last executing test programs: 1m28.514648044s ago: executing program 1 (id=736): openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) userfaultfd$auto(0xa) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x182b02, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) setsockopt$auto_SO_NOFCS(r0, 0xf1c, 0x2b, 0x0, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x1, 0x0, 0x80000000) socketpair$auto(0x3, 0x5, 0x7, 0x0) write$auto(0xca, 0x0, 0x2d9) 1m27.993053776s ago: executing program 0 (id=739): openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) io_setup$auto(0x7ffe, 0x0) io_setup$auto(0x7ffe, &(0x7f0000000000)) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptyq5\x00', 0xa40, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x1000000000007fff, 0xeb1, 0xfffffffffffffffa, 0x8000) mlockall$auto(0x7) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mprotect$auto(0x0, 0x806121, 0x6) 1m27.225263556s ago: executing program 1 (id=740): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x100041, 0x1, 0x0, 0xfffffffffffffffd, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0xfffffffffffffffd, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r2) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000ffdbdf25040000000a0016070000000400000000"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) close_range$auto(0xffffffffffffffff, 0xfffffffffffff001, 0x2) socket(0x11, 0x80003, 0x300) r5 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) open_by_handle_at$auto(r5, &(0x7f0000000000)={0x8, 0x2, 'u\x00\x00\x00\x00\x00\x00\x00'}, 0x2) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r6, 0x0, 0x20) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) recvmsg$auto(r4, &(0x7f00000005c0)={&(0x7f00000002c0)="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", 0x8, &(0x7f00000004c0)={&(0x7f00000003c0)="444debcb5d4827b41b873d646e2663fb2d4aa24da78f4b3472bd8daf8c57304fe5302fe1869cfca458a5a39bd4006710640f6032088c509f0c082c1b04896afe04d524b8b80ce2949dae1a1d2bec705c343bc92a41212ae3ed0a036e67d0c6d7b35e6cb8956ef9b289a7e42615af9f0470dc70d3deea952a1d85a1a845530a190757f55d6e53993d1e8f22b49f44b8a5b9b989d8ed44e1a1f0002bb9f9c8813bee34cfb9b329b8b45794054ee04fdb17a945013b532f53854704c99cc8f02c1582b9c91704e2ed3d57e019cf6205", 0x3}, 0xd3, &(0x7f0000000500)="6bfee52cc6d76e1c2f8b714f9ce8de29c2b8c6a36fd1081b8f6753c4db3a957fc9f3c8ce5a1f6aae5db64bc4b8383dea96682820b78f0fdf870dba5430e851305d4713df7f1124096ace834632a497cc07ffb3b6254aa69082434244066c46fe36fd6a587c8d1a8b40662762a5e48ddb2c86fa27c693a26df7fa2dd4f5762a1616bbbc094ba84c2f033b83814b8572c7bb08c224a9b33f1ac650d8c51cff0960141e613531d3f03e45860d2c2f7110f12d60c0b21f6a1556472a2f918584", 0xc, 0xffffffff}, 0xfffffff7) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x41000, 0x0) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) poll$auto(&(0x7f0000000180)={0xffffffffffffffff, 0xfff7, 0x9816}, 0x7f, 0x9) ioctl$auto(r7, 0x4008af24, 0xffffffffffffffff) mmap$auto(0x80, 0x20009, 0x4000000000dc, 0xeb1, r1, 0x8000) socket(0x25, 0x5, 0x6) 1m26.853378373s ago: executing program 0 (id=742): mmap$auto(0x0, 0x20009, 0x7, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = io_uring_setup$auto(0x201040, 0x0) symlink$auto(&(0x7f0000000300)='\\\':.\x00', &(0x7f0000000100)='\xfb\x00') r1 = socket(0x2, 0x801, 0x84) r2 = getsockopt$auto(r1, 0x84, 0x2, 0x0, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x65, 0x0, 0x4) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x80000000) pread64$auto(0xffffffffffffffff, 0x0, 0x7fc, 0x400) r3 = socket(0x22, 0x1, 0x80000000) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x2000000000008000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x402008c}, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010600bd7000fbdbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x700) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/trace\x00', 0x600, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x74c) unshare$auto(0x40000080) sendmmsg$auto(r3, 0x0, 0x63b, 0x4) mmap$auto(0x0, 0x400008, 0xe6, 0x800100000009b72, r2, 0x400) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0xa, 0x2, 0x88) capset$auto(0x0, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x800, 0x100) setsockopt$auto(r3, 0x25, 0x4f5f, 0x0, 0x1000) pread64$auto(r0, &(0x7f0000000000)='\xa3:^!\x00', 0xfff, 0x1) socket(0xa, 0x801, 0x84) 1m25.871065544s ago: executing program 0 (id=744): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop2/queue/iostats\x00', 0x20b02, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x602, 0x1) r1 = open(&(0x7f0000000000)='./file1\x00', 0x1652c2, 0xe1d2b27bdc14aa98) fanotify_mark$auto(0x400000000000, 0x105, 0xf2b, r1, 0x0) mkdir$auto(&(0x7f0000000080)='./file0\x00', 0x1) rmdir$auto(&(0x7f0000000280)='./file0\x00') socket(0x10, 0x2, 0x4) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYRES64=r1], 0x44}, 0x1, 0x0, 0x0, 0x10000000}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) bpf$auto(0x7, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x8, 0x20016, 0x8020000000f, 0x10000, 0x5f, 0x20000000000804, 0x2}, 0x6f0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0xa}, 0x7}, 0x3, 0x2) 1m25.867045411s ago: executing program 1 (id=745): mmap$auto(0x0, 0x400, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0) ioctl$auto_CEC_DQEVENT(r0, 0xc0506107, &(0x7f0000000280)={0x4, 0x80003, 0xa, @state_change={0x200, 0x9, 0x3}}) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/adsp1\x00', 0x80502, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x20400, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000002e40), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000002ec0)={&(0x7f0000002e80)={0x14, r4, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4048c40}, 0x4) sendmsg$auto_TCP_METRICS_CMD_GET(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x14, r2, 0x89c1beb01534ff9b, 0x70bd29, 0x25dfd3f9}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x4001ff, 0x7, 0x6, 0x1, 0x948b, 0x3, 0x1, 0x572f14dc, 0x80000000, 0x80000000, 0x0, 0x7, 0x6d3c, 0x4, 0x2, 0x1]}, 0x0) write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, 0x0, 0x0, 0x18, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) 1m25.681044632s ago: executing program 0 (id=746): r0 = gettid() kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x2aa7, 0x6c0000c000, 0xc000}, 0x4) kill$auto(r0, 0x11) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0x1, 0x1ff, 0x100, 0x83, 0x101, 0x6, 0x6}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x876c5, 0x8, 0x100000000}}) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x5) openat$auto_rts_threshold_ops_(0xffffffffffffff9c, 0x0, 0xa00, 0x0) ioctl$auto_VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000000)={0x8}) 1m23.827844764s ago: executing program 2 (id=749): openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) userfaultfd$auto(0xa) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/workqueue/nvme_tcp_wq/max_active\x00', 0x182b02, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) setsockopt$auto_SO_NOFCS(r0, 0xf1c, 0x2b, 0x0, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x1, 0x0, 0x80000000) socketpair$auto(0x1, 0x5, 0x7, 0x0) write$auto(0xca, 0x0, 0x2d9) 1m23.813234931s ago: executing program 3 (id=750): r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xa6ff, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x4000, 0x11d) setxattrat$auto(r1, &(0x7f0000000080)='./file0\x00', 0x3, &(0x7f00000000c0)='\x00', &(0x7f00000001c0)={0x5, 0x0, 0x7}, 0x7) 1m23.736134525s ago: executing program 1 (id=751): mmap$auto(0x3, 0x400008, 0x3, 0x10, 0xffffffffffffffff, 0x88000) r0 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000002b80)='/dev/snd/pcmC1D1p\x00', 0x2205, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000002bc0)=0x1) socket(0x15, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = io_uring_setup$auto(0xfffffffc, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x9, 0x8, 0xffffffffffffffff, [], {0xb, 0x6, 0x6, 0x29f, 0xff, 0x83, 0x100, 0x6, 0x2}, {0x20000100, 0x1, 0x6, 0x6, 0x1, 0x40, 0x76c5, 0x1000006, 0x100000000}}) io_uring_register$auto(0x2, 0x11, &(0x7f0000000180), 0x83) r2 = accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x63af, 0x61, 0x0, 0x0, 0x0, 0x400000000000002, 0x0, 0x800000080000007, 0x4, 0x4, 0x7, 0xffffffff80000004, 0x8000000002009, 0x2, 0x2400001000ff}) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) r3 = inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(r3, 0x0, 0x1000e6e) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000001140), r4) sendmsg$auto_WG_CMD_SET_DEVICE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="210026bd7000fcdbdf250100000014000200776c616e310000000000000000001e0000"], 0x28}, 0x1, 0x0, 0x0, 0x841}, 0x80) sendmsg$auto_WG_CMD_SET_DEVICE(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="24002302f7d387941e6f674774d7e283bf2e1b70d31677c4a44a40e1917aecafa4b2236727f5842f712455b8374c932aebc6a6552b4c716b39e00189589e2e8f56c4551e5094e154aea191a1dff71f469d8f82ecb9b5e130d1174284ead91fbe275f28bcaf12", @ANYRES32=r2, @ANYBLOB="08002bbd7000fddbdf2501000000080007000a00000008000500fdffffff"], 0x24}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000040) r6 = socket(0x10, 0x0, 0x58) sendmsg$auto_NL80211_CMD_GET_REG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYBLOB='\x00'], 0x1ac}}, 0x4004) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000002c0), r8) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYRES16=r1, @ANYRES32=r10], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r11 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/netfilter/nf_log/6\x00', 0xa0202, 0x0) sendfile$auto(r11, r11, 0x0, 0x1) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) pipe$auto(0x0) pipe$auto(0x0) tee$auto(0x2000000000000, 0x3, 0x3ff, 0x9) close_range$auto(0x0, 0xfffffffffffff000, 0x0) 1m23.552255382s ago: executing program 1 (id=752): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vhci_hcd.14/usb37/bDeviceSubClass\x00', 0x183841, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0xa44) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) socket(0x3, 0x3, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x408) getdents$auto(r2, 0x0, 0x62d4) close_range$auto(0x2, 0x8, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x630001, 0x0) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x100242, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_setup$auto(0xffff, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x20) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/mempolicy/weighted_interleave/node0\x00', 0xc2082, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x60800, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) sendfile$auto(r4, r3, 0x0, 0x1000202) r5 = socket$nl_generic(0x10, 0x3, 0x10) shmat$auto(0x200, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x4) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002ec0), 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0xa0582, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x7fffffff, 0x1) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002f80)={&(0x7f0000000040)={0x34, r6, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x9}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x24060802) write$auto(r0, &(0x7f0000000580)='+.\x00\x81j\x87\xb9\xb3\xb2\xb8\xb6\xdd%\xe7\x10[\'o\x96\xbe\xab.\x1b:0\xd9\f\xc8\x0f\xe4{$l\xf5_y\xdb\xb6H~\x80\x96Z=\x83\x8b\xd3r\xd7\xb9jig\x13%\xe6\x82\xb2\xd3\xb6*b\x94sMbDN\xe0-$@\xbek\xae\xc9\xce\xa9\xb5\xde\x982\xd7\x1b\xb3\x92x\xf4\xfc\xe2\x92\x9e\xc1\xce\xd7\xb1\xe7\xe0\x88\x12\v\xdb\x80\x9f\xc4\x9dr\xffU>Q\xdf\xae\xcb\xc8<\xf7\xa01g\xb0\xab\x04\xba\xccD.g\x93\x9a\x1fa\xa2P\xa7\xcc\xdcQ?\xc4\x96/\x82\x1f\x82\xf5\xe9\x910[\x1a\xa3J\x12\x84\xc9\x12\x8d\xb7\xbc\x06D\xee\xf7U\x1f\xccC*_mg\rK2Z]lj\x10\x82/\x7f\xb8\xbdG\x18\xe3I\xa6\xd9\b\x1c\x9b\xc3\x9b\x83\xb0j\x86\x8bW\x8d\x00{p\xac\x9e)3W\xe7\xca\xb4\x1b\xdb\x17iwPm\xa6\x154\x9a\n\xc2F|\x88-\xeb\x1c\xfc\xfd\xf8q)[\xb2\x02\xf7\xc1\x12', 0x100000000000001) 1m23.551516102s ago: executing program 3 (id=753): r0 = open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) execveat$auto(r0, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x11000) (fail_nth: 24) 1m22.677060675s ago: executing program 0 (id=754): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0) ioctl$auto_CEC_DQEVENT(r0, 0xc0506107, &(0x7f0000000280)={0x4, 0x80003, 0xa, @state_change={0x200, 0x9, 0x3}}) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/adsp1\x00', 0x80502, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x20400, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x4001ff, 0x7, 0x6, 0x1, 0x948b, 0x3, 0x1, 0x572f14dc, 0x80000000, 0x80000000, 0x3000000, 0x7, 0x6d3c, 0x4, 0x2, 0x1]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, 0x0, 0x0, 0x18, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) 1m22.676713531s ago: executing program 3 (id=755): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) (async) io_uring_setup$auto(0x6, 0x0) r0 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) (async) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000000)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x1}, 0x2, 0x0) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000000)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x1}, 0x2, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0xfffffffd, 0x5, 0x9, 0x0) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) write$auto(0x3, 0x0, 0x81) socket(0xa, 0x5, 0x0) socket(0xa, 0x3, 0xff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) pidfd_open$auto(0x1, 0x0) (async) r1 = pidfd_open$auto(0x1, 0x0) open_by_handle_at$auto(r1, 0x0, 0x800) 1m22.525713081s ago: executing program 2 (id=756): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/mmap_min_addr\x00', 0x101302, 0x0) write$auto(0x3, 0x0, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x40, 0x0, 0x0, 0x0, 0xffe, 0x8, 0x7, 0x0, 0x9, 0x9, 0xfffffffffffffffe, 0xe, 0x6, 0x200000100103}) ioctl$auto_BLKTRACESETUP2(0xffffffffffffffff, 0xc0481273, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x441, 0x0) r4 = pidfd_getfd$auto(r3, r0, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000062c0), r5) sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f00000000c0)={0xfffffffffffffffd, 0x0, &(0x7f0000006340)={&(0x7f0000000000)={0x14, r6, 0x38f, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4044040}, 0x4000) r7 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="720100", @ANYRES16=r7], 0x1ac}}, 0x40000) sendmsg$auto_NL802154_CMD_GET_INTERFACE(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r7, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_SCAN_DURATION={0x5, 0x24, 0x7}]}, 0x1c}}, 0x40011) socket$nl_generic(0x10, 0x3, 0x10) clock_getres$auto(0xfffffffffffffff5, 0xffffffffffffffff) ioctl$auto_XFS_IOC_SWAPEXT(0xffffffffffffffff, 0xc0c0586d, &(0x7f0000000240)={0x2, @raw, @raw=0x4, 0x400, 0x7, '\x00', {0x8, 0x79, 0x1, r1, 0xee00, 0x4, 0x5, 0xfffffffffffffffa, {0xed7f, 0x3}, {0x3, 0x5}, {0xeb93, 0xb}, 0x7fffffffffffffff, 0x1, 0x1000, 0xdb67, 0x4, 0xf, 0xa806, 0x5, 0xf8df, 0xfff, '\x00', 0x8001, 0x4, 0x8, 0x4d}}) keyctl$auto_KEY_SPEC_USER_SESSION_KEYRING(0x40, r1, r8, r2, 0xfffffffffffffffb) setsockopt$auto(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x7) write$auto(0xffffffffffffffff, 0x0, 0x3) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) 1m22.344658973s ago: executing program 2 (id=757): r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r0, 0xaf01, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0x4000ff, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb0, 0xffffffffffffffff, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x0) sysfs$auto(0x2, 0x0, 0x0) epoll_create$auto(0x4) epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x1, r3, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYRES64=r3, @ANYRESHEX=r2, @ANYRESDEC=r1, @ANYRESDEC=r1, @ANYRESHEX, @ANYRESOCT=r2, @ANYRES16=r2, @ANYRES32=r2, @ANYRESDEC=r2], 0x1ac}}, 0x40000) r4 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x6, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x6, 0x4008) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x1ad240, 0x1b1) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x3, 0x3}, 0x18, 0x0) mmap$auto(0xffffffffffffffff, 0x20009, 0x4000000040df, 0xeb2, r1, 0x8000) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video33\x00', 0x80382, 0x0) readv$auto(r5, &(0x7f0000000080)={&(0x7f0000000000), 0x197188}, 0x8) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/netdevsim/new_device\x00', 0x149b01, 0x0) r7 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r7, 0x0, 0x1f40) writev$auto(r6, &(0x7f0000000200)={0x0, 0x9}, 0x7) 1m22.083261183s ago: executing program 2 (id=758): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001180), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002abd70defcdbdf290400000008000c0003000000f3"], 0x1c}, 0x1, 0xe00, 0x0, 0x404c091}, 0x40000) 1m21.96389793s ago: executing program 3 (id=759): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.6/usb22/22-0:1.0/usb22-port6/early_stop\x00', 0x121281, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000200)='5', 0x1) mmap$auto(0x0, 0x3fcb, 0xdf, 0x9b72, 0x2, 0x800000000008000) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) socket(0xa, 0x5, 0x0) socket(0xa, 0x801, 0x84) bpf$auto(0x1, &(0x7f0000000280)=@enable_stats={0x5}, 0x6f3) socket(0x10, 0x2, 0x0) socket(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x2, 0xf) pipe$auto(0x0) socket(0xa, 0x3, 0xff) pipe$auto(0x0) bpf$auto(0x0, &(0x7f0000000080)=@bpf_attr_4={0x1e, r1, 0xffffffff}, 0xd) bpf$auto(0x2, &(0x7f0000000080)=@bpf_attr_3={0x5, 0x0, 0x702955be, 0x40000, 0x4, 0x5, 0x80, 0xe4, 0xfffff800, "0566c8ee7c78a925488276d7697a12bd", 0x0, 0x5, 0xffffffffffffffff, 0x7, 0x9, 0x4, 0x7, 0x10001, 0x0, 0x8001, @attach_prog_fd=r1, 0x7e, 0x4, 0x1, 0x5, 0x3}, 0x5) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) mmap$auto(0x1, 0x2000004, 0x4000000000dd, 0xfffffffffffffffe, 0x401, 0xe4) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_allowed_congestion_control\x00', 0x300, 0x0) socket(0x2, 0x1, 0x0) sysfs$auto(0x2, 0x0, 0x0) epoll_create$auto(0x4) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/fail-nth\x00', 0x40000, 0x0) epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/sunrpc/parameters/min_resvport\x00', 0xe3102, 0x0) sendfile$auto(r3, r3, 0x0, 0x3) openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) 1m21.74561923s ago: executing program 2 (id=760): mmap$auto(0x0, 0x400, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0) ioctl$auto_CEC_DQEVENT(r0, 0xc0506107, &(0x7f0000000280)={0x4, 0x80003, 0xa, @state_change={0x200, 0x9, 0x3}}) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/adsp1\x00', 0x80502, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x20400, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000002e40), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000002ec0)={&(0x7f0000002e80)={0x14, r4, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4048c40}, 0x4) sendmsg$auto_TCP_METRICS_CMD_GET(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x14, r2, 0x89c1beb01534ff9b, 0x70bd29, 0x25dfd3f9}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x4001ff, 0x7, 0x6, 0x1, 0x948b, 0x3, 0x1, 0x572f14dc, 0x80000000, 0x80000000, 0x0, 0x7, 0x6d3c, 0x4, 0x2, 0x1]}, 0x0) write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, 0x0, 0x0, 0x18, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) 1m21.655840402s ago: executing program 3 (id=761): openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) io_setup$auto(0x7ffe, 0x0) io_setup$auto(0x7ffe, &(0x7f0000000000)) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptyq5\x00', 0xa40, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x1000000000007fff, 0xeb1, 0xfffffffffffffffa, 0x8000) mlockall$auto(0x7) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mprotect$auto(0x0, 0x806121, 0x6) 1m21.504180721s ago: executing program 0 (id=762): openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) io_setup$auto(0x7ffe, 0x0) io_setup$auto(0x7ffe, &(0x7f0000000000)) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptyq5\x00', 0xa40, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, 0x0, 0x80001, 0x0) r2 = socket(0x2, 0x1, 0x0) io_uring_setup$auto(0x1, 0x0) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000001540)=ANY=[@ANYBLOB="d8170000", @ANYRES16=0x0, @ANYBLOB="00042abd7000fcdbdf250100000004000280be170280e413a0800c0002000000000000000000d2131e803c88e82ae53597daf29d0771242ed816de5a2246df5225c86e9459142c14f543ebec33e92a231142169b7a735c499bd898add8a1e443b011d40d042e36b03559fc1a46941dee5307534355acf8fefbe86816cdb31a259479da1c87a2afd2f0ead487db913b8a8395872c5d8435d5d8deeb2b9574020d7df84906e5480bb11233837f17eefdf279a69e93bc62e971ee161b0c541f33b4b6bde8cd39a39b23ccfb04e180ad21a7c5535dd303e752c16c5e7d8646ab9737fcb0eec7a3126c2cdf82ad21b95f30fc20f4362c73bf8b58b16bbde04ff8391a09ee08c70df49eb4eca73a7dc44bc2254707e79b66c78ab4239164bd4e8c4d4aee0b9149b8c770a1eb18156e4b36e796324acf693d95cd4fe5a8e226969b835f38c480eba149f364cfe191c4eac768675448b2eb006c8d325e40615a6f8255fe6d4fc802d72f9544987bb22c8850d265990800dc00000400006cf36bf69a75c7bc1e65ec4a2f3bbee3f92e8806bdbcdbb847175d1753d7b286ba60561980194ce7702e178e39396a375a6e58ec9fc8fd0d4e7718d2150c6b1e80caccbb3961c9c082a102b5fbdf891333a5240caa909562ed056905970aa09c764d9a438144eb4aadbb34c4d72bd5aab94a160fd9cb9b8032bad0338f260adc3d32ac406420796b945ed75f63c781c28379d52160b7d5fdeccdac4cef33435069f2daba302c73f1b06756826f9b362e5089405fd6224578fa1ce8d8bc0febd0e9f486fd3e2790bdf959834d89b7ff0c000780040095800400a4809b011080040091800400a50008007200", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="a9001f805b417f5250ad5387265634a5de59b43f52be81861de2314253d2ec56dacf650eae6d88a2de488bced3b7eaab1544baae2ac19e9172d76b520b406f3e30401bd2c49f6c5b7f62a107254249408c7a048be9ad66fc72286fc9c71400eb0000000000000000000000ffffe000000208003100", @ANYRES32=0x0, @ANYBLOB="230005002f7379732f6b65726e656c2f64656275672f73796e632f73775f73796e6300000400068008000100", @ANYRES32=r1, @ANYBLOB="000000040071802b0abbeff098adf971de4c73e12e31677c31b4a298c19c2a75541b85c6f8a36569a43be3653f2bdf85a966119bc30000"], 0x17d8}, 0x1, 0x0, 0x0, 0x1}, 0x20008000) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000040)='/proc/kmsg\x00', 0x80900, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x4b8483, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_hcd.4/usb5/ep_00/type\x00', 0x100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000540)=""/4093, 0xffd) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/schedstat\x00', 0x2, 0x0) read$auto_proc_single_file_operations_base(r5, &(0x7f0000000040)=""/228, 0xe4) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x23, 0x0, 0x9) setsockopt$auto(r1, 0xfffffff2, 0x41, 0x0, 0x8) select$auto(0xe, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x4, 0xd3e, 0x1, 0x948b, 0x3, 0x295f4da0a, 0x2, 0x3, 0x62, 0x80000001, 0x50a7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) 1m21.118194228s ago: executing program 1 (id=763): r0 = gettid() kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x2aa7, 0x6c0000c000, 0xc000}, 0x4) kill$auto(r0, 0x11) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0x1, 0x1ff, 0x100, 0x83, 0x101, 0x6, 0x6}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x876c5, 0x8, 0x100000000}}) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x5) openat$auto_rts_threshold_ops_(0xffffffffffffff9c, 0x0, 0xa00, 0x0) ioctl$auto_VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000000)={0x8}) 1m20.627544586s ago: executing program 2 (id=764): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) (async, rerun: 32) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x1e1180, 0x0) (rerun: 32) r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) (async, rerun: 64) msgctl$auto(0x0, 0x2, &(0x7f0000000080)={{0x4, 0xee00, 0x0, 0xe, 0xe, 0x0, 0x8}, &(0x7f0000000000)=0x7a, &(0x7f0000000040), 0x8, 0x37e6, 0x9, 0x81, 0x2, 0x6, 0x101, 0x80, @raw=0x8}) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) r7 = socket(0xa, 0x2, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) ioctl$auto_MEMGETOOBSEL(r1, 0x80c84d0a, &(0x7f00000005c0)={0x94, 0xcf38, [[0x5, 0x8], [0x5, 0xa6000000], [0x401, 0xfffffff8], [0x2, 0x4], [0x80000001, 0xffffff81], [0xa, 0x7], [0xf86, 0xfffff001], [0x6, 0x4]], [0x7, 0x81, 0xa9, 0x400, 0x7000000, 0x8000, 0x7, 0x0, 0x8c, 0x4, 0x4, 0x6, 0xdae8, 0x1b3, 0x5, 0x5, 0x8000, 0x8, 0x80, 0x4, 0x1, 0x80000000, 0x3, 0x9, 0x982, 0xd, 0x9, 0x9665, 0x2, 0x9, 0x1ff, 0x4]}) sendmsg$auto_NL80211_CMD_SET_HW_TIMESTAMP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES32=r8, @ANYBLOB="010027bd7000fddb0225994a0eb07ef5f3646f5194000000080003000000000000", @ANYRES16=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x4080) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'vlan0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_RINGS_GET(r9, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010039bd0f0000000c0001"], 0x20}, 0x1, 0x0, 0x0, 0x8004805}, 0x20004804) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth1_to_bridge\x00', 0x0}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'dummy0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'veth0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_PSE_GET(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x160, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_PSE_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x1ff}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0xfffffff9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_PSE_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x100}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x3}]}, @ETHTOOL_A_PSE_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}]}, @ETHTOOL_A_PSE_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x7f}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x1ff}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x101}]}, @ETHTOOL_A_PSE_HEADER={0x4}, @ETHTOOL_A_PSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @ETHTOOL_A_PSE_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x200}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8000}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x101}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r15 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/pagemap\x00', 0x40, 0x0) (async) sendmsg$auto_IPVS_CMD_GET_CONFIG(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x14, r15, 0x101, 0x70bd2a, 0x25dfdbfb}, 0x5}, 0x1, 0x0, 0x0, 0x48054}, 0x4) (async) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e40)={0x38, r4, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x800}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x40084}, 0x20004881) (async, rerun: 64) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/bus/usb/012/001\x00', 0x200601, 0x0) (async, rerun: 64) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/pcrypt/pencrypt/parallel_cpumask\x00', 0x80302, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b70, 0x2, 0x8000) 1m20.567096371s ago: executing program 3 (id=765): r0 = open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) execveat$auto(r0, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x11000) (fail_nth: 25) 0s ago: executing program 32 (id=762): openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) io_setup$auto(0x7ffe, 0x0) io_setup$auto(0x7ffe, &(0x7f0000000000)) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptyq5\x00', 0xa40, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, 0x0, 0x80001, 0x0) r2 = socket(0x2, 0x1, 0x0) io_uring_setup$auto(0x1, 0x0) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000001540)=ANY=[@ANYBLOB="d8170000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="83009600c5b4234f2f7cdaa8357b8f17672bc306950ee0326b279e7888ff8cc46724d24b25792eacda5f4dbb382d0ede111db66a5d4a9358e28a7d253377d122e36dc5af20c25b7074999e491494473001245da746d1264138821e939200aac2362ba32b5e3937b6721f89e8630670373e499a7c69c20cf8dca5a9f73cdc0fe882ab5c0089f61462725551c4f329c58ad40da6c5b5ce2a4a49ed8c650d11b3b5420e5ebd2ed110bc3e8d2780aa317fe18be382feb4737e8993aa33e2727427c6b7ce7a2bee49348f851bdb9e485549192f1f01648f55ece042f84a5cbc4159435b1d4a576242facb03a08d8750e3a3ec8ae2e6edadcf5ede16ac26957f37bbafb71c74a820943e07dde0e78375602aeb0b4de2c6f265b64dfb60594b0c53cbbcebb33ffb8fdcd63e4a22852864a6927a934a8e654a726679166c8c0e56fd139066310196f749833d406337926a59242531f73aa0fe0f74d14334ca81b3f161bba4258788982a0a4a5ead783e6ee07d230120dbbdad3b3246e2f894b18c428da7790e5f7a2acb030008001280040087807c31ddcf00eb6de66f824f6e9627922cd9c455d03371deb8ad28fbf9d15c5746a29504cb66fa2405de5f372547cd81183c1a65afe7831c432f890d699297f2d1413ed15c4ef203e5c9c0ce1d3174f6a9cb834e65475570003d6072d6041838a8bb89d7d26f3581d3cc0e768b7335440f913d69c22b3511b3daf2d890dadc0d50c0060121457407fd3baba9e611f2d31a8cf88ca97594581f0bef778c8fca8107e25019a7c214add8bbcae27ad3bd047657f83158e3fd468da953a10c9f701b8e27dbfc063a5f909423cce3429d108725ee726f30f99eb79d8c57824edc13ebbc1a44649862f1fb1f9b7031f63393f1fceee6868a6efdcade7b86ce2853fc62bbf63afb70efb4cf0d2cc465c245147b21fcb35d80fa5f24a59de1a2d956fa2e0263180df04d9d34eab189cda5f00e39662e2441600d0cebdf2455e92e39aa3fd769010e8e74715829e9f53edb94dde1e05ea74ce2100435124386ee9f2deeb283d04b2e7fe429e153833c15e6548dace2dc9efb4bfa35ed504df7fcc0bf02ba5fea3086be0b446431b53f812e7cbb1f059b1dc2437b89cf2447920debe0ddf674a814496f4c611e3b06f89d47eb6ee12e38ddde3f3c424c698872e65623f352437d34d819dc595d7178b5a184d292d5d2dc223b565247b25b500f80223e2dec5e643995f5595d444a1720a211b42686523531b0f0a7b9ef0eb001a1338c2bdd743a2e4abd1dd857ee03ac7d09c9520cd68c3a6fc6f2a3a531c8d0e9ec4ade3e866c5b60d5bf693fa2c99e027d97033660494510a1a1d9dfc2912a982d1f1bda3c80f3e41f698f16fc14af60d0fcad7079ae7c4a7c8d5c5ce40c8ca6c1560b175d123b764dce7eeaa49593f485c7bf1a8c48261b61f1c2e18e7c7e35e742acd34e78e06961451e3bccb0851c438d411bf77a50df6d41278794bac2a814c66e8d61446c7a11357e6e99e516af3f60d786c1f8f67990c5bd625b9c78cea15f23179cb810b04d75be151977fefe598b6803e380e6f6044fed0c386450457c61e0e396d8de4481cb5944ee06faf5911512487956f0e20a89b27d503a8ead32dc362d68a24ed972055592aad9927c74f191a1346c6c862dba63660142a5b81d79e5e033b28941aa258237c9feac1387fdd1032df8db8c59747706ccfa4bedde9182bf51a4adde73939df97a32c320ccc11017c823067e521d336e9283e2d8b4cd5f6967b4aaed39305d6989a8714fecd6d22d14106fbc71acf2248786386c4b7ff5c27ea4561769ff26ad92184a2325f57b130273b940776e31fe5f2199b355eecd1984f989df54df99517189f99e3cf2a74feb09914e8a156b91b120d3b5dd2d135b570c26755eb9a611e598b25f232f0b05f33ab35baa83630f631073bebe5c45c8ee1406a50248b31fc177e67fc13781e57eb49b21bf0a9b7e8c8014e6d66f0b87f08d9f602f6ca7ee8348d7d698a0bd646646808e15b551be1a1cc0e8a06743d41f684585628618d5deb6e3298baf4fb7bd56ede093f1d8de88d87ece51b4e93068668dd0e6b7b9c11eec9c5da10417d4f582559d862d82aca97cd3f6adf79e8552f66dc49b2b7422713e00eba106d936f6a12470dfddd58e325a925e99ca1558996f70457bdbeb95ed2689b6034fb6550bc3b5f8b843dee83fbcb1774241d0b893f657d8a907852e120f816ab0035e47c80143056cb03c7e5efe30bbf4480904612780de1c08000f274415597c9d479fa37e288867219b358e64cd99a2d0035a7ed3a415a1c9be2fc0e82db74cff773d423ef374e72ad048da8320fb4530c5e229ea2eac563e793463a2305347aef6cd7fe6073026edcf038afc177835bbb85a1c76f6cd04d4cb6b35181a1a74086b2755065f49d45092503a2ffb5f8a6b92e6909b9b6fabed36c6e483cd10e463fd63865849985a993409fbad9acf39d7328077435bc8a2dbbf2d863cf848e73e99d2f2be7d9b7fff91766517f71d6586e70de87fe2ce9662159e8dde6d1a5b6bcd425174fccab9f2e1b79039146748860e07fab9a2288b563c591a02dd7d38535898dc9a75aaf5dd7517b1f4e73637106cc5fb72ef7c36ca19c527cf4d1c91c7751e15d0e3f18b0f2d88965fb160d97260c544f99591878dce2d4ed888f38f1ee306ce37141c83d2c71e51599c83a51919fb36cc1e4853817b42d2d3215cedec80b1ebba39b9c2c1cf2b5537580e815a094ddaa55c65e9cdfeb49b3d5b3ba841c1ab94d0d2a15167e42e7ba8d7d876b9d0593b5bac6192887054c820aebd970b51119a2bbc5a7a466cc347f969a47ff0eaedf026b979040187b852d383326ff63c98c6f7d1717df49ad949462598b02b13b93b3743e02198d56f2c484083cdb43ea464d65f76c06f409e760cadbecf459b36a9de45e28173b400a42d96b56c605a048a4f5629560e03e6d5eef98b75d6d8aa8f495e10d56a00e756b1e0883c114662671fe3ce5a0b594c1fb92de7e7a71f0e8d86165ecd76a51aae1f16b4af8fc86c89f9f14ed565750dea0050cb345fd676fc2610be230900d92dd3c34d860360e1fd79d18bf88fffda40038e16a4f7f1e1d86c9855c2c2d1f7706a90d5abc8faaccc022ec48785038c1969d7fd0cab9c3f7f39e6736a0f96a416a96023d8edf713972ed0938b63d14ad8e81bf4ee5dee7afcc9d81399f37ad065774db15275bd6ad4f856e066d30512b46a4cb8ee2750590fbdc5d546485fcff2646099a11b5268bf9b811830b4e90f9f28a8cbef609bcf40ff450a64f6362521441c9122cca8228ff3779f7bb67dafad3efccf8d9fe0d147e517f905153b8923cd36e0ca0fa9ca690ce4de1067e065fe4ecf450f241e2fe24aee7a306faae62a8cd48952b5e970838a50d051ae2e3553c2875e3abe97c2252c227da411bf9010c87e881f8df8b21071d1069c9920b1ce1409fb5df2c95c53ecf60855125426a98e2020de1a1506b2bb5d2365ef4b685721ca6a470b8e3ea66194b55156b25265a25c661befb16a7794556a46322ee8feb32c053df1e92ddfb676231407a5a41dfa4409e16e0eda3535839ad5691ed008bd85ce0b5cc3970f315e40ae6588a14f10a6f4fab0d3e529e15e163d2a76db78ca3dd65371748dc46bfc14a1a108b12f4ee540d7407135fbfc5ac051d0b97d1e8be99c810cb99948486c7ca1026ecf8330716cc6ca38a6c9195694ee9fef85cf4866e60cddc8e502aded0676e5d70dae3fd19cfa4ec9830641c0aee9710d21f2d74ba3ceedeb934fc86cd14305aed362ea78f4be95c221127c55788ca7f8947f0954f45ff73888fc6f82a6719d807763ae9d460da455317c37bb5013ae5e74e0d77507c7fd28a38cc91a2a9a0a0af9886dd57af90f77183898af691bc7639d53b56e91c6f265ae9188537973470c5bbbc200b3099dd2e6a7b1416fb314e1e6a7ac10e900d24fe646ce8b455da6608e3a9893319705098f9a3df5e5c5b2f2a20a260db2a096f0531f1055c926d4cf8d84d8ee16c34a840cbc94ff887872ebe0994b42d39dc6ba6dffd310f3b3cba11ff46b3c3c113f768e919f29d350a615223acfe86094172347648eef9ddd4d6fe2ea2fe107015e45888084c61dba5ff57635570ac0fc951d09824c4c25a41f962f650f696d6f76107a86c767e787c0b55c125fb906939e670a062a755a8dc8311b61b5ea1e0309c2a195e14d930e52037fc532f3ac6a2bd337736ab1ecc0be958901b460c7bdb16eab2ddd996bd9c9405dbc0fcb103990d29d445a15547bda587466d13e8d1fbfa57620628ff01393f9da70c4bd5da6d3f926d39db99681083a8b75c8ccef0316d902a2a4f1f035a80fb7af0502da3c2544aff12ef3473b78045745678d29a2520168e8757a9cfb54bccd41b1de2b07ad7864c233b813901e1609dade542341aba0efa3826ee55dd29ca9dd7a394898d5d686bfefe0d838d8486432e0c3e31167fd4d28c2a52cc85329e7ac2706357976ec09f47d9967bfc31124c41b97e2006dcb1806dd0c9df55e9cb4bb4fabeb7a291059c3f34308eaf690388c84cb80d0cb4530235dbe64fa7d4e0063c89cf6fccceec54f82e7c479e55fb2be96ceedfa33afd9793c189a5dcedf88614c572fb5a844be749aafdc71889da24735048aa5fbb2e5199ad2a2fc736ed77dbbc59e855747a1e5a209008d940b5d880e0aca02fb04755d8eeecd45e17c1a63eacf93ec2cb966cbbdcf8cfb3fa297258580fceab43e7c47a1980e0e9f16570db3f9541c080092f13befede308b0778f4165e7c9da941f1503a26b277205beb5ebc855f69192e6bd2ec7cc8cbd60d64170acd04ea16470c4b5d5a68a2b7b528b4093637901bb1d5d7e8ccb0097e1aec09a3eca7ffe82a89ef30611daaaa4aa7007ef34a8bbdbcaec17d1bf69967d911ff78bbd2af1b7a2f9edc793afff18ca0775e45f98f313a9bf13fa9cb2695f383045cf9d5541556e4915a0a2246e5c9509c957ca83183d3125c561bdbaf3fd4598cabac6a6c622cb85db81379d26e4af02013b98290d06b80f8ff4606a2d8fd08d67d9c9a747f9dc82333617539113d08f7bbb75f6d53380e00f7aae8bda697dcfc4b28c455bd7e7436528a8563b9d5fa7f196b98dbd5182d65df614e967137d294b401813c17e21f5802b0281dde2213b4d9f0bbac30067bdcf99247362fe7a8682dacb6bcf94358baf1efd749b7510db444be9f69251569fb8fc101f8f83c0ba186a35b67a69a392d71a8820bc6422609ec64577f86244db56079630f1b37e89c42b30e048ab7e4c5afc2e91053f5a0c593f239201787791d9c5ff6cf7644babca58f5c795413b6c6440c2efdb510c60377a4913414b4aebe37c5f65359320b0a0ac58384e30440f3163571b57a8b89443b534f0b61fe6bfc8e46c2d2d5f7033cd820b646f3d2a16cef3efddb82ef398295ed596950c485e6af8affdb243d2675e69b6a8a5afacbcf8aad87c6b63caca26f3683589194b81f3419a31f3dee494ab7b3cb43fa26b1da8fff288573e9038efe9c66f5b6264c4fe81b9978c3a6a2f4618a107be395ef6ab9cdf04ef7d61645616c7f7243660f25a3c193c17339a965c41359d350f98f738c70aaf35e79074b36c863db70d5adf82c5fe90d034f464c5858f200b1778487dc12f0935af696a511921c2722f68ac142689ebf2dc81cbb82a8ec5f7713d2c6680502be74aef8c3e2ed1f783b39eb9f830415ad18911a79e01fa4796e9e93df1f4570909e003289fd4541313181c5be0f1cdee98e9c7b02000e026a75818d3865b946c45f766e6182c1aff7718fc3d116aa5583cf15f3868c7b317eb03565dfe0c1c1d59484c9bbe29edcee6d7d5721eb564cb7ab0fb9584ed992e58559e27032adec016a3e0e6d043a449bbf8b1fa11086a201728cbf812b8900d6937e598fa16d44aaa5dc9e6ebbb0e773a3e196d715928b96d6d4c2617e35b22cf0c7ac51b039354d976da8b2c15cff2efb7e5f6ed4cb071c3b311dbb5cc8048bcd802db0b8546db72f26f4103d040522173d547e2a2349107af36eb441c85f157a8ba18cb119b256003b8c616a12120164d11f528779fdfaea80508f674e54c61274676d48051fdbef3eab06de479f2a9dac53f45882448bc8869c853d0b49dbe926477570e83d32ef3f521f04393e19e1eeaf29886c78cd091a3313e0ef4b040b285617dd45a81a9485196b3b1dbf46335ef39da5e7251b07af8ec4717613bff2ae607d576d0bb7332453e4bb9de504e3e14670c6f570c1f87d7ad68dca71386e50f7fee01e6224f0ac1f557e84e261ab2964f0000a500260046f90189e8de9491816c57485dd2b743c97265488115e66dc4670f9c8ddb7be6e31538a9e3f948ee5e795a9f366f32d3b0ca7220e7b2b5bb8a44669e4559d879fa7684366c74109a802781ea27a72c5cb5022b50060d9a0f3462db0838818fa5e598c1cfbdeb0a300aaee600428ac41c67ab5eb8ad587fae9763bd00ed51f37f9e6f55396e5a1fd8471a3cd99e9cb6949bfe252377422e4028564bddfd707819be0000005002f98005897bc706c307f193c6007ea5de0588ac8eb37f8c3712ed1241d87f881ccbf47c57afb3a67ac52e329c4aa23f4156d8b8643ad3b58a62be750ea5333e772e370a8a25a54860b3e236a34e34094bcc73a55d501e5f68d24a98f1729125ebc629299a3cda7c01b937b83017066856b252422eebe585f264f022b7ea347ac199e2abb95e13754ff0c345596c17eedb10b723ebef6621557daa28b79a1555e44eb258fb9914084c3f5630af4449bc3227d4c73e1cb8757db29c59bb06c83bd2112132b358af36fc04840a2123430074925af726f2bae2759327cd273f799ee1f975afb0bfae4b7e098a53db4b5172e8b1afd6c01de2601005776308008a0001000000c1ae278f4002acd35b2fc584509534476e99ab4dfe88b029dcfb7571714b582ed7f04f737447b1269c656ac2349fdb354466166c778784554f49d4d0bfd0ccac59d477df7bfa85040008805dcb8d6d7d28f6cd916bccaeeb3b81fcbefa9f884fe62bd249bb367525aef91920dcb617101f865fd7fe7a82bbeffa93a21f35432a140c062b1859ee3ff812c8c8784c7e93b838bfce939a008524058d894a8a776b0034ebdf03799ddbe767b1738dfb9b9e24b19c9641a580a9094753cec0fdf061f3e7da08ef35e4a380f2938a15b881a60a1c29fa8a23bbe5ed831c13cc7f81a21cebe49aab1ccdb53054abd80270638a1c23e6a80db1d4574f553063aed8af06392ae421c8cff1ed07d7913b767f0a9c51c7497a74b1f6cbdde283eae15504cbe91c460126dacf5cf517f21147fcc725708b32256f7e272cd7648b01d1a005e84fc75008008900", @ANYRES32, @ANYBLOB="a9001f805b417f5250ad5387265634a5de59b43f52be81861de2314253d2ec56dacf650eae6d88a2de488bced3b7eaab1544baae2ac19e9172d76b520b406f3e30401bd2c49f6c5b7f62a107254249408c7a048be9ad66fc72286fc9c71400eb0000000000000000000000ffffe000000208003100", @ANYRES32=0x0, @ANYBLOB="230005002f7379732f6b65726e656c2f64656275672f73796e632f73775f73796e6300000400068008000100", @ANYRES32=r1, @ANYBLOB="000000040071802b0abbeff098adf971de4c73e12e31677c31b4a298c19c2a75541b85c6f8a36569a43be3653f2bdf85a966119bc30000"], 0x17d8}, 0x1, 0x0, 0x0, 0x1}, 0x20008000) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000040)='/proc/kmsg\x00', 0x80900, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x4b8483, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_hcd.4/usb5/ep_00/type\x00', 0x100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000540)=""/4093, 0xffd) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/schedstat\x00', 0x2, 0x0) read$auto_proc_single_file_operations_base(r5, &(0x7f0000000040)=""/228, 0xe4) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x23, 0x0, 0x9) setsockopt$auto(r1, 0xfffffff2, 0x41, 0x0, 0x8) select$auto(0xe, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x4, 0xd3e, 0x1, 0x948b, 0x3, 0x295f4da0a, 0x2, 0x3, 0x62, 0x80000001, 0x50a7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) kernel console output (not intermixed with test programs): 196.226264][ T7583] __x64_sys_futex+0x1e0/0x4c0 [ 196.226297][ T7583] ? __pfx___x64_sys_futex+0x10/0x10 [ 196.226328][ T7583] ? dnotify_flush+0x79/0x4c0 [ 196.226363][ T7583] do_syscall_64+0xcd/0x490 [ 196.226396][ T7583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.226421][ T7583] RIP: 0033:0x7f265f78ebe9 [ 196.226438][ T7583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.226460][ T7583] RSP: 002b:00007f26605b30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 196.226481][ T7583] RAX: ffffffffffffffda RBX: 00007f265f9b5fa8 RCX: 00007f265f78ebe9 [ 196.226497][ T7583] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f265f9b5fac [ 196.226511][ T7583] RBP: 00007f265f9b5fa0 R08: 00007f26605b4000 R09: 0000000000000000 [ 196.226525][ T7583] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 196.226539][ T7583] R13: 00007f265f9b6038 R14: 00007fff13b50860 R15: 00007fff13b50948 [ 196.226560][ T7583] [ 196.438976][ T7595] FAULT_INJECTION: forcing a failure. [ 196.438976][ T7595] name failslab, interval 1, probability 0, space 0, times 0 [ 196.451785][ T7595] CPU: 1 UID: 0 PID: 7595 Comm: syz.1.344 Not tainted syzkaller #0 PREEMPT(full) [ 196.451816][ T7595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 196.451832][ T7595] Call Trace: [ 196.451841][ T7595] [ 196.451850][ T7595] dump_stack_lvl+0x16c/0x1f0 [ 196.451883][ T7595] should_fail_ex+0x512/0x640 [ 196.451918][ T7595] should_failslab+0xc2/0x120 [ 196.451950][ T7595] __kmalloc_cache_noprof+0x6a/0x3e0 [ 196.451975][ T7595] ? debug_mutex_init+0x37/0x70 [ 196.451996][ T7595] ? do_inotify_init+0xa2/0x5f0 [ 196.452030][ T7595] do_inotify_init+0xa2/0x5f0 [ 196.452060][ T7595] ? rcu_is_watching+0x12/0xc0 [ 196.452084][ T7595] __x64_sys_inotify_init1+0x30/0x40 [ 196.452116][ T7595] do_syscall_64+0xcd/0x490 [ 196.452148][ T7595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.452172][ T7595] RIP: 0033:0x7f7471d8ebe9 [ 196.452188][ T7595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.452210][ T7595] RSP: 002b:00007f7472c68038 EFLAGS: 00000246 ORIG_RAX: 0000000000000126 [ 196.452230][ T7595] RAX: ffffffffffffffda RBX: 00007f7471fb5fa0 RCX: 00007f7471d8ebe9 [ 196.452245][ T7595] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0003000000000000 [ 196.452259][ T7595] RBP: 00007f7471e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 196.452273][ T7595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.452286][ T7595] R13: 00007f7471fb6038 R14: 00007f7471fb5fa0 R15: 00007ffe2c4bc958 [ 196.452307][ T7595] [ 196.841111][ T5865] Bluetooth: hci0: command 0x0c1a tx timeout [ 197.098958][ T7617] FAULT_INJECTION: forcing a failure. [ 197.098958][ T7617] name failslab, interval 1, probability 0, space 0, times 0 [ 197.159348][ T7617] CPU: 1 UID: 0 PID: 7617 Comm: syz.1.346 Not tainted syzkaller #0 PREEMPT(full) [ 197.159380][ T7617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 197.159393][ T7617] Call Trace: [ 197.159401][ T7617] [ 197.159410][ T7617] dump_stack_lvl+0x16c/0x1f0 [ 197.159463][ T7617] should_fail_ex+0x512/0x640 [ 197.159506][ T7617] should_failslab+0xc2/0x120 [ 197.159538][ T7617] __kmalloc_cache_noprof+0x6a/0x3e0 [ 197.159562][ T7617] ? apply_wqattrs_prepare+0x130/0xbd0 [ 197.159591][ T7617] apply_wqattrs_prepare+0x130/0xbd0 [ 197.159622][ T7617] apply_workqueue_attrs_locked+0x64/0xe0 [ 197.159650][ T7617] __alloc_workqueue+0xf41/0x1810 [ 197.159688][ T7617] alloc_workqueue_noprof+0xd2/0x200 [ 197.159721][ T7617] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 197.159756][ T7617] ? rcu_is_watching+0x12/0xc0 [ 197.159780][ T7617] ? __kmalloc_noprof+0x242/0x510 [ 197.159807][ T7617] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 197.159847][ T7617] ieee80211_register_hw+0x1e8f/0x4060 [ 197.159888][ T7617] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 197.159922][ T7617] ? net_generic+0xea/0x2a0 [ 197.159955][ T7617] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 197.159990][ T7617] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 197.160021][ T7617] ? __hrtimer_setup+0x176/0x280 [ 197.160058][ T7617] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 197.160090][ T7617] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 197.160117][ T7617] hwsim_new_radio_nl+0xb51/0x12c0 [ 197.160141][ T7617] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 197.160168][ T7617] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 197.160208][ T7617] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 197.160249][ T7617] genl_family_rcv_msg_doit+0x206/0x2f0 [ 197.160287][ T7617] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 197.160328][ T7617] ? bpf_lsm_capable+0x9/0x10 [ 197.160350][ T7617] ? security_capable+0x7e/0x260 [ 197.160373][ T7617] ? ns_capable+0xd7/0x110 [ 197.160398][ T7617] genl_rcv_msg+0x55c/0x800 [ 197.160435][ T7617] ? __pfx_genl_rcv_msg+0x10/0x10 [ 197.160470][ T7617] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 197.160504][ T7617] netlink_rcv_skb+0x155/0x420 [ 197.160535][ T7617] ? __pfx_genl_rcv_msg+0x10/0x10 [ 197.160572][ T7617] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 197.160610][ T7617] ? netlink_deliver_tap+0x1ae/0xd30 [ 197.160641][ T7617] genl_rcv+0x28/0x40 [ 197.160673][ T7617] netlink_unicast+0x5aa/0x870 [ 197.160707][ T7617] ? __pfx_netlink_unicast+0x10/0x10 [ 197.160738][ T7617] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 197.160773][ T7617] netlink_sendmsg+0x8d1/0xdd0 [ 197.160807][ T7617] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.160840][ T7617] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 197.160867][ T7617] ____sys_sendmsg+0xa95/0xc70 [ 197.160905][ T7617] ? copy_msghdr_from_user+0x10a/0x160 [ 197.160935][ T7617] ? __pfx_____sys_sendmsg+0x10/0x10 [ 197.160971][ T7617] ? preempt_schedule_thunk+0x16/0x30 [ 197.161007][ T7617] ? try_to_wake_up+0xa67/0x1870 [ 197.161031][ T7617] ___sys_sendmsg+0x134/0x1d0 [ 197.161061][ T7617] ? __pfx____sys_sendmsg+0x10/0x10 [ 197.161090][ T7617] ? futex_private_hash_put+0x11c/0x300 [ 197.161122][ T7617] ? rcu_is_watching+0x12/0xc0 [ 197.161155][ T7617] __sys_sendmsg+0x16d/0x220 [ 197.161184][ T7617] ? __pfx___sys_sendmsg+0x10/0x10 [ 197.161214][ T7617] ? __x64_sys_futex+0x1e0/0x4c0 [ 197.161252][ T7617] do_syscall_64+0xcd/0x490 [ 197.161283][ T7617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.161307][ T7617] RIP: 0033:0x7f7471d8ebe9 [ 197.161324][ T7617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.161347][ T7617] RSP: 002b:00007f7472c68038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 197.161368][ T7617] RAX: ffffffffffffffda RBX: 00007f7471fb5fa0 RCX: 00007f7471d8ebe9 [ 197.161384][ T7617] RDX: 00000000040000c0 RSI: 0000200000000300 RDI: 0000000000000008 [ 197.161398][ T7617] RBP: 00007f7471e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 197.161412][ T7617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.161426][ T7617] R13: 00007f7471fb6038 R14: 00007f7471fb5fa0 R15: 00007ffe2c4bc958 [ 197.161447][ T7617] [ 197.607623][ T7616] FAULT_INJECTION: forcing a failure. [ 197.607623][ T7616] name failslab, interval 1, probability 0, space 0, times 0 [ 197.620360][ T7616] CPU: 1 UID: 0 PID: 7616 Comm: syz.3.345 Not tainted syzkaller #0 PREEMPT(full) [ 197.620391][ T7616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 197.620405][ T7616] Call Trace: [ 197.620414][ T7616] [ 197.620423][ T7616] dump_stack_lvl+0x16c/0x1f0 [ 197.620466][ T7616] should_fail_ex+0x512/0x640 [ 197.620502][ T7616] should_failslab+0xc2/0x120 [ 197.620534][ T7616] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 197.620563][ T7616] ? vm_area_alloc+0x1f/0x160 [ 197.620589][ T7616] vm_area_alloc+0x1f/0x160 [ 197.620611][ T7616] create_init_stack_vma+0x29/0x700 [ 197.620644][ T7616] alloc_bprm+0x420/0x710 [ 197.620670][ T7616] do_execveat_common.isra.0+0x1ce/0x610 [ 197.620699][ T7616] __x64_sys_execve+0x8e/0xb0 [ 197.620725][ T7616] do_syscall_64+0xcd/0x490 [ 197.620757][ T7616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.620780][ T7616] RIP: 0033:0x7f98c638ebe9 [ 197.620798][ T7616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.620820][ T7616] RSP: 002b:00007f98c7258038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 197.620841][ T7616] RAX: ffffffffffffffda RBX: 00007f98c65b6270 RCX: 00007f98c638ebe9 [ 197.620856][ T7616] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 197.620870][ T7616] RBP: 00007f98c6411e19 R08: 0000000000000000 R09: 0000000000000000 [ 197.620884][ T7616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.620897][ T7616] R13: 00007f98c65b6308 R14: 00007f98c65b6270 R15: 00007ffd1b8d3c48 [ 197.620923][ T7616] [ 198.293271][ T5865] Bluetooth: hci1: command 0x0c1a tx timeout [ 198.299389][ T5865] Bluetooth: hci3: command 0x0c1a tx timeout [ 198.306166][ T5865] Bluetooth: hci2: command 0x0c1a tx timeout [ 198.961363][ T5870] Bluetooth: hci0: command 0x0c1a tx timeout [ 199.483927][ T7637] zswap: compressor not available [ 200.218621][ T7580] kexec: Could not allocate control_code_buffer [ 200.265819][ T7654] tipc: Started in network mode [ 200.270730][ T7654] tipc: Node identity ee00, cluster identity 4711 [ 200.364871][ T5870] Bluetooth: hci2: command 0x0c1a tx timeout [ 200.370928][ T5870] Bluetooth: hci3: command 0x0c1a tx timeout [ 200.377256][ T5865] Bluetooth: hci1: command 0x0c1a tx timeout [ 200.388170][ T7654] tipc: Node number set to 60928 [ 200.937653][ T7666] vivid-003: ================= START STATUS ================= [ 201.058167][ T7666] vivid-003: Radio HW Seek Mode: Bounded [ 201.116838][ T7666] vivid-003: Radio Programmable HW Seek: false [ 201.158296][ T7666] vivid-003: RDS Rx I/O Mode: Block I/O [ 201.187597][ T7666] vivid-003: Generate RBDS Instead of RDS: false [ 201.223364][ T7666] vivid-003: RDS Reception: true [ 201.259256][ T7666] vivid-003: RDS Program Type: 0 inactive [ 201.284648][ T7666] vivid-003: RDS PS Name: inactive [ 201.331908][ T7666] vivid-003: RDS Radio Text: inactive [ 201.350428][ T7666] vivid-003: RDS Traffic Announcement: false inactive [ 201.369559][ T7666] vivid-003: RDS Traffic Program: false inactive [ 201.396273][ T7666] vivid-003: RDS Music: false inactive [ 201.423619][ T7666] vivid-003: ================== END STATUS ================== [ 201.944796][ T7677] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 201.982425][ T7677] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 202.006703][ T7677] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 202.041117][ T7677] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 202.074667][ T7677] CPU0 is offline. [ 202.617604][ T7699] warning: `syz.2.365' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 202.678738][ T7699] syz.2.365 uses obsolete (PF_INET,SOCK_PACKET) [ 202.717362][ T7699] program syz.2.365 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 203.398187][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 203.404742][ T5870] Bluetooth: hci0: command 0x0c1a tx timeout [ 203.421008][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 203.454083][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 203.463325][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 203.470939][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 203.489206][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 203.500485][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 203.519149][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 203.882672][ T7694] kexec: Could not allocate control_code_buffer [ 204.044166][ T5870] Bluetooth: hci2: command 0x0c1a tx timeout [ 204.050248][ T5870] Bluetooth: hci1: command 0x0c1a tx timeout [ 204.056756][ T5180] Bluetooth: hci3: command 0x0c1a tx timeout [ 204.785707][ T7735] sp0: Synchronizing with TNC [ 204.831674][ T7735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.373'. [ 204.846435][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.852922][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 205.205653][ T5870] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 206.122588][ T5870] Bluetooth: hci1: command 0x0c1a tx timeout [ 207.033090][ T5870] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 207.493783][ T7763] kexec: Could not allocate control_code_buffer [ 209.250988][ T5870] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 211.135542][ T7848] kexec: Could not allocate control_code_buffer [ 211.578163][ T7877] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 211.655689][ T5870] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 211.766403][ T7875] FAULT_INJECTION: forcing a failure. [ 211.766403][ T7875] name failslab, interval 1, probability 0, space 0, times 0 [ 211.904763][ T7875] CPU: 1 UID: 0 PID: 7875 Comm: syz.3.406 Not tainted syzkaller #0 PREEMPT(full) [ 211.904797][ T7875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 211.904812][ T7875] Call Trace: [ 211.904819][ T7875] [ 211.904828][ T7875] dump_stack_lvl+0x16c/0x1f0 [ 211.904863][ T7875] should_fail_ex+0x512/0x640 [ 211.904902][ T7875] should_failslab+0xc2/0x120 [ 211.904936][ T7875] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 211.904966][ T7875] ? lock_release+0x201/0x2f0 [ 211.904997][ T7875] ? __proc_create+0x2ce/0x8e0 [ 211.905037][ T7875] __proc_create+0x2ce/0x8e0 [ 211.905080][ T7875] ? __pfx___proc_create+0x10/0x10 [ 211.905114][ T7875] ? lock_release+0x201/0x2f0 [ 211.905147][ T7875] ? _raw_write_unlock+0x28/0x50 [ 211.905177][ T7875] ? proc_register+0x314/0x5f0 [ 211.905214][ T7875] proc_create_reg+0x7d/0x180 [ 211.905252][ T7875] proc_create_seq_private+0x8e/0x180 [ 211.905291][ T7875] ? __pfx_proc_create_seq_private+0x10/0x10 [ 211.905331][ T7875] ? __pfx_nl_fib_input+0x10/0x10 [ 211.905370][ T7875] ? __pfx_ip_rt_do_proc_init+0x10/0x10 [ 211.905408][ T7875] ip_rt_do_proc_init+0xac/0x1b0 [ 211.905445][ T7875] ops_init+0x1df/0x5f0 [ 211.905479][ T7875] setup_net+0x10f/0x380 [ 211.905510][ T7875] ? lockdep_init_map_type+0x5c/0x280 [ 211.905544][ T7875] ? __pfx_setup_net+0x10/0x10 [ 211.905577][ T7875] ? debug_mutex_init+0x37/0x70 [ 211.905601][ T7875] copy_net_ns+0x2a6/0x5f0 [ 211.905638][ T7875] create_new_namespaces+0x3ea/0xa90 [ 211.905669][ T7875] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 211.905699][ T7875] ksys_unshare+0x45b/0xa40 [ 211.905732][ T7875] ? __pfx_ksys_unshare+0x10/0x10 [ 211.905769][ T7875] ? xfd_validate_state+0x61/0x180 [ 211.905810][ T7875] __x64_sys_unshare+0x31/0x40 [ 211.905843][ T7875] do_syscall_64+0xcd/0x490 [ 211.905875][ T7875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.905900][ T7875] RIP: 0033:0x7f98c638ebe9 [ 211.905918][ T7875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.905941][ T7875] RSP: 002b:00007f98c72bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 211.905964][ T7875] RAX: ffffffffffffffda RBX: 00007f98c65b5fa0 RCX: 00007f98c638ebe9 [ 211.905980][ T7875] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 211.905994][ T7875] RBP: 00007f98c6411e19 R08: 0000000000000000 R09: 0000000000000000 [ 211.906008][ T7875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.906022][ T7875] R13: 00007f98c65b6038 R14: 00007f98c65b5fa0 R15: 00007ffd1b8d3c48 [ 211.906052][ T7875] [ 212.166013][ C1] vkms_vblank_simulate: vblank timer overrun [ 215.872874][ T5870] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 216.171902][ T7910] kexec: Could not allocate control_code_buffer [ 216.542258][ T7939] capability: warning: `syz.1.419' uses 32-bit capabilities (legacy support in use) [ 223.012839][ T5870] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 223.374096][ T8003] kexec: Could not allocate control_code_buffer [ 223.729463][ T8028] openvswitch: netlink: Geneve opt len 2 is not a multiple of 4. [ 223.813073][ T8031] can: request_module (can-proto-3) failed. [ 224.436092][ T31] audit: type=1804 audit(1755753246.287:4): pid=8037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.434" name="/newroot/118/file0" dev="tmpfs" ino=625 res=1 errno=0 [ 224.597091][ T31] audit: type=1804 audit(1755753246.317:5): pid=8036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.434" name="/newroot/118/file0" dev="tmpfs" ino=625 res=1 errno=0 [ 226.947839][ T5180] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 227.151210][ T8071] kexec: Could not allocate control_code_buffer [ 228.122346][ T5870] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 228.408084][ T8100] [U] - [ 228.410949][ T8100] [U] [ 228.413658][ T8100] [U] ffffffff9afc7960 FD: 2 BD: 322 -.-.: &obj_hash[i].lock [ 228.421394][ T8100] [U] -> [ffffffff8f17e6b8] pool_lock#2 [ 228.427229][ T8100] [U] ffffffff8f17e418 FD: 1 BD: 1 ....: avg_lock [ 228.528509][ T8100] mkiss: ax0: crc mode is auto. [ 228.635488][ T8096] sd 0:0:1:0: PR command failed: 1026 [ 228.653616][ T8096] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 228.678287][ T8096] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 229.056037][ T8099] [U] ffffffff8e61bb08 FD: 1 [ 229.437106][ T5870] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 230.544370][ T8117] kexec: Could not allocate control_code_buffer [ 232.282874][ T5870] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 233.456695][ T8168] kexec: Could not allocate control_code_buffer [ 233.552256][ T8182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.469'. [ 236.138288][ T5870] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 237.144233][ T8241] netlink: 12 bytes leftover after parsing attributes in process `syz.1.483'. [ 237.207293][ T8243] netlink: 20 bytes leftover after parsing attributes in process `syz.1.483'. [ 237.281576][ T8240] HfR: entered promiscuous mode [ 237.325544][ T8241] HfR: left promiscuous mode [ 237.575830][ T8228] kexec: Could not allocate control_code_buffer [ 239.270490][ T7842] syz.2.394 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 239.335879][ T8272] ======================================================= [ 239.335879][ T8272] WARNING: The mand mount option has been deprecated and [ 239.335879][ T8272] and is ignored by this kernel. Remove the mand [ 239.335879][ T8272] option from the mount to silence this warning. [ 239.335879][ T8272] ======================================================= [ 239.587367][ T7842] CPU: 1 UID: 0 PID: 7842 Comm: syz.2.394 Not tainted syzkaller #0 PREEMPT(full) [ 239.587398][ T7842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 239.587412][ T7842] Call Trace: [ 239.587419][ T7842] [ 239.587426][ T7842] dump_stack_lvl+0x16c/0x1f0 [ 239.587460][ T7842] dump_header+0x101/0x930 [ 239.587490][ T7842] oom_kill_process+0x272/0xa40 [ 239.587518][ T7842] out_of_memory+0x350/0x1700 [ 239.587549][ T7842] ? __pfx_out_of_memory+0x10/0x10 [ 239.587580][ T7842] mem_cgroup_out_of_memory+0x118/0x130 [ 239.587617][ T7842] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 239.587655][ T7842] ? do_raw_spin_unlock+0x172/0x230 [ 239.587700][ T7842] try_charge_memcg+0x72b/0xd50 [ 239.587730][ T7842] ? __pfx_try_charge_memcg+0x10/0x10 [ 239.587757][ T7842] ? rcu_is_watching+0x12/0xc0 [ 239.587781][ T7842] ? rcu_is_watching+0x12/0xc0 [ 239.587807][ T7842] charge_memcg+0x8a/0x230 [ 239.587834][ T7842] __mem_cgroup_charge+0x2b/0x1e0 [ 239.587866][ T7842] shmem_alloc_and_add_folio+0x514/0xc20 [ 239.587895][ T7842] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 239.587922][ T7842] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 239.587951][ T7842] shmem_get_folio_gfp+0x67f/0x1600 [ 239.587978][ T7842] ? rcu_is_watching+0x12/0xc0 [ 239.588000][ T7842] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 239.588028][ T7842] ? filemap_map_pages+0xf58/0x1670 [ 239.588058][ T7842] shmem_fault+0x1fe/0xa30 [ 239.588083][ T7842] ? __pfx_shmem_fault+0x10/0x10 [ 239.588110][ T7842] ? __pfx_filemap_map_pages+0x10/0x10 [ 239.588137][ T7842] ? const_folio_flags+0x5b/0x100 [ 239.588166][ T7842] ? __pfx_filemap_map_pages+0x10/0x10 [ 239.588193][ T7842] __do_fault+0x10d/0x490 [ 239.588221][ T7842] ? __pfx_filemap_map_pages+0x10/0x10 [ 239.588248][ T7842] do_pte_missing+0xf50/0x3ba0 [ 239.588272][ T7842] ? __handle_mm_fault+0x14fd/0x2a50 [ 239.588293][ T7842] ? rcu_is_watching+0x12/0xc0 [ 239.588315][ T7842] ? lock_release+0x201/0x2f0 [ 239.588346][ T7842] __handle_mm_fault+0x152a/0x2a50 [ 239.588372][ T7842] ? __pfx___handle_mm_fault+0x10/0x10 [ 239.588396][ T7842] ? __pte_offset_map_lock+0x174/0x310 [ 239.588434][ T7842] ? follow_page_pte.constprop.0+0x5cf/0x1390 [ 239.588477][ T7842] handle_mm_fault+0x589/0xd10 [ 239.588502][ T7842] __get_user_pages+0x551/0x34a0 [ 239.588540][ T7842] ? rcu_is_watching+0x12/0xc0 [ 239.588562][ T7842] ? __pfx___get_user_pages+0x10/0x10 [ 239.588597][ T7842] ? __kernel_write_iter+0x5a5/0xb10 [ 239.588626][ T7842] get_dump_page+0x257/0x3d0 [ 239.588662][ T7842] ? __pfx_get_dump_page+0x10/0x10 [ 239.588710][ T7842] ? lock_release+0x201/0x2f0 [ 239.588738][ T7842] ? dump_user_range+0x580/0xb70 [ 239.588762][ T7842] dump_user_range+0x195/0xb70 [ 239.588786][ T7842] ? __pfx_dump_user_range+0x10/0x10 [ 239.588809][ T7842] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 239.588849][ T7842] ? __pfx_writenote+0x10/0x10 [ 239.588876][ T7842] elf_core_dump+0x2929/0x3b60 [ 239.588907][ T7842] ? __pfx_elf_core_dump+0x10/0x10 [ 239.588931][ T7842] ? kasan_save_stack+0x42/0x60 [ 239.588956][ T7842] ? kasan_save_stack+0x33/0x60 [ 239.588980][ T7842] ? kasan_save_track+0x14/0x30 [ 239.589005][ T7842] ? __kasan_kmalloc+0xaa/0xb0 [ 239.589030][ T7842] ? vfs_coredump+0x1dca/0x5670 [ 239.589049][ T7842] ? get_signal+0x22e3/0x26d0 [ 239.589075][ T7842] ? arch_do_signal_or_restart+0x8f/0x790 [ 239.589108][ T7842] ? 0xffffffffff600000 [ 239.589141][ T7842] ? rcu_is_watching+0x12/0xc0 [ 239.589163][ T7842] ? lock_acquire+0x2cd/0x350 [ 239.589192][ T7842] ? __pfx___might_resched+0x10/0x10 [ 239.589218][ T7842] ? vfs_coredump+0x2b97/0x5670 [ 239.589238][ T7842] vfs_coredump+0x2b97/0x5670 [ 239.589263][ T7842] ? do_pte_missing+0x8a9/0x3ba0 [ 239.589284][ T7842] ? __pfx_vfs_coredump+0x10/0x10 [ 239.589304][ T7842] ? lock_release+0x201/0x2f0 [ 239.589335][ T7842] ? rcu_is_watching+0x12/0xc0 [ 239.589357][ T7842] ? unwind_next_frame+0x3f4/0x20a0 [ 239.589379][ T7842] ? rcu_is_watching+0x12/0xc0 [ 239.589404][ T7842] ? rcu_is_watching+0x12/0xc0 [ 239.589427][ T7842] ? unwind_next_frame+0x3f4/0x20a0 [ 239.589448][ T7842] ? rcu_is_watching+0x12/0xc0 [ 239.589475][ T7842] ? lock_release+0x201/0x2f0 [ 239.589502][ T7842] ? bpf_ksym_find+0x124/0x1c0 [ 239.589526][ T7842] ? __kernel_text_address+0xd/0x40 [ 239.589546][ T7842] ? unwind_get_return_address+0x59/0xa0 [ 239.589570][ T7842] ? arch_stack_walk+0xa6/0x100 [ 239.589598][ T7842] ? stack_trace_save+0x8e/0xc0 [ 239.589623][ T7842] ? __pfx_stack_trace_save+0x10/0x10 [ 239.589648][ T7842] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 239.589675][ T7842] ? stack_depot_save_flags+0x29/0x9c0 [ 239.589713][ T7842] ? arch_do_signal_or_restart+0x4c0/0x790 [ 239.589742][ T7842] ? irqentry_exit_to_user_mode+0x12a/0x270 [ 239.589772][ T7842] ? asm_exc_page_fault+0x26/0x30 [ 239.589818][ T7842] ? proc_coredump_connector+0x2d1/0x4f0 [ 239.589843][ T7842] ? __pfx_proc_coredump_connector+0x10/0x10 [ 239.589871][ T7842] ? rcu_is_watching+0x12/0xc0 [ 239.589894][ T7842] get_signal+0x22e3/0x26d0 [ 239.589923][ T7842] ? force_sig_fault+0xc4/0x100 [ 239.589948][ T7842] ? __pfx_get_signal+0x10/0x10 [ 239.589977][ T7842] arch_do_signal_or_restart+0x8f/0x790 [ 239.590006][ T7842] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 239.590042][ T7842] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 239.590080][ T7842] irqentry_exit_to_user_mode+0x12a/0x270 [ 239.590110][ T7842] asm_exc_page_fault+0x26/0x30 [ 239.590131][ T7842] RIP: 0033:0x7f668724f920 [ 239.590153][ T7842] Code: Unable to access opcode bytes at 0x7f668724f8f6. [ 239.590163][ T7842] RSP: 002b:00007f6688106178 EFLAGS: 00010206 [ 239.590181][ T7842] RAX: 0000000000000000 RBX: 00007f66875b6360 RCX: 00007f668738ebe9 [ 239.590195][ T7842] RDX: 00007f6688106180 RSI: 00007f66881062b0 RDI: 000000000000000b [ 239.590209][ T7842] RBP: 00007f6687411e19 R08: 0000000000000000 R09: 0000000000000000 [ 239.590223][ T7842] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 239.590236][ T7842] R13: 00007f66875b63f8 R14: 00007f66875b6360 R15: 00007ffccb6361e8 [ 239.590257][ T7842] [ 240.207423][ T7842] memory: usage 307200kB, limit 307200kB, failcnt 24556 [ 240.214445][ T7842] memory+swap: usage 432148kB, limit 9007199254740988kB, failcnt 0 [ 240.223701][ T7842] kmem: usage 4000kB, limit 9007199254740988kB, failcnt 0 [ 240.230825][ T7842] Memory cgroup stats for /syz2: [ 240.230975][ T7842] cache 307339264 [ 240.239569][ T7842] rss 3051520 [ 240.242883][ T7842] rss_huge 0 [ 240.246078][ T7842] shmem 307339264 [ 240.249717][ T7842] mapped_file 98447360 [ 240.253809][ T7842] dirty 0 [ 240.256747][ T7842] writeback 0 [ 240.260057][ T7842] workingset_refault_anon 648 [ 240.264768][ T7842] workingset_refault_file 228 [ 240.269438][ T7842] swap 127946752 [ 240.273004][ T7842] swapcached 49152 [ 240.276794][ T7842] pgpgin 193324 [ 240.280251][ T7842] pgpgout 119066 [ 240.283907][ T7842] pgfault 244509 [ 240.287471][ T7842] pgmajfault 102 [ 240.291023][ T7842] inactive_anon 138129408 [ 240.295409][ T7842] active_anon 172310528 [ 240.299656][ T7842] inactive_file 0 [ 240.303343][ T7842] active_file 0 [ 240.306799][ T7842] unevictable 0 [ 240.310252][ T7842] hierarchical_memory_limit 314572800 [ 240.315643][ T7842] hierarchical_memsw_limit 9223372036854771712 [ 240.321873][ T7842] total_cache 307339264 [ 240.327385][ T7842] total_rss 3051520 [ 240.331196][ T7842] total_rss_huge 0 [ 240.334949][ T7842] total_shmem 307339264 [ 240.339117][ T7842] total_mapped_file 98447360 [ 240.343764][ T7842] total_dirty 0 [ 240.347223][ T7842] total_writeback 0 [ 240.351025][ T7842] total_workingset_refault_anon 648 [ 240.356255][ T7842] total_workingset_refault_file 228 [ 240.361449][ T7842] total_swap 127946752 [ 240.365559][ T7842] total_swapcached 49152 [ 240.369797][ T7842] total_pgpgin 193324 [ 240.373801][ T7842] total_pgpgout 119066 [ 240.377870][ T7842] total_pgfault 244509 [ 240.381971][ T7842] total_pgmajfault 102 [ 240.386050][ T7842] total_inactive_anon 138129408 [ 240.390898][ T7842] total_active_anon 172310528 [ 240.395726][ T7842] total_inactive_file 0 [ 240.399894][ T7842] total_active_file 0 [ 240.403960][ T7842] total_unevictable 0 [ 240.407948][ T7842] anon_cost 0 [ 240.411250][ T7842] file_cost 0 [ 240.414565][ T7842] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.394,pid=7856,uid=0 [ 240.430748][ T7842] Memory cgroup out of memory: Killed process 7856 (syz.2.394) total-vm:66196kB, anon-rss:128kB, file-rss:0kB, shmem-rss:35328kB, UID:0 pgtables:96kB oom_score_adj:1000 [ 241.059018][ T5861] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 241.131489][ T5861] CPU: 1 UID: 0 PID: 5861 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 241.131526][ T5861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 241.131540][ T5861] Call Trace: [ 241.131546][ T5861] [ 241.131555][ T5861] dump_stack_lvl+0x16c/0x1f0 [ 241.131588][ T5861] dump_header+0x101/0x930 [ 241.131617][ T5861] oom_kill_process+0x272/0xa40 [ 241.131646][ T5861] out_of_memory+0x350/0x1700 [ 241.131676][ T5861] ? __pfx_out_of_memory+0x10/0x10 [ 241.131706][ T5861] mem_cgroup_out_of_memory+0x118/0x130 [ 241.131748][ T5861] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 241.131787][ T5861] ? do_raw_spin_unlock+0x172/0x230 [ 241.131825][ T5861] try_charge_memcg+0x72b/0xd50 [ 241.131854][ T5861] ? policy_nodemask+0xea/0x4e0 [ 241.131884][ T5861] ? __pfx_try_charge_memcg+0x10/0x10 [ 241.131912][ T5861] ? rcu_is_watching+0x12/0xc0 [ 241.131935][ T5861] ? rcu_is_watching+0x12/0xc0 [ 241.131958][ T5861] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 241.131990][ T5861] charge_memcg+0x8a/0x230 [ 241.132018][ T5861] __mem_cgroup_charge+0x2b/0x1e0 [ 241.132049][ T5861] filemap_add_folio+0x88/0x220 [ 241.132079][ T5861] ? __pfx_filemap_add_folio+0x10/0x10 [ 241.132113][ T5861] __filemap_get_folio+0x510/0xc30 [ 241.132146][ T5861] filemap_fault+0x661/0x2930 [ 241.132180][ T5861] ? __pfx_filemap_fault+0x10/0x10 [ 241.132216][ T5861] ? __pfx_filemap_map_pages+0x10/0x10 [ 241.132243][ T5861] __do_fault+0x10d/0x490 [ 241.132272][ T5861] ? __pfx_filemap_map_pages+0x10/0x10 [ 241.132298][ T5861] do_pte_missing+0xf50/0x3ba0 [ 241.132322][ T5861] ? __handle_mm_fault+0x14fd/0x2a50 [ 241.132343][ T5861] ? rcu_is_watching+0x12/0xc0 [ 241.132365][ T5861] ? lock_release+0x201/0x2f0 [ 241.132396][ T5861] __handle_mm_fault+0x152a/0x2a50 [ 241.132423][ T5861] ? __pfx___handle_mm_fault+0x10/0x10 [ 241.132444][ T5861] ? vma_start_read+0x2fc/0x870 [ 241.132467][ T5861] ? __pfx_vma_start_read+0x10/0x10 [ 241.132489][ T5861] ? lock_vma_under_rcu+0x1eb/0x530 [ 241.132512][ T5861] ? rcu_is_watching+0x12/0xc0 [ 241.132544][ T5861] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 241.132567][ T5861] ? __pfx___do_sys_wait4+0x10/0x10 [ 241.132606][ T5861] handle_mm_fault+0x589/0xd10 [ 241.132629][ T5861] ? __bpf_trace_exceptions+0x1/0x40 [ 241.132664][ T5861] do_user_addr_fault+0x60c/0x1370 [ 241.132707][ T5861] ? rcu_is_watching+0x12/0xc0 [ 241.132731][ T5861] exc_page_fault+0x5c/0xb0 [ 241.132758][ T5861] asm_exc_page_fault+0x26/0x30 [ 241.132780][ T5861] RIP: 0033:0x7f6687265c24 [ 241.132797][ T5861] Code: 85 ed 09 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 78 fb e7 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d 89 fa e7 00 48 01 d1 [ 241.132820][ T5861] RSP: 002b:00007ffccb636570 EFLAGS: 00010202 [ 241.132838][ T5861] RAX: 0000001b32e24000 RBX: 00000000000001d0 RCX: 000000000003a598 [ 241.132853][ T5861] RDX: 0000000000b2bb36 RSI: 00007ffccb636600 RDI: 00007f66881aa010 [ 241.132867][ T5861] RBP: 00007ffccb6365ac R08: 000000000000b396 R09: 00007f66881aa000 [ 241.132882][ T5861] R10: 0000000000000001 R11: 0001f1baa5cceb9c R12: 0000000000001388 [ 241.132896][ T5861] R13: 00000000000927c0 R14: 0000000000039f19 R15: 00007ffccb636600 [ 241.132917][ T5861] [ 241.903999][ T5870] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 242.398537][ T5861] memory: usage 307200kB, limit 307200kB, failcnt 25982 [ 242.449753][ T5861] memory+swap: usage 430404kB, limit 9007199254740988kB, failcnt 0 [ 242.524897][ T5861] kmem: usage 3876kB, limit 9007199254740988kB, failcnt 0 [ 242.610622][ T5861] Memory cgroup stats for /syz2: [ 242.610786][ T5861] cache 307425280 [ 242.686013][ T5861] rss 2998272 [ 242.751948][ T5861] rss_huge 0 [ 242.755197][ T5861] shmem 307425280 [ 242.758833][ T5861] mapped_file 98439168 [ 242.846455][ T5861] dirty 0 [ 242.849540][ T5861] writeback 0 [ 242.916966][ T5861] workingset_refault_anon 661 [ 242.991591][ T5861] workingset_refault_file 228 [ 243.051355][ T5861] swap 117501952 [ 243.063800][ T5861] swapcached 102400 [ 243.108783][ T5861] pgpgin 193361 [ 243.152174][ T5861] pgpgout 119082 [ 243.211833][ T5861] pgfault 244518 [ 243.268654][ T5861] pgmajfault 102 [ 243.295684][ T5861] inactive_anon 138145792 [ 243.338821][ T5861] active_anon 172380160 [ 243.387656][ T5861] inactive_file 0 [ 243.391465][ T5861] active_file 0 [ 243.462195][ T5861] unevictable 0 [ 243.465738][ T5861] hierarchical_memory_limit 314572800 [ 243.471142][ T5861] hierarchical_memsw_limit 9223372036854771712 [ 243.574273][ T7856] syz.2.394 (7856) used greatest stack depth: 19008 bytes left [ 243.629782][ T5861] total_cache 307425280 [ 243.669176][ T5861] total_rss 2998272 [ 243.699719][ T5861] total_rss_huge 0 [ 243.723042][ T5861] total_shmem 307425280 [ 243.744759][ T5861] total_mapped_file 98439168 [ 243.749418][ T5861] total_dirty 0 [ 243.791854][ T5861] total_writeback 0 [ 243.810544][ T5861] total_workingset_refault_anon 661 [ 243.845169][ T5861] total_workingset_refault_file 228 [ 243.890957][ T5861] total_swap 117501952 [ 243.913404][ T5861] total_swapcached 102400 [ 243.939407][ T5861] total_pgpgin 193361 [ 243.964898][ T5861] total_pgpgout 119082 [ 243.969018][ T5861] total_pgfault 244518 [ 244.010583][ T5861] total_pgmajfault 102 [ 244.048347][ T5861] total_inactive_anon 138145792 [ 244.076917][ T5861] total_active_anon 172380160 [ 244.107005][ T5861] total_inactive_file 0 [ 244.141125][ T5861] total_active_file 0 [ 244.172176][ T5861] total_unevictable 0 [ 244.200088][ T5861] anon_cost 0 [ 244.234651][ T5861] file_cost 0 [ 244.256162][ T5861] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.394,pid=7852,uid=0 [ 244.355489][ T5861] Memory cgroup out of memory: Killed process 7852 (syz.2.394) total-vm:66196kB, anon-rss:128kB, file-rss:0kB, shmem-rss:35328kB, UID:0 pgtables:96kB oom_score_adj:1000 [ 245.172822][ T8326] input: jJǸí¸ü;9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input8 [ 245.272535][ T8282] kexec: Could not allocate control_code_buffer [ 246.154616][ T5870] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 247.975826][ T8386] netlink: 28 bytes leftover after parsing attributes in process `syz.1.511'. [ 248.585294][ T8386] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.024457][ T8386] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.256051][ T8386] bond0 (unregistering): Released all slaves [ 249.698042][ T7852] syz.2.394 (7852) used greatest stack depth: 18816 bytes left [ 250.093034][ T5870] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 250.105175][ T8398] kexec: Could not allocate control_code_buffer [ 251.710252][ T5861] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 252.150642][ T5861] CPU: 1 UID: 0 PID: 5861 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 252.150674][ T5861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 252.150687][ T5861] Call Trace: [ 252.150694][ T5861] [ 252.150701][ T5861] dump_stack_lvl+0x16c/0x1f0 [ 252.150740][ T5861] dump_header+0x101/0x930 [ 252.150770][ T5861] oom_kill_process+0x272/0xa40 [ 252.150798][ T5861] out_of_memory+0x350/0x1700 [ 252.150828][ T5861] ? __pfx_out_of_memory+0x10/0x10 [ 252.150859][ T5861] mem_cgroup_out_of_memory+0x118/0x130 [ 252.150894][ T5861] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 252.150932][ T5861] ? do_raw_spin_unlock+0x172/0x230 [ 252.150970][ T5861] try_charge_memcg+0x72b/0xd50 [ 252.150998][ T5861] ? policy_nodemask+0xea/0x4e0 [ 252.151027][ T5861] ? __pfx_try_charge_memcg+0x10/0x10 [ 252.151054][ T5861] ? rcu_is_watching+0x12/0xc0 [ 252.151077][ T5861] ? rcu_is_watching+0x12/0xc0 [ 252.151099][ T5861] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 252.151131][ T5861] charge_memcg+0x8a/0x230 [ 252.151158][ T5861] __mem_cgroup_charge+0x2b/0x1e0 [ 252.151189][ T5861] filemap_add_folio+0x88/0x220 [ 252.151218][ T5861] ? __pfx_filemap_add_folio+0x10/0x10 [ 252.151251][ T5861] __filemap_get_folio+0x510/0xc30 [ 252.151283][ T5861] filemap_fault+0x661/0x2930 [ 252.151316][ T5861] ? __pfx_filemap_fault+0x10/0x10 [ 252.151352][ T5861] ? __pfx_filemap_map_pages+0x10/0x10 [ 252.151378][ T5861] __do_fault+0x10d/0x490 [ 252.151406][ T5861] ? __pfx_filemap_map_pages+0x10/0x10 [ 252.151432][ T5861] do_pte_missing+0xf50/0x3ba0 [ 252.151455][ T5861] ? __handle_mm_fault+0x14fd/0x2a50 [ 252.151476][ T5861] ? rcu_is_watching+0x12/0xc0 [ 252.151498][ T5861] ? lock_release+0x201/0x2f0 [ 252.151528][ T5861] __handle_mm_fault+0x152a/0x2a50 [ 252.151554][ T5861] ? __pfx___handle_mm_fault+0x10/0x10 [ 252.151575][ T5861] ? vma_start_read+0x2fc/0x870 [ 252.151597][ T5861] ? __pfx_vma_start_read+0x10/0x10 [ 252.151644][ T5861] ? lock_vma_under_rcu+0x1eb/0x530 [ 252.151666][ T5861] ? rcu_is_watching+0x12/0xc0 [ 252.151692][ T5861] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 252.151714][ T5861] ? __pfx___do_sys_wait4+0x10/0x10 [ 252.151753][ T5861] handle_mm_fault+0x589/0xd10 [ 252.151776][ T5861] ? __bpf_trace_exceptions+0x1/0x40 [ 252.151811][ T5861] do_user_addr_fault+0x60c/0x1370 [ 252.151848][ T5861] ? rcu_is_watching+0x12/0xc0 [ 252.151871][ T5861] exc_page_fault+0x5c/0xb0 [ 252.151898][ T5861] asm_exc_page_fault+0x26/0x30 [ 252.151920][ T5861] RIP: 0033:0x7f6687265c24 [ 252.151937][ T5861] Code: 85 ed 09 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 78 fb e7 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d 89 fa e7 00 48 01 d1 [ 252.151959][ T5861] RSP: 002b:00007ffccb636570 EFLAGS: 00010206 [ 252.151977][ T5861] RAX: 0000001b32e24000 RBX: 00000000000001d2 RCX: 000000000003d478 [ 252.151991][ T5861] RDX: 000000000a1f78c3 RSI: 00007ffccb636600 RDI: 00007f66881aa010 [ 252.152005][ T5861] RBP: 00007ffccb6365ac R08: 000000000000bc86 R09: 00007f66881aa000 [ 252.152019][ T5861] R10: 0000000000000001 R11: 0025b5018f0bfe24 R12: 0000000000001388 [ 252.152033][ T5861] R13: 00000000000927c0 R14: 000000000003d35f R15: 00007ffccb636600 [ 252.152053][ T5861] [ 253.139773][ T8475] random: crng reseeded on system resumption [ 253.570652][ T5861] memory: usage 303784kB, limit 307200kB, failcnt 32024 [ 253.624910][ T5861] memory+swap: usage 428652kB, limit 9007199254740988kB, failcnt 0 [ 253.689445][ T5861] kmem: usage 3520kB, limit 9007199254740988kB, failcnt 0 [ 253.737932][ T5861] Memory cgroup stats for /syz2: [ 253.738090][ T5861] cache 307027968 [ 253.770892][ T8481] netlink: 'syz.1.530': attribute type 2 has an invalid length. [ 253.783034][ T5861] rss 335872 [ 253.786324][ T5861] rss_huge 0 [ 253.789536][ T5861] shmem 307027968 [ 253.807927][ T5861] mapped_file 111874048 [ 253.837536][ T5861] dirty 0 [ 253.840538][ T5861] writeback 0 [ 253.865008][ T5861] workingset_refault_anon 661 [ 253.885293][ T5861] workingset_refault_file 230 [ 253.890038][ T5861] swap 127864832 [ 253.921889][ T5861] swapcached 86016 [ 253.928973][ T5861] pgpgin 215255 [ 253.938743][ T5861] pgpgout 141726 [ 253.956135][ T5861] pgfault 252830 [ 253.968620][ T5861] pgmajfault 104 [ 253.983506][ T5861] inactive_anon 178204672 [ 254.004040][ T5861] active_anon 129245184 [ 254.008243][ T5861] inactive_file 0 [ 254.031829][ T5861] active_file 0 [ 254.035487][ T5861] unevictable 0 [ 254.038980][ T5861] hierarchical_memory_limit 314572800 [ 254.067563][ T5861] hierarchical_memsw_limit 9223372036854771712 [ 254.094103][ T5861] total_cache 307027968 [ 254.108595][ T5861] total_rss 335872 [ 254.128889][ T5861] total_rss_huge 0 [ 254.149452][ T5861] total_shmem 307027968 [ 254.157200][ T5861] total_mapped_file 111874048 [ 254.184058][ T5861] total_dirty 0 [ 254.187620][ T5861] total_writeback 0 [ 254.191450][ T5861] total_workingset_refault_anon 661 [ 254.231787][ T5861] total_workingset_refault_file 230 [ 254.237045][ T5861] total_swap 127864832 [ 254.282060][ T5861] total_swapcached 86016 [ 254.295178][ T5861] total_pgpgin 215255 [ 254.311904][ T5861] total_pgpgout 141726 [ 254.319605][ T5861] total_pgfault 252830 [ 254.337339][ T5861] total_pgmajfault 104 [ 254.362716][ T5861] total_inactive_anon 178204672 [ 254.374656][ T5861] total_active_anon 129245184 [ 254.394887][ T5861] total_inactive_file 0 [ 254.399086][ T5861] total_active_file 0 [ 254.423469][ T5861] total_unevictable 0 [ 254.441830][ T5861] anon_cost 0 [ 254.445724][ T5870] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 254.458527][ T5861] file_cost 0 [ 254.468887][ T5861] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.394,pid=7839,uid=0 [ 254.516627][ T5861] Memory cgroup out of memory: Killed process 7839 (syz.2.394) total-vm:66196kB, anon-rss:0kB, file-rss:0kB, shmem-rss:40704kB, UID:0 pgtables:104kB oom_score_adj:1000 [ 254.869218][ T8465] kexec: Could not allocate control_code_buffer [ 255.129855][ T7833] syz.2.394 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 255.507377][ T7833] CPU: 1 UID: 0 PID: 7833 Comm: syz.2.394 Not tainted syzkaller #0 PREEMPT(full) [ 255.507409][ T7833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 255.507423][ T7833] Call Trace: [ 255.507430][ T7833] [ 255.507437][ T7833] dump_stack_lvl+0x16c/0x1f0 [ 255.507471][ T7833] dump_header+0x101/0x930 [ 255.507499][ T7833] oom_kill_process+0x272/0xa40 [ 255.507528][ T7833] out_of_memory+0x350/0x1700 [ 255.507558][ T7833] ? __pfx_out_of_memory+0x10/0x10 [ 255.507588][ T7833] mem_cgroup_out_of_memory+0x118/0x130 [ 255.507624][ T7833] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 255.507661][ T7833] ? do_raw_spin_unlock+0x172/0x230 [ 255.507699][ T7833] try_charge_memcg+0x72b/0xd50 [ 255.507728][ T7833] ? __pfx_try_charge_memcg+0x10/0x10 [ 255.507755][ T7833] ? rcu_is_watching+0x12/0xc0 [ 255.507778][ T7833] ? rcu_is_watching+0x12/0xc0 [ 255.507804][ T7833] charge_memcg+0x8a/0x230 [ 255.507831][ T7833] __mem_cgroup_charge+0x2b/0x1e0 [ 255.507862][ T7833] shmem_alloc_and_add_folio+0x514/0xc20 [ 255.507890][ T7833] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 255.507924][ T7833] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 255.507953][ T7833] shmem_get_folio_gfp+0x67f/0x1600 [ 255.507982][ T7833] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 255.508007][ T7833] ? inode_set_ctime_current+0xa3/0x8f0 [ 255.508038][ T7833] ? timestamp_truncate+0x21e/0x2d0 [ 255.508068][ T7833] shmem_write_begin+0x160/0x300 [ 255.508096][ T7833] ? __pfx_shmem_write_begin+0x10/0x10 [ 255.508122][ T7833] ? inode_set_ctime_current+0x2a1/0x8f0 [ 255.508153][ T7833] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 255.508197][ T7833] generic_perform_write+0x3c2/0x900 [ 255.508229][ T7833] ? __pfx_generic_perform_write+0x10/0x10 [ 255.508255][ T7833] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 255.508286][ T7833] ? generic_update_time+0xcf/0xf0 [ 255.508315][ T7833] ? mnt_put_write_access_file+0x45/0xf0 [ 255.508342][ T7833] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 255.508373][ T7833] shmem_file_write_iter+0x10e/0x140 [ 255.508405][ T7833] __kernel_write_iter+0x317/0xb10 [ 255.508433][ T7833] ? __pfx___kernel_write_iter+0x10/0x10 [ 255.508464][ T7833] ? copy_mc_enhanced_fast_string+0x6/0xf [ 255.508489][ T7833] dump_user_range+0x413/0xb70 [ 255.508514][ T7833] ? __pfx_dump_user_range+0x10/0x10 [ 255.508537][ T7833] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 255.508577][ T7833] ? __pfx_writenote+0x10/0x10 [ 255.508604][ T7833] elf_core_dump+0x2929/0x3b60 [ 255.508635][ T7833] ? __pfx_elf_core_dump+0x10/0x10 [ 255.508659][ T7833] ? kasan_save_stack+0x42/0x60 [ 255.508685][ T7833] ? kasan_save_stack+0x33/0x60 [ 255.508709][ T7833] ? kasan_save_track+0x14/0x30 [ 255.508734][ T7833] ? __kasan_kmalloc+0xaa/0xb0 [ 255.508758][ T7833] ? vfs_coredump+0x1dca/0x5670 [ 255.508778][ T7833] ? get_signal+0x22e3/0x26d0 [ 255.508803][ T7833] ? arch_do_signal_or_restart+0x8f/0x790 [ 255.508836][ T7833] ? 0xffffffffff600000 [ 255.508868][ T7833] ? rcu_is_watching+0x12/0xc0 [ 255.508890][ T7833] ? lock_acquire+0x2cd/0x350 [ 255.508926][ T7833] ? __pfx___might_resched+0x10/0x10 [ 255.508951][ T7833] ? vfs_coredump+0x2b97/0x5670 [ 255.508971][ T7833] vfs_coredump+0x2b97/0x5670 [ 255.508996][ T7833] ? do_pte_missing+0x8a9/0x3ba0 [ 255.509018][ T7833] ? __pfx_vfs_coredump+0x10/0x10 [ 255.509038][ T7833] ? lock_release+0x201/0x2f0 [ 255.509069][ T7833] ? rcu_is_watching+0x12/0xc0 [ 255.509092][ T7833] ? unwind_next_frame+0x3f4/0x20a0 [ 255.509114][ T7833] ? rcu_is_watching+0x12/0xc0 [ 255.509139][ T7833] ? rcu_is_watching+0x12/0xc0 [ 255.509162][ T7833] ? unwind_next_frame+0x3f4/0x20a0 [ 255.509183][ T7833] ? rcu_is_watching+0x12/0xc0 [ 255.509209][ T7833] ? lock_release+0x201/0x2f0 [ 255.509237][ T7833] ? bpf_ksym_find+0x124/0x1c0 [ 255.509261][ T7833] ? __kernel_text_address+0xd/0x40 [ 255.509281][ T7833] ? unwind_get_return_address+0x59/0xa0 [ 255.509304][ T7833] ? arch_stack_walk+0xa6/0x100 [ 255.509333][ T7833] ? stack_trace_save+0x8e/0xc0 [ 255.509358][ T7833] ? __pfx_stack_trace_save+0x10/0x10 [ 255.509382][ T7833] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 255.509409][ T7833] ? stack_depot_save_flags+0x29/0x9c0 [ 255.509442][ T7833] ? arch_do_signal_or_restart+0x4c0/0x790 [ 255.509471][ T7833] ? irqentry_exit_to_user_mode+0x12a/0x270 [ 255.509500][ T7833] ? asm_exc_page_fault+0x26/0x30 [ 255.509546][ T7833] ? proc_coredump_connector+0x2d1/0x4f0 [ 255.509570][ T7833] ? __pfx_proc_coredump_connector+0x10/0x10 [ 255.509600][ T7833] ? rcu_is_watching+0x12/0xc0 [ 255.509623][ T7833] get_signal+0x22e3/0x26d0 [ 255.509651][ T7833] ? force_sig_fault+0xc4/0x100 [ 255.509675][ T7833] ? __pfx_get_signal+0x10/0x10 [ 255.509704][ T7833] arch_do_signal_or_restart+0x8f/0x790 [ 255.509732][ T7833] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 255.509767][ T7833] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 255.509804][ T7833] irqentry_exit_to_user_mode+0x12a/0x270 [ 255.509833][ T7833] asm_exc_page_fault+0x26/0x30 [ 255.509854][ T7833] RIP: 0033:0x7f668724f920 [ 255.509875][ T7833] Code: Unable to access opcode bytes at 0x7f668724f8f6. [ 255.509885][ T7833] RSP: 002b:00007f6688106178 EFLAGS: 00010206 [ 255.509997][ T7833] RAX: 0000000000000000 RBX: 00007f66875b6360 RCX: 00007f668738ebe9 [ 255.510018][ T7833] RDX: 00007f6688106180 RSI: 00007f66881062b0 RDI: 000000000000000b [ 255.510038][ T7833] RBP: 00007f6687411e19 R08: 0000000000000000 R09: 0000000000000000 [ 255.510052][ T7833] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 255.510065][ T7833] R13: 00007f66875b63f8 R14: 00007f66875b6360 R15: 00007ffccb6361e8 [ 255.510090][ T7833] [ 256.733991][ T7833] memory: usage 278504kB, limit 307200kB, failcnt 32202 [ 256.984135][ T7833] memory+swap: usage 406096kB, limit 9007199254740988kB, failcnt 0 [ 257.169393][ T8509] FAULT_INJECTION: forcing a failure. [ 257.169393][ T8509] name failslab, interval 1, probability 0, space 0, times 0 [ 257.188828][ T7833] kmem: usage 3564kB, limit 9007199254740988kB, failcnt 0 [ 257.274613][ T8509] CPU: 1 UID: 0 PID: 8509 Comm: syz.0.537 Not tainted syzkaller #0 PREEMPT(full) [ 257.274646][ T8509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 257.274661][ T8509] Call Trace: [ 257.274668][ T8509] [ 257.274676][ T8509] dump_stack_lvl+0x16c/0x1f0 [ 257.274712][ T8509] should_fail_ex+0x512/0x640 [ 257.274748][ T8509] should_failslab+0xc2/0x120 [ 257.274784][ T8509] __kmalloc_cache_noprof+0x6a/0x3e0 [ 257.274808][ T8509] ? alloc_super+0x52/0xbd0 [ 257.274835][ T8509] alloc_super+0x52/0xbd0 [ 257.274865][ T8509] ? lock_release+0x201/0x2f0 [ 257.274898][ T8509] sget_fc+0x116/0xc20 [ 257.274923][ T8509] ? __pfx_set_anon_super_fc+0x10/0x10 [ 257.274955][ T8509] ? __pfx_mqueue_fill_super+0x10/0x10 [ 257.274977][ T8509] get_tree_nodev+0x28/0x190 [ 257.275004][ T8509] mqueue_get_tree+0xf1/0x130 [ 257.275025][ T8509] vfs_get_tree+0x8b/0x340 [ 257.275045][ T8509] fc_mount_longterm+0x18/0x160 [ 257.275083][ T8509] mq_init_ns+0x426/0x620 [ 257.275115][ T8509] copy_ipcs+0x383/0x610 [ 257.275139][ T8509] ? copy_utsname+0xab/0x470 [ 257.275174][ T8509] create_new_namespaces+0x20a/0xa90 [ 257.275201][ T8509] ? security_capable+0x7e/0x260 [ 257.275225][ T8509] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 257.275253][ T8509] ksys_unshare+0x45b/0xa40 [ 257.275286][ T8509] ? __pfx_ksys_unshare+0x10/0x10 [ 257.275318][ T8509] ? xfd_validate_state+0x61/0x180 [ 257.275357][ T8509] __x64_sys_unshare+0x31/0x40 [ 257.275389][ T8509] do_syscall_64+0xcd/0x490 [ 257.275420][ T8509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.275444][ T8509] RIP: 0033:0x7f265f78ebe9 [ 257.275461][ T8509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.275484][ T8509] RSP: 002b:00007f2660592038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 257.275506][ T8509] RAX: ffffffffffffffda RBX: 00007f265f9b6090 RCX: 00007f265f78ebe9 [ 257.275521][ T8509] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 257.275534][ T8509] RBP: 00007f265f811e19 R08: 0000000000000000 R09: 0000000000000000 [ 257.275548][ T8509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 257.275561][ T8509] R13: 00007f265f9b6128 R14: 00007f265f9b6090 R15: 00007fff13b50948 [ 257.275583][ T8509] [ 257.515512][ T8506] openvswitch: netlink: Message has 4 unknown bytes. [ 257.782472][ T7833] Memory cgroup stats for /syz2: [ 257.782634][ T7833] cache 279117824 [ 257.791243][ T7833] rss 4317184 [ 257.973625][ T7833] rss_huge 0 [ 257.976931][ T7833] shmem 278593536 [ 257.980567][ T7833] mapped_file 109981696 [ 258.252160][ T7833] dirty 4096 [ 258.255416][ T7833] writeback 0 [ 258.383497][ T8512] netlink: 28 bytes leftover after parsing attributes in process `syz.1.538'. [ 258.427402][ T7833] workingset_refault_anon 666 [ 258.597452][ T7833] workingset_refault_file 359 [ 258.771904][ T7833] swap 127934464 [ 258.814192][ T8512] veth0_macvtap: left promiscuous mode [ 258.837352][ T7833] swapcached 61440 [ 258.850459][ T8542] .SR: entered promiscuous mode [ 258.932618][ T7833] pgpgin 222530 [ 259.046694][ T7833] pgpgout 154826 [ 259.163895][ T7833] pgfault 256422 [ 259.219154][ T5870] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 259.259314][ T7833] pgmajfault 105 [ 259.360123][ T7833] inactive_anon 39907328 [ 259.497088][ T7833] active_anon 242638848 [ 259.628790][ T7833] inactive_file 0 [ 259.723364][ T7833] active_file 524288 [ 259.834701][ T7833] unevictable 0 [ 259.943893][ T7833] hierarchical_memory_limit 314572800 [ 259.976870][ T8531] kexec: Could not allocate control_code_buffer [ 260.152830][ T7833] hierarchical_memsw_limit 9223372036854771712 [ 260.244150][ T7833] total_cache 279117824 [ 260.363582][ T7833] total_rss 4317184 [ 260.721945][ T7833] total_rss_huge 0 [ 260.759150][ T7833] total_shmem 278593536 [ 260.839432][ T7833] total_mapped_file 109981696 [ 260.917208][ T7833] total_dirty 4096 [ 260.921273][ T7833] total_writeback 0 [ 261.052070][ T7833] total_workingset_refault_anon 666 [ 261.095744][ T7833] total_workingset_refault_file 359 [ 261.135248][ T7833] total_swap 127934464 [ 261.159542][ T7833] total_swapcached 61440 [ 261.173084][ T7833] total_pgpgin 222530 [ 261.194978][ T7833] total_pgpgout 154826 [ 261.213153][ T7833] total_pgfault 256422 [ 261.263188][ T7833] total_pgmajfault 105 [ 261.279048][ T7833] total_inactive_anon 39907328 [ 261.297204][ T7833] total_active_anon 242638848 [ 261.317818][ T7833] total_inactive_file 0 [ 261.339974][ T7833] total_active_file 524288 [ 261.356466][ T7833] total_unevictable 0 [ 261.360629][ T7833] anon_cost 0 [ 261.396675][ T7833] file_cost 0 [ 261.409901][ T7833] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.394,pid=7837,uid=0 [ 261.498547][ T7833] Memory cgroup out of memory: Killed process 7837 (syz.2.394) total-vm:66196kB, anon-rss:0kB, file-rss:0kB, shmem-rss:45312kB, UID:0 pgtables:116kB oom_score_adj:1000 [ 261.913897][ T7846] syz.2.394 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 262.304085][ T7846] CPU: 1 UID: 0 PID: 7846 Comm: syz.2.394 Not tainted syzkaller #0 PREEMPT(full) [ 262.304119][ T7846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 262.304133][ T7846] Call Trace: [ 262.304141][ T7846] [ 262.304149][ T7846] dump_stack_lvl+0x16c/0x1f0 [ 262.304184][ T7846] dump_header+0x101/0x930 [ 262.304214][ T7846] oom_kill_process+0x272/0xa40 [ 262.304248][ T7846] out_of_memory+0x350/0x1700 [ 262.304280][ T7846] ? __pfx_out_of_memory+0x10/0x10 [ 262.304312][ T7846] mem_cgroup_out_of_memory+0x118/0x130 [ 262.304350][ T7846] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 262.304396][ T7846] ? do_raw_spin_unlock+0x172/0x230 [ 262.304437][ T7846] try_charge_memcg+0x72b/0xd50 [ 262.304468][ T7846] ? __pfx_try_charge_memcg+0x10/0x10 [ 262.304497][ T7846] ? rcu_is_watching+0x12/0xc0 [ 262.304521][ T7846] ? rcu_is_watching+0x12/0xc0 [ 262.304548][ T7846] charge_memcg+0x8a/0x230 [ 262.304577][ T7846] __mem_cgroup_charge+0x2b/0x1e0 [ 262.304611][ T7846] shmem_alloc_and_add_folio+0x514/0xc20 [ 262.304640][ T7846] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 262.304669][ T7846] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 262.304699][ T7846] shmem_get_folio_gfp+0x67f/0x1600 [ 262.304729][ T7846] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 262.304760][ T7846] shmem_write_begin+0x160/0x300 [ 262.304789][ T7846] ? __pfx_shmem_write_begin+0x10/0x10 [ 262.304816][ T7846] ? timestamp_truncate+0x21e/0x2d0 [ 262.304845][ T7846] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 262.304885][ T7846] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 262.304925][ T7846] generic_perform_write+0x3c2/0x900 [ 262.304955][ T7846] ? __pfx_generic_perform_write+0x10/0x10 [ 262.304981][ T7846] ? inode_needs_update_time.part.0+0x191/0x270 [ 262.305015][ T7846] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 262.305048][ T7846] shmem_file_write_iter+0x10e/0x140 [ 262.305082][ T7846] __kernel_write_iter+0x317/0xb10 [ 262.305112][ T7846] ? __pfx___kernel_write_iter+0x10/0x10 [ 262.305139][ T7846] ? __up_read+0x1f8/0x750 [ 262.305176][ T7846] ? lock_release+0x201/0x2f0 [ 262.305209][ T7846] dump_user_range+0x413/0xb70 [ 262.305235][ T7846] ? __pfx_dump_user_range+0x10/0x10 [ 262.305259][ T7846] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 262.305301][ T7846] ? __pfx_writenote+0x10/0x10 [ 262.305329][ T7846] elf_core_dump+0x2929/0x3b60 [ 262.305361][ T7846] ? __pfx_elf_core_dump+0x10/0x10 [ 262.305391][ T7846] ? kasan_save_stack+0x42/0x60 [ 262.305418][ T7846] ? kasan_save_stack+0x33/0x60 [ 262.305443][ T7846] ? kasan_save_track+0x14/0x30 [ 262.305469][ T7846] ? __kasan_kmalloc+0xaa/0xb0 [ 262.305494][ T7846] ? vfs_coredump+0x1dca/0x5670 [ 262.305515][ T7846] ? get_signal+0x22e3/0x26d0 [ 262.305542][ T7846] ? arch_do_signal_or_restart+0x8f/0x790 [ 262.305577][ T7846] ? 0xffffffffff600000 [ 262.305612][ T7846] ? rcu_is_watching+0x12/0xc0 [ 262.305649][ T7846] ? lock_acquire+0x2cd/0x350 [ 262.305678][ T7846] ? __pfx___might_resched+0x10/0x10 [ 262.305704][ T7846] ? vfs_coredump+0x2b97/0x5670 [ 262.305724][ T7846] vfs_coredump+0x2b97/0x5670 [ 262.305749][ T7846] ? do_pte_missing+0x8a9/0x3ba0 [ 262.305771][ T7846] ? __pfx_vfs_coredump+0x10/0x10 [ 262.305791][ T7846] ? lock_release+0x201/0x2f0 [ 262.305822][ T7846] ? rcu_is_watching+0x12/0xc0 [ 262.305844][ T7846] ? unwind_next_frame+0x3f4/0x20a0 [ 262.305867][ T7846] ? rcu_is_watching+0x12/0xc0 [ 262.305892][ T7846] ? rcu_is_watching+0x12/0xc0 [ 262.305914][ T7846] ? unwind_next_frame+0x3f4/0x20a0 [ 262.305936][ T7846] ? rcu_is_watching+0x12/0xc0 [ 262.305962][ T7846] ? lock_release+0x201/0x2f0 [ 262.305990][ T7846] ? bpf_ksym_find+0x124/0x1c0 [ 262.306014][ T7846] ? __kernel_text_address+0xd/0x40 [ 262.306034][ T7846] ? unwind_get_return_address+0x59/0xa0 [ 262.306057][ T7846] ? arch_stack_walk+0xa6/0x100 [ 262.306086][ T7846] ? stack_trace_save+0x8e/0xc0 [ 262.306111][ T7846] ? __pfx_stack_trace_save+0x10/0x10 [ 262.306135][ T7846] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 262.306162][ T7846] ? stack_depot_save_flags+0x29/0x9c0 [ 262.306195][ T7846] ? arch_do_signal_or_restart+0x4c0/0x790 [ 262.306224][ T7846] ? irqentry_exit_to_user_mode+0x12a/0x270 [ 262.306254][ T7846] ? asm_exc_page_fault+0x26/0x30 [ 262.306299][ T7846] ? proc_coredump_connector+0x2d1/0x4f0 [ 262.306324][ T7846] ? __pfx_proc_coredump_connector+0x10/0x10 [ 262.306351][ T7846] ? rcu_is_watching+0x12/0xc0 [ 262.306379][ T7846] get_signal+0x22e3/0x26d0 [ 262.306408][ T7846] ? force_sig_fault+0xc4/0x100 [ 262.306433][ T7846] ? __pfx_get_signal+0x10/0x10 [ 262.306463][ T7846] arch_do_signal_or_restart+0x8f/0x790 [ 262.306492][ T7846] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 262.306527][ T7846] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 262.306565][ T7846] irqentry_exit_to_user_mode+0x12a/0x270 [ 262.306596][ T7846] asm_exc_page_fault+0x26/0x30 [ 262.306617][ T7846] RIP: 0033:0x7f668724f920 [ 262.306639][ T7846] Code: Unable to access opcode bytes at 0x7f668724f8f6. [ 262.306649][ T7846] RSP: 002b:00007f6688106178 EFLAGS: 00010206 [ 262.306667][ T7846] RAX: 0000000000000000 RBX: 00007f66875b6360 RCX: 00007f668738ebe9 [ 262.306682][ T7846] RDX: 00007f6688106180 RSI: 00007f66881062b0 RDI: 000000000000000b [ 262.306696][ T7846] RBP: 00007f6687411e19 R08: 0000000000000000 R09: 0000000000000000 [ 262.306709][ T7846] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 262.306722][ T7846] R13: 00007f66875b63f8 R14: 00007f66875b6360 R15: 00007ffccb6361e8 [ 262.306743][ T7846] [ 263.326496][ T7846] memory: usage 280976kB, limit 307200kB, failcnt 34293 [ 263.333560][ T7846] memory+swap: usage 392584kB, limit 9007199254740988kB, failcnt 0 [ 263.341564][ T7846] kmem: usage 3340kB, limit 9007199254740988kB, failcnt 0 [ 263.348763][ T7846] Memory cgroup stats for /syz2: [ 263.348912][ T7846] cache 284069888 [ 263.357604][ T7846] rss 53248 [ 263.360714][ T7846] rss_huge 0 [ 263.363951][ T7846] shmem 284069888 [ 263.368757][ T7846] mapped_file 117952512 [ 263.422421][ T7846] dirty 0 [ 263.425433][ T7846] writeback 0 [ 263.428720][ T7846] workingset_refault_anon 666 [ 263.461815][ T7846] workingset_refault_file 359 [ 263.467829][ T7846] swap 114286592 [ 263.471405][ T7846] swapcached 57344 [ 263.586427][ T7846] pgpgin 233752 [ 263.589942][ T7846] pgpgout 165884 [ 263.672016][ T7846] pgfault 260810 [ 263.675626][ T7846] pgmajfault 105 [ 263.738242][ T7846] inactive_anon 112660480 [ 263.787546][ T7846] active_anon 171208704 [ 263.802050][ T7846] inactive_file 0 [ 263.805730][ T7846] active_file 0 [ 263.809188][ T7846] unevictable 0 [ 263.852020][ T7846] hierarchical_memory_limit 314572800 [ 263.857439][ T7846] hierarchical_memsw_limit 9223372036854771712 [ 263.931818][ T7846] total_cache 284069888 [ 263.936028][ T7846] total_rss 53248 [ 263.939685][ T7846] total_rss_huge 0 [ 264.011409][ T8602] ecryptfs_miscdev_write: Invalid packet size [111] [ 264.018191][ T7846] total_shmem 284069888 [ 264.043525][ T7846] total_mapped_file 117952512 [ 264.052101][ T7846] total_dirty 0 [ 264.073334][ T7846] total_writeback 0 [ 264.077196][ T7846] total_workingset_refault_anon 666 [ 264.133007][ T7846] total_workingset_refault_file 359 [ 264.146753][ T7846] total_swap 114286592 [ 264.150977][ T7846] total_swapcached 57344 [ 264.203745][ T7846] total_pgpgin 233752 [ 264.223212][ T7846] total_pgpgout 165884 [ 264.287760][ T7846] total_pgfault 260810 [ 264.352962][ T7846] total_pgmajfault 105 [ 264.451135][ T7846] total_inactive_anon 112660480 [ 264.507222][ T7846] total_active_anon 171208704 [ 264.626162][ T7846] total_inactive_file 0 [ 264.678123][ T7846] total_active_file 0 [ 264.740106][ T7846] total_unevictable 0 [ 264.760593][ T5870] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 264.817434][ T7846] anon_cost 0 [ 264.909213][ T7846] file_cost 0 [ 265.000257][ T7846] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.394,pid=7850,uid=0 [ 265.189419][ T7833] syz.2.394 (7833) used greatest stack depth: 18056 bytes left [ 265.370186][ T7846] Memory cgroup out of memory: Killed process 7850 (syz.2.394) total-vm:66196kB, anon-rss:0kB, file-rss:0kB, shmem-rss:41532kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 265.394213][ T8624] netlink: 330 bytes leftover after parsing attributes in process `syz.0.557'. [ 266.180565][ T8611] kexec: Could not allocate control_code_buffer [ 266.284565][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.290951][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 267.571834][ T8664] random: crng reseeded on system resumption [ 267.723792][ T33] oom_reaper: reaped process 7850 (syz.2.394), now anon-rss:0kB, file-rss:0kB, shmem-rss:36540kB [ 268.413470][ T8672] block nbd7: not configured, cannot reconfigure [ 269.014669][ T5870] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 270.750555][ T31] audit: type=1806 audit(6050720588.592:6): xattr="" res=-22 [ 271.102023][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 271.108457][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 271.117653][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 271.131841][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 271.141956][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 271.156387][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 271.171239][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 271.180129][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 271.825306][ T8694] kexec: Could not allocate control_code_buffer [ 272.149073][ T8730] netlink: 13 bytes leftover after parsing attributes in process `syz.3.577'. [ 272.235377][ T8732] random: crng reseeded on system resumption [ 272.276898][ T5870] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 273.586693][ T8739] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 273.730310][ T8739] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 273.899472][ T8739] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 274.044421][ T8739] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 274.215536][ T8739] CPU0 is offline. [ 275.482313][ T5870] Bluetooth: hci0: command 0x0c1a tx timeout [ 275.575967][ T5870] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 275.801932][ T5870] Bluetooth: hci3: command 0x0c1a tx timeout [ 275.961888][ T5870] Bluetooth: hci1: command 0x0c1a tx timeout [ 276.121902][ T5870] Bluetooth: hci2: command 0x0c1a tx timeout [ 276.732196][ T8781] kexec: Could not allocate control_code_buffer [ 277.079019][ T8804] netlink: 350 bytes leftover after parsing attributes in process `syz.0.592'. [ 278.454193][ T5870] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 279.266279][ T8852] netlink: 4 bytes leftover after parsing attributes in process `syz.2.604'. [ 280.684539][ T8886] __vm_enough_memory: pid: 8886, comm: syz.0.610, bytes: 4398046511104 not enough memory for the allocation [ 280.997354][ T8890] ptrace attach of "./syz-executor exec"[5862] was attempted by "./syz-executor exec"[8890] [ 281.552156][ T5870] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 282.981915][ T8947] netlink: 28 bytes leftover after parsing attributes in process `syz.0.624'. [ 283.088566][ T8947] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.175394][ T8947] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.308477][ T8947] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.353963][ T8947] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.397564][ T8961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.623'. [ 283.775527][ T8948] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 283.805669][ T8948] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 283.835285][ T8948] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 283.861799][ T8948] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 283.889915][ T8948] CPU0 is offline. [ 284.090604][ T8968] Invalid ELF header magic: != ELF [ 284.273139][ T8975] input: f¬ as /devices/virtual/input/input10 [ 284.789439][ T5870] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 285.322121][ T5870] Bluetooth: hci0: command 0x0c1a tx timeout [ 285.690852][ T8989] svc: failed to register nfsdv3 RPC service (errno 111). [ 285.746929][ T8991] netlink: 'syz.0.631': attribute type 11 has an invalid length. [ 285.757704][ T8999] device-mapper: ioctl: Invalid ioctl structure: name , dev b00010007 [ 285.783955][ T8991] netlink: 'syz.0.631': attribute type 11 has an invalid length. [ 285.802382][ T9000] device-mapper: ioctl: Invalid ioctl structure: name , dev b00010007 [ 285.823855][ T8989] svc: failed to register nfsaclv3 RPC service (errno 111). [ 285.867843][ T8991] netlink: 'syz.0.631': attribute type 11 has an invalid length. [ 285.887636][ T5870] Bluetooth: hci2: command 0x0c1a tx timeout [ 285.898161][ T5180] Bluetooth: hci1: command 0x0c1a tx timeout [ 285.904526][ T5865] Bluetooth: hci3: command 0x0c1a tx timeout [ 287.967357][ T9011] kexec: Could not allocate control_code_buffer [ 288.096659][ T5870] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 290.373946][ T9092] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 290.759262][ T9077] kexec: Could not allocate control_code_buffer [ 290.827570][ T5870] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 291.040790][ T9103] tty tty45: ldisc open failed (-12), clearing slot 44 [ 291.213680][ T9108] ptrace attach of "./syz-executor exec"[9110] was attempted by "./syz-executor exec"[9108] syzkaller syzkaller login: [ 292.150192][ T9126] vivid-009: ================= START STATUS ================= [ 292.192868][ T9126] vivid-009: Enable Output Cropping: true grabbed [ 292.199356][ T9126] vivid-009: Enable Output Composing: true grabbed [ 292.280398][ T9126] vivid-009: Enable Output Scaler: true grabbed [ 292.347884][ T9126] vivid-009: Tx RGB Quantization Range: Automatic grabbed [ 292.479100][ T9137] block nbd7: not configured, cannot reconfigure [ 292.537900][ T9126] vivid-009: Transmit Mode: HDMI grabbed [ 292.633979][ T9126] vivid-009: Hotplug Present: 0x00000000 [ 292.730909][ T9126] vivid-009: RxSense Present: 0x00000000 [ 292.798299][ T9126] vivid-009: EDID Present: 0x00000000 [ 292.872098][ T9126] vivid-009: ================== END STATUS ================== [ 295.037132][ T9150] kexec: Could not allocate control_code_buffer [ 295.172231][ T5870] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 298.241111][ T5870] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 299.178527][ T9236] kexec: Could not allocate control_code_buffer [ 299.252599][ T9259] zswap: compressor not available [ 299.294961][ T9258] zswap: compressor not available [ 299.892573][ T31] audit: type=1800 audit(6050720617.732:7): pid=9279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.690" name="features" dev="configfs" ino=25258 res=0 errno=0 [ 299.912719][ C1] vkms_vblank_simulate: vblank timer overrun [ 300.913072][ T5870] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 301.046069][ T9298] netlink: 20 bytes leftover after parsing attributes in process `syz.1.694'. [ 301.239066][ T9298] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 301.310232][ T9298] netlink: 20 bytes leftover after parsing attributes in process `syz.1.694'. [ 301.417900][ T9298] netlink: 20 bytes leftover after parsing attributes in process `syz.1.694'. [ 301.851569][ T5925] Process accounting resumed [ 301.877026][ T9322] netlink: 330 bytes leftover after parsing attributes in process `syz.1.701'. [ 302.593044][ T9312] kexec: Could not allocate control_code_buffer [ 303.026600][ T9346] FAULT_INJECTION: forcing a failure. [ 303.026600][ T9346] name failslab, interval 1, probability 0, space 0, times 0 [ 303.133871][ T9346] CPU: 1 UID: 0 PID: 9346 Comm: syz.3.708 Not tainted syzkaller #0 PREEMPT(full) [ 303.133907][ T9346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 303.133933][ T9346] Call Trace: [ 303.133944][ T9346] [ 303.133953][ T9346] dump_stack_lvl+0x16c/0x1f0 [ 303.133992][ T9346] should_fail_ex+0x512/0x640 [ 303.134032][ T9346] should_failslab+0xc2/0x120 [ 303.134067][ T9346] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 303.134096][ T9346] ? alloc_empty_file+0x55/0x1e0 [ 303.134135][ T9346] alloc_empty_file+0x55/0x1e0 [ 303.134171][ T9346] path_openat+0xda/0x2cb0 [ 303.134198][ T9346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.134227][ T9346] ? __pfx_path_openat+0x10/0x10 [ 303.134259][ T9346] do_filp_open+0x20b/0x470 [ 303.134287][ T9346] ? __pfx_do_filp_open+0x10/0x10 [ 303.134324][ T9346] ? alloc_fd+0x471/0x7d0 [ 303.134353][ T9346] do_sys_openat2+0x11b/0x1d0 [ 303.134392][ T9346] ? __pfx_do_sys_openat2+0x10/0x10 [ 303.134429][ T9346] ? rcu_is_watching+0x12/0xc0 [ 303.134454][ T9346] ? __fget_files+0x204/0x3c0 [ 303.134482][ T9346] __x64_sys_openat+0x174/0x210 [ 303.134520][ T9346] ? __pfx___x64_sys_openat+0x10/0x10 [ 303.134565][ T9346] do_syscall_64+0xcd/0x490 [ 303.134597][ T9346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.134621][ T9346] RIP: 0033:0x7f98c638ebe9 [ 303.134640][ T9346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.134663][ T9346] RSP: 002b:00007f98c72bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 303.134687][ T9346] RAX: ffffffffffffffda RBX: 00007f98c65b5fa0 RCX: 00007f98c638ebe9 [ 303.134702][ T9346] RDX: 00000000000e0180 RSI: 00002000000011c0 RDI: ffffffffffffff9c [ 303.134717][ T9346] RBP: 00007f98c6411e19 R08: 0000000000000000 R09: 0000000000000000 [ 303.134732][ T9346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 303.134756][ T9346] R13: 00007f98c65b6038 R14: 00007f98c65b5fa0 R15: 00007ffd1b8d3c48 [ 303.134780][ T9346] [ 304.173156][ T5870] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 304.834616][ T9371] could not allocate digest TFM handle [ 305.173406][ T5870] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 305.603865][ T9397] FAULT_INJECTION: forcing a failure. [ 305.603865][ T9397] name fail_futex, interval 1, probability 0, space 0, times 0 [ 305.719317][ T9397] CPU: 1 UID: 0 PID: 9397 Comm: syz.0.717 Not tainted syzkaller #0 PREEMPT(full) [ 305.719351][ T9397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 305.719366][ T9397] Call Trace: [ 305.719373][ T9397] [ 305.719382][ T9397] dump_stack_lvl+0x16c/0x1f0 [ 305.719420][ T9397] should_fail_ex+0x512/0x640 [ 305.719459][ T9397] get_futex_key+0x1d0/0x1560 [ 305.719490][ T9397] ? __pfx_get_futex_key+0x10/0x10 [ 305.719517][ T9397] ? trace_pid_list_is_set+0x100/0x150 [ 305.719549][ T9397] ? trace_ignore_this_task+0xc3/0x100 [ 305.719587][ T9397] futex_wait_setup+0x9d/0x550 [ 305.719627][ T9397] __futex_wait+0x194/0x2f0 [ 305.719663][ T9397] ? __pfx___futex_wait+0x10/0x10 [ 305.719700][ T9397] ? __pfx_futex_wake_mark+0x10/0x10 [ 305.719738][ T9397] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 305.719776][ T9397] ? task_work_run+0x1e1/0x240 [ 305.719816][ T9397] futex_wait+0xe8/0x380 [ 305.719851][ T9397] ? __pfx_futex_wait+0x10/0x10 [ 305.719890][ T9397] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 305.719928][ T9397] do_futex+0x229/0x350 [ 305.719962][ T9397] ? __pfx_do_futex+0x10/0x10 [ 305.719993][ T9397] ? arch_do_signal_or_restart+0x211/0x790 [ 305.720025][ T9397] __x64_sys_futex+0x1e0/0x4c0 [ 305.720057][ T9397] ? __pfx___x64_sys_futex+0x10/0x10 [ 305.720088][ T9397] ? xfd_validate_state+0x61/0x180 [ 305.720127][ T9397] do_syscall_64+0xcd/0x490 [ 305.720160][ T9397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.720184][ T9397] RIP: 0033:0x7f265f78ebe9 [ 305.720202][ T9397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.720226][ T9397] RSP: 002b:00007f26605920e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 305.720256][ T9397] RAX: ffffffffffffffda RBX: 00007f265f9b6098 RCX: 00007f265f78ebe9 [ 305.720272][ T9397] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f265f9b6098 [ 305.720286][ T9397] RBP: 00007f265f9b6090 R08: 0000000000000000 R09: 0000000000000000 [ 305.720301][ T9397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 305.720315][ T9397] R13: 00007f265f9b6128 R14: 00007fff13b50860 R15: 00007fff13b50948 [ 305.720337][ T9397] [ 306.051376][ T9387] kexec: Could not allocate control_code_buffer [ 306.109580][ T9404] program syz.2.720 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 306.254425][ T9407] syz.2.720 (9407): /proc/9403/oom_adj is deprecated, please use /proc/9403/oom_score_adj instead. [ 306.738362][ T9424] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 306.956276][ T5870] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 307.152774][ T9435] FAULT_INJECTION: forcing a failure. [ 307.152774][ T9435] name failslab, interval 1, probability 0, space 0, times 0 [ 307.205910][ T9435] CPU: 1 UID: 0 PID: 9435 Comm: syz.1.726 Not tainted syzkaller #0 PREEMPT(full) [ 307.205941][ T9435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 307.205956][ T9435] Call Trace: [ 307.205963][ T9435] [ 307.205970][ T9435] dump_stack_lvl+0x16c/0x1f0 [ 307.206006][ T9435] should_fail_ex+0x512/0x640 [ 307.206044][ T9435] should_failslab+0xc2/0x120 [ 307.206078][ T9435] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 307.206106][ T9435] ? vm_area_dup+0x27/0x8d0 [ 307.206131][ T9435] vm_area_dup+0x27/0x8d0 [ 307.206155][ T9435] __split_vma+0x18e/0x1070 [ 307.206180][ T9435] ? lock_release+0x201/0x2f0 [ 307.206209][ T9435] ? __pfx___split_vma+0x10/0x10 [ 307.206233][ T9435] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 307.206263][ T9435] ? unwind_get_return_address+0x59/0xa0 [ 307.206288][ T9435] ? arch_stack_walk+0xa6/0x100 [ 307.206320][ T9435] vma_modify+0xee1/0x2030 [ 307.206345][ T9435] ? _parse_integer_limit+0x17f/0x1d0 [ 307.206375][ T9435] ? __pfx_vma_modify+0x10/0x10 [ 307.206399][ T9435] ? aa_file_perm+0x28f/0x12e0 [ 307.206434][ T9435] ? rcu_is_watching+0x12/0xc0 [ 307.206460][ T9435] vma_modify_flags+0x212/0x2d0 [ 307.206486][ T9435] ? __pfx_vma_modify_flags+0x10/0x10 [ 307.206519][ T9435] ? may_expand_vm+0xe8/0x430 [ 307.206555][ T9435] mprotect_fixup+0x1df/0xb40 [ 307.206582][ T9435] ? __pfx_mprotect_fixup+0x10/0x10 [ 307.206609][ T9435] do_mprotect_pkey+0x9ca/0xd50 [ 307.206636][ T9435] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 307.206661][ T9435] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 307.206696][ T9435] ? __fget_files+0x20e/0x3c0 [ 307.206726][ T9435] ? __pfx_ksys_write+0x10/0x10 [ 307.206757][ T9435] __x64_sys_mprotect+0x78/0xc0 [ 307.206780][ T9435] do_syscall_64+0xcd/0x490 [ 307.206811][ T9435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.206834][ T9435] RIP: 0033:0x7f7471d8ebe9 [ 307.206851][ T9435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.206874][ T9435] RSP: 002b:00007f7472c47038 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 307.206897][ T9435] RAX: ffffffffffffffda RBX: 00007f7471fb6090 RCX: 00007f7471d8ebe9 [ 307.206913][ T9435] RDX: 0000000000000006 RSI: 0000000000806121 RDI: 0000000000000000 [ 307.206927][ T9435] RBP: 00007f7472c47090 R08: 0000000000000000 R09: 0000000000000000 [ 307.206941][ T9435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.206955][ T9435] R13: 00007f7471fb6128 R14: 00007f7471fb6090 R15: 00007ffe2c4bc958 [ 307.206977][ T9435] [ 309.285732][ T5870] Bluetooth: hci2: unexpected event 0x20 length: 123 > 7 [ 309.391532][ T9441] kexec: Could not allocate control_code_buffer [ 309.698913][ T9485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.737'. [ 309.709561][ T5870] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 309.947640][ T9494] FAULT_INJECTION: forcing a failure. [ 309.947640][ T9494] name failslab, interval 1, probability 0, space 0, times 0 [ 310.030913][ T9494] CPU: 1 UID: 0 PID: 9494 Comm: syz.3.738 Not tainted syzkaller #0 PREEMPT(full) [ 310.030944][ T9494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 310.030958][ T9494] Call Trace: [ 310.030966][ T9494] [ 310.030974][ T9494] dump_stack_lvl+0x16c/0x1f0 [ 310.031007][ T9494] should_fail_ex+0x512/0x640 [ 310.031042][ T9494] should_failslab+0xc2/0x120 [ 310.031073][ T9494] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 310.031120][ T9494] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 310.031154][ T9494] ? mas_alloc_nodes+0x18b/0x8b0 [ 310.031181][ T9494] mas_alloc_nodes+0x18b/0x8b0 [ 310.031208][ T9494] mas_node_count_gfp+0x105/0x130 [ 310.031234][ T9494] mas_preallocate+0x7e0/0xde0 [ 310.031271][ T9494] ? __pfx_mas_preallocate+0x10/0x10 [ 310.031309][ T9494] ? anon_vma_name+0x81/0x2f0 [ 310.031344][ T9494] __split_vma+0x34a/0x1070 [ 310.031370][ T9494] ? __pfx___split_vma+0x10/0x10 [ 310.031396][ T9494] ? unwind_get_return_address+0x59/0xa0 [ 310.031424][ T9494] vma_modify+0xee1/0x2030 [ 310.031452][ T9494] ? __pfx_vma_modify+0x10/0x10 [ 310.031476][ T9494] ? aa_file_perm+0x28f/0x12e0 [ 310.031509][ T9494] ? rcu_is_watching+0x12/0xc0 [ 310.031535][ T9494] vma_modify_flags+0x212/0x2d0 [ 310.031561][ T9494] ? __pfx_vma_modify_flags+0x10/0x10 [ 310.031594][ T9494] ? may_expand_vm+0xe8/0x430 [ 310.031634][ T9494] mprotect_fixup+0x1df/0xb40 [ 310.031660][ T9494] ? __pfx_mprotect_fixup+0x10/0x10 [ 310.031687][ T9494] do_mprotect_pkey+0x9ca/0xd50 [ 310.031714][ T9494] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 310.031738][ T9494] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 310.031783][ T9494] ? __fget_files+0x20e/0x3c0 [ 310.031812][ T9494] ? __pfx_ksys_write+0x10/0x10 [ 310.031842][ T9494] __x64_sys_mprotect+0x78/0xc0 [ 310.031865][ T9494] do_syscall_64+0xcd/0x490 [ 310.031896][ T9494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.031919][ T9494] RIP: 0033:0x7f98c638ebe9 [ 310.031935][ T9494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.031958][ T9494] RSP: 002b:00007f98c7258038 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 310.031979][ T9494] RAX: ffffffffffffffda RBX: 00007f98c65b6270 RCX: 00007f98c638ebe9 [ 310.031994][ T9494] RDX: 0000000000000006 RSI: 0000000000806121 RDI: 0000000000000000 [ 310.032008][ T9494] RBP: 00007f98c7258090 R08: 0000000000000000 R09: 0000000000000000 [ 310.032022][ T9494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.032036][ T9494] R13: 00007f98c65b6308 R14: 00007f98c65b6270 R15: 00007ffd1b8d3c48 [ 310.032058][ T9494] [ 311.074295][ T9513] netlink: 342 bytes leftover after parsing attributes in process `syz.0.742'. [ 311.555051][ T9523] FAULT_INJECTION: forcing a failure. [ 311.555051][ T9523] name failslab, interval 1, probability 0, space 0, times 0 [ 311.666846][ T9523] CPU: 1 UID: 0 PID: 9523 Comm: syz.3.743 Not tainted syzkaller #0 PREEMPT(full) [ 311.666879][ T9523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 311.666893][ T9523] Call Trace: [ 311.666902][ T9523] [ 311.666910][ T9523] dump_stack_lvl+0x16c/0x1f0 [ 311.666945][ T9523] should_fail_ex+0x512/0x640 [ 311.666983][ T9523] should_failslab+0xc2/0x120 [ 311.667016][ T9523] __kmalloc_cache_noprof+0x6a/0x3e0 [ 311.667040][ T9523] ? __pfx_nfs_init_fs_context+0x10/0x10 [ 311.667069][ T9523] ? fscontext_alloc_log+0x4a/0x1b0 [ 311.667104][ T9523] fscontext_alloc_log+0x4a/0x1b0 [ 311.667138][ T9523] __x64_sys_fsopen+0x157/0x240 [ 311.667171][ T9523] do_syscall_64+0xcd/0x490 [ 311.667203][ T9523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.667228][ T9523] RIP: 0033:0x7f98c638ebe9 [ 311.667245][ T9523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.667268][ T9523] RSP: 002b:00007f98c72bb038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 311.667290][ T9523] RAX: ffffffffffffffda RBX: 00007f98c65b5fa0 RCX: 00007f98c638ebe9 [ 311.667306][ T9523] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 311.667320][ T9523] RBP: 00007f98c6411e19 R08: 0000000000000000 R09: 0000000000000000 [ 311.667334][ T9523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 311.667347][ T9523] R13: 00007f98c65b6038 R14: 00007f98c65b5fa0 R15: 00007ffd1b8d3c48 [ 311.667369][ T9523] [ 311.831157][ T9523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.743'. [ 312.953584][ T9549] FAULT_INJECTION: forcing a failure. [ 312.953584][ T9549] name failslab, interval 1, probability 0, space 0, times 0 [ 313.016234][ T9549] CPU: 1 UID: 0 PID: 9549 Comm: syz.2.747 Not tainted syzkaller #0 PREEMPT(full) [ 313.016264][ T9549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 313.016278][ T9549] Call Trace: [ 313.016286][ T9549] [ 313.016294][ T9549] dump_stack_lvl+0x16c/0x1f0 [ 313.016328][ T9549] should_fail_ex+0x512/0x640 [ 313.016365][ T9549] should_failslab+0xc2/0x120 [ 313.016494][ T9549] __kmalloc_cache_noprof+0x6a/0x3e0 [ 313.016531][ T9549] ? __v4l2_subdev_state_alloc+0x53/0x400 [ 313.016559][ T9549] __v4l2_subdev_state_alloc+0x53/0x400 [ 313.016592][ T9549] subdev_open+0xa6/0x560 [ 313.016699][ T9549] v4l2_open+0x225/0x490 [ 313.016739][ T9549] ? __pfx_v4l2_open+0x10/0x10 [ 313.016777][ T9549] chrdev_open+0x231/0x6a0 [ 313.016808][ T9549] ? __pfx_apparmor_file_open+0x10/0x10 [ 313.016834][ T9549] ? __pfx_chrdev_open+0x10/0x10 [ 313.016864][ T9549] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 313.016894][ T9549] do_dentry_open+0x97f/0x1530 [ 313.016922][ T9549] ? __pfx_chrdev_open+0x10/0x10 [ 313.016954][ T9549] vfs_open+0x82/0x3f0 [ 313.016990][ T9549] path_openat+0x1de4/0x2cb0 [ 313.017022][ T9549] ? __pfx_path_openat+0x10/0x10 [ 313.017052][ T9549] do_filp_open+0x20b/0x470 [ 313.017079][ T9549] ? __pfx_do_filp_open+0x10/0x10 [ 313.017115][ T9549] ? alloc_fd+0x471/0x7d0 [ 313.017142][ T9549] do_sys_openat2+0x11b/0x1d0 [ 313.017177][ T9549] ? __pfx_do_sys_openat2+0x10/0x10 [ 313.017218][ T9549] __x64_sys_openat+0x174/0x210 [ 313.017254][ T9549] ? __pfx___x64_sys_openat+0x10/0x10 [ 313.017296][ T9549] do_syscall_64+0xcd/0x490 [ 313.017328][ T9549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.017352][ T9549] RIP: 0033:0x7f668738ebe9 [ 313.017370][ T9549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.017393][ T9549] RSP: 002b:00007f66881a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 313.017425][ T9549] RAX: ffffffffffffffda RBX: 00007f66875b5fa0 RCX: 00007f668738ebe9 [ 313.017443][ T9549] RDX: 0000000000080002 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 313.017458][ T9549] RBP: 00007f6687411e19 R08: 0000000000000000 R09: 0000000000000000 [ 313.017472][ T9549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 313.017486][ T9549] R13: 00007f66875b6038 R14: 00007f66875b5fa0 R15: 00007ffccb6361e8 [ 313.017508][ T9549] [ 314.195946][ T9560] netlink: 338 bytes leftover after parsing attributes in process `syz.3.750'. [ 314.371990][ T5870] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 314.412597][ T9566] FAULT_INJECTION: forcing a failure. [ 314.412597][ T9566] name failslab, interval 1, probability 0, space 0, times 0 [ 314.478194][ T9566] CPU: 1 UID: 0 PID: 9566 Comm: syz.3.753 Not tainted syzkaller #0 PREEMPT(full) [ 314.478227][ T9566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 314.478241][ T9566] Call Trace: [ 314.478247][ T9566] [ 314.478256][ T9566] dump_stack_lvl+0x16c/0x1f0 [ 314.478289][ T9566] should_fail_ex+0x512/0x640 [ 314.478324][ T9566] should_failslab+0xc2/0x120 [ 314.478356][ T9566] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 314.478383][ T9566] ? do_raw_read_unlock+0x44/0xe0 [ 314.478420][ T9566] ? ima_d_path+0xbd/0x2a0 [ 314.478450][ T9566] ima_d_path+0xbd/0x2a0 [ 314.478475][ T9566] ? vfs_getxattr_alloc+0xec/0x340 [ 314.478502][ T9566] ? __pfx_ima_d_path+0x10/0x10 [ 314.478531][ T9566] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 314.478556][ T9566] process_measurement+0x1d86/0x23e0 [ 314.478583][ T9566] ? __kasan_kmalloc+0xaa/0xb0 [ 314.478615][ T9566] ? __pfx_process_measurement+0x10/0x10 [ 314.478638][ T9566] ? rcu_is_watching+0x12/0xc0 [ 314.478662][ T9566] ? aa_put_buffer.part.0+0x359/0x460 [ 314.478684][ T9566] ? rcu_is_watching+0x12/0xc0 [ 314.478706][ T9566] ? lock_release+0x201/0x2f0 [ 314.478736][ T9566] ? do_raw_spin_unlock+0x172/0x230 [ 314.478784][ T9566] ? __pfx_select_task_rq_fair+0x10/0x10 [ 314.478815][ T9566] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 314.478850][ T9566] ? sched_exec+0x244/0x290 [ 314.478879][ T9566] ? rcu_is_watching+0x12/0xc0 [ 314.478905][ T9566] ima_bprm_check+0xe7/0x210 [ 314.478927][ T9566] ? sched_exec+0x244/0x290 [ 314.478956][ T9566] ? __pfx_ima_bprm_check+0x10/0x10 [ 314.478979][ T9566] ? __pfx_sched_exec+0x10/0x10 [ 314.479008][ T9566] ? bprm_execve+0x427/0x1640 [ 314.479033][ T9566] ima_bprm_creds_for_exec+0x54/0x70 [ 314.479057][ T9566] security_bprm_creds_for_exec+0xca/0x1e0 [ 314.479083][ T9566] bprm_execve+0x470/0x1640 [ 314.479105][ T9566] ? insert_vm_struct+0x10c/0x2d0 [ 314.479136][ T9566] ? __pfx_bprm_execve+0x10/0x10 [ 314.479158][ T9566] ? copy_string_kernel+0x460/0x520 [ 314.479186][ T9566] do_execveat_common.isra.0+0x4a5/0x610 [ 314.479214][ T9566] __x64_sys_execveat+0xda/0x120 [ 314.479242][ T9566] do_syscall_64+0xcd/0x490 [ 314.479272][ T9566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.479296][ T9566] RIP: 0033:0x7f98c638ebe9 [ 314.479313][ T9566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.479336][ T9566] RSP: 002b:00007f98c72bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 314.479359][ T9566] RAX: ffffffffffffffda RBX: 00007f98c65b5fa0 RCX: 00007f98c638ebe9 [ 314.479375][ T9566] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 314.479389][ T9566] RBP: 00007f98c72bb090 R08: 0000000000011000 R09: 0000000000000000 [ 314.479404][ T9566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 314.479418][ T9566] R13: 00007f98c65b6038 R14: 00007f98c65b5fa0 R15: 00007ffd1b8d3c48 [ 314.479440][ T9566] [ 315.145575][ T9536] kexec: Could not allocate control_code_buffer [ 315.416257][ T9577] bridge0: port 3(veth0_to_bridge) entered blocking state [ 315.423768][ T9577] bridge0: port 3(veth0_to_bridge) entered disabled state [ 315.431015][ T9577] veth0_to_bridge: entered allmulticast mode [ 315.441396][ T9577] veth0_to_bridge: entered promiscuous mode [ 315.448794][ T9577] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 315.462795][ T9577] bridge0: port 3(veth0_to_bridge) entered blocking state [ 315.470022][ T9577] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 315.672037][ T49] netdevsim netdevsim15 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.377571][ T9615] FAULT_INJECTION: forcing a failure. [ 317.377571][ T9615] name failslab, interval 1, probability 0, space 0, times 0 [ 317.429927][ T9615] CPU: 1 UID: 0 PID: 9615 Comm: syz.3.765 Not tainted syzkaller #0 PREEMPT(full) [ 317.429959][ T9615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 317.429974][ T9615] Call Trace: [ 317.429981][ T9615] [ 317.429989][ T9615] dump_stack_lvl+0x16c/0x1f0 [ 317.430022][ T9615] should_fail_ex+0x512/0x640 [ 317.430057][ T9615] ? ima_alloc_init_template+0xb5/0x720 [ 317.430084][ T9615] should_failslab+0xc2/0x120 [ 317.430115][ T9615] __kmalloc_noprof+0xd2/0x510 [ 317.430145][ T9615] ima_alloc_init_template+0xb5/0x720 [ 317.430173][ T9615] ? __pfx_d_absolute_path+0x10/0x10 [ 317.430205][ T9615] ? rcu_is_watching+0x12/0xc0 [ 317.430229][ T9615] ima_store_measurement+0x1eb/0x5c0 [ 317.430259][ T9615] ? __pfx_ima_store_measurement+0x10/0x10 [ 317.430288][ T9615] ? vfs_getxattr_alloc+0xec/0x340 [ 317.430316][ T9615] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 317.430340][ T9615] process_measurement+0x1ddb/0x23e0 [ 317.430368][ T9615] ? __kasan_kmalloc+0xaa/0xb0 [ 317.430394][ T9615] ? __pfx_process_measurement+0x10/0x10 [ 317.430417][ T9615] ? rcu_is_watching+0x12/0xc0 [ 317.430440][ T9615] ? aa_put_buffer.part.0+0x359/0x460 [ 317.430462][ T9615] ? rcu_is_watching+0x12/0xc0 [ 317.430484][ T9615] ? lock_release+0x201/0x2f0 [ 317.430514][ T9615] ? do_raw_spin_unlock+0x172/0x230 [ 317.430563][ T9615] ? __pfx_select_task_rq_fair+0x10/0x10 [ 317.430593][ T9615] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 317.430629][ T9615] ? sched_exec+0x244/0x290 [ 317.430658][ T9615] ? rcu_is_watching+0x12/0xc0 [ 317.430683][ T9615] ima_bprm_check+0xe7/0x210 [ 317.430706][ T9615] ? sched_exec+0x244/0x290 [ 317.430735][ T9615] ? __pfx_ima_bprm_check+0x10/0x10 [ 317.430758][ T9615] ? __pfx_sched_exec+0x10/0x10 [ 317.430787][ T9615] ? bprm_execve+0x427/0x1640 [ 317.430812][ T9615] ima_bprm_creds_for_exec+0x54/0x70 [ 317.430836][ T9615] security_bprm_creds_for_exec+0xca/0x1e0 [ 317.430862][ T9615] bprm_execve+0x470/0x1640 [ 317.430885][ T9615] ? insert_vm_struct+0x10c/0x2d0 [ 317.430953][ T9615] ? __pfx_bprm_execve+0x10/0x10 [ 317.430976][ T9615] ? copy_string_kernel+0x460/0x520 [ 317.431003][ T9615] do_execveat_common.isra.0+0x4a5/0x610 [ 317.431033][ T9615] __x64_sys_execveat+0xda/0x120 [ 317.431060][ T9615] do_syscall_64+0xcd/0x490 [ 317.431091][ T9615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.431115][ T9615] RIP: 0033:0x7f98c638ebe9 [ 317.431132][ T9615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.431155][ T9615] RSP: 002b:00007f98c72bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 317.431176][ T9615] RAX: ffffffffffffffda RBX: 00007f98c65b5fa0 RCX: 00007f98c638ebe9 [ 317.431191][ T9615] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 317.431205][ T9615] RBP: 00007f98c72bb090 R08: 0000000000011000 R09: 0000000000000000 [ 317.431220][ T9615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 317.431233][ T9615] R13: 00007f98c65b6038 R14: 00007f98c65b5fa0 R15: 00007ffd1b8d3c48 [ 317.431255][ T9615] [ 317.734968][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.747460][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.759858][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.772206][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.784555][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.796820][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.809284][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.821597][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.834012][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.846216][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.667695][ T9608] kexec: Could not allocate control_code_buffer [ 322.742335][ C1] net_ratelimit: 25553 callbacks suppressed [ 322.742355][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.760620][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.773824][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.786125][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.798777][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.811161][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.823871][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.836119][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.848712][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.860901][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.751957][ C1] net_ratelimit: 11872 callbacks suppressed [ 327.751980][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.770221][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.782904][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.795118][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.807841][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.820163][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.832970][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.845186][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.858116][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.870421][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.761753][ C1] net_ratelimit: 11704 callbacks suppressed [ 332.761775][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.780149][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.793075][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.805395][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.818255][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.830506][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.843238][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.855532][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.868169][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.880454][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.771725][ C1] net_ratelimit: 11790 callbacks suppressed [ 337.771745][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.790159][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.802947][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.815278][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.827961][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.840198][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.852895][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.865100][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.877821][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.890019][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.781966][ C1] net_ratelimit: 11750 callbacks suppressed [ 342.781987][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.800449][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.813174][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.825401][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.838036][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.850243][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.862921][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.875209][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.887890][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.900100][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 346.581716][ C1] sched: DL replenish lagged too much [ 347.791771][ C1] net_ratelimit: 15336 callbacks suppressed [ 347.791792][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.810028][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.822313][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 347.835444][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.847777][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.859919][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 347.872540][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.884944][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.897452][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 347.910191][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 348.622037][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 348.935503][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 352.801773][ C1] net_ratelimit: 15142 callbacks suppressed [ 352.801798][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 352.820500][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.832874][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.845035][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 352.857741][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.870027][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.882217][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 352.894875][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.907151][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.919276][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 357.811883][ C1] net_ratelimit: 15080 callbacks suppressed [ 357.811906][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 357.831132][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 357.843552][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 357.855912][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 357.868597][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 357.880860][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 357.893122][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 357.906075][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 357.918564][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 357.930888][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 362.821858][ C1] net_ratelimit: 14363 callbacks suppressed [ 362.821879][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 362.840724][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.853108][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.865460][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 362.878212][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.890624][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.902866][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 362.915540][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.927792][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.940033][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 367.831975][ C1] net_ratelimit: 14271 callbacks suppressed [ 367.831996][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.850124][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.862360][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 367.875031][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.887417][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.899578][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 367.912319][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.924510][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.936666][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 367.949254][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.842141][ C1] net_ratelimit: 14549 callbacks suppressed [ 372.842162][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.860397][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.872597][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 372.885329][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.897590][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.909759][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 372.922425][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.934901][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.947152][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 372.959833][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.851954][ C1] net_ratelimit: 14486 callbacks suppressed [ 377.851977][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.870697][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.882942][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 377.895634][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.907839][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.920009][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 377.932665][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.944870][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.957123][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 377.969871][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.861972][ C1] net_ratelimit: 16024 callbacks suppressed [ 382.861993][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.880139][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.892346][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 382.904584][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:e7:ee:4d:29:7a, vlan:0) [ 382.917447][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.929724][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.941920][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 382.954071][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:e7:ee:4d:29:7a, vlan:0) [ 382.966751][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.978925][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 387.872216][ C1] net_ratelimit: 16414 callbacks suppressed [ 387.872237][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 387.890404][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 387.902534][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 387.914674][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:e7:ee:4d:29:7a, vlan:0) [ 387.927352][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 387.939543][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 387.951908][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 387.964244][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:e7:ee:4d:29:7a, vlan:0) [ 387.977003][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 387.989237][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 392.881696][ C1] net_ratelimit: 16384 callbacks suppressed [ 392.881716][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 392.899852][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:e7:ee:4d:29:7a, vlan:0) [ 392.912535][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 392.924853][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 392.936983][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 392.949121][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:e7:ee:4d:29:7a, vlan:0) [ 392.961796][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 392.974068][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 392.986176][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 392.998302][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:e7:ee:4d:29:7a, vlan:0) [ 397.892114][ C1] net_ratelimit: 16544 callbacks suppressed [ 397.892136][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 397.910404][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 397.922642][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 397.934838][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:e7:ee:4d:29:7a, vlan:0) [ 397.947500][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 397.959684][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 397.971926][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 397.984096][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:e7:ee:4d:29:7a, vlan:0) [ 397.997125][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 398.009386][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 399.253789][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 401.094625][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 402.901763][ C1] net_ratelimit: 16412 callbacks suppressed [ 402.901784][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 402.919862][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:e7:ee:4d:29:7a, vlan:0) [ 402.932534][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 402.944702][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 402.956916][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 402.969036][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:e7:ee:4d:29:7a, vlan:0) [ 402.982109][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 402.994396][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 403.006612][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 403.018966][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:e7:ee:4d:29:7a, vlan:0) [ 407.912270][ C1] net_ratelimit: 16528 callbacks suppressed [ 407.912291][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 407.930474][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 407.942710][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 407.954877][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:e7:ee:4d:29:7a, vlan:0) [ 407.967645][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 407.979996][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 407.992305][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 408.004485][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:e7:ee:4d:29:7a, vlan:0) [ 408.017320][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 408.029678][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.921808][ C1] net_ratelimit: 16962 callbacks suppressed [ 412.921830][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.940043][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.952202][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 412.964497][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:e7:ee:4d:29:7a, vlan:0) [ 412.977310][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.989760][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.001976][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 413.014228][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:e7:ee:4d:29:7a, vlan:0) [ 413.026983][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.039225][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.931746][ C1] net_ratelimit: 17205 callbacks suppressed [ 417.931766][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:e7:ee:4d:29:7a, vlan:0) [ 417.950455][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.962749][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.974931][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 417.987471][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:e7:ee:4d:29:7a, vlan:0) [ 418.000466][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 418.012804][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 418.025237][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 418.037535][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:e7:ee:4d:29:7a, vlan:0) [ 418.050216][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.941686][ C1] net_ratelimit: 16693 callbacks suppressed [ 422.941708][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 422.960440][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:e7:ee:4d:29:7a, vlan:0) [ 422.974345][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.986914][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.999227][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 423.012637][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:e7:ee:4d:29:7a, vlan:0) [ 423.026030][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 423.038955][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 423.051322][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 423.063998][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:e7:ee:4d:29:7a, vlan:0) [ 427.951840][ C1] net_ratelimit: 16765 callbacks suppressed [ 427.951862][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.970952][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 427.983203][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:e7:ee:4d:29:7a, vlan:0) [ 427.996064][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.008457][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.020781][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 428.033254][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:e7:ee:4d:29:7a, vlan:0) [ 428.046105][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.058566][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.070844][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 432.961707][ C1] net_ratelimit: 16672 callbacks suppressed [ 432.961727][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:e7:ee:4d:29:7a, vlan:0) [ 432.980641][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 432.993215][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.005529][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 433.017806][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:e7:ee:4d:29:7a, vlan:0) [ 433.030612][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.042941][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.055306][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 433.067606][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:e7:ee:4d:29:7a, vlan:0) [ 433.080717][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 437.972166][ C1] net_ratelimit: 16771 callbacks suppressed [ 437.972188][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 437.990441][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.002780][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 438.015129][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:e7:ee:4d:29:7a, vlan:0) [ 438.028134][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.040630][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.053055][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 438.065374][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:e7:ee:4d:29:7a, vlan:0) [ 438.078263][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.090871][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 442.981784][ C1] net_ratelimit: 16388 callbacks suppressed [ 442.981810][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 443.000511][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:e7:ee:4d:29:7a, vlan:0) [ 443.013247][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 443.025628][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 443.037975][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 443.050362][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:e7:ee:4d:29:7a, vlan:0) [ 443.063867][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 443.076366][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 443.088895][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 443.101148][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:e7:ee:4d:29:7a, vlan:0) [ 445.131642][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 445.138637][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9615/1:b..l [ 445.146658][ C1] rcu: (detected by 1, t=10502 jiffies, g=37421, q=1411 ncpus=1) [ 445.154496][ C1] task:syz.3.765 state:R running task stack:26176 pid:9615 tgid:9614 ppid:5860 task_flags:0x400040 flags:0x00004002 [ 445.168052][ C1] Call Trace: [ 445.171358][ C1] [ 445.174405][ C1] __schedule+0x1190/0x5de0 [ 445.178951][ C1] ? __pfx___schedule+0x10/0x10 [ 445.183819][ C1] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 445.189866][ C1] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 445.195894][ C1] preempt_schedule_irq+0x51/0x90 [ 445.200962][ C1] irqentry_exit+0x36/0x90 [ 445.205423][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 445.211464][ C1] RIP: 0010:unwind_next_frame+0xd78/0x20a0 [ 445.217474][ C1] Code: 00 0f 85 c6 12 00 00 4c 89 e2 4d 89 75 38 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 86 12 00 00 49 8d 7d 58 <49> c7 45 50 00 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 [ 445.237146][ C1] RSP: 0018:ffffc900046deac0 EFLAGS: 00000246 [ 445.243236][ C1] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: ffffffff9140cf58 [ 445.251234][ C1] RDX: 1ffff920008dbd7a RSI: 1ffff920008dbd79 RDI: ffffc900046debd8 [ 445.259210][ C1] RBP: ffffc900046debc8 R08: ffffffff9140cf5c R09: 0000000000000000 [ 445.267191][ C1] R10: ffffc900046deb80 R11: 0000000000006ada R12: ffffc900046debd0 [ 445.275199][ C1] R13: ffffc900046deb80 R14: ffffc900046deb80 R15: ffffc900046debb4 [ 445.283211][ C1] ? __unwind_start+0x574/0x7f0 [ 445.288134][ C1] __unwind_start+0x45f/0x7f0 [ 445.293102][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 445.299392][ C1] arch_stack_walk+0x73/0x100 [ 445.304136][ C1] ? arch_stack_walk+0x73/0x100 [ 445.309021][ C1] stack_trace_save+0x8e/0xc0 [ 445.313731][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 445.319172][ C1] ? ima_bprm_check+0xe7/0x210 [ 445.323999][ C1] ? __pfx___sprint_symbol.constprop.0+0x10/0x10 [ 445.330464][ C1] ? ima_bprm_creds_for_exec+0x54/0x70 [ 445.336008][ C1] kasan_save_stack+0x33/0x60 [ 445.340759][ C1] kasan_save_track+0x14/0x30 [ 445.345479][ C1] __kasan_kmalloc+0xaa/0xb0 [ 445.350120][ C1] __set_page_owner+0x32e/0x550 [ 445.354990][ C1] ? get_page_from_freelist+0x130b/0x38e0 [ 445.360724][ C1] ? rcu_is_watching+0x12/0xc0 [ 445.365498][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 445.370883][ C1] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 445.376909][ C1] post_alloc_hook+0x1c0/0x230 [ 445.381827][ C1] get_page_from_freelist+0x132b/0x38e0 [ 445.387443][ C1] ? prepare_alloc_pages+0x3c2/0x610 [ 445.392792][ C1] ? desc_read+0x2ae/0x370 [ 445.397236][ C1] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 445.403156][ C1] ? rcu_is_watching+0x12/0xc0 [ 445.407946][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 445.413169][ C1] ? rcu_is_watching+0x12/0xc0 [ 445.418151][ C1] ? rcu_is_watching+0x12/0xc0 [ 445.423030][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 445.429516][ C1] ? rcu_is_watching+0x12/0xc0 [ 445.434309][ C1] ? bpf_ksym_find+0x124/0x1c0 [ 445.439210][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 445.445403][ C1] ? __kernel_text_address+0xd/0x40 [ 445.450772][ C1] ? unwind_get_return_address+0x59/0xa0 [ 445.456446][ C1] ? arch_stack_walk+0xa6/0x100 [ 445.461348][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 445.466429][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 445.472394][ C1] ? policy_nodemask+0xea/0x4e0 [ 445.477462][ C1] alloc_pages_mpol+0x1fb/0x550 [ 445.482390][ C1] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 445.487897][ C1] ? stack_depot_save_flags+0x3de/0x9c0 [ 445.493468][ C1] ? rcu_is_watching+0x12/0xc0 [ 445.498280][ C1] new_slab+0x247/0x330 [ 445.502487][ C1] ___slab_alloc+0xcf2/0x1740 [ 445.507203][ C1] ? security_bprm_creds_for_exec+0xca/0x1e0 [ 445.513208][ C1] ? bprm_execve+0x470/0x1640 [ 445.517917][ C1] ? do_execveat_common.isra.0+0x4a5/0x610 [ 445.523772][ C1] ? __alloc_skb+0x2b2/0x380 [ 445.528409][ C1] ? rcu_is_watching+0x12/0xc0 [ 445.533289][ C1] ? __alloc_skb+0x2b2/0x380 [ 445.537901][ C1] ? __slab_alloc.constprop.0+0x56/0xb0 [ 445.543462][ C1] __slab_alloc.constprop.0+0x56/0xb0 [ 445.548866][ C1] kmem_cache_alloc_node_noprof+0xf5/0x3b0 [ 445.554884][ C1] ? __alloc_skb+0x2b2/0x380 [ 445.559518][ C1] __alloc_skb+0x2b2/0x380 [ 445.563977][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 445.568931][ C1] ? rcu_is_watching+0x12/0xc0 [ 445.573722][ C1] ? trace_kmem_cache_alloc+0x28/0xc0 [ 445.579145][ C1] ? audit_log_start+0x2c5/0x7f0 [ 445.584134][ C1] audit_log_start+0x2ea/0x7f0 [ 445.588956][ C1] ? __pfx_audit_log_start+0x10/0x10 [ 445.594311][ C1] ? rcu_is_watching+0x12/0xc0 [ 445.599125][ C1] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 445.605274][ C1] ? dump_stack_lvl+0x1a1/0x1f0 [ 445.610154][ C1] integrity_audit_message+0x10c/0x580 [ 445.615651][ C1] ? rcu_is_watching+0x12/0xc0 [ 445.620444][ C1] ? __pfx_integrity_audit_message+0x10/0x10 [ 445.626474][ C1] integrity_audit_msg+0x41/0x60 [ 445.631499][ C1] ima_store_measurement+0x3b6/0x5c0 [ 445.636849][ C1] ? __pfx_ima_store_measurement+0x10/0x10 [ 445.642679][ C1] ? vfs_getxattr_alloc+0xec/0x340 [ 445.647813][ C1] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 445.653297][ C1] process_measurement+0x1ddb/0x23e0 [ 445.658703][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 445.663644][ C1] ? __pfx_process_measurement+0x10/0x10 [ 445.669331][ C1] ? rcu_is_watching+0x12/0xc0 [ 445.674135][ C1] ? aa_put_buffer.part.0+0x359/0x460 [ 445.679679][ C1] ? rcu_is_watching+0x12/0xc0 [ 445.685198][ C1] ? lock_release+0x201/0x2f0 [ 445.689916][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 445.695165][ C1] ? __pfx_select_task_rq_fair+0x10/0x10 [ 445.701170][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 445.706860][ C1] ? sched_exec+0x244/0x290 [ 445.711474][ C1] ? rcu_is_watching+0x12/0xc0 [ 445.716479][ C1] ima_bprm_check+0xe7/0x210 [ 445.721431][ C1] ? sched_exec+0x244/0x290 [ 445.725984][ C1] ? __pfx_ima_bprm_check+0x10/0x10 [ 445.731281][ C1] ? __pfx_sched_exec+0x10/0x10 [ 445.736408][ C1] ? bprm_execve+0x427/0x1640 [ 445.741161][ C1] ima_bprm_creds_for_exec+0x54/0x70 [ 445.746727][ C1] security_bprm_creds_for_exec+0xca/0x1e0 [ 445.752599][ C1] bprm_execve+0x470/0x1640 [ 445.757349][ C1] ? insert_vm_struct+0x10c/0x2d0 [ 445.762647][ C1] ? __pfx_bprm_execve+0x10/0x10 [ 445.767712][ C1] ? copy_string_kernel+0x460/0x520 [ 445.772958][ C1] do_execveat_common.isra.0+0x4a5/0x610 [ 445.778633][ C1] __x64_sys_execveat+0xda/0x120 [ 445.783706][ C1] do_syscall_64+0xcd/0x490 [ 445.788273][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.794630][ C1] RIP: 0033:0x7f98c638ebe9 [ 445.799075][ C1] RSP: 002b:00007f98c72bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 445.807496][ C1] RAX: ffffffffffffffda RBX: 00007f98c65b5fa0 RCX: 00007f98c638ebe9 [ 445.815471][ C1] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 445.823497][ C1] RBP: 00007f98c72bb090 R08: 0000000000011000 R09: 0000000000000000 [ 445.831495][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 445.839494][ C1] R13: 00007f98c65b6038 R14: 00007f98c65b5fa0 R15: 00007ffd1b8d3c48 [ 445.847706][ C1] [ 445.850755][ C1] rcu: rcu_preempt kthread starved for 216 jiffies! g37421 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 445.861946][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 445.872033][ C1] rcu: RCU grace-period kthread stack dump: [ 445.877945][ C1] task:rcu_preempt state:R running task stack:27928 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 445.891509][ C1] Call Trace: [ 445.894805][ C1] [ 445.897777][ C1] __schedule+0x1190/0x5de0 [ 445.902315][ C1] ? __mod_timer+0x8ed/0xd30 [ 445.906950][ C1] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 445.912987][ C1] ? __pfx___schedule+0x10/0x10 [ 445.918353][ C1] ? __pfx___debug_object_init+0x10/0x10 [ 445.924040][ C1] ? schedule+0x2d7/0x3a0 [ 445.928418][ C1] ? rcu_is_watching+0x12/0xc0 [ 445.933312][ C1] ? lock_release+0x201/0x2f0 [ 445.938012][ C1] schedule+0xe7/0x3a0 [ 445.942117][ C1] schedule_timeout+0x123/0x290 [ 445.947039][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 445.952449][ C1] ? __pfx_process_timeout+0x10/0x10 [ 445.957779][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 445.963625][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 445.969132][ C1] rcu_gp_fqs_loop+0x1ea/0xb00 [ 445.973919][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 445.979331][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 445.984449][ C1] ? rcu_gp_cleanup+0x7c1/0xd90 [ 445.989350][ C1] rcu_gp_kthread+0x270/0x380 [ 445.994186][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 445.999417][ C1] ? rcu_is_watching+0x12/0xc0 [ 446.004200][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 446.009420][ C1] ? __kthread_parkme+0x19e/0x250 [ 446.014464][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 446.019697][ C1] kthread+0x3c5/0x780 [ 446.023926][ C1] ? __pfx_kthread+0x10/0x10 [ 446.028567][ C1] ? rcu_is_watching+0x12/0xc0 [ 446.033341][ C1] ? __pfx_kthread+0x10/0x10 [ 446.037970][ C1] ret_from_fork+0x5d4/0x6f0 [ 446.042609][ C1] ? __pfx_kthread+0x10/0x10 [ 446.047235][ C1] ret_from_fork_asm+0x1a/0x30 [ 446.052028][ C1] [ 446.055052][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 446.061401][ C1] CPU: 1 UID: 0 PID: 3423 Comm: kworker/R-bat_e Not tainted syzkaller #0 PREEMPT(full) [ 446.071131][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 446.081196][ C1] Workqueue: bat_events batadv_tt_purge [ 446.086787][ C1] RIP: 0010:__orc_find+0x83/0xf0 [ 446.091742][ C1] Code: 02 48 01 f2 48 d1 fa 48 8d 5c 95 00 48 89 da 48 c1 ea 03 0f b6 34 0a 48 89 da 83 e2 07 83 c2 03 40 38 f2 7c 05 40 84 f6 75 4b <48> 63 13 48 01 da 49 39 d5 73 af 4c 8d 63 fc 49 39 ec 73 b2 4d 29 [ 446.111371][ C1] RSP: 0018:ffffc90000a07c68 EFLAGS: 00000246 [ 446.117497][ C1] RAX: ffffffff914f3af0 RBX: ffffffff90c62880 RCX: dffffc0000000000 [ 446.125613][ C1] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ffffffff90c62860 [ 446.133602][ C1] RBP: ffffffff90c62860 R08: ffffffff914f3b56 R09: 0000000000000000 [ 446.141583][ C1] R10: ffffc90000a07d18 R11: 0000000000012035 R12: ffffffff90c628a0 [ 446.149562][ C1] R13: ffffffff822035b3 R14: ffffffff90c62860 R15: ffffffff90c62860 [ 446.157540][ C1] FS: 0000000000000000(0000) GS:ffff8881247c4000(0000) knlGS:0000000000000000 [ 446.166476][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 446.173086][ C1] CR2: 000055557f62c5c8 CR3: 0000000028ce2000 CR4: 00000000003526f0 [ 446.181104][ C1] Call Trace: [ 446.184434][ C1] [ 446.187307][ C1] ? kasan_save_track+0x13/0x30 [ 446.192213][ C1] unwind_next_frame+0x2ec/0x20a0 [ 446.197258][ C1] ? kasan_save_track+0x14/0x30 [ 446.202179][ C1] ? nf_hook+0x4aa/0x7a0 [ 446.206551][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 446.212753][ C1] arch_stack_walk+0x94/0x100 [ 446.217556][ C1] ? kasan_save_track+0x14/0x30 [ 446.222502][ C1] stack_trace_save+0x8e/0xc0 [ 446.227225][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 446.232638][ C1] ? rcu_is_watching+0x12/0xc0 [ 446.237423][ C1] kasan_save_stack+0x33/0x60 [ 446.242268][ C1] ? kasan_save_stack+0x33/0x60 [ 446.247156][ C1] ? kasan_save_track+0x14/0x30 [ 446.252066][ C1] kasan_save_track+0x14/0x30 [ 446.256777][ C1] __kasan_slab_alloc+0x89/0x90 [ 446.261668][ C1] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 446.267197][ C1] ? kasan_save_stack+0x42/0x60 [ 446.272071][ C1] ? kasan_save_stack+0x33/0x60 [ 446.277112][ C1] ? kasan_save_track+0x14/0x30 [ 446.281991][ C1] ? skb_ext_add+0xf8/0x7a0 [ 446.286617][ C1] ? br_flood+0x37c/0x650 [ 446.291084][ C1] skb_ext_add+0xf8/0x7a0 [ 446.295428][ C1] ? rcu_is_watching+0x12/0xc0 [ 446.300244][ C1] ? net_generic+0xea/0x2a0 [ 446.304787][ C1] br_nf_forward_ip.part.0+0x28/0x810 [ 446.310214][ C1] br_nf_forward+0xf0f/0x1be0 [ 446.314947][ C1] ? lock_acquire+0x2cd/0x350 [ 446.319922][ C1] ? __pfx_br_nf_forward+0x10/0x10 [ 446.325072][ C1] nf_hook_slow+0xbb/0x200 [ 446.329524][ C1] nf_hook+0x45e/0x780 [ 446.333638][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 446.339160][ C1] ? __pfx_nf_hook+0x10/0x10 [ 446.343797][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 446.349294][ C1] ? __asan_memcpy+0x3c/0x60 [ 446.353909][ C1] __br_forward+0x1be/0x5b0 [ 446.358439][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 446.363923][ C1] br_flood+0x39c/0x650 [ 446.368094][ C1] br_handle_frame_finish+0xf2d/0x1ca0 [ 446.373572][ C1] ? net_rx_action+0xa9f/0xfe0 [ 446.378380][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 446.384418][ C1] ? batadv_tt_purge+0x25f/0xb80 [ 446.389379][ C1] ? process_one_work+0x9b3/0x1b70 [ 446.394568][ C1] ? rescuer_thread+0x620/0xea0 [ 446.399440][ C1] ? find_task_by_vpid+0x40/0xe0 [ 446.404491][ C1] ? ret_from_fork+0x5d4/0x6f0 [ 446.409295][ C1] ? nf_hook_slow+0x132/0x200 [ 446.414002][ C1] br_nf_hook_thresh+0x304/0x410 [ 446.418974][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 446.425189][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 446.430696][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 446.436651][ C1] ? rcu_is_watching+0x12/0xc0 [ 446.441439][ C1] ? lock_release+0x201/0x2f0 [ 446.446168][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 446.452080][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 446.457999][ C1] br_nf_pre_routing_finish_ipv6+0x76a/0xfb0 [ 446.464034][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 446.469961][ C1] ? lock_release+0x201/0x2f0 [ 446.474680][ C1] br_nf_pre_routing_ipv6+0x3cd/0x8c0 [ 446.480097][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 446.486107][ C1] ? rcu_is_watching+0x12/0xc0 [ 446.490886][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 446.497412][ C1] ? lock_release+0x201/0x2f0 [ 446.502116][ C1] br_nf_pre_routing+0x860/0x15b0 [ 446.507186][ C1] br_handle_frame+0xad8/0x14b0 [ 446.512086][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 446.517420][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 446.523371][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 446.528701][ C1] __netif_receive_skb_core.constprop.0+0xa25/0x48c0 [ 446.535408][ C1] ? trace_irq_enable.constprop.0+0xc0/0x120 [ 446.541448][ C1] ? kmem_cache_free+0x2d1/0x4d0 [ 446.546476][ C1] ? kfree_skbmem+0x1a4/0x1f0 [ 446.551177][ C1] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 446.558333][ C1] ? kfree_skbmem+0x1a4/0x1f0 [ 446.563140][ C1] ? sk_skb_reason_drop+0x136/0x1a0 [ 446.568378][ C1] ? ip6_mc_input+0x4f2/0xeb0 [ 446.573095][ C1] ? __pfx_ip6_mc_input+0x10/0x10 [ 446.578159][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 446.583565][ C1] ? process_backlog+0x3f0/0x15e0 [ 446.588617][ C1] __netif_receive_skb_one_core+0xb0/0x1e0 [ 446.594445][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 446.600882][ C1] ? lock_acquire+0x2cd/0x350 [ 446.605589][ C1] ? process_backlog+0x3f0/0x15e0 [ 446.610622][ C1] ? rcu_is_watching+0x12/0xc0 [ 446.615415][ C1] ? process_backlog+0x3f0/0x15e0 [ 446.620473][ C1] __netif_receive_skb+0x1d/0x160 [ 446.625523][ C1] process_backlog+0x442/0x15e0 [ 446.630409][ C1] __napi_poll.constprop.0+0xba/0x550 [ 446.635823][ C1] ? rcu_is_watching+0x12/0xc0 [ 446.640626][ C1] net_rx_action+0xa9f/0xfe0 [ 446.645439][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 446.650605][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 446.656105][ C1] ? rcu_is_watching+0x12/0xc0 [ 446.660909][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 446.666143][ C1] ? sched_clock+0x38/0x60 [ 446.670574][ C1] ? sched_clock_cpu+0x6c/0x530 [ 446.675469][ C1] handle_softirqs+0x219/0x8e0 [ 446.680251][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 446.685548][ C1] ? batadv_tt_purge+0x25f/0xb80 [ 446.690492][ C1] do_softirq+0xb2/0xf0 [ 446.694663][ C1] [ 446.697598][ C1] [ 446.700531][ C1] __local_bh_enable_ip+0x100/0x120 [ 446.705847][ C1] batadv_tt_purge+0x25f/0xb80 [ 446.710637][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 446.715969][ C1] ? __pfx_batadv_tt_purge+0x10/0x10 [ 446.721433][ C1] ? rcu_is_watching+0x12/0xc0 [ 446.726239][ C1] ? rcu_is_watching+0x12/0xc0 [ 446.731033][ C1] ? lock_acquire+0x2cd/0x350 [ 446.735732][ C1] ? rcu_is_watching+0x12/0xc0 [ 446.740520][ C1] ? rcu_is_watching+0x12/0xc0 [ 446.745313][ C1] process_one_work+0x9cf/0x1b70 [ 446.750291][ C1] ? __pfx_process_one_work+0x10/0x10 [ 446.755813][ C1] ? assign_work+0x1a0/0x250 [ 446.760452][ C1] rescuer_thread+0x620/0xea0 [ 446.765170][ C1] ? rcu_is_watching+0x12/0xc0 [ 446.769984][ C1] ? __pfx_rescuer_thread+0x10/0x10 [ 446.775233][ C1] ? __kthread_parkme+0x19e/0x250 [ 446.780290][ C1] ? __pfx_rescuer_thread+0x10/0x10 [ 446.785514][ C1] kthread+0x3c5/0x780 [ 446.789611][ C1] ? __pfx_kthread+0x10/0x10 [ 446.794218][ C1] ? ret_from_fork+0x25/0x6f0 [ 446.798924][ C1] ? rcu_is_watching+0x12/0xc0 [ 446.803715][ C1] ? rcu_is_watching+0x12/0xc0 [ 446.808499][ C1] ? __pfx_kthread+0x10/0x10 [ 446.813111][ C1] ret_from_fork+0x5d4/0x6f0 [ 446.817735][ C1] ? __pfx_kthread+0x10/0x10 [ 446.822363][ C1] ret_from_fork_asm+0x1a/0x30 [ 446.827182][ C1] [ 447.991813][ C1] net_ratelimit: 10747 callbacks suppressed [ 447.991834][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:e7:ee:4d:29:7a, vlan:0) [ 448.010775][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.023181][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.035372][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 448.047675][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:e7:ee:4d:29:7a, vlan:0) [ 448.060527][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.072842][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.085008][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 448.097237][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:e7:ee:4d:29:7a, vlan:0) [ 448.110053][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 453.002210][ C1] net_ratelimit: 16099 callbacks suppressed [ 453.002232][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 453.020408][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 453.032581][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 453.044881][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:e7:ee:4d:29:7a, vlan:0) [ 453.057574][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 453.069880][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 453.082113][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 453.094271][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:e7:ee:4d:29:7a, vlan:0) [ 453.107194][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 453.119490][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)