last executing test programs: 9m25.80330777s ago: executing program 0 (id=539): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x2, 0x3) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) io_uring_setup$auto(0x8, &(0x7f0000000040)={0x0, 0x7, 0x2, 0x7, 0x2, 0x1, r1, [0xb55, 0x6, 0xc], {0x10000, 0x7, 0x40, 0x800, 0xffffff48, 0x0, 0x264c, 0xc, 0x81}, {0x4, 0x0, 0xc24, 0x8, 0x1, 0x0, 0x5, 0xc, 0x7f}}) read$auto(r1, 0x0, 0x4) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000240)={0x0, 0x7}, 0x3) bpf$auto_BPF_ENABLE_STATS(0x20, 0x0, 0x5) semget$auto(0x7, 0x20000, 0x0) ioctl$auto_SNDCTL_SEQ_GETTIME(r0, 0x80045113, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/uts\x00') 9m24.898484912s ago: executing program 0 (id=542): mmap$auto(0x5, 0x40009, 0xe0, 0x9b72, 0x7, 0x27ffe) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev3\x00', 0x169000, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f00000001c0)=0x52) write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000040)="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", 0xfd) 9m24.557378824s ago: executing program 0 (id=544): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x40000b, 0xde, 0x200009b72, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC1\x00', 0x101082, 0x0) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vbi11\x00', 0xc0c02, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r4 = open$dir(&(0x7f0000000000)='./file0\x00', 0x42, 0x20) r5 = socket$nl_generic(0x11, 0x3, 0x10) bpf$auto(0x9, &(0x7f0000000a40)=@prog_bind_map={r5, r4, 0x2f}, 0x121) ioctl$auto(r2, 0xc0045543, r3) sendmsg$auto_TIPC_NL_ADDR_LEGACY_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000bea48b7301055904476a09e3bfff2bfc9d8e76ddd215e3f62dbd17973516ad11afecbda8a3503661d6ffaf04427921877f3eeda3463c24c93cdd39e9fd819f834afd1858766ecceea5693e27c6e1ef5e6fc016c56dff6489e2d58bad550928d95250c11a1a7ac517d884516e483917f7956a379aa535ce4df63ef733677e", @ANYRES16=r1, @ANYBLOB="010029bd7000fedbdf2519000000"], 0x14}, 0x1, 0x0, 0x0, 0x24044081}, 0x24000800) 9m22.057052707s ago: executing program 0 (id=553): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/cifs/smbd_max_fragmented_recv_size\x00', 0xe0002, 0x0) write$auto(0x3, 0x0, 0xfffffdef) r1 = syz_genetlink_get_family_id$auto_netdev(0x0, r0) sendmsg$auto_NETDEV_CMD_DEV_GET(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14, r1, 0x301, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0xf0ffff, 0x0, 0x4005}, 0x28044004) getsockopt$auto_SO_RXQ_OVFL(r0, 0x8, 0x28, &(0x7f0000000500)=',{\x00', &(0x7f0000000540)=0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) close_range$auto(r0, r2, 0x7) write$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000000040)="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", 0x2e3) socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x0, 0xffffff7fffff0005, 0x8) r3 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000340)='/dev/binderfs/binder0\x00', 0x50000, 0x0) ioctl$auto_BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000380)="ea07484324675c006d7b72b8ec85a1091e60f482529b535dbd5c08c09fb3db0dcca841a8a76ab86659108c") getrandom$auto(0x0, 0x6000000, 0x3) bpf$auto(0x5, &(0x7f0000000080)=@bpf_attr_7={@prog_id=0x1c, 0x92f1, 0x4}, 0xa) madvise$auto(0x3, 0x0, 0x9) 9m6.834822397s ago: executing program 32 (id=553): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/cifs/smbd_max_fragmented_recv_size\x00', 0xe0002, 0x0) write$auto(0x3, 0x0, 0xfffffdef) r1 = syz_genetlink_get_family_id$auto_netdev(0x0, r0) sendmsg$auto_NETDEV_CMD_DEV_GET(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14, r1, 0x301, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0xf0ffff, 0x0, 0x4005}, 0x28044004) getsockopt$auto_SO_RXQ_OVFL(r0, 0x8, 0x28, &(0x7f0000000500)=',{\x00', &(0x7f0000000540)=0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) close_range$auto(r0, r2, 0x7) write$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000000040)="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", 0x2e3) socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x0, 0xffffff7fffff0005, 0x8) r3 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000340)='/dev/binderfs/binder0\x00', 0x50000, 0x0) ioctl$auto_BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000380)="ea07484324675c006d7b72b8ec85a1091e60f482529b535dbd5c08c09fb3db0dcca841a8a76ab86659108c") getrandom$auto(0x0, 0x6000000, 0x3) bpf$auto(0x5, &(0x7f0000000080)=@bpf_attr_7={@prog_id=0x1c, 0x92f1, 0x4}, 0xa) madvise$auto(0x3, 0x0, 0x9) 9m5.188096302s ago: executing program 1 (id=613): r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_FLOW_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x18, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@OVS_FLOW_ATTR_KEY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x800) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040804) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R'], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 9m4.805506986s ago: executing program 1 (id=616): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/run\x00', 0x88b02, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/md_mod/parameters/start_ro\x00', 0x181b00, 0x0) sendfile$auto(r0, r1, 0x0, 0x3) 9m4.366929503s ago: executing program 1 (id=617): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r0, 0x0) (async, rerun: 64) mmap$auto(0xffffffffffffffff, 0x2020009, 0xa8de, 0xeb1, r0, 0x8000) (async, rerun: 64) init_module$auto(0x0, 0xffff9, 0x0) (async) r1 = epoll_create$auto(0x4) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptyyb\x00', 0x40040, 0x0) (async) socket(0x25, 0x1, 0x7) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptye4\x00', 0x1838c2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x8000, 0x70) renameat2$auto(r3, 0x0, r3, 0x0, 0x5) (async) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x1000) (async) ioctl$auto_USB_RAW_IOCTL_EP_SET_HALT(r1, 0x4004550d, &(0x7f0000000180)=0x798) (async) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0xf}, 0x3, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000004c0)={[0x1ff, 0x8, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x3, 0x6d3f, 0x9, 0x8, 0xfffffffffffffffe]}, 0x0) (async) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000440)={[0x10000000001ff, 0x4, 0xd, 0x1, 0x3, 0x10, 0x15f4da0a, 0x3, 0x5, 0x62, 0x80000023, 0x7, 0x6d3e, 0xd, 0xd, 0x40000000001]}, 0x0) (async) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video15\x00', 0x180, 0x0) read$auto_v4l2_fops_v4l2_dev(r4, &(0x7f0000000000)=""/194, 0xc2) (async) close_range$auto(0x0, 0x5, 0x0) (async) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) socket(0x15, 0x5, 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) mmap$auto(0x0, 0xe982, 0xdf, 0x20000000000eb1, 0x401, 0x8000) (async) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r5, 0x0, 0x20) 9m4.08174878s ago: executing program 1 (id=619): socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x8000000000000001) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getpid() (async) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x503083, 0x0) (async) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x40800) (async) unshare$auto(0x40000080) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r1) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x805, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_NETNS_FD={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) (async) sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001280)={&(0x7f0000001140)={0x14, r2, 0x8, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x91}, 0x10) (async) ioctl$auto_MON_IOCX_MFETCH(r0, 0xc0109207, 0x0) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) (async) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) (async) r3 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2002, 0x0) ioctl$auto(r3, 0x400454ca, 0x38) (async) ioctl$auto_MON_IOCX_MFETCH(r0, 0xc0109207, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mlockall$auto(0x7) mprotect$auto(0x0, 0x806121, 0x6) bpf$auto(0x5, &(0x7f0000000080)=@bpf_attr_7={@prog_id=0xc, 0x92f1, 0x4}, 0xa) (async) setitimer$auto(0x0, &(0x7f0000001a00)={{0x80, 0x9}, {0x6, 0x100}}, 0x0) getitimer$auto_ITIMER_REAL(0x0, &(0x7f0000001bc0)={{0x2, 0x7fffffffffffffff}, {0x7, 0x1000}}) 8m48.903901124s ago: executing program 33 (id=619): socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x8000000000000001) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getpid() (async) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x503083, 0x0) (async) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x40800) (async) unshare$auto(0x40000080) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r1) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x805, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_NETNS_FD={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) (async) sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001280)={&(0x7f0000001140)={0x14, r2, 0x8, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x91}, 0x10) (async) ioctl$auto_MON_IOCX_MFETCH(r0, 0xc0109207, 0x0) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) (async) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) (async) r3 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2002, 0x0) ioctl$auto(r3, 0x400454ca, 0x38) (async) ioctl$auto_MON_IOCX_MFETCH(r0, 0xc0109207, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mlockall$auto(0x7) mprotect$auto(0x0, 0x806121, 0x6) bpf$auto(0x5, &(0x7f0000000080)=@bpf_attr_7={@prog_id=0xc, 0x92f1, 0x4}, 0xa) (async) setitimer$auto(0x0, &(0x7f0000001a00)={{0x80, 0x9}, {0x6, 0x100}}, 0x0) getitimer$auto_ITIMER_REAL(0x0, &(0x7f0000001bc0)={{0x2, 0x7fffffffffffffff}, {0x7, 0x1000}}) 7m21.515416362s ago: executing program 5 (id=1027): mmap$auto(0x0, 0x20009, 0x3, 0xeb1, 0x40000000000a5, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/usbip-vudc.0/usbip_status\x00', 0x8a180, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) fremovexattr$auto(0xc8, &(0x7f00000001c0)=',%{}\x00') openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) mmap$auto(0x10001, 0xd, 0xffffffffffffffff, 0xeb1, 0xfffffffffffffffa, 0x1) getgroups$auto(0xeda, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) capset$auto(&(0x7f0000000100)={0x20080522}, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TCFLSH2(r1, 0x80045439, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) timer_create$auto(0xb, 0x0, 0x0) timer_settime$auto(0x0, 0x803, &(0x7f0000000000)={{0x800000008, 0xa}, {0x9, 0x2}}, 0x0) timer_gettime$auto(0x0, 0x0) mmap$auto(0x0, 0x20009, 0x3, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0x5, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000180)='/dev/usbmon16\x00', 0x40040, 0x0) r2 = epoll_create$auto(0x3e) epoll_ctl$auto(r2, 0x1, 0x8000000000000000, 0x0) socket(0x10, 0x80002, 0x0) openat$auto_tracing_readme_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/README\x00', 0x80000, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 7m21.119778932s ago: executing program 5 (id=1030): close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) (async) io_uring_setup$auto(0x6, 0x0) (async) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r0, 0x4068aea3, &(0x7f0000000080)={0xcc}) mmap$auto(0x0, 0xf2, 0xdf, 0xeb1, 0xf6f6, 0x8000) (async) socket(0x80000000000000a, 0x2, 0x0) (async) r2 = socket(0x2, 0x801, 0x84) (async) bind$auto(0x3, &(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x3ffe}, 0x67) getsockopt$auto(r2, 0x84, 0x6d, 0x0, &(0x7f0000000280)=0x1000c0) 7m20.779269694s ago: executing program 5 (id=1032): syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000f40)={'batadv0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000f40)={'batadv0\x00'}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2b, 0x1, 0x0) (async) socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) select$auto(0xa, 0x0, &(0x7f0000000100)={[0xd, 0x203, 0x0, 0xc, 0x5, 0x3, 0x4, 0x2000000000000002, 0x9, 0x8, 0x400000000ff, 0xa, 0x4, 0xaab, 0x8, 0x7]}, 0x0, 0x0) r1 = socket(0x18, 0x800, 0x2) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x800, 0x10) getdents$auto(r2, &(0x7f0000000f40)={0x1000000000302, 0xfffffffffffffffa, 0x7}, 0x18) (async) getdents$auto(r2, &(0x7f0000000f40)={0x1000000000302, 0xfffffffffffffffa, 0x7}, 0x18) getpeername$auto(r1, &(0x7f0000000040)=@llc={0x1a, 0x338, 0x7, 0xc, 0x9, 0x8, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x0) (async) getpeername$auto(r1, &(0x7f0000000040)=@llc={0x1a, 0x338, 0x7, 0xc, 0x9, 0x8, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fbd6df2501006a9b80faffffffff00000c0005ec02f71d1ce1ca4b18743a8524ece500a8b1e0ffffffffff0b00060001800f61f0ff4da7ae80b4b9842cad"], 0x34}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) sendmsg$auto_NBD_CMD_DISCONNECT(r1, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c010000", @ANYRES16=r4, @ANYBLOB="01002cbd7000ffdbdf2502000000260109803c00d98008000d00", @ANYRES32=0x0, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r5, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) socket(0x2, 0x1, 0x106) mmap$auto_sg_fops_sg(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4000010, 0xffffffffffffffff, 0x7) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x95f4da0a, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x1, 0x6, 0xfffffffffffffffe]}, 0x0) prctl$auto(0x3e, 0x100000000, 0x0, 0x4000000000001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0xa, 0xfffffffffffffffb, 0x2, 0x4, 0x400000000003, 0x4000000003, 0x10ba9788, 0xffffffffffffffff, 0x6, 0x80024000003ffffc, 0xfffffffffffffffe, 0x6d3c, 0x3, 0x2, 0x534aed11]}, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x40c01, 0x0) setfsuid$auto(0xee00) (async) setfsuid$auto(0xee00) 7m19.328838955s ago: executing program 5 (id=1039): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x4, 0x8000) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) socket(0x2, 0x1, 0x106) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd2/queue/io_timeout\x00', 0x129882, 0x0) socket(0xa, 0x3, 0x3b) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) socket(0x1, 0x5, 0x1) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1d, 0x4, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) write$auto_fuse_dev_operations_fuse_i(r1, 0x0, 0x0) socket(0xa, 0x1, 0x84) listen$auto(0x3, 0x81) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) read$auto(r2, 0x0, 0x7) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x9}, 0x3) writev$auto(r0, 0x0, 0x6) close_range$auto(0x2, 0xa, 0x0) 7m18.23056223s ago: executing program 5 (id=1041): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) clone$auto(0x100000020003b49, 0x80000000002, 0x0, 0x0, 0x4) close_range$auto(0x0, 0xfffffffffffff000, 0x2) open(0x0, 0x22240, 0x154) close_range$auto(0xffffffffffffffff, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) landlock_add_rule$auto(0xffffffffffffffff, 0x1, 0x0, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101540, 0x0) ioctl$auto(r0, 0x540a, r0) 7m18.105045434s ago: executing program 5 (id=1043): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x3, 0xfffffffe, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/netfilter/nf_log/3\x00', 0xa2202, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/module/ubi/parameters/mtd\x00', 0x22100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000003480)=""/247, 0xf7) sendfile$auto(r0, r0, 0x0, 0xd) keyctl$auto(0xe, 0x1, 0x0, 0x5eaf, 0x8) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mq_open$auto(0x0, 0x3, 0x7d, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0xffffffffffffffc0, 0x7}) socket(0x2, 0x80805, 0x0) eventfd$auto(0x9) writev$auto(0x4, &(0x7f0000000080)={&(0x7f0000000040), 0x8}, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x28, 0x5, 0x0) connect$auto(r2, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @hyper=0x1000000}, 0x56) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), r2) sendmsg$auto_NL802154_CMD_ASSOCIATE(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x40, r3, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, 0xa}, @NL802154_ATTR_SCAN_DONE_REASON={0x5, 0x25, 0x4d}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5}, @NL802154_ATTR_SCAN_TYPE={0x5, 0x1f, 0x1}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x2}]}, 0x40}}, 0x4040012) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) r4 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2002, 0x0) ioctl$auto(r4, 0x400454ca, 0x38) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x200007, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010026bd7000ffdbdf250400000014001a80ffff04800c0001"], 0x28}, 0x1, 0x0, 0x0, 0x894}, 0x4) 7m3.113598545s ago: executing program 34 (id=1043): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x3, 0xfffffffe, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/netfilter/nf_log/3\x00', 0xa2202, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/module/ubi/parameters/mtd\x00', 0x22100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000003480)=""/247, 0xf7) sendfile$auto(r0, r0, 0x0, 0xd) keyctl$auto(0xe, 0x1, 0x0, 0x5eaf, 0x8) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mq_open$auto(0x0, 0x3, 0x7d, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0xffffffffffffffc0, 0x7}) socket(0x2, 0x80805, 0x0) eventfd$auto(0x9) writev$auto(0x4, &(0x7f0000000080)={&(0x7f0000000040), 0x8}, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x28, 0x5, 0x0) connect$auto(r2, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @hyper=0x1000000}, 0x56) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), r2) sendmsg$auto_NL802154_CMD_ASSOCIATE(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x40, r3, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, 0xa}, @NL802154_ATTR_SCAN_DONE_REASON={0x5, 0x25, 0x4d}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5}, @NL802154_ATTR_SCAN_TYPE={0x5, 0x1f, 0x1}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x2}]}, 0x40}}, 0x4040012) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) r4 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2002, 0x0) ioctl$auto(r4, 0x400454ca, 0x38) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x200007, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010026bd7000ffdbdf250400000014001a80ffff04800c0001"], 0x28}, 0x1, 0x0, 0x0, 0x894}, 0x4) 4m37.705790463s ago: executing program 2 (id=1762): openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mq_open$auto(&(0x7f0000001780)='ovs_vport\x00', 0x3ff, 0x6, &(0x7f00000017c0)={0x80000007, 0x100000001, 0x8000000000000000, 0x4}) read$auto(0x3, 0x0, 0x80) madvise$auto(0x0, 0xfffffffffffeffff, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x2000, 0x0) (rerun: 32) ioctl$auto_EVIOCGMASK(r0, 0x80104592, &(0x7f0000000000)={0x2000, 0x800004, 0x9}) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000280)='/dev/input/event0\x00', 0x0, 0x0) (async) prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_GET(0x5, 0x2, 0x0, 0x2f7, 0x6) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async, rerun: 64) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/sit0/ifindex\x00', 0x80000, 0x0) (rerun: 64) read$auto(r1, 0x0, 0x20) (async) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x202, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x2) r3 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x542, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r3, &(0x7f0000000040)='-:', 0x2) (async, rerun: 64) statmount$auto(0x0, &(0x7f0000000180)={0x6, 0x3, 0x1ff, 0xffd, 0x3, 0x0, 0x0, 0x7, 0x200000000000003, 0xd, 0x4, 0x80003, 0x4, 0x1ffffffffffd, 0x5, 0x2, 0x7, 0x110002, 0x7f, 0x5, 0x4, 0xa, 0x22000, 0x203, 0x4, 0x84, 0x0, 0x3, 0x0, 0x0, 0x0, [0xedd, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x800000000000400, 0x1, 0x1, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8, 0x1, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xffffffffffffffff, 0x100000000000, 0x100]}, 0x6, 0x7fffffff) (rerun: 64) r4 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x3d00, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r4, 0xfffffffffffffd03, &(0x7f00000001c0)) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/lu_gp_id\x00', 0x2183, 0x0) socketpair$auto(0x9, 0x2, 0xb, 0x0) (async) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyd9\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r5, 0x5423, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) ioctl$auto(0x3, 0x80047437, 0x38) 4m36.672046118s ago: executing program 2 (id=1768): mmap$auto(0xfffffffffffffffa, 0x1, 0xdf, 0xeb1, 0x401, 0x8003) rseq$auto(0x0, 0x18, 0x5d7, 0x6) mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0x7, 0x28000) (async) r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r1 = gettid() r2 = prctl$auto(0x3e, 0x1, r1, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) sendto$auto(0x3, 0x0, 0x2000f, 0x0, 0x0, 0x1c) sendmsg$auto_NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x8000800) (async) copy_file_range$auto(0xffffffffffffffff, &(0x7f0000000340)=0x5, r2, &(0x7f0000000380)=0xd62, 0x7, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/034/001\x00', 0x802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x18, 0x10, 0x808, 0x7fb, &(0x7f0000000340)}) r5 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000100), r3) sendmsg$auto_NFC_CMD_DISABLE_SE(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r3, @ANYRES16=r5, @ANYRESHEX=r3], 0x2c}, 0x1, 0x0, 0x0, 0x20008094}, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) r6 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0) writev$auto(r6, &(0x7f0000000140)={0x0, 0x5}, 0x5) r7 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x48180, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_PAUSE_OLD(0xffffffffffffffff, 0x5423, &(0x7f0000000440)="002f80ce438dc7e603f0b7a6067f41576cc19dc24b459e69b05dfa9eba540b47fd877cd9a9cbe1ce996aca0cf78f8dd358e105183018bbd49e72a48e06e80a63c0591e726372310c6e7384e48fcb6b67e16e53766708eebda1240d48cc109058cb288be330e82b55c58e344cdbcd072798e325e59e5195f5ad19ada69accd4b4577a6e4ecef8889e8686fd042f97a79a6874353ec9cede4744c079526aa5fdd69d11c3e9281214eea7600c1f0134267f8c3214ac4964a8ab1902dcab2a35bf483b0913a2fff749ca0f8aa7297200"/221) (async) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000280)={{0x3, 0x1000, 0x1, 0x1, 0x2}, "654c6dbc7a4d30983899a7e1325b6a29ba1e184410ba9f74e82a3fa6c3ccf1bf"}) (async, rerun: 64) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) (async) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async, rerun: 32) r8 = openat$auto_proc_tid_children_operations_internal(0xffffffffffffff9c, &(0x7f0000000080), 0x41180, 0x0) (rerun: 32) read$auto(r8, 0x0, 0x1) (async) ioctl$auto_SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) (rerun: 64) 4m34.640199434s ago: executing program 2 (id=1774): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/blkio.bfq.sectors\x00', 0x182, 0x0) sendfile$auto(r0, r0, 0x0, 0x88) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x1f40) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f00000000c0)={0x0, 0xffffffff}, 0x6) ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(0xffffffffffffffff, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) 4m33.340239829s ago: executing program 2 (id=1777): r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) (async) fallocate$auto(r0, 0x1, 0x820, 0x7fff) (async) write$auto(r0, &(0x7f0000000040)='\x00', 0x401) mmap$auto(0x0, 0xb9f, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/mm/hugepages/hugepages-1048576kB/nr_hugepages\x00', 0x480, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000340)=""/152, 0x98) (async) unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) 4m30.983893974s ago: executing program 2 (id=1780): mmap$auto(0x0, 0x80, 0x6, 0xeb1, 0x401, 0xffffffffffff7fff) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/tcp_available_congestion_control\x00', 0x0, 0x0) (async) bpf$auto(0x0, 0x0, 0x4f4) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/class/devcoredump/disabled\x00', 0xe3102, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) (async) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x201, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x60042, 0x0) (async) io_uring_setup$auto(0x6, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/rt_cache\x00', 0x2000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7f, 0xd, 0x1, 0x948f, 0x1005, 0x206, 0x7, 0xfffffffffffffff6, 0x7, 0x9, 0x79d, 0x6, 0x100000000000000, 0xfffffffffffffffe, 0xf]}, 0x0) (async) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x200000, 0x0) (async) r2 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/usb/usbmon/33u\x00', 0x20202, 0x0) pread64$auto(r2, 0x0, 0xfffe, 0x9) (async) getpriority$auto_PRIO_PGRP(0x1, 0x0) (async) close_range$auto(0x2, 0xa, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0xa0540, 0x0) ioctl$auto(r3, 0x80045430, 0x38) (async) r4 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x20904, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000000)={{0x3, 0x1002, 0xfffffffc, 0x5, 0x2}, "654c6dbc7a4d30983899a7e1325b6a29ba1e18441074052a3fa6c3ccf1bf00"}) (async) readv$auto(r4, &(0x7f0000000a80)={0x0, 0x2}, 0x2) 4m29.327877437s ago: executing program 2 (id=1784): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r0) mmap$auto(0x0, 0x2020005, 0x203, 0xeb1, r0, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0xe8) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) r3 = socket(0x8, 0xa, 0x106) setsockopt$auto(r3, 0x6, 0x6, &(0x7f0000000180)='\b\x00\x00\x00\xe4\x15\rq\tW\x9d=\x1e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe7\x9b\xdd\x1cp\x19\xa0\x9dHN\xb4\x7f\x7f\xa0\xeaI\xa1\x0f/\xfc\x8e\xf9\xa6x\xa0\xdeo\t\x826Xe(\x0e\xffr\r\x8d\xefh\xdbG\x8b\xde\xfd$\'\a ]\x91YP\x94\xd0\xd0\x02\x10\xb1_z\xa2Ql\x8c\x91\xca4\x118\xcd\xc3\x97\xdaJ:\x1e\xe5f\xcaq\xdf`\x01;\xf9{D2\xc9WV)\xa3JH\xf5\xf9\x16\xac\xa4\x155\x80\x01I\xd9\xa5\xd0\xf1\xbd\xa0\xa4\xa5q\xc6F\x940\x00\xf8\xef\xa4\xfd\xd2z\xf5\x91z<\x9f\xf0\x8f/\x81\x84\xed J&\x8f\xd9\xab-\xf8\xd0\xd3\xcea\x91pM0\xcd\x18\xb4\xe0u\x99\b', 0x7) openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/swradio12\x00', 0x0, 0x0) poll$auto(&(0x7f0000000480)={r4, 0xffff, 0x29}, 0x3, 0x8) sendmsg$auto_NL802154_CMD_SET_PAN_ID(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000011c0)=ANY=[], 0x1058}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r5, 0x0, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x20) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) r6 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r7 = getpid() process_vm_readv$auto(r7, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0x41}, 0x6, 0x0) ioctl$auto(r6, 0x40246f4c, 0x38) unshare$auto(0x40000080) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000d00), r8) unshare$auto(0x40000080) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x5) creat$auto(&(0x7f0000000040)='./file0\x00', 0x7) 4m13.958569119s ago: executing program 35 (id=1784): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r0) mmap$auto(0x0, 0x2020005, 0x203, 0xeb1, r0, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0xe8) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) r3 = socket(0x8, 0xa, 0x106) setsockopt$auto(r3, 0x6, 0x6, &(0x7f0000000180)='\b\x00\x00\x00\xe4\x15\rq\tW\x9d=\x1e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe7\x9b\xdd\x1cp\x19\xa0\x9dHN\xb4\x7f\x7f\xa0\xeaI\xa1\x0f/\xfc\x8e\xf9\xa6x\xa0\xdeo\t\x826Xe(\x0e\xffr\r\x8d\xefh\xdbG\x8b\xde\xfd$\'\a ]\x91YP\x94\xd0\xd0\x02\x10\xb1_z\xa2Ql\x8c\x91\xca4\x118\xcd\xc3\x97\xdaJ:\x1e\xe5f\xcaq\xdf`\x01;\xf9{D2\xc9WV)\xa3JH\xf5\xf9\x16\xac\xa4\x155\x80\x01I\xd9\xa5\xd0\xf1\xbd\xa0\xa4\xa5q\xc6F\x940\x00\xf8\xef\xa4\xfd\xd2z\xf5\x91z<\x9f\xf0\x8f/\x81\x84\xed J&\x8f\xd9\xab-\xf8\xd0\xd3\xcea\x91pM0\xcd\x18\xb4\xe0u\x99\b', 0x7) openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/swradio12\x00', 0x0, 0x0) poll$auto(&(0x7f0000000480)={r4, 0xffff, 0x29}, 0x3, 0x8) sendmsg$auto_NL802154_CMD_SET_PAN_ID(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000011c0)=ANY=[], 0x1058}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r5, 0x0, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x20) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) r6 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r7 = getpid() process_vm_readv$auto(r7, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0x41}, 0x6, 0x0) ioctl$auto(r6, 0x40246f4c, 0x38) unshare$auto(0x40000080) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000d00), r8) unshare$auto(0x40000080) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x5) creat$auto(&(0x7f0000000040)='./file0\x00', 0x7) 3m17.549320836s ago: executing program 4 (id=2042): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x2001, 0x0) ioctl$auto(r0, 0xc0046209, 0x9) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) poll$auto(&(0x7f0000003640)={r1, 0x7, 0x6}, 0x4, 0x100000) getsockopt$auto_SO_MAX_PACING_RATE(r2, 0x1, 0x2f, &(0x7f0000000100)='\'\x1e\x00', &(0x7f0000000200)=0x9) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setuid$auto(0x800000000008) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/ip_unprivileged_port_start\x00', 0xa042, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r3, &(0x7f00000002c0)="81", 0x1) iopl$auto(0x3) io_uring_enter$auto(0x3, 0x1, 0x82400001, 0xb, 0x0, 0xd) 3m17.252543998s ago: executing program 4 (id=2045): mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x123e01, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000003c0)={{@raw, 0x3106a8c2, 0x7, 0x8, "07a4f1b39b7ee201bc8d1f1865730dbc01c59fdf526c3685cbbb4d538c2c1e805c2aa2b4400d7a7faa03c275", @raw=0x6}, 0x1, @integer64=@value=[0xffff, 0x5, 0x9, 0x5, 0x2, 0xf028, 0x7, 0x7, 0x7fffffff, 0x1, 0x800100000000000, 0x0, 0x4, 0x8, 0x1, 0x6, 0x2, 0x1000, 0x800, 0x0, 0x4, 0xd, 0x1, 0x2, 0x5, 0x5, 0xa, 0x3, 0x9, 0xae, 0x200, 0x5, 0xe, 0x4, 0x969, 0x7fffffff, 0xffffffff, 0x9, 0x963, 0x1, 0x3844, 0x44, 0x0, 0xe, 0x0, 0x643, 0x6, 0xffffffffffff7fff, 0x1, 0xa, 0x2, 0x1bd, 0x5518, 0x2, 0xd, 0xe0, 0x2, 0x9, 0x5, 0xa, 0x4, 0xfffffffffffffff7, 0x3ff, 0x1], "fc7ffdb465fdaa89bd85c392e92e814a8171dcc31e5ba450c2373ed41675db8afd323f2272e0572684c5083599cb2ae28dbc3d3f464d1659e27863c49cd544e8ab12fe864f75bcee1ffc5d612f7c628066a34206c009ab9ded021d29bf1c29bdb2402ec7c925710738cd0602e987168cf8b928d98d2188976f59cc3ecb2c9f95"}) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x1, 0x80000006, 0x9b72, 0x2, 0x8001000000000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2202, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), r1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x800, 0x0) read$auto(r2, 0x0, 0x7) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/adsp1\x00', 0x6000, 0x0) ioctl$auto_BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000f80)=[{0x3ff, 0x3, 0xfffffffffffffefa}, {0x805, 0x5, 0x2}, {0x7, 0x0, 0x2}]) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000300)={0x7, 0x8, 0x2500, 0x1b, &(0x7f0000000100), 0x1, 0xf, 0x4, @stream_id=0x7f, 0x80, 0x4, 0x0, [{0x0, 0x3ff, 0x10001}, {0x40, 0x9, 0x4}]}) syz_clone(0x40180311, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000040), r4) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x18, r5, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@HWSIM_ATTR_MULTI_RADIO={0x4, 0x1e}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x4880) fsopen$auto(&(0x7f0000000100)='!\x00', 0x4) getresuid$auto(0x0, 0x0, 0x0) 3m17.177190409s ago: executing program 6 (id=2046): close_range$auto(0x2, 0x8, 0x0) ioctl$auto_SG_EMULATED_HOST2(0xffffffffffffffff, 0x2203, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000004240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40c8}, 0x4048000) mmap$auto(0x0, 0x40009, 0xe0, 0x9b72, 0x7, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x3) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x2, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram3/trace/enable\x00', 0x2062, 0x0) write$auto(r0, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(0xffffffffffffffff, &(0x7f0000000540)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1M\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed5\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25V\xc0K\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x02\xc1\xe9(\x95\xdfH\xf4\n\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x91O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\xd4<\xe9\x88\xe0_\xa9P3\xcf;\xae\xb7\x00\x00\x00\x00\x00', 0x98c6) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event0\x00', 0x3498c2, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) eventfd$auto(0x8e) mmap$auto(0x0, 0x7f, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(r2, 0x4040ae79, r3) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) read$auto(r4, 0x0, 0x10) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x2}, 0x3) setsockopt$auto_SO_BUF_LOCK(r5, 0x8, 0x48, 0x0, 0x8d) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp1\x00', 0x200, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 3m16.16702057s ago: executing program 4 (id=2051): mmap$auto(0x0, 0x7, 0xdf, 0x9b72, 0x7, 0x28000) (async) mmap$auto(0x0, 0x7, 0xdf, 0x9b72, 0x7, 0x28000) socket(0xa, 0x1, 0x84) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video47\x00', 0xc0480, 0x0) (async) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video47\x00', 0xc0480, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\x84q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa24X@\xadD\xf8\x9d\xf3 \xd2]\xc4\x13G\x1d\x04!\xc1\xeb.e$\xfb\xa3KU\xcf\xc1\x7fFD\x99\xf5v\v\x9dS\xc11P\xa3\xe9\xb0SqL\x85\xea\xb2\x9cY\x83.I\xca\x92\x1c\xc4\x13CV=\x92\x17c\x87iOt\x14On\x15=\v\xf0 \xc5\x8b~\xd6\xd4\xc7\xa3a\x1c\x06\x17\xb3\x88\x8c\xf1L\xba\x89a\xfd\xa5\xc6\x7fU\x00\xe5\x9b', 0x5) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) fchdir$auto(r1) (async) fchdir$auto(r1) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x94) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) fsconfig$auto_JFFS2_COMPR_MODE_NONE(r0, 0x9, 0x0, 0x0, 0x0) (async) fsconfig$auto_JFFS2_COMPR_MODE_NONE(r0, 0x9, 0x0, 0x0, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0xfffffffffffffffe, 0x948b, 0x7, 0x3, 0x10001, 0x10000, 0x5e, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x8000000000000d, 0x1, 0x948e, 0xffffffffffffffff, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x6, 0x2, 0x6]}, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nullb0/queue/scheduler\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000040), r4) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="12000100898771f1c19f1779008d90828847000004000280", @ANYRES8=r0, @ANYBLOB="080000007000fddbdf2503000000040008000c00038008001700", @ANYRES32=r4, @ANYBLOB='<\x00\x00\x00', @ANYRES8=r2, @ANYRES16=r0, @ANYRES64=0x0], 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0x401c800) sendfile$auto(r3, r3, 0x0, 0x7ffff000) openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/environ\x00', 0xa0600, 0x0) (async) openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/environ\x00', 0xa0600, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x7fffffff, 0x4, 0x80, 0x8000) (async) prctl$auto(0x1000000003b, 0x7fffffff, 0x4, 0x80, 0x8000) pidfd_open$auto(0x1, 0x0) r5 = socket(0xa, 0x5, 0x0) socket(0x2, 0x1, 0x84) (async) socket(0x2, 0x1, 0x84) socket(0x28, 0x5, 0x195dd437) (async) socket(0x28, 0x5, 0x195dd437) bpf$auto_BPF_MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)=@bpf_attr_3={0x0, 0xc0000000, 0x8, 0x2, 0x0, 0x2, 0x201, 0x40, 0x4, "ab07890000000026c00cef00", 0x0, 0x1fffc000, 0xffffffffffffffff, 0xb1, 0x0, 0x3, 0x4, 0x3, 0x7fffffff, 0x4e74, @attach_btf_obj_fd=r5, 0xfff, 0x8, 0x6, 0xf00, 0x800, r2, r5}, 0x40) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000005c0), r6) 3m14.911014718s ago: executing program 4 (id=2055): mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) r0 = socket(0x2, 0x1, 0x0) socket(0x2d, 0x2, 0x0) r1 = getsockopt$auto(0x3, 0x6, 0xb, 0x0, 0x0) ioctl$auto_FIONREAD(r0, 0x541b, 0x8) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$auto(0x8000000, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x5, 0x9, 0x3a8453d3, 0x80, 0x8, 0x4, 0x3, 0x4, 0x8, 0x3fe, 0x80000002, 0x2, 0x2, 0xc28}, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/system/node/node1/hugepages/hugepages-1048576kB/nr_hugepages\x00', 0x2, 0x0) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x20000054) write$auto(r4, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r4, 0x0, 0x98c7) mmap$auto(0x0, 0x1, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x1) epoll_create$auto(0x5a) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/net/nr5/statistics/rx_nohandler\x00', 0xa880, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000300)=""/102, 0x66) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080)=0x7, 0x3) prctl$auto(0x39, 0x1, 0x4, 0x5, 0x7) sendmsg$auto_NBD_CMD_CONNECT(r6, &(0x7f0000001e00)={0x0, 0xfffffffffffffee9, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r1, @ANYRES16=r0, @ANYRES64=r1, @ANYRESDEC=0x0, @ANYRES16=r3], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000001) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x202003, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) io_uring_register$auto(0x2, 0xe, 0x0, 0x20) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/kvm/halt_poll_success_hist\x00', 0x40400, 0x0) mmap$auto(0x4066, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8005) 3m13.945036916s ago: executing program 6 (id=2057): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000340)={{0x0, 0x12, 0x0, 0x4, 0x0, 0xd, 0x1}, 0xfff}, 0x4, 0x208) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) r1 = openat$auto_fops_u8_(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/nfcsim/nfc1/dropframe\x00', 0x101080, 0x0) dup2$auto(r1, r0) r2 = io_uring_setup$auto(0x1, 0x0) openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x109402, 0x0) read$auto_tomoyo_operations_securityfs_if(r2, &(0x7f0000000000)=""/50, 0x32) r3 = socketpair$auto(0x3, 0x80001, 0x7d, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@qipcrtr={0x2a, 0x0, 0x4001}, 0x1b) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) r4 = socket(0xa, 0x3, 0xff) setsockopt$auto_SO_PROTOCOL(r0, 0x6, 0x26, 0x0, 0x5) connect$auto(r4, &(0x7f00000018c0)=@generic={0xa}, 0x55) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r2, r3, 0x10001) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x1, 0x0, 0x80000000) preadv$auto(0x3, 0x0, 0x3, 0x10000, 0x10) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000000c0), 0x202, 0x0) 3m12.808707774s ago: executing program 7 (id=2061): write$auto(0xffffffffffffffff, 0x0, 0x80000000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r0 = io_uring_setup$auto(0x1d48, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, 0x0, 0x4000) io_uring_register$auto(r0, 0x18, 0x0, 0x9) timer_create$auto(0x0, 0x0, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, 0x0, 0x0) mmap$auto(0x7, 0x6, 0x4000000000dd, 0x11, r0, 0x300000000003) getsockopt$auto_SO_RCVTIMEO_NEW(r2, 0x8, 0x42, 0x0, 0x0) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/018/001\x00', 0x802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x14, 0x10, 0x8, 0x7fb, &(0x7f0000000100)="d7a2bde0e541c0cfed570e294c273ee573324c4868e2de32787f20800429761e38aa072bef54e2464fe10ec449c5ec9e6ae21005916445ba4305ee30a1dd0a739ecd23a6a2149122f16394603e79063cae7e55fcdf7c03b27b"}) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x3, 0x2a) mlockall$auto(0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) fanotify_init$auto(0xd2, 0x5) sendmsg$auto_ETHTOOL_MSG_MM_GET(r4, 0x0, 0x2004c894) unshare$auto(0x40000080) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$auto(0xffffffffffffffff, 0x4004550c, 0xffffffffffffffff) mlock$auto(0xfbea, 0x7fffffffffffffff) 3m11.90231932s ago: executing program 6 (id=2063): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x149e42, 0x0) mmap$auto(0xfffffffffffffffd, 0x810002, 0xffb, 0x800000000801f, r0, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x8500, 0x0) mmap$auto(0x0, 0x3, 0x6f8, 0xeb1, 0x401, 0x8000) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x5) ioctl$auto(r2, 0x4008af12, r1) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x80101, 0x0) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x8002, 0x0) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = io_uring_setup$auto(0x691, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/007/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB32(r5, 0x802c550a, &(0x7f0000000300)=ANY=[@ANYBLOB="020000060000e6ff040000000100400008"]) prctl$auto(0x1000003b, 0x9, 0x0, 0x2, 0x7) socket(0x2, 0x3, 0x100) socketpair$auto(0x0, 0xfffffffa, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(r0, 0xc048aec6, r3) sendmsg$auto_ETHTOOL_MSG_PRIVFLAGS_GET(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="28010000", @ANYRES16=0x0, @ANYBLOB="080029bd7000fd4f50ce4f4d7482d80001801400020076657468315f746f5f7465616d00000008000300d00f0000d31ed9dec6cee97caf7de4b14702f308000300320400ed8fd5fc727bb81a0f5e74f54a00", @ANYRES32=0x0, @ANYBLOB="14000200766c616e300000000000000000000000140002006970766c616e31000000000000000000200001801400020076657468305f746f5f62726964676500080003009d0000002000018008000100", @ANYRES32=0x0, @ANYBLOB="1400020074756e6c3000000000000000000000000400018014000180080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="340001801400020065727370616e3000000000000000000008000100", @ANYRES32=0x0, @ANYRESHEX=r4], 0x128}, 0x1, 0x0, 0x0, 0x20040001}, 0x20030001) 3m11.574414562s ago: executing program 3 (id=2064): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/tasks\x00', 0x63102, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80e80, 0x0) sendfile$auto(r0, r0, 0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x29, 0x5, 0x0) r2 = open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) open_by_handle_at$auto(r2, &(0x7f0000001280)={0x8, 0x2, "0200000000000000"}, 0x6) sendfile$auto(r1, r1, 0x0, 0x2c9afa42) getsockopt$auto(r1, 0x2, 0xffff9f75, &(0x7f0000000000)='\x00', &(0x7f0000000040)=0x9) 3m11.26008572s ago: executing program 7 (id=2065): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x40100000100023, 0x8000002000000000, 0xfffffffffffffffe, 0xfffffffffffffffd, 0xfffffffffffffbff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_SE_IO(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r1, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0x7}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x1000}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0xffffffff}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x7}]}, 0x34}}, 0x0) r2 = mq_open$auto(&(0x7f0000001780)='ovs_vport\x00', 0x3ff, 0x7, &(0x7f00000017c0)={0x7, 0x8001, 0x100000000, 0x8}) ioctl$auto_XFS_IOC_READLINK_BY_HANDLE(r2, 0xc038586c, &(0x7f0000000240)={r2, &(0x7f0000000000)="699a170f3a1f58fb87e50dc276b7a3cff4bb2dda4f742aaad88f0aca20b4241c87d0ef193292868d8d71715d5c9ecd967024e380004860a9f2ecaea16351dfc5dccc1a6800abd0460674be72ecaa9cb3a2b1cad4ecea2b9012daa966feeefef440b0140a", 0x1, &(0x7f00000000c0), 0x800, 0x0, 0x0}) ioctl$auto_XFS_IOC_ERROR_CLEARALL(r3, 0x40085875, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_netdev(0x0, r5) mmap$auto(0x0, 0x20009, 0xd982, 0x40000000000eb1, 0x401, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r6) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="2f212dbd7000fcdbdf252100000008000300", @ANYRES32=r8, @ANYBLOB="08009e"], 0x24}}, 0x4000000) r9 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0xa, 0x2, 0x0) r10 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r10, 0xc1105517, &(0x7f0000000140)={{@inferred, 0x0, 0x4, 0x8, "3112d585005a614d19e22af9ffb683dbede3d0bf828bbfba40f035f4be6b7fe5e2f94bd90484b0755015e48d"}, 0x3, 0x5, 0x4, @inferred, @enumerated={0x3, 0x800, "c832bcbae48ab01ec23457b7fd2dd3547c4e2eeba79edd0d1599ded9cbfaf517162fbe6a6f50f1aaa18fb20cabb4f176263bb0e781e3d0a2f992e8fcdcec86d9", 0x400, 0xc278}, "7a9fc199a16a2311eacf2fc7ae1da978dc3e8090334fdd73340238d212b6debe0ada55bdd70925450e24e87212f0bcab84a16f7ce8cbce0bb32777702b8d7c2d"}) ioctl$auto_MEMGETREGIONCOUNT(r9, 0x80044d07, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_STOP_OLD(r9, 0x5421, &(0x7f0000000000)="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") 3m11.248050562s ago: executing program 3 (id=2066): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x4002, 0x6, 0x6, 0x8, 0xffffffffffffffff, [], {0xa, 0x4, 0xf, 0x7fffffff, 0x100, 0x7f, 0x101, 0x6, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x1}}) io_setup$auto(0x7ffe, 0x0) openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/self/clear_refs\x00', 0x2, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x20) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) 3m11.2151738s ago: executing program 6 (id=2067): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x123a42, 0x0) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000040), 0x8006, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) ioctl$auto(r0, 0xa, 0xffffffffffffffff) sigaltstack$auto(&(0x7f0000000180)={0x0, 0x80000001, 0x40b4}, 0x0) sigaltstack$auto(&(0x7f0000000080)={0x0, 0x2, 0x4}, 0x0) close_range$auto(0x2, 0x8, 0x0) semctl$auto(0x2, 0x9, 0x939, 0x6) mmap$auto(0x0, 0x400008, 0xfffffffffffffffc, 0xdf, 0x2, 0xc) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9) rename$auto(&(0x7f0000000280)='./file1\x00', 0x0) madvise$auto(0x0, 0xfffffffffffefffe, 0xb) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) r2 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000480)="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", 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000100), r2) r4 = setfsuid$auto(0xee00) r5 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000140), 0x189000, 0x0) readv$auto(r5, &(0x7f00000018c0)={&(0x7f0000001880), 0x1}, 0x9) r6 = setfsuid$auto(0xee01) setresuid$auto(r4, r6, r4) sendmsg$auto_TIPC_NL_BEARER_GET(r3, 0x0, 0x80) sigaltstack$auto(&(0x7f0000000140)={&(0x7f0000000040)="afbefeb3b5103c58e7708757f7ab7a002064fa301adaa944275e013de298b7a074b70f764a4faea763a3bfd786406488", 0xfffffff2, 0x6}, &(0x7f0000000300)={&(0x7f00000001c0)="22d68557b256c6848798cc73c75c2bb2519f0d9a0b0844dc00ea67c807eb956c834e3a22591e83ae30f15d73b8fcfc36ec5a6561d838862c8bd4d303f7b91f2cc1865619dac2ec8036cae453bb9467b7ecced8e898a49b11258c5f9f7a700c1c59e87c50ba2dba3bd9f77b1d72b7290b499a2a67b799a4ef931d043e818e5b2c76e457fe127e6094bd31f6fedaf5", 0x737f8f63, 0xfe81}) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) syz_clone3(&(0x7f0000000400)={0x1045100, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58) 3m11.076935411s ago: executing program 7 (id=2068): mmap$auto(0xfffffffffffffffd, 0x20009, 0xaf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) 3m10.94003475s ago: executing program 3 (id=2069): r0 = socket(0x2, 0x801, 0x2000100) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) fallocate$auto(r0, 0x9, 0x3ff, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0x3, 0x800005411, 0x38) 3m10.902317637s ago: executing program 4 (id=2070): mmap$auto(0x0, 0x2020009, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) ioctl$auto_TCSBRKP2(r0, 0x5425, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) sendmsg$auto_BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x20000000) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyua\x00', 0x20804, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket(0x10, 0x3, 0x9) write$auto(r2, 0x0, 0x5) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000031c0)='/dev/ttyua\x00', 0x109000, 0x0) ioctl$auto_BLKRESETZONE(r1, 0x40101283, &(0x7f0000000000)={0x7, 0xfffffffffffffffb}) select$auto(0x8, 0x0, 0x0, &(0x7f0000000200)={[0x80000000008, 0xffffffffffffff4b, 0x100000001, 0x15, 0x8000f000, 0x1, 0x5, 0x5, 0x8, 0x40000000000000, 0x2dde, 0x8, 0xfffffffffffffffa, 0xab, 0x8000000000000, 0x4]}, 0x0) close_range$auto(r3, 0x8, 0x0) 3m10.831644814s ago: executing program 3 (id=2071): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) ioctl$auto_PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f00000000c0)={0x9, &(0x7f0000000040)={0x5, 0x9, 0x9}}) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) semctl$auto(0x7, 0x2, 0x13, 0x1) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/net/vlan/config\x00', 0xc0004, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x76040, 0x0) pread64$auto(r1, 0x0, 0x82, 0x8) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r0) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x40, r2, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x1ad98}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x8}, @NFSD_A_SERVER_SCOPE={0x11, 0x4, '/dev/snd/seq\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0xd4080}, 0x4000c) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x140242, 0x0) r6 = open(0x0, 0x76bd, 0x12) sendfile$auto(r6, r5, &(0x7f0000000000)=0x6fe7, 0x9) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc4c85513, &(0x7f0000000d40)={{@raw=0x9, 0xb, 0x3, 0x8, "826538f97a17cdcee70d288808165aeaaab0c9d1820333cb33710e704663ddbb7fe66614ea2252e1df39a51b", @raw=0xad0}, 0x1, @integer64=@value_ptr=&(0x7f0000000d00)=0x4, "f5fee711e1dc143fae8cc3fd45f9adc34b0882aafe3c70bea536a825d0d602ab516b389c9bd69b323a56af11f51619786d00e13479d056d333d902c35becc074756213de1b2e1113dfb661f662f14f6c5b11bffc31e048b4157bd82af0ddea26dfc4bbf1651cbe4226d3714745012698351f589aa5192cb7c43014c502f5ca18"}) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000cc0), 0x80000, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, r3, 0x13, 0x70bd2c, 0x25dfdbdd}, 0x14}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) sendmsg$auto_NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c40)={&(0x7f0000000040)={0xbd8, r3, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_CSA_IES={0x18, 0xb9, 0x0, 0x1, [@typed={0x14, 0x128, 0x0, 0x0, @ipv6=@loopback}]}, @NL80211_ATTR_DISABLE_HE={0x4}, @NL80211_ATTR_ASSOC_SPP_AMSDU={0x4}, @NL80211_ATTR_NAN_FUNC={0x37a, 0xf0, 0x0, 0x1, [@typed={0x4, 0xcb}, @nested={0x242, 0xf5, 0x0, 0x1, [@typed={0x14, 0x8, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @nested={0x4, 0x3a}, @typed={0x4, 0x18}, @nested={0x4, 0x37}, @nested={0x4, 0x67}, @nested={0x4, 0xc}, @generic="5b6dd675a9bfca557790722e49d16af00abed9a2c15dbc52587567e2a013ffe1c8ac68ef0dbe80043e983d9f13bc26d8e7ea02dd3aa9bdd9616d57f550a6edebf3653fb1b1fdc009d3e1b7dffe902110fced11c0618c0c7a1d717660cf46808d22c58d6a344c37cbdd30107fc09a008e67e3f9495aca7ba7bdd36f78b1b122923852a45ff6a07d3cca8e24f54fcf88d6060b4ecb9ab58924", @generic="0355b53f4621d51d6212756f64b8762352661e9fd59acdb259a694b80bc07708274368602f7db59817b9df5245c7be683d9516ade6f449faa7fc40660a8d924df858d386d985885d6720879df0e31eb5a93961336b88f77073fac8d30e6ef1c4a6d2924f4f88ed61510120bf3311c6b5b01b9c9b4b53be1aee0f66e32a748fc293d1760ad5a3f351d02b3d", @generic="61a411abaccb5e7e82ed2639620c3ab0e542a3a1cdec7fc04265cb993905896f7ea508dc920410becd27c970187fadab580bc8c04d9dd3f2c62e369fcced282c5366cac745b6534f979d1b832ad94d05649aba5b06f4e9dd814302a18b2164c234a5b974657bb3420a09f329ffcec9de5e231660810e5c9e52a629e5e0a67df6553ace076add1981f8f37dbdccb36553135cb088f375c40a2292a001a1bf5e51c68418387df0a7fd287008aa06294d0aca33ac0a59ed38f1910cfc4e33515df4186c7085c4f4b9c574cca864af311aac31d7f721825f1af2f83342668ef61862e4e465d50a4c32", @typed={0xc, 0x72, 0x0, 0x0, @u64=0x7}]}, @typed={0x8, 0x115, 0x0, 0x0, @fd=r0}, @nested={0x52, 0xc7, 0x0, 0x1, [@nested={0x4, 0x1a}, @generic="01d44760562ef90d2e4d9d6ae9ee52a19f5f78f75a2b5f7d9443d1883a6df63e1d87559a2a3da892cc69ef935c1e459d943506dec6267fffb786abda032e17e54204ad7682dfdcd3df5f"]}, @generic="1929f66062506f1981bcbbf1e908a2ab963e21a681910a4aaf1307b6f15ac4ef6db5091488f8ffdf0f6327caf598909663921c4a8881dca8036cec6b7c497d32c03e36ca5b1028faa18866a82843f4db2ec0827c9330f3443f5ca7b2d758d0b17f1bc125c40b168ee3d6df1ed313e991cf843e16c057fae8a551d9d71f99b6906a0c27cd353ac9e76e6f61673a540a96ca2456e63cb33d73f91d7feabe6c09697c6a8bef6cd2a3f94ba6a1083db2db915a33c50d701b2675cbb6cc970d90063a0fa7a7d9afa5b6e66f804fbe2a1dff195750"]}, @NL80211_ATTR_BEACON_HEAD={0x7c6, 0xe, "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"}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, 0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}, @NL80211_ATTR_FRAME_MATCH={0x4b, 0x5b, "4616562ba49d6c5eb1de975bf25a1a5a8d22b0a9158f8a8464b8fd0d41b7bc3623c59854f463e3ecba0cb205b00bb2db5f4bcf5f1872b4b90289733075c75e79e48dfe86cbecc4"}]}, 0xbd8}, 0x1, 0x0, 0x0, 0x24000000}, 0x20004001) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000050c0)={0x0, 0x0, &(0x7f0000005080)={&(0x7f0000002a80)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x4}, @NFSD_A_SERVER_SOCK_ADDR={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050) 3m10.81194448s ago: executing program 7 (id=2072): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) fanotify_init$auto(0x5, 0x2000000000002) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) (async) sysfs$auto(0x2, 0x0, 0x0) (async) sendmmsg$auto(r1, &(0x7f0000000240)={{&(0x7f0000000000)="fde7bb8013e9f997341be7b7619d8332e129c8a84c0e9c64546fb69a602ae49864d2689fb3bab7a3947d0be731a99548d81a78f207eba47dc7fa612c3367037db0", 0x0, &(0x7f0000000100)={&(0x7f0000000080)="fd348c12c528819e4140cb5449311bcc1d3e0b5a63d3e8c73f705d015a2977299ce9d29ee22f34cbf4e5e1a9ea614e526539f555e8212702f2fb2cba2884579c054dd8003c4b31989604c9a368073b511120fcbdf8d0e74673cd897a4d684c6e4279b5dafda5504c22e867af3d25ad0647d479ae96a53d", 0x101}, 0x1, &(0x7f0000000140)="6073c4c047dd4589dbb2ab6e6e82e1bbaa759b2fcf2a04b54747005889c498ee0da9fe8fc0619ea455a8f55f12a184ad852f177860cd13cea3dc1788957edfc033049a9033678e43cf701d49de9611a4fd2262c87a6127895717d59799bfe278cca898547b5ae949e0dee82bace6aab240ab8c67351dcb291ca331f072e6a32f345c5663ee5fba0e837d79c239301f828e3a491ed520bb1c3094fbb33b59e13e04ef08ecb88976aa7f98fcea31b735e41b1084dc3b07be12dc46f39cfe12f262b1c4b3ec145e086f77085cbfae89594ead511b5b2154eb2e0932271f985204863c3afea5673d", 0x6, 0x7}, 0xfffffffd}, 0xd, 0x7) (async) r2 = fsopen$auto(0x0, 0x1) fsconfig$auto(r2, 0x6, 0x0, 0x0, 0x0) (async) fsmount$auto(0x4, 0x0, 0xa7) (async) r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f00000002c0), r0) sendmsg$auto_NBD_CMD_CONNECT(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r3, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x10000}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 3m10.614797743s ago: executing program 6 (id=2073): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/uevent\x00', 0x800, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xffffeffe, 0x2) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x9) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ram0\x00', 0x6e642, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x10000, 0x3, 0x80020000001, 0xeb0, 0xffffffffffffffff, 0x401) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xb, 0x4, 0xa) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0x9, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) r1 = socket(0xa, 0x2, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_CREATE_VM(r2, 0x4048aecb, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000001300), r0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gre0\x00'}) sendmsg$auto_OVS_DP_CMD_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000ffdbbd250100000008000900c20f78859a1ef247391b8604e4017e11180513fb7608d913cd0edc50a138bb", @ANYBLOB="53bab4e85898f0312eda74e196ecbb7545046938ad93eb8907ac17ceb208c8ad9bfe38064d18de125f928cc38f9c6d04d6f6661446dddf391563d07ca01208e11491cba13f85a1823ecc1bce4e8f17232836f613626a7d30", @ANYBLOB="0800050006000000110001006f7673a34c4e0e1c2d5f12fffe02fffe"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x2000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team0\x00'}) 3m10.56399878s ago: executing program 7 (id=2074): close_range$auto(0x2, 0x8, 0x0) userfaultfd$auto(0x1) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptya9\x00', 0xc7f16bff2a10ba01, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/lowpan0/queues/tx-0/tx_maxrate\x00', 0x101000, 0x0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x599c40, 0x0) socket(0x2, 0x1, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x28641, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x33, 0x8000, 0x1ffde, 0x1, 0x2, 0x1, 0x9, 0x3, 0x5, 0x8, 0x3002, 0x9, 0xb, 0x80010002, 0x80, 0xd8f9, 0x0, 0x7, 0x2, 0x203, 0x400, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x1fe, 0xd) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0xfc, &(0x7f0000000100)={0x0, 0xfc6}, 0x2, 0x0, 0x7, 0x3}, 0x800}, 0x7, 0x4008) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_CREATE_VM(r0, 0xae80, 0x0) setresgid$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3m10.464807938s ago: executing program 3 (id=2075): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/pids.peak\x00', 0x8000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x3, 0x9644, 0xdf, 0x9b72, r0, 0x2d4a29c0) pivot_root$auto(0x0, 0x0) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000000, 0xe) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x7f, 0x82020009, 0x3, 0xeb1, 0xffffffffffffffff, 0xfff) connect$auto(0x3, 0x0, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) setresuid$auto(0x2, 0x7, 0x8080) capset$auto(0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) r1 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x106) sendmmsg$auto(r1, 0x0, 0x5, 0x20000000) mq_open$auto(0x0, 0x62, 0xfffc, 0x0) unshare$auto(0x40000080) r2 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000100), 0x80840, 0x0) lseek$auto(r2, 0x0, 0x2) readv$auto(r2, &(0x7f0000000a80)={0x0, 0x5b54}, 0x1) getsockopt$auto(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000040)='/dev/cec27\x00', 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 3m10.275256167s ago: executing program 7 (id=2076): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0x2003f0, 0x15) r0 = socketcall$auto(0x8000, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0) write$auto(r1, &(0x7f0000000140)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x00\x8c\xf9\x96\xe7\xe3p\xb9\xa407_n\x87M\xee\xcc\x94(CV\xd7\xf2\xd1J9\xb2a\x1f|\v\xe8\xeb\x1e\x12\xc7cvD\x90\x8ah+3\xed\xc9\xa5=\x98\xf7!L\x8a\xdfw\xcf\xc5\x97\xab\xb8\xda\x01\"\x8f\xe4\x9b\xd8\xb0\xa8hB\xa5\xd9\x02\xac\xcf\xf5n\xfe\x8bx\x9fG\xe5>`sZ\xee\xf7\xc5\xc8\xfc\xf2lrI\xd1\xd5\xc4PO\x8c\xc8\xf8\fr\xb7\x87\x06y\x8c\xbb\xba\xd42\xe5\x89\xc3\x84\x85\xdd\xca\xc6E\t\x15\xcc\x10=`M\f\v\xa7d\xee\xc6\xfbrmv*\xb6\x89I\x8bsYC\xed\xc7\xa1\x87\x87\x93O\x060\xc3\x1aw\x06:\x93\x98\xf3|\xe0\xcdZ\xa1!\xdeoB\xde\xc8\xd7\xb4W\xad\x90\xf8\x92$^\xb1\xceCO\xc1>\x06\x11\xe5\xf2\x1c', 0x20000082) lseek$auto(r0, 0x5, 0x3) io_uring_register$auto_IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, 0x0, 0x2) prctl$auto_PR_SET_MM_START_CODE(0x8, 0x1, 0xffffffffffffffff, 0x7, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) r2 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x6, 0x1, 0x9, 0x7, 0x3b, 0x3ff, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb2, 0x9, 0x3, 0xfffc, 0x80, 0x7, 0x40000, 0x7, 0x2000, 0x200, 0x0, 0x81, 0x0, 0x7, 0x0, 0x0, 0x0, [0x1000000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7]}, 0x202, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x5}, 0x7, 0x0) unshare$auto(0x40000080) mq_unlink$auto(0x0) 3m10.052103026s ago: executing program 6 (id=2077): sendmsg$auto_IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x240080c9) (async, rerun: 64) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (rerun: 64) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r0, 0x8000) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async, rerun: 64) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x288202, 0x0) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x2, 0xa, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\x00\x80\x00\x00\x00\x00\x00\x00j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) (async) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r1, 0x0, 0x3f1) mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) pidfd_open$auto(0x0, 0x7ffffeff) socket(0x2000000000000021, 0x2, 0x10000000000002) (async, rerun: 64) r2 = openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/netdevsim/netdevsim1/ports/1/pp_hold\x00', 0x101001, 0x0) (rerun: 64) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) r3 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0) ioctl$auto(r3, 0x3b8e, r2) (async) write$auto(0x6, 0x0, 0x100000001) (async) getdents$auto(r1, 0x0, 0xa2b0) (async) ioctl$auto_TIOCMGET(r0, 0x5415, &(0x7f0000000140)="f3aa50280eb291060036a8e256a84d8e1b6a3f60e63604e8eaa0c3d46f7bc82b50e2733e75cf797bcfc8bbbc2b471515b416b5e8317d63a700f98c64b9c0f6c69d6027b63d7333bfbb448056f15e") (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) close_range$auto(0x2, 0xa, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x8000, 0x0) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) 3m9.219572902s ago: executing program 4 (id=2078): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x4002, 0x6, 0x6, 0x8, 0xffffffffffffffff, [], {0xa, 0x4, 0xf, 0x7fffffff, 0x100, 0x7f, 0x101, 0x6, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x1}}) io_setup$auto(0x7ffe, 0x0) openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/self/clear_refs\x00', 0x2, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x20) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) 3m9.069468952s ago: executing program 3 (id=2079): capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x400004d}) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000006900)='/sys/kernel/config/target/dbroot\x00', 0x189002, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x77bc42, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000100)=0x6a) socket(0x18, 0xa, 0x1) close_range$auto(0x2, 0x8, 0x0) r3 = syz_genetlink_get_family_id$auto_nl80211(0x0, r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r4) sendmsg$auto_TIPC_NL_NET_SET(r4, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYRES16=r5, @ANYBLOB="01002cbd7000ffdbdf250f0000000c00078008000200", @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x44050}, 0x2) sendmmsg$auto(0x4, 0x0, 0x206, 0xa) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x929, 0x4001, 0x7, 0x5, 0x100717e, 0x3, 0x7, 0x6, 0x7ff, 0xfffffffe, 0x80000001, 0x4, 0x200000000001, 0x1, 0xfffffffffffffffb, 0x8, 0x0, 0x2, 0x2, 0x9, 0xe, 0x22000, 0x200, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, [0x40000000a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x62bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffff4f3, 0x0, 0x0, 0x2f, 0xffffffffffff7adf, 0x0, 0xfffffffffffffffc, 0x0, 0x3]}, 0xa, 0xd) r6 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ptrace$auto_PTRACE_DETACH(0x11, 0x0, 0x8, 0xd) sendmsg$auto_NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6c000000f3f25d23e29e22db0d4a48abf36bed8672a4b8695129566b4cf875b43febfbb7cb5307aaf28fe1d3a87d8a282594c2dcce86656e320cc986eed4d37e8c86b165d7781e4b1d361b67b63234600f94b752", @ANYRES16=r3], 0x6c}}, 0x4088) ioctl$auto(r6, 0x40045566, 0xffffffffffffffff) unshare$auto(0x6a6) r7 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) write$auto_proc_clear_refs_operations_internal(r1, &(0x7f00000003c0)="73d6cc0008443548f400000400000000000000506f5cd946a3", 0x19) ioctl$auto__ctl_fops_dm_ioctl(r7, 0xfffffff7effffd01, &(0x7f00000001c0)) 2m28.42172429s ago: executing program 36 (id=2078): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x4002, 0x6, 0x6, 0x8, 0xffffffffffffffff, [], {0xa, 0x4, 0xf, 0x7fffffff, 0x100, 0x7f, 0x101, 0x6, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x1}}) io_setup$auto(0x7ffe, 0x0) openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/self/clear_refs\x00', 0x2, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x20) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) 2m28.375129968s ago: executing program 37 (id=2077): sendmsg$auto_IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x240080c9) (async, rerun: 64) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (rerun: 64) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r0, 0x8000) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async, rerun: 64) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x288202, 0x0) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x2, 0xa, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\x00\x80\x00\x00\x00\x00\x00\x00j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) (async) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r1, 0x0, 0x3f1) mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) pidfd_open$auto(0x0, 0x7ffffeff) socket(0x2000000000000021, 0x2, 0x10000000000002) (async, rerun: 64) r2 = openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/netdevsim/netdevsim1/ports/1/pp_hold\x00', 0x101001, 0x0) (rerun: 64) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) r3 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0) ioctl$auto(r3, 0x3b8e, r2) (async) write$auto(0x6, 0x0, 0x100000001) (async) getdents$auto(r1, 0x0, 0xa2b0) (async) ioctl$auto_TIOCMGET(r0, 0x5415, &(0x7f0000000140)="f3aa50280eb291060036a8e256a84d8e1b6a3f60e63604e8eaa0c3d46f7bc82b50e2733e75cf797bcfc8bbbc2b471515b416b5e8317d63a700f98c64b9c0f6c69d6027b63d7333bfbb448056f15e") (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) close_range$auto(0x2, 0xa, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x8000, 0x0) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) 2m28.041964656s ago: executing program 38 (id=2076): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0x2003f0, 0x15) r0 = socketcall$auto(0x8000, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0) write$auto(r1, &(0x7f0000000140)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x00\x8c\xf9\x96\xe7\xe3p\xb9\xa407_n\x87M\xee\xcc\x94(CV\xd7\xf2\xd1J9\xb2a\x1f|\v\xe8\xeb\x1e\x12\xc7cvD\x90\x8ah+3\xed\xc9\xa5=\x98\xf7!L\x8a\xdfw\xcf\xc5\x97\xab\xb8\xda\x01\"\x8f\xe4\x9b\xd8\xb0\xa8hB\xa5\xd9\x02\xac\xcf\xf5n\xfe\x8bx\x9fG\xe5>`sZ\xee\xf7\xc5\xc8\xfc\xf2lrI\xd1\xd5\xc4PO\x8c\xc8\xf8\fr\xb7\x87\x06y\x8c\xbb\xba\xd42\xe5\x89\xc3\x84\x85\xdd\xca\xc6E\t\x15\xcc\x10=`M\f\v\xa7d\xee\xc6\xfbrmv*\xb6\x89I\x8bsYC\xed\xc7\xa1\x87\x87\x93O\x060\xc3\x1aw\x06:\x93\x98\xf3|\xe0\xcdZ\xa1!\xdeoB\xde\xc8\xd7\xb4W\xad\x90\xf8\x92$^\xb1\xceCO\xc1>\x06\x11\xe5\xf2\x1c', 0x20000082) lseek$auto(r0, 0x5, 0x3) io_uring_register$auto_IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, 0x0, 0x2) prctl$auto_PR_SET_MM_START_CODE(0x8, 0x1, 0xffffffffffffffff, 0x7, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) r2 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x6, 0x1, 0x9, 0x7, 0x3b, 0x3ff, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb2, 0x9, 0x3, 0xfffc, 0x80, 0x7, 0x40000, 0x7, 0x2000, 0x200, 0x0, 0x81, 0x0, 0x7, 0x0, 0x0, 0x0, [0x1000000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7]}, 0x202, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x5}, 0x7, 0x0) unshare$auto(0x40000080) mq_unlink$auto(0x0) 2m24.07011449s ago: executing program 39 (id=2079): capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x400004d}) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000006900)='/sys/kernel/config/target/dbroot\x00', 0x189002, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x77bc42, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000100)=0x6a) socket(0x18, 0xa, 0x1) close_range$auto(0x2, 0x8, 0x0) r3 = syz_genetlink_get_family_id$auto_nl80211(0x0, r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r4) sendmsg$auto_TIPC_NL_NET_SET(r4, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYRES16=r5, @ANYBLOB="01002cbd7000ffdbdf250f0000000c00078008000200", @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x44050}, 0x2) sendmmsg$auto(0x4, 0x0, 0x206, 0xa) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x929, 0x4001, 0x7, 0x5, 0x100717e, 0x3, 0x7, 0x6, 0x7ff, 0xfffffffe, 0x80000001, 0x4, 0x200000000001, 0x1, 0xfffffffffffffffb, 0x8, 0x0, 0x2, 0x2, 0x9, 0xe, 0x22000, 0x200, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, [0x40000000a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x62bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffff4f3, 0x0, 0x0, 0x2f, 0xffffffffffff7adf, 0x0, 0xfffffffffffffffc, 0x0, 0x3]}, 0xa, 0xd) r6 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ptrace$auto_PTRACE_DETACH(0x11, 0x0, 0x8, 0xd) sendmsg$auto_NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6c000000f3f25d23e29e22db0d4a48abf36bed8672a4b8695129566b4cf875b43febfbb7cb5307aaf28fe1d3a87d8a282594c2dcce86656e320cc986eed4d37e8c86b165d7781e4b1d361b67b63234600f94b752", @ANYRES16=r3], 0x6c}}, 0x4088) ioctl$auto(r6, 0x40045566, 0xffffffffffffffff) unshare$auto(0x6a6) r7 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) write$auto_proc_clear_refs_operations_internal(r1, &(0x7f00000003c0)="73d6cc0008443548f400000400000000000000506f5cd946a3", 0x19) ioctl$auto__ctl_fops_dm_ioctl(r7, 0xfffffff7effffd01, &(0x7f00000001c0)) 1m38.870857723s ago: executing program 0 (id=2082): r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000001c0), 0x640000, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000280)={{0x3, 0x1000, 0x1, 0x1, 0x4}, "654c6dbc7a4d30983899a7e1325b6a29ba1e184410ba9f74e82a3fa6c3ccf1bf"}) ioctl$auto_SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f00000002c0)={0x1, 0x17b7, "e5d02ebff1a0f22827060519362f2f88e79b08745cfeeb517c6dc57b7e6cdc606f490e7822d765e620e59b384bb7a4767cef31f639bb12efa4922229c5b4918f", "957bb98f6817aa559f6d1846dba8340fd7ad51f4595586d2c600434e68629cea1e53bc48eae23140d90b519394bf8df11a3924c9253960b4e9ab012fc27ef6ab0965734454d6662aa9e4680705010b14", 0x4, 0x2, "8568cf815dcbb782114b268bb324a302a4842e0b7270da771be7a331349e3b3cb06f60eabb01da08aaee3bafb4fda1fa3d27f74dd006547ab43c2200128038c7"}) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) ioctl$auto(0xffffffffffffffff, 0x8912, 0x38) ustat$auto(0x801, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) setsockopt$auto_SO_BROADCAST(r1, 0x8, 0x6, &(0x7f0000000200)='-})\x00', 0xfca) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xff1, 0x8000) mount$auto(&(0x7f0000000240)='veth0_to_bridge\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='-})\x00', 0x3ff, &(0x7f0000000440)="0556b0bfc5c3d74f099df98922b4f39b27fd5055896fa35ad970c136c2c0f35ea81442c3c408c787dd1130bae27b92e4e2") io_uring_setup$auto(0x1, 0x0) madvise$auto(0x2, 0x7, 0x8000) bpf$auto(0x5, 0x0, 0x102) getpid() r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa001, 0x0) write$auto(r3, &(0x7f0000000140)='7\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0xd4d0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000164c0), 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) fcntl$auto(0xff80000000000000, 0x409, 0x3f) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x400053, 0x9) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop11\x00', 0x20000, 0x0) ioctl$auto_BLKBSZGET(r4, 0x80081270, &(0x7f00000001c0)=0xbbc) 1m5.052731549s ago: executing program 1 (id=2083): r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) mmap$auto(0x7ff, 0x6, 0xfffffffffffffffa, 0xeb1, 0xffffffffffffffff, 0x4) r1 = io_uring_setup$auto(0xa, 0x0) readv$auto(r0, &(0x7f0000000100)={0x0, 0x43ec}, 0x80000000000005) close_range$auto(r1, 0xa, 0x0) open(0x0, 0xa240, 0x15e) r2 = open(0x0, 0x161342, 0x100) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x2, 0x8000) connect$auto(0x3, 0x0, 0x54) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) ioctl$auto(r2, 0x0, r2) open(&(0x7f0000000000)='./file0\x00', 0x1eb343, 0x100) r3 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x160200, 0x0) read$auto_ftrace_set_event_notrace_pid_fops_trace_events(r3, &(0x7f0000000080)=""/4096, 0x1000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x2f) mmap$auto(0x4ab8f7fc, 0xa0009, 0x4000000000db, 0xffffffffffffff10, 0xffffffffffffffff, 0x18002) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001100)={'vxcan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WOWLAN(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="1c0000003a746a14052373a46f420fb963c3bf6d0b3dbbf45f82bd3aad6cb1303f9a91aa550fa650678d7a47daaeab4f18094634482bf204405444a7823907602d1ec8f453c5ff030000bea5e88e650d5e2e03df162685383edd1334155baf68c8d216d4cc80cddc9fa955a9108753ee9ed5f7e06dc40bb258e14b01355d6315338a97bf8f04", @ANYRES16=r5, @ANYBLOB="68007928cf5b5d528c3dba2c010028bd7000fedbdf024afaffffff0003005b904ea46d23ee1ea641dc0e475515f8d60daec3ce511bfe02e980642fc75fb5c87dc2ebf9703e62b9f4561cb4471d411d5d87a5660b02db1c45c73a56f62473ecca7c", @ANYRES32=r6, @ANYBLOB="38e2718a68566bb5d242c6e01dd60b8e60191bf61aa90ea442e4caccb77669cb2508d98ae17fe9c3f912e868ad"], 0x1c}, 0x1, 0x0, 0x0, 0x24004005}, 0x804) prctl$auto(0x4e, 0x1, 0x0, 0x1, 0x0) futex_waitv$auto(&(0x7f0000000000)={0xb, 0x7ffffffff000, 0x82}, 0x1, 0x0, 0x0, 0x623d) r7 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/amidi2\x00', 0x400740, 0x0) prctl$auto(0x4, 0x8000, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xfff) write$auto(r7, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r8 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRES32=r8, @ANYBLOB="5de1696c4b75b94c4a25886922d9e367a8b33804a8d617482980cabbcf937b2c35ec72a3c2a3f03ebcef216524e7990a7f723e8d19f8bb4d8ee4d0c3ba0c5e123d6c0b086a90095108c52a014be02d387db5b075fe36099902a346c51a182669426e0b2bb5ce3e53547e65a707abf9e7ac"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) read$auto(r8, &(0x7f0000002300)='MAC802154_HWSIM\x00', 0xfdef) 75.39554ms ago: executing program 1 (id=2083): r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) mmap$auto(0x7ff, 0x6, 0xfffffffffffffffa, 0xeb1, 0xffffffffffffffff, 0x4) r1 = io_uring_setup$auto(0xa, 0x0) readv$auto(r0, &(0x7f0000000100)={0x0, 0x43ec}, 0x80000000000005) close_range$auto(r1, 0xa, 0x0) open(0x0, 0xa240, 0x15e) r2 = open(0x0, 0x161342, 0x100) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x2, 0x8000) connect$auto(0x3, 0x0, 0x54) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) ioctl$auto(r2, 0x0, r2) open(&(0x7f0000000000)='./file0\x00', 0x1eb343, 0x100) r3 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x160200, 0x0) read$auto_ftrace_set_event_notrace_pid_fops_trace_events(r3, &(0x7f0000000080)=""/4096, 0x1000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x2f) mmap$auto(0x4ab8f7fc, 0xa0009, 0x4000000000db, 0xffffffffffffff10, 0xffffffffffffffff, 0x18002) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001100)={'vxcan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WOWLAN(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="1c0000003a746a14052373a46f420fb963c3bf6d0b3dbbf45f82bd3aad6cb1303f9a91aa550fa650678d7a47daaeab4f18094634482bf204405444a7823907602d1ec8f453c5ff030000bea5e88e650d5e2e03df162685383edd1334155baf68c8d216d4cc80cddc9fa955a9108753ee9ed5f7e06dc40bb258e14b01355d6315338a97bf8f04", @ANYRES16=r5, @ANYBLOB="68007928cf5b5d528c3dba2c010028bd7000fedbdf024afaffffff0003005b904ea46d23ee1ea641dc0e475515f8d60daec3ce511bfe02e980642fc75fb5c87dc2ebf9703e62b9f4561cb4471d411d5d87a5660b02db1c45c73a56f62473ecca7c", @ANYRES32=r6, @ANYBLOB="38e2718a68566bb5d242c6e01dd60b8e60191bf61aa90ea442e4caccb77669cb2508d98ae17fe9c3f912e868ad"], 0x1c}, 0x1, 0x0, 0x0, 0x24004005}, 0x804) prctl$auto(0x4e, 0x1, 0x0, 0x1, 0x0) futex_waitv$auto(&(0x7f0000000000)={0xb, 0x7ffffffff000, 0x82}, 0x1, 0x0, 0x0, 0x623d) r7 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/amidi2\x00', 0x400740, 0x0) prctl$auto(0x4, 0x8000, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xfff) write$auto(r7, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r8 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRES32=r8, @ANYBLOB="5de1696c4b75b94c4a25886922d9e367a8b33804a8d617482980cabbcf937b2c35ec72a3c2a3f03ebcef216524e7990a7f723e8d19f8bb4d8ee4d0c3ba0c5e123d6c0b086a90095108c52a014be02d387db5b075fe36099902a346c51a182669426e0b2bb5ce3e53547e65a707abf9e7ac"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) read$auto(r8, &(0x7f0000002300)='MAC802154_HWSIM\x00', 0xfdef) 43.141724ms ago: executing program 9 (id=2081): r0 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) getsockopt$auto_SO_PROTOCOL(r0, 0x8, 0x26, &(0x7f0000000040)='-\x00', &(0x7f00000000c0)=0x6cf) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x4d, 0x0) socket(0xa, 0x2, 0x88) r1 = openat$auto_dmaengine_summary_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x301080, 0x0) mmap$auto(0x0, 0x400008, 0x8, 0x19, r1, 0x8000) r2 = socket(0x2, 0x2, 0x1) connect$auto(r2, 0x0, 0x55) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)=ANY=[@ANYBLOB='*\x00\x00@', @ANYRES16=r4, @ANYBLOB="01002abd7000fcdbdf25140000000c00018008000100", @ANYRES32=r5, @ANYBLOB="0500190000000000"], 0x28}, 0x1, 0x0, 0x0, 0x881}, 0x4000) r6 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004800}, 0x40000) recvmmsg$auto(r6, &(0x7f0000000100)={{0x0, 0x4, 0x0, 0x7, 0x0, 0x80000000, 0x7}, 0x80010009}, 0x4, 0x201, 0x0) set_mempolicy$auto(0x6, 0x0, 0x3) unshare$auto(0x40000080) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/nfc/nfc0/rfkill0/soft\x00', 0x149001, 0x0) sendfile$auto(r7, 0xffffffffffffffff, 0x0, 0x6) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) socket(0xa, 0x3, 0x3b) r8 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000580)='/proc/thread-self/net/raw6\x00', 0x500, 0x0) pread64$auto(r8, 0x0, 0x206, 0x7) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/netdevsim/netdevsim3/hwstats/l3/disable_ifindex\x00', 0x1242, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/neigh/batadv0/mcast_solicit\x00', 0x2000, 0x0) socket(0x21, 0x2, 0x2) shutdown$auto(0x200000003, 0x2) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) 41.43626ms ago: executing program 0 (id=2082): r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000001c0), 0x640000, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000280)={{0x3, 0x1000, 0x1, 0x1, 0x4}, "654c6dbc7a4d30983899a7e1325b6a29ba1e184410ba9f74e82a3fa6c3ccf1bf"}) ioctl$auto_SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f00000002c0)={0x1, 0x17b7, "e5d02ebff1a0f22827060519362f2f88e79b08745cfeeb517c6dc57b7e6cdc606f490e7822d765e620e59b384bb7a4767cef31f639bb12efa4922229c5b4918f", "957bb98f6817aa559f6d1846dba8340fd7ad51f4595586d2c600434e68629cea1e53bc48eae23140d90b519394bf8df11a3924c9253960b4e9ab012fc27ef6ab0965734454d6662aa9e4680705010b14", 0x4, 0x2, "8568cf815dcbb782114b268bb324a302a4842e0b7270da771be7a331349e3b3cb06f60eabb01da08aaee3bafb4fda1fa3d27f74dd006547ab43c2200128038c7"}) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) ioctl$auto(0xffffffffffffffff, 0x8912, 0x38) ustat$auto(0x801, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) setsockopt$auto_SO_BROADCAST(r1, 0x8, 0x6, &(0x7f0000000200)='-})\x00', 0xfca) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xff1, 0x8000) mount$auto(&(0x7f0000000240)='veth0_to_bridge\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='-})\x00', 0x3ff, &(0x7f0000000440)="0556b0bfc5c3d74f099df98922b4f39b27fd5055896fa35ad970c136c2c0f35ea81442c3c408c787dd1130bae27b92e4e2") io_uring_setup$auto(0x1, 0x0) madvise$auto(0x2, 0x7, 0x8000) bpf$auto(0x5, 0x0, 0x102) getpid() r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa001, 0x0) write$auto(r3, &(0x7f0000000140)='7\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0xd4d0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000164c0), 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) fcntl$auto(0xff80000000000000, 0x409, 0x3f) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x400053, 0x9) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop11\x00', 0x20000, 0x0) ioctl$auto_BLKBSZGET(r4, 0x80081270, &(0x7f00000001c0)=0xbbc) 0s ago: executing program 8 (id=2080): r0 = ioctl$auto_TUNGETVNETBE2(0xffffffffffffffff, 0x800454df, &(0x7f0000000000)) sendmsg$auto_NL802154_CMD_SEND_BEACONS(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_SCAN_DONE_REASON={0x5, 0x25, 0x1}, @NL802154_ATTR_WPAN_PHY_NAME={0x8, 0x2, '{$%\x00'}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0xd6}]}, 0x2c}}, 0x4040094) ioprio_set$auto(0x2, 0x800000000, 0x8) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) r1 = socket(0x1d, 0x2, 0x7) r2 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r3}, 0x6a) write$auto_proc_mem_operations_base(0xffffffffffffffff, 0xfffffffffffffffd, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wg1\x00', 0x0}) connect$auto(0x3, &(0x7f00000018c0)=@can={0x1d, r4}, 0x18) clone$auto(0x10051c, 0x6, 0x0, 0xffffffffffffffff, 0x80000001) kernel console output (not intermixed with test programs): ] arch_do_signal_or_restart+0x8f/0x7a0 [ 534.131067][T14673] ? fd_install+0x223/0x570 [ 534.131099][T14673] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 534.131140][T14673] ? __sys_socket+0xac/0x260 [ 534.131166][T14673] ? __pfx___x64_sys_futex+0x10/0x10 [ 534.131200][T14673] exit_to_user_mode_loop+0x8c/0x540 [ 534.131234][T14673] do_syscall_64+0x4ee/0xf80 [ 534.131261][T14673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.131286][T14673] RIP: 0033:0x7f24b318f7c9 [ 534.131306][T14673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 534.131329][T14673] RSP: 002b:00007f24b40d30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 534.131352][T14673] RAX: fffffffffffffe00 RBX: 00007f24b33e5fa8 RCX: 00007f24b318f7c9 [ 534.131368][T14673] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f24b33e5fa8 [ 534.131383][T14673] RBP: 00007f24b33e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 534.131398][T14673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 534.131411][T14673] R13: 00007f24b33e6038 R14: 00007fff63b075e0 R15: 00007fff63b076c8 [ 534.131443][T14673] [ 536.278906][T14622] syz.2.1768 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 536.360145][T14622] CPU: 0 UID: 0 PID: 14622 Comm: syz.2.1768 Tainted: G L syzkaller #0 PREEMPT(full) [ 536.360187][T14622] Tainted: [L]=SOFTLOCKUP [ 536.360196][T14622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 536.360356][T14622] Call Trace: [ 536.360368][T14622] [ 536.360376][T14622] dump_stack_lvl+0x16c/0x1f0 [ 536.360418][T14622] dump_header+0x101/0x960 [ 536.360461][T14622] oom_kill_process+0x176/0x910 [ 536.360496][T14622] out_of_memory+0x350/0x1700 [ 536.360519][T14622] ? __lock_acquire+0x436/0x2890 [ 536.360544][T14622] ? __pfx_out_of_memory+0x10/0x10 [ 536.360597][T14622] mem_cgroup_out_of_memory+0x118/0x130 [ 536.360623][T14622] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 536.360660][T14622] ? do_raw_spin_unlock+0x172/0x230 [ 536.360694][T14622] try_charge_memcg+0x695/0xd30 [ 536.360738][T14622] ? __pfx_try_charge_memcg+0x10/0x10 [ 536.360774][T14622] ? __print_lock_name+0x31/0xe0 [ 536.360806][T14622] ? rcu_read_unlock+0x17/0x60 [ 536.360840][T14622] charge_memcg+0x8a/0x230 [ 536.360873][T14622] __mem_cgroup_charge+0x2b/0x1e0 [ 536.360899][T14622] shmem_alloc_and_add_folio+0x50c/0xc20 [ 536.360932][T14622] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 536.360957][T14622] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 536.360987][T14622] shmem_get_folio_gfp+0x67f/0x1610 [ 536.361018][T14622] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 536.361056][T14622] shmem_write_begin+0x1a4/0x3b0 [ 536.361086][T14622] ? __pfx_shmem_write_begin+0x10/0x10 [ 536.361115][T14622] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 536.361149][T14622] ? lockdep_hardirqs_on+0x7c/0x110 [ 536.361176][T14622] generic_perform_write+0x3c4/0x900 [ 536.361212][T14622] ? __pfx_generic_perform_write+0x10/0x10 [ 536.361242][T14622] ? file_update_time_flags+0x35c/0x520 [ 536.361272][T14622] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 536.361303][T14622] shmem_file_write_iter+0x10e/0x140 [ 536.361335][T14622] __kernel_write_iter+0x31a/0xb10 [ 536.361373][T14622] ? __pfx___kernel_write_iter+0x10/0x10 [ 536.361405][T14622] ? __up_read+0x2d1/0x700 [ 536.361436][T14622] ? dump_user_range+0x756/0xb70 [ 536.361469][T14622] ? dump_user_range+0x16e/0xb70 [ 536.361509][T14622] dump_user_range+0x413/0xb70 [ 536.361551][T14622] ? __pfx_dump_user_range+0x10/0x10 [ 536.361595][T14622] ? elf_coredump_extra_notes_write+0xbd/0x500 [ 536.361628][T14622] ? __pfx_writenote+0x10/0x10 [ 536.361659][T14622] elf_core_dump+0x29c3/0x3c10 [ 536.361701][T14622] ? __pfx_elf_core_dump+0x10/0x10 [ 536.361722][T14622] ? do_raw_spin_lock+0x12c/0x2b0 [ 536.361753][T14622] ? find_held_lock+0x2b/0x80 [ 536.361784][T14622] ? __schedule+0x3bbb/0x6150 [ 536.361820][T14622] ? 0xffffffffff600000 [ 536.361843][T14622] ? __schedule+0x114c/0x6150 [ 536.361874][T14622] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 536.361966][T14622] ? vfs_coredump+0x2b85/0x55e0 [ 536.361997][T14622] vfs_coredump+0x2b85/0x55e0 [ 536.362043][T14622] ? __pfx_vfs_coredump+0x10/0x10 [ 536.362076][T14622] ? __lock_acquire+0x436/0x2890 [ 536.362108][T14622] ? __lock_acquire+0x436/0x2890 [ 536.362135][T14622] ? lock_acquire+0x179/0x330 [ 536.362166][T14622] ? lock_acquire+0x179/0x330 [ 536.362213][T14622] ? arch_stack_walk+0xa6/0x100 [ 536.362256][T14622] ? stack_trace_save+0x8e/0xc0 [ 536.362291][T14622] ? __pfx_stack_trace_save+0x10/0x10 [ 536.362327][T14622] ? stack_depot_save_flags+0x29/0x9b0 [ 536.362355][T14622] ? __lock_acquire+0x436/0x2890 [ 536.362380][T14622] ? kasan_save_stack+0x42/0x60 [ 536.362474][T14622] ? proc_coredump_connector+0x2d1/0x4f0 [ 536.362498][T14622] ? __pfx_proc_coredump_connector+0x10/0x10 [ 536.362531][T14622] ? rcu_is_watching+0x12/0xc0 [ 536.362577][T14622] get_signal+0x22e1/0x26d0 [ 536.362623][T14622] ? __pfx_get_signal+0x10/0x10 [ 536.362677][T14622] arch_do_signal_or_restart+0x8f/0x7a0 [ 536.362713][T14622] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 536.362756][T14622] ? do_user_addr_fault+0x926/0x1370 [ 536.362792][T14622] irqentry_exit+0x38a/0x8c0 [ 536.362821][T14622] asm_exc_page_fault+0x26/0x30 [ 536.362843][T14622] RIP: 0033:0x40fff [ 536.362870][T14622] Code: Unable to access opcode bytes at 0x40fd5. [ 536.362880][T14622] RSP: 002b:0000000000000012 EFLAGS: 00010202 [ 536.362900][T14622] RAX: 0000000000000000 RBX: 00007f90f2fe6180 RCX: 00007f90f2d8f7c9 [ 536.362916][T14622] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020003b46 [ 536.362931][T14622] RBP: 00007f90f2e13f91 R08: 0000000000000002 R09: 0000000000000000 [ 536.362946][T14622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 536.362960][T14622] R13: 00007f90f2fe6218 R14: 00007f90f2fe6180 R15: 00007ffedb8f7448 [ 536.362996][T14622] [ 536.363020][T14622] memory: usage 307200kB, limit 307200kB, failcnt 3439 [ 536.832445][T14622] memory+swap: usage 315052kB, limit 9007199254740988kB, failcnt 0 [ 536.906368][T14622] kmem: usage 3544kB, limit 9007199254740988kB, failcnt 0 [ 537.155445][T14622] Memory cgroup stats for /syz2: [ 537.155688][T14622] cache 310362112 [ 537.164477][T14622] rss 630784 [ 538.032144][T14622] rss_huge 0 [ 538.153840][T14622] shmem 276652032 [ 538.157530][T14622] mapped_file 0 [ 538.323091][T14622] dirty 0 [ 538.459801][T14622] writeback 0 [ 538.463125][T14622] workingset_refault_anon 2551 [ 538.467894][T14622] workingset_refault_file 1213 [ 539.556758][T14622] swap 8040448 [ 539.578677][T14622] swapcached 0 [ 539.610670][T14622] pgpgin 754882 [ 539.633092][T14622] pgpgout 692770 [ 539.651016][T14703] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 539.674062][T14703] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 539.809832][T14622] pgfault 355988 [ 539.914039][T14622] pgmajfault 615 [ 539.917633][T14622] inactive_anon 254492672 [ 540.087007][T14622] active_anon 22790144 [ 540.259046][T14622] inactive_file 8192 [ 540.263522][T14622] active_file 0 [ 540.267005][T14622] unevictable 33697792 [ 540.279597][T14622] hierarchical_memory_limit 314572800 [ 540.285023][T14622] hierarchical_memsw_limit 9223372036854771712 [ 540.338466][T14622] total_cache 310362112 [ 540.463953][T14622] total_rss 630784 [ 540.472777][T14622] total_rss_huge 0 [ 540.476552][T14622] total_shmem 276652032 [ 540.487075][T14622] total_mapped_file 0 [ 540.494160][T14622] total_dirty 0 [ 540.501906][T14622] total_writeback 0 [ 540.505860][T14622] total_workingset_refault_anon 2551 [ 540.512118][T14622] total_workingset_refault_file 1213 [ 540.517707][T14622] total_swap 8040448 [ 540.521612][T14622] total_swapcached 0 [ 540.527949][T14622] total_pgpgin 754882 [ 540.532051][T14622] total_pgpgout 692770 [ 540.539456][T14622] total_pgfault 355988 [ 540.546356][T14622] total_pgmajfault 615 [ 540.553734][T14622] total_inactive_anon 254492672 [ 540.849813][T14622] total_active_anon 22790144 [ 540.966774][T14622] total_inactive_file 8192 [ 541.106678][T14622] total_active_file 0 [ 541.110701][T14622] total_unevictable 33697792 [ 541.328929][T14622] anon_cost 0 [ 541.492328][T14622] file_cost 0 [ 541.633258][T14622] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1768,pid=14622,uid=0 [ 541.711672][T14622] Memory cgroup out of memory: Killed process 14622 (syz.2.1768) total-vm:98980kB, anon-rss:1512kB, file-rss:42264kB, shmem-rss:0kB, UID:0 pgtables:176kB oom_score_adj:0 [ 543.840792][ T32] oom_reaper: reaped process 14622 (syz.2.1768), now anon-rss:12kB, file-rss:41212kB, shmem-rss:0kB [ 543.894175][T14772] Invalid ELF header magic: != ELF [ 545.910183][T14816] netlink: 6664 bytes leftover after parsing attributes in process `syz.3.1810'. [ 546.872739][T14845] vhci_hcd vhci_hcd.3: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 547.746608][T14854] syz.3.1817 (14854): /proc/14852/oom_adj is deprecated, please use /proc/14852/oom_score_adj instead. [ 547.827220][T14854] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 549.828019][ T7458] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 549.847014][ T7458] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 549.863152][ T7458] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 549.872611][ T7458] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 549.902639][ T7458] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 551.117881][T14877] chnl_net:caif_netlink_parms(): no params data found [ 551.866943][T14890] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1824'. [ 552.008125][ T7458] Bluetooth: hci5: command tx timeout [ 552.838205][T14877] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.856629][T14877] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.883355][T14877] bridge_slave_0: entered allmulticast mode [ 552.891205][T14877] bridge_slave_0: entered promiscuous mode [ 552.935845][T14877] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.945708][T14877] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.962974][T14877] bridge_slave_1: entered allmulticast mode [ 552.970750][T14877] bridge_slave_1: entered promiscuous mode [ 553.086312][T14877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 553.128292][T14877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 553.287222][T14877] team0: Port device team_slave_0 added [ 553.304246][T14877] team0: Port device team_slave_1 added [ 553.415273][T14877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 553.432555][T14877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 553.508278][T14877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 553.561751][T14877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 553.568751][T14877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 553.636437][T14877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 553.903543][T14877] hsr_slave_0: entered promiscuous mode [ 553.930708][T14877] hsr_slave_1: entered promiscuous mode [ 553.937214][T14877] debugfs: 'hsr0' already exists in 'hsr' [ 553.968106][T14877] Cannot create hsr debugfs directory [ 554.078706][ T7458] Bluetooth: hci5: command tx timeout [ 554.784813][T13127] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.202955][T13127] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.379643][T13127] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.502466][T13127] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.663364][T13127] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.706716][T14877] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 555.725942][T14877] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 555.741990][T14918] netlink: NAT attribute has 8 unknown bytes [ 555.763757][T14877] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 555.789689][T14877] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 556.071330][T13127] bridge_slave_0: left allmulticast mode [ 556.091318][T13127] bridge_slave_0: left promiscuous mode [ 556.107043][T13127] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.151096][ T7458] Bluetooth: hci5: command tx timeout [ 556.900371][T13127] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 556.928165][T13127] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 556.940051][T13127] bond0 (unregistering): Released all slaves [ 557.248110][T14877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 557.357664][T14877] 8021q: adding VLAN 0 to HW filter on device team0 [ 557.557049][T10197] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.564388][T10197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 557.673701][T10197] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.680941][T10197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 558.139418][T13127] hsr_slave_0: left promiscuous mode [ 558.152975][T13127] hsr_slave_1: left promiscuous mode [ 558.167415][T13127] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 558.181659][T13127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 558.216672][ T7458] Bluetooth: hci5: command tx timeout [ 558.224280][T13127] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 558.233962][T13127] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 558.269796][T13127] veth1_macvtap: left promiscuous mode [ 558.275935][T14969] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 558.278222][T13127] veth0_macvtap: left promiscuous mode [ 558.718883][T14982] zswap: compressor not available [ 559.437139][T13127] team0 (unregistering): Port device team_slave_1 removed [ 559.488233][T13127] team0 (unregistering): Port device team_slave_0 removed [ 560.385968][T15010] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1841'. [ 560.396178][T15010] nbd: must specify at least one socket [ 560.671274][T14877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 561.279505][T15031] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 561.622387][T14877] veth0_vlan: entered promiscuous mode [ 561.732202][T14877] veth1_vlan: entered promiscuous mode [ 561.857662][T14877] veth0_macvtap: entered promiscuous mode [ 561.893283][T14877] veth1_macvtap: entered promiscuous mode [ 562.124024][T14877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 562.192336][T14877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 562.264145][T15062] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7fe00 [ 562.276144][T15062] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 562.285768][T15062] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 562.330294][ T6986] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.349744][T15062] page_type: f5(slab) [ 562.372950][T15062] raw: 00fff00000000040 ffff88801bf59a00 dead000000000122 0000000000000000 [ 562.387720][ T6986] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.387808][ T6986] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.387847][ T6986] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.413693][T15062] raw: 0000000000000000 00000000000d000d 00000000f5000000 0000000000000000 [ 562.413790][T15062] head: 00fff00000000040 ffff88801bf59a00 dead000000000122 0000000000000000 [ 562.413814][T15062] head: 0000000000000000 00000000000d000d 00000000f5000000 0000000000000000 [ 562.413834][T15062] head: 00fff00000000003 ffffea0001ff8001 00000000ffffffff 00000000ffffffff [ 562.413857][T15062] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 562.413884][T15062] page dumped because: unmovable page [ 562.413900][T15062] page_owner tracks the page as allocated [ 562.413966][T15062] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd2050(__GFP_RECLAIMABLE|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5502, tgid 5502 (dhcpcd-run-hook), ts 55586640118, free_ts 30718869609 [ 562.414018][T15062] post_alloc_hook+0x1af/0x220 [ 562.415896][T15062] get_page_from_freelist+0xd0b/0x31a0 [ 562.415941][T15062] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 562.415974][T15062] alloc_pages_mpol+0x1fb/0x550 [ 562.416012][T15062] new_slab+0x2c3/0x430 [ 562.416038][T15062] ___slab_alloc+0xe18/0x1c90 [ 562.416064][T15062] __slab_alloc.constprop.0+0x63/0x110 [ 562.416091][T15062] kmem_cache_alloc_lru_noprof+0x451/0x770 [ 562.416120][T15062] ext4_alloc_inode+0x28/0x640 [ 562.416148][T15062] alloc_inode+0x64/0x240 [ 562.416175][T15062] iget_locked+0x1d9/0x6d0 [ 562.416201][T15062] __ext4_iget+0x3ca/0x48b0 [ 562.416228][T15062] ext4_lookup+0x37c/0x730 [ 562.416259][T15062] __lookup_slow+0x251/0x460 [ 562.416285][T15062] lookup_slow+0x50/0x70 [ 562.416309][T15062] path_lookupat+0x5e9/0xc40 [ 562.416339][T15062] page last free pid 1 tgid 1 stack trace: [ 562.416356][T15062] __free_frozen_pages+0x7df/0x1170 [ 562.416380][T15062] free_contig_range+0x183/0x4a0 [ 562.416411][T15062] destroy_args+0xb95/0x14e0 [ 562.416439][T15062] debug_vm_pgtable+0x2220/0x38d0 [ 562.416466][T15062] do_one_initcall+0x123/0x680 [ 562.416503][T15062] kernel_init_freeable+0x5c8/0x920 [ 562.416531][T15062] kernel_init+0x1c/0x2b0 [ 562.416560][T15062] ret_from_fork+0x983/0xb10 [ 562.416585][T15062] ret_from_fork_asm+0x1a/0x30 [ 562.647450][ T7299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.647506][ T7299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.735731][T13072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.735759][T13072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 563.007108][T15087] random: crng reseeded on system resumption [ 563.279810][T15092] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1852'. [ 563.306126][T15092] ipvlan0: entered promiscuous mode [ 563.385977][T15092] ipvlan0: entered allmulticast mode [ 563.396360][T15092] veth0_vlan: entered allmulticast mode [ 563.849985][T15098] zswap: compressor not available [ 564.455712][T15109] zswap: compressor not available [ 565.202471][T15141] netlink: 338 bytes leftover after parsing attributes in process `syz.4.1859'. [ 565.380922][T15142] netlink: 338 bytes leftover after parsing attributes in process `syz.4.1859'. [ 566.779210][ T30] audit: type=1800 audit(32820.335:24): pid=15173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1865" name="dbroot" dev="configfs" ino=62390 res=0 errno=0 [ 566.900999][ T30] audit: type=1800 audit(32820.345:25): pid=15173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1865" name="dbroot" dev="configfs" ino=62390 res=0 errno=0 [ 566.973576][ T30] audit: type=1800 audit(32820.345:26): pid=15173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1865" name="dbroot" dev="configfs" ino=62390 res=0 errno=0 [ 567.018003][ T30] audit: type=1800 audit(32820.345:27): pid=15173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1865" name="dbroot" dev="configfs" ino=62390 res=0 errno=0 [ 567.106327][T15178] ima: policy update failed [ 567.142978][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 567.149533][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 567.219542][ T30] audit: type=1800 audit(32820.345:28): pid=15173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1865" name="dbroot" dev="configfs" ino=62390 res=0 errno=0 [ 567.371747][ T30] audit: type=1800 audit(32820.345:29): pid=15173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1865" name="dbroot" dev="configfs" ino=62390 res=0 errno=0 [ 567.576822][ T30] audit: type=1800 audit(32820.386:30): pid=15173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1865" name="dbroot" dev="configfs" ino=62390 res=0 errno=0 [ 567.808116][ T30] audit: type=1800 audit(32820.396:31): pid=15173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1865" name="dbroot" dev="configfs" ino=62390 res=0 errno=0 [ 567.894207][T15190] netlink: 334 bytes leftover after parsing attributes in process `syz.6.1868'. [ 567.905363][ T30] audit: type=1800 audit(32820.396:32): pid=15173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1865" name="dbroot" dev="configfs" ino=62390 res=0 errno=0 [ 567.950151][ T30] audit: type=1802 audit(32820.677:33): pid=15178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.1866" res=0 errno=0 [ 568.329270][T15201] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 568.644700][T15213] hub 1-0:1.0: USB hub found [ 568.739880][T15213] hub 1-0:1.0: 1 port detected [ 571.153832][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 571.402218][T15256] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input32 [ 571.907118][ C1] vcan0: j1939_tp_rxtimer: 0xffff88814d487800: rx timeout, send abort [ 572.414505][ C1] vcan0: j1939_tp_rxtimer: 0xffff88814d487800: abort rx timeout. Force session deactivation [ 572.674474][T15291] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1883'. [ 573.526776][T15306] ceph: Failed to parse sending metrics switch value 'P^' [ 575.028409][T15334] FAULT_INJECTION: forcing a failure. [ 575.028409][T15334] name failslab, interval 1, probability 0, space 0, times 0 [ 575.041602][T15334] CPU: 0 UID: 0 PID: 15334 Comm: syz.7.1890 Tainted: G L syzkaller #0 PREEMPT(full) [ 575.041655][T15334] Tainted: [L]=SOFTLOCKUP [ 575.041666][T15334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 575.041683][T15334] Call Trace: [ 575.041693][T15334] [ 575.041704][T15334] dump_stack_lvl+0x16c/0x1f0 [ 575.041750][T15334] should_fail_ex+0x512/0x640 [ 575.041779][T15334] ? __kmalloc_cache_noprof+0x5f/0x800 [ 575.041810][T15334] should_failslab+0xc2/0x120 [ 575.041846][T15334] __kmalloc_cache_noprof+0x80/0x800 [ 575.041869][T15334] ? lockdep_init_map_type+0x5c/0x270 [ 575.041893][T15334] ? rfkill_fop_open+0x1b6/0x750 [ 575.041933][T15334] ? __pfx_rfkill_fop_open+0x10/0x10 [ 575.041969][T15334] ? rfkill_fop_open+0x1b6/0x750 [ 575.042000][T15334] ? __pfx_rfkill_fop_open+0x10/0x10 [ 575.042032][T15334] rfkill_fop_open+0x1b6/0x750 [ 575.042071][T15334] ? __pfx_rfkill_fop_open+0x10/0x10 [ 575.042105][T15334] misc_open+0x26d/0x450 [ 575.042135][T15334] ? __pfx_misc_open+0x10/0x10 [ 575.042164][T15334] chrdev_open+0x234/0x6a0 [ 575.042200][T15334] ? __pfx_apparmor_file_open+0x10/0x10 [ 575.042228][T15334] ? __pfx_chrdev_open+0x10/0x10 [ 575.042267][T15334] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 575.042311][T15334] do_dentry_open+0x748/0x1590 [ 575.042345][T15334] ? __pfx_chrdev_open+0x10/0x10 [ 575.042391][T15334] vfs_open+0x82/0x3f0 [ 575.042439][T15334] path_openat+0x2078/0x3140 [ 575.042491][T15334] ? __pfx_path_openat+0x10/0x10 [ 575.042544][T15334] do_filp_open+0x20b/0x470 [ 575.042581][T15334] ? __pfx_do_filp_open+0x10/0x10 [ 575.042651][T15334] ? alloc_fd+0x471/0x7d0 [ 575.042711][T15334] do_sys_openat2+0x121/0x290 [ 575.042740][T15334] ? __pfx_do_sys_openat2+0x10/0x10 [ 575.042782][T15334] __x64_sys_openat+0x174/0x210 [ 575.042811][T15334] ? __pfx___x64_sys_openat+0x10/0x10 [ 575.042856][T15334] do_syscall_64+0xcd/0xf80 [ 575.042882][T15334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.042909][T15334] RIP: 0033:0x7fe8fcb8f7c9 [ 575.042931][T15334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 575.042956][T15334] RSP: 002b:00007fe8fd9a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 575.042983][T15334] RAX: ffffffffffffffda RBX: 00007fe8fcde5fa0 RCX: 00007fe8fcb8f7c9 [ 575.043002][T15334] RDX: 0000000000002000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 575.043020][T15334] RBP: 00007fe8fcc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 575.043036][T15334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 575.043052][T15334] R13: 00007fe8fcde6038 R14: 00007fe8fcde5fa0 R15: 00007fff56795d98 [ 575.043088][T15334] [ 575.581099][T15345] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 576.600400][ T7458] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 577.183110][T15397] openvswitch: netlink: IP tunnel TTL not specified. [ 577.656388][T15382] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 577.665937][T15382] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 577.686452][T15382] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 577.716697][T15382] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 577.739402][T15382] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 577.768750][T15382] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 577.927853][T15416] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1900'. [ 578.321927][T15436] futex_wake_op: syz.7.1904 tries to shift op by -2048; fix this program [ 578.336189][T15436] futex_wake_op: syz.7.1904 tries to shift op by -2048; fix this program [ 578.987385][ T7458] Bluetooth: hci1: command 0x0c1a tx timeout [ 579.203430][T15451] FAULT_INJECTION: forcing a failure. [ 579.203430][T15451] name failslab, interval 1, probability 0, space 0, times 0 [ 579.296923][T15451] CPU: 1 UID: 0 PID: 15451 Comm: syz.7.1906 Tainted: G L syzkaller #0 PREEMPT(full) [ 579.296968][T15451] Tainted: [L]=SOFTLOCKUP [ 579.296977][T15451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 579.296994][T15451] Call Trace: [ 579.297003][T15451] [ 579.297013][T15451] dump_stack_lvl+0x16c/0x1f0 [ 579.297056][T15451] should_fail_ex+0x512/0x640 [ 579.297085][T15451] ? kmem_cache_alloc_noprof+0x62/0x770 [ 579.297119][T15451] should_failslab+0xc2/0x120 [ 579.297155][T15451] kmem_cache_alloc_noprof+0x83/0x770 [ 579.297184][T15451] ? __proc_create+0x2c8/0x8d0 [ 579.297235][T15451] ? __proc_create+0x2c8/0x8d0 [ 579.297265][T15451] __proc_create+0x2c8/0x8d0 [ 579.297297][T15451] ? __pfx___proc_create+0x10/0x10 [ 579.297337][T15451] _proc_mkdir+0xb9/0x210 [ 579.297367][T15451] ? __pfx__proc_mkdir+0x10/0x10 [ 579.297403][T15451] ? __pfx_vlan_init_net+0x10/0x10 [ 579.297426][T15451] vlan_proc_init+0x93/0x180 [ 579.297455][T15451] ops_init+0x1e2/0x5f0 [ 579.297489][T15451] setup_net+0x11d/0x3a0 [ 579.297524][T15451] ? __pfx_setup_net+0x10/0x10 [ 579.297555][T15451] ? lockdep_init_map_type+0x5c/0x270 [ 579.297579][T15451] ? mutex_init_lockep+0x110/0x150 [ 579.297611][T15451] copy_net_ns+0x351/0x7c0 [ 579.297637][T15451] create_new_namespaces+0x3ea/0xab0 [ 579.297678][T15451] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 579.297713][T15451] ksys_unshare+0x45b/0xa40 [ 579.297737][T15451] ? __pfx_ksys_unshare+0x10/0x10 [ 579.297773][T15451] ? xfd_validate_state+0x61/0x180 [ 579.297806][T15451] __x64_sys_unshare+0x31/0x40 [ 579.297827][T15451] do_syscall_64+0xcd/0xf80 [ 579.297854][T15451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.297877][T15451] RIP: 0033:0x7fe8fcb8f7c9 [ 579.297899][T15451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 579.297924][T15451] RSP: 002b:00007fe8fd980038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 579.297948][T15451] RAX: ffffffffffffffda RBX: 00007fe8fcde6090 RCX: 00007fe8fcb8f7c9 [ 579.297964][T15451] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 579.297978][T15451] RBP: 00007fe8fcc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 579.297993][T15451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 579.298007][T15451] R13: 00007fe8fcde6128 R14: 00007fe8fcde6090 R15: 00007fff56795d98 [ 579.298042][T15451] [ 579.298052][T15451] 8021q: can't create entry in proc filesystem! [ 579.710058][T12493] Bluetooth: hci4: command 0x0c1a tx timeout [ 579.716301][ T7458] Bluetooth: hci2: command 0x0c1a tx timeout [ 579.791165][ T7458] Bluetooth: hci5: command 0x0c1a tx timeout [ 579.909651][T15474] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1909'. [ 580.470307][T15482] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 580.810049][T15495] bcache: register_bcache() error : Not a bcache superblock (bad offset) [ 581.545601][T15513] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 581.556373][T15513] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 581.815479][T15516] Invalid ELF header magic: != ELF [ 581.823466][T15520] Invalid ELF header magic: != ELF [ 581.852492][ T7458] Bluetooth: hci5: command 0x0c1a tx timeout [ 582.001527][T15524] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 583.861081][T15563] FAULT_INJECTION: forcing a failure. [ 583.861081][T15563] name failslab, interval 1, probability 0, space 0, times 0 [ 583.903702][T15563] CPU: 1 UID: 0 PID: 15563 Comm: syz.3.1931 Tainted: G L syzkaller #0 PREEMPT(full) [ 583.903747][T15563] Tainted: [L]=SOFTLOCKUP [ 583.903757][T15563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 583.903775][T15563] Call Trace: [ 583.903785][T15563] [ 583.903796][T15563] dump_stack_lvl+0x16c/0x1f0 [ 583.903841][T15563] should_fail_ex+0x512/0x640 [ 583.903871][T15563] ? __kmalloc_cache_noprof+0x5f/0x800 [ 583.903904][T15563] should_failslab+0xc2/0x120 [ 583.903942][T15563] __kmalloc_cache_noprof+0x80/0x800 [ 583.903971][T15563] ? ip6addrlbl_add+0x847/0xd90 [ 583.904002][T15563] ? addrconf_init_net+0x17c/0x8e0 [ 583.904033][T15563] ? addrconf_init_net+0x17c/0x8e0 [ 583.904055][T15563] ? __pfx_addrconf_init_net+0x10/0x10 [ 583.904079][T15563] addrconf_init_net+0x17c/0x8e0 [ 583.904102][T15563] ? ip6addrlbl_net_init+0x142/0x380 [ 583.904140][T15563] ? __pfx_addrconf_init_net+0x10/0x10 [ 583.904174][T15563] ops_init+0x1e2/0x5f0 [ 583.904216][T15563] setup_net+0x11d/0x3a0 [ 583.904254][T15563] ? __pfx_setup_net+0x10/0x10 [ 583.904285][T15563] ? lockdep_init_map_type+0x5c/0x270 [ 583.904311][T15563] ? mutex_init_lockep+0x110/0x150 [ 583.904342][T15563] copy_net_ns+0x351/0x7c0 [ 583.904368][T15563] create_new_namespaces+0x3ea/0xab0 [ 583.904409][T15563] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 583.904447][T15563] ksys_unshare+0x45b/0xa40 [ 583.904481][T15563] ? __pfx_ksys_unshare+0x10/0x10 [ 583.904524][T15563] ? xfd_validate_state+0x61/0x180 [ 583.904561][T15563] __x64_sys_unshare+0x31/0x40 [ 583.904585][T15563] do_syscall_64+0xcd/0xf80 [ 583.904613][T15563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.904639][T15563] RIP: 0033:0x7fb08e78f7c9 [ 583.904661][T15563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 583.904686][T15563] RSP: 002b:00007fb08f608038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 583.904710][T15563] RAX: ffffffffffffffda RBX: 00007fb08e9e6090 RCX: 00007fb08e78f7c9 [ 583.904726][T15563] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 583.904743][T15563] RBP: 00007fb08e813f91 R08: 0000000000000000 R09: 0000000000000000 [ 583.904757][T15563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 583.904772][T15563] R13: 00007fb08e9e6128 R14: 00007fb08e9e6090 R15: 00007ffd121121e8 [ 583.904809][T15563] [ 584.168738][ T7458] Bluetooth: hci5: command 0x0c1a tx timeout [ 584.445219][T15565] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 585.272837][T15596] binder: 15594:15596 ioctl 4018620d ffffffffffffffff returned -22 [ 587.367201][T15650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1953'. [ 587.409294][T15651] ubi1: attaching mtd1 [ 587.413408][T15651] ubi1 error: ubi_attach_mtd_dev: bad VID header (8) or data offsets (72) [ 590.056072][ T30] audit: type=1326 audit(32843.726:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15713 comm="syz.6.1966" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f130418f7c9 code=0x0 [ 591.392648][T15699] netlink: 'syz.3.1962': attribute type 4 has an invalid length. [ 591.406619][T15699] netlink: 314 bytes leftover after parsing attributes in process `syz.3.1962'. [ 591.613068][T15738] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1974'. [ 592.271459][T15758] random: crng reseeded on system resumption [ 593.169371][T15793] ubi0: attaching mtd0 [ 593.175200][T15793] ubi0 error: validate_ec_hdr: bad VID header offset 514, expected 64 [ 593.189787][T15793] ubi0 error: validate_ec_hdr: bad EC header [ 593.203701][T15793] Erase counter header dump: [ 593.229656][T15793] magic 0x55424923 [ 593.261408][T15793] version 1 [ 593.275803][T15793] ec 1 [ 593.291240][T15793] vid_hdr_offset 514 [ 593.355177][T15793] data_offset 578 [ 593.359225][T15793] image_seq 1139318157 [ 593.408039][T15793] hdr_crc 0x8f9cedad [ 593.464898][T15793] erase counter header hexdump: [ 593.474281][T15793] CPU: 0 UID: 0 PID: 15793 Comm: syz.6.1982 Tainted: G L syzkaller #0 PREEMPT(full) [ 593.474302][T15793] Tainted: [L]=SOFTLOCKUP [ 593.474307][T15793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 593.474316][T15793] Call Trace: [ 593.474322][T15793] [ 593.474328][T15793] dump_stack_lvl+0x16c/0x1f0 [ 593.474356][T15793] validate_ec_hdr+0x28c/0x330 [ 593.474378][T15793] ubi_io_read_ec_hdr+0x6d1/0x760 [ 593.474401][T15793] ubi_attach+0x61f/0x4fa0 [ 593.474422][T15793] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 593.474438][T15793] ? ubi_msg+0x108/0x160 [ 593.474451][T15793] ? __pfx_ubi_msg+0x10/0x10 [ 593.474465][T15793] ? __pfx_ubi_attach+0x10/0x10 [ 593.474481][T15793] ? ubi_attach_mtd_dev+0x15ad/0x37f0 [ 593.474496][T15793] ? __vmalloc_node_noprof+0xad/0xf0 [ 593.474509][T15793] ? ubi_attach_mtd_dev+0x15ad/0x37f0 [ 593.474527][T15793] ubi_attach_mtd_dev+0x15f9/0x37f0 [ 593.474552][T15793] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 593.474566][T15793] ? __pfx_get_mtd_device+0x10/0x10 [ 593.474591][T15793] ctrl_cdev_ioctl+0x381/0x420 [ 593.474606][T15793] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 593.474627][T15793] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 593.474643][T15793] __x64_sys_ioctl+0x18e/0x210 [ 593.474661][T15793] do_syscall_64+0xcd/0xf80 [ 593.474676][T15793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.474689][T15793] RIP: 0033:0x7f130418f7c9 [ 593.474702][T15793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 593.474715][T15793] RSP: 002b:00007f1304fbc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 593.474729][T15793] RAX: ffffffffffffffda RBX: 00007f13043e6090 RCX: 00007f130418f7c9 [ 593.474738][T15793] RDX: 0000000000000000 RSI: 0000000040186f40 RDI: 0000000000000007 [ 593.474758][T15793] RBP: 00007f1304213f91 R08: 0000000000000000 R09: 0000000000000000 [ 593.474767][T15793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 593.474775][T15793] R13: 00007f13043e6128 R14: 00007f13043e6090 R15: 00007ffde0959498 [ 593.474795][T15793] [ 593.474802][T15793] ubi0 error: ubi_io_read_ec_hdr: validation failed for PEB 0 [ 593.764015][T15793] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 593.988399][T15804] bridge0: port 3(veth0_to_bridge) entered blocking state [ 594.009456][T15804] bridge0: port 3(veth0_to_bridge) entered disabled state [ 594.016758][T15804] veth0_to_bridge: entered allmulticast mode [ 594.052718][T15804] veth0_to_bridge: entered promiscuous mode [ 594.059111][T15804] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 594.105276][T15804] bridge0: port 3(veth0_to_bridge) entered blocking state [ 594.112586][T15804] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 594.676653][T15817] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 594.870367][ T30] audit: type=1800 audit(32848.541:35): pid=15824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1990" name="dbroot" dev="configfs" ino=65942 res=0 errno=0 [ 595.409803][T15831] sp0: Synchronizing with TNC [ 595.570408][T15834] ptrace attach of "./syz-executor exec"[8880] was attempted by "./syz-executor exec"[15834] [ 595.634713][T15842] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 595.649844][T15844] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 595.696853][T15842] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 595.930791][T15853] FAULT_INJECTION: forcing a failure. [ 595.930791][T15853] name failslab, interval 1, probability 0, space 0, times 0 [ 595.995503][T15853] CPU: 1 UID: 0 PID: 15853 Comm: syz.7.1997 Tainted: G L syzkaller #0 PREEMPT(full) [ 595.995529][T15853] Tainted: [L]=SOFTLOCKUP [ 595.995534][T15853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 595.995543][T15853] Call Trace: [ 595.995548][T15853] [ 595.995555][T15853] dump_stack_lvl+0x16c/0x1f0 [ 595.995583][T15853] should_fail_ex+0x512/0x640 [ 595.995606][T15853] ? fs_reclaim_acquire+0xae/0x150 [ 595.995640][T15853] should_failslab+0xc2/0x120 [ 595.995670][T15853] __kmalloc_noprof+0xeb/0x910 [ 595.995695][T15853] ? tomoyo_encode2+0x100/0x3e0 [ 595.995731][T15853] ? tomoyo_encode2+0x100/0x3e0 [ 595.995759][T15853] tomoyo_encode2+0x100/0x3e0 [ 595.995794][T15853] tomoyo_encode+0x29/0x50 [ 595.995823][T15853] tomoyo_realpath_from_path+0x18f/0x6e0 [ 595.995864][T15853] tomoyo_check_open_permission+0x2ab/0x3c0 [ 595.995896][T15853] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 595.995961][T15853] ? do_raw_spin_lock+0x12c/0x2b0 [ 595.995999][T15853] tomoyo_file_open+0x6b/0x90 [ 595.996024][T15853] security_file_open+0x84/0x1e0 [ 595.996052][T15853] do_dentry_open+0x597/0x1590 [ 595.996086][T15853] ? security_inode_permission+0xbf/0x260 [ 595.996119][T15853] vfs_open+0x82/0x3f0 [ 595.996148][T15853] path_openat+0x2078/0x3140 [ 595.996189][T15853] ? __pfx_path_openat+0x10/0x10 [ 595.996232][T15853] do_filp_open+0x20b/0x470 [ 595.996266][T15853] ? __pfx_do_filp_open+0x10/0x10 [ 595.996312][T15853] ? __pfx_kfree_link+0x10/0x10 [ 595.996351][T15853] ? alloc_fd+0x471/0x7d0 [ 595.996391][T15853] do_sys_openat2+0x121/0x290 [ 595.996420][T15853] ? __pfx_do_sys_openat2+0x10/0x10 [ 595.996446][T15853] ? count_memcg_events+0x122/0x290 [ 595.996492][T15853] __x64_sys_openat+0x174/0x210 [ 595.996519][T15853] ? __pfx___x64_sys_openat+0x10/0x10 [ 595.996562][T15853] do_syscall_64+0xcd/0xf80 [ 595.996588][T15853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.996612][T15853] RIP: 0033:0x7fe8fcb8f7c9 [ 595.996632][T15853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 595.996654][T15853] RSP: 002b:00007fe8fd980038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 595.996676][T15853] RAX: ffffffffffffffda RBX: 00007fe8fcde6090 RCX: 00007fe8fcb8f7c9 [ 595.996692][T15853] RDX: 0000000000008800 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 595.996708][T15853] RBP: 00007fe8fcc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 595.996723][T15853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 595.996737][T15853] R13: 00007fe8fcde6128 R14: 00007fe8fcde6090 R15: 00007fff56795d98 [ 595.996772][T15853] [ 595.997951][T15853] ERROR: Out of memory at tomoyo_realpath_from_path. [ 597.652081][T15879] netlink: 504 bytes leftover after parsing attributes in process `syz.7.2002'. [ 598.322047][T15896] random: crng reseeded on system resumption [ 598.333901][T15895] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 598.400312][ T7458] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 598.400338][ T7458] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 598.407666][ T7458] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 598.407726][ T7458] Bluetooth: hci2: adv larger than maximum supported [ 598.407759][ T7458] Bluetooth: hci2: adv larger than maximum supported [ 598.430438][ T7458] Bluetooth: hci2: Malformed LE Event: 0x0d [ 598.535901][T15897] Unrecognized hibernate image header format! [ 598.542552][T15897] PM: hibernation: Image mismatch: architecture specific data [ 598.734976][T15905] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 599.741683][T15919] Invalid ELF header magic: != ELF [ 600.296175][T15939] sctp: [Deprecated]: syz.4.2015 (pid 15939) Use of struct sctp_assoc_value in delayed_ack socket option. [ 600.296175][T15939] Use struct sctp_sack_info instead [ 600.765800][T15919] netlink: 146 bytes leftover after parsing attributes in process `syz.7.2012'. [ 601.171176][T15938] FAULT_INJECTION: forcing a failure. [ 601.171176][T15938] name fail_futex, interval 1, probability 0, space 0, times 0 [ 601.274700][T15938] CPU: 1 UID: 0 PID: 15938 Comm: syz.4.2015 Tainted: G L syzkaller #0 PREEMPT(full) [ 601.274740][T15938] Tainted: [L]=SOFTLOCKUP [ 601.274748][T15938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 601.274763][T15938] Call Trace: [ 601.274772][T15938] [ 601.274782][T15938] dump_stack_lvl+0x16c/0x1f0 [ 601.274822][T15938] should_fail_ex+0x512/0x640 [ 601.274855][T15938] get_futex_key+0x1085/0x15f0 [ 601.274886][T15938] ? __pfx_get_futex_key+0x10/0x10 [ 601.274924][T15938] futex_wake+0xea/0x530 [ 601.274965][T15938] ? __pfx_futex_wake+0x10/0x10 [ 601.275011][T15938] do_futex+0x1e3/0x350 [ 601.275038][T15938] ? __pfx_do_futex+0x10/0x10 [ 601.275062][T15938] ? __might_fault+0xe3/0x190 [ 601.275098][T15938] mm_release+0x24e/0x300 [ 601.275130][T15938] do_exit+0x69e/0x2bd0 [ 601.275160][T15938] ? __pfx_do_exit+0x10/0x10 [ 601.275182][T15938] ? do_raw_spin_lock+0x12c/0x2b0 [ 601.275208][T15938] ? find_held_lock+0x2b/0x80 [ 601.275243][T15938] do_group_exit+0xd3/0x2a0 [ 601.275269][T15938] get_signal+0x2671/0x26d0 [ 601.275308][T15938] ? __lock_acquire+0x436/0x2890 [ 601.275332][T15938] ? __pfx_get_signal+0x10/0x10 [ 601.275365][T15938] ? do_futex+0x122/0x350 [ 601.275395][T15938] arch_do_signal_or_restart+0x8f/0x7a0 [ 601.275427][T15938] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 601.275466][T15938] ? __fget_files+0x20e/0x3c0 [ 601.275497][T15938] ? __pfx___x64_sys_futex+0x10/0x10 [ 601.275531][T15938] exit_to_user_mode_loop+0x8c/0x540 [ 601.275564][T15938] do_syscall_64+0x4ee/0xf80 [ 601.275589][T15938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.275613][T15938] RIP: 0033:0x7f24b318f7c9 [ 601.275633][T15938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 601.275655][T15938] RSP: 002b:00007f24b40d30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 601.275677][T15938] RAX: fffffffffffffe00 RBX: 00007f24b33e5fa8 RCX: 00007f24b318f7c9 [ 601.275694][T15938] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f24b33e5fa8 [ 601.275708][T15938] RBP: 00007f24b33e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 601.275726][T15938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 601.275740][T15938] R13: 00007f24b33e6038 R14: 00007fff63b075e0 R15: 00007fff63b076c8 [ 601.275775][T15938] [ 601.617653][ T30] audit: type=1800 audit(32855.357:36): pid=15959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2019" name="lu_gp_id" dev="configfs" ino=66375 res=0 errno=0 [ 602.194388][T15972] HSR: entered promiscuous mode [ 602.859180][T15992] netlink: 'syz.7.2026': attribute type 1 has an invalid length. [ 604.339269][ T7458] Bluetooth: hci1: unexpected event 0x23 length: 127 > 13 [ 605.909277][T16056] block2mtd: too many arguments [ 605.940388][T16056] netlink: 334 bytes leftover after parsing attributes in process `syz.3.2047'. [ 606.009873][T16058] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 606.577666][T16073] vhci_hcd vhci_hcd.3: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 607.357598][T16084] HfR: entered promiscuous mode [ 607.367045][T16084] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2052'. [ 607.376223][T16084] HfR: left promiscuous mode [ 607.561083][T16088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2053'. [ 608.191220][T16096] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2056'. [ 608.240955][T16096] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 608.363852][T16098] NFSD: Failed to start, no listeners configured. [ 612.856132][T16177] FAULT_INJECTION: forcing a failure. [ 612.856132][T16177] name failslab, interval 1, probability 0, space 0, times 0 [ 612.921898][T16177] CPU: 0 UID: 0 PID: 16177 Comm: syz.7.2076 Tainted: G L syzkaller #0 PREEMPT(full) [ 612.921941][T16177] Tainted: [L]=SOFTLOCKUP [ 612.921951][T16177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 612.921968][T16177] Call Trace: [ 612.921978][T16177] [ 612.921989][T16177] dump_stack_lvl+0x16c/0x1f0 [ 612.922036][T16177] should_fail_ex+0x512/0x640 [ 612.922066][T16177] ? __kmalloc_noprof+0xca/0x910 [ 612.922100][T16177] should_failslab+0xc2/0x120 [ 612.922140][T16177] __kmalloc_noprof+0xeb/0x910 [ 612.922168][T16177] ? lsm_blob_alloc+0x68/0x90 [ 612.922214][T16177] ? lsm_blob_alloc+0x68/0x90 [ 612.922248][T16177] lsm_blob_alloc+0x68/0x90 [ 612.922281][T16177] security_prepare_creds+0x2f/0x270 [ 612.922316][T16177] prepare_creds+0x5d6/0x940 [ 612.922349][T16177] cap_task_prctl+0x648/0xa80 [ 612.922381][T16177] security_task_prctl+0xc2/0x160 [ 612.922426][T16177] __do_sys_prctl+0xaa/0x2220 [ 612.922460][T16177] ? __pfx___do_sys_prctl+0x10/0x10 [ 612.922487][T16177] ? syscall_user_dispatch+0x78/0x140 [ 612.922541][T16177] do_syscall_64+0xcd/0xf80 [ 612.922567][T16177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.922594][T16177] RIP: 0033:0x7fe8fcb8f7c9 [ 612.922617][T16177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 612.922644][T16177] RSP: 002b:00007fe8fd9a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 612.922670][T16177] RAX: ffffffffffffffda RBX: 00007fe8fcde5fa0 RCX: 00007fe8fcb8f7c9 [ 612.922688][T16177] RDX: ffffffffffffffff RSI: 0000000000000001 RDI: 0000000000000008 [ 612.922706][T16177] RBP: 00007fe8fcc13f91 R08: 0000000000000006 R09: 0000000000000000 [ 612.922722][T16177] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 612.922738][T16177] R13: 00007fe8fcde6038 R14: 00007fe8fcde5fa0 R15: 00007fff56795d98 [ 612.922773][T16177] [ 613.124609][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 613.137223][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 613.149979][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 613.162645][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 613.175198][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 613.187517][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 613.199855][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 613.212119][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 613.224511][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 613.236844][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 613.249207][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 613.261503][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 613.273814][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 613.286262][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 613.298701][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 613.311018][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 613.323329][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 613.335657][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 618.203635][ C0] net_ratelimit: 20627 callbacks suppressed [ 618.203653][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 618.222314][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 618.234657][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 618.247266][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 618.259490][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 618.271874][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 618.284194][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 618.296471][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 618.308761][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 618.321170][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 623.187574][ C0] net_ratelimit: 20599 callbacks suppressed [ 623.187598][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 623.206195][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 623.218554][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 623.230818][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 623.243183][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 623.255473][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 623.267823][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 623.280257][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 623.292806][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 623.305317][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 628.171647][ C0] net_ratelimit: 20097 callbacks suppressed [ 628.171664][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 628.190041][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 628.202299][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 628.214789][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 628.227055][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 628.239256][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 628.251616][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 628.264206][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 628.276438][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 628.288863][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 628.304215][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 628.310559][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 633.155901][ C0] net_ratelimit: 20766 callbacks suppressed [ 633.155917][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 633.174732][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 633.187024][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 633.199389][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 633.211820][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 633.224337][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 633.236613][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 633.249052][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 633.261470][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 633.273737][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 638.139782][ C0] net_ratelimit: 12310 callbacks suppressed [ 638.139807][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 638.158595][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 638.170917][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 638.183336][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 638.196374][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 638.208875][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 638.221186][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 638.233734][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 638.247337][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 638.259768][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 643.124646][ C0] net_ratelimit: 12622 callbacks suppressed [ 643.124663][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 643.143544][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 643.155840][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 643.168312][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 643.181240][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 643.193799][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 643.206065][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 643.218552][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 643.231974][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 643.244361][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 648.108637][ C0] net_ratelimit: 13022 callbacks suppressed [ 648.108655][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 648.127118][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 648.139604][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 648.152284][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 648.165950][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 648.178521][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 648.190988][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 648.203511][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 648.217209][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 648.229566][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 653.092223][ C0] net_ratelimit: 12795 callbacks suppressed [ 653.092240][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 653.110984][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 653.123548][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 653.137765][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 653.150337][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 653.162951][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 653.175677][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 653.188612][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 653.201150][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 653.213577][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 658.076890][ C0] net_ratelimit: 12101 callbacks suppressed [ 658.076915][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 658.095473][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 658.108009][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 658.120640][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 658.134865][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 658.147455][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 658.160154][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 658.173390][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 658.187071][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 658.199696][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 661.768093][T16202] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 663.060234][ C0] net_ratelimit: 11257 callbacks suppressed [ 663.060254][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 663.080021][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 663.092376][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 663.104892][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 663.117263][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 663.130538][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 663.142890][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 663.155317][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 663.167664][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 663.180784][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 664.748495][ T7001] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 664.823205][T16200] Bluetooth: hci7: Opcode 0x0c03 failed: -4 [ 664.837893][ T7001] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 665.397179][ T7001] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 665.416702][ T7001] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 665.433295][T16205] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 665.635800][T16206] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 665.932305][ T6983] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 665.959037][ T7001] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 666.083170][T16206] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 666.222013][T16206] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 666.246575][T16206] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 668.044737][ C0] net_ratelimit: 12231 callbacks suppressed [ 668.044753][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 668.063181][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 668.075444][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 668.087657][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 668.100566][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 668.112923][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 668.125132][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 668.137435][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 668.150340][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 668.162583][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 668.326370][T16202] Bluetooth: hci8: Opcode 0x1009 failed: -110 [ 668.352342][ T6983] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 668.395816][ T7001] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 668.610792][ T7001] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 669.360355][ T7001] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 669.549864][ T7001] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 671.555258][ T7001] Bluetooth: hci6: command tx timeout [ 671.614060][ T7001] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 671.662314][ T7001] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 673.028679][ C0] net_ratelimit: 11590 callbacks suppressed [ 673.028697][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 673.047284][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 673.059779][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 673.072110][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 673.085262][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 673.097806][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 673.110199][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 673.122719][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 673.135645][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 673.148349][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 673.649788][ T7458] Bluetooth: hci6: command tx timeout [ 673.865015][T12493] Bluetooth: hci3: command tx timeout [ 675.939651][T12493] Bluetooth: hci3: command tx timeout [ 678.010131][ T7458] Bluetooth: hci3: command tx timeout [ 678.016293][ C0] net_ratelimit: 12758 callbacks suppressed [ 678.016310][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 678.016527][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 678.016773][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 678.017055][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 678.017912][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 678.018128][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 678.018375][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 678.018679][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 678.019496][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 678.019707][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 682.996941][ C0] net_ratelimit: 12834 callbacks suppressed [ 682.996960][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 683.015356][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 683.027880][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 683.040468][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 683.054252][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 683.066864][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 683.079224][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 683.091604][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 683.104620][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 683.117055][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 683.861438][ T7001] Bluetooth: hci6: command tx timeout [ 685.515255][T12493] Bluetooth: hci8: command tx timeout [ 685.884196][T12493] Bluetooth: hci6: command tx timeout [ 687.559390][T12493] Bluetooth: hci8: command tx timeout [ 687.980798][ C0] net_ratelimit: 12661 callbacks suppressed [ 687.980815][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 688.000658][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 688.013090][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 688.025582][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 688.037878][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 688.050957][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 688.063218][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 688.075579][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 688.087861][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 688.100941][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 689.381917][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 689.388336][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 689.627248][T12493] Bluetooth: hci8: command tx timeout [ 691.459301][ T6983] Bluetooth: hci3: command tx timeout [ 692.964821][ C0] net_ratelimit: 12581 callbacks suppressed [ 692.964839][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 692.983323][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 692.997068][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 693.009601][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 693.022112][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 693.034711][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 693.048421][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 693.060845][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 693.073306][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 693.085792][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 697.238076][T12493] Bluetooth: hci8: command tx timeout [ 697.948841][ C0] net_ratelimit: 12603 callbacks suppressed [ 697.948859][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 697.968046][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 697.980581][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 697.992985][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 698.005308][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 698.018370][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 698.031260][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 698.043532][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 698.056051][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 698.069021][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 702.932886][ C0] net_ratelimit: 12018 callbacks suppressed [ 702.932902][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 702.952678][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 702.965206][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 702.978002][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 702.990626][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 703.004866][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 703.017374][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 703.029797][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 703.042221][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 703.055182][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 707.916978][ C0] net_ratelimit: 12239 callbacks suppressed [ 707.916995][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 707.935358][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 707.947871][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 707.960519][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 707.974188][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 707.986748][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 707.999182][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 708.011455][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 708.024615][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 708.037012][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 708.214174][ T7458] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 708.331229][ T7458] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 708.707912][ T7458] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 709.438192][ T7458] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 712.901139][ C0] net_ratelimit: 12587 callbacks suppressed [ 712.901157][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 712.920079][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 712.932621][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 712.946201][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 712.959144][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 712.971733][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 712.984275][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 712.997268][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 713.009668][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 713.021961][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 713.977414][ T6983] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 715.894083][T16202] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 717.023936][T16206] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 717.052619][T16202] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 717.096606][T16206] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 717.137347][T16206] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 717.299459][T16202] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 717.420786][T16206] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 717.885194][ C0] net_ratelimit: 11747 callbacks suppressed [ 717.885212][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 717.903626][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 717.916741][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 717.929348][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 717.941593][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 717.954456][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 717.967508][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 717.980234][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 717.992540][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 718.005144][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 718.188568][T16202] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 718.308529][T16206] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 718.523949][T16202] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 719.583377][T16206] Bluetooth: hci0: command tx timeout [ 720.899053][T16206] Bluetooth: hci1: command tx timeout [ 721.616520][T16202] Bluetooth: hci0: command tx timeout [ 722.001305][T16202] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 722.189288][T16202] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 722.654705][T16202] Bluetooth: hci2: command tx timeout [ 722.869306][ C0] net_ratelimit: 11533 callbacks suppressed [ 722.869334][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 722.887819][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 722.900417][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 722.913400][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 722.925870][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 722.937821][ C0] sched: DL replenish lagged too much [ 722.943700][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 722.956036][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 722.969280][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 722.981594][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 722.993996][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 723.015999][ T7001] Bluetooth: hci1: command tx timeout [ 723.093676][ T7001] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 723.684228][ T7458] Bluetooth: hci0: command tx timeout [ 724.438731][ T7001] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 725.095437][ T7458] Bluetooth: hci1: command tx timeout [ 725.437170][ T7458] Bluetooth: hci2: command tx timeout [ 725.520893][T16206] Bluetooth: hci4: Opcode 0x0c23 failed: -110 [ 725.760002][ T7458] Bluetooth: hci0: command tx timeout [ 727.853892][ C0] net_ratelimit: 12545 callbacks suppressed [ 727.853909][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 727.872330][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 727.884907][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 727.897475][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 727.903003][T16234] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 727.910984][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 727.928281][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 727.940741][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 727.953261][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 727.966412][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 727.979057][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 732.122235][ T7458] Bluetooth: hci2: command tx timeout [ 732.138717][ T7001] Bluetooth: hci1: command tx timeout [ 732.837469][ C0] net_ratelimit: 12203 callbacks suppressed [ 732.837492][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 732.855912][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 732.868684][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 732.881658][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 732.894178][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 732.907349][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 732.919728][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 732.932848][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 732.945314][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 732.957826][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 734.192605][ T7001] Bluetooth: hci2: command tx timeout [ 737.821774][ C0] net_ratelimit: 11441 callbacks suppressed [ 737.821800][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 737.840628][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 737.853103][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 737.865837][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 737.879476][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 737.892869][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 737.905482][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 737.918111][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 737.931811][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 737.944423][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 742.805441][ C0] net_ratelimit: 12205 callbacks suppressed [ 742.805463][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 742.825543][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 742.838120][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 742.850776][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 742.863420][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 742.876513][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 742.888904][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 742.901199][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 742.913661][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 742.927067][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 746.611870][ T7458] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 747.789663][ C0] net_ratelimit: 12407 callbacks suppressed [ 747.789681][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 747.808504][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 747.821044][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 747.833843][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 747.846878][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 747.859564][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 747.871980][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 747.884472][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 747.897555][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 747.910209][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 748.681275][ T7001] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 748.929434][T16242] Bluetooth: hci3: Opcode 0x0c03 failed: -4 [ 750.502703][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 750.509142][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.774411][ C0] net_ratelimit: 12330 callbacks suppressed [ 752.774427][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 752.793347][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 752.806900][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 752.819462][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 752.832928][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 752.845370][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 752.857878][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 752.870143][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 752.883227][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 752.895588][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 757.757771][ C0] net_ratelimit: 12716 callbacks suppressed [ 757.757788][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 757.776250][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 757.789905][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 757.802451][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 757.815060][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 757.827683][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 757.841364][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 757.854063][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 757.866779][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 757.879349][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 762.741890][ C0] net_ratelimit: 12504 callbacks suppressed [ 762.741915][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 762.760500][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 762.773115][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 762.785722][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 762.799554][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 762.812269][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 762.824823][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 762.837594][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 762.850716][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 762.863157][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 765.881697][ T7001] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 767.725967][ C0] net_ratelimit: 12080 callbacks suppressed [ 767.725985][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 767.744796][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 767.758570][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 767.771049][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 767.783471][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 767.795829][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 767.808882][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 767.821182][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 767.833552][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 767.846181][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 769.686536][ T7458] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 769.746344][ T7001] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 769.764407][ T7001] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 771.745133][T16252] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 772.710142][ C0] net_ratelimit: 12631 callbacks suppressed [ 772.710166][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 772.729769][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 772.742348][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 772.755020][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 772.767454][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 772.780701][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 772.793337][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 772.805992][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 772.818362][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 772.831586][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 775.082483][ T7458] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 777.573585][ T7458] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 777.641740][ T7458] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 777.666729][T16206] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 777.694556][ C0] net_ratelimit: 11903 callbacks suppressed [ 777.694573][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 777.712943][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 777.725197][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 777.737553][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 777.750422][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 777.762796][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 777.775251][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 777.787709][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 777.800724][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 777.813351][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 778.602458][T16202] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 779.791691][T16206] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 779.819908][T16206] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 779.896225][ T7458] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 779.939408][T16206] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 781.935148][T16260] Bluetooth: hci6: Opcode 0x1001 failed: -110 [ 781.951618][ T7001] Bluetooth: hci5: Opcode 0x0c23 failed: -110 [ 782.128817][ T7458] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 782.153006][ T7458] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 782.178592][ T7458] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 782.678270][ C0] net_ratelimit: 12276 callbacks suppressed [ 782.678287][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 782.697292][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 782.710393][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 782.723055][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 782.735534][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 782.748190][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 782.761406][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 782.773961][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 782.786716][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 782.799533][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 784.160428][T16257] Bluetooth: hci5: Opcode 0x1001 failed: -110 [ 787.662493][ C0] net_ratelimit: 12392 callbacks suppressed [ 787.662511][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 787.680935][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 787.693585][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 787.706312][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 787.719308][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 787.732402][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 787.744672][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 787.757103][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 787.769964][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 787.782455][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 792.646305][ C0] net_ratelimit: 12505 callbacks suppressed [ 792.646325][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 792.666309][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 792.679004][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 792.691549][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 792.704283][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 792.718283][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 792.730816][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 792.743348][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 792.756040][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 792.769759][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 797.630530][ C0] net_ratelimit: 12767 callbacks suppressed [ 797.630547][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 797.648948][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 797.661445][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 797.674036][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 797.687040][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 797.699419][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 797.711715][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 797.724170][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 797.737132][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 797.749670][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 802.615178][ C0] net_ratelimit: 12946 callbacks suppressed [ 802.615198][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 802.633992][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 802.646451][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 802.659008][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 802.672641][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 802.685217][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 802.697755][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 802.710412][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 802.724033][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 802.736637][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 804.420473][ T6983] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 805.009457][ T6983] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 805.038812][T16281] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 805.066576][ T6983] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 805.085276][T16282] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 805.605328][T16281] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 805.648144][T12493] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 805.686850][T16281] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 805.714019][T12493] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 805.750676][ T6983] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 807.021078][T12493] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 807.037383][T16281] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 807.067600][T16282] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 807.092491][ T6983] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 807.140775][T16281] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 807.247789][T16282] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 807.511385][ T6983] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 807.598780][ C0] net_ratelimit: 9974 callbacks suppressed [ 807.598798][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 807.617141][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 807.629455][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 807.641869][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 807.654969][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 807.667500][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 807.680285][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 807.692868][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 807.705793][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 807.718298][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 807.734630][T12493] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 808.165298][T16281] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 808.303439][T16202] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 810.831755][ T7458] Bluetooth: hci5: command tx timeout [ 811.017810][T16202] Bluetooth: hci6: command tx timeout [ 811.622945][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 811.629634][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 812.582667][ C0] net_ratelimit: 12181 callbacks suppressed [ 812.582684][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 812.602417][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 812.615113][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 812.628084][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 812.641086][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 812.654706][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 812.667180][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 812.679572][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 812.692216][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 812.708542][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 814.617697][T12493] Bluetooth: hci6: command tx timeout [ 814.650069][T16202] Bluetooth: hci4: command tx timeout [ 814.665590][ T7458] Bluetooth: hci3: command tx timeout [ 814.688778][T16281] Bluetooth: hci5: command tx timeout [ 816.828542][T12493] Bluetooth: hci3: command tx timeout [ 816.845215][T16281] Bluetooth: hci6: command tx timeout [ 816.866935][T16202] Bluetooth: hci5: command tx timeout [ 816.904971][ T7458] Bluetooth: hci4: command tx timeout [ 817.567212][ C0] net_ratelimit: 12239 callbacks suppressed [ 817.567229][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 817.586291][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 817.598827][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 817.611169][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 817.624329][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 817.636756][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 817.649321][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 817.661784][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 817.674964][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 817.687328][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 818.873636][ T7458] Bluetooth: hci3: command tx timeout [ 818.955091][T16281] Bluetooth: hci5: command tx timeout [ 819.822993][T16281] Bluetooth: hci4: command tx timeout [ 821.069802][ T7458] Bluetooth: hci6: command tx timeout [ 821.099996][T16281] Bluetooth: hci3: command tx timeout [ 821.912539][ T7458] Bluetooth: hci4: command tx timeout [ 822.551307][ C0] net_ratelimit: 12078 callbacks suppressed [ 822.551324][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 822.569805][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 822.582321][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 822.594641][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 822.607709][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 822.620086][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 822.632573][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 822.644869][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 822.658044][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 822.670397][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 827.535347][ C0] net_ratelimit: 13234 callbacks suppressed [ 827.535372][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 827.553829][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 827.566084][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 827.578523][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 827.591599][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 827.604137][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 827.616467][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 827.628978][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 827.641969][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 827.654705][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 832.519006][ C0] net_ratelimit: 12722 callbacks suppressed [ 832.519030][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 832.537334][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 832.549922][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 832.562572][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 832.576170][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 832.588860][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 832.601418][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 832.614388][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 832.628010][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 832.640534][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 837.503005][ C0] net_ratelimit: 12739 callbacks suppressed [ 837.503022][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 837.522012][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 837.534595][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 837.547730][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 837.560317][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 837.573425][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 837.585733][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 837.598535][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 837.610905][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 837.623374][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 839.247425][ T7458] Bluetooth: hci0: command 0x0406 tx timeout [ 842.487176][ C0] net_ratelimit: 14387 callbacks suppressed [ 842.487194][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 842.505993][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 842.519278][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 842.532083][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 842.545273][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 842.557789][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 842.570340][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 842.583205][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 842.596138][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 842.608405][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 844.352544][ T7458] Bluetooth: hci1: command 0x0406 tx timeout [ 846.075404][T16202] Bluetooth: hci2: command 0x0406 tx timeout [ 847.471212][ C0] net_ratelimit: 14030 callbacks suppressed [ 847.471229][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 847.489595][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 847.502704][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 847.515119][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 847.527997][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 847.540830][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 847.553134][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 847.565522][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 847.578112][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 847.590868][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 852.455439][ C0] net_ratelimit: 14499 callbacks suppressed [ 852.455456][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 852.474385][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 852.486968][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 852.500201][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 852.512734][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 852.525261][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 852.537770][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 852.550449][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 852.562770][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 852.575688][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 857.439576][ C0] net_ratelimit: 14423 callbacks suppressed [ 857.439593][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 857.458171][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 857.471213][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 857.484171][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 857.497258][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 857.509830][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 857.523088][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 857.535518][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 857.548108][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 857.560593][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:d3:5f:90:f4:0f, vlan:0) [ 858.096079][ T31] INFO: task syz.4.762:9797 blocked for more than 143 seconds. [ 858.103709][ T31] Tainted: G L syzkaller #0 [ 858.115764][ T31] Blocked by coredump. [ 858.120400][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 858.132590][ T31] task:syz.4.762 state:D stack:27544 pid:9797 tgid:9797 ppid:8880 task_flags:0x40044c flags:0x00080003 [ 858.145084][ T31] Call Trace: [ 858.148930][ T31] [ 858.151885][ T31] ? __schedule+0x10b9/0x6150 [ 858.157035][ T31] __schedule+0x1139/0x6150 [ 858.161613][ T31] ? __pfx___schedule+0x10/0x10 [ 858.166951][ T31] ? find_held_lock+0x2b/0x80 [ 858.171914][ T31] ? schedule+0x2d7/0x3a0 [ 858.176731][ T31] schedule+0xe7/0x3a0 [ 858.180847][ T31] schedule_preempt_disabled+0x13/0x30 [ 858.187189][ T31] __mutex_lock+0xc69/0x1ca0 [ 858.191911][ T31] ? tun_chr_close+0x38/0x230 [ 858.200818][ T31] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 858.207192][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 858.212544][ T31] ? __pfx_locks_remove_file+0x10/0x10 [ 858.218519][ T31] ? kmem_cache_free+0x171/0x770 [ 858.223506][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 858.229100][ T31] ? tun_chr_close+0x38/0x230 [ 858.233814][ T31] tun_chr_close+0x38/0x230 [ 858.238943][ T31] __fput+0x402/0xb70 [ 858.242988][ T31] task_work_run+0x150/0x240 [ 858.248079][ T31] ? __pfx_task_work_run+0x10/0x10 [ 858.253241][ T31] do_exit+0x87f/0x2bd0 [ 858.257931][ T31] ? __pfx_do_exit+0x10/0x10 [ 858.262647][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 858.268158][ T31] ? find_held_lock+0x2b/0x80 [ 858.272885][ T31] do_group_exit+0xd3/0x2a0 [ 858.277885][ T31] get_signal+0x2671/0x26d0 [ 858.282458][ T31] ? __pfx_get_signal+0x10/0x10 [ 858.287871][ T31] ? do_futex+0x122/0x350 [ 858.292259][ T31] arch_do_signal_or_restart+0x8f/0x7a0 [ 858.298528][ T31] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 858.305402][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 858.311606][ T31] ? exc_page_fault+0x64/0xc0 [ 858.316788][ T31] ? __pfx___x64_sys_futex+0x10/0x10 [ 858.322117][ T31] exit_to_user_mode_loop+0x8c/0x540 [ 858.328103][ T31] do_syscall_64+0x4ee/0xf80 [ 858.332724][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.339185][ T31] RIP: 0033:0x7f24b318f7c9 [ 858.343718][ T31] RSP: 002b:00007f24b402e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 858.353439][ T31] RAX: fffffffffffffe00 RBX: 00007f24b33e6458 RCX: 00007f24b318f7c9 [ 858.361766][ T31] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f24b33e6458 [ 858.370081][ T31] RBP: 00007f24b33e6450 R08: 0000000000000000 R09: 0000000000000000 [ 858.378464][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 858.386794][ T31] R13: 00007f24b33e64e8 R14: 00007fff63b075e0 R15: 00007fff63b076c8 [ 858.395108][ T31] [ 858.398172][ T31] INFO: task syz.6.1614:13878 blocked for more than 143 seconds. [ 858.406336][ T31] Tainted: G L syzkaller #0 [ 858.412874][ T31] Blocked by coredump. [ 858.417936][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 858.431594][ T31] task:syz.6.1614 state:D stack:27256 pid:13878 tgid:13878 ppid:11264 task_flags:0x40044c flags:0x00080003 [ 858.444198][ T31] Call Trace: [ 858.447522][ T31] [ 858.450468][ T31] ? __schedule+0x10b9/0x6150 [ 858.455749][ T31] __schedule+0x1139/0x6150 [ 858.460736][ T31] ? __lock_acquire+0x436/0x2890 [ 858.466281][ T31] ? __pfx___schedule+0x10/0x10 [ 858.471186][ T31] ? find_held_lock+0x2b/0x80 [ 858.476562][ T31] ? schedule+0x2d7/0x3a0 [ 858.481042][ T31] schedule+0xe7/0x3a0 [ 858.485751][ T31] schedule_preempt_disabled+0x13/0x30 [ 858.491355][ T31] __mutex_lock+0xc69/0x1ca0 [ 858.496453][ T31] ? tun_chr_close+0x38/0x230 [ 858.501171][ T31] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 858.507701][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 858.512798][ T31] ? __pfx_locks_remove_file+0x10/0x10 [ 858.519072][ T31] ? kmem_cache_free+0x171/0x770 [ 858.524673][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 858.530172][ T31] ? tun_chr_close+0x38/0x230 [ 858.535470][ T31] tun_chr_close+0x38/0x230 [ 858.540022][ T31] __fput+0x402/0xb70 [ 858.544496][ T31] task_work_run+0x150/0x240 [ 858.549140][ T31] ? __pfx_task_work_run+0x10/0x10 [ 858.554708][ T31] do_exit+0x87f/0x2bd0 [ 858.558899][ T31] ? __pfx_do_exit+0x10/0x10 [ 858.563937][ T31] ? cgroup_update_frozen_flag+0x107/0x210 [ 858.569790][ T31] ? find_held_lock+0x2b/0x80 [ 858.575005][ T31] do_group_exit+0xd3/0x2a0 [ 858.579549][ T31] get_signal+0x2671/0x26d0 [ 858.584588][ T31] ? __pfx_get_signal+0x10/0x10 [ 858.589473][ T31] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 858.595516][ T31] arch_do_signal_or_restart+0x8f/0x7a0 [ 858.601102][ T31] ? get_timespec64+0x136/0x1b0 [ 858.606581][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 858.612782][ T31] ? __x64_sys_clock_nanosleep+0x35e/0x4a0 [ 858.619076][ T31] exit_to_user_mode_loop+0x8c/0x540 [ 858.624777][ T31] do_syscall_64+0x4ee/0xf80 [ 858.629401][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.635736][ T31] RIP: 0033:0x7f13041c2085 [ 858.640177][ T31] RSP: 002b:00007f1304fbbf80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 858.649061][ T31] RAX: fffffffffffffdfc RBX: 00007f13043e6090 RCX: 00007f13041c2085 [ 858.658534][ T31] RDX: 00007f1304fbbfc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 858.666875][ T31] RBP: 00007f1304213f91 R08: 0000000000000000 R09: 0000000000000000 [ 858.680029][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 858.688478][ T31] R13: 00007f13043e6128 R14: 00007f13043e6090 R15: 00007ffde0959498 [ 858.696846][ T31] [ 858.699905][ T31] INFO: task syz.3.2023:15973 blocked for more than 143 seconds. [ 858.708088][ T31] Tainted: G L syzkaller #0 [ 858.714938][ T31] Blocked by coredump. [ 858.719542][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 858.728728][ T31] task:syz.3.2023 state:D stack:26968 pid:15973 tgid:15973 ppid:5834 task_flags:0x40044c flags:0x00080003 [ 858.741242][ T31] Call Trace: [ 858.744858][ T31] [ 858.747897][ T31] ? __schedule+0x10b9/0x6150 [ 858.753228][ T31] __schedule+0x1139/0x6150 [ 858.757802][ T31] ? __lock_acquire+0x436/0x2890 [ 858.763239][ T31] ? __pfx___schedule+0x10/0x10 [ 858.768237][ T31] ? find_held_lock+0x2b/0x80 [ 858.773555][ T31] ? schedule+0x2d7/0x3a0 [ 858.777944][ T31] schedule+0xe7/0x3a0 [ 858.782052][ T31] schedule_preempt_disabled+0x13/0x30 [ 858.788284][ T31] __mutex_lock+0xc69/0x1ca0 [ 858.793291][ T31] ? tun_chr_close+0x38/0x230 [ 858.798002][ T31] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 858.804603][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 858.809705][ T31] ? __pfx_locks_remove_file+0x10/0x10 [ 858.815707][ T31] ? kmem_cache_free+0x171/0x770 [ 858.820794][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 858.826403][ T31] ? tun_chr_close+0x38/0x230 [ 858.831301][ T31] tun_chr_close+0x38/0x230 [ 858.836270][ T31] __fput+0x402/0xb70 [ 858.840300][ T31] task_work_run+0x150/0x240 [ 858.845372][ T31] ? __pfx_task_work_run+0x10/0x10 [ 858.850525][ T31] do_exit+0x87f/0x2bd0 [ 858.855127][ T31] ? __pfx_do_exit+0x10/0x10 [ 858.859921][ T31] ? cgroup_update_frozen_flag+0x107/0x210 [ 858.866227][ T31] ? find_held_lock+0x2b/0x80 [ 858.870947][ T31] do_group_exit+0xd3/0x2a0 [ 858.875969][ T31] get_signal+0x2671/0x26d0 [ 858.880541][ T31] ? __pfx_get_signal+0x10/0x10 [ 858.885863][ T31] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 858.891560][ T31] arch_do_signal_or_restart+0x8f/0x7a0 [ 858.897882][ T31] ? get_timespec64+0x136/0x1b0 [ 858.903220][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 858.909494][ T31] ? __x64_sys_clock_nanosleep+0x35e/0x4a0 [ 858.920890][ T31] exit_to_user_mode_loop+0x8c/0x540 [ 858.926746][ T31] do_syscall_64+0x4ee/0xf80 [ 858.931824][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.937853][ T31] RIP: 0033:0x7fb08e7c2085 [ 858.942826][ T31] RSP: 002b:00007fb08f628f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 858.957819][ T31] RAX: fffffffffffffdfc RBX: 00007fb08e9e5fa0 RCX: 00007fb08e7c2085 [ 858.966486][ T31] RDX: 00007fb08f628fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 858.975156][ T31] RBP: 00007fb08e813f91 R08: 0000000000000000 R09: 0000000000000000 [ 858.983661][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 858.992018][ T31] R13: 00007fb08e9e6038 R14: 00007fb08e9e5fa0 R15: 00007ffd121121e8 [ 859.000139][ T31] [ 859.003700][ T31] INFO: task syz.7.2076:16177 blocked for more than 144 seconds. [ 859.011766][ T31] Tainted: G L syzkaller #0 [ 859.018378][ T31] Blocked by coredump. [ 859.023425][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 859.032526][ T31] task:syz.7.2076 state:D stack:24856 pid:16177 tgid:16176 ppid:14877 task_flags:0x40054c flags:0x00080003 [ 859.044934][ T31] Call Trace: [ 859.048259][ T31] [ 859.051792][ T31] ? __schedule+0x10b9/0x6150 [ 859.056614][ T31] __schedule+0x1139/0x6150 [ 859.061714][ T31] ? __pfx___schedule+0x10/0x10 [ 859.066637][ T31] ? find_held_lock+0x2b/0x80 [ 859.071833][ T31] ? schedule+0x2d7/0x3a0 [ 859.076306][ T31] schedule+0xe7/0x3a0 [ 859.080434][ T31] schedule_preempt_disabled+0x13/0x30 [ 859.086753][ T31] __mutex_lock+0xc69/0x1ca0 [ 859.091745][ T31] ? tun_chr_close+0x38/0x230 [ 859.096573][ T31] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 859.103164][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 859.108349][ T31] ? __pfx_locks_remove_file+0x10/0x10 [ 859.114326][ T31] ? kmem_cache_free+0x171/0x770 [ 859.119316][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 859.124913][ T31] ? tun_chr_close+0x38/0x230 [ 859.129895][ T31] tun_chr_close+0x38/0x230 [ 859.134920][ T31] __fput+0x402/0xb70 [ 859.139044][ T31] task_work_run+0x150/0x240 [ 859.144124][ T31] ? __pfx_task_work_run+0x10/0x10 [ 859.149282][ T31] do_exit+0x87f/0x2bd0 [ 859.153925][ T31] ? __pfx_do_exit+0x10/0x10 [ 859.158618][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 859.167217][ T31] ? find_held_lock+0x2b/0x80 [ 859.172295][ T31] do_group_exit+0xd3/0x2a0 [ 859.176876][ T31] get_signal+0x2671/0x26d0 [ 859.181821][ T31] ? __pfx_get_signal+0x10/0x10 [ 859.186718][ T31] arch_do_signal_or_restart+0x8f/0x7a0 [ 859.193130][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 859.199350][ T31] ? vfs_fsync_range+0x149/0x230 [ 859.204839][ T31] exit_to_user_mode_loop+0x8c/0x540 [ 859.210496][ T31] do_syscall_64+0x4ee/0xf80 [ 859.215127][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.221769][ T31] RIP: 0033:0x7fe8fcb8f7c9 [ 859.226219][ T31] RSP: 002b:00007fe8fd9a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000001a [ 859.235222][ T31] RAX: ffffffffffffffea RBX: 00007fe8fcde5fa0 RCX: 00007fe8fcb8f7c9 [ 859.243858][ T31] RDX: 0000000400000004 RSI: 0180000000000000 RDI: 000000001ffff000 [ 859.252340][ T31] RBP: 00007fe8fcc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 859.260779][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 859.268956][ T31] R13: 00007fe8fcde6038 R14: 00007fe8fcde5fa0 R15: 00007fff56795d98 [ 859.277608][ T31] [ 859.280991][ T31] [ 859.280991][ T31] Showing all locks held in the system: [ 859.288725][ T31] 1 lock held by khungtaskd/31: [ 859.294192][ T31] #0: ffffffff8e3c9520 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 859.304566][ T31] 4 locks held by kworker/1:2/794: [ 859.310104][ T31] #0: ffff88805c815148 ((wq_completion)wg-kex-wg0#9){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 859.322037][ T31] #1: ffffc90003627c90 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 859.362480][ T31] #2: ffff88807c265308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1c2/0x880 [ 859.375557][ T31] #3: ffff88805ca2b4c0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x5ac/0x880 [ 859.387681][ T31] 2 locks held by kworker/0:2/852: [ 859.393168][ T31] 2 locks held by getty/5593: [ 859.397880][ T31] #0: ffff88814d2c40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 859.408225][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x1510 [ 859.418742][ T31] 2 locks held by syz-executor/5819: [ 859.424372][ T31] #0: ffff888076059948 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x117/0x580 [ 859.438051][ T31] #1: ffff88814e480518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x174/0x380 [ 859.448086][ T31] 3 locks held by kworker/0:3/5835: [ 859.453952][ T31] 4 locks held by kworker/1:4/5884: [ 859.459777][ T31] #0: ffff88807e572948 ((wq_completion)wg-kex-wg0#15){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 859.471778][ T31] #1: ffffc900043bfc90 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 859.512016][ T31] #2: ffff888061271308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1c2/0x880 [ 859.525073][ T31] #3: ffff888022b81708 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x5ac/0x880 [ 859.537856][ T31] 3 locks held by kworker/0:6/5918: [ 859.544049][ T31] 4 locks held by kworker/1:6/5923: [ 859.549726][ T31] #0: ffff88805c2dbd48 ((wq_completion)wg-kex-wg1#8){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 859.561562][ T31] #1: ffffc9000457fc90 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 859.602105][ T31] #2: ffff88807c261308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1c2/0x880 [ 859.615203][ T31] #3: ffff88805ca2c890 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x5ac/0x880 [ 859.627416][ T31] 4 locks held by kworker/1:7/5925: [ 859.633263][ T31] #0: ffff88805dcb7548 ((wq_completion)wg-kex-wg1#12){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 859.644937][ T31] #1: ffffc9000459fc90 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 859.686877][ T31] #2: ffff88805aead308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1c2/0x880 [ 859.700116][ T31] #3: ffff888022b84890 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x5ac/0x880 [ 859.717442][ T31] 3 locks held by kworker/u10:1/6985: [ 859.723068][ T31] 3 locks held by kworker/u10:2/6986: [ 859.729300][ T31] 4 locks held by kworker/u10:3/6988: [ 859.734885][ T31] 3 locks held by kworker/u10:4/6990: [ 859.741406][ T31] 4 locks held by kworker/u10:5/6992: [ 859.746987][ T31] 3 locks held by kworker/u10:6/6997: [ 859.752938][ T31] 6 locks held by kworker/u10:9/7019: [ 859.758749][ T31] 3 locks held by kworker/u10:10/7023: [ 859.764230][ T31] 2 locks held by kworker/u10:11/7077: [ 859.770150][ T31] 4 locks held by kworker/u10:14/7292: [ 859.775642][ T31] 2 locks held by kworker/u10:15/7293: [ 859.781547][ T31] 4 locks held by kworker/1:8/9105: [ 859.786870][ T31] #0: ffff888032049948 ((wq_completion)wg-kex-wg1#14){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 859.799298][ T31] #1: ffffc900045bfc90 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 859.839747][ T31] #2: ffff888061275308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1c2/0x880 [ 859.853718][ T31] #3: ffff88805cda5c60 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x5ac/0x880 [ 859.866904][ T31] 4 locks held by kworker/u10:18/9606: [ 859.872572][ T31] 1 lock held by syz.4.762/9797: [ 859.878770][ T31] #0: ffffffff90145da8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 859.888285][ T31] 4 locks held by kworker/u10:19/9877: [ 859.893855][ T31] 4 locks held by kworker/u10:22/10875: [ 859.900139][ T31] 3 locks held by kworker/u10:24/10877: [ 859.905889][ T31] 5 locks held by kworker/u10:26/10879: [ 859.911915][ T31] 3 locks held by kworker/u10:28/11518: [ 859.918254][ T31] #0: ffff88814cafb948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 859.929812][ T31] #1: ffffc9000419fc90 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 859.943971][ T31] #2: ffffffff90145da8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x12/0x30 [ 859.954674][ T31] 3 locks held by kworker/u10:29/11519: [ 859.960600][ T31] 3 locks held by kworker/u10:31/11521: [ 859.966899][ T31] #0: ffff88813ff69948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 859.978826][ T31] #1: ffffc90003367c90 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 859.994284][ T31] #2: ffffffff90145da8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 860.004521][ T31] 4 locks held by kworker/u10:32/11522: [ 860.010568][ T31] 4 locks held by kworker/u10:33/11523: [ 860.016595][ T31] 3 locks held by kworker/0:7/11640: [ 860.021920][ T31] 4 locks held by kworker/1:9/12684: [ 860.028045][ T31] #0: ffff88805c125d48 ((wq_completion)wg-kex-wg0#13){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 860.039727][ T31] #1: ffffc9000d73fc90 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 860.081141][ T31] #2: ffff888078c8d308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1c2/0x880 [ 860.094196][ T31] #3: ffff888022b82ad8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x5ac/0x880 [ 860.106594][ T31] 4 locks held by kworker/u10:35/13070: [ 860.112293][ T31] 3 locks held by kworker/u10:36/13071: [ 860.118453][ T31] 4 locks held by kworker/u10:38/13073: [ 860.124149][ T31] 4 locks held by kworker/u10:39/13074: [ 860.130475][ T31] 3 locks held by kworker/u10:40/13076: [ 860.136444][ T31] 4 locks held by kworker/u10:41/13126: [ 860.142023][ T31] 4 locks held by kworker/u10:42/13127: [ 860.148033][ T31] 2 locks held by kworker/u10:43/13128: [ 860.153708][ T31] 3 locks held by kworker/u10:44/13129: [ 860.159748][ T31] 3 locks held by kworker/u10:46/13132: [ 860.165692][ T31] 3 locks held by kworker/u10:49/13137: [ 860.171370][ T31] 4 locks held by kworker/u10:50/13138: [ 860.177508][ T31] 3 locks held by kworker/u10:51/13139: [ 860.183260][ T31] 4 locks held by kworker/u10:52/13140: [ 860.189330][ T31] 1 lock held by syz.6.1614/13878: [ 860.194738][ T31] #0: ffffffff90145da8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 860.204502][ T31] 3 locks held by kworker/0:8/14898: [ 860.210250][ T31] #0: ffff88813ff55948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 860.222256][ T31] #1: ffffc9000de8fc90 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 860.233220][ T31] #2: ffffffff90145da8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 860.244800][ T31] 1 lock held by syz.3.2023/15973: [ 860.250086][ T31] #0: ffffffff90145da8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 860.259898][ T31] 1 lock held by syz.7.2076/16177: [ 860.265423][ T31] #0: ffffffff90145da8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 860.279422][ T31] 1 lock held by syz-executor/16196: [ 860.285565][ T31] #0: ffffffff90145da8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 860.295054][ T31] 4 locks held by kworker/0:9/16211: [ 860.300501][ T31] 4 locks held by kworker/0:10/16212: [ 860.306434][ T31] #0: ffff888077b8a148 ((wq_completion)wg-kex-wg2#8){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 860.317867][ T31] #1: ffffc90004aefc90 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 860.358027][ T31] #2: ffff888058499308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1c2/0x880 [ 860.370944][ T31] #3: ffff88805ca2d278 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x5ac/0x880 [ 860.383094][ T31] 4 locks held by kworker/0:11/16213: [ 860.388785][ T31] #0: ffff88813ff56948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 860.401044][ T31] #1: ffffc9000442fc90 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 860.412212][ T31] #2: ffffffff90145da8 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x91/0x1190 [ 860.422272][ T31] #3: ffff888058988788 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_check_chans_work+0x11b/0x1190 [ 860.432918][ T31] 1 lock held by syz-executor/16224: [ 860.438686][ T31] #0: ffffffff90145da8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 860.448592][ T31] 1 lock held by syz-executor/16228: [ 860.454319][ T31] #0: ffffffff90145da8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 860.464144][ T31] 1 lock held by syz-executor/16231: [ 860.469559][ T31] #0: ffffffff90145da8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 860.479550][ T31] 3 locks held by kworker/0:12/16262: [ 860.485313][ T31] 2 locks held by kworker/0:13/16266: [ 860.490718][ T31] 1 lock held by syz-executor/16271: [ 860.496508][ T31] #0: ffffffff90145da8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 860.506370][ T31] 1 lock held by syz-executor/16273: [ 860.511691][ T31] #0: ffffffff90145da8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 860.521741][ T31] 1 lock held by syz-executor/16275: [ 860.527350][ T31] #0: ffffffff90145da8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 860.537327][ T31] 1 lock held by syz-executor/16276: [ 860.542811][ T31] #0: ffffffff90145da8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 860.557192][ T31] 3 locks held by kworker/0:14/16279: [ 860.562628][ T31] 3 locks held by kworker/0:15/16280: [ 860.568550][ T31] [ 860.570896][ T31] ============================================= [ 860.570896][ T31] [ 860.579865][ T31] NMI backtrace for cpu 1 [ 860.579886][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 860.579919][ T31] Tainted: [L]=SOFTLOCKUP [ 860.579926][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 860.579940][ T31] Call Trace: [ 860.579949][ T31] [ 860.579958][ T31] dump_stack_lvl+0x116/0x1f0 [ 860.579998][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 860.580028][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 860.580053][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 860.580085][ T31] sys_info+0x133/0x180 [ 860.580111][ T31] watchdog+0xe66/0x1180 [ 860.580162][ T31] ? rcu_is_watching+0x12/0xc0 [ 860.580194][ T31] ? __pfx_watchdog+0x10/0x10 [ 860.580224][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 860.580248][ T31] ? __kthread_parkme+0x19e/0x250 [ 860.580282][ T31] ? __pfx_watchdog+0x10/0x10 [ 860.580314][ T31] kthread+0x3c5/0x780 [ 860.580339][ T31] ? __pfx_kthread+0x10/0x10 [ 860.580364][ T31] ? rcu_is_watching+0x12/0xc0 [ 860.580393][ T31] ? __pfx_kthread+0x10/0x10 [ 860.580418][ T31] ret_from_fork+0x983/0xb10 [ 860.580443][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 860.580470][ T31] ? __switch_to+0x7af/0x10d0 [ 860.580500][ T31] ? __pfx_kthread+0x10/0x10 [ 860.580524][ T31] ret_from_fork_asm+0x1a/0x30 [ 860.580575][ T31] [ 860.580584][ T31] Sending NMI from CPU 1 to CPUs 0: [ 860.722820][ C0] NMI backtrace for cpu 0 [ 860.722844][ C0] CPU: 0 UID: 0 PID: 7292 Comm: kworker/u10:14 Tainted: G L syzkaller #0 PREEMPT(full) [ 860.722881][ C0] Tainted: [L]=SOFTLOCKUP [ 860.722891][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 860.722909][ C0] Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker [ 860.722948][ C0] RIP: 0010:unwind_next_frame+0x182/0x20b0 [ 860.722984][ C0] Code: f2 83 e2 07 38 d0 7f 08 84 c0 0f 85 da 09 00 00 48 89 e9 41 0f b6 45 35 48 ba 00 00 00 00 00 fc ff df 48 c1 e9 03 80 3c 11 00 <0f> 85 5f 17 00 00 4d 8b 7d 48 3c 01 49 83 df 00 4d 85 ff 0f 84 31 [ 860.723009][ C0] RSP: 0018:ffffc90000006460 EFLAGS: 00000246 [ 860.723028][ C0] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 1ffff92000000ca3 [ 860.723045][ C0] RDX: dffffc0000000000 RSI: ffffffff8bf2b700 RDI: ffffffff8dd75f20 [ 860.723062][ C0] RBP: ffffc90000006518 R08: 00000000c2911af0 R09: 000000000c2911af [ 860.723085][ C0] R10: 0000000000000002 R11: ffff888028958b30 R12: ffffc90000006520 [ 860.723101][ C0] R13: ffffc900000064d0 R14: ffffc90000006505 R15: ffff888028958000 [ 860.723119][ C0] FS: 0000000000000000(0000) GS:ffff8881248f6000(0000) knlGS:0000000000000000 [ 860.723143][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 860.723161][ C0] CR2: 00007fb08f6089a0 CR3: 000000000e184000 CR4: 00000000003526f0 [ 860.723178][ C0] Call Trace: [ 860.723186][ C0] [ 860.723196][ C0] ? stack_trace_save+0x8e/0xc0 [ 860.723234][ C0] ? __unwind_start+0x45f/0x7f0 [ 860.723265][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 860.723305][ C0] arch_stack_walk+0x94/0x100 [ 860.723337][ C0] ? stack_trace_save+0x8e/0xc0 [ 860.723376][ C0] stack_trace_save+0x8e/0xc0 [ 860.723412][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 860.723451][ C0] ? __lock_acquire+0x436/0x2890 [ 860.723475][ C0] ? __kasan_slab_free+0x5f/0x80 [ 860.723509][ C0] ? kmem_cache_free+0x2d8/0x770 [ 860.723541][ C0] kasan_save_stack+0x33/0x60 [ 860.723600][ C0] kasan_save_track+0x14/0x30 [ 860.723633][ C0] kasan_save_free_info+0x3b/0x60 [ 860.723660][ C0] __kasan_slab_free+0x5f/0x80 [ 860.723695][ C0] kmem_cache_free+0x2d8/0x770 [ 860.723726][ C0] ? __skb_ext_put+0x102/0x2c0 [ 860.723755][ C0] ? __skb_ext_put+0x102/0x2c0 [ 860.723779][ C0] __skb_ext_put+0x102/0x2c0 [ 860.723806][ C0] skb_scrub_packet+0x372/0x430 [ 860.723833][ C0] __dev_forward_skb2+0x379/0x750 [ 860.723862][ C0] veth_xmit+0x2bd/0xe60 [ 860.723902][ C0] dev_hard_start_xmit+0x97/0x6e0 [ 860.723934][ C0] __dev_queue_xmit+0x6d7/0x46c0 [ 860.723967][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 860.723997][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 860.724026][ C0] ? __lock_acquire+0x436/0x2890 [ 860.724049][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 860.724084][ C0] ? __lock_acquire+0x436/0x2890 [ 860.724111][ C0] ? nf_nat_ipv6_fn+0xff/0x2e0 [ 860.724140][ C0] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 860.724168][ C0] ? ip6table_mangle_hook+0xcb/0x770 [ 860.724198][ C0] ? lock_acquire+0x179/0x330 [ 860.724222][ C0] ? find_held_lock+0x2b/0x80 [ 860.724253][ C0] ? __pfx_ip6table_mangle_hook+0x10/0x10 [ 860.724288][ C0] br_dev_queue_push_xmit+0x272/0x8a0 [ 860.724322][ C0] ? find_held_lock+0x2b/0x80 [ 860.724354][ C0] ? nf_hook+0x4a0/0x7a0 [ 860.724388][ C0] ? nf_hook_slow+0x132/0x200 [ 860.724422][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 860.724458][ C0] ? nf_hook+0x4aa/0x7a0 [ 860.724492][ C0] ? __skb_ext_del+0xc2/0x340 [ 860.724520][ C0] br_nf_dev_queue_xmit+0x6e0/0x2b00 [ 860.724561][ C0] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 860.724603][ C0] br_nf_post_routing+0x8e7/0x1190 [ 860.724642][ C0] ? __pfx_br_nf_post_routing+0x10/0x10 [ 860.724680][ C0] nf_hook_slow+0xbe/0x200 [ 860.724715][ C0] nf_hook+0x45e/0x780 [ 860.724746][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 860.724782][ C0] ? __pfx_nf_hook+0x10/0x10 [ 860.724816][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 860.724850][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 860.724879][ C0] ? __pfx_ip6table_mangle_hook+0x10/0x10 [ 860.724913][ C0] br_forward_finish+0xcd/0x130 [ 860.724945][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 860.724981][ C0] br_nf_hook_thresh+0x307/0x410 [ 860.725017][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 860.725053][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 860.725095][ C0] ? lock_acquire+0x179/0x330 [ 860.725119][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 860.725152][ C0] ? net_generic+0xea/0x2a0 [ 860.725190][ C0] br_nf_forward_finish+0x66a/0xba0 [ 860.725228][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 860.725264][ C0] br_nf_forward_ip.part.0+0x609/0x810 [ 860.725306][ C0] br_nf_forward+0xf0f/0x1be0 [ 860.725349][ C0] ? __pfx_br_nf_forward+0x10/0x10 [ 860.725386][ C0] nf_hook_slow+0xbe/0x200 [ 860.725421][ C0] nf_hook+0x45e/0x780 [ 860.725452][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 860.725486][ C0] ? __pfx_nf_hook+0x10/0x10 [ 860.725520][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 860.725559][ C0] __br_forward+0x1be/0x5b0 [ 860.725590][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 860.725625][ C0] br_flood+0x39c/0x650 [ 860.725662][ C0] br_handle_frame_finish+0x1117/0x1f00 [ 860.725703][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 860.725748][ C0] ? ip6t_do_table+0xc25/0x1c30 [ 860.725777][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 860.725806][ C0] ? nf_hook_slow+0x132/0x200 [ 860.725841][ C0] br_nf_hook_thresh+0x307/0x410 [ 860.725878][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 860.725919][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 860.725959][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 860.725997][ C0] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 860.726026][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 860.726062][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 860.726104][ C0] br_nf_pre_routing_finish_ipv6+0x76a/0xfc0 [ 860.726144][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 860.726186][ C0] br_nf_pre_routing_ipv6+0x3cd/0x8c0 [ 860.726211][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 860.726247][ C0] ? lock_acquire+0x179/0x330 [ 860.726271][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 860.726313][ C0] ? net_generic+0xea/0x2a0 [ 860.726352][ C0] br_nf_pre_routing+0x860/0x15b0 [ 860.726393][ C0] br_handle_frame+0xb28/0x14e0 [ 860.726433][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 860.726473][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 860.726514][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 860.726552][ C0] __netif_receive_skb_core.constprop.0+0x6b3/0x35b0 [ 860.726589][ C0] ? kmem_cache_free+0x2d8/0x770 [ 860.726618][ C0] ? find_held_lock+0x2b/0x80 [ 860.726648][ C0] ? kfree_skbmem+0x1a4/0x1f0 [ 860.726675][ C0] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 860.726707][ C0] ? kfree_skbmem+0x1a4/0x1f0 [ 860.726730][ C0] ? kfree_skbmem+0x1a4/0x1f0 [ 860.726754][ C0] ? sk_skb_reason_drop+0x136/0x1a0 [ 860.726791][ C0] ? ip6_mc_input+0x515/0xf60 [ 860.726824][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 860.726856][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 860.726890][ C0] ? __lock_acquire+0x436/0x2890 [ 860.726916][ C0] ? process_backlog+0x459/0x1650 [ 860.726944][ C0] __netif_receive_skb_one_core+0xb0/0x1e0 [ 860.726975][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 860.727008][ C0] ? lock_acquire+0x179/0x330 [ 860.727034][ C0] ? process_backlog+0x459/0x1650 [ 860.727062][ C0] __netif_receive_skb+0x1d/0x160 [ 860.727098][ C0] process_backlog+0x4ab/0x1650 [ 860.727132][ C0] __napi_poll.constprop.0+0xb3/0x540 [ 860.727165][ C0] net_rx_action+0x9f9/0xfa0 [ 860.727200][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 860.727230][ C0] ? __print_lock_name+0x30/0xe0 [ 860.727262][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 860.727299][ C0] ? sched_clock+0x38/0x60 [ 860.727334][ C0] ? sched_clock_cpu+0x6c/0x530 [ 860.727380][ C0] ? mark_held_locks+0x49/0x80 [ 860.727404][ C0] handle_softirqs+0x219/0x950 [ 860.727441][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 860.727476][ C0] ? kernel_fpu_end+0x59/0x70 [ 860.727505][ C0] do_softirq+0xb2/0xf0 [ 860.727536][ C0] [ 860.727544][ C0] [ 860.727553][ C0] __local_bh_enable_ip+0x100/0x120 [ 860.727588][ C0] kernel_fpu_end+0x5e/0x70 [ 860.727615][ C0] blake2s_compress+0x77/0xe0 [ 860.727646][ C0] blake2s_final+0xc9/0x150 [ 860.727674][ C0] hmac.constprop.0+0x252/0x420 [ 860.727714][ C0] ? __pfx_hmac.constprop.0+0x10/0x10 [ 860.727758][ C0] ? __pfx_curve25519_ever64_base+0x10/0x10 [ 860.727800][ C0] ? __local_bh_enable_ip+0xa4/0x120 [ 860.727834][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 860.727855][ C0] ? kernel_fpu_end+0x59/0x70 [ 860.727882][ C0] ? __local_bh_enable_ip+0xa4/0x120 [ 860.727919][ C0] kdf.constprop.0+0x122/0x280 [ 860.727958][ C0] ? __pfx_kdf.constprop.0+0x10/0x10 [ 860.727996][ C0] ? __pfx_mix_hash+0x10/0x10 [ 860.728042][ C0] message_ephemeral+0x5f/0x70 [ 860.728070][ C0] wg_noise_handshake_create_initiation+0x322/0x610 [ 860.728101][ C0] ? __pfx_wg_noise_handshake_create_initiation+0x10/0x10 [ 860.728129][ C0] ? find_held_lock+0x2b/0x80 [ 860.728162][ C0] ? ktime_get_coarse_with_offset+0x1af/0x240 [ 860.728188][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 860.728210][ C0] ? ktime_get_coarse_with_offset+0x1c1/0x240 [ 860.728235][ C0] ? ktime_get_coarse_with_offset+0x150/0x240 [ 860.728262][ C0] wg_packet_send_handshake_initiation+0x19a/0x360 [ 860.728297][ C0] ? __pfx_wg_packet_send_handshake_initiation+0x10/0x10 [ 860.728330][ C0] ? __lock_acquire+0x436/0x2890 [ 860.728363][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 860.728391][ C0] wg_packet_handshake_send_worker+0x1c/0x30 [ 860.728423][ C0] process_one_work+0x9ba/0x1b20 [ 860.728457][ C0] ? __pfx_process_one_work+0x10/0x10 [ 860.728489][ C0] ? assign_work+0x1a0/0x250 [ 860.728515][ C0] worker_thread+0x6c8/0xf10 [ 860.728547][ C0] ? __kthread_parkme+0x19e/0x250 [ 860.728582][ C0] ? __pfx_worker_thread+0x10/0x10 [ 860.728609][ C0] kthread+0x3c5/0x780 [ 860.728633][ C0] ? __pfx_kthread+0x10/0x10 [ 860.728658][ C0] ? rcu_is_watching+0x12/0xc0 [ 860.728691][ C0] ? __pfx_kthread+0x10/0x10 [ 860.728716][ C0] ret_from_fork+0x983/0xb10 [ 860.728740][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 860.728765][ C0] ? __switch_to+0x7af/0x10d0 [ 860.728796][ C0] ? __pfx_kthread+0x10/0x10 [ 860.728820][ C0] ret_from_fork_asm+0x1a/0x30 [ 860.728865][ C0] [ 861.808641][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 861.815544][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 861.826421][ T31] Tainted: [L]=SOFTLOCKUP [ 861.830758][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 861.840832][ T31] Call Trace: [ 861.844130][ T31] [ 861.847257][ T31] dump_stack_lvl+0x3d/0x1f0 [ 861.851912][ T31] vpanic+0x640/0x6f0 [ 861.855916][ T31] panic+0xca/0xd0 [ 861.859657][ T31] ? __pfx_panic+0x10/0x10 [ 861.864224][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 861.870314][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 861.876492][ T31] ? nmi_trigger_cpumask_backtrace+0x2be/0x300 [ 861.882669][ T31] ? watchdog+0xe83/0x1180 [ 861.887111][ T31] ? watchdog+0xe76/0x1180 [ 861.891550][ T31] watchdog+0xe94/0x1180 [ 861.895846][ T31] ? rcu_is_watching+0x12/0xc0 [ 861.900733][ T31] ? __pfx_watchdog+0x10/0x10 [ 861.905611][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 861.910833][ T31] ? __kthread_parkme+0x19e/0x250 [ 861.915968][ T31] ? __pfx_watchdog+0x10/0x10 [ 861.920844][ T31] kthread+0x3c5/0x780 [ 861.924934][ T31] ? __pfx_kthread+0x10/0x10 [ 861.929546][ T31] ? rcu_is_watching+0x12/0xc0 [ 861.934355][ T31] ? __pfx_kthread+0x10/0x10 [ 861.938970][ T31] ret_from_fork+0x983/0xb10 [ 861.943581][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 861.948731][ T31] ? __switch_to+0x7af/0x10d0 [ 861.953444][ T31] ? __pfx_kthread+0x10/0x10 [ 861.958268][ T31] ret_from_fork_asm+0x1a/0x30 [ 861.963523][ T31] [ 861.966780][ T31] Kernel Offset: disabled [ 861.971148][ T31] Rebooting in 86400 seconds..