last executing test programs: 7.591976229s ago: executing program 1 (id=2013): mmap$auto(0x0, 0x2, 0xdf, 0xeb1, 0x401, 0x8000) open(&(0x7f0000000800)='./file0\x00', 0x422240, 0x147) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) getsockopt$auto(r0, 0x84, 0x1b, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000080)={0x2, 0x0, [{0x198, 0x46b, 0x718c1257}]}) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) 6.689729686s ago: executing program 1 (id=2014): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00'}) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x8000001f}, 0x6, 0x3, 0x4, 0x2e) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0x2d, 0x2, 0x8000000000000000, 0x0) ioctl$auto_XFS_IOC_ERROR_INJECTION(0xffffffffffffffff, 0x40085874, &(0x7f0000000140)={r0, 0x1}) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000100), r1) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x42, 0x0) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) ioctl$auto_USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000540)={0xfff, &(0x7f0000000180)="f2e37aa851f172bd24308737938225756749a2cd058f981d81224e731c1514b4fd0290f2fb02e666a68c1d72ad5615b16c73b5c0cedf17801dfece4a243f6e3a47ecc1c5db92b3500cefe0e7c269c25cd32701679442d287388dedeedd83d20b9d079d0a971a993bfa4a4499f8631caa1722a7a93bf39c2535ea752a9b05e21efeebdeaa71269153bdd6ba4fac9b230a6653e8cbaf66e11ea7c105"}) rseq$auto(&(0x7f0000000b80)={0x3, 0x8, 0x9416, 0x4, 0xe, 0x6, "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"}, 0xd6, 0x8, 0xfd) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x112) rt_sigsuspend$auto(0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto_EVIOCGMASK(r3, 0x80104592, &(0x7f0000000000)={0x2000, 0x800004, 0x105}) ioctl$auto(r3, 0x80004509, 0x10000000000402) ioctl$auto(0x3, 0x800005411, 0x38) mbind$auto(0x0, 0x800605, 0x1, &(0x7f0000000500)=0xffff, 0xa, 0x1) futex_wake$auto(0x0, 0x5, 0x4, 0xa) socket(0x11, 0x80003, 0x1d12) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x82940, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) getdents$auto(0xffffffffffffffff, &(0x7f0000001c40)={0x81, 0xffffffffffffffff, 0x4}, 0x4) socket(0xa, 0x3, 0x3b) connect$auto(r2, &(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}, 0x2}}, 0x58) 6.34596891s ago: executing program 3 (id=2018): socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x22, 0x3, 0x0) ioctl$auto(0xffffffffffffffff, 0x40104d01, 0xffffffffffffffff) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000002dc0)='/dev/adsp1\x00', 0x503401, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) write$auto(r0, &(0x7f0000000100)='/dev/audio1\x00\xf6\x89\t\xb6t\xae\x12Q\x15E O\xd8\x8d/\xd9\x13\v_\xbcTd\xe0DS\xef?f\xf1ou\xa4W&^\x80\xb2}\x96K\x16*\xa0\x10[8\xa3\x86\x9a3\xc1\xf7\x89x; 4\x8d,U\xa2\xd8\xd5\xfd\xf8\xd8\xb0\xe0W\xad\xe7\x05l*\xc5Z\x8d\xc88}n\x81\tK\x00\x12\xae\xff\xe5\xf1\xb5w\x81$\xd4\xca\xbe&\x195\xc1\xda>\x8c\x89P\xa1\xdb\xb4g9E\xc8\x92\xf6m\x1c\x9b\xebAzeI\xcb\x16f\xc0@\x978x\xbe\x15\'\xc6d}\xc2\xd3\x9f\xc5F8\x15f\x90\xa2\x84', 0x6051) readv$auto(0x3, 0x0, 0x1) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/nr8/queues/rx-0/rps_flow_cnt\x00', 0x109326, 0x0) write$auto(r2, &(0x7f00000005c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xe1\x903\x9e\xca\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81\xe4\xab\xc5\x8da\vr\xb91\xfe\x9a\xf0\x0f\x03\x12m/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\xf4\r\x19$\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbbc\xb9\xd0\x1f\xd9\x8e`\xba\xd0\xa4\xf5\x00\x00\x00\x00\x00\x00\x00\x00', 0x98c7) msync$auto(0x0, 0xe0, 0x6) 5.082615481s ago: executing program 0 (id=2021): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x300c00, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@nfc={0x27, 0x0, 0x0, 0x7}, 0x58) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r0, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x4a7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) semctl$auto_GETALL(0x1, 0x2d8d, 0xd, 0x5) 4.696428394s ago: executing program 1 (id=2023): shmget$auto(0x5, 0x7, 0xfffffff7) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/net_prio.ifpriomap\x00', 0x10b142, 0x0) sendfile$auto(r1, r1, 0x0, 0x5) shmget$auto(0xb1ab, 0x8000000000000001, 0x7f) write$auto(r1, &(0x7f0000000480)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\xff\x7f\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc:\xfa\x01\xd1\xa3\xb5\xc2B\xa5\xac:woR^a\xb9}\xe7\xbd\xe1\xf77.\xa3\xd8\xc2T\x95\x13\x91\xb6p\xf3\xb2w\xe6\xd7\x94DW\x97\x90a\xe6c\xfb\x88x\xd5L\xa9\xe4\x82\x04\xb1\x8b\r\xcaP\\\x1aVP\xc9\xa4`\xfd\v\x94\f\xc1\x0fQ\xc9\xdcL\x03\x9c\xbfk\xa6\xb1\xb0\xa1\xeeJ\xd8\xef\xc8t\x9d\x1e=J\x91W\xc6AuJ\xb9Q\xed\xd1\a\x05\x9d\x85\xb7b#r\xcd\xaf\xb7\x9f\xf7\xd2\xae\x0f\x98\xa9&\xb6~\xd4\xbd\xbbr\xb9\xc3\xacH!\xc1\x11G\xf3<\xc7\xc7\xc4\x90K2\x05K@\xee\xac\xe8\xc7\t\xab\xbf\xa3\xedb\xd7\xb5\xd7\x83&\x95\xb2?\x0e\x85\xaaIGu\xd6$\xeb\xb6\xdd\a\x121\a\xac\x1bx#\x87\xa9\x10\x9b\xf8YD\x04ZL\xca\x99]\x8f[\x90[\xa8\xbf\x98\xa6\xe50(zC\xe84*\xa4\x1d\x8d\x9b\x18I\xd0\xb3\x88C\xd7y\xbf\x81A\xa0\x84\xd4\x84\x8f\x1f\x8b\xe0S\x03\x18\x9ce9\xa9\xacB\x8f\xad\x18[q\xa8\xe9\\\x03\x00\x00\x00R\xdaq\xde\xd4\x04O|\x00\x00\x00\x00', 0xb) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x80000, 0x0) (async) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084) (async, rerun: 32) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0xffc, 0x8, 0x80000000000000a, 0x0, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103}) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) (async, rerun: 64) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000053c0), 0x41, 0x0) (rerun: 64) ioctl$auto_KVM_GET_SUPPORTED_HV_CPUID(r3, 0xc008aec1, &(0x7f0000005400)) (async) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), r0) (async) r5 = waitid$auto_P_PID(0x1, 0xffffffffffffffff, &(0x7f00000000c0)={@siginfo_0_0={0xe1, 0x81, 0x401, @_sigfault={&(0x7f0000000340)="c99c632764c386d65e1424a166d65954b94f5f1501aad7aed1a16a50966217bb43305f23fa458a2b25702e6d3eefe187331ca1f86fc945c5b280d848590b6b4bcfa32041bf7880787f2c86bba34453c899a3d53226a6b70e63d3920921a253de319fadf4c93038e624e59a375d3af3a5c82e96acc2745ea7b37f7d3679c659dd916387b482cfa30afa0c0a0f89ab5d0d64725e5e519ea3f2e59eae0c06ae4fe7fa095165c33a993c60745a48609ffed3383231bc4b946753992980aa82669edf2c45c1b7e98ed30e5f9413a2633f3e74a16f52cc3de231b7ca20ba39929759c98f021a0fd4d46330", @_addr_lsb=0x101}}}, 0x7, &(0x7f0000000240)={{0x3, 0x6}, {0x4, 0x7a62}, 0x7, 0xb, 0x80, 0x2, 0x145, 0x10, 0x7ff, 0xbe9, 0x1, 0x9, 0x3, 0x9, 0x1, 0xf44b}) sendmsg$auto_NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000140)={0x34, r4, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1ff}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x800}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x5}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x5) 4.543984462s ago: executing program 2 (id=2024): openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) io_uring_setup$auto(0x401, 0x0) read$auto(0x3, 0x0, 0xfdef) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) lseek$auto(0x3, 0xffffffffff800002, 0x10) prctl$auto(0x9, 0x8, 0x0, 0x6, 0x100000001) r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) r1 = timerfd_create$auto(0x80, 0xfffffffc) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) fallocate$auto(r0, 0x1, 0x820, 0x7fff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x4ea02, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000180)="fc5ea5f1401a03cd7d362456adda0cf384c0e2d7bd3d31e409957ab6bd240c4af9373f9691253b947acf08619bf87d27ebc9b1fff0ce71c342980e157ce4c431437e") mmap$auto(0x0, 0xb9f, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ip_vs\x00', 0x10b643, 0x0) bpf$auto(0x5, &(0x7f0000000200)=@info={0xffffffffffffffff, 0x9, 0x8}, 0x1) unshare$auto(0x40000080) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x8001, 0xffffffffffffffff, 0x1b, 0x7) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x600001, 0x0) acct$auto(&(0x7f00000002c0)='/dev/rfkill\x00') 4.150779679s ago: executing program 1 (id=2025): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/kexec_crash_loaded\x00', 0x100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000240)=""/140, 0x8c) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000300)='/dev/adsp1\x00', 0x2, 0x0) r2 = prctl$auto(0x23, 0x9, 0x2008, 0x0, 0x0) ioctl$auto_OSS_ALSAEMULVER2(r2, 0x80044df9, &(0x7f0000000380)="9d1762cbb7829f8d3fb18591b084d80d92343101f817b4a6e9a9877102c77979621afb68e30cd1a743be112689b11bd27219201d82d566ff59d1b9f5e0eb4dc8e2f56ac8a0bc5866") statmount$auto(0x0, &(0x7f00000004c0)={0x8, 0x1, 0xb5f0, 0x7352, 0x36, 0x7f, 0x80000001, 0x6, 0x3, 0x2, 0x7, 0x80, 0x0, 0x4, 0xb4, 0x7, 0x9, 0x10003, 0x7c, 0x8, 0x0, 0x7, 0x2000, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, [0xc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffc00, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x40000, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68cf, 0x0, 0x1, 0x2, 0x0, 0x0, 0x80000000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd8, 0x200000000], "ae1922e8b252c280c500"/26}, 0x1fe, 0x5) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) mmap$auto(0x0, 0x20005, 0x4000000000df, 0xeb1, r1, 0x8000) r3 = socket(0x2, 0x801, 0x84) r4 = socket(0x2, 0x3, 0x1) connect$auto(r4, &(0x7f0000000040)=@hci={0x1f, 0x4, 0x4}, 0x2) connect$auto(r3, &(0x7f00000000c0)=@hci={0x1f, 0x3, 0x3}, 0x5) capget$auto(0x0, 0xfffffffffffffffe) setsockopt$auto(0x3, 0x10000000084, 0x1e, 0x0, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="ab77e4771d67d479cd746f3cf45a301ae43bc5b91c8cf8c745631220d428889adaf41f8cb3f9d76a2943bc48ab175d7612fa1f1235d73597efbb448bdc7fbaa6be19d160f98cc4c1912da0cf9b10ad13ac9fb1546626c0745114540e61ba62b53b4891cd0315e6bded1237903ef21d6683d2404907fd95ea817bc7f9746b00cc8a267155a8de5b67a5394a784b5737d90a42052697ac098008283077e39cc0fc5249101105a54738af729a60d6c297b7abd5788fe38931b0dc8d003be8ae60cf08eb184d77319f", @ANYBLOB="d4a0c604281d2a51155bcf391013f95dea5f6c047809e881a786b28de5e4135950ac7127fa3e3dfbfca419cd8d8cdc7ed75aa8f476d08740350d3b2f619f42ca95ca4d3eb59410e94b557e28a8ca0f3dcc51ae2818771520ea174dd8d55965f1bcf427f548c3c3530078a5fdc194d66d3b7d94a1a6a2e571462fe1332ac36cd5256d832fbc086e93bde32293ce30231ef33547c0bbfd7faf1c77fd033eb80874a13fba59"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r5 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x1f, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) landlock_restrict_self$auto(r0, 0xfffffffe) mmap$auto(0x80000000cc, 0x7, 0x0, 0x2fe, r1, 0x83) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x82002, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48010}, 0x20004800) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x2) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) syz_clone(0x20a08200, 0x0, 0x0, 0x0, 0x0, 0x0) gettid() 4.150573755s ago: executing program 3 (id=2026): socket(0xa, 0x3, 0xf2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x900, 0x0) r0 = socket(0xa, 0x2, 0x84) mmap$auto(0x0, 0xa, 0x3, 0xeb1, 0x3ff, 0x8000) socket(0x2, 0x80002, 0x73) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) getsockopt$auto(r0, 0x84, 0x1b, 0x0, &(0x7f0000000040)=0x400) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, 0x0, 0x103041, 0x0) socket(0x10, 0x2, 0x0) openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/etherd/interfaces\x00', 0x202000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0xa, 0x10001) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0) 4.081788485s ago: executing program 0 (id=2027): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) socket$auto(0xb9f1, 0xfffffff7, 0xffffffff) 3.811091843s ago: executing program 0 (id=2028): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) openat$auto_proc_timers_operations_base(0xffffffffffffff9c, 0x0, 0xa0000, 0x0) prctl$auto_PR_SET_MM_START_CODE(0x6, 0x1, 0x0, 0x8, 0x3) r0 = syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(r0, 0x1002, 0x0, 0x0, 0x0, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0xf9e, 0xf, 0xfffffffffffffffe, 0x40008003, 0x948b, 0x3, 0x15f4da0a, 0x1, 0x3, 0x5e, 0x80000001, 0x7, 0x3, 0x90, 0x2400000001, 0x2]}, 0x0) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200000005002a0001000000080017"], 0x24}, 0x1, 0x0, 0x0, 0xc045}, 0x4) recvmmsg$auto(0xffffffffffffffff, 0x0, 0x40000000, 0x3a02c2c5, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x2, 0x1) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000180)='/proc/devices\x00', 0x420402, 0x0) sendfile$auto(r2, r2, &(0x7f0000000040)=0x8010, 0x4000000000788b) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x200, 0x4) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) getsockopt$auto_SO_TXREHASH(r1, 0x0, 0x4a, &(0x7f0000000140)='/dev/tty0\x00', 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="720100", @ANYBLOB=' '], 0x1ac}}, 0x40000) ptrace$auto(0x30, r0, 0x4, 0x7ff) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) 3.561885902s ago: executing program 2 (id=2029): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r0 = waitid$auto_P_PGID(0x2, 0x0, &(0x7f0000000100)={@_si_pad}, 0x9, &(0x7f0000000180)={{0x7}, {0x10000, 0x91}, 0x4, 0x0, 0xd33, 0x83, 0x100000001, 0x6, 0x7, 0x1, 0x6b1, 0x9, 0x3, 0x4, 0x8, 0x6}) mmap$auto(0x0, 0x100000020009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x2a, 0x80002, 0x73) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) open(0x0, 0x64842, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/ptyq3\x00', 0x40001, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) mprotect$auto(0x200000000000, 0x1f, 0x5) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001d80)='/sys/devices/virtual/sound/ctl-led/speaker/card0/attach\x00', 0x1, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000003c0)='4', 0x1) unshare$auto(0x40000080) r5 = socket(0xa, 0x3, 0x3a) socket(0x3, 0x5, 0x0) ioctl$auto(r5, 0x8982, 0x1) r6 = prctl$auto(0x3a, 0x2, r0, 0x5, 0x800007) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r6) r7 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0) write$auto(r7, &(0x7f0000000080)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) prctl$auto(0x5, 0x39a, r0, 0x9, 0x20000000000001ff) r8 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000240), r2) sendmsg$auto_TIPC_NL_BEARER_ADD(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)={0x210, r8, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x1fc, 0x7, 0x0, 0x1, [@generic="20f8798b60d881f5689ebd08e7cd36b4939e2a0075e42de17ea2870fc830a8279a571ac7a93cc90b8c84e5d3d3f51d1722b8f7a03af6767e014ac0c14aa2c0793c9b2380196a87a5a3f8f0d2389111e3f9f353d612ba498b5eccdb82b6dd058b0659babd1f50a00fc3a034882f381192e6b1796ceb9f1299ce8f3a008886581e9f51af92626fdacaa60694707ac3dce9e66c8addf5a030e5b0827627dc2c4dc9a16903e0cdb09dcad228685b3079d5e94bf2eb7bd6d5f6c42f6d56", @nested={0xc, 0xf5, 0x0, 0x1, [@nested={0x4, 0x10c}, @nested={0x4, 0x6e}]}, @generic="e676f4fb1aceea7c1c8d5379fa6f8eb64d8a211ecebb616633b9d1d6e00427a5f9d40a424313f5a3fd47613bd814fad7301653ad2b7224e0cb205a1a7764a1fcc6c1aa11ec7b2c9922d7fb7d08e2b153c99c7af70af554d658470fe919e085660f73cb989761ba5a0fcca6d4421a5ab1f52baab22ed9d85f4e75b0f752d8e46364ac59b569d5da9687ba54349d23cbbf91bd", @generic="37f7708325f3474ab5a4040f97ebf53e2e883ffb224f052b5f050ae8b7efcbdeaed04d473fdd48268c6cdde2f79fce1cd5c3e843d8f9e3f40d711ab657959affaa3cc40f6f3412097ab0ba2db45ec2123868c08960f32585568c24cc11449a4635ea5f8da0543677471d9872e54ada09250936779ae101c6cad394adb0241a6542aeb302cde656af011ad014ff060fabcc0749410e641507477aedf830cbce"]}]}, 0x210}, 0x1, 0x0, 0x0, 0x44a33471818363ad}, 0xc001) io_setup$auto(0xe, &(0x7f0000000080)) 2.943071039s ago: executing program 3 (id=2030): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_SNDCTL_SYNTH_ID(0xffffffffffffffff, 0xc08c5114, &(0x7f00000002c0)="a668fa47f8ce1ac320e7d5b8de29899f0df232d70be76e068abd2173") close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) r2 = io_uring_setup$auto(0x4, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) openat$auto_lowpan_control_fops_6lowpan(0xffffffffffffff9c, &(0x7f0000000040), 0x2001, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x84c, 0x0, 0x9, 0x0, 0x3, 0x10b}, 0x800008}, 0x1, 0x20000000) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000180), 0x7112}, 0x8) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) io_uring_enter$auto(0x3, 0x0, 0x1, 0x3, 0x0, 0x2) r3 = syz_genetlink_get_family_id$auto_nl80211(0x0, r2) sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r3, 0x200, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20040802}, 0x44080) io_uring_enter$auto(0x3, 0x1, 0x2688, 0x5, 0x0, 0x7) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x40010) madvise$auto(0x0, 0x2003f2, 0x15) 1.982236689s ago: executing program 0 (id=2031): openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D1c\x00', 0x100040, 0x0) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x182) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x8, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x801, 0x106) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) r0 = socket(0x10, 0x80002, 0x0) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) timerfd_create$auto(0x0, 0x0) timerfd_settime$auto(r0, 0x3, 0x0, 0x0) read$auto(0x3, 0x0, 0x80) settimeofday$auto(&(0x7f0000000180)={0x10000001f, 0x1}, 0x0) 1.914373339s ago: executing program 3 (id=2032): openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x20a00, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) socketpair$auto(0x0, 0x6, 0xffffffff, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyu2\x00', 0x101800, 0x0) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) (async) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) sysfs$auto(0x2, 0x1f, 0x0) (async) sysfs$auto(0x2, 0x1f, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) (async) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x801, 0x106) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x80002, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x801, 0x106) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) write$auto(r2, 0x0, 0x5) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) read$auto(r3, 0x0, 0x1f40) (async) read$auto(r3, 0x0, 0x1f40) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) r4 = socket(0x10, 0x80002, 0x0) close_range$auto(0x2, 0x8000, 0x0) (async) close_range$auto(0x2, 0x8000, 0x0) timerfd_create$auto(0x8, 0x0) timerfd_settime$auto(r4, 0x3, 0x0, 0x0) (async) timerfd_settime$auto(r4, 0x3, 0x0, 0x0) timerfd_settime$auto(r1, 0x3, 0x0, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) read$auto(r0, 0x0, 0x2) (async) read$auto(r0, 0x0, 0x2) 1.430699725s ago: executing program 3 (id=2033): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/phram/parameters/phram\x00', 0x4a481, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) memfd_secret$auto(0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) write$auto(r1, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x400005, 0xdc, 0xb4, 0x2, 0x88001) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0xa}, 0x9) listmount$auto(&(0x7f0000000100)={0x1e, @raw=0xfffffffd, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0x1, 0x40001) socket(0x2b, 0x1, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mlock$auto(0x112, 0x80006) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) msgrcv$auto(0x0, 0x0, 0xff9, 0x7, 0xb4) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r3, &(0x7f0000000240)="4c91f2c30f0e9b394b4b235a9c4fb6424455779c24e9468de41ea8045b32267147c252e836dac2503e88661de1c49e6ff9f1fb9e7d013010d451b2bb72838cb579cd7fa26a4801906240d9e0fd4a90bf4e6ffc1dc00e0d3000b3c19294d11753", 0x60) close_range$auto(0x2, 0x8, 0x0) 1.096851689s ago: executing program 2 (id=2034): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) ioctl$auto(0x3, 0x40045542, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000480), r0) sendmsg$auto_MACSEC_CMD_UPD_TXSA(r0, 0x0, 0xa041) r3 = openat$auto_transaction_log_fops_(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x180, 0x0) r4 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) fchdir$auto(r4) r5 = openat$auto_ext4_dir_operations_ext4(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/bluetooth/hci1/power\x00', 0x8000, 0x0) sendmsg$auto_TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000003200)={0xd38, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x1c8, 0x4, 0x0, 0x1, [@nested={0xd7, 0x56, 0x0, 0x1, [@typed={0x5, 0x67, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x89}, @nested={0x4, 0xaa}, @typed={0x8, 0x4a, 0x0, 0x0, @u32=0x217c}, @generic="8b4351fb8f4e19378b68cbbd143a3dc983e70e0ec77e7d6de1945dd4a1642a5d5cee9a2f8415b2ad0670e19e88590fa982494146f3aaee2aa565cbcfc92ec7e839bf409b5d8536a1eaf26a2b23dec070a1e883af7af1bb2e5cf4ab5c7b5d80568b6e387807a087ce817b206fb5620dbb8a416b55ddb4d9e3dc45e648634820f088f65282423cd9f2fa676e5a6e3ed055a757ad7422dd479abba56e4552b57b478959da06b069f759bbcc9606ff22de0fb8019ba6862571a427a945"]}, @nested={0xe9, 0x132, 0x0, 0x1, [@nested={0x4, 0x148}, @generic="4aed7fe0f02f326c88f732754580ef193d390f7548681257cd1ce5de07fc2f235346a597e623ea8f5adef3d3368cef381926f8cb67b1b8c3c401184101be23ffd3eaa4c60f20fbb33c3c965a50c85ed2ec496669b193eaec400b9e5fc50d9b933831bd407682392a5acc6c45838ddd0b779f1eea3b262e361c694e041bf89331d4c3ea6f25b969177fe2a3c03b6fd500f96d89b885a8843ff6d957a278a038ba8f8cebcf365b7dd3c52d12816bd4103d7f51f5e24da4bf16728ba2b1e4a9fcd62d4aa14cf04c1121d4368e5b5b37e86c1d96f45cbbe75c5670eefb868b", @nested={0x4, 0xd2}]}]}, @TIPC_NLA_MON={0x154, 0x9, 0x0, 0x1, [@typed={0xc, 0x25, 0x0, 0x0, @str='nl80211\x00'}, @typed={0x8, 0x103, 0x0, 0x0, @u32=0x7fff}, @nested={0x18, 0x14b, 0x0, 0x1, [@typed={0x8, 0xa2, 0x0, 0x0, @fd=r1}, @nested={0x4, 0xb9}, @nested={0x4, 0x30}, @nested={0x4, 0xc}]}, @typed={0x14, 0xae, 0x0, 0x0, @ipv6=@empty}, @nested={0x14, 0x14, 0x0, 0x1, [@nested={0x4, 0x136}, @nested={0x4, 0x132}, @nested={0x4, 0x95}, @nested={0x4, 0x48}]}, @typed={0x8, 0x14, 0x0, 0x0, @pid}, @nested={0xf2, 0xcb, 0x0, 0x1, [@typed={0xc, 0x10e, 0x0, 0x0, @str='nl80211\x00'}, @generic="5bc561f28007810ccf3494b71c6fefe245d777de0bb2da284cf2e8081762b9d7c67a69be032217da00af9febd4299595deecacee0d0644ddc40f883af277dbbfd21050187db81881f4c63eeed7ee7e4b81ce453299204663213c022fbaba28dfa8280ab66243406ebd2f31e83094cc06b56374fe628c2a87d8232700c5624d4b00537290472c2ed66a483024df6b3c027b55769cda11417edf7a470edd3d09afb5dd7491726b0505dd338c4b250d9aca0aace798f16c995afa7d1c8d8502a436003d7494da989a8b3e531f8d0e463997a219f64f7a155accefd25e733696", @nested={0x4, 0x56}]}]}, @TIPC_NLA_NET={0x33d, 0x7, 0x0, 0x1, [@generic="7e2b7c0adfe9ff3da34fb433e8a0bd3e5a4a953282dc538a562c5fe05985b2db45f63e594d2034efd1860513e6b40bac47b10577908c5659932f69f20af7beb1a4c5d0e6fa68a7eec3a75f5880ff4b8696d3a75c2cf909ea676283f5fa", @nested={0x16e, 0xe7, 0x0, 0x1, [@nested={0x4, 0xaa}, @typed={0x8, 0x50, 0x0, 0x0, @fd=r3}, @generic="5dcb2ccd3c936444d5a6c64ee86cef2efaadeac6b0645b9763f0ff797404f698c2dba0f0ae81419ea86091390768e9ce786a2e5c21f64db3453d6d68ed9e07a195d9b5f7a3847a73e8a49a3fcfd007023e85c26c6698134a7ea3ee5d29460a75f522cd7d2ff4ee19710efc2608", @generic="e0e1c7e3b77faf6b58d3a3754499ec9042b495177e28410da7e157a0936a0503c61226ebb5f773dd624bbdb5f6e167fde79449793c1bc489383711d45d1c08891397d01cd0da74bfadc975a69a2e442ced382180bbdd3e8a5d7303220a48ba77308d2e55799ae7e7452cc37576019760b597b7f8d3faefdb088c51ba352ef42e8bce3f860f4c45e8f19145eeb847468f771e307367ceb14d951c1e2729a3d344326c5367c0b46f2417e6f6dfcba1857123c0ecd99d9ee3a71831353113954b5abaffded0ab69aa2146d16a489b4aa8578ca79b168cb5c35369a8b16bca79c98f7ab901b5bd06d2c573", @typed={0x8, 0xf6, 0x0, 0x0, @ipv4=@empty}]}, @nested={0x119, 0x116, 0x0, 0x1, [@typed={0xc, 0x20, 0x0, 0x0, @u64=0x4}, @generic="bb3c67b132", @nested={0x4, 0x7d}, @nested={0x4, 0xd0}, @nested={0x4, 0xd8}, @typed={0x8, 0x117, 0x0, 0x0, @u32=0xa0a}, @nested={0x4, 0x130}, @typed={0x8, 0xc6, 0x0, 0x0, @fd=r1}, @typed={0x8, 0xa8, 0x0, 0x0, @fd=r0}, @generic="57f3f1051907e9c0610ea0386f41da3cdf9146d01265a6d9185a844fe576f8eb5447052adb0fbd74f4f4759e2674296917d9c88060c99ed6869bdbf1f41f87e794647776d896619781f55cb24c19d427b138f7c85cbc94c2fc75868e7750c117e8143a4132446cf2c4a2c44efa31e6265aa6873d49214ba76b3a89ff97762bfa8b574d664ca7693807c54d8e8f2dd34a64f560185e9c0ba6fd60888af682429868f5708f09557960b7e36da8da6e53c82040b775a717f4b51da72425bc822e43150586984c0e45afae6dd96c533a813155ba3822b29eeb96b37102f5"]}, @generic="c84f02cd82be3c6bd60a616b66ce78ec82c029acc8c2c331b23a56c8cb4d27e7b175a8a4aa888ad05b03ff6225c570a16d2d20de", @typed={0x8, 0xc4, 0x0, 0x0, @fd=r0}, @typed={0xc, 0xbd, 0x0, 0x0, @u64=0x4}, @typed={0x8, 0xddf, 0x0, 0x0, @u32}]}, @TIPC_NLA_NODE={0x8b, 0x6, 0x0, 0x1, [@generic="5ff6f1bf0615a1a5855442633ed5bddf38361887a20fe392010fe3caeef2cd761992ad0d47f1b846628e621955a11ce74eba7730ea042f4e826a3cf66024da878d4a42c60c8108", @typed={0x8, 0xcc, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @generic="22a3fecd8121f6747b79dc68f133d3ab21bc609bcacbedd16a22240b82c8f811a7dac2d6a2bf96938faf3bbae536009b68a0f72b34f648d1"]}, @TIPC_NLA_SOCK={0x2f4, 0x2, 0x0, 0x1, [@nested={0xd4, 0x117, 0x0, 0x1, [@nested={0x4, 0x132}, @typed={0x8, 0xf, 0x0, 0x0, @fd=r4}, @typed={0xb4, 0x137, 0x0, 0x0, @binary="6240793887c9ea7c0fd9b6b4dfe2b860c86ef5af688d6172ed46b346eed8049b81518737a3e49c5075c9f026b02ad168cf923eb64f80f83cd6b36b3e7304e3c9185039195555788afdc11e32abbcb7fcb1d9748abd7ef809779725297f49857999cb522dcf8c2ae470fc8757d977edb60d32624f3ac4a1e139d53a356f92e8bd634a39e2440ea4107e8ff1d380d7b6a11d4bb3d4e74bd2c224c9e28a3134d4eafd1110125812f9de8e3f83969dc04ae5"}, @typed={0xc, 0x2f, 0x0, 0x0, @u64=0x3}, @typed={0x4, 0xfd}]}, @nested={0xe8, 0x6c, 0x0, 0x1, [@generic="edf77f57bb64a2263a48408ab77e5b159b938b1b4c681833", @typed={0x8, 0xaa, 0x0, 0x0, @fd=r5}, @typed={0xb3, 0x8d, 0x0, 0x0, @binary="ef9c2f33042113488d8f660b4391fbde61ae52d1366029a96ac5941e360779b344c2ad2f6929ac4d04af2517453c3ed2ec42a758acc06927ab6d9d8f4dace2f42332e2ba6c7a1281a8c98eff8d8608ce61625753e9b13889b9d4bcaa9c0ae9626b298dc1856b30c2eb861ee9b37b04cbe9365574496fd227b41b335aab3b6e50751f956fb95560fd2202b29efe1fc766e855c3b0cfd5526fb5efb184572429065dcc9f93135eed68f3c40ea54daaf4"}, @nested={0x4, 0xa9}, @typed={0x8, 0x45, 0x0, 0x0, @uid}, @nested={0x4, 0x112}]}, @nested={0x20, 0x69, 0x0, 0x1, [@nested={0x4, 0xa}, @nested={0x4, 0x62}, @nested={0x4, 0x109}, @typed={0x8, 0xb, 0x0, 0x0, @u32}, @typed={0x8, 0xfe, 0x0, 0x0, @ipv4=@multicast1}]}, @typed={0x14, 0x63, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @generic="3f140bef342dbbe0df75abe536852452", @nested={0xe0, 0x0, 0x0, 0x1, [@generic="846fee7cd5ee658aa34fb2ea8ef7cd4d88fe82c4e25ac6dc5232fd68431006646d999ef25d5cb75ecee33a6f6eca9ee85c247639650567f26b024f94202c374d6975b928db1d47a54100b4a8f17f5b0037e0b177095ecf12e0148f2feecdd7ffcfa2c9ff4314df93b20846c956f7b6a7556354d638c258c929d16d011336ddcca3f8b2883fb244ab9bd56756e59568f2115bf17e20144aae513185bd4f05c9db2322681c2bb1d454cb91128c3c4c3cf997a909c23ac2febf1149b2f34d18888ecde4fa770f1f2230e73420ac9ec554c4e67501bf7d83168da0a8ae3b"]}, @nested={0x4, 0x7b}, @typed={0xc, 0x141, 0x0, 0x0, @u64=0x5}]}, @TIPC_NLA_NAME_TABLE={0x1a3, 0x8, 0x0, 0x1, [@typed={0x8, 0xab, 0x0, 0x0, @fd=r1}, @generic="14d5fac066e943eb52a18420ef2177b74e93a1fbe9d37a2115df2dd16dbd54691dbeb5379a9b894b108b921c2f33c694c9c2068712e75b169de509009b3eb9f63203b8b661251506a3570791a2b7e5b90b9c5b131348327d0aa150b55afe9aeb56c0b3b2bf19ab7de85d", @typed={0x85, 0xc3, 0x0, 0x0, @binary="7331a93f4967dcba6896daeea6aa50865f79ab94f1991726bbe7d7a7010c76d6443d510b1ed018d0adf331cee8300d69d5a6794f5b05c533409122be7c0e4b444e4ab2e15e87028547f95d7672997b87e6d0fb862d075d0297f92076e1fe7849e1efb91dfeeabb6827209f774ab592a6c994abcfa00072578f5dcc1f405b444a30"}, @generic="54415bff767edca8e9c0740f06e890b99a99de45a1035710d0c3501496117fe45ae4a7ac8a5481d78de30ce4a322a991d423d9e2c8c5c7cff54ca58abe78cc6b7291da19fc19ed1475b7762a18a8c5772bfa77c328e5afd9a61bebc964b98ee6ff5fef40e33cd07fb6daf09a647b72e561bbbf6c338a481e0f6a1de78eb758cc85b1ae2502d3abfdb4e9669cac8fdd8809f2b6004fa8cf856dcd04baac48998a9781bb1eb8"]}, @TIPC_NLA_BEARER={0x1a4, 0x1, 0x0, 0x1, [@typed={0x8, 0xa8, 0x0, 0x0, @u32=0xe4}, @typed={0x14, 0x15b, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x12}}, @nested={0x184, 0x13e, 0x0, 0x1, [@typed={0x5, 0x73, 0x0, 0x0, @str='\x00'}, @generic="3ac0310244c1df66e0447b1d603de12d3cbf9489f5762802950649f0089170682ebeddcf28e470f5ebc80cf15c4427952f7eee5ec4bba3c2d493e750f0bc454d46babcc2ada0b52508b239ea830bb452b85c5c36167fae9cdcd93960763af4f98e56554437f84bba70dc1796ca09046ef12b603ce2d7fddf6f3f905fd71c063daed520d7a78e76decb69895411af43a843521e102889f24080b8aaf468f8194a74fbb87843eec5d9320f9c457c399198de2347abac32536185e693", @nested={0x4, 0x11b}, @generic="8d291dd7d42807ec021ae5429919944b99333cf4e640df50372186c844571dc1d4ba3f4658bdec2b1a03d03d034300798238a777255c6905aba8da42310c88df3663cae59c5fbcbb8ce8b462d12cf2edd0b6eaf56cbb42a7617d50b64772847447e451fcd1671873ee75b73a469b7eeb7dd19807788a4b8597c6770fd4a5ba1b0bb683a06eeea700b56edb5c3af75547ccd247e5b9240b27aa48b9295556daf2e70dd1811eeb1b994dd0b255bab5d4f4a43151279d", @nested={0x4, 0x5}]}]}]}, 0xd38}, 0x1, 0x0, 0x0, 0x4008044}, 0x8010) sendmsg$auto_L2TP_CMD_SESSION_GET(r0, 0x0, 0x20000800) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000031c0)='/dev/ttyua\x00', 0x109000, 0x0) poll$auto(0x0, 0x8, 0x1) r6 = getpid() process_vm_readv$auto(r6, &(0x7f0000000000)={0x0, 0xffe}, 0x40000000001, &(0x7f0000000140)={&(0x7f0000000040)="8c9700089d1b208365d5b5d112dbab029ed13881d2f2c7ba2eb01c3db79f77fdc2bb50c64a925009dff4cd1aca925c57100112d88f73348a54396800ed598a0e5500d7c0cbb6b1e91d", 0xdb8}, 0x4, 0x0) r7 = fcntl$auto(r0, 0x6fc781fc, r6) sendmsg$auto_MACSEC_CMD_DEL_TXSA(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000c00)={0x6c, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@MACSEC_ATTR_OFFLOAD={0x46}, @MACSEC_ATTR_IFINDEX={0x8}, @MACSEC_ATTR_SA_CONFIG={0x4}, @MACSEC_ATTR_OFFLOAD={0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4004}, 0x4802) arch_prctl$auto_ARCH_GET_XCOMP_SUPP(0x1021, 0x1ff80000000000) sendmsg$auto_NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x10) mkdir$auto(&(0x7f0000001580)='macsec\x00', 0x9) sendmsg$auto_L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={0x0}}, 0x4) sendmsg$auto_NL80211_CMD_JOIN_IBSS(r0, 0x0, 0x400c854) syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff) r8 = gettid() io_uring_setup$auto(0x7, 0x0) write$auto(0xca, &(0x7f0000000140)='\x04\x14\xa8\x1bk|d\v\x00\x00@\x00\x81\x00\x12\x00\xf6\xf5\x00\xdf\xff\x00', 0x13) r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r7) sendmsg$auto_NL80211_CMD_NEW_MPATH(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f00000016c0)={0x1b0c, r9, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_S1G_CAPABILITY={0x21, 0x128, "4a9396080dad2216576bb2939d246605b4a75924eb37669009243594ec"}, @NL80211_ATTR_KEY_SEQ={0x12, 0xa, "2407b77d15c05952c3bb54230580"}, @NL80211_ATTR_KEY_DATA={0x24, 0x7, "49fb3cde0d2d1fba4cce1e3ae83133e6ce72f7db1f367f51af8675ffca064697"}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x5}, @NL80211_ATTR_WIPHY_NAME={0xb, 0x2, 'macsec\x00'}, @NL80211_ATTR_PID={0x8, 0x52, r6}, @NL80211_ATTR_DISABLE_EHT={0x4}, @NL80211_ATTR_PMK={0x8, 0xfe, "d8d5ebce"}, @NL80211_ATTR_MLO_LINKS={0x18d4, 0x138, 0x0, 0x1, [{0x14c, 0x0, 0x0, 0x1, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa0, 0x1a, "a01431fccb1812e752d297632e2da3a7f4c2dc07f030c559d6271b826d6dac76c9c0cf30895b18d461167d842eaa8ba66fec504c4b1887c16c79170733eb738af4b7d4bd1f96493e09969eaef9cce8941eb22bcf86ed8753c0c45abb31f3724e4828ed5d8e8fd33b6cc8d378cbd63d4842c113afb0da51321bcf721f7eb8b74a0df47b648341cb997ceb0f189ab7a6febbeaa4898016ecc36a07b38f"}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x9a}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_REG_ALPHA2={0x8d, 0x21, "699088a6cf7c75eccdd3b07761a08346a26b4acb58879a6ba532f605c920e3acf5399ea5919679cd9e9ff48c15e75fcb81f72b5312afdefc0cb0abe464b12676de76258bc60b7097b9b8e959f5089167daff6c6511cc096b057b1bdb6b38a36f07f091c31137fd603fbb97c4a0cff9fb6840038d20558c7fe32d0fe8e052410f51735231ebd36a8ffa"}, @NL80211_ATTR_CENTER_FREQ1_OFFSET={0x8, 0x123, 0xfffffffd}]}, {0x1464, 0x0, 0x0, 0x1, [@NL80211_ATTR_RADAR_BACKGROUND={0x4}, @NL80211_ATTR_TX_RATES={0x1248, 0x5a, 0x0, 0x1, [@nested={0x1df, 0x117, 0x0, 0x1, [@generic="c29c029900af469f27a3fb28e9242561ef380ee1f87783106a5d12d3a944f301e5d40e76359ee77d5fcea7a37b1c57052905e45461174d76aed6d7a03a72348052ae73ebe99ffe9503f6deee836f0c7ca4c184dd8a77181d90a624214613fbedd907742b85a34ac21a8ade575599a34cf57fd2e15781555ba8cc5fc34f43996e0ed3eff42445507cd6cb64476a92878d605c993e0bf4c969b05dd778deec96474935757262870fe5a0db17f952418c5d95c7b2", @generic="7f98fa1043cac22bd8123d7e2ccb665a9a0177ae0fecd99734aa75aff563d5221a9590fc080c6a8b6f15", @generic="b19f802fab578ae549c15f0b59c03d3d452d5ec5893741444d2d3dd1b5e157a1facefd00d8fe4549baadbdc3b48ae9b884066d5cbc69e8732bb244", @generic="05b59210a302298057ae5e1fc2ccb56d5fec16aa2111727216a364c31165960ec0a4934e2dffe2946102a62627f9884116082f1ddd114cdd2be43b7c134348e86c94fca860b5616051b9d3d121642e08a87a93aa3e5b94d00e0643db96643cc8e18eea7c0f2753179370e84465305cd915867e6eb6238b2768dd765c140b4a548e755d5add818519f05636ee59be20b1dabe1b42dffcfbb3738c8f5af2c5d3ff01117eec68c5eb3e2d064994e20f8507761cd15cfdd368a017a39c02c1f7002c6cda49"]}, @nested={0x63, 0x40, 0x0, 0x1, [@typed={0x8, 0x142, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x14, 0xc8, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @nested={0x4, 0x29}, @typed={0x4, 0x148}, @typed={0x8, 0xd2, 0x0, 0x0, @fd=r0}, @generic="76b4e0c596b73e84c378c72492a0eaa0a56073f07f37824f481e8ea481dbbc2543b008df637d39", @nested={0x4, 0xd}, @nested={0x4, 0x35}, @nested={0x4, 0x41}]}, @generic="42ad35f002c985d62aee33ab5b78e6820a4c01701d6c4b2682065761e56890af0bd86bffd572fa112b3d119d49e9479827260543bf8da1168591cbe128fd3fbb52d2e3690042c46eb79df0568d2d501d59f66b4116ad79aa33055f0d2f894f585dc5aae53d3fefb1757aba86d90663fb1a69f8b94e878f92a27c09c580cb268639e7538bcdd6916242d27d1e4b92771ebfea9d4fbfa607730f27a6b6a58f282b6e122ec268bef28bd8a8a362e77b1a957c86e8f767ad8f661c0a3c0481a66110f764bbe13e8b20ef7fc811a604f6488242419f2e71f05735c89902cb4c683665a6ddc7b7763b20e622630407129c9b383835895e317756f1776dd04425e57a8fa9f02dc9d144032ed106dc7492c5c9aa4fe640841d02ab1a382d9559d254012799137c1e4d2eb929526642d47428b0781ca0d514608bd35a63e511e3bead185040a1baaf811a2171248bd5a6788d3a089ce1bc5f792796dc02288634bcbd892a33df75d9f73a38a113117bbb223ad3a3e6d22305c3bec508a1cbb0a8df982715d5d8843b994a8242062e0c64b8459e26884b6640f492c1d08f491b11005b187f94dcbbf94c930ea78ab3c3a8779d8f5498495ba44769d695cc8095147e9a610e1bd34e60a25974f477904a7bce721995d0a20612daa6bcafa2dbe8ca0be53705542ba7aa346c516fefa5a65d490227533093236c137118c07e19bf100c98e8e66e911c07413f097ae4bb906b4b759fa1055ed0f360898288f14ace000633b0694faf5a30035585fb6256bc39dbae11266b491c5b82ca68aa01a735a276e95b316f6a2e4a41d1ab92cc88492aa8e0f71b675f52ec413dd585e8d60c35d9141b7cb5d2d1bf28fffec0ca35d3e1ada23f9477344f92464361baa86b726024b2e9df7c52d2f977bdd0f146b368f99227304e3bdb1c43c83a6107d4d1103462f800f1f86bb46682b801786d809fa83e51787176ff1dd2a6c63d42aceac1f232c6f5ec1a432f98e4361a4b1087066e1be2957b77138d9ce732eb16718156ca47f4f9537d232dd4e86c09fe821ffa345c8303f6eff17a66513bdf6096955c4cec712e96655e568b2b05fcf168217ca78c262e656d578984b5d1a6268520c01112ad859706c13f0f7e8078015102f0d2f64fb6f3abefdecb205b8a4d94652208a21113b80433009297a2b18a0e05ae473f11219466f8c85fc197c323009dcc6f0f236fa10c95282330456ba68cc44a9ffba2be6a63f556efc1d41936ee608fa536afcad8a7f3539dc1006cb421ea3fe689d52b0580526732844b1833d6579626a7aa7771f0f58a9d5eeaab8693aa7789c19c009dd2b5ca2e8e189403a0f4b45c66c87bab50ecd9150ddf68515327a6e32d0669dcbf3d48f257a93fbb16c02fe60642f76b54fc4e26e76a74f1457ee50e10e61b819ee4642267a93c99489d30fa8f740398d3abebc7f95fe36a135a3ed3ea7cc5c6dfc0039df5019bc972fd36fb41ed344939bbb82cdd2ac61db6cf9b8e842b4255390dd31ab53b2f1add39cdfcb82d540a1e529a133771ca79f33bc26b0bc965444b289f1303b0622fa4cd16bae027f8902683000a9fca11a7de900818e4afc574ffdc8889adb2cd5df15ac551d3ac0c0e1abd265a4446d07c8daa996b5347d63522c34fd5672aab6d5b568cb5cfe4069b70ae9ca80330dee5bb20823f079ec6ded042e2cbdb336f945ca0df519ddd19b56fa374f32d8cd95f3973d562fea65cf3e0a07e20586e9910bcc588ca9616e5e52e9137c0b0279a856e7fbac10e3791334671401761487249c256b2470611d713ed534ae6db6822aa19e7466e4c07e57a97f07e928e37a28f54d44c709adf69e0090f59e7d40f4cab50786c51ddd668ac5dc658a05ec941389e0c9ae3837d7ec07967e1bc86bf39b13ad76d2980bb2444fc99b8eb4f17d2600f5087afdd3a5fcaa2a1b3cb1900a1cb512074a2e00f8c66e7af07b6db46f097c79ea21ac56946cb363feb060925b41e60e12dbba0899fb7fef88846b5cf9464e1afb33c7d67ffda692256e67818b4b9730a9ecbc7f0796d94380e5d3fc753de82888f9163763fd274f966121047dafb59a73fdbf45c477cabc59335c847c3c7bfc9190b11c97f04e6343d4021c423bbfafbac119fc11c663795c3bc0bc85b71dc05a6616b85a88228d10e9e010dcf05f33adf74e407aea9c9b881d8fe706cc29fce43ad36c8b3366671068b71f788f6b7fab87a7703bb291e5201b19014cb636b7f5f7394d542bda8aced3f0ad2ba86b6841baac99eff1ca4dd894866c359824f6ad2fc9e8353f7efe760b24b3281e6ba4d23722ca3013f8ba63fa9ccb5c913c9871bb68f1559c5219fdbe5e0a163a766632d264608bf7fd80a59a141394091572edde5e9f594bd0a980cc0b87f48889fa41bbe05e2ab4b0208365a96da4858878ac47ff3bf819ff09442ae28516f316e8ba1744128eb3faefc8213c5dea5cb561ef81388006b6239d120d77c98c3507259346d53e7ffa1c73509a46acc327e1187b07bf6a65d8c14d43ec7eceaad17915e45ad00326478c40a9dead170a12ba5d38b7d51fdbc1d4d3dabaf65d8cfa5367431425393bb94d7e4915efa0b0745bc40c54e905ce9eaba5512b1d82a993ae326416daa2508882ee8c34f887c1c7ddd69cc22bca0b2ec70efc464b0886e736996d91e0484fdebe86d79efe9eec2d6bb07bebd5196830b4ee58d14b91960198c35d9f98df8c1b78c7a4039ae21d902b30046b0a4c4c939e7b9c6e0607beb7a68c5575da10d399057c3845bd78be057d82754f8f965ac4eedb6d4505a38a69979fc2ca58e7f26684ef84b1ef419e836d010a667de87f3217e9a038c3979fc05ac83d9999c27b8695ac218d5a610fca5ff2595b1d453c268c41e1c82bd1f85a688b053786c6f13f1c523317d8f3fc830a021f0a8243f04d8722b1dae31ac6cfbd2e5ae80d9997a68e3e07374f628a08f6e4f80420cd297a2c81425b2231dc602406851640fadc221807e111e7a349c76408988acf352a7315a3d86c45c57820fb7bcddb0296a4a7ba5f1c7c3d41c4b0d41ad4310e6b8ba635ceff8eae672e479d1738135c10dbfa15d50961e28847dcc99eca86dcecfb669637ab94a0c68a89086cfab104ea4e16e1670012da4b9fd3ae53ac2f6e1f5052977b775cf8d59719aa5fc99809bfaa438f42c5fa105244b6f2095b2bbbae74547082add2bc058c04f9afd37ec709d07cc2bd73b45c57a0a54338a69c28f30e5c3026782d155ef999c4a1be49b93809fc470fb78b35d05770c304d2f4637ed0f048608d159cffe7137bc419531d00f7eb3d5f53fe28cd677c219caf8378045fbb33903b8ef0cba7812e9a3bcd42a0b735fd7d2b9907e569cd88af1e4480b6d3ad7f5be46fd08284b2dd4853788de57cb6c3bf8275835fe8228e2433a2fade68898b950a12d9ba4c2818273f096a3a24c9148ed4df3f5eeb7a0ba96c11292abf87af76f026f49c1bf60f2da595293d658e45227c942c728e585f952f167b00191515ddad5b2b5122c67d1be59c67adee1ee97f1a75ebd502f2da264baeb161f05f31d814118ba663ed7a5fa8e3fb47c9ed1c248648b4d9a5a7450e0addcb13ad7ee85f2b89cc1b0f4731a8be80bd0c8c03c8686c2595c354771c49e13dd0040ce8c7b454bd3eb039ff1085df2bdc65e565dfcd126c573b834414762a973b9c431fc4dd981785c89dc2446f364955f39ae567552d95f00095f78387f559127ec73387ef45477af04fd2588dd6951b81e5efffa273cd53dd159eb4fc52d5bc7e3303e9859a65904a1f9540d91c314c9284e6c792cc497553b3431d103b6fc683b4415a66ea07110bbf0f8090cfbd1c055cd79f9088e7da3e537ffe97b874da53b07b222d9ec269a4a389d42d7031bd2fb7d3643259da9cf01206e1514ce3f7f34423ddd90db8dd1a1c901a124997bf9d6c16244b39f6a9d3732d8c44e675c0e6ae6024c7b9371f4f62ae143fcf0fc8093a8ed5f871f5c56bfebd9aedc81c901d5f238f4fb5650b2ced0ec6e5e1eafd7a579c3b8dae651f83673c086bb19ada50ba65f88d9fde61e3307cf3f7f4f1911c1905dd4891e47f266de10afafb6f3c544fcb1bdf7232e4e9aa6a9931c1ae911c6b1e433f6a7b17d26112e72b724a13fc722e507cc810cd4ae08152de4f7fe6a46960533d73b33307c63131f06c84459c5db8870311cd151ce4d1dd48ed7e007dc9b1ce85ffe1fc8ac937beaee54063ffa2cc3373f0697a5ef130c85200366a470a843aa4a3221241c721ae17d07b1015b943686e452394e9182a3e206ab72e1ccc68b2b2b83d17b8842849862362c27f250b8d24622e92b5d9725b21da1fb32664e382a16be5a99d97b23343464a1fd11e505c8343ad56f8327bc9807a2fba8e2c389299b5a13a0e2fb7350284a35cedd999645faf3a0b7360e18ba14facd2a44dd68a8ed644a8178a758afec5b0053e8af164f8c25e0f7e7daf89c97bb86bc8681823780517f64950b6a47a7fa1b2ae0532c297fca92b51c171a8b6575eaff96251eb62e92f4c409f05077d758b1c29c43e4deb45097bd0ca0a906849b277d081b51da49901cdab146869d2a1fffcc7a1419103cd7ad23c5d21c58543f0d259df927ea74154468fedb62d2b37bca49d5ae409c51a336c31e7180aca491d0d950c70d624b7ca87482c354a7980214ad25e16df9cc9c938d6c814b909434f681f46b49c160c3c6ce635c81a03a6b463639197112163c58a4d277befb374f369d7a47292a66de0ad68ff23dd166472130eb20a11905292bb56ae49c97eaa3440b903fdd4ae56490d8ea0ed26622700937104729e33b5e5840ab5aea54a0e9db94fcd60f9e6fe87c9fe3c189d41d61bc5caebf767e8dd0044d34827ac96656d2c1a3a30c060fd0c2c928dc9ed5a4131af6a5f5aef8b315b028ccd82fcfc7f16a7253f9176dfdfc43fe9b1d4f59bd78616c7ab9d949fd78dfb6815adaa3b81331c67d5f4810b8ee54d434f345d37df67fd4478201f46c80e9f270140847cab1e611e0dae218d884d3b32631918675e8eb95b5d8383f7f1dcd76c2a098e27f780af14842c9cdf7eb644021e76b3ae49b73f0aeb7a389c8f769b5e170e2a2a3a00fb6de7dc4bb4437607517ec583b02e9519231b1ce0e7d9f2c9c5933d4437cd828edf7764ccc9cd6a4b4f8ee7cffcd16cb365b4812246cce90ee700fc1f0071da3708649713fa296f832bccf8e1fb842e7ec79019f43d84457ffc7a059907719099f2037e812d8a170e649a8d2a2139b25af5a39e806fab088f9d84196b2cf713d5fd30d9d9b5dfe9629cf24881c2ac84553226948a493ddf32ad994b9e7144334e7eefdf0599a7ddc74c2eca2819dd33e111aaa88c7db4aa370ec4e7faa4867f515fa66392f866044f3e3c08bdf9f7b738254c4b996687042e054d03816229d66f3b106b381d09bf87fbd483ec2017f458505625206a4a50e2a133d40bf79f2c011ead6a2179f0c6068904343951e6eeae4651f19155f7bfa7ee79799fdcdd2c2a15a3f141a8a2514af5fadda6c4691864ecf646f186830641135447e1134c498bfa1a50a73e7329cf34bf1affb5b4e54dc89f75c877cfa3bcaaa7bcac66fefdf6234a22c0521e21be7f10471c0d7994af4bfc151ee3b0456dacbe63fbd4657a7b5ef3883cd6a8b887208aba8b922d8a94ea6fdf1d9f9b53f4183ba792806055c412a3107b88d0f7dd7ec6269d648d1a0e3a6647b7e2a9fca11f63cb509d87095e1b526b098979d14cc4d8a2423be635e9b0aa85e"]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x19}, @NL80211_ATTR_FILS_DISCOVERY={0x1b8, 0x126, 0x0, 0x1, [@NL80211_FILS_DISCOVERY_ATTR_TMPL={0xaf, 0x3, "6fdefda32af58e830ae1ac8b50b1faaf5279da97ebf6d63245c3e44d720af5f879431e5811bdb5f8c70894ebca0e9789ffd07c998a0d46047fcabf4737f29a332e21b0781d0ee6b868777a927f9337589bd650f78f59e55082ce9099316704cd7185f8a07e63aca8b44676442ed26b50e87d642d93539c6b05335a4eb3a0bfdc6f52b602b7ccafc082111302b0a9a54e7e741bc547ee980087426b0c8dedc4e0b84ec847e50cd4118e03fe"}, @NL80211_FILS_DISCOVERY_ATTR_INT_MAX={0x8, 0x2, 0x2}, @NL80211_FILS_DISCOVERY_ATTR_INT_MIN={0x8, 0x1, 0x8}, @NL80211_FILS_DISCOVERY_ATTR_TMPL={0xec, 0x3, "fc1011d9326aedf2d542c975e0fce40f447745f3e1f05270c01b8f77541f9a8514b9c9dec9a5fe20f01b9d2cab482097ec0de43cf395fcc231a9a843bbecda6058355330ba1b165e1030c411c59486d64872b68b3f39c26bf8de9de4ea2ed62415657c1889c91444606d6d144d55986965929d025925ab0dc16fce1b516edc7ce29108792a88ba87d48f79dea062dc1382f2e88f40ab4dab1a7e2e14502f2fd7581f8eba90d82ad68731e3a0d60c13f884c33960f7556dba9f1d185ccedecbb978c1a7c2b1c186506a537364131bb95b56e95000849f7162dc51271d3bceb9fede21f5328e7f1e4f"}, @NL80211_FILS_DISCOVERY_ATTR_INT_MAX={0x8, 0x2, 0x440}]}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0xcc}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x23, 0x13, "27f49eb98eaabb9278dad848224a4f27786ecf97c317cc0048e805cb7a3a47"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, 0x5}, @NL80211_ATTR_OBSS_COLOR_BITMAP={0xc}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x7}]}, {0x2a8, 0x0, 0x0, 0x1, [@NL80211_ATTR_TID_CONFIG={0x29c, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x42}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2c0000}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7e}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x7}]}, {0x88, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x50, 0xd, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x40}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0xb}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x7}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x3}, @NL80211_TXRATE_HT={0x24, 0x2, "e9dd6ed1bb549369904ed5b14f17df01ede0f0d84229c48faeea8e10aa05c385"}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1ff}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8001}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x81}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2d8}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x6}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0xe3}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x8}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x9d}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0xad}]}, {0x118, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x108, 0xd, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x3}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x9}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x4}, @NL80211_TXRATE_VHT={0xb2, 0x3, "4f3cbc147124ef0800727d25d060d1a5b9ad4e8476fbb42f47e8b46eb27085eeb017f155e6c295b446f96b80ad8b4764e62fe420aeddf81e56bd1b59238d6206786b85005785f1fad6c706dff8bb88c9b23f8074b5472f2c64a0c8e895d81e25be9ceaeda007cd35033174d9c608224edc914fe49ebd0e6a38b96db11c2d1f8708b21f60079b6c560577a32977af024900206022ef28378c779508e8e48c43ebfbd356cc61d2175d9beeb71cc8eb"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_LEGACY={0x21, 0x1, "6712994307cd40e928b4f98ead9b01047a2d97ddae93eddb9f76a0eba0"}, @NL80211_TXRATE_VHT={0x9, 0x3, "c18cbe1bb6"}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}]}, {0x4}]}, @NL80211_ATTR_MLO_LINK_ID={0x5, 0x139, 0x6}]}, {0x78, 0x0, 0x0, 0x1, [@NL80211_ATTR_HT_CAPABILITY={0x74, 0x1f, "5fc2b2267dd593d3f0451b04f91ce8ccb0b887c5fc964a8396c2b0bde6893ac4203dd78434f9f2fc25ee217cf24ee248ef7e469bf850c032f65f2c10fd57aafc49fccf8cca0819708f6830f7bd5c7b4e54cf95695ebef4d46633cd918f67ffc50a706d7cbbbc9a5c83d0ae553ea78dd8"}]}]}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x19f, 0x84, 0x0, 0x1, [@typed={0x8, 0x87, 0x0, 0x0, @ipv4=@remote}, @generic="a0c78cb4c7553cfc3e09dbb0ea758c238eacb28d04ec6850bc351956fb83c14eb4fe824e3c516e7f04be73402b2bed65c6d3abed8a47e2e0164e4352146f261a0ce0e9a8fcac99b7437b64600506880849cd5e6a56f9d8f63d7f3faadbe1b6dd2a0f353f3bf80aa92a7dfb9ab6c434a347e85c3a6f6f3852eef87546033a4cbb50afc70ec68b9849b4f754b4c07c88d07337c5f8facee856f11c96d05678c12139ee81249f1b4db168a0608fc5c1f083362cafdb714a54719f301f6412700f86a15551b3e0c9c0daab1ec9871c8b947e7130693b814bae26754f17ac426bcf1a63157a44d5b136", @typed={0x88, 0xb5, 0x0, 0x0, @binary="f54eaa283a634a5406c7173ecb14a44eea6a519359ad513300cca01acee4eae2778f9294bf11c4c6f1495c24a0bdbb4ff24c7b769ac586767bd203439b8b8e83b82ff627025990cde050c325cae9fccfff8c189ea77401681f0163b31c0b927012578cd2735c9c00449bc583f42fbf95c16367523a861ce1395295763db4cd3ac6feec5b"}, @typed={0x8, 0xef, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x2b}}, @typed={0x8, 0x52, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @typed={0x14, 0x33, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}]}]}, 0x1b0c}, 0x1, 0x0, 0x0, 0x22}, 0x24044015) setpgid$auto(r8, 0xe83) sendmsg$auto_NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, 0x0, 0x40090) 1.083446498s ago: executing program 1 (id=2035): r0 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'pim6reg1\x00'}) connect$auto(0x3, &(0x7f0000000080)=@generic={0x9, "2f8c7765f55cb96d45967d57fb24"}, 0x54) r1 = getsockopt$auto(r0, 0x84, 0x1b, 0x0, &(0x7f0000000000)=0x7ffe) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0xa000, 0x0) getdents$auto(0xffffffffffffffff, 0x0, 0x400018) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0xe0002, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000001c0)={0x30, r4, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8880) mmap$auto(0x0, 0x2020009, 0xa0e2, 0xeb2, 0xfffffffffffffffb, 0x8000) ioctl$auto_TUNGETFILTER(r1, 0x801054db, &(0x7f0000000100)={0x8, 0x0}) close_range$auto(0xffffffffffffffff, r2, 0x1) r5 = openat$auto_ext4_dir_operations_ext4(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bluetooth/hci1/hci1:201\x00', 0x200, 0x0) ioctl$auto_EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000080)={0x4, 0xffffffffffffffff, 0x10000, 0x2, 0x3, 0x8}) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/bonding/num_grat_arp\x00', 0xc8282, 0x0) sendfile$auto(r6, r6, 0x0, 0x1) memfd_secret$auto(0x0) socket(0x10, 0x80002, 0x8) 883.282435ms ago: executing program 0 (id=2036): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/phram/parameters/phram\x00', 0x4a481, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) memfd_secret$auto(0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) write$auto(r1, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x400005, 0xdc, 0xb4, 0x2, 0x88001) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0xa}, 0x9) listmount$auto(&(0x7f0000000100)={0x1e, @raw=0xfffffffd, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0x1, 0x40001) socket(0x2b, 0x1, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mlock$auto(0x112, 0x80006) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) msgrcv$auto(0x0, 0x0, 0xff9, 0x7, 0xb4) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r3, &(0x7f0000000240)="4c91f2c30f0e9b394b4b235a9c4fb6424455779c24e9468de41ea8045b32267147c252e836dac2503e88661de1c49e6ff9f1fb9e7d013010d451b2bb72838cb579cd7fa26a4801906240d9e0fd4a90bf4e6ffc1dc00e0d3000b3c19294d11753", 0x60) close_range$auto(0x2, 0x8, 0x0) 831.421212ms ago: executing program 2 (id=2037): setrlimit$auto(0x0, &(0x7f0000000000)={0x40000000000000, 0xfffffffffffffffd}) (async) ioctl$auto(0xffffffffffffffff, 0x80000001, 0x20000000020000a) (async, rerun: 64) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/sg/def_reserved_size\x00', 0x402, 0x0) (rerun: 64) mmap$auto(0x0, 0x4, 0x3, 0x20eb1, 0x40000000000a5, 0x8000) (async) capget$auto(0x0, 0xfffffffffffffffe) r1 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) ioctl$auto_USB_RAW_IOCTL_EP_ENABLE(r1, 0x40095505, &(0x7f00000001c0)={0x3, 0x6, 0x4, 0xb, 0xe52, 0x63, 0x8, 0x6}) (async, rerun: 32) capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x2}) (rerun: 32) write$auto(r0, 0x0, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) (async) close_range$auto(0x2, 0x8, 0x0) (async) r2 = socket(0x2, 0x80002, 0x73) r3 = socket(0x2, 0x1, 0x84) connect$auto(0x3, &(0x7f00000000c0)=@xdp={0x2c, 0x0, 0x0, 0x35}, 0x55) (async, rerun: 32) r4 = getsockopt$auto(r3, 0x84, 0x6d, 0x0, &(0x7f0000000280)=0x17d) (async, rerun: 32) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) io_uring_setup$auto(0x6, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_register$auto(0x2, 0x1, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x8000, 0x0) (async) read$auto(r4, 0x0, 0xa) (async, rerun: 32) r6 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) (rerun: 32) ioctl$auto(r6, 0xc0045520, r5) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000100), r2) (async) capset$auto(0x0, &(0x7f00000002c0)={0x2, 0x1000, 0x100}) (async, rerun: 32) r7 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (rerun: 32) write$auto(r7, &(0x7f0000000100)='7\x00\\\xa0\x04\xdb\xc3\x8cnI\x9c\t\xbck\x17\xfe_9\xdf\v\x9d\xf7\xa9+n\xf19\x8ba\xe38\xf7u~\r\x91p\x90x\xd9y\xef\x06\xafs\x90\xf0\xf9\xc3\'r\xac\x8d\\\xccM\xe3\x05\x87\x8c\x1beu\xa6\xab\xb2}\xb6\xb8\xa1\xb4\x98\x0f\x9b(8\xb9\xcb\x88\x0e\x99\x81f&\xe4\xe1\xf1\xe0iS\x93\xea\xa1\xb8\xa6T\xf4G\xb0m\xe5!\xa3\xda\x83\xc1\b\xb3\xce\x1bq\x03\xf7\t\x8f', 0x81) 660.944594ms ago: executing program 1 (id=2038): openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mmap$auto(0x0, 0x400008, 0x4a, 0x12, 0x2, 0x8000) sendmsg$auto_ETHTOOL_MSG_PLCA_SET_CFG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20008800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_PLCA_NODE_CNT={0x8, 0x5, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) read$auto(0x3, 0x0, 0x80) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_TSINFO_HEADER={0x4}, @ETHTOOL_A_TSINFO_HWTSTAMP_PROVIDER={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x802}, 0x4000000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/003/001\x00', 0x42082, 0x0) mmap$auto(0x0, 0x66e, 0x80, 0x20eb2, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) unshare$auto(0x40000000002003) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) socket(0x2, 0x1, 0x0) r2 = prctl$auto(0x3e, 0x6, 0x0, 0x1, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000240)={"6c00cf81000300ffffffffffffff291d00", 0x3f7, 0x408, 0xffc, 0x400004, 0x200000000040000b, 0x0}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8002) pread64$auto(0xffffffffffffffff, 0x0, 0x40000000f42c, 0x80002) madvise$auto(0x0, 0xffffffffffff0005, 0x19) ustat$auto(0x801, 0x0) sendmsg$auto_IPVS_CMD_GET_DEST(r2, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000940)=ANY=[@ANYBLOB="6c060000", @ANYRES16=0x0, @ANYBLOB="000429bd7000fcdbdf25080000005506038080011080f53d34c633f70b37b5d6424f99b1fb9d1bde8903f21a19b7d9edd4fe7b40eafc9b0d6f4b3319e1a4bcc0f9cb196efd16c8cc07d861591f7b1b6803630e47f1fd46efe2886784add86686a35f49dbcb9548497735997e9359560adee2fb968ffcdd2b6e577ebc4c626b17017ac360577ed8d9d2b971f12a8543f204008e8004000a8022fe19cf7fd9938c4dcdbf14000800fe8000000000000000000000000000bb0400428008004700", @ANYRES32=r0, @ANYBLOB="59ebe39ed86ec9f23695e98bff05c42324187aa7d038bd1266c86908fe1267bb251f68e0dece76a5fe555491dd17dd988035e03822a3f23cc3248dcf165b553c3bce811731d0b1c2d1a6f3026b54a73e7d47bfc64daad96c8ae5a2a7c42eb2afb110de18ae666cf9715d1da4f8acc67f81c96bef22490e6f5361739efd4e28acd783ffa9d5a69d61cd41b23e9579f64f5dc743d5a3797b442395b2c4904dec5b30cdcefd566782b8a484aa9e3325f922bd3f0fed5ac77aaec2e49aa2cfb539d0c1b54789f0540c6c8b567dc71749859f01308008005a00", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="c1deda6bbcaf3fdf38513eac43dbeb9dcfa5f5eef68195c49b2602726f9c658b261d49023250dd7af776fee19403f89d8c6f9abb403548d9829b4d1c2885c43031827fe2e081014eb918d43e3ac7bdfd32aaab4dbd37363c4cead2f5e6fdb3aa9d21a937d0bc34d450302a754b8d5a106142e67c564cedd9731103294c1d4396de8a8d617f11dffad94d5ed3ac6002ea60bd42538647e3923b5c767dd07e10d956dc648832ae8a490613a9402639087639246c501741f3c286e4d107efeec86757baf16a01968008006f00", @ANYRES32=r1, @ANYRES32=r4, @ANYBLOB="94be4a8d216e44d215c878a077ef6ddcdcfcbbb1f29261a6299b275872dc714dac59e816a6ad7af5ae3e16809ce586fedbc2e3768807c172e75543729511680939d3cbf0d8987222af9662689a4a92dc6e7b6e86fef8eb2f90e77eaa0a97f59e6d7b1d451c58a1d6e3bc40c3c648551dd5582b069f619d8b999b7f285aaa000000"], 0x66c}, 0x1, 0x0, 0x0, 0x40}, 0x4040801) open(0x0, 0x22241, 0x41) socket(0x10, 0x1, 0x4) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x12b882, 0x0) writev$auto(r5, 0x0, 0x3) ioctl$auto(0x3, 0x40a0ae49, 0x38) 452.035275ms ago: executing program 2 (id=2039): r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D1c\x00', 0x100040, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x182) ioctl$auto_SNDRV_PCM_IOCTL_LINK2(r0, 0x40044160, &(0x7f0000000040)=0x8004) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x8, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x801, 0x106) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) r1 = socket(0x10, 0x80002, 0x0) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) timerfd_create$auto(0x0, 0x0) timerfd_settime$auto(r1, 0x3, 0x0, 0x0) read$auto(0x3, 0x0, 0x80) settimeofday$auto(&(0x7f0000000180)={0x10000001f, 0x1}, 0x0) 407.391111ms ago: executing program 3 (id=2040): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) openat$auto_proc_timers_operations_base(0xffffffffffffff9c, 0x0, 0xa0000, 0x0) prctl$auto_PR_SET_MM_START_CODE(0x6, 0x1, 0x0, 0x8, 0x3) r0 = syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(r0, 0x1002, 0x0, 0x0, 0x0, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0xf9e, 0xf, 0xfffffffffffffffe, 0x40008003, 0x948b, 0x3, 0x15f4da0a, 0x1, 0x3, 0x5e, 0x80000001, 0x7, 0x3, 0x90, 0x2400000001, 0x2]}, 0x0) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200000005002a0001000000080017"], 0x24}, 0x1, 0x0, 0x0, 0xc045}, 0x4) recvmmsg$auto(0xffffffffffffffff, 0x0, 0x40000000, 0x3a02c2c5, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x2, 0x1) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000180)='/proc/devices\x00', 0x420402, 0x0) sendfile$auto(r2, r2, &(0x7f0000000040)=0x8010, 0x4000000000788b) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x200, 0x4) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) getsockopt$auto_SO_TXREHASH(r1, 0x0, 0x4a, &(0x7f0000000140)='/dev/tty0\x00', 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="720100", @ANYBLOB=' '], 0x1ac}}, 0x40000) ptrace$auto(0x30, r0, 0x4, 0x7ff) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) 154.517226ms ago: executing program 2 (id=2041): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bpf$auto_BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=@bpf_attr_3={0x2b, 0xffff, 0x6, 0x5, 0x9, 0x21, 0x4, 0x8, 0xd, "9cb752c613de1e128a360e822228879b", 0x0, 0xd0, 0xffffffffffffffff, 0x200, 0x0, 0x3, 0x8, 0x9, 0x6, 0x2, @attach_prog_fd=0xffffffffffffffff, 0x0, 0x3, 0x5b, 0x6, 0x6}, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/adsp1\x00', 0x2042, 0x0) ioctl$auto_SNDCTL_DSP_SETDUPLEX(r3, 0x5016, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r4 = open(0x0, 0x161342, 0x100) setdomainname$auto(0x0, 0x7) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r4, &(0x7f0000000000)='\x91\x02', 0x5) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mremap$auto(0x200000000000, 0x40000000004, 0x4, 0x3, 0x100000000) r5 = socket(0x10, 0x2, 0x2) bpf$auto_BPF_PROG_DETACH(0x9, &(0x7f00000000c0)=@bpf_attr_1={r5, 0x2e, @next_key=0x1, 0x3}, 0x61) close_range$auto(0x2, 0x8, 0x0) r6 = memfd_create$auto(0x0, 0xe) r7 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r7, &(0x7f0000000180)='\x05\x00\x00\x00', 0x80000005) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x6c, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x800}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x67}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @ETHTOOL_A_CHANNELS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x45}, 0x0) r9 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000007c0), 0xffffffffffffffff) ioctl$auto_XFS_IOC_PATH_TO_FSHANDLE(r6, 0xc0385868, &(0x7f0000000400)={r6, &(0x7f0000000240)="c099d4f256158c5b4b5d36e15687a9109c95538bdfd31f53bfc13156bb095ef179306bd35f514b7fd0e8f264772180a1003cb7c8ed16ebaa69dbcfe4e6e87f3252f3b3ba79354a5b2926f3cba5efb2f7b6fdba6a46ccf3ae4dd94e457105e25abcb3da080c37f4f68f5ff2e8f8759346d6c96cdd", 0x401, &(0x7f00000002c0)="1a8bceabafbb25d08f652c687c1f388ca9973a14723e848afc3fc44fd9cc23a4b89603b12d88063ffdd227ea32de58512be579d684d96b72a1580da5bf23aabbacbf103c2de01932583065382c323efc52d235b2d34869f90489fde45960c1c17a305669a2a0b6c1d3e82ecbe2789fae09ec6bc6c1ad40785e5a3328f48459ff3ef2b49519aa6bbff29d2abd049762df05cf8317", 0xffffffff, &(0x7f0000000380)="723ec7b05c47aef595a509fa998c191b8582c5c30bc45e3b0ac2ade296bc0d3e519f8f95dca1f5f03b92c9b8770b796f472642b4cfcb3d03e460c788a47c94e7", &(0x7f00000003c0)=0x9}) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r8, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000200)=ANY=[@ANYBLOB="17817329", @ANYRES16=r9, @ANYBLOB="050725bd7000fbdbdf251c000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x880) r10 = syz_genetlink_get_family_id$auto_handshake(&(0x7f00000004c0), 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r11 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/jfs/loglevel\x00', 0x1a9701, 0x0) write$auto(r11, 0x0, 0x9) sendmsg$auto_HANDSHAKE_CMD_ACCEPT(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x14, r10, 0x1, 0x70bd27, 0x25dfdc00}, 0x14}, 0x1, 0x0, 0x0, 0x4002040}, 0x2004881c) 0s ago: executing program 0 (id=2042): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) getrlimit$auto(0x3, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socket(0x10, 0x2, 0x0) mq_timedsend$auto(0xffffffffffffffff, &(0x7f0000000040)='@*!:}\xc1-.!\\#[./\',-\x00', 0x80, 0x9, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4000810}, 0x20000810) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop2\x00', 0x6281, 0x0) ioctl$auto_BLKZEROOUT(r0, 0x127f, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) close_range$auto(r1, 0x8, 0xfffffff9) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000140), 0xb2741, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0xffffffffffffffff, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) lseek$auto(0x3, 0xffffffffff800002, 0x10) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x9}, 0x4) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x20201, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) unshare$auto(0x40000080) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000000)="b2", 0x1) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x109000, 0x0) kernel console output (not intermixed with test programs): 12927] dump_stack_lvl+0x100/0x190 [ 437.446201][T12927] should_fail_ex.cold+0x5/0xa [ 437.446218][T12927] get_futex_key+0x1d2/0x1620 [ 437.446237][T12927] ? __pfx_get_futex_key+0x10/0x10 [ 437.446251][T12927] ? lock_acquire+0x1cf/0x380 [ 437.446276][T12927] futex_wake+0xea/0x530 [ 437.446298][T12927] ? __pfx_futex_wake+0x10/0x10 [ 437.446318][T12927] ? exit_mm_release+0x19/0x30 [ 437.446340][T12927] do_futex+0x32b/0x350 [ 437.446358][T12927] ? __pfx_do_futex+0x10/0x10 [ 437.446373][T12927] ? __might_fault+0xc5/0x140 [ 437.446398][T12927] mm_release+0x24a/0x2f0 [ 437.446412][T12927] do_exit+0x704/0x2b60 [ 437.446433][T12927] ? __pfx_do_exit+0x10/0x10 [ 437.446450][T12927] ? do_raw_spin_lock+0x128/0x260 [ 437.446469][T12927] ? find_held_lock+0x2b/0x80 [ 437.446482][T12927] ? get_signal+0x7e0/0x21e0 [ 437.446498][T12927] do_group_exit+0xd5/0x2a0 [ 437.446518][T12927] get_signal+0x1ec7/0x21e0 [ 437.446539][T12927] ? __pfx_get_signal+0x10/0x10 [ 437.446555][T12927] ? do_futex+0x192/0x350 [ 437.446574][T12927] arch_do_signal_or_restart+0x91/0x770 [ 437.446592][T12927] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 437.446614][T12927] ? __pfx___x64_sys_futex+0x10/0x10 [ 437.446636][T12927] exit_to_user_mode_loop+0x86/0x4a0 [ 437.446656][T12927] do_syscall_64+0x668/0xf80 [ 437.446673][T12927] ? clear_bhb_loop+0x40/0x90 [ 437.446690][T12927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.446704][T12927] RIP: 0033:0x7f716079c799 [ 437.446717][T12927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.446731][T12927] RSP: 002b:00007f71616f80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 437.446744][T12927] RAX: fffffffffffffe00 RBX: 00007f7160a16098 RCX: 00007f716079c799 [ 437.446754][T12927] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7160a16098 [ 437.446762][T12927] RBP: 00007f7160a16090 R08: 0000000000000000 R09: 0000000000000000 [ 437.446771][T12927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 437.446779][T12927] R13: 00007f7160a16128 R14: 00007ffff59c8eb0 R15: 00007ffff59c8f98 [ 437.446798][T12927] [ 438.342580][T12953] input: jJǸ-¶š9ã%vø“ûJ86Ö‘ as /devices/virtual/input/input121 [ 438.869423][T12962] FAULT_INJECTION: forcing a failure. [ 438.869423][T12962] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 438.946648][T12962] CPU: 0 UID: 0 PID: 12962 Comm: syz.1.1585 Tainted: G L syzkaller #0 PREEMPT(full) [ 438.946691][T12962] Tainted: [L]=SOFTLOCKUP [ 438.946700][T12962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 438.946722][T12962] Call Trace: [ 438.946731][T12962] [ 438.946740][T12962] dump_stack_lvl+0x100/0x190 [ 438.946784][T12962] should_fail_ex.cold+0x5/0xa [ 438.946816][T12962] _copy_from_iter+0x1f4/0x1690 [ 438.946846][T12962] ? __asan_memset+0x23/0x50 [ 438.946884][T12962] ? __pfx__copy_from_iter+0x10/0x10 [ 438.946910][T12962] ? __pfx___alloc_skb+0x10/0x10 [ 438.946940][T12962] ? __pfx___might_resched+0x10/0x10 [ 438.946976][T12962] ? __lock_acquire+0x4a5/0x2630 [ 438.947019][T12962] netlink_sendmsg+0x808/0xda0 [ 438.947060][T12962] ? __pfx_netlink_sendmsg+0x10/0x10 [ 438.947093][T12962] ? __import_iovec+0x1d2/0x640 [ 438.947123][T12962] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 438.947166][T12962] ____sys_sendmsg+0xa54/0xc30 [ 438.947206][T12962] ? __pfx_____sys_sendmsg+0x10/0x10 [ 438.947248][T12962] ? rcu_is_watching+0x12/0xc0 [ 438.947285][T12962] ? ___sys_sendmsg+0x19d/0x1e0 [ 438.947320][T12962] ? kfree+0x2ec/0x6b0 [ 438.947359][T12962] ___sys_sendmsg+0x190/0x1e0 [ 438.947400][T12962] ? __pfx____sys_sendmsg+0x10/0x10 [ 438.947471][T12962] ? __pfx___might_resched+0x10/0x10 [ 438.947515][T12962] __sys_sendmmsg+0x205/0x430 [ 438.947552][T12962] ? __pfx___sys_sendmmsg+0x10/0x10 [ 438.947595][T12962] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 438.947643][T12962] ? fput+0x79/0x100 [ 438.947671][T12962] ? ksys_write+0x1ac/0x250 [ 438.947716][T12962] ? __pfx_ksys_write+0x10/0x10 [ 438.947760][T12962] __x64_sys_sendmmsg+0x9c/0x100 [ 438.947791][T12962] ? lockdep_hardirqs_on+0x78/0x100 [ 438.947821][T12962] do_syscall_64+0x106/0xf80 [ 438.947851][T12962] ? clear_bhb_loop+0x40/0x90 [ 438.947883][T12962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.947910][T12962] RIP: 0033:0x7ff49219c799 [ 438.947933][T12962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 438.947958][T12962] RSP: 002b:00007ff493073028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 438.947983][T12962] RAX: ffffffffffffffda RBX: 00007ff492415fa0 RCX: 00007ff49219c799 [ 438.948000][T12962] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 438.948017][T12962] RBP: 00007ff493073090 R08: 0000000000000000 R09: 0000000000000000 [ 438.948033][T12962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 438.948049][T12962] R13: 00007ff492416038 R14: 00007ff492415fa0 R15: 00007ffe756b12d8 [ 438.948085][T12962] [ 439.458828][T12964] FAULT_INJECTION: forcing a failure. [ 439.458828][T12964] name failslab, interval 1, probability 0, space 0, times 0 [ 439.472305][T12964] CPU: 0 UID: 0 PID: 12964 Comm: syz.3.1586 Tainted: G L syzkaller #0 PREEMPT(full) [ 439.472329][T12964] Tainted: [L]=SOFTLOCKUP [ 439.472334][T12964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 439.472342][T12964] Call Trace: [ 439.472347][T12964] [ 439.472352][T12964] dump_stack_lvl+0x100/0x190 [ 439.472378][T12964] should_fail_ex.cold+0x5/0xa [ 439.472396][T12964] should_failslab+0xc2/0x120 [ 439.472411][T12964] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 439.472432][T12964] ? kvasprintf_const+0x66/0x1a0 [ 439.472451][T12964] kvasprintf+0xbc/0x150 [ 439.472465][T12964] ? __pfx_kvasprintf+0x10/0x10 [ 439.472482][T12964] ? mark_held_locks+0x40/0x70 [ 439.472502][T12964] kvasprintf_const+0x66/0x1a0 [ 439.472517][T12964] kobject_set_name_vargs+0x5a/0x140 [ 439.472538][T12964] kobject_init_and_add+0xe7/0x180 [ 439.472558][T12964] ? __pfx_kobject_init_and_add+0x10/0x10 [ 439.472577][T12964] ? do_syscall_64+0x106/0xf80 [ 439.472606][T12964] netdev_queue_update_kobjects+0x32d/0x6f0 [ 439.472633][T12964] netif_set_real_num_tx_queues+0x1eb/0x9e0 [ 439.472658][T12964] tun_attach.isra.0+0x6ab/0x17b0 [ 439.472682][T12964] ? apparmor_capable+0x1d7/0x4d0 [ 439.472707][T12964] ? bpf_lsm_capable+0x9/0x10 [ 439.472726][T12964] __tun_chr_ioctl+0x1302/0x47c0 [ 439.472749][T12964] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 439.472771][T12964] ? hook_file_ioctl_common+0x146/0x410 [ 439.472798][T12964] ? __fget_files+0x21f/0x3d0 [ 439.472813][T12964] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 439.472834][T12964] __x64_sys_ioctl+0x18e/0x210 [ 439.472855][T12964] do_syscall_64+0x106/0xf80 [ 439.472870][T12964] ? clear_bhb_loop+0x40/0x90 [ 439.472888][T12964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.472902][T12964] RIP: 0033:0x7f3ac899c799 [ 439.472915][T12964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 439.472928][T12964] RSP: 002b:00007f3ac97bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 439.472942][T12964] RAX: ffffffffffffffda RBX: 00007f3ac8c15fa0 RCX: 00007f3ac899c799 [ 439.472952][T12964] RDX: 0000000000000038 RSI: 00000000400454ca RDI: 0000000000000005 [ 439.472960][T12964] RBP: 00007f3ac97bc090 R08: 0000000000000000 R09: 0000000000000000 [ 439.472969][T12964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.472977][T12964] R13: 00007f3ac8c16038 R14: 00007f3ac8c15fa0 R15: 00007fff96297698 [ 439.472997][T12964] [ 439.473003][T12964] kobject: can not set name properly! [ 439.963831][T12966] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 439.988660][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.994943][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.045429][T12966] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 440.099729][T12966] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 440.112783][T12966] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 440.942398][T12992] __vm_enough_memory: pid: 12992, comm: syz.2.1592, bytes: 4398046511104 not enough memory for the allocation [ 441.066446][T12996] __vm_enough_memory: pid: 12996, comm: syz.0.1593, bytes: 4398046511104 not enough memory for the allocation [ 441.404336][T13007] FAULT_INJECTION: forcing a failure. [ 441.404336][T13007] name failslab, interval 1, probability 0, space 0, times 0 [ 441.417980][T13007] CPU: 1 UID: 0 PID: 13007 Comm: syz.2.1596 Tainted: G L syzkaller #0 PREEMPT(full) [ 441.418020][T13007] Tainted: [L]=SOFTLOCKUP [ 441.418029][T13007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 441.418044][T13007] Call Trace: [ 441.418052][T13007] [ 441.418062][T13007] dump_stack_lvl+0x100/0x190 [ 441.418113][T13007] should_fail_ex.cold+0x5/0xa [ 441.418144][T13007] should_failslab+0xc2/0x120 [ 441.418171][T13007] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 441.418207][T13007] ? skb_clone+0x190/0x400 [ 441.418244][T13007] skb_clone+0x190/0x400 [ 441.418275][T13007] netlink_deliver_tap+0xaed/0xcc0 [ 441.418314][T13007] netlink_unicast+0x650/0x870 [ 441.418350][T13007] ? __pfx_netlink_unicast+0x10/0x10 [ 441.418394][T13007] netlink_sendmsg+0x8b0/0xda0 [ 441.418430][T13007] ? __pfx_netlink_sendmsg+0x10/0x10 [ 441.418458][T13007] ? __import_iovec+0x1d2/0x640 [ 441.418486][T13007] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 441.418525][T13007] ____sys_sendmsg+0xa54/0xc30 [ 441.418564][T13007] ? __pfx_____sys_sendmsg+0x10/0x10 [ 441.418599][T13007] ? __pfx__kstrtoull+0x10/0x10 [ 441.418632][T13007] ___sys_sendmsg+0x190/0x1e0 [ 441.418671][T13007] ? __pfx____sys_sendmsg+0x10/0x10 [ 441.418719][T13007] ? find_held_lock+0x2b/0x80 [ 441.418767][T13007] __sys_sendmmsg+0x205/0x430 [ 441.418802][T13007] ? __pfx___sys_sendmmsg+0x10/0x10 [ 441.418845][T13007] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 441.418894][T13007] ? fput+0x79/0x100 [ 441.418922][T13007] ? ksys_write+0x1ac/0x250 [ 441.418959][T13007] ? __pfx_ksys_write+0x10/0x10 [ 441.419004][T13007] __x64_sys_sendmmsg+0x9c/0x100 [ 441.419033][T13007] ? lockdep_hardirqs_on+0x78/0x100 [ 441.419063][T13007] do_syscall_64+0x106/0xf80 [ 441.419099][T13007] ? clear_bhb_loop+0x40/0x90 [ 441.419132][T13007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.419157][T13007] RIP: 0033:0x7f27ad79c799 [ 441.419179][T13007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 441.419203][T13007] RSP: 002b:00007f27ab9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 441.419228][T13007] RAX: ffffffffffffffda RBX: 00007f27ada15fa0 RCX: 00007f27ad79c799 [ 441.419245][T13007] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 441.419261][T13007] RBP: 00007f27ab9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 441.419276][T13007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 441.419291][T13007] R13: 00007f27ada16038 R14: 00007f27ada15fa0 R15: 00007ffd96cc6e78 [ 441.419327][T13007] [ 441.722029][T13007] netlink: 346 bytes leftover after parsing attributes in process `syz.2.1596'. [ 441.977868][ T8982] Bluetooth: hci0: command 0x0c1a tx timeout [ 442.056050][ T8982] Bluetooth: hci1: command 0x0c1a tx timeout [ 442.137660][ T8982] Bluetooth: hci3: command 0x0c1a tx timeout [ 442.143763][ T9021] Bluetooth: hci2: command 0x0c1a tx timeout [ 442.888342][T13042] FAULT_INJECTION: forcing a failure. [ 442.888342][T13042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 442.922331][T13042] CPU: 1 UID: 0 PID: 13042 Comm: syz.1.1605 Tainted: G L syzkaller #0 PREEMPT(full) [ 442.922355][T13042] Tainted: [L]=SOFTLOCKUP [ 442.922360][T13042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 442.922369][T13042] Call Trace: [ 442.922373][T13042] [ 442.922379][T13042] dump_stack_lvl+0x100/0x190 [ 442.922404][T13042] should_fail_ex.cold+0x5/0xa [ 442.922426][T13042] _copy_from_iter+0x1f4/0x1690 [ 442.922449][T13042] ? __asan_memset+0x23/0x50 [ 442.922469][T13042] ? __pfx__copy_from_iter+0x10/0x10 [ 442.922482][T13042] ? __pfx___alloc_skb+0x10/0x10 [ 442.922498][T13042] ? __pfx___might_resched+0x10/0x10 [ 442.922517][T13042] ? __lock_acquire+0x4a5/0x2630 [ 442.922539][T13042] netlink_sendmsg+0x808/0xda0 [ 442.922561][T13042] ? __pfx_netlink_sendmsg+0x10/0x10 [ 442.922579][T13042] ? __import_iovec+0x1d2/0x640 [ 442.922594][T13042] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 442.922616][T13042] ____sys_sendmsg+0xa54/0xc30 [ 442.922639][T13042] ? __pfx_____sys_sendmsg+0x10/0x10 [ 442.922661][T13042] ? rcu_is_watching+0x12/0xc0 [ 442.922681][T13042] ? ___sys_sendmsg+0x19d/0x1e0 [ 442.922700][T13042] ? kfree+0x2ec/0x6b0 [ 442.922721][T13042] ___sys_sendmsg+0x190/0x1e0 [ 442.922743][T13042] ? __pfx____sys_sendmsg+0x10/0x10 [ 442.922780][T13042] ? __pfx___might_resched+0x10/0x10 [ 442.922803][T13042] __sys_sendmmsg+0x205/0x430 [ 442.922822][T13042] ? __pfx___sys_sendmmsg+0x10/0x10 [ 442.922845][T13042] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 442.922871][T13042] ? fput+0x79/0x100 [ 442.922886][T13042] ? ksys_write+0x1ac/0x250 [ 442.922907][T13042] ? __pfx_ksys_write+0x10/0x10 [ 442.922938][T13042] __x64_sys_sendmmsg+0x9c/0x100 [ 442.922954][T13042] ? lockdep_hardirqs_on+0x78/0x100 [ 442.922971][T13042] do_syscall_64+0x106/0xf80 [ 442.922986][T13042] ? clear_bhb_loop+0x40/0x90 [ 442.923003][T13042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.923017][T13042] RIP: 0033:0x7ff49219c799 [ 442.923030][T13042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.923044][T13042] RSP: 002b:00007ff493073028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 442.923057][T13042] RAX: ffffffffffffffda RBX: 00007ff492415fa0 RCX: 00007ff49219c799 [ 442.923066][T13042] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 442.923074][T13042] RBP: 00007ff493073090 R08: 0000000000000000 R09: 0000000000000000 [ 442.923083][T13042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 442.923091][T13042] R13: 00007ff492416038 R14: 00007ff492415fa0 R15: 00007ffe756b12d8 [ 442.923109][T13042] [ 446.402650][T13087] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 446.440675][T13087] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 446.463822][T13087] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 446.470323][T13087] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 447.656477][ T8982] Bluetooth: hci0: command 0x0c1a tx timeout [ 448.466915][ T9021] Bluetooth: hci1: command 0x0c1a tx timeout [ 448.536503][ T9021] Bluetooth: hci3: command 0x0c1a tx timeout [ 448.542645][ T9021] Bluetooth: hci2: command 0x0c1a tx timeout [ 449.833449][T13152] FAULT_INJECTION: forcing a failure. [ 449.833449][T13152] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 449.976130][ T8982] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 450.327056][T13152] CPU: 1 UID: 0 PID: 13152 Comm: syz.3.1630 Tainted: G L syzkaller #0 PREEMPT(full) [ 450.327081][T13152] Tainted: [L]=SOFTLOCKUP [ 450.327086][T13152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 450.327095][T13152] Call Trace: [ 450.327100][T13152] [ 450.327105][T13152] dump_stack_lvl+0x100/0x190 [ 450.327131][T13152] should_fail_ex.cold+0x5/0xa [ 450.327148][T13152] _copy_from_iter+0x43a/0x1690 [ 450.327168][T13152] ? __pfx__copy_from_iter+0x10/0x10 [ 450.327181][T13152] ? trace_kmalloc+0x101/0x130 [ 450.327196][T13152] ? __kasan_kmalloc+0xaa/0xb0 [ 450.327218][T13152] ? __kvmalloc_node_noprof+0x37b/0xa00 [ 450.327238][T13152] ? proc_sys_call_handler+0x2c7/0x5a0 [ 450.327264][T13152] proc_sys_call_handler+0x3ed/0x5a0 [ 450.327287][T13152] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 450.327310][T13152] ? __lock_acquire+0x4a5/0x2630 [ 450.327331][T13152] do_iter_readv_writev+0x6ee/0x920 [ 450.327353][T13152] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 450.327382][T13152] vfs_writev+0x360/0xe10 [ 450.327406][T13152] ? rcu_is_watching+0x12/0xc0 [ 450.327432][T13152] ? __pfx_vfs_writev+0x10/0x10 [ 450.327450][T13152] ? fdget_pos+0x2aa/0x380 [ 450.327466][T13152] ? find_held_lock+0x2b/0x80 [ 450.327498][T13152] ? __fget_files+0x21f/0x3d0 [ 450.327517][T13152] ? do_writev+0x13e/0x340 [ 450.327536][T13152] do_writev+0x13e/0x340 [ 450.327556][T13152] ? __pfx_do_writev+0x10/0x10 [ 450.327582][T13152] do_syscall_64+0x106/0xf80 [ 450.327598][T13152] ? clear_bhb_loop+0x40/0x90 [ 450.327616][T13152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.327630][T13152] RIP: 0033:0x7f3ac899c799 [ 450.327643][T13152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.327656][T13152] RSP: 002b:00007f3ac6bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 450.327670][T13152] RAX: ffffffffffffffda RBX: 00007f3ac8c16270 RCX: 00007f3ac899c799 [ 450.327680][T13152] RDX: 0000000000000003 RSI: 0000200000000300 RDI: 0000000000000006 [ 450.327688][T13152] RBP: 00007f3ac6bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 450.327696][T13152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.327704][T13152] R13: 00007f3ac8c16308 R14: 00007f3ac8c16270 R15: 00007fff96297698 [ 450.327723][T13152] [ 450.428390][T13147] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 450.586215][T13147] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 450.592330][T13147] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 450.636343][T13147] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 451.395391][T13173] __vm_enough_memory: pid: 13173, comm: syz.2.1634, bytes: 4398046511104 not enough memory for the allocation [ 451.572791][T13175] blktrace: Concurrent blktraces are not allowed on loop2 [ 451.660616][ T9021] Bluetooth: hci0: command 0x0c1a tx timeout [ 452.605681][T13188] __vm_enough_memory: pid: 13188, comm: syz.1.1637, bytes: 4398046511104 not enough memory for the allocation [ 452.695993][ T8982] Bluetooth: hci1: command 0x0c1a tx timeout [ 452.702072][ T9021] Bluetooth: hci2: command 0x0c1a tx timeout [ 452.781373][ T9021] Bluetooth: hci3: command 0x0c1a tx timeout [ 454.032012][T13209] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1643'. [ 454.246653][ T29] audit: type=1804 audit(4294967329.450:55): pid=13215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1644" name="/newroot/sys/kernel/tracing/set_event_notrace_pid" dev="tracefs" ino=1053 res=1 errno=0 [ 454.397419][T13207] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 454.421770][T13209] hsr_slave_0: left promiscuous mode [ 454.446137][T13209] hsr_slave_1: left promiscuous mode [ 454.460534][T13207] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 454.486444][T13207] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 454.494297][T13207] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 454.796969][T13219] input: f¬ as /devices/virtual/input/input123 [ 454.935393][T13225] FAULT_INJECTION: forcing a failure. [ 454.935393][T13225] name failslab, interval 1, probability 0, space 0, times 0 [ 454.948276][T13225] CPU: 1 UID: 0 PID: 13225 Comm: syz.0.1646 Tainted: G L syzkaller #0 PREEMPT(full) [ 454.948317][T13225] Tainted: [L]=SOFTLOCKUP [ 454.948326][T13225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 454.948340][T13225] Call Trace: [ 454.948349][T13225] [ 454.948359][T13225] dump_stack_lvl+0x100/0x190 [ 454.948402][T13225] should_fail_ex.cold+0x5/0xa [ 454.948434][T13225] should_failslab+0xc2/0x120 [ 454.948462][T13225] __kvmalloc_node_noprof+0xfa/0xa00 [ 454.948498][T13225] ? proc_sys_call_handler+0x2c7/0x5a0 [ 454.948547][T13225] proc_sys_call_handler+0x2c7/0x5a0 [ 454.948588][T13225] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 454.948628][T13225] ? __lock_acquire+0x4a5/0x2630 [ 454.948665][T13225] do_iter_readv_writev+0x6ee/0x920 [ 454.948704][T13225] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 454.948758][T13225] vfs_writev+0x360/0xe10 [ 454.948792][T13225] ? rcu_is_watching+0x12/0xc0 [ 454.948838][T13225] ? __pfx_vfs_writev+0x10/0x10 [ 454.948872][T13225] ? fdget_pos+0x2aa/0x380 [ 454.948925][T13225] ? __fget_files+0x21f/0x3d0 [ 454.948959][T13225] ? do_writev+0x13e/0x340 [ 454.948993][T13225] do_writev+0x13e/0x340 [ 454.949030][T13225] ? __pfx_do_writev+0x10/0x10 [ 454.949076][T13225] do_syscall_64+0x106/0xf80 [ 454.949106][T13225] ? clear_bhb_loop+0x40/0x90 [ 454.949137][T13225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.949164][T13225] RIP: 0033:0x7f716079c799 [ 454.949185][T13225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 454.949210][T13225] RSP: 002b:00007f71616b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 454.949234][T13225] RAX: ffffffffffffffda RBX: 00007f7160a16270 RCX: 00007f716079c799 [ 454.949251][T13225] RDX: 0000000000000003 RSI: 0000200000000300 RDI: 0000000000000006 [ 454.949273][T13225] RBP: 00007f71616b6090 R08: 0000000000000000 R09: 0000000000000000 [ 454.949288][T13225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 454.949304][T13225] R13: 00007f7160a16308 R14: 00007f7160a16270 R15: 00007ffff59c8f98 [ 454.949341][T13225] [ 455.743230][ T9021] Bluetooth: hci0: command 0x0c1a tx timeout [ 456.003972][T13236] __vm_enough_memory: pid: 13236, comm: syz.0.1649, bytes: 4398046511104 not enough memory for the allocation [ 456.095994][T13240] blktrace: Concurrent blktraces are not allowed on loop2 [ 456.536837][ T9021] Bluetooth: hci3: command 0x0c1a tx timeout [ 456.542995][ T8982] Bluetooth: hci2: command 0x0c1a tx timeout [ 456.549097][ T8982] Bluetooth: hci1: command 0x0c1a tx timeout [ 458.946009][T13284] FAULT_INJECTION: forcing a failure. [ 458.946009][T13284] name fail_futex, interval 1, probability 0, space 0, times 0 [ 458.959042][T13284] CPU: 1 UID: 0 PID: 13284 Comm: syz.0.1659 Tainted: G L syzkaller #0 PREEMPT(full) [ 458.959087][T13284] Tainted: [L]=SOFTLOCKUP [ 458.959098][T13284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 458.959114][T13284] Call Trace: [ 458.959124][T13284] [ 458.959135][T13284] dump_stack_lvl+0x100/0x190 [ 458.959182][T13284] should_fail_ex.cold+0x5/0xa [ 458.959214][T13284] get_futex_key+0x1d2/0x1620 [ 458.959254][T13284] ? __pfx_get_futex_key+0x10/0x10 [ 458.959300][T13284] futex_wake+0xea/0x530 [ 458.959344][T13284] ? __pfx_futex_wake+0x10/0x10 [ 458.959388][T13284] ? putname+0xb1/0x110 [ 458.959415][T13284] ? kmem_cache_free+0x124/0x6a0 [ 458.959467][T13284] do_futex+0x32b/0x350 [ 458.959502][T13284] ? __pfx_do_futex+0x10/0x10 [ 458.959535][T13284] ? __pfx_do_sys_openat2+0x10/0x10 [ 458.959578][T13284] __x64_sys_futex+0x34f/0x4d0 [ 458.959614][T13284] ? __x64_sys_openat+0x12d/0x210 [ 458.959645][T13284] ? __pfx___x64_sys_futex+0x10/0x10 [ 458.959688][T13284] do_syscall_64+0x106/0xf80 [ 458.959716][T13284] ? clear_bhb_loop+0x40/0x90 [ 458.959746][T13284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.959770][T13284] RIP: 0033:0x7f716079c799 [ 458.959791][T13284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 458.959815][T13284] RSP: 002b:00007f71616f80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 458.959839][T13284] RAX: ffffffffffffffda RBX: 00007f7160a16098 RCX: 00007f716079c799 [ 458.959855][T13284] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7160a1609c [ 458.959871][T13284] RBP: 00007f7160a16090 R08: 0000000000000000 R09: 0000000000000000 [ 458.959886][T13284] R10: 000000000000000d R11: 0000000000000246 R12: 0000000000000000 [ 458.959900][T13284] R13: 00007f7160a16128 R14: 00007ffff59c8eb0 R15: 00007ffff59c8f98 [ 458.959934][T13284] [ 459.636562][T13290] __vm_enough_memory: pid: 13290, comm: syz.3.1661, bytes: 4398046511104 not enough memory for the allocation [ 459.863183][T13295] blktrace: Concurrent blktraces are not allowed on loop2 [ 460.029800][T13299] futex_wake_op: syz.0.1663 tries to shift op by -2048; fix this program [ 460.044603][T13299] futex_wake_op: syz.0.1663 tries to shift op by -2048; fix this program [ 460.089551][T13299] 0x000000000001-0x000000020000 : "" [ 460.136155][T13299] ftl_cs: FTL header corrupt! [ 460.863222][T13315] __vm_enough_memory: pid: 13315, comm: syz.3.1666, bytes: 4398046511104 not enough memory for the allocation [ 460.978458][T13317] FAULT_INJECTION: forcing a failure. [ 460.978458][T13317] name failslab, interval 1, probability 0, space 0, times 0 [ 461.001687][T13317] CPU: 1 UID: 0 PID: 13317 Comm: syz.1.1667 Tainted: G L syzkaller #0 PREEMPT(full) [ 461.001727][T13317] Tainted: [L]=SOFTLOCKUP [ 461.001736][T13317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 461.001751][T13317] Call Trace: [ 461.001759][T13317] [ 461.001768][T13317] dump_stack_lvl+0x100/0x190 [ 461.001810][T13317] should_fail_ex.cold+0x5/0xa [ 461.001839][T13317] ? copy_splice_read+0x1a3/0xb90 [ 461.001876][T13317] should_failslab+0xc2/0x120 [ 461.001910][T13317] __kmalloc_noprof+0xe0/0x850 [ 461.001951][T13317] copy_splice_read+0x1a3/0xb90 [ 461.001985][T13317] ? __pfx_copy_splice_read+0x10/0x10 [ 461.002008][T13317] ? look_up_lock_class+0x55/0x120 [ 461.002030][T13317] ? lockdep_init_map_type+0x5c/0x250 [ 461.002049][T13317] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 461.002071][T13317] ? __pfx_copy_splice_read+0x10/0x10 [ 461.002093][T13317] do_splice_read+0x285/0x370 [ 461.002117][T13317] splice_direct_to_actor+0x2a1/0xa30 [ 461.002140][T13317] ? __pfx_direct_splice_actor+0x10/0x10 [ 461.002165][T13317] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 461.002193][T13317] do_splice_direct+0x174/0x240 [ 461.002207][T13317] ? __pfx_do_splice_direct+0x10/0x10 [ 461.002221][T13317] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 461.002245][T13317] ? rw_verify_area+0xce/0x6d0 [ 461.002267][T13317] do_sendfile+0xadc/0xe20 [ 461.002291][T13317] ? __pfx_do_sendfile+0x10/0x10 [ 461.002312][T13317] ? __fget_files+0x21f/0x3d0 [ 461.002329][T13317] __x64_sys_sendfile64+0x1d8/0x220 [ 461.002344][T13317] ? ksys_write+0x1ac/0x250 [ 461.002364][T13317] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 461.002385][T13317] do_syscall_64+0x106/0xf80 [ 461.002404][T13317] ? clear_bhb_loop+0x40/0x90 [ 461.002422][T13317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.002436][T13317] RIP: 0033:0x7ff49219c799 [ 461.002448][T13317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 461.002462][T13317] RSP: 002b:00007ff493052028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 461.002476][T13317] RAX: ffffffffffffffda RBX: 00007ff492416090 RCX: 00007ff49219c799 [ 461.002486][T13317] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 461.002494][T13317] RBP: 00007ff493052090 R08: 0000000000000000 R09: 0000000000000000 [ 461.002502][T13317] R10: 0000000000800048 R11: 0000000000000246 R12: 0000000000000001 [ 461.002511][T13317] R13: 00007ff492416128 R14: 00007ff492416090 R15: 00007ffe756b12d8 [ 461.002529][T13317] [ 461.856000][T13306] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 461.868788][T13306] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 461.905505][T13306] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 461.912427][T13306] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 462.696012][ T9021] Bluetooth: hci0: command 0x0c1a tx timeout [ 463.337154][T13351] blktrace: Concurrent blktraces are not allowed on loop2 [ 463.906077][ T9021] Bluetooth: hci1: command 0x0c1a tx timeout [ 463.975935][ T9021] Bluetooth: hci3: command 0x0c1a tx timeout [ 463.981952][ T8982] Bluetooth: hci2: command 0x0c1a tx timeout [ 464.451516][T13365] input: f¬ as /devices/virtual/input/input124 [ 464.821510][T13377] input: f¬ as /devices/virtual/input/input125 [ 465.038435][T13377] FAULT_INJECTION: forcing a failure. [ 465.038435][T13377] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 465.052173][T13377] CPU: 1 UID: 0 PID: 13377 Comm: syz.3.1681 Tainted: G L syzkaller #0 PREEMPT(full) [ 465.052197][T13377] Tainted: [L]=SOFTLOCKUP [ 465.052202][T13377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 465.052210][T13377] Call Trace: [ 465.052215][T13377] [ 465.052222][T13377] dump_stack_lvl+0x100/0x190 [ 465.052248][T13377] should_fail_ex.cold+0x5/0xa [ 465.052262][T13377] ? prepare_alloc_pages+0x16d/0x5f0 [ 465.052280][T13377] should_fail_alloc_page+0xeb/0x140 [ 465.052296][T13377] prepare_alloc_pages+0x1f0/0x5f0 [ 465.052311][T13377] ? kernel_text_address+0x8d/0x100 [ 465.052334][T13377] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 465.052361][T13377] ? copy_splice_read+0x1a3/0xb90 [ 465.052383][T13377] ? stack_trace_save+0x8e/0xc0 [ 465.052405][T13377] ? __pfx_stack_trace_save+0x10/0x10 [ 465.052420][T13377] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 465.052443][T13377] ? copy_splice_read+0x1a3/0xb90 [ 465.052463][T13377] ? kasan_save_stack+0x3f/0x50 [ 465.052484][T13377] ? kasan_save_stack+0x30/0x50 [ 465.052503][T13377] ? kasan_save_track+0x14/0x30 [ 465.052528][T13377] ? __kasan_kmalloc+0xaa/0xb0 [ 465.052546][T13377] ? __kmalloc_noprof+0x301/0x850 [ 465.052565][T13377] ? copy_splice_read+0x1a3/0xb90 [ 465.052586][T13377] ? do_splice_read+0x285/0x370 [ 465.052612][T13377] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.052637][T13377] alloc_pages_bulk_noprof+0x782/0x1490 [ 465.052665][T13377] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 465.052691][T13377] ? __kmalloc_noprof+0x320/0x850 [ 465.052715][T13377] copy_splice_read+0x1e1/0xb90 [ 465.052741][T13377] ? __pfx_copy_splice_read+0x10/0x10 [ 465.052764][T13377] ? look_up_lock_class+0x55/0x120 [ 465.052785][T13377] ? lockdep_init_map_type+0x5c/0x250 [ 465.052804][T13377] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 465.052828][T13377] ? __pfx_copy_splice_read+0x10/0x10 [ 465.052850][T13377] do_splice_read+0x285/0x370 [ 465.052874][T13377] splice_direct_to_actor+0x2a1/0xa30 [ 465.052897][T13377] ? __pfx_direct_splice_actor+0x10/0x10 [ 465.052922][T13377] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 465.052950][T13377] do_splice_direct+0x174/0x240 [ 465.052964][T13377] ? __pfx_do_splice_direct+0x10/0x10 [ 465.052978][T13377] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 465.053003][T13377] ? rw_verify_area+0xce/0x6d0 [ 465.053024][T13377] do_sendfile+0xadc/0xe20 [ 465.053048][T13377] ? __pfx_do_sendfile+0x10/0x10 [ 465.053068][T13377] ? __fget_files+0x21f/0x3d0 [ 465.053086][T13377] __x64_sys_sendfile64+0x1d8/0x220 [ 465.053116][T13377] ? ksys_write+0x1ac/0x250 [ 465.053136][T13377] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 465.053157][T13377] do_syscall_64+0x106/0xf80 [ 465.053173][T13377] ? clear_bhb_loop+0x40/0x90 [ 465.053190][T13377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.053204][T13377] RIP: 0033:0x7f3ac899c799 [ 465.053217][T13377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.053231][T13377] RSP: 002b:00007f3ac97bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 465.053246][T13377] RAX: ffffffffffffffda RBX: 00007f3ac8c15fa0 RCX: 00007f3ac899c799 [ 465.053255][T13377] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 465.053263][T13377] RBP: 00007f3ac97bc090 R08: 0000000000000000 R09: 0000000000000000 [ 465.053272][T13377] R10: 0000000000800048 R11: 0000000000000246 R12: 0000000000000001 [ 465.053280][T13377] R13: 00007f3ac8c16038 R14: 00007f3ac8c15fa0 R15: 00007fff96297698 [ 465.053298][T13377] [ 465.617504][T13388] __vm_enough_memory: pid: 13388, comm: syz.3.1683, bytes: 4398046511104 not enough memory for the allocation [ 466.866404][T13411] blktrace: Concurrent blktraces are not allowed on loop2 [ 468.770624][T13439] blktrace: Concurrent blktraces are not allowed on loop2 [ 471.967489][T13497] binder: 13496:13497 ioctl c018620c 0 returned -1 [ 474.696579][T13548] Invalid ELF header magic: != ELF [ 475.179445][T13554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1714'. [ 477.298918][T13585] blktrace: Concurrent blktraces are not allowed on loop2 [ 477.627799][T13590] netlink: 'syz.3.1723': attribute type 2 has an invalid length. [ 477.726833][T13590] FAULT_INJECTION: forcing a failure. [ 477.726833][T13590] name failslab, interval 1, probability 0, space 0, times 0 [ 477.775706][T13590] CPU: 1 UID: 0 PID: 13590 Comm: syz.3.1723 Tainted: G L syzkaller #0 PREEMPT(full) [ 477.775751][T13590] Tainted: [L]=SOFTLOCKUP [ 477.775762][T13590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 477.775779][T13590] Call Trace: [ 477.775787][T13590] [ 477.775798][T13590] dump_stack_lvl+0x100/0x190 [ 477.775846][T13590] should_fail_ex.cold+0x5/0xa [ 477.775878][T13590] should_failslab+0xc2/0x120 [ 477.775914][T13590] __kmalloc_cache_noprof+0x7a/0x6f0 [ 477.775949][T13590] ? __do_sys_fanotify_init+0x690/0xe50 [ 477.775998][T13590] __do_sys_fanotify_init+0x690/0xe50 [ 477.776044][T13590] do_syscall_64+0x106/0xf80 [ 477.776077][T13590] ? clear_bhb_loop+0x40/0x90 [ 477.776111][T13590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.776140][T13590] RIP: 0033:0x7f3ac899c799 [ 477.776163][T13590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 477.776191][T13590] RSP: 002b:00007f3ac97bc028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 477.776218][T13590] RAX: ffffffffffffffda RBX: 00007f3ac8c15fa0 RCX: 00007f3ac899c799 [ 477.776237][T13590] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000005 [ 477.776254][T13590] RBP: 00007f3ac8a32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 477.776271][T13590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 477.776287][T13590] R13: 00007f3ac8c16038 R14: 00007f3ac8c15fa0 R15: 00007fff96297698 [ 477.776326][T13590] [ 478.497373][T13592] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 478.503525][T13592] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 478.516717][T13592] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 478.538926][T13592] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 480.148327][T13631] __vm_enough_memory: pid: 13631, comm: syz.0.1730, bytes: 4398046511104 not enough memory for the allocation [ 480.216068][ T9021] Bluetooth: hci0: command 0x0c1a tx timeout [ 480.536068][ T9021] Bluetooth: hci2: command 0x0c1a tx timeout [ 480.542337][ T8982] Bluetooth: hci1: command 0x0c1a tx timeout [ 480.624244][ T9021] Bluetooth: hci3: command 0x0c1a tx timeout [ 481.545286][T13640] blktrace: Concurrent blktraces are not allowed on loop2 [ 482.436472][T13646] __vm_enough_memory: pid: 13646, comm: syz.0.1733, bytes: 4398046511104 not enough memory for the allocation [ 482.586323][T13655] FAULT_INJECTION: forcing a failure. [ 482.586323][T13655] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 482.650771][T13655] CPU: 1 UID: 0 PID: 13655 Comm: syz.3.1737 Tainted: G L syzkaller #0 PREEMPT(full) [ 482.650810][T13655] Tainted: [L]=SOFTLOCKUP [ 482.650818][T13655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 482.650832][T13655] Call Trace: [ 482.650840][T13655] [ 482.650849][T13655] dump_stack_lvl+0x100/0x190 [ 482.650889][T13655] should_fail_ex.cold+0x5/0xa [ 482.650919][T13655] _copy_to_user+0x32/0xd0 [ 482.650946][T13655] simple_read_from_buffer+0xcb/0x170 [ 482.650986][T13655] proc_fail_nth_read+0x1af/0x230 [ 482.651017][T13655] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 482.651048][T13655] ? rw_verify_area+0xce/0x6d0 [ 482.651081][T13655] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 482.651112][T13655] vfs_read+0x1e4/0xb30 [ 482.651153][T13655] ? __pfx_vfs_read+0x10/0x10 [ 482.651185][T13655] ? __fget_files+0x215/0x3d0 [ 482.651217][T13655] ? __fget_files+0x21f/0x3d0 [ 482.651251][T13655] ksys_read+0x12a/0x250 [ 482.651286][T13655] ? __pfx_ksys_read+0x10/0x10 [ 482.651331][T13655] do_syscall_64+0x106/0xf80 [ 482.651361][T13655] ? clear_bhb_loop+0x40/0x90 [ 482.651393][T13655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.651419][T13655] RIP: 0033:0x7f3ac895cfce [ 482.651439][T13655] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 482.651463][T13655] RSP: 002b:00007f3ac979afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 482.651486][T13655] RAX: ffffffffffffffda RBX: 00007f3ac979b6c0 RCX: 00007f3ac895cfce [ 482.651503][T13655] RDX: 000000000000000f RSI: 00007f3ac979b0a0 RDI: 0000000000000005 [ 482.651519][T13655] RBP: 00007f3ac979b090 R08: 0000000000000000 R09: 0000000000000000 [ 482.651534][T13655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 482.651559][T13655] R13: 00007f3ac8c16128 R14: 00007f3ac8c16090 R15: 00007fff96297698 [ 482.651595][T13655] [ 484.137624][T13685] blktrace: Concurrent blktraces are not allowed on loop2 [ 485.104743][T13692] input: f¬ as /devices/virtual/input/input126 [ 487.020423][T13733] blktrace: Concurrent blktraces are not allowed on loop2 [ 487.586464][T13738] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1755'. [ 488.117550][T13742] input: f¬ as /devices/virtual/input/input127 [ 489.432190][T13765] __vm_enough_memory: pid: 13765, comm: syz.1.1760, bytes: 4398046511104 not enough memory for the allocation [ 489.577279][T13768] __vm_enough_memory: pid: 13768, comm: syz.0.1761, bytes: 4398046511104 not enough memory for the allocation [ 490.928374][T13785] FAULT_INJECTION: forcing a failure. [ 490.928374][T13785] name fail_futex, interval 1, probability 0, space 0, times 0 [ 490.980198][T13785] CPU: 0 UID: 0 PID: 13785 Comm: syz.0.1765 Tainted: G L syzkaller #0 PREEMPT(full) [ 490.980225][T13785] Tainted: [L]=SOFTLOCKUP [ 490.980231][T13785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 490.980240][T13785] Call Trace: [ 490.980245][T13785] [ 490.980251][T13785] dump_stack_lvl+0x100/0x190 [ 490.980279][T13785] should_fail_ex.cold+0x5/0xa [ 490.980297][T13785] get_futex_key+0x1d2/0x1620 [ 490.980318][T13785] ? __pfx_get_futex_key+0x10/0x10 [ 490.980335][T13785] ? do_raw_spin_lock+0x128/0x260 [ 490.980357][T13785] ? find_held_lock+0x2b/0x80 [ 490.980370][T13785] ? kfence_guarded_free+0x41b/0x5c0 [ 490.980396][T13785] futex_wake+0xea/0x530 [ 490.980415][T13785] ? lockdep_hardirqs_on+0x78/0x100 [ 490.980435][T13785] ? __pfx_futex_wake+0x10/0x10 [ 490.980456][T13785] ? putname+0xb1/0x110 [ 490.980472][T13785] ? kmem_cache_free+0x5d2/0x6a0 [ 490.980496][T13785] do_futex+0x32b/0x350 [ 490.980515][T13785] ? __pfx_do_futex+0x10/0x10 [ 490.980531][T13785] ? __pfx_do_sys_openat2+0x10/0x10 [ 490.980555][T13785] __x64_sys_futex+0x34f/0x4d0 [ 490.980575][T13785] ? __x64_sys_openat+0x12d/0x210 [ 490.980593][T13785] ? __pfx___x64_sys_futex+0x10/0x10 [ 490.980619][T13785] do_syscall_64+0x106/0xf80 [ 490.980636][T13785] ? clear_bhb_loop+0x40/0x90 [ 490.980653][T13785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.980669][T13785] RIP: 0033:0x7f716079c799 [ 490.980682][T13785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 490.980697][T13785] RSP: 002b:00007f71617190e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 490.980712][T13785] RAX: ffffffffffffffda RBX: 00007f7160a15fa8 RCX: 00007f716079c799 [ 490.980722][T13785] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7160a15fac [ 490.980731][T13785] RBP: 00007f7160a15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 490.980739][T13785] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000000 [ 490.980748][T13785] R13: 00007f7160a16038 R14: 00007ffff59c8eb0 R15: 00007ffff59c8f98 [ 490.980767][T13785] [ 491.537851][T13788] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 491.577680][T13788] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 491.615182][T13788] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 491.647005][T13788] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 491.785352][T13797] netlink: 'syz.1.1768': attribute type 2 has an invalid length. [ 491.868364][T13797] FAULT_INJECTION: forcing a failure. [ 491.868364][T13797] name failslab, interval 1, probability 0, space 0, times 0 [ 491.945242][T13797] CPU: 0 UID: 0 PID: 13797 Comm: syz.1.1768 Tainted: G L syzkaller #0 PREEMPT(full) [ 491.945293][T13797] Tainted: [L]=SOFTLOCKUP [ 491.945303][T13797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 491.945320][T13797] Call Trace: [ 491.945329][T13797] [ 491.945338][T13797] dump_stack_lvl+0x100/0x190 [ 491.945388][T13797] should_fail_ex.cold+0x5/0xa [ 491.945423][T13797] should_failslab+0xc2/0x120 [ 491.945453][T13797] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 491.945494][T13797] ? alloc_empty_file+0x55/0x1c0 [ 491.945535][T13797] alloc_empty_file+0x55/0x1c0 [ 491.945580][T13797] alloc_file_pseudo+0x13a/0x230 [ 491.945617][T13797] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 491.945648][T13797] ? alloc_fd+0x476/0x790 [ 491.945677][T13797] ? do_raw_spin_unlock+0x145/0x1e0 [ 491.945723][T13797] __anon_inode_getfile+0xe8/0x280 [ 491.945761][T13797] anon_inode_getfile_fmode+0x37/0xa0 [ 491.945795][T13797] __do_sys_fanotify_init+0xa79/0xe50 [ 491.945838][T13797] do_syscall_64+0x106/0xf80 [ 491.945870][T13797] ? clear_bhb_loop+0x40/0x90 [ 491.945902][T13797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.945930][T13797] RIP: 0033:0x7ff49219c799 [ 491.945955][T13797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 491.945982][T13797] RSP: 002b:00007ff493073028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 491.946008][T13797] RAX: ffffffffffffffda RBX: 00007ff492415fa0 RCX: 00007ff49219c799 [ 491.946026][T13797] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000005 [ 491.946043][T13797] RBP: 00007ff492232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 491.946061][T13797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 491.946077][T13797] R13: 00007ff492416038 R14: 00007ff492415fa0 R15: 00007ffe756b12d8 [ 491.946116][T13797] [ 492.741372][T13813] input: f¬ as /devices/virtual/input/input128 [ 492.813411][T13818] FAULT_INJECTION: forcing a failure. [ 492.813411][T13818] name fail_futex, interval 1, probability 0, space 0, times 0 [ 492.909117][T13818] CPU: 0 UID: 0 PID: 13818 Comm: syz.0.1774 Tainted: G L syzkaller #0 PREEMPT(full) [ 492.909157][T13818] Tainted: [L]=SOFTLOCKUP [ 492.909166][T13818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 492.909181][T13818] Call Trace: [ 492.909189][T13818] [ 492.909197][T13818] dump_stack_lvl+0x100/0x190 [ 492.909239][T13818] should_fail_ex.cold+0x5/0xa [ 492.909269][T13818] get_futex_key+0x1d2/0x1620 [ 492.909303][T13818] ? __pfx_get_futex_key+0x10/0x10 [ 492.909344][T13818] futex_wake+0xea/0x530 [ 492.909383][T13818] ? __pfx_futex_wake+0x10/0x10 [ 492.909416][T13818] ? __call_rcu_common.constprop.0+0x3f0/0x9b0 [ 492.909470][T13818] do_futex+0x32b/0x350 [ 492.909503][T13818] ? __pfx_do_futex+0x10/0x10 [ 492.909534][T13818] ? __pfx___might_resched+0x10/0x10 [ 492.909568][T13818] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 492.909605][T13818] __x64_sys_futex+0x34f/0x4d0 [ 492.909639][T13818] ? __pfx_task_work_run+0x10/0x10 [ 492.909673][T13818] ? __pfx___x64_sys_futex+0x10/0x10 [ 492.909705][T13818] ? exit_to_user_mode_loop+0xdd/0x4a0 [ 492.909748][T13818] do_syscall_64+0x106/0xf80 [ 492.909778][T13818] ? clear_bhb_loop+0x40/0x90 [ 492.909808][T13818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.909834][T13818] RIP: 0033:0x7f716079c799 [ 492.909857][T13818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.909881][T13818] RSP: 002b:00007f71616f80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 492.909906][T13818] RAX: ffffffffffffffda RBX: 00007f7160a16098 RCX: 00007f716079c799 [ 492.909923][T13818] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7160a1609c [ 492.909938][T13818] RBP: 00007f7160a16090 R08: 0000000000000000 R09: 0000000000000000 [ 492.909952][T13818] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 492.909966][T13818] R13: 00007f7160a16128 R14: 00007ffff59c8eb0 R15: 00007ffff59c8f98 [ 492.909999][T13818] [ 493.575919][ T9021] Bluetooth: hci0: command 0x0c1a tx timeout [ 493.656332][ T9021] Bluetooth: hci3: command 0x0c1a tx timeout [ 493.662394][ T9021] Bluetooth: hci2: command 0x0c1a tx timeout [ 493.668620][ T8982] Bluetooth: hci1: command 0x0c1a tx timeout [ 494.602839][T13850] __vm_enough_memory: pid: 13850, comm: syz.3.1780, bytes: 4398046511104 not enough memory for the allocation [ 498.141445][T13906] blktrace: Concurrent blktraces are not allowed on loop2 [ 500.898407][T13915] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 501.430176][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.436617][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.271815][T13984] __vm_enough_memory: pid: 13984, comm: syz.1.1808, bytes: 4398046511104 not enough memory for the allocation [ 504.707094][T13983] FAULT_INJECTION: forcing a failure. [ 504.707094][T13983] name fail_futex, interval 1, probability 0, space 0, times 0 [ 504.810652][T13983] CPU: 1 UID: 0 PID: 13983 Comm: syz.0.1806 Tainted: G L syzkaller #0 PREEMPT(full) [ 504.810709][T13983] Tainted: [L]=SOFTLOCKUP [ 504.810720][T13983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 504.810736][T13983] Call Trace: [ 504.810746][T13983] [ 504.810757][T13983] dump_stack_lvl+0x100/0x190 [ 504.810805][T13983] should_fail_ex.cold+0x5/0xa [ 504.810838][T13983] get_futex_key+0x1d2/0x1620 [ 504.810876][T13983] ? __pfx_get_futex_key+0x10/0x10 [ 504.810911][T13983] ? update_se+0x94/0x760 [ 504.810952][T13983] futex_wait_setup+0x83/0x510 [ 504.811002][T13983] __futex_wait+0x19f/0x300 [ 504.811046][T13983] ? __pfx___futex_wait+0x10/0x10 [ 504.811085][T13983] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 504.811116][T13983] ? lockdep_hardirqs_on+0x78/0x100 [ 504.811153][T13983] ? __pfx_futex_wake_mark+0x10/0x10 [ 504.811200][T13983] ? find_held_lock+0x2b/0x80 [ 504.811225][T13983] ? futex_wake+0x456/0x530 [ 504.811276][T13983] futex_wait+0xed/0x380 [ 504.811319][T13983] ? __pfx_futex_wait+0x10/0x10 [ 504.811369][T13983] ? vfs_write+0x911/0x1070 [ 504.811411][T13983] ? vfs_write+0x15d/0x1070 [ 504.811453][T13983] ? __pfx_tty_write+0x10/0x10 [ 504.811492][T13983] do_futex+0x1ef/0x350 [ 504.811527][T13983] ? __pfx_do_futex+0x10/0x10 [ 504.811572][T13983] __x64_sys_futex+0x34f/0x4d0 [ 504.811610][T13983] ? fput+0x79/0x100 [ 504.811639][T13983] ? __pfx___x64_sys_futex+0x10/0x10 [ 504.811673][T13983] ? ksys_write+0x1ac/0x250 [ 504.811725][T13983] ? __pfx_ksys_write+0x10/0x10 [ 504.811779][T13983] do_syscall_64+0x106/0xf80 [ 504.811812][T13983] ? clear_bhb_loop+0x40/0x90 [ 504.811848][T13983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.811877][T13983] RIP: 0033:0x7f716079c799 [ 504.811900][T13983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 504.811928][T13983] RSP: 002b:00007f71616d70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 504.811954][T13983] RAX: ffffffffffffffda RBX: 00007f7160a16188 RCX: 00007f716079c799 [ 504.811973][T13983] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7160a16188 [ 504.811991][T13983] RBP: 00007f7160a16180 R08: 0000000000000000 R09: 0000000000000000 [ 504.812008][T13983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 504.812025][T13983] R13: 00007f7160a16218 R14: 00007ffff59c8eb0 R15: 00007ffff59c8f98 [ 504.812064][T13983] [ 505.090575][T13993] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1809'. [ 507.749421][T14039] openvswitch: netlink: Message has 16 unknown bytes. [ 508.880491][T14055] input: f¬ as /devices/virtual/input/input130 [ 512.307221][T14111] netlink: 354 bytes leftover after parsing attributes in process `syz.2.1833'. [ 512.546842][T14123] FAULT_INJECTION: forcing a failure. [ 512.546842][T14123] name fail_futex, interval 1, probability 0, space 0, times 0 [ 512.655963][T14123] CPU: 1 UID: 0 PID: 14123 Comm: syz.0.1834 Tainted: G L syzkaller #0 PREEMPT(full) [ 512.656008][T14123] Tainted: [L]=SOFTLOCKUP [ 512.656019][T14123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 512.656036][T14123] Call Trace: [ 512.656045][T14123] [ 512.656056][T14123] dump_stack_lvl+0x100/0x190 [ 512.656102][T14123] should_fail_ex.cold+0x5/0xa [ 512.656133][T14123] get_futex_key+0x1d2/0x1620 [ 512.656170][T14123] ? __pfx_get_futex_key+0x10/0x10 [ 512.656212][T14123] futex_wake+0xea/0x530 [ 512.656260][T14123] ? __pfx_futex_wake+0x10/0x10 [ 512.656303][T14123] ? putname+0xb1/0x110 [ 512.656330][T14123] ? kmem_cache_free+0x124/0x6a0 [ 512.656371][T14123] do_futex+0x32b/0x350 [ 512.656407][T14123] ? __pfx_do_futex+0x10/0x10 [ 512.656437][T14123] ? __pfx_do_sys_openat2+0x10/0x10 [ 512.656475][T14123] ? __fget_files+0x21f/0x3d0 [ 512.656504][T14123] __x64_sys_futex+0x34f/0x4d0 [ 512.656539][T14123] ? __x64_sys_openat+0x12d/0x210 [ 512.656574][T14123] ? __pfx___x64_sys_futex+0x10/0x10 [ 512.656619][T14123] do_syscall_64+0x106/0xf80 [ 512.656651][T14123] ? clear_bhb_loop+0x40/0x90 [ 512.656685][T14123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.656713][T14123] RIP: 0033:0x7f716079c799 [ 512.656735][T14123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 512.656763][T14123] RSP: 002b:00007f71616f80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 512.656791][T14123] RAX: ffffffffffffffda RBX: 00007f7160a16098 RCX: 00007f716079c799 [ 512.656811][T14123] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7160a1609c [ 512.656830][T14123] RBP: 00007f7160a16090 R08: 0000000000000000 R09: 0000000000000000 [ 512.656848][T14123] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 512.656864][T14123] R13: 00007f7160a16128 R14: 00007ffff59c8eb0 R15: 00007ffff59c8f98 [ 512.656901][T14123] [ 517.438474][T14185] FAULT_INJECTION: forcing a failure. [ 517.438474][T14185] name failslab, interval 1, probability 0, space 0, times 0 [ 517.506536][T14185] CPU: 1 UID: 0 PID: 14185 Comm: syz.2.1846 Tainted: G L syzkaller #0 PREEMPT(full) [ 517.506582][T14185] Tainted: [L]=SOFTLOCKUP [ 517.506592][T14185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 517.506609][T14185] Call Trace: [ 517.506618][T14185] [ 517.506628][T14185] dump_stack_lvl+0x100/0x190 [ 517.506674][T14185] should_fail_ex.cold+0x5/0xa [ 517.506706][T14185] should_failslab+0xc2/0x120 [ 517.506734][T14185] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 517.506771][T14185] ? __kernfs_new_node+0xd2/0x960 [ 517.506815][T14185] __kernfs_new_node+0xd2/0x960 [ 517.506856][T14185] ? __pfx___kernfs_new_node+0x10/0x10 [ 517.506899][T14185] ? find_held_lock+0x2b/0x80 [ 517.506933][T14185] ? kernfs_root+0xee/0x2a0 [ 517.506967][T14185] ? kernfs_root+0xee/0x2a0 [ 517.507010][T14185] kernfs_new_node+0x11b/0x1a0 [ 517.507052][T14185] __kernfs_create_file+0x53/0x350 [ 517.507085][T14185] sysfs_add_file_mode_ns+0x207/0x3c0 [ 517.507127][T14185] internal_create_group+0x593/0xf40 [ 517.507173][T14185] ? __pfx_internal_create_group+0x10/0x10 [ 517.507223][T14185] sysfs_slab_add+0x1a4/0x1f0 [ 517.507252][T14185] do_kmem_cache_create+0x472/0x540 [ 517.507285][T14185] __kmem_cache_create_args+0x386/0x420 [ 517.507326][T14185] mon_text_open+0x333/0x510 [ 517.507364][T14185] ? __pfx_mon_text_open+0x10/0x10 [ 517.507406][T14185] ? __pfx_mon_text_ctor+0x10/0x10 [ 517.507440][T14185] ? find_held_lock+0x2b/0x80 [ 517.507463][T14185] ? __pfx_apparmor_file_open+0x10/0x10 [ 517.507496][T14185] ? lockdown_is_locked_down+0x3d/0x140 [ 517.507531][T14185] ? bpf_lsm_locked_down+0x9/0x10 [ 517.507564][T14185] ? __pfx_mon_text_open+0x10/0x10 [ 517.507598][T14185] full_proxy_open_regular+0x1b6/0x370 [ 517.507639][T14185] do_dentry_open+0x6d8/0x1660 [ 517.507665][T14185] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 517.507712][T14185] vfs_open+0x82/0x3f0 [ 517.507749][T14185] path_openat+0x208c/0x31a0 [ 517.507792][T14185] ? __pfx_path_openat+0x10/0x10 [ 517.507833][T14185] do_file_open+0x20e/0x430 [ 517.507860][T14185] ? __pfx_do_file_open+0x10/0x10 [ 517.507919][T14185] ? alloc_fd+0x476/0x790 [ 517.507950][T14185] ? do_getname+0x191/0x390 [ 517.507986][T14185] do_sys_openat2+0x10d/0x1e0 [ 517.508019][T14185] ? __pfx_do_sys_openat2+0x10/0x10 [ 517.508067][T14185] __x64_sys_openat+0x12d/0x210 [ 517.508102][T14185] ? __pfx___x64_sys_openat+0x10/0x10 [ 517.508150][T14185] do_syscall_64+0x106/0xf80 [ 517.508180][T14185] ? clear_bhb_loop+0x40/0x90 [ 517.508211][T14185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.508237][T14185] RIP: 0033:0x7f27ad79c799 [ 517.508259][T14185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 517.508284][T14185] RSP: 002b:00007f27ab9d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 517.508311][T14185] RAX: ffffffffffffffda RBX: 00007f27ada16090 RCX: 00007f27ad79c799 [ 517.508330][T14185] RDX: 0000000000022202 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 517.508348][T14185] RBP: 00007f27ad832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 517.508363][T14185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 517.508380][T14185] R13: 00007f27ada16128 R14: 00007f27ada16090 R15: 00007ffd96cc6e78 [ 517.508417][T14185] [ 517.509667][T14185] SLUB: Unable to add cache mon_text_ffff88807b329000 to sysfs [ 518.765555][T14198] FAULT_INJECTION: forcing a failure. [ 518.765555][T14198] name failslab, interval 1, probability 0, space 0, times 0 [ 518.839508][T14198] CPU: 1 UID: 0 PID: 14198 Comm: syz.2.1851 Tainted: G L syzkaller #0 PREEMPT(full) [ 518.839567][T14198] Tainted: [L]=SOFTLOCKUP [ 518.839578][T14198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 518.839596][T14198] Call Trace: [ 518.839605][T14198] [ 518.839617][T14198] dump_stack_lvl+0x100/0x190 [ 518.839665][T14198] should_fail_ex.cold+0x5/0xa [ 518.839696][T14198] should_failslab+0xc2/0x120 [ 518.839727][T14198] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 518.839766][T14198] ? __proc_create+0x2cb/0x8c0 [ 518.839813][T14198] __proc_create+0x2cb/0x8c0 [ 518.839855][T14198] ? __pfx___proc_create+0x10/0x10 [ 518.839911][T14198] _proc_mkdir+0xb9/0x210 [ 518.839937][T14198] ? __pfx__proc_mkdir+0x10/0x10 [ 518.839975][T14198] ? net_generic+0xea/0x2a0 [ 518.840010][T14198] ? __pfx_vlan_init_net+0x10/0x10 [ 518.840055][T14198] vlan_proc_init+0x93/0x160 [ 518.840086][T14198] ops_init+0x1e2/0x5f0 [ 518.840125][T14198] setup_net+0x118/0x3a0 [ 518.840161][T14198] ? __pfx_setup_net+0x10/0x10 [ 518.840193][T14198] ? lockdep_init_map_type+0x5c/0x250 [ 518.840230][T14198] ? mutex_init_lockep+0x110/0x150 [ 518.840272][T14198] copy_net_ns+0x46f/0x7c0 [ 518.840312][T14198] create_new_namespaces+0x3ea/0xac0 [ 518.840349][T14198] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 518.840381][T14198] ksys_unshare+0x473/0xad0 [ 518.840418][T14198] ? __pfx_ksys_unshare+0x10/0x10 [ 518.840462][T14198] __x64_sys_unshare+0x31/0x40 [ 518.840493][T14198] do_syscall_64+0x106/0xf80 [ 518.840523][T14198] ? clear_bhb_loop+0x40/0x90 [ 518.840556][T14198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.840583][T14198] RIP: 0033:0x7f27ad79c799 [ 518.840607][T14198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 518.840634][T14198] RSP: 002b:00007f27ab9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 518.840659][T14198] RAX: ffffffffffffffda RBX: 00007f27ada15fa0 RCX: 00007f27ad79c799 [ 518.840676][T14198] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 518.840693][T14198] RBP: 00007f27ad832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 518.840709][T14198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 518.840725][T14198] R13: 00007f27ada16038 R14: 00007f27ada15fa0 R15: 00007ffd96cc6e78 [ 518.840762][T14198] [ 518.840789][T14198] 8021q: can't create entry in proc filesystem! [ 520.233919][T14213] input: f¬ as /devices/virtual/input/input131 [ 520.898223][T14227] __vm_enough_memory: pid: 14227, comm: syz.1.1857, bytes: 4398046511104 not enough memory for the allocation [ 521.785203][T14249] __vm_enough_memory: pid: 14249, comm: syz.0.1860, bytes: 4398046511104 not enough memory for the allocation [ 523.926208][T14280] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1868'. [ 524.394490][T14286] input: f¬ as /devices/virtual/input/input132 [ 524.888883][T14298] FAULT_INJECTION: forcing a failure. [ 524.888883][T14298] name fail_futex, interval 1, probability 0, space 0, times 0 [ 524.984273][T14298] CPU: 0 UID: 0 PID: 14298 Comm: syz.0.1873 Tainted: G L syzkaller #0 PREEMPT(full) [ 524.984301][T14298] Tainted: [L]=SOFTLOCKUP [ 524.984306][T14298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 524.984316][T14298] Call Trace: [ 524.984322][T14298] [ 524.984328][T14298] dump_stack_lvl+0x100/0x190 [ 524.984355][T14298] should_fail_ex.cold+0x5/0xa [ 524.984373][T14298] get_futex_key+0x1d2/0x1620 [ 524.984394][T14298] ? __pfx_get_futex_key+0x10/0x10 [ 524.984420][T14298] futex_wake+0xea/0x530 [ 524.984443][T14298] ? __pfx_futex_wake+0x10/0x10 [ 524.984467][T14298] ? putname+0xb1/0x110 [ 524.984481][T14298] ? kmem_cache_free+0x124/0x6a0 [ 524.984505][T14298] do_futex+0x32b/0x350 [ 524.984524][T14298] ? __pfx_do_futex+0x10/0x10 [ 524.984548][T14298] ? __pfx_do_sys_openat2+0x10/0x10 [ 524.984573][T14298] __x64_sys_futex+0x34f/0x4d0 [ 524.984593][T14298] ? __x64_sys_openat+0x12d/0x210 [ 524.984613][T14298] ? __pfx___x64_sys_futex+0x10/0x10 [ 524.984639][T14298] do_syscall_64+0x106/0xf80 [ 524.984657][T14298] ? clear_bhb_loop+0x40/0x90 [ 524.984675][T14298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.984690][T14298] RIP: 0033:0x7f716079c799 [ 524.984703][T14298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 524.984718][T14298] RSP: 002b:00007f71616f80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 524.984732][T14298] RAX: ffffffffffffffda RBX: 00007f7160a16098 RCX: 00007f716079c799 [ 524.984742][T14298] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7160a1609c [ 524.984751][T14298] RBP: 00007f7160a16090 R08: 0000000000000000 R09: 0000000000000000 [ 524.984759][T14298] R10: 000000000000000d R11: 0000000000000246 R12: 0000000000000000 [ 524.984768][T14298] R13: 00007f7160a16128 R14: 00007ffff59c8eb0 R15: 00007ffff59c8f98 [ 524.984788][T14298] [ 526.038264][T14310] blktrace: Concurrent blktraces are not allowed on loop2 [ 526.347734][T14314] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 526.353943][T14314] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 526.361487][T14314] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 526.426937][T14314] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 527.132025][T14333] FAULT_INJECTION: forcing a failure. [ 527.132025][T14333] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 527.201115][T14333] CPU: 0 UID: 0 PID: 14333 Comm: syz.3.1881 Tainted: G L syzkaller #0 PREEMPT(full) [ 527.201163][T14333] Tainted: [L]=SOFTLOCKUP [ 527.201174][T14333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 527.201191][T14333] Call Trace: [ 527.201200][T14333] [ 527.201211][T14333] dump_stack_lvl+0x100/0x190 [ 527.201259][T14333] should_fail_ex.cold+0x5/0xa [ 527.201286][T14333] ? prepare_alloc_pages+0x16d/0x5f0 [ 527.201321][T14333] should_fail_alloc_page+0xeb/0x140 [ 527.201353][T14333] prepare_alloc_pages+0x1f0/0x5f0 [ 527.201388][T14333] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 527.201429][T14333] ? __print_lock_name+0x21/0x80 [ 527.201456][T14333] ? is_bpf_text_address+0x8a/0x1a0 [ 527.201494][T14333] ? is_bpf_text_address+0x8a/0x1a0 [ 527.201535][T14333] ? bpf_ksym_find+0x124/0x1c0 [ 527.201567][T14333] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 527.201598][T14333] ? is_bpf_text_address+0x94/0x1a0 [ 527.201639][T14333] ? kernel_text_address+0x8d/0x100 [ 527.201679][T14333] ? __kernel_text_address+0xd/0x30 [ 527.201717][T14333] ? unwind_get_return_address+0x59/0xa0 [ 527.201748][T14333] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 527.201806][T14333] ? __pfx_stack_trace_save+0x10/0x10 [ 527.201835][T14333] ? stack_depot_save_flags+0x27/0x9d0 [ 527.201873][T14333] ? find_held_lock+0x2b/0x80 [ 527.201902][T14333] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 527.201950][T14333] ? policy_nodemask+0xed/0x4f0 [ 527.201983][T14333] alloc_pages_mpol+0x1fb/0x550 [ 527.202015][T14333] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 527.202051][T14333] alloc_pages_noprof+0x131/0x390 [ 527.202081][T14333] kimage_alloc_pages+0x72/0x380 [ 527.202126][T14333] kimage_alloc_control_pages+0x157/0xa20 [ 527.202164][T14333] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 527.202204][T14333] do_kexec_load+0x275/0x810 [ 527.202236][T14333] ? __pfx_do_kexec_load+0x10/0x10 [ 527.202267][T14333] ? _copy_from_user+0x59/0xd0 [ 527.202309][T14333] __x64_sys_kexec_load+0x1bf/0x230 [ 527.202343][T14333] do_syscall_64+0x106/0xf80 [ 527.202374][T14333] ? clear_bhb_loop+0x40/0x90 [ 527.202409][T14333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.202438][T14333] RIP: 0033:0x7f3ac899c799 [ 527.202462][T14333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 527.202490][T14333] RSP: 002b:00007f3ac97bc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 527.202516][T14333] RAX: ffffffffffffffda RBX: 00007f3ac8c15fa0 RCX: 00007f3ac899c799 [ 527.202535][T14333] RDX: 0000200000000040 RSI: 0000000000000002 RDI: 0000000000000005 [ 527.202552][T14333] RBP: 00007f3ac8a32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 527.202569][T14333] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 527.202591][T14333] R13: 00007f3ac8c16038 R14: 00007f3ac8c15fa0 R15: 00007fff96297698 [ 527.202629][T14333] [ 527.202659][T14333] kexec: Could not allocate control_code_buffer [ 528.378047][ T9021] Bluetooth: hci2: command 0x0c1a tx timeout [ 528.384207][ T9039] Bluetooth: hci1: command 0x0c1a tx timeout [ 528.391301][ T8982] Bluetooth: hci0: command 0x0c1a tx timeout [ 528.456719][ T9021] Bluetooth: hci3: command 0x0c1a tx timeout [ 530.405609][T14382] blktrace: Concurrent blktraces are not allowed on loop2 [ 532.739000][T14413] mkiss: ax0: crc mode is auto. [ 535.517189][T14435] FAULT_INJECTION: forcing a failure. [ 535.517189][T14435] name failslab, interval 1, probability 0, space 0, times 0 [ 535.586158][T14435] CPU: 0 UID: 0 PID: 14435 Comm: syz.3.1901 Tainted: G L syzkaller #0 PREEMPT(full) [ 535.586208][T14435] Tainted: [L]=SOFTLOCKUP [ 535.586219][T14435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 535.586236][T14435] Call Trace: [ 535.586246][T14435] [ 535.586257][T14435] dump_stack_lvl+0x100/0x190 [ 535.586306][T14435] should_fail_ex.cold+0x5/0xa [ 535.586337][T14435] ? tomoyo_realpath_from_path+0xb6/0x690 [ 535.586371][T14435] should_failslab+0xc2/0x120 [ 535.586401][T14435] __kmalloc_noprof+0xe0/0x850 [ 535.586451][T14435] tomoyo_realpath_from_path+0xb6/0x690 [ 535.586493][T14435] tomoyo_path_perm+0x276/0x460 [ 535.586534][T14435] ? tomoyo_path_perm+0x262/0x460 [ 535.586580][T14435] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 535.586640][T14435] ? lockdown_is_locked_down+0x3d/0x140 [ 535.586696][T14435] ? __pfx_ima_file_check+0x10/0x10 [ 535.586734][T14435] ? hook_file_truncate+0xc4/0x250 [ 535.586787][T14435] security_file_truncate+0xb5/0x1e0 [ 535.586819][T14435] path_openat+0x1c6e/0x31a0 [ 535.586870][T14435] ? __pfx_path_openat+0x10/0x10 [ 535.586915][T14435] do_file_open+0x20e/0x430 [ 535.586948][T14435] ? __pfx_do_file_open+0x10/0x10 [ 535.587007][T14435] ? alloc_fd+0x476/0x790 [ 535.587039][T14435] ? do_getname+0x191/0x390 [ 535.587078][T14435] do_sys_openat2+0x10d/0x1e0 [ 535.587115][T14435] ? __pfx_do_sys_openat2+0x10/0x10 [ 535.587166][T14435] __x64_sys_openat+0x12d/0x210 [ 535.587207][T14435] ? __pfx___x64_sys_openat+0x10/0x10 [ 535.587259][T14435] do_syscall_64+0x106/0xf80 [ 535.587292][T14435] ? clear_bhb_loop+0x40/0x90 [ 535.587327][T14435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.587356][T14435] RIP: 0033:0x7f3ac899c799 [ 535.587381][T14435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 535.587410][T14435] RSP: 002b:00007f3ac979b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 535.587437][T14435] RAX: ffffffffffffffda RBX: 00007f3ac8c16090 RCX: 00007f3ac899c799 [ 535.587457][T14435] RDX: 0000000000022202 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 535.587476][T14435] RBP: 00007f3ac8a32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 535.587493][T14435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 535.587509][T14435] R13: 00007f3ac8c16128 R14: 00007f3ac8c16090 R15: 00007fff96297698 [ 535.587550][T14435] [ 535.587633][T14435] ERROR: Out of memory at tomoyo_realpath_from_path. [ 536.858514][T14444] mkiss: ax0: crc mode is auto. [ 537.165472][T14454] input: f¬ as /devices/virtual/input/input133 [ 537.557792][T14461] __vm_enough_memory: pid: 14461, comm: syz.3.1908, bytes: 4398046511104 not enough memory for the allocation [ 539.139958][T14503] FAULT_INJECTION: forcing a failure. [ 539.139958][T14503] name fail_futex, interval 1, probability 0, space 0, times 0 [ 539.206057][T14503] CPU: 1 UID: 0 PID: 14503 Comm: syz.1.1915 Tainted: G L syzkaller #0 PREEMPT(full) [ 539.206103][T14503] Tainted: [L]=SOFTLOCKUP [ 539.206113][T14503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 539.206129][T14503] Call Trace: [ 539.206138][T14503] [ 539.206157][T14503] dump_stack_lvl+0x100/0x190 [ 539.206205][T14503] should_fail_ex.cold+0x5/0xa [ 539.206236][T14503] get_futex_key+0x1d2/0x1620 [ 539.206275][T14503] ? __pfx_get_futex_key+0x10/0x10 [ 539.206319][T14503] futex_wait_setup+0x83/0x510 [ 539.206368][T14503] __futex_wait+0x19f/0x300 [ 539.206412][T14503] ? __pfx___futex_wait+0x10/0x10 [ 539.206458][T14503] ? __pfx_futex_wake_mark+0x10/0x10 [ 539.206507][T14503] ? find_held_lock+0x2b/0x80 [ 539.206531][T14503] ? futex_wake+0x456/0x530 [ 539.206573][T14503] futex_wait+0xed/0x380 [ 539.206613][T14503] ? __pfx_futex_wait+0x10/0x10 [ 539.206659][T14503] ? putname+0xb1/0x110 [ 539.206683][T14503] ? kmem_cache_free+0x124/0x6a0 [ 539.206721][T14503] do_futex+0x1ef/0x350 [ 539.206753][T14503] ? __pfx_do_futex+0x10/0x10 [ 539.206784][T14503] ? __pfx_do_sys_openat2+0x10/0x10 [ 539.206827][T14503] __x64_sys_futex+0x34f/0x4d0 [ 539.206857][T14503] ? __x64_sys_openat+0x12d/0x210 [ 539.206890][T14503] ? __pfx___x64_sys_futex+0x10/0x10 [ 539.206935][T14503] do_syscall_64+0x106/0xf80 [ 539.206966][T14503] ? clear_bhb_loop+0x40/0x90 [ 539.206998][T14503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.207025][T14503] RIP: 0033:0x7ff49219c799 [ 539.207048][T14503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 539.207074][T14503] RSP: 002b:00007ff4930520e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 539.207100][T14503] RAX: ffffffffffffffda RBX: 00007ff492416098 RCX: 00007ff49219c799 [ 539.207119][T14503] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff492416098 [ 539.207135][T14503] RBP: 00007ff492416090 R08: 0000000000000000 R09: 0000000000000000 [ 539.207160][T14503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 539.207177][T14503] R13: 00007ff492416128 R14: 00007ffe756b11f0 R15: 00007ffe756b12d8 [ 539.207216][T14503] [ 539.717382][T14508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1918'. [ 539.737165][T14508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1918'. [ 539.760364][T14508] nbd: illegal input index -1073741824 [ 539.929775][T14502] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 540.176573][T14517] __vm_enough_memory: pid: 14517, comm: syz.2.1919, bytes: 4398046511104 not enough memory for the allocation [ 540.216242][T14516] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 540.223724][T14516] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 540.232354][T14516] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 540.252600][T14516] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 540.575704][T14519] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1921'. [ 541.542520][T14537] FAULT_INJECTION: forcing a failure. [ 541.542520][T14537] name failslab, interval 1, probability 0, space 0, times 0 [ 541.573871][T14537] CPU: 0 UID: 0 PID: 14537 Comm: syz.0.1925 Tainted: G L syzkaller #0 PREEMPT(full) [ 541.573917][T14537] Tainted: [L]=SOFTLOCKUP [ 541.573923][T14537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 541.573933][T14537] Call Trace: [ 541.573939][T14537] [ 541.573945][T14537] dump_stack_lvl+0x100/0x190 [ 541.573973][T14537] should_fail_ex.cold+0x5/0xa [ 541.573991][T14537] should_failslab+0xc2/0x120 [ 541.574010][T14537] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 541.574031][T14537] ? alloc_empty_file+0x55/0x1c0 [ 541.574053][T14537] alloc_empty_file+0x55/0x1c0 [ 541.574071][T14537] alloc_file_pseudo+0x13a/0x230 [ 541.574090][T14537] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 541.574114][T14537] __anon_inode_getfile+0xe8/0x280 [ 541.574130][T14537] ? kasan_save_track+0x14/0x30 [ 541.574153][T14537] sync_file_alloc+0x65/0x160 [ 541.574174][T14537] sync_file_create+0x17/0xf0 [ 541.574195][T14537] sw_sync_ioctl+0x849/0xf80 [ 541.574220][T14537] ? find_held_lock+0x2b/0x80 [ 541.574234][T14537] ? __pfx_sw_sync_ioctl+0x10/0x10 [ 541.574263][T14537] ? __pfx_sw_sync_ioctl+0x10/0x10 [ 541.574285][T14537] __x64_sys_ioctl+0x18e/0x210 [ 541.574307][T14537] do_syscall_64+0x106/0xf80 [ 541.574324][T14537] ? clear_bhb_loop+0x40/0x90 [ 541.574341][T14537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.574356][T14537] RIP: 0033:0x7f716079c799 [ 541.574371][T14537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 541.574385][T14537] RSP: 002b:00007f7161719028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 541.574399][T14537] RAX: ffffffffffffffda RBX: 00007f7160a15fa0 RCX: 00007f716079c799 [ 541.574409][T14537] RDX: 0000200000000080 RSI: 00000000c0285700 RDI: 0000000000000009 [ 541.574418][T14537] RBP: 00007f7160832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 541.574427][T14537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 541.574435][T14537] R13: 00007f7160a16038 R14: 00007f7160a15fa0 R15: 00007ffff59c8f98 [ 541.574456][T14537] [ 542.296225][ T8982] Bluetooth: hci3: command 0x0c1a tx timeout [ 542.302251][ T9021] Bluetooth: hci2: command 0x0c1a tx timeout [ 542.311048][ T9021] Bluetooth: hci1: command 0x0c1a tx timeout [ 542.317452][ T9039] Bluetooth: hci0: command 0x0c1a tx timeout [ 542.683657][T14552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1928'. [ 543.365354][T14568] netlink: 504 bytes leftover after parsing attributes in process `syz.3.1930'. [ 543.465930][T14566] FAULT_INJECTION: forcing a failure. [ 543.465930][T14566] name fail_futex, interval 1, probability 0, space 0, times 0 [ 543.546270][T14566] CPU: 0 UID: 0 PID: 14566 Comm: syz.1.1929 Tainted: G L syzkaller #0 PREEMPT(full) [ 543.546312][T14566] Tainted: [L]=SOFTLOCKUP [ 543.546321][T14566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 543.546336][T14566] Call Trace: [ 543.546343][T14566] [ 543.546354][T14566] dump_stack_lvl+0x100/0x190 [ 543.546398][T14566] should_fail_ex.cold+0x5/0xa [ 543.546430][T14566] get_futex_key+0x1d2/0x1620 [ 543.546466][T14566] ? __pfx_get_futex_key+0x10/0x10 [ 543.546494][T14566] ? lock_acquire+0x1cf/0x380 [ 543.546539][T14566] futex_wake+0xea/0x530 [ 543.546581][T14566] ? __pfx_futex_wake+0x10/0x10 [ 543.546616][T14566] ? exit_mm_release+0x19/0x30 [ 543.546656][T14566] do_futex+0x32b/0x350 [ 543.546689][T14566] ? __pfx_do_futex+0x10/0x10 [ 543.546719][T14566] ? __might_fault+0xc5/0x140 [ 543.546764][T14566] mm_release+0x24a/0x2f0 [ 543.546791][T14566] do_exit+0x704/0x2b60 [ 543.546829][T14566] ? __pfx_do_exit+0x10/0x10 [ 543.546870][T14566] ? do_raw_spin_lock+0x128/0x260 [ 543.546905][T14566] ? find_held_lock+0x2b/0x80 [ 543.546928][T14566] ? get_signal+0x7e0/0x21e0 [ 543.546959][T14566] do_group_exit+0xd5/0x2a0 [ 543.546996][T14566] get_signal+0x1ec7/0x21e0 [ 543.547037][T14566] ? __pfx_get_signal+0x10/0x10 [ 543.547065][T14566] ? do_futex+0x192/0x350 [ 543.547102][T14566] arch_do_signal_or_restart+0x91/0x770 [ 543.547135][T14566] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 543.547177][T14566] ? __pfx___x64_sys_futex+0x10/0x10 [ 543.547219][T14566] exit_to_user_mode_loop+0x86/0x4a0 [ 543.547256][T14566] do_syscall_64+0x668/0xf80 [ 543.547286][T14566] ? clear_bhb_loop+0x40/0x90 [ 543.547318][T14566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.547344][T14566] RIP: 0033:0x7ff49219c799 [ 543.547362][T14566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.547387][T14566] RSP: 002b:00007ff4930520e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 543.547411][T14566] RAX: fffffffffffffe00 RBX: 00007ff492416098 RCX: 00007ff49219c799 [ 543.547430][T14566] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff492416098 [ 543.547446][T14566] RBP: 00007ff492416090 R08: 0000000000000000 R09: 0000000000000000 [ 543.547463][T14566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 543.547478][T14566] R13: 00007ff492416128 R14: 00007ffe756b11f0 R15: 00007ffe756b12d8 [ 543.547515][T14566] [ 544.477250][T14586] __vm_enough_memory: pid: 14586, comm: syz.3.1934, bytes: 4398046511104 not enough memory for the allocation [ 545.037798][T14596] blktrace: Concurrent blktraces are not allowed on loop2 [ 545.968936][T14608] __vm_enough_memory: pid: 14608, comm: syz.3.1939, bytes: 4398046511104 not enough memory for the allocation [ 546.087943][T14612] __vm_enough_memory: pid: 14612, comm: syz.0.1940, bytes: 4398046511104 not enough memory for the allocation [ 546.242844][T14611] mkiss: ax0: crc mode is auto. [ 546.435942][T14617] netlink: 504 bytes leftover after parsing attributes in process `syz.1.1941'. [ 546.518071][T14620] netlink: 350 bytes leftover after parsing attributes in process `syz.1.1941'. [ 548.574488][T14652] input: f¬ as /devices/virtual/input/input134 [ 548.827076][T14656] sg_write: process 1927 (syz.1.1950) changed security contexts after opening file descriptor, this is not allowed. [ 549.045552][T14659] FAULT_INJECTION: forcing a failure. [ 549.045552][T14659] name fail_futex, interval 1, probability 0, space 0, times 0 [ 549.091926][T14659] CPU: 1 UID: 0 PID: 14659 Comm: syz.0.1952 Tainted: G L syzkaller #0 PREEMPT(full) [ 549.091972][T14659] Tainted: [L]=SOFTLOCKUP [ 549.091982][T14659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 549.091998][T14659] Call Trace: [ 549.092007][T14659] [ 549.092018][T14659] dump_stack_lvl+0x100/0x190 [ 549.092065][T14659] should_fail_ex.cold+0x5/0xa [ 549.092098][T14659] get_futex_key+0x1d2/0x1620 [ 549.092135][T14659] ? __pfx_get_futex_key+0x10/0x10 [ 549.092181][T14659] futex_wake+0xea/0x530 [ 549.092222][T14659] ? __pfx_futex_wake+0x10/0x10 [ 549.092266][T14659] ? putname+0xb1/0x110 [ 549.092293][T14659] ? kmem_cache_free+0x124/0x6a0 [ 549.092337][T14659] do_futex+0x32b/0x350 [ 549.092373][T14659] ? __pfx_do_futex+0x10/0x10 [ 549.092403][T14659] ? __pfx_do_sys_openat2+0x10/0x10 [ 549.092442][T14659] ? __fget_files+0x21f/0x3d0 [ 549.092472][T14659] __x64_sys_futex+0x34f/0x4d0 [ 549.092519][T14659] ? __x64_sys_openat+0x12d/0x210 [ 549.092557][T14659] ? __pfx___x64_sys_futex+0x10/0x10 [ 549.092606][T14659] do_syscall_64+0x106/0xf80 [ 549.092639][T14659] ? clear_bhb_loop+0x40/0x90 [ 549.092673][T14659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.092703][T14659] RIP: 0033:0x7f716079c799 [ 549.092727][T14659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 549.092755][T14659] RSP: 002b:00007f71617190e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 549.092783][T14659] RAX: ffffffffffffffda RBX: 00007f7160a15fa8 RCX: 00007f716079c799 [ 549.092800][T14659] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7160a15fac [ 549.092818][T14659] RBP: 00007f7160a15fa0 R08: 0000000000000001 R09: 0000000000000000 [ 549.092834][T14659] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 549.092851][T14659] R13: 00007f7160a16038 R14: 00007ffff59c8eb0 R15: 00007ffff59c8f98 [ 549.092893][T14659] [ 549.369759][T14664] __vm_enough_memory: pid: 14664, comm: syz.3.1951, bytes: 4398046511104 not enough memory for the allocation [ 551.300058][T14685] random: crng reseeded on system resumption [ 551.554369][T14685] hub 1-0:1.0: USB hub found [ 551.578611][T14685] hub 1-0:1.0: 1 port detected [ 551.663438][T14703] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz.1.1957: bg 4: bad block bitmap checksum [ 551.819652][T14703] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 74 [ 551.947251][T14703] EXT4-fs (sda1): This should not happen!! Data will be lost [ 551.947251][T14703] [ 556.177996][T14779] blktrace: Concurrent blktraces are not allowed on loop2 [ 556.624987][T14787] __vm_enough_memory: pid: 14787, comm: syz.3.1982, bytes: 4398046511104 not enough memory for the allocation [ 557.890989][T14807] FAULT_INJECTION: forcing a failure. [ 557.890989][T14807] name failslab, interval 1, probability 0, space 0, times 0 [ 557.966442][T14807] CPU: 1 UID: 0 PID: 14807 Comm: syz.1.1988 Tainted: G L syzkaller #0 PREEMPT(full) [ 557.966492][T14807] Tainted: [L]=SOFTLOCKUP [ 557.966501][T14807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 557.966515][T14807] Call Trace: [ 557.966523][T14807] [ 557.966532][T14807] dump_stack_lvl+0x100/0x190 [ 557.966575][T14807] should_fail_ex.cold+0x5/0xa [ 557.966605][T14807] should_failslab+0xc2/0x120 [ 557.966632][T14807] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 557.966667][T14807] ? do_getname+0x35/0x390 [ 557.966695][T14807] ? find_held_lock+0x2b/0x80 [ 557.966725][T14807] do_getname+0x35/0x390 [ 557.966759][T14807] do_sys_openat2+0xc5/0x1e0 [ 557.966791][T14807] ? __pfx_do_sys_openat2+0x10/0x10 [ 557.966820][T14807] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 557.966857][T14807] ? __fget_files+0x21f/0x3d0 [ 557.966887][T14807] __x64_sys_openat+0x12d/0x210 [ 557.966919][T14807] ? __pfx___x64_sys_openat+0x10/0x10 [ 557.966950][T14807] ? ksys_write+0x1ac/0x250 [ 557.966999][T14807] do_syscall_64+0x106/0xf80 [ 557.967028][T14807] ? clear_bhb_loop+0x40/0x90 [ 557.967060][T14807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.967085][T14807] RIP: 0033:0x7ff49219c799 [ 557.967106][T14807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 557.967131][T14807] RSP: 002b:00007ff493073028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 557.967155][T14807] RAX: ffffffffffffffda RBX: 00007ff492415fa0 RCX: 00007ff49219c799 [ 557.967172][T14807] RDX: 0000000000000400 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 557.967188][T14807] RBP: 00007ff493073090 R08: 0000000000000000 R09: 0000000000000000 [ 557.967204][T14807] R10: 000000000000003f R11: 0000000000000246 R12: 0000000000000001 [ 557.967219][T14807] R13: 00007ff492416038 R14: 00007ff492415fa0 R15: 00007ffe756b12d8 [ 557.967255][T14807] [ 559.712288][T14834] __vm_enough_memory: pid: 14834, comm: syz.1.1994, bytes: 4398046511104 not enough memory for the allocation [ 559.954020][T14840] blktrace: Concurrent blktraces are not allowed on loop2 [ 560.412420][T14847] FAULT_INJECTION: forcing a failure. [ 560.412420][T14847] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 560.449515][T14847] CPU: 1 UID: 0 PID: 14847 Comm: syz.3.1998 Tainted: G L syzkaller #0 PREEMPT(full) [ 560.449556][T14847] Tainted: [L]=SOFTLOCKUP [ 560.449565][T14847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 560.449580][T14847] Call Trace: [ 560.449588][T14847] [ 560.449599][T14847] dump_stack_lvl+0x100/0x190 [ 560.449640][T14847] should_fail_ex.cold+0x5/0xa [ 560.449670][T14847] strncpy_from_user+0x3b/0x2d0 [ 560.449713][T14847] do_getname+0x78/0x390 [ 560.449747][T14847] do_sys_openat2+0xc5/0x1e0 [ 560.449778][T14847] ? __pfx_do_sys_openat2+0x10/0x10 [ 560.449808][T14847] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 560.449844][T14847] ? __fget_files+0x21f/0x3d0 [ 560.449874][T14847] __x64_sys_openat+0x12d/0x210 [ 560.449906][T14847] ? __pfx___x64_sys_openat+0x10/0x10 [ 560.449936][T14847] ? ksys_write+0x1ac/0x250 [ 560.449985][T14847] do_syscall_64+0x106/0xf80 [ 560.450013][T14847] ? clear_bhb_loop+0x40/0x90 [ 560.450044][T14847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.450070][T14847] RIP: 0033:0x7f3ac899c799 [ 560.450091][T14847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 560.450115][T14847] RSP: 002b:00007f3ac97bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 560.450140][T14847] RAX: ffffffffffffffda RBX: 00007f3ac8c15fa0 RCX: 00007f3ac899c799 [ 560.450157][T14847] RDX: 0000000000000400 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 560.450173][T14847] RBP: 00007f3ac97bc090 R08: 0000000000000000 R09: 0000000000000000 [ 560.450188][T14847] R10: 000000000000003f R11: 0000000000000246 R12: 0000000000000001 [ 560.450204][T14847] R13: 00007f3ac8c16038 R14: 00007f3ac8c15fa0 R15: 00007fff96297698 [ 560.450239][T14847] [ 561.357928][T14858] random: crng reseeded on system resumption [ 561.488779][T14863] Invalid ELF header magic: != ELF [ 561.744264][T14867] FAULT_INJECTION: forcing a failure. [ 561.744264][T14867] name failslab, interval 1, probability 0, space 0, times 0 [ 561.768397][T14867] CPU: 1 UID: 0 PID: 14867 Comm: syz.1.2002 Tainted: G L syzkaller #0 PREEMPT(full) [ 561.768439][T14867] Tainted: [L]=SOFTLOCKUP [ 561.768448][T14867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 561.768463][T14867] Call Trace: [ 561.768471][T14867] [ 561.768480][T14867] dump_stack_lvl+0x100/0x190 [ 561.768522][T14867] should_fail_ex.cold+0x5/0xa [ 561.768552][T14867] should_failslab+0xc2/0x120 [ 561.768580][T14867] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 561.768615][T14867] ? taskstats_exit+0x650/0xbd0 [ 561.768659][T14867] taskstats_exit+0x650/0xbd0 [ 561.768697][T14867] ? __pfx_acct_update_integrals+0x10/0x10 [ 561.768736][T14867] ? __pfx_taskstats_exit+0x10/0x10 [ 561.768776][T14867] ? rcu_read_lock_any_held+0x6a/0xa0 [ 561.768800][T14867] ? exit_signals+0x395/0xaf0 [ 561.768830][T14867] do_exit+0x659/0x2b60 [ 561.768867][T14867] ? __pfx_do_exit+0x10/0x10 [ 561.768898][T14867] ? do_raw_spin_lock+0x128/0x260 [ 561.768932][T14867] ? find_held_lock+0x2b/0x80 [ 561.768953][T14867] ? get_signal+0x7e0/0x21e0 [ 561.768982][T14867] do_group_exit+0xd5/0x2a0 [ 561.769015][T14867] get_signal+0x1ec7/0x21e0 [ 561.769053][T14867] ? __pfx_get_signal+0x10/0x10 [ 561.769080][T14867] ? do_futex+0x192/0x350 [ 561.769114][T14867] arch_do_signal_or_restart+0x91/0x770 [ 561.769148][T14867] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 561.769188][T14867] ? __pfx___x64_sys_futex+0x10/0x10 [ 561.769225][T14867] exit_to_user_mode_loop+0x86/0x4a0 [ 561.769264][T14867] do_syscall_64+0x668/0xf80 [ 561.769291][T14867] ? clear_bhb_loop+0x40/0x90 [ 561.769319][T14867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.769342][T14867] RIP: 0033:0x7ff49219c799 [ 561.769362][T14867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 561.769384][T14867] RSP: 002b:00007ff4930520e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 561.769405][T14867] RAX: fffffffffffffe00 RBX: 00007ff492416098 RCX: 00007ff49219c799 [ 561.769420][T14867] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff492416098 [ 561.769434][T14867] RBP: 00007ff492416090 R08: 0000000000000000 R09: 0000000000000000 [ 561.769448][T14867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 561.769462][T14867] R13: 00007ff492416128 R14: 00007ffe756b11f0 R15: 00007ffe756b12d8 [ 561.769492][T14867] [ 562.209070][T14874] __vm_enough_memory: pid: 14874, comm: syz.1.2003, bytes: 4398046511104 not enough memory for the allocation [ 562.870197][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.876616][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.891850][T14900] blktrace: Concurrent blktraces are not allowed on loop2 [ 564.125103][T14904] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 564.131354][T14904] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 564.146132][T14904] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 564.171027][T14904] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 564.394670][T14907] FAULT_INJECTION: forcing a failure. [ 564.394670][T14907] name failslab, interval 1, probability 0, space 0, times 0 [ 564.433772][T14907] CPU: 1 UID: 0 PID: 14907 Comm: syz.2.2010 Tainted: G L syzkaller #0 PREEMPT(full) [ 564.433814][T14907] Tainted: [L]=SOFTLOCKUP [ 564.433822][T14907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 564.433837][T14907] Call Trace: [ 564.433845][T14907] [ 564.433856][T14907] dump_stack_lvl+0x100/0x190 [ 564.433898][T14907] should_fail_ex.cold+0x5/0xa [ 564.433928][T14907] should_failslab+0xc2/0x120 [ 564.433955][T14907] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 564.433990][T14907] ? alloc_empty_file+0x55/0x1c0 [ 564.434019][T14907] ? __pfx_stack_trace_save+0x10/0x10 [ 564.434050][T14907] alloc_empty_file+0x55/0x1c0 [ 564.434080][T14907] path_openat+0xe8/0x31a0 [ 564.434104][T14907] ? kasan_save_stack+0x3f/0x50 [ 564.434137][T14907] ? kasan_save_stack+0x30/0x50 [ 564.434171][T14907] ? kasan_save_track+0x14/0x30 [ 564.434205][T14907] ? __kasan_slab_alloc+0x89/0x90 [ 564.434226][T14907] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 564.434260][T14907] ? do_getname+0x35/0x390 [ 564.434288][T14907] ? do_sys_openat2+0xc5/0x1e0 [ 564.434318][T14907] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.434350][T14907] ? __pfx_path_openat+0x10/0x10 [ 564.434389][T14907] do_file_open+0x20e/0x430 [ 564.434417][T14907] ? __pfx_do_file_open+0x10/0x10 [ 564.434468][T14907] ? alloc_fd+0x476/0x790 [ 564.434495][T14907] ? do_getname+0x191/0x390 [ 564.434529][T14907] do_sys_openat2+0x10d/0x1e0 [ 564.434561][T14907] ? __pfx_do_sys_openat2+0x10/0x10 [ 564.434591][T14907] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 564.434628][T14907] ? __fget_files+0x21f/0x3d0 [ 564.434665][T14907] __x64_sys_openat+0x12d/0x210 [ 564.434699][T14907] ? __pfx___x64_sys_openat+0x10/0x10 [ 564.434729][T14907] ? ksys_write+0x1ac/0x250 [ 564.434782][T14907] do_syscall_64+0x106/0xf80 [ 564.434811][T14907] ? clear_bhb_loop+0x40/0x90 [ 564.434842][T14907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.434868][T14907] RIP: 0033:0x7f27ad79c799 [ 564.434890][T14907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 564.434914][T14907] RSP: 002b:00007f27ab9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 564.434938][T14907] RAX: ffffffffffffffda RBX: 00007f27ada15fa0 RCX: 00007f27ad79c799 [ 564.434955][T14907] RDX: 0000000000000400 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 564.434972][T14907] RBP: 00007f27ab9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 564.434987][T14907] R10: 000000000000003f R11: 0000000000000246 R12: 0000000000000001 [ 564.435002][T14907] R13: 00007f27ada16038 R14: 00007f27ada15fa0 R15: 00007ffd96cc6e78 [ 564.435038][T14907] [ 565.824092][T14914] FAULT_INJECTION: forcing a failure. [ 565.824092][T14914] name fail_futex, interval 1, probability 0, space 0, times 0 [ 565.873145][T14914] CPU: 1 UID: 0 PID: 14914 Comm: syz.0.2012 Tainted: G L syzkaller #0 PREEMPT(full) [ 565.873198][T14914] Tainted: [L]=SOFTLOCKUP [ 565.873207][T14914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 565.873222][T14914] Call Trace: [ 565.873230][T14914] [ 565.873240][T14914] dump_stack_lvl+0x100/0x190 [ 565.873282][T14914] should_fail_ex.cold+0x5/0xa [ 565.873307][T14914] ? rcu_is_watching+0x12/0xc0 [ 565.873345][T14914] get_futex_key+0x1d2/0x1620 [ 565.873379][T14914] ? __pfx_get_futex_key+0x10/0x10 [ 565.873406][T14914] ? lock_acquire+0x1cf/0x380 [ 565.873449][T14914] futex_wake+0xea/0x530 [ 565.873489][T14914] ? __pfx_futex_wake+0x10/0x10 [ 565.873525][T14914] ? exit_mm_release+0x19/0x30 [ 565.873564][T14914] do_futex+0x32b/0x350 [ 565.873596][T14914] ? __pfx_do_futex+0x10/0x10 [ 565.873624][T14914] ? __might_fault+0xc5/0x140 [ 565.873668][T14914] mm_release+0x24a/0x2f0 [ 565.873693][T14914] do_exit+0x704/0x2b60 [ 565.873729][T14914] ? __pfx_do_exit+0x10/0x10 [ 565.873760][T14914] ? do_raw_spin_lock+0x128/0x260 [ 565.873794][T14914] ? find_held_lock+0x2b/0x80 [ 565.873817][T14914] ? get_signal+0x7e0/0x21e0 [ 565.873846][T14914] do_group_exit+0xd5/0x2a0 [ 565.873881][T14914] get_signal+0x1ec7/0x21e0 [ 565.873919][T14914] ? __pfx_get_signal+0x10/0x10 [ 565.873946][T14914] ? do_futex+0x192/0x350 [ 565.873981][T14914] arch_do_signal_or_restart+0x91/0x770 [ 565.874014][T14914] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 565.874055][T14914] ? __pfx___x64_sys_futex+0x10/0x10 [ 565.874095][T14914] exit_to_user_mode_loop+0x86/0x4a0 [ 565.874131][T14914] do_syscall_64+0x668/0xf80 [ 565.874160][T14914] ? clear_bhb_loop+0x40/0x90 [ 565.874199][T14914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.874226][T14914] RIP: 0033:0x7f716079c799 [ 565.874247][T14914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 565.874272][T14914] RSP: 002b:00007f71616f80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 565.874296][T14914] RAX: fffffffffffffe00 RBX: 00007f7160a16098 RCX: 00007f716079c799 [ 565.874312][T14914] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7160a16098 [ 565.874326][T14914] RBP: 00007f7160a16090 R08: 0000000000000000 R09: 0000000000000000 [ 565.874341][T14914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 565.874355][T14914] R13: 00007f7160a16128 R14: 00007ffff59c8eb0 R15: 00007ffff59c8f98 [ 565.874391][T14914] [ 566.218285][ T8982] Bluetooth: hci1: command 0x0c1a tx timeout [ 566.224334][ T8982] Bluetooth: hci0: command 0x0c1a tx timeout [ 566.233529][ T8982] Bluetooth: hci3: command 0x0c1a tx timeout [ 566.241839][ T8982] Bluetooth: hci2: command 0x0c1a tx timeout [ 568.563381][T14954] bridge0: port 4(veth0_to_bridge) entered blocking state [ 568.631840][T14954] bridge0: port 4(veth0_to_bridge) entered disabled state [ 568.667349][T14954] veth0_to_bridge: entered allmulticast mode [ 568.702639][T14954] veth0_to_bridge: entered promiscuous mode [ 568.734999][T14954] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 568.780737][T14954] bridge0: port 4(veth0_to_bridge) entered blocking state [ 568.788014][T14954] bridge0: port 4(veth0_to_bridge) entered forwarding state [ 569.079968][T14959] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 569.218579][T14959] EXT4-fs (sda1): This should not happen!! Data will be lost [ 569.218579][T14959] [ 569.568329][T14971] FAULT_INJECTION: forcing a failure. [ 569.568329][T14971] name fail_futex, interval 1, probability 0, space 0, times 0 [ 569.616402][T14971] CPU: 1 UID: 0 PID: 14971 Comm: syz.3.2026 Tainted: G L syzkaller #0 PREEMPT(full) [ 569.616444][T14971] Tainted: [L]=SOFTLOCKUP [ 569.616452][T14971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 569.616484][T14971] Call Trace: [ 569.616493][T14971] [ 569.616502][T14971] dump_stack_lvl+0x100/0x190 [ 569.616545][T14971] should_fail_ex.cold+0x5/0xa [ 569.616575][T14971] get_futex_key+0x1d2/0x1620 [ 569.616610][T14971] ? __pfx_get_futex_key+0x10/0x10 [ 569.616636][T14971] ? lock_acquire+0x1cf/0x380 [ 569.616680][T14971] futex_wake+0xea/0x530 [ 569.616720][T14971] ? __pfx_futex_wake+0x10/0x10 [ 569.616755][T14971] ? exit_mm_release+0x19/0x30 [ 569.616795][T14971] do_futex+0x32b/0x350 [ 569.616826][T14971] ? __pfx_do_futex+0x10/0x10 [ 569.616855][T14971] ? __might_fault+0xc5/0x140 [ 569.616899][T14971] mm_release+0x24a/0x2f0 [ 569.616925][T14971] do_exit+0x704/0x2b60 [ 569.616968][T14971] ? __pfx_do_exit+0x10/0x10 [ 569.616999][T14971] ? do_raw_spin_lock+0x1e0/0x260 [ 569.617033][T14971] ? find_held_lock+0x2b/0x80 [ 569.617055][T14971] ? get_signal+0x7e0/0x21e0 [ 569.617085][T14971] do_group_exit+0xd5/0x2a0 [ 569.617119][T14971] get_signal+0x1ec7/0x21e0 [ 569.617158][T14971] ? __pfx_get_signal+0x10/0x10 [ 569.617186][T14971] ? do_futex+0x192/0x350 [ 569.617221][T14971] arch_do_signal_or_restart+0x91/0x770 [ 569.617254][T14971] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 569.617295][T14971] ? __pfx___x64_sys_futex+0x10/0x10 [ 569.617335][T14971] exit_to_user_mode_loop+0x86/0x4a0 [ 569.617370][T14971] do_syscall_64+0x668/0xf80 [ 569.617399][T14971] ? clear_bhb_loop+0x40/0x90 [ 569.617430][T14971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.617454][T14971] RIP: 0033:0x7f3ac899c799 [ 569.617476][T14971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 569.617500][T14971] RSP: 002b:00007f3ac979b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 569.617523][T14971] RAX: fffffffffffffe00 RBX: 00007f3ac8c16098 RCX: 00007f3ac899c799 [ 569.617540][T14971] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3ac8c16098 [ 569.617555][T14971] RBP: 00007f3ac8c16090 R08: 0000000000000000 R09: 0000000000000000 [ 569.617570][T14971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 569.617585][T14971] R13: 00007f3ac8c16128 R14: 00007fff962975b0 R15: 00007fff96297698 [ 569.617620][T14971] [ 570.394927][T14992] mkiss: ax0: crc mode is auto. [ 572.178235][T15015] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2034'. [ 572.219770][T14545] Bluetooth: hci3: unexpected event 0x14 length: 16 > 6 [ 572.418754][T14545] block nbd0: Receive control failed (result -32) [ 572.664520][T15029] blktrace: Concurrent blktraces are not allowed on loop2 [ 573.349540][T15046] __vm_enough_memory: pid: 15046, comm: syz.2.2041, bytes: 4398046511104 not enough memory for the allocation [ 582.735885][ C0] sched: DL replenish lagged too much [ 583.339233][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 583.352468][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 583.365692][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 583.378861][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 583.392108][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 583.405325][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 583.418551][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 583.432867][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 583.447165][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 583.461389][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 583.486152][T15047] zswap: compressor not available [ 588.347203][ C0] net_ratelimit: 4283 callbacks suppressed [ 588.347220][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 588.366297][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 588.379465][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 588.392671][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 588.405814][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 588.418970][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 588.432061][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 588.445157][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 588.458314][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 588.471428][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 593.356738][ C0] net_ratelimit: 4434 callbacks suppressed [ 593.356756][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 593.375898][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 593.389117][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 593.402331][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 593.415537][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 593.428737][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 593.441950][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 593.455141][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 593.468336][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 593.481524][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 598.366071][ C0] net_ratelimit: 4634 callbacks suppressed [ 598.366088][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 598.385040][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 598.398170][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 598.411244][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 598.424331][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 598.437422][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 598.450491][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 598.463553][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 598.476688][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 598.489794][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 603.376855][ C0] net_ratelimit: 4679 callbacks suppressed [ 603.376871][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 603.395746][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 603.408841][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 603.421964][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 603.435054][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 603.448124][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 603.461199][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 603.474257][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 603.487404][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 603.500520][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 608.386331][ C0] net_ratelimit: 4732 callbacks suppressed [ 608.386347][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 608.405221][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 608.418388][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 608.431445][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 608.444517][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 608.457608][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 608.470941][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 608.484158][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 608.497252][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 608.510753][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 613.396562][ C0] net_ratelimit: 4740 callbacks suppressed [ 613.396580][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 613.415477][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 613.428596][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 613.441699][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 613.454798][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 613.467938][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 613.481089][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 613.494220][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 613.507308][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 613.520359][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 618.406710][ C0] net_ratelimit: 4466 callbacks suppressed [ 618.406727][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 618.425665][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 618.438801][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 618.452056][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 618.465294][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 618.478372][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 618.491466][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 618.504540][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 618.517633][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 618.530673][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 623.416318][ C0] net_ratelimit: 4623 callbacks suppressed [ 623.416335][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 623.435253][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 623.448447][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 623.461616][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 623.474760][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 623.487845][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 623.500935][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 623.514035][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 623.527667][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 623.540819][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 628.426415][ C0] net_ratelimit: 4643 callbacks suppressed [ 628.426432][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 628.445324][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 628.458393][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 628.471431][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 628.484462][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 628.497596][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 628.510654][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 628.523704][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 628.536801][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 628.549858][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 633.436260][ C0] net_ratelimit: 6670 callbacks suppressed [ 633.436277][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 633.454421][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 633.467473][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 633.479772][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 633.493004][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 633.505428][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 633.518552][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 633.530911][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 633.544004][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 633.556319][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 638.446737][ C0] net_ratelimit: 7124 callbacks suppressed [ 638.446754][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 638.464851][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 638.477905][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 638.490194][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 638.503227][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 638.515497][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 638.528542][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 638.540816][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 638.553847][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 638.566163][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 643.456770][ C0] net_ratelimit: 7176 callbacks suppressed [ 643.456787][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 643.474907][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 643.487982][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 643.500266][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 643.513305][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 643.525597][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 643.538674][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 643.550979][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 643.564025][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 643.576490][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 648.466824][ C0] net_ratelimit: 7192 callbacks suppressed [ 648.466841][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 648.484950][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 648.498035][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 648.510309][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 648.523444][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 648.535872][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 648.548925][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 648.561219][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 648.574242][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 648.586500][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 653.476215][ C0] net_ratelimit: 7174 callbacks suppressed [ 653.476231][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 653.494324][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 653.507363][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 653.519651][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 653.532875][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 653.545205][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 653.558271][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 653.570657][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 653.583805][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 653.596173][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 658.485965][ C0] net_ratelimit: 7294 callbacks suppressed [ 658.485982][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 658.504117][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 658.517160][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 658.529453][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 658.542474][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 658.554755][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 658.567777][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 658.580034][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 658.593431][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 658.605760][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 663.496181][ C0] net_ratelimit: 7277 callbacks suppressed [ 663.496198][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 663.515091][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 663.527463][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 663.540504][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 663.552776][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 663.565871][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 663.578159][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 663.591760][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 663.604037][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 663.617490][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 668.506244][ C0] net_ratelimit: 7109 callbacks suppressed [ 668.506261][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 668.524599][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 668.537700][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 668.550016][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 668.563090][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 668.575470][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 668.588515][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 668.600779][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 668.613805][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 668.626115][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 673.516190][ C0] net_ratelimit: 7182 callbacks suppressed [ 673.516207][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 673.534371][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 673.547500][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 673.559822][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 673.572869][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 673.585157][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 673.598279][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 673.610573][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 673.623643][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 673.635962][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 678.526192][ C0] net_ratelimit: 7217 callbacks suppressed [ 678.526208][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 678.545017][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 678.557283][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 678.570394][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 678.582685][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 678.595705][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 678.607974][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 678.620974][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 678.633263][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 678.646336][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 683.536080][ C0] net_ratelimit: 7288 callbacks suppressed [ 683.536097][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 683.554956][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 683.567284][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 683.580326][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 683.592619][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 683.605616][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 683.617895][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 683.630951][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 683.643219][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 683.656275][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 688.515849][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 688.522821][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P15035/1:b..l P5816/1:b..l [ 688.532358][ C0] rcu: (detected by 0, t=10502 jiffies, g=73845, q=4351 ncpus=2) [ 688.540142][ C0] task:udevd state:R running task stack:24584 pid:5816 tgid:5816 ppid:5193 task_flags:0x400140 flags:0x00080000 [ 688.554719][ C0] Call Trace: [ 688.557991][ C0] [ 688.560907][ C0] __schedule+0xfee/0x6120 [ 688.565311][ C0] ? __lock_acquire+0x4a5/0x2630 [ 688.570247][ C0] ? __pfx___schedule+0x10/0x10 [ 688.575083][ C0] ? mark_held_locks+0x40/0x70 [ 688.579830][ C0] preempt_schedule_irq+0x50/0x90 [ 688.584839][ C0] irqentry_exit+0x17b/0x670 [ 688.589413][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 688.595377][ C0] RIP: 0010:unwind_next_frame+0x149f/0x1ea0 [ 688.601255][ C0] Code: ff 48 ba 00 00 00 00 00 fc ff df 48 8d 79 02 48 89 f8 48 c1 e8 03 0f b6 34 10 48 8d 41 03 49 89 c0 49 c1 e8 03 41 0f b6 14 10 <49> 89 f8 41 83 e0 07 44 38 c6 41 0f 9e c0 40 84 f6 40 0f 95 c6 41 [ 688.620938][ C0] RSP: 0018:ffffc90003d27438 EFLAGS: 00000a02 [ 688.626992][ C0] RAX: ffffffff92080eb3 RBX: 0000000000000001 RCX: ffffffff92080eb0 [ 688.634944][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff92080eb2 [ 688.642895][ C0] RBP: ffffc90003d274f0 R08: 1ffffffff24101d6 R09: 0000000000000007 [ 688.650863][ C0] R10: 0000000000000200 R11: 00000000000852c8 R12: ffffc90003d274f8 [ 688.658816][ C0] R13: ffffc90003d274a8 R14: ffffc90003d27de0 R15: ffffc90003d274dc [ 688.666782][ C0] ? unwind_next_frame+0xb1d/0x1ea0 [ 688.671966][ C0] ? ___sys_sendmsg+0x190/0x1e0 [ 688.676807][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 688.682942][ C0] arch_stack_walk+0x94/0xf0 [ 688.687515][ C0] ? __sys_sendmsg+0x170/0x220 [ 688.692265][ C0] stack_trace_save+0x8e/0xc0 [ 688.696924][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 688.702278][ C0] ? __lock_acquire+0x4a5/0x2630 [ 688.707204][ C0] ? __lock_acquire+0x4a5/0x2630 [ 688.712127][ C0] save_stack+0x162/0x1e0 [ 688.716445][ C0] ? __pfx_save_stack+0x10/0x10 [ 688.721283][ C0] ? __free_frozen_pages+0x7e1/0x10d0 [ 688.726635][ C0] ? qlist_free_all+0x47/0xe0 [ 688.731297][ C0] ? kasan_quarantine_reduce+0x1a0/0x1f0 [ 688.736915][ C0] ? __kasan_slab_alloc+0x69/0x90 [ 688.741916][ C0] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 688.747533][ C0] ? skb_clone+0x190/0x400 [ 688.751929][ C0] ? netlink_broadcast_filtered+0xb6a/0xf50 [ 688.757802][ C0] ? netlink_sendmsg+0xa16/0xda0 [ 688.762726][ C0] ? ____sys_sendmsg+0xa54/0xc30 [ 688.767648][ C0] ? ___sys_sendmsg+0x190/0x1e0 [ 688.772487][ C0] ? page_ext_put+0x3e/0xd0 [ 688.776982][ C0] __reset_page_owner+0x84/0x190 [ 688.781904][ C0] __free_frozen_pages+0x7e1/0x10d0 [ 688.787096][ C0] qlist_free_all+0x47/0xe0 [ 688.791587][ C0] kasan_quarantine_reduce+0x1a0/0x1f0 [ 688.797041][ C0] __kasan_slab_alloc+0x69/0x90 [ 688.801875][ C0] kmem_cache_alloc_noprof+0x241/0x6e0 [ 688.807321][ C0] ? skb_clone+0x190/0x400 [ 688.811725][ C0] skb_clone+0x190/0x400 [ 688.815957][ C0] netlink_broadcast_filtered+0xb6a/0xf50 [ 688.821667][ C0] ? __pfx_netlink_broadcast_filtered+0x10/0x10 [ 688.827903][ C0] netlink_sendmsg+0xa16/0xda0 [ 688.832656][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 688.837929][ C0] ? __import_iovec+0x1d2/0x640 [ 688.842764][ C0] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 688.848385][ C0] ____sys_sendmsg+0xa54/0xc30 [ 688.853138][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 688.858406][ C0] ? __fput+0x68a/0xb40 [ 688.862551][ C0] ___sys_sendmsg+0x190/0x1e0 [ 688.867216][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 688.872420][ C0] ? __fput+0x68a/0xb40 [ 688.876571][ C0] ? kmem_cache_free+0x44b/0x6a0 [ 688.881492][ C0] ? percpu_counter_add_batch+0xb9/0x230 [ 688.887117][ C0] __sys_sendmsg+0x170/0x220 [ 688.891692][ C0] ? __pfx___sys_sendmsg+0x10/0x10 [ 688.896797][ C0] do_syscall_64+0x106/0xf80 [ 688.901373][ C0] ? clear_bhb_loop+0x40/0x90 [ 688.906034][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.911925][ C0] RIP: 0033:0x7fe313aa7407 [ 688.916324][ C0] RSP: 002b:00007ffe212e0640 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 688.924717][ C0] RAX: ffffffffffffffda RBX: 00007fe314146880 RCX: 00007fe313aa7407 [ 688.932669][ C0] RDX: 0000000000000000 RSI: 00007ffe212e06a0 RDI: 000000000000000c [ 688.940629][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 688.948579][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000000000cf [ 688.956530][ C0] R13: 0000564709178ad0 R14: 0000000000000000 R15: 0000000000000000 [ 688.964494][ C0] [ 688.967499][ C0] task:syz.1.2038 state:R running task stack:27320 pid:15035 tgid:15026 ppid:5824 task_flags:0x40044c flags:0x00080000 [ 688.980965][ C0] Call Trace: [ 688.984240][ C0] [ 688.987157][ C0] __schedule+0xfee/0x6120 [ 688.991560][ C0] ? __update_page_owner_handle+0x3c7/0x550 [ 688.997453][ C0] ? __pfx___schedule+0x10/0x10 [ 689.002289][ C0] ? mark_held_locks+0x40/0x70 [ 689.007042][ C0] preempt_schedule_irq+0x50/0x90 [ 689.012058][ C0] irqentry_exit+0x17b/0x670 [ 689.016635][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 689.022603][ C0] RIP: 0010:stack_access_ok+0xdc/0x1d0 [ 689.028043][ C0] Code: 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 dc 00 00 00 48 8b 73 28 48 89 da 48 89 ef e8 9f 6c f3 ff 85 c0 74 11 31 c0 48 83 c4 08 5b <5d> 41 5c 41 5d c3 cc cc cc cc 48 b8 00 00 00 00 00 fc ff df 48 89 [ 689.047631][ C0] RSP: 0018:ffffc90004cdf2d8 EFLAGS: 00000292 [ 689.053683][ C0] RAX: ffffc90004ce0001 RBX: 0000000000000001 RCX: ffffffff91769330 [ 689.061634][ C0] RDX: ffffc90004cdfe01 RSI: ffffc90004cdfea0 RDI: ffffc90004cdf378 [ 689.069590][ C0] RBP: ffffc90004cdfea0 R08: 0000000000000001 R09: 0000000000000007 [ 689.077541][ C0] R10: 0000000000000200 R11: 000000000000a9fc R12: 0000000000000008 [ 689.085490][ C0] R13: ffffc90004cd8000 R14: ffffc90004cdfed0 R15: ffffc90004cdf39c [ 689.093456][ C0] unwind_next_frame+0x14f0/0x1ea0 [ 689.098551][ C0] ? arch_do_signal_or_restart+0x91/0x770 [ 689.104259][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 689.110398][ C0] arch_stack_walk+0x94/0xf0 [ 689.114973][ C0] ? exit_to_user_mode_loop+0x86/0x4a0 [ 689.120421][ C0] ? unlink_anon_vmas+0x4c1/0x8e0 [ 689.125434][ C0] stack_trace_save+0x8e/0xc0 [ 689.130094][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 689.135449][ C0] ? __lock_acquire+0x4a5/0x2630 [ 689.140372][ C0] ? unlink_anon_vmas+0x5f3/0x8e0 [ 689.145378][ C0] ? free_pgtables+0x2e7/0xd80 [ 689.150121][ C0] kasan_save_stack+0x30/0x50 [ 689.154786][ C0] ? kasan_save_stack+0x30/0x50 [ 689.159621][ C0] ? kasan_save_track+0x14/0x30 [ 689.164457][ C0] ? kasan_save_free_info+0x3b/0x70 [ 689.169636][ C0] ? __kasan_slab_free+0x5f/0x80 [ 689.174571][ C0] ? kmem_cache_free+0x124/0x6a0 [ 689.179492][ C0] ? unlink_anon_vmas+0x4c1/0x8e0 [ 689.184499][ C0] ? free_pgtables+0x2e7/0xd80 [ 689.189243][ C0] ? exit_mmap+0x44c/0xa30 [ 689.193644][ C0] ? __mmput+0x12a/0x410 [ 689.197871][ C0] ? mmput+0x67/0x80 [ 689.201745][ C0] ? do_exit+0x819/0x2b60 [ 689.206059][ C0] ? do_group_exit+0xd5/0x2a0 [ 689.210723][ C0] ? get_signal+0x1ec7/0x21e0 [ 689.215401][ C0] ? arch_do_signal_or_restart+0x91/0x770 [ 689.221130][ C0] kasan_save_track+0x14/0x30 [ 689.225795][ C0] kasan_save_free_info+0x3b/0x70 [ 689.230809][ C0] __kasan_slab_free+0x5f/0x80 [ 689.235559][ C0] kmem_cache_free+0x124/0x6a0 [ 689.240309][ C0] unlink_anon_vmas+0x4c1/0x8e0 [ 689.245150][ C0] free_pgtables+0x2e7/0xd80 [ 689.249726][ C0] ? __pfx_free_pgtables+0x10/0x10 [ 689.254826][ C0] exit_mmap+0x44c/0xa30 [ 689.259050][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 689.263794][ C0] ? trace_contention_end+0x140/0x180 [ 689.269156][ C0] ? uprobe_clear_state+0x5f/0x360 [ 689.274263][ C0] ? uprobe_clear_state+0x5f/0x360 [ 689.279363][ C0] ? __lock_acquire+0x4a5/0x2630 [ 689.284294][ C0] ? arch_uprobe_clear_state+0x107/0x150 [ 689.289917][ C0] __mmput+0x12a/0x410 [ 689.293971][ C0] mmput+0x67/0x80 [ 689.297674][ C0] do_exit+0x819/0x2b60 [ 689.301817][ C0] ? __pfx_do_exit+0x10/0x10 [ 689.306402][ C0] ? do_raw_spin_lock+0x128/0x260 [ 689.311439][ C0] ? find_held_lock+0x2b/0x80 [ 689.316116][ C0] ? get_signal+0x7e0/0x21e0 [ 689.320709][ C0] do_group_exit+0xd5/0x2a0 [ 689.325210][ C0] get_signal+0x1ec7/0x21e0 [ 689.329711][ C0] ? __pfx_get_signal+0x10/0x10 [ 689.334561][ C0] ? do_futex+0x192/0x350 [ 689.338903][ C0] arch_do_signal_or_restart+0x91/0x770 [ 689.344442][ C0] ? find_held_lock+0x2b/0x80 [ 689.349103][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 689.355250][ C0] ? __pfx___x64_sys_futex+0x10/0x10 [ 689.360553][ C0] exit_to_user_mode_loop+0x86/0x4a0 [ 689.365848][ C0] do_syscall_64+0x668/0xf80 [ 689.370450][ C0] ? clear_bhb_loop+0x40/0x90 [ 689.375119][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.381005][ C0] RIP: 0033:0x7ff49219c799 [ 689.385409][ C0] RSP: 002b:00007ff4930310e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 689.393806][ C0] RAX: fffffffffffffe00 RBX: 00007ff492416188 RCX: 00007ff49219c799 [ 689.401764][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff492416188 [ 689.409720][ C0] RBP: 00007ff492416180 R08: 0000000000000000 R09: 0000000000000000 [ 689.417686][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 689.425650][ C0] R13: 00007ff492416218 R14: 00007ffe756b11f0 R15: 00007ffe756b12d8 [ 689.433632][ C0] [ 689.436658][ C0] rcu: rcu_preempt kthread starved for 5872 jiffies! g73845 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 689.447755][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 689.457710][ C0] rcu: RCU grace-period kthread stack dump: [ 689.463586][ C0] task:rcu_preempt state:R running task stack:27736 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 689.477058][ C0] Call Trace: [ 689.480326][ C0] [ 689.483245][ C0] __schedule+0xfee/0x6120 [ 689.487654][ C0] ? __lock_acquire+0x4a5/0x2630 [ 689.492609][ C0] ? __pfx___schedule+0x10/0x10 [ 689.497457][ C0] ? find_held_lock+0x2b/0x80 [ 689.502130][ C0] ? schedule+0x2bf/0x390 [ 689.506454][ C0] schedule+0xdd/0x390 [ 689.510524][ C0] schedule_timeout+0x127/0x280 [ 689.515373][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 689.520746][ C0] ? __pfx_process_timeout+0x10/0x10 [ 689.526042][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 689.531837][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 689.537287][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 689.542039][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 689.547313][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 689.552241][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 689.557425][ C0] ? rcu_is_watching+0x12/0xc0 [ 689.562181][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 689.567975][ C0] rcu_gp_kthread+0x179/0x230 [ 689.572645][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 689.577830][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 689.583626][ C0] ? __kthread_parkme+0x18c/0x230 [ 689.588639][ C0] ? kthread+0x13a/0x450 [ 689.592871][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 689.598060][ C0] kthread+0x370/0x450 [ 689.602118][ C0] ? __pfx_kthread+0x10/0x10 [ 689.606714][ C0] ret_from_fork+0x754/0xd80 [ 689.611314][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 689.616445][ C0] ? __switch_to+0x7b4/0x1120 [ 689.621120][ C0] ? __pfx_kthread+0x10/0x10 [ 689.625703][ C0] ret_from_fork_asm+0x1a/0x30 [ 689.630465][ C0] [ 689.633467][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 689.639781][ C0] Sending NMI from CPU 0 to CPUs 1: [ 689.644997][ C1] NMI backtrace for cpu 1 [ 689.645021][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 689.645054][ C1] Tainted: [L]=SOFTLOCKUP [ 689.645063][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 689.645076][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 689.645121][ C1] Code: 48 85 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 1e 1e 00 fb f4 fc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 689.645143][ C1] RSP: 0018:ffffc90000197df0 EFLAGS: 00000246 [ 689.645160][ C1] RAX: 00000000004658af RBX: ffff88801e6e8000 RCX: ffffffff8b8d6c75 [ 689.645175][ C1] RDX: 0000000000000000 RSI: ffffffff8de7ba84 RDI: ffffffff8c1af720 [ 689.645190][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: ffffed10170a6795 [ 689.645204][ C1] R10: ffff8880b8533cab R11: 0000000000000000 R12: ffffed1003cdd000 [ 689.645219][ C1] R13: 0000000000000001 R14: ffffffff90d9b310 R15: 0000000000000000 [ 689.645233][ C1] FS: 0000000000000000(0000) GS:ffff88812444c000(0000) knlGS:0000000000000000 [ 689.645255][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 689.645270][ C1] CR2: 0000555555c394e8 CR3: 000000002e21c000 CR4: 00000000003526f0 [ 689.645284][ C1] Call Trace: [ 689.645291][ C1] [ 689.645299][ C1] default_idle+0x9/0x10 [ 689.645327][ C1] default_idle_call+0x6c/0xb0 [ 689.645356][ C1] do_idle+0x35b/0x4b0 [ 689.645378][ C1] ? __pfx_do_idle+0x10/0x10 [ 689.645398][ C1] ? do_idle+0x2b8/0x4b0 [ 689.645419][ C1] cpu_startup_entry+0x4f/0x60 [ 689.645440][ C1] start_secondary+0x21d/0x2d0 [ 689.645469][ C1] ? __pfx_start_secondary+0x10/0x10 [ 689.645500][ C1] common_startup_64+0x13e/0x148 [ 689.645531][ C1] [ 689.648289][ C0] net_ratelimit: 7219 callbacks suppressed [ 689.648308][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 689.838355][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 689.851424][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 689.863736][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 689.876860][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 689.889151][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 689.902215][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 689.914512][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 689.928374][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 689.940683][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 694.656030][ C0] net_ratelimit: 6329 callbacks suppressed [ 694.656046][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 694.675009][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 694.687394][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 694.700723][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 694.713086][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 694.726311][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 694.738618][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 694.751798][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 694.764108][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b0:64:5d:eb:75, vlan:0) [ 694.777246][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)