T12679] nfc_llcp_build_gb.isra.0+0x15e/0x400 [ 461.924427][T12679] ? __pfx_nfc_llcp_build_gb.isra.0+0x10/0x10 [ 461.924446][T12679] ? nfc_genl_se_io+0xa0/0x720 [ 461.924465][T12679] ? lockdep_init_map_type+0x5c/0x280 [ 461.924487][T12679] nfc_llcp_register_device+0x600/0xa60 [ 461.924505][T12679] nfc_register_device+0x6d/0x3c0 [ 461.924523][T12679] nci_register_device+0x7f1/0xb80 [ 461.924538][T12679] ? __pfx_nci_register_device+0x10/0x10 [ 461.924554][T12679] ? lockdep_init_map_type+0x5c/0x280 [ 461.924576][T12679] virtual_ncidev_open+0x141/0x220 [ 461.924592][T12679] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 461.924607][T12679] misc_open+0x26d/0x450 [ 461.924627][T12679] ? __pfx_misc_open+0x10/0x10 [ 461.924646][T12679] chrdev_open+0x234/0x6a0 [ 461.924662][T12679] ? __pfx_apparmor_file_open+0x10/0x10 [ 461.924682][T12679] ? __pfx_chrdev_open+0x10/0x10 [ 461.924699][T12679] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 461.924717][T12679] do_dentry_open+0x982/0x1530 [ 461.924733][T12679] ? __pfx_chrdev_open+0x10/0x10 [ 461.924753][T12679] vfs_open+0x82/0x3f0 [ 461.924774][T12679] path_openat+0x1de4/0x2cb0 [ 461.924795][T12679] ? __pfx_path_openat+0x10/0x10 [ 461.924811][T12679] ? __lock_acquire+0xb8a/0x1c90 [ 461.924831][T12679] do_filp_open+0x20b/0x470 [ 461.924846][T12679] ? __pfx_do_filp_open+0x10/0x10 [ 461.924875][T12679] ? alloc_fd+0x471/0x7d0 [ 461.924894][T12679] do_sys_openat2+0x11b/0x1d0 [ 461.924913][T12679] ? __pfx_do_sys_openat2+0x10/0x10 [ 461.924933][T12679] ? __fput+0x68d/0xb70 [ 461.924954][T12679] __x64_sys_openat+0x174/0x210 [ 461.924974][T12679] ? __pfx___x64_sys_openat+0x10/0x10 [ 461.925001][T12679] do_syscall_64+0xcd/0xfa0 [ 461.925019][T12679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.925034][T12679] RIP: 0033:0x7fd0a218f749 [ 461.925047][T12679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 461.925060][T12679] RSP: 002b:00007fd0a303c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 461.925073][T12679] RAX: ffffffffffffffda RBX: 00007fd0a23e5fa0 RCX: 00007fd0a218f749 [ 461.925083][T12679] RDX: 0000000000000002 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 461.925091][T12679] RBP: 00007fd0a2213f91 R08: 0000000000000000 R09: 0000000000000000 [ 461.925100][T12679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 461.925108][T12679] R13: 00007fd0a23e6038 R14: 00007fd0a23e5fa0 R15: 00007ffd8c6e0fb8 [ 461.925127][T12679] [ 463.375712][T12688] random: crng reseeded on system resumption [ 464.765089][T12722] sp0: Synchronizing with TNC [ 464.955019][T12724] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1629'. [ 465.799035][T12742] netlink: 226 bytes leftover after parsing attributes in process `syz.2.1635'. [ 465.883867][T12742] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1635'. [ 465.926660][T12742] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 466.670708][T12765] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 467.637570][T12775] sp0: Synchronizing with TNC [ 467.839380][T12758] kexec: Could not allocate control_code_buffer [ 468.349138][T12789] netlink: 226 bytes leftover after parsing attributes in process `syz.1.1648'. [ 468.398435][T12789] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1648'. [ 468.453507][T12789] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 469.047091][T12795] svc: failed to register nfsdv3 RPC service (errno 111). [ 469.112192][T12795] svc: failed to register nfsaclv3 RPC service (errno 111). [ 469.151272][T12802] random: crng reseeded on system resumption [ 469.369147][T12805] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1654'. [ 469.513441][T12805] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1654'. [ 469.612664][T12815] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 469.892506][T12820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1659'. [ 469.938796][T12822] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1660'. [ 470.391418][T12832] random: crng reseeded on system resumption [ 470.781806][T12838] random: crng reseeded on system resumption [ 470.960384][T12811] kexec: Could not allocate control_code_buffer [ 471.275625][T12843] block nbd2: not configured, cannot reconfigure [ 471.737573][T12837] svc: failed to register nfsdv3 RPC service (errno 111). [ 471.852697][T12837] svc: failed to register nfsaclv3 RPC service (errno 111). [ 472.154875][T12861] FAULT_INJECTION: forcing a failure. [ 472.154875][T12861] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 472.247875][T12861] CPU: 1 UID: 0 PID: 12861 Comm: syz.0.1674 Not tainted syzkaller #0 PREEMPT(full) [ 472.247897][T12861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 472.247906][T12861] Call Trace: [ 472.247911][T12861] [ 472.247916][T12861] dump_stack_lvl+0x16c/0x1f0 [ 472.247938][T12861] should_fail_ex+0x512/0x640 [ 472.247962][T12861] _copy_from_user+0x2e/0xd0 [ 472.247985][T12861] memdup_user+0x6b/0xe0 [ 472.248001][T12861] strndup_user+0x78/0xe0 [ 472.248017][T12861] __do_sys_fsconfig+0x2e1/0xbe0 [ 472.248039][T12861] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 472.248066][T12861] do_syscall_64+0xcd/0xfa0 [ 472.248084][T12861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.248098][T12861] RIP: 0033:0x7fd0a218f749 [ 472.248109][T12861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 472.248122][T12861] RSP: 002b:00007fd0a301b038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 472.248136][T12861] RAX: ffffffffffffffda RBX: 00007fd0a23e6090 RCX: 00007fd0a218f749 [ 472.248145][T12861] RDX: 0000200000000300 RSI: 0000000000000002 RDI: 0000000000000003 [ 472.248153][T12861] RBP: 00007fd0a301b090 R08: 0000000000000005 R09: 0000000000000000 [ 472.248162][T12861] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 472.248170][T12861] R13: 00007fd0a23e6128 R14: 00007fd0a23e6090 R15: 00007ffd8c6e0fb8 [ 472.248189][T12861] [ 472.410251][T12857] Process accounting paused [ 472.640807][T12868] random: crng reseeded on system resumption [ 473.703367][T12881] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1681'. [ 473.756736][T12880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1672'. [ 473.903021][T12880] netlink: 354 bytes leftover after parsing attributes in process `syz.1.1672'. [ 474.434928][T12898] program syz.1.1685 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 474.509246][T12900] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1685'. [ 474.622202][T12906] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 474.736011][T12905] Invalid ELF header magic: != ELF [ 475.335329][T12918] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1691'. [ 475.668538][T12926] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1692'. [ 475.809976][T12926] nbd: must specify at least one socket [ 476.050384][T12929] zswap: compressor not available [ 476.457507][T12936] zswap: compressor not available [ 476.678826][T12948] openvswitch: netlink: Flow key attribute not present in set flow. [ 476.719514][T12950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1699'. [ 477.078631][T12960] Invalid ELF header magic: != ELF [ 477.267649][ T6359] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 477.688036][T12965] FAULT_INJECTION: forcing a failure. [ 477.688036][T12965] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 477.755621][T12965] CPU: 1 UID: 0 PID: 12965 Comm: syz.2.1704 Not tainted syzkaller #0 PREEMPT(full) [ 477.755644][T12965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 477.755653][T12965] Call Trace: [ 477.755658][T12965] [ 477.755664][T12965] dump_stack_lvl+0x16c/0x1f0 [ 477.755687][T12965] should_fail_ex+0x512/0x640 [ 477.755711][T12965] _copy_from_user+0x2e/0xd0 [ 477.755734][T12965] copy_msghdr_from_user+0x98/0x160 [ 477.755750][T12965] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 477.755774][T12965] ? kfree+0x252/0x6d0 [ 477.755785][T12965] ? __pfx__kstrtoull+0x10/0x10 [ 477.755805][T12965] ___sys_sendmsg+0xfe/0x1d0 [ 477.755820][T12965] ? __pfx____sys_sendmsg+0x10/0x10 [ 477.755851][T12965] ? __pfx___might_resched+0x10/0x10 [ 477.755870][T12965] __sys_sendmmsg+0x200/0x420 [ 477.755887][T12965] ? __pfx___sys_sendmmsg+0x10/0x10 [ 477.755906][T12965] ? do_sys_openat2+0x157/0x1d0 [ 477.755926][T12965] ? __pfx_do_sys_openat2+0x10/0x10 [ 477.755955][T12965] ? ksys_write+0x1ac/0x250 [ 477.755969][T12965] ? __pfx_ksys_write+0x10/0x10 [ 477.755987][T12965] __x64_sys_sendmmsg+0x9c/0x100 [ 477.756001][T12965] ? lockdep_hardirqs_on+0x7c/0x110 [ 477.756018][T12965] do_syscall_64+0xcd/0xfa0 [ 477.756036][T12965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.756050][T12965] RIP: 0033:0x7f141818f749 [ 477.756062][T12965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 477.756079][T12965] RSP: 002b:00007f14163f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 477.756093][T12965] RAX: ffffffffffffffda RBX: 00007f14183e5fa0 RCX: 00007f141818f749 [ 477.756102][T12965] RDX: 0000000000000005 RSI: 0000200000000080 RDI: 0000000000000003 [ 477.756110][T12965] RBP: 00007f14163f6090 R08: 0000000000000000 R09: 0000000000000000 [ 477.756119][T12965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 477.756126][T12965] R13: 00007f14183e6038 R14: 00007f14183e5fa0 R15: 00007ffca14139a8 [ 477.756145][T12965] [ 477.974444][T12968] FAULT_INJECTION: forcing a failure. [ 477.974444][T12968] name fail_futex, interval 1, probability 0, space 0, times 0 [ 477.987419][T12968] CPU: 1 UID: 0 PID: 12968 Comm: syz.0.1706 Not tainted syzkaller #0 PREEMPT(full) [ 477.987442][T12968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 477.987451][T12968] Call Trace: [ 477.987456][T12968] [ 477.987461][T12968] dump_stack_lvl+0x16c/0x1f0 [ 477.987484][T12968] should_fail_ex+0x512/0x640 [ 477.987513][T12968] get_futex_key+0x1d0/0x1560 [ 477.987534][T12968] ? __pfx_get_futex_key+0x10/0x10 [ 477.987559][T12968] futex_wake+0xea/0x530 [ 477.987579][T12968] ? rcu_is_watching+0x12/0xc0 [ 477.987595][T12968] ? __pfx_futex_wake+0x10/0x10 [ 477.987616][T12968] ? kmem_cache_free+0x2d4/0x6c0 [ 477.987630][T12968] ? putname+0x154/0x1a0 [ 477.987656][T12968] do_futex+0x1e3/0x350 [ 477.987674][T12968] ? __pfx_do_futex+0x10/0x10 [ 477.987707][T12968] __x64_sys_futex+0x1e0/0x4c0 [ 477.987727][T12968] ? __x64_sys_openat+0x174/0x210 [ 477.987748][T12968] ? __pfx___x64_sys_futex+0x10/0x10 [ 477.987774][T12968] do_syscall_64+0xcd/0xfa0 [ 477.987793][T12968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.987807][T12968] RIP: 0033:0x7fd0a218f749 [ 477.987819][T12968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 477.987832][T12968] RSP: 002b:00007fd0a303c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 477.987847][T12968] RAX: ffffffffffffffda RBX: 00007fd0a23e5fa8 RCX: 00007fd0a218f749 [ 477.987856][T12968] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd0a23e5fac [ 477.987865][T12968] RBP: 00007fd0a23e5fa0 R08: 00007fd0a303d000 R09: 0000000000000000 [ 477.987874][T12968] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 477.987882][T12968] R13: 00007fd0a23e6038 R14: 00007ffd8c6e0ed0 R15: 00007ffd8c6e0fb8 [ 477.987901][T12968] [ 478.575505][T12975] random: crng reseeded on system resumption [ 478.769112][T12979] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1707'. [ 479.663920][T12987] Per memcg swappiness does not exist in cgroup v2. See memory.reclaim or memory.swap.max there [ 479.663920][T12987] [ 480.137773][T12998] netlink: 226 bytes leftover after parsing attributes in process `syz.0.1713'. [ 480.397274][T12998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1713'. [ 480.546406][T12998] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 480.887125][T13009] FAULT_INJECTION: forcing a failure. [ 480.887125][T13009] name fail_futex, interval 1, probability 0, space 0, times 0 [ 481.005596][T13009] CPU: 1 UID: 0 PID: 13009 Comm: syz.2.1716 Not tainted syzkaller #0 PREEMPT(full) [ 481.005621][T13009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 481.005629][T13009] Call Trace: [ 481.005634][T13009] [ 481.005640][T13009] dump_stack_lvl+0x16c/0x1f0 [ 481.005663][T13009] should_fail_ex+0x512/0x640 [ 481.005690][T13009] get_futex_key+0x1d0/0x1560 [ 481.005719][T13009] ? __pfx_get_futex_key+0x10/0x10 [ 481.005744][T13009] futex_wake+0xea/0x530 [ 481.005766][T13009] ? rcu_is_watching+0x12/0xc0 [ 481.005781][T13009] ? __pfx_futex_wake+0x10/0x10 [ 481.005804][T13009] ? kmem_cache_free+0x2d4/0x6c0 [ 481.005818][T13009] ? putname+0x154/0x1a0 [ 481.005839][T13009] do_futex+0x1e3/0x350 [ 481.005857][T13009] ? __pfx_do_futex+0x10/0x10 [ 481.005880][T13009] __x64_sys_futex+0x1e0/0x4c0 [ 481.005899][T13009] ? __x64_sys_openat+0x174/0x210 [ 481.005919][T13009] ? __pfx___x64_sys_futex+0x10/0x10 [ 481.005944][T13009] do_syscall_64+0xcd/0xfa0 [ 481.005962][T13009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.005976][T13009] RIP: 0033:0x7f141818f749 [ 481.005988][T13009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 481.006002][T13009] RSP: 002b:00007f14163f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 481.006016][T13009] RAX: ffffffffffffffda RBX: 00007f14183e5fa8 RCX: 00007f141818f749 [ 481.006025][T13009] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f14183e5fac [ 481.006033][T13009] RBP: 00007f14183e5fa0 R08: 00007f1418f28000 R09: 0000000000000000 [ 481.006041][T13009] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 481.006050][T13009] R13: 00007f14183e6038 R14: 00007ffca14138c0 R15: 00007ffca14139a8 [ 481.006069][T13009] [ 482.093469][T13020] random: crng reseeded on system resumption [ 484.954919][T13071] sctp: [Deprecated]: syz.1.1733 (pid 13071) Use of int in max_burst socket option deprecated. [ 484.954919][T13071] Use struct sctp_assoc_value instead [ 485.388462][ T6359] Bluetooth: hci1: unexpected subevent 0x04 length: 122 > 11 [ 486.278477][T13112] FAULT_INJECTION: forcing a failure. [ 486.278477][T13112] name failslab, interval 1, probability 0, space 0, times 0 [ 486.346265][T13112] CPU: 1 UID: 0 PID: 13112 Comm: syz.1.1739 Not tainted syzkaller #0 PREEMPT(full) [ 486.346287][T13112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 486.346296][T13112] Call Trace: [ 486.346301][T13112] [ 486.346306][T13112] dump_stack_lvl+0x16c/0x1f0 [ 486.346329][T13112] should_fail_ex+0x512/0x640 [ 486.346350][T13112] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 486.346367][T13112] should_failslab+0xc2/0x120 [ 486.346386][T13112] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 486.346402][T13112] ? sock_alloc_inode+0x25/0x1c0 [ 486.346422][T13112] ? __pfx_sock_alloc_inode+0x10/0x10 [ 486.346438][T13112] ? sock_alloc_inode+0x25/0x1c0 [ 486.346452][T13112] sock_alloc_inode+0x25/0x1c0 [ 486.346468][T13112] alloc_inode+0x64/0x240 [ 486.346487][T13112] sock_alloc+0x40/0x280 [ 486.346503][T13112] __sock_create+0xc1/0x8d0 [ 486.346524][T13112] mptcp_subflow_create_socket+0xec/0xa10 [ 486.346547][T13112] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 486.346572][T13112] __mptcp_nmpc_sk+0x182/0x890 [ 486.346594][T13112] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 486.346617][T13112] ? __local_bh_enable_ip+0xa4/0x120 [ 486.346636][T13112] mptcp_sendmsg+0x1705/0x1ec0 [ 486.346657][T13112] ? aa_sk_perm+0x2f4/0xb10 [ 486.346675][T13112] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 486.346694][T13112] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 486.346711][T13112] inet_sendmsg+0x11c/0x140 [ 486.346733][T13112] ____sys_sendmsg+0x973/0xc70 [ 486.346752][T13112] ? __pfx_____sys_sendmsg+0x10/0x10 [ 486.346773][T13112] ? __pfx__kstrtoull+0x10/0x10 [ 486.346794][T13112] ___sys_sendmsg+0x134/0x1d0 [ 486.346810][T13112] ? __pfx____sys_sendmsg+0x10/0x10 [ 486.346833][T13112] ? find_held_lock+0x2b/0x80 [ 486.346860][T13112] __sys_sendmmsg+0x200/0x420 [ 486.346876][T13112] ? __pfx___sys_sendmmsg+0x10/0x10 [ 486.346896][T13112] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 486.346923][T13112] ? fput+0x9b/0xd0 [ 486.346941][T13112] ? ksys_write+0x1ac/0x250 [ 486.346956][T13112] ? __pfx_ksys_write+0x10/0x10 [ 486.346974][T13112] __x64_sys_sendmmsg+0x9c/0x100 [ 486.346987][T13112] ? lockdep_hardirqs_on+0x7c/0x110 [ 486.347004][T13112] do_syscall_64+0xcd/0xfa0 [ 486.347022][T13112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.347036][T13112] RIP: 0033:0x7f592218f749 [ 486.347052][T13112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 486.347065][T13112] RSP: 002b:00007f592304d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 486.347079][T13112] RAX: ffffffffffffffda RBX: 00007f59223e6090 RCX: 00007f592218f749 [ 486.347088][T13112] RDX: 0000000000000005 RSI: 0000200000000080 RDI: 0000000000000004 [ 486.347096][T13112] RBP: 00007f592304d090 R08: 0000000000000000 R09: 0000000000000000 [ 486.347104][T13112] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.347113][T13112] R13: 00007f59223e6128 R14: 00007f59223e6090 R15: 00007ffdabee0828 [ 486.347132][T13112] [ 487.281966][T13123] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1741'. [ 487.627828][T13130] FAULT_INJECTION: forcing a failure. [ 487.627828][T13130] name failslab, interval 1, probability 0, space 0, times 0 [ 487.784898][T13130] CPU: 1 UID: 0 PID: 13130 Comm: syz.2.1742 Not tainted syzkaller #0 PREEMPT(full) [ 487.784923][T13130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 487.784931][T13130] Call Trace: [ 487.784937][T13130] [ 487.784943][T13130] dump_stack_lvl+0x16c/0x1f0 [ 487.784966][T13130] should_fail_ex+0x512/0x640 [ 487.784987][T13130] ? fs_reclaim_acquire+0xae/0x150 [ 487.785007][T13130] should_failslab+0xc2/0x120 [ 487.785026][T13130] __kmalloc_noprof+0xdd/0x880 [ 487.785046][T13130] ? kfree+0x252/0x6d0 [ 487.785058][T13130] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 487.785078][T13130] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 487.785094][T13130] tomoyo_realpath_from_path+0xc2/0x6e0 [ 487.785115][T13130] tomoyo_check_open_permission+0x2ab/0x3c0 [ 487.785130][T13130] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 487.785161][T13130] ? lock_acquire+0x179/0x350 [ 487.785180][T13130] ? find_held_lock+0x2b/0x80 [ 487.785194][T13130] ? mnt_get_write_access+0x52/0x2f0 [ 487.785214][T13130] tomoyo_file_open+0x6b/0x90 [ 487.785233][T13130] security_file_open+0x84/0x1e0 [ 487.785248][T13130] do_dentry_open+0x596/0x1530 [ 487.785270][T13130] vfs_open+0x82/0x3f0 [ 487.785291][T13130] path_openat+0x1de4/0x2cb0 [ 487.785312][T13130] ? __pfx_path_openat+0x10/0x10 [ 487.785329][T13130] ? __lock_acquire+0xb8a/0x1c90 [ 487.785348][T13130] do_filp_open+0x20b/0x470 [ 487.785363][T13130] ? __pfx_do_filp_open+0x10/0x10 [ 487.785392][T13130] ? alloc_fd+0x471/0x7d0 [ 487.785411][T13130] do_sys_openat2+0x11b/0x1d0 [ 487.785429][T13130] ? __pfx_do_sys_openat2+0x10/0x10 [ 487.785455][T13130] __x64_sys_openat+0x174/0x210 [ 487.785475][T13130] ? __pfx___x64_sys_openat+0x10/0x10 [ 487.785501][T13130] do_syscall_64+0xcd/0xfa0 [ 487.785520][T13130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.785534][T13130] RIP: 0033:0x7f141818f749 [ 487.785546][T13130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.785560][T13130] RSP: 002b:00007f14163f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 487.785573][T13130] RAX: ffffffffffffffda RBX: 00007f14183e5fa0 RCX: 00007f141818f749 [ 487.785583][T13130] RDX: 0000000000000002 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 487.785591][T13130] RBP: 00007f1418213f91 R08: 0000000000000000 R09: 0000000000000000 [ 487.785599][T13130] R10: 00000000000000eb R11: 0000000000000246 R12: 0000000000000000 [ 487.785607][T13130] R13: 00007f14183e6038 R14: 00007f14183e5fa0 R15: 00007ffca14139a8 [ 487.785626][T13130] [ 487.785633][T13130] ERROR: Out of memory at tomoyo_realpath_from_path. [ 488.218043][T13112] socket: no more sockets [ 488.547311][T13149] random: crng reseeded on system resumption [ 489.400080][T13168] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1749'. [ 489.675039][T13172] netlink: 326 bytes leftover after parsing attributes in process `syz.0.1751'. [ 490.355058][T13186] random: crng reseeded on system resumption [ 491.282401][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 491.295217][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 491.307963][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 491.320231][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 491.332538][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 491.344808][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 491.357162][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 491.369401][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 491.381654][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 493.201487][ C1] net_ratelimit: 7450 callbacks suppressed [ 493.201503][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 493.219700][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 493.231934][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 493.244193][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 493.256448][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 493.268664][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 493.280971][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 493.293213][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 493.305523][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 493.317797][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 498.185553][ C1] net_ratelimit: 20730 callbacks suppressed [ 498.185571][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 498.203741][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 498.216044][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 498.228239][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 498.240483][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 498.252902][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 498.265422][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 498.277689][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 498.289918][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 498.302160][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 500.487515][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 503.169792][ C1] net_ratelimit: 21182 callbacks suppressed [ 503.169808][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 503.188005][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 503.200198][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 503.212422][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 503.224828][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 503.237097][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 503.249416][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 503.261624][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 503.273813][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 503.286005][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 508.153743][ C1] net_ratelimit: 21782 callbacks suppressed [ 508.153760][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 508.171926][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 508.184131][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 508.196385][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 508.208583][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 508.220849][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 508.233093][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 508.245314][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 508.257541][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 508.269776][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 513.137895][ C1] net_ratelimit: 21930 callbacks suppressed [ 513.137911][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 513.156130][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 513.168354][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 513.180635][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 513.192867][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 513.205087][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 513.217315][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 513.229564][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 513.241894][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 513.254243][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 518.121874][ C1] net_ratelimit: 21989 callbacks suppressed [ 518.121893][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 518.140116][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 518.152477][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 518.164690][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 518.176933][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 518.189195][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 518.201478][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 518.213761][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 518.226129][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 518.238470][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 523.106075][ C1] net_ratelimit: 21904 callbacks suppressed [ 523.106091][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 523.124325][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 523.136666][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 523.148953][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 523.161206][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 523.173409][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 523.185661][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 523.197886][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 523.210114][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 523.222327][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 528.090061][ C1] net_ratelimit: 21484 callbacks suppressed [ 528.090078][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 528.108439][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 528.120855][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 528.133169][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 528.145478][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 528.157777][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 528.170071][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 528.182305][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 528.194618][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 528.206811][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 533.074260][ C1] net_ratelimit: 21609 callbacks suppressed [ 533.074276][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 533.092413][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 533.104685][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 533.117036][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 533.129415][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 533.141661][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 533.153880][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 533.166100][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 533.178305][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 533.190553][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 538.058444][ C1] net_ratelimit: 22032 callbacks suppressed [ 538.058460][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 538.076671][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 538.088967][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 538.101384][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 538.113695][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 538.126023][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 538.138243][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 538.150505][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 538.162809][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 538.175038][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 543.042472][ C1] net_ratelimit: 22004 callbacks suppressed [ 543.042489][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 543.060798][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 543.073108][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 543.085344][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 543.097553][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 543.109873][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 543.122073][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 543.134299][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 543.146512][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 543.158738][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.313817][ T8210] Bluetooth: hci1: command 0x0406 tx timeout [ 548.026367][ C1] net_ratelimit: 21695 callbacks suppressed [ 548.026386][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 548.044555][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 548.056889][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 548.069079][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 548.081300][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 548.093541][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 548.105737][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 548.118008][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 548.130372][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 548.142653][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 549.717705][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 553.010423][ C1] net_ratelimit: 21538 callbacks suppressed [ 553.010440][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 553.028649][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 553.041007][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 553.053244][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 553.065463][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 553.077699][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 553.090261][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 553.102484][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 553.114800][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 553.127009][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.994636][ C1] net_ratelimit: 21889 callbacks suppressed [ 557.994654][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 558.012826][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 558.025182][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 558.037441][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 558.050118][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 558.062324][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 558.074514][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 558.086835][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 558.099053][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 558.111553][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.978764][ C1] net_ratelimit: 21897 callbacks suppressed [ 562.978780][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.996912][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 563.009147][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 563.021338][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 563.033587][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 563.045786][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 563.058017][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 563.070282][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 563.082508][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 563.094812][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.962789][ C1] net_ratelimit: 21906 callbacks suppressed [ 567.962805][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.980962][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.993202][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 568.005372][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 568.017639][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 568.029821][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 568.042000][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 568.054261][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 568.066472][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 568.078754][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.946991][ C1] net_ratelimit: 16157 callbacks suppressed [ 572.947008][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.965234][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.978255][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.990677][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 573.003754][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 573.016032][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 573.029122][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 573.041384][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 573.054195][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 573.066537][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.930893][ C1] net_ratelimit: 9709 callbacks suppressed [ 577.930910][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.949512][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.961782][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.974532][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.986756][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.999537][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 578.011780][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 578.024490][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 578.036721][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 578.049494][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.915347][ C1] net_ratelimit: 10989 callbacks suppressed [ 582.915363][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 582.933895][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.946129][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.958720][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 582.971379][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.983698][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.996228][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 583.008815][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 583.021220][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 583.033787][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 587.899398][ C1] net_ratelimit: 12907 callbacks suppressed [ 587.899415][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 587.917876][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:84:55:e8:24:c1, vlan:0) [ 587.930103][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.942357][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.954830][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 587.967313][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:84:55:e8:24:c1, vlan:0) [ 587.979635][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.991878][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 588.004385][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 588.016845][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:84:55:e8:24:c1, vlan:0) [ 592.883187][ C1] net_ratelimit: 13726 callbacks suppressed [ 592.883204][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 592.901645][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:84:55:e8:24:c1, vlan:0) [ 592.913952][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 592.926391][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 592.938944][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 592.951460][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:84:55:e8:24:c1, vlan:0) [ 592.963771][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 592.976027][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 592.988500][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 593.000972][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:84:55:e8:24:c1, vlan:0) [ 597.867315][ C1] net_ratelimit: 13618 callbacks suppressed [ 597.867334][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 597.885814][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:84:55:e8:24:c1, vlan:0) [ 597.898085][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 597.910347][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 597.923755][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 597.936235][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:84:55:e8:24:c1, vlan:0) [ 597.948487][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 597.960694][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 597.973414][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 597.986337][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:84:55:e8:24:c1, vlan:0) [ 599.916508][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 599.923573][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P13121/2:b..l P13066/1:b..l P5841/1:b..l P982/2:b..l P13197/1:b..l P13190/1:b..l [ 599.938745][ C1] rcu: (detected by 1, t=10502 jiffies, g=60205, q=1026 ncpus=1) [ 599.946676][ C1] task:syz.1.1758 state:R running task stack:27240 pid:13190 tgid:13188 ppid:5826 task_flags:0x40054c flags:0x00080000 [ 599.961096][ C1] Call Trace: [ 599.964381][ C1] [ 599.967308][ C1] __schedule+0x1190/0x5de0 [ 599.971815][ C1] ? __pfx___schedule+0x10/0x10 [ 599.976650][ C1] ? lock_acquire+0x179/0x350 [ 599.981408][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 599.986426][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 599.991887][ C1] preempt_schedule_common+0x44/0xc0 [ 599.997444][ C1] preempt_schedule_thunk+0x16/0x30 [ 600.002664][ C1] _raw_spin_unlock+0x3e/0x50 [ 600.007349][ C1] unmap_page_range+0xf71/0x41b0 [ 600.012298][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 600.017841][ C1] ? mas_next_slot+0x12d3/0x1cb0 [ 600.022776][ C1] ? uprobe_munmap+0x20/0x600 [ 600.027450][ C1] unmap_single_vma.constprop.0+0x153/0x240 [ 600.033338][ C1] unmap_vmas+0x218/0x470 [ 600.037745][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 600.042596][ C1] exit_mmap+0x1b2/0xb90 [ 600.046833][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 600.051589][ C1] ? rcu_is_watching+0x12/0xc0 [ 600.056346][ C1] ? kasan_quarantine_put+0x10a/0x240 [ 600.061713][ C1] __mmput+0x12a/0x410 [ 600.065782][ C1] mmput+0x62/0x70 [ 600.069492][ C1] do_exit+0x7c7/0x2bf0 [ 600.073641][ C1] ? __pfx_do_exit+0x10/0x10 [ 600.078230][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 600.083251][ C1] ? find_held_lock+0x2b/0x80 [ 600.087915][ C1] do_group_exit+0xd3/0x2a0 [ 600.092495][ C1] get_signal+0x2671/0x26d0 [ 600.096997][ C1] ? __do_sys_clone3+0xd7/0x290 [ 600.101922][ C1] ? __pfx___do_sys_clone3+0x10/0x10 [ 600.107198][ C1] ? __pfx_get_signal+0x10/0x10 [ 600.112035][ C1] ? do_futex+0x122/0x350 [ 600.116354][ C1] ? __pfx_do_futex+0x10/0x10 [ 600.121021][ C1] arch_do_signal_or_restart+0x8f/0x790 [ 600.126559][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 600.132808][ C1] exit_to_user_mode_loop+0x85/0x130 [ 600.138134][ C1] do_syscall_64+0x426/0xfa0 [ 600.142714][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.148683][ C1] RIP: 0033:0x7f592218f749 [ 600.153083][ C1] RSP: 002b:00007f592304d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 600.161481][ C1] RAX: fffffffffffffe00 RBX: 00007f59223e6098 RCX: 00007f592218f749 [ 600.169875][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f59223e6098 [ 600.178020][ C1] RBP: 00007f59223e6090 R08: 0000000000000000 R09: 0000000000000000 [ 600.186694][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 600.194668][ C1] R13: 00007f59223e6128 R14: 00007ffdabee0740 R15: 00007ffdabee0828 [ 600.202812][ C1] [ 600.205833][ C1] task:syz.0.1760 state:R running task stack:26744 pid:13197 tgid:13196 ppid:5827 task_flags:0x40054c flags:0x00080000 [ 600.219746][ C1] Call Trace: [ 600.223058][ C1] [ 600.225988][ C1] __schedule+0x1190/0x5de0 [ 600.230586][ C1] ? __pfx___schedule+0x10/0x10 [ 600.236236][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 600.241384][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 600.247109][ C1] preempt_schedule_common+0x44/0xc0 [ 600.252484][ C1] preempt_schedule_thunk+0x16/0x30 [ 600.257683][ C1] _raw_spin_unlock+0x3e/0x50 [ 600.262347][ C1] unmap_page_range+0xf71/0x41b0 [ 600.267470][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 600.272920][ C1] ? mas_next_slot+0x12d3/0x1cb0 [ 600.277956][ C1] ? uprobe_munmap+0x20/0x600 [ 600.282673][ C1] unmap_single_vma.constprop.0+0x153/0x240 [ 600.288599][ C1] unmap_vmas+0x218/0x470 [ 600.292945][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 600.297912][ C1] exit_mmap+0x1b2/0xb90 [ 600.302276][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 600.307059][ C1] ? rcu_is_watching+0x12/0xc0 [ 600.311820][ C1] ? kasan_quarantine_put+0x10a/0x240 [ 600.317286][ C1] __mmput+0x12a/0x410 [ 600.321349][ C1] mmput+0x62/0x70 [ 600.325064][ C1] do_exit+0x7c7/0x2bf0 [ 600.329213][ C1] ? __pfx_try_to_wake_up+0x10/0x10 [ 600.334591][ C1] ? __pfx_do_exit+0x10/0x10 [ 600.339175][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 600.344292][ C1] ? find_held_lock+0x2b/0x80 [ 600.348992][ C1] do_group_exit+0xd3/0x2a0 [ 600.353505][ C1] get_signal+0x2671/0x26d0 [ 600.358027][ C1] ? find_held_lock+0x2b/0x80 [ 600.362698][ C1] ? __pfx_get_signal+0x10/0x10 [ 600.367625][ C1] ? do_futex+0x122/0x350 [ 600.372035][ C1] ? __pfx_do_futex+0x10/0x10 [ 600.376705][ C1] arch_do_signal_or_restart+0x8f/0x790 [ 600.382244][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 600.388396][ C1] exit_to_user_mode_loop+0x85/0x130 [ 600.393681][ C1] do_syscall_64+0x426/0xfa0 [ 600.398354][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.404240][ C1] RIP: 0033:0x7fd0a218f749 [ 600.408644][ C1] RSP: 002b:00007fd0a303c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 600.417246][ C1] RAX: 0000000000000001 RBX: 00007fd0a23e5fa8 RCX: 00007fd0a218f749 [ 600.425223][ C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd0a23e5fac [ 600.433219][ C1] RBP: 00007fd0a23e5fa0 R08: 00007fd0a303d000 R09: 0000000000000000 [ 600.441271][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 600.449237][ C1] R13: 00007fd0a23e6038 R14: 00007ffd8c6e0ed0 R15: 00007ffd8c6e0fb8 [ 600.457225][ C1] [ 600.460249][ C1] task:kworker/1:2 state:R running task stack:26248 pid:982 tgid:982 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 600.473842][ C1] Workqueue: mld mld_ifc_work [ 600.478563][ C1] Call Trace: [ 600.481875][ C1] [ 600.484815][ C1] __schedule+0x1190/0x5de0 [ 600.489326][ C1] ? br_dev_xmit+0x4f8/0x1880 [ 600.494011][ C1] ? __pfx___schedule+0x10/0x10 [ 600.498885][ C1] ? __pfx_passthru_features_check+0x10/0x10 [ 600.504886][ C1] ? __pfx_netif_skb_features+0x10/0x10 [ 600.510439][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 600.515913][ C1] preempt_schedule_common+0x44/0xc0 [ 600.521298][ C1] preempt_schedule_thunk+0x16/0x30 [ 600.526502][ C1] ? __dev_queue_xmit+0xaf1/0x4490 [ 600.531610][ C1] __local_bh_enable_ip+0x107/0x120 [ 600.536816][ C1] ? __dev_queue_xmit+0xaf1/0x4490 [ 600.541938][ C1] __dev_queue_xmit+0xb06/0x4490 [ 600.546889][ C1] ? __lock_acquire+0x622/0x1c90 [ 600.551835][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 600.557287][ C1] ? look_up_lock_class+0x59/0x150 [ 600.562414][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 600.567352][ C1] ? __asan_memcpy+0x3c/0x60 [ 600.571943][ C1] ? eth_header+0x11c/0x1f0 [ 600.576456][ C1] neigh_resolve_output+0x53a/0x940 [ 600.581673][ C1] ip6_finish_output2+0xad1/0x1cf0 [ 600.586910][ C1] ? ip6_dst_mtu_maybe_forward.constprop.0+0x1be/0x530 [ 600.593778][ C1] __ip6_finish_output+0x3cd/0x1010 [ 600.599000][ C1] ip6_output+0x253/0x710 [ 600.603340][ C1] mld_sendpack+0xac1/0x1350 [ 600.607927][ C1] ? __pfx_mld_sendpack+0x10/0x10 [ 600.612965][ C1] mld_ifc_work+0x740/0xbf0 [ 600.617473][ C1] process_one_work+0x9cf/0x1b70 [ 600.622416][ C1] ? __pfx_process_one_work+0x10/0x10 [ 600.627803][ C1] ? assign_work+0x1a0/0x250 [ 600.632414][ C1] worker_thread+0x6c8/0xf10 [ 600.637071][ C1] ? __pfx_worker_thread+0x10/0x10 [ 600.642183][ C1] kthread+0x3c5/0x780 [ 600.646252][ C1] ? __pfx_kthread+0x10/0x10 [ 600.650843][ C1] ? rcu_is_watching+0x12/0xc0 [ 600.655686][ C1] ? __pfx_kthread+0x10/0x10 [ 600.660271][ C1] ret_from_fork+0x675/0x7d0 [ 600.664957][ C1] ? __pfx_kthread+0x10/0x10 [ 600.669543][ C1] ret_from_fork_asm+0x1a/0x30 [ 600.674308][ C1] [ 600.677311][ C1] task:udevd state:R running task stack:24728 pid:5841 tgid:5841 ppid:5199 task_flags:0x400140 flags:0x00080001 [ 600.690879][ C1] Call Trace: [ 600.694654][ C1] [ 600.697597][ C1] __schedule+0x1190/0x5de0 [ 600.702221][ C1] ? __pfx___schedule+0x10/0x10 [ 600.707075][ C1] ? mas_wr_store_entry+0x102d/0x2550 [ 600.712565][ C1] ? mark_held_locks+0x49/0x80 [ 600.717328][ C1] preempt_schedule_irq+0x51/0x90 [ 600.722371][ C1] irqentry_exit+0x36/0x90 [ 600.726869][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 600.733017][ C1] RIP: 0010:xas_load+0xcf/0x5b0 [ 600.737914][ C1] Code: 00 4c 89 ea 44 0f b6 65 10 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 0f b6 04 02 84 c0 74 06 0f 8e 55 03 00 00 45 0f b6 75 00 <44> 89 e7 44 89 f6 e8 96 9e 60 f6 45 38 e6 0f 82 61 ff ff ff e8 68 [ 600.757786][ C1] RSP: 0018:ffffc9000403f7b8 EFLAGS: 00000246 [ 600.763854][ C1] RAX: 0000000000000000 RBX: ffff8880263fc582 RCX: ffffffff8b5bb2b1 [ 600.771908][ C1] RDX: 1ffff11004c7f8b0 RSI: ffffffff8b5bb2bf RDI: ffffc9000403f858 [ 600.779873][ C1] RBP: ffffc9000403f848 R08: 0000000000000007 R09: 0000000000001000 [ 600.787832][ C1] R10: ffff8880263fc582 R11: 0000000000000001 R12: 0000000000000000 [ 600.795894][ C1] R13: ffff8880263fc580 R14: 0000000000000000 R15: 0000000000000001 [ 600.803861][ C1] ? xas_load+0x71/0x5b0 [ 600.808106][ C1] ? xas_load+0x7f/0x5b0 [ 600.812457][ C1] ? xas_load+0x7f/0x5b0 [ 600.816818][ C1] filemap_get_read_batch+0x10e/0x970 [ 600.822236][ C1] ? __pfx_filemap_get_read_batch+0x10/0x10 [ 600.828134][ C1] ? mt_validate_nulls+0x1b7/0x9d0 [ 600.833424][ C1] ? __pfx_mt_validate_nulls+0x10/0x10 [ 600.838901][ C1] filemap_get_pages+0x1f1/0x1d30 [ 600.843954][ C1] ? __pfx_filemap_get_pages+0x10/0x10 [ 600.849415][ C1] ? __pfx___might_resched+0x10/0x10 [ 600.854797][ C1] ? mas_next_slot+0x12d3/0x1cb0 [ 600.859760][ C1] filemap_read+0x3d2/0xe40 [ 600.864300][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 600.869440][ C1] ? __pfx_filemap_read+0x10/0x10 [ 600.874483][ C1] ? __pfx_down_read+0x10/0x10 [ 600.879273][ C1] ? common_file_perm+0x1a9/0x340 [ 600.884310][ C1] blkdev_read_iter+0x1ac/0x500 [ 600.889170][ C1] vfs_read+0x8bf/0xcf0 [ 600.893346][ C1] ? __pfx_vfs_read+0x10/0x10 [ 600.898055][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 600.903178][ C1] ? blkdev_llseek+0x9b/0xd0 [ 600.908048][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 600.914338][ C1] ksys_read+0x12a/0x250 [ 600.918811][ C1] ? __pfx_ksys_read+0x10/0x10 [ 600.923594][ C1] do_syscall_64+0xcd/0xfa0 [ 600.928109][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.934214][ C1] RIP: 0033:0x7fe1142a7407 [ 600.938896][ C1] RSP: 002b:00007ffcfdff6430 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 600.947719][ C1] RAX: ffffffffffffffda RBX: 00007fe11495e880 RCX: 00007fe1142a7407 [ 600.955709][ C1] RDX: 0000000000001000 RSI: 00007fe114946000 RDI: 0000000000000009 [ 600.963772][ C1] RBP: 00005560abd3bf80 R08: 0000000000000000 R09: 0000000000000000 [ 600.971884][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 600.979998][ C1] R13: 0000000000040000 R14: 00005560abd476e8 R15: 00007fe114a8539c [ 600.987981][ C1] [ 600.991009][ C1] task:syz.0.1728 state:R running task stack:23384 pid:13066 tgid:13066 ppid:5827 task_flags:0x400640 flags:0x00080001 [ 601.005315][ C1] Call Trace: [ 601.008597][ C1] [ 601.011525][ C1] __schedule+0x1190/0x5de0 [ 601.016034][ C1] ? rcu_is_watching+0x12/0xc0 [ 601.020990][ C1] ? trace_sched_exit_tp+0xd1/0x120 [ 601.026221][ C1] ? __pfx___schedule+0x10/0x10 [ 601.031097][ C1] ? mark_held_locks+0x49/0x80 [ 601.035872][ C1] preempt_schedule_irq+0x51/0x90 [ 601.040890][ C1] irqentry_exit+0x36/0x90 [ 601.045305][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 601.051277][ C1] RIP: 0010:lock_release+0x3b/0x2f0 [ 601.056470][ C1] Code: 89 fb 48 83 ec 18 65 48 8b 05 b9 e3 08 12 48 89 44 24 10 31 c0 0f 1f 44 00 00 65 8b 05 d2 e3 08 12 83 f8 07 0f 87 38 02 00 00 <89> c0 48 0f a3 05 5b 00 ea 0e 0f 82 b1 01 00 00 8b 3d b3 30 ea 0e [ 601.076067][ C1] RSP: 0018:ffffc9000b38e3c0 EFLAGS: 00000297 [ 601.082231][ C1] RAX: 0000000000000001 RBX: ffffffff8e3c45e0 RCX: ffffc9000b390001 [ 601.090211][ C1] RDX: 0000000000000000 RSI: ffffffff816bb704 RDI: ffffffff8e3c45e0 [ 601.098390][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 601.106450][ C1] R10: 0000000000000000 R11: 000000000000fdbe R12: ffffffff816bb704 [ 601.114465][ C1] R13: ffffc9000b38e478 R14: ffffc9000b38f010 R15: ffffc9000b38e4ac [ 601.122532][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 601.127842][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 601.133058][ C1] unwind_next_frame+0x3f9/0x20a0 [ 601.138093][ C1] ? shmem_file_write_iter+0x10e/0x140 [ 601.143551][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 601.149892][ C1] arch_stack_walk+0x94/0x100 [ 601.154590][ C1] ? __kernel_write_iter+0x31a/0xb10 [ 601.160034][ C1] stack_trace_save+0x8e/0xc0 [ 601.164991][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 601.170388][ C1] ? __lock_acquire+0x622/0x1c90 [ 601.175943][ C1] save_stack+0x160/0x1f0 [ 601.180365][ C1] ? __pfx_save_stack+0x10/0x10 [ 601.185310][ C1] ? post_alloc_hook+0x1af/0x220 [ 601.190258][ C1] ? get_page_from_freelist+0x10a3/0x3a30 [ 601.195971][ C1] ? __alloc_frozen_pages_noprof+0x25f/0x2470 [ 601.202036][ C1] ? alloc_pages_mpol+0x1fb/0x550 [ 601.207052][ C1] ? folio_alloc_mpol_noprof+0x36/0x2f0 [ 601.212590][ C1] ? shmem_alloc_folio+0x135/0x160 [ 601.217772][ C1] ? shmem_alloc_and_add_folio+0x494/0xc20 [ 601.223589][ C1] ? shmem_get_folio_gfp+0x67f/0x1610 [ 601.228964][ C1] ? shmem_write_begin+0x160/0x300 [ 601.234080][ C1] ? generic_perform_write+0x3c4/0x900 [ 601.239674][ C1] ? shmem_file_write_iter+0x10e/0x140 [ 601.245138][ C1] ? __lock_acquire+0x622/0x1c90 [ 601.250162][ C1] __set_page_owner+0x91/0x560 [ 601.254925][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 601.260287][ C1] ? bad_range+0x261/0x4c0 [ 601.264778][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 601.269971][ C1] post_alloc_hook+0x1af/0x220 [ 601.274750][ C1] get_page_from_freelist+0x10a3/0x3a30 [ 601.280500][ C1] ? prepare_alloc_pages+0x3c2/0x610 [ 601.285775][ C1] ? rcu_is_watching+0x12/0xc0 [ 601.290618][ C1] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 601.296499][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 601.301433][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 601.307753][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 601.312797][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 601.318164][ C1] ? find_held_lock+0x2b/0x80 [ 601.322832][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 601.327761][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 601.333715][ C1] ? policy_nodemask+0xea/0x4e0 [ 601.338578][ C1] alloc_pages_mpol+0x1fb/0x550 [ 601.343433][ C1] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 601.348827][ C1] folio_alloc_mpol_noprof+0x36/0x2f0 [ 601.354383][ C1] shmem_alloc_folio+0x135/0x160 [ 601.359318][ C1] shmem_alloc_and_add_folio+0x494/0xc20 [ 601.365031][ C1] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 601.371169][ C1] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 601.377142][ C1] shmem_get_folio_gfp+0x67f/0x1610 [ 601.382642][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 601.387586][ C1] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 601.393224][ C1] shmem_write_begin+0x160/0x300 [ 601.398334][ C1] ? __pfx_shmem_write_begin+0x10/0x10 [ 601.403779][ C1] ? timestamp_truncate+0x21e/0x2d0 [ 601.408973][ C1] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 601.415905][ C1] generic_perform_write+0x3c4/0x900 [ 601.421192][ C1] ? __pfx_generic_perform_write+0x10/0x10 [ 601.426992][ C1] ? inode_needs_update_time.part.0+0x191/0x270 [ 601.433224][ C1] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 601.439033][ C1] shmem_file_write_iter+0x10e/0x140 [ 601.444332][ C1] __kernel_write_iter+0x31a/0xb10 [ 601.449541][ C1] ? __pfx___kernel_write_iter+0x10/0x10 [ 601.455167][ C1] ? __up_read+0x1f8/0x750 [ 601.459592][ C1] ? dump_user_range+0x756/0xb70 [ 601.464565][ C1] dump_user_range+0x413/0xb70 [ 601.469355][ C1] ? __pfx_dump_user_range+0x10/0x10 [ 601.474640][ C1] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 601.480797][ C1] ? __pfx_writenote+0x10/0x10 [ 601.485575][ C1] elf_core_dump+0x29c3/0x3c00 [ 601.490350][ C1] ? __pfx_elf_core_dump+0x10/0x10 [ 601.495444][ C1] ? kasan_save_stack+0x33/0x60 [ 601.500376][ C1] ? kasan_save_track+0x14/0x30 [ 601.505229][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 601.510088][ C1] ? __kvmalloc_node_noprof+0x3a3/0x9c0 [ 601.515632][ C1] ? vfs_coredump+0x1ddc/0x5670 [ 601.520479][ C1] ? arch_do_signal_or_restart+0x8f/0x790 [ 601.526205][ C1] ? irqentry_exit_to_user_mode+0x176/0x310 [ 601.532114][ C1] ? asm_exc_page_fault+0x26/0x30 [ 601.537340][ C1] ? 0xffffffffff600000 [ 601.541643][ C1] ? vfs_coredump+0x2b9f/0x5670 [ 601.546502][ C1] vfs_coredump+0x2b9f/0x5670 [ 601.551212][ C1] ? __pfx_vfs_coredump+0x10/0x10 [ 601.556240][ C1] ? __lock_acquire+0x622/0x1c90 [ 601.561188][ C1] ? lock_acquire+0x179/0x350 [ 601.565867][ C1] ? is_bpf_text_address+0x8a/0x1a0 [ 601.571068][ C1] ? bpf_ksym_find+0x124/0x1c0 [ 601.575910][ C1] ? unwind_get_return_address+0x59/0xa0 [ 601.581578][ C1] ? arch_stack_walk+0xa6/0x100 [ 601.586429][ C1] ? stack_trace_save+0x8e/0xc0 [ 601.591278][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 601.596654][ C1] ? stack_depot_save_flags+0x29/0x9c0 [ 601.602122][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 601.607091][ C1] ? proc_coredump_connector+0x2d1/0x4f0 [ 601.612722][ C1] ? __pfx_proc_coredump_connector+0x10/0x10 [ 601.618970][ C1] ? rcu_is_watching+0x12/0xc0 [ 601.623767][ C1] get_signal+0x22e1/0x26d0 [ 601.628272][ C1] ? __pfx_get_signal+0x10/0x10 [ 601.633111][ C1] ? rcu_is_watching+0x12/0xc0 [ 601.637865][ C1] arch_do_signal_or_restart+0x8f/0x790 [ 601.643401][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 601.649552][ C1] irqentry_exit_to_user_mode+0x176/0x310 [ 601.655284][ C1] asm_exc_page_fault+0x26/0x30 [ 601.660139][ C1] RIP: 0033:0x200000 [ 601.664024][ C1] RSP: 002b:0000000000000009 EFLAGS: 00010282 [ 601.670171][ C1] RAX: 0000000000000003 RBX: 00007fd0a23e5fa0 RCX: 00007fd0a218f749 [ 601.678328][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0001000020003b49 [ 601.686461][ C1] RBP: 00007fd0a2213f91 R08: 0000000000000002 R09: 0000000000000000 [ 601.694645][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 601.702624][ C1] R13: 00007fd0a23e6038 R14: 00007fd0a23e5fa0 R15: 00007ffd8c6e0fb8 [ 601.710617][ C1] [ 601.713665][ C1] task:syz.3.1740 state:R running task stack:23384 pid:13121 tgid:13121 ppid:11986 task_flags:0x400640 flags:0x00080001 [ 601.727752][ C1] Call Trace: [ 601.731032][ C1] [ 601.733960][ C1] __schedule+0x1190/0x5de0 [ 601.738493][ C1] ? __pfx___schedule+0x10/0x10 [ 601.743349][ C1] ? __lock_acquire+0x622/0x1c90 [ 601.748378][ C1] ? mark_held_locks+0x49/0x80 [ 601.753269][ C1] preempt_schedule_irq+0x51/0x90 [ 601.758306][ C1] irqentry_exit+0x36/0x90 [ 601.762715][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 601.768793][ C1] RIP: 0010:next_uptodate_folio+0x142/0x4a0 [ 601.774697][ C1] Code: 4e e8 72 d3 c8 ff 48 89 df e8 6a 93 ff ff be 08 00 00 00 49 89 c4 48 89 c7 e8 fa 87 30 00 4c 89 e0 48 c1 e8 03 42 80 3c 30 00 <0f> 85 f6 02 00 00 4d 8b 24 24 31 ff 49 c1 ec 03 41 83 e4 01 44 89 [ 601.794653][ C1] RSP: 0018:ffffc9000adfea78 EFLAGS: 00000246 [ 601.800724][ C1] RAX: 1ffffd40002b92c8 RBX: ffffea00015c9640 RCX: ffffffff81f38436 [ 601.808774][ C1] RDX: fffff940002b92c9 RSI: 0000000000000008 RDI: ffffea00015c9640 [ 601.816731][ C1] RBP: ffffc9000adfebc0 R08: 0000000000000000 R09: fffff940002b92c8 [ 601.824694][ C1] R10: ffffea00015c9647 R11: 0000000000000001 R12: ffffea00015c9640 [ 601.832659][ C1] R13: 0000000000001eaf R14: dffffc0000000000 R15: 1ffff920015bfd7b [ 601.840621][ C1] ? next_uptodate_folio+0x136/0x4a0 [ 601.845908][ C1] ? next_uptodate_folio+0x136/0x4a0 [ 601.851187][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 601.856631][ C1] filemap_map_pages+0x1d3/0x1d50 [ 601.861647][ C1] ? __lock_acquire+0x622/0x1c90 [ 601.866584][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 601.872035][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 601.877475][ C1] do_pte_missing+0xe33/0x3ba0 [ 601.882411][ C1] ? find_held_lock+0x2b/0x80 [ 601.887074][ C1] ? __handle_mm_fault+0x1529/0x2aa0 [ 601.892439][ C1] __handle_mm_fault+0x1556/0x2aa0 [ 601.897551][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 601.903003][ C1] ? __pte_offset_map_lock+0x174/0x310 [ 601.908451][ C1] ? find_held_lock+0x2b/0x80 [ 601.913126][ C1] ? follow_page_pte+0x5cf/0x1390 [ 601.918230][ C1] handle_mm_fault+0x589/0xd10 [ 601.923417][ C1] __get_user_pages+0x54e/0x3530 [ 601.928375][ C1] ? __pfx___get_user_pages+0x10/0x10 [ 601.933768][ C1] ? __kernel_write_iter+0x5a5/0xb10 [ 601.939053][ C1] get_dump_page+0x257/0x3d0 [ 601.943635][ C1] ? __pfx_get_dump_page+0x10/0x10 [ 601.948770][ C1] ? dump_user_range+0x756/0xb70 [ 601.953696][ C1] ? dump_user_range+0x423/0xb70 [ 601.958637][ C1] dump_user_range+0x195/0xb70 [ 601.963414][ C1] ? __pfx_dump_user_range+0x10/0x10 [ 601.968791][ C1] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 601.974951][ C1] ? __pfx_writenote+0x10/0x10 [ 601.979968][ C1] elf_core_dump+0x29c3/0x3c00 [ 601.984731][ C1] ? __pfx_elf_core_dump+0x10/0x10 [ 601.989842][ C1] ? kasan_save_stack+0x33/0x60 [ 601.994679][ C1] ? kasan_save_track+0x14/0x30 [ 601.999517][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 602.004264][ C1] ? __kvmalloc_node_noprof+0x3a3/0x9c0 [ 602.009886][ C1] ? vfs_coredump+0x1ddc/0x5670 [ 602.014733][ C1] ? arch_do_signal_or_restart+0x8f/0x790 [ 602.020543][ C1] ? irqentry_exit_to_user_mode+0x176/0x310 [ 602.026494][ C1] ? asm_exc_page_fault+0x26/0x30 [ 602.031532][ C1] ? 0xffffffffff600000 [ 602.035722][ C1] ? vfs_coredump+0x2b9f/0x5670 [ 602.040599][ C1] vfs_coredump+0x2b9f/0x5670 [ 602.045278][ C1] ? __pfx_vfs_coredump+0x10/0x10 [ 602.050386][ C1] ? __lock_acquire+0x622/0x1c90 [ 602.055328][ C1] ? lock_acquire+0x179/0x350 [ 602.060036][ C1] ? is_bpf_text_address+0x8a/0x1a0 [ 602.065236][ C1] ? bpf_ksym_find+0x124/0x1c0 [ 602.069996][ C1] ? unwind_get_return_address+0x59/0xa0 [ 602.075624][ C1] ? arch_stack_walk+0xa6/0x100 [ 602.080563][ C1] ? stack_trace_save+0x8e/0xc0 [ 602.085428][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 602.090796][ C1] ? stack_depot_save_flags+0x29/0x9c0 [ 602.096260][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 602.101221][ C1] ? proc_coredump_connector+0x2d1/0x4f0 [ 602.106859][ C1] ? __pfx_proc_coredump_connector+0x10/0x10 [ 602.112831][ C1] ? rcu_is_watching+0x12/0xc0 [ 602.117690][ C1] get_signal+0x22e1/0x26d0 [ 602.122379][ C1] ? __pfx_get_signal+0x10/0x10 [ 602.127221][ C1] ? rcu_is_watching+0x12/0xc0 [ 602.132323][ C1] arch_do_signal_or_restart+0x8f/0x790 [ 602.137877][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 602.144035][ C1] irqentry_exit_to_user_mode+0x176/0x310 [ 602.149751][ C1] asm_exc_page_fault+0x26/0x30 [ 602.154589][ C1] RIP: 0033:0x200000 [ 602.158468][ C1] RSP: 002b:0000000000000009 EFLAGS: 00010202 [ 602.164711][ C1] RAX: 0000000000000000 RBX: 00007fd4139e6090 RCX: 00007fd41378f749 [ 602.172687][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0001000020003b49 [ 602.180697][ C1] RBP: 00007fd413813f91 R08: 0000000000000002 R09: 0000000000000000 [ 602.188684][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 602.196907][ C1] R13: 00007fd4139e6128 R14: 00007fd4139e6090 R15: 00007ffce18526c8 [ 602.204888][ C1] [ 602.207907][ C1] rcu: rcu_preempt kthread starved for 438 jiffies! g60205 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 602.218929][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 602.229248][ C1] rcu: RCU grace-period kthread stack dump: [ 602.235127][ C1] task:rcu_preempt state:R running task stack:28136 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 602.248602][ C1] Call Trace: [ 602.251870][ C1] [ 602.254790][ C1] __schedule+0x1190/0x5de0 [ 602.259294][ C1] ? __lock_acquire+0x622/0x1c90 [ 602.264328][ C1] ? __pfx___schedule+0x10/0x10 [ 602.269167][ C1] ? find_held_lock+0x2b/0x80 [ 602.273846][ C1] ? schedule+0x2d7/0x3a0 [ 602.278163][ C1] schedule+0xe7/0x3a0 [ 602.282246][ C1] schedule_timeout+0x123/0x290 [ 602.287086][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 602.292546][ C1] ? __pfx_process_timeout+0x10/0x10 [ 602.297822][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 602.303618][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 602.309073][ C1] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 602.313918][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 602.319193][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 602.324671][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 602.329600][ C1] ? rcu_gp_cleanup+0x7c1/0xd90 [ 602.334547][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 602.340346][ C1] rcu_gp_kthread+0x26d/0x380 [ 602.345209][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 602.350414][ C1] ? rcu_is_watching+0x12/0xc0 [ 602.355535][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 602.361012][ C1] ? __kthread_parkme+0x19e/0x250 [ 602.366157][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 602.371494][ C1] kthread+0x3c5/0x780 [ 602.375572][ C1] ? __pfx_kthread+0x10/0x10 [ 602.380348][ C1] ? rcu_is_watching+0x12/0xc0 [ 602.385105][ C1] ? __pfx_kthread+0x10/0x10 [ 602.389775][ C1] ret_from_fork+0x675/0x7d0 [ 602.394464][ C1] ? __pfx_kthread+0x10/0x10 [ 602.399163][ C1] ret_from_fork_asm+0x1a/0x30 [ 602.404040][ C1] [ 602.407077][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 602.413485][ C1] CPU: 1 UID: 0 PID: 3411 Comm: kworker/R-bat_e Not tainted syzkaller #0 PREEMPT(full) [ 602.423192][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 602.433257][ C1] Workqueue: bat_events batadv_dat_purge [ 602.438907][ C1] RIP: 0010:lock_acquire+0x62/0x350 [ 602.444202][ C1] Code: dd 08 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 a2 f9 e9 0e 0f 82 74 02 00 00 8b 35 fa 29 ea 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 b9 dc 08 12 0f 85 c7 02 00 00 48 83 c4 [ 602.464250][ C1] RSP: 0018:ffffc90000a07a58 EFLAGS: 00000206 [ 602.470348][ C1] RAX: 0000000000000046 RBX: ffffffff8e3c45e0 RCX: 000000007f1fed10 [ 602.478312][ C1] RDX: 0000000000000000 RSI: ffffffff8da0398a RDI: ffffffff8bf078c0 [ 602.486279][ C1] RBP: 0000000000000002 R08: 03813abc02fcf7df R09: 0000000000000000 [ 602.494239][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 602.502374][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 602.510327][ C1] FS: 0000000000000000(0000) GS:ffff888124b0d000(0000) knlGS:0000000000000000 [ 602.519330][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 602.525904][ C1] CR2: 000055d8ede26168 CR3: 0000000078e1e000 CR4: 00000000003526f0 [ 602.533865][ C1] Call Trace: [ 602.537137][ C1] [ 602.539971][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 602.545163][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 602.551315][ C1] unwind_next_frame+0xd1/0x20a0 [ 602.556249][ C1] ? unwind_next_frame+0xbd/0x20a0 [ 602.561346][ C1] ? __netif_receive_skb_core.constprop.0+0xa25/0x4bd0 [ 602.568199][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 602.574497][ C1] arch_stack_walk+0x94/0x100 [ 602.579341][ C1] ? __netif_receive_skb_core.constprop.0+0xa25/0x4bd0 [ 602.586276][ C1] stack_trace_save+0x8e/0xc0 [ 602.591037][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 602.596500][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 602.601708][ C1] kasan_save_stack+0x33/0x60 [ 602.606514][ C1] ? kasan_save_stack+0x33/0x60 [ 602.611356][ C1] ? kasan_save_track+0x14/0x30 [ 602.616311][ C1] ? __kasan_save_free_info+0x3b/0x60 [ 602.621697][ C1] ? __kasan_slab_free+0x5f/0x80 [ 602.626638][ C1] ? kmem_cache_free+0x2d4/0x6c0 [ 602.631569][ C1] ? __skb_ext_put+0x102/0x2c0 [ 602.636341][ C1] ? skb_release_head_state+0x1c2/0x290 [ 602.641962][ C1] ? sk_skb_reason_drop+0xeb/0x1a0 [ 602.647060][ C1] ? ip6_mc_input+0x82c/0xf60 [ 602.651721][ C1] ? ip6_rcv_finish+0x3df/0x580 [ 602.656558][ C1] ? ip_sabotage_in+0x21e/0x290 [ 602.661439][ C1] ? nf_hook_slow+0xbe/0x200 [ 602.666048][ C1] ? nf_hook.constprop.0+0x424/0x750 [ 602.671441][ C1] ? ipv6_rcv+0xa4/0x650 [ 602.675680][ C1] ? __netif_receive_skb_one_core+0x12d/0x1e0 [ 602.681751][ C1] ? __netif_receive_skb+0x1d/0x160 [ 602.687047][ C1] ? netif_receive_skb+0x137/0x7b0 [ 602.692338][ C1] ? br_pass_frame_up+0x346/0x490 [ 602.697370][ C1] ? br_handle_frame_finish+0x10e8/0x1f00 [ 602.703096][ C1] ? br_nf_hook_thresh+0x307/0x410 [ 602.708395][ C1] ? br_nf_pre_routing_finish_ipv6+0x76a/0xfc0 [ 602.714723][ C1] ? br_nf_pre_routing_ipv6+0x3cd/0x8c0 [ 602.720443][ C1] ? br_nf_pre_routing+0x860/0x15b0 [ 602.725854][ C1] ? br_handle_frame+0xb28/0x14e0 [ 602.730881][ C1] ? __netif_receive_skb_core.constprop.0+0xa25/0x4bd0 [ 602.737749][ C1] kasan_save_track+0x14/0x30 [ 602.742501][ C1] __kasan_save_free_info+0x3b/0x60 [ 602.747700][ C1] __kasan_slab_free+0x5f/0x80 [ 602.752469][ C1] kmem_cache_free+0x2d4/0x6c0 [ 602.757228][ C1] ? __skb_ext_put+0x102/0x2c0 [ 602.761995][ C1] ? __skb_ext_put+0x102/0x2c0 [ 602.766752][ C1] __skb_ext_put+0x102/0x2c0 [ 602.771339][ C1] skb_release_head_state+0x1c2/0x290 [ 602.776701][ C1] sk_skb_reason_drop+0xeb/0x1a0 [ 602.781623][ C1] ip6_mc_input+0x82c/0xf60 [ 602.786117][ C1] ? __pfx_ip6_mc_input+0x10/0x10 [ 602.791583][ C1] ip6_rcv_finish+0x3df/0x580 [ 602.796443][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 602.801814][ C1] ? __pfx_ip_sabotage_in+0x10/0x10 [ 602.807097][ C1] ip_sabotage_in+0x21e/0x290 [ 602.811773][ C1] nf_hook_slow+0xbe/0x200 [ 602.816446][ C1] nf_hook.constprop.0+0x424/0x750 [ 602.821725][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 602.827002][ C1] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 602.832713][ C1] ? ip6_rcv_core+0xbd4/0x1c30 [ 602.837653][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 602.842875][ C1] ? ip6_rcv_core+0xc70/0x1c30 [ 602.847644][ C1] ? __pfx_ipv6_rcv+0x10/0x10 [ 602.852321][ C1] ipv6_rcv+0xa4/0x650 [ 602.856471][ C1] ? __pfx_ipv6_rcv+0x10/0x10 [ 602.861144][ C1] __netif_receive_skb_one_core+0x12d/0x1e0 [ 602.867033][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 602.873556][ C1] ? lock_acquire+0x179/0x350 [ 602.878524][ C1] __netif_receive_skb+0x1d/0x160 [ 602.884023][ C1] netif_receive_skb+0x137/0x7b0 [ 602.889006][ C1] ? __pfx_netif_receive_skb+0x10/0x10 [ 602.894487][ C1] ? br_netif_receive_skb+0xff/0x200 [ 602.899884][ C1] br_pass_frame_up+0x346/0x490 [ 602.904748][ C1] br_handle_frame_finish+0x10e8/0x1f00 [ 602.910313][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 602.916369][ C1] ? ip6t_do_table+0xc25/0x1c30 [ 602.921623][ C1] ? nf_hook_slow+0x132/0x200 [ 602.926417][ C1] br_nf_hook_thresh+0x307/0x410 [ 602.931670][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 602.937607][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 602.943259][ C1] ? ip6table_mangle_hook+0xcb/0x770 [ 602.948798][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 602.954782][ C1] ? __pfx_ip6table_mangle_hook+0x10/0x10 [ 602.960681][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 602.966585][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 602.972482][ C1] br_nf_pre_routing_finish_ipv6+0x76a/0xfc0 [ 602.978641][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 602.984531][ C1] br_nf_pre_routing_ipv6+0x3cd/0x8c0 [ 602.990094][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 602.996209][ C1] ? lock_acquire+0x179/0x350 [ 603.000898][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 603.007432][ C1] ? net_generic+0xea/0x2a0 [ 603.012471][ C1] br_nf_pre_routing+0x860/0x15b0 [ 603.017537][ C1] br_handle_frame+0xb28/0x14e0 [ 603.022611][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 603.028948][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 603.034884][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 603.040199][ C1] __netif_receive_skb_core.constprop.0+0xa25/0x4bd0 [ 603.046999][ C1] ? kmem_cache_free+0x2d4/0x6c0 [ 603.051963][ C1] ? kfree_skbmem+0x1a4/0x1f0 [ 603.056662][ C1] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 603.063886][ C1] ? kfree_skbmem+0x1a4/0x1f0 [ 603.068754][ C1] ? kfree_skbmem+0x1a4/0x1f0 [ 603.073428][ C1] ? sk_skb_reason_drop+0x136/0x1a0 [ 603.078628][ C1] ? ip6_mc_input+0x515/0xf60 [ 603.083490][ C1] ? __pfx_ip6_mc_input+0x10/0x10 [ 603.088592][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 603.093780][ C1] ? __lock_acquire+0x622/0x1c90 [ 603.098900][ C1] ? process_backlog+0x3e7/0x15e0 [ 603.104094][ C1] __netif_receive_skb_one_core+0xb0/0x1e0 [ 603.109893][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 603.116306][ C1] ? lock_acquire+0x179/0x350 [ 603.121065][ C1] ? process_backlog+0x3e7/0x15e0 [ 603.126084][ C1] __netif_receive_skb+0x1d/0x160 [ 603.131108][ C1] process_backlog+0x439/0x15e0 [ 603.136229][ C1] __napi_poll.constprop.0+0xba/0x550 [ 603.141692][ C1] ? skb_defer_free_flush+0x149/0x280 [ 603.147242][ C1] net_rx_action+0x97f/0xef0 [ 603.151837][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 603.157028][ C1] ? mark_held_locks+0x49/0x80 [ 603.161785][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 603.167210][ C1] ? tmigr_handle_remote+0x132/0x380 [ 603.172487][ C1] ? run_timer_base+0x121/0x190 [ 603.177328][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 603.182702][ C1] handle_softirqs+0x219/0x8e0 [ 603.187462][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 603.192824][ C1] ? __batadv_dat_purge.part.0+0x279/0x3a0 [ 603.198714][ C1] ? __pfx_batadv_dat_to_purge+0x10/0x10 [ 603.204330][ C1] do_softirq+0xb2/0xf0 [ 603.208496][ C1] [ 603.211413][ C1] [ 603.214329][ C1] __local_bh_enable_ip+0x100/0x120 [ 603.219521][ C1] __batadv_dat_purge.part.0+0x279/0x3a0 [ 603.225239][ C1] batadv_dat_purge+0x4b/0xa0 [ 603.229912][ C1] process_one_work+0x9cf/0x1b70 [ 603.235150][ C1] ? __pfx_process_one_work+0x10/0x10 [ 603.240637][ C1] ? assign_work+0x1a0/0x250 [ 603.245235][ C1] rescuer_thread+0x620/0xea0 [ 603.250015][ C1] ? rcu_is_watching+0x12/0xc0 [ 603.254948][ C1] ? __pfx_rescuer_thread+0x10/0x10 [ 603.260141][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 603.265387][ C1] ? __kthread_parkme+0x19e/0x250 [ 603.270412][ C1] ? __pfx_rescuer_thread+0x10/0x10 [ 603.275601][ C1] kthread+0x3c5/0x780 [ 603.279768][ C1] ? __pfx_kthread+0x10/0x10 [ 603.284438][ C1] ? rcu_is_watching+0x12/0xc0 [ 603.289185][ C1] ? __pfx_kthread+0x10/0x10 [ 603.293770][ C1] ret_from_fork+0x675/0x7d0 [ 603.298369][ C1] ? __pfx_kthread+0x10/0x10 [ 603.302955][ C1] ret_from_fork_asm+0x1a/0x30 [ 603.307719][ C1] [ 603.311191][ C1] net_ratelimit: 5370 callbacks suppressed [ 603.311204][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 603.329581][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:84:55:e8:24:c1, vlan:0) [ 603.341930][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 603.354437][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 603.366946][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 603.379731][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:84:55:e8:24:c1, vlan:0) [ 603.392429][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 603.404957][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 603.417621][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 603.430123][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:84:55:e8:24:c1, vlan:0) [ 608.292983][ C1] net_ratelimit: 12458 callbacks suppressed [ 608.293000][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 608.311495][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:84:55:e8:24:c1, vlan:0) [ 608.323997][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 608.336535][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 608.349076][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 608.361665][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:84:55:e8:24:c1, vlan:0) [ 608.374167][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 608.386530][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 608.399282][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 608.411914][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:84:55:e8:24:c1, vlan:0)