last executing test programs: 2m49.789388044s ago: executing program 0 (id=2190): mmap$auto(0x0, 0x2, 0x80000000df, 0x14, 0x401, 0x8000) r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) sendmmsg$auto(r0, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x4}, 0x1000000000028, 0x0, 0x1, 0x3e0}, 0x800}, 0x4, 0x4008) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x154) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x100, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x23, 0x80805, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd1\x00', 0x8000, 0x0) ioctl$auto_BLKRRPART(r3, 0x125f, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000180), 0x509a40, 0x0) write$auto(r2, &(0x7f00000010c0)='/dev/audio1\x00\x02\xd6\xa49\'.\xda&\xc2\x01\xb7|\xbb\xaa\xa4\xa5\x12i/(b\x91\xbb', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x37, 0xa, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x7, 0x3, 0x800, 0x80000023, 0x200000000000007, 0x6d42, 0xc, 0x2495dae0, 0x6]}, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x16240, 0x0) execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000600)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\x00\x00/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a(\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8L\x84j\x8c\xec\xdf\x1a\xbd\xc5\x94\xb9\xb7\xd5\xa4\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12\x16\xb8*\xa9\xc9\xe81\x9d\x06\xbbC\x17\xbb\xe6|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x874\xab?\xc8\x82\xe5\x8f\xb7\x91\xc2\xbe\xb2\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5') 2m48.771789536s ago: executing program 0 (id=2194): ioctl$auto_BLKROTATIONAL(0xffffffffffffffff, 0x127e, 0x0) mmap$auto(0x0, 0x20009, 0x7ff, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000580)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9\xe8\xb2\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6E*\xc9\xdd.q\xdbAX\xf6\xfaD\xcdz\xbc~\xf30LE\xb5\x18Wf\xd3\x9b\\\x1c\xbb^\xfb9\xe5\x1b:\xa4\xdd\x81\x91\\\xbc\x1fUl\xfa)\xbf\x9dPV\xae\xa9\x9c)\x01|\xfe\xd0!Rx\a\xc4\xb1$\x8eE\xc2j\x83sLS\xa8H\xf6\xf2,R\x90:\x8fx\xab\x90\xfe$h\x80!\xe2\nY#\xee\x1b}O=\x8bn\xd7zZ\x18\xa7\x9e~\x94k\x8e\xdba\xf2\xc3G\x8egR3\x1d\x01J\x87\x14(}\f\xb1}%N|z,\xbe\x1fB\xd3\xeb\xec\x83X\x8f\x97\x95\xfd\xed\xe6wt\x1d\xb3\xa8\xfb)L~}\x9f\xbf\xd0\xc9\x9d\x82-C\xc3Ez@\x8c\xbf\xa2 \x88\\\r6M\x83', 0x4, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_DEL(r0, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002e00)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fbdbdf2503000000040002000800010006000000"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x80a, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x801, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x2, 0x1d2d, 0x3, 0xffff, 0x15f4da0e, 0x6, 0x9, 0xfffffffffffffffd, 0x8, 0x4, 0xfca, 0x9, 0xfffffffffffffffe, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2c, 0x1, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0xfffffffffffffff7, 0x5, 0x19, r2, 0x7) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x7f, 0x0) unshare$auto(0x40000080) settimeofday$auto(0x0, &(0x7f0000000100)={0x0, 0x40c}) getsockopt$auto(0xffffffffffffffff, 0x10002, 0x4, 0x0, &(0x7f0000000040)=0x2000000) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000140)='/proc/swaps\x00', 0x40400, 0x0) 2m44.836611098s ago: executing program 0 (id=2198): mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x0, 0x0) r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x10, 0x0, 0x9) io_uring_setup$auto(0x1, 0x0) connect$auto(0x3, 0x0, 0x55) ioctl$auto(0x3, 0x89e0, 0x38) mmap$auto(0x0, 0x2000d, 0x3, 0xeb1, 0x404, 0x10008000) sysfs$auto(0x2, 0x1f, 0x0) fsopen$auto(0x0, 0x1) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x50b880, 0x0) r3 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) read$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(r3, 0x0, 0x17) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_SET_SERVICE(r4, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000005400)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x4000000) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3dd) mmap$auto(0x0, 0xa, 0xb7ed, 0xeb1, 0x0, 0x8002) close_range$auto(0x2, r0, 0x0) ioctl$auto_KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card1/pcm0p/sub0/xrun_injection\x00', 0x0, 0x0) r6 = ioctl$auto_TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000040)) sendmsg$auto_NL80211_CMD_SET_STATION(r6, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x88120000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x7}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x5}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_MAX_HW_TIMESTAMP_PEERS={0x6, 0x143, 0x5}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0xfffffffc}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x40040) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) 2m43.727231215s ago: executing program 0 (id=2202): r0 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x40, 0x0) read$auto_ftrace_subsystem_filter_fops_trace_events(r0, &(0x7f0000000100)=""/216, 0xd8) r1 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(r1, &(0x7f00000000c0)="621c1bfe595046ab5c98199adf6ad9cdc5b2fc8d6d76e6021e1dcedc5f00e8fdffff00c291dfb4000001bf9f34dc422231cf4d40d4", 0x35) r2 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x2, 0x0) ioctl$auto_FBIOPAN_DISPLAY(r3, 0x4606, &(0x7f0000000440)="9b58b4fccbcd800000100000000000000025000000d1627cc84d61f3d07771b09e2c91eb271fd2f826dcc129e3a136d030996f8769497d9621bcd869c6f014922a060000000000000028a0784539e00ad178298ec54bf55f716653ee64518c92a24409be055f93546773a695c31a9a53ef754e8ca43619e9a71b76f8e8aeb15a4019883dbfd1") bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@l2tp={0x2, 0x0, @multicast2, 0x4}, 0x54) mmap$auto(0x0, 0x4, 0x4200000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x4bc, r5, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@HWSIM_ATTR_FREQ={0x8, 0x13, 0x8001}, @HWSIM_ATTR_RADIO_ID={0x8, 0xa, 0x1}, @HWSIM_ATTR_PMSR_RESULT={0x498, 0x1c, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0x44c, 0x5, 0x0, 0x1, [{0x440, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_RESP={0x3d4, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_DATA={0xf4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0xf1f}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0x13, 0x14, 'MAC80211_HWSIM\x00'}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8, 0x3, 0xffffffff}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_VARIANCE={0xc, 0x11, 0x8001}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES={0x8, 0x4, 0x7}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES={0x8, 0x4, 0xfffffffe}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_VARIANCE={0xc, 0x11, 0xfffffffffffffe01}, @NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8, 0x3, 0x10001}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG={0x8, 0x9, 0x800}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0x62}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_SPREAD={0x8, 0xa, 0x6}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8, 0x3, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RX_RATE={0x1c, 0xc, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_HE_DCM={0x5, 0x7, 0xe}, @HWSIM_RATE_INFO_ATTR_HE_DCM={0x5, 0x7, 0xff}, @HWSIM_RATE_INFO_ATTR_LEGACY={0x6, 0x3, 0x8e3}]}, @NL80211_PMSR_FTM_RESP_ATTR_LCI={0x13, 0x13, 'MAC80211_HWSIM\x00'}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8, 0x3, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG={0x8, 0x9, 0xffffffff}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_VARIANCE={0xc, 0x11, 0x64f}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_DURATION={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6}]}]}, @NL80211_PMSR_RESP_ATTR_DATA={0x2d8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6, 0x2, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES={0x8, 0x4, 0x10000}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_AVG={0xc, 0xd, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x6c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0x80}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0x9}, @NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST={0x5, 0x8, 0x1}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0x2}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG={0x8, 0x9, 0x1}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_TX_RATE={0xc, 0xb, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_EHT_GI={0x5, 0xa, 0x1}]}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0xfd}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_VARIANCE={0xc, 0x11, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x88, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RSSI_SPREAD={0x8, 0xa, 0xd0a6}, @NL80211_PMSR_FTM_RESP_ATTR_RX_RATE={0xc, 0xc, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_N_BOUNDED_CH={0x5, 0x9, 0x8}]}, @NL80211_PMSR_FTM_RESP_ATTR_RX_RATE={0x3c, 0xc, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_HE_RU_ALLOC={0x5, 0x8, 0xe}, @HWSIM_RATE_INFO_ATTR_LEGACY={0x6, 0x3, 0x5}, @HWSIM_RATE_INFO_ATTR_NSS={0x5, 0x4, 0xf0}, @HWSIM_RATE_INFO_ATTR_NSS={0x5, 0x4, 0x4b}, @HWSIM_RATE_INFO_ATTR_MCS={0x5, 0x2, 0x81}, @HWSIM_RATE_INFO_ATTR_EHT_GI={0x5, 0xa, 0x3}, @HWSIM_RATE_INFO_ATTR_HE_RU_ALLOC={0x5, 0x8, 0x4}]}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST={0x5, 0x8, 0x81}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_AVG={0xc, 0x10, 0x1ff}, @NL80211_PMSR_FTM_RESP_ATTR_TX_RATE={0xc, 0xb, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_HE_RU_ALLOC={0x5, 0x8, 0x6}]}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0x10}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_BURST_DURATION={0x5, 0x7, 0xba}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0x13, 0x14, 'MAC80211_HWSIM\x00'}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_BURST_DURATION={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0x61e}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0xc6}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_BURST_DURATION={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0x3e}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_DURATION={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_RESP_ATTR_TX_RATE={0x1c, 0xb, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_BW={0x5}, @HWSIM_RATE_INFO_ATTR_BW={0x5, 0x5, 0xe}, @HWSIM_RATE_INFO_ATTR_HE_RU_ALLOC={0x5, 0x8, 0x3}]}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES={0x8, 0x4, 0xeba}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_VARIANCE={0xc, 0x11, 0xda3}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0xffffffffffffffff}, @NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0x5}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0xd}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_AVG={0xc, 0xd, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_DIST_AVG={0xc, 0x10, 0x7}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6, 0x2, 0x1000}, @NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0xc478673}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6, 0x2, 0x8}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG={0x8, 0x9, 0x6c}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES={0x8, 0x4, 0x2}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0x9255}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG={0x8, 0x9, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_TX_RATE={0x2c, 0xb, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_EHT_RU_ALLOC={0x5, 0xb, 0x9}, @HWSIM_RATE_INFO_ATTR_LEGACY={0x6, 0x3, 0x8}, @HWSIM_RATE_INFO_ATTR_HE_DCM={0x5, 0x7, 0x7f}, @HWSIM_RATE_INFO_ATTR_HE_GI={0x5, 0x6, 0x1}, @HWSIM_RATE_INFO_ATTR_HE_DCM={0x5, 0x7, 0x9d}]}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_VARIANCE={0xc, 0x11, 0x6f4}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG={0x8, 0x9, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_LCI={0x13, 0x13, 'MAC80211_HWSIM\x00'}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_AVG={0xc, 0xd, 0x4}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0xffffffffffffff7f}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6, 0x2, 0x7}, @NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0x8}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0xe}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0x4}]}]}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x66, 0x1, "6b074ccd6dcf3891b543b8004df8a752d9e2a1f0729e6681abe3905ce26957e840379d8c6fad9e9377379fd47c7f3467de1d0e6ae268b1947cc424e5e2702f05de674da3bd353a9b75b718ca14a40df6c9f813f017212cd32804fad90d3dc0c69c87"}]}, {0x4}, {0x4}]}, @NL80211_PMSR_ATTR_PEERS={0x48, 0x5, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_RESP={0x14, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x1}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x58}]}, @NL80211_PMSR_PEER_ATTR_RESP={0x24, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x2}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x4}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x4}]}, {0x4}]}]}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x24040000}, 0x8018880) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x10, 0x0, 0xc) getsockopt$auto(r2, 0x0, 0x26, 0x0, &(0x7f00000000c0)=0x9010c) r6 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TCP_METRICS_CMD_GET(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2m43.453827465s ago: executing program 0 (id=2205): clock_getres$auto(0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x60042, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) ioctl$auto_SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000040)="ef3438014fdd4a67a20d2308eab8ca95f204ff6776619680c55e0d02228c875d60925615489712ac126d884c21672ceae4ad7c35a8dc3f1f") madvise$auto(0x0, 0x4, 0x3) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x8002, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r1, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) 2m43.040241602s ago: executing program 0 (id=2206): socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x10, 0x2, 0xf) r1 = bpf$auto(0x0, &(0x7f0000000080)=@bpf_attr_4={0x1e, r0, 0xffffffff}, 0xd) bpf$auto(0x2, &(0x7f0000000080)=@iter_create={r1, 0x98}, 0x5) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/query\x00', 0x321a00, 0x0) r3 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) close_range$auto(0x2, 0xa, 0x0) dup2$auto(r3, r3) bpf$auto_BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)=@link_update={r3, @new_prog_fd=r2, 0x401, @old_prog_fd=r2}, 0x7) 2m39.528618561s ago: executing program 1 (id=2216): sendmsg$auto_IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000881) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r0, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x288202, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x2, 0xa, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ttyrd/power/runtime_active_time\x00', 0x8000, 0x0) socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000180)={0x40, 0x1ff, 0x9}) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000240)=""/154, 0x9a) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\x00\x80\x00\x00\x00\x00\x00j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2\x00', 0x5) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r2, 0x0, 0x3f1) getdents$auto(0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(r1, 0xa, 0x80) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/scsi/device_info\x00', 0x40100, 0x0) 2m37.460256129s ago: executing program 2 (id=2221): mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x10, 0x0, 0x9) io_uring_setup$auto(0x1, 0x0) connect$auto(0x3, 0x0, 0x55) ioctl$auto(0x3, 0x89e0, 0x38) mmap$auto(0x0, 0x2000d, 0x3, 0xeb1, 0x404, 0x10008000) sysfs$auto(0x2, 0x1f, 0x0) fsopen$auto(0x0, 0x1) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x50b880, 0x0) r3 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) read$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(r3, 0x0, 0x17) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_SET_SERVICE(r4, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000005400)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x4000000) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3dd) mmap$auto(0x0, 0xa, 0xb7ed, 0xeb1, 0x0, 0x8002) close_range$auto(0x2, r0, 0x0) ioctl$auto_KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card1/pcm0p/sub0/xrun_injection\x00', 0x0, 0x0) r6 = ioctl$auto_TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000040)) sendmsg$auto_NL80211_CMD_SET_STATION(r6, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x88120000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x7}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x5}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_MAX_HW_TIMESTAMP_PEERS={0x6, 0x143, 0x5}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0xfffffffc}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x40040) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) 2m37.114987076s ago: executing program 1 (id=2222): mmap$auto(0x0, 0x8, 0x80000000000000df, 0x10004000eb5, 0xffffffffffffffff, 0x8000008000) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x100000000000027, 0x0) fsopen$auto(0x0, 0x1) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000200)='7\x00\\\xa0\x04|\x03\'\x00\xc9\n\xbf\xb9\x12\xfa\x00\x00\xcfk', 0xb7f) shmget$auto(0x100000000, 0x3, 0x79e56dc9) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) open(0x0, 0x521d03, 0x0) r1 = socket(0x11, 0x3, 0x9) r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x2400, 0x0) socket(0xa, 0x6, 0x0) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x781c04, 0x0) socket(0x28, 0x4, 0xfffffffe) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x4, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r1, @ANYRES8=r3], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x2000c082) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) r4 = socket(0x33, 0x80003, 0x300) setsockopt$auto(r4, 0x107, 0x2, 0x0, 0x28) mmap$auto(0x7, 0x40004040009, 0x100000000000000f, 0x14, r2, 0xfffefffffffffff5) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto(r5, 0x10e, 0xb, 0x0, 0x0) timer_create$auto(0x9, 0x0, 0x0) 2m37.003826051s ago: executing program 2 (id=2223): mmap$auto(0x0, 0x2, 0x80000000df, 0x14, 0x401, 0x8000) r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) sendmmsg$auto(r0, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x4}, 0x1000000000028, 0x0, 0x1, 0x3e0}, 0x800}, 0x4, 0x4008) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x154) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x23, 0x80805, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd1\x00', 0x8000, 0x0) ioctl$auto_BLKRRPART(r3, 0x125f, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000180), 0x509a40, 0x0) write$auto(r2, &(0x7f00000010c0)='/dev/audio1\x00\x02\xd6\xa49\'.\xda&\xc2\x01\xb7|\xbb\xaa\xa4\xa5\x12i/(b\x91\xbb', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x37, 0xa, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x7, 0x3, 0x800, 0x80000023, 0x200000000000007, 0x6d42, 0xc, 0x2495dae0, 0x6]}, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x16240, 0x0) execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000600)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\x00\x00/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a(\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8L\x84j\x8c\xec\xdf\x1a\xbd\xc5\x94\xb9\xb7\xd5\xa4\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12\x16\xb8*\xa9\xc9\xe81\x9d\x06\xbbC\x17\xbb\xe6|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x874\xab?\xc8\x82\xe5\x8f\xb7\x91\xc2\xbe\xb2\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5') mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x0, 0xfa9d, 0x8001, &(0x7f0000000280)=0xc9e, 0x400, 0x1) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) read$auto_proc_sessionid_operations_base(0xffffffffffffffff, &(0x7f00000000c0)=""/4073, 0xfe9) finit_module$auto(0x3, 0xfffffffffffffffe, 0x400000000004) 2m36.245595181s ago: executing program 3 (id=2225): r0 = socket(0x2, 0x1, 0x106) close_range$auto(0xffffffffffffffff, r0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0x8000000000000003, 0x15) madvise$auto(0x10000, 0x6, 0x3) mmap$auto(0x200, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/vlan/config\x00', 0xc0000, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x101300, 0x0) signalfd$auto(0xffffffff, 0x0, 0x8) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) io_uring_setup$auto(0x6, 0x0) ioctl$auto(0xc8, 0x800454d7, 0x5c8d) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/dev\x00', 0x40100, 0x0) pread64$auto(r2, 0x0, 0x10005, 0x830) write$auto(r1, 0x0, 0x100) socket(0xa, 0x3, 0xff) setsockopt$auto(0x400000000000003, 0x29, 0x16, 0x0, 0x20056b) socket(0x1d, 0x2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) io_uring_setup$auto(0x4079, 0x0) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) 2m35.734111938s ago: executing program 2 (id=2226): mmap$auto(0x0, 0xa, 0xdf, 0x10, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:00/power/control\x00', 0x159000, 0x0) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88ds\x1cJ\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) r1 = socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getsockopt$auto_SO_SNDLOWAT(r1, 0x0, 0x13, 0x0, 0x0) read$auto(r0, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x400000003) r3 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000040)="8c9700089d1b208365d5b5d112dbab029ed13881d2f2c7ba2eb01c3db79f77fdc2bb50c64a925009dff4cd1aca925c57100112d88f73348a54396800ed598a0e5500d7c0cbb6b1e91d", 0x40000000001243}, 0x4, 0x0) ioctl$auto(r3, 0x400454ca, 0x38) mmap$auto(0x3ff, 0x4020009, 0xdf, 0xeb1, r2, 0x8000) r5 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/sg0\x00', 0x101000, 0x0) process_madvise$auto_MADV_NORMAL(r1, &(0x7f00000001c0)={&(0x7f0000000240)="531bedf42bf4963ec068477080ff926376b948073c3744a1b3526146b0d01a85e700b7a079704aa5f2010bb43013a84682c2bfa9af640441ba2ba18ab28584fb17f0202b2312c8f547af80622a8915ebd0fbd599ba39009043b3cba56cbd5e9e1c606058e59d26330edb1e9ab49e6836d3ec0fa3d6153c817fc53c9dac72da47f9819a3bc70f88f3f63d6a7750a6a23e1b28fe", 0x7}, 0x5, 0x0, 0x6) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$auto_BLKSECTGET2(r5, 0x1267, 0x200000000000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x73) r6 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x20b42, 0x0) write$auto(0x3, 0x0, 0x100082) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r6, 0x40045010, 0x0) write$auto(0x3, 0x0, 0xffd8) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) 2m35.70852938s ago: executing program 3 (id=2227): r0 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$auto_TUNSETPERSIST(r0, 0x400454cb, &(0x7f0000000000)) r2 = ioctl$auto_TUNGETIFF2(r1, 0x800454d2, &(0x7f0000000040)=0x581c) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000000c0), r0) ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000100)={"a34ed35ea5b56d8a90e667acc9004b031e1dca36c09fd98a847945617defe336", 0x9, 0xb3, 0xfffffffa, 0xc, 0xc, 0xffffffffffffffff}) sendmsg$auto_TIPC_NL_ADDR_LEGACY_GET(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x11c, r3, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x106, 0x3, 0x0, 0x1, [@nested={0x18, 0x6b, 0x0, 0x1, [@nested={0x4, 0xd5}, @typed={0x8, 0x9, 0x0, 0x0, @pid=r4}, @nested={0x4, 0x5f}, @typed={0x4, 0xac}]}, @generic="a01ed6976037f55fa8810c4960bee1c92416e1d996821daf34e90fd5c1165d1f7e4a7ab74a43ccf7995923c3eb3b3ea3a0e3bd30da0ece22b21ef021a7d07d997e5c17bd9784482b5c13fdc5adc2a944bb0be76327a43356d8eb436a5e6a6530b7c393b2c215d7e7c8efbc486cdc4636e4d1d0a359de567dc3f85a0fec1e62beb9a51aa9668cf6b25f70478ac6a5762cb536f69d55048c1c654b3efc051d75c4b1fbd85da057d27bea767fe88d130560e8f3b211f2a2026cbca1d67837d54f15727594af0b113f2e6dcfd7af2a77ebc828e38e58dec4b2ee2598c3536ad4aa33ce9bc764f897c3d597d9"]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x41}, 0x4085) r5 = bpf$auto_BPF_ENABLE_STATS(0x20, &(0x7f0000000340)=@prog_bind_map={r2, r0, 0x3}, 0x4) r8 = fcntl$auto(r6, 0xcc, r4) r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000440), r0) sendmsg$auto_NL80211_CMD_ADD_LINK(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r9, 0x100, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20020080) r10 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000580), r2) sendmsg$auto_NFC_CMD_DISABLE_SE(r7, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r10, 0x611, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_RF_MODE={0x5, 0xb, 0x7}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000001}, 0x40800) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000680)='/sys/kernel/security/tomoyo/exception_policy\x00', 0x80000, 0x0) setsockopt$auto_SO_PASSPIDFD(r5, 0xb0e, 0x4c, &(0x7f00000006c0)='TIPCv2\x00', 0x3) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000740)={'veth0_vlan\x00', 0x0}) msgctl$auto_IPC_STAT(0xffffffff, 0x2, &(0x7f0000000800)={{0x800, 0xffffffffffffffff, 0xee00, 0x8001, 0xe, 0x3, 0xff0}, &(0x7f0000000780)=0x4, &(0x7f00000007c0)=0x7, 0x4, 0x80000000, 0x5, 0xfff, 0xfffffffffffffff7, 0x400, 0x6, 0xdf, @raw=0x5, @inferred=0xffffffffffffffff}) sendmsg$auto_NL80211_CMD_DEL_INTERFACE(r7, &(0x7f0000000ac0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a80)={&(0x7f0000000880)={0x1dc, r9, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r11}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x5}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0x1a8, 0x2c, 0x0, 0x1, [@nested={0x194, 0x100, 0x0, 0x1, [@typed={0xf7, 0x61, 0x0, 0x0, @binary="8c61804eef0f0db2dcd4adbb5f51ad9136f587c6d7d26d95e5ad9d030bd7546d7eb5aa73deb47ceb93210798082739ad7b0ba3b8343755b5a5254cf280542abeeb7470efa1224fb43b96ad07c9a12f156b8901c6d1e9c2989898379b79910f8e0c6c4bc1b77d7c6726456cb563b41675c9e9ac31a92d8bd5a94b554b64cacbe618368aa51c2eca1f1a037e45886ea721dddf145be765812811de20795e802cfca57fe85056a788ab694de831dad4acf30ff43520ca49d90f62699357b48ddf810c882685a45c1eb0a6a274e6ebca56895c339948b4bb18c43b647a3b0ae8b50a4557a0e67b4e5aedbf79f38fbf1790e5e1fdf5"}, @nested={0x4, 0x4d}, @typed={0x6a, 0x49, 0x0, 0x0, @binary="850dbfd7dee75cce6e6eaa6cddff7e557e6438758bf8133404d1e278e8250fdcb97e16484932a872cdfa99f5360c1962184ecb88c5d9bb49c0e4e3d6f35125a07b5c24f4baf13923e9563a769f4db142a97274fcf9fe0afa47236311cc3672572b535d0223a8"}, @nested={0x4, 0x6}, @nested={0x4, 0xf4}, @typed={0x8, 0x103, 0x0, 0x0, @uid=r12}, @typed={0x14, 0x6a, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x19}}, @nested={0x4, 0xe8}]}, @typed={0x8, 0x112, 0x0, 0x0, @u32=0x7fffffff}, @typed={0x8, 0x6b, 0x0, 0x0, @u32=0xfffffff5}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x40}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x801}, 0x24000080) sendmsg$auto_IEEE802154_ADD_IFACE(r8, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x58, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x9}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x80}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x6c}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "aa1db679ed0f41841892154a0be2fa34"}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x6}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xb1}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000003}, 0x4000) read$auto_kernfs_file_fops_kernfs_internal(r8, &(0x7f0000000c40)=""/235, 0xeb) sendmsg$auto_NL80211_CMD_ADD_TX_TS(r2, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x40, r9, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0xb}, @NL80211_ATTR_OPMODE_NOTIF={0x5}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x8}, @NL80211_ATTR_RADAR_BACKGROUND={0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x9}]}, 0x40}, 0x1, 0x0, 0x0, 0x4800}, 0x800) ioctl$auto_KVM_GET_DEVICE_ATTR(r8, 0x4018aee2, &(0x7f0000000e40)={0x101, r13, 0x7fffffff, 0xffffffffffffffff}) getsockopt$auto_SO_PRIORITY(0xffffffffffffffff, 0x3ff, 0xc, &(0x7f0000000e80)='nl80211\x00', &(0x7f0000000ec0)=0x1000) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000f40), r5) sendmsg$auto_IEEE802154_LLSEC_ADD_DEVKEY(r14, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x38, r15, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x3}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, 0x7}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_REASON={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x894}, 0x40040) r16 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000001080), r7) sendmsg$auto_SMC_NETLINK_GET_LINK_SMCR(r8, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x8000040}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x40, r16, 0x1, 0x70bd2b, 0x25dfdbfb, {}, "af90e225c1962970f3a9b5e02b5b376a52e7da412c6611099d007d21ca5795ff08616f291d5ad494baf9"}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4000004) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000001180), r6) r17 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000001200), r14) sendmsg$auto_IPVS_CMD_SET_CONFIG(r2, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x1c, r17, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x805}, 0x400c010) 2m35.690864064s ago: executing program 1 (id=2228): mmap$auto(0x0, 0x2, 0x80000000df, 0x14, 0x401, 0x8000) r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) sendmmsg$auto(r0, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x4}, 0x1000000000028, 0x0, 0x1, 0x3e0}, 0x800}, 0x4, 0x4008) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x154) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x100, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x23, 0x80805, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd1\x00', 0x8000, 0x0) ioctl$auto_BLKRRPART(r2, 0x125f, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000180), 0x509a40, 0x0) write$auto(r1, &(0x7f00000010c0)='/dev/audio1\x00\x02\xd6\xa49\'.\xda&\xc2\x01\xb7|\xbb\xaa\xa4\xa5\x12i/(b\x91\xbb', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x37, 0xa, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x7, 0x3, 0x800, 0x80000023, 0x200000000000007, 0x6d42, 0xc, 0x2495dae0, 0x6]}, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x16240, 0x0) execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000600)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\x00\x00/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a(\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8L\x84j\x8c\xec\xdf\x1a\xbd\xc5\x94\xb9\xb7\xd5\xa4\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12\x16\xb8*\xa9\xc9\xe81\x9d\x06\xbbC\x17\xbb\xe6|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x874\xab?\xc8\x82\xe5\x8f\xb7\x91\xc2\xbe\xb2\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5') 2m35.644632157s ago: executing program 3 (id=2229): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/dev\x00', 0x40100, 0x0) pread64$auto(r0, 0x0, 0xffb, 0x7fffffffffffffff) 2m35.430012765s ago: executing program 3 (id=2230): sendmsg$auto_IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000881) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r0, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x288202, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x2, 0xa, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ttyrd/power/runtime_active_time\x00', 0x8000, 0x0) socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000180)={0x40, 0x1ff, 0x9}) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000240)=""/154, 0x9a) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\x00\x80\x00\x00\x00\x00\x00j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2\x00', 0x5) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r2, 0x0, 0x3f1) getdents$auto(0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(r1, 0xa, 0x80) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/scsi/device_info\x00', 0x40100, 0x0) 2m34.653031686s ago: executing program 2 (id=2231): socket(0x2, 0x1, 0x106) r0 = open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) open_by_handle_at$auto(r0, &(0x7f0000000000)={0x8, 0x10002, "0200000000000000"}, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/vlan/config\x00', 0xc0000, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/mmap_min_addr\x00', 0x101300, 0x0) signalfd$auto(0xffffffff, 0x0, 0x8) socket(0x1d, 0x2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) socketpair$auto(0x4004, 0xf, 0x4, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto_TCFLSH2(r1, 0x540a, 0x0) 2m34.616211906s ago: executing program 1 (id=2232): mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x10, 0x0, 0x9) io_uring_setup$auto(0x1, 0x0) connect$auto(0x3, 0x0, 0x55) ioctl$auto(0x3, 0x89e0, 0x38) mmap$auto(0x0, 0x2000d, 0x3, 0xeb1, 0x404, 0x10008000) sysfs$auto(0x2, 0x1f, 0x0) fsopen$auto(0x0, 0x1) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x50b880, 0x0) r3 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) read$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(r3, 0x0, 0x17) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_SET_SERVICE(r4, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000005400)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x4000000) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3dd) mmap$auto(0x0, 0xa, 0xb7ed, 0xeb1, 0x0, 0x8002) close_range$auto(0x2, r0, 0x0) ioctl$auto_KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card1/pcm0p/sub0/xrun_injection\x00', 0x0, 0x0) r6 = ioctl$auto_TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000040)) sendmsg$auto_NL80211_CMD_SET_STATION(r6, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x88120000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x7}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x5}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_MAX_HW_TIMESTAMP_PEERS={0x6, 0x143, 0x5}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0xfffffffc}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x40040) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) 2m34.564020805s ago: executing program 2 (id=2233): openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, 0x0, 0x10082, 0x0) close_range$auto(0xffffffffffffffff, 0x8, 0xfffffffc) r0 = prctl$auto_PR_SCHED_CORE_CREATE(0x4a95f9a7, 0x1, 0xffffffffffffffff, 0x2, 0x5) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x5, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x600000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x22, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x20040884) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r2 = socket(0x1a, 0x1, 0x8) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r2, 0x10f, 0x2087, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) recvmmsg$auto(r2, &(0x7f0000000000)={{0x0, 0x48001, &(0x7f0000000040)={0x0, 0x33a5}, 0x4, 0x0, 0x1000007, 0x7ff}, 0x9}, 0xb, 0x1, 0x0) semctl$auto(0x3, 0x80000002, 0x12, 0xfffffffffffffffe) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x230) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty16\x00', 0x464001, 0x0) mmap$auto(0x0, 0xc, 0x5, 0x16, 0xffffffffffffffff, 0x6) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/bdi/43:416/min_ratio\x00', 0x80302, 0x0) write$auto(0x3, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x8000000000001, 0x0, 0x0, 0x8}, 0x4}, 0x3, 0x3) 2m34.365585181s ago: executing program 3 (id=2234): r0 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x40, 0x0) read$auto_ftrace_subsystem_filter_fops_trace_events(r0, &(0x7f0000000100)=""/216, 0xd8) r1 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(r1, &(0x7f00000000c0)="621c1bfe595046ab5c98199adf6ad9cdc5b2fc8d6d76e6021e1dcedc5f00e8fdffff00c291dfb4000001bf9f34dc422231cf4d40d4", 0x35) r2 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x2, 0x0) ioctl$auto_FBIOPAN_DISPLAY(r3, 0x4606, &(0x7f0000000440)="9b58b4fccbcd800000100000000000000025000000d1627cc84d61f3d07771b09e2c91eb271fd2f826dcc129e3a136d030996f8769497d9621bcd869c6f014922a060000000000000028a0784539e00ad178298ec54bf55f716653ee64518c92a24409be055f93546773a695c31a9a53ef754e8ca43619e9a71b76f8e8aeb15a4019883dbfd1") bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@l2tp={0x2, 0x0, @multicast2, 0x4}, 0x54) mmap$auto(0x0, 0x4, 0x4200000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x4bc, r5, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@HWSIM_ATTR_FREQ={0x8, 0x13, 0x8001}, @HWSIM_ATTR_RADIO_ID={0x8, 0xa, 0x1}, @HWSIM_ATTR_PMSR_RESULT={0x498, 0x1c, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0x44c, 0x5, 0x0, 0x1, [{0x440, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_RESP={0x3d4, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_DATA={0xf4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0xf1f}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0x13, 0x14, 'MAC80211_HWSIM\x00'}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8, 0x3, 0xffffffff}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_VARIANCE={0xc, 0x11, 0x8001}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES={0x8, 0x4, 0x7}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES={0x8, 0x4, 0xfffffffe}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_VARIANCE={0xc, 0x11, 0xfffffffffffffe01}, @NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8, 0x3, 0x10001}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG={0x8, 0x9, 0x800}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0x62}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_SPREAD={0x8, 0xa, 0x6}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8, 0x3, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RX_RATE={0x1c, 0xc, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_HE_DCM={0x5, 0x7, 0xe}, @HWSIM_RATE_INFO_ATTR_HE_DCM={0x5, 0x7, 0xff}, @HWSIM_RATE_INFO_ATTR_LEGACY={0x6, 0x3, 0x8e3}]}, @NL80211_PMSR_FTM_RESP_ATTR_LCI={0x13, 0x13, 'MAC80211_HWSIM\x00'}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8, 0x3, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG={0x8, 0x9, 0xffffffff}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_VARIANCE={0xc, 0x11, 0x64f}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_DURATION={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6}]}]}, @NL80211_PMSR_RESP_ATTR_DATA={0x2d8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6, 0x2, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES={0x8, 0x4, 0x10000}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_AVG={0xc, 0xd, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x6c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0x80}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0x9}, @NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST={0x5, 0x8, 0x1}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0x2}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG={0x8, 0x9, 0x1}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_TX_RATE={0xc, 0xb, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_EHT_GI={0x5, 0xa, 0x1}]}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0xfd}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_VARIANCE={0xc, 0x11, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x88, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RSSI_SPREAD={0x8, 0xa, 0xd0a6}, @NL80211_PMSR_FTM_RESP_ATTR_RX_RATE={0xc, 0xc, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_N_BOUNDED_CH={0x5, 0x9, 0x8}]}, @NL80211_PMSR_FTM_RESP_ATTR_RX_RATE={0x3c, 0xc, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_HE_RU_ALLOC={0x5, 0x8, 0xe}, @HWSIM_RATE_INFO_ATTR_LEGACY={0x6, 0x3, 0x5}, @HWSIM_RATE_INFO_ATTR_NSS={0x5, 0x4, 0xf0}, @HWSIM_RATE_INFO_ATTR_NSS={0x5, 0x4, 0x4b}, @HWSIM_RATE_INFO_ATTR_MCS={0x5, 0x2, 0x81}, @HWSIM_RATE_INFO_ATTR_EHT_GI={0x5, 0xa, 0x3}, @HWSIM_RATE_INFO_ATTR_HE_RU_ALLOC={0x5, 0x8, 0x4}]}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST={0x5, 0x8, 0x81}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_AVG={0xc, 0x10, 0x1ff}, @NL80211_PMSR_FTM_RESP_ATTR_TX_RATE={0xc, 0xb, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_HE_RU_ALLOC={0x5, 0x8, 0x6}]}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0x10}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_BURST_DURATION={0x5, 0x7, 0xba}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0x13, 0x14, 'MAC80211_HWSIM\x00'}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_BURST_DURATION={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0x61e}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0xc6}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_BURST_DURATION={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0x3e}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_DURATION={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_RESP_ATTR_TX_RATE={0x1c, 0xb, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_BW={0x5}, @HWSIM_RATE_INFO_ATTR_BW={0x5, 0x5, 0xe}, @HWSIM_RATE_INFO_ATTR_HE_RU_ALLOC={0x5, 0x8, 0x3}]}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES={0x8, 0x4, 0xeba}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_VARIANCE={0xc, 0x11, 0xda3}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0xffffffffffffffff}, @NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0x5}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0xd}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_AVG={0xc, 0xd, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_DIST_AVG={0xc, 0x10, 0x7}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_SPREAD={0x8, 0xa, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0xc478673}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6, 0x2, 0x8}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG={0x8, 0x9, 0x6c}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES={0x8, 0x4, 0x2}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0x9255}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG={0x8, 0x9, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_TX_RATE={0x2c, 0xb, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_EHT_RU_ALLOC={0x5, 0xb, 0x9}, @HWSIM_RATE_INFO_ATTR_LEGACY={0x6, 0x3, 0x8}, @HWSIM_RATE_INFO_ATTR_HE_DCM={0x5, 0x7, 0x7f}, @HWSIM_RATE_INFO_ATTR_HE_GI={0x5, 0x6, 0x1}, @HWSIM_RATE_INFO_ATTR_HE_DCM={0x5, 0x7, 0x9d}]}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_VARIANCE={0xc, 0x11, 0x6f4}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG={0x8, 0x9, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_LCI={0x13, 0x13, 'MAC80211_HWSIM\x00'}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_AVG={0xc, 0xd, 0x4}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0xffffffffffffff7f}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6, 0x2, 0x7}, @NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0x8}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0xe}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0x4}]}]}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x66, 0x1, "6b074ccd6dcf3891b543b8004df8a752d9e2a1f0729e6681abe3905ce26957e840379d8c6fad9e9377379fd47c7f3467de1d0e6ae268b1947cc424e5e2702f05de674da3bd353a9b75b718ca14a40df6c9f813f017212cd32804fad90d3dc0c69c87"}]}, {0x4}, {0x4}]}, @NL80211_PMSR_ATTR_PEERS={0x48, 0x5, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_RESP={0x14, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x1}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x58}]}, @NL80211_PMSR_PEER_ATTR_RESP={0x24, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x2}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x4}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x4}]}, {0x4}]}]}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x24040000}, 0x8018880) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x10, 0x0, 0xc) getsockopt$auto(r2, 0x0, 0x26, 0x0, &(0x7f00000000c0)=0x9010c) r6 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TCP_METRICS_CMD_GET(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2m34.311239589s ago: executing program 1 (id=2235): r0 = socket(0x2, 0x1, 0x106) close_range$auto(0xffffffffffffffff, r0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0x8000000000000003, 0x15) madvise$auto(0x10000, 0x6, 0x3) mmap$auto(0x200, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/vlan/config\x00', 0xc0000, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x101300, 0x0) signalfd$auto(0xffffffff, 0x0, 0x8) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) io_uring_setup$auto(0x6, 0x0) ioctl$auto(0xc8, 0x800454d7, 0x5c8d) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/dev\x00', 0x40100, 0x0) pread64$auto(r2, 0x0, 0x10005, 0x830) write$auto(r1, 0x0, 0x100) socket(0xa, 0x3, 0xff) setsockopt$auto(0x400000000000003, 0x29, 0x16, 0x0, 0x20056b) socket(0x1d, 0x2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) io_uring_setup$auto(0x4079, 0x0) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) 2m34.218219286s ago: executing program 2 (id=2236): mmap$auto(0x0, 0x2, 0x80000000df, 0x14, 0x401, 0x8000) r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) sendmmsg$auto(r0, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x4}, 0x1000000000028, 0x0, 0x1, 0x3e0}, 0x800}, 0x4, 0x4008) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x100, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x23, 0x80805, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd1\x00', 0x8000, 0x0) ioctl$auto_BLKRRPART(r3, 0x125f, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000180), 0x509a40, 0x0) write$auto(r2, &(0x7f00000010c0)='/dev/audio1\x00\x02\xd6\xa49\'.\xda&\xc2\x01\xb7|\xbb\xaa\xa4\xa5\x12i/(b\x91\xbb', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x37, 0xa, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x7, 0x3, 0x800, 0x80000023, 0x200000000000007, 0x6d42, 0xc, 0x2495dae0, 0x6]}, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x16240, 0x0) execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000600)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\x00\x00/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a(\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8L\x84j\x8c\xec\xdf\x1a\xbd\xc5\x94\xb9\xb7\xd5\xa4\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12\x16\xb8*\xa9\xc9\xe81\x9d\x06\xbbC\x17\xbb\xe6|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x874\xab?\xc8\x82\xe5\x8f\xb7\x91\xc2\xbe\xb2\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5') mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x0, 0xfa9d, 0x8001, &(0x7f0000000280)=0xc9e, 0x400, 0x1) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) read$auto_proc_sessionid_operations_base(0xffffffffffffffff, &(0x7f00000000c0)=""/4073, 0xfe9) finit_module$auto(0x3, 0xfffffffffffffffe, 0x400000000004) 2m34.076706217s ago: executing program 3 (id=2237): socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/vlan/config\x00', 0xc0000, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/mmap_min_addr\x00', 0x101300, 0x0) signalfd$auto(0xffffffff, 0x0, 0x8) socket(0x1d, 0x2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0x10b141, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x800, 0x0) syz_clone(0x4000, &(0x7f00000002c0)="f03f0b0b", 0x4, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2, 0x1, 0x0) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x70) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8) r1 = open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154) unshare$auto(0x20000) unlink$auto(&(0x7f0000000040)='./file0\x00') execveat$auto(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x11000) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) r2 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r2, &(0x7f0000000040)=""/4096, 0xfffffe82) ioctl$auto_PPPIOCBRIDGECHAN(0xffffffffffffffff, 0x40047435, 0x0) 2m32.791059858s ago: executing program 1 (id=2238): socket(0x1f, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/vlan/config\x00', 0xc0800, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/mmap_min_addr\x00', 0x101300, 0x0) signalfd$auto(0xffffffff, 0x0, 0x8) socket(0x1d, 0x2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) socketpair$auto(0x4004, 0xf, 0x4, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto_TCFLSH2(r0, 0x5411, 0x0) 2m8.631508016s ago: executing program 32 (id=2206): socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x10, 0x2, 0xf) r1 = bpf$auto(0x0, &(0x7f0000000080)=@bpf_attr_4={0x1e, r0, 0xffffffff}, 0xd) bpf$auto(0x2, &(0x7f0000000080)=@iter_create={r1, 0x98}, 0x5) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/query\x00', 0x321a00, 0x0) r3 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) close_range$auto(0x2, 0xa, 0x0) dup2$auto(r3, r3) bpf$auto_BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)=@link_update={r3, @new_prog_fd=r2, 0x401, @old_prog_fd=r2}, 0x7) 2m7.228967451s ago: executing program 33 (id=2238): socket(0x1f, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/vlan/config\x00', 0xc0800, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/mmap_min_addr\x00', 0x101300, 0x0) signalfd$auto(0xffffffff, 0x0, 0x8) socket(0x1d, 0x2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) socketpair$auto(0x4004, 0xf, 0x4, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto_TCFLSH2(r0, 0x5411, 0x0) 2m5.348642389s ago: executing program 34 (id=2236): mmap$auto(0x0, 0x2, 0x80000000df, 0x14, 0x401, 0x8000) r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) sendmmsg$auto(r0, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x4}, 0x1000000000028, 0x0, 0x1, 0x3e0}, 0x800}, 0x4, 0x4008) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x100, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x23, 0x80805, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd1\x00', 0x8000, 0x0) ioctl$auto_BLKRRPART(r3, 0x125f, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000180), 0x509a40, 0x0) write$auto(r2, &(0x7f00000010c0)='/dev/audio1\x00\x02\xd6\xa49\'.\xda&\xc2\x01\xb7|\xbb\xaa\xa4\xa5\x12i/(b\x91\xbb', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x37, 0xa, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x7, 0x3, 0x800, 0x80000023, 0x200000000000007, 0x6d42, 0xc, 0x2495dae0, 0x6]}, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x16240, 0x0) execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000600)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\x00\x00/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a(\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8L\x84j\x8c\xec\xdf\x1a\xbd\xc5\x94\xb9\xb7\xd5\xa4\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12\x16\xb8*\xa9\xc9\xe81\x9d\x06\xbbC\x17\xbb\xe6|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x874\xab?\xc8\x82\xe5\x8f\xb7\x91\xc2\xbe\xb2\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5') mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x0, 0xfa9d, 0x8001, &(0x7f0000000280)=0xc9e, 0x400, 0x1) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) read$auto_proc_sessionid_operations_base(0xffffffffffffffff, &(0x7f00000000c0)=""/4073, 0xfe9) finit_module$auto(0x3, 0xfffffffffffffffe, 0x400000000004) 2m5.130412679s ago: executing program 35 (id=2237): socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/vlan/config\x00', 0xc0000, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/mmap_min_addr\x00', 0x101300, 0x0) signalfd$auto(0xffffffff, 0x0, 0x8) socket(0x1d, 0x2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0x10b141, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x800, 0x0) syz_clone(0x4000, &(0x7f00000002c0)="f03f0b0b", 0x4, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2, 0x1, 0x0) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x70) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8) r1 = open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154) unshare$auto(0x20000) unlink$auto(&(0x7f0000000040)='./file0\x00') execveat$auto(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x11000) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) r2 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r2, &(0x7f0000000040)=""/4096, 0xfffffe82) ioctl$auto_PPPIOCBRIDGECHAN(0xffffffffffffffff, 0x40047435, 0x0) 1m42.750788586s ago: executing program 6 (id=2241): mmap$auto(0x0, 0x2, 0x80000000df, 0x14, 0x401, 0x8000) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x154) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x100, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x23, 0x80805, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd1\x00', 0x8000, 0x0) ioctl$auto_BLKRRPART(r2, 0x125f, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000180), 0x509a40, 0x0) write$auto(r1, &(0x7f00000010c0)='/dev/audio1\x00\x02\xd6\xa49\'.\xda&\xc2\x01\xb7|\xbb\xaa\xa4\xa5\x12i/(b\x91\xbb', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x37, 0xa, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x7, 0x3, 0x800, 0x80000023, 0x200000000000007, 0x6d42, 0xc, 0x2495dae0, 0x6]}, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x16240, 0x0) execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000600)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\x00\x00/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a(\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8L\x84j\x8c\xec\xdf\x1a\xbd\xc5\x94\xb9\xb7\xd5\xa4\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12\x16\xb8*\xa9\xc9\xe81\x9d\x06\xbbC\x17\xbb\xe6|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x874\xab?\xc8\x82\xe5\x8f\xb7\x91\xc2\xbe\xb2\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5') 0s ago: executing program 6 (id=2241): mmap$auto(0x0, 0x2, 0x80000000df, 0x14, 0x401, 0x8000) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x154) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x100, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x23, 0x80805, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd1\x00', 0x8000, 0x0) ioctl$auto_BLKRRPART(r2, 0x125f, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000180), 0x509a40, 0x0) write$auto(r1, &(0x7f00000010c0)='/dev/audio1\x00\x02\xd6\xa49\'.\xda&\xc2\x01\xb7|\xbb\xaa\xa4\xa5\x12i/(b\x91\xbb', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x37, 0xa, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x7, 0x3, 0x800, 0x80000023, 0x200000000000007, 0x6d42, 0xc, 0x2495dae0, 0x6]}, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x16240, 0x0) execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000600)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\x00\x00/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a(\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8L\x84j\x8c\xec\xdf\x1a\xbd\xc5\x94\xb9\xb7\xd5\xa4\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12\x16\xb8*\xa9\xc9\xe81\x9d\x06\xbbC\x17\xbb\xe6|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x874\xab?\xc8\x82\xe5\x8f\xb7\x91\xc2\xbe\xb2\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5') kernel console output (not intermixed with test programs): uld_failslab+0xc2/0x120 [ 487.024819][T13647] kmem_cache_alloc_noprof+0x83/0x770 [ 487.024853][T13647] ? __pfx_map_id_range_down+0x10/0x10 [ 487.024891][T13647] ? security_inode_alloc+0x3b/0x2b0 [ 487.024928][T13647] ? security_inode_alloc+0x3b/0x2b0 [ 487.024956][T13647] security_inode_alloc+0x3b/0x2b0 [ 487.024986][T13647] inode_init_always_gfp+0xced/0x1040 [ 487.025032][T13647] alloc_inode+0x86/0x240 [ 487.025064][T13647] new_inode+0x22/0x1c0 [ 487.025097][T13647] hugetlbfs_get_inode+0x354/0x700 [ 487.025124][T13647] ? security_capable+0x7e/0x260 [ 487.025170][T13647] hugetlb_file_setup+0x38d/0x620 [ 487.025200][T13647] newseg+0xa74/0xe60 [ 487.025239][T13647] ? __pfx_newseg+0x10/0x10 [ 487.025274][T13647] ? vfs_write+0x15d/0x11d0 [ 487.025319][T13647] ipcget+0xf6/0xfa0 [ 487.025354][T13647] ? do_futex+0x122/0x350 [ 487.025387][T13647] ? __pfx_do_futex+0x10/0x10 [ 487.025425][T13647] ? __pfx_ipcget+0x10/0x10 [ 487.025472][T13647] ? __x64_sys_futex+0x1e0/0x4c0 [ 487.025503][T13647] ? __x64_sys_futex+0x1e9/0x4c0 [ 487.025541][T13647] __x64_sys_shmget+0x13b/0x1b0 [ 487.025585][T13647] ? __pfx___x64_sys_shmget+0x10/0x10 [ 487.025627][T13647] ? rcu_is_watching+0x12/0xc0 [ 487.025670][T13647] do_syscall_64+0xcd/0xf80 [ 487.025713][T13647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.025742][T13647] RIP: 0033:0x7fb382f8f7c9 [ 487.025766][T13647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.025794][T13647] RSP: 002b:00007fb383d8e038 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 487.025823][T13647] RAX: ffffffffffffffda RBX: 00007fb3831e5fa0 RCX: 00007fb382f8f7c9 [ 487.025843][T13647] RDX: 0000000079e56dc9 RSI: 0000000000000003 RDI: 0000000100000000 [ 487.025862][T13647] RBP: 00007fb383013f91 R08: 0000000000000000 R09: 0000000000000000 [ 487.025880][T13647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 487.025898][T13647] R13: 00007fb3831e6038 R14: 00007fb3831e5fa0 R15: 00007ffe3b4c38d8 [ 487.025938][T13647] [ 487.919050][T13660] vcan0: tx drop: invalid sa for name 0x00000000000000fd [ 488.863626][T13670] FAULT_INJECTION: forcing a failure. [ 488.863626][T13670] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 488.878111][T13670] CPU: 1 UID: 0 PID: 13670 Comm: syz.0.2040 Tainted: G L syzkaller #0 PREEMPT(full) [ 488.878136][T13670] Tainted: [L]=SOFTLOCKUP [ 488.878142][T13670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 488.878151][T13670] Call Trace: [ 488.878157][T13670] [ 488.878163][T13670] dump_stack_lvl+0x16c/0x1f0 [ 488.878189][T13670] should_fail_ex+0x512/0x640 [ 488.878209][T13670] _copy_to_user+0x32/0xd0 [ 488.878227][T13670] simple_read_from_buffer+0xcb/0x170 [ 488.878249][T13670] proc_fail_nth_read+0x197/0x240 [ 488.878273][T13670] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 488.878297][T13670] ? rw_verify_area+0xcf/0x6c0 [ 488.878316][T13670] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 488.878339][T13670] vfs_read+0x1e4/0xcf0 [ 488.878359][T13670] ? __pfx___mutex_lock+0x10/0x10 [ 488.878383][T13670] ? __pfx_vfs_read+0x10/0x10 [ 488.878408][T13670] ? __fget_files+0x20e/0x3c0 [ 488.878433][T13670] ksys_read+0x12a/0x250 [ 488.878453][T13670] ? __pfx_ksys_read+0x10/0x10 [ 488.878484][T13670] do_syscall_64+0xcd/0xf80 [ 488.878507][T13670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.878522][T13670] RIP: 0033:0x7f4be998e1dc [ 488.878535][T13670] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 488.878548][T13670] RSP: 002b:00007f4bea81e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 488.878562][T13670] RAX: ffffffffffffffda RBX: 00007f4be9be5fa0 RCX: 00007f4be998e1dc [ 488.878573][T13670] RDX: 000000000000000f RSI: 00007f4bea81e0a0 RDI: 0000000000000005 [ 488.878582][T13670] RBP: 00007f4bea81e090 R08: 0000000000000000 R09: 0000000000000000 [ 488.878591][T13670] R10: 0000200000002100 R11: 0000000000000246 R12: 0000000000000001 [ 488.878600][T13670] R13: 00007f4be9be6038 R14: 00007f4be9be5fa0 R15: 00007fff701a8c18 [ 488.878619][T13670] [ 489.366608][T13695] netlink: 'syz.1.2045': attribute type 1 has an invalid length. [ 489.640222][T13704] FAULT_INJECTION: forcing a failure. [ 489.640222][T13704] name fail_futex, interval 1, probability 0, space 0, times 0 [ 489.689108][T13704] CPU: 1 UID: 0 PID: 13704 Comm: syz.2.2047 Tainted: G L syzkaller #0 PREEMPT(full) [ 489.689164][T13704] Tainted: [L]=SOFTLOCKUP [ 489.689174][T13704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 489.689192][T13704] Call Trace: [ 489.689202][T13704] [ 489.689214][T13704] dump_stack_lvl+0x16c/0x1f0 [ 489.689261][T13704] should_fail_ex+0x512/0x640 [ 489.689300][T13704] get_futex_key+0x1d0/0x15f0 [ 489.689336][T13704] ? __pfx_get_futex_key+0x10/0x10 [ 489.689369][T13704] ? __call_rcu_common.constprop.0+0x3f0/0xa10 [ 489.689404][T13704] ? lockdep_hardirqs_on+0x7c/0x110 [ 489.689452][T13704] futex_wake+0xea/0x530 [ 489.689489][T13704] ? find_held_lock+0x2b/0x80 [ 489.689525][T13704] ? __pfx_futex_wake+0x10/0x10 [ 489.689568][T13704] ? up_write+0x282/0x4e0 [ 489.689605][T13704] do_futex+0x1e3/0x350 [ 489.689638][T13704] ? __pfx_do_futex+0x10/0x10 [ 489.689680][T13704] __x64_sys_futex+0x1e0/0x4c0 [ 489.689718][T13704] ? __pfx___x64_sys_futex+0x10/0x10 [ 489.689752][T13704] ? __pfx___x64_sys_shmget+0x10/0x10 [ 489.689801][T13704] do_syscall_64+0xcd/0xf80 [ 489.689844][T13704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.689873][T13704] RIP: 0033:0x7f6e9158f7c9 [ 489.689897][T13704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 489.689925][T13704] RSP: 002b:00007f6e9237d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 489.689954][T13704] RAX: ffffffffffffffda RBX: 00007f6e917e5fa8 RCX: 00007f6e9158f7c9 [ 489.689974][T13704] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6e917e5fac [ 489.689993][T13704] RBP: 00007f6e917e5fa0 R08: 00007f6e9237e000 R09: 0000000000000000 [ 489.690013][T13704] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 489.690031][T13704] R13: 00007f6e917e6038 R14: 00007ffe3c503f00 R15: 00007ffe3c503fe8 [ 489.690074][T13704] [ 491.499626][T13751] FAULT_INJECTION: forcing a failure. [ 491.499626][T13751] name failslab, interval 1, probability 0, space 0, times 0 [ 491.536699][T13752] netlink: 'syz.0.2058': attribute type 1 has an invalid length. [ 491.569051][T13751] CPU: 1 UID: 0 PID: 13751 Comm: syz.1.2059 Tainted: G L syzkaller #0 PREEMPT(full) [ 491.569096][T13751] Tainted: [L]=SOFTLOCKUP [ 491.569107][T13751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 491.569124][T13751] Call Trace: [ 491.569134][T13751] [ 491.569145][T13751] dump_stack_lvl+0x16c/0x1f0 [ 491.569194][T13751] should_fail_ex+0x512/0x640 [ 491.569225][T13751] ? fs_reclaim_acquire+0xae/0x150 [ 491.569273][T13751] should_failslab+0xc2/0x120 [ 491.569317][T13751] kmem_cache_alloc_noprof+0x83/0x770 [ 491.569352][T13751] ? __pfx_map_id_range_down+0x10/0x10 [ 491.569390][T13751] ? security_inode_alloc+0x3b/0x2b0 [ 491.569427][T13751] ? security_inode_alloc+0x3b/0x2b0 [ 491.569456][T13751] security_inode_alloc+0x3b/0x2b0 [ 491.569488][T13751] inode_init_always_gfp+0xced/0x1040 [ 491.569536][T13751] alloc_inode+0x86/0x240 [ 491.569567][T13751] new_inode+0x22/0x1c0 [ 491.569602][T13751] hugetlbfs_get_inode+0x354/0x700 [ 491.569628][T13751] ? security_capable+0x7e/0x260 [ 491.569672][T13751] hugetlb_file_setup+0x38d/0x620 [ 491.569703][T13751] newseg+0xa74/0xe60 [ 491.569742][T13751] ? __pfx_newseg+0x10/0x10 [ 491.569777][T13751] ? vfs_write+0x15d/0x11d0 [ 491.569821][T13751] ipcget+0xf6/0xfa0 [ 491.569856][T13751] ? do_futex+0x122/0x350 [ 491.569889][T13751] ? __pfx_do_futex+0x10/0x10 [ 491.569935][T13751] ? __pfx_ipcget+0x10/0x10 [ 491.569974][T13751] ? __x64_sys_futex+0x1e0/0x4c0 [ 491.570009][T13751] ? __x64_sys_futex+0x1e9/0x4c0 [ 491.570047][T13751] __x64_sys_shmget+0x13b/0x1b0 [ 491.570084][T13751] ? __pfx___x64_sys_shmget+0x10/0x10 [ 491.570126][T13751] ? rcu_is_watching+0x12/0xc0 [ 491.570168][T13751] do_syscall_64+0xcd/0xf80 [ 491.570212][T13751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.570242][T13751] RIP: 0033:0x7f669f78f7c9 [ 491.570264][T13751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 491.570289][T13751] RSP: 002b:00007f66a05d8038 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 491.570314][T13751] RAX: ffffffffffffffda RBX: 00007f669f9e5fa0 RCX: 00007f669f78f7c9 [ 491.570333][T13751] RDX: 0000000079e56dc9 RSI: 0000000000000003 RDI: 0000000100000000 [ 491.570351][T13751] RBP: 00007f669f813f91 R08: 0000000000000000 R09: 0000000000000000 [ 491.570367][T13751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 491.570383][T13751] R13: 00007f669f9e6038 R14: 00007f669f9e5fa0 R15: 00007ffc56332ed8 [ 491.570418][T13751] [ 494.067380][T13795] netlink: 'syz.1.2069': attribute type 1 has an invalid length. [ 495.258798][T13821] FAULT_INJECTION: forcing a failure. [ 495.258798][T13821] name failslab, interval 1, probability 0, space 0, times 0 [ 495.284071][T13818] FAULT_INJECTION: forcing a failure. [ 495.284071][T13818] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 495.326985][T13818] CPU: 1 UID: 0 PID: 13818 Comm: syz.3.2073 Tainted: G L syzkaller #0 PREEMPT(full) [ 495.327012][T13818] Tainted: [L]=SOFTLOCKUP [ 495.327018][T13818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 495.327027][T13818] Call Trace: [ 495.327033][T13818] [ 495.327040][T13818] dump_stack_lvl+0x16c/0x1f0 [ 495.327066][T13818] should_fail_ex+0x512/0x640 [ 495.327085][T13818] should_fail_alloc_page+0xe7/0x130 [ 495.327109][T13818] prepare_alloc_pages+0x401/0x670 [ 495.327132][T13818] ? bpf_ksym_find+0x124/0x1c0 [ 495.327149][T13818] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 495.327167][T13818] ? kernel_text_address+0x8d/0x100 [ 495.327184][T13818] ? __kernel_text_address+0xd/0x40 [ 495.327200][T13818] ? unwind_get_return_address+0x59/0xa0 [ 495.327220][T13818] ? arch_stack_walk+0xa6/0x100 [ 495.327242][T13818] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 495.327259][T13818] ? __lock_acquire+0x436/0x2890 [ 495.327273][T13818] ? stack_trace_save+0x8e/0xc0 [ 495.327295][T13818] ? __pfx_stack_trace_save+0x10/0x10 [ 495.327321][T13818] ? look_up_lock_class+0x59/0x130 [ 495.327343][T13818] ? register_lock_class+0x41/0x4b0 [ 495.327357][T13818] ? find_held_lock+0x2b/0x80 [ 495.327374][T13818] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 495.327398][T13818] ? policy_nodemask+0xea/0x4e0 [ 495.327421][T13818] alloc_pages_mpol+0x1fb/0x550 [ 495.327443][T13818] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 495.327469][T13818] alloc_pages_noprof+0x131/0x390 [ 495.327491][T13818] __pmd_alloc+0x3b/0x9c0 [ 495.327515][T13818] __handle_mm_fault+0xbeb/0x2bb0 [ 495.327542][T13818] ? __pfx___handle_mm_fault+0x10/0x10 [ 495.327568][T13818] ? find_vma+0xbf/0x140 [ 495.327586][T13818] ? __pfx_find_vma+0x10/0x10 [ 495.327607][T13818] handle_mm_fault+0x3fe/0xad0 [ 495.327626][T13818] do_user_addr_fault+0x7a6/0x1370 [ 495.327646][T13818] ? rcu_is_watching+0x12/0xc0 [ 495.327668][T13818] exc_page_fault+0x64/0xc0 [ 495.327688][T13818] asm_exc_page_fault+0x26/0x30 [ 495.327703][T13818] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 495.327721][T13818] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 0d 81 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 495.327735][T13818] RSP: 0018:ffffc9000487f9e8 EFLAGS: 00050206 [ 495.327747][T13818] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000038 [ 495.327756][T13818] RDX: fffff5200090ff4e RSI: 0000000000000000 RDI: ffffc9000487fa38 [ 495.327766][T13818] RBP: 0000000000000038 R08: 0000000000000001 R09: fffff5200090ff4d [ 495.327775][T13818] R10: ffffc9000487fa6f R11: ffff88805ada66b0 R12: 0000000000000000 [ 495.327784][T13818] R13: ffffc9000487fa38 R14: ffffc9000487fb30 R15: ffffc9000487fa38 [ 495.327804][T13818] _copy_from_user+0x98/0xd0 [ 495.327821][T13818] copy_msghdr_from_user+0x98/0x160 [ 495.327841][T13818] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 495.327863][T13818] ? __pfx__kstrtoull+0x10/0x10 [ 495.327886][T13818] ___sys_sendmsg+0xfe/0x1d0 [ 495.327905][T13818] ? __pfx____sys_sendmsg+0x10/0x10 [ 495.327933][T13818] ? find_held_lock+0x2b/0x80 [ 495.327963][T13818] __sys_sendmmsg+0x200/0x420 [ 495.327983][T13818] ? __pfx___sys_sendmmsg+0x10/0x10 [ 495.328008][T13818] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 495.328038][T13818] ? fput+0x70/0xf0 [ 495.328052][T13818] ? ksys_write+0x1ac/0x250 [ 495.328072][T13818] ? __pfx_ksys_write+0x10/0x10 [ 495.328095][T13818] __x64_sys_sendmmsg+0x9c/0x100 [ 495.328113][T13818] ? lockdep_hardirqs_on+0x7c/0x110 [ 495.328134][T13818] do_syscall_64+0xcd/0xf80 [ 495.328156][T13818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.328170][T13818] RIP: 0033:0x7fb382f8f7c9 [ 495.328182][T13818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 495.328196][T13818] RSP: 002b:00007fb383d6d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 495.328209][T13818] RAX: ffffffffffffffda RBX: 00007fb3831e6090 RCX: 00007fb382f8f7c9 [ 495.328219][T13818] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 495.328228][T13818] RBP: 00007fb383d6d090 R08: 0000000000000000 R09: 0000000000000000 [ 495.328237][T13818] R10: 0000000007000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.328245][T13818] R13: 00007fb3831e6128 R14: 00007fb3831e6090 R15: 00007ffe3b4c38d8 [ 495.328265][T13818] [ 495.776326][T13821] CPU: 0 UID: 0 PID: 13821 Comm: syz.2.2075 Tainted: G L syzkaller #0 PREEMPT(full) [ 495.776371][T13821] Tainted: [L]=SOFTLOCKUP [ 495.776381][T13821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 495.776396][T13821] Call Trace: [ 495.776405][T13821] [ 495.776415][T13821] dump_stack_lvl+0x16c/0x1f0 [ 495.776460][T13821] should_fail_ex+0x512/0x640 [ 495.776487][T13821] ? fs_reclaim_acquire+0xae/0x150 [ 495.776558][T13821] should_failslab+0xc2/0x120 [ 495.776596][T13821] kmem_cache_alloc_noprof+0x83/0x770 [ 495.776628][T13821] ? __pfx_map_id_range_down+0x10/0x10 [ 495.776665][T13821] ? security_inode_alloc+0x3b/0x2b0 [ 495.776695][T13821] ? security_inode_alloc+0x3b/0x2b0 [ 495.776721][T13821] security_inode_alloc+0x3b/0x2b0 [ 495.776750][T13821] inode_init_always_gfp+0xced/0x1040 [ 495.776792][T13821] alloc_inode+0x86/0x240 [ 495.776819][T13821] new_inode+0x22/0x1c0 [ 495.776851][T13821] hugetlbfs_get_inode+0x354/0x700 [ 495.776877][T13821] ? security_capable+0x7e/0x260 [ 495.776923][T13821] hugetlb_file_setup+0x38d/0x620 [ 495.776957][T13821] newseg+0xa74/0xe60 [ 495.776998][T13821] ? __pfx_newseg+0x10/0x10 [ 495.777034][T13821] ? vfs_write+0x15d/0x11d0 [ 495.777080][T13821] ipcget+0xf6/0xfa0 [ 495.777117][T13821] ? do_futex+0x122/0x350 [ 495.777150][T13821] ? __pfx_do_futex+0x10/0x10 [ 495.777188][T13821] ? __pfx_ipcget+0x10/0x10 [ 495.777227][T13821] ? __x64_sys_futex+0x1e0/0x4c0 [ 495.777258][T13821] ? __x64_sys_futex+0x1e9/0x4c0 [ 495.777296][T13821] __x64_sys_shmget+0x13b/0x1b0 [ 495.777334][T13821] ? __pfx___x64_sys_shmget+0x10/0x10 [ 495.777377][T13821] ? rcu_is_watching+0x12/0xc0 [ 495.777419][T13821] do_syscall_64+0xcd/0xf80 [ 495.777463][T13821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.777501][T13821] RIP: 0033:0x7f6e9158f7c9 [ 495.777526][T13821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 495.777556][T13821] RSP: 002b:00007f6e9237d038 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 495.777586][T13821] RAX: ffffffffffffffda RBX: 00007f6e917e5fa0 RCX: 00007f6e9158f7c9 [ 495.777607][T13821] RDX: 0000000079e56dc9 RSI: 0000000000000003 RDI: 0000000100000000 [ 495.777627][T13821] RBP: 00007f6e91613f91 R08: 0000000000000000 R09: 0000000000000000 [ 495.777644][T13821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 495.777662][T13821] R13: 00007f6e917e6038 R14: 00007f6e917e5fa0 R15: 00007ffe3c503fe8 [ 495.777700][T13821] [ 496.377309][T13826] zswap: compressor not available [ 497.639425][T13849] netlink: 'syz.1.2079': attribute type 1 has an invalid length. [ 498.478198][T13874] FAULT_INJECTION: forcing a failure. [ 498.478198][T13874] name failslab, interval 1, probability 0, space 0, times 0 [ 498.509224][T13874] CPU: 1 UID: 0 PID: 13874 Comm: syz.3.2087 Tainted: G L syzkaller #0 PREEMPT(full) [ 498.509269][T13874] Tainted: [L]=SOFTLOCKUP [ 498.509279][T13874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 498.509295][T13874] Call Trace: [ 498.509304][T13874] [ 498.509315][T13874] dump_stack_lvl+0x16c/0x1f0 [ 498.509360][T13874] should_fail_ex+0x512/0x640 [ 498.509388][T13874] ? fs_reclaim_acquire+0xae/0x150 [ 498.509432][T13874] should_failslab+0xc2/0x120 [ 498.509471][T13874] kmem_cache_alloc_noprof+0x83/0x770 [ 498.509502][T13874] ? __pfx_map_id_range_down+0x10/0x10 [ 498.509538][T13874] ? security_inode_alloc+0x3b/0x2b0 [ 498.509573][T13874] ? security_inode_alloc+0x3b/0x2b0 [ 498.509600][T13874] security_inode_alloc+0x3b/0x2b0 [ 498.509630][T13874] inode_init_always_gfp+0xced/0x1040 [ 498.509674][T13874] alloc_inode+0x86/0x240 [ 498.509703][T13874] new_inode+0x22/0x1c0 [ 498.509736][T13874] hugetlbfs_get_inode+0x354/0x700 [ 498.509761][T13874] ? security_capable+0x7e/0x260 [ 498.509805][T13874] hugetlb_file_setup+0x38d/0x620 [ 498.509837][T13874] newseg+0xa74/0xe60 [ 498.509878][T13874] ? __pfx_newseg+0x10/0x10 [ 498.509911][T13874] ? vfs_write+0x15d/0x11d0 [ 498.509954][T13874] ipcget+0xf6/0xfa0 [ 498.509989][T13874] ? do_futex+0x122/0x350 [ 498.510020][T13874] ? __pfx_do_futex+0x10/0x10 [ 498.510056][T13874] ? __pfx_ipcget+0x10/0x10 [ 498.510092][T13874] ? __x64_sys_futex+0x1e0/0x4c0 [ 498.510121][T13874] ? __x64_sys_futex+0x1e9/0x4c0 [ 498.510157][T13874] __x64_sys_shmget+0x13b/0x1b0 [ 498.510214][T13874] ? __pfx___x64_sys_shmget+0x10/0x10 [ 498.510256][T13874] ? rcu_is_watching+0x12/0xc0 [ 498.510296][T13874] do_syscall_64+0xcd/0xf80 [ 498.510337][T13874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.510365][T13874] RIP: 0033:0x7fb382f8f7c9 [ 498.510388][T13874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 498.510415][T13874] RSP: 002b:00007fb383d8e038 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 498.510441][T13874] RAX: ffffffffffffffda RBX: 00007fb3831e5fa0 RCX: 00007fb382f8f7c9 [ 498.510459][T13874] RDX: 0000000079e56dc9 RSI: 0000000000000003 RDI: 0000000100000000 [ 498.510476][T13874] RBP: 00007fb383013f91 R08: 0000000000000000 R09: 0000000000000000 [ 498.510493][T13874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 498.510510][T13874] R13: 00007fb3831e6038 R14: 00007fb3831e5fa0 R15: 00007ffe3b4c38d8 [ 498.510548][T13874] [ 500.317199][T13900] netlink: 'syz.0.2091': attribute type 1 has an invalid length. [ 500.981307][T13920] FAULT_INJECTION: forcing a failure. [ 500.981307][T13920] name failslab, interval 1, probability 0, space 0, times 0 [ 501.009375][T13920] CPU: 0 UID: 0 PID: 13920 Comm: syz.2.2097 Tainted: G L syzkaller #0 PREEMPT(full) [ 501.009420][T13920] Tainted: [L]=SOFTLOCKUP [ 501.009430][T13920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 501.009444][T13920] Call Trace: [ 501.009451][T13920] [ 501.009462][T13920] dump_stack_lvl+0x16c/0x1f0 [ 501.009511][T13920] should_fail_ex+0x512/0x640 [ 501.009543][T13920] ? fs_reclaim_acquire+0xae/0x150 [ 501.009593][T13920] should_failslab+0xc2/0x120 [ 501.009635][T13920] kmem_cache_alloc_noprof+0x83/0x770 [ 501.009667][T13920] ? __pfx_map_id_range_down+0x10/0x10 [ 501.009706][T13920] ? security_inode_alloc+0x3b/0x2b0 [ 501.009741][T13920] ? security_inode_alloc+0x3b/0x2b0 [ 501.009769][T13920] security_inode_alloc+0x3b/0x2b0 [ 501.009799][T13920] inode_init_always_gfp+0xced/0x1040 [ 501.009845][T13920] alloc_inode+0x86/0x240 [ 501.009876][T13920] new_inode+0x22/0x1c0 [ 501.009910][T13920] hugetlbfs_get_inode+0x354/0x700 [ 501.009935][T13920] ? security_capable+0x7e/0x260 [ 501.009981][T13920] hugetlb_file_setup+0x38d/0x620 [ 501.010015][T13920] newseg+0xa74/0xe60 [ 501.010055][T13920] ? __pfx_newseg+0x10/0x10 [ 501.010090][T13920] ? vfs_write+0x15d/0x11d0 [ 501.010135][T13920] ipcget+0xf6/0xfa0 [ 501.010176][T13920] ? do_futex+0x122/0x350 [ 501.010211][T13920] ? __pfx_do_futex+0x10/0x10 [ 501.010249][T13920] ? __pfx_ipcget+0x10/0x10 [ 501.010287][T13920] ? __x64_sys_futex+0x1e0/0x4c0 [ 501.010318][T13920] ? __x64_sys_futex+0x1e9/0x4c0 [ 501.010357][T13920] __x64_sys_shmget+0x13b/0x1b0 [ 501.010395][T13920] ? __pfx___x64_sys_shmget+0x10/0x10 [ 501.010437][T13920] ? rcu_is_watching+0x12/0xc0 [ 501.010478][T13920] do_syscall_64+0xcd/0xf80 [ 501.010521][T13920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.010550][T13920] RIP: 0033:0x7f6e9158f7c9 [ 501.010572][T13920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 501.010599][T13920] RSP: 002b:00007f6e9237d038 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 501.010627][T13920] RAX: ffffffffffffffda RBX: 00007f6e917e5fa0 RCX: 00007f6e9158f7c9 [ 501.010646][T13920] RDX: 0000000079e56dc9 RSI: 0000000000000003 RDI: 0000000100000000 [ 501.010665][T13920] RBP: 00007f6e91613f91 R08: 0000000000000000 R09: 0000000000000000 [ 501.010684][T13920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 501.010702][T13920] R13: 00007f6e917e6038 R14: 00007f6e917e5fa0 R15: 00007ffe3c503fe8 [ 501.010741][T13920] [ 501.394072][T13932] bond0: invalid ARP target specified [ 501.409196][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.409278][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.595955][T13960] netlink: 'syz.0.2103': attribute type 1 has an invalid length. [ 503.209283][T14007] FAULT_INJECTION: forcing a failure. [ 503.209283][T14007] name failslab, interval 1, probability 0, space 0, times 0 [ 503.228564][T14007] CPU: 0 UID: 0 PID: 14007 Comm: syz.0.2108 Tainted: G L syzkaller #0 PREEMPT(full) [ 503.228611][T14007] Tainted: [L]=SOFTLOCKUP [ 503.228622][T14007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 503.228641][T14007] Call Trace: [ 503.228651][T14007] [ 503.228663][T14007] dump_stack_lvl+0x16c/0x1f0 [ 503.228720][T14007] should_fail_ex+0x512/0x640 [ 503.228753][T14007] ? fs_reclaim_acquire+0xae/0x150 [ 503.228801][T14007] should_failslab+0xc2/0x120 [ 503.228845][T14007] kmem_cache_alloc_noprof+0x83/0x770 [ 503.228880][T14007] ? __pfx_map_id_range_down+0x10/0x10 [ 503.228923][T14007] ? security_inode_alloc+0x3b/0x2b0 [ 503.228962][T14007] ? security_inode_alloc+0x3b/0x2b0 [ 503.228995][T14007] security_inode_alloc+0x3b/0x2b0 [ 503.229027][T14007] inode_init_always_gfp+0xced/0x1040 [ 503.229071][T14007] alloc_inode+0x86/0x240 [ 503.229100][T14007] new_inode+0x22/0x1c0 [ 503.229131][T14007] hugetlbfs_get_inode+0x354/0x700 [ 503.229156][T14007] ? security_capable+0x7e/0x260 [ 503.229199][T14007] hugetlb_file_setup+0x38d/0x620 [ 503.229229][T14007] newseg+0xa74/0xe60 [ 503.229268][T14007] ? __pfx_newseg+0x10/0x10 [ 503.229301][T14007] ? vfs_write+0x15d/0x11d0 [ 503.229340][T14007] ipcget+0xf6/0xfa0 [ 503.229372][T14007] ? do_futex+0x122/0x350 [ 503.229401][T14007] ? __pfx_do_futex+0x10/0x10 [ 503.229435][T14007] ? __pfx_ipcget+0x10/0x10 [ 503.229469][T14007] ? __x64_sys_futex+0x1e0/0x4c0 [ 503.229496][T14007] ? __x64_sys_futex+0x1e9/0x4c0 [ 503.229529][T14007] __x64_sys_shmget+0x13b/0x1b0 [ 503.229564][T14007] ? __pfx___x64_sys_shmget+0x10/0x10 [ 503.229597][T14007] ? rcu_is_watching+0x12/0xc0 [ 503.229638][T14007] do_syscall_64+0xcd/0xf80 [ 503.229681][T14007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.229717][T14007] RIP: 0033:0x7f4be998f7c9 [ 503.229742][T14007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 503.229770][T14007] RSP: 002b:00007f4bea81e038 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 503.229799][T14007] RAX: ffffffffffffffda RBX: 00007f4be9be5fa0 RCX: 00007f4be998f7c9 [ 503.229820][T14007] RDX: 0000000079e56dc9 RSI: 0000000000000003 RDI: 0000000100000000 [ 503.229839][T14007] RBP: 00007f4be9a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 503.229857][T14007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 503.229872][T14007] R13: 00007f4be9be6038 R14: 00007f4be9be5fa0 R15: 00007fff701a8c18 [ 503.229907][T14007] [ 503.928418][T14010] FAULT_INJECTION: forcing a failure. [ 503.928418][T14010] name failslab, interval 1, probability 0, space 0, times 0 [ 503.965105][T14010] CPU: 1 UID: 0 PID: 14010 Comm: syz.3.2109 Tainted: G L syzkaller #0 PREEMPT(full) [ 503.965149][T14010] Tainted: [L]=SOFTLOCKUP [ 503.965159][T14010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 503.965175][T14010] Call Trace: [ 503.965184][T14010] [ 503.965195][T14010] dump_stack_lvl+0x16c/0x1f0 [ 503.965239][T14010] should_fail_ex+0x512/0x640 [ 503.965268][T14010] ? fs_reclaim_acquire+0xae/0x150 [ 503.965311][T14010] should_failslab+0xc2/0x120 [ 503.965350][T14010] __kmalloc_noprof+0xeb/0x910 [ 503.965380][T14010] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 503.965424][T14010] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 503.965459][T14010] tomoyo_realpath_from_path+0xc2/0x6e0 [ 503.965499][T14010] ? tomoyo_profile+0x47/0x60 [ 503.965541][T14010] tomoyo_path_number_perm+0x245/0x580 [ 503.965571][T14010] ? tomoyo_path_number_perm+0x237/0x580 [ 503.965603][T14010] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 503.965635][T14010] ? find_held_lock+0x2b/0x80 [ 503.965705][T14010] ? find_held_lock+0x2b/0x80 [ 503.965736][T14010] ? hook_file_ioctl_common+0x144/0x410 [ 503.965774][T14010] ? __fget_files+0x20e/0x3c0 [ 503.965816][T14010] security_file_ioctl+0x9b/0x240 [ 503.965844][T14010] __x64_sys_ioctl+0xb7/0x210 [ 503.965865][T14010] do_syscall_64+0xcd/0xf80 [ 503.965905][T14010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.965932][T14010] RIP: 0033:0x7fb382f8f7c9 [ 503.965953][T14010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 503.965968][T14010] RSP: 002b:00007fb383d8e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 503.965983][T14010] RAX: ffffffffffffffda RBX: 00007fb3831e5fa0 RCX: 00007fb382f8f7c9 [ 503.965993][T14010] RDX: 0000000000000000 RSI: 000000004001af84 RDI: 0000000000000003 [ 503.966002][T14010] RBP: 00007fb383d8e090 R08: 0000000000000000 R09: 0000000000000000 [ 503.966011][T14010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 503.966019][T14010] R13: 00007fb3831e6038 R14: 00007fb3831e5fa0 R15: 00007ffe3b4c38d8 [ 503.966039][T14010] [ 503.966148][T14010] ERROR: Out of memory at tomoyo_realpath_from_path. [ 504.352004][T14016] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 504.845069][T14043] netlink: 'syz.3.2115': attribute type 1 has an invalid length. [ 504.899449][T14034] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2114'. [ 506.464783][T14091] netlink: 'syz.0.2128': attribute type 1 has an invalid length. [ 506.859811][T14099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2131'. [ 507.352529][T14113] FAULT_INJECTION: forcing a failure. [ 507.352529][T14113] name failslab, interval 1, probability 0, space 0, times 0 [ 507.384733][T14113] CPU: 1 UID: 0 PID: 14113 Comm: syz.3.2134 Tainted: G L syzkaller #0 PREEMPT(full) [ 507.384760][T14113] Tainted: [L]=SOFTLOCKUP [ 507.384766][T14113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 507.384775][T14113] Call Trace: [ 507.384781][T14113] [ 507.384788][T14113] dump_stack_lvl+0x16c/0x1f0 [ 507.384816][T14113] should_fail_ex+0x512/0x640 [ 507.384833][T14113] ? kmem_cache_alloc_noprof+0x62/0x770 [ 507.384853][T14113] should_failslab+0xc2/0x120 [ 507.384875][T14113] kmem_cache_alloc_noprof+0x83/0x770 [ 507.384893][T14113] ? __do_sys_getcwd+0xe0/0x930 [ 507.384914][T14113] ? __do_sys_getcwd+0xe0/0x930 [ 507.384930][T14113] __do_sys_getcwd+0xe0/0x930 [ 507.384949][T14113] ? __x64_sys_futex+0x1e0/0x4c0 [ 507.384966][T14113] ? __x64_sys_futex+0x1e9/0x4c0 [ 507.384982][T14113] ? __pfx___do_sys_getcwd+0x10/0x10 [ 507.384999][T14113] ? __pfx___x64_sys_futex+0x10/0x10 [ 507.385016][T14113] ? __pfx_ksys_write+0x10/0x10 [ 507.385042][T14113] do_syscall_64+0xcd/0xf80 [ 507.385066][T14113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.385082][T14113] RIP: 0033:0x7fb382f8f7c9 [ 507.385095][T14113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 507.385109][T14113] RSP: 002b:00007fb383d6d038 EFLAGS: 00000246 ORIG_RAX: 000000000000004f [ 507.385124][T14113] RAX: ffffffffffffffda RBX: 00007fb3831e6090 RCX: 00007fb382f8f7c9 [ 507.385134][T14113] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 507.385143][T14113] RBP: 00007fb383013f91 R08: 0000000000000000 R09: 0000000000000000 [ 507.385152][T14113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 507.385161][T14113] R13: 00007fb3831e6128 R14: 00007fb3831e6090 R15: 00007ffe3b4c38d8 [ 507.385181][T14113] [ 507.587014][T14116] FAULT_INJECTION: forcing a failure. [ 507.587014][T14116] name failslab, interval 1, probability 0, space 0, times 0 [ 507.599733][T14116] CPU: 1 UID: 0 PID: 14116 Comm: syz.1.2137 Tainted: G L syzkaller #0 PREEMPT(full) [ 507.599774][T14116] Tainted: [L]=SOFTLOCKUP [ 507.599784][T14116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 507.599794][T14116] Call Trace: [ 507.599801][T14116] [ 507.599808][T14116] dump_stack_lvl+0x16c/0x1f0 [ 507.599835][T14116] should_fail_ex+0x512/0x640 [ 507.599851][T14116] ? fs_reclaim_acquire+0xae/0x150 [ 507.599876][T14116] should_failslab+0xc2/0x120 [ 507.599898][T14116] __kmalloc_noprof+0xeb/0x910 [ 507.599914][T14116] ? tomoyo_encode2+0x100/0x3e0 [ 507.599937][T14116] ? tomoyo_encode2+0x100/0x3e0 [ 507.599955][T14116] tomoyo_encode2+0x100/0x3e0 [ 507.599976][T14116] tomoyo_encode+0x29/0x50 [ 507.599994][T14116] tomoyo_realpath_from_path+0x18f/0x6e0 [ 507.600015][T14116] ? tomoyo_profile+0x47/0x60 [ 507.600038][T14116] tomoyo_path_number_perm+0x245/0x580 [ 507.600055][T14116] ? tomoyo_path_number_perm+0x237/0x580 [ 507.600073][T14116] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 507.600090][T14116] ? find_held_lock+0x2b/0x80 [ 507.600126][T14116] ? find_held_lock+0x2b/0x80 [ 507.600143][T14116] ? hook_file_ioctl_common+0x144/0x410 [ 507.600164][T14116] ? __fget_files+0x20e/0x3c0 [ 507.600187][T14116] security_file_ioctl+0x9b/0x240 [ 507.600206][T14116] __x64_sys_ioctl+0xb7/0x210 [ 507.600225][T14116] do_syscall_64+0xcd/0xf80 [ 507.600254][T14116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.600269][T14116] RIP: 0033:0x7f669f78f7c9 [ 507.600283][T14116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 507.600297][T14116] RSP: 002b:00007f66a05d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 507.600312][T14116] RAX: ffffffffffffffda RBX: 00007f669f9e5fa0 RCX: 00007f669f78f7c9 [ 507.600322][T14116] RDX: 0000200000000040 RSI: 00000000000089fc RDI: 0000000000000003 [ 507.600331][T14116] RBP: 00007f66a05d8090 R08: 0000000000000000 R09: 0000000000000000 [ 507.600340][T14116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 507.600348][T14116] R13: 00007f669f9e6038 R14: 00007f669f9e5fa0 R15: 00007ffc56332ed8 [ 507.600368][T14116] [ 507.600384][T14116] ERROR: Out of memory at tomoyo_realpath_from_path. [ 507.914158][T14122] bridge0: port 3(veth0_to_bridge) entered blocking state [ 507.942223][T14122] bridge0: port 3(veth0_to_bridge) entered disabled state [ 507.994743][T14122] veth0_to_bridge: entered allmulticast mode [ 508.002820][T14122] veth0_to_bridge: entered promiscuous mode [ 508.011467][T14122] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 508.041603][T14122] bridge0: port 3(veth0_to_bridge) entered blocking state [ 508.048839][T14122] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 508.199972][T14129] netlink: 'syz.1.2140': attribute type 1 has an invalid length. [ 509.035609][T14140] queue_state_write: operation too long [ 509.050540][T14140] queue_state_write: use 'run', 'start' or 'kick' [ 509.533232][T14171] netlink: 'syz.2.2152': attribute type 1 has an invalid length. [ 510.712883][T14193] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input15 [ 511.632974][T14216] netlink: 'syz.3.2164': attribute type 1 has an invalid length. [ 512.665312][T14239] ima: Unable to open file: /surit‹¯Ròy/integrity?iqa/policy (-2) [ 512.805463][T14241] FAULT_INJECTION: forcing a failure. [ 512.805463][T14241] name failslab, interval 1, probability 0, space 0, times 0 [ 512.844735][T14241] CPU: 0 UID: 0 PID: 14241 Comm: syz.0.2169 Tainted: G L syzkaller #0 PREEMPT(full) [ 512.844760][T14241] Tainted: [L]=SOFTLOCKUP [ 512.844765][T14241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 512.844775][T14241] Call Trace: [ 512.844780][T14241] [ 512.844786][T14241] dump_stack_lvl+0x16c/0x1f0 [ 512.844812][T14241] should_fail_ex+0x512/0x640 [ 512.844829][T14241] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 512.844850][T14241] should_failslab+0xc2/0x120 [ 512.844872][T14241] kmem_cache_alloc_node_noprof+0x86/0x800 [ 512.844889][T14241] ? __alloc_skb+0x156/0x410 [ 512.844909][T14241] ? __alloc_skb+0x156/0x410 [ 512.844930][T14241] __alloc_skb+0x156/0x410 [ 512.844944][T14241] ? __alloc_skb+0x35d/0x410 [ 512.844959][T14241] ? __pfx___alloc_skb+0x10/0x10 [ 512.844975][T14241] ? netlink_autobind.isra.0+0x158/0x370 [ 512.845006][T14241] netlink_alloc_large_skb+0x69/0x140 [ 512.845043][T14241] netlink_sendmsg+0x698/0xdd0 [ 512.845071][T14241] ? __pfx_netlink_sendmsg+0x10/0x10 [ 512.845093][T14241] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 512.845120][T14241] ____sys_sendmsg+0xa5d/0xc30 [ 512.845143][T14241] ? copy_msghdr_from_user+0x10a/0x160 [ 512.845168][T14241] ? __pfx_____sys_sendmsg+0x10/0x10 [ 512.845216][T14241] ___sys_sendmsg+0x134/0x1d0 [ 512.845237][T14241] ? __pfx____sys_sendmsg+0x10/0x10 [ 512.845276][T14241] __sys_sendmsg+0x16d/0x220 [ 512.845295][T14241] ? __pfx___sys_sendmsg+0x10/0x10 [ 512.845324][T14241] do_syscall_64+0xcd/0xf80 [ 512.845347][T14241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.845362][T14241] RIP: 0033:0x7f4be998f7c9 [ 512.845375][T14241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 512.845390][T14241] RSP: 002b:00007f4bea81e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 512.845404][T14241] RAX: ffffffffffffffda RBX: 00007f4be9be5fa0 RCX: 00007f4be998f7c9 [ 512.845415][T14241] RDX: 0000000020000084 RSI: 0000200000000080 RDI: 0000000000000003 [ 512.845424][T14241] RBP: 00007f4bea81e090 R08: 0000000000000000 R09: 0000000000000000 [ 512.845433][T14241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 512.845442][T14241] R13: 00007f4be9be6038 R14: 00007f4be9be5fa0 R15: 00007fff701a8c18 [ 512.845461][T14241] [ 513.330126][T14238] ima: policy update failed [ 513.344324][ T30] audit: type=1802 audit(4294967492.969:66): pid=14238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.2168" res=0 errno=0 [ 513.761742][T14265] netlink: 'syz.2.2174': attribute type 1 has an invalid length. [ 515.450773][T14305] netlink: 252 bytes leftover after parsing attributes in process `syz.2.2185'. [ 515.464990][T14305] netlink: 252 bytes leftover after parsing attributes in process `syz.2.2185'. [ 515.528290][ T8169] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 515.799758][T14320] netlink: 'syz.2.2188': attribute type 1 has an invalid length. [ 517.564527][ T8171] Bluetooth: hci4: command 0x2016 tx timeout [ 517.637557][T14351] FAULT_INJECTION: forcing a failure. [ 517.637557][T14351] name failslab, interval 1, probability 0, space 0, times 0 [ 517.676188][T14351] CPU: 1 UID: 0 PID: 14351 Comm: syz.2.2195 Tainted: G L syzkaller #0 PREEMPT(full) [ 517.676213][T14351] Tainted: [L]=SOFTLOCKUP [ 517.676218][T14351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 517.676228][T14351] Call Trace: [ 517.676233][T14351] [ 517.676239][T14351] dump_stack_lvl+0x16c/0x1f0 [ 517.676266][T14351] should_fail_ex+0x512/0x640 [ 517.676283][T14351] ? kmem_cache_alloc_noprof+0x62/0x770 [ 517.676303][T14351] should_failslab+0xc2/0x120 [ 517.676325][T14351] kmem_cache_alloc_noprof+0x83/0x770 [ 517.676342][T14351] ? __pmd_alloc+0xbf/0x9c0 [ 517.676367][T14351] ? __pmd_alloc+0xbf/0x9c0 [ 517.676387][T14351] __pmd_alloc+0xbf/0x9c0 [ 517.676410][T14351] __handle_mm_fault+0xbeb/0x2bb0 [ 517.676438][T14351] ? __pfx___handle_mm_fault+0x10/0x10 [ 517.676464][T14351] ? find_vma+0xbf/0x140 [ 517.676482][T14351] ? __pfx_find_vma+0x10/0x10 [ 517.676504][T14351] handle_mm_fault+0x3fe/0xad0 [ 517.676522][T14351] do_user_addr_fault+0x7a6/0x1370 [ 517.676542][T14351] ? rcu_is_watching+0x12/0xc0 [ 517.676565][T14351] exc_page_fault+0x64/0xc0 [ 517.676587][T14351] asm_exc_page_fault+0x26/0x30 [ 517.676601][T14351] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 517.676619][T14351] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 0d 81 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 517.676634][T14351] RSP: 0018:ffffc900054679e8 EFLAGS: 00050206 [ 517.676646][T14351] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000038 [ 517.676656][T14351] RDX: fffff52000a8cf4e RSI: 0000000000000000 RDI: ffffc90005467a38 [ 517.676665][T14351] RBP: 0000000000000038 R08: 0000000000000001 R09: fffff52000a8cf4d [ 517.676675][T14351] R10: ffffc90005467a6f R11: ffff88802794e6b0 R12: 0000000000000000 [ 517.676684][T14351] R13: ffffc90005467a38 R14: ffffc90005467b30 R15: ffffc90005467a38 [ 517.676704][T14351] _copy_from_user+0x98/0xd0 [ 517.676721][T14351] copy_msghdr_from_user+0x98/0x160 [ 517.676740][T14351] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 517.676762][T14351] ? __pfx__kstrtoull+0x10/0x10 [ 517.676786][T14351] ___sys_sendmsg+0xfe/0x1d0 [ 517.676805][T14351] ? __pfx____sys_sendmsg+0x10/0x10 [ 517.676832][T14351] ? find_held_lock+0x2b/0x80 [ 517.676862][T14351] __sys_sendmmsg+0x200/0x420 [ 517.676883][T14351] ? __pfx___sys_sendmmsg+0x10/0x10 [ 517.676907][T14351] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 517.676937][T14351] ? fput+0x70/0xf0 [ 517.676951][T14351] ? ksys_write+0x1ac/0x250 [ 517.676971][T14351] ? __pfx_ksys_write+0x10/0x10 [ 517.677006][T14351] __x64_sys_sendmmsg+0x9c/0x100 [ 517.677037][T14351] ? lockdep_hardirqs_on+0x7c/0x110 [ 517.677074][T14351] do_syscall_64+0xcd/0xf80 [ 517.677112][T14351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.677139][T14351] RIP: 0033:0x7f6e9158f7c9 [ 517.677160][T14351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 517.677186][T14351] RSP: 002b:00007f6e9237d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 517.677209][T14351] RAX: ffffffffffffffda RBX: 00007f6e917e5fa0 RCX: 00007f6e9158f7c9 [ 517.677228][T14351] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 517.677243][T14351] RBP: 00007f6e9237d090 R08: 0000000000000000 R09: 0000000000000000 [ 517.677259][T14351] R10: 0000000007000000 R11: 0000000000000246 R12: 0000000000000001 [ 517.677276][T14351] R13: 00007f6e917e6038 R14: 00007f6e917e5fa0 R15: 00007ffe3c503fe8 [ 517.677314][T14351] [ 519.645693][ T6391] Bluetooth: hci4: command 0x2016 tx timeout [ 519.682180][T14356] FAULT_INJECTION: forcing a failure. [ 519.682180][T14356] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 519.695832][T14356] CPU: 1 UID: 0 PID: 14356 Comm: syz.1.2193 Tainted: G L syzkaller #0 PREEMPT(full) [ 519.695881][T14356] Tainted: [L]=SOFTLOCKUP [ 519.695893][T14356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 519.695913][T14356] Call Trace: [ 519.695924][T14356] [ 519.695936][T14356] dump_stack_lvl+0x16c/0x1f0 [ 519.695980][T14356] should_fail_ex+0x512/0x640 [ 519.696001][T14356] should_fail_alloc_page+0xe7/0x130 [ 519.696026][T14356] prepare_alloc_pages+0x401/0x670 [ 519.696049][T14356] ? stack_depot_save_flags+0x29/0x9b0 [ 519.696066][T14356] ? rcu_is_watching+0x12/0xc0 [ 519.696090][T14356] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 519.696109][T14356] ? kasan_save_stack+0x42/0x60 [ 519.696129][T14356] ? kasan_save_track+0x14/0x30 [ 519.696148][T14356] ? __kasan_slab_alloc+0x89/0x90 [ 519.696169][T14356] ? kmem_cache_alloc_noprof+0x25e/0x770 [ 519.696186][T14356] ? ptlock_alloc+0x1f/0x70 [ 519.696201][T14356] ? pte_alloc_one+0x84/0x3d0 [ 519.696220][T14356] ? __pte_alloc+0x6d/0x3f0 [ 519.696239][T14356] ? copy_page_range+0x3f3e/0x6780 [ 519.696254][T14356] ? copy_process+0x3b9f/0x7430 [ 519.696279][T14356] ? __lock_acquire+0x436/0x2890 [ 519.696295][T14356] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 519.696316][T14356] ? __lock_acquire+0x436/0x2890 [ 519.696335][T14356] ? __lock_acquire+0x436/0x2890 [ 519.696351][T14356] ? __lock_acquire+0x436/0x2890 [ 519.696364][T14356] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 519.696388][T14356] ? policy_nodemask+0xea/0x4e0 [ 519.696413][T14356] alloc_pages_mpol+0x1fb/0x550 [ 519.696436][T14356] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 519.696464][T14356] alloc_pages_noprof+0x131/0x390 [ 519.696487][T14356] pte_alloc_one+0x1e/0x3d0 [ 519.696508][T14356] __pte_alloc+0x6d/0x3f0 [ 519.696528][T14356] ? __pfx___pte_alloc+0x10/0x10 [ 519.696548][T14356] ? __pfx___might_resched+0x10/0x10 [ 519.696569][T14356] ? copy_page_range+0x22fb/0x6780 [ 519.696587][T14356] copy_page_range+0x3f3e/0x6780 [ 519.696626][T14356] ? __pfx_copy_page_range+0x10/0x10 [ 519.696648][T14356] ? __pfx___might_resched+0x10/0x10 [ 519.696667][T14356] ? __pfx_mas_store+0x10/0x10 [ 519.696685][T14356] ? dup_mmap+0xba4/0x20e0 [ 519.696697][T14356] ? down_write+0x14d/0x200 [ 519.696714][T14356] ? up_write+0x282/0x4e0 [ 519.696732][T14356] dup_mmap+0xbea/0x20e0 [ 519.696752][T14356] ? __pfx_dup_mmap+0x10/0x10 [ 519.696788][T14356] copy_process+0x3b9f/0x7430 [ 519.696810][T14356] ? __pfx___futex_wait+0x10/0x10 [ 519.696838][T14356] ? __pfx_copy_process+0x10/0x10 [ 519.696864][T14356] ? futex_private_hash_put+0x160/0x1b0 [ 519.696884][T14356] kernel_clone+0xfc/0x910 [ 519.696908][T14356] ? __pfx_kernel_clone+0x10/0x10 [ 519.696941][T14356] __do_sys_clone+0xce/0x120 [ 519.696965][T14356] ? __pfx___do_sys_clone+0x10/0x10 [ 519.696997][T14356] ? xfd_validate_state+0x61/0x180 [ 519.697011][T14356] ? __pfx_do_writev+0x10/0x10 [ 519.697037][T14356] do_syscall_64+0xcd/0xf80 [ 519.697060][T14356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.697076][T14356] RIP: 0033:0x7f669f78f7c9 [ 519.697090][T14356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 519.697105][T14356] RSP: 002b:00007f66a0595fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 519.697121][T14356] RAX: ffffffffffffffda RBX: 00007f669f9e6180 RCX: 00007f669f78f7c9 [ 519.697131][T14356] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 519.697141][T14356] RBP: 00007f669f813f91 R08: 0000000000000000 R09: 0000000000000000 [ 519.697151][T14356] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 519.697164][T14356] R13: 00007f669f9e6218 R14: 00007f669f9e6180 R15: 00007ffc56332ed8 [ 519.697189][T14356] [ 520.236502][ T8171] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 521.082007][T14369] FAULT_INJECTION: forcing a failure. [ 521.082007][T14369] name failslab, interval 1, probability 0, space 0, times 0 [ 521.154633][T14369] CPU: 1 UID: 0 PID: 14369 Comm: syz.3.2197 Tainted: G L syzkaller #0 PREEMPT(full) [ 521.154660][T14369] Tainted: [L]=SOFTLOCKUP [ 521.154666][T14369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 521.154675][T14369] Call Trace: [ 521.154681][T14369] [ 521.154688][T14369] dump_stack_lvl+0x16c/0x1f0 [ 521.154715][T14369] should_fail_ex+0x512/0x640 [ 521.154734][T14369] ? kmem_cache_alloc_noprof+0x62/0x770 [ 521.154754][T14369] should_failslab+0xc2/0x120 [ 521.154784][T14369] kmem_cache_alloc_noprof+0x83/0x770 [ 521.154803][T14369] ? __kernfs_new_node+0xd2/0x9b0 [ 521.154825][T14369] ? __kernfs_new_node+0xd2/0x9b0 [ 521.154842][T14369] __kernfs_new_node+0xd2/0x9b0 [ 521.154862][T14369] ? __pfx___kernfs_new_node+0x10/0x10 [ 521.154884][T14369] ? find_held_lock+0x2b/0x80 [ 521.154904][T14369] ? kernfs_root+0xee/0x2a0 [ 521.154924][T14369] kernfs_new_node+0x13c/0x1e0 [ 521.154946][T14369] __kernfs_create_file+0x53/0x350 [ 521.154971][T14369] sysfs_add_file_mode_ns+0x207/0x3c0 [ 521.154992][T14369] internal_create_group+0x597/0xf70 [ 521.155014][T14369] ? __pfx_internal_create_group+0x10/0x10 [ 521.155035][T14369] ? kernfs_create_link+0x1bd/0x240 [ 521.155060][T14369] internal_create_groups+0x9d/0x150 [ 521.155080][T14369] device_add+0xf56/0x1980 [ 521.155102][T14369] ? __pfx_device_add+0x10/0x10 [ 521.155121][T14369] ? lockdep_init_map_type+0x5c/0x270 [ 521.155136][T14369] ? __init_waitqueue_head+0xca/0x150 [ 521.155158][T14369] netdev_register_kobject+0x1a9/0x3d0 [ 521.155184][T14369] register_netdevice+0x13ac/0x21d0 [ 521.155209][T14369] ? __pfx_register_netdevice+0x10/0x10 [ 521.155235][T14369] internal_dev_create+0x2d3/0x520 [ 521.155260][T14369] ovs_vport_add+0x147/0x4d0 [ 521.155282][T14369] new_vport+0x16/0x1d0 [ 521.155300][T14369] ovs_dp_cmd_new+0x6ba/0xe60 [ 521.155323][T14369] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 521.155346][T14369] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 521.155371][T14369] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 521.155399][T14369] genl_family_rcv_msg_doit+0x209/0x2f0 [ 521.155424][T14369] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 521.155448][T14369] ? genl_get_cmd+0x194/0x580 [ 521.155473][T14369] ? bpf_lsm_capable+0x9/0x10 [ 521.155492][T14369] ? security_capable+0x7e/0x260 [ 521.155516][T14369] ? ns_capable+0xd7/0x110 [ 521.155537][T14369] genl_rcv_msg+0x55c/0x800 [ 521.155553][T14369] ? __pfx_genl_rcv_msg+0x10/0x10 [ 521.155568][T14369] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 521.155593][T14369] netlink_rcv_skb+0x158/0x420 [ 521.155613][T14369] ? __pfx_genl_rcv_msg+0x10/0x10 [ 521.155628][T14369] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 521.155662][T14369] ? netlink_deliver_tap+0x1ae/0xd30 [ 521.155684][T14369] genl_rcv+0x28/0x40 [ 521.155706][T14369] netlink_unicast+0x5aa/0x870 [ 521.155730][T14369] ? __pfx_netlink_unicast+0x10/0x10 [ 521.155759][T14369] netlink_sendmsg+0x8c8/0xdd0 [ 521.155789][T14369] ? __pfx_netlink_sendmsg+0x10/0x10 [ 521.155813][T14369] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 521.155842][T14369] ____sys_sendmsg+0xa5d/0xc30 [ 521.155865][T14369] ? copy_msghdr_from_user+0x10a/0x160 [ 521.155884][T14369] ? __pfx_____sys_sendmsg+0x10/0x10 [ 521.155905][T14369] ? preempt_schedule_thunk+0x16/0x30 [ 521.155923][T14369] ? try_to_wake_up+0xa67/0x1860 [ 521.155946][T14369] ___sys_sendmsg+0x134/0x1d0 [ 521.155966][T14369] ? __pfx____sys_sendmsg+0x10/0x10 [ 521.155985][T14369] ? futex_private_hash_put+0x160/0x1b0 [ 521.156023][T14369] __sys_sendmsg+0x16d/0x220 [ 521.156041][T14369] ? __pfx___sys_sendmsg+0x10/0x10 [ 521.156059][T14369] ? __x64_sys_futex+0x1e0/0x4c0 [ 521.156081][T14369] ? syscall_user_dispatch+0x78/0x140 [ 521.156105][T14369] do_syscall_64+0xcd/0xf80 [ 521.156129][T14369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.156144][T14369] RIP: 0033:0x7fb382f8f7c9 [ 521.156158][T14369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 521.156173][T14369] RSP: 002b:00007fb383d8e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 521.156188][T14369] RAX: ffffffffffffffda RBX: 00007fb3831e5fa0 RCX: 00007fb382f8f7c9 [ 521.156198][T14369] RDX: 0000000002000000 RSI: 0000200000000080 RDI: 0000000000000008 [ 521.156208][T14369] RBP: 00007fb383013f91 R08: 0000000000000000 R09: 0000000000000000 [ 521.156217][T14369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 521.156226][T14369] R13: 00007fb3831e6038 R14: 00007fb3831e5fa0 R15: 00007ffe3b4c38d8 [ 521.156247][T14369] [ 522.005785][T14376] netlink: 'syz.0.2198': attribute type 1 has an invalid length. [ 524.205741][ T8169] Bluetooth: hci4: unexpected subevent 0x01 length: 3 < 18 [ 525.018109][T14425] netlink: 'syz.2.2211': attribute type 1 has an invalid length. [ 525.501862][T14431] FAULT_INJECTION: forcing a failure. [ 525.501862][T14431] name failslab, interval 1, probability 0, space 0, times 0 [ 525.553691][T14431] CPU: 1 UID: 0 PID: 14431 Comm: syz.2.2212 Tainted: G L syzkaller #0 PREEMPT(full) [ 525.553718][T14431] Tainted: [L]=SOFTLOCKUP [ 525.553723][T14431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 525.553732][T14431] Call Trace: [ 525.553737][T14431] [ 525.553744][T14431] dump_stack_lvl+0x16c/0x1f0 [ 525.553771][T14431] should_fail_ex+0x512/0x640 [ 525.553787][T14431] ? fs_reclaim_acquire+0xae/0x150 [ 525.553811][T14431] should_failslab+0xc2/0x120 [ 525.553833][T14431] __kmalloc_noprof+0xeb/0x910 [ 525.553850][T14431] ? tomoyo_encode2+0x100/0x3e0 [ 525.553873][T14431] ? tomoyo_encode2+0x100/0x3e0 [ 525.553891][T14431] tomoyo_encode2+0x100/0x3e0 [ 525.553912][T14431] tomoyo_encode+0x29/0x50 [ 525.553930][T14431] tomoyo_realpath_from_path+0x18f/0x6e0 [ 525.553955][T14431] tomoyo_path_number_perm+0x245/0x580 [ 525.553971][T14431] ? tomoyo_path_number_perm+0x237/0x580 [ 525.553989][T14431] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 525.554007][T14431] ? find_held_lock+0x2b/0x80 [ 525.554042][T14431] ? find_held_lock+0x2b/0x80 [ 525.554060][T14431] ? hook_file_ioctl_common+0x144/0x410 [ 525.554081][T14431] ? __fget_files+0x20e/0x3c0 [ 525.554105][T14431] security_file_ioctl+0x9b/0x240 [ 525.554123][T14431] __x64_sys_ioctl+0xb7/0x210 [ 525.554142][T14431] do_syscall_64+0xcd/0xf80 [ 525.554165][T14431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.554181][T14431] RIP: 0033:0x7f6e9158f7c9 [ 525.554193][T14431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 525.554208][T14431] RSP: 002b:00007f6e9235c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 525.554223][T14431] RAX: ffffffffffffffda RBX: 00007f6e917e6090 RCX: 00007f6e9158f7c9 [ 525.554233][T14431] RDX: 0000000000000000 RSI: 000000004001af84 RDI: 0000000000000003 [ 525.554242][T14431] RBP: 00007f6e9235c090 R08: 0000000000000000 R09: 0000000000000000 [ 525.554251][T14431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 525.554260][T14431] R13: 00007f6e917e6128 R14: 00007f6e917e6090 R15: 00007ffe3c503fe8 [ 525.554280][T14431] [ 525.554294][T14431] ERROR: Out of memory at tomoyo_realpath_from_path. [ 526.236648][T14437] zswap: compressor not available [ 526.983991][T14456] FAULT_INJECTION: forcing a failure. [ 526.983991][T14456] name failslab, interval 1, probability 0, space 0, times 0 [ 527.006400][T14456] CPU: 0 UID: 0 PID: 14456 Comm: syz.3.2218 Tainted: G L syzkaller #0 PREEMPT(full) [ 527.006431][T14456] Tainted: [L]=SOFTLOCKUP [ 527.006437][T14456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 527.006447][T14456] Call Trace: [ 527.006453][T14456] [ 527.006459][T14456] dump_stack_lvl+0x16c/0x1f0 [ 527.006488][T14456] should_fail_ex+0x512/0x640 [ 527.006507][T14456] ? fs_reclaim_acquire+0xae/0x150 [ 527.006534][T14456] should_failslab+0xc2/0x120 [ 527.006558][T14456] kmem_cache_alloc_noprof+0x83/0x770 [ 527.006578][T14456] ? __pfx_map_id_range_down+0x10/0x10 [ 527.006600][T14456] ? security_inode_alloc+0x3b/0x2b0 [ 527.006620][T14456] ? security_inode_alloc+0x3b/0x2b0 [ 527.006635][T14456] security_inode_alloc+0x3b/0x2b0 [ 527.006653][T14456] inode_init_always_gfp+0xced/0x1040 [ 527.006679][T14456] alloc_inode+0x86/0x240 [ 527.006698][T14456] new_inode+0x22/0x1c0 [ 527.006717][T14456] hugetlbfs_get_inode+0x354/0x700 [ 527.006732][T14456] ? security_capable+0x7e/0x260 [ 527.006758][T14456] hugetlb_file_setup+0x38d/0x620 [ 527.006778][T14456] newseg+0xa74/0xe60 [ 527.006801][T14456] ? __pfx_newseg+0x10/0x10 [ 527.006821][T14456] ? vfs_write+0x15d/0x11d0 [ 527.006847][T14456] ipcget+0xf6/0xfa0 [ 527.006868][T14456] ? do_futex+0x122/0x350 [ 527.006887][T14456] ? __pfx_do_futex+0x10/0x10 [ 527.006908][T14456] ? __pfx_ipcget+0x10/0x10 [ 527.006929][T14456] ? __x64_sys_futex+0x1e0/0x4c0 [ 527.006946][T14456] ? __x64_sys_futex+0x1e9/0x4c0 [ 527.006967][T14456] __x64_sys_shmget+0x13b/0x1b0 [ 527.006989][T14456] ? __pfx___x64_sys_shmget+0x10/0x10 [ 527.007019][T14456] ? rcu_is_watching+0x12/0xc0 [ 527.007045][T14456] do_syscall_64+0xcd/0xf80 [ 527.007071][T14456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.007089][T14456] RIP: 0033:0x7fb382f8f7c9 [ 527.007103][T14456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 527.007119][T14456] RSP: 002b:00007fb383d8e038 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 527.007136][T14456] RAX: ffffffffffffffda RBX: 00007fb3831e5fa0 RCX: 00007fb382f8f7c9 [ 527.007156][T14456] RDX: 0000000079e56dc9 RSI: 0000000000000003 RDI: 0000000100000000 [ 527.007167][T14456] RBP: 00007fb383013f91 R08: 0000000000000000 R09: 0000000000000000 [ 527.007178][T14456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 527.007189][T14456] R13: 00007fb3831e6038 R14: 00007fb3831e5fa0 R15: 00007ffe3b4c38d8 [ 527.007212][T14456] [ 527.520981][T14461] FAULT_INJECTION: forcing a failure. [ 527.520981][T14461] name failslab, interval 1, probability 0, space 0, times 0 [ 527.551640][T14461] CPU: 1 UID: 0 PID: 14461 Comm: syz.2.2219 Tainted: G L syzkaller #0 PREEMPT(full) [ 527.551666][T14461] Tainted: [L]=SOFTLOCKUP [ 527.551671][T14461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 527.551680][T14461] Call Trace: [ 527.551685][T14461] [ 527.551692][T14461] dump_stack_lvl+0x16c/0x1f0 [ 527.551718][T14461] should_fail_ex+0x512/0x640 [ 527.551735][T14461] ? fs_reclaim_acquire+0xae/0x150 [ 527.551759][T14461] should_failslab+0xc2/0x120 [ 527.551782][T14461] __kmalloc_noprof+0xeb/0x910 [ 527.551798][T14461] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 527.551822][T14461] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 527.551841][T14461] tomoyo_realpath_from_path+0xc2/0x6e0 [ 527.551865][T14461] tomoyo_check_open_permission+0x2ab/0x3c0 [ 527.551883][T14461] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 527.551918][T14461] ? lock_acquire+0x179/0x330 [ 527.551932][T14461] ? find_held_lock+0x2b/0x80 [ 527.551951][T14461] ? mnt_get_write_access+0x52/0x2f0 [ 527.551970][T14461] tomoyo_file_open+0x6b/0x90 [ 527.551993][T14461] security_file_open+0x84/0x1e0 [ 527.552012][T14461] do_dentry_open+0x597/0x1590 [ 527.552035][T14461] ? security_inode_permission+0xbf/0x260 [ 527.552054][T14461] vfs_open+0x82/0x3f0 [ 527.552072][T14461] path_openat+0x2078/0x3140 [ 527.552100][T14461] ? __pfx_path_openat+0x10/0x10 [ 527.552130][T14461] do_filp_open+0x20b/0x470 [ 527.552152][T14461] ? __pfx_do_filp_open+0x10/0x10 [ 527.552179][T14461] ? __pfx_kfree_link+0x10/0x10 [ 527.552202][T14461] ? alloc_fd+0x471/0x7d0 [ 527.552228][T14461] do_sys_openat2+0x121/0x290 [ 527.552244][T14461] ? __pfx_do_sys_openat2+0x10/0x10 [ 527.552267][T14461] __x64_sys_openat+0x174/0x210 [ 527.552284][T14461] ? __pfx___x64_sys_openat+0x10/0x10 [ 527.552307][T14461] do_syscall_64+0xcd/0xf80 [ 527.552331][T14461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.552352][T14461] RIP: 0033:0x7f6e9158e010 [ 527.552365][T14461] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 527.552379][T14461] RSP: 002b:00007f6e9237cfe0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 527.552394][T14461] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f6e9158e010 [ 527.552404][T14461] RDX: 0000000000000002 RSI: 00007f6e9161424b RDI: 00000000ffffff9c [ 527.552413][T14461] RBP: 00007f6e9161424b R08: 0000000000000000 R09: 00007f6e9237e000 [ 527.552422][T14461] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 527.552431][T14461] R13: 00007f6e917e6038 R14: 00007f6e917e5fa0 R15: 00007ffe3c503fe8 [ 527.552451][T14461] [ 527.552457][T14461] ERROR: Out of memory at tomoyo_realpath_from_path. [ 527.844551][T14461] FAULT_INJECTION: forcing a failure. [ 527.844551][T14461] name failslab, interval 1, probability 0, space 0, times 0 [ 527.994560][T14461] CPU: 1 UID: 0 PID: 14461 Comm: syz.2.2219 Tainted: G L syzkaller #0 PREEMPT(full) [ 527.994604][T14461] Tainted: [L]=SOFTLOCKUP [ 527.994613][T14461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 527.994627][T14461] Call Trace: [ 527.994635][T14461] [ 527.994645][T14461] dump_stack_lvl+0x16c/0x1f0 [ 527.994685][T14461] should_fail_ex+0x512/0x640 [ 527.994712][T14461] ? __kmalloc_cache_noprof+0x5f/0x800 [ 527.994744][T14461] should_failslab+0xc2/0x120 [ 527.994780][T14461] __kmalloc_cache_noprof+0x80/0x800 [ 527.994808][T14461] ? newseg+0x25a/0xe60 [ 527.994843][T14461] ? newseg+0x25a/0xe60 [ 527.994869][T14461] ? __pfx___might_resched+0x10/0x10 [ 527.994902][T14461] newseg+0x25a/0xe60 [ 527.994936][T14461] ? __pfx_newseg+0x10/0x10 [ 527.994967][T14461] ? vfs_write+0x15d/0x11d0 [ 527.995005][T14461] ipcget+0xf6/0xfa0 [ 527.995039][T14461] ? do_sys_openat2+0x196/0x290 [ 527.995066][T14461] ? __pfx_do_sys_openat2+0x10/0x10 [ 527.995104][T14461] ? __pfx_ipcget+0x10/0x10 [ 527.995144][T14461] __x64_sys_shmget+0x13b/0x1b0 [ 527.995176][T14461] ? __pfx___x64_sys_shmget+0x10/0x10 [ 527.995212][T14461] ? rcu_is_watching+0x12/0xc0 [ 527.995247][T14461] do_syscall_64+0xcd/0xf80 [ 527.995285][T14461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.995310][T14461] RIP: 0033:0x7f6e9158f7c9 [ 527.995331][T14461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 527.995354][T14461] RSP: 002b:00007f6e9237d038 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 527.995378][T14461] RAX: ffffffffffffffda RBX: 00007f6e917e5fa0 RCX: 00007f6e9158f7c9 [ 527.995395][T14461] RDX: 0000000079e56dc9 RSI: 0000000000000003 RDI: 0000000100000000 [ 527.995410][T14461] RBP: 00007f6e9237d090 R08: 0000000000000000 R09: 0000000000000000 [ 527.995426][T14461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 527.995440][T14461] R13: 00007f6e917e6038 R14: 00007f6e917e5fa0 R15: 00007ffe3c503fe8 [ 527.995475][T14461] [ 528.753015][T14475] netlink: 'syz.2.2221': attribute type 1 has an invalid length. [ 528.970638][T14478] FAULT_INJECTION: forcing a failure. [ 528.970638][T14478] name failslab, interval 1, probability 0, space 0, times 0 [ 529.004131][T14478] CPU: 0 UID: 0 PID: 14478 Comm: syz.1.2222 Tainted: G L syzkaller #0 PREEMPT(full) [ 529.004182][T14478] Tainted: [L]=SOFTLOCKUP [ 529.004193][T14478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 529.004212][T14478] Call Trace: [ 529.004222][T14478] [ 529.004235][T14478] dump_stack_lvl+0x16c/0x1f0 [ 529.004288][T14478] should_fail_ex+0x512/0x640 [ 529.004320][T14478] ? fs_reclaim_acquire+0xae/0x150 [ 529.004370][T14478] should_failslab+0xc2/0x120 [ 529.004412][T14478] kmem_cache_alloc_noprof+0x83/0x770 [ 529.004447][T14478] ? __pfx_map_id_range_down+0x10/0x10 [ 529.004487][T14478] ? security_inode_alloc+0x3b/0x2b0 [ 529.004524][T14478] ? security_inode_alloc+0x3b/0x2b0 [ 529.004554][T14478] security_inode_alloc+0x3b/0x2b0 [ 529.004586][T14478] inode_init_always_gfp+0xced/0x1040 [ 529.004634][T14478] alloc_inode+0x86/0x240 [ 529.004666][T14478] new_inode+0x22/0x1c0 [ 529.004701][T14478] hugetlbfs_get_inode+0x354/0x700 [ 529.004728][T14478] ? security_capable+0x7e/0x260 [ 529.004776][T14478] hugetlb_file_setup+0x38d/0x620 [ 529.004811][T14478] newseg+0xa74/0xe60 [ 529.004853][T14478] ? __pfx_newseg+0x10/0x10 [ 529.004889][T14478] ? vfs_write+0x15d/0x11d0 [ 529.004935][T14478] ipcget+0xf6/0xfa0 [ 529.004972][T14478] ? do_futex+0x122/0x350 [ 529.005005][T14478] ? __pfx_do_futex+0x10/0x10 [ 529.005044][T14478] ? __pfx_ipcget+0x10/0x10 [ 529.005082][T14478] ? __x64_sys_futex+0x1e0/0x4c0 [ 529.005113][T14478] ? __x64_sys_futex+0x1e9/0x4c0 [ 529.005151][T14478] __x64_sys_shmget+0x13b/0x1b0 [ 529.005188][T14478] ? __pfx___x64_sys_shmget+0x10/0x10 [ 529.005229][T14478] ? rcu_is_watching+0x12/0xc0 [ 529.005276][T14478] do_syscall_64+0xcd/0xf80 [ 529.005323][T14478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.005352][T14478] RIP: 0033:0x7f669f78f7c9 [ 529.005376][T14478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 529.005404][T14478] RSP: 002b:00007f66a05d8038 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 529.005432][T14478] RAX: ffffffffffffffda RBX: 00007f669f9e5fa0 RCX: 00007f669f78f7c9 [ 529.005452][T14478] RDX: 0000000079e56dc9 RSI: 0000000000000003 RDI: 0000000100000000 [ 529.005471][T14478] RBP: 00007f669f813f91 R08: 0000000000000000 R09: 0000000000000000 [ 529.005490][T14478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 529.005508][T14478] R13: 00007f669f9e6038 R14: 00007f669f9e5fa0 R15: 00007ffc56332ed8 [ 529.005549][T14478] [ 531.568649][T14519] netlink: 'syz.1.2232': attribute type 1 has an invalid length. [ 532.137781][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 532.150267][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 532.162683][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 532.174875][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 532.187078][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 532.199239][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 532.211451][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 532.223685][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 532.235896][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 532.248067][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 537.144625][ C0] net_ratelimit: 22047 callbacks suppressed [ 537.144643][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 537.162748][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 537.174918][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 537.187104][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 537.199306][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 537.211508][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 537.223892][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 537.236077][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 537.248511][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 537.260913][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 542.154504][ C0] net_ratelimit: 22389 callbacks suppressed [ 542.154521][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 542.172645][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 542.184869][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 542.197073][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 542.209319][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 542.221593][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 542.233811][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 542.246020][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 542.258234][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 542.270420][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 545.244375][ C0] sched: DL replenish lagged too much [ 547.164528][ C0] net_ratelimit: 21989 callbacks suppressed [ 547.164546][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.182728][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.194965][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.207227][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.219490][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.231743][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.243972][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.256221][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.268595][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.280861][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 552.174451][ C0] net_ratelimit: 22272 callbacks suppressed [ 552.174469][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 552.192683][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 552.204906][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 552.217104][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 552.229284][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 552.241500][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 552.253720][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 552.266006][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 552.278204][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 552.290406][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.184578][ C0] net_ratelimit: 21547 callbacks suppressed [ 557.184596][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.202824][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:2c:1d:d3:fb:c5, vlan:0) [ 557.215102][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.227517][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.240219][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.252767][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.265299][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:2c:1d:d3:fb:c5, vlan:0) [ 557.277839][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.290266][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.302726][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.194585][ C0] net_ratelimit: 19733 callbacks suppressed [ 562.194611][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.212991][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.225492][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.238057][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.250691][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:2c:1d:d3:fb:c5, vlan:0) [ 562.263263][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:5a:cd:f8:82:cf, vlan:0) [ 562.275745][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 562.288314][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.300779][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.313275][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.857073][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.863418][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.258148][ T8171] Bluetooth: hci4: command 0x2016 tx timeout [ 567.204745][ C0] net_ratelimit: 8483 callbacks suppressed [ 567.204773][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.224261][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.236900][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:2c:1d:d3:fb:c5, vlan:0) [ 567.249529][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:5a:cd:f8:82:cf, vlan:0) [ 567.262082][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 567.274673][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.287176][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.299602][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.313566][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.326188][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:2c:1d:d3:fb:c5, vlan:0) [ 568.548727][T14558] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 572.214514][ C0] net_ratelimit: 12954 callbacks suppressed [ 572.214540][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 572.232926][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.246167][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.258492][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:2c:1d:d3:fb:c5, vlan:0) [ 572.270947][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:5a:cd:f8:82:cf, vlan:0) [ 572.283211][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 572.295648][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.307906][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.320256][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 572.332473][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.224598][ C0] net_ratelimit: 16370 callbacks suppressed [ 577.224616][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:5a:cd:f8:82:cf, vlan:0) [ 577.242919][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 577.255452][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.267916][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.280360][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 577.292813][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.306332][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.318886][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:2c:1d:d3:fb:c5, vlan:0) [ 577.331425][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:5a:cd:f8:82:cf, vlan:0) [ 577.343885][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 578.893685][T14546] Bluetooth: hci6: Opcode 0x0c03 failed: -4 [ 578.912477][T14558] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 580.463440][T14566] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 580.513327][T14558] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 580.530646][T14558] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 580.556518][T14566] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 580.588820][T14566] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 580.613384][T14558] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 580.978637][T14558] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 581.270226][ T8170] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 581.428952][T14566] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 581.722381][T14558] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 582.234470][ C0] net_ratelimit: 15841 callbacks suppressed [ 582.234495][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.252815][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 582.265049][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.277996][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.290293][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:2c:1d:d3:fb:c5, vlan:0) [ 582.302751][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:5a:cd:f8:82:cf, vlan:0) [ 582.315002][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 582.327410][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.339663][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.351998][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 582.682222][ T8170] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 582.798246][T14558] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 582.885370][T14558] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 582.901381][T14558] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 583.653078][T14572] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 584.773712][ T6391] Bluetooth: hci2: Opcode 0x0c16 failed: -110 [ 585.023292][ T6391] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 585.684124][ T8171] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 585.762155][ T8171] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 586.644222][ T8171] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 586.667662][ T8171] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 586.884822][ T6391] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 586.971191][ T6391] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 587.245140][ C0] net_ratelimit: 11913 callbacks suppressed [ 587.245157][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.263560][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:2c:1d:d3:fb:c5, vlan:0) [ 587.275902][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:5a:cd:f8:82:cf, vlan:0) [ 587.288241][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 587.300495][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.312864][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.325075][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 587.337406][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.350826][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.363257][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:2c:1d:d3:fb:c5, vlan:0) [ 592.254588][ C0] net_ratelimit: 13201 callbacks suppressed [ 592.254606][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 592.273025][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 592.285507][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 592.298009][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 592.310520][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 592.325365][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 592.337955][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:2c:1d:d3:fb:c5, vlan:0) [ 592.350543][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:5a:cd:f8:82:cf, vlan:0) [ 592.363030][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 592.375616][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 595.693449][ T8171] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 595.940526][ T8171] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 597.264461][ C0] net_ratelimit: 12826 callbacks suppressed [ 597.264480][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 597.285083][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 597.297842][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:2c:1d:d3:fb:c5, vlan:0) [ 597.310169][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:5a:cd:f8:82:cf, vlan:0) [ 597.322570][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 597.334853][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 597.347240][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 597.359439][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 597.371790][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 597.385467][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 598.386372][T14558] Bluetooth: hci6: Opcode 0x0c16 failed: -110 [ 601.650991][T14570] Bluetooth: hci6: Opcode 0x0c03 failed: -4 [ 602.275621][ C0] net_ratelimit: 13047 callbacks suppressed [ 602.275639][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 602.294006][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:2c:1d:d3:fb:c5, vlan:0) [ 602.306544][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:5a:cd:f8:82:cf, vlan:0) [ 602.318871][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 602.331100][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 602.343472][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 602.355662][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 602.367986][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 602.381273][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 602.393686][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:2c:1d:d3:fb:c5, vlan:0) [ 607.284478][ C0] net_ratelimit: 13331 callbacks suppressed [ 607.284502][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 607.302797][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 607.315235][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 607.329785][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 607.342323][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:2c:1d:d3:fb:c5, vlan:0) [ 607.354865][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:5a:cd:f8:82:cf, vlan:0) [ 607.367314][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 607.379834][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 607.392275][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 607.404751][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 612.294961][ C0] net_ratelimit: 12401 callbacks suppressed [ 612.294979][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 612.313374][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:2c:1d:d3:fb:c5, vlan:0) [ 612.325931][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:5a:cd:f8:82:cf, vlan:0) [ 612.338447][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 612.351069][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 612.363574][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 612.377141][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 612.389625][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 612.404305][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 612.416910][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:2c:1d:d3:fb:c5, vlan:0) [ 617.304428][ C0] net_ratelimit: 10650 callbacks suppressed [ 617.304454][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 617.322879][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 617.336425][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 617.348910][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 617.363547][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 617.376104][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:2c:1d:d3:fb:c5, vlan:0) [ 617.388653][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:5a:cd:f8:82:cf, vlan:0) [ 617.401125][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 617.413658][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 617.426099][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 622.315241][ C0] net_ratelimit: 10338 callbacks suppressed [ 622.315259][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 622.333694][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:2c:1d:d3:fb:c5, vlan:0) [ 622.346245][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:5a:cd:f8:82:cf, vlan:0) [ 622.358707][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 622.371007][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 622.383360][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 622.396111][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 622.408455][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 622.421810][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 622.434270][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:2c:1d:d3:fb:c5, vlan:0) [ 624.302424][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.308907][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.324466][ C0] net_ratelimit: 11746 callbacks suppressed [ 627.324490][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 627.343307][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:2c:1d:d3:fb:c5, vlan:0) [ 627.355879][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:5a:cd:f8:82:cf, vlan:0) [ 627.368168][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 627.380525][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 627.392763][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 627.405139][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:70:6d:88:ef:14, vlan:0) [ 627.417377][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 627.430297][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 627.442491][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 630.072936][T14587] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 630.322183][ T8171] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 630.348811][T14587] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 630.391199][ T8171] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 630.523035][T14587] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 630.539535][T14588] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 630.591253][T14588] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 630.644304][T14588] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 630.670927][T14587] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 630.719573][ T8171] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 630.816652][ T8171] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 631.398248][ T8171] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 632.334385][ C0] net_ratelimit: 12409 callbacks suppressed [ 632.334410][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 632.352795][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 632.365264][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 632.377688][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 632.390225][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 632.402565][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:70:6d:88:ef:14, vlan:0) [ 632.414898][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 632.427608][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 632.439943][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 632.453328][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 633.423604][T14558] Bluetooth: hci9: Opcode 0x0c23 failed: -110 [ 633.674744][T14587] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 633.733402][ T8171] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 635.724442][T14580] Bluetooth: hci9: Opcode 0x0c03 failed: -110 [ 635.811835][T14566] Bluetooth: hci8: Opcode 0x0c38 failed: -110 [ 635.902044][T14587] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 636.020661][T14566] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 637.344605][ C0] net_ratelimit: 12790 callbacks suppressed [ 637.344624][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 637.365259][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 637.377830][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:2c:1d:d3:fb:c5, vlan:0) [ 637.390173][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:5a:cd:f8:82:cf, vlan:0) [ 637.402517][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 637.414833][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 637.427225][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 637.439440][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 637.451826][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 637.464125][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:70:6d:88:ef:14, vlan:0) [ 638.284437][T14576] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 642.354708][ C0] net_ratelimit: 13501 callbacks suppressed [ 642.354726][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 642.373062][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 642.387572][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 642.400120][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:2c:1d:d3:fb:c5, vlan:0) [ 642.412648][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:5a:cd:f8:82:cf, vlan:0) [ 642.425095][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 642.437607][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 642.450052][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 642.462482][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 642.474978][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 644.387584][T14587] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 647.364624][ C0] net_ratelimit: 12716 callbacks suppressed [ 647.364641][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 647.382975][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 647.395403][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 647.407916][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 647.420524][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:70:6d:88:ef:14, vlan:0) [ 647.433021][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 647.446557][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 647.458805][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 647.472215][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 647.484660][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:2c:1d:d3:fb:c5, vlan:0) [ 647.938126][T14587] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 649.433457][T14566] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 650.001187][T14587] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 652.374595][ C0] net_ratelimit: 12563 callbacks suppressed [ 652.374613][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:2c:1d:d3:fb:c5, vlan:0) [ 652.392991][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:5a:cd:f8:82:cf, vlan:0) [ 652.405278][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 652.417648][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 652.429921][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 652.442287][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 652.454729][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 652.467053][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:70:6d:88:ef:14, vlan:0) [ 652.479424][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 652.492195][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 653.259961][ T8171] Bluetooth: hci11: Opcode 0x0c23 failed: -110 [ 653.580509][T14572] Bluetooth: hci2: command tx timeout [ 653.602473][T14572] Bluetooth: hci7: command tx timeout [ 653.623347][T14572] Bluetooth: hci10: command tx timeout [ 653.637830][T14572] Bluetooth: hci5: command tx timeout [ 653.819095][T14591] Bluetooth: hci11: Opcode 0x0c03 failed: -4 [ 655.661169][ T8169] Bluetooth: hci5: command tx timeout [ 655.897201][T14572] Bluetooth: hci10: command tx timeout [ 657.384508][ C0] net_ratelimit: 12718 callbacks suppressed [ 657.384524][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 657.403825][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 657.416262][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 657.429615][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 657.442019][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:2c:1d:d3:fb:c5, vlan:0) [ 657.454373][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:5a:cd:f8:82:cf, vlan:0) [ 657.466633][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 657.478967][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 657.491192][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 657.503514][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 657.752860][T14572] Bluetooth: hci5: command tx timeout [ 657.976772][T14572] Bluetooth: hci10: command tx timeout [ 659.812542][T14587] Bluetooth: hci5: command tx timeout [ 660.763485][ T8169] Bluetooth: hci7: command tx timeout [ 660.911356][T14567] Bluetooth: hci2: command tx timeout [ 662.394667][ C0] net_ratelimit: 13049 callbacks suppressed [ 662.394684][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 662.413044][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:2c:1d:d3:fb:c5, vlan:0) [ 662.425555][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:5a:cd:f8:82:cf, vlan:0) [ 662.438007][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 662.450290][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 662.462625][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 662.474800][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 662.487163][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 662.499429][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:70:6d:88:ef:14, vlan:0) [ 662.511782][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 662.852682][T14572] Bluetooth: hci7: command tx timeout [ 663.017375][ T8171] Bluetooth: hci2: command tx timeout [ 664.932169][T14567] Bluetooth: hci7: command tx timeout [ 667.405228][ C0] net_ratelimit: 13490 callbacks suppressed [ 667.405245][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 667.423664][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:2c:1d:d3:fb:c5, vlan:0) [ 667.436234][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:5a:cd:f8:82:cf, vlan:0) [ 667.448690][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 667.461235][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 667.473704][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 667.486160][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 667.498710][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 667.511266][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:70:6d:88:ef:14, vlan:0) [ 667.523723][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 671.624119][T14572] Bluetooth: hci10: command tx timeout [ 672.414351][ C0] net_ratelimit: 13069 callbacks suppressed [ 672.414375][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 672.434764][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 672.447261][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:2c:1d:d3:fb:c5, vlan:0) [ 672.459547][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:5a:cd:f8:82:cf, vlan:0) [ 672.471853][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 672.484075][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 672.496437][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 672.508614][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 672.520969][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 672.533241][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:70:6d:88:ef:14, vlan:0) [ 673.656887][ T8171] Bluetooth: hci2: command tx timeout [ 677.424465][ C0] net_ratelimit: 13300 callbacks suppressed [ 677.424483][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 677.443791][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 677.456245][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 677.470864][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 677.483458][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:2c:1d:d3:fb:c5, vlan:0) [ 677.496006][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:5a:cd:f8:82:cf, vlan:0) [ 677.508445][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 677.520964][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 677.533230][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 677.545505][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 681.613667][T14572] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 681.643337][ T8169] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 681.668983][T14572] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 681.753053][T14572] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 681.809201][ T8169] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 682.434355][ C0] net_ratelimit: 12705 callbacks suppressed [ 682.434371][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 682.452722][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:2c:1d:d3:fb:c5, vlan:0) [ 682.465190][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:5a:cd:f8:82:cf, vlan:0) [ 682.477411][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 682.489795][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 682.502029][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 682.514383][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 682.526641][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 682.539005][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:70:6d:88:ef:14, vlan:0) [ 682.551211][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 682.567972][T14572] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 682.620120][T14572] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 683.222368][T14572] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 683.277707][T14572] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 683.407680][T14572] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 683.492221][T14572] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 683.538036][T14572] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 683.599185][ T8171] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 685.728460][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.734921][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.064839][T14567] Bluetooth: hci1: Opcode 0x0c16 failed: -110 [ 687.444369][ C0] net_ratelimit: 12793 callbacks suppressed [ 687.444388][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 687.463203][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:5a:cd:f8:82:cf, vlan:0) [ 687.475713][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 687.487977][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 687.501232][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 687.513648][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:2c:1d:d3:fb:c5, vlan:0) [ 687.525903][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:5a:cd:f8:82:cf, vlan:0) [ 687.538233][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 687.550474][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 687.562821][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 687.589078][T14587] Bluetooth: hci0: command tx timeout [ 687.603439][T14566] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 687.628974][T14566] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 687.698443][T14601] Bluetooth: hci1: Opcode 0x0c03 failed: -4 [ 688.181228][T14566] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 689.738137][ T6391] Bluetooth: hci4: Opcode 0x1001 failed: -110 [ 690.216351][ T8169] Bluetooth: hci3: Opcode 0x0c23 failed: -110 [ 691.248212][ T6391] Bluetooth: hci0: command tx timeout [ 691.270017][ T8171] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 691.303490][ T8171] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 691.328073][ T6391] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 691.368938][ T8171] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 691.446668][ T6391] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 691.519251][ T8171] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 691.714140][ T8171] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 691.806688][ T8171] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 692.454423][ C0] net_ratelimit: 13016 callbacks suppressed [ 692.454452][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:5a:cd:f8:82:cf, vlan:0) [ 692.472828][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 692.485126][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 692.497452][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 692.509663][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 692.522029][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 692.534364][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:70:6d:88:ef:14, vlan:0) [ 692.546618][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 692.558901][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 692.571121][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 693.338547][ T8169] Bluetooth: hci0: command tx timeout [ 693.564560][T14607] Bluetooth: hci4: Opcode 0x1001 failed: -110 [ 695.416475][ T6391] Bluetooth: hci0: command tx timeout [ 697.106131][ T6391] Bluetooth: hci3: command tx timeout [ 697.464580][ C0] net_ratelimit: 12205 callbacks suppressed [ 697.464608][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 697.484145][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 697.497014][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:2c:1d:d3:fb:c5, vlan:0) [ 697.509383][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 697.521619][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:5a:cd:f8:82:cf, vlan:0) [ 697.533993][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 697.546244][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 697.558639][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 697.570821][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 697.583204][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 702.475523][ C0] net_ratelimit: 13319 callbacks suppressed [ 702.475542][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 702.495165][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:2c:1d:d3:fb:c5, vlan:0) [ 702.507641][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 702.520177][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:5a:cd:f8:82:cf, vlan:0) [ 702.532694][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 702.545271][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 702.557768][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 702.570236][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 702.582779][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 702.595351][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:70:6d:88:ef:14, vlan:0) [ 705.895843][ T6391] Bluetooth: hci3: command tx timeout [ 707.484587][ C0] net_ratelimit: 13111 callbacks suppressed [ 707.484610][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:2c:1d:d3:fb:c5, vlan:0) [ 707.502998][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 707.515533][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:5a:cd:f8:82:cf, vlan:0) [ 707.528005][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 707.540557][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 707.553016][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 707.565482][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 707.578031][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 707.590599][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:70:6d:88:ef:14, vlan:0) [ 707.603073][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 712.494352][ C0] net_ratelimit: 12967 callbacks suppressed [ 712.494369][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 712.512744][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:5a:cd:f8:82:cf, vlan:0) [ 712.525219][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 712.537802][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 712.550288][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 712.562768][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 712.575269][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 712.587837][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:70:6d:88:ef:14, vlan:0) [ 712.600313][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 712.612797][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 713.480580][ T8171] Bluetooth: hci3: command tx timeout [ 715.575403][ T6391] Bluetooth: hci3: command tx timeout [ 717.504960][ C0] net_ratelimit: 12773 callbacks suppressed [ 717.504981][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:2c:1d:d3:fb:c5, vlan:0) [ 717.523286][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 717.535770][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:5a:cd:f8:82:cf, vlan:0) [ 717.548239][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 717.560785][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 717.573269][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 717.585725][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 717.598277][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 717.610670][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:70:6d:88:ef:14, vlan:0) [ 717.623028][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 722.514436][ C0] net_ratelimit: 12956 callbacks suppressed [ 722.514453][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 722.532805][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 722.545373][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:70:6d:88:ef:14, vlan:0) [ 722.557848][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 722.570345][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 722.582918][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 722.595597][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:5a:cd:f8:82:cf, vlan:0) [ 722.608327][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 722.620566][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 722.634247][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 727.524910][ C0] net_ratelimit: 13168 callbacks suppressed [ 727.524927][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:2c:1d:d3:fb:c5, vlan:0) [ 727.543200][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 727.555703][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:5a:cd:f8:82:cf, vlan:0) [ 727.568177][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 727.580717][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 727.593172][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 727.605603][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 727.618104][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 727.630649][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:70:6d:88:ef:14, vlan:0) [ 727.643099][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 727.965128][ T31] INFO: task kworker/0:4:5882 blocked for more than 143 seconds. [ 727.972905][ T31] Tainted: G L syzkaller #0 [ 727.984338][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 727.998619][ T31] task:kworker/0:4 state:D stack:24456 pid:5882 tgid:5882 ppid:2 task_flags:0x4208060 flags:0x00080000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 728.011198][ T31] Workqueue: events_power_efficient reg_check_chans_work [ 728.018526][ T31] Call Trace: [ 728.021820][ T31] [ 728.039346][ T31] ? __schedule+0x10b9/0x6150 [ 728.044108][ T31] __schedule+0x1139/0x6150 [ 728.054332][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 728.059758][ T31] ? __pfx___schedule+0x10/0x10 [ 728.074664][ T31] ? find_held_lock+0x2b/0x80 [ 728.079389][ T31] ? schedule+0x2d7/0x3a0 [ 728.083757][ T31] schedule+0xe7/0x3a0 [ 728.104370][ T31] schedule_preempt_disabled+0x13/0x30 [ 728.109891][ T31] __mutex_lock+0xc69/0x1ca0 [ 728.129982][ T31] ? reg_check_chans_work+0x11b/0x1190 [ 728.144381][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 728.149470][ T31] ? __mutex_unlock_slowpath+0x161/0x790 [ 728.164698][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 728.170744][ T31] ? save_trace+0x1ad/0x380 [ 728.204320][ T31] ? add_lock_to_list+0x9d/0x130 [ 728.209336][ T31] ? reg_check_chans_work+0x11b/0x1190 [ 728.270468][ T31] reg_check_chans_work+0x11b/0x1190 [ 728.304365][ T31] ? __pfx_reg_check_chans_work+0x10/0x10 [ 728.310180][ T31] ? rcu_is_watching+0x12/0xc0 [ 728.374333][ T31] process_one_work+0x9ba/0x1b20 [ 728.379354][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 728.424345][ T31] ? __pfx_process_one_work+0x10/0x10 [ 728.429799][ T31] ? assign_work+0x1a0/0x250 [ 728.464338][ T31] worker_thread+0x6c8/0xf10 [ 728.469017][ T31] ? __pfx_worker_thread+0x10/0x10 [ 728.474154][ T31] kthread+0x3c5/0x780 [ 728.514432][ T31] ? __pfx_kthread+0x10/0x10 [ 728.519092][ T31] ? rcu_is_watching+0x12/0xc0 [ 728.523893][ T31] ? __pfx_kthread+0x10/0x10 [ 728.574378][ T31] ret_from_fork+0x983/0xb10 [ 728.579042][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 728.584180][ T31] ? __switch_to+0x7af/0x10d0 [ 728.614431][ T31] ? __pfx_kthread+0x10/0x10 [ 728.619084][ T31] ret_from_fork_asm+0x1a/0x30 [ 728.623905][ T31] [ 728.654468][ T31] [ 728.654468][ T31] Showing all locks held in the system: [ 728.662229][ T31] 4 locks held by kworker/1:0/24: [ 728.694379][ T31] #0: ffff888144f69948 ((wq_completion)wg-kex-wg0#8){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 728.724320][ T31] #1: ffffc900001e7c90 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 728.864325][ T31] #2: ffff88805f521308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_response+0x22b/0x950 [ 728.904374][ T31] #3: ffff888027a28338 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_response+0x2f7/0x950 [ 728.937171][ T31] 1 lock held by khungtaskd/31: [ 728.942073][ T31] #0: ffffffff8e3c9520 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 728.964756][ T31] 4 locks held by kworker/1:1/48: [ 728.969817][ T31] #0: ffff888142f86148 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 729.004370][ T31] #1: ffffc90000b87c90 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 729.084384][ T31] #2: ffff888027e29308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1c2/0x880 [ 729.097296][ T31] #3: ffff88807f38aad8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x5ac/0x880 [ 729.124355][ T31] 1 lock held by syz-executor/5831: [ 729.129600][ T31] #0: ffffffff901450a8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 729.150938][ T31] 4 locks held by kworker/0:4/5882: [ 729.156528][ T31] #0: ffff88813ff56948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 729.185188][ T31] #1: ffffc900042afc90 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 729.196184][ T31] #2: ffffffff901450a8 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x91/0x1190 [ 729.206238][ T31] #3: ffff88805aeb0788 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_check_chans_work+0x11b/0x1190 [ 729.220110][ T31] 2 locks held by kworker/0:5/5889: [ 729.225619][ T31] 2 locks held by kworker/0:6/5907: [ 729.230839][ T31] 3 locks held by kworker/u10:1/6393: [ 729.236707][ T31] 4 locks held by kworker/u10:8/6408: [ 729.242100][ T31] 2 locks held by kworker/u10:11/6411: [ 729.248048][ T31] 3 locks held by kworker/u10:13/6414: [ 729.254727][ T31] 3 locks held by kworker/u10:14/6420: [ 729.260208][ T31] 4 locks held by kworker/u10:19/6429: [ 729.266094][ T31] 4 locks held by kworker/u10:20/6430: [ 729.271569][ T31] 3 locks held by kworker/u10:24/6441: [ 729.277491][ T31] 3 locks held by kworker/u10:25/6442: [ 729.282965][ T31] 1 lock held by syz.1.1264/10688: [ 729.288464][ T31] #0: ffffffff901450a8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 729.302273][ T31] 2 locks held by getty/11933: [ 729.307335][ T31] #0: ffff8880316cd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 729.317444][ T31] #1: ffffc90017da12f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x1510 [ 729.329165][ T31] 1 lock held by syz-executor/12546: [ 729.334777][ T31] #0: ffffffff901450a8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 729.343808][ T31] 3 locks held by kworker/u10:28/13972: [ 729.351566][ T31] 4 locks held by kworker/u10:34/13978: [ 729.357435][ T31] 3 locks held by kworker/u10:40/13984: [ 729.362996][ T31] 3 locks held by kworker/u10:41/13985: [ 729.368947][ T31] 4 locks held by kworker/u10:42/13986: [ 729.374786][ T31] 4 locks held by kworker/u10:43/13987: [ 729.380351][ T31] 3 locks held by kworker/u10:44/13988: [ 729.386311][ T31] #0: ffff88814c9d4948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 729.397710][ T31] #1: ffffc90003047c90 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 729.411081][ T31] #2: ffffffff901450a8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x12/0x30 [ 729.420982][ T31] 3 locks held by kworker/u10:46/13990: [ 729.428088][ T31] 3 locks held by kworker/u10:47/13991: [ 729.433650][ T31] 3 locks held by kworker/u10:48/13993: [ 729.439668][ T31] 1 lock held by syz.0.2206/14405: [ 729.445050][ T31] #0: ffffffff901450a8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 729.454067][ T31] 4 locks held by kworker/1:9/14536: [ 729.459791][ T31] #0: ffff88814c89c148 ((wq_completion)wg-kex-wg1#8){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 729.471100][ T31] #1: ffffc90004857c90 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 729.511100][ T31] #2: ffff88807f2d9308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_response+0x22b/0x950 [ 729.523745][ T31] #3: ffff888027a2a0f0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_response+0x2f7/0x950 [ 729.537057][ T31] 1 lock held by syz-executor/14544: [ 729.542360][ T31] #0: ffffffff901450a8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 729.552254][ T31] 1 lock held by syz-executor/14545: [ 729.557916][ T31] #0: ffffffff901450a8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 729.572276][ T31] 1 lock held by syz-executor/14547: [ 729.577886][ T31] #0: ffffffff901450a8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 729.587622][ T31] 1 lock held by syz-executor/14584: [ 729.592920][ T31] #0: ffffffff901450a8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 729.602830][ T31] 1 lock held by syz-executor/14597: [ 729.608377][ T31] #0: ffffffff901450a8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 729.618137][ T31] 1 lock held by syz-executor/14604: [ 729.623432][ T31] #0: ffffffff901450a8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 729.639025][ T31] [ 729.641372][ T31] ============================================= [ 729.641372][ T31] [ 729.650479][ T31] NMI backtrace for cpu 1 [ 729.650510][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 729.650548][ T31] Tainted: [L]=SOFTLOCKUP [ 729.650557][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 729.650573][ T31] Call Trace: [ 729.650582][ T31] [ 729.650593][ T31] dump_stack_lvl+0x116/0x1f0 [ 729.650636][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 729.650669][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 729.650704][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 729.650745][ T31] sys_info+0x133/0x180 [ 729.650777][ T31] watchdog+0xe66/0x1180 [ 729.650828][ T31] ? rcu_is_watching+0x12/0xc0 [ 729.650862][ T31] ? __pfx_watchdog+0x10/0x10 [ 729.650897][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 729.650937][ T31] ? __kthread_parkme+0x19e/0x250 [ 729.650975][ T31] ? __pfx_watchdog+0x10/0x10 [ 729.651013][ T31] kthread+0x3c5/0x780 [ 729.651039][ T31] ? __pfx_kthread+0x10/0x10 [ 729.651073][ T31] ? rcu_is_watching+0x12/0xc0 [ 729.651108][ T31] ? __pfx_kthread+0x10/0x10 [ 729.651137][ T31] ret_from_fork+0x983/0xb10 [ 729.651166][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 729.651196][ T31] ? __switch_to+0x7af/0x10d0 [ 729.651229][ T31] ? __pfx_kthread+0x10/0x10 [ 729.651257][ T31] ret_from_fork_asm+0x1a/0x30 [ 729.651313][ T31] [ 729.651322][ T31] Sending NMI from CPU 1 to CPUs 0: [ 729.792768][ C0] NMI backtrace for cpu 0 [ 729.792791][ C0] CPU: 0 UID: 0 PID: 13984 Comm: kworker/u10:40 Tainted: G L syzkaller #0 PREEMPT(full) [ 729.792828][ C0] Tainted: [L]=SOFTLOCKUP [ 729.792837][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 729.792855][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 729.792886][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x23/0x70 [ 729.792927][ C0] Code: 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 34 24 65 48 8b 15 18 e7 f3 11 65 8b 05 29 e7 f3 11 a9 00 01 ff 00 74 1d f6 c4 01 74 43 00 00 0f 00 75 3c a9 00 00 f0 00 75 35 8b 82 6c 16 00 00 85 c0 [ 729.792952][ C0] RSP: 0018:ffffc90000006c10 EFLAGS: 00000202 [ 729.792972][ C0] RAX: 0000000080000102 RBX: 2978d5272469d436 RCX: ffffffff89419098 [ 729.792991][ C0] RDX: ffff88805b131e80 RSI: ffffffff8b7114e4 RDI: ffffc90000006d08 [ 729.793009][ C0] RBP: 3164d6203378c324 R08: 0000000000000003 R09: 0000000000000006 [ 729.793026][ C0] R10: 0000000000000001 R11: ffff88805b1329b0 R12: 2e72dc202d6ed430 [ 729.793043][ C0] R13: ffffc90000006d28 R14: dffffc0000000000 R15: 3972c3243379de28 [ 729.793062][ C0] FS: 0000000000000000(0000) GS:ffff8881248fc000(0000) knlGS:0000000000000000 [ 729.793087][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 729.793104][ C0] CR2: 000055555f6827e0 CR3: 000000000e184000 CR4: 00000000003526f0 [ 729.793122][ C0] Call Trace: [ 729.793130][ C0] [ 729.793140][ C0] __siphash_unaligned+0xd4/0x360 [ 729.793183][ C0] __flow_hash_from_keys+0x186/0x4e0 [ 729.793226][ C0] rt6_multipath_hash+0x691/0x1920 [ 729.793255][ C0] ? br_dev_queue_push_xmit+0xc8/0x8a0 [ 729.793289][ C0] ? __pfx_rt6_multipath_hash+0x10/0x10 [ 729.793325][ C0] ? br_nf_dev_queue_xmit+0x5b3/0x2b00 [ 729.793365][ C0] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 729.793404][ C0] ? br_nf_post_routing+0x59b/0x1190 [ 729.793440][ C0] ? find_held_lock+0x2b/0x80 [ 729.793476][ C0] ? ip6_route_input+0xacd/0xc70 [ 729.793504][ C0] ip6_route_input+0xacd/0xc70 [ 729.793540][ C0] ? __pfx_ip6_route_input+0x10/0x10 [ 729.793567][ C0] ? __pfx_nf_hook+0x10/0x10 [ 729.793601][ C0] ? __pfx_ip6table_mangle_hook+0x10/0x10 [ 729.793636][ C0] ? __lock_acquire+0x436/0x2890 [ 729.793660][ C0] ? __netif_receive_skb_core.constprop.0+0x6fd/0x35b0 [ 729.793695][ C0] ip6_rcv_finish_core.constprop.0+0x1a0/0x5d0 [ 729.793728][ C0] ip6_rcv_finish+0x130/0x580 [ 729.793757][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 729.793787][ C0] ? __pfx_ip_sabotage_in+0x10/0x10 [ 729.793819][ C0] ip_sabotage_in+0x21e/0x290 [ 729.793853][ C0] nf_hook_slow+0xbe/0x200 [ 729.793887][ C0] nf_hook.constprop.0+0x424/0x750 [ 729.793916][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 729.793946][ C0] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 729.793975][ C0] ? ip6_rcv_core+0xbd4/0x1c30 [ 729.794005][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 729.794034][ C0] ? ip6_rcv_core+0xc70/0x1c30 [ 729.794065][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 729.794093][ C0] ipv6_rcv+0xa4/0x650 [ 729.794121][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 729.794148][ C0] __netif_receive_skb_one_core+0x12d/0x1e0 [ 729.794178][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 729.794209][ C0] ? lock_acquire+0x179/0x330 [ 729.794237][ C0] __netif_receive_skb+0x1d/0x160 [ 729.794269][ C0] netif_receive_skb+0x137/0x760 [ 729.794294][ C0] ? __pfx_netif_receive_skb+0x10/0x10 [ 729.794326][ C0] ? br_netif_receive_skb+0xff/0x200 [ 729.794362][ C0] br_pass_frame_up+0x346/0x490 [ 729.794398][ C0] br_handle_frame_finish+0x10e8/0x1f00 [ 729.794438][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 729.794480][ C0] ? ip6t_do_table+0xc25/0x1c30 [ 729.794508][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 729.794540][ C0] ? nf_hook_slow+0x132/0x200 [ 729.794573][ C0] br_nf_hook_thresh+0x307/0x410 [ 729.794609][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 729.794649][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 729.794687][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 729.794724][ C0] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 729.794753][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 729.794788][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 729.794832][ C0] br_nf_pre_routing_finish_ipv6+0x76a/0xfc0 [ 729.794870][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 729.794911][ C0] br_nf_pre_routing_ipv6+0x3cd/0x8c0 [ 729.794949][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 729.794986][ C0] ? lock_acquire+0x179/0x330 [ 729.795010][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 729.795049][ C0] ? net_generic+0xea/0x2a0 [ 729.795086][ C0] br_nf_pre_routing+0x860/0x15b0 [ 729.795125][ C0] br_handle_frame+0xb28/0x14e0 [ 729.795163][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 729.795200][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 729.795239][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 729.795275][ C0] __netif_receive_skb_core.constprop.0+0x6b3/0x35b0 [ 729.795311][ C0] ? kmem_cache_free+0x2d8/0x770 [ 729.795342][ C0] ? find_held_lock+0x2b/0x80 [ 729.795372][ C0] ? kfree_skbmem+0x1a4/0x1f0 [ 729.795398][ C0] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 729.795429][ C0] ? kfree_skbmem+0x1a4/0x1f0 [ 729.795451][ C0] ? kfree_skbmem+0x1a4/0x1f0 [ 729.795473][ C0] ? sk_skb_reason_drop+0x136/0x1a0 [ 729.795509][ C0] ? ip6_mc_input+0x515/0xf60 [ 729.795545][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 729.795576][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 729.795607][ C0] ? __lock_acquire+0x436/0x2890 [ 729.795634][ C0] ? process_backlog+0x450/0x1650 [ 729.795661][ C0] __netif_receive_skb_one_core+0xb0/0x1e0 [ 729.795691][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 729.795721][ C0] ? lock_acquire+0x179/0x330 [ 729.795749][ C0] ? process_backlog+0x450/0x1650 [ 729.795776][ C0] __netif_receive_skb+0x1d/0x160 [ 729.795804][ C0] process_backlog+0x4a2/0x1650 [ 729.795837][ C0] __napi_poll.constprop.0+0xb3/0x540 [ 729.795868][ C0] net_rx_action+0x9f9/0xfa0 [ 729.795901][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 729.795930][ C0] ? find_held_lock+0x10/0x80 [ 729.795962][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 729.795997][ C0] ? sched_clock+0x38/0x60 [ 729.796034][ C0] ? sched_clock_cpu+0x6c/0x530 [ 729.796079][ C0] ? mark_held_locks+0x49/0x80 [ 729.796104][ C0] handle_softirqs+0x219/0x950 [ 729.796142][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 729.796177][ C0] ? nsim_dev_trap_report_work+0x8b5/0xcf0 [ 729.796203][ C0] do_softirq+0xb2/0xf0 [ 729.796235][ C0] [ 729.796243][ C0] [ 729.796252][ C0] __local_bh_enable_ip+0x100/0x120 [ 729.796287][ C0] nsim_dev_trap_report_work+0x8b5/0xcf0 [ 729.796322][ C0] process_one_work+0x9ba/0x1b20 [ 729.796356][ C0] ? __pfx_process_one_work+0x10/0x10 [ 729.796389][ C0] ? assign_work+0x1a0/0x250 [ 729.796416][ C0] worker_thread+0x6c8/0xf10 [ 729.796448][ C0] ? __kthread_parkme+0x19e/0x250 [ 729.796485][ C0] ? __pfx_worker_thread+0x10/0x10 [ 729.796512][ C0] kthread+0x3c5/0x780 [ 729.796541][ C0] ? __pfx_kthread+0x10/0x10 [ 729.796566][ C0] ? rcu_is_watching+0x12/0xc0 [ 729.796600][ C0] ? __pfx_kthread+0x10/0x10 [ 729.796626][ C0] ret_from_fork+0x983/0xb10 [ 729.796650][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 729.796677][ C0] ? __switch_to+0x7af/0x10d0 [ 729.796709][ C0] ? __pfx_kthread+0x10/0x10 [ 729.796734][ C0] ret_from_fork_asm+0x1a/0x30 [ 729.796780][ C0] [ 729.811576][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 729.811602][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 729.811642][ T31] Tainted: [L]=SOFTLOCKUP [ 729.811652][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 729.811669][ T31] Call Trace: [ 729.811679][ T31] [ 729.811691][ T31] dump_stack_lvl+0x3d/0x1f0 [ 729.811735][ T31] vpanic+0x640/0x6f0 [ 729.811764][ T31] panic+0xca/0xd0 [ 729.811797][ T31] ? __pfx_panic+0x10/0x10 [ 729.811822][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 729.811852][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 729.811884][ T31] ? nmi_trigger_cpumask_backtrace+0x2be/0x300 [ 729.811918][ T31] ? watchdog+0xe83/0x1180 [ 729.811954][ T31] ? watchdog+0xe76/0x1180 [ 729.811992][ T31] watchdog+0xe94/0x1180 [ 729.812037][ T31] ? rcu_is_watching+0x12/0xc0 [ 729.812073][ T31] ? __pfx_watchdog+0x10/0x10 [ 729.812109][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 729.812150][ T31] ? __kthread_parkme+0x19e/0x250 [ 729.812190][ T31] ? __pfx_watchdog+0x10/0x10 [ 729.812227][ T31] kthread+0x3c5/0x780 [ 729.812255][ T31] ? __pfx_kthread+0x10/0x10 [ 729.812284][ T31] ? rcu_is_watching+0x12/0xc0 [ 729.812320][ T31] ? __pfx_kthread+0x10/0x10 [ 729.812348][ T31] ret_from_fork+0x983/0xb10 [ 729.812376][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 730.651496][ T31] ? __switch_to+0x7af/0x10d0 [ 730.656206][ T31] ? __pfx_kthread+0x10/0x10 [ 730.660816][ T31] ret_from_fork_asm+0x1a/0x30 [ 730.665630][ T31] [ 730.669009][ T31] Kernel Offset: disabled [ 730.673320][ T31] Rebooting in 86400 seconds..