last executing test programs: 4m3.745696614s ago: executing program 3 (id=1290): mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) socket(0x11, 0x2, 0x2) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/034/001\x00', 0x201, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) openat$auto_buffer_subbuf_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/buffer_subbuf_size_kb\x00', 0x2401, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x73) open(&(0x7f00000001c0)='./file1/file0\x00', 0x1d9542, 0x1d5) socket(0xa, 0x2, 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000000c0), 0x161401, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x29, 0x80000, 0x20006) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/core/rps_default_mask\x00', 0x82, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x2, 0x8000000000000000, 0x0) writev$auto(r0, &(0x7f0000000240)={0x0, 0x2}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/transparent_hugepage/hugepages-64kB/stats/nr_anon\x00', 0x0, 0x0) socket(0x2b, 0x1, 0x0) openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x30d540, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) 4m3.372065099s ago: executing program 3 (id=1291): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x5) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00", @raw=0x1}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2000000b752, 0x1}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) (async, rerun: 32) pipe$auto(0x0) (rerun: 32) 4m2.322340946s ago: executing program 3 (id=1293): r0 = socket(0x11, 0x80003, 0x300) mmap$auto(0x4, 0x9, 0x388, 0xeb1, 0x401, 0x8000) openat$auto_rfcomm_dlc_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0) r1 = epoll_create$auto(0x4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) socket(0x1d, 0x3, 0x106) r2 = pidfd_getfd$auto(0xffffffffffffffff, r1, 0x10000) listen$auto(r2, 0x2) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0xa, 0x0, 0x0) r4 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) ioctl$auto(r4, 0x4018620d, 0x9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_TIOCSPGRP2(r2, 0x5410, &(0x7f00000000c0)="ac2cb364f04e3b0f58ddeb858503145768061960533d4c76d5ba8dad4b4f0c2f40735a7c6bffbdd31c253cf7cf0c7bc5579bb29c13b0256a7c5ba6b3be780258d5318726516f4451099812ea57d0ccfbab919453ced90da859a40b") syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002ec0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002f80)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x24000802) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/icmp\x00', 0x42500, 0x0) r7 = socket(0x2, 0x2, 0x1) sendto$auto(r7, 0x0, 0xf, 0xfffffff8, 0x0, 0x1c) read$auto_proc_reg_file_ops_compat_inode(r6, &(0x7f0000001080)=""/244, 0xf4) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) listmount$auto(&(0x7f0000000080)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x8}, 0x0, 0xf4240, 0x1) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto_PTRACE_SETREGSET(0x4205, r8, 0x1, 0x9) setsockopt$auto(r0, 0x107, 0xf, 0x0, 0x6) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000440)="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", 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x7}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x4, 0x100) 4m0.385962786s ago: executing program 3 (id=1297): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x62, 0x0) (async) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async, rerun: 64) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x20401, 0x0) (async) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r3 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r3, 0x4068aea3, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) timer_create$auto(0x803, 0x0, 0x0) recvfrom$auto(r1, &(0x7f0000001200)="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", 0x4, 0x7, &(0x7f00000000c0)=@rc={0x1f, @any, 0x8}, &(0x7f0000000100)=0x93) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/saved_tgids\x00', 0x109100, 0x0) (async) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000240)={{@raw=0x81, 0x6, 0x8001, 0x8, "b132ce14b9fa7a699c29a892e255dab2591457de9c4db5868db157e9cc1910aa07e336ede9b387eac3eae00a", @raw=0x8ef}, 0x2, 0x8, 0x1895, @raw=0x4, @integer={0x0, 0xf, 0x9}, "f82d0516c633863c5281ae962fd8c811792ad96298c95d5a9da1400adb4ee0bc170d51ef637d9927912407406936d9cbf46ddadb7820b40766245026a272cd3a"}) (async, rerun: 32) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x201, 0x0) (async, rerun: 32) memfd_secret$auto(0x0) (async) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda1\x00', 0x20100, 0x0) preadv2$auto(r4, &(0x7f0000000200)={0x0, 0x80000000009}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) (async) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyz7\x00', 0x48f41, 0x0) ioctl$auto(0x3, 0x402c542d, r5) (async) write$auto(0x3, 0x0, 0xfffffdef) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) 3m59.407258336s ago: executing program 3 (id=1299): open(0x0, 0x161342, 0x100) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80002, 0x73) connect$auto(0x3, 0x0, 0x3) madvise$auto(0x5, 0x0, 0x5) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) getrandom$auto(&(0x7f0000000180)=']\x00', 0x9, 0x3) 3m58.93666069s ago: executing program 3 (id=1301): r0 = socket(0x25, 0x800, 0x962) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'nicvf0\x00'}) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="00ecff00", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fbdfdf25020000000800010003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24008054}, 0x40) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) rt_tgsigqueueinfo$auto(0xffffffffffffffff, 0x0, 0x8, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) shutdown$auto(0x200000003, 0x2) fchown$auto(0xffffffffffffffff, 0x0, 0x0) ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) recvmmsg$auto(0x3, 0x0, 0x86873cbd, 0xa, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='Z'], 0x1ac}}, 0x40000) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x8300, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0xbe}, 0x2, 0x0, 0x0, 0x9}, 0xb}, 0x6, 0x2000) 3m43.725713598s ago: executing program 32 (id=1301): r0 = socket(0x25, 0x800, 0x962) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'nicvf0\x00'}) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="00ecff00", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fbdfdf25020000000800010003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24008054}, 0x40) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) rt_tgsigqueueinfo$auto(0xffffffffffffffff, 0x0, 0x8, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) shutdown$auto(0x200000003, 0x2) fchown$auto(0xffffffffffffffff, 0x0, 0x0) ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) recvmmsg$auto(0x3, 0x0, 0x86873cbd, 0xa, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='Z'], 0x1ac}}, 0x40000) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x8300, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0xbe}, 0x2, 0x0, 0x0, 0x9}, 0xb}, 0x6, 0x2000) 6.596294416s ago: executing program 4 (id=2239): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1000afd003a5394e965231da1bd312e7af6d67d09340d0a4bd7805e18ac78f35cb77d1029c69e7270148078c13a91f6dff64055ad11608f0fb"], 0x1ac}, 0x1, 0x0, 0x0, 0x22004840}, 0x4001) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x0, 0x80000001, 0x7, 0x6d39, 0x5, 0x2, 0x1]}, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) 6.11809307s ago: executing program 4 (id=2243): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001140)='/sys/module/ib_iser/parameters/max_sectors\x00', 0x20a42, 0x0) sendfile$auto(r0, r0, 0x0, 0x4f64a1d2) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x1, 0x0) prctl$auto(0x3e, 0x9, 0x0, 0xcb1, 0x4) (async) mlock$auto(0xfff, 0xde7f) (async) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8000) (async) r1 = io_uring_setup$auto(0x1, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) getsockopt$auto(0xffffffffffffffff, 0x0, 0x32, 0x0, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) (async) close_range$auto(r1, 0x8, 0x0) (async) openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000040), 0x101100, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x1ff, 0x20000000) (async) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8) write$auto(0x3, 0x0, 0x100082) rseq$auto(0x0, 0x8000, 0x0, 0x6) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r2, 0x8000) (async) io_uring_setup$auto(0x6, 0x0) (async) close_range$auto(0x2, 0xa, 0x0) (async) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x40e00, 0x0) pread64$auto(r3, 0x0, 0x3, 0x5ef6) (async) syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f00000000c0), 0xffffffffffffffff) msync$auto(0x1ffff000, 0x180000000000101, 0x400000004) (async) r4 = socket(0x9, 0x5, 0xfffffffe) (async) r5 = syz_genetlink_get_family_id$auto_netdev(0x0, 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r4, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000280)=ANY=[@ANYRES16=0x0, @ANYRES8=r1, @ANYRES8=r5], 0x14}, 0x1, 0x0, 0x0, 0x4c000}, 0x24004050) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8001) 4.396504291s ago: executing program 4 (id=2248): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(r0, 0x0, 0x410000, 0x0, 0x0) ioctl$auto_BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000500)={0x40a, 0x3, 0x3ac, 0x8, {0x1, 0x4, 0xb, 0x3, 0x8, 0x4, 0x9, 0x2, 0xe, 0xa5, 0x1, 0x4, 0x0, 0xf, 0xff}}) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) keyctl$auto(0x1d, 0xffffffffffffffff, 0x8, 0x5, 0x8) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), r1) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14001afebf243875f4e7480a42d3d65c80c500", @ANYRES16=r2, @ANYBLOB="1b0026bd7000fbdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/hugetlb.1GB.rsvd.failcnt\x00', 0x80302, 0x0) sendfile$auto(r3, r3, 0x0, 0x3) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) read$auto_ctl_device_fops_user(r1, &(0x7f0000000100)=""/153, 0x99) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = socket(0x2, 0x1, 0x0) bpf$auto_BPF_OBJ_GET_INFO_BY_FD(0xf, &(0x7f00000002c0)=@test={r4, 0x0, 0x856, 0x189, 0x8, 0x7fff, 0x7fff, 0x10000, 0xc91a, 0x7, 0x5, 0x3, 0x3, 0x3, 0x6}, 0x1) mmap$auto(0x0, 0xa00006, 0x400002, 0x40ed0, r3, 0x300000000000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) sendmsg$auto_ETHTOOL_MSG_PSE_SET(0xffffffffffffffff, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) write$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000001680)="a7", 0x80000) 3.822069965s ago: executing program 1 (id=2250): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = socket(0x2b, 0x1, 0x1) sendmmsg$auto(r0, 0x0, 0x7, 0x20020000) r1 = openat$auto_sync_info_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x4100, 0x0) getsockopt$auto(r0, 0xa, 0xb, &(0x7f00000000c0)='\'@}+#\x15\x82\x00', &(0x7f0000000100)=0x4) vmsplice$auto(r1, &(0x7f0000000080)={&(0x7f0000000040)="377730cdb854ace2f196fb4da22d581860f4c82f34bd2d65fa2ee614af", 0x5}, 0xc6, 0x4) 3.792526067s ago: executing program 1 (id=2251): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) syslog$auto_SYSLOG_ACTION_READ(0x2, 0x0, 0xa3) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/cifs/cifsFYI\x00', 0x40c01, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) mmap$auto(0x9, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) ioctl$auto_FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f00000000c0)={0x72, 0x3, 0x9, 0x6, "8d0d089fea863e64"}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) 3.673578753s ago: executing program 0 (id=2252): bind$auto(0xffffffffffffffff, 0x0, 0x66) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) bpf$auto(0x11, &(0x7f0000000000)=@batch={0xfffffffffffffffb, 0x44, 0x2, 0x9, 0x1, 0xffffffffffffffff, 0xa, 0x6}, 0xcf) (async) bpf$auto(0x11, &(0x7f0000000000)=@batch={0xfffffffffffffffb, 0x44, 0x2, 0x9, 0x1, 0xffffffffffffffff, 0xa, 0x6}, 0xcf) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0xfffffffd, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r1 = socket(0x29, 0x2, 0x0) r2 = socket(0x10, 0x2, 0x0) write$auto_urandom_fops_random(r0, &(0x7f00000001c0)="3ebb8ca0bbb4e479b4eb948a8873ffde514ca522d4622dcc927a37d863074c5d6c3e31cd339f7cac4883082172d7adf88aa539b8f71714bf4b0c3538f65f2bbbc25cc3aa27c40c171345867bed6bb5262c1984fa5b0c82fc668121a638", 0x5d) (async) write$auto_urandom_fops_random(r0, &(0x7f00000001c0)="3ebb8ca0bbb4e479b4eb948a8873ffde514ca522d4622dcc927a37d863074c5d6c3e31cd339f7cac4883082172d7adf88aa539b8f71714bf4b0c3538f65f2bbbc25cc3aa27c40c171345867bed6bb5262c1984fa5b0c82fc668121a638", 0x5d) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200"], 0x1ac}}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200"], 0x1ac}}, 0x40000) recvmmsg$auto(r2, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r1, 0x89f0, 0x24) r3 = socket(0x29, 0x2, 0x0) ioctl$auto(r3, 0x89f3, 0x24) (async) ioctl$auto(r3, 0x89f3, 0x24) 3.3764656s ago: executing program 2 (id=2253): r0 = getsockopt$auto_SO_PEERPIDFD(0xffffffffffffffff, 0xa, 0x4d, &(0x7f0000000580)='&]\x00', &(0x7f00000005c0)=0x8) sendmsg$auto_TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000004080)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x18, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x80) socket(0x10, 0x2, 0x0) prctl$auto_PR_SET_IO_FLUSHER(0x39, 0xd, 0x8, 0x4, 0x5) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000440)=0x4) mq_timedsend$auto(0xffffffffffffffff, &(0x7f0000000340)='/dev/kvm\x00', 0x9, 0x0, &(0x7f00000003c0)={0x6, 0xe29a}) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000894}, 0x800) bpf$auto(0x4, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xffff, 0xfffff0b6, 0xffff, 0x84, 0xabf, 0x2, 0x36242398, 0xfffff5ae, 0x3bb, 0x8000007, 0xffff, 0x6, 0x81, 0x6819a}, 0x6f3) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc2}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x2, 0x0) 3.309487618s ago: executing program 0 (id=2254): socket(0x11, 0x80003, 0x300) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) (async, rerun: 32) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) socket(0xa, 0x1, 0x84) (rerun: 64) r0 = pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) (async) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) socket(0x18, 0x3, 0x2) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) openat$auto_nsim_udp_tunnels_info_reset_fops_udp_tunnels(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim7/ports/3/udp_ports_reset\x00', 0x600042, 0x0) bpf$auto_BPF_LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=@test={r0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x4, 0x8, 0x5, 0x8, 0x7, 0x401, 0x8, 0x0, 0x4}, 0xf3) recvmmsg$auto(r1, 0x0, 0x7fff, 0xc7, 0x0) (async) io_uring_setup$auto(0x6, 0x0) (async) io_uring_enter$auto(0xffffffffffffffff, 0x7, 0x2, 0x10, 0x0, 0xf2a7214) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) (async) sendfile$auto(0x1, 0xffffffffffffffff, 0x0, 0x8fb5) (async) fcntl$auto(0x0, 0x408, 0x100000) (async) close_range$auto(0x2, 0xa, 0x0) (async) socket(0x18, 0xa, 0x1) (async) socket(0xa, 0x2, 0x0) (async) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/hung_task_check_interval_secs\x00', 0x88542, 0x0) 3.287264648s ago: executing program 4 (id=2255): mmap$auto(0x3, 0x40009, 0xe3, 0x9b72, 0xffffffffffffffff, 0x28000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r0 = socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(r0, 0x0, 0x18, 0xfffffff8, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x801, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r1 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000600), 0x142, 0x0) writev$auto(r1, &(0x7f0000000c00)={0x0, 0x7}, 0x4) r2 = socket(0xa, 0x3, 0x5) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/kernel/perf_event_max_stack\x00', 0x357462, 0x0) write$auto(r3, &(0x7f0000000340)='q9 \x04\xa6\xfc8\xa8Y\xf6V\xdb\xd3\xa8\x9f\a\xeb\xaf\xd1a\xa5Xgb6\xf6\xcdm\x85\xa9[\xd0;\xd2\xba\xde,-\xeb\x82\xae\xb4\xbcS\tF\x91\xef_p\xf4\x13\xa4`\xdf\xe76\x1fh\x9c\x93\xc1y\xe9\x81\x8b\x84\x1b\xb56\x8f\xf8\xee\xde=\xeb/\x90Ic\xfa\xd9\x99\xce4_jP\xa7e\xfd\xee\xaaJ\xf1y\xa9\xa2\xb9\xd8\x83\x9b\xb1\x00\x93\x93Ex\x15\x83\xe0g\xa0\t\x13\x93\xc0\xee\x1f\xfb#\x9f\xfd\x86\xe9q\xb9\"1\x1a\x15\xb8~\x89\xa28\x19\xaf\xf9\xbfy\xd5\xf0\x99\x1f\x98\xfdy\xbf\x83\x05\f\xd9\xa9\xfcZ\xbd3\vP<_\x99\xb8\xd7\x037\x12V\xca\x15q\x11<\x03\x9d\x11\xd4\xd8\x1d2\x9a\'\xe0\x15\x8d\xa6\x89@\xc9R\xb9\x83\xaa+,\xcd\xfdU\xc9\x9d\xea\x8a\xca\x9c\xb4\x16\xa6(\x9f\xbf\t\x81f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) timer_create$auto(0x3, 0x0, &(0x7f0000000280)=0x6) timer_gettime$auto(0x0, &(0x7f0000001f80)={{0x9, 0x100000001}, {0x9f9a, 0x401}}) sched_setattr$auto(0x0, 0x0, 0x7b) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) madvise$auto(0x0, 0xffffffffffff0005, 0x19) timer_gettime$auto(0x4, &(0x7f0000000040)={{0x12cd, 0x7}, {0xdf, 0x7}}) ioctl$auto_IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) 2.868431536s ago: executing program 0 (id=2257): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8004) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) shmctl$auto_SHM_STAT(0x80000000, 0xd, 0x0) unshare$auto(0x8000400) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x80802, 0x0) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) r0 = socket(0x10, 0x5, 0x80000) r1 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000580)='\t\x00\x00\x00\x00\x00\x00\x00io1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C\xc4\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7@=\xae\x02\xcdlD\x97)}\xfaK\xdf>f\xb8&\x959\x03\x0f\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfa\x04\x00\x00\x00\x95k8\x83\xcf\xc5D\xcc\xe6\xdb\x8c\xf1\xb0\xcb\xce\x87eR\x12i\x99\f\x15\xe0\xbf%_-\x06*ghP\x124\xc07-\xb65}\xfa\r\x0f\xb3S\xfb\xe3\xe0\xee\xa2\x03\xcd\xf1G\xea!\xbd\xf5\x94\xb7q\xa4\x84\x95\xaf\xb0]\xe59\xe0\xc1\xee\xc1\xff)\xfb\xfb\xb71\xaf\xdd\xde\xfe\xcb\xc1\x19\xd4\x05\x1d\xebW\rK-x\x1d`\xc7j[\xc7\xe78\xdeZ\xfa\xe8\v\xfd\xf8\xa41L\xfd\xf5O\xf6\xa59f\x03rwd\v0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x30, r5, 0xd0d58b333228212f, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [@typed={0x8, 0x14b, 0x0, 0x0, @fd}, @typed={0x8, 0x11c, 0x0, 0x0, @pid}]}]}, 0x30}}, 0x4000000) write$auto_proc_mem_operations_base(r3, &(0x7f0000001680)="a7", 0x80047) 2.733769089s ago: executing program 1 (id=2258): r0 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$auto_UBI_IOCATT(r0, 0x40186f40, &(0x7f0000000080)={0x80000000, 0x3, 0xa63e, 0x8, 0x0, 0x3}) close_range$auto(0x2, 0x8, 0x0) r1 = open$dir(&(0x7f00000001c0)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5/file0\x00', 0x802, 0x0) openat2$auto(r1, &(0x7f00000004c0)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5\x00', &(0x7f00000002c0)={0x10000, 0x3, 0x7}, 0x7) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff98, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000894}, 0x20044000) r2 = bpf$auto(0x0, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xffff, 0xfffff0b6, 0xffff, 0x84, 0xac1, 0x2, 0x36242398, 0xfffff5b2, 0x3bb, 0x8000007, 0xffff, 0x6, 0x81, 0x68198}, 0x6f3) rt_tgsigqueueinfo$auto(0x3, 0x96, 0x803, &(0x7f0000000180)={@siginfo_0_0={0x8, 0x7, 0x8000, @_sigpoll={0x8000000000000000, r2}}}) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000340)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x0, 0x0, 0x0, 0x9}, 0x1007}, 0x3, 0x0) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x1f40) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/rt_acct\x00', 0x840, 0x0) mknod$auto(&(0x7f00000003c0)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5', 0x20e9, 0x103) truncate$auto(&(0x7f00000000c0)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5\x00', 0x6) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f00000000c0)={0x0, 0xffffffff}, 0x6) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/net\x00') socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) shutdown$auto(0x200000003, 0x2) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x11b, 0x7ff}, 0xc, &(0x7f00000000c0)={0x3, 0x7f}, 0x0, 0x8) ioprio_set$auto(0x2, 0x800000000, 0x8) 2.489496922s ago: executing program 0 (id=2259): mmap$auto(0x0, 0x22020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000) write$auto(r0, 0x0, 0x2) getrlimit$auto(0x3, 0x0) fdatasync$auto(r0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) ioctl$auto_BLKZEROOUT(r1, 0x127f, 0x0) r2 = getegid() r3 = setfsgid$auto(0xee01) r4 = getgid() setregid$auto(0x0, r4) setresgid$auto(r2, r3, r4) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/controlC2\x00', 0x400, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/035/001\x00', 0x1102, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ea182, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) eventfd$auto(0x3) select$auto(0xf, 0x0, &(0x7f0000002400)={[0x1, 0x400, 0x0, 0x8, 0x80000001, 0xe0d3, 0x4, 0x17c750d60, 0xfffffffffffffac1, 0x6, 0x8000, 0x8000000000000000, 0x0, 0x0, 0x2, 0x24f]}, &(0x7f0000002480)={[0xf, 0x5, 0x8, 0x4, 0x6, 0xffffffffffffff7a, 0x8, 0x45f6c183, 0xffff, 0x3, 0x3, 0x8, 0x8000, 0x2, 0x8000000000000001, 0xfffffffffffffffc]}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_dma_heap_fops_dma_heap(0xffffffffffffffff, 0xffffffffffdffe00, &(0x7f0000000140)) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 2.280987745s ago: executing program 2 (id=2260): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0) lsm_list_modules$auto(0x0, &(0x7f0000000100)=0xbefc, 0x0) ioctl$auto(0x3, 0x3b83, 0x38) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000040)='/dev/media1\x00', 0x28202, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) fsopen$auto(0x0, 0x1) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x800, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtd0ro\x00', 0x28082, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_clone3(&(0x7f0000000640)={0x108000, 0x0, 0x0, 0x0, {0x15}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0x8}) ioctl$auto_UI_DEV_CREATE(r1, 0x5501, 0x0) writev$auto(r1, &(0x7f0000000340)={&(0x7f00000002c0), 0xda7e}, 0x9) 2.149814465s ago: executing program 1 (id=2261): r0 = socket(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd70006bfa9ed2fedbdf2544"], 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x20000800) (fail_nth: 5) 1.374174603s ago: executing program 4 (id=2262): r0 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/lu_gp_id\x00', 0x4000, 0x0) fsetxattr$auto(r0, &(0x7f0000000200)='*,{:}{{*\x00', 0x0, 0x100, 0x8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x109800, 0x0) r1 = prctl$auto(0x3e, 0x8, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x6, 0x8, 0x80000000000001ff, 0x7c9, 0x2a, 0x4909b6f6, 0x1ffe0, 0x7, 0x3, 0x20000009, 0x9, 0x3, 0x4, 0xffffffffffffffff, 0x68d, 0x9, 0x8000, 0x7bffffff, 0x80, 0x3, 0x95d, 0xa, 0x22000, 0x1fe, 0xffffff28, 0x84, 0xfffffffffffffffe, 0x2, 0x0, 0x0, 0x0, [0x4, 0x101, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x1000000001, 0x0, 0x0, 0xfff7fffffffffffe, 0xffffffffffffffff, 0x6, 0xfffffffffffffff5, 0x0, 0x0, 0x80000, 0x800, 0xffff, 0x10, 0x0, 0x8, 0x10000, 0x0, 0x0, 0x2, 0x6, 0xbdcc, 0x4, 0xfffffffffffffffe]}, 0x1fe, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20000008}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x8000) socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bpf$auto_BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=@bpf_attr_3={0x2b, 0xffff, 0x100000001, 0x5, 0x9, 0x21, 0x4, 0x8, 0xd, "9cb752c613de1e128a360e822228879b", 0x0, 0xd0, 0xffffffffffffffff, 0x200, 0x0, 0x3, 0x8, 0x9, 0x6, 0x2, @attach_prog_fd, 0x3, 0x3, 0x5b, 0x6, 0x4}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/adsp1\x00', 0x2042, 0x0) ioctl$auto_SNDCTL_DSP_SETDUPLEX(r2, 0x5016, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r3 = open(0x0, 0x161342, 0x361ba56a4df42694) setdomainname$auto(0x0, 0x7) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r3, &(0x7f0000000000)='\x91\x02', 0x5) unshare$auto(0x40000080) mremap$auto(0x200000000000, 0x40000000004, 0x4, 0x3, 0x100000000) close_range$auto(0x2, 0x8, 0x0) r4 = memfd_create$auto(0x0, 0x0) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r5, &(0x7f0000000180)='\x05\x00\x00\x00', 0x80000005) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000001c0), r4) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x40045}, 0x0) 1.345428527s ago: executing program 0 (id=2263): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(r0, 0x0, 0x410000, 0x0, 0x0) ioctl$auto_BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000500)={0x40a, 0x3, 0x3ac, 0x8, {0x1, 0x4, 0xb, 0x3, 0x8, 0x4, 0x9, 0x2, 0xe, 0xa5, 0x1, 0x4, 0x0, 0xf, 0xff}}) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) keyctl$auto(0x1d, 0xffffffffffffffff, 0x8, 0x5, 0x8) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), r1) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14001afebf243875f4e7480a42d3d65c80c500", @ANYRES16=r2, @ANYBLOB="1b0026bd7000fbdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/hugetlb.1GB.rsvd.failcnt\x00', 0x80302, 0x0) sendfile$auto(r3, r3, 0x0, 0x3) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) read$auto_ctl_device_fops_user(r1, &(0x7f0000000100)=""/153, 0x99) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = socket(0x2, 0x1, 0x0) bpf$auto_BPF_OBJ_GET_INFO_BY_FD(0xf, &(0x7f00000002c0)=@test={r4, 0x0, 0x856, 0x189, 0x8, 0x7fff, 0x7fff, 0x10000, 0xc91a, 0x7, 0x5, 0x3, 0x3, 0x3, 0x6}, 0x1) mmap$auto(0x0, 0xa00006, 0x400002, 0x40ed0, r3, 0x300000000000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) sendmsg$auto_ETHTOOL_MSG_PSE_SET(0xffffffffffffffff, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) write$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000001680)="a7", 0x80000) 1.277877284s ago: executing program 2 (id=2264): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/oom_adj\x00', 0x980, 0x0) ioctl$auto_XFS_IOC_ERROR_CLEARALL(0xffffffffffffffff, 0x40085875, &(0x7f00000000c0)={r0, 0x965fcb30}) read$auto(r1, 0x0, 0x4) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) pwritev2$auto(r3, &(0x7f0000000280)={0x0, 0x2}, 0x7, 0xfde, 0x5, 0x5) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x450882, 0x0) ioctl$auto_TUNSETVNETHDRSZ2(r4, 0x400454d8, &(0x7f0000000080)=0x4) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$auto(0x0, 0xc87, 0x5, 0xeb2, 0xffffffffffffffff, 0x1008000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x3, 0xff) r5 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r5, 0xaf01, 0x5) ioctl$auto(r5, 0x4008af03, 0x0) ioctl$auto_VHOST_NET_SET_BACKEND(r5, 0x4008af30, 0x0) unshare$auto(0x6c000000) 1.020419712s ago: executing program 1 (id=2265): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) kexec_load$auto(0x6, 0x10000, &(0x7f0000000080)={@kbuf=&(0x7f0000000040)="643e280012569497030d6ee5957d37673b5c96fa620b371bbdd70d6a11c8560185", 0x7, 0x3b, 0x6}, 0x401) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) close_range$auto(0x2, 0x8, 0x0) bind$auto(0x3, 0x0, 0x6a) r0 = io_uring_setup$auto(0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = memfd_create$auto(0x0, 0xe) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) r3 = fcntl$auto(r2, 0x400, 0x1) truncate$auto(&(0x7f0000000080)='./file0\x00', 0x7f) close_range$auto(0x2, 0x8, 0x0) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), r1) r5 = socket(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r6}, 0x6a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'caif0\x00', 0x0}) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep$auto(0xb, 0xa000001c, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r8, 0x405c5503, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syzkaller1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth1_to_batadv\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'vlan1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_MODULE_SET(r3, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0xf4, r4, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_MODULE_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x80}]}, @ETHTOOL_A_MODULE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @ETHTOOL_A_MODULE_POWER_MODE_POLICY={0x5, 0x2, 0x2}, @ETHTOOL_A_MODULE_POWER_MODE_POLICY={0x5, 0x2, 0x4}, @ETHTOOL_A_MODULE_POWER_MODE_POLICY={0x5, 0x2, 0xff}]}, 0xf4}}, 0x8000) pipe$auto(0x0) 856.040137ms ago: executing program 4 (id=2266): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002640)='/sys/kernel/debug/tracing/set_event_pid\x00', 0x2002, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/buffer_size_kb\x00', 0x40, 0x0) r0 = gettid() rt_sigqueueinfo$auto(r0, 0x10, &(0x7f0000000000)={@siginfo_0_0={0x7, 0x7, 0xfffffffa, @_rt={r0, 0x0, @sival_ptr=0x0}}}) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000000000)=ANY=[@ANYBLOB="b10000", @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x4000800) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x100, 0x0) ioctl$auto(r1, 0x64cb, 0xffffffffffffffff) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy0/misc\x00', 0x20a40, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0xffff7fff, 0x4, 0x80000001, 0x0) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x2, 0x88) getsockopt$auto_SO_RXQ_OVFL(r2, 0x6, 0x28, &(0x7f0000000000)='batadv\x00', &(0x7f0000000080)) r3 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2, 0x200800, 0xffffffff, 0xfffffffb}, "0dd7fd004929347eeeccdf0732f77b1f6de0d6d51768a257a97ca5e9ca6310ea"}) ioctl$auto_SNDRV_TIMER_IOCTL_STATUS64(r3, 0x80605414, &(0x7f0000000000)={0x6, 0x3, 0x200, 0xba44, 0x2, 0xb, "e00026e8fdffdbcd2c02d3c293faa80c2f5336d79fc5b8202cb37f6b6d22c42432352deb58e78afdbae70400"}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0x20000000000e31, 0x40000000000a5, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) madvise$auto(0x0, 0xffffffffffff0006, 0x17) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) mmap$auto(0x1, 0x8d4, 0x6, 0x6f52, 0xffffffffffffffff, 0x8000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bond0\x00'}) 618.468357ms ago: executing program 2 (id=2267): r0 = socket(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r1, @ANYRES16=r0, @ANYBLOB="01002bbd70006bfa9ed2fedbdf2544"], 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x20000800) 406.066476ms ago: executing program 0 (id=2268): mmap$auto(0x200, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x8, 0x4020008, 0x9, 0x40000eb0, 0x401, 0x10000000008000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x202000c, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x29, 0x2, 0x0) ioctl$auto(0x3, 0x89e0, 0x91) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004811}, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1ff, 0x5, 0x21, 0x4909b6f5, 0x401, 0x7, 0x3, 0x9, 0x6, 0x3, 0x4, 0x2, 0xb4, 0x9, 0x208, 0x10003, 0x80, 0x80000000003, 0x80, 0x404, 0x22000, 0x204, 0x7, 0x84, 0x0, 0x9, 0xfffbffff, 0x0, 0x0, [0x17f5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e4, 0x1f, 0x0, 0x2, 0x100000000000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x6, 0x2, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000]}, 0x3, 0xd) openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000300), 0x841, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='^\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) write$auto(0xffffffffffffffff, 0x0, 0x4) mount$auto(0x0, 0x0, 0x0, 0x7, 0x0) close_range$auto(r0, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) mprotect$auto(0x110c230000, 0x1, 0x2) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) socketpair$auto(0x3, 0x5, 0x7, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x1a1000, 0x0) ioctl$auto_PROCMAP_QUERY(r1, 0xc0686611, &(0x7f0000000080)={0x67, 0x0, 0x7fff, 0x5, 0x80000000007, 0x1, 0x80000001, 0xff, 0x5, 0x7, 0xfbfffffe, 0x5, 0x7fb, 0x7, 0x9}) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = socket(0x1e, 0x1, 0x0) syncfs$auto(r2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x22c02, 0x0) sendmsg$auto_NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x40004) 384.42446ms ago: executing program 2 (id=2269): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x42, 0x0) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) ioctl$auto_USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000540)={0xfff, &(0x7f0000000180)="f2e37aa851f172bd24308737938225756749a2cd058f981d81224e731c1514b4fd0290f2fb02e666a68c1d72ad5615b16c73b5c0cedf17801dfece4a243f6e3a47ecc1c5db92b3500cefe0e7c269c25cd32701679442d287388dedeedd83d20b9d079d0a971a993bfa4a4499f8631caa1722a7a93bf39c2535ea752a9b05e21efeebdeaa71269153bdd6ba4fac9b230a6653e8cbaf66e11ea7c105"}) rseq$auto(0x0, 0x80100002, 0x3, 0xfa) socket(0x15, 0x5, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0xca, 0x0, 0x2d9) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) semctl$auto_SETVAL(0x2, 0x5, 0x10, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x112) rt_sigsuspend$auto(0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto_EVIOCGMASK(r1, 0x80104592, &(0x7f0000000000)={0x2000, 0x800004, 0x105}) ioctl$auto(0x3, 0x80004509, 0x10000000000402) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x50a81, 0x0) io_uring_setup$auto(0x0, 0x0) 0s ago: executing program 1 (id=2270): r0 = socket(0x11, 0x80003, 0x300) mmap$auto(0x4, 0x9, 0x388, 0xeb1, 0x401, 0x8000) openat$auto_rfcomm_dlc_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0) r1 = epoll_create$auto(0x4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) socket(0x1d, 0x3, 0x106) r2 = pidfd_getfd$auto(0xffffffffffffffff, r1, 0x10000) listen$auto(r2, 0x2) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0xa, 0x0, 0x0) r4 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) ioctl$auto(r4, 0x4018620d, 0x9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3b, 0x0, 0x948b, 0x3, 0x95f4da0a, 0x10, 0x3, 0x62, 0x80000001, 0xf08f, 0x6d3f, 0x9, 0x8, 0xfffffffffffffffe]}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_TIOCSPGRP2(r2, 0x5410, &(0x7f00000000c0)="ac2cb364f04e3b0f58ddeb858503145768061960533d4c76d5ba8dad4b4f0c2f40735a7c6bffbdd31c253cf7cf0c7bc5579bb29c13b0256a7c5ba6b3be780258d5318726516f4451099812ea57d0ccfbab919453ced90da859a40b") syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002ec0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002f80)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x24000802) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/icmp\x00', 0x42500, 0x0) r7 = socket(0x2, 0x2, 0x1) sendto$auto(r7, 0x0, 0xf, 0xfffffff8, 0x0, 0x1c) read$auto_proc_reg_file_ops_compat_inode(r6, &(0x7f0000001080)=""/244, 0xf4) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) listmount$auto(&(0x7f0000000080)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x8}, 0x0, 0xf4240, 0x1) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto_PTRACE_SETREGSET(0x4205, r8, 0x1, 0x9) setsockopt$auto(r0, 0x107, 0xf, 0x0, 0x6) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000440)="5631a018d2729b0f92aeed401357c44b2c12dc875f034fd3a4eb7b76cd2afa020eacd843a014c50f9aec86ce9d3574ba83ad1676bd6a0b25e3576c2a84fb89a70183e46789e629ac94701212b87a5da5fb8be50812d23b3fda624c4ad6eb005636948dee162fcacc723ae24bd5ff5bb817b225dd94bfbea84ac966d48ac9d5e024af2cb274a27869e34574aaca32fa4c0e23ebb7b840fdbe9448b768a5ff96c769dffe05119505db6694bdfa54b3962492fdd46fb1d426eb3cada24a3697ee9a2bfad515b63433a13f84c851ae82c3b906084de1ccaaf68adfe8b602d2c4fa0aaab629d1588644e496ba33ce5351aa326fd153df4fbeb8c41f57ae3495bf4162b1d3de086f2bc14a4fda521adcd69ea39b915bf088d23f1174f586116e4cd7f02301cff5ce07d970d8005dad184e0f924c378c512de9", 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x7}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x4, 0x100) kernel console output (not intermixed with test programs): d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.064166][T15016] RSP: 002b:00007f05a52f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 543.064181][T15016] RAX: ffffffffffffffda RBX: 00007f05a4615fa0 RCX: 00007f05a439c799 [ 543.064191][T15016] RDX: 0000000000000007 RSI: 00000000003fffff RDI: 0000000000012000 [ 543.064201][T15016] RBP: 00007f05a4432c99 R08: 00000000000000dd R09: 0000000000000000 [ 543.064211][T15016] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 543.064220][T15016] R13: 00007f05a4616038 R14: 00007f05a4615fa0 R15: 00007ffce585ed18 [ 543.064241][T15016] [ 543.065418][T15016] kcov: kcov: vm_insert_page() failed [ 543.548562][ T30] audit: type=1800 audit(60876.030:29): pid=15020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1757" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 544.205822][T15042] binder: 15039:15042 ioctl 4018620d 9 returned -22 [ 544.342330][T15049] FAULT_INJECTION: forcing a failure. [ 544.342330][T15049] name fail_futex, interval 1, probability 0, space 0, times 0 [ 544.431466][T15049] CPU: 0 UID: 0 PID: 15049 Comm: syz.2.1764 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 544.431498][T15049] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 544.431506][T15049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 544.431515][T15049] Call Trace: [ 544.431520][T15049] [ 544.431526][T15049] dump_stack_lvl+0x100/0x190 [ 544.431553][T15049] should_fail_ex.cold+0x5/0xa [ 544.431572][T15049] get_futex_key+0x1d2/0x1620 [ 544.431593][T15049] ? __pfx_get_futex_key+0x10/0x10 [ 544.431617][T15049] futex_wake+0xea/0x530 [ 544.431647][T15049] ? __pfx_futex_wake+0x10/0x10 [ 544.431669][T15049] ? __call_rcu_common.constprop.0+0x3f0/0x9b0 [ 544.431697][T15049] do_futex+0x32b/0x350 [ 544.431716][T15049] ? __pfx_do_futex+0x10/0x10 [ 544.431736][T15049] ? __pfx___might_resched+0x10/0x10 [ 544.431757][T15049] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 544.431870][T15049] __x64_sys_futex+0x34f/0x4d0 [ 544.431891][T15049] ? __pfx_task_work_run+0x10/0x10 [ 544.431912][T15049] ? __pfx___x64_sys_futex+0x10/0x10 [ 544.431932][T15049] ? exit_to_user_mode_loop+0xdd/0x4a0 [ 544.431956][T15049] do_syscall_64+0x106/0xf80 [ 544.431974][T15049] ? clear_bhb_loop+0x40/0x90 [ 544.431992][T15049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.432007][T15049] RIP: 0033:0x7f05a439c799 [ 544.432021][T15049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 544.432036][T15049] RSP: 002b:00007f05a52d70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 544.432050][T15049] RAX: ffffffffffffffda RBX: 00007f05a4616098 RCX: 00007f05a439c799 [ 544.432060][T15049] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f05a461609c [ 544.432070][T15049] RBP: 00007f05a4616090 R08: 0000000000000000 R09: 0000000000000000 [ 544.432079][T15049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 544.432088][T15049] R13: 00007f05a4616128 R14: 00007ffce585ec30 R15: 00007ffce585ed18 [ 544.432108][T15049] [ 545.062129][T15053] can: request_module (can-proto-0) failed. [ 545.079619][ T9175] Bluetooth: hci4: unexpected event 0x03 length: 123 > 11 [ 545.079807][T15058] nfsd: Unknown parameter '*' [ 546.021484][ T30] audit: type=1800 audit(60878.590:30): pid=15080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1771" name="dbroot" dev="configfs" ino=60405 res=0 errno=0 [ 546.222792][T15076] zswap: compressor not available [ 546.514798][T15075] zswap: compressor not available [ 546.887723][T15094] FAULT_INJECTION: forcing a failure. [ 546.887723][T15094] name failslab, interval 1, probability 0, space 0, times 0 [ 546.963513][T15094] CPU: 0 UID: 0 PID: 15094 Comm: syz.0.1772 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 546.963544][T15094] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 546.963551][T15094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 546.963560][T15094] Call Trace: [ 546.963566][T15094] [ 546.963572][T15094] dump_stack_lvl+0x100/0x190 [ 546.963599][T15094] should_fail_ex.cold+0x5/0xa [ 546.963619][T15094] should_failslab+0xc2/0x120 [ 546.963634][T15094] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 546.963657][T15094] ? __d_alloc+0x34/0xa80 [ 546.963677][T15094] __d_alloc+0x34/0xa80 [ 546.963695][T15094] d_alloc_parallel+0x111/0x14e0 [ 546.963721][T15094] ? find_held_lock+0x2b/0x80 [ 546.963735][T15094] ? __d_lookup+0x25c/0x4a0 [ 546.963754][T15094] ? __pfx_d_alloc_parallel+0x10/0x10 [ 546.963776][T15094] ? __d_lookup+0x266/0x4a0 [ 546.963800][T15094] lookup_open.isra.0+0x57c/0x11b0 [ 546.963826][T15094] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 546.963858][T15094] ? mnt_get_write_access+0x1e9/0x2f0 [ 546.963880][T15094] path_openat+0xa98/0x31a0 [ 546.963902][T15094] ? __pfx_path_openat+0x10/0x10 [ 546.963924][T15094] do_file_open+0x20e/0x430 [ 546.963940][T15094] ? __pfx_do_file_open+0x10/0x10 [ 546.963962][T15094] ? __pfx_kfree_link+0x10/0x10 [ 546.963987][T15094] ? alloc_fd+0x476/0x790 [ 546.964003][T15094] ? do_getname+0x191/0x390 [ 546.964023][T15094] do_sys_openat2+0x10d/0x1e0 [ 546.964041][T15094] ? __pfx_do_sys_openat2+0x10/0x10 [ 546.964062][T15094] ? ksys_semctl.constprop.0+0x14e/0x2e0 [ 546.964162][T15094] __x64_sys_openat+0x12d/0x210 [ 546.964182][T15094] ? __pfx___x64_sys_openat+0x10/0x10 [ 546.964210][T15094] do_syscall_64+0x106/0xf80 [ 546.964228][T15094] ? clear_bhb_loop+0x40/0x90 [ 546.964247][T15094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.964262][T15094] RIP: 0033:0x7fc478f5cfce [ 546.964275][T15094] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 546.964290][T15094] RSP: 002b:00007fc479de6ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 546.964305][T15094] RAX: ffffffffffffffda RBX: 00007fc479de76c0 RCX: 00007fc478f5cfce [ 546.964315][T15094] RDX: 0000000000000002 RSI: 00007fc479de6f90 RDI: ffffffffffffff9c [ 546.964325][T15094] RBP: 00007fc479032c99 R08: 0000000000000000 R09: 0000000000000000 [ 546.964334][T15094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 546.964343][T15094] R13: 00007fc479216128 R14: 00007fc479216090 R15: 00007ffefb7865c8 [ 546.964363][T15094] [ 549.275330][T15144] FAULT_INJECTION: forcing a failure. [ 549.275330][T15144] name failslab, interval 1, probability 0, space 0, times 0 [ 549.465859][T15144] CPU: 0 UID: 0 PID: 15144 Comm: syz.2.1783 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 549.465889][T15144] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 549.465895][T15144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 549.465904][T15144] Call Trace: [ 549.465909][T15144] [ 549.465915][T15144] dump_stack_lvl+0x100/0x190 [ 549.465946][T15144] should_fail_ex.cold+0x5/0xa [ 549.465964][T15144] should_failslab+0xc2/0x120 [ 549.465980][T15144] __kmalloc_cache_noprof+0x7a/0x6f0 [ 549.466000][T15144] ? alloc_pipe_info+0x10e/0x590 [ 549.466015][T15144] ? find_held_lock+0x2b/0x80 [ 549.466032][T15144] alloc_pipe_info+0x10e/0x590 [ 549.466050][T15144] splice_direct_to_actor+0x78f/0xa30 [ 549.466065][T15144] ? __lock_acquire+0x4a5/0x2630 [ 549.466083][T15144] ? __pfx_direct_splice_actor+0x10/0x10 [ 549.466107][T15144] ? __pfx_aa_file_perm+0x10/0x10 [ 549.466197][T15144] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 549.466217][T15144] do_splice_direct+0x174/0x240 [ 549.466232][T15144] ? __pfx_do_splice_direct+0x10/0x10 [ 549.466247][T15144] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 549.466273][T15144] ? rw_verify_area+0xce/0x6d0 [ 549.466295][T15144] do_sendfile+0xadc/0xe20 [ 549.466320][T15144] ? __pfx_do_sendfile+0x10/0x10 [ 549.466342][T15144] ? __fget_files+0x21f/0x3d0 [ 549.466360][T15144] __x64_sys_sendfile64+0x1d8/0x220 [ 549.466375][T15144] ? ksys_write+0x1ac/0x250 [ 549.466388][T15144] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 549.466410][T15144] do_syscall_64+0x106/0xf80 [ 549.466428][T15144] ? clear_bhb_loop+0x40/0x90 [ 549.466445][T15144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.466460][T15144] RIP: 0033:0x7f05a439c799 [ 549.466473][T15144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 549.466487][T15144] RSP: 002b:00007f05a52d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 549.466502][T15144] RAX: ffffffffffffffda RBX: 00007f05a4616090 RCX: 00007f05a439c799 [ 549.466511][T15144] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 549.466520][T15144] RBP: 00007f05a52d7090 R08: 0000000000000000 R09: 0000000000000000 [ 549.466528][T15144] R10: 0000000000000c01 R11: 0000000000000246 R12: 0000000000000001 [ 549.466537][T15144] R13: 00007f05a4616128 R14: 00007f05a4616090 R15: 00007ffce585ed18 [ 549.466556][T15144] [ 550.152902][ T9175] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 550.462960][T15142] zswap: compressor not available [ 552.180559][T15210] zswap: compressor not available [ 552.295470][T15214] FAULT_INJECTION: forcing a failure. [ 552.295470][T15214] name failslab, interval 1, probability 0, space 0, times 0 [ 552.463114][T15214] CPU: 0 UID: 0 PID: 15214 Comm: syz.2.1800 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 552.463144][T15214] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 552.463151][T15214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 552.463160][T15214] Call Trace: [ 552.463165][T15214] [ 552.463171][T15214] dump_stack_lvl+0x100/0x190 [ 552.463198][T15214] should_fail_ex.cold+0x5/0xa [ 552.463215][T15214] ? alloc_pipe_info+0x1ec/0x590 [ 552.463230][T15214] should_failslab+0xc2/0x120 [ 552.463245][T15214] __kmalloc_noprof+0xe0/0x850 [ 552.463271][T15214] alloc_pipe_info+0x1ec/0x590 [ 552.463287][T15214] splice_direct_to_actor+0x78f/0xa30 [ 552.463304][T15214] ? __lock_acquire+0x4a5/0x2630 [ 552.463321][T15214] ? __pfx_direct_splice_actor+0x10/0x10 [ 552.463346][T15214] ? __pfx_aa_file_perm+0x10/0x10 [ 552.463364][T15214] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 552.463384][T15214] do_splice_direct+0x174/0x240 [ 552.463399][T15214] ? __pfx_do_splice_direct+0x10/0x10 [ 552.463419][T15214] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 552.463446][T15214] ? rw_verify_area+0xce/0x6d0 [ 552.463468][T15214] do_sendfile+0xadc/0xe20 [ 552.463493][T15214] ? __pfx_do_sendfile+0x10/0x10 [ 552.463514][T15214] ? __fget_files+0x21f/0x3d0 [ 552.463533][T15214] __x64_sys_sendfile64+0x1d8/0x220 [ 552.463548][T15214] ? ksys_write+0x1ac/0x250 [ 552.463561][T15214] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 552.463583][T15214] do_syscall_64+0x106/0xf80 [ 552.463600][T15214] ? clear_bhb_loop+0x40/0x90 [ 552.463618][T15214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.463633][T15214] RIP: 0033:0x7f05a439c799 [ 552.463646][T15214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 552.463659][T15214] RSP: 002b:00007f05a52f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 552.463673][T15214] RAX: ffffffffffffffda RBX: 00007f05a4615fa0 RCX: 00007f05a439c799 [ 552.463683][T15214] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 552.463691][T15214] RBP: 00007f05a52f8090 R08: 0000000000000000 R09: 0000000000000000 [ 552.463699][T15214] R10: 0000000000000c01 R11: 0000000000000246 R12: 0000000000000001 [ 552.463708][T15214] R13: 00007f05a4616038 R14: 00007f05a4615fa0 R15: 00007ffce585ed18 [ 552.463726][T15214] [ 553.228859][T15234] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 553.228985][T15234] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 553.229078][T15234] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 553.229113][T15234] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 553.229205][T15234] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 553.852558][T15220] zswap: compressor not available [ 553.896993][T15258] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 554.002041][T15239] zswap: compressor not available [ 554.017061][T15243] zswap: compressor not available [ 554.331510][T15268] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1809'. [ 554.467302][T15269] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1809'. [ 555.039399][T15282] futex_wake_op: syz.2.1812 tries to shift op by -2048; fix this program [ 555.159691][T15282] futex_wake_op: syz.2.1812 tries to shift op by -2048; fix this program [ 555.329335][ T9092] Bluetooth: hci4: command 0x0c1a tx timeout [ 555.336285][ T9092] Bluetooth: hci3: command 0x0406 tx timeout [ 555.342413][ T9092] Bluetooth: hci1: command 0x0406 tx timeout [ 555.349594][ T9092] Bluetooth: hci0: command 0x0406 tx timeout [ 556.187368][T15309] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 556.266326][T15309] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 556.357160][T15309] memcg:ffff8880353b4741 [ 556.400259][T15309] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 556.478844][T15309] page_type: f5(slab) [ 556.526058][T15309] raw: 00fff00000000040 ffff88813fe54500 dead000000000100 dead000000000122 [ 556.638661][T15309] raw: 0000000000000000 0000000800040004 00000000f5000000 ffff8880353b4741 [ 556.726639][T15309] head: 00fff00000000040 ffff88813fe54500 dead000000000100 dead000000000122 [ 556.799996][T15309] head: 0000000000000000 0000000800040004 00000000f5000000 ffff8880353b4741 [ 556.871790][T15309] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 556.884104][T15324] FAULT_INJECTION: forcing a failure. [ 556.884104][T15324] name failslab, interval 1, probability 0, space 0, times 0 [ 556.963479][T15309] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 556.995156][T15324] CPU: 0 UID: 0 PID: 15324 Comm: syz.4.1820 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 556.995187][T15324] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 556.995194][T15324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 556.995213][T15324] Call Trace: [ 556.995219][T15324] [ 556.995225][T15324] dump_stack_lvl+0x100/0x190 [ 556.995255][T15324] should_fail_ex.cold+0x5/0xa [ 556.995280][T15324] should_failslab+0xc2/0x120 [ 556.995305][T15324] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 556.995328][T15324] ? __d_alloc+0x34/0xa80 [ 556.995349][T15324] __d_alloc+0x34/0xa80 [ 556.995368][T15324] d_alloc_parallel+0x111/0x14e0 [ 556.995394][T15324] ? find_held_lock+0x2b/0x80 [ 556.995408][T15324] ? __d_lookup+0x25c/0x4a0 [ 556.995427][T15324] ? __pfx_d_alloc_parallel+0x10/0x10 [ 556.995450][T15324] ? __d_lookup+0x266/0x4a0 [ 556.995475][T15324] lookup_open.isra.0+0x57c/0x11b0 [ 556.995501][T15324] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 556.995533][T15324] ? mnt_get_write_access+0x1e9/0x2f0 [ 556.995555][T15324] path_openat+0xa98/0x31a0 [ 556.995577][T15324] ? __pfx_path_openat+0x10/0x10 [ 556.995599][T15324] do_file_open+0x20e/0x430 [ 556.995615][T15324] ? __pfx_do_file_open+0x10/0x10 [ 556.995637][T15324] ? __pfx_kfree_link+0x10/0x10 [ 556.995662][T15324] ? alloc_fd+0x476/0x790 [ 556.995678][T15324] ? do_getname+0x191/0x390 [ 556.995697][T15324] do_sys_openat2+0x10d/0x1e0 [ 556.995716][T15324] ? __pfx_do_sys_openat2+0x10/0x10 [ 556.995736][T15324] ? ksys_semctl.constprop.0+0x14e/0x2e0 [ 556.995764][T15324] __x64_sys_openat+0x12d/0x210 [ 556.995783][T15324] ? __pfx___x64_sys_openat+0x10/0x10 [ 556.995810][T15324] do_syscall_64+0x106/0xf80 [ 556.995827][T15324] ? clear_bhb_loop+0x40/0x90 [ 556.995845][T15324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.995860][T15324] RIP: 0033:0x7fdc9f35cfce [ 556.995873][T15324] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 556.995888][T15324] RSP: 002b:00007fdca019dec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 556.995903][T15324] RAX: ffffffffffffffda RBX: 00007fdca019e6c0 RCX: 00007fdc9f35cfce [ 556.995913][T15324] RDX: 0000000000000002 RSI: 00007fdca019df90 RDI: ffffffffffffff9c [ 556.995922][T15324] RBP: 00007fdc9f432c99 R08: 0000000000000000 R09: 0000000000000000 [ 556.995934][T15324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 556.995943][T15324] R13: 00007fdc9f616128 R14: 00007fdc9f616090 R15: 00007ffe79fd0298 [ 556.995963][T15324] [ 557.618644][T15290] Bluetooth: hci3: command 0x0406 tx timeout [ 558.089184][T15300] Process accounting paused [ 558.141790][T15309] page dumped because: unmovable page [ 558.161917][T15309] page_owner tracks the page as allocated [ 558.181131][T15309] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5822, tgid 5822 (syz-executor), ts 76774353060, free_ts 53688250743 [ 558.262112][T15309] post_alloc_hook+0x153/0x170 [ 558.278253][T15309] get_page_from_freelist+0x111d/0x3140 [ 558.297317][T15309] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 558.322199][T15309] new_slab+0xa6/0x6c0 [ 558.335133][T15309] refill_objects+0x26b/0x400 [ 558.360673][T15309] __pcs_replace_empty_main+0x1ab/0x600 [ 558.385154][T15309] __kvmalloc_node_noprof+0x7da/0xa00 [ 558.408548][T15309] alloc_netdev_mqs+0xd7/0x14f0 [ 558.430904][T15309] __ip_tunnel_create+0x398/0x670 [ 558.449551][T15309] ip_tunnel_init_net+0x230/0x780 [ 558.485638][T15309] ops_init+0x1e2/0x5f0 [ 558.516080][T15309] setup_net+0x118/0x3a0 [ 558.537910][T15309] copy_net_ns+0x46f/0x7c0 [ 558.560381][T15309] create_new_namespaces+0x3ea/0xac0 [ 558.586611][T15309] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 558.617535][T15309] ksys_unshare+0x473/0xad0 [ 558.647365][T15309] page last free pid 5577 tgid 5577 stack trace: [ 558.678288][T15309] __free_frozen_pages+0x7e1/0x10d0 [ 558.714705][T15309] qlist_free_all+0x47/0xe0 [ 558.728431][T15355] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input28 [ 558.747368][T15309] kasan_quarantine_reduce+0x1a0/0x1f0 [ 558.765316][T15309] __kasan_slab_alloc+0x69/0x90 [ 558.784477][T15309] __kmalloc_node_track_caller_noprof+0x2ba/0x850 [ 558.815021][T15309] krealloc_node_align_noprof+0x30a/0x3e0 [ 558.834979][T15309] ima_collect_measurement+0x4c1/0xa40 [ 558.858438][T15309] process_measurement+0xdfe/0x2350 [ 558.889773][T15309] ima_file_check+0xcc/0x120 [ 558.907215][T15309] security_file_post_open+0xc4/0x210 [ 558.926298][T15309] path_openat+0x1418/0x31a0 [ 558.944574][T15309] do_file_open+0x20e/0x430 [ 558.965109][T15309] do_sys_openat2+0x10d/0x1e0 [ 558.988586][T15309] __x64_sys_openat+0x12d/0x210 [ 559.008198][T15309] do_syscall_64+0x106/0xf80 [ 559.029640][T15309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.573979][T15356] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input29 [ 559.802210][T15372] zswap: compressor not available [ 560.907326][T15403] Invalid ELF header magic: != ELF [ 560.932279][T15402] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 560.956051][T15402] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 561.008199][T15402] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 561.045093][T15402] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 561.072298][T15402] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 562.135485][T15433] usb usb37: usbfs: process 15433 (syz.4.1841) did not claim interface 0 before use [ 563.012254][ T9175] Bluetooth: hci3: command 0x0406 tx timeout [ 563.021719][T15290] Bluetooth: hci1: command 0x0406 tx timeout [ 563.029254][T15290] Bluetooth: hci0: command 0x0406 tx timeout [ 563.090280][T15455] Bluetooth: hci4: command 0x0c1a tx timeout [ 563.176745][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.188640][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.088748][T15455] Bluetooth: hci3: command 0x0406 tx timeout [ 566.342832][T15531] Invalid ELF header magic: != ELF [ 569.001345][T15586] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 569.160948][T15588] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(8) [ 569.485584][T15599] nbd: couldn't find a device at index 35644 [ 570.309586][T15622] sd 0:0:1:0: PR command failed: 1026 [ 570.349871][T15623] sd 0:0:1:0: PR command failed: 1026 [ 570.366371][T15622] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 570.404336][T15623] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 570.447377][T15622] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 570.477422][T15623] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 570.860856][T15618] Invalid ELF header magic: != ELF [ 571.861419][ T5864] usb usb40-port2: attempt power cycle [ 572.413928][T15613] kexec: Could not allocate control_code_buffer [ 572.460009][ T5864] usb usb40-port2: unable to enumerate USB device [ 575.643566][T15727] serio: Serial port pty6 [ 576.743038][ T30] audit: type=1804 audit(60909.314:31): pid=15775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1900" name="/newroot/466/file0" dev="tmpfs" ino=2450 res=1 errno=0 [ 576.888798][ T30] audit: type=1804 audit(60909.404:32): pid=15780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1900" name="/newroot/466/file0" dev="tmpfs" ino=2450 res=1 errno=0 [ 578.140604][T15804] bridge_slave_1: left allmulticast mode [ 578.165095][T15804] bridge_slave_1: left promiscuous mode [ 578.189125][T15804] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.549135][T15810] FAULT_INJECTION: forcing a failure. [ 578.549135][T15810] name failslab, interval 1, probability 0, space 0, times 0 [ 578.625074][T15810] CPU: 0 UID: 0 PID: 15810 Comm: syz.4.1909 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 578.625106][T15810] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 578.625113][T15810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 578.625123][T15810] Call Trace: [ 578.625128][T15810] [ 578.625134][T15810] dump_stack_lvl+0x100/0x190 [ 578.625161][T15810] should_fail_ex.cold+0x5/0xa [ 578.625180][T15810] should_failslab+0xc2/0x120 [ 578.625196][T15810] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 578.625217][T15810] ? alloc_empty_file+0x55/0x1c0 [ 578.625234][T15810] ? __pfx_stack_trace_save+0x10/0x10 [ 578.625251][T15810] alloc_empty_file+0x55/0x1c0 [ 578.625269][T15810] path_openat+0xe8/0x31a0 [ 578.625283][T15810] ? kasan_save_stack+0x3f/0x50 [ 578.625304][T15810] ? kasan_save_stack+0x30/0x50 [ 578.625325][T15810] ? kasan_save_track+0x14/0x30 [ 578.625346][T15810] ? __kasan_slab_alloc+0x89/0x90 [ 578.625359][T15810] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 578.625379][T15810] ? do_getname+0x35/0x390 [ 578.625395][T15810] ? do_sys_openat2+0xc5/0x1e0 [ 578.625413][T15810] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.625430][T15810] ? __pfx_path_openat+0x10/0x10 [ 578.625452][T15810] do_file_open+0x20e/0x430 [ 578.625469][T15810] ? __pfx_do_file_open+0x10/0x10 [ 578.625497][T15810] ? alloc_fd+0x476/0x790 [ 578.625513][T15810] ? do_getname+0x191/0x390 [ 578.625531][T15810] do_sys_openat2+0x10d/0x1e0 [ 578.625560][T15810] ? __pfx_do_sys_openat2+0x10/0x10 [ 578.625586][T15810] __x64_sys_openat+0x12d/0x210 [ 578.625606][T15810] ? __pfx___x64_sys_openat+0x10/0x10 [ 578.625634][T15810] do_syscall_64+0x106/0xf80 [ 578.625652][T15810] ? clear_bhb_loop+0x40/0x90 [ 578.625669][T15810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.625685][T15810] RIP: 0033:0x7fdc9f39c799 [ 578.625698][T15810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 578.625713][T15810] RSP: 002b:00007fdca01bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 578.625728][T15810] RAX: ffffffffffffffda RBX: 00007fdc9f615fa0 RCX: 00007fdc9f39c799 [ 578.625738][T15810] RDX: 0000000000080201 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 578.625747][T15810] RBP: 00007fdc9f432c99 R08: 0000000000000000 R09: 0000000000000000 [ 578.625756][T15810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 578.625764][T15810] R13: 00007fdc9f616038 R14: 00007fdc9f615fa0 R15: 00007ffe79fd0298 [ 578.625784][T15810] [ 579.140301][T15812] openvswitch: netlink: Key 15 has unexpected len 16 expected 4 [ 580.237139][T15832] bridge0: port 3(dummy0) entered blocking state [ 580.279758][T15832] bridge0: port 3(dummy0) entered disabled state [ 580.286280][T15832] dummy0: entered allmulticast mode [ 580.337845][T15832] dummy0: entered promiscuous mode [ 580.379061][T15832] bridge0: port 3(dummy0) entered blocking state [ 580.385564][T15832] bridge0: port 3(dummy0) entered forwarding state [ 580.615438][T15845] FAULT_INJECTION: forcing a failure. [ 580.615438][T15845] name failslab, interval 1, probability 0, space 0, times 0 [ 580.698798][T15845] CPU: 0 UID: 0 PID: 15845 Comm: syz.0.1918 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 580.698827][T15845] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 580.698834][T15845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 580.698842][T15845] Call Trace: [ 580.698847][T15845] [ 580.698853][T15845] dump_stack_lvl+0x100/0x190 [ 580.698888][T15845] should_fail_ex.cold+0x5/0xa [ 580.698906][T15845] should_failslab+0xc2/0x120 [ 580.698921][T15845] __kvmalloc_node_noprof+0xfa/0xa00 [ 580.698944][T15845] ? seq_read_iter+0x819/0x1270 [ 580.698971][T15845] seq_read_iter+0x819/0x1270 [ 580.698994][T15845] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 580.699023][T15845] kernfs_fop_read_iter+0x46c/0x610 [ 580.699043][T15845] copy_splice_read+0x4ba/0xb90 [ 580.699072][T15845] ? __pfx_copy_splice_read+0x10/0x10 [ 580.699096][T15845] ? look_up_lock_class+0x64/0x120 [ 580.699119][T15845] ? lockdep_init_map_type+0x5c/0x250 [ 580.699139][T15845] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 580.699163][T15845] ? __pfx_copy_splice_read+0x10/0x10 [ 580.699186][T15845] do_splice_read+0x285/0x370 [ 580.699211][T15845] splice_direct_to_actor+0x2a1/0xa30 [ 580.699227][T15845] ? __pfx_direct_splice_actor+0x10/0x10 [ 580.699254][T15845] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 580.699274][T15845] do_splice_direct+0x174/0x240 [ 580.699289][T15845] ? __pfx_do_splice_direct+0x10/0x10 [ 580.699303][T15845] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 580.699329][T15845] ? rw_verify_area+0xce/0x6d0 [ 580.699352][T15845] do_sendfile+0xadc/0xe20 [ 580.699380][T15845] ? __pfx_do_sendfile+0x10/0x10 [ 580.699402][T15845] ? __fget_files+0x21f/0x3d0 [ 580.699420][T15845] __x64_sys_sendfile64+0x1d8/0x220 [ 580.699436][T15845] ? ksys_write+0x1ac/0x250 [ 580.699449][T15845] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 580.699472][T15845] do_syscall_64+0x106/0xf80 [ 580.699489][T15845] ? clear_bhb_loop+0x40/0x90 [ 580.699507][T15845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.699522][T15845] RIP: 0033:0x7fc478f9c799 [ 580.699535][T15845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 580.699550][T15845] RSP: 002b:00007fc479de7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 580.699565][T15845] RAX: ffffffffffffffda RBX: 00007fc479216090 RCX: 00007fc478f9c799 [ 580.699574][T15845] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 580.699582][T15845] RBP: 00007fc479de7090 R08: 0000000000000000 R09: 0000000000000000 [ 580.699591][T15845] R10: 0000000000000c01 R11: 0000000000000246 R12: 0000000000000001 [ 580.699599][T15845] R13: 00007fc479216128 R14: 00007fc479216090 R15: 00007ffefb7865c8 [ 580.699619][T15845] [ 581.383376][T15840] zswap: compressor not available [ 581.460183][T15856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1920'. [ 581.532815][T15853] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 581.549626][T15853] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 581.579874][T15853] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 581.594757][T15853] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 581.624141][T15853] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 581.950500][T15864] usb usb34: usbfs: process 15864 (syz.0.1921) did not claim interface 2 before use [ 582.062316][T15863] zswap: compressor not available [ 583.527132][T15897] zswap: compressor not available [ 583.547340][T15901] FAULT_INJECTION: forcing a failure. [ 583.547340][T15901] name failslab, interval 1, probability 0, space 0, times 0 [ 583.653176][ T9092] Bluetooth: hci3: command 0x0406 tx timeout [ 583.659629][T15455] Bluetooth: hci1: command 0x0406 tx timeout [ 583.665623][T15455] Bluetooth: hci0: command 0x0406 tx timeout [ 583.728630][ T9092] Bluetooth: hci4: command 0x0c1a tx timeout [ 583.745197][T15901] CPU: 0 UID: 0 PID: 15901 Comm: syz.4.1929 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 583.745233][T15901] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 583.745240][T15901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 583.745249][T15901] Call Trace: [ 583.745256][T15901] [ 583.745262][T15901] dump_stack_lvl+0x100/0x190 [ 583.745290][T15901] should_fail_ex.cold+0x5/0xa [ 583.745307][T15901] ? iter_file_splice_write+0x1d8/0x10a0 [ 583.745322][T15901] should_failslab+0xc2/0x120 [ 583.745337][T15901] __kmalloc_noprof+0xe0/0x850 [ 583.745363][T15901] iter_file_splice_write+0x1d8/0x10a0 [ 583.745377][T15901] ? lockdep_hardirqs_on+0x78/0x100 [ 583.745398][T15901] ? copy_splice_read+0x734/0xb90 [ 583.745420][T15901] ? kfree+0x1f6/0x6b0 [ 583.745443][T15901] ? __pfx_iter_file_splice_write+0x10/0x10 [ 583.745458][T15901] ? __lock_acquire+0x4a5/0x2630 [ 583.745478][T15901] ? __pfx_copy_splice_read+0x10/0x10 [ 583.745512][T15901] ? __pfx_iter_file_splice_write+0x10/0x10 [ 583.745528][T15901] direct_splice_actor+0x192/0x6c0 [ 583.745553][T15901] splice_direct_to_actor+0x345/0xa30 [ 583.745569][T15901] ? __pfx_direct_splice_actor+0x10/0x10 [ 583.745596][T15901] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 583.745617][T15901] do_splice_direct+0x174/0x240 [ 583.745632][T15901] ? __pfx_do_splice_direct+0x10/0x10 [ 583.745647][T15901] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 583.745673][T15901] ? rw_verify_area+0xce/0x6d0 [ 583.745695][T15901] do_sendfile+0xadc/0xe20 [ 583.745721][T15901] ? __pfx_do_sendfile+0x10/0x10 [ 583.745743][T15901] ? __fget_files+0x21f/0x3d0 [ 583.745762][T15901] __x64_sys_sendfile64+0x1d8/0x220 [ 583.745777][T15901] ? ksys_write+0x1ac/0x250 [ 583.745790][T15901] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 583.745812][T15901] do_syscall_64+0x106/0xf80 [ 583.745829][T15901] ? clear_bhb_loop+0x40/0x90 [ 583.745847][T15901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.745869][T15901] RIP: 0033:0x7fdc9f39c799 [ 583.745882][T15901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 583.745896][T15901] RSP: 002b:00007fdca019e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 583.745911][T15901] RAX: ffffffffffffffda RBX: 00007fdc9f616090 RCX: 00007fdc9f39c799 [ 583.745924][T15901] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 583.745935][T15901] RBP: 00007fdca019e090 R08: 0000000000000000 R09: 0000000000000000 [ 583.745944][T15901] R10: 0000000000000c01 R11: 0000000000000246 R12: 0000000000000001 [ 583.745953][T15901] R13: 00007fdc9f616128 R14: 00007fdc9f616090 R15: 00007ffe79fd0298 [ 583.745972][T15901] [ 584.232012][T15909] netlink: 504 bytes leftover after parsing attributes in process `syz.1.1930'. [ 584.241871][T15909] netlink: 350 bytes leftover after parsing attributes in process `syz.1.1930'. [ 584.306314][T15911] mkiss: ax0: crc mode is auto. [ 584.690073][T15927] binder: 15921:15927 ioctl 4018620d 9 returned -22 [ 585.728763][ T9092] Bluetooth: hci3: command 0x0406 tx timeout [ 585.937431][T15950] zswap: compressor not available [ 585.994074][T15954] FAULT_INJECTION: forcing a failure. [ 585.994074][T15954] name failslab, interval 1, probability 0, space 0, times 0 [ 586.051970][T15962] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1943'. [ 586.071685][T15954] CPU: 0 UID: 0 PID: 15954 Comm: syz.2.1941 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 586.071714][T15954] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 586.071721][T15954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 586.071730][T15954] Call Trace: [ 586.071735][T15954] [ 586.071741][T15954] dump_stack_lvl+0x100/0x190 [ 586.071769][T15954] should_fail_ex.cold+0x5/0xa [ 586.071787][T15954] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 586.071806][T15954] should_failslab+0xc2/0x120 [ 586.071821][T15954] __kmalloc_noprof+0xe0/0x850 [ 586.071843][T15954] ? trace_kmalloc+0x101/0x130 [ 586.071860][T15954] kernfs_fop_write_iter+0x26a/0x5f0 [ 586.071878][T15954] iter_file_splice_write+0x830/0x10a0 [ 586.071903][T15954] ? __pfx_iter_file_splice_write+0x10/0x10 [ 586.071922][T15954] ? __pfx_copy_splice_read+0x10/0x10 [ 586.071956][T15954] ? __pfx_iter_file_splice_write+0x10/0x10 [ 586.071971][T15954] direct_splice_actor+0x192/0x6c0 [ 586.071997][T15954] splice_direct_to_actor+0x345/0xa30 [ 586.072013][T15954] ? __pfx_direct_splice_actor+0x10/0x10 [ 586.072039][T15954] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 586.072060][T15954] do_splice_direct+0x174/0x240 [ 586.072074][T15954] ? __pfx_do_splice_direct+0x10/0x10 [ 586.072090][T15954] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 586.072116][T15954] ? rw_verify_area+0xce/0x6d0 [ 586.072138][T15954] do_sendfile+0xadc/0xe20 [ 586.072164][T15954] ? __pfx_do_sendfile+0x10/0x10 [ 586.072185][T15954] ? __fget_files+0x21f/0x3d0 [ 586.072204][T15954] __x64_sys_sendfile64+0x1d8/0x220 [ 586.072219][T15954] ? ksys_write+0x1ac/0x250 [ 586.072232][T15954] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 586.072254][T15954] do_syscall_64+0x106/0xf80 [ 586.072272][T15954] ? clear_bhb_loop+0x40/0x90 [ 586.072289][T15954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.072304][T15954] RIP: 0033:0x7f05a439c799 [ 586.072317][T15954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 586.072332][T15954] RSP: 002b:00007f05a52d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 586.072346][T15954] RAX: ffffffffffffffda RBX: 00007f05a4616090 RCX: 00007f05a439c799 [ 586.072356][T15954] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 586.072364][T15954] RBP: 00007f05a52d7090 R08: 0000000000000000 R09: 0000000000000000 [ 586.072380][T15954] R10: 0000000000000c01 R11: 0000000000000246 R12: 0000000000000001 [ 586.072389][T15954] R13: 00007f05a4616128 R14: 00007f05a4616090 R15: 00007ffce585ed18 [ 586.072408][T15954] [ 586.373413][T15964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1944'. [ 586.495042][T15962] bond0: (slave bond_slave_1): Releasing backup interface [ 586.607747][T15969] openvswitch: netlink: Duplicate or invalid key (type 0). [ 586.930069][T15980] futex_wake_op: syz.2.1949 tries to shift op by -2048; fix this program [ 587.032582][T15985] size and base must be multiples of 4 kiB [ 587.065754][T15985] CPU: 0 UID: 0 PID: 15985 Comm: syz.2.1949 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 587.065784][T15985] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 587.065791][T15985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 587.065801][T15985] Call Trace: [ 587.065806][T15985] [ 587.065812][T15985] dump_stack_lvl+0x100/0x190 [ 587.065839][T15985] mtrr_add.cold+0x74/0x87 [ 587.065864][T15985] mtrr_ioctl+0x25a/0xcf0 [ 587.065910][T15985] ? __pfx_mtrr_ioctl+0x10/0x10 [ 587.065937][T15985] ? __x64_sys_close_range+0x2d9/0x5d0 [ 587.065958][T15985] ? __x64_sys_openat+0x12d/0x210 [ 587.065979][T15985] ? __pfx_mtrr_ioctl+0x10/0x10 [ 587.065998][T15985] proc_reg_unlocked_ioctl+0x229/0x320 [ 587.066019][T15985] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 587.066043][T15985] __x64_sys_ioctl+0x18e/0x210 [ 587.066064][T15985] do_syscall_64+0x106/0xf80 [ 587.066082][T15985] ? clear_bhb_loop+0x40/0x90 [ 587.066100][T15985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.066115][T15985] RIP: 0033:0x7f05a439c799 [ 587.066129][T15985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 587.066143][T15985] RSP: 002b:00007f05a52b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 587.066158][T15985] RAX: ffffffffffffffda RBX: 00007f05a4616180 RCX: 00007f05a439c799 [ 587.066168][T15985] RDX: 0000000000000000 RSI: 0000000040104d01 RDI: 0000000000000000 [ 587.066176][T15985] RBP: 00007f05a4432c99 R08: 0000000000000000 R09: 0000000000000000 [ 587.066185][T15985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 587.066193][T15985] R13: 00007f05a4616218 R14: 00007f05a4616180 R15: 00007ffce585ed18 [ 587.066213][T15985] [ 587.276117][ T30] audit: type=1800 audit(60919.824:33): pid=15988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=65501 res=0 errno=0 [ 587.300920][T15991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1951'. [ 587.309892][T15991] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1951'. [ 587.318886][T15991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1951'. [ 587.442168][T15983] &#$@\]\-: entered promiscuous mode [ 587.628880][T16000] binder: 15997:16000 ioctl 4018620d 9 returned -22 [ 588.583838][T16012] zswap: compressor not available [ 589.094169][T16006] Process accounting resumed [ 589.297303][T16036] vivid-007: ================= START STATUS ================= [ 589.335362][T16036] vivid-007: Generate PTS: true [ 589.385487][T16036] vivid-007: Generate SCR: true [ 589.422528][T16036] tpg source WxH: 320x240 (Y'CbCr) [ 589.454785][T16036] tpg field: 1 [ 589.458195][T16036] tpg crop: (0,0)/320x240 [ 589.513127][T16036] tpg compose: (0,0)/320x240 [ 589.517733][T16036] tpg colorspace: 8 [ 589.561861][T16029] zswap: compressor not available [ 589.570655][T16036] tpg transfer function: 0/0 [ 589.596235][T16036] tpg Y'CbCr encoding: 0/0 [ 589.621838][T16037] FAULT_INJECTION: forcing a failure. [ 589.621838][T16037] name failslab, interval 1, probability 0, space 0, times 0 [ 589.648736][T16036] tpg quantization: 0/0 [ 589.716135][T16036] tpg RGB range: 0/2 [ 589.726443][T16040] WARNING! power/level is deprecated; use power/control instead [ 589.743238][T16036] vivid-007: ================== END STATUS ================== [ 589.779768][T16037] CPU: 0 UID: 0 PID: 16037 Comm: syz.4.1960 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 589.779797][T16037] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 589.779806][T16037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 589.779816][T16037] Call Trace: [ 589.779821][T16037] [ 589.779826][T16037] dump_stack_lvl+0x100/0x190 [ 589.779854][T16037] should_fail_ex.cold+0x5/0xa [ 589.779871][T16037] ? copy_splice_read+0x1a3/0xb90 [ 589.779894][T16037] should_failslab+0xc2/0x120 [ 589.779909][T16037] __kmalloc_noprof+0xe0/0x850 [ 589.779935][T16037] copy_splice_read+0x1a3/0xb90 [ 589.779958][T16037] ? __pfx_iter_file_splice_write+0x10/0x10 [ 589.779976][T16037] ? __pfx_copy_splice_read+0x10/0x10 [ 589.780004][T16037] ? find_held_lock+0x2b/0x80 [ 589.780022][T16037] ? __pfx_copy_splice_read+0x10/0x10 [ 589.780050][T16037] do_splice_read+0x285/0x370 [ 589.780075][T16037] splice_direct_to_actor+0x2a1/0xa30 [ 589.780091][T16037] ? __pfx_direct_splice_actor+0x10/0x10 [ 589.780117][T16037] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 589.780136][T16037] do_splice_direct+0x174/0x240 [ 589.780151][T16037] ? __pfx_do_splice_direct+0x10/0x10 [ 589.780166][T16037] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 589.780192][T16037] ? rw_verify_area+0xce/0x6d0 [ 589.780214][T16037] do_sendfile+0xadc/0xe20 [ 589.780240][T16037] ? __pfx_do_sendfile+0x10/0x10 [ 589.780262][T16037] ? __fget_files+0x21f/0x3d0 [ 589.780280][T16037] __x64_sys_sendfile64+0x1d8/0x220 [ 589.780296][T16037] ? ksys_write+0x1ac/0x250 [ 589.780309][T16037] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 589.780331][T16037] do_syscall_64+0x106/0xf80 [ 589.780349][T16037] ? clear_bhb_loop+0x40/0x90 [ 589.780367][T16037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.780382][T16037] RIP: 0033:0x7fdc9f39c799 [ 589.780395][T16037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 589.780409][T16037] RSP: 002b:00007fdca019e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 589.780423][T16037] RAX: ffffffffffffffda RBX: 00007fdc9f616090 RCX: 00007fdc9f39c799 [ 589.780433][T16037] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 589.780441][T16037] RBP: 00007fdca019e090 R08: 0000000000000000 R09: 0000000000000000 [ 589.780450][T16037] R10: 0000000000000c01 R11: 0000000000000246 R12: 0000000000000001 [ 589.780459][T16037] R13: 00007fdc9f616128 R14: 00007fdc9f616090 R15: 00007ffe79fd0298 [ 589.780478][T16037] [ 590.177661][T16051] FAULT_INJECTION: forcing a failure. [ 590.177661][T16051] name failslab, interval 1, probability 0, space 0, times 0 [ 590.190718][T16051] CPU: 0 UID: 0 PID: 16051 Comm: syz.2.1964 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 590.190748][T16051] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 590.190755][T16051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 590.190765][T16051] Call Trace: [ 590.190772][T16051] [ 590.190779][T16051] dump_stack_lvl+0x100/0x190 [ 590.190807][T16051] should_fail_ex.cold+0x5/0xa [ 590.190826][T16051] ? __register_sysctl_table+0xbe4/0x1650 [ 590.190849][T16051] should_failslab+0xc2/0x120 [ 590.190865][T16051] __kmalloc_noprof+0xe0/0x850 [ 590.190892][T16051] __register_sysctl_table+0xbe4/0x1650 [ 590.190919][T16051] ? __pfx___register_sysctl_table+0x10/0x10 [ 590.190942][T16051] ? is_module_address+0x69/0xf0 [ 590.190960][T16051] ? register_net_sysctl_sz+0x222/0x430 [ 590.191074][T16051] ? __asan_memcpy+0x3c/0x60 [ 590.191097][T16051] smc_sysctl_net_init+0xbb/0x450 [ 590.191169][T16051] ? __pfx_smc_net_init+0x10/0x10 [ 590.191238][T16051] smc_net_init+0x16/0x50 [ 590.191259][T16051] ops_init+0x1e2/0x5f0 [ 590.191282][T16051] setup_net+0x118/0x3a0 [ 590.191301][T16051] ? __pfx_setup_net+0x10/0x10 [ 590.191318][T16051] ? lockdep_init_map_type+0x5c/0x250 [ 590.191338][T16051] ? mutex_init_lockep+0x110/0x150 [ 590.191361][T16051] copy_net_ns+0x46f/0x7c0 [ 590.191383][T16051] create_new_namespaces+0x3ea/0xac0 [ 590.191403][T16051] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 590.191421][T16051] ksys_unshare+0x473/0xad0 [ 590.191440][T16051] ? __pfx_ksys_unshare+0x10/0x10 [ 590.191465][T16051] __x64_sys_unshare+0x31/0x40 [ 590.191483][T16051] do_syscall_64+0x106/0xf80 [ 590.191508][T16051] ? clear_bhb_loop+0x40/0x90 [ 590.191557][T16051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.191577][T16051] RIP: 0033:0x7f05a439c799 [ 590.191595][T16051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 590.191610][T16051] RSP: 002b:00007f05a52f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 590.191625][T16051] RAX: ffffffffffffffda RBX: 00007f05a4615fa0 RCX: 00007f05a439c799 [ 590.191636][T16051] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 590.191645][T16051] RBP: 00007f05a4432c99 R08: 0000000000000000 R09: 0000000000000000 [ 590.191655][T16051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 590.191664][T16051] R13: 00007f05a4616038 R14: 00007f05a4615fa0 R15: 00007ffce585ed18 [ 590.191684][T16051] [ 590.191693][T16051] sysctl could not get directory: /net/smc -12 [ 590.729496][T16056] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 590.778016][T16056] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 590.824869][T16056] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 590.870984][T16056] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 590.926356][T16056] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 590.950402][T16065] binder: 16061:16065 ioctl 4018620d 9 returned -22 [ 591.587819][T16075] zswap: compressor not available [ 592.064877][T16093] futex_wake_op: syz.2.1971 tries to shift op by -2048; fix this program [ 592.117019][T16093] futex_wake_op: syz.2.1971 tries to shift op by -2048; fix this program [ 592.179641][T16093] 0x000000000001-0x000000020000 : "" [ 592.280318][T16093] ftl_cs: FTL header corrupt! [ 592.772210][ T9092] Bluetooth: hci1: command 0x0406 tx timeout [ 592.778263][T15455] Bluetooth: hci0: command 0x0406 tx timeout [ 592.848598][ T9092] Bluetooth: hci3: command 0x0406 tx timeout [ 592.929902][ T9092] Bluetooth: hci4: command 0x0c1a tx timeout [ 593.484745][T16137] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1979'. [ 593.635750][T16141] binder: 16138:16141 ioctl 4018620d 9 returned -22 [ 594.364030][T16153] syz.1.1981: vmalloc error: size 18446744073709551615, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 594.497618][T16153] CPU: 0 UID: 0 PID: 16153 Comm: syz.1.1981 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 594.497654][T16153] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 594.497662][T16153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 594.497677][T16153] Call Trace: [ 594.497683][T16153] [ 594.497691][T16153] dump_stack_lvl+0x100/0x190 [ 594.497723][T16153] warn_alloc.cold+0x95/0x1c1 [ 594.497748][T16153] ? __pfx_warn_alloc+0x10/0x10 [ 594.497771][T16153] ? __lock_acquire+0x4a5/0x2630 [ 594.497803][T16153] __vmalloc_node_range_noprof+0x1252/0x1530 [ 594.497829][T16153] ? rcu_is_watching+0x12/0xc0 [ 594.497851][T16153] ? trace_contention_end+0x140/0x180 [ 594.497871][T16153] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 594.498025][T16153] ? dvb_dvr_do_ioctl+0x7e/0x270 [ 594.498052][T16153] ? tomoyo_path_number_perm+0x28f/0x580 [ 594.498116][T16153] ? tomoyo_path_number_perm+0x28f/0x580 [ 594.498145][T16153] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 594.498167][T16153] ? __pfx___mutex_lock+0x10/0x10 [ 594.498193][T16153] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 594.498216][T16153] ? futex_wake+0x1ad/0x530 [ 594.498245][T16153] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 594.498265][T16153] __vmalloc_node_noprof+0xad/0xf0 [ 594.498283][T16153] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 594.498309][T16153] dvb_dvr_do_ioctl+0x15d/0x270 [ 594.498333][T16153] dvb_usercopy+0x167/0x340 [ 594.498352][T16153] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 594.498373][T16153] ? __pfx_dvb_usercopy+0x10/0x10 [ 594.498403][T16153] ? __fget_files+0x21f/0x3d0 [ 594.498421][T16153] dvb_dvr_ioctl+0x29/0x40 [ 594.498440][T16153] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 594.498459][T16153] __x64_sys_ioctl+0x18e/0x210 [ 594.498486][T16153] do_syscall_64+0x106/0xf80 [ 594.498505][T16153] ? clear_bhb_loop+0x40/0x90 [ 594.498524][T16153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.498540][T16153] RIP: 0033:0x7fa9fe79c799 [ 594.498554][T16153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 594.498568][T16153] RSP: 002b:00007fa9ff60b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 594.498583][T16153] RAX: ffffffffffffffda RBX: 00007fa9fea16090 RCX: 00007fa9fe79c799 [ 594.498594][T16153] RDX: ffffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000004 [ 594.498604][T16153] RBP: 00007fa9fe832c99 R08: 0000000000000000 R09: 0000000000000000 [ 594.498616][T16153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 594.498625][T16153] R13: 00007fa9fea16128 R14: 00007fa9fea16090 R15: 00007ffc17b510d8 [ 594.498645][T16153] [ 595.089540][ T9092] Bluetooth: hci3: command 0x0406 tx timeout [ 595.259844][T16161] can: request_module (can-proto-4) failed. [ 595.413447][T16170] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1985'. [ 595.643843][T16153] Mem-Info: [ 595.652412][T16153] active_anon:8350 inactive_anon:5471 isolated_anon:0 [ 595.652412][T16153] active_file:20219 inactive_file:44511 isolated_file:0 [ 595.652412][T16153] unevictable:768 dirty:2953 writeback:0 [ 595.652412][T16153] slab_reclaimable:13110 slab_unreclaimable:97408 [ 595.652412][T16153] mapped:27005 shmem:1827 pagetables:1562 [ 595.652412][T16153] sec_pagetables:0 bounce:0 [ 595.652412][T16153] kernel_misc_reclaimable:0 [ 595.652412][T16153] free:1300941 free_pcp:12611 free_cma:0 [ 595.826794][T16153] Node 0 active_anon:33400kB inactive_anon:13876kB active_file:80864kB inactive_file:175048kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:103900kB dirty:11808kB writeback:0kB shmem:5772kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12352kB pagetables:6104kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 596.040265][T16153] Node 1 active_anon:0kB inactive_anon:0kB active_file:12kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 596.179044][T16153] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 596.274758][T16180] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 596.337357][T16180] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 596.350160][T16153] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 596.388698][T16153] Node 0 DMA32 free:1269076kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB free_highatomic:0KB active_anon:33392kB inactive_anon:16940kB active_file:80864kB inactive_file:165640kB unevictable:1536kB writepending:11816kB zspages:848kB present:3129332kB managed:2537428kB mlocked:0kB bounce:0kB free_pcp:39028kB local_pcp:39028kB free_cma:0kB [ 596.463019][T16180] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 596.523336][T16180] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 596.572186][T16153] lowmem_reserve[]: 0 0 1 1 1 [ 596.581417][T16180] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 596.597796][T16153] Node 0 Normal free:8kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1060kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 596.743069][T16153] lowmem_reserve[]: 0 0 0 0 0 [ 596.762754][T16153] Node 1 Normal free:3932344kB boost:0kB min:55580kB low:69472kB high:83364kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:12kB inactive_file:136kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15748kB local_pcp:15748kB free_cma:0kB [ 596.911001][T16153] lowmem_reserve[]: 0 0 0 0 0 [ 596.915763][T16153] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 597.021674][T16153] Node 0 DMA32: 7921*4kB (UM) 4736*8kB (UME) 3693*16kB (UME) 1833*32kB (UME) 1358*64kB (UME) 922*128kB (UME) 582*256kB (UME) 313*512kB (UME) 147*1024kB (UME) 9*2048kB (UME) 97*4096kB (UM) = 1267764kB [ 597.115849][T16153] Node 0 Normal: 2*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 597.168294][T16153] Node 1 Normal: 2*4kB (UM) 2*8kB (U) 2*16kB (UM) 2*32kB (UM) 3*64kB (UM) 3*128kB (UM) 2*256kB (U) 4*512kB (UM) 1*1024kB (U) 2*2048kB (UM) 958*4096kB (M) = 3932344kB [ 597.224613][T16153] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 597.257671][T16153] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 597.296039][T16153] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 597.329437][T16153] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 597.418259][T16153] 64269 total pagecache pages [ 597.437249][T16153] 47 pages in swap cache [ 597.477172][T16153] Free swap = 120160kB [ 597.497206][T16153] Total swap = 124996kB [ 597.511737][T16153] 2097051 pages RAM [ 597.517194][T16211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1994'. [ 597.534731][T16153] 0 pages HighMem/MovableOnly [ 597.553038][T16153] 430814 pages reserved [ 597.595286][T16153] 0 pages cma reserved [ 598.291931][ T9092] Bluetooth: hci0: command 0x0406 tx timeout [ 598.368778][ T9092] Bluetooth: hci1: command 0x0406 tx timeout [ 598.530401][ T9092] Bluetooth: hci3: command 0x0406 tx timeout [ 598.608597][ T9092] Bluetooth: hci4: command 0x0c1a tx timeout [ 599.171729][T16263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2005'. [ 599.947728][T16264] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 599.964885][T16264] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 599.987552][T16264] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 600.005717][T16264] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 600.020449][T16264] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 600.553117][T16305] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2016'. [ 601.249387][ T9092] Bluetooth: hci0: command 0x0406 tx timeout [ 601.968616][ T9092] Bluetooth: hci1: command 0x0406 tx timeout [ 602.049205][ T9092] Bluetooth: hci4: command 0x0c1a tx timeout [ 602.055271][ T9092] Bluetooth: hci3: command 0x0406 tx timeout [ 603.158732][T16332] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 603.190086][T16332] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 603.205457][T16332] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 603.227147][T16332] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 603.256639][T16332] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 603.305576][T16352] binder: 16349:16352 ioctl 4018620d 9 returned -22 [ 604.448598][ T9092] Bluetooth: hci0: command 0x0406 tx timeout [ 604.536733][ T9092] Bluetooth: hci3: unexpected event 0x03 length: 123 > 11 [ 604.739810][T16397] FAULT_INJECTION: forcing a failure. [ 604.739810][T16397] name fail_futex, interval 1, probability 0, space 0, times 0 [ 604.888284][T16398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2034'. [ 604.946418][T16397] CPU: 0 UID: 0 PID: 16397 Comm: syz.2.2034 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 604.946448][T16397] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 604.946455][T16397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 604.946464][T16397] Call Trace: [ 604.946469][T16397] [ 604.946475][T16397] dump_stack_lvl+0x100/0x190 [ 604.946501][T16397] should_fail_ex.cold+0x5/0xa [ 604.946519][T16397] get_futex_key+0x1d2/0x1620 [ 604.946539][T16397] ? __pfx_get_futex_key+0x10/0x10 [ 604.946563][T16397] futex_wait_setup+0x83/0x510 [ 604.946590][T16397] __futex_wait+0x19f/0x300 [ 604.946613][T16397] ? __pfx___futex_wait+0x10/0x10 [ 604.946638][T16397] ? __pfx_futex_wake_mark+0x10/0x10 [ 604.946661][T16397] ? futex_hash+0x2c5/0x380 [ 604.946683][T16397] futex_wait+0xed/0x380 [ 604.946705][T16397] ? __pfx_futex_wait+0x10/0x10 [ 604.946732][T16397] ? ksys_shmctl.constprop.0+0x19b/0x390 [ 604.946753][T16397] do_futex+0x1ef/0x350 [ 604.946771][T16397] ? __pfx_do_futex+0x10/0x10 [ 604.946788][T16397] ? __pfx___do_sys_mremap+0x10/0x10 [ 604.946810][T16397] ? bpf_lsm_capable+0x9/0x10 [ 604.946825][T16397] ? security_capable+0x80/0x260 [ 604.946847][T16397] __x64_sys_futex+0x34f/0x4d0 [ 604.946868][T16397] ? __pfx___x64_sys_futex+0x10/0x10 [ 604.946893][T16397] do_syscall_64+0x106/0xf80 [ 604.946912][T16397] ? clear_bhb_loop+0x40/0x90 [ 604.946930][T16397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.946945][T16397] RIP: 0033:0x7f05a439c799 [ 604.946958][T16397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 604.946972][T16397] RSP: 002b:00007f05a52f80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 604.946987][T16397] RAX: ffffffffffffffda RBX: 00007f05a4615fa8 RCX: 00007f05a439c799 [ 604.946996][T16397] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f05a4615fa8 [ 604.947005][T16397] RBP: 00007f05a4615fa0 R08: 0000000000000000 R09: 0000000000000000 [ 604.947013][T16397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 604.947022][T16397] R13: 00007f05a4616038 R14: 00007ffce585ec30 R15: 00007ffce585ed18 [ 604.947040][T16397] [ 605.525275][ T9092] Bluetooth: hci3: command 0x0406 tx timeout [ 605.533849][ T9092] Bluetooth: hci1: command 0x0406 tx timeout [ 605.539886][ T9092] Bluetooth: hci4: command 0x0c1a tx timeout [ 606.172544][T16431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2039'. [ 606.486006][T16418] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 606.499725][T16418] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 606.520535][T16418] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 606.541420][T16418] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 606.562730][T16418] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 607.640168][T16477] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2049'. [ 607.860767][T16484] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2051'. [ 607.891180][T15455] Bluetooth: hci0: command 0x0406 tx timeout [ 607.936319][T16485] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 608.052892][T16485] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 608.120869][T16485] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 608.192142][T16485] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 608.265837][T16485] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 610.128687][ T9092] Bluetooth: hci1: command 0x0406 tx timeout [ 610.135433][T15455] Bluetooth: hci3: command 0x0406 tx timeout [ 610.288748][T15455] Bluetooth: hci4: command 0x0c1a tx timeout [ 610.309784][T16535] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 610.342117][T16550] zswap: compressor not available [ 610.358497][T16535] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 610.412807][T16535] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 610.454684][T16535] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 610.495304][T16535] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 610.577253][T16551] zswap: compressor not available [ 611.601778][T16578] zswap: compressor not available [ 611.648860][T15455] Bluetooth: hci0: command 0x0406 tx timeout [ 612.368653][T15455] Bluetooth: hci1: command 0x0406 tx timeout [ 612.452820][T15455] Bluetooth: hci3: command 0x0406 tx timeout [ 612.528642][T15455] Bluetooth: hci4: command 0x0c1a tx timeout [ 613.451198][T16624] binder: 16621:16624 ioctl 4018620d 9 returned -22 [ 613.969808][T16634] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 614.058970][T16634] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 614.143043][T16634] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 614.216596][T16634] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 614.287381][T16634] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 615.004263][T16655] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2092'. [ 615.152021][T16650] zswap: compressor not available [ 615.385935][T16665] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 700000007 [ 615.464860][T16651] zswap: compressor not available [ 616.049129][T15455] Bluetooth: hci1: command 0x0406 tx timeout [ 616.055161][T15455] Bluetooth: hci0: command 0x0406 tx timeout [ 616.218557][T15455] Bluetooth: hci3: command 0x0406 tx timeout [ 616.289036][T15455] Bluetooth: hci4: command 0x0c1a tx timeout [ 616.510704][T16686] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 616.587662][T16686] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 616.653340][T16686] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 616.724065][T16686] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 616.824355][T16686] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 617.438620][T16706] FAULT_INJECTION: forcing a failure. [ 617.438620][T16706] name fail_futex, interval 1, probability 0, space 0, times 0 [ 617.573634][T16706] CPU: 0 UID: 0 PID: 16706 Comm: syz.0.2102 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 617.573665][T16706] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 617.573672][T16706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 617.573691][T16706] Call Trace: [ 617.573696][T16706] [ 617.573702][T16706] dump_stack_lvl+0x100/0x190 [ 617.573757][T16706] should_fail_ex.cold+0x5/0xa [ 617.573786][T16706] get_futex_key+0x1d2/0x1620 [ 617.573818][T16706] ? __pfx_get_futex_key+0x10/0x10 [ 617.573836][T16706] ? putname+0xb1/0x110 [ 617.573860][T16706] ? kasan_save_stack+0x3f/0x50 [ 617.573884][T16706] ? kasan_save_stack+0x30/0x50 [ 617.573904][T16706] ? kasan_save_track+0x14/0x30 [ 617.573924][T16706] ? kasan_save_free_info+0x3b/0x70 [ 617.573941][T16706] ? __kasan_slab_free+0x5f/0x80 [ 617.573953][T16706] ? kmem_cache_free+0x124/0x6a0 [ 617.573979][T16706] ? putname+0xb1/0x110 [ 617.573996][T16706] futex_wake+0xea/0x530 [ 617.574018][T16706] ? __pfx_futex_wake+0x10/0x10 [ 617.574047][T16706] do_futex+0x32b/0x350 [ 617.574065][T16706] ? __pfx_do_futex+0x10/0x10 [ 617.574088][T16706] __x64_sys_futex+0x34f/0x4d0 [ 617.574109][T16706] ? __pfx___x64_sys_futex+0x10/0x10 [ 617.574134][T16706] do_syscall_64+0x106/0xf80 [ 617.574171][T16706] ? clear_bhb_loop+0x40/0x90 [ 617.574195][T16706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.574211][T16706] RIP: 0033:0x7fc478f9c799 [ 617.574225][T16706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 617.574238][T16706] RSP: 002b:00007fc479de70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 617.574256][T16706] RAX: ffffffffffffffda RBX: 00007fc479216098 RCX: 00007fc478f9c799 [ 617.574266][T16706] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc47921609c [ 617.574275][T16706] RBP: 00007fc479216090 R08: 0000000000000000 R09: 0000000000000000 [ 617.574283][T16706] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 617.574292][T16706] R13: 00007fc479216128 R14: 00007ffefb7864e0 R15: 00007ffefb7865c8 [ 617.574311][T16706] [ 618.528762][T15455] Bluetooth: hci0: command 0x0406 tx timeout [ 618.608621][T15455] Bluetooth: hci1: command 0x0406 tx timeout [ 618.688991][T15455] Bluetooth: hci3: command 0x0406 tx timeout [ 618.848820][T15455] Bluetooth: hci4: command 0x0c1a tx timeout [ 619.669353][ T9] usb usb40-port2: attempt power cycle [ 620.157181][T16730] Process accounting paused [ 620.272786][ T9] usb usb40-port2: unable to enumerate USB device [ 620.769656][T15455] Bluetooth: hci3: command 0x0406 tx timeout [ 621.028160][T16773] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 622.179387][T16803] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 622.269243][T16803] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 622.376107][T16803] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 622.475184][T16803] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 622.533053][T16815] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 622.562856][T16803] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 622.572640][T16814] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 622.861926][T16827] binder: 16823:16827 ioctl 4018620d 9 returned -22 [ 622.963381][T16832] FAULT_INJECTION: forcing a failure. [ 622.963381][T16832] name failslab, interval 1, probability 0, space 0, times 0 [ 623.123208][T16832] CPU: 0 UID: 0 PID: 16832 Comm: syz.0.2132 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 623.123239][T16832] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 623.123246][T16832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 623.123255][T16832] Call Trace: [ 623.123261][T16832] [ 623.123267][T16832] dump_stack_lvl+0x100/0x190 [ 623.123296][T16832] should_fail_ex.cold+0x5/0xa [ 623.123314][T16832] should_failslab+0xc2/0x120 [ 623.123337][T16832] __kmalloc_cache_noprof+0x7a/0x6f0 [ 623.123357][T16832] ? smaps_rollup_open+0x4c/0x170 [ 623.123380][T16832] ? path_get+0x61/0x80 [ 623.123399][T16832] smaps_rollup_open+0x4c/0x170 [ 623.123418][T16832] do_dentry_open+0x6d8/0x1660 [ 623.123432][T16832] ? __pfx_smaps_rollup_open+0x10/0x10 [ 623.123454][T16832] vfs_open+0x82/0x3f0 [ 623.123473][T16832] path_openat+0x208c/0x31a0 [ 623.123494][T16832] ? __pfx_path_openat+0x10/0x10 [ 623.123516][T16832] do_file_open+0x20e/0x430 [ 623.123532][T16832] ? __pfx_do_file_open+0x10/0x10 [ 623.123554][T16832] ? __pfx_kfree_link+0x10/0x10 [ 623.123581][T16832] ? alloc_fd+0x476/0x790 [ 623.123597][T16832] ? do_getname+0x191/0x390 [ 623.123617][T16832] do_sys_openat2+0x10d/0x1e0 [ 623.123635][T16832] ? __pfx_do_sys_openat2+0x10/0x10 [ 623.123655][T16832] ? __fget_files+0x21f/0x3d0 [ 623.123673][T16832] __x64_sys_openat+0x12d/0x210 [ 623.123691][T16832] ? __pfx___x64_sys_openat+0x10/0x10 [ 623.123718][T16832] do_syscall_64+0x106/0xf80 [ 623.123736][T16832] ? clear_bhb_loop+0x40/0x90 [ 623.123754][T16832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.123769][T16832] RIP: 0033:0x7fc478f9c799 [ 623.123783][T16832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 623.123797][T16832] RSP: 002b:00007fc479dc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 623.123812][T16832] RAX: ffffffffffffffda RBX: 00007fc479216180 RCX: 00007fc478f9c799 [ 623.123823][T16832] RDX: 0000000000000840 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 623.123832][T16832] RBP: 00007fc479032c99 R08: 0000000000000000 R09: 0000000000000000 [ 623.123841][T16832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 623.123851][T16832] R13: 00007fc479216218 R14: 00007fc479216180 R15: 00007ffefb7865c8 [ 623.123871][T16832] [ 623.493452][T16825] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 623.861991][T16840] Invalid ELF header magic: != ELF [ 623.895876][T16841] Invalid ELF header magic: != ELF [ 624.009514][T16848] bridge0: port 3(veth0_to_bridge) entered blocking state [ 624.018259][T16848] bridge0: port 3(veth0_to_bridge) entered disabled state [ 624.026058][T16848] veth0_to_bridge: entered allmulticast mode [ 624.033697][T16848] veth0_to_bridge: entered promiscuous mode [ 624.057856][T16848] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 624.108490][T16848] bridge0: port 3(veth0_to_bridge) entered blocking state [ 624.115733][T16848] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 624.209496][T15455] Bluetooth: hci0: command 0x0406 tx timeout [ 624.288665][T15455] Bluetooth: hci1: command 0x0406 tx timeout [ 624.448609][T15455] Bluetooth: hci3: command 0x0406 tx timeout [ 624.613357][T15455] Bluetooth: hci4: command 0x0c1a tx timeout [ 624.619834][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.626236][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.818976][T16890] FAULT_INJECTION: forcing a failure. [ 625.818976][T16890] name failslab, interval 1, probability 0, space 0, times 0 [ 625.918703][T16890] CPU: 0 UID: 0 PID: 16890 Comm: syz.0.2144 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 625.918736][T16890] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 625.918743][T16890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 625.918752][T16890] Call Trace: [ 625.918757][T16890] [ 625.918764][T16890] dump_stack_lvl+0x100/0x190 [ 625.918793][T16890] should_fail_ex.cold+0x5/0xa [ 625.918812][T16890] should_failslab+0xc2/0x120 [ 625.918828][T16890] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 625.918850][T16890] ? proc_alloc_inode+0x25/0x200 [ 625.918897][T16890] ? __pfx_proc_alloc_inode+0x10/0x10 [ 625.918919][T16890] proc_alloc_inode+0x25/0x200 [ 625.918939][T16890] alloc_inode+0x68/0x250 [ 625.918959][T16890] new_inode+0x22/0x1c0 [ 625.918978][T16890] proc_pid_make_inode+0x22/0x160 [ 625.919000][T16890] proc_pident_instantiate+0x85/0x310 [ 625.919023][T16890] proc_pident_lookup+0x1e3/0x270 [ 625.919048][T16890] lookup_open.isra.0+0x631/0x11b0 [ 625.919074][T16890] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 625.919098][T16890] ? __pfx___might_resched+0x10/0x10 [ 625.919126][T16890] ? mnt_get_write_access+0x52/0x2f0 [ 625.919149][T16890] ? __pfx_down_write+0x10/0x10 [ 625.919168][T16890] ? mnt_get_write_access+0x1e9/0x2f0 [ 625.919191][T16890] path_openat+0x2291/0x31a0 [ 625.919213][T16890] ? __pfx_path_openat+0x10/0x10 [ 625.919235][T16890] do_file_open+0x20e/0x430 [ 625.919252][T16890] ? __pfx_do_file_open+0x10/0x10 [ 625.919273][T16890] ? __pfx_kfree_link+0x10/0x10 [ 625.919299][T16890] ? alloc_fd+0x476/0x790 [ 625.919321][T16890] ? do_getname+0x191/0x390 [ 625.919342][T16890] do_sys_openat2+0x10d/0x1e0 [ 625.919362][T16890] ? __pfx_do_sys_openat2+0x10/0x10 [ 625.919382][T16890] ? __fget_files+0x21f/0x3d0 [ 625.919401][T16890] __x64_sys_openat+0x12d/0x210 [ 625.919420][T16890] ? __pfx___x64_sys_openat+0x10/0x10 [ 625.919448][T16890] do_syscall_64+0x106/0xf80 [ 625.919465][T16890] ? clear_bhb_loop+0x40/0x90 [ 625.919483][T16890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.919498][T16890] RIP: 0033:0x7fc478f9c799 [ 625.919511][T16890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 625.919525][T16890] RSP: 002b:00007fc479de7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 625.919540][T16890] RAX: ffffffffffffffda RBX: 00007fc479216090 RCX: 00007fc478f9c799 [ 625.919550][T16890] RDX: 0000000000000840 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 625.919560][T16890] RBP: 00007fc479032c99 R08: 0000000000000000 R09: 0000000000000000 [ 625.919570][T16890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 625.919579][T16890] R13: 00007fc479216128 R14: 00007fc479216090 R15: 00007ffefb7865c8 [ 625.919599][T16890] [ 626.568752][T15455] Bluetooth: hci3: command 0x0406 tx timeout [ 627.959643][T16926] zswap: compressor not available [ 628.296963][T16922] zswap: compressor /189 not available [ 628.501126][T16927] zswap: compressor not available [ 629.012922][T16951] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 629.084276][T16958] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2158'. [ 629.099041][T16951] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 629.162259][T16951] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 629.244476][T16951] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 629.321051][T16951] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 629.763732][T16977] binder: 16973:16977 ioctl 4018620d 9 returned -22 [ 631.054998][T17005] zswap: compressor not available [ 631.092254][ T9092] Bluetooth: hci0: command 0x0406 tx timeout [ 631.170667][ T9092] Bluetooth: hci3: command 0x0406 tx timeout [ 631.176926][ T9092] Bluetooth: hci1: command 0x0406 tx timeout [ 631.331685][ T9092] Bluetooth: hci4: command 0x0c1a tx timeout [ 631.919303][ T9092] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 632.589006][T17040] binder: 17037:17040 ioctl 4018620d 9 returned -22 [ 632.987568][T17047] FAULT_INJECTION: forcing a failure. [ 632.987568][T17047] name failslab, interval 1, probability 0, space 0, times 0 [ 633.108076][T17047] CPU: 0 UID: 0 PID: 17047 Comm: syz.2.2177 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 633.108107][T17047] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 633.108115][T17047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 633.108124][T17047] Call Trace: [ 633.108130][T17047] [ 633.108136][T17047] dump_stack_lvl+0x100/0x190 [ 633.108165][T17047] should_fail_ex.cold+0x5/0xa [ 633.108184][T17047] should_failslab+0xc2/0x120 [ 633.108200][T17047] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 633.108222][T17047] ? proc_alloc_inode+0x25/0x200 [ 633.108245][T17047] ? __pfx_proc_alloc_inode+0x10/0x10 [ 633.108265][T17047] proc_alloc_inode+0x25/0x200 [ 633.108285][T17047] alloc_inode+0x68/0x250 [ 633.108304][T17047] new_inode+0x22/0x1c0 [ 633.108324][T17047] proc_pid_make_inode+0x22/0x160 [ 633.108346][T17047] proc_pident_instantiate+0x85/0x310 [ 633.108368][T17047] proc_pident_lookup+0x1e3/0x270 [ 633.108394][T17047] lookup_open.isra.0+0x631/0x11b0 [ 633.108420][T17047] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 633.108445][T17047] ? __pfx___might_resched+0x10/0x10 [ 633.108465][T17047] ? mnt_get_write_access+0x52/0x2f0 [ 633.108488][T17047] ? __pfx_down_write+0x10/0x10 [ 633.108511][T17047] ? mnt_get_write_access+0x1e9/0x2f0 [ 633.108534][T17047] path_openat+0x2291/0x31a0 [ 633.108556][T17047] ? __pfx_path_openat+0x10/0x10 [ 633.108587][T17047] do_file_open+0x20e/0x430 [ 633.108604][T17047] ? __pfx_do_file_open+0x10/0x10 [ 633.108627][T17047] ? __pfx_kfree_link+0x10/0x10 [ 633.108654][T17047] ? alloc_fd+0x476/0x790 [ 633.108671][T17047] ? do_getname+0x191/0x390 [ 633.108691][T17047] do_sys_openat2+0x10d/0x1e0 [ 633.108710][T17047] ? __pfx_do_sys_openat2+0x10/0x10 [ 633.108730][T17047] ? __fget_files+0x21f/0x3d0 [ 633.108748][T17047] __x64_sys_openat+0x12d/0x210 [ 633.108767][T17047] ? __pfx___x64_sys_openat+0x10/0x10 [ 633.108793][T17047] do_syscall_64+0x106/0xf80 [ 633.108809][T17047] ? clear_bhb_loop+0x40/0x90 [ 633.108828][T17047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.108843][T17047] RIP: 0033:0x7f05a439c799 [ 633.108856][T17047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 633.108870][T17047] RSP: 002b:00007f05a52d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 633.108885][T17047] RAX: ffffffffffffffda RBX: 00007f05a4616090 RCX: 00007f05a439c799 [ 633.108895][T17047] RDX: 0000000000000840 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 633.108905][T17047] RBP: 00007f05a4432c99 R08: 0000000000000000 R09: 0000000000000000 [ 633.108915][T17047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 633.108924][T17047] R13: 00007f05a4616128 R14: 00007f05a4616090 R15: 00007ffce585ed18 [ 633.108944][T17047] [ 633.805229][ T9092] Bluetooth: hci3: command 0x0406 tx timeout [ 635.888841][ T9092] Bluetooth: hci3: command 0x0406 tx timeout [ 637.935684][T17131] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 637.968634][T15455] Bluetooth: hci3: command 0x0406 tx timeout [ 638.024837][T17131] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 638.122203][T17131] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 638.211687][T17131] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 638.283382][T17131] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 638.552976][T17146] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 639.013423][T17170] binder: 17163:17170 ioctl 4018620d 9 returned -22 [ 639.789976][T17177] zswap: compressor not available [ 639.969740][T15455] Bluetooth: hci0: command 0x0406 tx timeout [ 640.048674][T15455] Bluetooth: hci1: command 0x0406 tx timeout [ 640.132486][T15455] Bluetooth: hci3: command 0x0406 tx timeout [ 640.289202][T15455] Bluetooth: hci4: command 0x0c1a tx timeout [ 640.945348][T17190] zswap: compressor not available [ 641.981320][T17214] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 642.049874][T17214] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 642.125898][T17214] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 642.201575][T17214] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 642.270501][T17214] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 642.613008][T17230] binder: 17220:17230 ioctl 4018620d 9 returned -22 [ 643.993289][T17254] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2219'. [ 644.048791][T15455] Bluetooth: hci0: command 0x0406 tx timeout [ 644.129909][T15455] Bluetooth: hci3: command 0x0406 tx timeout [ 644.136046][T15455] Bluetooth: hci1: command 0x0406 tx timeout [ 644.290687][T15455] Bluetooth: hci4: command 0x0c1a tx timeout [ 644.810749][T17262] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2221'. [ 645.221306][T17275] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 645.228239][T17277] FAULT_INJECTION: forcing a failure. [ 645.228239][T17277] name failslab, interval 1, probability 0, space 0, times 0 [ 645.292708][T17277] CPU: 0 UID: 0 PID: 17277 Comm: syz.1.2226 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 645.292739][T17277] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 645.292746][T17277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 645.292755][T17277] Call Trace: [ 645.292760][T17277] [ 645.292766][T17277] dump_stack_lvl+0x100/0x190 [ 645.292793][T17277] should_fail_ex.cold+0x5/0xa [ 645.292816][T17277] should_failslab+0xc2/0x120 [ 645.292832][T17277] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 645.292855][T17277] ? __alloc_skb+0x140/0x710 [ 645.292903][T17277] __alloc_skb+0x140/0x710 [ 645.292919][T17277] ? __alloc_skb+0x5b7/0x710 [ 645.292934][T17277] ? __pfx___alloc_skb+0x10/0x10 [ 645.292955][T17277] netlink_alloc_large_skb+0x69/0x150 [ 645.292984][T17277] netlink_sendmsg+0x680/0xda0 [ 645.293006][T17277] ? __pfx_netlink_sendmsg+0x10/0x10 [ 645.293025][T17277] ? __import_iovec+0x1d2/0x640 [ 645.293053][T17277] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 645.293084][T17277] ____sys_sendmsg+0x9e1/0xb70 [ 645.293105][T17277] ? __pfx_netlink_sendmsg+0x10/0x10 [ 645.293125][T17277] ? __pfx_____sys_sendmsg+0x10/0x10 [ 645.293155][T17277] ___sys_sendmsg+0x190/0x1e0 [ 645.293179][T17277] ? __pfx____sys_sendmsg+0x10/0x10 [ 645.293223][T17277] __sys_sendmsg+0x170/0x220 [ 645.293242][T17277] ? __pfx___sys_sendmsg+0x10/0x10 [ 645.293271][T17277] do_syscall_64+0x106/0xf80 [ 645.293289][T17277] ? clear_bhb_loop+0x40/0x90 [ 645.293307][T17277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.293322][T17277] RIP: 0033:0x7fa9fe79c799 [ 645.293334][T17277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 645.293348][T17277] RSP: 002b:00007fa9ff62c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 645.293364][T17277] RAX: ffffffffffffffda RBX: 00007fa9fea15fa0 RCX: 00007fa9fe79c799 [ 645.293373][T17277] RDX: 0000000020000800 RSI: 00002000000001c0 RDI: 0000000000000003 [ 645.293383][T17277] RBP: 00007fa9ff62c090 R08: 0000000000000000 R09: 0000000000000000 [ 645.293391][T17277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 645.293400][T17277] R13: 00007fa9fea16038 R14: 00007fa9fea15fa0 R15: 00007ffc17b510d8 [ 645.293418][T17277] [ 645.654255][T17275] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 645.660414][T17275] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 645.667126][T17275] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 645.673373][T17275] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 645.900746][ T9093] netdevsim netdevsim1335 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.489338][T17298] FAULT_INJECTION: forcing a failure. [ 646.489338][T17298] name failslab, interval 1, probability 0, space 0, times 0 [ 646.581932][T17298] CPU: 0 UID: 0 PID: 17298 Comm: syz.1.2230 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 646.581964][T17298] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 646.581972][T17298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 646.581981][T17298] Call Trace: [ 646.581986][T17298] [ 646.581993][T17298] dump_stack_lvl+0x100/0x190 [ 646.582020][T17298] should_fail_ex.cold+0x5/0xa [ 646.582039][T17298] should_failslab+0xc2/0x120 [ 646.582056][T17298] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 646.582078][T17298] ? proc_alloc_inode+0x25/0x200 [ 646.582101][T17298] ? __pfx_proc_alloc_inode+0x10/0x10 [ 646.582122][T17298] proc_alloc_inode+0x25/0x200 [ 646.582141][T17298] alloc_inode+0x68/0x250 [ 646.582162][T17298] new_inode+0x22/0x1c0 [ 646.582182][T17298] proc_pid_make_inode+0x22/0x160 [ 646.582203][T17298] proc_pident_instantiate+0x85/0x310 [ 646.582226][T17298] proc_pident_lookup+0x1e3/0x270 [ 646.582251][T17298] lookup_open.isra.0+0x631/0x11b0 [ 646.582276][T17298] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 646.582301][T17298] ? __pfx___might_resched+0x10/0x10 [ 646.582322][T17298] ? mnt_get_write_access+0x52/0x2f0 [ 646.582345][T17298] ? __pfx_down_write+0x10/0x10 [ 646.582372][T17298] ? mnt_get_write_access+0x1e9/0x2f0 [ 646.582395][T17298] path_openat+0x2291/0x31a0 [ 646.582418][T17298] ? __pfx_path_openat+0x10/0x10 [ 646.582441][T17298] do_file_open+0x20e/0x430 [ 646.582458][T17298] ? __pfx_do_file_open+0x10/0x10 [ 646.582483][T17298] ? __pfx_kfree_link+0x10/0x10 [ 646.582509][T17298] ? alloc_fd+0x476/0x790 [ 646.582525][T17298] ? do_getname+0x191/0x390 [ 646.582544][T17298] do_sys_openat2+0x10d/0x1e0 [ 646.582563][T17298] ? __pfx_do_sys_openat2+0x10/0x10 [ 646.582583][T17298] ? __fget_files+0x21f/0x3d0 [ 646.582601][T17298] __x64_sys_openat+0x12d/0x210 [ 646.582621][T17298] ? __pfx___x64_sys_openat+0x10/0x10 [ 646.582647][T17298] do_syscall_64+0x106/0xf80 [ 646.582664][T17298] ? clear_bhb_loop+0x40/0x90 [ 646.582681][T17298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.582697][T17298] RIP: 0033:0x7fa9fe79c799 [ 646.582710][T17298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 646.582725][T17298] RSP: 002b:00007fa9ff60b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 646.582740][T17298] RAX: ffffffffffffffda RBX: 00007fa9fea16090 RCX: 00007fa9fe79c799 [ 646.582750][T17298] RDX: 0000000000000840 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 646.582759][T17298] RBP: 00007fa9fe832c99 R08: 0000000000000000 R09: 0000000000000000 [ 646.582768][T17298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 646.582777][T17298] R13: 00007fa9fea16128 R14: 00007fa9fea16090 R15: 00007ffc17b510d8 [ 646.582798][T17298] [ 647.186686][T17310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2233'. [ 647.214152][T17312] FAULT_INJECTION: forcing a failure. [ 647.214152][T17312] name failslab, interval 1, probability 0, space 0, times 0 [ 647.239051][T17312] CPU: 0 UID: 0 PID: 17312 Comm: syz.1.2235 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 647.239084][T17312] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 647.239091][T17312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 647.239100][T17312] Call Trace: [ 647.239105][T17312] [ 647.239111][T17312] dump_stack_lvl+0x100/0x190 [ 647.239139][T17312] should_fail_ex.cold+0x5/0xa [ 647.239157][T17312] should_failslab+0xc2/0x120 [ 647.239174][T17312] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 647.239195][T17312] ? __proc_create+0x2cb/0x8c0 [ 647.239222][T17312] __proc_create+0x2cb/0x8c0 [ 647.239245][T17312] ? __pfx___proc_create+0x10/0x10 [ 647.239270][T17312] ? _raw_spin_unlock+0x28/0x50 [ 647.239293][T17312] proc_create_reg+0x75/0x170 [ 647.239310][T17312] proc_create_net_data+0x8e/0x1c0 [ 647.239334][T17312] ? __pfx_proc_create_net_data+0x10/0x10 [ 647.239370][T17312] ? __pfx_arp_net_init+0x10/0x10 [ 647.239497][T17312] arp_net_init+0x53/0x80 [ 647.239519][T17312] ops_init+0x1e2/0x5f0 [ 647.239543][T17312] setup_net+0x118/0x3a0 [ 647.239562][T17312] ? __pfx_setup_net+0x10/0x10 [ 647.239578][T17312] ? lockdep_init_map_type+0x5c/0x250 [ 647.239602][T17312] ? mutex_init_lockep+0x110/0x150 [ 647.239624][T17312] copy_net_ns+0x46f/0x7c0 [ 647.239645][T17312] create_new_namespaces+0x3ea/0xac0 [ 647.239666][T17312] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 647.239684][T17312] ksys_unshare+0x473/0xad0 [ 647.239710][T17312] ? __pfx_ksys_unshare+0x10/0x10 [ 647.239735][T17312] __x64_sys_unshare+0x31/0x40 [ 647.239753][T17312] do_syscall_64+0x106/0xf80 [ 647.239770][T17312] ? clear_bhb_loop+0x40/0x90 [ 647.239787][T17312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.239803][T17312] RIP: 0033:0x7fa9fe79c799 [ 647.239817][T17312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 647.239831][T17312] RSP: 002b:00007fa9ff62c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 647.239845][T17312] RAX: ffffffffffffffda RBX: 00007fa9fea15fa0 RCX: 00007fa9fe79c799 [ 647.239855][T17312] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 647.239864][T17312] RBP: 00007fa9fe832c99 R08: 0000000000000000 R09: 0000000000000000 [ 647.239874][T17312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 647.239883][T17312] R13: 00007fa9fea16038 R14: 00007fa9fea15fa0 R15: 00007ffc17b510d8 [ 647.239903][T17312] [ 647.524640][ T9092] Bluetooth: hci0: command 0x0406 tx timeout [ 647.895831][ T9092] Bluetooth: hci4: command 0x0c1a tx timeout [ 647.902902][T15455] Bluetooth: hci3: command 0x0406 tx timeout [ 647.909057][ T9175] Bluetooth: hci1: command 0x0406 tx timeout [ 648.440603][T17319] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 648.446898][T17319] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 648.470328][T17319] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 648.487625][T17319] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 648.546738][T17319] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 648.639300][T17330] netlink: 146 bytes leftover after parsing attributes in process `syz.4.2239'. [ 648.783183][T17334] ubi0: attaching mtd0 [ 648.821657][T17334] ubi0: scanning is finished [ 648.851149][T17334] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 649.182119][T17334] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 649.454751][T17348] FAULT_INJECTION: forcing a failure. [ 649.454751][T17348] name failslab, interval 1, probability 0, space 0, times 0 [ 649.565199][T17345] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input30 [ 649.578284][T17348] CPU: 0 UID: 0 PID: 17348 Comm: syz.0.2244 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 649.578316][T17348] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 649.578323][T17348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 649.578332][T17348] Call Trace: [ 649.578338][T17348] [ 649.578344][T17348] dump_stack_lvl+0x100/0x190 [ 649.578373][T17348] should_fail_ex.cold+0x5/0xa [ 649.578392][T17348] should_failslab+0xc2/0x120 [ 649.578408][T17348] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 649.578430][T17348] ? proc_alloc_inode+0x25/0x200 [ 649.578454][T17348] ? __pfx_proc_alloc_inode+0x10/0x10 [ 649.578476][T17348] proc_alloc_inode+0x25/0x200 [ 649.578495][T17348] alloc_inode+0x68/0x250 [ 649.578519][T17348] new_inode+0x22/0x1c0 [ 649.578538][T17348] proc_pid_make_inode+0x22/0x160 [ 649.578561][T17348] proc_pident_instantiate+0x85/0x310 [ 649.578584][T17348] proc_pident_lookup+0x1e3/0x270 [ 649.578623][T17348] lookup_open.isra.0+0x631/0x11b0 [ 649.578649][T17348] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 649.578676][T17348] ? __pfx___might_resched+0x10/0x10 [ 649.578699][T17348] ? mnt_get_write_access+0x52/0x2f0 [ 649.578722][T17348] ? __pfx_down_write+0x10/0x10 [ 649.578741][T17348] ? mnt_get_write_access+0x1e9/0x2f0 [ 649.578763][T17348] path_openat+0x2291/0x31a0 [ 649.578785][T17348] ? __pfx_path_openat+0x10/0x10 [ 649.578808][T17348] do_file_open+0x20e/0x430 [ 649.578825][T17348] ? __pfx_do_file_open+0x10/0x10 [ 649.578847][T17348] ? __pfx_kfree_link+0x10/0x10 [ 649.578873][T17348] ? alloc_fd+0x476/0x790 [ 649.578889][T17348] ? do_getname+0x191/0x390 [ 649.578908][T17348] do_sys_openat2+0x10d/0x1e0 [ 649.578927][T17348] ? __pfx_do_sys_openat2+0x10/0x10 [ 649.578947][T17348] ? __fget_files+0x21f/0x3d0 [ 649.578965][T17348] __x64_sys_openat+0x12d/0x210 [ 649.578984][T17348] ? __pfx___x64_sys_openat+0x10/0x10 [ 649.579011][T17348] do_syscall_64+0x106/0xf80 [ 649.579028][T17348] ? clear_bhb_loop+0x40/0x90 [ 649.579046][T17348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.579061][T17348] RIP: 0033:0x7fc478f9c799 [ 649.579075][T17348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 649.579089][T17348] RSP: 002b:00007fc479de7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 649.579104][T17348] RAX: ffffffffffffffda RBX: 00007fc479216090 RCX: 00007fc478f9c799 [ 649.579114][T17348] RDX: 0000000000000840 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 649.579124][T17348] RBP: 00007fc479032c99 R08: 0000000000000000 R09: 0000000000000000 [ 649.579133][T17348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 649.579142][T17348] R13: 00007fc479216128 R14: 00007fc479216090 R15: 00007ffefb7865c8 [ 649.579163][T17348] [ 650.451671][ T9092] Bluetooth: hci0: command 0x0406 tx timeout [ 650.555258][ T9092] Bluetooth: hci3: command 0x0406 tx timeout [ 650.561671][ T9092] Bluetooth: hci1: command 0x0406 tx timeout [ 650.626562][T15455] Bluetooth: hci4: command 0x0c1a tx timeout [ 650.734813][T17362] zswap: compressor not available [ 650.804041][T17358] Process accounting resumed [ 650.865871][T17372] FAULT_INJECTION: forcing a failure. [ 650.865871][T17372] name failslab, interval 1, probability 0, space 0, times 0 [ 650.897966][T17372] CPU: 0 UID: 0 PID: 17372 Comm: syz.2.2249 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 650.898000][T17372] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 650.898007][T17372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 650.898016][T17372] Call Trace: [ 650.898021][T17372] [ 650.898027][T17372] dump_stack_lvl+0x100/0x190 [ 650.898054][T17372] should_fail_ex.cold+0x5/0xa [ 650.898072][T17372] should_failslab+0xc2/0x120 [ 650.898088][T17372] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 650.898110][T17372] ? skb_clone+0x190/0x400 [ 650.898132][T17372] skb_clone+0x190/0x400 [ 650.898150][T17372] netlink_deliver_tap+0xaed/0xcc0 [ 650.898173][T17372] netlink_unicast+0x650/0x870 [ 650.898195][T17372] ? __pfx_netlink_unicast+0x10/0x10 [ 650.898221][T17372] netlink_sendmsg+0x8b0/0xda0 [ 650.898243][T17372] ? __pfx_netlink_sendmsg+0x10/0x10 [ 650.898262][T17372] ? __import_iovec+0x1d2/0x640 [ 650.898279][T17372] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 650.898303][T17372] ____sys_sendmsg+0x9e1/0xb70 [ 650.898323][T17372] ? __pfx_netlink_sendmsg+0x10/0x10 [ 650.898344][T17372] ? __pfx_____sys_sendmsg+0x10/0x10 [ 650.898373][T17372] ___sys_sendmsg+0x190/0x1e0 [ 650.898397][T17372] ? __pfx____sys_sendmsg+0x10/0x10 [ 650.898442][T17372] __sys_sendmsg+0x170/0x220 [ 650.898460][T17372] ? __pfx___sys_sendmsg+0x10/0x10 [ 650.898496][T17372] do_syscall_64+0x106/0xf80 [ 650.898514][T17372] ? clear_bhb_loop+0x40/0x90 [ 650.898532][T17372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.898547][T17372] RIP: 0033:0x7f05a439c799 [ 650.898561][T17372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 650.898576][T17372] RSP: 002b:00007f05a52f8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 650.898591][T17372] RAX: ffffffffffffffda RBX: 00007f05a4615fa0 RCX: 00007f05a439c799 [ 650.898600][T17372] RDX: 0000000020000800 RSI: 00002000000001c0 RDI: 0000000000000003 [ 650.898610][T17372] RBP: 00007f05a52f8090 R08: 0000000000000000 R09: 0000000000000000 [ 650.898618][T17372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 650.898627][T17372] R13: 00007f05a4616038 R14: 00007f05a4615fa0 R15: 00007ffce585ed18 [ 650.898646][T17372] [ 651.565127][T17372] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2249'. [ 651.596761][T17374] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 651.609691][T17374] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 651.644777][T17374] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 651.683343][T17374] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 651.722536][T17374] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 652.996579][T17420] Invalid ELF header magic: != ELF [ 653.084166][T17427] FAULT_INJECTION: forcing a failure. [ 653.084166][T17427] name failslab, interval 1, probability 0, space 0, times 0 [ 653.113231][T17428] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input31 [ 653.198708][T17427] CPU: 0 UID: 0 PID: 17427 Comm: syz.1.2261 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 653.198737][T17427] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 653.198744][T17427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 653.198752][T17427] Call Trace: [ 653.198758][T17427] [ 653.198763][T17427] dump_stack_lvl+0x100/0x190 [ 653.198791][T17427] should_fail_ex.cold+0x5/0xa [ 653.198809][T17427] should_failslab+0xc2/0x120 [ 653.198825][T17427] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 653.198847][T17427] ? skb_clone+0x190/0x400 [ 653.198868][T17427] skb_clone+0x190/0x400 [ 653.198886][T17427] netlink_deliver_tap+0xaed/0xcc0 [ 653.198909][T17427] netlink_unicast+0x650/0x870 [ 653.198931][T17427] ? __pfx_netlink_unicast+0x10/0x10 [ 653.198957][T17427] netlink_sendmsg+0x8b0/0xda0 [ 653.198980][T17427] ? __pfx_netlink_sendmsg+0x10/0x10 [ 653.198998][T17427] ? __import_iovec+0x1d2/0x640 [ 653.199015][T17427] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 653.199039][T17427] ____sys_sendmsg+0x9e1/0xb70 [ 653.199060][T17427] ? __pfx_netlink_sendmsg+0x10/0x10 [ 653.199081][T17427] ? __pfx_____sys_sendmsg+0x10/0x10 [ 653.199111][T17427] ___sys_sendmsg+0x190/0x1e0 [ 653.199135][T17427] ? __pfx____sys_sendmsg+0x10/0x10 [ 653.199180][T17427] __sys_sendmsg+0x170/0x220 [ 653.199200][T17427] ? __pfx___sys_sendmsg+0x10/0x10 [ 653.199229][T17427] do_syscall_64+0x106/0xf80 [ 653.199247][T17427] ? clear_bhb_loop+0x40/0x90 [ 653.199265][T17427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.199281][T17427] RIP: 0033:0x7fa9fe79c799 [ 653.199294][T17427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 653.199308][T17427] RSP: 002b:00007fa9ff62c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 653.199324][T17427] RAX: ffffffffffffffda RBX: 00007fa9fea15fa0 RCX: 00007fa9fe79c799 [ 653.199334][T17427] RDX: 0000000020000800 RSI: 00002000000001c0 RDI: 0000000000000003 [ 653.199343][T17427] RBP: 00007fa9ff62c090 R08: 0000000000000000 R09: 0000000000000000 [ 653.199352][T17427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 653.199361][T17427] R13: 00007fa9fea16038 R14: 00007fa9fea15fa0 R15: 00007ffc17b510d8 [ 653.199381][T17427] [ 653.199431][T17427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2261'. [ 653.731646][T15455] Bluetooth: hci3: command 0x0406 tx timeout [ 653.737787][T15455] Bluetooth: hci1: command 0x0406 tx timeout [ 653.745619][T15455] Bluetooth: hci0: command 0x0406 tx timeout [ 653.752193][T15455] Bluetooth: hci4: command 0x0c1a tx timeout [ 653.844713][T17434] __vm_enough_memory: pid: 17434, comm: syz.4.2262, bytes: 4398046511104 not enough memory for the allocation [ 654.071056][T17439] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 654.123901][T17437] zswap: compressor  not available [ 654.144881][T17439] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 654.223606][T17439] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 654.304766][T17439] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 654.398044][T17439] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 655.296106][T17471] binder: 17468:17471 ioctl 4018620d 9 returned -22 [ 655.329832][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 655.342140][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 655.354792][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 655.367075][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 655.379467][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 655.391877][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 655.404230][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 655.416482][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 655.428783][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 655.441186][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 656.761534][ T9092] Bluetooth: hci0: command 0x0406 tx timeout [ 656.767554][ T9092] Bluetooth: hci1: command 0x0406 tx timeout [ 656.781499][T15455] Bluetooth: hci3: command 0x0406 tx timeout [ 656.787508][T15455] Bluetooth: hci4: command 0x0c1a tx timeout [ 659.054137][ C0] sched: DL replenish lagged too much [ 660.338574][ C0] net_ratelimit: 20222 callbacks suppressed [ 660.338592][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 660.357198][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 660.369846][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 660.382197][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 660.394498][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 660.406736][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 660.419122][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 660.431475][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 660.443827][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 660.456208][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 665.348734][ C0] net_ratelimit: 20155 callbacks suppressed [ 665.348752][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 665.367105][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 665.379551][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 665.391905][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 665.404378][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 665.416791][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 665.429226][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 665.441734][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 665.454087][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 665.466412][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 670.358555][ C0] net_ratelimit: 19938 callbacks suppressed [ 670.358573][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 670.377133][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 670.389483][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 670.402047][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 670.414661][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 670.427321][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 670.439626][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 670.451912][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 670.464173][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 670.476535][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 675.368711][ C0] net_ratelimit: 20213 callbacks suppressed [ 675.368728][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 675.386984][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 675.399295][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 675.411663][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 675.423940][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 675.436261][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 675.448573][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 675.460777][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 675.473089][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 675.485401][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 680.378666][ C0] net_ratelimit: 20008 callbacks suppressed [ 680.378683][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 680.397056][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 680.409746][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 680.422394][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 680.434846][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 680.447642][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 680.460029][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 680.472589][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 680.484987][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 680.497291][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.388664][ C0] net_ratelimit: 20426 callbacks suppressed [ 685.388682][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.407095][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.419451][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.431865][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.444130][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.456348][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.468616][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.480826][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.493115][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.505371][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 686.160334][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.329207][T15455] Bluetooth: hci3: command 0x0406 tx timeout [ 690.398538][ C0] net_ratelimit: 19850 callbacks suppressed [ 690.398556][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.417153][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.429737][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.442276][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.454655][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.467084][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.479423][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.491898][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.504426][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.516773][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 692.116015][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 695.408629][ C0] net_ratelimit: 20345 callbacks suppressed [ 695.408646][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 695.426809][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 695.439183][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 695.451506][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 695.463765][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 695.475991][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 695.488297][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 695.500630][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 695.512842][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 695.525208][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 700.418627][ C0] net_ratelimit: 20520 callbacks suppressed [ 700.418644][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 700.437087][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 700.449461][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 700.461789][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 700.474227][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 700.486914][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 700.499325][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 700.511676][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 700.523964][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 700.536313][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 705.428755][ C0] net_ratelimit: 20454 callbacks suppressed [ 705.428772][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 705.446974][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 705.459225][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 705.471715][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 705.483970][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 705.496308][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 705.508662][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 705.520910][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 705.533199][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 705.545613][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 710.438589][ C0] net_ratelimit: 20134 callbacks suppressed [ 710.438612][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 710.456949][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 710.469313][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 710.482127][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 710.494619][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 710.507067][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 710.519400][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 710.531840][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 710.544137][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 710.556519][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 715.448803][ C0] net_ratelimit: 19972 callbacks suppressed [ 715.448821][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 715.466969][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 715.479262][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 715.491529][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 715.503861][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 715.516308][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 715.528724][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 715.541219][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 715.553860][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 715.566575][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 720.458699][ C0] net_ratelimit: 20163 callbacks suppressed [ 720.458716][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 720.476923][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 720.489204][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 720.501589][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 720.514008][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 720.526455][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 720.538801][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 720.551050][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 720.563651][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 720.576267][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 725.468708][ C0] net_ratelimit: 20967 callbacks suppressed [ 725.468725][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 725.487116][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 725.499622][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 725.511952][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 725.524315][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 725.536608][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 725.549114][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 725.561588][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 725.574028][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 725.586544][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 730.478696][ C0] net_ratelimit: 21001 callbacks suppressed [ 730.478714][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 730.497107][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 730.509634][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 730.521949][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 730.534432][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 730.547233][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 730.559496][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 730.571807][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 730.584092][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 730.596468][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.488583][ C0] net_ratelimit: 20134 callbacks suppressed [ 735.488602][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.506807][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.519386][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.531911][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.544248][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.556810][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.570107][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.582450][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.595089][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.607473][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 740.498705][ C0] net_ratelimit: 20416 callbacks suppressed [ 740.498722][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 740.517302][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 740.529570][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 740.541919][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 740.554367][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 740.566780][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 740.579120][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 740.591339][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 740.603669][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 740.615939][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 745.508657][ C0] net_ratelimit: 20408 callbacks suppressed [ 745.508675][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 745.526984][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 745.539349][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 745.552393][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 745.564842][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 745.577439][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 745.589837][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 745.602264][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 745.614756][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 745.627039][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 750.518625][ C0] net_ratelimit: 19895 callbacks suppressed [ 750.518644][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 750.537705][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 750.549964][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 750.562521][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 750.574997][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 750.588064][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 750.600796][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 750.613126][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 750.625478][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 750.637742][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 750.762521][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 755.528592][ C0] net_ratelimit: 20603 callbacks suppressed [ 755.528611][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 755.546848][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 755.559353][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 755.571890][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 755.584292][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 755.596619][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 755.608949][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 755.621277][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 755.634038][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 755.646440][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 760.208526][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 760.215544][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P17462/1:b..l [ 760.224009][ C0] rcu: (detected by 0, t=10502 jiffies, g=109053, q=1368 ncpus=1) [ 760.231990][ C0] task:syz.2.2269 state:R running task stack:25648 pid:17462 tgid:17456 ppid:5830 task_flags:0x20400140 flags:0x00080002 [ 760.247049][ C0] Call Trace: [ 760.250344][ C0] [ 760.253416][ C0] __schedule+0xfee/0x6120 [ 760.258069][ C0] ? __lock_acquire+0x4a5/0x2630 [ 760.263132][ C0] ? __pfx___schedule+0x10/0x10 [ 760.268182][ C0] ? rcu_is_watching+0x12/0xc0 [ 760.273170][ C0] preempt_schedule_irq+0x50/0x90 [ 760.278230][ C0] irqentry_exit+0x17b/0x670 [ 760.282915][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 760.288903][ C0] RIP: 0010:__rcu_read_lock+0x36/0x70 [ 760.294450][ C0] Code: ff df 53 65 48 8b 1d 31 78 20 12 48 8d bb c4 04 00 00 48 89 fa 48 c1 ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 04 <84> d2 75 2c 8b 83 c4 04 00 00 83 c0 01 89 83 c4 04 00 00 8b 83 c4 [ 760.314148][ C0] RSP: 0018:ffffc9000561ea78 EFLAGS: 00000202 [ 760.320450][ C0] RAX: 0000000000000007 RBX: ffff888028948000 RCX: ffffc9000561ea4c [ 760.328672][ C0] RDX: 0000000000000000 RSI: ffffffff84cda4a7 RDI: ffff8880289484c4 [ 760.336738][ C0] RBP: ffffc9000561eb40 R08: 0000000000000001 R09: 0000000000000007 [ 760.344905][ C0] R10: 0000000000000200 R11: 0000000000019d37 R12: ffffffff81f2c050 [ 760.353067][ C0] R13: ffffc9000561eaf8 R14: 0000000000000000 R15: ffff888028948000 [ 760.361224][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 760.367476][ C0] ? blkdev_writepages+0xc7/0x150 [ 760.372524][ C0] unwind_next_frame+0xae/0x1ea0 [ 760.377459][ C0] ? blkdev_writepages+0xc7/0x150 [ 760.382476][ C0] ? unwind_get_return_address+0x59/0xa0 [ 760.388096][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 760.394243][ C0] arch_stack_walk+0x94/0xf0 [ 760.398830][ C0] ? blkdev_writepages+0xc7/0x150 [ 760.403848][ C0] ? mempool_free+0xde/0x130 [ 760.408433][ C0] stack_trace_save+0x8e/0xc0 [ 760.413110][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 760.418479][ C0] ? mempool_free+0xde/0x130 [ 760.423192][ C0] ? kasan_save_stack+0x3f/0x50 [ 760.428047][ C0] ? kasan_save_stack+0x30/0x50 [ 760.432915][ C0] kasan_save_stack+0x30/0x50 [ 760.437590][ C0] ? kasan_save_stack+0x30/0x50 [ 760.442449][ C0] ? kasan_record_aux_stack+0xa7/0xc0 [ 760.447844][ C0] ? kmem_cache_free+0x434/0x6a0 [ 760.452876][ C0] ? mempool_free+0xde/0x130 [ 760.457468][ C0] ? bio_put+0x34f/0x5b0 [ 760.461777][ C0] ? bio_endio+0x7a3/0x910 [ 760.466196][ C0] ? blk_update_request+0x741/0x13a0 [ 760.471520][ C0] ? blk_mq_end_request+0x5b/0x420 [ 760.476832][ C0] ? blk_mq_complete_request+0x8b/0xb0 [ 760.482364][ C0] ? null_queue_rq+0xb48/0xfb0 [ 760.487202][ C0] ? null_queue_rqs+0xe9/0x2f0 [ 760.491967][ C0] ? __blk_mq_flush_list+0x9a/0xc0 [ 760.497165][ C0] ? blk_mq_dispatch_queue_requests+0x184/0x7c0 [ 760.503550][ C0] ? blk_mq_flush_plug_list+0x1f2/0x600 [ 760.509226][ C0] ? blk_add_rq_to_plug+0x1ca/0x540 [ 760.514522][ C0] ? blk_mq_submit_bio+0x1bda/0x2bf0 [ 760.519803][ C0] ? __submit_bio+0x1e1/0x6c0 [ 760.524532][ C0] ? submit_bio_noacct_nocheck+0x562/0xc10 [ 760.530437][ C0] ? submit_bio_noacct+0xd17/0x2010 [ 760.536189][ C0] ? submit_bh_wbc+0x59c/0x770 [ 760.540956][ C0] ? __block_write_full_folio+0x77f/0xee0 [ 760.546845][ C0] ? block_write_full_folio+0x3b5/0x4e0 [ 760.552392][ C0] ? blkdev_writepages+0xc7/0x150 [ 760.557458][ C0] kasan_record_aux_stack+0xa7/0xc0 [ 760.562763][ C0] kmem_cache_free+0x434/0x6a0 [ 760.567560][ C0] ? __pfx_mempool_free_slab+0x10/0x10 [ 760.573027][ C0] mempool_free+0xde/0x130 [ 760.577448][ C0] ? __pfx_mempool_free+0x10/0x10 [ 760.582603][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 760.588517][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 760.593724][ C0] ? bvec_free+0x66/0x130 [ 760.598080][ C0] bio_put+0x34f/0x5b0 [ 760.602169][ C0] ? __pfx_end_bio_bh_io_sync+0x10/0x10 [ 760.607830][ C0] bio_endio+0x7a3/0x910 [ 760.612202][ C0] blk_update_request+0x741/0x13a0 [ 760.617318][ C0] blk_mq_end_request+0x5b/0x420 [ 760.622255][ C0] blk_mq_complete_request+0x8b/0xb0 [ 760.627543][ C0] null_queue_rq+0xb48/0xfb0 [ 760.632215][ C0] ? blk_mq_get_tag+0x831/0xb20 [ 760.637085][ C0] null_queue_rqs+0xe9/0x2f0 [ 760.641672][ C0] ? __pfx_null_queue_rqs+0x10/0x10 [ 760.647378][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 760.653544][ C0] __blk_mq_flush_list+0x9a/0xc0 [ 760.658493][ C0] blk_mq_dispatch_queue_requests+0x184/0x7c0 [ 760.664553][ C0] blk_mq_flush_plug_list+0x1f2/0x600 [ 760.669923][ C0] ? update_io_ticks+0x137/0x2a0 [ 760.674849][ C0] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 760.680772][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 760.686706][ C0] blk_add_rq_to_plug+0x1ca/0x540 [ 760.691745][ C0] ? __pfx_wbt_track+0x10/0x10 [ 760.696591][ C0] blk_mq_submit_bio+0x1bda/0x2bf0 [ 760.701710][ C0] ? __pfx_blk_mq_submit_bio+0x10/0x10 [ 760.707179][ C0] __submit_bio+0x1e1/0x6c0 [ 760.711689][ C0] ? __pfx___submit_bio+0x10/0x10 [ 760.716741][ C0] ? __pfx_blk_cgroup_bio_start+0x10/0x10 [ 760.722556][ C0] ? bio_associate_blkg_from_css+0x550/0x13f0 [ 760.728623][ C0] ? submit_bio_noacct_nocheck+0x562/0xc10 [ 760.734433][ C0] submit_bio_noacct_nocheck+0x562/0xc10 [ 760.740180][ C0] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 760.746332][ C0] ? __pfx___might_resched+0x10/0x10 [ 760.751653][ C0] ? bio_alloc_bioset+0x309/0x850 [ 760.756721][ C0] submit_bio_noacct+0xd17/0x2010 [ 760.761781][ C0] submit_bh_wbc+0x59c/0x770 [ 760.766401][ C0] __block_write_full_folio+0x77f/0xee0 [ 760.771974][ C0] ? __pfx_blkdev_get_block+0x10/0x10 [ 760.777462][ C0] block_write_full_folio+0x3b5/0x4e0 [ 760.782946][ C0] ? __pfx_blkdev_get_block+0x10/0x10 [ 760.788353][ C0] blkdev_writepages+0xc7/0x150 [ 760.793208][ C0] ? __pfx_blkdev_writepages+0x10/0x10 [ 760.798879][ C0] ? do_writepages+0x4b5/0x600 [ 760.803752][ C0] ? do_writepages+0x4b5/0x600 [ 760.808537][ C0] ? __pfx_blkdev_writepages+0x10/0x10 [ 760.813993][ C0] do_writepages+0x278/0x600 [ 760.818580][ C0] ? __pfx_do_writepages+0x10/0x10 [ 760.823766][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 760.828957][ C0] ? _raw_spin_unlock+0x28/0x50 [ 760.833793][ C0] filemap_writeback+0x22d/0x2e0 [ 760.838925][ C0] ? __pfx_filemap_writeback+0x10/0x10 [ 760.844512][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 760.851105][ C0] ? apparmor_capable+0x1d7/0x4d0 [ 760.856152][ C0] filemap_write_and_wait_range+0xa6/0x130 [ 760.861980][ C0] sync_blockdev+0x4a/0x70 [ 760.866399][ C0] blkdev_common_ioctl+0x2028/0x2ba0 [ 760.871709][ C0] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 760.877366][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 760.883444][ C0] ? do_vfs_ioctl+0x226/0x13e0 [ 760.888293][ C0] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 760.893322][ C0] ? find_held_lock+0x2b/0x80 [ 760.898008][ C0] ? __fget_files+0x215/0x3d0 [ 760.902684][ C0] blkdev_ioctl+0x43b/0x6f0 [ 760.907193][ C0] ? __pfx_blkdev_ioctl+0x10/0x10 [ 760.912233][ C0] ? __pfx_blkdev_ioctl+0x10/0x10 [ 760.917315][ C0] __x64_sys_ioctl+0x18e/0x210 [ 760.922088][ C0] do_syscall_64+0x106/0xf80 [ 760.926672][ C0] ? clear_bhb_loop+0x40/0x90 [ 760.931338][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.937214][ C0] RIP: 0033:0x7f05a439c799 [ 760.941614][ C0] RSP: 002b:00007f05a52d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 760.950017][ C0] RAX: ffffffffffffffda RBX: 00007f05a4616090 RCX: 00007f05a439c799 [ 760.958168][ C0] RDX: 0000000000000000 RSI: 0000000000001261 RDI: 0000000000000003 [ 760.966146][ C0] RBP: 00007f05a4432c99 R08: 0000000000000000 R09: 0000000000000000 [ 760.974266][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 760.982310][ C0] R13: 00007f05a4616128 R14: 00007f05a4616090 R15: 00007ffce585ed18 [ 760.990309][ C0] [ 760.993974][ C0] net_ratelimit: 19412 callbacks suppressed [ 760.993988][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 761.012285][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 761.024774][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 761.037342][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 761.049702][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 761.062220][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 761.074707][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 761.087312][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 761.100022][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 761.112494][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 765.998623][ C0] net_ratelimit: 20503 callbacks suppressed [ 765.998641][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 766.016835][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 766.029553][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 766.041798][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 766.054059][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 766.066492][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 766.078807][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 766.091334][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 766.104018][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 766.116308][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)