last executing test programs: 27m37.477093351s ago: executing program 2 (id=1207): mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) (async) close_range$auto(0x2, 0xa, 0x0) (async) r0 = socket(0xa, 0x5, 0x0) (async) socket(0xa, 0x3, 0xff) (async) r1 = socket(0x2, 0x801, 0x100) sendmsg$auto_IOAM6_CMD_NS_SET_SCHEMA(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44010}, 0x20000054) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_5={@target_ifindex=r2, r1, 0x9c, 0x0, 0x1, @relative_fd, 0x5}, 0x96) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x8602, 0x0) read$auto(r3, 0x0, 0x1f40) (async) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) bpf$auto(0x0, 0x0, 0x6f3) seccomp$auto(0xd98, 0xffffff81, 0x0) setreuid$auto(0x15, 0x0) (async) keyctl$auto(0x4, 0xfffff7ffffffffff, 0x0, 0x8, 0x8) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0x0, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x4000000000005, 0x6, 0x62, 0x8, 0x7, 0x1, 0xb, 0x103, 0x18]}, 0x0) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) write$auto(0xffffffffffffffff, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) ioctl$auto(0x3, 0x80000541b, 0xffffffffffffffff) (async) socket(0x10, 0x2, 0xffffffff) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x109500, 0x0) (async) socket(0x2b, 0x2, 0x20a) (async) r6 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC0\x00', 0x80100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r6, 0xc4c85512, &(0x7f0000000600)={{@raw=0x7, 0x40003, 0xcf, 0x8, "16a0d89bf208384515b5375a677609aa3bc73727bb450000a2fca999d5797ab7a10a4d2bc341c4bd369ae535", @raw=0x1000}, 0x1, @enumerated=@item=[0x0, 0x7, 0x800, 0x10001, 0x0, 0x5, 0xc0000000, 0x80000001, 0x8001, 0x3, 0x0, 0xa9, 0x1, 0x8, 0x3, 0x4, 0x3, 0x0, 0x4, 0x0, 0xe, 0x1, 0x81, 0xa705, 0x1, 0x149, 0x8000, 0x3, 0x2, 0x3, 0x401, 0x3, 0x1, 0x40, 0x3cbc5dce, 0x7, 0x5, 0x5, 0x8b, 0xa, 0x80003, 0xfffff016, 0x1, 0xb89e, 0x2, 0x1, 0x0, 0x6, 0x80000000, 0x2, 0x10e1, 0x0, 0xf, 0x8, 0x7e6d, 0x6, 0x10000, 0x3ff, 0x80000000, 0x3, 0x1, 0x5, 0x441, 0x6, 0xf25b, 0x1c5, 0x9e0, 0x5, 0x4, 0xc7, 0xd5, 0x401, 0xffffffff, 0x0, 0xc7c, 0x7fff, 0x1, 0x0, 0x3, 0x4000000, 0x6, 0x1, 0x7fff, 0xcb4, 0x6, 0x18, 0x2, 0x1, 0x6, 0x7, 0x6, 0x9, 0x698, 0x2, 0x1, 0x1, 0x3, 0x975, 0x2, 0xffffffff, 0x4, 0x5, 0x800, 0x4, 0xffffffff, 0x3, 0x9, 0x7ff, 0x6, 0x6, 0x2, 0xd, 0x8, 0x3ff, 0xfff, 0x8e, 0x6, 0x100, 0x7f5e, 0x8, 0xfffffffe, 0x100, 0x0, 0x7f, 0x8000, 0x400, 0x1], "f3fadb90a56b67d92a5b28b4b23f332550b1e5454e2027fb1a37efe81bbc27deaf7c3100aab088cdb3b40dad335c9174f18934845ac3152fef1e0f42b42471efc0225a4ebe7e05ce3d4ab429805d5921633ffbce8f1a82ff9dec6c288f431cb7005b85ca8633c55d49bbdf4bd9cac1046064001bca7ba37e4b5eacf1940c9a78"}) 27m36.876618896s ago: executing program 2 (id=1208): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) mmap$auto(0x6, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0xfffffffffffffe01) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f000000adc0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1b0026bd7000fdcbdf25030000010000000000000080080011800400f28012000100898771f1c19f1779048590828847000004000280"], 0x3c}, 0x1, 0x0, 0x0, 0x4044}, 0xc800) r2 = socket(0x3, 0x2, 0x4) open(&(0x7f0000000080)='./cgroup\x00', 0x40001, 0x6) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) fchmod$auto(0x3, 0x800000000000) r3 = socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) getsockopt$auto(r3, 0x84, 0x6c, 0x0, &(0x7f0000000280)=0x1000c0) close_range$auto(0x2, 0x8000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/adsp1\x00', 0x2, 0x0) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) ioctl$auto_SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000100)="000004") close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x301001, 0x0) close_range$auto(0x2, 0x8, 0x0) bpf$auto(0x5, &(0x7f0000000300)=@bpf_attr_3={0x15, 0x24, 0xf, 0x63, 0x400000, 0x0, 0x4, 0x80f0c8, 0x60, "38c1d5cbcb9f6b5e511f0cd8ed068f65", 0x0, 0x113e33f2, 0xffffffffffffffff, 0xe4, 0x6, 0x5, 0x6, 0x8, 0x0, 0x3, @attach_prog_fd, 0x6, 0x10001, 0x6, 0x0, 0x2, r4}, 0x47) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/mountinfo\x00', 0x20d82, 0x0) ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_CREATE_VM(r6, 0x4138ae84, 0x0) 27m36.510195915s ago: executing program 2 (id=1209): fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) (async) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/net/tls_stat\x00', 0x500, 0x0) pread64$auto(r1, 0x0, 0x1ff, 0x8800000000) (async) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) (async) r3 = syz_clone(0xac259200, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$auto(0xffffffffffffffff, 0x4bfa, 0xffffffffffffffff) (async, rerun: 32) ptrace$auto(0x10, r3, 0x4, 0x8800) (async, rerun: 32) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket(0x9, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) (async, rerun: 64) madvise$auto(0x0, 0xffffffffffff0001, 0x9) (rerun: 64) mlockall$auto(0x3) ioctl$auto(0x3, 0xae41, 0xffffffffffffffff) (async) listmount$auto(0x0, 0x0, 0xf4240, 0x1) (async, rerun: 64) mlockall$auto(0x5) (async, rerun: 64) getsockopt$auto(0xffffffffffffffff, 0x3, 0x3, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40085) fsconfig$auto_SHMEM_HUGE_WITHIN_SIZE(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000080), 0x2) (async, rerun: 64) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async, rerun: 64) ioctl$auto_KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f00000000c0)={0x2, 0x0, [{0x206, 0x10, 0x1}]}) r5 = open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) copy_file_range$auto(r5, 0x0, r5, &(0x7f0000000080)=0xeb2f, 0xfffffffffffffffe, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) 27m33.530950442s ago: executing program 2 (id=1217): openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x103, 0x0) ioperm$auto(0x7, 0x6, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x18, 0x3, 0x40006) mmap$auto(0x0, 0x2020009, 0x3, 0xeb4, 0xffff7ffffffffffa, 0x8100) madvise$auto(0x0, 0xffffffffffff0001, 0x15) rseq$auto(0x0, 0x6, 0x10020, 0x4f) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001040)='/proc/asound/card1/pcm1c/sub7/info\x00', 0x28102, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), r1) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000100)=ANY=[@ANYBLOB="2ce90b7fc5afd8e829d3604f461490a3682539", @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf2514000000180001801400020077673200"/38], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r6 = socket(0x10, 0x2, 0xc) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000000000)=ANY=[@ANYBLOB="b1000000", @ANYRES16, @ANYBLOB="01002dbd7000fddbdf25030000000c0001"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40080) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRES32=r3, @ANYRES8=r4], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x4000051) write$auto(r5, &(0x7f0000000000)='-\x00', 0xfdef) madvise$auto(0x0, 0xffffffffffff0005, 0x19) readv$auto(0x3, 0x0, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r7) 27m32.647947555s ago: executing program 2 (id=1219): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x15, 0x5, 0x0) (async) r1 = socket(0x15, 0x5, 0x0) setsockopt$auto(r1, 0x114, 0x5, 0x0, 0x8000) (async) setsockopt$auto(r1, 0x114, 0x5, 0x0, 0x8000) write$auto(0xffffffffffffffff, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pivot_root$auto(0x0, 0x0) open(0x0, 0x7ffd, 0x12) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x7f, 0x82020009, 0x3, 0xeb1, 0xffffffffffffffff, 0xfff) connect$auto(0x3, 0x0, 0x10) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) (async) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/neigh/veth1_vlan/gc_stale_time\x00', 0x545602, 0x0) (async) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/neigh/veth1_vlan/gc_stale_time\x00', 0x545602, 0x0) pwrite64$auto(r2, 0x0, 0x1, 0x27) (async) pwrite64$auto(r2, 0x0, 0x1, 0x27) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0xc, 0x5) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/uvcvideo/parameters/clock\x00', 0x80, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/uvcvideo/parameters/clock\x00', 0x80, 0x0) close_range$auto(0x2, 0x8, 0x0) 27m31.348561771s ago: executing program 2 (id=1226): close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async) r0 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r0, 0x107, 0x1, 0x0, 0x8004) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) (async) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/controlC2\x00', 0x80, 0x0) mount$auto(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0) (async) socket(0x1f, 0x800, 0xffffffff) (async) ioctl$auto(r2, 0xc10c5541, r1) (async) mmap$auto(0x0, 0x9, 0x2, 0x40eb2, 0x401, 0x300000000000) (async) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) ioctl$auto(0x3, 0x400454ca, 0x38) (async) process_vm_readv$auto(0x0, 0x0, 0x800000001, 0x0, 0x4, 0xfffffffffffffffc) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket(0x80000000000000a, 0x2, 0x0) r4 = getsockopt$auto(r3, 0x11, 0x67, 0x0, 0x0) getrandom$auto(0x0, 0x8001, 0x3) (async) write$auto_tomoyo_operations_securityfs_if(r4, &(0x7f00000000c0)="8351f7bf5dc82bcb62e4acc2b57b4a38f1235bca2ac319537b8320c39821535a4be1ff7f9ca872a8ce5071cd8ffc6f951ea1d14d9bba3902f0d8e3952652b923e7bac647730b199ce991ef53a87573e0c8d818e769dd522ca2157db82dff64adcf31befbe6827c8407a1975072621c592428dc6893aa48", 0x77) (async) write$auto(0x3, 0x0, 0xfdef) 27m16.173646194s ago: executing program 32 (id=1226): close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async) r0 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r0, 0x107, 0x1, 0x0, 0x8004) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) (async) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/controlC2\x00', 0x80, 0x0) mount$auto(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0) (async) socket(0x1f, 0x800, 0xffffffff) (async) ioctl$auto(r2, 0xc10c5541, r1) (async) mmap$auto(0x0, 0x9, 0x2, 0x40eb2, 0x401, 0x300000000000) (async) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) ioctl$auto(0x3, 0x400454ca, 0x38) (async) process_vm_readv$auto(0x0, 0x0, 0x800000001, 0x0, 0x4, 0xfffffffffffffffc) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket(0x80000000000000a, 0x2, 0x0) r4 = getsockopt$auto(r3, 0x11, 0x67, 0x0, 0x0) getrandom$auto(0x0, 0x8001, 0x3) (async) write$auto_tomoyo_operations_securityfs_if(r4, &(0x7f00000000c0)="8351f7bf5dc82bcb62e4acc2b57b4a38f1235bca2ac319537b8320c39821535a4be1ff7f9ca872a8ce5071cd8ffc6f951ea1d14d9bba3902f0d8e3952652b923e7bac647730b199ce991ef53a87573e0c8d818e769dd522ca2157db82dff64adcf31befbe6827c8407a1975072621c592428dc6893aa48", 0x77) (async) write$auto(0x3, 0x0, 0xfdef) 34.385103231s ago: executing program 0 (id=7601): process_madvise$auto(0xffffffffffffffff, &(0x7f0000002dc0)={0x0, 0xc0b}, 0x2e5, 0x6, 0x0) connect$auto(0x3, 0x0, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setitimer$auto(0x0, &(0x7f0000000040)={{0x1, 0x40}, {0x0, 0x2}}, &(0x7f0000000080)={{0x9b74, 0x2}, {0x7, 0x5}}) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x6, 0x4, 0x6, 0x1a, r0, 0x4d) r1 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) read$auto_l2cap_debugfs_fops_(r1, &(0x7f0000000240)=""/177, 0xb1) timer_create$auto(0x8, 0x0, 0x0) timer_settime$auto(0x0, 0x9, &(0x7f00000000c0)={{0x7fff, 0x30d}, {0x7, 0x4}}, 0x0) rt_sigaction$auto(0xe, &(0x7f0000000580)={&(0x7f00000004c0)=0x0, 0x100000001, 0x0, {0x7}}, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x0, 0x10000) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) 33.727212406s ago: executing program 0 (id=7604): r0 = socket(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'hsr0\x00'}) (async) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) open(0x0, 0x22240, 0x155) socket(0x15, 0x5, 0x0) (async) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d64688be86d547a05c861"}, 0x55) (async) getpeername$auto(0x3, 0x0, 0x0) (async) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x3) (async) sendto$auto(r0, 0x0, 0x5, 0x0, &(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x2, {{}, 0x2}}, 0x1c) 31.899593905s ago: executing program 0 (id=7607): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x2000c054}, 0x4895) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r0, &(0x7f0000000140)={0x0, 0x82, &(0x7f0000000000)={&(0x7f0000000bc0)=ANY=[@ANYBLOB=' 6\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf250300000004000180083601"], 0x3620}, 0x1, 0x0, 0x0, 0x20000055}, 0x200400d0) 25.871982597s ago: executing program 0 (id=7624): sched_setaffinity$auto(0x1, 0x1, 0x0) (async) mmap$auto(0x0, 0x100000000, 0x101, 0x9b72, 0x2, 0x8003) (async) r0 = socket(0x2b, 0x1, 0x0) (async) unshare$auto(0x40000080) (async) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fff) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae60, 0xffffffffffffffff) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000900)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/name\x00', 0x40000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000940)=""/4096, 0x1000) ioctl$auto(0x3, 0xae64, 0x38) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) (async) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) listen$auto(0x3, 0x81) (async) poll$auto(&(0x7f0000000d40)={0x3, 0x1, 0xa}, 0x5, 0x400) (async) shutdown$auto(0x200000003, 0x2) 22.676530471s ago: executing program 0 (id=7635): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x60102, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) socket(0x3, 0x3, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x3ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x60000000000, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x0, 0x400, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sg1\x00', 0xa242, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/037/001\x00', 0x630001, 0x0) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x100242, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/crash_hotplug\x00', 0x121000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20005, 0xde, 0xeb1, r0, 0x3) setsockopt$auto(0xffffffffffffffff, 0x8, 0x0, 0x0, 0xc) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/vhci_hcd.7/usb24/24-0:1.0/usb24-port7/state\x00', 0x49cc02, 0x0) msync$auto(0xd, 0x5, 0x2) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv6/conf/team0/ignore_routes_with_linkdown\x00', 0x44aa81, 0x0) sendfile$auto(r3, r2, 0x0, 0x1000202) mmap$auto(0x0, 0x2000c, 0xe1, 0x20eb5, 0x40000000000a5, 0x8000) 11.625872456s ago: executing program 0 (id=7664): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) (async, rerun: 64) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0xc7f16bff2a10ba01, 0x0) (async, rerun: 64) write$auto(0x3, 0x0, 0xfffffdef) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) (async) shmdt$auto(&(0x7f0000000100)='\x00') (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) (async) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) ioctl$auto_PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f00000000c0)={0x9, &(0x7f0000000040)={0x5, 0x9, 0x9}}) (async) semctl$auto(0x7, 0x2, 0x13, 0x1) (async, rerun: 64) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async, rerun: 64) ioctl$auto_TCFLSH2(r0, 0x5408, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x300, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/tty/ttyr3/dev\x00', 0x40200, 0x0) (async) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0) fstat$auto(0x2, 0x0) (async) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) (async) ioctl$auto_IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r1, 0x40085500, 0x0) (async, rerun: 64) close_range$auto(0x2, 0xa, 0x0) (rerun: 64) 7.840547643s ago: executing program 4 (id=7676): close_range$auto(0x2, 0x8, 0x0) socket(0x3, 0x800, 0x2) socket(0x2c, 0x6, 0x88) bind$auto(0x3, &(0x7f0000000000)=@generic={0xa, "dfffffffffffffff00"}, 0x6a) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = syz_clone(0x4200, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001ec0)='/sys/power/mem_sleep\x00', 0x2402, 0x0) write$auto(r2, &(0x7f0000000040)='\x00)\xe8\xc7.\xf0\xb0f\xd2\x02\x00>\x00\x10\x1a\x13I]{\xe0\n\xd4n\x9f\xae\xed\xcd6\x9f\xf6\x01\x00s\xa6\x03y\x97\x0eR\xb8\xb7\xcc\x83\xb8O\xe5\b\x80\xd0\xd7\xc0+:\x17\x8d\xf4A\xdc\xd4A`\xdb\x80E|X\xc3\xa4H\xb9\xd8\x03*\x9c\x00\x00\x00\x00\x00\x00\x00', 0x100000001) r3 = socket(0x23, 0x80805, 0xfffffffc) getsockopt$auto(r0, 0x4, 0x1, 0xfffffffffffffffc, 0x0) fcntl$auto(r0, 0x402, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) r4 = socket(0x2b, 0x1, 0x1) r5 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f00000000c0), 0x84180, 0x0) ioctl$auto_PPPIOCSMRU(r5, 0xc004743e, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, r3, 0x10000008000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001480)={'veth0_virt_wifi\x00'}) munmap$auto(0x8000, 0xfffffff7) getrandom$auto(0x0, 0x6000000, 0x3) remap_file_pages$auto(0x6a29, 0x1000, 0x0, 0x7, 0x4) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={r1, 0x4, 0x4, 0x880b, 0x8, 0xd, 0x66b, 0x4, 0x7ff}, 0x3) 4.541717373s ago: executing program 1 (id=7680): r0 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D1p\x00', 0x80, 0x0) mmap$auto(0x800000, 0x9, 0x100000001, 0x8000000008011, r0, 0x1ffc00000) 4.375179877s ago: executing program 1 (id=7681): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendfile$auto(r0, r0, &(0x7f0000000140)=0x6, 0x4) mmap$auto(0x0, 0x2020009, 0x2, 0x10, 0xffffffffffffffff, 0x8000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) mmap$auto(0x2, 0xaa06, 0xdf, 0xeb1, 0xffffffffffffffff, 0x2) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r1, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) shmctl$auto_SHM_STAT_ANY(0x80, 0xf, &(0x7f0000000600)={{0x100000, 0xee00, 0xee01, 0x48db, 0x6, 0x8d30, 0x9}, 0x7, 0xffffffffffffffff, 0x2, 0x4d6e, @inferred, @raw=0x10001, 0x7, 0x0, &(0x7f00000004c0)="08648fa4d1484cb35a00146faeeecd526272aa806639539bd6c2c1eb387267c8f658dd9d5eb56a83da47493660e1db2e91c7d7944decf953b5277a3e97de97d6cdee9036b1108b38f5aa33b0f55653c44bd1ece23c016f88480f24435516c07c35a02abde2316f450d18f461b3ae4f833635de3ee589d31476b4c7472326c1db38a57bdc9c125b4a7114855c60457c2154c4f8774b83ceeae990e56bd4456a7d5530753bc8590214d43a7a7cc7f73123a281a0325c4bb2", &(0x7f0000000580)="203fbab293ec9f5905492e3c212837ca9eeb56b7c8512ca424932744d90b4e3328d37600a6e6540107aaa9f38c90cc3678e73bb35f709faadb621848ee706c70a055f1429d474cd626f1bae0eb1b8a26b1c4c915277533543c1aa0044fcdb642a91cc7b35bec2d86f2dbf035a7691d8dab44bcd0a14a895019bfab40afabc0"}) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r2, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x8004, 0x2e) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r3 = socket(0x1e, 0x6, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/midi2\x00', 0x80102, 0x0) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5,\xcc\xfa`\xfa\x90\xf0C\xdc\xbebBW\x8a\x95\xf4\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x9ef\x19R\xff\xd2\xd8\x98\xa8\x17\xcb\x84\xe8\xfb\x00`\xc2\xce~U\xca\\\xc1\xb7\xf1\n\xb9\xbfk\x1e\xdb\xed\x81{\x1f\x18j\x16\rk\x0eO\xe3\xa78&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3\x846&\x1a\xbb\x9c:e\x9c\x18\x11\xf0\x8eQ\xd8\x8a3^?\x13\x00\xcbx\xb2\x18e\x95$\x9d\x804', 0x100000a3d9) sendmsg$auto_HSR_C_GET_NODE_STATUS(r3, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[], 0x1c}}, 0x8000) mmap$auto(0x0, 0x2020009, 0x8000000007, 0x11, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20008, 0x4000000000df, 0xeb1, 0x401, 0x8000) read$auto_nvram_misc_fops_nvram(r5, &(0x7f0000000680)=""/204, 0xcc) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r6, 0x0, 0xfff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/loop15/queue/discard_granularity\x00', 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000100), r7) 3.905038542s ago: executing program 1 (id=7683): sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0xb, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) socket(0xf, 0x3, 0x2) sendmsg$auto_NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000980)={&(0x7f0000000a00)=ANY=[@ANYBLOB="84040000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRESDEC=r0, @ANYBLOB="6bdcfab5378d649e3de0430fe973edc77255054d7f48a18d127fdfdd6c45ff62c4a93301f585da9944f856b5e8ec78e990d5e85d921cbaa2951574134698dae2c79cc487e2061d5eb9cb1fea11293ed2f70b9ee735e78fd4e885176be00e1933039007581fafdcba1cda83d9787b054c388e3b499310977542eb845c0f63abaa6265d01d594a6660f23d5f4c314676a2bc66c986914641f9d1dd13541546fdaa84703f24b29421211b9e5480e08df32c92232e103eeff6bed4a739df778c603ddd13acf5b897ee6a9e171fd4c3c23bab06454ec6bd6e9eb7791cda2cc98fb95e0005001d000500000006001401ac0b0000"], 0x484}, 0x1, 0x0, 0x0, 0x4004041}, 0x40100) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D1\x00', 0x660040, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000001500)='/proc/kpagecgroup\x00', 0x101000, 0x0) memfd_create$auto(0x0, 0x7) select$auto(0x6, 0x0, 0x0, &(0x7f0000000380)={[0x202, 0x3, 0x1003, 0x1, 0x948b, 0x3, 0x9, 0xfffffffffffffffd, 0x3, 0x62, 0x7, 0x7, 0x6d3f, 0x9, 0x4, 0x5]}, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x401bf, 0x7352, 0x43, 0x6, 0x1ffde, 0x7, 0x3, 0x2, 0x9, 0x3, 0x5, 0x4, 0x3000, 0x200, 0x6, 0x10003, 0x83, 0x4, 0x0, 0x7, 0x1ffc, 0x203, 0x400, 0x84}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) setfsgid$auto(0xee00) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000080)="af101b8f8a7d3fb11541234c841ad04ef950bd816b1a4f98cd92c3e2a12357557135aad56ced71a1f0d966c275daa2c99a9c0ad115b322b5d8183b96ab92708cc68cbbdfb3df131db9a98348c8", 0x7, 0xa505}, 0x800}, 0x7, 0x4008) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 3.284922616s ago: executing program 4 (id=7684): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty51\x00', 0x40001, 0x0) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x20008, 0xdf, 0xeb1, r0, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket(0x2, 0x2, 0x1) socket(0x2, 0x801, 0x106) socket(0x26, 0x80805, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x145) fanotify_mark$auto(0x0, 0x1, 0x9, 0x4, 0x0) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) setresuid$auto(0x2, 0x7, 0x8080) ioprio_get$auto(0x3, 0x2) capset$auto(&(0x7f0000000100)={0x20080522}, 0x0) r1 = socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(r1, 0x89a0, 0x4) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) setsockopt$auto(0x400000000000003, 0x88, 0x22, 0x0, 0x0) ioctl$auto(0x3, 0x5605, r0) 3.125760196s ago: executing program 3 (id=7685): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c00)={0x14, 0x0, 0x100, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x2000c054}, 0x4895) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r0, &(0x7f0000000140)={0x0, 0x82, &(0x7f0000000000)={&(0x7f0000000bc0)=ANY=[@ANYBLOB=' 6\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf250300000004000180083601"], 0x3620}, 0x1, 0x0, 0x0, 0x20000055}, 0x200400d0) 3.033175697s ago: executing program 4 (id=7686): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SEND_BEACONS(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000326bd706bbd8b24ade38f9ab644002900fbdbdf252600ff072ee7e42d26a21c741fdfd2a872c17360b40c74c6943c9da42d8cd31c447f46b420ce242da04bbb58b4db72c68f4d75cf094fd3d3f51540023a"], 0x20}, 0x1, 0x0, 0x0, 0x48014}, 0x40080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) keyctl$auto(0x2000000000000017, 0x8000, 0x2d, 0xc4, 0x20803) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, r0, 0x20) (async) close_range$auto(0x2, r0, 0x20) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff, 0xa505}, 0x800}, 0x1000007, 0x4008) write$auto(0xffffffffffffffff, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) (async) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) (async) lsm_list_modules$auto(0x0, 0x0, 0x0) socket(0x2, 0x801, 0x106) (async) r2 = socket(0x2, 0x801, 0x106) getsockopt$auto(r2, 0x11c, 0x3, 0x0, 0x0) ioctl$auto_OSS_ALSAEMULVER2(0xffffffffffffffff, 0x80044df9, &(0x7f0000000040)="269244866c57e9ee16ea3bea635905287985616aff5c410a514c975ce460a0") mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r3 = socket(0xa, 0x801, 0x100) setsockopt$auto(r3, 0x6, 0x2, 0x0, 0xfb3) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x38, 0x663, 0x7fffffff, 0x7, 0x3, 0x20000002, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x6, 0x10003, 0x80, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x8, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x1fe, 0xd) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x10000002, 0xffffffffffffff34, 0x40000000000) (async) sysfs$auto(0x10000002, 0xffffffffffffff34, 0x40000000000) sysfs$auto(0x1, 0x0, 0x8000) (async) sysfs$auto(0x1, 0x0, 0x8000) r4 = pidfd_open$auto(0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) tee$auto(r4, r4, 0x4, 0x5) ioctl$auto_tracing_buffers_fops_trace(r4, 0x100000000, &(0x7f0000000400)="36c3dd5b5d46ce3b26823aeb8ba2936b559216ba5f28398c8f4f123ddc88e9db4eb92d612af0ed9176a446e5ef") (async) ioctl$auto_tracing_buffers_fops_trace(r4, 0x100000000, &(0x7f0000000400)="36c3dd5b5d46ce3b26823aeb8ba2936b559216ba5f28398c8f4f123ddc88e9db4eb92d612af0ed9176a446e5ef") 2.906410991s ago: executing program 3 (id=7687): sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4044000}, 0x800) fanotify_init$auto(0x5, 0x6) socket(0xa, 0x2, 0x0) socket(0x21, 0x2, 0xa) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) r1 = socket(0x10, 0x3, 0x6) r2 = socket(0x15, 0x5, 0x0) pipe$auto(&(0x7f0000000140)=r2) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, r1, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) socket(0x8, 0x2, 0xfffffffc) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) fadvise64$auto(r3, 0x7fff, 0x6, 0x1) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r4 = fanotify_init$auto(0x1, 0x2) fanotify_mark$auto(r4, 0x205, 0x100002, 0x4, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/cifs/LookupCacheEnabled\x00', 0x48041, 0x0) setrlimit$auto(0x7, &(0x7f0000001380)={0x5, 0x6}) socket(0x22, 0x1, 0x0) socketpair$auto(0x3, 0x5, 0x7, 0x0) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x8029, 0xca, 0x0, 0x567) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) 2.789715295s ago: executing program 1 (id=7688): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x20b42, 0x0) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) madvise$auto(0x0, 0xffffffffffff0006, 0x6) (async) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x4002, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0xa, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) open(0x0, 0x22240, 0x154) connect$auto(0x3, 0x0, 0x55) (async) mmap$auto(0x0, 0x400008, 0xdc, 0x9b72, 0x2, 0x8000) (async) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/tcp\x00', 0x181800, 0x0) pread64$auto(r0, &(0x7f0000000000)='/proc/thread-self/net/tcp6\x00\xd2)\x8e\x892\x82\x19\xfd\x03\xc3\x8d\xd7D\bz\xde5u4\xddS\xe6\x1a\x8a`\xad0\x98|\xbc\x00\x98\b\x0ey\xcb`\x9b\x91r\xd5\x13\x9e\xdd4\xe7\xb7\x94P\x8fBlm\x04eAW\xbc0\x9b\xbd\x8f\xf5];\x94\x18\xf0\v\xd7\xf4P\xd3\x9e,Q\xd8\x16\x989l\x03\a\xcc\x1e\xb9\xe9{\xeeS\xa9\xc60\x00\xb5&\x9e\xdbk{F\x18\xa8\xba*G\xd3\x80\xb1G.\xec1\x96uP\x97\x8co\xf1\xa6\xd5\xea\xc8L3|a\xb3\xaa\x90~Y\xb19\xad\xdc\x05o\x98g\xd4\x10]5\x95\xd0\xabJC\x06\xd0c\xd1Ra\xf7\xc4n\xdf\xe4\xc7\x03\x19x\xbb\v\x00\t\xde\xf5\x93\xfb\xfb#\xbd\xc0S\f57\x83\xdd\xaa\xf0\x9c\xd3G\xe1\x00'/232, 0x3ef, 0x9) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) close_range$auto(0x2, 0x8, 0x0) (async) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$auto_UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000100)={0x5eea, 0x7, [{r1, 0x0, 0x4, 0x6}]}) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async, rerun: 64) socket(0xa, 0x3, 0x3a) (rerun: 64) setsockopt$auto(0x400000000000003, 0x29, 0xd4, 0x0, 0x4) prctl$auto(0x23, 0x20000000000000b, 0x7fffffffefff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002c000004001d0004000e0000000000000000000014d85e9e70bdcde9e6630772d8077610eabf5f900bd55571421ee76f74bf226aa82887a46f2738143a80027176565970acd9757b032f2393a18cdaabba10cf201342167c0fb8e990e595d004cb238cfc488f8b7d88fea7224885af5f2209db91a3d2861038892d1f5aa94a08adeb7dad4ef9ad967e9340bb57bb6d5bb5e504ce691e67a61e1abb21a7c65e3d06fa0b2449900780f4f3608e45e5a9f82b71554e8cab6a7620c90b032d66316962810342b985"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) r4 = socket(0xa, 0x801, 0x84) (async) clock_nanosleep$auto(0x5, 0x1ff, &(0x7f0000000000)={0x7, 0x8}, &(0x7f0000000040)={0x7, 0x80000001}) getsockopt$auto(r4, 0x84, 0x6f, 0x0, 0x0) syz_genetlink_get_family_id$auto_ioam6(0x0, 0xffffffffffffffff) 2.324586073s ago: executing program 4 (id=7689): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_CGROUPSTATS_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x25, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x400c9d0}, 0x4080) r1 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000440)=ANY=[@ANYRESHEX=0x0], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff14, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r0], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x200440c0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x8001c01, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x7}, 0x3d55, 0x0) (async) sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x8001c01, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x7}, 0x3d55, 0x0) r2 = socket(0x10, 0x2, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'xfrm0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'xfrm0\x00'}) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) write$auto(r2, &(0x7f0000000000)='-\x00', 0x2fb) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x86, 0x0) (async) r4 = io_uring_setup$auto(0x86, 0x0) r5 = gettid() tkill$auto(r5, 0x7) r6 = getpgrp(0x0) kcmp$auto(r5, r6, 0x7, r4, r4) (async) kcmp$auto(r5, r6, 0x7, r4, r4) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) fsconfig$auto(r7, 0x2, &(0x7f0000000080)='I\xee\"\xe3\xb7\xcfD\xe5\xb1\x05\x1e#\xff1<\xd9h[e\xdf\xc0M\xa2\x00\v\x97\xb5\xd4\x94\x99u\x9e\xf4O\x1a\xb1\x05\xb8\xcb\x96X\a\xc8\xb7\x97\xc7M\x83\'^\xc9\x9e\xccAsv\xce8sw\v\xac\xcd\xa2B\xf8.\xce\xe6n\xfe\xd6\xc8^W>Rz`C+\x0e\x8c<\xc5\x8f\xe6\x0f\x14\xfa\x9ea4>\xd8O[{\xede\xfd\xbc\xc7\xbd4_\xbc\xc6\x06\xe5h\x9e\xf5/4\xe8\xcfc\x95\xbb~\xd9.\xb3\x84\xb8K\xa7\xca\xda\xc8\x11u\xa1\x1d\x9d\xe1%\xc0m\xf6%1\xba\xe7^\xed0\xdc\x86\xeaG)?p,Up \xe9\b\x14\xaf\xbf\xd9\xc3,\xb8\x17\x10\x9f\x92\x95@),A\xb4\x92Q\x86\xbe\xed=p\x9c\xbd\xba#_]K\xce.\x00\x00\x00\x8eDv\x0fl\xed\x93ey\xf9\x19\xf0\x9d\xf5\xfe\xed\xc7Q\xc0ZJ\xc9*7\xf2\x1a\xa7\xb3\xc6v\v\xe1u\x16:\x15\xefel\xf0\x8c/\xa2\x95\xc1\xacd\xc9\a\xe5\x888F\xaa\xce\x94\xa2:sx\xea\x96\x7f~]\xdbj\xd1#\x94K\xcf\x11l\xe5Z\xec\xa6B\x90\xb6\xa3`\x88\xd4\x87\x17\x8a\x00\x00x\x95#\x83\x99\x00\xc6Z\x1au\x8e\xa7}\xa7\xe9\x83X\xa3\xad\xe2T\xea\xa0\xba\xd7R8T\x8e0h\x8ck4\x15\xf3sh0\xd3\x1e\xedU@\xab\xc0g\xeeT\xc5\x8d\x9b\x188x)\xf0i]\xdcf\xdd\xf9\xffA\"ZQ\x8d\x15\xff\xf3\xb36\x1d\x8e7\xb2d3\xe8\xf4\x1e3\xec\xfe\xbf\xbbo\xbb\xd2Z\x89:\xa2\xc8n8k\xa8\xba\xa5E\x9f\xbe>3,\xcb\xa2\xa7q \xe2P\x8a\xb1Vh\x94$\xe9\xea\x0f!G\xb9\xb3\x11\xe1\xae\tg\xc2?8\x8e8\xce\xbf\x01W\xbc\x8b\xab\xa9\x91j\xcd\xb9`F\x02\'\x05\xb1d\xff\xedB\xa5W(q\xfa\xad\x9be\xbfX\x14\xb9\xf8\x1a\xe9\xed\xe6\x1a', 0x0, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r8) sendmsg$auto_NL80211_CMD_GET_WOWLAN(r4, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="18201f006876df07b1138c79cac23570d4dcca799182d9e440544e8348d1c5090da21db2149418ec5e7d8f9f5ef0a6fa0ed077892cc6ed5bba664b318c58d8333513a11f44166065afcd7e6e", @ANYRES16=r9, @ANYBLOB="00032bbd7000fcdbdf25490000000400dd00"], 0x18}, 0x1, 0x0, 0x0, 0x4044401}, 0x81) close_range$auto(r7, 0x8, 0x0) (async) close_range$auto(r7, 0x8, 0x0) 2.320650906s ago: executing program 3 (id=7690): openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async) mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x80000000000000a, 0x2, 0x0) socket(0xa, 0x801, 0x84) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async, rerun: 32) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) (rerun: 32) socket(0x10, 0x2, 0x0) (async, rerun: 64) memfd_secret$auto(0x0) (async, rerun: 64) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram8/dev\x00', 0x488981, 0x0) (async, rerun: 32) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (rerun: 32) prctl$auto(0x3e, 0x1, 0x0, 0x800000000001, 0x0) (async) write$auto(r0, &(0x7f00000005c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D_#\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc^:\xd1\xe3\xf1@\xc0\x93^:Mn#Oi\xaa[X\x93)\x8f\x03K\xe6\xa4\x11?\xf1\x02+\\\xf9\x8b\xe5l5\x11\x006c\x907E\xeb\x81\fB\xe3\xf8n\x8f\x94V\xbcB\x9cm\x9f\x15\x00Q\xf8\x8fFW#?\xd5Z~\xa51\x832\xbd|\x19\xda\x8e\xff\x17\r\x96\xa3\xcc+\xf4a\xffN\xd2_\xe5\\\xf8Lzc\xd4\xa0\x1f\x04_\xf1\xc6\fO\xbe?)Q\xc7\\B\xdb\xeaI\xde\xe9m\xf5\xf9\x19\xd3@IK\xe3c\x0ek\x8drZ\xad\xdc\xbb\xfc\xd4\x1f\xdaOW\x87\xb6Fm\x12\xadw(z\\j\xcc0P\xaeC\x9f\xbf\xd5\xf9\xe3\x85~cG\f\x85\xd6\x84ma\xfd\xdayNj\x80\xdd3^\x87,\x14\x8e\xbe$\x05\x8a\xb0 M\xf6$B TCs\xa9\x91dil[\xfc\a\xbfD\xd9\x8d(F\x1e\f\xec\xe9K|h\xf5\xcaUI\x18#\xbed\xa8C\x8a\xbb\fE\xe6\xa3|\xf7\xa8\xbb\xd3\x97l.V/uc\xb5Q\x1eY\xe0\x03\xa1\xc1\xc8\xe2=RK\x7fWV;\xe4\xccTsf\xa7[\xdd\x9cR\xab\xf81s\xbc\x9c\xaaSGH\x9al\xb9%u\v\xb4\x9d\x95\x16\x01\xbbT\x99S\xf8A\xcd\bRC\xf4\xb0\x1a%\xdd+1\x81\x9d6\x90\xe8\xc6\xc1\x1e\xf0~\xaf\x10g&\xd6\x01l::V\xdbJiVW\xab4G\x97\x9cl', 0x100000a3d9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) (async, rerun: 32) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/lo/disable_ipv6\x00', 0x40001, 0x0) (rerun: 32) lseek$auto(r2, 0xffffffffffffffff, 0x1) write$auto(r1, 0x0, 0x98c7) (async) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000900)='/sys/kernel/debug/block/nbd0/hctx0/sched_tags\x00', 0x60100, 0x0) (async) mmap$auto(0x0, 0x400008, 0x7d3, 0x9b72, 0xffffffffffffffff, 0x5cd) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, 0x0, 0x7, 0x6) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000940), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000004740)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_ADD_TX_TS(r5, &(0x7f0000004800)={0x0, 0x0, &(0x7f00000047c0)={&(0x7f0000004780)={0x1c, r4, 0x21d, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80d4}, 0x480) (async) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r4, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0xc}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x8040000) r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/udplite6\x00', 0x0, 0x0) pread64$auto(r7, 0x0, 0x9, 0xffff) 1.576545876s ago: executing program 4 (id=7691): rt_sigsuspend$auto(0x0, 0x8) sysfs$auto(0xe, 0xfffffffffffffffd, 0x100000000001) r0 = socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(r0, 0x0, 0x400fffd, 0x0, 0x0) select$auto(0x4, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x1, 0xd, 0x250, 0x100000001, 0x3, 0x2017d, 0x4, 0x40, 0xd, 0xd59, 0xfb, 0xff, 0x21, 0x100000001]}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket(0xa, 0x1, 0x100) r1 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r1, 0x0, 0x7ff, 0x400) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/conf/ip6tnl0/bootp_relay\x00', 0x5014c0, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x8800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) ioctl$auto(0x3, 0x2287, 0xffffffffffffffff) socket(0x23, 0x80805, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) write$auto_proc_mem_operations_base(r3, &(0x7f0000001680), 0x0) madvise$auto(0x0, 0x20200, 0x15) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) 1.462525782s ago: executing program 1 (id=7692): unshare$auto(0x40000080) socket(0x1f, 0x801, 0x100) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x20009881) (async) socketpair$auto(0xfffffffe, 0x1, 0x5, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) r0 = socket(0x11, 0x80003, 0x300) mmap$auto(0xfffffffffffffffd, 0x20009, 0x4000000000df, 0x40000000000eb5, r0, 0x10001) (async) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) (async) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x101, 0xdf, 0xeb1, r1, 0x8002) (async) socketpair$auto(0x8, 0x2, 0x0, 0x0) r2 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000002640), 0x0, 0x0) ioctl$auto_USB_RAW_IOCTL_INIT(r2, 0x41015500, &(0x7f0000000140)={"a7a018b09bb196a05739a38a73473b93f5452886bc599ef976c54a71a5ce72a9af15390e93a8760df83859e16320e8d0b1161f13d12afae66b1d900a49586aa98d3504ca431aabab1964249251e57fa70517cc19b0e3974dc2a89e90c932b8859c767780d65e849700", "e600d778e82f8b8db7e27a036e39a8ac08de7e036d650e2184857e6b64f6a2c7fb08c6f5ce3828fb4e9498c076bef49c99c9cd91332e12b53664dc20fa879020fbd184c0d300c13be6047a70685ce029fb2385ae6e132c1c6adbcfbd873a3b925d397a08e8733e19ef5ec4f40b0b473c72efd18b8a9e9f3d12c5e44468922beb", 0x3}) (async) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000001680)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2481, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) (async) r3 = epoll_create$auto(0x6) sendmmsg$auto(r3, 0x0, 0x9a3, 0x40a) (async) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) write$auto_tty_fops_tty_io(r4, &(0x7f0000000580)="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", 0x975) mmap$auto(0xf, 0x40009, 0xe2, 0x7f8000000000013, 0xffffffffffffffff, 0x28000) (async) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0c/sub7/status\x00', 0x4800, 0x0) read$auto_proc_reg_file_ops_compat_inode(r5, &(0x7f0000000240)=""/7, 0x7) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/zram0/io_stat\x00', 0x40100, 0x0) 1.273502616s ago: executing program 1 (id=7693): close_range$auto(0x2, 0x8, 0x0) socket(0x3, 0x800, 0x2) socket(0x2c, 0x6, 0x88) bind$auto(0x3, &(0x7f0000000000)=@generic={0xa, "dfffffffffffffff00"}, 0x6a) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = syz_clone(0x4200, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001ec0)='/sys/power/mem_sleep\x00', 0x2402, 0x0) write$auto(r2, &(0x7f0000000040)='\x00)\xe8\xc7.\xf0\xb0f\xd2\x02\x00>\x00\x10\x1a\x13I]{\xe0\n\xd4n\x9f\xae\xed\xcd6\x9f\xf6\x01\x00s\xa6\x03y\x97\x0eR\xb8\xb7\xcc\x83\xb8O\xe5\b\x80\xd0\xd7\xc0+:\x17\x8d\xf4A\xdc\xd4A`\xdb\x80E|X\xc3\xa4H\xb9\xd8\x03*\x9c\x00\x00\x00\x00\x00\x00\x00', 0x100000001) r3 = socket(0x23, 0x80805, 0xfffffffc) getsockopt$auto(r0, 0x4, 0x1, 0xfffffffffffffffc, 0x0) fcntl$auto(r0, 0x402, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) r4 = socket(0x2b, 0x1, 0x1) r5 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f00000000c0), 0x84180, 0x0) ioctl$auto_PPPIOCSMRU(r5, 0xc004743e, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, r3, 0x10000008000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001480)={'veth0_virt_wifi\x00'}) munmap$auto(0x8000, 0xfffffff7) getrandom$auto(0x0, 0x6000000, 0x3) remap_file_pages$auto(0x6a29, 0x1000, 0x0, 0x7, 0x4) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={r1, 0x4, 0x4, 0x880b, 0x8, 0xd, 0x66b, 0x4, 0x7ff}, 0x3) 792.482223ms ago: executing program 3 (id=7694): openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) clone3$auto(&(0x7f00000002c0)={0x4, 0x9, 0x1, 0x2, 0x8000, 0xffffffffffffffff, 0x7, 0x3, 0xffffffffffffffea, 0x8, 0x200}, 0x7) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptyzf\x00', 0x2200, 0x0) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20681, 0x0) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.5/usb6/maxchild\x00', 0x8000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000180)=""/255, 0xff) (async) syz_genetlink_get_family_id$auto_smc_gen_netlink(0x0, 0xffffffffffffffff) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000200)='5', 0x1) (async) capset$auto(&(0x7f0000000340)={0x19980330}, 0x0) clock_nanosleep$auto(0x1, 0x200, &(0x7f0000000140)={0x0, 0x2800000a}, 0x0) (async) select$auto(0x3c5, &(0x7f00000000c0)={[0xeeda, 0x7, 0xfffffffd, 0x9, 0x6, 0x1ff, 0x6, 0x6, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, &(0x7f0000000200)={[0x8, 0x4, 0x2, 0xb, 0x1, 0x9, 0x0, 0x7fff, 0xa, 0x193, 0xfffffffffffffff9, 0x3, 0x5e4, 0x1000, 0xffffffffffffffff, 0x1]}, &(0x7f0000000380)={[0x8000000000000001, 0x5, 0x1, 0x10001, 0xe, 0xf, 0x8, 0x3, 0x59fc8000, 0x200006, 0x8000000000000000, 0x3, 0x800, 0x7, 0x1ff, 0x5]}, &(0x7f0000000280)={0x6, 0xca}) (async) select$auto(0x7, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x40841, 0x8) (async) io_uring_register$auto_IORING_UNREGISTER_PERSONALITY(r0, 0xa, &(0x7f0000000180)="221aa2a2e1a47c16e9b935b36eb66fa98ca6d90b78e1fc1799ad1e15807c54f58fa1ee6c6927048cbda12b4e1ad0336a4b88db6e5c7e4fedd6852f33d0b576", 0x2f) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(r4, 0xa, 0x1) (async) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000400)=""/199, 0xc7) (async) socket(0xa, 0x5, 0x94) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dri/card0\x00', 0x6c800, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = ioctl$auto_TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000080)=0x3) read$auto_proc_fault_inject_operations_base(r5, &(0x7f0000000480)=""/245, 0xf5) unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) 541.901159ms ago: executing program 3 (id=7695): unshare$auto(0x40000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_GET_TXSC(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001940)={0x14, r1, 0x186f202170196f7b, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x200008d0}, 0x40080c4) 385.403352ms ago: executing program 4 (id=7696): mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) r1 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000080), r0) sendmsg$auto_NFC_CMD_GET_SE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000020}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_NAME={0x5, 0x2, ')'}, @NFC_ATTR_RF_MODE={0x5, 0xb, 0x3}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x8}, 0x4008005) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_CREATE_VM(r2, 0xc018ae85, 0x0) openat$auto_userfaultfd_dev_fops_userfaultfd(0xffffffffffffff9c, &(0x7f0000000180), 0x1000, 0x0) select$auto(0x81, &(0x7f00000001c0)={[0x6, 0x10001, 0xb, 0x79, 0x0, 0xb, 0xc, 0x6, 0x5, 0x382f80000000000, 0x2, 0x8, 0xe00000000000000, 0x8000000000000001, 0x5]}, &(0x7f00000002c0)={[0xc8, 0x100, 0xff, 0x2, 0x6, 0xfffffffffffffffe, 0x4, 0x6, 0x80000000, 0x100000001, 0xc, 0x2, 0x80000000, 0x7, 0x6, 0xfffffffffffffff9]}, &(0x7f0000000340)={[0x0, 0x1, 0x2, 0x626, 0x1, 0x2, 0x9, 0x3ff, 0xb, 0x8, 0x10001, 0x10001, 0x7f, 0xfffffffffffffff8, 0x7, 0x7]}, &(0x7f0000000240)={0x5, 0x6}) 0s ago: executing program 3 (id=7697): r0 = inotify_init1$auto(0x4) writev$auto(r0, &(0x7f0000000000)={&(0x7f0000000080)="923b5b18614bd9a041dd508509f5efeaf078429b2f30bf4d6fd47d40a0a7a930565c1c49833b475ea2e4fa1062c1b9aef3c3374055787b7fbd0176626fa107f8bd90a7191749a7a951318270e62e1bc3368d6a414efdd8da9d8da3f43792f7c88e867eaeb7cee05526af9fd524f904c904b17ae23e23138cd8ec805a8f29ebd5fea5247c9a31d857cdd893b577bad219d912963a691cffc78b4ab6d395fe7cbcd1f4e584749ddef26456aeabdfc9f259e9858805566d0fc06f81ced7e9", 0x7}, 0x80000001) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) openat$auto_kernel_debug_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x6) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mlockall$auto(0x400) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0) fadvise64$auto_POSIX_FADV_SEQUENTIAL(r1, 0x5, 0x8008000000000002, 0x2) ioctl$auto_PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000040)={0x236, 0x0}) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb4, r0, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x8, 0x0, 0x1, 0x1) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0xa, 0x0) r4 = socket(0xa, 0x3, 0xff) connect$auto(r4, &(0x7f00000018c0)=@generic={0xa}, 0x55) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(r2, 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): 5][ T3831] __snd_dma_alloc_pages+0x53/0x90 [ 1869.923743][ T3831] snd_dma_alloc_dir_pages+0x151/0x240 [ 1869.923773][ T3831] do_alloc_pages+0x115/0x280 [ 1869.923801][ T3831] snd_pcm_lib_malloc_pages+0x3df/0x980 [ 1869.923832][ T3831] snd_pcm_hw_params+0x15e1/0x1b40 [ 1869.923863][ T3831] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 1869.923890][ T3831] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 1869.923917][ T3831] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 1869.923941][ T3831] ? __asan_memset+0x23/0x50 [ 1869.923970][ T3831] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 1869.923998][ T3831] snd_pcm_oss_change_params_locked+0x1432/0x3a30 [ 1869.924034][ T3831] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1869.924059][ T3831] ? __pfx___mutex_lock+0x10/0x10 [ 1869.924107][ T3831] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 1869.924136][ T3831] snd_pcm_oss_get_formats+0x7e/0x340 [ 1869.924157][ T3831] ? find_held_lock+0x2b/0x80 [ 1869.924177][ T3831] ? __pfx_snd_pcm_oss_get_formats+0x10/0x10 [ 1869.924198][ T3831] ? __might_fault+0x13b/0x190 [ 1869.924235][ T3831] snd_pcm_oss_ioctl+0x2efb/0x37a0 [ 1869.924258][ T3831] ? find_held_lock+0x2b/0x80 [ 1869.924277][ T3831] ? hook_file_ioctl_common+0x145/0x410 [ 1869.924300][ T3831] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1869.924326][ T3831] ? __fget_files+0x20e/0x3c0 [ 1869.924357][ T3831] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1869.924382][ T3831] __x64_sys_ioctl+0x18b/0x210 [ 1869.924408][ T3831] do_syscall_64+0xcd/0x490 [ 1869.924455][ T3831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1869.924477][ T3831] RIP: 0033:0x7f3247d8e929 [ 1869.924494][ T3831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1869.924515][ T3831] RSP: 002b:00007f3248c2a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1869.924534][ T3831] RAX: ffffffffffffffda RBX: 00007f3247fb5fa0 RCX: 00007f3247d8e929 [ 1869.924548][ T3831] RDX: 0000200000000040 RSI: 00000000c0045005 RDI: 0000000000000006 [ 1869.924561][ T3831] RBP: 00007f3247e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1869.924574][ T3831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1869.924587][ T3831] R13: 0000000000000000 R14: 00007f3247fb5fa0 R15: 00007fff77780188 [ 1869.924612][ T3831] [ 1870.251481][ C1] vkms_vblank_simulate: vblank timer overrun [ 1870.505065][ T3869] futex_wake_op: syz.3.7249 tries to shift op by -9; fix this program [ 1870.748093][ T3876] ERROR: Out of memory at tomoyo_memory_ok. [ 1871.443942][ T3831] Mem-Info: [ 1871.463853][ T3831] active_anon:35028 inactive_anon:0 isolated_anon:0 [ 1871.463853][ T3831] active_file:9746 inactive_file:52252 isolated_file:0 [ 1871.463853][ T3831] unevictable:768 dirty:718 writeback:0 [ 1871.463853][ T3831] slab_reclaimable:12198 slab_unreclaimable:100026 [ 1871.463853][ T3831] mapped:36081 shmem:18261 pagetables:1757 [ 1871.463853][ T3831] sec_pagetables:0 bounce:0 [ 1871.463853][ T3831] kernel_misc_reclaimable:0 [ 1871.463853][ T3831] free:1282667 free_pcp:8138 free_cma:0 [ 1871.509258][ C1] vkms_vblank_simulate: vblank timer overrun [ 1871.667868][ T3831] Node 0 active_anon:138188kB inactive_anon:0kB active_file:38980kB inactive_file:208876kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:142300kB dirty:2868kB writeback:0kB shmem:73536kB shmem_thp:34816kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12368kB pagetables:6936kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1871.701926][ C1] vkms_vblank_simulate: vblank timer overrun [ 1871.856745][ T3831] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1871.888149][ C1] vkms_vblank_simulate: vblank timer overrun [ 1872.056512][ T3831] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1872.085340][ C1] vkms_vblank_simulate: vblank timer overrun [ 1872.264803][ T3831] lowmem_reserve[]: 0 2481 2482 2482 2482 [ 1872.270601][ T3831] Node 0 DMA32 free:1180860kB boost:0kB min:34332kB low:42912kB high:51492kB reserved_highatomic:0KB free_highatomic:0KB active_anon:152332kB inactive_anon:0kB active_file:39008kB inactive_file:207560kB unevictable:1536kB writepending:2896kB present:3129332kB managed:2540848kB mlocked:0kB bounce:0kB free_pcp:30844kB local_pcp:30844kB free_cma:0kB [ 1872.303162][ C1] vkms_vblank_simulate: vblank timer overrun [ 1872.464213][ T3893] FAULT_INJECTION: forcing a failure. [ 1872.464213][ T3893] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1872.521808][ T3831] lowmem_reserve[]: 0 0 1 1 1 [ 1872.544387][ T3831] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:16kB free_cma:0kB [ 1872.573606][ C1] vkms_vblank_simulate: vblank timer overrun [ 1872.708373][ T3893] CPU: 1 UID: 0 PID: 3893 Comm: syz.4.7256 Tainted: G U 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1872.708408][ T3893] Tainted: [U]=USER [ 1872.708415][ T3893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1872.708427][ T3893] Call Trace: [ 1872.708435][ T3893] [ 1872.708443][ T3893] dump_stack_lvl+0x16c/0x1f0 [ 1872.708479][ T3893] should_fail_ex+0x512/0x640 [ 1872.708513][ T3893] should_fail_alloc_page+0xe7/0x130 [ 1872.708543][ T3893] prepare_alloc_pages+0x3c2/0x610 [ 1872.708567][ T3893] ? rcu_is_watching+0x12/0xc0 [ 1872.708591][ T3893] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1872.708627][ T3893] ? rcu_is_watching+0x12/0xc0 [ 1872.708647][ T3893] ? trace_mm_page_alloc+0x11f/0x1a0 [ 1872.708670][ T3893] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 1872.708702][ T3893] ? __pfx_stack_trace_save+0x10/0x10 [ 1872.708725][ T3893] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1872.708765][ T3893] ? alloc_vmap_area+0xdc8/0x29c0 [ 1872.708785][ T3893] ? __vmalloc_node_range_noprof+0x271/0x14b0 [ 1872.708811][ T3893] ? __snd_dma_alloc_pages+0x53/0x90 [ 1872.708837][ T3893] ? snd_dma_alloc_dir_pages+0x151/0x240 [ 1872.708863][ T3893] ? do_alloc_pages+0x115/0x280 [ 1872.708885][ T3893] ? snd_pcm_lib_malloc_pages+0x3df/0x980 [ 1872.708910][ T3893] ? snd_pcm_hw_params+0x15e1/0x1b40 [ 1872.708935][ T3893] ? snd_pcm_kernel_ioctl+0x147/0x2e0 [ 1872.708960][ T3893] ? snd_pcm_oss_change_params_locked+0x1432/0x3a30 [ 1872.708986][ T3893] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1872.709013][ T3893] alloc_pages_bulk_noprof+0x71c/0x1410 [ 1872.709043][ T3893] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1872.709075][ T3893] ? policy_nodemask+0xea/0x4e0 [ 1872.709112][ T3893] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1872.709144][ T3893] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1872.709174][ T3893] kasan_populate_vmalloc+0xf1/0x1f0 [ 1872.709208][ T3893] alloc_vmap_area+0x959/0x29c0 [ 1872.709241][ T3893] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1872.709270][ T3893] __get_vm_area_node+0x1ca/0x330 [ 1872.709299][ T3893] __vmalloc_node_range_noprof+0x271/0x14b0 [ 1872.709326][ T3893] ? __snd_dma_alloc_pages+0x53/0x90 [ 1872.709360][ T3893] ? __snd_dma_alloc_pages+0x53/0x90 [ 1872.709388][ T3893] ? rcu_is_watching+0x12/0xc0 [ 1872.709411][ T3893] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1872.709442][ T3893] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 1872.709497][ T3893] ? __snd_dma_alloc_pages+0x53/0x90 [ 1872.709525][ T3893] __vmalloc_node_noprof+0xad/0xf0 [ 1872.709575][ T3893] ? __snd_dma_alloc_pages+0x53/0x90 [ 1872.709605][ T3893] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 1872.709640][ T3893] __snd_dma_alloc_pages+0x53/0x90 [ 1872.709673][ T3893] snd_dma_alloc_dir_pages+0x151/0x240 [ 1872.709708][ T3893] do_alloc_pages+0x115/0x280 [ 1872.709741][ T3893] snd_pcm_lib_malloc_pages+0x3df/0x980 [ 1872.709777][ T3893] snd_pcm_hw_params+0x15e1/0x1b40 [ 1872.709813][ T3893] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 1872.709844][ T3893] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 1872.709876][ T3893] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 1872.709904][ T3893] ? __asan_memset+0x23/0x50 [ 1872.709937][ T3893] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 1872.709970][ T3893] snd_pcm_oss_change_params_locked+0x1432/0x3a30 [ 1872.710012][ T3893] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1872.710041][ T3893] ? __pfx___mutex_lock+0x10/0x10 [ 1872.710098][ T3893] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 1872.710131][ T3893] snd_pcm_oss_get_formats+0x7e/0x340 [ 1872.710156][ T3893] ? find_held_lock+0x2b/0x80 [ 1872.710179][ T3893] ? __pfx_snd_pcm_oss_get_formats+0x10/0x10 [ 1872.710205][ T3893] ? __might_fault+0x13b/0x190 [ 1872.710247][ T3893] snd_pcm_oss_ioctl+0x2efb/0x37a0 [ 1872.710274][ T3893] ? find_held_lock+0x2b/0x80 [ 1872.710296][ T3893] ? hook_file_ioctl_common+0x145/0x410 [ 1872.710322][ T3893] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1872.710353][ T3893] ? __fget_files+0x20e/0x3c0 [ 1872.710389][ T3893] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1872.710419][ T3893] __x64_sys_ioctl+0x18b/0x210 [ 1872.710449][ T3893] do_syscall_64+0xcd/0x490 [ 1872.710488][ T3893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1872.710512][ T3893] RIP: 0033:0x7f22c018e929 [ 1872.710539][ T3893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1872.710562][ T3893] RSP: 002b:00007f22c1095038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1872.710584][ T3893] RAX: ffffffffffffffda RBX: 00007f22c03b5fa0 RCX: 00007f22c018e929 [ 1872.710600][ T3893] RDX: 0000200000000040 RSI: 00000000c0045005 RDI: 0000000000000006 [ 1872.710615][ T3893] RBP: 00007f22c0210b39 R08: 0000000000000000 R09: 0000000000000000 [ 1872.710629][ T3893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1872.710644][ T3893] R13: 0000000000000000 R14: 00007f22c03b5fa0 R15: 00007ffc1f7609e8 [ 1872.710674][ T3893] [ 1873.674334][ T3831] lowmem_reserve[]: 0 0 0 0 0 [ 1873.679152][ T3831] Node 1 Normal free:3923852kB boost:0kB min:55552kB low:69440kB high:83328kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:132kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 1873.744370][ T3831] lowmem_reserve[]: 0 0 0 0 0 [ 1873.754305][ T3831] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1873.777178][ T3831] Node 0 DMA32: 4*4kB (UM) 2*8kB (UM) 2703*16kB (UME) 2551*32kB (UME) 1326*64kB (UME) 613*128kB (UME) 273*256kB (UME) 148*512kB (UM) 63*1024kB (UM) 1*2048kB (U) 153*4096kB (UM) = 1127152kB [ 1873.814326][ T3831] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1873.844317][ T3831] Node 1 Normal: 171*4kB (UM) 56*8kB (UME) 44*16kB (UME) 225*32kB (UME) 111*64kB (UME) 31*128kB (UE) 13*256kB (UME) 6*512kB (UM) 4*1024kB (UME) 3*2048kB (UME) 949*4096kB (M) = 3923852kB [ 1873.883201][ T3831] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1873.925899][ T3831] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1873.964336][ T3831] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1874.004371][ T3831] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1874.054325][ T3831] 96956 total pagecache pages [ 1874.068554][ T3831] 4 pages in swap cache [ 1874.104042][ T3831] Free swap = 124996kB [ 1874.114300][ T3831] Total swap = 124996kB [ 1874.126509][ T3831] 2097051 pages RAM [ 1874.140778][ T3831] 0 pages HighMem/MovableOnly [ 1874.155743][ T3831] 429861 pages reserved [ 1874.168726][ T3831] 0 pages cma reserved [ 1876.006893][ T3924] netlink: zone id is out of range [ 1876.036352][ T3924] netlink: zone id is out of range [ 1876.041503][ T3924] netlink: zone id is out of range [ 1876.064470][ T3924] netlink: zone id is out of range [ 1876.081036][ T3924] netlink: zone id is out of range [ 1876.096558][ T3924] netlink: zone id is out of range [ 1876.117394][ T3924] netlink: zone id is out of range [ 1876.136266][ T3924] netlink: zone id is out of range [ 1876.154411][ T3924] netlink: zone id is out of range [ 1876.174511][ T3924] netlink: zone id is out of range [ 1877.868971][ T30] audit: type=1800 audit(4294967346.440:37): pid=3948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.7271" name="SYSV00000014" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1880.570766][ T3995] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7284'. [ 1882.321433][ T4023] ERROR: Out of memory at tomoyo_memory_ok. [ 1883.408832][ T4040] FAULT_INJECTION: forcing a failure. [ 1883.408832][ T4040] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1883.503171][ T4040] CPU: 1 UID: 0 PID: 4040 Comm: syz.4.7296 Tainted: G U 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1883.503214][ T4040] Tainted: [U]=USER [ 1883.503221][ T4040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1883.503233][ T4040] Call Trace: [ 1883.503240][ T4040] [ 1883.503248][ T4040] dump_stack_lvl+0x16c/0x1f0 [ 1883.503283][ T4040] should_fail_ex+0x512/0x640 [ 1883.503317][ T4040] should_fail_alloc_page+0xe7/0x130 [ 1883.503338][ T4040] prepare_alloc_pages+0x3c2/0x610 [ 1883.503363][ T4040] ? rcu_is_watching+0x12/0xc0 [ 1883.503387][ T4040] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1883.503422][ T4040] ? rcu_is_watching+0x12/0xc0 [ 1883.503442][ T4040] ? trace_mm_page_alloc+0x11f/0x1a0 [ 1883.503466][ T4040] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 1883.503498][ T4040] ? __pfx_stack_trace_save+0x10/0x10 [ 1883.503521][ T4040] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1883.503561][ T4040] ? alloc_vmap_area+0x645/0x29c0 [ 1883.503581][ T4040] ? __vmalloc_node_range_noprof+0x271/0x14b0 [ 1883.503607][ T4040] ? __snd_dma_alloc_pages+0x53/0x90 [ 1883.503632][ T4040] ? snd_dma_alloc_dir_pages+0x151/0x240 [ 1883.503658][ T4040] ? do_alloc_pages+0x115/0x280 [ 1883.503680][ T4040] ? snd_pcm_lib_malloc_pages+0x3df/0x980 [ 1883.503705][ T4040] ? snd_pcm_hw_params+0x15e1/0x1b40 [ 1883.503730][ T4040] ? snd_pcm_kernel_ioctl+0x147/0x2e0 [ 1883.503754][ T4040] ? snd_pcm_oss_change_params_locked+0x1432/0x3a30 [ 1883.503780][ T4040] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1883.503807][ T4040] alloc_pages_bulk_noprof+0x71c/0x1410 [ 1883.503837][ T4040] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1883.503869][ T4040] ? policy_nodemask+0xea/0x4e0 [ 1883.503905][ T4040] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1883.503937][ T4040] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1883.503968][ T4040] kasan_populate_vmalloc+0xf1/0x1f0 [ 1883.504002][ T4040] alloc_vmap_area+0x959/0x29c0 [ 1883.504035][ T4040] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1883.504064][ T4040] __get_vm_area_node+0x1ca/0x330 [ 1883.504092][ T4040] __vmalloc_node_range_noprof+0x271/0x14b0 [ 1883.504119][ T4040] ? __snd_dma_alloc_pages+0x53/0x90 [ 1883.504153][ T4040] ? __snd_dma_alloc_pages+0x53/0x90 [ 1883.504181][ T4040] ? rcu_is_watching+0x12/0xc0 [ 1883.504209][ T4040] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1883.504245][ T4040] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 1883.504281][ T4040] ? __snd_dma_alloc_pages+0x53/0x90 [ 1883.504306][ T4040] __vmalloc_node_noprof+0xad/0xf0 [ 1883.504332][ T4040] ? __snd_dma_alloc_pages+0x53/0x90 [ 1883.504358][ T4040] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 1883.504389][ T4040] __snd_dma_alloc_pages+0x53/0x90 [ 1883.504417][ T4040] snd_dma_alloc_dir_pages+0x151/0x240 [ 1883.504447][ T4040] do_alloc_pages+0x115/0x280 [ 1883.504475][ T4040] snd_pcm_lib_malloc_pages+0x3df/0x980 [ 1883.504506][ T4040] snd_pcm_hw_params+0x15e1/0x1b40 [ 1883.504537][ T4040] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 1883.504564][ T4040] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 1883.504591][ T4040] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 1883.504615][ T4040] ? __asan_memset+0x23/0x50 [ 1883.504644][ T4040] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 1883.504672][ T4040] snd_pcm_oss_change_params_locked+0x1432/0x3a30 [ 1883.504708][ T4040] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1883.504733][ T4040] ? __pfx___mutex_lock+0x10/0x10 [ 1883.504782][ T4040] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 1883.504810][ T4040] snd_pcm_oss_get_formats+0x7e/0x340 [ 1883.504831][ T4040] ? find_held_lock+0x2b/0x80 [ 1883.504851][ T4040] ? __pfx_snd_pcm_oss_get_formats+0x10/0x10 [ 1883.504873][ T4040] ? __might_fault+0x13b/0x190 [ 1883.504909][ T4040] snd_pcm_oss_ioctl+0x2efb/0x37a0 [ 1883.504933][ T4040] ? find_held_lock+0x2b/0x80 [ 1883.504952][ T4040] ? hook_file_ioctl_common+0x145/0x410 [ 1883.504975][ T4040] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1883.505001][ T4040] ? __fget_files+0x20e/0x3c0 [ 1883.505032][ T4040] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1883.505057][ T4040] __x64_sys_ioctl+0x18b/0x210 [ 1883.505082][ T4040] do_syscall_64+0xcd/0x490 [ 1883.505116][ T4040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1883.505136][ T4040] RIP: 0033:0x7f22c018e929 [ 1883.505152][ T4040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1883.505172][ T4040] RSP: 002b:00007f22c1095038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1883.505192][ T4040] RAX: ffffffffffffffda RBX: 00007f22c03b5fa0 RCX: 00007f22c018e929 [ 1883.505211][ T4040] RDX: 0000200000000040 RSI: 00000000c0045005 RDI: 0000000000000006 [ 1883.505224][ T4040] RBP: 00007f22c0210b39 R08: 0000000000000000 R09: 0000000000000000 [ 1883.505237][ T4040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1883.505249][ T4040] R13: 0000000000000000 R14: 00007f22c03b5fa0 R15: 00007ffc1f7609e8 [ 1883.505275][ T4040] [ 1886.000295][ T4040] warn_alloc: 1 callbacks suppressed [ 1886.000312][ T4040] syz.4.7296: vmalloc error: size 2097152, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1886.126798][ T4040] CPU: 1 UID: 0 PID: 4040 Comm: syz.4.7296 Tainted: G U 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1886.126839][ T4040] Tainted: [U]=USER [ 1886.126847][ T4040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1886.126862][ T4040] Call Trace: [ 1886.126870][ T4040] [ 1886.126878][ T4040] dump_stack_lvl+0x16c/0x1f0 [ 1886.126918][ T4040] warn_alloc+0x248/0x3a0 [ 1886.126961][ T4040] ? __pfx_warn_alloc+0x10/0x10 [ 1886.126998][ T4040] ? kfree+0x2b4/0x4d0 [ 1886.127034][ T4040] ? __get_vm_area_node+0x208/0x330 [ 1886.127068][ T4040] __vmalloc_node_range_noprof+0xb2d/0x14b0 [ 1886.127107][ T4040] ? __snd_dma_alloc_pages+0x53/0x90 [ 1886.127140][ T4040] ? rcu_is_watching+0x12/0xc0 [ 1886.127168][ T4040] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1886.127204][ T4040] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 1886.127245][ T4040] ? __snd_dma_alloc_pages+0x53/0x90 [ 1886.127274][ T4040] __vmalloc_node_noprof+0xad/0xf0 [ 1886.127303][ T4040] ? __snd_dma_alloc_pages+0x53/0x90 [ 1886.127332][ T4040] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 1886.127367][ T4040] __snd_dma_alloc_pages+0x53/0x90 [ 1886.127399][ T4040] snd_dma_alloc_dir_pages+0x151/0x240 [ 1886.127433][ T4040] do_alloc_pages+0x115/0x280 [ 1886.127464][ T4040] snd_pcm_lib_malloc_pages+0x3df/0x980 [ 1886.127499][ T4040] snd_pcm_hw_params+0x15e1/0x1b40 [ 1886.127534][ T4040] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 1886.127565][ T4040] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 1886.127596][ T4040] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 1886.127624][ T4040] ? __asan_memset+0x23/0x50 [ 1886.127656][ T4040] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 1886.127688][ T4040] snd_pcm_oss_change_params_locked+0x1432/0x3a30 [ 1886.127729][ T4040] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1886.127758][ T4040] ? __pfx___mutex_lock+0x10/0x10 [ 1886.127814][ T4040] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 1886.127846][ T4040] snd_pcm_oss_get_formats+0x7e/0x340 [ 1886.127870][ T4040] ? find_held_lock+0x2b/0x80 [ 1886.127893][ T4040] ? __pfx_snd_pcm_oss_get_formats+0x10/0x10 [ 1886.127918][ T4040] ? __might_fault+0x13b/0x190 [ 1886.127965][ T4040] snd_pcm_oss_ioctl+0x2efb/0x37a0 [ 1886.127992][ T4040] ? find_held_lock+0x2b/0x80 [ 1886.128014][ T4040] ? hook_file_ioctl_common+0x145/0x410 [ 1886.128040][ T4040] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1886.128070][ T4040] ? __fget_files+0x20e/0x3c0 [ 1886.128105][ T4040] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1886.128134][ T4040] __x64_sys_ioctl+0x18b/0x210 [ 1886.128163][ T4040] do_syscall_64+0xcd/0x490 [ 1886.128202][ T4040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1886.128226][ T4040] RIP: 0033:0x7f22c018e929 [ 1886.128245][ T4040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1886.128268][ T4040] RSP: 002b:00007f22c1095038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1886.128290][ T4040] RAX: ffffffffffffffda RBX: 00007f22c03b5fa0 RCX: 00007f22c018e929 [ 1886.128318][ T4040] RDX: 0000200000000040 RSI: 00000000c0045005 RDI: 0000000000000006 [ 1886.128333][ T4040] RBP: 00007f22c0210b39 R08: 0000000000000000 R09: 0000000000000000 [ 1886.128346][ T4040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1886.128359][ T4040] R13: 0000000000000000 R14: 00007f22c03b5fa0 R15: 00007ffc1f7609e8 [ 1886.128387][ T4040] [ 1886.128395][ T4040] Mem-Info: [ 1886.483729][ T4084] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7306'. [ 1887.315683][ T4040] active_anon:33490 inactive_anon:0 isolated_anon:0 [ 1887.315683][ T4040] active_file:9676 inactive_file:52337 isolated_file:0 [ 1887.315683][ T4040] unevictable:768 dirty:720 writeback:0 [ 1887.315683][ T4040] slab_reclaimable:11901 slab_unreclaimable:99881 [ 1887.315683][ T4040] mapped:32491 shmem:17912 pagetables:1604 [ 1887.315683][ T4040] sec_pagetables:0 bounce:0 [ 1887.315683][ T4040] kernel_misc_reclaimable:0 [ 1887.315683][ T4040] free:1284065 free_pcp:9321 free_cma:0 [ 1887.534323][ T4040] Node 0 active_anon:136924kB inactive_anon:0kB active_file:38700kB inactive_file:209216kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:131316kB dirty:2880kB writeback:0kB shmem:72660kB shmem_thp:34816kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12208kB pagetables:6324kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1887.690802][ T4040] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1887.845013][ T4040] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1887.984382][ T4040] lowmem_reserve[]: 0 2481 2482 2482 2482 [ 1888.010479][ T4040] Node 0 DMA32 free:1156212kB boost:0kB min:34332kB low:42912kB high:51492kB reserved_highatomic:0KB free_highatomic:0KB active_anon:134384kB inactive_anon:0kB active_file:38700kB inactive_file:207900kB unevictable:1536kB writepending:2880kB present:3129332kB managed:2540848kB mlocked:0kB bounce:0kB free_pcp:37740kB local_pcp:37740kB free_cma:0kB [ 1888.164063][ T4040] lowmem_reserve[]: 0 0 1 1 1 [ 1888.185878][ T1358] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1888.197257][ T1358] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1888.205097][ T1358] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1888.212856][ T1358] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1888.222780][ T1358] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1888.250610][ T4040] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:16kB free_cma:0kB [ 1888.394115][ T4040] lowmem_reserve[]: 0 0 0 0 0 [ 1888.436318][ T4040] Node 1 Normal free:3923888kB boost:0kB min:55552kB low:69440kB high:83328kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:132kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1888.537347][ T4117] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7314'. [ 1888.571959][ T4040] lowmem_reserve[]: 0 0 0 0 0 [ 1888.599492][ T4040] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1888.666443][ T4040] Node 0 DMA32: 3761*4kB (UM) 4087*8kB (UM) 2735*16kB (ME) 2362*32kB (ME) 1206*64kB (UME) 559*128kB (UME) 264*256kB (UME) 148*512kB (UM) 63*1024kB (UM) 3*2048kB (M) 152*4096kB (UM) = 1152428kB [ 1888.781527][ T4040] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1888.855090][ T4040] Node 1 Normal: 118*4kB (UM) 55*8kB (UME) 44*16kB (UME) 225*32kB (UME) 109*64kB (UME) 32*128kB (UME) 14*256kB (UME) 6*512kB (UM) 4*1024kB (UME) 3*2048kB (UME) 949*4096kB (M) = 3923888kB [ 1888.919026][ T4040] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1888.955102][ T4040] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1888.983424][ T4040] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1889.033490][ T4114] chnl_net:caif_netlink_parms(): no params data found [ 1889.047240][ T4040] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1889.076955][ T4040] 81894 total pagecache pages [ 1889.084156][ T4040] 0 pages in swap cache [ 1889.100886][ T4040] Free swap = 124996kB [ 1889.107528][ T4040] Total swap = 124996kB [ 1889.130602][ T4040] 2097051 pages RAM [ 1889.152910][ T4040] 0 pages HighMem/MovableOnly [ 1889.174915][ T4040] 429861 pages reserved [ 1889.181887][T27789] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1889.205502][ T4040] 0 pages cma reserved [ 1889.438927][T27789] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1889.491842][ T4132] netlink: 342 bytes leftover after parsing attributes in process `syz.4.7316'. [ 1889.589655][T27789] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1889.827515][ T4137] FAULT_INJECTION: forcing a failure. [ 1889.827515][ T4137] name failslab, interval 1, probability 0, space 0, times 0 [ 1889.844909][T27789] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1889.877640][ T4137] CPU: 1 UID: 0 PID: 4137 Comm: syz.4.7317 Tainted: G U 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1889.877678][ T4137] Tainted: [U]=USER [ 1889.877686][ T4137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1889.877700][ T4137] Call Trace: [ 1889.877707][ T4137] [ 1889.877716][ T4137] dump_stack_lvl+0x16c/0x1f0 [ 1889.877753][ T4137] should_fail_ex+0x512/0x640 [ 1889.877785][ T4137] ? fs_reclaim_acquire+0xae/0x150 [ 1889.877814][ T4137] should_failslab+0xc2/0x120 [ 1889.877835][ T4137] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1889.877869][ T4137] ? security_inode_alloc+0x3b/0x2b0 [ 1889.877897][ T4137] security_inode_alloc+0x3b/0x2b0 [ 1889.877921][ T4137] inode_init_always_gfp+0xce4/0x1030 [ 1889.877957][ T4137] alloc_inode+0x86/0x240 [ 1889.877992][ T4137] new_inode+0x22/0x1c0 [ 1889.878010][ T4137] ? proc_lookup_de+0x217/0x320 [ 1889.878045][ T4137] proc_get_inode+0x1d/0x780 [ 1889.878077][ T4137] proc_lookup_de+0x253/0x320 [ 1889.878112][ T4137] proc_tgid_net_lookup+0x75/0x120 [ 1889.878134][ T4137] __lookup_slow+0x251/0x460 [ 1889.878157][ T4137] ? __pfx___lookup_slow+0x10/0x10 [ 1889.878195][ T4137] ? lookup_fast+0x156/0x610 [ 1889.878224][ T4137] walk_component+0x353/0x5b0 [ 1889.878252][ T4137] link_path_walk+0x627/0xe20 [ 1889.878287][ T4137] path_openat+0x1b0/0x2cb0 [ 1889.878315][ T4137] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1889.878345][ T4137] ? __pfx_path_openat+0x10/0x10 [ 1889.878376][ T4137] ? __lock_acquire+0xb8a/0x1c90 [ 1889.878406][ T4137] do_filp_open+0x20b/0x470 [ 1889.878436][ T4137] ? __pfx_do_filp_open+0x10/0x10 [ 1889.878503][ T4137] ? __pfx_kfree_link+0x10/0x10 [ 1889.878535][ T4137] ? alloc_fd+0x471/0x7d0 [ 1889.878572][ T4137] do_sys_openat2+0x11b/0x1d0 [ 1889.878601][ T4137] ? __pfx_do_sys_openat2+0x10/0x10 [ 1889.878636][ T4137] __x64_sys_openat+0x174/0x210 [ 1889.878661][ T4137] ? __pfx___x64_sys_openat+0x10/0x10 [ 1889.878698][ T4137] do_syscall_64+0xcd/0x490 [ 1889.878734][ T4137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1889.878756][ T4137] RIP: 0033:0x7f22c018e929 [ 1889.878772][ T4137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1889.878793][ T4137] RSP: 002b:00007f22c1095038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1889.878814][ T4137] RAX: ffffffffffffffda RBX: 00007f22c03b5fa0 RCX: 00007f22c018e929 [ 1889.878828][ T4137] RDX: 0000000000101002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1889.878843][ T4137] RBP: 00007f22c0210b39 R08: 0000000000000000 R09: 0000000000000000 [ 1889.878856][ T4137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1889.878870][ T4137] R13: 0000000000000000 R14: 00007f22c03b5fa0 R15: 00007ffc1f7609e8 [ 1889.878897][ T4137] [ 1890.434898][ T4138] net_ratelimit: 494 callbacks suppressed [ 1890.434913][ T4138] netlink: zone id is out of range [ 1890.465406][ T4138] netlink: zone id is out of range [ 1890.470590][ T4138] netlink: zone id is out of range [ 1890.484335][ T4138] netlink: zone id is out of range [ 1890.494277][ T4138] netlink: zone id is out of range [ 1890.504305][ T4138] netlink: zone id is out of range [ 1890.514296][ T4138] netlink: zone id is out of range [ 1890.524333][ T4138] netlink: zone id is out of range [ 1890.537188][ T4138] netlink: zone id is out of range [ 1890.542531][ T1358] Bluetooth: hci2: command tx timeout [ 1890.559259][ T4138] netlink: zone id is out of range [ 1890.925592][ T4114] bridge0: port 1(bridge_slave_0) entered blocking state [ 1890.933435][ T4114] bridge0: port 1(bridge_slave_0) entered disabled state [ 1890.975452][ T4114] bridge_slave_0: entered allmulticast mode [ 1891.030866][ T4114] bridge_slave_0: entered promiscuous mode [ 1891.108292][ T4114] bridge0: port 2(bridge_slave_1) entered blocking state [ 1891.124038][ T4114] bridge0: port 2(bridge_slave_1) entered disabled state [ 1891.155389][ T4114] bridge_slave_1: entered allmulticast mode [ 1891.162690][ T4114] bridge_slave_1: entered promiscuous mode [ 1891.415820][ T4114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1891.496388][ T4114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1891.722498][ T4114] team0: Port device team_slave_0 added [ 1892.586860][ T4165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7323'. [ 1892.598740][ T5832] Bluetooth: hci2: command tx timeout [ 1892.733195][ T4167] FAULT_INJECTION: forcing a failure. [ 1892.733195][ T4167] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1892.788415][ T4167] CPU: 1 UID: 0 PID: 4167 Comm: syz.4.7324 Tainted: G U 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1892.788450][ T4167] Tainted: [U]=USER [ 1892.788458][ T4167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1892.788471][ T4167] Call Trace: [ 1892.788478][ T4167] [ 1892.788486][ T4167] dump_stack_lvl+0x16c/0x1f0 [ 1892.788522][ T4167] should_fail_ex+0x512/0x640 [ 1892.788556][ T4167] should_fail_alloc_page+0xe7/0x130 [ 1892.788578][ T4167] prepare_alloc_pages+0x3c2/0x610 [ 1892.788603][ T4167] ? rcu_is_watching+0x12/0xc0 [ 1892.788627][ T4167] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1892.788663][ T4167] ? rcu_is_watching+0x12/0xc0 [ 1892.788683][ T4167] ? trace_mm_page_alloc+0x11f/0x1a0 [ 1892.788706][ T4167] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 1892.788739][ T4167] ? __pfx_stack_trace_save+0x10/0x10 [ 1892.788761][ T4167] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1892.788801][ T4167] ? alloc_vmap_area+0xdc8/0x29c0 [ 1892.788822][ T4167] ? __vmalloc_node_range_noprof+0x271/0x14b0 [ 1892.788847][ T4167] ? __snd_dma_alloc_pages+0x53/0x90 [ 1892.788873][ T4167] ? snd_dma_alloc_dir_pages+0x151/0x240 [ 1892.788899][ T4167] ? do_alloc_pages+0x115/0x280 [ 1892.788921][ T4167] ? snd_pcm_lib_malloc_pages+0x3df/0x980 [ 1892.788946][ T4167] ? snd_pcm_hw_params+0x15e1/0x1b40 [ 1892.788971][ T4167] ? snd_pcm_kernel_ioctl+0x147/0x2e0 [ 1892.788996][ T4167] ? snd_pcm_oss_change_params_locked+0x1432/0x3a30 [ 1892.789022][ T4167] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1892.789048][ T4167] alloc_pages_bulk_noprof+0x71c/0x1410 [ 1892.789079][ T4167] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1892.789112][ T4167] ? policy_nodemask+0xea/0x4e0 [ 1892.789148][ T4167] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1892.789180][ T4167] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1892.789210][ T4167] kasan_populate_vmalloc+0xf1/0x1f0 [ 1892.789244][ T4167] alloc_vmap_area+0x959/0x29c0 [ 1892.789277][ T4167] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1892.789313][ T4167] __get_vm_area_node+0x1ca/0x330 [ 1892.789343][ T4167] __vmalloc_node_range_noprof+0x271/0x14b0 [ 1892.789370][ T4167] ? __snd_dma_alloc_pages+0x53/0x90 [ 1892.789404][ T4167] ? __snd_dma_alloc_pages+0x53/0x90 [ 1892.789432][ T4167] ? rcu_is_watching+0x12/0xc0 [ 1892.789460][ T4167] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1892.789490][ T4167] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 1892.789527][ T4167] ? __snd_dma_alloc_pages+0x53/0x90 [ 1892.789554][ T4167] __vmalloc_node_noprof+0xad/0xf0 [ 1892.789580][ T4167] ? __snd_dma_alloc_pages+0x53/0x90 [ 1892.789605][ T4167] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 1892.789635][ T4167] __snd_dma_alloc_pages+0x53/0x90 [ 1892.789663][ T4167] snd_dma_alloc_dir_pages+0x151/0x240 [ 1892.789692][ T4167] do_alloc_pages+0x115/0x280 [ 1892.789720][ T4167] snd_pcm_lib_malloc_pages+0x3df/0x980 [ 1892.789751][ T4167] snd_pcm_hw_params+0x15e1/0x1b40 [ 1892.789781][ T4167] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 1892.789808][ T4167] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 1892.789835][ T4167] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 1892.789859][ T4167] ? __asan_memset+0x23/0x50 [ 1892.789888][ T4167] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 1892.789916][ T4167] snd_pcm_oss_change_params_locked+0x1432/0x3a30 [ 1892.789952][ T4167] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1892.789978][ T4167] ? __pfx___mutex_lock+0x10/0x10 [ 1892.790026][ T4167] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 1892.790054][ T4167] snd_pcm_oss_get_formats+0x7e/0x340 [ 1892.790075][ T4167] ? find_held_lock+0x2b/0x80 [ 1892.790095][ T4167] ? __pfx_snd_pcm_oss_get_formats+0x10/0x10 [ 1892.790117][ T4167] ? __might_fault+0x13b/0x190 [ 1892.790153][ T4167] snd_pcm_oss_ioctl+0x2efb/0x37a0 [ 1892.790177][ T4167] ? find_held_lock+0x2b/0x80 [ 1892.790196][ T4167] ? hook_file_ioctl_common+0x145/0x410 [ 1892.790220][ T4167] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1892.790246][ T4167] ? __fget_files+0x20e/0x3c0 [ 1892.790277][ T4167] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1892.790308][ T4167] __x64_sys_ioctl+0x18b/0x210 [ 1892.790334][ T4167] do_syscall_64+0xcd/0x490 [ 1892.790369][ T4167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1892.790390][ T4167] RIP: 0033:0x7f22c018e929 [ 1892.790407][ T4167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1892.790428][ T4167] RSP: 002b:00007f22c1095038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1892.790447][ T4167] RAX: ffffffffffffffda RBX: 00007f22c03b5fa0 RCX: 00007f22c018e929 [ 1892.790460][ T4167] RDX: 0000200000000040 RSI: 00000000c0045005 RDI: 0000000000000006 [ 1892.790474][ T4167] RBP: 00007f22c0210b39 R08: 0000000000000000 R09: 0000000000000000 [ 1892.790487][ T4167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1892.790500][ T4167] R13: 0000000000000000 R14: 00007f22c03b5fa0 R15: 00007ffc1f7609e8 [ 1892.790526][ T4167] [ 1893.480327][T27789] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1893.491439][T27789] bond0 (unregistering): Released all slaves [ 1893.509948][ T4114] team0: Port device team_slave_1 added [ 1893.549345][ T4114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1893.556466][ T4114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1893.582442][ T4114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1893.595093][ T4114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1893.602049][ T4114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1893.628320][ T4114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1893.670514][ T4114] hsr_slave_0: entered promiscuous mode [ 1893.677486][ T4114] hsr_slave_1: entered promiscuous mode [ 1893.683512][ T4114] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1893.691112][ T4114] Cannot create hsr debugfs directory [ 1894.674599][ T5832] Bluetooth: hci2: command tx timeout [ 1894.938337][T27789] hsr_slave_0: left promiscuous mode [ 1894.960683][T27789] hsr_slave_1: left promiscuous mode [ 1894.982226][T27789] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1895.002580][T27789] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1895.021150][T27789] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1895.038283][T27789] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1895.088812][T27789] veth1_macvtap: left promiscuous mode [ 1895.109229][T27789] veth0_macvtap: left promiscuous mode [ 1895.131203][T27789] veth1_vlan: left promiscuous mode [ 1895.144131][T27789] veth0_vlan: left promiscuous mode [ 1895.822952][T27789] team0 (unregistering): Port device team_slave_1 removed [ 1895.869102][T27789] team0 (unregistering): Port device team_slave_0 removed [ 1896.562463][ T4114] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1896.711377][ T4114] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1896.754560][ T5832] Bluetooth: hci2: command tx timeout [ 1896.798984][ T4114] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1896.852722][ T4114] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1897.592023][ T4233] ERROR: Out of memory at tomoyo_memory_ok. [ 1897.804021][ T4114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1897.948347][ T4114] 8021q: adding VLAN 0 to HW filter on device team0 [ 1897.979488][ T4237] can: request_module (can-proto-3) failed. [ 1898.121606][T27789] bridge0: port 1(bridge_slave_0) entered blocking state [ 1898.128764][T27789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1898.158492][ T4243] FAULT_INJECTION: forcing a failure. [ 1898.158492][ T4243] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1898.206203][T27789] bridge0: port 2(bridge_slave_1) entered blocking state [ 1898.213331][T27789] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1898.264744][ T4243] CPU: 1 UID: 0 PID: 4243 Comm: syz.0.7334 Tainted: G U 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1898.264795][ T4243] Tainted: [U]=USER [ 1898.264802][ T4243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1898.264814][ T4243] Call Trace: [ 1898.264822][ T4243] [ 1898.264829][ T4243] dump_stack_lvl+0x16c/0x1f0 [ 1898.264866][ T4243] should_fail_ex+0x512/0x640 [ 1898.264900][ T4243] should_fail_alloc_page+0xe7/0x130 [ 1898.264922][ T4243] prepare_alloc_pages+0x3c2/0x610 [ 1898.264947][ T4243] ? rcu_is_watching+0x12/0xc0 [ 1898.264970][ T4243] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1898.265006][ T4243] ? rcu_is_watching+0x12/0xc0 [ 1898.265026][ T4243] ? trace_mm_page_alloc+0x11f/0x1a0 [ 1898.265049][ T4243] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 1898.265081][ T4243] ? __pfx_stack_trace_save+0x10/0x10 [ 1898.265105][ T4243] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1898.265145][ T4243] ? alloc_vmap_area+0xdc8/0x29c0 [ 1898.265166][ T4243] ? __vmalloc_node_range_noprof+0x271/0x14b0 [ 1898.265191][ T4243] ? __snd_dma_alloc_pages+0x53/0x90 [ 1898.265217][ T4243] ? snd_dma_alloc_dir_pages+0x151/0x240 [ 1898.265242][ T4243] ? do_alloc_pages+0x115/0x280 [ 1898.265264][ T4243] ? snd_pcm_lib_malloc_pages+0x3df/0x980 [ 1898.265289][ T4243] ? snd_pcm_hw_params+0x15e1/0x1b40 [ 1898.265314][ T4243] ? snd_pcm_kernel_ioctl+0x147/0x2e0 [ 1898.265339][ T4243] ? snd_pcm_oss_change_params_locked+0x1432/0x3a30 [ 1898.265365][ T4243] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1898.265392][ T4243] alloc_pages_bulk_noprof+0x71c/0x1410 [ 1898.265422][ T4243] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1898.265455][ T4243] ? policy_nodemask+0xea/0x4e0 [ 1898.265491][ T4243] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1898.265523][ T4243] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1898.265554][ T4243] kasan_populate_vmalloc+0xf1/0x1f0 [ 1898.265588][ T4243] alloc_vmap_area+0x959/0x29c0 [ 1898.265621][ T4243] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1898.265649][ T4243] __get_vm_area_node+0x1ca/0x330 [ 1898.265678][ T4243] __vmalloc_node_range_noprof+0x271/0x14b0 [ 1898.265705][ T4243] ? __snd_dma_alloc_pages+0x53/0x90 [ 1898.265739][ T4243] ? __snd_dma_alloc_pages+0x53/0x90 [ 1898.265780][ T4243] ? rcu_is_watching+0x12/0xc0 [ 1898.265815][ T4243] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1898.265846][ T4243] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 1898.265884][ T4243] ? __snd_dma_alloc_pages+0x53/0x90 [ 1898.265911][ T4243] __vmalloc_node_noprof+0xad/0xf0 [ 1898.265936][ T4243] ? __snd_dma_alloc_pages+0x53/0x90 [ 1898.265962][ T4243] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 1898.265993][ T4243] __snd_dma_alloc_pages+0x53/0x90 [ 1898.266020][ T4243] snd_dma_alloc_dir_pages+0x151/0x240 [ 1898.266050][ T4243] do_alloc_pages+0x115/0x280 [ 1898.266078][ T4243] snd_pcm_lib_malloc_pages+0x3df/0x980 [ 1898.266109][ T4243] snd_pcm_hw_params+0x15e1/0x1b40 [ 1898.266140][ T4243] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 1898.266168][ T4243] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 1898.266194][ T4243] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 1898.266219][ T4243] ? __asan_memset+0x23/0x50 [ 1898.266248][ T4243] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 1898.266276][ T4243] snd_pcm_oss_change_params_locked+0x1432/0x3a30 [ 1898.266311][ T4243] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1898.266337][ T4243] ? __pfx___mutex_lock+0x10/0x10 [ 1898.266386][ T4243] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 1898.266414][ T4243] snd_pcm_oss_get_formats+0x7e/0x340 [ 1898.266435][ T4243] ? find_held_lock+0x2b/0x80 [ 1898.266455][ T4243] ? __pfx_snd_pcm_oss_get_formats+0x10/0x10 [ 1898.266477][ T4243] ? __might_fault+0x13b/0x190 [ 1898.266513][ T4243] snd_pcm_oss_ioctl+0x2efb/0x37a0 [ 1898.266536][ T4243] ? find_held_lock+0x2b/0x80 [ 1898.266555][ T4243] ? hook_file_ioctl_common+0x145/0x410 [ 1898.266578][ T4243] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1898.266604][ T4243] ? __fget_files+0x20e/0x3c0 [ 1898.266635][ T4243] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1898.266660][ T4243] __x64_sys_ioctl+0x18b/0x210 [ 1898.266686][ T4243] do_syscall_64+0xcd/0x490 [ 1898.266719][ T4243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1898.266740][ T4243] RIP: 0033:0x7f3247d8e929 [ 1898.266756][ T4243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1898.266776][ T4243] RSP: 002b:00007f3248c2a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1898.266800][ T4243] RAX: ffffffffffffffda RBX: 00007f3247fb5fa0 RCX: 00007f3247d8e929 [ 1898.266814][ T4243] RDX: 0000200000000040 RSI: 00000000c0045005 RDI: 0000000000000006 [ 1898.266827][ T4243] RBP: 00007f3247e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1898.266839][ T4243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1898.266852][ T4243] R13: 0000000000000000 R14: 00007f3247fb5fa0 R15: 00007fff77780188 [ 1898.266878][ T4243] [ 1898.746286][ T4243] warn_alloc: 1 callbacks suppressed [ 1898.746302][ T4243] syz.0.7334: vmalloc error: size 2097152, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1898.766344][ T4243] CPU: 1 UID: 0 PID: 4243 Comm: syz.0.7334 Tainted: G U 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1898.766377][ T4243] Tainted: [U]=USER [ 1898.766385][ T4243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1898.766398][ T4243] Call Trace: [ 1898.766405][ T4243] [ 1898.766413][ T4243] dump_stack_lvl+0x16c/0x1f0 [ 1898.766450][ T4243] warn_alloc+0x248/0x3a0 [ 1898.766483][ T4243] ? __pfx_warn_alloc+0x10/0x10 [ 1898.766514][ T4243] ? kfree+0x2b4/0x4d0 [ 1898.766545][ T4243] ? __get_vm_area_node+0x208/0x330 [ 1898.766574][ T4243] __vmalloc_node_range_noprof+0xb2d/0x14b0 [ 1898.766610][ T4243] ? __snd_dma_alloc_pages+0x53/0x90 [ 1898.766639][ T4243] ? rcu_is_watching+0x12/0xc0 [ 1898.766663][ T4243] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1898.766694][ T4243] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 1898.766730][ T4243] ? __snd_dma_alloc_pages+0x53/0x90 [ 1898.766763][ T4243] __vmalloc_node_noprof+0xad/0xf0 [ 1898.766788][ T4243] ? __snd_dma_alloc_pages+0x53/0x90 [ 1898.766814][ T4243] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 1898.766845][ T4243] __snd_dma_alloc_pages+0x53/0x90 [ 1898.766873][ T4243] snd_dma_alloc_dir_pages+0x151/0x240 [ 1898.766904][ T4243] do_alloc_pages+0x115/0x280 [ 1898.766932][ T4243] snd_pcm_lib_malloc_pages+0x3df/0x980 [ 1898.766963][ T4243] snd_pcm_hw_params+0x15e1/0x1b40 [ 1898.766994][ T4243] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 1898.767021][ T4243] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 1898.767048][ T4243] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 1898.767072][ T4243] ? __asan_memset+0x23/0x50 [ 1898.767101][ T4243] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 1898.767128][ T4243] snd_pcm_oss_change_params_locked+0x1432/0x3a30 [ 1898.767164][ T4243] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1898.767189][ T4243] ? __pfx___mutex_lock+0x10/0x10 [ 1898.767238][ T4243] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 1898.767266][ T4243] snd_pcm_oss_get_formats+0x7e/0x340 [ 1898.767287][ T4243] ? find_held_lock+0x2b/0x80 [ 1898.767307][ T4243] ? __pfx_snd_pcm_oss_get_formats+0x10/0x10 [ 1898.767329][ T4243] ? __might_fault+0x13b/0x190 [ 1898.767365][ T4243] snd_pcm_oss_ioctl+0x2efb/0x37a0 [ 1898.767394][ T4243] ? find_held_lock+0x2b/0x80 [ 1898.767413][ T4243] ? hook_file_ioctl_common+0x145/0x410 [ 1898.767436][ T4243] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1898.767462][ T4243] ? __fget_files+0x20e/0x3c0 [ 1898.767494][ T4243] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1898.767519][ T4243] __x64_sys_ioctl+0x18b/0x210 [ 1898.767545][ T4243] do_syscall_64+0xcd/0x490 [ 1898.767579][ T4243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1898.767600][ T4243] RIP: 0033:0x7f3247d8e929 [ 1898.767616][ T4243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1898.767637][ T4243] RSP: 002b:00007f3248c2a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1898.767656][ T4243] RAX: ffffffffffffffda RBX: 00007f3247fb5fa0 RCX: 00007f3247d8e929 [ 1898.767669][ T4243] RDX: 0000200000000040 RSI: 00000000c0045005 RDI: 0000000000000006 [ 1898.767683][ T4243] RBP: 00007f3247e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1898.767695][ T4243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1898.767708][ T4243] R13: 0000000000000000 R14: 00007f3247fb5fa0 R15: 00007fff77780188 [ 1898.767734][ T4243] [ 1898.767789][ T4243] Mem-Info: [ 1899.106144][ T4243] active_anon:26593 inactive_anon:0 isolated_anon:0 [ 1899.106144][ T4243] active_file:9676 inactive_file:52342 isolated_file:0 [ 1899.106144][ T4243] unevictable:768 dirty:475 writeback:0 [ 1899.106144][ T4243] slab_reclaimable:11995 slab_unreclaimable:97869 [ 1899.106144][ T4243] mapped:27877 shmem:10121 pagetables:1514 [ 1899.106144][ T4243] sec_pagetables:0 bounce:0 [ 1899.106144][ T4243] kernel_misc_reclaimable:0 [ 1899.106144][ T4243] free:1289589 free_pcp:12749 free_cma:0 [ 1899.152164][ T4243] Node 0 active_anon:106372kB inactive_anon:0kB active_file:38700kB inactive_file:209236kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:111508kB dirty:1896kB writeback:0kB shmem:38948kB shmem_thp:34816kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11568kB pagetables:5912kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1899.186423][ T4243] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1899.217876][ T4243] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1899.282338][ T4243] lowmem_reserve[]: 0 2481 2482 2482 2482 [ 1899.288404][ T4243] Node 0 DMA32 free:1227536kB boost:0kB min:34332kB low:42912kB high:51492kB reserved_highatomic:0KB free_highatomic:0KB active_anon:106432kB inactive_anon:0kB active_file:38700kB inactive_file:207920kB unevictable:1536kB writepending:1896kB present:3129332kB managed:2540848kB mlocked:0kB bounce:0kB free_pcp:42172kB local_pcp:42172kB free_cma:0kB [ 1899.321027][ T4243] lowmem_reserve[]: 0 0 1 1 1 [ 1899.326190][ T4243] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:16kB free_cma:0kB [ 1899.392114][ T4243] lowmem_reserve[]: 0 0 0 0 0 [ 1899.402219][ T4243] Node 1 Normal free:3915656kB boost:0kB min:55552kB low:69440kB high:83328kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:132kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:8360kB local_pcp:8360kB free_cma:0kB [ 1899.438904][ T4114] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1899.450232][ T4114] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1899.476075][ T4243] lowmem_reserve[]: 0 0 0 0 0 [ 1899.481158][ T4243] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1899.494090][ T4243] Node 0 DMA32: 6034*4kB (UM) 4941*8kB (UM) 3598*16kB (UME) 2873*32kB (UME) 1322*64kB (UME) 660*128kB (UME) 288*256kB (UME) 155*512kB (UM) 62*1024kB (UM) 3*2048kB (UM) 152*4096kB (UM) = 1227568kB [ 1899.519873][ T4243] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1899.533238][ T4243] Node 1 Normal: 115*4kB (UM) 55*8kB (UE) 43*16kB (UE) 224*32kB (UE) 108*64kB (UME) 31*128kB (UE) 15*256kB (UME) 6*512kB (UM) 4*1024kB (UME) 3*2048kB (UME) 947*4096kB (M) = 3915700kB [ 1899.552064][ T4243] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1899.568120][ T4243] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1899.593143][ T4243] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1899.615868][ T4243] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1899.640337][ T4243] 72646 total pagecache pages [ 1899.650480][ T4243] 0 pages in swap cache [ 1899.655470][ T4243] Free swap = 124996kB [ 1899.659643][ T4243] Total swap = 124996kB [ 1899.666635][ T4243] 2097051 pages RAM [ 1899.670465][ T4243] 0 pages HighMem/MovableOnly [ 1899.675317][ T4243] 429861 pages reserved [ 1899.679536][ T4243] 0 pages cma reserved [ 1900.323479][ T4114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1900.394823][ T4261] ERROR: Out of memory at tomoyo_memory_ok. [ 1900.517179][ T4114] veth0_vlan: entered promiscuous mode [ 1900.575778][ T4114] veth1_vlan: entered promiscuous mode [ 1900.731372][ T4114] veth0_macvtap: entered promiscuous mode [ 1900.800828][ T4114] veth1_macvtap: entered promiscuous mode [ 1900.891590][ T4114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1900.961702][ T4114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1901.283420][ T4114] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1901.373102][ T4114] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1901.418377][ T4114] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1901.483728][ T4114] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1902.047973][ T8807] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1902.124607][ T8807] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1902.219599][T20798] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1902.259491][T20798] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1904.652723][ T4302] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 1905.342856][ T30] audit: type=1326 audit(4294967373.920:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4349 comm="syz.3.7350" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7e11d8e929 code=0x0 [ 1905.490124][ T4347] ERROR: Out of memory at tomoyo_memory_ok. [ 1907.703530][ T4386] netlink: 'syz.0.7359': attribute type 4 has an invalid length. [ 1907.768758][ T4386] netlink: 314 bytes leftover after parsing attributes in process `syz.0.7359'. [ 1908.157959][ T4392] net_ratelimit: 998 callbacks suppressed [ 1908.157975][ T4392] netlink: zone id is out of range [ 1908.233052][ T4397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7362'. [ 1908.247525][ T4392] netlink: zone id is out of range [ 1908.283096][ T4392] netlink: zone id is out of range [ 1908.314725][ T4392] netlink: zone id is out of range [ 1908.351195][ T4392] netlink: zone id is out of range [ 1908.371564][ T4392] netlink: zone id is out of range [ 1908.400412][ T4392] netlink: zone id is out of range [ 1908.437115][ T4392] netlink: zone id is out of range [ 1908.459184][ T4392] netlink: zone id is out of range [ 1908.467187][ T4379] ERROR: Out of memory at tomoyo_memory_ok. [ 1908.484128][ T4392] netlink: zone id is out of range [ 1909.871631][ T4414] ERROR: Out of memory at tomoyo_memory_ok. [ 1912.505729][ T4480] FAULT_INJECTION: forcing a failure. [ 1912.505729][ T4480] name failslab, interval 1, probability 0, space 0, times 0 [ 1912.714418][ T4480] CPU: 1 UID: 0 PID: 4480 Comm: syz.4.7378 Tainted: G U 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1912.714453][ T4480] Tainted: [U]=USER [ 1912.714460][ T4480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1912.714472][ T4480] Call Trace: [ 1912.714478][ T4480] [ 1912.714486][ T4480] dump_stack_lvl+0x16c/0x1f0 [ 1912.714522][ T4480] should_fail_ex+0x512/0x640 [ 1912.714555][ T4480] should_failslab+0xc2/0x120 [ 1912.714574][ T4480] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1912.714602][ T4480] ? proc_thread_self_get_link+0x1c6/0x240 [ 1912.714636][ T4480] proc_thread_self_get_link+0x1c6/0x240 [ 1912.714664][ T4480] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 1912.714699][ T4480] step_into+0x195e/0x2270 [ 1912.714733][ T4480] ? __pfx_step_into+0x10/0x10 [ 1912.714762][ T4480] ? lookup_fast+0x156/0x610 [ 1912.714789][ T4480] walk_component+0xfc/0x5b0 [ 1912.714816][ T4480] link_path_walk+0x627/0xe20 [ 1912.714850][ T4480] path_openat+0x1b0/0x2cb0 [ 1912.714877][ T4480] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1912.714907][ T4480] ? __pfx_path_openat+0x10/0x10 [ 1912.714937][ T4480] ? __lock_acquire+0xb8a/0x1c90 [ 1912.714966][ T4480] do_filp_open+0x20b/0x470 [ 1912.714994][ T4480] ? __pfx_do_filp_open+0x10/0x10 [ 1912.715041][ T4480] ? alloc_fd+0x471/0x7d0 [ 1912.715074][ T4480] do_sys_openat2+0x11b/0x1d0 [ 1912.715097][ T4480] ? __pfx_do_sys_openat2+0x10/0x10 [ 1912.715129][ T4480] __x64_sys_openat+0x174/0x210 [ 1912.715152][ T4480] ? __pfx___x64_sys_openat+0x10/0x10 [ 1912.715185][ T4480] do_syscall_64+0xcd/0x490 [ 1912.715218][ T4480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1912.715238][ T4480] RIP: 0033:0x7f22c018e929 [ 1912.715255][ T4480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1912.715275][ T4480] RSP: 002b:00007f22c1095038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1912.715294][ T4480] RAX: ffffffffffffffda RBX: 00007f22c03b5fa0 RCX: 00007f22c018e929 [ 1912.715308][ T4480] RDX: 0000000000000280 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1912.715321][ T4480] RBP: 00007f22c0210b39 R08: 0000000000000000 R09: 0000000000000000 [ 1912.715333][ T4480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1912.715345][ T4480] R13: 0000000000000000 R14: 00007f22c03b5fa0 R15: 00007ffc1f7609e8 [ 1912.715370][ T4480] [ 1913.586469][ T4497] ERROR: Out of memory at tomoyo_memory_ok. [ 1914.208853][ T1358] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1914.223567][ T1358] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1914.231519][ T1358] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1914.242297][ T1358] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1914.251365][ T1358] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1916.354802][ T1358] Bluetooth: hci3: command tx timeout [ 1917.398204][ T4444] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1917.655969][ T4444] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1917.910983][ T4444] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1918.156817][ T4444] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1918.408957][ T4500] chnl_net:caif_netlink_parms(): no params data found [ 1918.441693][ T1358] Bluetooth: hci3: command tx timeout [ 1918.740407][ T4546] net_ratelimit: 494 callbacks suppressed [ 1918.740423][ T4546] netlink: zone id is out of range [ 1918.772561][ T4546] netlink: zone id is out of range [ 1918.789623][ T4546] netlink: zone id is out of range [ 1918.806286][ T4546] netlink: zone id is out of range [ 1918.821613][ T4546] netlink: zone id is out of range [ 1918.831718][ T4546] netlink: zone id is out of range [ 1918.844555][ T4546] netlink: zone id is out of range [ 1918.857504][ T4546] netlink: zone id is out of range [ 1918.870732][ T4546] netlink: zone id is out of range [ 1918.883714][ T4546] netlink: zone id is out of range [ 1919.111418][ T4444] dummy0: left allmulticast mode [ 1919.144585][ T4444] dummy0: left promiscuous mode [ 1919.161945][ T4444] bridge0: port 3(dummy0) entered disabled state [ 1919.237520][ T4444] bridge_slave_1: left allmulticast mode [ 1919.253015][ T4444] bridge_slave_1: left promiscuous mode [ 1919.279301][ T4444] bridge0: port 2(bridge_slave_1) entered disabled state [ 1919.330877][ T4444] bridge_slave_0: left allmulticast mode [ 1919.366526][ T4444] bridge_slave_0: left promiscuous mode [ 1919.405251][ T4444] bridge0: port 1(bridge_slave_0) entered disabled state [ 1919.879067][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1919.885441][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1920.491264][ T4444] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1920.518686][ T1358] Bluetooth: hci3: command tx timeout [ 1920.539860][ T4444] bond0 (unregistering): Released all slaves [ 1920.891369][ T4500] bridge0: port 1(bridge_slave_0) entered blocking state [ 1920.931798][ T4500] bridge0: port 1(bridge_slave_0) entered disabled state [ 1920.979668][ T4500] bridge_slave_0: entered allmulticast mode [ 1921.011387][ T4500] bridge_slave_0: entered promiscuous mode [ 1921.047078][ T4500] bridge0: port 2(bridge_slave_1) entered blocking state [ 1921.129021][ T4500] bridge0: port 2(bridge_slave_1) entered disabled state [ 1921.175899][ T4500] bridge_slave_1: entered allmulticast mode [ 1921.214926][ T4500] bridge_slave_1: entered promiscuous mode [ 1921.492584][ T4500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1921.547331][ T4500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1921.734653][ T4500] team0: Port device team_slave_0 added [ 1921.808378][ T4500] team0: Port device team_slave_1 added [ 1922.083706][ T4500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1922.107891][ T4500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1922.203436][ T4500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1922.328250][ T4500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1922.388668][ T4500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1922.522578][ T4500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1922.598609][ T1358] Bluetooth: hci3: command tx timeout [ 1922.829967][ T4500] hsr_slave_0: entered promiscuous mode [ 1922.866564][ T4500] hsr_slave_1: entered promiscuous mode [ 1924.125830][ T4639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7407'. [ 1924.704816][ T4444] hsr_slave_0: left promiscuous mode [ 1924.768972][ T4444] hsr_slave_1: left promiscuous mode [ 1924.813384][ T4444] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1924.860766][ T4444] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1924.944954][ T4444] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1924.999649][ T4444] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1925.137965][ T4444] veth0_macvtap: left promiscuous mode [ 1925.178639][ T4444] veth1_vlan: left promiscuous mode [ 1925.228126][ T4444] veth0_vlan: left promiscuous mode [ 1926.374154][ T4444] team0 (unregistering): Port device team_slave_1 removed [ 1926.418749][ T4444] team0 (unregistering): Port device team_slave_0 removed [ 1927.710248][ T4500] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1927.808556][ T4500] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1927.870581][ T4500] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1928.180246][ T4500] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1928.414192][ T4689] kexec: Could not allocate control_code_buffer [ 1928.953495][ T4500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1929.120995][ T4500] 8021q: adding VLAN 0 to HW filter on device team0 [ 1929.218897][ T4438] bridge0: port 1(bridge_slave_0) entered blocking state [ 1929.226052][ T4438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1929.310530][ T4438] bridge0: port 2(bridge_slave_1) entered blocking state [ 1929.317673][ T4438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1930.037069][ T4500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1930.151673][ T4500] veth0_vlan: entered promiscuous mode [ 1930.190483][ T4500] veth1_vlan: entered promiscuous mode [ 1930.275971][ T4500] veth0_macvtap: entered promiscuous mode [ 1930.302149][ T4500] veth1_macvtap: entered promiscuous mode [ 1930.387854][ T4500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1930.450972][ T4500] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1930.483046][ T4500] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1930.527643][ T4500] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1930.536355][ T4500] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1930.597267][ T4500] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1930.826897][ T4758] FAULT_INJECTION: forcing a failure. [ 1930.826897][ T4758] name failslab, interval 1, probability 0, space 0, times 0 [ 1930.879667][ T4758] CPU: 1 UID: 0 PID: 4758 Comm: syz.4.7427 Tainted: G U 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1930.879702][ T4758] Tainted: [U]=USER [ 1930.879709][ T4758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1930.879721][ T4758] Call Trace: [ 1930.879728][ T4758] [ 1930.879746][ T4758] dump_stack_lvl+0x16c/0x1f0 [ 1930.879782][ T4758] should_fail_ex+0x512/0x640 [ 1930.879813][ T4758] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 1930.879850][ T4758] should_failslab+0xc2/0x120 [ 1930.879870][ T4758] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 1930.879903][ T4758] ? __pfx__proc_mkdir+0x10/0x10 [ 1930.879935][ T4758] ? nf_lwtunnel_net_init+0x38/0xf0 [ 1930.879959][ T4758] ? __pfx_nf_lwtunnel_net_init+0x10/0x10 [ 1930.879983][ T4758] kmemdup_noprof+0x29/0x60 [ 1930.880020][ T4758] nf_lwtunnel_net_init+0x38/0xf0 [ 1930.880043][ T4758] ops_init+0x1df/0x5f0 [ 1930.880064][ T4758] setup_net+0x1ff/0x510 [ 1930.880081][ T4758] ? lockdep_init_map_type+0x5c/0x280 [ 1930.880110][ T4758] ? __pfx_setup_net+0x10/0x10 [ 1930.880131][ T4758] ? debug_mutex_init+0x37/0x70 [ 1930.880152][ T4758] copy_net_ns+0x2a6/0x5f0 [ 1930.880176][ T4758] create_new_namespaces+0x3ea/0xa90 [ 1930.880204][ T4758] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1930.880228][ T4758] ksys_unshare+0x45b/0xa40 [ 1930.880255][ T4758] ? __pfx_ksys_unshare+0x10/0x10 [ 1930.880283][ T4758] ? xfd_validate_state+0x61/0x180 [ 1930.880317][ T4758] __x64_sys_unshare+0x31/0x40 [ 1930.880343][ T4758] do_syscall_64+0xcd/0x490 [ 1930.880377][ T4758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1930.880398][ T4758] RIP: 0033:0x7f22c018e929 [ 1930.880413][ T4758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1930.880433][ T4758] RSP: 002b:00007f22c1074038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1930.880452][ T4758] RAX: ffffffffffffffda RBX: 00007f22c03b6080 RCX: 00007f22c018e929 [ 1930.880465][ T4758] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1930.880477][ T4758] RBP: 00007f22c0210b39 R08: 0000000000000000 R09: 0000000000000000 [ 1930.880490][ T4758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1930.880502][ T4758] R13: 0000000000000000 R14: 00007f22c03b6080 R15: 00007ffc1f7609e8 [ 1930.880527][ T4758] [ 1931.894392][ T4438] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1931.928512][ T4764] FAULT_INJECTION: forcing a failure. [ 1931.928512][ T4764] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1931.956440][ T4438] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1931.976487][ T4764] CPU: 1 UID: 0 PID: 4764 Comm: syz.0.7429 Tainted: G U 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1931.976519][ T4764] Tainted: [U]=USER [ 1931.976526][ T4764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1931.976538][ T4764] Call Trace: [ 1931.976545][ T4764] [ 1931.976552][ T4764] dump_stack_lvl+0x16c/0x1f0 [ 1931.976586][ T4764] should_fail_ex+0x512/0x640 [ 1931.976618][ T4764] _copy_from_user+0x2e/0xd0 [ 1931.976657][ T4764] copy_from_sockptr_offset.constprop.0+0x136/0x170 [ 1931.976686][ T4764] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 1931.976716][ T4764] ? bpf_lsm_capable+0x9/0x10 [ 1931.976741][ T4764] ? security_capable+0x7e/0x260 [ 1931.976777][ T4764] ip6_mroute_setsockopt+0x1772/0x20d0 [ 1931.976813][ T4764] ? __pfx_ip6_mroute_setsockopt+0x10/0x10 [ 1931.976852][ T4764] ? find_held_lock+0x2b/0x80 [ 1931.976873][ T4764] ? is_bpf_text_address+0x8a/0x1a0 [ 1931.976907][ T4764] ? kernel_text_address+0x8d/0x100 [ 1931.976938][ T4764] ? __kernel_text_address+0xd/0x40 [ 1931.976968][ T4764] ? unwind_get_return_address+0x59/0xa0 [ 1931.977000][ T4764] ? arch_stack_walk+0xa6/0x100 [ 1931.977035][ T4764] ? do_ipv6_setsockopt+0x7b1/0x4300 [ 1931.977058][ T4764] do_ipv6_setsockopt+0x7b1/0x4300 [ 1931.977087][ T4764] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 1931.977110][ T4764] ? _kstrtoull+0x145/0x200 [ 1931.977134][ T4764] ? aa_label_sk_perm+0x19b/0x5a0 [ 1931.977160][ T4764] ? find_held_lock+0x2b/0x80 [ 1931.977178][ T4764] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1931.977202][ T4764] ? __lock_acquire+0x622/0x1c90 [ 1931.977246][ T4764] ? __pfx___might_resched+0x10/0x10 [ 1931.977273][ T4764] ? ipv6_setsockopt+0xcb/0x170 [ 1931.977294][ T4764] ipv6_setsockopt+0xcb/0x170 [ 1931.977318][ T4764] rawv6_setsockopt+0xc2/0x510 [ 1931.977340][ T4764] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 1931.977362][ T4764] ? sock_common_setsockopt+0x2e/0xf0 [ 1931.977385][ T4764] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1931.977408][ T4764] do_sock_setsockopt+0x224/0x470 [ 1931.977429][ T4764] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1931.977465][ T4764] __sys_setsockopt+0x120/0x1a0 [ 1931.977498][ T4764] __x64_sys_setsockopt+0xbd/0x160 [ 1931.977529][ T4764] ? do_syscall_64+0x91/0x490 [ 1931.977559][ T4764] ? lockdep_hardirqs_on+0x7c/0x110 [ 1931.977588][ T4764] do_syscall_64+0xcd/0x490 [ 1931.977620][ T4764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1931.977645][ T4764] RIP: 0033:0x7f3247d8e929 [ 1931.977661][ T4764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1931.977680][ T4764] RSP: 002b:00007f3248c2a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1931.977699][ T4764] RAX: ffffffffffffffda RBX: 00007f3247fb5fa0 RCX: 00007f3247d8e929 [ 1931.977712][ T4764] RDX: 00000000000000d1 RSI: 0000000000000029 RDI: 0400000000000003 [ 1931.977725][ T4764] RBP: 00007f3248c2a090 R08: 0000000000000004 R09: 0000000000000000 [ 1931.977737][ T4764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1931.977749][ T4764] R13: 0000000000000000 R14: 00007f3247fb5fa0 R15: 00007fff77780188 [ 1931.977774][ T4764] [ 1932.700324][ T4438] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1932.739688][ T4438] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1933.044667][ T4781] net_ratelimit: 494 callbacks suppressed [ 1933.044684][ T4781] netlink: zone id is out of range [ 1933.108148][ T4781] netlink: zone id is out of range [ 1933.145953][ T4781] netlink: zone id is out of range [ 1933.168262][ T4781] netlink: zone id is out of range [ 1933.186744][ T4781] netlink: zone id is out of range [ 1933.212362][ T4781] netlink: zone id is out of range [ 1933.267538][ T4781] netlink: zone id is out of range [ 1933.301405][ T4781] netlink: zone id is out of range [ 1933.338007][ T4781] netlink: zone id is out of range [ 1933.366222][ T4781] netlink: zone id is out of range [ 1934.173080][ T4810] ERROR: Out of memory at tomoyo_memory_ok. [ 1937.956350][ T4891] ERROR: Out of memory at tomoyo_memory_ok. [ 1938.725926][ T4912] net_ratelimit: 998 callbacks suppressed [ 1938.725944][ T4912] netlink: zone id is out of range [ 1938.794613][ T4912] netlink: zone id is out of range [ 1938.814589][ T4912] netlink: zone id is out of range [ 1938.834572][ T4912] netlink: zone id is out of range [ 1938.843634][ T4912] netlink: zone id is out of range [ 1938.877143][ T4912] netlink: zone id is out of range [ 1938.893706][ T4912] netlink: zone id is out of range [ 1938.931806][ T4912] netlink: zone id is out of range [ 1938.957883][ T4912] netlink: zone id is out of range [ 1938.973084][ T4912] netlink: zone id is out of range [ 1940.989222][ T4960] netlink: 338 bytes leftover after parsing attributes in process `syz.3.7457'. [ 1941.070844][ T4961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7457'. [ 1941.144954][ T4960] macsec0: entered promiscuous mode [ 1941.150326][ T4960] macsec0: entered allmulticast mode [ 1941.232743][ T4960] veth1_macvtap: entered allmulticast mode [ 1941.254093][ T4948] could not allocate digest TFM handle [ 1942.358885][ T4979] zswap: compressor not available [ 1942.460631][ T4989] FAULT_INJECTION: forcing a failure. [ 1942.460631][ T4989] name failslab, interval 1, probability 0, space 0, times 0 [ 1942.548534][ T4989] CPU: 1 UID: 0 PID: 4989 Comm: syz.3.7466 Tainted: G U 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1942.548570][ T4989] Tainted: [U]=USER [ 1942.548577][ T4989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1942.548590][ T4989] Call Trace: [ 1942.548597][ T4989] [ 1942.548605][ T4989] dump_stack_lvl+0x16c/0x1f0 [ 1942.548647][ T4989] should_fail_ex+0x512/0x640 [ 1942.548678][ T4989] ? fs_reclaim_acquire+0xae/0x150 [ 1942.548705][ T4989] should_failslab+0xc2/0x120 [ 1942.548729][ T4989] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1942.548757][ T4989] ? tomoyo_write_log2+0x33d/0xc10 [ 1942.548788][ T4989] tomoyo_write_log2+0x33d/0xc10 [ 1942.548820][ T4989] tomoyo_supervisor+0x15e/0x13b0 [ 1942.548857][ T4989] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 1942.548904][ T4989] ? lockdep_hardirqs_on+0x7c/0x110 [ 1942.548939][ T4989] ? tomoyo_check_path_acl+0xad/0x210 [ 1942.548964][ T4989] ? tomoyo_check_acl+0x1f7/0x410 [ 1942.548992][ T4989] tomoyo_path_permission+0x270/0x3b0 [ 1942.549018][ T4989] tomoyo_check_open_permission+0x37b/0x3c0 [ 1942.549044][ T4989] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1942.549098][ T4989] ? do_raw_spin_lock+0x12c/0x2b0 [ 1942.549137][ T4989] tomoyo_file_open+0x6b/0x90 [ 1942.549170][ T4989] security_file_open+0x84/0x1e0 [ 1942.549202][ T4989] do_dentry_open+0x596/0x1c10 [ 1942.549240][ T4989] vfs_open+0x82/0x3f0 [ 1942.549264][ T4989] path_openat+0x1de4/0x2cb0 [ 1942.549302][ T4989] ? __pfx_path_openat+0x10/0x10 [ 1942.549337][ T4989] ? __lock_acquire+0xb8a/0x1c90 [ 1942.549366][ T4989] do_filp_open+0x20b/0x470 [ 1942.549398][ T4989] ? __pfx_do_filp_open+0x10/0x10 [ 1942.549450][ T4989] ? alloc_fd+0x471/0x7d0 [ 1942.549486][ T4989] do_sys_openat2+0x11b/0x1d0 [ 1942.549508][ T4989] ? __pfx_do_sys_openat2+0x10/0x10 [ 1942.549541][ T4989] __x64_sys_openat+0x174/0x210 [ 1942.549568][ T4989] ? __pfx___x64_sys_openat+0x10/0x10 [ 1942.549602][ T4989] do_syscall_64+0xcd/0x490 [ 1942.549636][ T4989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1942.549662][ T4989] RIP: 0033:0x7f3425b8e929 [ 1942.549683][ T4989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1942.549704][ T4989] RSP: 002b:00007f3426a3e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1942.549723][ T4989] RAX: ffffffffffffffda RBX: 00007f3425db5fa0 RCX: 00007f3425b8e929 [ 1942.549738][ T4989] RDX: 0000000000040000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 1942.549752][ T4989] RBP: 00007f3425c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1942.549765][ T4989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1942.549778][ T4989] R13: 0000000000000000 R14: 00007f3425db5fa0 R15: 00007ffc185d30a8 [ 1942.549808][ T4989] [ 1944.356711][ T5025] net_ratelimit: 998 callbacks suppressed [ 1944.356727][ T5025] netlink: zone id is out of range [ 1944.356748][ T5025] netlink: zone id is out of range [ 1944.356757][ T5025] netlink: zone id is out of range [ 1944.356764][ T5025] netlink: zone id is out of range [ 1944.356775][ T5025] netlink: zone id is out of range [ 1944.356782][ T5025] netlink: zone id is out of range [ 1944.356790][ T5025] netlink: zone id is out of range [ 1944.356798][ T5025] netlink: zone id is out of range [ 1944.356806][ T5025] netlink: zone id is out of range [ 1944.356813][ T5025] netlink: zone id is out of range [ 1944.975082][ T30] audit: type=1804 audit(4294969461.627:39): pid=5029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.7473" name="/newroot/599/file0" dev="tmpfs" ino=3166 res=1 errno=0 [ 1945.025716][ T5033] ERROR: Out of memory at tomoyo_memory_ok. [ 1945.134700][ T30] audit: type=1800 audit(4294969461.627:40): pid=5029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7473" name="file0" dev="tmpfs" ino=3166 res=0 errno=0 [ 1947.972845][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1947.981888][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1947.991883][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1948.003287][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1948.014998][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1948.828721][ T4440] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1949.109601][ T4440] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1949.374311][ T5107] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1949.427704][ T4440] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1949.542830][ T4440] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1949.785369][ T5085] chnl_net:caif_netlink_parms(): no params data found [ 1950.089988][ T5832] Bluetooth: hci4: command tx timeout [ 1950.824452][ T4440] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1950.857032][ T4440] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1950.877102][ T4440] bond0 (unregistering): Released all slaves [ 1950.964799][ T5085] bridge0: port 1(bridge_slave_0) entered blocking state [ 1950.982908][ T5085] bridge0: port 1(bridge_slave_0) entered disabled state [ 1950.990049][ T5085] bridge_slave_0: entered allmulticast mode [ 1951.027879][ T5085] bridge_slave_0: entered promiscuous mode [ 1951.086518][ T4440] HSR: left promiscuous mode [ 1951.096252][ T5085] bridge0: port 2(bridge_slave_1) entered blocking state [ 1951.148939][ T5085] bridge0: port 2(bridge_slave_1) entered disabled state [ 1951.203879][ T5085] bridge_slave_1: entered allmulticast mode [ 1951.224221][ T5085] bridge_slave_1: entered promiscuous mode [ 1951.506805][ T5135] svc: failed to register nfsdv3 RPC service (errno 111). [ 1951.530589][ T5135] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1951.554750][ T5085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1951.734815][ T5141] net_ratelimit: 494 callbacks suppressed [ 1951.734832][ T5141] netlink: zone id is out of range [ 1951.762594][ T5085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1951.786262][ T5141] netlink: zone id is out of range [ 1951.812037][ T5141] netlink: zone id is out of range [ 1951.848747][ T5141] netlink: zone id is out of range [ 1951.875551][ T5141] netlink: zone id is out of range [ 1951.885627][ T5141] netlink: zone id is out of range [ 1951.907855][ T5141] netlink: zone id is out of range [ 1951.947599][ T5141] netlink: zone id is out of range [ 1951.979926][ T5141] netlink: zone id is out of range [ 1952.028898][ T5141] netlink: zone id is out of range [ 1952.159635][ T5832] Bluetooth: hci4: command tx timeout [ 1952.300602][ T5085] team0: Port device team_slave_0 added [ 1952.395664][ T5085] team0: Port device team_slave_1 added [ 1952.861433][ T4440] hsr_slave_0: left promiscuous mode [ 1952.912423][ T4440] hsr_slave_1: left promiscuous mode [ 1952.933408][ T4440] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1952.973356][ T4440] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1953.009901][ T4440] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1953.049059][ T4440] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1953.126860][ T4440] veth0_macvtap: left promiscuous mode [ 1953.162842][ T4440] veth1_vlan: left promiscuous mode [ 1953.182002][ T4440] veth0_vlan: left promiscuous mode [ 1954.062068][ T4440] team0 (unregistering): Port device team_slave_1 removed [ 1954.109114][ T4440] team0 (unregistering): Port device team_slave_0 removed [ 1954.232235][ T5832] Bluetooth: hci4: command tx timeout [ 1954.520372][ T5085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1954.529494][ T5085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1954.575305][ T5085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1954.660189][ T5085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1954.674325][ T5085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1954.733544][ T5085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1954.983598][ T5085] hsr_slave_0: entered promiscuous mode [ 1955.007638][ T5085] hsr_slave_1: entered promiscuous mode [ 1955.024363][ T5085] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1955.064204][ T5085] Cannot create hsr debugfs directory [ 1956.295986][ T5832] Bluetooth: hci4: command tx timeout [ 1958.415544][ T5085] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1958.489248][ T5085] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1958.586392][ T5234] FAULT_INJECTION: forcing a failure. [ 1958.586392][ T5234] name failslab, interval 1, probability 0, space 0, times 0 [ 1958.620679][ T5085] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1958.632075][ T5234] CPU: 1 UID: 0 PID: 5234 Comm: syz.3.7503 Tainted: G U 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1958.632114][ T5234] Tainted: [U]=USER [ 1958.632123][ T5234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1958.632138][ T5234] Call Trace: [ 1958.632146][ T5234] [ 1958.632155][ T5234] dump_stack_lvl+0x16c/0x1f0 [ 1958.632196][ T5234] should_fail_ex+0x512/0x640 [ 1958.632232][ T5234] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1958.632278][ T5234] should_failslab+0xc2/0x120 [ 1958.632300][ T5234] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1958.632337][ T5234] ? vm_area_dup+0x27/0x8d0 [ 1958.632373][ T5234] vm_area_dup+0x27/0x8d0 [ 1958.632407][ T5234] __split_vma+0x18e/0x1070 [ 1958.632444][ T5234] ? __pfx___split_vma+0x10/0x10 [ 1958.632494][ T5234] vms_gather_munmap_vmas+0x392/0x1310 [ 1958.632534][ T5234] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 1958.632583][ T5234] ? __pfx_copy_vma+0x10/0x10 [ 1958.632611][ T5234] ? lockdep_hardirqs_on+0x7c/0x110 [ 1958.632648][ T5234] do_vmi_align_munmap+0x27c/0x7d0 [ 1958.632682][ T5234] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 1958.632745][ T5234] do_vmi_munmap+0x204/0x3e0 [ 1958.632778][ T5234] move_vma+0x809/0x1740 [ 1958.632812][ T5234] ? __pfx_move_vma+0x10/0x10 [ 1958.632840][ T5234] ? mm_get_unmapped_area+0x95/0xe0 [ 1958.632864][ T5234] ? shmem_get_unmapped_area+0x170/0xa00 [ 1958.632899][ T5234] ? vrm_set_new_addr+0x208/0x290 [ 1958.632931][ T5234] __do_sys_mremap+0xe07/0x1590 [ 1958.632965][ T5234] ? __pfx___do_sys_mremap+0x10/0x10 [ 1958.633009][ T5234] ? __x64_sys_futex+0x1e0/0x4c0 [ 1958.633052][ T5234] do_syscall_64+0xcd/0x490 [ 1958.633086][ T5234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1958.633107][ T5234] RIP: 0033:0x7f3425b8e929 [ 1958.633124][ T5234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1958.633144][ T5234] RSP: 002b:00007f34269fc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 1958.633164][ T5234] RAX: ffffffffffffffda RBX: 00007f3425db6160 RCX: 00007f3425b8e929 [ 1958.633177][ T5234] RDX: 0000000000000008 RSI: 0000000000000002 RDI: 0000000000000000 [ 1958.633190][ T5234] RBP: 00007f3425c10b39 R08: 00007effffffb000 R09: 0000000000000000 [ 1958.633203][ T5234] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 1958.633215][ T5234] R13: 0000000000000000 R14: 00007f3425db6160 R15: 00007ffc185d30a8 [ 1958.633241][ T5234] [ 1958.884038][ T5085] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1959.521557][ T5249] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7507'. [ 1960.576600][ T5085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1960.659165][ T5085] 8021q: adding VLAN 0 to HW filter on device team0 [ 1960.740501][ T4442] bridge0: port 1(bridge_slave_0) entered blocking state [ 1960.747855][ T4442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1960.844783][ T4442] bridge0: port 2(bridge_slave_1) entered blocking state [ 1960.851971][ T4442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1961.027052][ T5085] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1962.037580][ T5085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1962.289584][ T5085] veth0_vlan: entered promiscuous mode [ 1962.339651][ T5085] veth1_vlan: entered promiscuous mode [ 1962.811300][ T5085] veth0_macvtap: entered promiscuous mode [ 1963.002216][ T5085] veth1_macvtap: entered promiscuous mode [ 1963.290959][ T5085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1963.469884][ T5085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1963.529522][ T5085] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1963.568389][ T5085] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1963.605408][ T5085] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1963.652442][ T5085] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1964.168646][T20787] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1964.266848][T20787] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1964.407771][ T8804] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1964.454174][ T8804] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1965.929725][ T5371] ERROR: Out of memory at tomoyo_memory_ok. [ 1966.874608][ T5385] ERROR: Out of memory at tomoyo_memory_ok. [ 1967.065533][ T5832] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1967.074910][ T5832] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 1967.515749][ T5388] ERROR: Out of memory at tomoyo_memory_ok. [ 1970.167206][ T5452] ERROR: Out of memory at tomoyo_memory_ok. [ 1973.521785][ T5522] ERROR: Out of memory at tomoyo_memory_ok. [ 1973.565020][ T5524] ERROR: Out of memory at tomoyo_memory_ok. [ 1973.580641][ T5525] ERROR: Out of memory at tomoyo_memory_ok. [ 1974.926081][ T5547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7552'. [ 1975.307909][ T30] audit: type=1800 audit(4294969492.135:41): pid=5557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.7553" name="trace_pipe" dev="tracefs" ino=1255 res=0 errno=0 [ 1975.404063][ T5559] Invalid ELF header magic: != ELF [ 1976.692213][ T5588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7560'. [ 1977.773929][ T5614] ERROR: Out of memory at tomoyo_memory_ok. [ 1978.011822][ T5625] net_ratelimit: 494 callbacks suppressed [ 1978.011841][ T5625] netlink: zone id is out of range [ 1978.054762][ T5625] netlink: zone id is out of range [ 1978.075474][ T5625] netlink: zone id is out of range [ 1978.096675][ T5625] netlink: zone id is out of range [ 1978.119362][ T5625] netlink: zone id is out of range [ 1978.138162][ T5625] netlink: zone id is out of range [ 1978.158622][ T5625] netlink: zone id is out of range [ 1978.176461][ T5625] netlink: zone id is out of range [ 1978.204971][ T5625] netlink: zone id is out of range [ 1978.223899][ T5625] netlink: zone id is out of range [ 1979.426840][ T5653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7574'. [ 1979.919338][ T5660] Invalid ELF header magic: != ELF [ 1980.088741][ T5664] netlink: 330 bytes leftover after parsing attributes in process `syz.4.7577'. [ 1980.320620][ T5666] mtrr: base(0x100000000) is not aligned on a size(0x0000) boundary [ 1980.661867][ T5673] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4294967293.4294967295.4294967293), cmd(2) [ 1981.003179][ T5683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7583'. [ 1981.053458][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1981.060071][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1981.117871][ T5683] netlink: 5 bytes leftover after parsing attributes in process `syz.1.7583'. [ 1981.253388][ T5683] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7583'. [ 1981.338905][ T5686] netlink: 'syz.1.7583': attribute type 2 has an invalid length. [ 1982.777350][ T5698] Invalid ELF header magic: != ELF [ 1985.079678][ T5710] net_ratelimit: 494 callbacks suppressed [ 1985.079695][ T5710] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1985.091914][ T5710] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1985.518493][ T5761] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7599'. [ 1986.493200][ T5763] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1986.576741][ T5763] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1986.613400][ T5763] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1987.064126][ T5763] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1987.176132][ T5763] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1987.182118][ T5763] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1987.260526][ T5763] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1987.304587][ T5763] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1987.336488][ T5763] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1987.407424][ T5763] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1987.484843][ T5763] CPU0 is offline. [ 1988.513382][ T5787] cgroup: fork rejected by pids controller in /syz0 [ 1988.526203][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout [ 1988.605977][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout [ 1988.816738][ T5770] kexec: Could not allocate control_code_buffer [ 1989.242372][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout [ 1989.323393][ T5832] Bluetooth: hci4: command 0x0c1a tx timeout [ 1990.678035][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout [ 1990.812109][ T30] audit: type=1800 audit(4294969507.705:42): pid=5858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7611" name="ram7" dev="tmpfs" ino=311 res=0 errno=0 [ 1991.311430][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout [ 1991.390988][ T5832] Bluetooth: hci4: command 0x0c1a tx timeout [ 1992.744859][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout [ 1993.380628][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout [ 1993.461636][ T5832] Bluetooth: hci4: command 0x0c1a tx timeout [ 1997.023845][ T5973] ERROR: Out of memory at tomoyo_memory_ok. [ 1998.589309][ T6003] block nbd1: Unsupported socket: shutdown callout must be supported. [ 1999.927946][ T6012] netlink: 86 bytes leftover after parsing attributes in process `syz.3.7637'. [ 1999.962345][ T6013] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2000.070321][ T6014] bridge0: port 3(veth0_to_bridge) entered blocking state [ 2000.108852][ T6014] bridge0: port 3(veth0_to_bridge) entered disabled state [ 2000.156890][ T6014] veth0_to_bridge: entered allmulticast mode [ 2000.235202][ T6014] veth0_to_bridge: entered promiscuous mode [ 2000.281656][ T6014] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2000.379483][ T6014] bridge0: port 3(veth0_to_bridge) entered blocking state [ 2000.386746][ T6014] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 2002.163306][ T6039] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7640'. [ 2002.900169][ T6039] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2002.938730][ T6039] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2002.965913][ T6039] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2002.989689][ T6039] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2003.022788][ T6039] CPU0 is offline. [ 2004.167035][ T6062] netlink: 'syz.1.7645': attribute type 2 has an invalid length. [ 2004.682198][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout [ 2005.002570][ T5832] Bluetooth: hci4: command 0x0c1a tx timeout [ 2005.008683][ T1358] Bluetooth: hci3: command 0x0c1a tx timeout [ 2005.014798][T18146] Bluetooth: hci2: command 0x0c1a tx timeout [ 2006.340006][ T6098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7652'. [ 2007.325123][ T6102] ima: policy update failed [ 2007.381997][ T30] audit: type=1802 audit(4294969524.371:43): pid=6102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.7653" res=0 errno=0 [ 2008.516202][ T6121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7658'. [ 2008.529584][ T6123] netlink: 86 bytes leftover after parsing attributes in process `syz.1.7657'. [ 2008.887672][ T6124] bridge0: port 3(veth0_to_bridge) entered blocking state [ 2008.905763][ T6124] bridge0: port 3(veth0_to_bridge) entered disabled state [ 2008.934212][ T6124] veth0_to_bridge: entered allmulticast mode [ 2008.962600][ T6124] veth0_to_bridge: entered promiscuous mode [ 2008.989610][ T6124] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2009.030059][ T6124] bridge0: port 3(veth0_to_bridge) entered blocking state [ 2009.037278][ T6124] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 2009.605808][ T6141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7662'. [ 2017.577080][ T6246] netlink: 'syz.3.7682': attribute type 11 has an invalid length. [ 2017.668088][ T30] audit: type=1326 audit(4294969534.705:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6245 comm="syz.3.7682" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3425b8e929 code=0x0 [ 2018.495692][ T6255] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7683'. [ 2018.654418][ T6260] netlink: zone id is out of range [ 2019.172406][ T6263] could not allocate digest TFM handle [ 2019.704890][ T6285] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input206 [ 2021.234407][ T5795] syz.0.7604 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2021.795326][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:4b:1b:9c:fb:1f, vlan:0) [ 2021.808040][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2021.820288][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2021.832887][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:4b:1b:9c:fb:1f, vlan:0) [ 2021.845266][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2021.857679][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2021.869995][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:4b:1b:9c:fb:1f, vlan:0) [ 2021.882283][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2021.894532][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2023.633404][ C1] net_ratelimit: 6095 callbacks suppressed [ 2023.633422][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2023.651717][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:4b:1b:9c:fb:1f, vlan:0) [ 2023.663942][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2023.676182][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2023.688453][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:4b:1b:9c:fb:1f, vlan:0) [ 2023.700652][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2023.712934][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2023.725215][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:4b:1b:9c:fb:1f, vlan:0) [ 2023.737479][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2023.749786][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2028.617342][ C1] net_ratelimit: 17777 callbacks suppressed [ 2028.617362][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2028.635756][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:4b:1b:9c:fb:1f, vlan:0) [ 2028.648024][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2028.660255][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2028.672645][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:4b:1b:9c:fb:1f, vlan:0) [ 2028.684881][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2028.697156][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2028.709426][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:4b:1b:9c:fb:1f, vlan:0) [ 2028.721689][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2028.733918][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2033.601396][ C1] net_ratelimit: 15252 callbacks suppressed [ 2033.601434][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:4b:1b:9c:fb:1f, vlan:0) [ 2033.619636][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2033.632606][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2033.644872][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2033.657244][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:4b:1b:9c:fb:1f, vlan:0) [ 2033.669449][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2033.682390][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2033.694691][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2033.707064][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:4b:1b:9c:fb:1f, vlan:0) [ 2033.719293][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2036.595844][ C1] sched: DL replenish lagged too much [ 2038.585943][ C1] net_ratelimit: 11048 callbacks suppressed [ 2038.585962][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2038.604109][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2038.616366][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:4b:1b:9c:fb:1f, vlan:0) [ 2038.628574][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2038.641532][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2038.653779][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2038.666136][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:4b:1b:9c:fb:1f, vlan:0) [ 2038.678392][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2038.691311][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2038.703537][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2043.570458][ C1] net_ratelimit: 11094 callbacks suppressed [ 2043.570477][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2043.588645][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2043.600922][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:4b:1b:9c:fb:1f, vlan:0) [ 2043.613144][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2043.626219][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2043.638592][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2043.650863][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:4b:1b:9c:fb:1f, vlan:0) [ 2043.663097][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2043.676087][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2043.688327][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2046.519945][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2046.832952][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2048.554130][ C1] net_ratelimit: 10706 callbacks suppressed [ 2048.554148][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2048.572354][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2048.584687][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:4b:1b:9c:fb:1f, vlan:0) [ 2048.597873][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2048.610699][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2048.622959][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2048.635210][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:4b:1b:9c:fb:1f, vlan:0) [ 2048.647454][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2048.660274][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2048.672551][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2053.538132][ C1] net_ratelimit: 10680 callbacks suppressed [ 2053.538150][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2053.556453][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2053.568754][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:4b:1b:9c:fb:1f, vlan:0) [ 2053.580984][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2053.593189][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2053.605442][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2053.618379][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2053.630645][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2053.642915][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:4b:1b:9c:fb:1f, vlan:0) [ 2053.655153][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2058.522000][ C1] net_ratelimit: 11632 callbacks suppressed [ 2058.522021][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:4b:1b:9c:fb:1f, vlan:0) [ 2058.540180][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2058.552405][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2058.564662][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2058.577573][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2058.589823][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2058.602137][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:4b:1b:9c:fb:1f, vlan:0) [ 2058.614373][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2058.626709][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2058.639073][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2063.506219][ C1] net_ratelimit: 12414 callbacks suppressed [ 2063.506240][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2063.524570][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2063.536905][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:4b:1b:9c:fb:1f, vlan:0) [ 2063.549207][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2063.561498][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2063.573770][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:fd:2e:33:d2:c4, vlan:0) [ 2063.586026][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2063.598376][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2063.611354][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2063.623652][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2068.490167][ C1] net_ratelimit: 12614 callbacks suppressed [ 2068.490187][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2068.508395][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2068.520680][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:4b:1b:9c:fb:1f, vlan:0) [ 2068.532970][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2068.545924][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2068.558197][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:fd:2e:33:d2:c4, vlan:0) [ 2068.570471][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2068.582874][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2068.596297][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2068.608614][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2073.474354][ C1] net_ratelimit: 10419 callbacks suppressed [ 2073.474376][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:fd:2e:33:d2:c4, vlan:0) [ 2073.492616][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2073.504842][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2073.517709][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2073.529940][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2073.542246][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:4b:1b:9c:fb:1f, vlan:0) [ 2073.554459][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2073.567370][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2073.579667][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:fd:2e:33:d2:c4, vlan:0) [ 2073.591947][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2078.458640][ C1] net_ratelimit: 10232 callbacks suppressed [ 2078.458658][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2078.477439][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2078.489698][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2078.502014][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:4b:1b:9c:fb:1f, vlan:0) [ 2078.514231][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2078.527056][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2078.539306][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:fd:2e:33:d2:c4, vlan:0) [ 2078.552000][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2078.564367][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2078.577422][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2083.442994][ C1] net_ratelimit: 10436 callbacks suppressed [ 2083.443012][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:fd:2e:33:d2:c4, vlan:0) [ 2083.461188][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2083.473557][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2083.486714][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2083.499027][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2083.511367][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:4b:1b:9c:fb:1f, vlan:0) [ 2083.523706][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2083.536900][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2083.549209][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:fd:2e:33:d2:c4, vlan:0) [ 2083.561543][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2088.426397][ C1] net_ratelimit: 10216 callbacks suppressed [ 2088.426415][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2088.445314][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2088.457581][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2088.469854][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:4b:1b:9c:fb:1f, vlan:0) [ 2088.482147][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2088.495052][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2088.507325][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:fd:2e:33:d2:c4, vlan:0) [ 2088.519563][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2088.532609][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2088.545658][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2093.410384][ C1] net_ratelimit: 9949 callbacks suppressed [ 2093.410402][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2093.428490][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2093.441486][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2093.453740][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2093.466007][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:4b:1b:9c:fb:1f, vlan:0) [ 2093.478219][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2093.491459][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2093.503762][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:fd:2e:33:d2:c4, vlan:0) [ 2093.515981][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2093.528250][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2098.394538][ C1] net_ratelimit: 10056 callbacks suppressed [ 2098.394556][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2098.412811][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2098.425119][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:4b:1b:9c:fb:1f, vlan:0) [ 2098.437373][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2098.450458][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2098.462819][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:fd:2e:33:d2:c4, vlan:0) [ 2098.475065][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2098.487450][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2098.500588][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2098.512918][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2103.378632][ C1] net_ratelimit: 10092 callbacks suppressed [ 2103.378651][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2103.396786][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2103.409708][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2103.421989][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2103.434267][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:4b:1b:9c:fb:1f, vlan:0) [ 2103.446485][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2103.459460][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2103.471747][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:fd:2e:33:d2:c4, vlan:0) [ 2103.484086][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2103.496313][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2103.535429][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2108.362627][ C1] net_ratelimit: 9958 callbacks suppressed [ 2108.362645][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2108.380755][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2108.393719][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2108.405983][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2108.418276][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:4b:1b:9c:fb:1f, vlan:0) [ 2108.430502][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2108.443492][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2108.455737][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:fd:2e:33:d2:c4, vlan:0) [ 2108.467966][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2108.480201][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2113.346900][ C1] net_ratelimit: 9836 callbacks suppressed [ 2113.346922][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2113.365009][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:fd:2e:33:d2:c4, vlan:0) [ 2113.377216][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2113.389477][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2113.402529][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2113.414831][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2113.427112][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:4b:1b:9c:fb:1f, vlan:0) [ 2113.439425][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2113.452409][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2113.464656][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:fd:2e:33:d2:c4, vlan:0) [ 2115.015561][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2118.330929][ C1] net_ratelimit: 9819 callbacks suppressed [ 2118.330947][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2118.349144][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:4b:1b:9c:fb:1f, vlan:0) [ 2118.361676][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2118.374811][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2118.387119][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:fd:2e:33:d2:c4, vlan:0) [ 2118.399425][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2118.411780][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2118.424976][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2118.437616][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2118.449965][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:4b:1b:9c:fb:1f, vlan:0) [ 2123.315610][ C1] net_ratelimit: 10057 callbacks suppressed [ 2123.315628][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2123.333889][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:fd:2e:33:d2:c4, vlan:0) [ 2123.346282][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2123.358782][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2123.371975][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2123.384252][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2123.396790][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:4b:1b:9c:fb:1f, vlan:0) [ 2123.409068][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2123.422217][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2123.434519][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:fd:2e:33:d2:c4, vlan:0) [ 2126.090403][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 2126.097455][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P38/1:b..l [ 2126.105752][ C1] rcu: (detected by 1, t=10502 jiffies, g=257925, q=1993 ncpus=1) [ 2126.113644][ C1] task:khugepaged state:R running task stack:23688 pid:38 tgid:38 ppid:2 task_flags:0x200840 flags:0x00004000 [ 2126.128076][ C1] Call Trace: [ 2126.131366][ C1] [ 2126.134331][ C1] __schedule+0x116a/0x5de0 [ 2126.138850][ C1] ? __pfx___blk_flush_plug+0x10/0x10 [ 2126.144245][ C1] ? __pfx___schedule+0x10/0x10 [ 2126.149106][ C1] ? xa_load+0x149/0x2c0 [ 2126.153354][ C1] ? rcu_is_watching+0x12/0xc0 [ 2126.158130][ C1] preempt_schedule_irq+0x51/0x90 [ 2126.163164][ C1] irqentry_exit+0x36/0x90 [ 2126.167590][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2126.173574][ C1] RIP: 0010:__radix_tree_lookup+0x1ed/0x2c0 [ 2126.179476][ C1] Code: f2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 b6 00 00 00 48 8b 04 24 4c 89 20 e8 f8 2c 43 f6 4c 8b 74 24 08 <4d> 85 f6 74 28 e8 e9 2c 43 f6 4c 89 f2 48 b8 00 00 00 00 00 fc ff [ 2126.199085][ C1] RSP: 0018:ffffc90000ae71a0 EFLAGS: 00000293 [ 2126.205155][ C1] RAX: 0000000000000000 RBX: ffff88801dbd2200 RCX: ffffffff8b785fe5 [ 2126.213303][ C1] RDX: ffff888141aabc00 RSI: ffffffff8b786028 RDI: 0000000000000001 [ 2126.221283][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 2126.229268][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888024002ec0 [ 2126.237260][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888024002f88 [ 2126.245250][ C1] ? __radix_tree_lookup+0x1a5/0x2c0 [ 2126.250549][ C1] ? __radix_tree_lookup+0x1e8/0x2c0 [ 2126.255854][ C1] shrink_slab+0x8c6/0x12b0 [ 2126.260372][ C1] ? shrink_slab+0x7fd/0x12b0 [ 2126.265093][ C1] ? __pfx_shrink_slab+0x10/0x10 [ 2126.270073][ C1] ? __pfx___might_resched+0x10/0x10 [ 2126.275376][ C1] ? page_counter_calculate_protection+0x23/0x720 [ 2126.281808][ C1] ? mem_cgroup_iter+0x382/0x710 [ 2126.286772][ C1] shrink_node+0x9f4/0x3d50 [ 2126.291287][ C1] ? __queue_work+0x380/0x10f0 [ 2126.296070][ C1] ? __pfx_shrink_node+0x10/0x10 [ 2126.301020][ C1] ? rcu_is_watching+0x12/0xc0 [ 2126.305786][ C1] ? queue_work_on+0x12a/0x1f0 [ 2126.310569][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 2126.315778][ C1] ? queue_work_on+0x8b/0x1f0 [ 2126.320468][ C1] ? vmpressure+0x2b9/0x340 [ 2126.324978][ C1] ? do_try_to_free_pages+0x362/0x1920 [ 2126.330452][ C1] do_try_to_free_pages+0x362/0x1920 [ 2126.335758][ C1] ? sched_clock_cpu+0x6c/0x530 [ 2126.340616][ C1] ? __pfx_do_try_to_free_pages+0x10/0x10 [ 2126.346343][ C1] ? lock_acquire+0x179/0x350 [ 2126.351029][ C1] ? find_held_lock+0x2b/0x80 [ 2126.355711][ C1] try_to_free_mem_cgroup_pages+0x31b/0x790 [ 2126.361622][ C1] ? __pfx_try_to_free_mem_cgroup_pages+0x10/0x10 [ 2126.368057][ C1] ? psi_group_change+0x6dc/0xd20 [ 2126.373114][ C1] ? rcu_is_watching+0x12/0xc0 [ 2126.377891][ C1] ? psi_memstall_enter+0x225/0x310 [ 2126.383093][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 2126.388396][ C1] try_charge_memcg+0x4d0/0xd50 [ 2126.393465][ C1] ? __pfx_try_charge_memcg+0x10/0x10 [ 2126.398859][ C1] ? find_held_lock+0x2b/0x80 [ 2126.403535][ C1] ? rcu_read_unlock+0x17/0x60 [ 2126.408307][ C1] charge_memcg+0x8a/0x230 [ 2126.412724][ C1] __mem_cgroup_charge+0x2b/0x1e0 [ 2126.417755][ C1] alloc_charge_folio+0x2f8/0x8f0 [ 2126.422786][ C1] collapse_file+0x1cc/0x3180 [ 2126.427474][ C1] ? __lock_acquire+0x622/0x1c90 [ 2126.432425][ C1] ? __pfx_collapse_file+0x10/0x10 [ 2126.437550][ C1] ? xas_move_index+0xb0/0x110 [ 2126.442340][ C1] ? find_held_lock+0x2b/0x80 [ 2126.447033][ C1] ? hpage_collapse_scan_file+0xf7e/0x19d0 [ 2126.452846][ C1] hpage_collapse_scan_file+0x102e/0x19d0 [ 2126.458569][ C1] ? hpage_collapse_scan_file+0x1a8/0x19d0 [ 2126.464380][ C1] ? __pfx_hpage_collapse_scan_file+0x10/0x10 [ 2126.470462][ C1] ? khugepaged+0xfa5/0x16c0 [ 2126.475057][ C1] khugepaged+0xfc9/0x16c0 [ 2126.479494][ C1] ? __pfx_khugepaged+0x10/0x10 [ 2126.484363][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2126.490457][ C1] ? find_held_lock+0x2b/0x80 [ 2126.495163][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 2126.500373][ C1] ? __kthread_parkme+0x19e/0x250 [ 2126.505401][ C1] ? __pfx_khugepaged+0x10/0x10 [ 2126.510254][ C1] kthread+0x3c5/0x780 [ 2126.514330][ C1] ? __pfx_kthread+0x10/0x10 [ 2126.518930][ C1] ? rcu_is_watching+0x12/0xc0 [ 2126.523696][ C1] ? __pfx_kthread+0x10/0x10 [ 2126.528295][ C1] ret_from_fork+0x5d4/0x6f0 [ 2126.532894][ C1] ? __pfx_kthread+0x10/0x10 [ 2126.537504][ C1] ret_from_fork_asm+0x1a/0x30 [ 2126.542296][ C1] [ 2128.299131][ C1] net_ratelimit: 9073 callbacks suppressed [ 2128.299153][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2128.318017][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2128.330445][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2128.342790][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:4b:1b:9c:fb:1f, vlan:0) [ 2128.355032][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2128.367943][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2128.380203][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:fd:2e:33:d2:c4, vlan:0) [ 2128.392579][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2128.404847][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2128.418047][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2133.283460][ C1] net_ratelimit: 10083 callbacks suppressed [ 2133.283479][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2133.301781][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:fd:2e:33:d2:c4, vlan:0) [ 2133.314052][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2133.326294][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2133.339431][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2133.351785][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2133.364119][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:4b:1b:9c:fb:1f, vlan:0) [ 2133.376393][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2133.389425][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2133.401756][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:fd:2e:33:d2:c4, vlan:0)