last executing test programs: 3.024309436s ago: executing program 1 (id=3): r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYRES16=0x0, @ANYBLOB="000306b87000fedbdf2503000000040008"], 0x28}, 0x1, 0x0, 0x0, 0x4004040}, 0x4c810) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$auto(r1, 0x400454da, 0x38) syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000001c0), r0) waitid$auto(0x2, 0xffffffffffffffff, &(0x7f0000000300)={@_si_pad}, 0x6, &(0x7f0000000380)={{0x1, 0x401}, {0xb, 0x200}, 0x0, 0x4d, 0x2, 0x4, 0x0, 0x2, 0xffffffffffffffff, 0x7fffffffffffffff, 0x4, 0x4, 0xacd3, 0x4, 0x6, 0x7}) r2 = getpid() r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x88800, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REMOVE(r3, 0xc0405519, &(0x7f0000000040)={@raw=0x5, 0x5560, 0x8000ffff, 0x0, "8f9638544ae4bbdf48e497dbb5a3760f9b6b2c854e493a712fcbb4034dde3ba72adae5bfa41dba811bf5488f", @inferred=r2}) unshare$auto(0x9) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x117b, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffe000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) set_mempolicy_home_node$auto(0x0, 0x2010001, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b74, 0x2, 0x8000) keyctl$auto(0x1d, 0x0, 0x6, 0x3, 0xfffffffffffff604) r4 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000540)='/dev/snd/pcmC0D0c\x00', 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_STATUS_EXT642(r4, 0xc0984124, &(0x7f0000000580)={0x10003, "33626888", 0x4179ed4f, 0x8000, 0xa, 0x1, 0x8, 0x6, 0x5, 0x101, 0x3, 0x1ff, 0x4, 0x8, 0xfffffffffffffffc, 0x14000000, 0x17795cb1, 0x1, 0xfffffffc, "2effd87679bd5e47a63add6f535cd80f84710b55"}) r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyp8\x00', 0x80, 0x0) ioctl$auto_TIOCGWINSZ(r5, 0x5413, &(0x7f00000001c0)="731fdadbb1c68d1dc61d5fb0f4e2b7ea557505ff797529467b8b1e21330ee4415c104bd806df056c9c963aee406c63906148ad51bad6963822bdbad3fce40d0d2b0606") madvise$auto(0x0, 0x5d6, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) close_range$auto(0x2, 0x8, 0x0) msgctl$auto_MSG_INFO(0xc3, 0xc, 0x0) r6 = ioctl$auto_TUNGETVNETLE2(0xffffffffffffffff, 0x800454dd, &(0x7f0000000040)=0x4) ioctl$auto_SNDCTL_DSP_GETTRIGGER(r6, 0x80045010, &(0x7f0000000080)="61af1196866674823f52bab45f7a58d944f79c75e1e555cbe49341cdf32636dfd937f318a00629c6830e24b21fb6f7c3ad0dfd9e7d25fa5b8b6333aa2ddd2bc8579e678e604e36058bba012301f261a38f8f0924d87d6ea3884ac787d9e4a2409d7ec1526034646e2a135a9976adf52158b063fcab757b48400b8a69c9ee5b1928d1a0ae295e331db0b5890a604d2a5557c670f7f7059b8d50063bb29bdc196c7ec1cd24b6eead24f9311663356212b56bc91a4c128723ab2c03cf03453073") 2.440804172s ago: executing program 2 (id=4): r0 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$auto_VHOST_SET_VRING_BASE2(r0, 0x4008af12, &(0x7f0000000040)={0xa, 0x4}) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60040440}, 0x800) pwrite64$auto(0xffffffffffffffff, 0x0, 0x6bc, 0x5) socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x00\x01_\x9e\x99:R\xcc\x96\b\'\x02\xb0\x93l\xeb\x87\r\b\x87\x14\xf8e6\x9c%\xb6\x9a\\S\xa2(Q\xcc', 0x7f) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x801, 0x6) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0xc76, 0x8000) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x55) setsockopt$auto(r1, 0x1, 0x12, 0x0, 0xa4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0xfffffffe, 0x802, 0x8000000000000000, 0x0) socket(0xa, 0x5, 0x84) socket(0x10, 0x2, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) bpf$auto(0x4, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x8000, 0xf9c, 0x468, 0x9, 0x3, 0x4, 0x2, 0x4, 0x200, 0x1fd, 0xb6, 0x4, 0x6, 0x3}, 0xa3) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000040), 0x1}, 0x7e) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2062, 0x0) write$auto(r2, &(0x7f00000001c0)='\x80\xfb\xd8o`AG,>^\xd6e\xe1[\x8d\xb4\xfeQ\x06\x9b\x12\x90B\x1c\xeb/Y\xd1\xbc\x16v\t\xb4^\x9a\xa4z\xbb\xdd\n\xdbB\x1d\xbc\x06\x94\xaf\x91\x111\xf2\n\x84\xed\xab\x93~,\xd4\xfc\x97(\xa8\x1d\xdfb\xc2\xa2\x8aocpIr>\v\xeep,CfM\xf7\xee\x893&\xba^>,\xbc\x1a2\x91\x88\t\x18\a\xd6\x18\xbefW\xc0y\x8c\xc13W\xb1\xa9\xe1\'WS\xad0\x1e:\x1f\xa4X\x99\x94_\xb4=\x04C\xe5\x86l\x13\x88\x01\x9e\xad6 \xd2|\x88L\xde\x9dA\xcfL\xc5E\x1cz\xdc\x86\xc8\xff\xeb{\x1a\xaa\xad{\xdf.\x9b\xbd\a\xb6$\x82\xcc\x12\xac\xe2\xe4C\xa7\xdd\x82;\xa0\xc8Yw\x0f=', 0x100081) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20f01, 0x0) 1.772187134s ago: executing program 3 (id=2): unshare$auto(0x7) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r1 = syz_genetlink_get_family_id$auto_nl80211(0x0, r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000140), r0) r4 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x400080, 0x0) ioctl$auto_NVRAM_SETCKS(r4, 0x7041, 0x0) ioctl$auto_FS_IOC_ZERO_RANGE(r4, 0x40305839, 0x80000001) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000020c0), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000003180)={&(0x7f0000000100)={0x30, r6, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@HWSIM_ATTR_DESTROY_RADIO_ON_CLOSE={0x4}, @HWSIM_ATTR_FLAGS={0x8, 0x4, 0x200}, @HWSIM_ATTR_SUPPORT_P2P_DEVICE={0x4}, @HWSIM_ATTR_TX_INFO={0x4}, @HWSIM_ATTR_TX_INFO={0x8, 0x7, [{0x8, 0x9}, {0x1, 0x53}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$auto_TIPC_NL_SOCK_GET(r2, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000000300)={0x14, r3, 0xe77c815741d6438d, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x42010}, 0x8cc) sendmsg$auto_NL80211_CMD_PROBE_CLIENT(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x29c, r1, 0x20, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_MAC_MASK={0xcd, 0xd7, "836cee1764dbf9b354bdcfc1da69fb4d785131975ce7f6d2f212e1d2632190df32d8f0912bc6efce99e0d3545ab85f4b832db4b6109fc0ff535c13fa8ce4096d1655a8779aa8e4a0629f51711a14f91c44421199f8456065a9aa46ff7ff36dadd6e90ab3a1517cfd42539cd4db63f8d791700b50f6af3cf4c756f02afad8ff65e373d16e1b8b89025f0da297595a2f2491c080d1b4e92d832e3545f53e783c8e73fe801b816676fd2e61a2af25a98c77f9ba94e5124e2625a6ff1b62e3888c7182b1b3acf6548b462d"}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_MAC_HINT={0xcd, 0xc8, "39d398d284a6afd4de6daab0c632ff7b4b23bcb09e29a1b50e32ac4b1f9e80ef0b578cad1538cc62701030169e4bf05ace1234a701ed4a98e559b841ff8e145bad53443a441faffc01bc824e494331bf3cf329996e081dc6ea6899d98b803c37d9f778bf93c5b9b0cae514f98dcb798307d24d4935a9a77cb3badd7beafabc3e616a040a368cf6d5e4d54243d815975758efff2963381e0a17051243fa9b1a108e80cb16e7c610b73c0e9df4c82c1cdcaae82464538eec8e6020775045e7d269e920796afd2244785f"}, @NL80211_ATTR_BSSID={0xd4, 0xf5, "8ee0f18851166e3562bc2babc72dc6b53ca824d0e6db16cdf4e4022c3b7e6569a31968eb5165da310f4763877925d288af8c917293b20586278b62b997056733fd02fd83007c306da9018e3e00f84fc282b43fadb364a8785cc878a7d713a7c5d1c0ce4bc3539c438ffab6dfc1ef45002333f7976b604f9e8b25ab6a9c31881c719833777576ed89807ee923ae4cebf0a5de3a18fe2f474aa773d7e560710317c1516fa87098fa812762942135d4e1f62a2cbe1bb36639bba1b04e2ae268dedcc182c98e08db3bb8adc02778e686b314"}, @NL80211_ATTR_WIPHY_SELF_MANAGED_REG={0x4}, @NL80211_ATTR_CENTER_FREQ1_OFFSET={0x8, 0x123, 0x101}]}, 0x29c}, 0x1, 0x0, 0x0, 0x20000044}, 0x810) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) r7 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/per_cpu/cpu0/trace\x00', 0x0, 0x0) mmap$auto(0x0, 0x8001, 0x4000000000df, 0xeb1, r7, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/nbd7/power/autosuspend_delay_ms\x00', 0x22902, 0x0) socket(0x2, 0x3, 0x100) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) socket(0x10, 0x2, 0x4) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc6}, 0x1, 0x0, 0x2, 0x9}, 0x7}, 0x3, 0xa6) openat$auto_minstrel_ht_stat_fops_rc80211_minstrel_ht_debugfs(0xffffffffffffff9c, 0x0, 0x2401, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) fanotify_mark$auto(0xffffffffffffffff, 0x209, 0xa, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x20000a, 0x4) 1.61547593s ago: executing program 0 (id=1): r0 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$auto_VHOST_SET_VRING_BASE2(r0, 0x4008af12, &(0x7f0000000040)={0xa, 0x4}) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60040440}, 0x800) pwrite64$auto(0xffffffffffffffff, 0x0, 0x6bc, 0x5) socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x00\x01_\x9e\x99:R\xcc\x96\b\'\x02\xb0\x93l\xeb\x87\r\b\x87\x14\xf8e6\x9c%\xb6\x9a\\S\xa2(Q\xcc', 0x7f) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x801, 0x6) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0xc76, 0x8000) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x55) setsockopt$auto(r1, 0x1, 0x12, 0x0, 0xa4) 1.509035781s ago: executing program 2 (id=5): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) pwritev$auto(r1, &(0x7f0000000140)={0x0, 0x400000000001}, 0x5, 0x5, 0xd3b8) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x1a, r0, 0x8000) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyu8\x00', 0x8001, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) read$auto(r2, 0x0, 0x20) r4 = ioctl$auto_SIOCGIFHWADDR2(0xffffffffffffffff, 0x8927, &(0x7f0000000380)="c6311ea32ffbb512aa46d3e2a5835332dd304957d2ef83a32bdf8f305eff91261e69008bbd788886cb88b0107cb7ecf64fe1451ba4fa52d0be7e95b49045c5c486410176abbedd122508b214d8e32efda2e1f36d7924b03e7018bb6a6f2446f273d42f84e04a16284c03ed054cf3bd0e3fd55847c00e3cbaf209561328225161fda772d165a2c1ff0bedc0721c5a3feb7a4b1e62cd8a1316d079d8c925cf93538fb925162f52e3c6d0ecaaaf45f5808399eaa3968e93c557ee32af430db94206a53aeb90b7a2e8970713b3faa2f2980948ecc4f3b91d1225efa58e2fae6b5b2b5afedcc248c401a56ebb60cdcb21f62ef67a1bdd2e5572e54eb82bdf2641ec806b121bbe453d652089d5be30b0d0e8049d2841a51f8b26bde35c176143a12324186ddefc4295918e0917bb05baab429e747b27b88893c3492ea332540f8d1cb2fd9c2ef9102ede34373b0c6de555d0853ba9dca4d131d6869c0ed27a7e931620c4767f44236e7d1714d5fb61b25ddf59fd6567164126943397fae1db4b319cd180f7bd34f41f07b9d56f4f78e109468e631e8d2cc232f0d20673098a86dc774b5c42ebb7b33535491d360ba01670568553d2a9f8ab3131fa099562a68c663643abc6ff417d11675da7f9fdcad19b1693af4f4ea2d3bc26fcf4b619e5ff249d54f65c5c9aae9131e6c0ff6a3922edaa044a5da8dc44f224dc8df1c164196bec7a3e1f64a54fcbda309da05fcef864eba398783961178411e8da5ec119c724feb214bfae87d0be744a8c7d28343ce0af4b8e97a703106b4b40cfca3b262dfbb106edca4cc9019560ab1b4c8525bbc5c7d3cc02a6afdcafd43b6c03afee36606997b65a4d0ca0864380cd70f077fdd2c6f4510dcd5134a712a9f7a3055a604384fec3fdf1248fc9ac5fbc480a5d923828ebb2c612622e46efc6386b23e0bea7cecccf649438ea9f4515dab987e26db5da192d50b065db6473a661d9a17ac45c62ca5a82568943c1597dfef69bae994a757618040dc04fbacb5a67fd0c26ec23fc133a2220b44495bc32eab52935403f10179f14bf2a25c1a8026099c98f08b6403abe7074d82e28b8f4c838a107599aee8664e2b6f3391522c8624de46d883b6b90de8408f003ff1b18fc8e58630b5f2e479ed8b368a5e2e363ef1aacd7a0980b0a496a59efc71210b9fb309807472429a88108a87b1e747aaf64472bab66a84632e5e8c1eced42d05d102b345fbe1f6407c0f7006c98c64427dde5d2341921f6df622f0910e6c5351bc0b3a9bf06a3e2f879eab679b75212da02ee9d19ebafea2588e1c023910d7a260144d809358e2d0a76ac096569c026e123ad33067584d59e8fac94d4d4587c887b5d3a53d8a3b65f30c19898b0d7f4f177dfd1e7df351bf66dd63801df5774a1c9b676ee3033b15f32c74ee2e73468c2a5f33fb012b78b6d5a8bcc735f5a0bc5386b39df005f3b930c67681f096023c28a2ade2e6d90dd9a4c64233304a073cac26018b5089fce1bdf2c26dcad29fc10cf15745887a8b324a4fa7261fad6c9a4635a54cec44a9d5567f2479ee1ecee9eabbd94b272349e68c7e6aef846f9a4184fc3162410514bdeab1f49d870ff2baabbd245fb84bdd178c66f7fd02a0c11d0a405190e14c86c84760932197b310505e6fcd9d6bbb7aacfc2c5b4b70e18fd2e27881458dfb382b7282f919dd26549e72ab0330f699f26e365c3b9a9ecad41f352142430d83b7827ab5dfec87be602732b81b89b965ca2795c21e627615c36b039813d64200821cebc80396747cf1dac0cec963496ff0080c4c6ff39822c4a427b2dd6ad65edd1b8bd0af0a7d7d3006d9fd9e6fd3c622a961563f1abe063dd21b926d97778e206f69e592473eed0fadac7cf8705d804b2083e00e16a71695ce6c6f84bb49798c0533963259722a2d8293e2dea5d8504855bc5dbca75c69ae1b6d64cc4ee4c61ba034a7ddae70d69c2076634309e5f7ce22962b40f4dd88b1727381335505bb205705079d724b30e7001eb51ddb9a71fd3b6efcff8fa2b8ceb01357f0321fbe4602cd86b41d32c89c7617553337a0025e668a0e91b7fdfa2c25a135f10f22fcda6e6db652f517030d41ed824493d52ce1adb56b56ee58eb002c327d541be3f79541b64129b9d797437399fd69b28130b2daaaf7ca4ca75c2f51ff1e5f6ccc3c309762dcd2b69faa80e6ef0ae334b313b8b606451dfc400545b7bcad92dbea1f3c15a58aefca183d55455008a0eb8ad93d974cdd75a03cb6272c3903ebdb7388a63e4d08de3c89fd92b01da06a85e6c22051bde05d784f12d681195770ceabcc09891c22efad4d5ea5c6ce1b47a317e29fb06676eb1de87803384687ee9383d2d98c1568990bc77d59ce63dac6cbdf90fd6a96bc3dad1fa7db2d35b3f1fa20444753aa8366ddae71a2a96beca3175559a4d2712866387ccd0a117258c7744cc4c049187e9c28b7e0b4d7d2c585a94af01466d555a365a5d81017824f2325d06be5391e488cfe91693b6e8bf00acfc76e94817e119caa9b677a25ec2b32e7adc96c255d9411a7730bea920d024f55f6ce9a66e3ae67718163b9b608314df0c87aa6237be621a5aaa02c787fd8375c41a436c1e7c3ed65efeba858ed73def2ec1cf6195f5063ea2d2e90f7eb0277354b6380b28abd0c665f5ea1ca72fb1b30e4b3ddbc226cfacaf57f29a07eb7b75494ce657aef5b3dadb38b30b1592ba2cf21485209a608ce19faf815afb53ef84c23df036d6c237f40225d3bc62df89610355ba63100d905afd74d3a7f100459ca4a7899f3b1573ac3474c8d001e382b87dd6109e97a4ec6d70f08ed8074b562ad6c0ae76674597379b179633869161a9b646b47296e62d7ee969cd83ecc901acda7cd9744360dc83fb760295eb67c221a7e1d615218223ecf6327ed918b2f62e2fa0c2fe623ff5c0f919f218bd7fe016252d12d082d46a37e848eb597485cc5231dba285b9ed2c47a80badc5ee5c3e41b43d6f5fd13117dc50d235f3256473660239ee79111299d1b464c8080064a6f43617c0af38f6d639c10e03580c5663fce54ad69e40140593ad03b26e65e1183a173c0e41af5cf1555db08d090ca0a073da86edfaed71ba8fac022145eb3911a7bc4ca1d50763a6ff94dc51d5976888e7cd265bd64215e4154c2adce43c680d3059653f1b62691048821ed134b2b55db437a7d216060656cbf5f123134086358e68045870ccf0d653ae70b37d7032fd1fa3c61d5edd59c1ff79661ba1de2ce9a3b11ef1141d79ceb76a15a19953b5993877422efe28a7e5aab8c7d495ffa4293afa7ba453864c02803f0567704415da74c626738026dc0ac4956a4a637d67b82959f02f336a42bc165e3cc19585ef083ab89e868641eafcc192c87594b5d993ee4399fc4453532c1002720ee9d8245a066020be2fe91e6def50fcaa64db21356f848fac0e5ca32e5f3eafcb396be856dc545ba92dbded334f5317361be14a90cf34a9e883eff4b05d629611a0f513ac655df557c980d72a0cf47ef9f804481b96320a021efc11c2946c3fc5e4cfb8de577d40bded111544eb803629e7c76ce250c9bdc76c7792e7f67a774b1e66300af7cc593b2f3304e5d979812d155cf99301755d292e6c6eb4bf734c0d0ca224c88e4a3abe2c299026022b33e6a27cd66e160e87e0c6a21415569a479fdbe155cffffba8f10c991d839d98d538ed02a6be90bb7a980a66535bf32d63ed362d7f1392a63365729347c5b88c61d1adfd4710b01b8eb4a70964d6f3f411a18d46ac07c38e05985f844813262af48bcb68b93b7f3373f04003545655383b561ee9a874674b261566fc88ead76beb75ba96a92a0b1ac3bb7b5ed4c98322890b5b8055b192082322f99688c564c12b9e12059c07e37c1ea590bf5711ec1af8d6064f674500e009a9423202a46f971fad2ac5e8f2f5938b816c4a026aa19c0e40368868dfbcd7b7b7b5dd322194f89bbc375778d7c7446d2f4293d90479b5ca57c47de4e16128d0346b43508401ea50314a75af5422f48a56209639d9a921fd679858da8ba5bee19ee6ccf9e00b47be5ae06116e338045419befc6f71320e4b52a920ffc66157d9d976642852d55a4904cb621723c4b0984782ec61fe30cd2dfa2562968088f2498cdc4fef0f8fbbc8a7a03270e6013e33581eab86c9522b9165cfe0422d01a6a6f3171d0d19ecbf829fd486a2d1cd587a597fa8b89e49132c81faa99ee3e2a9a04afd655b955c4c971ec1351443f42c0467764cc398c7d6d01477375fa268033a4d8fae2d4761e8c55db22784d7c9908d1805e56162e31f625918131cc547513db93f597d52beb9d229228018371466bf3ba6a98e8f842b0a3bb24b04dd35bc9c37b019bde6f9f7afc35c0d997b146c2aee317c06e4f040af3400025406d162b1776836da2559df4be42f043a2b5562864d1578b4ef5a8293dcc1106c0eb0913f834cc3e148eab43c61aea2b4013bbf800745e518e7c6226856a6f02ba66dff6ec4701313642963b3d077fcd0ad8e0fd20f2ff06545a9d75ba488f60170e1aa303ff23c2f236128647f67769fd3e97c3fb05a6a7901474fadb8cd5399347800bdededc66d712babe5da7e42ba4ffe715d4753613c4e896dee25646d3cd7d1f9c463ebbe60eac3bc619b7d3072dfd5dbf47b50e305837f9d3fe3475b9bec23efa6f3148ed038cdce941cefc13d27df0b0cb8181323017447c42ea97731aa3f3789b8d12f6ff251afc91d404e52e75a53622cf6082baa01f2ceb512c4529a5c1d156d213321767c10eddaf9e9f54a9a5de41ec16ba17cc16720816c97e4f6020c193b2b479a49e7f63ecb3439e833521dc1821625c75bfeb50b01df9384152a0cf3ec4b96691ad11653b2cc56454d9af7568f5baaecbc8527ca4b285188766b70adb8db28d0708d67323b059fd9397436c3ef3c61ad6232ad7a0d9f673c002bc255b61483bd4e5b9054791be4765ee4104740da4fc49d3e59a60b3c14c2424148fd39974270cc0a52148f57d5533e160552e20f7287b3155521317cc05e73857ccf0b995dfcf143013c136ae92d69459e49269ccd2d1a4cfa4f8ec68ea520d18055091d73a97f4d0c658663bdba25d7449eff0595c737c921c44154a0f1bbeb95a0f1db244f8c93c64f81dd979c1b2bea351a5282950495de6906ee15ae3c9bd71623783ebd5f359491420184cff85cc147c0e5b9d61e74f232f11639171df0ef54719bd40cc052ad79670e780f988155fb2468517b5a5a814a54b5205d17b04c6fbec536d0469cd00bfa50627cddd9f2bdc23190182bf22144f34c72ad89cbb4b910b21eaa98166e0f29b0536878c0abc99b9b2d6b8371c3e7fb69478ae45e53d5b854edb3ee00f2291d080dc1505113582d2afc881aa365f69d85584535e94745441e3f96e9db7ad489a81b9347efc52d2976125e4341f0ba0967041da569038c36ec0a3e58c532d4cdd080dda4912ec7a96b5ac233ed3b31caf3a0958c1f9ba78abd667f8bf32bbc4172c780c697e010f1d4e0a7ce29d2aa97dc7884bf0bd1de4aa822bb63d329fb58c82b3c8e47a88f2f369b4032a6fac33bb9322f0f30e57a19ef") madvise$auto(0x0, 0xffffffffffff0001, 0x15) r5 = prctl$auto(0xbb, 0x1, 0x0, 0x5, 0x7) mmap$auto(0x3, 0x20009, 0x4000000000df, 0x14, r5, 0x8000) madvise$auto(0xfe7, 0x9, 0x3) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(r5, &(0x7f0000000340)={{0x0, 0xffff, &(0x7f0000000200)={&(0x7f0000000140)="4e86ca325b00b93bbd8281e37986643cee1f8988610f877b5b2a07d0b2d18e60fc9fd0e68fadb3ebc2a10a65ebdb7589", 0x40000000000007}, 0x1, &(0x7f0000000240), 0x4, 0x1}, 0x3}, 0x6, 0x4) r6 = open(0x0, 0x595002, 0x408) write$auto(r6, 0x0, 0xfffffdf1) pwrite64$auto(r6, 0x0, 0x32e, 0x8) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0xffffffffffffffff, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) mprotect$auto(0x0, 0x8000000000000001, 0x8) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x6c01c2, 0x0) socket(0x23, 0x1, 0x30) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)) 1.213848087s ago: executing program 1 (id=6): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2000, 0x0) unshare$auto(0x40000080) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty0\x00', 0x4000, 0x0) r2 = socket(0x11, 0x5, 0x100) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x28101, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto(r2, 0x4, r3) write$auto(r3, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) memfd_create$auto(0x0, 0x7) close_range$auto(0x2, 0x8, 0x0) r4 = socket(0x2a, 0x2, 0x1) connect$auto(r4, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x3, 0xfffffffe}, 0x52) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x10002}, 0x1) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) pipe$auto(0x0) mincore$auto(0x0, 0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x35, 0x0, 0x9) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(r0, 0x4048aec9, r5) close_range$auto(r1, 0xa, 0x0) mkdir$auto(0x0, 0x7f) select$auto(0x2, &(0x7f0000000080)={[0x10000, 0x0, 0x8, 0xfffffffffffffbff, 0x3, 0x2, 0x9, 0x6, 0x4, 0x7, 0x1, 0x1, 0xa692, 0x0, 0xfffffffffffffffa, 0xfffffffeffffffff]}, &(0x7f0000000100)={[0xf, 0xcb59792, 0x5, 0x9, 0x3, 0xa3b, 0x4, 0xffff, 0xfffffffeffffffff, 0x9, 0x2, 0x200, 0x56beecf4, 0xc9a, 0x2, 0xfffffffffffffffa]}, &(0x7f00000002c0)={[0x8, 0x80, 0x3, 0x0, 0xf, 0xff, 0x2ed, 0x6, 0x7fff, 0x9, 0x6, 0x8, 0x1000, 0x6, 0x8, 0x10000]}, &(0x7f0000000380)={0x7c, 0x4488}) 1.063733454s ago: executing program 0 (id=7): getsockopt$auto_SO_PROTOCOL(0xffffffffffffffff, 0xb29, 0x26, &(0x7f0000000100)='[(][+/:$!.\x00', 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/sctp/udp_port\x00', 0x202, 0x0) sendfile$auto(r0, r0, 0x0, 0x7fffe000) writev$auto(0x8000, &(0x7f0000000040)={0x0, 0x1000000000004}, 0x2bc) r1 = io_uring_setup$auto(0x6, 0x0) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0xffffffffffffffff, 0x8000) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000002c0), r1) sendmsg$auto_NL802154_CMD_GET_SEC_KEY(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r2, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0xc1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0011) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) kexec_load$auto(0x100000000000000, 0x0, 0x0, 0xffffffff) close_range$auto(0x2, r1, 0x0) r3 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r3, 0x0, 0x5f) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000140), r3) sendmsg$auto_NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="200027bd7000fbdbdf251d0000000500240006000000050024000500000008002c0024ed001f"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x1) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x2, 0x0) mknod$auto(&(0x7f0000000100)='./file0\x00', 0x1001, 0x4) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0xa3) open$dir(&(0x7f00000001c0)='./file0\x00', 0x40a01, 0x14) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f00000003c0)=""/231, 0xe7) sendfile$auto(r5, r5, &(0x7f00000000c0)=0x1, 0xc9) fcntl$auto(0x8000000000000001, 0x25, 0x8) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) r7 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/input/event1\x00', 0x2080, 0x0) ioctl$auto_EVIOCSCLOCKID(r7, 0x400445a0, &(0x7f0000000000)=0x1) mmap$auto(0x0, 0x810004, 0xffa, 0x8000000008011, r6, 0x8000) madvise$auto(0x0, 0x400053, 0x9) 381.786µs ago: executing program 0 (id=8): mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) getpgrp(0xffffffffffffffff) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_GOV(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@THERMAL_GENL_ATTR_CDEV_ID={0x8, 0xf, 0x62}, @THERMAL_GENL_ATTR_CPU_CAPABILITY_ID={0x8, 0x15, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r3 = prctl$auto(0x26, 0x1, 0x0, 0xffffffffffffffff, 0x0) r4 = fsopen$auto(0x0, 0x1) fsconfig$auto(r4, 0x8, 0x0, 0x0, 0x0) r5 = waitid$auto(0x8, r4, &(0x7f0000000080)={@_si_pad}, 0xa, &(0x7f0000000100)={{0x9, 0x7}, {0x4, 0x9f5}, 0x3, 0x5, 0x0, 0x0, 0x7, 0x8001, 0x5, 0x4, 0x0, 0x1, 0xfff, 0xffffffffffff3dcb, 0x80000000}) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010027bd7000fcdbdf251400000008002a00090000000800210003000000080027000100008008001c00", @ANYRES32=r5, @ANYBLOB="050029003db1dc3302dddc96ea74be126be83983e656fe46ce00070000000009000700000006000d00", @ANYRES32=r3, @ANYBLOB="0500110005000000"], 0x5c}, 0x1, 0x0, 0x0, 0x8001}, 0x10) sendmsg$auto_THERMAL_GENL_CMD_CDEV_GET(r0, &(0x7f0000000640)={&(0x7f00000000c0), 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x10c, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@THERMAL_GENL_ATTR_TZ_TRIP_ID={0x8, 0x5, 0x200}, @THERMAL_GENL_ATTR_TZ={0x18, 0x1, 0x0, 0x1, [@typed={0x8, 0x84, 0x0, 0x0, @pid=r5}, @typed={0xc, 0x108, 0x0, 0x0, @u64=0x3}]}, @THERMAL_GENL_ATTR_TZ_GOV={0xcd, 0xc, 0x0, 0x1, [@generic="cfcb162806c36a096aa15a5a41a8193b276cdc9bd47420168af4db06627f1e3225ad669edaacbca79284b6f1c19b926c33f335c7ad3ec72cb4fa9cc8e6e34c8e16be54e687d4d69c932e0b3969822a0c9856de6edd123fb116515d9451317bc7fd3d67685d917af6c7af5d72e333047523dee7cf6cd347176b170ee3727b973d0944261ca57dc779d31327f6034cdd5bd4369d22f99c1defbb9ce3544e6528df22633f9e4744bb5d0066bf37ac2977fc2a421ed359e1322bc50fc3e1949ca1d3115aae9f7a933ee47a"]}, @THERMAL_GENL_ATTR_CDEV_MAX_STATE={0x8}]}, 0x10c}, 0x1, 0x0, 0x0, 0x40000800}, 0x40000000) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000000140)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40c8}, 0x4048000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)=ANY=[@ANYBLOB="e0020000", @ANYRES16=r7, @ANYBLOB="01002ebd5100fbcbdf250100000004000180c802018004000680bd020480fc921cf096b39f43034e2db36a74c0ade1e6a4dafab35aa84881d05d1662bd8a8f48943ea4276b7e1465958d17dd9c9706336d0f4a94c7de9fa79cb659b67f43fa331b6f98fa8ad43a943eac1b528ba83992018ecb03ba5dba6660c32c87b1dc86b69a7f6e747504f11d7688a74c47a4ba4802228004003b0040028b8008002600", @ANYRES32=r6, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0400af80cee0bd49dab2a617b70e1a2e040e6ba448f301800a8999cec0bec67eb0617ad3f9a0977d09fa35f0e26b923a2713f1104ff7a5b18a2629bbee5de69b17f06e13870462f79e9deb527b97fd65fc8b156b0f525dfca9340f14dc75ef0881c14f5b87a6c615ee754d72289dcac3c322002b00", @ANYRES32=0x0, @ANYBLOB="6000f68004004880f6c5cccd25852c755b4331229a68ba8457bb2c5bc855fc277901cc018a78610faf86906cfd8f50da20a3cfe74a23710a32b0bd28cfddfe8fbcc03a4f9178ec9a0400de8004004380040078800c00a700feffffffffffffff0000"], 0x2e0}, 0x1, 0x0, 0x0, 0x40}, 0x4) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000480)={{&(0x7f00000001c0)="8d10a50b60e1380b545f89c54bab4fbfb3e0feda7edd7e46ae550aa997ff56be56fea27cb83751daf5f24ad06844d84862e0d8ddb179f76038831d67eaac8ab77003e5fc4eaf9d788521bd99b2729d94e367eabcdce535dd22dee07e455f0d28213b56b89d026239a1a68f51487800b3643829c256b36302e01c43618a797b05025b5feebfc59d59d2d916fd4248245863a0fd01593abab17301a9c36f0ec8bcbd4d8e6757f5b19d5092696e8e3e7ae1179791a4d12d4b6e213364b1f45cbae151889a10e446fe3ddc6e35545780a45518a4", 0x3, &(0x7f00000003c0)={&(0x7f00000002c0)="a05773e17fc3f097c1dda9674cdda8495227c3f6143b1c9dae28868eb2521113ee53fe55139a6cafe81097998f467936029d7cc2a59bd8df4aac7fbffdb54dfbc4dabe4693db529a457b072d24a74a8cc4064a179611df8dbc3eb7d0d68f653f5c970fe5e8039b309bf88b2d95319ac03fe3fed98f97feb30230ed7bc44c009694c3a27e9526df2fdf2b2d30adf6f4e00f90211708f37043fdc4153b871250e305e2c21184eaa67cb94b2d8e79f89ec13959f9918ffa08e8a519c2ad073327cf5ae99cbd9397b8187ea2e9c37e5535d88c6ce6ca1e247930b3585aa92c14", 0x100}, 0x1, &(0x7f0000000400)="2491e2f933b13df8b9767a34918374d206e5f3c766ee0baae721e41d7b28fc255fc9387e8c68e335e84ca7720ac49cdfdff203042b32ffe2ddf3fee62aa25966f135af5acda0f5ee35af2663f7f69d40ea81d8bce8fc80c0add9", 0x1, 0x1}, 0x401}, 0x5, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r8 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) ioctl$auto(r8, 0x4018620d, 0x9) r9 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x8a801, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) openat$auto_rfkill_fops_core(0xffffffffffffff9c, 0x0, 0x40, 0x0) r10 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/controlC2\x00', 0x80101, 0x0) r11 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0xc0c02, 0x0) ioctl$auto(r10, 0x80dc5521, r11) write$auto(r9, &(0x7f0000000200)='1\x00\\\xa0\x04\x06\x00\x00\x00*\x8d\x14\xfa 3\x00\xad1\xcc\xeb&{q\xe0$\xcd\x81Zm\xeb\xe39LC{\xf8\xa09\xe9\x05\xfc\xddUw4e\xc6\t}k\x14\xcah\xba\x16\xdc\x00\x88\x11\x008\xb3z\xe4\xb9\x97\x90z\xb41&YH\xd6\xaa\x06\xbc \b\xd7\xee\x8a:\xd9\x88\x8f\x06)l\xe4\x83\xbc\xd1wOa\xb6\x93\xe7\xb7\xbb\xdc\x98\xba\\\x15\xc2\xdc1D\x8b@\x9btfi\xaf\xdf\xee\v\x8e\xa2P\x93\x19\xea\x84T]<]+\x04N5=\xc0\x9d-\xaf\xfd\xc7\x87\x00\x00\x00\x00\xa4q\xec\x82\x95\x01\xfc7\x86\xd0\xd2\x93\xa7?\xc5\xf3\xaf\xe5\x17\x96\xc6\xbd=\x9a=\xe8\xf22\xab\x83\x9f\xc2\xc2\x8f\x1fQ|\x91&\x15\x0f\x18\xbc\xd3\xd6\xd7P\bTb\xfaY\xfcio\xa3\xe1d#-R\x91}\xe4\x88\xf6\xcc\xd5e\xb1Va\xa4Z\'w\xee\x94`>\x99\x00\xef\xe5\x9csXS<\x96\xafgM\xadY\xae\xf5\xe4\xb3\x9d\x18\x0f\xcc\xbb\tGb\xf5\x8c\xf4\xbc\xaf\x7f\x87\'\x9f\x8ff\x03m\xaf+D\xee\xcd\xd9\xfe\xe2)\x830}\xcc\xadC\xdd\xea\xb1\x8d\x06xj^U\xc0<\xfe\xc3U\xf8\x1ff\xe1\xd8\x14\t\xa8l]\xeb\xb6\xef\x04\x8f\xff\xfc\x97\x91\xdbN\x81\xfd\xf2\x9e\x18\x85G\xc7\xef\x86;\xd5\xd9\xd8\x18wq.%\xa9l\xc8\xdaC\x93\xc6\xc6\xd5p8\xa5\xb1\xd7:<\x8aCP\xd08\xcf', 0x4) 0s ago: executing program 2 (id=9): prctl$auto(0x8, 0x1, 0x0, 0x5, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) landlock_restrict_self$auto(r0, 0x0) symlink$auto(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x2040, 0x0) mmap$auto(0x0, 0x202000e, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000300)='/dev/v4l-subdev5\x00', 0x0, 0x0) ioctl$auto(r3, 0xc040563d, r2) open_tree_attr$auto(r1, &(0x7f0000000100)='./file0\x00', 0xfffffffa, 0x0, 0x3) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) io_uring_setup$auto(0x6, 0x0) unshare$auto(0x20000080) r4 = syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x149041, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000400), 0x163880, 0x0) read$auto(0x3, 0x0, 0x80) waitid$auto_P_PGID(0x2, 0x0, 0x0, 0x6, 0x0) r5 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYRES8=r2, @ANYRES16=r5, @ANYBLOB="010025bd7000f70800000000003f06000200010000000500070058000000080009000500000008000a000500000014001f00000000000000000000000000000000010800090005000400"], 0x50}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="040027bd7000fedbdf250300000005001300ff00000005000600020000000c001e8008009200", @ANYRES32=r4, @ANYBLOB="0500140002000000050014000400000014002000ff021f0000000000000000000000000106001a004e220000080009000100000005001300010000000c0010000100000000000000"], 0x78}, 0x1, 0x0, 0x0, 0x4080}, 0x24040018) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.85' (ED25519) to the list of known hosts. [ 76.172087][ T5613] cgroup: Unknown subsys name 'net' [ 76.292854][ T5613] cgroup: Unknown subsys name 'cpuset' [ 76.301605][ T5613] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.788384][ T5613] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.774184][ T5626] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.786285][ T5626] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.796784][ T5626] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.807811][ T5626] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.821103][ T5626] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.864661][ T4941] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.873491][ T4941] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.881634][ T4941] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.890806][ T4941] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.898513][ T4941] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.922017][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.932058][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.950562][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.968022][ T5635] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.978196][ T5635] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.987744][ T4941] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.997094][ T4941] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.007727][ T4941] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.025323][ T5638] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.034000][ T5638] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.396681][ T5630] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.404573][ T5630] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.412004][ T5630] bridge_slave_0: entered allmulticast mode [ 81.421942][ T5630] bridge_slave_0: entered promiscuous mode [ 81.454829][ T5630] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.462028][ T5630] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.469498][ T5630] bridge_slave_1: entered allmulticast mode [ 81.476723][ T5630] bridge_slave_1: entered promiscuous mode [ 81.585494][ T5630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.609357][ T5636] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.616577][ T5636] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.623964][ T5636] bridge_slave_0: entered allmulticast mode [ 81.630983][ T5636] bridge_slave_0: entered promiscuous mode [ 81.640409][ T5630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.679861][ T5636] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.687113][ T5636] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.694546][ T5636] bridge_slave_1: entered allmulticast mode [ 81.701827][ T5636] bridge_slave_1: entered promiscuous mode [ 81.717427][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.724651][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.731887][ T5628] bridge_slave_0: entered allmulticast mode [ 81.739075][ T5628] bridge_slave_0: entered promiscuous mode [ 81.746399][ T5624] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.753571][ T5624] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.760861][ T5624] bridge_slave_0: entered allmulticast mode [ 81.768064][ T5624] bridge_slave_0: entered promiscuous mode [ 81.795092][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.802374][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.809820][ T5628] bridge_slave_1: entered allmulticast mode [ 81.816871][ T5628] bridge_slave_1: entered promiscuous mode [ 81.824831][ T5624] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.831968][ T5624] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.839477][ T5624] bridge_slave_1: entered allmulticast mode [ 81.840089][ T5638] Bluetooth: hci0: command tx timeout [ 81.848080][ T5624] bridge_slave_1: entered promiscuous mode [ 81.869471][ T5630] team0: Port device team_slave_0 added [ 81.898525][ T5636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.910050][ T5630] team0: Port device team_slave_1 added [ 81.938027][ T5636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.958790][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.970886][ T5624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.999259][ T5638] Bluetooth: hci1: command tx timeout [ 82.002689][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.011835][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.037965][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.052111][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.063538][ T5624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.079251][ T50] Bluetooth: hci3: command tx timeout [ 82.083349][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.085512][ T5638] Bluetooth: hci2: command tx timeout [ 82.092731][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.123427][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.157064][ T5636] team0: Port device team_slave_0 added [ 82.195770][ T5636] team0: Port device team_slave_1 added [ 82.204325][ T5628] team0: Port device team_slave_0 added [ 82.212066][ T5624] team0: Port device team_slave_0 added [ 82.239641][ T5628] team0: Port device team_slave_1 added [ 82.247187][ T5624] team0: Port device team_slave_1 added [ 82.262478][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.269509][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.295656][ T5636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.341426][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.348533][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.374690][ T5636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.412144][ T5630] hsr_slave_0: entered promiscuous mode [ 82.418531][ T5630] hsr_slave_1: entered promiscuous mode [ 82.432693][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.439881][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.466413][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.478772][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.486072][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.512344][ T5624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.525491][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.532548][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.558673][ T5624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.570918][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.577981][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.603993][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.725898][ T5636] hsr_slave_0: entered promiscuous mode [ 82.732397][ T5636] hsr_slave_1: entered promiscuous mode [ 82.738443][ T5636] debugfs: 'hsr0' already exists in 'hsr' [ 82.744325][ T5636] Cannot create hsr debugfs directory [ 82.762369][ T5628] hsr_slave_0: entered promiscuous mode [ 82.768626][ T5628] hsr_slave_1: entered promiscuous mode [ 82.775044][ T5628] debugfs: 'hsr0' already exists in 'hsr' [ 82.780813][ T5628] Cannot create hsr debugfs directory [ 82.791819][ T5624] hsr_slave_0: entered promiscuous mode [ 82.798106][ T5624] hsr_slave_1: entered promiscuous mode [ 82.804632][ T5624] debugfs: 'hsr0' already exists in 'hsr' [ 82.810573][ T5624] Cannot create hsr debugfs directory [ 83.232533][ T5630] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.247361][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.255497][ T5630] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.265431][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.273959][ T5630] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.283788][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.291843][ T5630] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.301839][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.402933][ T5636] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.414367][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.422783][ T5636] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.432599][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.441243][ T5636] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.452054][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.470212][ T5636] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.482082][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.560631][ T5628] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.572014][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.587330][ T5628] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.597775][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.614068][ T5628] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.624264][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.632432][ T5628] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.642271][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.722949][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.748319][ T5624] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.757838][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.773809][ T5624] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.783849][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.791936][ T5624] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.802545][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.811085][ T5624] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.820798][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.853446][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.882876][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.890717][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.919494][ T5638] Bluetooth: hci0: command tx timeout [ 83.935732][ T97] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.943094][ T97] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.003512][ T5636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.079347][ T5638] Bluetooth: hci1: command tx timeout [ 84.090915][ T5636] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.112017][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.119202][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.142212][ T97] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.149420][ T97] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.159166][ T5638] Bluetooth: hci2: command tx timeout [ 84.159499][ T50] Bluetooth: hci3: command tx timeout [ 84.174540][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.235068][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.274729][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.326252][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.333490][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.354723][ T5624] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.381071][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.388246][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.406401][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.413562][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.455899][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.463179][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.124437][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.294514][ T5630] veth0_vlan: entered promiscuous mode [ 85.345894][ T5630] veth1_vlan: entered promiscuous mode [ 85.384201][ T5636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.440576][ T5630] veth0_macvtap: entered promiscuous mode [ 85.475854][ T5630] veth1_macvtap: entered promiscuous mode [ 85.570614][ T5636] veth0_vlan: entered promiscuous mode [ 85.594211][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.627862][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.644080][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.666935][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.675138][ T5636] veth1_vlan: entered promiscuous mode [ 85.703716][ T97] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.713561][ T97] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.732212][ T97] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.742333][ T97] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.857934][ T5628] veth0_vlan: entered promiscuous mode [ 85.872001][ T5636] veth0_macvtap: entered promiscuous mode [ 85.924361][ T5628] veth1_vlan: entered promiscuous mode [ 85.937731][ T5636] veth1_macvtap: entered promiscuous mode [ 85.958853][ T5624] veth0_vlan: entered promiscuous mode [ 85.972690][ T97] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.986892][ T97] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.000942][ T50] Bluetooth: hci0: command tx timeout [ 86.015853][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.033759][ T5624] veth1_vlan: entered promiscuous mode [ 86.060447][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.089746][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.101072][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.105425][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.120116][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.142969][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.152980][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.160622][ T50] Bluetooth: hci1: command tx timeout [ 86.228410][ T5628] veth0_macvtap: entered promiscuous mode [ 86.241001][ T50] Bluetooth: hci2: command tx timeout [ 86.246943][ T5638] Bluetooth: hci3: command tx timeout [ 86.272060][ T5630] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 86.275047][ T5624] veth0_macvtap: entered promiscuous mode [ 86.296171][ T5628] veth1_macvtap: entered promiscuous mode [ 86.342452][ T5624] veth1_macvtap: entered promiscuous mode [ 86.394352][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.452330][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.475294][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.488721][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.500050][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.507498][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.551041][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.561990][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.573196][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.621758][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.680792][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.700249][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.715170][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.728974][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.773510][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.789476][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.056785][ T50] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 87.089822][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.109405][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.273399][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.303659][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.320996][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.335819][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.439163][ T50] Bluetooth: hci3: unexpected event 0x06 length: 6 > 3 [ 87.494952][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.542736][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.831488][ T50] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 88.079085][ T4941] Bluetooth: hci0: command tx timeout [ 88.240303][ T4941] Bluetooth: hci1: command tx timeout [ 88.321497][ T4941] Bluetooth: hci2: command tx timeout [ 88.321514][ T5632] Bluetooth: hci3: command tx timeout [ 88.819541][ T5808] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.523366][ T5638] ------------[ cut here ]------------ [ 89.529262][ T5638] refcnt < 0 [ 89.529272][ T5638] WARNING: net/bluetooth/hci_conn.c:631 at hci_conn_timeout+0x16a/0x230, CPU#0: kworker/u9:5/5638 [ 89.543631][ T5638] Modules linked in: [ 89.547942][ T5638] CPU: 0 UID: 0 PID: 5638 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT(full) [ 89.557592][ T5638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 89.567932][ T5638] Workqueue: hci3 hci_conn_timeout [ 89.573111][ T5638] RIP: 0010:hci_conn_timeout+0x16a/0x230 [ 89.578992][ T5638] Code: 44 0f b6 2d 5b cf 70 06 31 ff 41 83 e5 40 44 89 ee e8 ea 2e 5c f7 45 84 ed 0f 84 02 ff ff ff e9 f0 64 c4 f6 e8 c7 34 5c f7 90 <0f> 0b 90 e8 be 34 5c f7 48 8d bb fd f5 ff ff 48 b8 00 00 00 00 00 [ 89.598756][ T5638] RSP: 0018:ffffc900043e7c18 EFLAGS: 00010293 [ 89.605170][ T5638] RAX: 0000000000000000 RBX: ffff8880788eca40 RCX: ffffffff8aacf67f [ 89.613360][ T5638] RDX: ffff8880357e5d00 RSI: ffffffff8aacf779 RDI: ffff8880357e5d00 [ 89.621409][ T5638] RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000 [ 89.629553][ T5638] R10: 00000000ffffffff R11: 000000000000756b R12: ffff8880788ec000 [ 89.637594][ T5638] R13: ffff8880357e61c4 R14: ffffffff91227e44 R15: 0000000000000000 [ 89.645866][ T5638] FS: 0000000000000000(0000) GS:ffff888123df5000(0000) knlGS:0000000000000000 [ 89.654997][ T5638] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 89.661643][ T5638] CR2: 00007fbbe0231ff8 CR3: 000000005d680000 CR4: 00000000003526f0 [ 89.670326][ T5638] Call Trace: [ 89.673616][ T5638] [ 89.676546][ T5638] process_one_work+0xa23/0x1940 [ 89.681944][ T5638] ? __pfx_process_one_work+0x10/0x10 [ 89.687335][ T5638] ? __pfx_hci_conn_timeout+0x10/0x10 [ 89.692851][ T5638] worker_thread+0x5ef/0xe50 [ 89.697452][ T5638] ? __pfx_worker_thread+0x10/0x10 [ 89.702603][ T5638] ? kthread+0x13a/0x450 [ 89.706843][ T5638] ? __pfx_worker_thread+0x10/0x10 [ 89.712032][ T5638] kthread+0x370/0x450 [ 89.716114][ T5638] ? __pfx_kthread+0x10/0x10 [ 89.720738][ T5638] ret_from_fork+0x72b/0xd50 [ 89.725321][ T5638] ? __pfx_ret_from_fork+0x10/0x10 [ 89.730471][ T5638] ? __switch_to+0x800/0x10f0 [ 89.735144][ T5638] ? __switch_to_asm+0x39/0x70 [ 89.739935][ T5638] ? __pfx_kthread+0x10/0x10 [ 89.744726][ T5638] ret_from_fork_asm+0x1a/0x30 [ 89.749691][ T5638] [ 89.752716][ T5638] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 89.759987][ T5638] CPU: 0 UID: 0 PID: 5638 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT(full) [ 89.769432][ T5638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 89.779476][ T5638] Workqueue: hci3 hci_conn_timeout [ 89.784584][ T5638] Call Trace: [ 89.787879][ T5638] [ 89.790799][ T5638] dump_stack_lvl+0x100/0x190 [ 89.795467][ T5638] vpanic+0x552/0x970 [ 89.799442][ T5638] ? __pfx_vpanic+0x10/0x10 [ 89.803937][ T5638] panic+0xd1/0xe0 [ 89.807646][ T5638] ? __pfx_panic+0x10/0x10 [ 89.812059][ T5638] ? check_panic_on_warn+0x1f/0x90 [ 89.817172][ T5638] check_panic_on_warn.cold+0x19/0x34 [ 89.822597][ T5638] ? hci_conn_timeout+0x16a/0x230 [ 89.827609][ T5638] __warn.cold+0x191/0x318 [ 89.832013][ T5638] __report_bug+0x30f/0x440 [ 89.836510][ T5638] ? hci_conn_timeout+0x16a/0x230 [ 89.841524][ T5638] ? __pfx___report_bug+0x10/0x10 [ 89.846551][ T5638] ? __hrtimer_rearm_deferred+0x23c/0x720 [ 89.852282][ T5638] ? __hrtimer_rearm_deferred+0x23c/0x720 [ 89.858011][ T5638] ? irqentry_exit+0x24d/0xa00 [ 89.862787][ T5638] ? hci_conn_timeout+0x16a/0x230 [ 89.867811][ T5638] report_bug+0xb2/0x220 [ 89.872052][ T5638] ? hci_conn_timeout+0x16a/0x230 [ 89.877070][ T5638] handle_bug+0x16a/0x2a0 [ 89.881395][ T5638] exc_invalid_op+0x17/0x50 [ 89.885887][ T5638] asm_exc_invalid_op+0x1a/0x20 [ 89.890728][ T5638] RIP: 0010:hci_conn_timeout+0x16a/0x230 [ 89.896353][ T5638] Code: 44 0f b6 2d 5b cf 70 06 31 ff 41 83 e5 40 44 89 ee e8 ea 2e 5c f7 45 84 ed 0f 84 02 ff ff ff e9 f0 64 c4 f6 e8 c7 34 5c f7 90 <0f> 0b 90 e8 be 34 5c f7 48 8d bb fd f5 ff ff 48 b8 00 00 00 00 00 [ 89.915955][ T5638] RSP: 0018:ffffc900043e7c18 EFLAGS: 00010293 [ 89.922033][ T5638] RAX: 0000000000000000 RBX: ffff8880788eca40 RCX: ffffffff8aacf67f [ 89.930017][ T5638] RDX: ffff8880357e5d00 RSI: ffffffff8aacf779 RDI: ffff8880357e5d00 [ 89.937978][ T5638] RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000 [ 89.945939][ T5638] R10: 00000000ffffffff R11: 000000000000756b R12: ffff8880788ec000 [ 89.953993][ T5638] R13: ffff8880357e61c4 R14: ffffffff91227e44 R15: 0000000000000000 [ 89.961975][ T5638] ? hci_conn_timeout+0x6f/0x230 [ 89.966909][ T5638] ? hci_conn_timeout+0x169/0x230 [ 89.971926][ T5638] ? hci_conn_timeout+0x169/0x230 [ 89.976958][ T5638] process_one_work+0xa23/0x1940 [ 89.981900][ T5638] ? __pfx_process_one_work+0x10/0x10 [ 89.987272][ T5638] ? __pfx_hci_conn_timeout+0x10/0x10 [ 89.992657][ T5638] worker_thread+0x5ef/0xe50 [ 89.997252][ T5638] ? __pfx_worker_thread+0x10/0x10 [ 90.002359][ T5638] ? kthread+0x13a/0x450 [ 90.006593][ T5638] ? __pfx_worker_thread+0x10/0x10 [ 90.011700][ T5638] kthread+0x370/0x450 [ 90.015769][ T5638] ? __pfx_kthread+0x10/0x10 [ 90.020354][ T5638] ret_from_fork+0x72b/0xd50 [ 90.024936][ T5638] ? __pfx_ret_from_fork+0x10/0x10 [ 90.030211][ T5638] ? __switch_to+0x800/0x10f0 [ 90.034886][ T5638] ? __switch_to_asm+0x39/0x70 [ 90.039664][ T5638] ? __pfx_kthread+0x10/0x10 [ 90.044254][ T5638] ret_from_fork_asm+0x1a/0x30 [ 90.049037][ T5638] [ 90.052339][ T5638] Kernel Offset: disabled [ 90.056655][ T5638] Rebooting in 86400 seconds..