last executing test programs: 12m11.694971938s ago: executing program 2 (id=1402): set_mempolicy$auto(0x1, &(0x7f0000000080)=0x3, 0x21) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x6, 0x40, 0x3, 0x18, 0xffffffffffffffff, 0x8000) keyctl$auto(0xe, 0x1, 0x1, 0x4, 0x6) keyctl$auto(0xe, 0x1, 0x1, 0x4, 0x6) mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x999, 0x0) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) r0 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) r1 = socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) sendmsg$auto_NETDEV_CMD_DEV_GET(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004091}, 0x800) close_range$auto(0x2, 0xa, 0x0) (fail_nth: 1) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) getsockopt$auto(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) 12m11.250594991s ago: executing program 2 (id=1404): socket$nl_generic(0x10, 0x3, 0x10) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) socket(0x2b, 0x80806, 0x80000) (async, rerun: 32) mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x10, 0x0, 0x9) io_uring_setup$auto(0x1, 0x0) connect$auto(0x3, 0x0, 0x55) ioctl$auto(0x3, 0x89e0, 0x38) mmap$auto(0x7fffffffffffff, 0x40000000002000a, 0x7ff, 0x100000010, 0x404, 0x10008000) (async) sysfs$auto(0x2, 0x1f, 0x0) (async) r2 = fsopen$auto(0x0, 0x81) (async, rerun: 64) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x50b880, 0x0) (rerun: 64) r3 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) read$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(r3, 0x0, 0x17) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000009c0), 0xffffffffffffffff) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3dd) mmap$auto(0x0, 0xa, 0xb7ed, 0xeb1, 0x0, 0x8002) close_range$auto(0x2, 0x8, 0x0) (async) ioctl$auto_KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/irq/24/smp_affinity_list\x00', 0x0, 0x0) (async, rerun: 64) ioctl$auto_TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=0x400041) (async, rerun: 64) sendmsg$auto_NL80211_CMD_SET_STATION(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4431b91a11530b352fa23bcc728b010000", @ANYRESHEX=r3, @ANYRESOCT=r2], 0x44}}, 0x40040) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0xa32d7c0808686fab, 0x0) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/iscsi_transport/iser/power/runtime_status\x00', 0x400, 0x0) write$auto(r4, &(0x7f00000001c0)=',\x00^\xa2\x02\x00\x05\x00\x00\x00\xd8l\x00\x00\x00\x00\x00\x00\xee\x0f_o\xc0\xee?\xce\xa3\x04\x95Hq\xf4\x00\x00\x00\x00\x00\x00\x006\xe0\xb1d)X6\x7f\xec\x94\xdal\xa1\xbb\x86\x9c\xc2\xef\x02\r9%\x06\xc5\'b%m_\x96A\"\xdd\xe40\xa7\xc3\x9ah\xf3B\xc2\xec\xf8\r\f[\xe5\x9dK\xe1\x99\x86\xfc\xac\x9f\x8a', 0x80000000000) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x24044010}, 0xc0) (async) getsockname$auto(0xffffffffffffffff, &(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x3, {{0x42, 0x100000}, 0x103}}, 0x0) 12m10.794471299s ago: executing program 2 (id=1407): set_mempolicy$auto(0x1, &(0x7f0000000080)=0x3, 0x21) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x6, 0x40, 0x3, 0x18, 0xffffffffffffffff, 0x8000) keyctl$auto(0xe, 0x1, 0x1, 0x4, 0x6) keyctl$auto(0xe, 0x1, 0x1, 0x4, 0x6) mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x999, 0x0) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) r0 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) r1 = socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) sendmsg$auto_NETDEV_CMD_DEV_GET(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x1f, 0x0, 0x20004091}, 0x800) close_range$auto(0x2, 0xa, 0x0) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r2 = socket(0x1a, 0x4, 0x0) getsockopt$auto(r2, 0x11, 0x67, 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x500, 0x0) 12m10.435524979s ago: executing program 2 (id=1408): r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/card1\x00', 0x109c01, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x106) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x2, 0x2000de, 0x15, 0x7, 0x28000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000000c0)=""/4096, 0x1000) open(0x0, 0x26142, 0x4b) r3 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f00000010c0), r1) sendmsg$auto_KSMBD_EVENT_LOGIN_REQUEST(r1, &(0x7f0000001180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x14, r3, 0x300, 0x70bd25, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x15}, 0x4004000) sendmsg$auto_NET_SHAPER_CMD_GET2(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fc", @ANYRES32, @ANYRES64, @ANYRESDEC, @ANYBLOB='\b\x00\b\x00', @ANYRES8], 0x2c}, 0x1, 0x0, 0x0, 0x10040001}, 0xc0) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x3f) ioctl$auto(r0, 0x92106411, 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r4, @ANYRES16, @ANYBLOB="0700000000000000df"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) 12m9.810710421s ago: executing program 2 (id=1410): r0 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000980)='/proc/kpagecgroup\x00', 0x0, 0x0) r1 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x101800, 0x0) readv$auto(r1, &(0x7f0000000500)={0x0, 0x8}, 0x5) read$auto_mon_fops_binary_mon_bin(r0, &(0x7f0000000a80)=""/4096, 0x1000) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x11, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x2df, 0x500, 0x81, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x7fffffffffffffff}}) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e) ioctl$sock_SIOCGIFINDEX(r2, 0x401c5820, 0x0) rename$auto(&(0x7f0000000480)='./file0\x00', 0x0) ioctl$auto_TIOCGSID(r0, 0x5429, &(0x7f0000000000)="2fce538e3951bf29c8babb64bf33e785d726937569bb2aae2fc1201d722209ee31081d9f5f6c0d7aabb00d012fd521d5e60a170833580e50c0f1b93394711ea2d82221924904c1a77c0ed4bf2ed716c3817df9bbb0de0f7c3f67e8d4946cddaf39f9472acde7bcd23020e5ba03b44ab40621db11d8f0735955e81db807b16764643ba215bafd2bc4bd5037a8c74c8d468257683d45e2655fa5b1278c3a573bf70fbd75eb5a88fb16bb68bb4e696a3118") bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x81, 0x402, 0x400, 0x37f, 0xffffffffffffffff, 0x400000000a, 0x80000003}, 0x6f4) 12m9.17291927s ago: executing program 2 (id=1419): r0 = prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000040), r0) msgctl$auto_IPC_SET(0xef7, 0x1, &(0x7f0000000100)={{0x10001, 0xee00, 0xee01, 0x1, 0x10000, 0xeee, 0x1}, &(0x7f0000000080), &(0x7f00000000c0)=0x80, 0x9, 0x3, 0x4, 0x8, 0x1, 0x8, 0x2, 0x8, @inferred, @inferred=0xffffffffffffffff}) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x2c8, r1, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@MAC802154_HWSIM_ATTR_RADIO_EDGES={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x134, 0x0, 0x1, [@typed={0x8, 0xa2, 0x0, 0x0, @fd=r0}]}]}, @MAC802154_HWSIM_ATTR_RADIO_EDGES={0x1b1, 0x3, 0x0, 0x1, [@typed={0x8, 0x37, 0x0, 0x0, @ipv4=@multicast1}, @generic="efec54c7da4feeb72122842d6084666eeff17ebdb254700b67ea22551540b8b8563ca8128bff61b1abebbe6b3f080eafd03451bca003b31263eb94e24a07fb6cc962413e32a7909483a25822aeadeff4800d358b85adf50e3826846f359032ff5ea7a0bb1f6952a2d85c8394be5a4e00f7f1db4296fe10df23d6c85caffe7d5aea769131cc843c7e8e5c313625567fb091a09382a5da22287926a21d21", @generic="6b1849c206245092bd9b01e9989ace171bc350406675a029c46eb2707e7de929399a63115d15e715d8c712efe7f153d0191576357c0bead93b3d0807992e98c44c626f7f3b020b420efedde0130a27c6419faca8f0125440c5289d234e5e8d4b3b407bd8cbde1fbdb12556b1d1a026f22c1c213efcf210b1f7d67d31baa6161cb0623806c77f9d176decf6d89e0de5d2c1866cf4", @nested={0x74, 0xd7, 0x0, 0x1, [@typed={0x14, 0x32, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic="bb13a869218a2a0166d07a2132387a3a756f636d275e812a2eb4cda34e3ccfd48dace0590b74a92e4848a1844b658ce3", @typed={0x8, 0x147, 0x0, 0x0, @fd=r0}, @typed={0x4, 0xa7}, @typed={0x14, 0x9, 0x0, 0x0, @str='MAC802154_HWSIM\x00'}, @nested={0xc, 0xef, 0x0, 0x1, [@typed={0x7, 0x0, 0x0, 0x0, @str='.$\x00'}]}]}]}, @MAC802154_HWSIM_ATTR_RADIO_ID={0x8, 0x1, 0x560a}, @MAC802154_HWSIM_ATTR_RADIO_EDGE={0xe8, 0x2, 0x0, 0x1, [@typed={0x8, 0x101, 0x0, 0x0, @uid=r2}, @typed={0x4, 0x4e}, @typed={0xc, 0x2e, 0x0, 0x0, @u64}, @typed={0xc4, 0xd3, 0x0, 0x0, @binary="4f4564dfb33a78057bafa27dc72d1095c3630a0b01608a430f5862ea37e91024b737edcae06ed51280d63f6e6c86fa8be5e2608c0d9105f733146d5057515580b74984815d2bc3836704c90688237258e998d4866a4e2c9110f7d7640dbe8e5e88bd74ef38307d6bf3f273502e52198ef1f61dcfe316f99117e10f3dd637c31e9791360aaf98897e22252d3c651fd1caa6f22867bd59534fb8e2574a7311726fc8b24020f83b66b56a4cd22fc41f818412f84687a91987ef01eab8cee45ceee5"}, @nested={0x8, 0xff, 0x0, 0x1, [@nested={0x4, 0x6}]}]}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x8c9540539e6ea1b1}, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000002c0), r0) sendmsg$auto_NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r3, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) clone$auto(0x7, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) r4 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEST_PAN_ID={0x6, 0x10, 0x401}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x24000040) sendmsg$auto_IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r4, 0x8, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_SRC_HW_ADDR={0xc, 0xc, 0x3}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x1}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c115}, 0x4000000) 12m7.748719074s ago: executing program 3 (id=1413): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0x5522, 0xf15) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto_VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x6, r0}) ioctl$auto(r0, 0x7e, r1) mkdir$auto(&(0x7f0000001a80)='#(//\x00', 0x353) ioctl$auto(r0, 0x8108551b, r0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) close_range$auto(0x2, 0x8, 0x0) 12m7.350839812s ago: executing program 3 (id=1414): set_mempolicy$auto(0x1, &(0x7f0000000080)=0x3, 0x21) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x6, 0x40, 0x3, 0x18, 0xffffffffffffffff, 0x8000) keyctl$auto(0xe, 0x1, 0x1, 0x4, 0x6) keyctl$auto(0xe, 0x1, 0x1, 0x4, 0x6) mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x999, 0x0) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) r0 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) r1 = socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) sendmsg$auto_NETDEV_CMD_DEV_GET(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004091}, 0x800) close_range$auto(0x2, 0xa, 0x0) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) getsockopt$auto(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) 12m6.928662497s ago: executing program 3 (id=1417): set_mempolicy$auto(0x1, &(0x7f0000000080)=0x3, 0x21) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x6, 0x40, 0x3, 0x18, 0xffffffffffffffff, 0x8000) keyctl$auto(0xe, 0x1, 0x1, 0x4, 0x6) keyctl$auto(0xe, 0x1, 0x1, 0x4, 0x6) mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x999, 0x0) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) r0 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) r1 = socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) sendmsg$auto_NETDEV_CMD_DEV_GET(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0xf5, 0x0, 0x20004091}, 0x800) close_range$auto(0x2, 0xa, 0x0) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r2 = socket(0x1a, 0x4, 0x0) getsockopt$auto(r2, 0x11, 0x67, 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x500, 0x0) 12m5.879070224s ago: executing program 3 (id=1421): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r0 = socketcall$auto(0x8000, 0x0) set_mempolicy$auto(0x3, &(0x7f0000000040)=0x7, 0x3) r1 = bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0x10001, 0x10, 0x2, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x955b, 0x8, 0x7, 0x5}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000200), 0xffffffffffffffff) r4 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy1/rate_ctrl_alg\x00', 0x0, 0x0) readv$auto(r4, &(0x7f0000000100)={&(0x7f0000000280), 0x1}, 0x4) sendmsg$auto_HWSIM_CMD_REPORT_PMSR(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000fddbdf250b0000000a000280019e695f99bb0e0000"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r2) ioctl$auto_BLKTRACESETUP2(r5, 0xc0481273, &(0x7f0000000280)={"b3efc16b86b24b821e90a2e1a74c38c88843237b4095eea24d4d39023c954a56", 0x5, 0x4000, 0xfffff7dc, 0x6, 0x3, 0xffffffffffffffff}) read$auto(r5, 0x0, 0x1ff) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000500)='/proc/sys/fs/xfs/stats_clear\x00', 0x1, 0x0) write$auto(r6, 0x0, 0x3) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x11, 0x0) r7 = fsopen$auto(0x0, 0x1) fsconfig$auto(r7, 0x8, 0x0, 0x0, 0x0) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) close_range$auto(r1, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) r8 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r0) 12m5.35079664s ago: executing program 3 (id=1425): r0 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000980)='/proc/kpagecgroup\x00', 0x0, 0x0) r1 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x101800, 0x0) readv$auto(r1, &(0x7f0000000500)={0x0, 0x8}, 0x5) read$auto_mon_fops_binary_mon_bin(r0, &(0x7f0000000a80)=""/4096, 0x1000) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x11, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x2df, 0x500, 0x81, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x7fffffffffffffff}}) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e) ioctl$sock_SIOCGIFINDEX(r2, 0x401c5820, 0x0) rename$auto(&(0x7f0000000480)='./file0\x00', 0x0) ioctl$auto_TIOCGSID(r0, 0x5429, &(0x7f0000000000)="2fce538e3951bf29c8babb64bf33e785d726937569bb2aae2fc1201d722209ee31081d9f5f6c0d7aabb00d012fd521d5e60a170833580e50c0f1b93394711ea2d82221924904c1a77c0ed4bf2ed716c3817df9bbb0de0f7c3f67e8d4946cddaf39f9472acde7bcd23020e5ba03b44ab40621db11d8f0735955e81db807b16764643ba215bafd2bc4bd5037a8c74c8d468257683d45e2655fa5b1278c3a573bf70fbd75eb5a88fb16bb68bb4e696a3118") bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x81, 0x402, 0x400, 0x37f, 0xffffffffffffffff, 0x400000000a, 0x80000003}, 0x6f4) 12m5.159461936s ago: executing program 3 (id=1426): r0 = bpf$auto(0x1, &(0x7f0000000100)=@bpf_attr_4={0x800000000012, 0xffffffffffffffff, 0x80000001}, 0x350) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, r1, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x2, 0x1, 0x106) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) r3 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x30, r3, 0x1, 0x70bd29, 0x25dfdc02, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x18, 0x1, 0x0, 0x1, [@nested={0x14, 0x10, 0x0, 0x1, [@typed={0x8, 0x8, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x8, 0x0, 0x0, @uid}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_STOP(r6, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x110, r5, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0xfffffff7}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x80}, @NL80211_ATTR_FILS_NONCES={0xd5, 0xf3, "156775c0ce53993f5c414cabcf0e03f4f93417b3a1befc48036eb51823fc9107b536122bb6835c065140d53fe2dc023ddaf1bc5d709698f81eec9be9b3a0d50fc43cd71de757f287bac32d0189660696ba3f3ed9640a11ed0ecac09f27298a4d40fa69efddb188f79546902f226ca54c211c180f0b64c801f0608986714ad681ab7d229f70ef820d8e51ecfe17e5780d237a6e9d1080c44157eb9d0ba9572e170d3276286d00e59a47619f4c94f028010e82531623a6987ac6a0099ce5198ede14137ba9353b268223ef5372dc6ddb36a3"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x7}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x4}]}, 0x110}, 0x1, 0x0, 0x0, 0x4001}, 0x800) sendmsg$auto_NL80211_CMD_SET_WIPHY(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000006700)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="13002ebd70fad0c4819a96185f0008000300", @ANYRES32=r7, @ANYBLOB='\b\x00&'], 0x24}, 0x1, 0x0, 0x0, 0x4c0d4}, 0x20040894) shmctl$auto(0xffffff10, 0x3, &(0x7f0000000440)={{0x4, 0xee01, 0xee00, 0x0, 0x5d, 0x4, 0x8}, 0x4, 0x2, 0x4, 0x3ff, @inferred=0xffffffffffffffff, @inferred, 0x10, 0x0, &(0x7f0000000200)="e8bab54a5ae797d7b134125fa0faee31abcf5b6f441bfe939110146f7537398fd05c673a18582a2a8f587c98658fb59e04ce9512d761769987ce7a94e2637ddb58bc0f88431b60e69a9c39da30a3ac954ebda86b6cc24e481d6c6a7516d8573c94405d99b5e10fae13aef2", &(0x7f0000000340)="b6d2078561bac5e51e67d4e75ef1e967b40be85d4fb5f19fe1ac4ccffddc04ceb6f5851946367b861a41658af4394494b844e7d27a386b98d41197d8b0cc98e57d6afdf0736f541009fffc4858b2d5555fc6c01943120c475c576c5b6b744a20ed9642c7fc85b59660692dd0a270209d186b96773684131358935ef617a2dd8cb3b396cb1b6fe5b5cfdea5a2aa39d541"}) sendmsg$auto_NL80211_CMD_SET_REG(r0, &(0x7f00000009c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000980)={&(0x7f00000004c0)={0x4b4, r5, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_PMKID={0xa6, 0x55, "606e9984fc9550e04be8ac41ba36b04a40c1efab16a3c1024475f31d145eb35cc04f48677724d594bf59a47f92f7fc28c95b02284ec653d1185a406ff393eac286c26668bb1adc00ea9c97c16f61dd1c80ee03f57a7fefb7d0dc02debb607ef0fef4ff76677a39749defe046618573bacbbeddeeb5acbb3dd7d48750776de4a82c31af86ab1dc9754260ead5111251d1c197e5716d3afc7f02f04628b654b68325aa"}, @NL80211_ATTR_TX_RATES={0x380, 0x5a, 0x0, 0x1, [@nested={0x37a, 0x3c, 0x0, 0x1, [@generic="a52508c40c804f8db4465918c85ccd0e6be95ecafd1602d4bcf953b6e55e74b3f532b14b36679bb74f01a2aa05c44f8d79afdf03b042eb79287fb96ae127b5fd2d1dc6f23eca661625adbcdc41fab54110343a375ad7bfe1a277e33c81b287562b785a46365de193eeaf3851b32aa3b5f7eafbee2f1194e11801ae5c1fa9d16c9b07400656eb1478921deca87ef26a1e6d6c0ea6aafc7af61144d5b10ae3b24d22a3f3f4e0699c9cb59faa0cf61dc8428c3ce446a9ab26c6e6006df72f324e3403a47f9c2d1db8d3ef81525487002170941f9cafddf8f175b3036516f7d2791a8baa599b23b16085df6d271f7233d8", @generic="1c39ac27b47ed74b98744f0676d6bbd0c26c67770f466063ae5b10e4f6a9f6338ca1437b2baca2179d773c193fa1fe627b7e56a1a6108bd798108fe088767a09ee513090206e55460c0cb69645c05b0228f8723132beb2ee96712381fc215ab3c7f350d3678bcb5337bdb8fed516af36bf9c619b74e18b2a658e614bea5e0f1d889f302ef9726f3316821c09d88f0796e0670fa0835ecc0c19d2250ca2cd87b3ec1c6ac9bd8b8d81cc5bcb77edd38915f116e2a969797f18e7361fa468aee372833edd8daa56d266e9eacde5c9dfe64d3f28bb9cc83a249a5d2e", @generic="c658d8393ff6d19d4acaecaa1bb089287036e7f1b5091d67e5089ec6ebd85e3b343568aa4337ba73cfe7bd89a70d752952881191ed15ae0670df563b96694e7cde50f444605c48be70cbd41e7a19eed2ab56b2716376cacba21986c0caa8eca0ebbfc7d8bddf4076b722dca859a87551f5b17689f04176b9d6c20cc932b6c1ac3a9227efab2c3b9a7bb28ed0ff538570a1466278d3739f611cd1", @generic="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", @nested={0x4, 0x122}, @nested={0x4, 0xc1}, @typed={0x8, 0x6a, 0x0, 0x0, @uid=r8}, @nested={0x4, 0x57}]}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}, @NL80211_ATTR_MLO_LINK_ID={0x5, 0x139, 0xb7}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @NL80211_ATTR_AUTH_DATA={0x53, 0x9c, "7f81403dcf625642b26d7e4c51acc6984b74384c3a938c4bc99d2ec546f4d83989dadc585aef813b77266c3e3a00c2352f65f1cb0a6d0c0a7e3fdd2eb7e0486d6274dc9c53015a0ad82135c8bba1e9"}]}, 0x4b4}, 0x1, 0x0, 0x0, 0x20004010}, 0x4) r9 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r9, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) fanotify_init$auto(0x65, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) 12m4.285968466s ago: executing program 1 (id=1429): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) connect$auto(0x3, 0x0, 0x54) (async) connect$auto(0x3, 0x0, 0x54) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC0D0p\x00', 0x212005, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_START(r1, 0x4142, 0x0) write$auto(0x3, 0x0, 0xfffffdef) select$auto(0x9, 0x0, 0x0, 0x0, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) (async) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) 12m3.28431888s ago: executing program 1 (id=1433): sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00211459a600fbdbdf250200000008000300000000001b0004"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) r0 = prctl$auto_PR_SET_MM_ARG_END(0xfffffffc, 0x9, 0xffffffffffffffff, 0x369e, 0x7d8) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001800), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_RECONFIGURE(r2, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001840)={0x14, r3, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x40000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001180)={'tunl0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(r1, &(0x7f0000001240)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)=ANY=[@ANYBLOB="020026bd7000fddbdf250300000008000300bad5000008000e7900000000000000", @ANYRES32=r4, @ANYBLOB], 0x30}}, 0x4000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKINFO_GET(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000300)={0x14, r11, 0xf25, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4044054) socket(0x2, 0x1, 0x0) listen$auto(0x3, 0x81) ioctl$auto(0x3, 0x894b, 0x38) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r6, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x8c, r11, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x130cc7d0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x51}, 0x20004000) sendmsg$auto_NL80211_CMD_SET_CQM(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd7000fddbdf254300000008000300", @ANYRES32=r9], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40800) sendmsg$auto_ILA_CMD_ADD(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@ILA_ATTR_CSUM_MODE={0x5, 0x7, 0x9}, @ILA_ATTR_LOCATOR_MATCH={0xc, 0x3, 0x29}, @ILA_ATTR_IFINDEX={0x8, 0x4, r4}, @ILA_ATTR_IFINDEX={0x8, 0x4, r5}, @ILA_ATTR_IFINDEX={0x8, 0x4, r9}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000804}, 0x40) futex_requeue$auto(&(0x7f0000000040)={0xb, 0x6, 0x2, 0x2000000}, 0x0, 0xf, 0x9) mmap$auto(0x0, 0x40000c, 0x45bb, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) bpf$auto(0x5, 0x0, 0x7) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='!\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x44}, 0x40090) r12 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r12, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0) 12m2.843454171s ago: executing program 1 (id=1434): r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/card1\x00', 0x109c01, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x106) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x2, 0x2000de, 0x15, 0x7, 0x28000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000000c0)=""/4096, 0x1000) open(0x0, 0x26142, 0x4b) r3 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f00000010c0), r1) sendmsg$auto_KSMBD_EVENT_LOGIN_REQUEST(r1, &(0x7f0000001180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x14, r3, 0x300, 0x70bd25, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x15}, 0x4004000) sendmsg$auto_NET_SHAPER_CMD_GET2(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fc", @ANYRES32, @ANYRES64, @ANYRESDEC, @ANYBLOB='\b\x00\b\x00', @ANYRES8], 0x2c}, 0x1, 0x0, 0x0, 0x10040001}, 0xc0) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x3f) ioctl$auto(r0, 0x92106411, 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r4, @ANYRES16, @ANYBLOB="0700000000000000df"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) 12m2.448336143s ago: executing program 1 (id=1435): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x400) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) ioctl$auto_FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000080)) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x81, 0x2, 0x400, 0x37f, 0xffffffffffffffff, 0x400000000a, 0x3}, 0x6f4) 12m2.285583937s ago: executing program 1 (id=1436): r0 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000980)='/proc/kpagecgroup\x00', 0x0, 0x0) r1 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x101800, 0x0) readv$auto(r1, &(0x7f0000000500)={0x0, 0x8}, 0x5) read$auto_mon_fops_binary_mon_bin(r0, &(0x7f0000000a80)=""/4096, 0x1000) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x11, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x2df, 0x500, 0x81, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x7fffffffffffffff}}) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e) ioctl$sock_SIOCGIFINDEX(r2, 0x401c5820, 0x0) rename$auto(&(0x7f0000000480)='./file0\x00', 0x0) ioctl$auto_TIOCGSID(r0, 0x5429, &(0x7f0000000000)="2fce538e3951bf29c8babb64bf33e785d726937569bb2aae2fc1201d722209ee31081d9f5f6c0d7aabb00d012fd521d5e60a170833580e50c0f1b93394711ea2d82221924904c1a77c0ed4bf2ed716c3817df9bbb0de0f7c3f67e8d4946cddaf39f9472acde7bcd23020e5ba03b44ab40621db11d8f0735955e81db807b16764643ba215bafd2bc4bd5037a8c74c8d468257683d45e2655fa5b1278c3a573bf70fbd75eb5a88fb16bb68bb4e696a3118") bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x81, 0x402, 0x400, 0x37f, 0xffffffffffffffff, 0x400000000a, 0x80000003}, 0x6f4) 12m2.051674324s ago: executing program 1 (id=1438): mmap$auto(0x0, 0x8, 0xdf, 0x9b74, 0x2, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003140), r0) r1 = open(&(0x7f0000000800)='./file0\x00', 0xa2240, 0x154) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) r2 = io_uring_setup$auto(0x6, 0x0) r3 = openat$auto_proc_auxv_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/auxv\x00', 0x80, 0x0) read$auto_proc_auxv_operations_base(r3, 0x0, 0x0) close_range$auto(0x2, 0xa, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xffffffffffffffff, 0x8000) r4 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000380), 0x900, 0x0) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r5, &(0x7f0000000280)='7\x00\xcd\x96BG\x8eY@`\b\x1c\xc7ke\xad\x1b\xc6\xa4\xd9\xc9@lcmef\x99\x01\xba\xe0u\xe5\x9c\xb0L\xda\xe2\xd88\x85\xff\xb73\xd8I\xc9\xc8)-c\xa3a\xb5G\xa2/\x06\xeae\xcc\xad\fuU\xc3\xe0/\x16\xea\x9aI\xfc\'e\x96\xa8\x90\x89i|\x9b\xa1\xf3\x83\xe6fh)F\x88\x946OO\xc3\xf4H\xd6IAU\xb1>$Lg$\xd9\x84\xbb\xd9(i\xa5t\xda\x127\xe0i5\x81\x1c\x97', 0x85) syz_genetlink_get_family_id$auto_nl80211(0x0, r4) swapon$auto(0x0, 0x5) r6 = fanotify_init$auto(0x65, 0x2) r7 = pipe$auto(0x0) sendmsg$auto_GTP_CMD_ECHOREQ(r6, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000b14ff7b2b1d244ee02c3ba88f766a84189a3b94e2433fdef374adeec6fbb5cb22f30818d876cfba5c405b6baf6cadfd6b7b854bacab0808ad984f385f06cf96c4be84554583c6d05b5c3e084552856b9964ae568a3f5a7ec76df93e8eb7f64c500000000000000000000000000000000001b00"/133, @ANYRES8=0x0, @ANYRES64=0x0], 0x58}}, 0x8840) dup2$auto(r2, r7) write$auto(0xffffffffffffffff, 0x0, 0xc) r8 = socketpair$auto(0x1, 0x400002, 0x8000000000000000, 0x0) splice$auto(0x4, 0x0, r8, 0x0, 0x1000, 0xf) fcntl$auto(r1, 0x400, 0x1) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) open(&(0x7f0000000000)='./file0\x00', 0x86242, 0xe1d2b27bdc14aabc) close_range$auto(0x2, 0x8000, 0x0) fsync$auto(0xffffffffffffffff) 11m54.089394116s ago: executing program 32 (id=1419): r0 = prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000040), r0) msgctl$auto_IPC_SET(0xef7, 0x1, &(0x7f0000000100)={{0x10001, 0xee00, 0xee01, 0x1, 0x10000, 0xeee, 0x1}, &(0x7f0000000080), &(0x7f00000000c0)=0x80, 0x9, 0x3, 0x4, 0x8, 0x1, 0x8, 0x2, 0x8, @inferred, @inferred=0xffffffffffffffff}) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x2c8, r1, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@MAC802154_HWSIM_ATTR_RADIO_EDGES={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x134, 0x0, 0x1, [@typed={0x8, 0xa2, 0x0, 0x0, @fd=r0}]}]}, @MAC802154_HWSIM_ATTR_RADIO_EDGES={0x1b1, 0x3, 0x0, 0x1, [@typed={0x8, 0x37, 0x0, 0x0, @ipv4=@multicast1}, @generic="efec54c7da4feeb72122842d6084666eeff17ebdb254700b67ea22551540b8b8563ca8128bff61b1abebbe6b3f080eafd03451bca003b31263eb94e24a07fb6cc962413e32a7909483a25822aeadeff4800d358b85adf50e3826846f359032ff5ea7a0bb1f6952a2d85c8394be5a4e00f7f1db4296fe10df23d6c85caffe7d5aea769131cc843c7e8e5c313625567fb091a09382a5da22287926a21d21", @generic="6b1849c206245092bd9b01e9989ace171bc350406675a029c46eb2707e7de929399a63115d15e715d8c712efe7f153d0191576357c0bead93b3d0807992e98c44c626f7f3b020b420efedde0130a27c6419faca8f0125440c5289d234e5e8d4b3b407bd8cbde1fbdb12556b1d1a026f22c1c213efcf210b1f7d67d31baa6161cb0623806c77f9d176decf6d89e0de5d2c1866cf4", @nested={0x74, 0xd7, 0x0, 0x1, [@typed={0x14, 0x32, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic="bb13a869218a2a0166d07a2132387a3a756f636d275e812a2eb4cda34e3ccfd48dace0590b74a92e4848a1844b658ce3", @typed={0x8, 0x147, 0x0, 0x0, @fd=r0}, @typed={0x4, 0xa7}, @typed={0x14, 0x9, 0x0, 0x0, @str='MAC802154_HWSIM\x00'}, @nested={0xc, 0xef, 0x0, 0x1, [@typed={0x7, 0x0, 0x0, 0x0, @str='.$\x00'}]}]}]}, @MAC802154_HWSIM_ATTR_RADIO_ID={0x8, 0x1, 0x560a}, @MAC802154_HWSIM_ATTR_RADIO_EDGE={0xe8, 0x2, 0x0, 0x1, [@typed={0x8, 0x101, 0x0, 0x0, @uid=r2}, @typed={0x4, 0x4e}, @typed={0xc, 0x2e, 0x0, 0x0, @u64}, @typed={0xc4, 0xd3, 0x0, 0x0, @binary="4f4564dfb33a78057bafa27dc72d1095c3630a0b01608a430f5862ea37e91024b737edcae06ed51280d63f6e6c86fa8be5e2608c0d9105f733146d5057515580b74984815d2bc3836704c90688237258e998d4866a4e2c9110f7d7640dbe8e5e88bd74ef38307d6bf3f273502e52198ef1f61dcfe316f99117e10f3dd637c31e9791360aaf98897e22252d3c651fd1caa6f22867bd59534fb8e2574a7311726fc8b24020f83b66b56a4cd22fc41f818412f84687a91987ef01eab8cee45ceee5"}, @nested={0x8, 0xff, 0x0, 0x1, [@nested={0x4, 0x6}]}]}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x8c9540539e6ea1b1}, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000002c0), r0) sendmsg$auto_NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r3, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) clone$auto(0x7, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) r4 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEST_PAN_ID={0x6, 0x10, 0x401}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x24000040) sendmsg$auto_IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r4, 0x8, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_SRC_HW_ADDR={0xc, 0xc, 0x3}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x1}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c115}, 0x4000000) 11m49.850938676s ago: executing program 33 (id=1426): r0 = bpf$auto(0x1, &(0x7f0000000100)=@bpf_attr_4={0x800000000012, 0xffffffffffffffff, 0x80000001}, 0x350) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, r1, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x2, 0x1, 0x106) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) r3 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x30, r3, 0x1, 0x70bd29, 0x25dfdc02, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x18, 0x1, 0x0, 0x1, [@nested={0x14, 0x10, 0x0, 0x1, [@typed={0x8, 0x8, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x8, 0x0, 0x0, @uid}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_STOP(r6, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x110, r5, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0xfffffff7}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x80}, @NL80211_ATTR_FILS_NONCES={0xd5, 0xf3, "156775c0ce53993f5c414cabcf0e03f4f93417b3a1befc48036eb51823fc9107b536122bb6835c065140d53fe2dc023ddaf1bc5d709698f81eec9be9b3a0d50fc43cd71de757f287bac32d0189660696ba3f3ed9640a11ed0ecac09f27298a4d40fa69efddb188f79546902f226ca54c211c180f0b64c801f0608986714ad681ab7d229f70ef820d8e51ecfe17e5780d237a6e9d1080c44157eb9d0ba9572e170d3276286d00e59a47619f4c94f028010e82531623a6987ac6a0099ce5198ede14137ba9353b268223ef5372dc6ddb36a3"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x7}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x4}]}, 0x110}, 0x1, 0x0, 0x0, 0x4001}, 0x800) sendmsg$auto_NL80211_CMD_SET_WIPHY(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000006700)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="13002ebd70fad0c4819a96185f0008000300", @ANYRES32=r7, @ANYBLOB='\b\x00&'], 0x24}, 0x1, 0x0, 0x0, 0x4c0d4}, 0x20040894) shmctl$auto(0xffffff10, 0x3, &(0x7f0000000440)={{0x4, 0xee01, 0xee00, 0x0, 0x5d, 0x4, 0x8}, 0x4, 0x2, 0x4, 0x3ff, @inferred=0xffffffffffffffff, @inferred, 0x10, 0x0, &(0x7f0000000200)="e8bab54a5ae797d7b134125fa0faee31abcf5b6f441bfe939110146f7537398fd05c673a18582a2a8f587c98658fb59e04ce9512d761769987ce7a94e2637ddb58bc0f88431b60e69a9c39da30a3ac954ebda86b6cc24e481d6c6a7516d8573c94405d99b5e10fae13aef2", &(0x7f0000000340)="b6d2078561bac5e51e67d4e75ef1e967b40be85d4fb5f19fe1ac4ccffddc04ceb6f5851946367b861a41658af4394494b844e7d27a386b98d41197d8b0cc98e57d6afdf0736f541009fffc4858b2d5555fc6c01943120c475c576c5b6b744a20ed9642c7fc85b59660692dd0a270209d186b96773684131358935ef617a2dd8cb3b396cb1b6fe5b5cfdea5a2aa39d541"}) sendmsg$auto_NL80211_CMD_SET_REG(r0, &(0x7f00000009c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000980)={&(0x7f00000004c0)={0x4b4, r5, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_PMKID={0xa6, 0x55, "606e9984fc9550e04be8ac41ba36b04a40c1efab16a3c1024475f31d145eb35cc04f48677724d594bf59a47f92f7fc28c95b02284ec653d1185a406ff393eac286c26668bb1adc00ea9c97c16f61dd1c80ee03f57a7fefb7d0dc02debb607ef0fef4ff76677a39749defe046618573bacbbeddeeb5acbb3dd7d48750776de4a82c31af86ab1dc9754260ead5111251d1c197e5716d3afc7f02f04628b654b68325aa"}, @NL80211_ATTR_TX_RATES={0x380, 0x5a, 0x0, 0x1, [@nested={0x37a, 0x3c, 0x0, 0x1, [@generic="a52508c40c804f8db4465918c85ccd0e6be95ecafd1602d4bcf953b6e55e74b3f532b14b36679bb74f01a2aa05c44f8d79afdf03b042eb79287fb96ae127b5fd2d1dc6f23eca661625adbcdc41fab54110343a375ad7bfe1a277e33c81b287562b785a46365de193eeaf3851b32aa3b5f7eafbee2f1194e11801ae5c1fa9d16c9b07400656eb1478921deca87ef26a1e6d6c0ea6aafc7af61144d5b10ae3b24d22a3f3f4e0699c9cb59faa0cf61dc8428c3ce446a9ab26c6e6006df72f324e3403a47f9c2d1db8d3ef81525487002170941f9cafddf8f175b3036516f7d2791a8baa599b23b16085df6d271f7233d8", @generic="1c39ac27b47ed74b98744f0676d6bbd0c26c67770f466063ae5b10e4f6a9f6338ca1437b2baca2179d773c193fa1fe627b7e56a1a6108bd798108fe088767a09ee513090206e55460c0cb69645c05b0228f8723132beb2ee96712381fc215ab3c7f350d3678bcb5337bdb8fed516af36bf9c619b74e18b2a658e614bea5e0f1d889f302ef9726f3316821c09d88f0796e0670fa0835ecc0c19d2250ca2cd87b3ec1c6ac9bd8b8d81cc5bcb77edd38915f116e2a969797f18e7361fa468aee372833edd8daa56d266e9eacde5c9dfe64d3f28bb9cc83a249a5d2e", @generic="c658d8393ff6d19d4acaecaa1bb089287036e7f1b5091d67e5089ec6ebd85e3b343568aa4337ba73cfe7bd89a70d752952881191ed15ae0670df563b96694e7cde50f444605c48be70cbd41e7a19eed2ab56b2716376cacba21986c0caa8eca0ebbfc7d8bddf4076b722dca859a87551f5b17689f04176b9d6c20cc932b6c1ac3a9227efab2c3b9a7bb28ed0ff538570a1466278d3739f611cd1", @generic="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", @nested={0x4, 0x122}, @nested={0x4, 0xc1}, @typed={0x8, 0x6a, 0x0, 0x0, @uid=r8}, @nested={0x4, 0x57}]}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}, @NL80211_ATTR_MLO_LINK_ID={0x5, 0x139, 0xb7}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @NL80211_ATTR_AUTH_DATA={0x53, 0x9c, "7f81403dcf625642b26d7e4c51acc6984b74384c3a938c4bc99d2ec546f4d83989dadc585aef813b77266c3e3a00c2352f65f1cb0a6d0c0a7e3fdd2eb7e0486d6274dc9c53015a0ad82135c8bba1e9"}]}, 0x4b4}, 0x1, 0x0, 0x0, 0x20004010}, 0x4) r9 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r9, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) fanotify_init$auto(0x65, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) 11m46.941775475s ago: executing program 34 (id=1438): mmap$auto(0x0, 0x8, 0xdf, 0x9b74, 0x2, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003140), r0) r1 = open(&(0x7f0000000800)='./file0\x00', 0xa2240, 0x154) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) r2 = io_uring_setup$auto(0x6, 0x0) r3 = openat$auto_proc_auxv_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/auxv\x00', 0x80, 0x0) read$auto_proc_auxv_operations_base(r3, 0x0, 0x0) close_range$auto(0x2, 0xa, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xffffffffffffffff, 0x8000) r4 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000380), 0x900, 0x0) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r5, &(0x7f0000000280)='7\x00\xcd\x96BG\x8eY@`\b\x1c\xc7ke\xad\x1b\xc6\xa4\xd9\xc9@lcmef\x99\x01\xba\xe0u\xe5\x9c\xb0L\xda\xe2\xd88\x85\xff\xb73\xd8I\xc9\xc8)-c\xa3a\xb5G\xa2/\x06\xeae\xcc\xad\fuU\xc3\xe0/\x16\xea\x9aI\xfc\'e\x96\xa8\x90\x89i|\x9b\xa1\xf3\x83\xe6fh)F\x88\x946OO\xc3\xf4H\xd6IAU\xb1>$Lg$\xd9\x84\xbb\xd9(i\xa5t\xda\x127\xe0i5\x81\x1c\x97', 0x85) syz_genetlink_get_family_id$auto_nl80211(0x0, r4) swapon$auto(0x0, 0x5) r6 = fanotify_init$auto(0x65, 0x2) r7 = pipe$auto(0x0) sendmsg$auto_GTP_CMD_ECHOREQ(r6, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000b14ff7b2b1d244ee02c3ba88f766a84189a3b94e2433fdef374adeec6fbb5cb22f30818d876cfba5c405b6baf6cadfd6b7b854bacab0808ad984f385f06cf96c4be84554583c6d05b5c3e084552856b9964ae568a3f5a7ec76df93e8eb7f64c500000000000000000000000000000000001b00"/133, @ANYRES8=0x0, @ANYRES64=0x0], 0x58}}, 0x8840) dup2$auto(r2, r7) write$auto(0xffffffffffffffff, 0x0, 0xc) r8 = socketpair$auto(0x1, 0x400002, 0x8000000000000000, 0x0) splice$auto(0x4, 0x0, r8, 0x0, 0x1000, 0xf) fcntl$auto(r1, 0x400, 0x1) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) open(&(0x7f0000000000)='./file0\x00', 0x86242, 0xe1d2b27bdc14aabc) close_range$auto(0x2, 0x8000, 0x0) fsync$auto(0xffffffffffffffff) 2m15.87219298s ago: executing program 5 (id=3706): bpf$auto(0x1, &(0x7f0000000100)=@bpf_attr_4={0x800000000012, 0xffffffffffffffff, 0x80000001}, 0x350) socket(0x1, 0xe, 0x2) mmap$auto(0x0, 0xa00006, 0x3, 0x40eb1, r0, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x1, 0x106) socket(0x11, 0x80003, 0x300) ioctl$auto(0x3, 0x80108907, 0x38) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000980), 0xffffffffffffffff) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) userfaultfd$auto(0x1) ioctl$auto(0x3, 0xc018aa3f, 0xf0b) fanotify_init$auto(0x65, 0x2) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/pcmC1D1c\x00', 0x6042, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) 2m15.410153038s ago: executing program 4 (id=3708): r0 = open(&(0x7f0000000800)='./file1\x00', 0x22240, 0x154) close_range$auto(0xffffffffffffffff, 0x8, 0x2) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x10cc3, 0x0) ioctl$auto_FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv6/conf/ipvlan1/router_solicitation_interval\x00', 0x82, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r1, 0x0, 0x0) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x9, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x40900, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x8140, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth1\x00'}) bpf$auto(0x0, 0x0, 0x92) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(0x0, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000300)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00') 2m14.66703135s ago: executing program 5 (id=3709): r0 = open(&(0x7f0000000800)='./file1\x00', 0x22240, 0x154) close_range$auto(0xffffffffffffffff, 0x8, 0x2) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x10cc3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv6/conf/ipvlan1/router_solicitation_interval\x00', 0x82, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r1, 0x0, 0x0) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x9, 0x0, 0x4000000000007, 0xa505}, 0x7fe}, 0x4, 0x4008) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x40900, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(r0, r2, 0x80000000) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) r5 = ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0x400000ff, 0x400, 0x9}]}) fstat$auto(r5, &(0x7f0000000200)={0x5, 0x7, 0x9, 0x8000, 0xee01, 0xee00, 0x0, 0xd, 0x3ff, 0x7dd7, 0x9, 0x86ce, 0xba, 0x33, 0x80000000, 0x8af6, 0x9}) sendmsg$auto_ETHTOOL_MSG_FEC_SET(r0, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000001a80)=ANY=[@ANYBLOB="24110000", @ANYRES16=0x0, @ANYBLOB="02002cbd7000ffdbdf255e44e40600004ee4e11e0000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="0400e1008e7eec49745c565030363a648c83fc30ec8d7ac6d9a9c2481d45d42665af1fcd6bcae4dad29f4520b8036412fe11a6081226062dfdd28bb118d59887a0652c2e45d293b5227d11f71a5c590dd021ce2d3233d0a30bcc4847fa8d784e40d2962c44d97704e8c72a39197beca2eab4537a1e5a554a2396cce5d9eff81f7c8db57144a2e47017e078558c73bd274122df9c210d4f2e97ff9fdcfc94b01e21cf8b89f71dc97108fa8ce6e845c925edd7b0945d915efb33e9e551495219be0a6a5b919396f7e584fdb0184e0e9d7a68562623448331e7e96ff7a4360de3790200af558efac2e2ac44839f4f93646d970c968087a50000"], 0x1124}, 0x1, 0x0, 0x0, 0x8000}, 0x4004000) r7 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x8140, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00'}) bpf$auto(0x0, 0x0, 0x92) prctl$auto(0x3, 0x2, 0x0, 0x1, 0x0) write$auto(r7, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) open(&(0x7f0000000140)='./file1\x00', 0x2080, 0xa8) execve$auto(0x0, 0x0, 0x0) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000300)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00') 2m14.343108659s ago: executing program 4 (id=3710): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/bdi/1:10/max_ratio\x00', 0x2002, 0x0) sendfile$auto(r0, r0, 0x0, 0x3000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_CREATE_VM(r1, 0xae80, 0x0) ioctl$auto(0x3, 0xae41, 0xffffffffffffffff) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptywf\x00', 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x3, 0x9) unshare$auto(0x40000080) mmap$auto(0xfffffffffffffffe, 0x580f, 0x112f4a03, 0x8000000008011, 0x3, 0x0) fadvise64$auto(r1, 0x0, 0xffffffff80000001, 0x8) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xe0002, 0x0) futex_waitv$auto(&(0x7f0000000000)={0xb, 0x7ffffffff000, 0x6}, 0x1, 0x0, 0x0, 0x623d) close_range$auto(0x2, 0x8, 0x0) msgget$auto(0x0, 0x5) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, 0x0, 0x20602, 0x0) msgsnd$auto(0x0, &(0x7f0000000040)={0x5}, 0x1000, 0x4) msgctl$auto(0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8842, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x80000, 0x82) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) 2m14.319810484s ago: executing program 0 (id=3711): write$auto(0xffffffffffffffff, &(0x7f0000000040)='//\xf2\x00', 0x80000000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x5, 0x0, 0x1, 0x4d) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x400000003) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x20, r3, 0x1, 0x70bd31, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x1}]}, @ETHTOOL_A_FEATURES_HEADER={0x4}]}, 0x20}}, 0x24048004) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x902, 0x0) ioctl$auto(0x3, 0x80004508, 0x10000000000402) mmap$auto(0x0, 0x6, 0x10000000000df, 0xeb2, 0x401, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x3000000, 0x0, 0x1, 0x0, 0x10000000000000, 0x2}, 0x895}, 0x3, 0x0) bpf$auto(0x6, &(0x7f0000000000)=@bpf_attr_3={0x1, 0x9067, 0x40000080018c, 0xf3, 0x0, 0x8, 0x4, 0x57b8, 0xf, "63ac0600000033ebc15774e816ef77cf", 0x0, 0x100543, 0x4, 0x207, 0x3, 0x1009, 0x4, 0x2, 0xe, 0x5, @attach_btf_obj_fd, 0x166, 0x7fb, 0x6, 0xa, 0x48000000}, 0x10) mmap$auto(0x0, 0x20009, 0x5, 0xeb2, 0x8, 0x1008000) socket(0x10, 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r2, &(0x7f0000000180)={{0x0, 0x8, &(0x7f0000000300)={&(0x7f0000000180), 0xc6}, 0xbe, 0x0, 0x7, 0x58102aac}, 0x9}, 0x5, 0x0, 0x0) sendmsg$auto_L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1018}, 0x1, 0x0, 0x0, 0xefb7e034ab6a1498}, 0x24000084) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0x10ffffffff}, 0x6, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000280)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) mount$auto(0x0, &(0x7f00000001c0)='}[,&*}\x00', 0x0, 0x7fff, 0x0) statfs$auto(&(0x7f0000000000)='}[,&*}\x00', &(0x7f0000000200)={0x1, 0x180000000000000, 0x10000, 0x7ff, 0x36d, 0x9, 0x56bb, {[0x2c81, 0x3]}, 0x10001, 0x8, 0x8, [0x6, 0x3, 0x6, 0x9]}) 2m13.565859029s ago: executing program 0 (id=3714): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000440)={0x1a, 0x3ff, "9136a9be8e677f546c9d59e672d01f29fc398b89f6b84b0df9eb"}, 0x4295) mmap$auto(0x0, 0x6, 0x4000002, 0x40eb2, 0xffffffffffffffff, 0x308000000000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8340, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/domainname\x00', 0x88042, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) r0 = socket(0x2, 0x80802, 0x0) setsockopt$auto(r0, 0x11, 0x67, 0x0, 0x8) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000180)=@in={0x2, 0x0, @multicast1}, 0x55) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) 2m13.498561651s ago: executing program 5 (id=3715): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000440)={0x1a, 0x3ff, "9136a9be8e677f546c9d59e672d01f29fc398b89f6b84b0df9eb"}, 0x4295) mmap$auto(0x0, 0x6, 0x4000002, 0x40eb2, 0xffffffffffffffff, 0x308000000000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8340, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/domainname\x00', 0x88042, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) r0 = socket(0x2, 0x80802, 0x0) setsockopt$auto(r0, 0x11, 0x67, 0x0, 0x8) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000180)=@in={0x2, 0x0, @multicast1}, 0x55) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) 2m13.465259091s ago: executing program 4 (id=3716): mmap$auto(0x800000, 0x202000b, 0x4, 0x15, 0xfffffffffffffffa, 0x0) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x4000, 0x0) mmap$auto(0x0, 0xbb5, 0x4000000000df, 0x40eb1, 0x401, 0x300000000002) socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sysfs$auto(0x2, 0x23, 0x0) r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r1, 0x0, 0x3) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa}, 0x58) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto(0x3, 0x40081271, 0x38) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x1, 0x2020009, 0x3, 0xebe, 0xfffffffffffffffa, 0x8000) shmctl$auto_IPC_SET(0xc, 0x1, &(0x7f0000000300)={{0xffffffff, 0xffffffffffffffff, 0xee01, 0x1000, 0xae, 0x9, 0x6}, 0x1, 0x7, 0x2, 0x280, @raw, @raw=0x5, 0x3, 0x0, &(0x7f0000000140)="4666def67af41b4f051e39fd6511fd6cfab11faa93fdd757f3a42ab52c0db46c7c57737a54cb9ad1fccd9f47e3400debebecee8c4b3ab4b0ecd15cb89799d7a8a423d738e2914ff98f43b494873650cfa841ca9b379cdbceb067f222f9852e4e248e519e6e2d25bc83b3fb9ec16cbc5fe503b9662d19861c9bb377749418140efde7024c7215d323a6c79c5be94bc04ed0d9afbb9c9574ff829522a54b91ef7bcef85e226564639c87b944203a6814a00eea8134d42bc137511ab276827b7ee17d85c2722c34b6d9cd3c095bd1094df859fd44defb05f086d48e42b8cfe4f20b057126cfb78738004716a5e21149cc372c89149624db4102", &(0x7f0000000240)="41b431f15aa64d11716c2908cc9f948827ddb702f4ae4ad578a4d9e2fa81507ca870d066e25696b0b2ac35abb53a8fc6e9df9fdbbc11fe705ab85e88111e5684e28f8599bc486b93eea020ee76a340a548c82e805e2d182d741e51d53c799f7bb722a591e8ac4c48f3317ac8926b8bfb8d1f"}) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nullb0/queue/virt_boundary_mask\x00', 0x101000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000003c0)=""/251, 0xfb) socket(0xb, 0xa, 0xd9) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r4 = socket(0xa, 0x1, 0x84) bind$auto(r4, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) epoll_ctl$auto_EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000000c0)={0x4, 0x3}) write$auto(0x3, 0x0, 0xfdef) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/net/rxrpc/calls\x00', 0x2, 0x0) 2m11.889458183s ago: executing program 6 (id=3718): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/neigh/syz_tun/ucast_solicit\x00', 0xa0202, 0x0) mmap$auto(0x2, 0x8000000000000000, 0x7, 0xeb1, r0, 0x8000) prctl$auto(0x1000000003b, 0x19f9, 0x4, 0x8, 0x8) unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) ioctl$auto(0x3, 0x8905, 0x38) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0x240007, 0x19) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x8) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c000100", @ANYRES16=r2, @ANYBLOB="010031bd7000fddbdf250c000000100003800c0003800800058004009f0018000180140002006e657464657673696d30000000000000"], 0x3c}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0) mmap$auto(0xfffffffffffffffd, 0x4020009, 0x40000000df, 0x8010, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kfence/parameters/sample_interval\x00', 0x102, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) bpf$auto(0x2, &(0x7f0000000380)=@token_create={0x5315, r3}, 0x1) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) 2m11.655374834s ago: executing program 0 (id=3719): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x22a02, 0x0) write$auto(r0, &(0x7f0000000140)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7\xe6\x04\x8c\x83k', 0x1000000007e) openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/tracing_on\x00', 0x8001, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy1/net/wpan1/queues/tx-0/byte_queue_limits/stall_cnt\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) write$auto(0x3, 0x0, 0xfdef) unshare$auto(0xffffffffffffffff) socket(0x18, 0x5, 0x2) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x22a02, 0x0) (async) write$auto(r0, &(0x7f0000000140)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7\xe6\x04\x8c\x83k', 0x1000000007e) (async) openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/tracing_on\x00', 0x8001, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy1/net/wpan1/queues/tx-0/byte_queue_limits/stall_cnt\x00', 0x0, 0x0) (async) read$auto(r1, 0x0, 0x20) (async) write$auto(0x3, 0x0, 0xfdef) (async) unshare$auto(0xffffffffffffffff) (async) socket(0x18, 0x5, 0x2) (async) 2m11.638828747s ago: executing program 4 (id=3720): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00'}) socket(0x2, 0x2, 0x0) socket(0xa, 0x801, 0x84) shmget$auto(0x2, 0x3, 0x79e56dc9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/scsi_mod/parameters/scan\x00', 0x102, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80402, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) sendfile$auto(r1, r1, 0x0, 0x800) r3 = socket(0x18, 0x5, 0x1) connect$auto(r3, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) r4 = socket(0x2, 0x2, 0x1) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/inflight\x00', 0x2240, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000140)=""/12, 0xc) r6 = openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/tracing/tracing_cpumask\x00', 0x8002, 0x0) writev$auto(r6, &(0x7f0000000000)={&(0x7f0000000140), 0x9}, 0x1) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_0={0x0, 0x1, 0xff, 0x5, 0x8006, 0xffffffffffffffff, 0xfffffffb, "04007a0cd9022f362600f4f80a00", 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x1, 0x7}, 0x7) socket(0x1, 0x1, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) mount$auto(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x9f1e, 0x0) r7 = socket(0x10, 0x2, 0x4) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="21022cbc7000ebdbdf2501"], 0x14}, 0x1, 0x0, 0x0, 0x400c050}, 0x4000080) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000014"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) write$auto(r7, &(0x7f0000000000)='-\x00', 0x2fb) sendto$auto(r4, 0x0, 0xb, 0x132a0a8b, 0x0, 0x2) ioctl$auto_FITHAW(r4, 0xc0045878, 0xfff) close_range$auto(0x0, 0xfffffffffffff000, 0x0) 2m11.568087078s ago: executing program 5 (id=3721): open(&(0x7f0000000800)='./file1\x00', 0x22240, 0x154) close_range$auto(0xffffffffffffffff, 0x8, 0x2) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x10cc3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv6/conf/ipvlan1/router_solicitation_interval\x00', 0x82, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x9, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x40900, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x8140, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gre0\x00'}) bpf$auto(0x0, 0x0, 0x92) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(0x0, 0x0, 0x0) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000300)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz]\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00') 2m10.898480412s ago: executing program 0 (id=3722): open(&(0x7f0000000800)='./file1\x00', 0x22240, 0x154) close_range$auto(0xffffffffffffffff, 0x8, 0x2) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x10cc3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv6/conf/ipvlan1/router_solicitation_interval\x00', 0x82, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x9, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x40900, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x8140, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gre0\x00'}) bpf$auto(0x0, 0x0, 0x92) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, 0x0, 0x100000a3d9) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(0x0, 0x0, 0x0) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000300)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00') 2m10.812924533s ago: executing program 4 (id=3723): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto_TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000080)=0x3a) openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) io_uring_setup$auto(0x87, 0x0) r0 = socket(0xa, 0x1, 0x84) getsockopt$auto(r0, 0x0, 0x487, 0x0, 0x0) r1 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/binderfs/binder0\x00', 0x0, 0x0) ioctl$auto_BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, 0x0) statmount$auto(0x0, 0x0, 0x1fe, 0xb) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xb8, 0x100000000, 0x5, 0x1b, 0x93c, 0x1ffdc, 0x7, 0x8, 0x100000000000002, 0x9, 0x4, 0x2, 0x8001, 0xae, 0x9, 0x922, 0x7, 0x5, 0x5, 0x3, 0xfffffffe, 0xfffffffc, 0x200, 0x0, 0x5, 0x0, 0x4, 0x7, 0x4, 0x0, [0xfffffffffffffffe, 0x0, 0x400007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x8000000000000000, 0x0, 0x10, 0x0, 0x0, 0x11]}, 0x0, 0x83) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xdc5a}, 0x80000800}, 0x7, 0x4008) r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x8001, 0x2) read$auto_proc_pid_maps_operations_internal(r3, &(0x7f0000000900)=""/4096, 0x1000) openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, 0x0, 0x20103, 0x0) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x4, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x1, 0xfffffffffffff001, 0xe) madvise$auto(0x0, 0x200007, 0x19) 2m10.529282264s ago: executing program 6 (id=3724): sendmsg$auto_BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000f0038748267d13ec7f476a00", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250f00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x140000e4) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1000"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) io_uring_register$auto_IORING_REGISTER_CLOCK(r0, 0x1d, &(0x7f0000000000)="4813b4cb4b71a1214845ead226ef3844dafac99f01410742d52a267594fd15698a7c8720ed0d9912c4d71568b730a7b2bcff3fb7cd277bb7d778f71cc1c2f19a9a357df9b33d413c24894b73be4dd57e42c18d0a081371a00c2ae1376e530b9e12824c1f2d2e9360b9b42a64d1e6ce1f4bf1c10eaccbd0f59eef167937dd6cbbee675cbe7ddb297162b379edea0c4848548467a4615184c7db4eb97b30feea25c15cabe631572a48ccf4b40453a5c0413941d45c89dbd3323c7e89b64303f2fa7725bd089225f84ede056ce96a38aa20af52deba99d95d8ab23db5201fd56ed7d247dfe28097f0bf741c446c876a550b03e2cd9985f3d45d", 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = pidfd_open$auto(0x1, 0x0) setns(r1, 0x60020000) io_uring_setup$auto(0x6, 0x0) mknod$auto(0x0, 0x1081, 0x3) open(0x0, 0xa240, 0x15e) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0xa00, 0x100) sysfs$auto(0x2, 0x1e, 0x0) setuid$auto(0xe) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) fanotify_init$auto(0x2, 0x40) 2m10.485958909s ago: executing program 0 (id=3725): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x46000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_EDGE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x81) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0xc8, 0x8924, 0x8) readv$auto(0x3, &(0x7f00000001c0)={0x0}, 0x100000007) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x46000, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_EDGE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x81) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) ioctl$auto(0xc8, 0x8924, 0x8) (async) readv$auto(0x3, &(0x7f00000001c0)={0x0}, 0x100000007) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) 2m10.448822451s ago: executing program 5 (id=3726): mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) semctl$auto(0x10001, 0x9, 0x4, 0x10000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) r2 = open(0x0, 0x22240, 0x154) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/block/nbd8/hctx0/cpu0/poll_rq_list\x00', 0x848000, 0x0) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x1d, 0x2, 0x7) connect$auto(0x3, &(0x7f00000018c0)=@can, 0x18) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r4, 0x0, 0x40000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) ioctl$auto(0xffffffffffffffff, 0x540a, 0x0) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, 0x0, 0x800) lchown$auto(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) read$auto(0xffffffffffffffff, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) r5 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcsa\x00', 0x100, 0x0) preadv$auto(r5, &(0x7f0000000240)={&(0x7f0000000340), 0x8000}, 0xc0f, 0x81, 0x6) execveat$auto(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) getsockopt$auto(0x3, 0x200000000001, 0x1d, 0x0, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) 2m6.380038829s ago: executing program 6 (id=3727): mmap$auto(0x0, 0x9, 0x10004000000000df, 0x100010ef0, 0xffffffffffffffff, 0x8003) read$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffffff, 0x0, 0xffffffffffffff67) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/irq/4/smp_affinity\x00', 0x400, 0x0) pread64$auto(r0, 0x0, 0x1ff, 0x8800000000) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x2, 0x4) r2 = socket(0x10, 0x3, 0x6) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a000400110008002e00", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32dd7c33b14cc842bc1e2a5da4203e64ceaa9db5223aa655b6313c011b3e73a75f1aa1f7b2ea43344b15bd494886e355cf6d92c8fe670a42bc677830013e9c4aa4fa30c3e6630bf0ed13206d5a18f6813c6fb03466112aedf5d67bb5b99fe96a6dcd279916b0bce029925b63c48d41ca8a76e46c6014100005800c00c50003000000000000000c02368008027a8087010c800800e800", @ANYRES32=r1, @ANYBLOB="0800fb00", @ANYRES32=r2], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) ioctl$auto(r0, 0x64c6, 0x1e2) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) r4 = socket(0x10, 0x2, 0x210) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1e00df45"], 0x1ac}, 0x1, 0x0, 0x0, 0x5}, 0x40000d0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) r5 = socket(0x10, 0x2, 0x4) bpf$auto(0x6, &(0x7f00000001c0)=@test={r5, 0xffffffff, 0x0, 0x3e, 0x106, 0x0, 0x0, 0xfff, 0x410000, 0x9, 0x8, 0x4, 0x7, 0x2, 0xfffeffff}, 0x10001) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) mount$auto(0x0, &(0x7f00000001c0)='}[,&*}\x00', 0x0, 0x7fff, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xfdef}, 0x1, 0x0, 0x5, 0xdf0}, 0x7}, 0x3, 0x6a) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc6}, 0x1, 0x0, 0x2, 0x9}, 0x7}, 0x3, 0xa6) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0xa0781, 0x0) 2m6.085317283s ago: executing program 6 (id=3728): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000440)={0x1a, 0x3ff, "9136a9be8e677f546c9d59e672d01f29fc398b89f6b84b0df9eb"}, 0x4295) mmap$auto(0x0, 0x6, 0x4000002, 0x40eb2, 0xffffffffffffffff, 0x308000000000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8340, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/domainname\x00', 0x88042, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) r0 = socket(0x2, 0x80802, 0x0) setsockopt$auto(r0, 0x11, 0x67, 0x0, 0x8) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xa}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) 2m2.42396085s ago: executing program 6 (id=3729): sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYRES8, @ANYRES16=0x0, @ANYBLOB="000326bd7000fcdbdf2503000000790008805b4f2525b2dc3a73ec37e7122e6f0d55382854d419b883b7ed64bd3c7b9fb15273e787030718751e0a22cc6cabcae114aa6448d0356183e1ca7c01536c5c6f37915b26a3e75515ab02807fe932b8a415a581dcdc7800f91e231c001d800400d3800c002000f3000000002b3c0c7e9b52baf56fe40000000008008c00ac1414aa000000700002806a00e400addd3588300c750bd8c6341eedf20d260a37a63d761fd730c00d02e9ba0a478e7a2f6629a6ad6201"], 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x42) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x204880, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101200, 0x0) close_range$auto(0x2, r0, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000001f00), 0xffffffffffffffff) sendmsg$auto_SMC_PNETID_ADD(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB="e6f207c8", @ANYRES16=r2, @ANYBLOB="01002cbd700001dcdf25020000000c0002002b6f2a2390808b000b0001006e65746465760000"], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x40d0) (async) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents64$auto(r3, 0x0, 0x803) (async) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) (async) socket(0x2, 0x80802, 0x0) (async) sendmsg$auto_TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f00000110c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='p'], 0x70}, 0x1, 0x0, 0x0, 0x20008105}, 0x40) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) (async) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae90, &(0x7f0000000300)={0x2, 0x0, [{0x1, 0x7ff, 0x8}, {0x10002, 0x30, 0x5}, {0x0, 0x0, 0x7}]}) 2m0.838455014s ago: executing program 0 (id=3730): open(&(0x7f0000000800)='./file1\x00', 0x22240, 0x154) mmap$auto(0x0, 0x400009, 0xdd, 0x9b72, 0x8000000000000003, 0x8000) openat$auto_snapshot_fops_user(0xffffffffffffff9c, 0x0, 0x180b01, 0x0) recvfrom$auto(0xffffffffffffffff, 0x0, 0x5, 0x1200, 0x0, 0xfffffffffffffffd) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r0 = socket(0x2b, 0x1, 0x0) r1 = socket(0x1d, 0x3, 0x1) bind$auto(r1, 0x0, 0x1) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000080), 0x42080, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000009c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WOWLAN(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c815}, 0x804) sendmsg$auto_IPVS_CMD_SET_SERVICE(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002b00)={0x30, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@nested={0x8, 0x5, 0x0, 0x1, [@nested={0x4, 0x23}]}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xa, 0x4b, 0x0, 0x1, [@generic="b69338fc3930"]}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4050}, 0x240400c0) r7 = openat$auto_dev_fops_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x60000, 0x0) read$auto_dev_fops_plock(r7, &(0x7f00000001c0)=""/132, 0x84) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0x800, 0x1, 0x948b, 0x3, 0x95f4da2d, 0x20d, 0x6, 0x62, 0x7, 0x7, 0x6d3f, 0xa, 0x4, 0x5]}, 0x0) shutdown$auto(0x200000003, 0x2) close_range$auto(0xffffffffffffffff, 0x8, 0x2) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x10cc3, 0x0) 2m0.073858238s ago: executing program 6 (id=3731): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video54\x00', 0x42942, 0x0) (async) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video54\x00', 0x42942, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket(0xa, 0x3, 0x5) (async) socket(0xa, 0x3, 0x5) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/stable_node_dups\x00', 0x121840, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000280)=""/222, 0xde) openat$auto_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0) socket(0x29, 0x2, 0x0) socket(0x1d, 0x2, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/pci0000:00/0000:00:03.0/consistent_dma_mask_bits\x00', 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x2, 0x2, 0x0) (async) socket(0x2, 0x2, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000ac0)='/proc/thread-self/net/sctp/remaddr\x00', 0x8200, 0x0) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000ac0)='/proc/thread-self/net/sctp/remaddr\x00', 0x8200, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000000), 0x12000, 0x0) socketcall$auto(0x8000, 0x0) (async) r1 = socketcall$auto(0x8000, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r3, r3, 0x0, 0x7) (async) sendfile$auto(r3, r3, 0x0, 0x7) ioctl$auto(0x3, 0xae41, r1) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000004180)='/dev/snd/controlC1\x00', 0x28180, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/slab/kmalloc-64/min_partial\x00', 0x501, 0x0) socket(0x10, 0x2, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r4, 0xc1105511, 0x0) 1m59.175629359s ago: executing program 5 (id=3732): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) ioctl$auto(0x3, 0x8905, 0x38) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x92, 0x400000003, 0x80000eb1, 0xffffffffffffffff, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0x240007, 0x19) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)={0x18, r2, 0x1, 0x70bd31, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x18}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) r3 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0x1000, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/i2c/drivers/i2c_hid_acpi/uevent\x00', 0x408bc2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) bpf$auto(0x7, &(0x7f0000000380)=@iter_create={r3, 0x8}, 0x5) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) r5 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_VERSION_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100259a7000fedbdf250400000010000190080001000400000004000300"], 0x24}, 0x1, 0x0, 0x0, 0x24000001}, 0x4044880) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x5c, r5, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x2}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x800}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x9}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x8000}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x1}, @NFSD_A_SERVER_THREADS={0x8}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x4}, @NFSD_A_SERVER_SCOPE={0xe, 0x4, '/dev/zero\x00'}]}, 0x5c}}, 0x1) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0xffffff7f) r6 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r6, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) 1m44.953347716s ago: executing program 35 (id=3730): open(&(0x7f0000000800)='./file1\x00', 0x22240, 0x154) mmap$auto(0x0, 0x400009, 0xdd, 0x9b72, 0x8000000000000003, 0x8000) openat$auto_snapshot_fops_user(0xffffffffffffff9c, 0x0, 0x180b01, 0x0) recvfrom$auto(0xffffffffffffffff, 0x0, 0x5, 0x1200, 0x0, 0xfffffffffffffffd) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r0 = socket(0x2b, 0x1, 0x0) r1 = socket(0x1d, 0x3, 0x1) bind$auto(r1, 0x0, 0x1) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000080), 0x42080, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000009c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WOWLAN(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c815}, 0x804) sendmsg$auto_IPVS_CMD_SET_SERVICE(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002b00)={0x30, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@nested={0x8, 0x5, 0x0, 0x1, [@nested={0x4, 0x23}]}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xa, 0x4b, 0x0, 0x1, [@generic="b69338fc3930"]}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4050}, 0x240400c0) r7 = openat$auto_dev_fops_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x60000, 0x0) read$auto_dev_fops_plock(r7, &(0x7f00000001c0)=""/132, 0x84) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0x800, 0x1, 0x948b, 0x3, 0x95f4da2d, 0x20d, 0x6, 0x62, 0x7, 0x7, 0x6d3f, 0xa, 0x4, 0x5]}, 0x0) shutdown$auto(0x200000003, 0x2) close_range$auto(0xffffffffffffffff, 0x8, 0x2) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x10cc3, 0x0) 1m44.480111718s ago: executing program 36 (id=3731): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video54\x00', 0x42942, 0x0) (async) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video54\x00', 0x42942, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket(0xa, 0x3, 0x5) (async) socket(0xa, 0x3, 0x5) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/stable_node_dups\x00', 0x121840, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000280)=""/222, 0xde) openat$auto_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0) socket(0x29, 0x2, 0x0) socket(0x1d, 0x2, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/pci0000:00/0000:00:03.0/consistent_dma_mask_bits\x00', 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x2, 0x2, 0x0) (async) socket(0x2, 0x2, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000ac0)='/proc/thread-self/net/sctp/remaddr\x00', 0x8200, 0x0) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000ac0)='/proc/thread-self/net/sctp/remaddr\x00', 0x8200, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000000), 0x12000, 0x0) socketcall$auto(0x8000, 0x0) (async) r1 = socketcall$auto(0x8000, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r3, r3, 0x0, 0x7) (async) sendfile$auto(r3, r3, 0x0, 0x7) ioctl$auto(0x3, 0xae41, r1) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000004180)='/dev/snd/controlC1\x00', 0x28180, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/slab/kmalloc-64/min_partial\x00', 0x501, 0x0) socket(0x10, 0x2, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r4, 0xc1105511, 0x0) 1m42.518862855s ago: executing program 37 (id=3732): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) ioctl$auto(0x3, 0x8905, 0x38) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x92, 0x400000003, 0x80000eb1, 0xffffffffffffffff, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0x240007, 0x19) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)={0x18, r2, 0x1, 0x70bd31, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x18}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) r3 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0x1000, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/i2c/drivers/i2c_hid_acpi/uevent\x00', 0x408bc2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) bpf$auto(0x7, &(0x7f0000000380)=@iter_create={r3, 0x8}, 0x5) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) r5 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_VERSION_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100259a7000fedbdf250400000010000190080001000400000004000300"], 0x24}, 0x1, 0x0, 0x0, 0x24000001}, 0x4044880) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x5c, r5, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x2}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x800}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x9}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x8000}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x1}, @NFSD_A_SERVER_THREADS={0x8}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x4}, @NFSD_A_SERVER_SCOPE={0xe, 0x4, '/dev/zero\x00'}]}, 0x5c}}, 0x1) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0xffffff7f) r6 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r6, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) 3.137580697s ago: executing program 4 (id=3733): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyr0\x00', 0x41, 0x0) ioctl$auto(r0, 0x540a, 0x1) (async) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/video44\x00', 0x8a240, 0x0) ppoll$auto(0x0, 0xf3, 0x0, 0x0, 0x8) (async) preadv$auto(0x40000000000003, &(0x7f0000000240)={0x0, 0xfffffffd}, 0x6, 0xc, 0x1) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r1) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006400)={0x1c, r2, 0x1, 0x51bd2e, 0x25dfcbfb, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4) 0s ago: executing program 7 (id=3734): open(&(0x7f0000000800)='./file1\x00', 0x22240, 0x154) close_range$auto(0xffffffffffffffff, 0x8, 0x2) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x10cc3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv6/conf/ipvlan1/router_solicitation_interval\x00', 0x82, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x9, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x40900, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x8140, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gre0\x00'}) bpf$auto(0x0, 0x0, 0x92) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, 0x0, 0x100000a3d9) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(0x0, 0x0, 0x0) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000300)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00') kernel console output (not intermixed with test programs): [ 898.262786][T19835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 898.262811][T19835] RSP: 002b:00007f0bd7f980e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 898.262834][T19835] RAX: ffffffffffffffda RBX: 00007f0bd73e5fa8 RCX: 00007f0bd718f749 [ 898.262861][T19835] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0bd73e5fac [ 898.262878][T19835] RBP: 00007f0bd73e5fa0 R08: 00007f0bd7f99000 R09: 0000000000000000 [ 898.262894][T19835] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 898.262909][T19835] R13: 00007f0bd73e6038 R14: 00007ffdc087a270 R15: 00007ffdc087a358 [ 898.262942][T19835] [ 898.859692][T19843] FAULT_INJECTION: forcing a failure. [ 898.859692][T19843] name failslab, interval 1, probability 0, space 0, times 0 [ 898.872826][T19843] CPU: 1 UID: 0 PID: 19843 Comm: syz.0.3314 Not tainted syzkaller #0 PREEMPT(full) [ 898.872869][T19843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 898.872889][T19843] Call Trace: [ 898.872900][T19843] [ 898.872913][T19843] dump_stack_lvl+0x16c/0x1f0 [ 898.872959][T19843] should_fail_ex+0x512/0x640 [ 898.873008][T19843] ? __kmalloc_cache_noprof+0x5f/0x780 [ 898.873043][T19843] should_failslab+0xc2/0x120 [ 898.873086][T19843] __kmalloc_cache_noprof+0x72/0x780 [ 898.873116][T19843] ? gpiolib_seq_stop+0xc2/0xf0 [ 898.873154][T19843] ? gpiolib_seq_start+0x9a/0x2a0 [ 898.873193][T19843] ? traverse.part.0.constprop.0+0x2c5/0x650 [ 898.873252][T19843] ? gpiolib_seq_start+0x9a/0x2a0 [ 898.873289][T19843] gpiolib_seq_start+0x9a/0x2a0 [ 898.873330][T19843] seq_read_iter+0x2c1/0x12d0 [ 898.873399][T19843] seq_read+0x3a3/0x570 [ 898.873449][T19843] ? __pfx_seq_read+0x10/0x10 [ 898.873508][T19843] ? get_pid_task+0xfc/0x250 [ 898.874138][T19843] full_proxy_read+0x131/0x1a0 [ 898.874195][T19843] ? __pfx_full_proxy_read+0x10/0x10 [ 898.874240][T19843] vfs_read+0x1e4/0xcf0 [ 898.874284][T19843] ? __pfx_vfs_read+0x10/0x10 [ 898.874314][T19843] ? find_held_lock+0x2b/0x80 [ 898.874350][T19843] ? __fget_files+0x204/0x3c0 [ 898.874390][T19843] ? __fget_files+0x20e/0x3c0 [ 898.874419][T19843] ? __fget_files+0x150/0x3c0 [ 898.874463][T19843] __x64_sys_pread64+0x1eb/0x250 [ 898.874502][T19843] ? __pfx___x64_sys_pread64+0x10/0x10 [ 898.874553][T19843] do_syscall_64+0xcd/0xfa0 [ 898.874598][T19843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.874629][T19843] RIP: 0033:0x7f0aaa58f749 [ 898.874656][T19843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 898.874687][T19843] RSP: 002b:00007f0aab426038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 898.874743][T19843] RAX: ffffffffffffffda RBX: 00007f0aaa7e5fa0 RCX: 00007f0aaa58f749 [ 898.874764][T19843] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000003 [ 898.874783][T19843] RBP: 00007f0aab426090 R08: 0000000000000000 R09: 0000000000000000 [ 898.874802][T19843] R10: 000000000000df95 R11: 0000000000000246 R12: 0000000000000001 [ 898.874821][T19843] R13: 00007f0aaa7e6038 R14: 00007f0aaa7e5fa0 R15: 00007ffe36daba28 [ 898.874863][T19843] [ 899.385477][T19845] FAULT_INJECTION: forcing a failure. [ 899.385477][T19845] name failslab, interval 1, probability 0, space 0, times 0 [ 899.418256][T19847] ERROR: Out of memory at tomoyo_memory_ok. [ 899.431065][T19845] CPU: 0 UID: 0 PID: 19845 Comm: syz.5.3315 Not tainted syzkaller #0 PREEMPT(full) [ 899.431115][T19845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 899.431137][T19845] Call Trace: [ 899.431149][T19845] [ 899.431162][T19845] dump_stack_lvl+0x16c/0x1f0 [ 899.431211][T19845] should_fail_ex+0x512/0x640 [ 899.431264][T19845] ? fs_reclaim_acquire+0xae/0x150 [ 899.431313][T19845] should_failslab+0xc2/0x120 [ 899.431360][T19845] __kmalloc_cache_noprof+0x72/0x780 [ 899.431391][T19845] ? __pfx_tomoyo_init_log+0x10/0x10 [ 899.431429][T19845] ? tomoyo_write_log2+0x33d/0xc10 [ 899.431474][T19845] ? tomoyo_write_log2+0x33d/0xc10 [ 899.431519][T19845] tomoyo_write_log2+0x33d/0xc10 [ 899.431565][T19845] tomoyo_supervisor+0x15e/0x13b0 [ 899.431619][T19845] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 899.431661][T19845] ? __pfx_vsnprintf+0x10/0x10 [ 899.431726][T19845] ? tomoyo_check_path_number_acl+0xa6/0x2f0 [ 899.431794][T19845] tomoyo_path_number_perm+0x448/0x580 [ 899.431831][T19845] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 899.431861][T19845] ? futex_wake+0x1ad/0x530 [ 899.431952][T19845] ? find_held_lock+0x2b/0x80 [ 899.431986][T19845] ? hook_file_ioctl_common+0x145/0x410 [ 899.432029][T19845] ? __fget_files+0x20e/0x3c0 [ 899.432071][T19845] security_file_ioctl+0x9b/0x240 [ 899.432107][T19845] __x64_sys_ioctl+0xb7/0x210 [ 899.432159][T19845] do_syscall_64+0xcd/0xfa0 [ 899.432202][T19845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 899.432236][T19845] RIP: 0033:0x7f102cb8f749 [ 899.432263][T19845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 899.432296][T19845] RSP: 002b:00007f102d9fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 899.432329][T19845] RAX: ffffffffffffffda RBX: 00007f102cde5fa0 RCX: 00007f102cb8f749 [ 899.432351][T19845] RDX: 0000000000000000 RSI: 0000000050009404 RDI: 0000000000000003 [ 899.432371][T19845] RBP: 00007f102cc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 899.432390][T19845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 899.432410][T19845] R13: 00007f102cde6038 R14: 00007f102cde5fa0 R15: 00007ffd143ba548 [ 899.432456][T19845] [ 899.810938][T19856] ERROR: Out of memory at tomoyo_memory_ok. [ 901.081540][T19872] ERROR: Out of memory at tomoyo_memory_ok. [ 901.228350][T19539] syz.6.3236 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 901.239730][T19539] CPU: 0 UID: 0 PID: 19539 Comm: syz.6.3236 Not tainted syzkaller #0 PREEMPT(full) [ 901.239773][T19539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 901.239792][T19539] Call Trace: [ 901.239803][T19539] [ 901.239815][T19539] dump_stack_lvl+0x16c/0x1f0 [ 901.239860][T19539] dump_header+0x101/0x930 [ 901.239898][T19539] oom_kill_process+0x272/0xa40 [ 901.239936][T19539] out_of_memory+0x350/0x1700 [ 901.239982][T19539] ? __pfx_out_of_memory+0x10/0x10 [ 901.240026][T19539] mem_cgroup_out_of_memory+0x118/0x130 [ 901.240074][T19539] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 901.240132][T19539] ? do_raw_spin_unlock+0x172/0x230 [ 901.240166][T19539] try_charge_memcg+0x695/0xd30 [ 901.240216][T19539] ? __pfx_try_charge_memcg+0x10/0x10 [ 901.240256][T19539] ? __print_lock_name+0xb1/0xe0 [ 901.240291][T19539] ? rcu_read_unlock+0x17/0x60 [ 901.240344][T19539] charge_memcg+0x8a/0x230 [ 901.240387][T19539] __mem_cgroup_charge+0x2b/0x1e0 [ 901.240432][T19539] shmem_alloc_and_add_folio+0x50c/0xc20 [ 901.240476][T19539] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 901.240626][T19539] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 901.240672][T19539] shmem_get_folio_gfp+0x67f/0x1610 [ 901.240721][T19539] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 901.240754][T19539] ? timestamp_truncate+0x21e/0x2d0 [ 901.240801][T19539] shmem_write_begin+0x160/0x300 [ 901.240836][T19539] ? __pfx_shmem_write_begin+0x10/0x10 [ 901.240869][T19539] ? inode_set_ctime_current+0x2a1/0x8f0 [ 901.240911][T19539] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 901.240966][T19539] generic_perform_write+0x3c4/0x900 [ 901.241030][T19539] ? __pfx_generic_perform_write+0x10/0x10 [ 901.241086][T19539] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 901.241124][T19539] ? generic_update_time+0xcf/0xf0 [ 901.241162][T19539] ? mnt_put_write_access_file+0x45/0xf0 [ 901.241200][T19539] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 901.241241][T19539] shmem_file_write_iter+0x10e/0x140 [ 901.241286][T19539] __kernel_write_iter+0x31a/0xb10 [ 901.241328][T19539] ? __pfx___kernel_write_iter+0x10/0x10 [ 901.241365][T19539] ? __up_read+0x1f8/0x750 [ 901.241421][T19539] ? dump_user_range+0x756/0xb70 [ 901.241466][T19539] dump_user_range+0x413/0xb70 [ 901.241510][T19539] ? __pfx_dump_user_range+0x10/0x10 [ 901.241547][T19539] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 901.241620][T19539] ? __pfx_writenote+0x10/0x10 [ 901.241670][T19539] elf_core_dump+0x29c3/0x3c00 [ 901.241742][T19539] ? __pfx_elf_core_dump+0x10/0x10 [ 901.241793][T19539] ? check_preempt_wakeup_fair+0x6a6/0x980 [ 901.241835][T19539] ? find_held_lock+0x2b/0x80 [ 901.241869][T19539] ? 0xffffffffff600000 [ 901.241897][T19539] ? rcu_is_watching+0x12/0xc0 [ 901.241932][T19539] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 901.241970][T19539] ? lockdep_hardirqs_on+0x7c/0x110 [ 901.242076][T19539] ? vfs_coredump+0x2b9f/0x5670 [ 901.242107][T19539] vfs_coredump+0x2b9f/0x5670 [ 901.242158][T19539] ? __pfx_vfs_coredump+0x10/0x10 [ 901.242194][T19539] ? __lock_acquire+0x622/0x1c90 [ 901.242259][T19539] ? lock_acquire+0x179/0x350 [ 901.242325][T19539] ? is_bpf_text_address+0x8a/0x1a0 [ 901.242370][T19539] ? bpf_ksym_find+0x124/0x1c0 [ 901.242420][T19539] ? unwind_get_return_address+0x59/0xa0 [ 901.242457][T19539] ? arch_stack_walk+0xa6/0x100 [ 901.242509][T19539] ? stack_trace_save+0x8e/0xc0 [ 901.242547][T19539] ? __pfx_stack_trace_save+0x10/0x10 [ 901.242597][T19539] ? stack_depot_save_flags+0x29/0x9c0 [ 901.242652][T19539] ? __lock_acquire+0xb8a/0x1c90 [ 901.242773][T19539] ? proc_coredump_connector+0x2d1/0x4f0 [ 901.242810][T19539] ? __pfx_proc_coredump_connector+0x10/0x10 [ 901.242856][T19539] ? rcu_is_watching+0x12/0xc0 [ 901.242896][T19539] get_signal+0x22e1/0x26d0 [ 901.242946][T19539] ? force_sig_fault+0xc4/0x100 [ 901.242985][T19539] ? __pfx_get_signal+0x10/0x10 [ 901.243035][T19539] arch_do_signal_or_restart+0x8f/0x790 [ 901.243076][T19539] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 901.243111][T19539] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 901.243179][T19539] irqentry_exit_to_user_mode+0x176/0x310 [ 901.243227][T19539] asm_exc_page_fault+0x26/0x30 [ 901.243259][T19539] RIP: 0033:0x21000 [ 901.243291][T19539] Code: Unable to access opcode bytes at 0x20fd6. [ 901.243307][T19539] RSP: 002b:000000000000000a EFLAGS: 00010282 [ 901.243334][T19539] RAX: 0000000000000000 RBX: 00007fa2595e6270 RCX: 00007fa25938f749 [ 901.243355][T19539] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000020003b46 [ 901.243373][T19539] RBP: 00007fa259413f91 R08: 0000000000000002 R09: 0000000000000000 [ 901.243392][T19539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 901.243410][T19539] R13: 00007fa2595e6308 R14: 00007fa2595e6270 R15: 00007ffeba08d268 [ 901.243455][T19539] [ 901.243618][T19539] memory: usage 307200kB, limit 307200kB, failcnt 29916 [ 901.763957][T19539] memory+swap: usage 431000kB, limit 9007199254740988kB, failcnt 0 [ 901.776256][T19539] kmem: usage 4452kB, limit 9007199254740988kB, failcnt 0 [ 901.828871][T19876] rnbd_client L213: map_device: Parameters missing [ 901.838079][T19539] Memory cgroup stats for /syz6: [ 901.838452][T19539] cache 309514240 [ 901.847838][T19539] rss 196608 [ 901.851078][T19539] rss_huge 0 [ 901.854499][T19539] shmem 309501952 [ 901.858180][T19539] mapped_file 12288 [ 901.862021][T19539] dirty 0 [ 901.865836][T19539] writeback 0 [ 901.869258][T19539] workingset_refault_anon 1336 [ 901.874232][T19539] workingset_refault_file 12 [ 901.878880][T19539] swap 126771200 [ 901.882498][T19539] swapcached 237568 [ 901.887417][T19539] pgpgin 534958 [ 901.891722][T19539] pgpgout 483809 [ 901.896405][T19539] pgfault 174894 [ 901.901699][T19539] pgmajfault 456 [ 901.905889][T19539] inactive_anon 202825728 [ 901.910300][T19539] active_anon 107110400 [ 901.915465][T19539] inactive_file 0 [ 901.919156][T19539] active_file 0 [ 901.922970][T19539] unevictable 0 [ 901.927098][T19539] hierarchical_memory_limit 314572800 [ 901.952305][T19539] hierarchical_memsw_limit 9223372036854771712 [ 901.958923][T19539] total_cache 309514240 [ 902.026050][T19865] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 902.032785][T19539] total_rss 196608 [ 902.036573][T19539] total_rss_huge 0 [ 902.041027][T19539] total_shmem 309501952 [ 902.052053][T19865] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 902.062411][T19865] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 902.089453][T19865] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 902.325125][T19539] total_mapped_file 12288 [ 902.347686][T19539] total_dirty 0 [ 902.357833][T19539] total_writeback 0 [ 902.370323][T19539] total_workingset_refault_anon 1336 [ 902.407757][T19539] total_workingset_refault_file 12 [ 902.440633][T19539] total_swap 126771200 [ 902.445235][T19539] total_swapcached 237568 [ 902.456256][T19884] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3325'. [ 902.470297][T19539] total_pgpgin 534958 [ 902.474854][T19539] total_pgpgout 483809 [ 902.529118][T19887] FAULT_INJECTION: forcing a failure. [ 902.529118][T19887] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 902.552904][T19539] total_pgfault 174894 [ 902.557883][T19539] total_pgmajfault 456 [ 902.560127][T19887] CPU: 1 UID: 0 PID: 19887 Comm: syz.0.3324 Not tainted syzkaller #0 PREEMPT(full) [ 902.560181][T19887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 902.560205][T19887] Call Trace: [ 902.560222][T19887] [ 902.560239][T19887] dump_stack_lvl+0x16c/0x1f0 [ 902.560298][T19887] should_fail_ex+0x512/0x640 [ 902.560370][T19887] _copy_to_user+0x32/0xd0 [ 902.560433][T19887] simple_read_from_buffer+0xcb/0x170 [ 902.560514][T19887] proc_fail_nth_read+0x197/0x240 [ 902.560564][T19887] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 902.560628][T19887] ? rw_verify_area+0xcf/0x6c0 [ 902.560666][T19887] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 902.560715][T19887] vfs_read+0x1e4/0xcf0 [ 902.560770][T19887] ? __pfx___mutex_lock+0x10/0x10 [ 902.560822][T19887] ? __pfx_vfs_read+0x10/0x10 [ 902.560879][T19887] ? __fget_files+0x20e/0x3c0 [ 902.560935][T19887] ksys_read+0x12a/0x250 [ 902.560977][T19887] ? __pfx_ksys_read+0x10/0x10 [ 902.561036][T19887] do_syscall_64+0xcd/0xfa0 [ 902.561090][T19887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.561131][T19887] RIP: 0033:0x7f0aaa58e15c [ 902.561163][T19887] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 902.561201][T19887] RSP: 002b:00007f0aab426030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 902.561239][T19887] RAX: ffffffffffffffda RBX: 00007f0aaa7e5fa0 RCX: 00007f0aaa58e15c [ 902.561266][T19887] RDX: 000000000000000f RSI: 00007f0aab4260a0 RDI: 0000000000000005 [ 902.561290][T19887] RBP: 00007f0aab426090 R08: 0000000000000000 R09: 0000000000000000 [ 902.561313][T19887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 902.561338][T19887] R13: 00007f0aaa7e6038 R14: 00007f0aaa7e5fa0 R15: 00007ffe36daba28 [ 902.561391][T19887] [ 902.778070][T19539] total_inactive_anon 202825728 [ 902.793703][T19539] total_active_anon 107110400 [ 902.812513][T19539] total_inactive_file 0 [ 902.857736][T19539] total_active_file 0 [ 902.861824][T19539] total_unevictable 0 [ 902.865854][T19539] anon_cost 0 [ 902.879585][T19539] file_cost 0 [ 902.883053][T19539] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.3236,pid=19541,uid=0 [ 902.929382][T19539] Memory cgroup out of memory: Killed process 19541 (syz.6.3236) total-vm:98852kB, anon-rss:1384kB, file-rss:47220kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:1000 [ 903.021817][T19894] FAULT_INJECTION: forcing a failure. [ 903.021817][T19894] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 903.070991][T19894] CPU: 0 UID: 0 PID: 19894 Comm: syz.5.3326 Not tainted syzkaller #0 PREEMPT(full) [ 903.071043][T19894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 903.071063][T19894] Call Trace: [ 903.071076][T19894] [ 903.071091][T19894] dump_stack_lvl+0x16c/0x1f0 [ 903.071139][T19894] should_fail_ex+0x512/0x640 [ 903.071221][T19894] _copy_from_iter+0x29f/0x1720 [ 903.071285][T19894] ? __pfx__copy_from_iter+0x10/0x10 [ 903.071338][T19894] ? rcu_is_watching+0x12/0xc0 [ 903.071374][T19894] ? trace_kmalloc+0x2b/0xd0 [ 903.071415][T19894] ? __kmalloc_noprof+0x34f/0x880 [ 903.071467][T19894] ? kernfs_fop_write_iter+0x237/0x570 [ 903.071508][T19894] kernfs_fop_write_iter+0x19a/0x570 [ 903.071546][T19894] vfs_write+0x7d3/0x11d0 [ 903.071584][T19894] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 903.071622][T19894] ? __pfx_vfs_write+0x10/0x10 [ 903.071655][T19894] ? find_held_lock+0x2b/0x80 [ 903.071717][T19894] __x64_sys_pwrite64+0x1eb/0x250 [ 903.071758][T19894] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 903.071812][T19894] do_syscall_64+0xcd/0xfa0 [ 903.071855][T19894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 903.071889][T19894] RIP: 0033:0x7f102cb8f749 [ 903.071915][T19894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 903.071946][T19894] RSP: 002b:00007f102d9fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 903.071977][T19894] RAX: ffffffffffffffda RBX: 00007f102cde5fa0 RCX: 00007f102cb8f749 [ 903.071999][T19894] RDX: 0000000000000006 RSI: 0000200000000100 RDI: 0000000000000003 [ 903.072020][T19894] RBP: 00007f102d9fe090 R08: 0000000000000000 R09: 0000000000000000 [ 903.072040][T19894] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001 [ 903.072060][T19894] R13: 00007f102cde6038 R14: 00007f102cde5fa0 R15: 00007ffd143ba548 [ 903.072106][T19894] [ 903.500967][T19897] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3328'. [ 903.554980][T19897] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3328'. [ 903.727081][T19903] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3329'. [ 904.075265][T19446] Bluetooth: hci2: command 0x0406 tx timeout [ 904.081626][ T8563] Bluetooth: hci4: command 0x0406 tx timeout [ 904.131144][T19446] Bluetooth: hci1: command 0x0406 tx timeout [ 904.137432][ T8563] Bluetooth: hci3: command 0x0406 tx timeout [ 905.088494][ T32] oom_reaper: reaped process 19541 (syz.6.3236), now anon-rss:104kB, file-rss:7048kB, shmem-rss:0kB [ 905.256383][T19915] rnbd_client L213: map_device: Parameters missing [ 906.091380][T19925] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3336'. [ 906.594281][ T30] audit: type=1800 audit(4294967342.550:23): pid=19930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3338" name="dbroot" dev="configfs" ino=83608 res=0 errno=0 [ 906.641998][T19930] Setting dangerous option i915.mitigations - tainting kernel [ 907.020857][T19935] FAULT_INJECTION: forcing a failure. [ 907.020857][T19935] name failslab, interval 1, probability 0, space 0, times 0 [ 907.068258][T19935] CPU: 1 UID: 0 PID: 19935 Comm: syz.5.3339 Tainted: G U syzkaller #0 PREEMPT(full) [ 907.068305][T19935] Tainted: [U]=USER [ 907.068316][T19935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 907.068334][T19935] Call Trace: [ 907.068345][T19935] [ 907.068358][T19935] dump_stack_lvl+0x16c/0x1f0 [ 907.068403][T19935] should_fail_ex+0x512/0x640 [ 907.068453][T19935] ? __kmalloc_cache_noprof+0x5f/0x780 [ 907.068488][T19935] ? __pfx_rnbd_clt_map_device_store+0x10/0x10 [ 907.068539][T19935] should_failslab+0xc2/0x120 [ 907.068583][T19935] ? __pfx_rnbd_clt_map_device_store+0x10/0x10 [ 907.068634][T19935] __kmalloc_cache_noprof+0x72/0x780 [ 907.068666][T19935] ? rnbd_clt_map_device_store+0x171/0x12e0 [ 907.068720][T19935] ? __pfx_rnbd_clt_map_device_store+0x10/0x10 [ 907.068773][T19935] ? rnbd_clt_map_device_store+0x171/0x12e0 [ 907.068824][T19935] rnbd_clt_map_device_store+0x171/0x12e0 [ 907.068881][T19935] ? __lock_acquire+0x622/0x1c90 [ 907.068929][T19935] ? __pfx_rnbd_clt_map_device_store+0x10/0x10 [ 907.068984][T19935] ? __lock_acquire+0x622/0x1c90 [ 907.069056][T19935] ? is_bpf_text_address+0x8a/0x1a0 [ 907.069112][T19935] ? bpf_ksym_find+0x124/0x1c0 [ 907.069186][T19935] ? stack_trace_save+0x8e/0xc0 [ 907.069266][T19935] ? __mutex_trylock_common+0xe9/0x250 [ 907.069319][T19935] ? __pfx___mutex_trylock_common+0x10/0x10 [ 907.069375][T19935] ? __lock_acquire+0x622/0x1c90 [ 907.069443][T19935] ? find_held_lock+0x2b/0x80 [ 907.069480][T19935] ? __pfx_rnbd_clt_map_device_store+0x10/0x10 [ 907.069533][T19935] ? dev_attr_store+0x58/0x80 [ 907.069579][T19935] dev_attr_store+0x58/0x80 [ 907.069626][T19935] ? __pfx_dev_attr_store+0x10/0x10 [ 907.069672][T19935] sysfs_kf_write+0xf2/0x150 [ 907.069714][T19935] kernfs_fop_write_iter+0x3af/0x570 [ 907.069745][T19935] ? __pfx_sysfs_kf_write+0x10/0x10 [ 907.069785][T19935] vfs_write+0x7d3/0x11d0 [ 907.069821][T19935] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 907.069859][T19935] ? __pfx_vfs_write+0x10/0x10 [ 907.069892][T19935] ? find_held_lock+0x2b/0x80 [ 907.069952][T19935] __x64_sys_pwrite64+0x1eb/0x250 [ 907.069994][T19935] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 907.070047][T19935] do_syscall_64+0xcd/0xfa0 [ 907.070099][T19935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.070132][T19935] RIP: 0033:0x7f102cb8f749 [ 907.070158][T19935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 907.070190][T19935] RSP: 002b:00007f102d9fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 907.070222][T19935] RAX: ffffffffffffffda RBX: 00007f102cde5fa0 RCX: 00007f102cb8f749 [ 907.070245][T19935] RDX: 0000000000000006 RSI: 0000200000000100 RDI: 0000000000000003 [ 907.070265][T19935] RBP: 00007f102d9fe090 R08: 0000000000000000 R09: 0000000000000000 [ 907.070285][T19935] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001 [ 907.070304][T19935] R13: 00007f102cde6038 R14: 00007f102cde5fa0 R15: 00007ffd143ba548 [ 907.070351][T19935] [ 907.642591][T19938] ERROR: Out of memory at tomoyo_memory_ok. [ 908.935398][T19944] rnbd_client L202: map_device: Unknown parameter or missing value 'D' [ 909.269563][T19953] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3344'. [ 910.115761][T19963] Console: switching to colour VGA+ 80x25 [ 910.203985][T19966] ERROR: Out of memory at tomoyo_memory_ok. [ 910.967898][T19984] ERROR: Out of memory at tomoyo_memory_ok. [ 911.087703][T19988] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3352'. [ 911.098129][T19989] rnbd_client L213: map_device: Parameters missing [ 911.280218][T19993] ERROR: Out of memory at tomoyo_memory_ok. [ 911.416578][T20000] syz.0.3355(20000): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 912.929517][T20038] ERROR: Out of memory at tomoyo_memory_ok. [ 913.318498][T20045] rnbd_client L213: map_device: Parameters missing [ 913.885118][T20048] usb usb28: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 914.704755][T20064] FAULT_INJECTION: forcing a failure. [ 914.704755][T20064] name failslab, interval 1, probability 0, space 0, times 0 [ 914.762218][T20064] CPU: 1 UID: 0 PID: 20064 Comm: syz.0.3367 Tainted: G U syzkaller #0 PREEMPT(full) [ 914.762274][T20064] Tainted: [U]=USER [ 914.762286][T20064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 914.762307][T20064] Call Trace: [ 914.762319][T20064] [ 914.762333][T20064] dump_stack_lvl+0x16c/0x1f0 [ 914.762381][T20064] should_fail_ex+0x512/0x640 [ 914.762435][T20064] ? fs_reclaim_acquire+0xae/0x150 [ 914.762484][T20064] should_failslab+0xc2/0x120 [ 914.762529][T20064] __kmalloc_cache_noprof+0x72/0x780 [ 914.762562][T20064] ? __lock_acquire+0x622/0x1c90 [ 914.762605][T20064] ? usb_control_msg+0xbc/0x4a0 [ 914.762661][T20064] ? usb_control_msg+0xbc/0x4a0 [ 914.762709][T20064] usb_control_msg+0xbc/0x4a0 [ 914.762760][T20064] ? __pfx_usb_control_msg+0x10/0x10 [ 914.762820][T20064] hub_ext_port_status+0x14e/0x670 [ 914.762883][T20064] hub_activate+0x6e5/0x1d60 [ 914.762947][T20064] ? __pfx_hub_activate+0x10/0x10 [ 914.762992][T20064] ? find_held_lock+0x2b/0x80 [ 914.763026][T20064] ? do_proc_control+0xe10/0x10a0 [ 914.763083][T20064] hub_resume+0xa8/0x3f0 [ 914.763144][T20064] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 914.763193][T20064] ? __pfx_hub_resume+0x10/0x10 [ 914.763245][T20064] ? __pfx_hcd_bus_resume+0x10/0x10 [ 914.763301][T20064] usb_resume_interface.constprop.0.isra.0+0x2c5/0x3e0 [ 914.763351][T20064] usb_resume_both+0x237/0x960 [ 914.763392][T20064] ? __pfx_usb_resume_both+0x10/0x10 [ 914.763432][T20064] ? mark_held_locks+0x49/0x80 [ 914.763480][T20064] ? __pfx_usb_runtime_resume+0x10/0x10 [ 914.763524][T20064] __rpm_callback+0xc8/0x610 [ 914.763575][T20064] ? __pfx_usb_runtime_resume+0x10/0x10 [ 914.763619][T20064] rpm_callback+0x1b7/0x200 [ 914.763664][T20064] ? __pfx_usb_runtime_resume+0x10/0x10 [ 914.763707][T20064] rpm_resume+0xd16/0x1320 [ 914.763763][T20064] ? __pfx_rpm_resume+0x10/0x10 [ 914.763807][T20064] ? do_raw_spin_lock+0x12c/0x2b0 [ 914.763860][T20064] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 914.763931][T20064] __pm_runtime_resume+0xb6/0x170 [ 914.763984][T20064] usb_autoresume_device+0x23/0xe0 [ 914.764030][T20064] usb_set_configuration+0x3d9/0x1e20 [ 914.764066][T20064] ? sscanf+0xc7/0x100 [ 914.764117][T20064] ? __pfx_sscanf+0x10/0x10 [ 914.764196][T20064] bConfigurationValue_store+0x100/0x180 [ 914.764234][T20064] ? __pfx_bConfigurationValue_store+0x10/0x10 [ 914.764272][T20064] ? find_held_lock+0x2b/0x80 [ 914.764310][T20064] ? sysfs_file_kobj+0xe4/0x290 [ 914.764351][T20064] ? __pfx_bConfigurationValue_store+0x10/0x10 [ 914.764385][T20064] dev_attr_store+0x58/0x80 [ 914.764434][T20064] ? __pfx_dev_attr_store+0x10/0x10 [ 914.764482][T20064] sysfs_kf_write+0xf2/0x150 [ 914.764522][T20064] kernfs_fop_write_iter+0x3af/0x570 [ 914.764553][T20064] ? __pfx_sysfs_kf_write+0x10/0x10 [ 914.764594][T20064] iter_file_splice_write+0xa24/0x12e0 [ 914.764656][T20064] ? __pfx_iter_file_splice_write+0x10/0x10 [ 914.764700][T20064] ? __pfx_copy_splice_read+0x10/0x10 [ 914.764759][T20064] ? __pfx_iter_file_splice_write+0x10/0x10 [ 914.764800][T20064] direct_splice_actor+0x192/0x6c0 [ 914.764839][T20064] splice_direct_to_actor+0x345/0xa30 [ 914.764876][T20064] ? __pfx_direct_splice_actor+0x10/0x10 [ 914.764921][T20064] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 914.764969][T20064] do_splice_direct+0x174/0x240 [ 914.765003][T20064] ? __pfx_do_splice_direct+0x10/0x10 [ 914.765039][T20064] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 914.765104][T20064] ? rw_verify_area+0xcf/0x6c0 [ 914.765151][T20064] do_sendfile+0xb06/0xe50 [ 914.765196][T20064] ? __pfx_do_sendfile+0x10/0x10 [ 914.765238][T20064] ? __x64_sys_futex+0x1e0/0x4c0 [ 914.765284][T20064] ? __x64_sys_futex+0x1e9/0x4c0 [ 914.765335][T20064] __x64_sys_sendfile64+0x1d8/0x220 [ 914.765382][T20064] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 914.765441][T20064] do_syscall_64+0xcd/0xfa0 [ 914.765485][T20064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.765520][T20064] RIP: 0033:0x7f0aaa58f749 [ 914.765549][T20064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 914.765580][T20064] RSP: 002b:00007f0aab426038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 914.765616][T20064] RAX: ffffffffffffffda RBX: 00007f0aaa7e5fa0 RCX: 00007f0aaa58f749 [ 914.765638][T20064] RDX: 0000000000000000 RSI: 000000000000000a RDI: 000000000000000a [ 914.765658][T20064] RBP: 00007f0aaa613f91 R08: 0000000000000000 R09: 0000000000000000 [ 914.765678][T20064] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 914.765697][T20064] R13: 00007f0aaa7e6038 R14: 00007f0aaa7e5fa0 R15: 00007ffe36daba28 [ 914.765743][T20064] [ 915.357113][T20064] hub 1-0:1.0: hub_ext_port_status failed (err = -12) [ 915.369018][T20064] hub 1-0:1.0: USB hub found [ 915.374493][T20064] hub 1-0:1.0: 1 port detected [ 915.669091][T20077] FAULT_INJECTION: forcing a failure. [ 915.669091][T20077] name failslab, interval 1, probability 0, space 0, times 0 [ 915.830255][T20077] CPU: 1 UID: 0 PID: 20077 Comm: syz.4.3372 Tainted: G U syzkaller #0 PREEMPT(full) [ 915.830322][T20077] Tainted: [U]=USER [ 915.830335][T20077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 915.830356][T20077] Call Trace: [ 915.830368][T20077] [ 915.830381][T20077] dump_stack_lvl+0x16c/0x1f0 [ 915.830429][T20077] should_fail_ex+0x512/0x640 [ 915.830481][T20077] ? fs_reclaim_acquire+0xae/0x150 [ 915.830529][T20077] should_failslab+0xc2/0x120 [ 915.830574][T20077] kmem_cache_alloc_noprof+0x75/0x6e0 [ 915.830609][T20077] ? __pfx_map_id_range_down+0x10/0x10 [ 915.830638][T20077] ? security_inode_alloc+0x3b/0x2b0 [ 915.830695][T20077] ? security_inode_alloc+0x3b/0x2b0 [ 915.830743][T20077] security_inode_alloc+0x3b/0x2b0 [ 915.830796][T20077] inode_init_always_gfp+0xce4/0x1030 [ 915.830839][T20077] alloc_inode+0x86/0x240 [ 915.830883][T20077] new_inode+0x22/0x1c0 [ 915.830926][T20077] ? trace_cap_capable+0x18d/0x200 [ 915.830976][T20077] shmem_get_inode+0x19a/0xfb0 [ 915.831025][T20077] ? __vm_enough_memory+0x184/0x3f0 [ 915.831074][T20077] __shmem_file_setup+0x279/0x330 [ 915.831125][T20077] shmem_zero_setup+0x93/0x1a0 [ 915.831159][T20077] __mmap_region+0x2076/0x27a0 [ 915.831194][T20077] ? __pfx___mmap_region+0x10/0x10 [ 915.831221][T20077] ? finish_task_switch.isra.0+0x21c/0xc10 [ 915.831258][T20077] ? rcu_is_watching+0x12/0xc0 [ 915.831304][T20077] ? finish_task_switch.isra.0+0x221/0xc10 [ 915.831339][T20077] ? lockdep_hardirqs_on+0x7c/0x110 [ 915.831380][T20077] ? finish_task_switch.isra.0+0x221/0xc10 [ 915.831450][T20077] ? __pfx___schedule+0x10/0x10 [ 915.831539][T20077] ? trace_cap_capable+0x18d/0x200 [ 915.831600][T20077] mmap_region+0x1ab/0x3f0 [ 915.831633][T20077] ? __get_unmapped_area+0x267/0x440 [ 915.831682][T20077] do_mmap+0xa3e/0x1210 [ 915.831733][T20077] ? __pfx_do_mmap+0x10/0x10 [ 915.831776][T20077] ? __pfx_down_write_killable+0x10/0x10 [ 915.831834][T20077] vm_mmap_pgoff+0x29e/0x470 [ 915.831884][T20077] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 915.831940][T20077] ? __x64_sys_futex+0x1e0/0x4c0 [ 915.831982][T20077] ? __x64_sys_futex+0x1e9/0x4c0 [ 915.832033][T20077] ksys_mmap_pgoff+0x7d/0x5c0 [ 915.832074][T20077] ? xfd_validate_state+0x61/0x180 [ 915.832119][T20077] ? __pfx_ksys_write+0x10/0x10 [ 915.832162][T20077] __x64_sys_mmap+0x125/0x190 [ 915.832217][T20077] do_syscall_64+0xcd/0xfa0 [ 915.832260][T20077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.832300][T20077] RIP: 0033:0x7f0bd718f749 [ 915.832329][T20077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 915.832364][T20077] RSP: 002b:00007f0bd7f98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 915.832397][T20077] RAX: ffffffffffffffda RBX: 00007f0bd73e5fa0 RCX: 00007f0bd718f749 [ 915.832419][T20077] RDX: 00000000000000df RSI: 000000000000e983 RDI: 0000000000000000 [ 915.832439][T20077] RBP: 00007f0bd7213f91 R08: 0000000000000401 R09: 0000000000008000 [ 915.832461][T20077] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 915.832481][T20077] R13: 00007f0bd73e6038 R14: 00007f0bd73e5fa0 R15: 00007ffdc087a358 [ 915.832527][T20077] [ 916.423259][T20088] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input139 [ 916.559400][T20076] Process accounting paused [ 917.787274][ T30] audit: type=1800 audit(4294967353.798:24): pid=20114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3380" name="dbroot" dev="configfs" ino=85318 res=0 errno=0 [ 917.808462][T20114] Setting dangerous option i915.mitigations - tainting kernel [ 918.191529][T19446] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 919.050181][T20132] rnbd_client L213: map_device: Parameters missing [ 919.089411][T20135] ERROR: Out of memory at tomoyo_memory_ok. [ 919.322606][T20140] program syz.4.3386 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 921.749929][T20181] usb usb38: usbfs: process 20181 (syz.4.3394) did not claim interface 2 before use [ 922.720375][T20187] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3396'. [ 924.064459][T20209] ERROR: Out of memory at tomoyo_memory_ok. [ 925.609514][T20226] futex_wake_op: syz.5.3406 tries to shift op by -2048; fix this program [ 925.629731][T20229] block nbd8: NBD_DISCONNECT [ 927.227017][T20254] usb usb28: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 928.430386][T20265] ovs_ÿþÿþ?: entered promiscuous mode [ 929.104514][T20278] ERROR: Out of memory at tomoyo_memory_ok. [ 930.006699][T20289] blktrace: Concurrent blktraces are not allowed on loop2 [ 930.459623][T20298] rnbd_client L213: map_device: Parameters missing [ 930.682656][T20301] ERROR: Out of memory at tomoyo_memory_ok. [ 931.869774][T20334] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 932.615492][T20352] ERROR: Out of memory at tomoyo_memory_ok. [ 934.078428][T20376] ERROR: Out of memory at tomoyo_memory_ok. [ 934.759262][T20380] FAULT_INJECTION: forcing a failure. [ 934.759262][T20380] name failslab, interval 1, probability 0, space 0, times 0 [ 934.790097][T20380] CPU: 1 UID: 0 PID: 20380 Comm: syz.6.3445 Tainted: G U syzkaller #0 PREEMPT(full) [ 934.790152][T20380] Tainted: [U]=USER [ 934.790165][T20380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 934.790186][T20380] Call Trace: [ 934.790197][T20380] [ 934.790211][T20380] dump_stack_lvl+0x16c/0x1f0 [ 934.790261][T20380] should_fail_ex+0x512/0x640 [ 934.790311][T20380] ? fs_reclaim_acquire+0xae/0x150 [ 934.790462][T20380] should_failslab+0xc2/0x120 [ 934.790519][T20380] kmem_cache_alloc_noprof+0x75/0x6e0 [ 934.790557][T20380] ? __pfx_map_id_range_down+0x10/0x10 [ 934.790585][T20380] ? security_inode_alloc+0x3b/0x2b0 [ 934.790649][T20380] ? security_inode_alloc+0x3b/0x2b0 [ 934.790707][T20380] security_inode_alloc+0x3b/0x2b0 [ 934.790763][T20380] inode_init_always_gfp+0xce4/0x1030 [ 934.790806][T20380] ? __pfx_mqueue_fill_super+0x10/0x10 [ 934.790853][T20380] alloc_inode+0x86/0x240 [ 934.790900][T20380] new_inode+0x22/0x1c0 [ 934.790950][T20380] ? __pfx_mqueue_fill_super+0x10/0x10 [ 934.790995][T20380] mqueue_get_inode+0x2e/0xdd0 [ 934.791042][T20380] ? sget_fc+0x808/0xc20 [ 934.791083][T20380] ? __pfx_mqueue_fill_super+0x10/0x10 [ 934.791130][T20380] mqueue_fill_super+0x14d/0x260 [ 934.791181][T20380] get_tree_nodev+0xdd/0x190 [ 934.791222][T20380] mqueue_get_tree+0xf1/0x130 [ 934.791268][T20380] vfs_get_tree+0x8e/0x340 [ 934.791322][T20380] fc_mount_longterm+0x1a/0x270 [ 934.791389][T20380] mq_init_ns+0x426/0x620 [ 934.791456][T20380] copy_ipcs+0x2d6/0x550 [ 934.791512][T20380] create_new_namespaces+0x20a/0xa90 [ 934.791553][T20380] ? security_capable+0x7e/0x260 [ 934.791605][T20380] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 934.791651][T20380] ksys_unshare+0x45b/0xa40 [ 934.791697][T20380] ? __pfx_ksys_unshare+0x10/0x10 [ 934.791747][T20380] ? xfd_validate_state+0x61/0x180 [ 934.791807][T20380] __x64_sys_unshare+0x31/0x40 [ 934.791848][T20380] do_syscall_64+0xcd/0xfa0 [ 934.791897][T20380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.791933][T20380] RIP: 0033:0x7fa25938f749 [ 934.791962][T20380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 934.791995][T20380] RSP: 002b:00007fa25a160038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 934.792029][T20380] RAX: ffffffffffffffda RBX: 00007fa2595e6180 RCX: 00007fa25938f749 [ 934.792052][T20380] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 934.792073][T20380] RBP: 00007fa259413f91 R08: 0000000000000000 R09: 0000000000000000 [ 934.792094][T20380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 934.792114][T20380] R13: 00007fa2595e6218 R14: 00007fa2595e6180 R15: 00007ffeba08d268 [ 934.792159][T20380] [ 935.543133][T20387] ERROR: Out of memory at tomoyo_memory_ok. [ 937.002748][T20409] ERROR: Out of memory at tomoyo_memory_ok. [ 938.138931][T20415] ERROR: Out of memory at tomoyo_memory_ok. [ 939.204282][T20418] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3456'. [ 940.681464][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 940.687964][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 940.903327][T20442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3463'. [ 940.931624][T20442] rnbd_client L213: map_device: Parameters missing [ 941.189664][T20448] ERROR: Out of memory at tomoyo_memory_ok. [ 941.555998][T20450] ERROR: Out of memory at tomoyo_memory_ok. [ 941.653576][T20441] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 941.660102][T20441] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 941.667716][T20441] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 941.677862][T20441] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 941.681638][T20441] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 941.765056][T20464] device-mapper: ioctl: Invalid ioctl structure: name ¢, dev 200010002 [ 941.905367][T20460] zswap: compressor not available [ 942.254797][T20471] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3471'. [ 942.512435][T20485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3472'. [ 942.817014][T20490] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3474'. [ 942.915756][T20496] rnbd_client L213: map_device: Parameters missing [ 942.973068][ T8563] Bluetooth: hci4: command 0x0406 tx timeout [ 943.381520][T20491] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.458881][T20505] ERROR: Out of memory at tomoyo_memory_ok. [ 943.687309][ T8563] Bluetooth: hci1: command 0x0406 tx timeout [ 943.693527][ T8563] Bluetooth: hci3: command 0x0406 tx timeout [ 943.701168][T19446] Bluetooth: hci2: command 0x0406 tx timeout [ 944.332633][T20524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3483'. [ 944.371952][T20524] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3483'. [ 944.451770][T20524] nbd: must specify at least one socket [ 945.750326][T20532] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 945.756432][ T8563] Bluetooth: hci3: command 0x0406 tx timeout [ 945.769899][T20532] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 945.770507][T20532] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 945.770717][T20532] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 946.862651][T20557] ERROR: Out of memory at tomoyo_memory_ok. [ 947.187288][ T8563] Bluetooth: hci4: command 0x0406 tx timeout [ 947.227447][T20538] Process accounting resumed [ 947.487420][T20561] ERROR: Out of memory at tomoyo_memory_ok. [ 947.757313][ T8563] Bluetooth: hci2: command 0x0406 tx timeout [ 947.832040][ T8563] Bluetooth: hci1: command 0x0406 tx timeout [ 947.838238][T19446] Bluetooth: hci3: command 0x0406 tx timeout [ 949.053140][T20596] ERROR: Out of memory at tomoyo_memory_ok. [ 951.308954][T20628] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 951.369871][T20628] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 951.444619][T20628] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 951.519085][T20628] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 952.003675][T20657] FAULT_INJECTION: forcing a failure. [ 952.003675][T20657] name failslab, interval 1, probability 0, space 0, times 0 [ 952.019710][T20656] rnbd_client L213: map_device: Parameters missing [ 952.069373][T20657] CPU: 0 UID: 0 PID: 20657 Comm: syz.6.3512 Tainted: G U syzkaller #0 PREEMPT(full) [ 952.069424][T20657] Tainted: [U]=USER [ 952.069435][T20657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 952.069454][T20657] Call Trace: [ 952.069465][T20657] [ 952.069476][T20657] dump_stack_lvl+0x16c/0x1f0 [ 952.069522][T20657] should_fail_ex+0x512/0x640 [ 952.069573][T20657] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 952.069614][T20657] should_failslab+0xc2/0x120 [ 952.069662][T20657] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 952.069697][T20657] ? set_normalized_timespec64+0x69/0xc0 [ 952.069742][T20657] ? __d_alloc+0x32/0xae0 [ 952.069787][T20657] ? __d_alloc+0x32/0xae0 [ 952.069821][T20657] __d_alloc+0x32/0xae0 [ 952.069874][T20657] d_alloc_pseudo+0x1c/0xc0 [ 952.069924][T20657] alloc_file_pseudo+0xcf/0x230 [ 952.069976][T20657] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 952.070029][T20657] ? hugetlbfs_get_inode+0x31f/0x730 [ 952.070074][T20657] hugetlb_file_setup+0x4ce/0x620 [ 952.070119][T20657] ksys_mmap_pgoff+0x189/0x5c0 [ 952.070170][T20657] __x64_sys_mmap+0x125/0x190 [ 952.070226][T20657] do_syscall_64+0xcd/0xfa0 [ 952.070270][T20657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.070305][T20657] RIP: 0033:0x7fa25938f749 [ 952.070331][T20657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 952.070364][T20657] RSP: 002b:00007fa25a181038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 952.070395][T20657] RAX: ffffffffffffffda RBX: 00007fa2595e6090 RCX: 00007fa25938f749 [ 952.070417][T20657] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 952.070438][T20657] RBP: 00007fa259413f91 R08: 0000000000000401 R09: 0000300000000000 [ 952.070458][T20657] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 952.070478][T20657] R13: 00007fa2595e6128 R14: 00007fa2595e6090 R15: 00007ffeba08d268 [ 952.070523][T20657] [ 952.268366][ C0] vkms_vblank_simulate: vblank timer overrun [ 952.355460][ T8563] Bluetooth: hci4: command 0x0406 tx timeout [ 952.868809][ T8563] Bluetooth: hci1: unexpected event 0x20 length: 123 > 7 [ 953.394848][ T8563] Bluetooth: hci2: command 0x0406 tx timeout [ 953.448663][T20674] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 953.461386][T20674] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 953.473730][T20674] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 953.477423][ T8563] Bluetooth: hci1: command 0x0406 tx timeout [ 953.494076][T20674] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 953.736007][T20691] FAULT_INJECTION: forcing a failure. [ 953.736007][T20691] name failslab, interval 1, probability 0, space 0, times 0 [ 953.812710][T20691] CPU: 1 UID: 0 PID: 20691 Comm: syz.4.3520 Tainted: G U syzkaller #0 PREEMPT(full) [ 953.812761][T20691] Tainted: [U]=USER [ 953.812773][T20691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 953.812791][T20691] Call Trace: [ 953.812801][T20691] [ 953.812815][T20691] dump_stack_lvl+0x16c/0x1f0 [ 953.812870][T20691] should_fail_ex+0x512/0x640 [ 953.812923][T20691] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 953.812962][T20691] should_failslab+0xc2/0x120 [ 953.813018][T20691] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 953.813055][T20691] ? __d_alloc+0x32/0xae0 [ 953.813096][T20691] ? __pfx_mqueue_fill_super+0x10/0x10 [ 953.813142][T20691] ? __d_alloc+0x32/0xae0 [ 953.813175][T20691] __d_alloc+0x32/0xae0 [ 953.813207][T20691] ? mqueue_get_inode+0x285/0xdd0 [ 953.813254][T20691] ? __pfx_mqueue_fill_super+0x10/0x10 [ 953.813294][T20691] d_make_root+0x3e/0x90 [ 953.813333][T20691] mqueue_fill_super+0x175/0x260 [ 953.813378][T20691] get_tree_nodev+0xdd/0x190 [ 953.813416][T20691] mqueue_get_tree+0xf1/0x130 [ 953.813486][T20691] vfs_get_tree+0x8e/0x340 [ 953.813538][T20691] fc_mount_longterm+0x1a/0x270 [ 953.813588][T20691] mq_init_ns+0x426/0x620 [ 953.813644][T20691] copy_ipcs+0x2d6/0x550 [ 953.813701][T20691] create_new_namespaces+0x20a/0xa90 [ 953.813740][T20691] ? security_capable+0x7e/0x260 [ 953.813794][T20691] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 953.813837][T20691] ksys_unshare+0x45b/0xa40 [ 953.813891][T20691] ? __pfx_ksys_unshare+0x10/0x10 [ 953.813939][T20691] ? xfd_validate_state+0x61/0x180 [ 953.814000][T20691] __x64_sys_unshare+0x31/0x40 [ 953.814045][T20691] do_syscall_64+0xcd/0xfa0 [ 953.814088][T20691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.814122][T20691] RIP: 0033:0x7f0bd718f749 [ 953.814147][T20691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 953.814179][T20691] RSP: 002b:00007f0bd7f98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 953.814211][T20691] RAX: ffffffffffffffda RBX: 00007f0bd73e5fa0 RCX: 00007f0bd718f749 [ 953.814233][T20691] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 953.814253][T20691] RBP: 00007f0bd7213f91 R08: 0000000000000000 R09: 0000000000000000 [ 953.814272][T20691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 953.814291][T20691] R13: 00007f0bd73e6038 R14: 00007f0bd73e5fa0 R15: 00007ffdc087a358 [ 953.814337][T20691] [ 954.349304][T20696] ERROR: Out of memory at tomoyo_memory_ok. [ 954.416775][T20698] bridge0: port 3(veth0_to_bridge) entered blocking state [ 954.442307][T20698] bridge0: port 3(veth0_to_bridge) entered disabled state [ 954.480391][T20698] veth0_to_bridge: entered allmulticast mode [ 954.513317][T20698] veth0_to_bridge: entered promiscuous mode [ 954.542974][T20698] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 954.632662][T20698] bridge0: port 3(veth0_to_bridge) entered blocking state [ 954.640053][T20698] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 954.748199][ T8563] Bluetooth: hci4: command 0x0406 tx timeout [ 955.211744][T20710] kexec: Could not allocate control_code_buffer [ 955.475556][ T8563] Bluetooth: hci3: command 0x0406 tx timeout [ 955.481644][T19446] Bluetooth: hci2: command 0x0406 tx timeout [ 955.543737][T19446] Bluetooth: hci1: command 0x0406 tx timeout [ 956.747491][T20729] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 956.767532][T20729] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 956.778194][T20740] ERROR: Out of memory at tomoyo_memory_ok. [ 956.807628][T20729] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 956.813857][T20729] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 957.948595][T20764] ERROR: Out of memory at tomoyo_memory_ok. [ 958.408707][ T8563] Bluetooth: hci4: command 0x0406 tx timeout [ 958.833762][ T8563] Bluetooth: hci2: command 0x0406 tx timeout [ 958.891043][T19446] Bluetooth: hci3: command 0x0406 tx timeout [ 958.898626][ T8563] Bluetooth: hci1: command 0x0406 tx timeout [ 959.121331][T20773] ERROR: Out of memory at tomoyo_memory_ok. [ 959.858942][T20780] can: request_module (can-proto-4) failed. [ 960.339375][T20779] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 960.353530][T20779] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 960.380434][T20779] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 960.386642][T20779] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 960.685468][T20801] FAULT_INJECTION: forcing a failure. [ 960.685468][T20801] name failslab, interval 1, probability 0, space 0, times 0 [ 960.699523][T20801] CPU: 1 UID: 0 PID: 20801 Comm: syz.6.3553 Tainted: G U syzkaller #0 PREEMPT(full) [ 960.699572][T20801] Tainted: [U]=USER [ 960.699584][T20801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 960.699603][T20801] Call Trace: [ 960.699614][T20801] [ 960.699627][T20801] dump_stack_lvl+0x16c/0x1f0 [ 960.699672][T20801] should_fail_ex+0x512/0x640 [ 960.699729][T20801] should_failslab+0xc2/0x120 [ 960.699775][T20801] kmem_cache_alloc_noprof+0x75/0x6e0 [ 960.699811][T20801] ? getname_flags.part.0+0x4c/0x550 [ 960.699867][T20801] ? getname_flags.part.0+0x4c/0x550 [ 960.699915][T20801] getname_flags.part.0+0x4c/0x550 [ 960.699970][T20801] getname_flags+0x93/0xf0 [ 960.700010][T20801] __x64_sys_execve+0x74/0xb0 [ 960.700046][T20801] do_syscall_64+0xcd/0xfa0 [ 960.700096][T20801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 960.700129][T20801] RIP: 0033:0x7fa25938f749 [ 960.700155][T20801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 960.700188][T20801] RSP: 002b:00007fa25a1a2038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 960.700219][T20801] RAX: ffffffffffffffda RBX: 00007fa2595e5fa0 RCX: 00007fa25938f749 [ 960.700240][T20801] RDX: 0000200000000100 RSI: 0000000000000000 RDI: 0000200000000000 [ 960.700258][T20801] RBP: 00007fa25a1a2090 R08: 0000000000000000 R09: 0000000000000000 [ 960.700276][T20801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 960.700294][T20801] R13: 00007fa2595e6038 R14: 00007fa2595e5fa0 R15: 00007ffeba08d268 [ 960.700336][T20801] [ 961.327537][T20811] ERROR: Out of memory at tomoyo_memory_ok. [ 961.607328][T20814] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3557'. [ 961.830979][ T8563] Bluetooth: hci4: command 0x0406 tx timeout [ 962.394459][ T8563] Bluetooth: hci1: command 0x0406 tx timeout [ 962.400773][ T8563] Bluetooth: hci3: command 0x0406 tx timeout [ 962.406847][ T8563] Bluetooth: hci2: command 0x0406 tx timeout [ 963.197767][T20823] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 963.204125][T20823] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 963.214624][T20823] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 963.221236][T20823] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 963.790887][T20846] bond0: option all_slaves_active: invalid value (15) [ 964.391598][T20847] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 964.399475][T20847] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 964.409374][T20847] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 964.422620][T20847] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 964.857557][T20872] : Can't lookup blockdev [ 964.952546][T20874] ERROR: Out of memory at tomoyo_memory_ok. [ 965.930362][T20883] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 965.937053][T20883] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 965.945207][T20883] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 965.957466][T20883] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 967.332635][ T8563] Bluetooth: hci4: command 0x0406 tx timeout [ 967.969139][ T8563] Bluetooth: hci1: command 0x0406 tx timeout [ 967.969198][ T8563] Bluetooth: hci3: command 0x0406 tx timeout [ 967.969232][ T8563] Bluetooth: hci2: command 0x0406 tx timeout [ 968.618876][T20923] ERROR: Out of memory at tomoyo_memory_ok. [ 968.973000][T20926] FAULT_INJECTION: forcing a failure. [ 968.973000][T20926] name failslab, interval 1, probability 0, space 0, times 0 [ 969.036446][T20926] CPU: 0 UID: 0 PID: 20926 Comm: syz.4.3579 Tainted: G U syzkaller #0 PREEMPT(full) [ 969.036497][T20926] Tainted: [U]=USER [ 969.036507][T20926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 969.036527][T20926] Call Trace: [ 969.036537][T20926] [ 969.036549][T20926] dump_stack_lvl+0x16c/0x1f0 [ 969.036596][T20926] should_fail_ex+0x512/0x640 [ 969.036641][T20926] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 969.036677][T20926] should_failslab+0xc2/0x120 [ 969.036716][T20926] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 969.036749][T20926] ? proc_alloc_inode+0x25/0x200 [ 969.036793][T20926] ? __pfx_proc_alloc_inode+0x10/0x10 [ 969.036828][T20926] ? proc_alloc_inode+0x25/0x200 [ 969.036863][T20926] proc_alloc_inode+0x25/0x200 [ 969.036900][T20926] alloc_inode+0x64/0x240 [ 969.036940][T20926] new_inode+0x22/0x1c0 [ 969.036983][T20926] proc_sys_make_inode+0x47/0x5c0 [ 969.037028][T20926] proc_sys_lookup+0x273/0x400 [ 969.037069][T20926] ? __pfx_proc_sys_lookup+0x10/0x10 [ 969.037116][T20926] ? __d_lookup+0x266/0x4a0 [ 969.037165][T20926] ? __pfx_proc_sys_lookup+0x10/0x10 [ 969.037205][T20926] lookup_open.isra.0+0x4da/0x1580 [ 969.037267][T20926] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 969.037344][T20926] ? mnt_get_write_access+0x1e9/0x2f0 [ 969.037393][T20926] path_openat+0x893/0x2cb0 [ 969.037437][T20926] ? __pfx_path_openat+0x10/0x10 [ 969.037471][T20926] ? __lock_acquire+0xb8a/0x1c90 [ 969.037514][T20926] do_filp_open+0x20b/0x470 [ 969.037546][T20926] ? __pfx_do_filp_open+0x10/0x10 [ 969.037605][T20926] ? alloc_fd+0x471/0x7d0 [ 969.037644][T20926] do_sys_openat2+0x11b/0x1d0 [ 969.037686][T20926] ? __pfx_do_sys_openat2+0x10/0x10 [ 969.037742][T20926] __x64_sys_openat+0x174/0x210 [ 969.037784][T20926] ? __pfx___x64_sys_openat+0x10/0x10 [ 969.037828][T20926] ? syscall_user_dispatch+0x78/0x140 [ 969.037866][T20926] do_syscall_64+0xcd/0xfa0 [ 969.037904][T20926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.037933][T20926] RIP: 0033:0x7f0bd718f749 [ 969.037957][T20926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 969.037986][T20926] RSP: 002b:00007f0bd7f77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 969.038015][T20926] RAX: ffffffffffffffda RBX: 00007f0bd73e6090 RCX: 00007f0bd718f749 [ 969.038035][T20926] RDX: 0000000000040001 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 969.038055][T20926] RBP: 00007f0bd7213f91 R08: 0000000000000000 R09: 0000000000000000 [ 969.038074][T20926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 969.038092][T20926] R13: 00007f0bd73e6128 R14: 00007f0bd73e6090 R15: 00007ffdc087a358 [ 969.038132][T20926] [ 969.065816][T20930] ERROR: Out of memory at tomoyo_memory_ok. [ 969.393648][T20934] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3581'. [ 969.853873][T20931] netlink: 146 bytes leftover after parsing attributes in process `syz.5.3580'. [ 971.321426][T20963] ERROR: Out of memory at tomoyo_memory_ok. [ 971.496406][T20965] FAULT_INJECTION: forcing a failure. [ 971.496406][T20965] name failslab, interval 1, probability 0, space 0, times 0 [ 971.517713][T20965] CPU: 0 UID: 0 PID: 20965 Comm: syz.6.3590 Tainted: G U syzkaller #0 PREEMPT(full) [ 971.517761][T20965] Tainted: [U]=USER [ 971.517770][T20965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 971.517784][T20965] Call Trace: [ 971.517792][T20965] [ 971.517802][T20965] dump_stack_lvl+0x16c/0x1f0 [ 971.517837][T20965] should_fail_ex+0x512/0x640 [ 971.517875][T20965] ? __kmalloc_noprof+0xca/0x880 [ 971.517917][T20965] should_failslab+0xc2/0x120 [ 971.517951][T20965] __kmalloc_noprof+0xdd/0x880 [ 971.517991][T20965] ? alloc_pipe_info+0x1ec/0x590 [ 971.518025][T20965] ? alloc_pipe_info+0x1ec/0x590 [ 971.518051][T20965] alloc_pipe_info+0x1ec/0x590 [ 971.518082][T20965] splice_direct_to_actor+0x77d/0xa30 [ 971.518115][T20965] ? __pfx_direct_splice_actor+0x10/0x10 [ 971.518142][T20965] ? __pfx_aa_file_perm+0x10/0x10 [ 971.518172][T20965] ? find_held_lock+0x2b/0x80 [ 971.518197][T20965] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 971.518221][T20965] ? get_pid_task+0xfc/0x250 [ 971.518263][T20965] do_splice_direct+0x174/0x240 [ 971.518288][T20965] ? __pfx_do_splice_direct+0x10/0x10 [ 971.518313][T20965] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 971.518361][T20965] ? rw_verify_area+0xcf/0x6c0 [ 971.518388][T20965] do_sendfile+0xb06/0xe50 [ 971.518419][T20965] ? __pfx_do_sendfile+0x10/0x10 [ 971.518445][T20965] ? __fget_files+0x20e/0x3c0 [ 971.518478][T20965] __x64_sys_sendfile64+0x1d8/0x220 [ 971.518509][T20965] ? ksys_write+0x1ac/0x250 [ 971.518536][T20965] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 971.518578][T20965] do_syscall_64+0xcd/0xfa0 [ 971.518610][T20965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.518635][T20965] RIP: 0033:0x7fa25938f749 [ 971.518654][T20965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 971.518677][T20965] RSP: 002b:00007fa25a1a2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 971.518700][T20965] RAX: ffffffffffffffda RBX: 00007fa2595e5fa0 RCX: 00007fa25938f749 [ 971.518721][T20965] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 971.518736][T20965] RBP: 00007fa25a1a2090 R08: 0000000000000000 R09: 0000000000000000 [ 971.518750][T20965] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 971.518765][T20965] R13: 00007fa2595e6038 R14: 00007fa2595e5fa0 R15: 00007ffeba08d268 [ 971.518796][T20965] [ 973.851349][T19349] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 975.355252][T21033] ERROR: Out of memory at tomoyo_memory_ok. [ 976.226591][T21055] ERROR: Out of memory at tomoyo_memory_ok. [ 976.443395][T21057] input: f¬ as /devices/virtual/input/input140 [ 976.835444][T21061] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3614'. [ 977.172567][T21072] hub 1-0:1.0: USB hub found [ 977.177905][T21072] hub 1-0:1.0: 1 port detected [ 977.304338][T21072] Process accounting paused [ 978.221559][T21086] ERROR: Out of memory at tomoyo_memory_ok. [ 978.248915][T21082] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 978.287680][T21082] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 978.315467][T21082] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 978.336663][T21082] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 978.362879][T21087] Invalid ELF header magic: != ELF [ 978.945944][T21097] ERROR: Out of memory at tomoyo_memory_ok. [ 979.363597][T21112] FAULT_INJECTION: forcing a failure. [ 979.363597][T21112] name failslab, interval 1, probability 0, space 0, times 0 [ 979.377866][T21112] CPU: 1 UID: 0 PID: 21112 Comm: syz.6.3627 Tainted: G U syzkaller #0 PREEMPT(full) [ 979.377914][T21112] Tainted: [U]=USER [ 979.377925][T21112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 979.377943][T21112] Call Trace: [ 979.377954][T21112] [ 979.377967][T21112] dump_stack_lvl+0x16c/0x1f0 [ 979.378014][T21112] should_fail_ex+0x512/0x640 [ 979.378063][T21112] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 979.378106][T21112] should_failslab+0xc2/0x120 [ 979.378150][T21112] __kvmalloc_node_noprof+0x141/0x9c0 [ 979.378192][T21112] ? seq_read_iter+0x830/0x12d0 [ 979.378242][T21112] ? alloc_pages_bulk_noprof+0xac5/0x1410 [ 979.378286][T21112] ? seq_read_iter+0x830/0x12d0 [ 979.378333][T21112] seq_read_iter+0x830/0x12d0 [ 979.378386][T21112] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 979.378524][T21112] kernfs_fop_read_iter+0x46c/0x610 [ 979.378573][T21112] copy_splice_read+0x618/0xc20 [ 979.378625][T21112] ? __pfx_copy_splice_read+0x10/0x10 [ 979.378665][T21112] ? look_up_lock_class+0x59/0x150 [ 979.378713][T21112] ? lockdep_init_map_type+0x5c/0x280 [ 979.378762][T21112] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 979.378802][T21112] ? __pfx_copy_splice_read+0x10/0x10 [ 979.378834][T21112] do_splice_read+0x285/0x370 [ 979.378873][T21112] splice_direct_to_actor+0x2a1/0xa30 [ 979.378911][T21112] ? __pfx_direct_splice_actor+0x10/0x10 [ 979.378953][T21112] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 979.378986][T21112] ? get_pid_task+0xfc/0x250 [ 979.379042][T21112] do_splice_direct+0x174/0x240 [ 979.379077][T21112] ? __pfx_do_splice_direct+0x10/0x10 [ 979.379111][T21112] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 979.379172][T21112] ? rw_verify_area+0xcf/0x6c0 [ 979.379208][T21112] do_sendfile+0xb06/0xe50 [ 979.379252][T21112] ? __pfx_do_sendfile+0x10/0x10 [ 979.379288][T21112] ? __fget_files+0x20e/0x3c0 [ 979.379332][T21112] __x64_sys_sendfile64+0x1d8/0x220 [ 979.379372][T21112] ? ksys_write+0x1ac/0x250 [ 979.379408][T21112] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 979.379464][T21112] do_syscall_64+0xcd/0xfa0 [ 979.379508][T21112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 979.379544][T21112] RIP: 0033:0x7fa25938f749 [ 979.379582][T21112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 979.379618][T21112] RSP: 002b:00007fa25a1a2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 979.379649][T21112] RAX: ffffffffffffffda RBX: 00007fa2595e5fa0 RCX: 00007fa25938f749 [ 979.379669][T21112] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 979.379687][T21112] RBP: 00007fa25a1a2090 R08: 0000000000000000 R09: 0000000000000000 [ 979.379705][T21112] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 979.379722][T21112] R13: 00007fa2595e6038 R14: 00007fa2595e5fa0 R15: 00007ffeba08d268 [ 979.379763][T21112] [ 979.689579][T19349] Bluetooth: hci4: command 0x0406 tx timeout [ 980.034759][T21117] zswap: compressor not available [ 980.295581][T19349] Bluetooth: hci2: command 0x0406 tx timeout [ 980.381324][T19349] Bluetooth: hci1: command 0x0406 tx timeout [ 980.387709][ T8563] Bluetooth: hci3: command 0x0406 tx timeout [ 980.948651][T21143] ERROR: Out of memory at tomoyo_memory_ok. [ 980.980715][T21141] ERROR: Out of memory at tomoyo_memory_ok. [ 982.066539][T21149] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 982.075140][T21149] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 982.091085][T21149] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 982.106930][T21149] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 982.378261][T21161] FAULT_INJECTION: forcing a failure. [ 982.378261][T21161] name failslab, interval 1, probability 0, space 0, times 0 [ 982.479346][T21161] CPU: 0 UID: 0 PID: 21161 Comm: syz.5.3641 Tainted: G U syzkaller #0 PREEMPT(full) [ 982.479405][T21161] Tainted: [U]=USER [ 982.479417][T21161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 982.479435][T21161] Call Trace: [ 982.479446][T21161] [ 982.479459][T21161] dump_stack_lvl+0x16c/0x1f0 [ 982.479506][T21161] should_fail_ex+0x512/0x640 [ 982.479555][T21161] ? __kmalloc_noprof+0xca/0x880 [ 982.479613][T21161] should_failslab+0xc2/0x120 [ 982.479657][T21161] __kmalloc_noprof+0xdd/0x880 [ 982.479708][T21161] ? iter_file_splice_write+0x1cc/0x12e0 [ 982.479751][T21161] ? iter_file_splice_write+0x1cc/0x12e0 [ 982.479785][T21161] iter_file_splice_write+0x1cc/0x12e0 [ 982.479828][T21161] ? kfree+0x2b8/0x6d0 [ 982.479853][T21161] ? copy_splice_read+0x897/0xc20 [ 982.479893][T21161] ? copy_splice_read+0x897/0xc20 [ 982.479929][T21161] ? __pfx_iter_file_splice_write+0x10/0x10 [ 982.479967][T21161] ? __lock_acquire+0xb8a/0x1c90 [ 982.480020][T21161] ? __pfx_copy_splice_read+0x10/0x10 [ 982.480414][T21161] ? __pfx_iter_file_splice_write+0x10/0x10 [ 982.480453][T21161] direct_splice_actor+0x192/0x6c0 [ 982.480491][T21161] splice_direct_to_actor+0x345/0xa30 [ 982.480526][T21161] ? __pfx_direct_splice_actor+0x10/0x10 [ 982.480567][T21161] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 982.480598][T21161] ? get_pid_task+0xfc/0x250 [ 982.480653][T21161] do_splice_direct+0x174/0x240 [ 982.480765][T21161] ? __pfx_do_splice_direct+0x10/0x10 [ 982.480802][T21161] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 982.480860][T21161] ? rw_verify_area+0xcf/0x6c0 [ 982.480897][T21161] do_sendfile+0xb06/0xe50 [ 982.480957][T21161] ? __pfx_do_sendfile+0x10/0x10 [ 982.480991][T21161] ? __fget_files+0x20e/0x3c0 [ 982.481035][T21161] __x64_sys_sendfile64+0x1d8/0x220 [ 982.481077][T21161] ? ksys_write+0x1ac/0x250 [ 982.481113][T21161] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 982.481297][T21161] do_syscall_64+0xcd/0xfa0 [ 982.481343][T21161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 982.481374][T21161] RIP: 0033:0x7f102cb8f749 [ 982.481398][T21161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 982.481431][T21161] RSP: 002b:00007f102d9fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 982.481462][T21161] RAX: ffffffffffffffda RBX: 00007f102cde5fa0 RCX: 00007f102cb8f749 [ 982.481484][T21161] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 982.481503][T21161] RBP: 00007f102d9fe090 R08: 0000000000000000 R09: 0000000000000000 [ 982.481523][T21161] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 982.481542][T21161] R13: 00007f102cde6038 R14: 00007f102cde5fa0 R15: 00007ffd143ba548 [ 982.481586][T21161] [ 983.399211][T19349] Bluetooth: hci4: command 0x0406 tx timeout [ 983.631741][T21179] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 984.115803][ T8563] Bluetooth: hci3: command 0x0406 tx timeout [ 984.115882][T19446] Bluetooth: hci2: command 0x0406 tx timeout [ 984.130107][T19349] Bluetooth: hci1: command 0x0406 tx timeout [ 984.319502][T21191] netlink: 504 bytes leftover after parsing attributes in process `syz.4.3649'. [ 984.442484][T21192] netlink: 504 bytes leftover after parsing attributes in process `syz.4.3649'. [ 984.784092][T21194] FAULT_INJECTION: forcing a failure. [ 984.784092][T21194] name failslab, interval 1, probability 0, space 0, times 0 [ 984.967602][T21194] CPU: 0 UID: 0 PID: 21194 Comm: syz.5.3652 Tainted: G U syzkaller #0 PREEMPT(full) [ 984.967650][T21194] Tainted: [U]=USER [ 984.967661][T21194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 984.967679][T21194] Call Trace: [ 984.967691][T21194] [ 984.967705][T21194] dump_stack_lvl+0x16c/0x1f0 [ 984.967751][T21194] should_fail_ex+0x512/0x640 [ 984.967801][T21194] ? __kmalloc_noprof+0xca/0x880 [ 984.967855][T21194] should_failslab+0xc2/0x120 [ 984.967901][T21194] __kmalloc_noprof+0xdd/0x880 [ 984.967952][T21194] ? kernfs_fop_write_iter+0x237/0x570 [ 984.967992][T21194] ? kernfs_fop_write_iter+0x237/0x570 [ 984.968023][T21194] kernfs_fop_write_iter+0x237/0x570 [ 984.968061][T21194] iter_file_splice_write+0xa24/0x12e0 [ 984.968123][T21194] ? __pfx_iter_file_splice_write+0x10/0x10 [ 984.968166][T21194] ? __pfx_copy_splice_read+0x10/0x10 [ 984.968228][T21194] ? __pfx_iter_file_splice_write+0x10/0x10 [ 984.968267][T21194] direct_splice_actor+0x192/0x6c0 [ 984.968305][T21194] splice_direct_to_actor+0x345/0xa30 [ 984.968342][T21194] ? __pfx_direct_splice_actor+0x10/0x10 [ 984.968384][T21194] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 984.968416][T21194] ? get_pid_task+0xfc/0x250 [ 984.968473][T21194] do_splice_direct+0x174/0x240 [ 984.968508][T21194] ? __pfx_do_splice_direct+0x10/0x10 [ 984.968542][T21194] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 984.968603][T21194] ? rw_verify_area+0xcf/0x6c0 [ 984.968638][T21194] do_sendfile+0xb06/0xe50 [ 984.968681][T21194] ? __pfx_do_sendfile+0x10/0x10 [ 984.968717][T21194] ? __fget_files+0x20e/0x3c0 [ 984.968762][T21194] __x64_sys_sendfile64+0x1d8/0x220 [ 984.968804][T21194] ? ksys_write+0x1ac/0x250 [ 984.968838][T21194] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 984.968895][T21194] do_syscall_64+0xcd/0xfa0 [ 984.968940][T21194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.968975][T21194] RIP: 0033:0x7f102cb8f749 [ 984.969001][T21194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 984.969035][T21194] RSP: 002b:00007f102d9fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 984.969066][T21194] RAX: ffffffffffffffda RBX: 00007f102cde5fa0 RCX: 00007f102cb8f749 [ 984.969089][T21194] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 984.969109][T21194] RBP: 00007f102d9fe090 R08: 0000000000000000 R09: 0000000000000000 [ 984.969136][T21194] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 984.969157][T21194] R13: 00007f102cde6038 R14: 00007f102cde5fa0 R15: 00007ffd143ba548 [ 984.969261][T21194] [ 986.160271][T21206] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 986.205028][T21206] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 986.313807][T21206] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 986.378709][T21206] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 987.696523][T19349] Bluetooth: hci4: command 0x0406 tx timeout [ 988.260697][T19349] Bluetooth: hci3: command 0x0406 tx timeout [ 988.267258][T19446] Bluetooth: hci2: command 0x0406 tx timeout [ 988.343939][T21249] input: f¬ as /devices/virtual/input/input141 [ 988.414206][T19349] Bluetooth: hci1: command 0x0406 tx timeout [ 990.195025][T21274] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3669'. [ 990.516263][T21281] usb usb36: usbfs: process 21281 (syz.4.3670) did not claim interface 0 before use [ 991.356832][T21299] netlink: 334 bytes leftover after parsing attributes in process `syz.0.3673'. [ 991.605786][T21299] netlink: 334 bytes leftover after parsing attributes in process `syz.0.3673'. [ 991.630610][T21302] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3674'. [ 991.734511][T21300] netlink: 334 bytes leftover after parsing attributes in process `syz.0.3673'. [ 992.041533][T21307] ERROR: Out of memory at tomoyo_memory_ok. [ 992.113453][ T30] audit: type=1804 audit(4294967428.494:25): pid=21309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.3675" name="/newroot/sys/kernel/debug/tracing/set_event" dev="tracefs" ino=18 res=1 errno=0 [ 992.673834][T21314] ERROR: Out of memory at tomoyo_memory_ok. [ 994.501247][T21337] FAULT_INJECTION: forcing a failure. [ 994.501247][T21337] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 994.560893][T21337] CPU: 1 UID: 0 PID: 21337 Comm: syz.6.3680 Tainted: G U syzkaller #0 PREEMPT(full) [ 994.560944][T21337] Tainted: [U]=USER [ 994.560955][T21337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 994.560974][T21337] Call Trace: [ 994.560986][T21337] [ 994.560999][T21337] dump_stack_lvl+0x16c/0x1f0 [ 994.561045][T21337] should_fail_ex+0x512/0x640 [ 994.561101][T21337] _copy_to_user+0x32/0xd0 [ 994.561133][T21337] simple_read_from_buffer+0xcb/0x170 [ 994.561187][T21337] proc_fail_nth_read+0x197/0x240 [ 994.561225][T21337] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 994.561266][T21337] ? rw_verify_area+0xcf/0x6c0 [ 994.561298][T21337] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 994.561343][T21337] vfs_read+0x1e4/0xcf0 [ 994.561384][T21337] ? __pfx___mutex_lock+0x10/0x10 [ 994.561426][T21337] ? __pfx_vfs_read+0x10/0x10 [ 994.561472][T21337] ? __fget_files+0x20e/0x3c0 [ 994.561515][T21337] ksys_read+0x12a/0x250 [ 994.561547][T21337] ? __pfx_ksys_read+0x10/0x10 [ 994.561594][T21337] do_syscall_64+0xcd/0xfa0 [ 994.561637][T21337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 994.561670][T21337] RIP: 0033:0x7fa25938e15c [ 994.561696][T21337] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 994.561726][T21337] RSP: 002b:00007fa25a1a2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 994.561757][T21337] RAX: ffffffffffffffda RBX: 00007fa2595e5fa0 RCX: 00007fa25938e15c [ 994.561778][T21337] RDX: 000000000000000f RSI: 00007fa25a1a20a0 RDI: 0000000000000004 [ 994.561797][T21337] RBP: 00007fa25a1a2090 R08: 0000000000000000 R09: 0000000000000000 [ 994.561816][T21337] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000002 [ 994.561835][T21337] R13: 00007fa2595e6038 R14: 00007fa2595e5fa0 R15: 00007ffeba08d268 [ 994.561878][T21337] [ 995.002312][T21344] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 995.399612][T21353] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3684'. [ 996.377312][T21361] ERROR: Out of memory at tomoyo_memory_ok. [ 996.611236][T21364] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3688'. [ 996.767106][T21366] netlink: 504 bytes leftover after parsing attributes in process `syz.6.3689'. [ 996.801156][T21366] netlink: 504 bytes leftover after parsing attributes in process `syz.6.3689'. [ 998.132535][T21374] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 998.208645][T21374] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 998.278204][T21374] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 998.356908][T21374] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 999.038940][T21390] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3696'. [ 999.244211][T19446] Bluetooth: hci4: command 0x0406 tx timeout [ 999.489925][T21401] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3698'. [ 1000.134120][T21410] netlink: 504 bytes leftover after parsing attributes in process `syz.5.3701'. [ 1000.192022][T21410] netlink: 504 bytes leftover after parsing attributes in process `syz.5.3701'. [ 1000.276997][T19349] Bluetooth: hci2: command 0x0406 tx timeout [ 1000.284711][T19446] Bluetooth: hci3: command 0x0406 tx timeout [ 1000.350699][T19446] Bluetooth: hci1: command 0x0406 tx timeout [ 1000.400015][T21413] ERROR: Out of memory at tomoyo_memory_ok. [ 1001.444034][T21420] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1001.451013][T21420] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1001.505814][T21420] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1001.544791][T21420] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1001.792008][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1001.803508][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1002.395280][T21438] ERROR: Out of memory at tomoyo_memory_ok. [ 1003.110827][T21443] ERROR: Out of memory at tomoyo_memory_ok. [ 1003.162900][T19349] Bluetooth: hci4: command 0x0406 tx timeout [ 1003.390293][T21451] ERROR: Out of memory at tomoyo_memory_ok. [ 1003.465663][T19349] Bluetooth: hci2: command 0x0406 tx timeout [ 1003.534097][T19349] Bluetooth: hci3: command 0x0406 tx timeout [ 1003.613705][T19349] Bluetooth: hci1: command 0x0406 tx timeout [ 1003.909064][T21461] ERROR: Out of memory at tomoyo_memory_ok. [ 1005.839167][T21479] FAULT_INJECTION: forcing a failure. [ 1005.839167][T21479] name failslab, interval 1, probability 0, space 0, times 0 [ 1005.872027][T21479] CPU: 0 UID: 0 PID: 21479 Comm: syz.0.3719 Tainted: G U syzkaller #0 PREEMPT(full) [ 1005.872079][T21479] Tainted: [U]=USER [ 1005.872090][T21479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1005.872110][T21479] Call Trace: [ 1005.872120][T21479] [ 1005.872134][T21479] dump_stack_lvl+0x16c/0x1f0 [ 1005.872178][T21479] should_fail_ex+0x512/0x640 [ 1005.872226][T21479] ? fs_reclaim_acquire+0xae/0x150 [ 1005.872273][T21479] should_failslab+0xc2/0x120 [ 1005.872324][T21479] __kmalloc_noprof+0xdd/0x880 [ 1005.872373][T21479] ? kfree+0x252/0x6d0 [ 1005.872399][T21479] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1005.872447][T21479] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1005.872485][T21479] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1005.872536][T21479] tomoyo_check_open_permission+0x2ab/0x3c0 [ 1005.872571][T21479] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1005.872644][T21479] ? lock_acquire+0x179/0x350 [ 1005.872690][T21479] ? find_held_lock+0x2b/0x80 [ 1005.872724][T21479] ? mnt_get_write_access+0x52/0x2f0 [ 1005.872773][T21479] tomoyo_file_open+0x6b/0x90 [ 1005.872820][T21479] security_file_open+0x84/0x1e0 [ 1005.872855][T21479] do_dentry_open+0x596/0x1530 [ 1005.872907][T21479] vfs_open+0x82/0x3f0 [ 1005.872960][T21479] path_openat+0x1de4/0x2cb0 [ 1005.873009][T21479] ? __pfx_path_openat+0x10/0x10 [ 1005.873048][T21479] ? __lock_acquire+0xb8a/0x1c90 [ 1005.873099][T21479] do_filp_open+0x20b/0x470 [ 1005.873137][T21479] ? __pfx_do_filp_open+0x10/0x10 [ 1005.873205][T21479] ? alloc_fd+0x471/0x7d0 [ 1005.873250][T21479] do_sys_openat2+0x11b/0x1d0 [ 1005.873298][T21479] ? __pfx_do_sys_openat2+0x10/0x10 [ 1005.873369][T21479] __x64_sys_openat+0x174/0x210 [ 1005.873418][T21479] ? __pfx___x64_sys_openat+0x10/0x10 [ 1005.873485][T21479] do_syscall_64+0xcd/0xfa0 [ 1005.873527][T21479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.873560][T21479] RIP: 0033:0x7f0aaa58f749 [ 1005.873585][T21479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1005.873619][T21479] RSP: 002b:00007f0aab426038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1005.873650][T21479] RAX: ffffffffffffffda RBX: 00007f0aaa7e5fa0 RCX: 00007f0aaa58f749 [ 1005.873672][T21479] RDX: 0000000000008001 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 1005.873693][T21479] RBP: 00007f0aaa613f91 R08: 0000000000000000 R09: 0000000000000000 [ 1005.873714][T21479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1005.873733][T21479] R13: 00007f0aaa7e6038 R14: 00007f0aaa7e5fa0 R15: 00007ffe36daba28 [ 1005.873777][T21479] [ 1005.873791][T21479] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1006.247946][T21490] ERROR: Out of memory at tomoyo_memory_ok. [ 1006.371399][T21478] zswap: compressor not available [ 1006.595411][T21494] ERROR: Out of memory at tomoyo_memory_ok. [ 1006.845480][T21499] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3723'. [ 1006.878553][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1006.894624][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1006.909073][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1006.923241][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1006.937949][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1006.952102][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1006.965474][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1006.978072][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1006.990986][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1007.004406][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1011.021173][T21514] netlink: 252 bytes leftover after parsing attributes in process `syz.6.3727'. [ 1011.048294][T21514] netlink: 252 bytes leftover after parsing attributes in process `syz.6.3727'. [ 1011.860987][ C0] net_ratelimit: 12966 callbacks suppressed [ 1011.861011][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1011.881081][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1011.894905][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1011.908322][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1011.921820][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1011.934413][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1011.947503][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1011.960628][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1011.973342][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1011.987129][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1016.265364][T21503] FAULT_INJECTION: forcing a failure. [ 1016.265364][T21503] name failslab, interval 1, probability 0, space 0, times 0 [ 1016.428577][T21503] CPU: 1 UID: 0 PID: 21503 Comm: syz.5.3726 Tainted: G U syzkaller #0 PREEMPT(full) [ 1016.428617][T21503] Tainted: [U]=USER [ 1016.428626][T21503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1016.428641][T21503] Call Trace: [ 1016.428649][T21503] [ 1016.428659][T21503] dump_stack_lvl+0x16c/0x1f0 [ 1016.428696][T21503] should_fail_ex+0x512/0x640 [ 1016.428734][T21503] ? __kmalloc_node_track_caller_noprof+0xcb/0x8a0 [ 1016.428772][T21503] should_failslab+0xc2/0x120 [ 1016.428807][T21503] __kmalloc_node_track_caller_noprof+0xde/0x8a0 [ 1016.428841][T21503] ? brnf_init_net+0x42/0x450 [ 1016.428873][T21503] ? __pfx_brnf_init_net+0x10/0x10 [ 1016.428902][T21503] ? kmemdup_noprof+0x29/0x60 [ 1016.428928][T21503] kmemdup_noprof+0x29/0x60 [ 1016.428955][T21503] brnf_init_net+0x42/0x450 [ 1016.428987][T21503] ? __pfx_brnf_init_net+0x10/0x10 [ 1016.429015][T21503] ops_init+0x1e2/0x5f0 [ 1016.429045][T21503] setup_net+0x100/0x390 [ 1016.429072][T21503] ? __pfx_setup_net+0x10/0x10 [ 1016.429100][T21503] ? debug_mutex_init+0x37/0x70 [ 1016.429139][T21503] copy_net_ns+0x2f8/0x690 [ 1016.429173][T21503] create_new_namespaces+0x3ea/0xa90 [ 1016.429210][T21503] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1016.429242][T21503] ksys_unshare+0x45b/0xa40 [ 1016.429276][T21503] ? __pfx_ksys_unshare+0x10/0x10 [ 1016.429310][T21503] ? xfd_validate_state+0x61/0x180 [ 1016.429355][T21503] __x64_sys_unshare+0x31/0x40 [ 1016.429389][T21503] do_syscall_64+0xcd/0xfa0 [ 1016.429422][T21503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.429447][T21503] RIP: 0033:0x7f102cb8f749 [ 1016.429467][T21503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1016.429492][T21503] RSP: 002b:00007f102d9fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1016.429516][T21503] RAX: ffffffffffffffda RBX: 00007f102cde5fa0 RCX: 00007f102cb8f749 [ 1016.429533][T21503] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1016.429548][T21503] RBP: 00007f102cc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1016.429564][T21503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1016.429579][T21503] R13: 00007f102cde6038 R14: 00007f102cde5fa0 R15: 00007ffd143ba548 [ 1016.429612][T21503] [ 1016.727322][T21524] netlink: 'syz.0.3730': attribute type 1 has an invalid length. [ 1016.845131][ C0] net_ratelimit: 12544 callbacks suppressed [ 1016.845163][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1016.864648][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1016.877732][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1016.891888][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1016.905912][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1016.918976][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1016.924169][T21522] ERROR: Out of memory at tomoyo_memory_ok. [ 1016.932950][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1016.951054][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1016.966394][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1016.979507][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1017.294135][T21499] Process accounting resumed [ 1021.829106][ C0] net_ratelimit: 12435 callbacks suppressed [ 1021.829128][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1021.847708][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1021.861191][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1021.873771][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1021.886424][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1021.900709][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1021.913439][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1021.926323][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1021.939415][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1021.954432][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1026.813028][ C0] net_ratelimit: 13215 callbacks suppressed [ 1026.813049][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1026.832110][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1026.845771][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1026.861129][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1026.876333][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1026.889478][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1026.903286][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1026.917146][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1026.930522][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1026.944072][ C0] sched: DL replenish lagged too much [ 1026.950242][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1028.354165][T21541] ERROR: Out of memory at tomoyo_memory_ok. [ 1031.797263][ C0] net_ratelimit: 12512 callbacks suppressed [ 1031.797285][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1031.816631][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1031.830749][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1031.843480][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1031.855911][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1031.868514][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1031.881059][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1031.893699][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1031.906163][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1031.919068][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1036.781210][ C0] net_ratelimit: 11855 callbacks suppressed [ 1036.781237][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1036.801802][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1036.814426][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1036.827375][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1036.840135][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1036.853227][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1036.866740][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1036.880021][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1036.893862][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1036.908916][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1039.391061][T21558] ERROR: Out of memory at tomoyo_memory_ok. [ 1041.765362][ C0] net_ratelimit: 13556 callbacks suppressed [ 1041.765384][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1041.784786][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1041.798338][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1041.811023][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1041.824552][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1041.837496][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1041.850537][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1041.865449][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1041.878702][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1041.892978][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1044.016212][T19446] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1046.749533][ C0] net_ratelimit: 13484 callbacks suppressed [ 1046.749556][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1046.768207][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1046.781399][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1046.794059][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1046.806545][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1046.819220][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1046.831710][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1046.846212][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1046.859240][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1046.872160][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1050.404383][T21562] ERROR: Out of memory at tomoyo_memory_ok. [ 1051.733367][ C0] net_ratelimit: 13034 callbacks suppressed [ 1051.733394][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1051.751987][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1051.764494][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1051.777215][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1051.790051][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1051.802827][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1051.815464][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1051.828770][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1051.841970][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1051.855220][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1056.717531][ C0] net_ratelimit: 13342 callbacks suppressed [ 1056.717560][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1056.736455][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1056.749258][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1056.761988][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1056.774819][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1056.787623][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1056.800207][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1056.813014][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1056.826991][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1056.841649][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1061.499418][T21563] ERROR: Out of memory at tomoyo_memory_ok. [ 1061.701729][ C0] net_ratelimit: 12802 callbacks suppressed [ 1061.701751][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1061.720971][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1061.735806][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1061.748605][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1061.763702][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1061.777168][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1061.789888][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1061.803230][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1061.816513][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1061.832292][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1062.911671][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1062.918201][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1064.121144][T19349] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1064.128275][ T8563] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1064.169773][T19446] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1066.685989][ C0] net_ratelimit: 13145 callbacks suppressed [ 1066.686011][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1066.705070][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1066.718289][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1066.732180][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1066.745937][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1066.760445][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1066.773512][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1066.786601][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1066.799704][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1066.814054][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1071.669910][ C0] net_ratelimit: 12508 callbacks suppressed [ 1071.669931][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1071.689736][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1071.702640][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1071.716825][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1071.729969][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1071.742882][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1071.757661][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1071.771496][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1071.785086][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1071.799296][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1072.597562][T21565] ERROR: Out of memory at tomoyo_memory_ok. [ 1074.818180][T10649] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 1076.654091][ C0] net_ratelimit: 13135 callbacks suppressed [ 1076.654113][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1076.673937][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1076.689488][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1076.703701][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1076.717944][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1076.734842][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1076.748685][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1076.761457][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1076.774401][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1076.787129][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1080.937050][T21561] Bluetooth: hci0: command tx timeout [ 1080.957360][T21549] Bluetooth: hci4: Opcode 0x0c03 failed: -4 [ 1080.979544][T21556] Bluetooth: hci6: Opcode 0x0c03 failed: -4 [ 1080.979658][T21542] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1081.001283][T21552] Bluetooth: hci5: Opcode 0x0c03 failed: -4 [ 1081.638048][ C0] net_ratelimit: 12789 callbacks suppressed [ 1081.638070][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1081.657783][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1081.670350][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1081.683024][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1081.695722][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1081.709535][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1081.722232][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1081.735593][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1081.748787][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1081.762734][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1083.644561][T21566] ERROR: Out of memory at tomoyo_memory_ok. [ 1086.621987][ C0] net_ratelimit: 12223 callbacks suppressed [ 1086.622014][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1086.641778][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1086.655138][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1086.668585][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1086.682477][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1086.695318][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1086.708025][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1086.722040][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1086.736681][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1086.750560][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1091.606199][ C0] net_ratelimit: 12962 callbacks suppressed [ 1091.606221][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1091.626600][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1091.639823][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1091.653074][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1091.666161][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1091.679705][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1091.694809][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1091.711358][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1091.726225][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1091.739671][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1094.669581][T21573] ERROR: Out of memory at tomoyo_memory_ok. [ 1096.574405][T21561] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1096.590372][ C0] net_ratelimit: 12795 callbacks suppressed [ 1096.590392][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1096.590779][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1096.591193][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1096.591569][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1096.591938][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1096.592314][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1096.592788][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1096.593235][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1096.593636][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1096.594028][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1101.574266][ C0] net_ratelimit: 13679 callbacks suppressed [ 1101.574292][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1101.594419][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1101.607656][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1101.621362][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1101.634095][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1101.646695][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1101.659428][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1101.671999][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1101.684830][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1101.698438][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1105.730820][T21574] ERROR: Out of memory at tomoyo_memory_ok. [ 1106.558554][ C0] net_ratelimit: 13449 callbacks suppressed [ 1106.558577][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1106.579779][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1106.594300][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1106.608713][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1106.621668][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1106.634925][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1106.649365][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1106.662847][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1106.676417][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1106.689394][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1110.379449][T19446] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 1111.542463][ C0] net_ratelimit: 13717 callbacks suppressed [ 1111.542484][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1111.561080][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1111.573877][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1111.586883][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1111.599537][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1111.614610][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1111.627538][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1111.640208][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1111.653521][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1111.666567][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1112.805889][T21568] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 1116.526613][ C0] net_ratelimit: 13108 callbacks suppressed [ 1116.526635][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1116.545395][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1116.558244][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1116.571068][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1116.584046][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1116.596840][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1116.609775][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1116.624103][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1116.637925][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1116.650725][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1116.794884][T21575] ERROR: Out of memory at tomoyo_memory_ok. [ 1121.510763][ C0] net_ratelimit: 13331 callbacks suppressed [ 1121.510793][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1121.530800][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1121.543624][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1121.556859][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1121.569526][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1121.582427][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1121.595233][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1121.607942][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1121.620770][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1121.636234][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1124.032512][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1124.039001][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1126.494746][ C0] net_ratelimit: 11828 callbacks suppressed [ 1126.494769][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1126.515131][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1126.527667][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1126.540812][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1126.554888][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1126.570606][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1126.585572][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1126.598939][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1126.612955][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1126.625778][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1127.824954][T21586] ERROR: Out of memory at tomoyo_memory_ok. [ 1131.478660][ C0] net_ratelimit: 12726 callbacks suppressed [ 1131.478691][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1131.497822][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1131.510628][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1131.523857][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1131.537726][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1131.550450][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1131.563303][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1131.575797][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1131.588444][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1131.601126][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1133.657182][T21564] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1133.682897][T21561] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 1133.719386][T19349] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1133.791193][T19349] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1134.042155][T10649] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1134.086133][T21561] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1134.113736][T21561] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1136.124920][T21578] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 1136.463111][ C0] net_ratelimit: 12579 callbacks suppressed [ 1136.463133][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1136.481909][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1136.495238][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1136.508074][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1136.520577][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1136.533808][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1136.546612][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1136.560723][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1136.573240][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1136.586212][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1136.614771][T19349] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1136.636555][T21561] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1136.661240][T19349] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1137.137600][T21561] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1137.285307][T21564] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1138.677083][T21564] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1138.696465][T21564] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1138.716388][T21564] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1138.857864][T21596] ERROR: Out of memory at tomoyo_memory_ok. [ 1140.569105][T19349] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1141.447085][ C0] net_ratelimit: 11677 callbacks suppressed [ 1141.447107][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1141.467170][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1141.481701][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1141.494462][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1141.507148][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1141.521169][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1141.534066][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1141.546715][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1141.559197][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1141.571774][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1143.375122][T21564] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1143.699268][T21564] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1143.719368][T19349] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1143.762791][T21564] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1144.381356][T19349] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1145.489347][T19446] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1146.319631][T21597] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1146.431068][ C0] net_ratelimit: 12970 callbacks suppressed [ 1146.431097][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1146.450090][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1146.462721][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1146.475371][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1146.488200][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1146.501149][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1146.513684][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1146.526630][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1146.539180][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1146.551896][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1147.739682][T10649] Bluetooth: hci10: command tx timeout [ 1147.782919][T10649] Bluetooth: hci9: command tx timeout [ 1149.897616][T21599] ERROR: Out of memory at tomoyo_memory_ok. [ 1151.415358][ C0] net_ratelimit: 13184 callbacks suppressed [ 1151.415380][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1151.435790][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1151.448535][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1151.461948][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1151.474526][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1151.487240][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1151.500057][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1151.512762][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1151.525848][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1151.538587][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1154.494593][T10649] Bluetooth: hci0: command tx timeout [ 1154.513035][T21561] Bluetooth: hci9: command tx timeout [ 1154.518702][T21561] Bluetooth: hci10: command tx timeout [ 1156.399288][ C0] net_ratelimit: 13146 callbacks suppressed [ 1156.399311][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1156.417898][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1156.430640][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1156.443376][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1156.456304][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1156.469125][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1156.481771][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1156.494496][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1156.506998][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1156.519622][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1160.318935][ T31] INFO: task syz.0.3730:21524 blocked for more than 143 seconds. [ 1160.326757][ T31] Tainted: G U syzkaller #0 [ 1160.339951][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1160.349149][ T31] task:syz.0.3730 state:D stack:26408 pid:21524 tgid:21523 ppid:15013 task_flags:0x400140 flags:0x00080003 [ 1160.362281][ T31] Call Trace: [ 1160.365629][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1160.369730][ T31] __schedule+0x1190/0x5de0 [ 1160.375648][ T31] ? __pfx___schedule+0x10/0x10 [ 1160.389412][ T31] ? find_held_lock+0x2b/0x80 [ 1160.394210][ T31] ? schedule+0x2d7/0x3a0 [ 1160.408664][ T31] ? raw_release+0x1f3/0xc00 [ 1160.413375][ T31] schedule+0xe7/0x3a0 [ 1160.428521][ T31] schedule_preempt_disabled+0x13/0x30 [ 1160.434100][ T31] __mutex_lock+0x818/0x1060 [ 1160.448060][ T31] ? raw_release+0x1f3/0xc00 [ 1160.452787][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1160.468021][ T31] ? find_held_lock+0x2b/0x80 [ 1160.472826][ T31] ? raw_release+0x1ee/0xc00 [ 1160.477675][ T31] ? raw_release+0x1f3/0xc00 [ 1160.547614][ T31] ? rtnl_lock+0x9/0x20 [ 1160.552633][ T31] raw_release+0x1f3/0xc00 [ 1160.557216][ T31] ? __pfx_locks_remove_file+0x10/0x10 [ 1160.625350][ T31] __sock_release+0xb3/0x270 [ 1160.656921][ T31] ? __pfx_sock_close+0x10/0x10 [ 1160.661996][ T31] sock_close+0x1c/0x30 [ 1160.666211][ T31] __fput+0x402/0xb70 [ 1160.683711][ T31] task_work_run+0x150/0x240 [ 1160.689397][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1160.694610][ T31] ? futex_wait+0x120/0x380 [ 1160.699834][ T31] get_signal+0x1d0/0x26d0 [ 1160.704353][ T31] ? poll_select_finish+0x376/0x6b0 [ 1160.710196][ T31] ? __pfx_get_signal+0x10/0x10 [ 1160.715302][ T31] ? __pfx_do_futex+0x10/0x10 [ 1160.720818][ T31] arch_do_signal_or_restart+0x8f/0x790 [ 1160.726440][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1160.733244][ T31] ? xfd_validate_state+0x61/0x180 [ 1160.738767][ T31] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1160.744665][ T31] exit_to_user_mode_loop+0x85/0x130 [ 1160.750639][ T31] do_syscall_64+0x426/0xfa0 [ 1160.755320][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1160.761883][ T31] RIP: 0033:0x7f0aaa58f749 [ 1160.766749][ T31] RSP: 002b:00007f0aab426038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 1160.775229][ T31] RAX: 0000000000000003 RBX: 00007f0aaa7e5fa0 RCX: 00007f0aaa58f749 [ 1160.784042][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 1160.793270][ T31] RBP: 00007f0aaa613f91 R08: 0000000000000000 R09: 0000000000000000 [ 1160.801783][ T31] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000000 [ 1160.810334][ T31] R13: 00007f0aaa7e6038 R14: 00007f0aaa7e5fa0 R15: 00007ffe36daba28 [ 1160.818764][ T31] [ 1160.822116][ T31] [ 1160.822116][ T31] Showing all locks held in the system: [ 1160.832775][ T31] 3 locks held by kworker/0:1/10: [ 1160.838936][ T31] #0: ffff88813ff16948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1160.855925][ T31] #1: ffffc900000f7d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1160.869666][ T31] #2: ffffffff900eb408 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x91/0x11f0 [ 1160.879827][ T31] 1 lock held by khungtaskd/31: [ 1160.884731][ T31] #0: ffffffff8e3c45e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1160.895263][ T31] 4 locks held by kworker/1:2/939: [ 1160.900916][ T31] #0: ffff88805b2fe148 ((wq_completion)wg-kex-wg1#10){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1160.912530][ T31] #1: ffffc90003ac7d00 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1160.954317][ T31] #2: ffff88805c235308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1c2/0x880 [ 1160.985305][ T31] #3: ffff88805c24dc60 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x5ac/0x880 [ 1161.025525][ T31] 3 locks held by kworker/0:4/5885: [ 1161.030813][ T31] 4 locks held by kworker/1:4/5899: [ 1161.044940][ T31] #0: ffff88807e303d48 ((wq_completion)wg-kex-wg2#10){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1161.063028][T21605] ERROR: Out of memory at tomoyo_memory_ok. [ 1161.069464][ T31] #1: ffffc900049c7d00 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1161.110691][ T31] #2: ffff888029151308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1c2/0x880 [ 1161.123765][ T31] #3: ffff88805c24f030 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x5ac/0x880 [ 1161.136113][ T31] 3 locks held by kworker/0:5/5939: [ 1161.141367][ T31] #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1161.153163][ T31] #1: ffffc9000ab4fd00 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1161.164066][ T31] #2: ffffffff900eb408 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 1161.175024][ T31] 2 locks held by kworker/u10:0/8553: [ 1161.180444][ T31] 3 locks held by kworker/u10:2/8562: [ 1161.186376][ T31] 3 locks held by kworker/u10:3/8564: [ 1161.191798][ T31] 3 locks held by kworker/u10:5/8667: [ 1161.197781][ T31] 4 locks held by kworker/u10:7/11872: [ 1161.203297][ T31] 5 locks held by kworker/u10:8/12077: [ 1161.209406][ T31] 4 locks held by kworker/u10:13/12084: [ 1161.220116][ T31] 3 locks held by kworker/u10:14/12085: [ 1161.226071][ T31] 3 locks held by kworker/u10:15/12086: [ 1161.231672][ T31] #0: ffff888030321948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1161.243402][ T31] #1: ffffc90004557d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1161.257859][ T31] #2: ffffffff900eb408 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x12/0x30 [ 1161.268325][ T31] 4 locks held by kworker/u10:20/12094: [ 1161.274396][ T31] 4 locks held by kworker/u10:21/12096: [ 1161.280009][ T31] 3 locks held by kworker/u10:24/12446: [ 1161.286150][ T31] 4 locks held by kworker/u10:26/12448: [ 1161.292281][ T31] 3 locks held by kworker/u10:32/12456: [ 1161.298854][ T31] 4 locks held by kworker/u10:37/12463: [ 1161.304949][ T31] 6 locks held by kworker/u10:38/12464: [ 1161.310633][ T31] #0: ffff88801c2dc948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1161.322076][ T31] #1: ffffc90004a47d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1161.334700][ T31] #2: ffff8880346640e0 (&type->s_umount_key#32){++++}-{4:4}, at: super_trylock_shared+0x1e/0xf0 [ 1161.345847][ T31] #3: ffff888034666b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x27a/0x600 [ 1161.356691][ T31] #4: ffff88814dc10950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 [ 1161.366740][ T31] #5: ffff888076db3240 (&ei->i_data_sem){++++}-{4:4}, at: ext4_map_blocks+0x46f/0x1400 [ 1161.377014][ T31] 3 locks held by kworker/u10:39/12465: [ 1161.382976][ T31] 4 locks held by kworker/u10:41/14015: [ 1161.383444][ C0] net_ratelimit: 12346 callbacks suppressed [ 1161.383470][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1161.389455][ T31] 5 locks held by kworker/u10:42/14016: [ 1161.396359][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1161.409311][ T31] 4 locks held by kworker/u10:44/14018: [ 1161.415859][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1161.429083][ T31] 3 locks held by kworker/u10:47/14021: [ 1161.436391][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1161.449448][ T31] 3 locks held by kworker/u10:50/14060: [ 1161.456274][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1161.468957][ T31] 4 locks held by kworker/u10:51/14061: [ 1161.475206][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1161.489507][ T31] 3 locks held by kworker/u10:61/14071: [ 1161.495891][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1161.508092][ T31] 4 locks held by kworker/u10:63/14073: [ 1161.514409][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1161.526999][ T31] 1 lock held by syz.4.2784/17590: [ 1161.533602][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1161.546018][ T31] #0: [ 1161.552728][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1161.565767][ T31] ffffffff900eb408 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 1161.595884][ T31] 2 locks held by syz.0.3730/21524: [ 1161.601150][ T31] #0: ffff888076dc5288 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 1161.612358][ T31] #1: ffffffff900eb408 (rtnl_mutex){+.+.}-{4:4}, at: raw_release+0x1f3/0xc00 [ 1161.621360][ T31] 1 lock held by syz.6.3731/21528: [ 1161.627411][ T31] #0: ffffffff900eb408 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 1161.636843][ T31] 2 locks held by syz.5.3732/21535: [ 1161.642464][ T31] #0: ffffffff900d4fd0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x2d6/0x690 [ 1161.652346][ T31] #1: ffffffff900eb408 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x23/0xb0 [ 1161.663443][ T31] 1 lock held by syz-executor/21582: [ 1161.668777][ T31] #0: ffffffff900eb408 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 1161.678935][ T31] 1 lock held by syz-executor/21584: [ 1161.684712][ T31] #0: ffffffff900eb408 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 1161.695428][ T31] 1 lock held by kworker/0:2/21587: [ 1161.700762][ T31] 1 lock held by syz-executor/21591: [ 1161.708095][ T31] #0: ffffffff900eb408 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 1161.718072][ T31] 1 lock held by syz-executor/21594: [ 1161.723818][ T31] #0: ffffffff900eb408 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 1161.734048][ T31] [ 1161.736421][ T31] ============================================= [ 1161.736421][ T31] [ 1161.747116][ T31] NMI backtrace for cpu 1 [ 1161.747151][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U syzkaller #0 PREEMPT(full) [ 1161.747196][ T31] Tainted: [U]=USER [ 1161.747207][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1161.747226][ T31] Call Trace: [ 1161.747238][ T31] [ 1161.747251][ T31] dump_stack_lvl+0x116/0x1f0 [ 1161.747297][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1161.747349][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1161.747399][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1161.747455][ T31] watchdog+0xf3f/0x1170 [ 1161.747494][ T31] ? rcu_is_watching+0x12/0xc0 [ 1161.747529][ T31] ? __pfx_watchdog+0x10/0x10 [ 1161.747563][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1161.747607][ T31] ? __kthread_parkme+0x19e/0x250 [ 1161.747650][ T31] ? __pfx_watchdog+0x10/0x10 [ 1161.747681][ T31] kthread+0x3c5/0x780 [ 1161.747726][ T31] ? __pfx_kthread+0x10/0x10 [ 1161.747776][ T31] ? rcu_is_watching+0x12/0xc0 [ 1161.747810][ T31] ? __pfx_kthread+0x10/0x10 [ 1161.747858][ T31] ret_from_fork+0x675/0x7d0 [ 1161.747902][ T31] ? __pfx_kthread+0x10/0x10 [ 1161.747951][ T31] ret_from_fork_asm+0x1a/0x30 [ 1161.748015][ T31] [ 1161.748027][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1161.878467][ C0] NMI backtrace for cpu 0 [ 1161.878498][ C0] CPU: 0 UID: 0 PID: 12085 Comm: kworker/u10:14 Tainted: G U syzkaller #0 PREEMPT(full) [ 1161.878537][ C0] Tainted: [U]=USER [ 1161.878547][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1161.878565][ C0] Workqueue: wg-kex-wg0 wg_packet_handshake_send_worker [ 1161.878606][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 1161.878635][ C0] Code: 46 81 56 00 48 89 df 5b e9 ed 2e 5c 00 be 03 00 00 00 5b e9 c2 93 e5 02 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 34 24 65 48 8b 15 78 d8 e4 11 65 8b 05 89 d8 e4 [ 1161.878661][ C0] RSP: 0018:ffffc90000006a30 EFLAGS: 00000246 [ 1161.878681][ C0] RAX: 0000000000000000 RBX: ffff88809661e640 RCX: ffffffff893160da [ 1161.878699][ C0] RDX: ffff888059be9e40 RSI: ffffffff8931524d RDI: 0000000000000005 [ 1161.878717][ C0] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 1161.878733][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88809661e6d0 [ 1161.878750][ C0] R13: 0000000000000000 R14: ffff88809661e698 R15: ffff888033296000 [ 1161.878767][ C0] FS: 0000000000000000(0000) GS:ffff888124a0d000(0000) knlGS:0000000000000000 [ 1161.878793][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1161.878810][ C0] CR2: 0000001b2fa00ff8 CR3: 000000000e182000 CR4: 00000000003526f0 [ 1161.878827][ C0] Call Trace: [ 1161.878836][ C0] [ 1161.878845][ C0] __dev_queue_xmit+0x302/0x4490 [ 1161.878895][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1161.878936][ C0] ? __lock_acquire+0x622/0x1c90 [ 1161.878973][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 1161.879014][ C0] ? __lock_acquire+0x622/0x1c90 [ 1161.879053][ C0] ? nf_nat_ipv6_fn+0xff/0x2e0 [ 1161.879091][ C0] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 1161.879126][ C0] ? ip6table_mangle_hook+0xcb/0x770 [ 1161.879170][ C0] ? find_held_lock+0x2b/0x80 [ 1161.879197][ C0] ? __pfx_ip6table_mangle_hook+0x10/0x10 [ 1161.879245][ C0] br_dev_queue_push_xmit+0x272/0x8a0 [ 1161.879272][ C0] ? find_held_lock+0x2b/0x80 [ 1161.879299][ C0] ? nf_hook+0x4a0/0x7a0 [ 1161.879327][ C0] ? nf_hook_slow+0x132/0x200 [ 1161.879351][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1161.879380][ C0] ? nf_hook+0x4aa/0x7a0 [ 1161.879408][ C0] ? __skb_ext_del+0xc2/0x340 [ 1161.879447][ C0] br_nf_dev_queue_xmit+0x6e0/0x2b20 [ 1161.879489][ C0] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 1161.879525][ C0] br_nf_post_routing+0x8e7/0x1190 [ 1161.879559][ C0] ? __pfx_br_nf_post_routing+0x10/0x10 [ 1161.879591][ C0] nf_hook_slow+0xbe/0x200 [ 1161.879617][ C0] nf_hook+0x45e/0x780 [ 1161.879642][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1161.879670][ C0] ? __pfx_nf_hook+0x10/0x10 [ 1161.879698][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1161.879726][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 1161.879764][ C0] ? ret_from_fork+0x675/0x7d0 [ 1161.879804][ C0] ? __pfx_ip6table_mangle_hook+0x10/0x10 [ 1161.879849][ C0] br_forward_finish+0xcd/0x130 [ 1161.879875][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1161.879904][ C0] br_nf_hook_thresh+0x307/0x410 [ 1161.879936][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1161.879966][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 1161.879998][ C0] ? lock_acquire+0x179/0x350 [ 1161.880035][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1161.880063][ C0] ? net_generic+0xea/0x2a0 [ 1161.880100][ C0] br_nf_forward_finish+0x66a/0xba0 [ 1161.880132][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1161.880162][ C0] br_nf_forward_ip.part.0+0x609/0x810 [ 1161.880199][ C0] br_nf_forward+0xf0f/0x1be0 [ 1161.880234][ C0] ? __pfx_br_nf_forward+0x10/0x10 [ 1161.880266][ C0] nf_hook_slow+0xbe/0x200 [ 1161.880292][ C0] nf_hook+0x45e/0x780 [ 1161.880316][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1161.880344][ C0] ? __pfx_nf_hook+0x10/0x10 [ 1161.880371][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1161.880403][ C0] __br_forward+0x1be/0x5b0 [ 1161.880429][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1161.880463][ C0] br_flood+0x39c/0x650 [ 1161.880514][ C0] br_handle_frame_finish+0x1117/0x1f00 [ 1161.880552][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1161.880592][ C0] ? ip6t_do_table+0xc25/0x1c30 [ 1161.880634][ C0] ? nf_hook_slow+0x132/0x200 [ 1161.880660][ C0] br_nf_hook_thresh+0x307/0x410 [ 1161.880691][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1161.880727][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 1161.880759][ C0] ? ip6table_mangle_hook+0xcb/0x770 [ 1161.880802][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1161.880835][ C0] ? __pfx_ip6table_mangle_hook+0x10/0x10 [ 1161.880877][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1161.880920][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1161.880966][ C0] br_nf_pre_routing_finish_ipv6+0x76a/0xfc0 [ 1161.881000][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1161.881037][ C0] br_nf_pre_routing_ipv6+0x3cd/0x8c0 [ 1161.881072][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 1161.881106][ C0] ? lock_acquire+0x179/0x350 [ 1161.881144][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 1161.881180][ C0] ? net_generic+0xea/0x2a0 [ 1161.881212][ C0] br_nf_pre_routing+0x860/0x15b0 [ 1161.881248][ C0] br_handle_frame+0xb28/0x14e0 [ 1161.881282][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1161.881316][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1161.881354][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1161.881384][ C0] __netif_receive_skb_core.constprop.0+0xa25/0x4bd0 [ 1161.881433][ C0] ? kmem_cache_free+0x2d4/0x6c0 [ 1161.881462][ C0] ? kfree_skbmem+0x1a4/0x1f0 [ 1161.881505][ C0] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 1161.881548][ C0] ? kfree_skbmem+0x1a4/0x1f0 [ 1161.881581][ C0] ? kfree_skbmem+0x1a4/0x1f0 [ 1161.881615][ C0] ? sk_skb_reason_drop+0x136/0x1a0 [ 1161.881646][ C0] ? ip6_mc_input+0x515/0xf60 [ 1161.881672][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 1161.881697][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1161.881724][ C0] ? __lock_acquire+0x622/0x1c90 [ 1161.881763][ C0] ? process_backlog+0x3e7/0x15e0 [ 1161.881801][ C0] __netif_receive_skb_one_core+0xb0/0x1e0 [ 1161.881843][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 1161.881886][ C0] ? lock_acquire+0x179/0x350 [ 1161.881926][ C0] ? process_backlog+0x3e7/0x15e0 [ 1161.881964][ C0] __netif_receive_skb+0x1d/0x160 [ 1161.882004][ C0] process_backlog+0x439/0x15e0 [ 1161.882048][ C0] __napi_poll.constprop.0+0xba/0x550 [ 1161.882088][ C0] ? skb_defer_free_flush+0x149/0x280 [ 1161.882120][ C0] net_rx_action+0x97f/0xef0 [ 1161.882164][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1161.882205][ C0] ? mark_held_locks+0x49/0x80 [ 1161.882241][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1161.882275][ C0] ? tmigr_handle_remote+0x132/0x380 [ 1161.882309][ C0] ? run_timer_base+0x121/0x190 [ 1161.882345][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 1161.882383][ C0] handle_softirqs+0x219/0x8e0 [ 1161.882417][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1161.882449][ C0] ? kernel_fpu_end+0x59/0x70 [ 1161.882481][ C0] do_softirq+0xb2/0xf0 [ 1161.882509][ C0] [ 1161.882518][ C0] [ 1161.882527][ C0] __local_bh_enable_ip+0x100/0x120 [ 1161.882558][ C0] kernel_fpu_end+0x5e/0x70 [ 1161.882583][ C0] blake2s_compress+0x7b/0xe0 [ 1161.882610][ C0] blake2s_final+0xc9/0x150 [ 1161.882634][ C0] hmac.constprop.0+0x252/0x420 [ 1161.882677][ C0] ? __pfx_hmac.constprop.0+0x10/0x10 [ 1161.882716][ C0] ? __asan_memcpy+0x3c/0x60 [ 1161.882748][ C0] ? __pfx_encode_point+0x10/0x10 [ 1161.882791][ C0] kdf.constprop.0+0x1a1/0x280 [ 1161.882832][ C0] ? __pfx_kdf.constprop.0+0x10/0x10 [ 1161.882872][ C0] ? __pfx_curve25519+0x10/0x10 [ 1161.882903][ C0] ? kdf.constprop.0+0x223/0x280 [ 1161.882946][ C0] ? __pfx_mix_hash+0x10/0x10 [ 1161.882987][ C0] mix_dh+0xd2/0x130 [ 1161.883025][ C0] ? __pfx_mix_dh+0x10/0x10 [ 1161.883071][ C0] wg_noise_handshake_create_initiation+0x337/0x610 [ 1161.883120][ C0] ? __pfx_wg_noise_handshake_create_initiation+0x10/0x10 [ 1161.883167][ C0] ? find_held_lock+0x2b/0x80 [ 1161.883197][ C0] ? ktime_get_coarse_with_offset+0x1af/0x240 [ 1161.883233][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1161.883265][ C0] ? ktime_get_coarse_with_offset+0x1c1/0x240 [ 1161.883299][ C0] ? ktime_get_coarse_with_offset+0x150/0x240 [ 1161.883337][ C0] wg_packet_send_handshake_initiation+0x19a/0x360 [ 1161.883373][ C0] ? __pfx_wg_packet_send_handshake_initiation+0x10/0x10 [ 1161.883425][ C0] wg_packet_handshake_send_worker+0x1c/0x30 [ 1161.883458][ C0] process_one_work+0x9cf/0x1b70 [ 1161.883512][ C0] ? __pfx_kfree_rcu_monitor+0x10/0x10 [ 1161.883555][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1161.883609][ C0] ? assign_work+0x1a0/0x250 [ 1161.883648][ C0] worker_thread+0x6c8/0xf10 [ 1161.883680][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1161.883703][ C0] kthread+0x3c5/0x780 [ 1161.883742][ C0] ? __pfx_kthread+0x10/0x10 [ 1161.883781][ C0] ? rcu_is_watching+0x12/0xc0 [ 1161.883809][ C0] ? __pfx_kthread+0x10/0x10 [ 1161.883848][ C0] ret_from_fork+0x675/0x7d0 [ 1161.883885][ C0] ? __pfx_kthread+0x10/0x10 [ 1161.883924][ C0] ret_from_fork_asm+0x1a/0x30 [ 1161.883970][ C0] [ 1162.808941][T21597] Bluetooth: hci0: command tx timeout [ 1162.814440][T21597] Bluetooth: hci9: command tx timeout [ 1162.832677][T21597] Bluetooth: hci4: command tx timeout [ 1162.851094][T21597] Bluetooth: hci10: command tx timeout [ 1166.367596][ C0] net_ratelimit: 10312 callbacks suppressed [ 1166.367625][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1166.389716][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1166.402362][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1166.416784][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1166.432241][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1166.445182][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1166.457972][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1166.471493][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1166.484237][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0) [ 1166.497648][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:69:3c:a8:e2:db, vlan:0)