last executing test programs: 12m58.456649655s ago: executing program 2 (id=188): open(0x0, 0x4140, 0x0) (async) mount$auto(0x0, 0x0, 0x0, 0x8002, 0x0) (async) prctl$auto(0x1000000001c, 0x5, 0x8, 0x9, 0x80001) (async) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r0 = socket(0x2, 0x1, 0x106) (async) mmap$auto(0x0, 0xe983, 0xdf, 0x400000000000eb1, 0xffffffffffffffff, 0x8000) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = epoll_create$auto(0x3e) epoll_ctl$auto(r1, 0x1, 0x8000000000000000, 0x0) bind$auto(r0, &(0x7f0000001100)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x51) (async) io_uring_setup$auto(0x1d48, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x13e, 0x0, 0xfffffffffffffffd) (async) socket(0xa, 0x3, 0x3a) (async) r2 = socket(0x2c, 0x3, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567) (async) sendmsg$auto_TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0xc050) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r2) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) (async) socket(0xa, 0x2, 0x0) (async) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff5f5ffffff00"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) (async) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x3e00, 0x0) read$auto(r3, 0x0, 0x1f40) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) 12m58.185609006s ago: executing program 2 (id=189): close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2000000000000021, 0x2, 0x10000000000002) lsm_get_self_attr$auto(0xffffffff, 0x0, &(0x7f0000000140)=0x7, 0xfffffff8) socket(0x2b, 0x5, 0x0) r1 = socket(0x2a, 0x2, 0x1) connect$auto(r1, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0x4001}, 0x55) bind$auto(0x3, &(0x7f0000000080)=@qipcrtr={0x2a, 0x1, 0x80f0}, 0x6b) r2 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec2\x00', 0x101000, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f00000000c0)={"58f99464", 0x8, 0x6, 0x1, 0x3, 0x5, "4bb69ec4b3f4c14539898e4c5682f5", "347f00", "a630df9d", "a0ed9959", ["cd9196b8fe1a8a7eb90401a9", "2f9c30017721de33c560b95a", "d3fe6c55a78d6932211c9b69", "ea334f1f1e5e27a1320d6edb"]}) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000048c0)='/dev/dsp1\x00', 0x20000, 0x0) mmap$auto(0x0, 0x20004, 0xdf, 0xeb1, 0x40000000000a5, 0x400000008000) ioctl$auto_SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000180)="6da6b940dfe114cacac8b7cca871a393aaf922f69708e077a3ff54d760f973198c7f36202c9afdaf7bc2eb57e0") close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="1b0026bd7000fddbdf250300000004000800100003800c000a000700000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14920000", @ANYRES16=0x0, @ANYBLOB="000326bd7000fedbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x4c894}, 0x4) keyctl$auto(0xf, 0x400, 0x8001, 0x100, 0x3) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x9}, 0x3, 0x0) select$auto(0x4, 0x0, &(0x7f0000000100)={[0x9, 0x7, 0xfffffffffffffff9, 0x9, 0x7ff, 0x3, 0x6, 0x2, 0x9, 0xffff, 0x1ff, 0xd, 0x3, 0x200000201, 0x7, 0x6]}, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x15) sendmsg$auto_NFSD_CMD_THREADS_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}}, 0x60000d1) write$auto(r4, &(0x7f0000000000)='-\x00', 0x2fb) ioctl$auto_VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000100)={0x2, r4}) r6 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_WG_CMD_GET_DEVICE(r5, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="8575f074c65de73ef49cc8265099d776a8ed5533627179df56a1b1299ca14b63f31b386c557e45c3f0aab8399d4749dccdbe0557b75f3affb0001403052b4509d35b64127a4266dc2503c2594f902e9c5087f6b1a58add", @ANYRES16=r6, @ANYBLOB="10002cbd7000fddbdf250000000008000700000000001400020076657468315f746f5f626174616476000800050007000000"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x40041) sendmsg$auto_WG_CMD_SET_DEVICE(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r6, 0x200, 0x70bd26, 0x25dfdbff, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x2}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x24}, 0x1, 0x0, 0x0, 0x48880}, 0x24000010) 12m57.993469515s ago: executing program 2 (id=192): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x848000000015, 0x805, 0x0) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6b) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}}, 0x55) keyctl$auto(0x5, 0xffffffffffffffff, 0x5, 0x5, 0x8) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x1c9802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000022ff6)='./control\x00', 0x2640, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x3, 0x100df, 0x209b72, 0x4e477f5a, 0x8000) getsockopt$auto(0x6, 0x1, 0x4d, 0xfffffffffffffffe, 0x0) pread64$auto(r2, &(0x7f0000000380)='/proc/scsi/sg/devices\x00', 0x100000001, 0x100) sendmsg$auto_NL80211_CMD_GET_WIPHY(r0, 0x0, 0x0) sendmsg$auto_OVS_FLOW_CMD_GET(r0, 0x0, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/loop10/queue/add_random\x00', 0x80302, 0x0) sendfile$auto(r3, r3, 0x0, 0x3) ioctl$auto_XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000280)={r1, &(0x7f0000000100), 0xffffffff, &(0x7f0000000000)="0c54893d92c8e14117e7c244a0e9219e586449e72bdc6a0bfb01a1f634512364b048e46d75c95f7795f96638335e65b4cd218823f9da2b006f7fd5a6af69cada86dfdeffac550e0945263002a823b78b424ff4a3f6d591f36f73e0cc9f398b7b8f3b1379c0", 0x100, 0x0, &(0x7f0000000240)=0x4}) unshare$auto(0x40000080) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 12m56.911403179s ago: executing program 2 (id=197): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x848000000015, 0x805, 0x0) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6b) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}}, 0x55) keyctl$auto(0x5, 0xffffffffffffffff, 0x5, 0x5, 0x8) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x1c9802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000022ff6)='./control\x00', 0x2640, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x3, 0x100df, 0x209b72, 0x4e477f5a, 0x8000) getsockopt$auto(0x6, 0x1, 0x4d, 0xfffffffffffffffe, 0x0) pread64$auto(r2, &(0x7f0000000380)='/proc/scsi/sg/devices\x00', 0x100000001, 0x100) sendmsg$auto_NL80211_CMD_GET_WIPHY(r0, 0x0, 0x0) sendmsg$auto_OVS_FLOW_CMD_GET(r0, 0x0, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/loop10/queue/add_random\x00', 0x80302, 0x0) sendfile$auto(r3, r3, 0x0, 0x3) ioctl$auto_XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000280)={r1, &(0x7f0000000100), 0xffffffff, &(0x7f0000000000)="0c54893d92c8e14117e7c244a0e9219e586449e72bdc6a0bfb01a1f634512364b048e46d75c95f7795f96638335e65b4cd218823f9da2b006f7fd5a6af69cada86dfdeffac550e0945263002a823b78b424ff4a3f6d591f36f73e0cc9f398b7b8f3b", 0x100, &(0x7f0000000200)="9dabc562d54a8c25f5f8b0d1849a1cadfb21967ba4c681dbcd241d57", &(0x7f0000000240)=0x4}) unshare$auto(0x40000080) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 12m55.813354278s ago: executing program 2 (id=204): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.1/usb2/2-0:1.0/usb2-port1/disable\x00', 0x102, 0x0) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.1/usb2/2-0:1.0/usb2-port1/disable\x00', 0x102, 0x0) sendfile$auto(r0, r0, 0x0, 0x7) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x147000, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x147000, 0x0) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000280), 0xc0641, 0x0) (async) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000280), 0xc0641, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_EDGE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x81) readv$auto(0x3, &(0x7f00000001c0)={0x0}, 0x100000007) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = open(&(0x7f0000000240)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0xa6) r2 = open_by_handle_at$auto(r1, &(0x7f0000000040)={0x8, 0x2, '\a\x00\x00\x00\x00\x00\x00\x00'}, 0x2) read$auto_tun_fops_tun(r1, &(0x7f0000000080)=""/19, 0x13) write$auto(r2, 0x0, 0x1) io_uring_register$auto_IORING_REGISTER_FILES2(r0, 0xd, &(0x7f0000000140)="8506e23764434357f8ddc088c043178064f3016295bac88d9264c108282f55955236174d8f051535e208cfcf50a1d779239bf384451307c0d1adc19fcc7683abac05caed2e8f7a3a7fcda3e78bbacd6a84e758cc676476160aff59434a8063aabc042359f05fbc5f89d70612a6d1044789d88de3c223a01de7b6c5005850669957584e24388a077ac82acb3b0a2d49ecc6176be6ff11cc6b", 0xa) (async) io_uring_register$auto_IORING_REGISTER_FILES2(r0, 0xd, &(0x7f0000000140)="8506e23764434357f8ddc088c043178064f3016295bac88d9264c108282f55955236174d8f051535e208cfcf50a1d779239bf384451307c0d1adc19fcc7683abac05caed2e8f7a3a7fcda3e78bbacd6a84e758cc676476160aff59434a8063aabc042359f05fbc5f89d70612a6d1044789d88de3c223a01de7b6c5005850669957584e24388a077ac82acb3b0a2d49ecc6176be6ff11cc6b", 0xa) read$auto_proc_sessionid_operations_base(r2, &(0x7f0000000000)=""/124, 0x7c) 12m55.627359681s ago: executing program 2 (id=207): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) bpf$auto(0x7, 0x0, 0xa3) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) (async) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) (async) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) openat$auto_supply_map_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x40283, 0x0) r1 = socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) (async) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) arch_prctl$auto(0x5001, 0x2) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) socket(0x2, 0x80002, 0x73) ioctl$auto(r1, 0x8914, 0x24) (async) ioctl$auto(r1, 0x8914, 0x24) ioctl$auto_PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000240)=0x810001) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/controlC2\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) 12m40.181616037s ago: executing program 32 (id=207): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) bpf$auto(0x7, 0x0, 0xa3) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) (async) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) (async) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) openat$auto_supply_map_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x40283, 0x0) r1 = socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) (async) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) arch_prctl$auto(0x5001, 0x2) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) socket(0x2, 0x80002, 0x73) ioctl$auto(r1, 0x8914, 0x24) (async) ioctl$auto(r1, 0x8914, 0x24) ioctl$auto_PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000240)=0x810001) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/controlC2\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) 10m12.049541115s ago: executing program 1 (id=851): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x20000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(r0, 0x7, 0xffffffffffffffff) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0x10, 0x404, 0x8002) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x400000003) r2 = openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000040)="8c9700089d1b208365d5b5d112dbab029ed13881d2f2c7ba2eb01c3db79f77fdc2bb50c64a925009dff4cd1aca925c57100112d88f73348a54396800ed598a0e5500d7c0cbb6b1e91d", 0x40000000001243}, 0x4, 0x0) ioctl$auto(r2, 0x400454ca, 0x38) ioctl$auto_XFS_IOC_ERROR_CLEARALL(0xffffffffffffffff, 0x40085875, &(0x7f0000000100)={r2, 0x1160}) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, r4, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto(0x3, 0xc, r0) ioctl$auto_KVM_CREATE_VM(r4, 0x41a0ae8d, 0x0) write$auto_event_trigger_fops_trace(r3, &(0x7f0000000240)="880057d29220e44ba3e4424dd70124822ed6c25de5c80580010fff00044472aa2ace31f99f64c109977ec69ac8080ba44cc020d111ed710c38cb4b0919eda002121b4f5c9fe8e240685c46207029994a4165cef4a9818438a2addd67144f00d09de466f705e127c5525c1541346bd0e203977cc75d", 0x75) r5 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r5, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xb180, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f89300a86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa}) setresgid$auto(0x81, 0x800000a0, 0x8) acct$auto(&(0x7f0000000100)='/dev/snd/controlC1\x00') 10m11.730280312s ago: executing program 1 (id=852): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x800000000012, 0x4, 0x80000001, 0x8}, 0x6f4) mmap$auto(0x0, 0xa00002, 0x400002, 0x40eb1, 0x602, 0x10001) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(r1, 0xffffffffffffffff, 0xc4c6) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) write$auto(0x3, 0x0, 0xfffffdef) select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x2, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x6, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) select$auto(0x8, &(0x7f00000000c0)={[0xeeda, 0x7, 0x6, 0x9, 0x34, 0x1ff, 0x6, 0x4, 0x5, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8e, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f00000001c0)={0x6, 0x2}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00042dbd7000fbe2df2502000000080002000100000028e5ff102d084475a9db785e92655ba955715583cc8a50063b3f5b86a34d4538191f112a8151d1cd40b92ef28fecf0ee5384dc719adb2cdb504b5061949d21c6c08399099c7aeb25a44be34571d51bd758e1d8a1135a4f734dc9494b025b6bdf4fbbf44b5355558911de93218243672f35b4eebeff509514"], 0x1c}, 0x1, 0x0, 0x0, 0x24008054}, 0x40) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000ffdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='Z'], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) socket(0x10, 0x2, 0xc) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) 10m10.622834143s ago: executing program 1 (id=859): socket(0x2, 0x1, 0x106) migrate_pages$auto(0x0, 0x99, 0x0, &(0x7f00000001c0)=0x7b) writev$auto(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x7}, 0x3) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000200)={{@inferred, 0x1, 0xffff7fff, 0x81, "3112d585005a614d19e22af9ffb683dbede3d0bf828bbfba40f035f4be6b7fe5e2f94bd90484b0755015e48d", @raw=0x2}, 0x503, 0x5, 0x4, @raw=0x87, @enumerated={0xc, 0x0, "cb0c80699beb33ab05dc27d4bf2aba926b660e893ca63be6c004786ceac50991aa4975421eebb8e24b11006a359336cf5c603240dff7022f6bd2af1300", 0x6, 0x10001}, "7a9fc199a16a2311eacf2fc7ae1d8778dc618090334fdd73340238d21000debe0eda71bdd709254592b67f9cb5adb17884a16f7ce8cbce0bb32791702b8d7c2d"}) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x11, 0x3, 0x9) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x42}, 0x4) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x11}, 0x5, 0x0, 0x5, 0xe}, 0x5}, 0x2, 0x100) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) write$auto(0x3, 0x0, 0x100082) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001fc, 0x7, 0xd3e, 0x1, 0x9687, 0x100000000000003, 0x95f4da0a, 0x6, 0x3, 0x62, 0x5, 0x5, 0x6d3f, 0x7, 0x6, 0x6]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000079c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x2) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x4, 0x3, 0x3, 0x3, 0x3, 0x3, 0x8000000000000000, 0x2, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_psample(&(0x7f0000007a40), 0xffffffffffffffff) sendmsg$auto_PSAMPLE_CMD_GET_GROUP(r3, &(0x7f0000007b00)={0x0, 0x0, &(0x7f0000007ac0)={&(0x7f0000007a80)={0x14, r4, 0x311, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xf0}, 0x0) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) close_range$auto(0x2, 0x8, 0x0) r5 = getpid() process_vm_readv$auto(r5, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0x10ffffffff}, 0x6, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) 10m9.662813641s ago: executing program 1 (id=861): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x20000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(r0, 0x7, 0xffffffffffffffff) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0x10, 0x404, 0x8002) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x400000003) r3 = openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000040)="8c9700089d1b208365d5b5d112dbab029ed13881d2f2c7ba2eb01c3db79f77fdc2bb50c64a925009dff4cd1aca925c57100112d88f73348a54396800ed598a0e5500d7c0cbb6b1e91d", 0x40000000001243}, 0x4, 0x0) ioctl$auto(r3, 0x400454ca, 0x38) ioctl$auto_XFS_IOC_ERROR_CLEARALL(0xffffffffffffffff, 0x40085875, &(0x7f0000000100)={r3, 0x1160}) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, r5, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto(0x3, 0xc, r0) ioctl$auto_KVM_CREATE_VM(r5, 0x41a0ae8d, 0x0) write$auto_event_trigger_fops_trace(r4, &(0x7f0000000240)="880057d29220e44ba3e4424dd70124822ed6c25de5c80580010fff00044472aa2ace31f99f64c109977ec69ac8080ba44cc020d111ed710c38cb4b0919eda002121b4f5c9fe8e240685c46207029994a4165cef4a9818438a2addd67144f00d09de466f705e127c5525c1541346bd0e203977cc75d", 0x75) r6 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r6, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xb180, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f89300a86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa}) setresgid$auto(0x81, 0x800000a0, 0x8) acct$auto(&(0x7f0000000100)='/dev/snd/controlC1\x00') 10m9.505940108s ago: executing program 1 (id=863): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x848000000015, 0x805, 0x0) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6b) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}}, 0x55) keyctl$auto(0x5, 0xffffffffffffffff, 0x5, 0x5, 0x8) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x1c9802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000022ff6)='./control\x00', 0x2640, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x3, 0x100df, 0x209b72, 0x4e477f5a, 0x8000) getsockopt$auto(0x6, 0x1, 0x4d, 0xfffffffffffffffe, 0x0) pread64$auto(r2, &(0x7f0000000380)='/proc/scsi/sg/devices\x00', 0x100000001, 0x100) sendmsg$auto_NL80211_CMD_GET_WIPHY(r0, 0x0, 0x0) sendmsg$auto_OVS_FLOW_CMD_GET(r0, 0x0, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/loop10/queue/add_random\x00', 0x80302, 0x0) sendfile$auto(r3, r3, 0x0, 0x3) ioctl$auto_XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000280)={r1, &(0x7f0000000180), 0xffffffff, &(0x7f0000000000)="0c54893d92c8e14117e7c244a0e9219e586449e72bdc6a0bfb01a1f634512364b048e46d75c95f7795f96638335e65b4cd218823f9da2b006f7fd5a6af69cada86dfdeffac550e0945263002a823b78b424ff4a3f6d591f36f73e0cc9f398b7b8f3b1379c0", 0x100, &(0x7f0000000200)="9dabc562d54a8c25f5f8b0d1849a1cadfb21967ba4c681dbcd241d57", &(0x7f0000000240)=0x4}) unshare$auto(0x40000080) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1d, 0x1, 0x6, 0x3, 0x3ff) 10m8.501140718s ago: executing program 1 (id=870): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x22, 0x0, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x100, 0x0) syz_genetlink_get_family_id$auto_tipcv2(0x0, r0) close_range$auto(0x0, 0x5, 0x0) pipe$auto(0x0) write$auto_tracing_fops_trace(0xffffffffffffffff, &(0x7f0000000040)="c582bd172cd31867ec8f3dade30eaab952dca1a1aa6f38c4703bf82a51c9e2fc32", 0x21) pipe$auto(0x0) tee$auto(0x2000000000000, 0x3, 0x402, 0xd) r1 = socket(0x11, 0x80003, 0x300) sendfile$auto(0x1, r1, 0x0, 0x8fb5) fcntl$auto(0x0, 0x407, 0x100000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80800, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x5, 0xb) bpf$auto(0x0, 0x0, 0xf) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) sysfs$auto(0x2, 0x42, 0x0) prctl$auto_PR_SYS_DISPATCH_ON(0x2, 0x1, 0x0, 0x400, 0x2) write$auto(0x3, 0x0, 0xfdf3) 9m53.43207885s ago: executing program 33 (id=870): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x22, 0x0, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x100, 0x0) syz_genetlink_get_family_id$auto_tipcv2(0x0, r0) close_range$auto(0x0, 0x5, 0x0) pipe$auto(0x0) write$auto_tracing_fops_trace(0xffffffffffffffff, &(0x7f0000000040)="c582bd172cd31867ec8f3dade30eaab952dca1a1aa6f38c4703bf82a51c9e2fc32", 0x21) pipe$auto(0x0) tee$auto(0x2000000000000, 0x3, 0x402, 0xd) r1 = socket(0x11, 0x80003, 0x300) sendfile$auto(0x1, r1, 0x0, 0x8fb5) fcntl$auto(0x0, 0x407, 0x100000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80800, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x5, 0xb) bpf$auto(0x0, 0x0, 0xf) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) sysfs$auto(0x2, 0x42, 0x0) prctl$auto_PR_SYS_DISPATCH_ON(0x2, 0x1, 0x0, 0x400, 0x2) write$auto(0x3, 0x0, 0xfdf3) 8m3.305698912s ago: executing program 4 (id=1335): r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000002940)='/dev/fb0\x00', 0x841, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) (async) sendmmsg$auto(r1, &(0x7f0000000640)={{&(0x7f0000000000), 0x5ae, &(0x7f0000000100)={0x0, 0x13}, 0x5, 0x0, 0x5, 0x1}, 0x1}, 0x1a000, 0x100) r2 = socket(0x2, 0x1, 0x106) mmap$auto(0xfffffffffffffffd, 0x400004, 0xdd, 0x9b72, 0x2, 0x8000) (async) getsockopt$auto_SO_SNDLOWAT(r2, 0x0, 0x13, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_pipe\x00', 0x20c01, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x1, 0x0) syz_clone3(&(0x7f0000000340)={0x20020600, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, &(0x7f0000000180), {0x2a}, &(0x7f00000001c0)=""/180, 0xb4, 0x0, 0x0}, 0x58) (async) fcntl$auto(r0, 0x10001, 0x0) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/hid_steam/parameters/lizard_mode\x00', 0xc0481, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa081, 0x0) (async) r6 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b) read$auto(r6, 0x0, 0x1) (async) sendmsg$auto_OVS_METER_CMD_FEATURES(r2, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042bbd7000fddbdf2501000000080008000000000a04000600080008000000000008000100090000000c00050000000000000000002a49ccb9bc20d51cd2ae1e5c5dc9bd4efca1400bca1b88c13eefd937c0e19db9ec72cdf105957a7d739e64fef2e9b970a78251526e87fb8be720d6afca091648f5addcabe37ae1bb820e7231dfcf4546c06e4ba4cd5fa32da7d1b46270de66a18df5efc0646d979cd87e88ef38fa60aa3f043c05d499a12aee741b"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040815) (async) write$auto(0x3, 0x0, 0xffd8) (async) write$auto(r5, &(0x7f0000000000)='\x14\xf4\xb6\xc6\x97\xdb\x18B\f\xef\x1dQZ\xa66\xe7\x06\\\xe0)+\x86\xa7\x9bv\xe1\x18\xf5\x83\b\x11\x19\xdd\x1c', 0x7e) r7 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_FIOQSIZE(r7, 0x5460, 0x8) ioctl$auto_PPPIOCSMRU(r7, 0xc004743e, 0x0) (async) ioctl$auto_PPPIOCSPASS(r7, 0x40107447, 0x0) (async) ioctl$auto_SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000000c0)) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, r3, 0x28000) write$auto(0x3, 0x0, 0xffd8) 8m2.930044936s ago: executing program 4 (id=1339): mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) r0 = socketpair$auto(0x21, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0xe, 0x7, 0x1, 0x9b72, 0xffffffffffffffff, 0x8000) futex$auto(0x0, 0x109, 0xb, 0x0, 0x0, 0xa) r1 = socket(0x28, 0x5, 0x0) bind$auto(r1, 0x0, 0x68) bind$auto(0x3, &(0x7f0000000040)=@l2tp={0x2, 0x0, @empty, 0xffffffff}, 0x66) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/037/001\x00', 0x82202, 0x0) ioctl$auto_USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000000)={0x20, 0xc, 0x4, 0x6, 0x101, 0x8000004, &(0x7f0000001180)}) io_uring_setup$auto(0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) socket(0x2, 0x3, 0xa) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty12\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) statx$auto(r0, 0x0, 0x2001003, 0x4005, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = socket(0x2, 0x2, 0x0) getsockopt$auto(r3, 0x0, 0x17, 0xfffffffffffffffc, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x200, 0x0) 8m2.774486941s ago: executing program 4 (id=1341): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) unshare$auto(0x40000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000001840), r1) sendmsg$auto_MACSEC_CMD_UPD_TXSA(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000018c0)={0x28, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@MACSEC_ATTR_SA_CONFIG={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @uid}]}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x200480c7}, 0x80) mmap$auto(0x0, 0x1, 0x6, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0xffffffff, 0x1, 0x3, 0x800000000000015, r0, 0x8000) bind$auto(0x3, 0x0, 0x6a) setpgid$auto(0x0, 0xffffffffffffffff) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = getpid() openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp6\x00', 0x0, 0x0) process_vm_readv$auto(r5, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r7 = ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r7) sendmsg$auto_NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r7, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xe8, r8, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_HT_CAPABILITY={0xbd, 0x1f, "5ea8a2f478fdbd9a8ffffbf82eacc34bbcf272bee1315f4d5df3aa89a24d2e58d145cb249050fe734b9a50c56e540b3fdd5bbbe4e5a52057323061bdd1316320fbbcacd04838da34e61b237d0ca389b49099937b5d49f86ffd8ffd833fd1a5c7b73cb5aeec1c0048ec9feeb12ae4aae9485391a2d5864c98b20e10c8e1fa85f9102ec295cd9612b86226080c4c444f349cb02b11fb40e96bc805ccba42306550f536c5a7793a5ee3f0cc2c617b56ec0387512d59a80f8f1bac"}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, 0x7}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x60000) r9 = setfsuid$auto(0xee00) setreuid$auto(r9, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x0) r10 = bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb8, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0xf) bpf$auto(0x19, &(0x7f0000000380)=@link_create={@map_fd, @target_fd=r10, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) 8m0.693315195s ago: executing program 4 (id=1344): r0 = socket(0x10, 0x2, 0x0) bpf$auto(0xff, &(0x7f00000004c0)=@bpf_attr_5={@target_fd, 0xffffffffffffffff, 0x4, 0x5, 0xffffffffffffffff, @relative_id=0x4, 0x5}, 0x3fc) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='f\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x700, &(0x7f0000000100)={&(0x7f0000000580), 0xfc2}, 0x2, &(0x7f0000000000), 0x7, 0xa502}, 0x803}, 0x4, 0x8) open(&(0x7f0000000380)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x103040, 0xd1) 8m0.544422712s ago: executing program 4 (id=1346): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x20000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(r0, 0x7, 0xffffffffffffffff) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0x10, 0x404, 0x8002) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x400000003) r3 = openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000040)="8c9700089d1b208365d5b5d112dbab029ed13881d2f2c7ba2eb01c3db79f77fdc2bb50c64a925009dff4cd1aca925c57100112d88f73348a54396800ed598a0e", 0x40000000001243}, 0x4, 0x0) ioctl$auto(r3, 0x400454ca, 0x38) ioctl$auto_XFS_IOC_ERROR_CLEARALL(0xffffffffffffffff, 0x40085875, &(0x7f0000000100)={r3, 0x1160}) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, r5, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto(0x3, 0xc, r0) ioctl$auto_KVM_CREATE_VM(r5, 0x41a0ae8d, 0x0) write$auto_event_trigger_fops_trace(r4, &(0x7f0000000240)="880057d29220e44ba3e4424dd70124822ed6c25de5c80580010fff00044472aa2ace31f99f64c109977ec69ac8080ba44cc020d111ed710c38cb4b0919eda002121b4f5c9fe8e240685c46207029994a4165cef4a9818438a2addd67144f00d09de466f705e127c5525c1541346bd0e203977cc75d", 0x75) r6 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r6, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xb180, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f89300a86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa}) setresgid$auto(0x81, 0x800000a0, 0x8) acct$auto(&(0x7f0000000100)='/dev/snd/controlC1\x00') 7m59.490499679s ago: executing program 4 (id=1352): r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0x101401, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0x101401, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x18, 0x3, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/sleep_millisecs\x00', 0x0, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) write$auto(0x3, 0x0, 0xfffffdef) (async) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000180)="868d180916c735e093b9861f0bde02ef6484efd1225c2444fcc82c0d59436954f1c5f1868337cc88c0551ac5e2456b2d59f35d15836a45174dd7a65e2b9c11584402a2d233711c1075c65047b196855f291971f6fa05a6ce417e5956bc9c1b3d364815d3f66cf7e1f2579c955b9490f89af6f234d145f17a3830dd2773e81e48dae316b7eedc93a2d3aa1f6e25ae9345a238bb040fbe002bfa003e9067ebdc1eff0c263241c8f40b", 0xa8) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0x8, 0xe) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socket(0x2b, 0x5, 0x20) (async) mlock$auto(0x112, 0x80006) kexec_load$auto(0x800, 0x3, &(0x7f0000000100)={@kbuf=&(0x7f0000000040)="dce02d02aed5373c79fa9556fa32ed0aacfba06c42a4e390548a6eadf1a397f741c392927728bdc543a37e5fc654e88e6caead23880432f96664f8d08a84007a5e41dabf4672094ce0b2670de44a72ac572e0c2ae08dd268044ee5709e37f280550eca38427f0c3417fe6b2e4303d96fe7176a8596c52498abf43b46a9b41bf608395c61a68bd575a351cb328efec0eab7eecdc84dd7b1295b14db812f0d6e0e433bae3dafdc86d6d327016c1ad396054008c32e5bd5bad9069c3db2d10f", 0x3, 0x8, 0x7}, 0x3) madvise$auto(0x0, 0xffffffffffff0001, 0x17) (async) r2 = accept$auto(r1, &(0x7f0000000140)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, &(0x7f0000000240)=0x7) mmap$auto_def_blk_fops_fs(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x13, r2, 0xc) (async) mincore$auto(0x1000, 0x8001, 0x0) 7m43.822948462s ago: executing program 34 (id=1352): r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0x101401, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0x101401, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x18, 0x3, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/sleep_millisecs\x00', 0x0, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) write$auto(0x3, 0x0, 0xfffffdef) (async) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000180)="868d180916c735e093b9861f0bde02ef6484efd1225c2444fcc82c0d59436954f1c5f1868337cc88c0551ac5e2456b2d59f35d15836a45174dd7a65e2b9c11584402a2d233711c1075c65047b196855f291971f6fa05a6ce417e5956bc9c1b3d364815d3f66cf7e1f2579c955b9490f89af6f234d145f17a3830dd2773e81e48dae316b7eedc93a2d3aa1f6e25ae9345a238bb040fbe002bfa003e9067ebdc1eff0c263241c8f40b", 0xa8) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0x8, 0xe) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socket(0x2b, 0x5, 0x20) (async) mlock$auto(0x112, 0x80006) kexec_load$auto(0x800, 0x3, &(0x7f0000000100)={@kbuf=&(0x7f0000000040)="dce02d02aed5373c79fa9556fa32ed0aacfba06c42a4e390548a6eadf1a397f741c392927728bdc543a37e5fc654e88e6caead23880432f96664f8d08a84007a5e41dabf4672094ce0b2670de44a72ac572e0c2ae08dd268044ee5709e37f280550eca38427f0c3417fe6b2e4303d96fe7176a8596c52498abf43b46a9b41bf608395c61a68bd575a351cb328efec0eab7eecdc84dd7b1295b14db812f0d6e0e433bae3dafdc86d6d327016c1ad396054008c32e5bd5bad9069c3db2d10f", 0x3, 0x8, 0x7}, 0x3) madvise$auto(0x0, 0xffffffffffff0001, 0x17) (async) r2 = accept$auto(r1, &(0x7f0000000140)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, &(0x7f0000000240)=0x7) mmap$auto_def_blk_fops_fs(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x13, r2, 0xc) (async) mincore$auto(0x1000, 0x8001, 0x0) 3m0.779265582s ago: executing program 6 (id=2602): close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x1010, 0x0) r0 = timerfd_create$auto(0x76800000, 0x400) getxattrat$auto(0xffffffffffffffff, 0x0, 0x1000, 0x0, &(0x7f00000001c0)={0x0, 0x10001, 0x10000}, 0x1381) unshare$auto(0x40000080) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, 0x0, 0x40001, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x81) socket(0xa, 0x1, 0x100) setitimer$auto(0x94e, &(0x7f00000001c0)={{0xffffffffffffffe7, 0xa4}, {0x7, 0x4}}, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000600)='/proc/sys/vm/dirty_background_bytes\x00', 0x81, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r3 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2404c000) write$auto(r3, &(0x7f0000000000)='-\x00', 0x2fb) mmap$auto(0x0, 0x2020009, 0xbd01, 0x198, 0xfffffffffffffffa, 0x8000) timerfd_settime$auto(r3, 0x4, &(0x7f0000000040)={{0x7fffffff, 0x1}, {0x0, 0x4f}}, &(0x7f0000000180)={{0x5, 0xc903}, {0x2, 0x7fffffff}}) ioctl$auto_FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000200)={0xd, 0xe378, 0x2, 0x7ff800, 0x7, 0xfff, 0x0, 0x1}) r4 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x8203, 0x0) ioctl$auto(r4, 0x10001, 0x38) r5 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder1\x00', 0x240, 0x0) ioctl$auto_BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000000)="fc1c4959f721a2458364a2b1590d19513f344e1b39cecffdd8") syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) lseek$auto(0x3, 0xff, 0x2) 2m58.82643661s ago: executing program 6 (id=2607): statmount$auto(&(0x7f0000000000)={0xa, @raw=0x4, 0x1, 0xffffffffffffb472, 0xcb02}, &(0x7f0000000040)={0x5a51be88, 0xa1, 0xfffffffffffffffa, 0xc, 0x6c, 0x5, 0x2, 0x8, 0x8, 0x7f, 0x200, 0x4, 0x7, 0x6, 0x10001, 0x100000001, 0x1, 0xd, 0xd, 0x77b9, 0x81, 0x7, 0x0, 0x0, 0x0, 0x8025, 0x5, 0x10000, 0xb, 0x6, 0x6, [0x0, 0x0, 0x7, 0x2, 0x2, 0xe, 0x3, 0x100000000, 0x1, 0x8, 0x101, 0x1, 0x10000, 0xaee2, 0xeb2, 0x3, 0xb, 0x69, 0xa66, 0x8000, 0xffffffffffffffff, 0x0, 0x8000, 0xd11, 0x8, 0x49, 0x0, 0x7fffffffffffffff, 0x7, 0x800, 0x80000000, 0x6, 0x8, 0x6, 0x7, 0x200, 0x1ff, 0x3, 0x7, 0x7, 0x9, 0x2, 0xffff], "66c64efb7fdd75429f44fa802c0c25ba7ba4f51c742352e268d10b373168"}, 0x9a4e, 0x2798413) ppoll$auto(&(0x7f0000000280)={0xffffffffffffffff, 0x3, 0x6}, 0xb026, &(0x7f00000002c0)={0xa, 0x9}, &(0x7f0000000300)={0x332}, 0x8) sendmmsg$auto(r0, &(0x7f00000005c0)={{&(0x7f0000000340)="1f78fd1f4fa200796e94366a51caaf77634fb69e51c4032d50bb815d4a0508bb977cfeb66508ce9ff5969a924ff7226810894dd7d0c9e4c62009cd45b98a72aed331a96989b3e65cccef59d88c3dfd46c881cf7296a2d1a0df85ae533d18392c3de24cf0322973395dd8527b93d9bcba8465c696b35bc6158e7699281cdec9a700c9dbb33e", 0x1, &(0x7f00000004c0)={&(0x7f0000000400)="d56dab658cfc7b632cd7928848fdce3ca6df664ffdd1b58fd43bdd9edf02d0d41dc5d1f2f3e807dd863b96ccd828a1b5f9f52454b1eb25b29b4a0eb6672ecbdb460a0ff404b8d2405aa7e1114c101538d83d67cfadc4fd080851f7bdd45c37c765b30aef1c463904927b864974fe204c1bb54d6621529f69174dac4fc3c3bee178ec5a88db26b0091838ca3ed4d20078462055d08edca5b953d71612b77c", 0x3}, 0x8, &(0x7f0000000500)="42d1da5081af3458e9dca85c4e8a2467e3aa0d1e1ce9afd61ac6d7ac481f98aa33a519cd280b8215a5e6e64391b3d8c6df350cde663727aabdd06224303b6060285f0266d6492bbe0a6ac8c8fc68063778ba8131b3544f29a100391a477c0ebdf0f817ff8492eff9161963d819312e57856b69530f65d83a51b3ab8e0c2fd80b558500066ef62b2521ab27c0a89e984b6c04989d450046", 0x5, 0xfffffff8}, 0x7ff}, 0x6, 0x7) select$auto(0x1, &(0x7f0000000600)={[0x8, 0x1, 0xb, 0x3, 0x5, 0x8, 0xd3b, 0x3, 0x101, 0x8000000000000001, 0x100000001, 0xfffffffffffffff2, 0x100000000, 0x7c, 0x9, 0x101]}, &(0x7f0000000680)={[0x0, 0xba8, 0xffffffff, 0x2, 0x42d1, 0x2, 0x7, 0x82, 0xe670, 0xffff, 0x1, 0x6, 0xfa, 0x2, 0x7, 0x1]}, &(0x7f0000000700)={[0xe74, 0x0, 0x7, 0xe27f, 0x6, 0x81, 0x0, 0x9, 0x10001, 0x6, 0x651f, 0x8, 0x75, 0x4, 0x5, 0x3]}, &(0x7f0000000780)={0x2, 0x5}) fadvise64$auto_POSIX_FADV_SEQUENTIAL(r0, 0x5, 0x3ff, 0x2) setsockopt$auto_SO_BUSY_POLL(r0, 0x7fff, 0x2e, &(0x7f00000007c0)='*%!.@:[\xce!\x00', 0x10001) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/kernel/debug/block/loop3/rqos/wbt/unknown_cnt\x00', 0x9002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000840)='/sys/devices/platform/vivid.0/media10/power/runtime_active_time\x00', 0x20000, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$auto_NET_SHAPER_CMD_GROUP(r1, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x30, 0x0, 0x5dc53d5417e0e991, 0x70bd2d, 0x25dfdbfc, {}, [@NET_SHAPER_A_LEAVES={0xc, 0xa, 0x0, 0x1, [@NET_SHAPER_A_PRIORITY={0x8, 0x6, 0x7b5}]}, @NET_SHAPER_A_PRIORITY={0x8, 0x6, 0xcc}, @NET_SHAPER_A_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x814}, 0x20000001) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/input/event2\x00', 0x8000, 0x0) ioctl$auto_EVIOCGKEYCODE(r2, 0x80084504, &(0x7f0000000a00)=[0x3, 0x1]) 2m57.883327916s ago: executing program 3 (id=2612): openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0xd, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) read$auto_usbfs_devices_fops_usb(r0, &(0x7f0000000040)=""/37, 0x25) getpid() setsockopt$auto(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x6f7250c4) read$auto_regulator_summary_fops_(r0, &(0x7f00000002c0)=""/153, 0x99) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x5) ioctl$auto(r1, 0x0, r1) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) socketpair$auto(0x1f, 0x5, 0x8000000000000000, 0x0) ioctl$auto_TCFLSH2(r2, 0x80045439, 0x0) ioctl$auto_VHOST_NET_SET_BACKEND(r1, 0x4008af30, 0x0) mmap$auto(0x5, 0x800400007, 0x65d, 0xffff, 0xffffffffffffffff, 0x20000000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ram6\x00', 0xc6fc1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0x7fffffff) r3 = epoll_create$auto(0x5) fremovexattr$auto(0xffffffffffffffff, &(0x7f0000000000)='\xa7\x92') read$auto_v4l2_fops_v4l2_dev(r3, &(0x7f0000000280)=""/54, 0x36) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x200, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0xa, 0x2, 0x88) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000003fc0)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20a02, 0x0) 2m57.590870937s ago: executing program 6 (id=2613): bpf$auto(0x15, &(0x7f0000000040)=@bpf_attr_3={0x40, 0x5, 0x0, 0x5, 0x5, 0x8000, 0x7, 0x10001, 0x4, "83d3515324672ff2b8774181fece01af", 0x0, 0x8f6, 0xffffffffffffffff, 0xc0, 0x6ed, 0xd14f, 0x10, 0x1ff, 0x6, 0x3, @attach_prog_fd, 0x672, 0x4, 0x3ff, 0x4, 0x6}, 0x92) r0 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x7, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x0, 0x8000000000000000, 0x0) madvise$auto(0x0, 0x3, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) setrlimit$auto(0x7, &(0x7f0000000080)={0x0, 0x6}) eventfd$auto(0x80) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) setresuid$auto(0x909b, 0x1, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x3c, 0x0, 0x7) sendmsg$auto_MACSEC_CMD_ADD_TXSA(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x2a8}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040811) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100cda4429629bd7100f9db5f2502"], 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa507}, 0x800}, 0x7, 0x8) 2m57.128677368s ago: executing program 6 (id=2614): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x800000000012, 0x4, 0x80000001, 0x8}, 0x6f4) mmap$auto(0xc8, 0xa00002, 0x400002, 0xfffffffffffffffd, 0x602, 0x10004) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(r1, 0xffffffffffffffff, 0xc4c6) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) write$auto(0x3, 0x0, 0xfffffdef) select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x2, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x6, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) select$auto(0x8, &(0x7f00000000c0)={[0xeeda, 0x7, 0x6, 0x9, 0x34, 0x1ff, 0x6, 0x4, 0x5, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8e, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f00000001c0)={0x6, 0x2}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00042dbd7000fbe2df2502000000080002000100000028e5ff102d084475a9db785e92655ba955715583cc8a50063b3f5b86a34d4538191f112a8151d1cd40b92ef28fecf0ee5384dc719adb2cdb504b5061949d21c6c08399099c7aeb25a44be34571d51bd758e1d8a1135a4f734dc9494b025b6bdf4fbbf44b5355558911de93218243672f35b4eebeff5095141729de40aee41da2a874a3096581f618dd02d4f9ea95617b64f8b2b91222aa5c540d25e26833945b44d647c86bb617"], 0x1c}, 0x1, 0x0, 0x0, 0x24008054}, 0x40) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000ffdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='Z'], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) socket(0x10, 0x2, 0xc) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) 2m57.123486765s ago: executing program 5 (id=2622): mmap$auto(0x0, 0x2020009, 0xa0e2, 0xeb2, 0xfffffffffffffffb, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) setresgid$auto(0x800, 0xee01, 0xffffffffffffffff) openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000000), 0xc0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x80805, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/smaps_rollup\x00', 0x40a000, 0x0) memfd_secret$auto(0x0) fchownat$auto(0x2, 0x0, 0x4, 0x8001, 0x1000) 2m57.042036781s ago: executing program 5 (id=2615): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_SET(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) sendmsg$auto_NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r1, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xff0a}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x40) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES8=r0], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x404c000) r2 = socket(0x10, 0x2, 0x4) write$auto(r2, &(0x7f0000000000)='-\x00', 0x2fb) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r5 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek$auto(r5, 0x7fd, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/pci0000:00/waiting_for_supplier\x00', 0x80800, 0x0) sendfile$auto(0x1, r4, 0x0, 0x4000000008) mmap$auto(0x7f, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7ffd) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x23, 0x0, 0x9) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) getsockopt$auto(0x3, 0x200000000001, 0x1d, 0x0, 0x0) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) fsconfig$auto(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket(0x2, 0x3, 0xa) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f0000000280)=@bpf_attr_0={0xa, 0x200000b8, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2a3ce63f0000f8ffffff00", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0xf) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r6, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000480), r2) openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/smaps\x00', 0x4928ac0f2a6d9dda, 0x0) 2m55.961402768s ago: executing program 5 (id=2616): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x477, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x0, 0x7, 0x3fd6, 0x0, 0x1ffffffe) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) ioctl$auto(0x3, 0x8905, 0x38) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0x240007, 0x19) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="b3275836bee9e96901210890e1f2fc5874f1c4ec467fa8d6f164b136ea38b68a7cc50c8c7c351cd61499faef66f87f13239b626ef527d7b5a1c277e55820bea64372f7af7d4eec4ca3f5f545fa333f68f55c", @ANYRES16=r2, @ANYBLOB="010031bd7000fddbdf250c0000000c0003800800038004000580"], 0x20}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kfence/parameters/sample_interval\x00', 0x102, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) bpf$auto(0x2, 0x0, 0x1) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x7f, 0x8000) socket(0x10, 0x2, 0x0) setsockopt$auto(0x3, 0x1, 0x22, 0x0, 0x9) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r4, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) 2m55.959626409s ago: executing program 3 (id=2617): mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/btrfs/features/temp_fsid\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000080)=""/58, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(r1, 0x104000000000010e, 0xa, 0x0, 0x3) 2m55.737217006s ago: executing program 3 (id=2618): socket(0x1d, 0xa, 0x1) setsockopt$auto(0x400000000000003, 0x29, 0x16, 0x0, 0x20056b) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r0 = open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x15, r0, 0x800) mlockall$auto(0x2) setresuid$auto(0x2, 0x7, 0x8080) mmap$auto(0xf000, 0x4, 0x2, 0x9b72, 0x2, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x80000000000000, 0x2000c, 0x4000000000db, 0x12, 0x400, 0x18002) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb701, 0x0) getsockopt$auto_SO_LINGER(0xffffffffffffffff, 0xc00000, 0xd, &(0x7f0000000100)='MAC802154_HWSIM\x00', &(0x7f0000000140)=0x8) io_cancel$auto(0x90ee, &(0x7f0000000080)={0x400, 0x154e, 0x4f, 0x8, 0x5, r2, 0xc, 0xffffffff7fffffff, 0x7, 0x0, 0xd9}, &(0x7f00000000c0)={0xffffffffffffffff, 0x4, 0xfffffffffffffff0, 0xa610}) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r3 = socket(0x10, 0x5, 0x19) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) read$auto(r3, &(0x7f0000002300)='MAC802154_HWSIM\x00', 0xfdef) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x34d802, 0x0) r4 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/binderfs/binder0\x00', 0x102, 0x0) r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r5, &(0x7f0000000000)="c80d1b5d399b41", 0x7) ioctl$auto_BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r6 = openat$auto_state_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x1e9482, 0x0) read$auto_state_fops_(r6, &(0x7f0000000180)=""/61, 0xfffffeeb) 2m55.321991825s ago: executing program 6 (id=2619): r0 = inotify_init1$auto(0x2) unshare$auto(0x40000080) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) write$auto_tomoyo_operations_securityfs_if(r1, &(0x7f0000000100)="0a1b9a525c7b0f8262cd0a", 0xb) r2 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) r3 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x0, 0x0) ioctl$auto_SG_GET_LOW_DMA(r3, 0x227a, &(0x7f0000000040)) ioctl$auto_UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fb4a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f00", 0xa}) ioctl$auto_UI_DEV_CREATE(r2, 0x5501, 0x0) writev$auto(r2, &(0x7f0000000340)={0x0, 0x500000}, 0x9) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) socket(0x1d, 0x2, 0x6) socket(0x10, 0x2, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0000be39", @ANYRES64=r0, @ANYRESDEC=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x20008810) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r4, 0x4, 0x7ff) ptrace$auto(0x6, r4, 0x3b, 0xfffffffffffffff6) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x2000, 0x0) r5 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto(r5, 0x40044620, 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_GET_RADIO(r0, 0x0, 0x20000010) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r6) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006400)={0x2e20, r7, 0x1, 0x51bd2e, 0x25dfcbfb, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x2e07}]}, 0x2e20}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4) 2m54.693695349s ago: executing program 3 (id=2621): statmount$auto(&(0x7f0000000000)={0xa, @raw=0x4, 0x1, 0xffffffffffffb472, 0xcb02}, &(0x7f0000000040)={0x5a51be88, 0xa1, 0xfffffffffffffffa, 0xc, 0x6c, 0x5, 0x2, 0x8, 0x8, 0x7f, 0x200, 0x4, 0x7, 0x6, 0x10001, 0x100000001, 0x1, 0xd, 0xd, 0x77b9, 0x81, 0x7, 0x0, 0x0, 0x0, 0x8025, 0x5, 0x10000, 0xb, 0x6, 0x6, [0x0, 0x0, 0x7, 0x2, 0x2, 0xe, 0x3, 0x100000000, 0x1, 0x8, 0x101, 0x1, 0x10000, 0xaee2, 0xeb2, 0x3, 0xb, 0x69, 0xa66, 0x8000, 0xffffffffffffffff, 0x0, 0x8000, 0xd11, 0x8, 0x49, 0x0, 0x7fffffffffffffff, 0x7, 0x800, 0x80000000, 0x6, 0x8, 0x6, 0x7, 0x200, 0x1ff, 0x3, 0x7, 0x7, 0x9, 0x2, 0xffff], "66c64efb7fdd75429f44fa802c0c25ba7ba4f51c742352e268d10b373168"}, 0x9a4e, 0x2798413) ppoll$auto(&(0x7f0000000280)={0xffffffffffffffff, 0x3, 0x6}, 0xb026, &(0x7f00000002c0)={0xa, 0x9}, &(0x7f0000000300)={0x332}, 0x8) sendmmsg$auto(r0, &(0x7f00000005c0)={{&(0x7f0000000340)="1f78fd1f4fa200796e94366a51caaf77634fb69e51c4032d50bb815d4a0508bb977cfeb66508ce9ff5969a924ff7226810894dd7d0c9e4c62009cd45b98a72aed331a96989b3e65cccef59d88c3dfd46c881cf7296a2d1a0df85ae533d18392c3de24cf0322973395dd8527b93d9bcba8465c696b35bc6158e7699281cdec9a700c9dbb33e", 0x1, &(0x7f00000004c0)={&(0x7f0000000400)="d56dab658cfc7b632cd7928848fdce3ca6df664ffdd1b58fd43bdd9edf02d0d41dc5d1f2f3e807dd863b96ccd828a1b5f9f52454b1eb25b29b4a0eb6672ecbdb460a0ff404b8d2405aa7e1114c101538d83d67cfadc4fd080851f7bdd45c37c765b30aef1c463904927b864974fe204c1bb54d6621529f69174dac4fc3c3bee178ec5a88db26b0091838ca3ed4d20078462055d08edca5b953d71612b77c", 0x3}, 0x8, &(0x7f0000000500)="42d1da5081af3458e9dca85c4e8a2467e3aa0d1e1ce9afd61ac6d7ac481f98aa33a519cd280b8215a5e6e64391b3d8c6df350cde663727aabdd06224303b6060285f0266d6492bbe0a6ac8c8fc68063778ba8131b3544f29a100391a477c0ebdf0f817ff8492eff9161963d819312e57856b69530f65d83a51b3ab8e0c2fd80b558500066ef62b2521ab27c0a89e984b6c04989d450046", 0x5, 0xfffffff8}, 0x7ff}, 0x6, 0x7) select$auto(0x1, &(0x7f0000000600)={[0x8, 0x1, 0xb, 0x3, 0x5, 0x8, 0xd3b, 0x3, 0x101, 0x8000000000000001, 0x100000001, 0xfffffffffffffff2, 0x100000000, 0x7c, 0x9, 0x101]}, &(0x7f0000000680)={[0x0, 0xba8, 0xffffffff, 0x2, 0x42d1, 0x2, 0x7, 0x82, 0xe670, 0xffff, 0x1, 0x6, 0xfa, 0x2, 0x7, 0x1]}, &(0x7f0000000700)={[0xe74, 0x0, 0x7, 0xe27f, 0x6, 0x81, 0x0, 0x9, 0x10001, 0x6, 0x651f, 0x8, 0x75, 0x4, 0x5, 0x3]}, &(0x7f0000000780)={0x2, 0x5}) fadvise64$auto_POSIX_FADV_SEQUENTIAL(r0, 0x5, 0x3ff, 0x2) setsockopt$auto_SO_BUSY_POLL(r0, 0x7fff, 0x2e, &(0x7f00000007c0)='*%!.@:[\xce!\x00', 0x10001) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/kernel/debug/block/loop3/rqos/wbt/unknown_cnt\x00', 0x9002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000840)='/sys/devices/platform/vivid.0/media10/power/runtime_active_time\x00', 0x20000, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$auto_NET_SHAPER_CMD_GROUP(r1, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x30, 0x0, 0x5dc53d5417e0e991, 0x70bd2d, 0x25dfdbfc, {}, [@NET_SHAPER_A_LEAVES={0xc, 0xa, 0x0, 0x1, [@NET_SHAPER_A_PRIORITY={0x8, 0x6, 0x7b5}]}, @NET_SHAPER_A_PRIORITY={0x8, 0x6, 0xcc}, @NET_SHAPER_A_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x814}, 0x20000001) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/input/event2\x00', 0x8000, 0x0) ioctl$auto_EVIOCGKEYCODE(r2, 0x80084504, &(0x7f0000000a00)=[0x3, 0x1]) 2m54.201337839s ago: executing program 0 (id=2624): syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000100), 0xffffffffffffffff) symlink$auto(&(0x7f0000000140)='./file0/../file0/file0\x00', &(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000100)='./file0/../file0/file0\x00', 0x903080, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nbd8\x00', 0x4e0dc3, 0x0) pidfd_open$auto(0xffffffffffffffff, 0x3) sendmsg$auto_ETHTOOL_MSG_FEC_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x9}}, 0x404c085) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x48100, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x400000003) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="010024bd3000fedbdfa504"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) ioctl$auto_KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000200)={0x68, 0xee01, 0x2}) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) ioctl$auto(r5, 0x400c4d02, 0x7) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ptrace$auto_ARCH_SHSTK_LOCK(0x80000001, 0x0, 0x7, 0x5003) landlock_restrict_self$auto(0xffffffffffffffff, 0x1ffff) socket(0xa, 0x2, 0x88) mmap$auto(0x0, 0x80006, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0xfffffffe) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) 2m54.12698717s ago: executing program 5 (id=2625): close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r2) r4 = getpid() connect$auto(r2, &(0x7f0000000200)=@ethernet={0x306, @broadcast}, 0x8e6) process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={0x0, 0xf}, 0x5b, 0x0) r5 = waitid$auto_P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000080)={@_si_pad}, 0x3, &(0x7f0000000100)={{0x1, 0x4}, {0xc000000000000000, 0x7}, 0x8000, 0x4, 0x2, 0x7, 0x5, 0x255, 0xffffffffffffffff, 0xfff, 0xfffffffffffffc00, 0xff, 0xfb67, 0xa, 0x5, 0xfffffffffffffffe}) shmctl$auto_IPC_STAT(0x8, 0x2, &(0x7f00000003c0)={{0x72d, 0xee00, 0xee01, 0xf, 0xffffffff, 0x8, 0x210e}, 0x1, 0xe, 0xffffffffffffffff, 0x6, @raw=0x10, @inferred=r5, 0xa, 0x0, &(0x7f00000002c0)="88684369c6a33b5e6141078e9203f7f8df295f1a7d8e2a0ee157d39920a08f8c8310e9cf50c0dcd2ca1ec7db22171908d21af4639f0c05bb4bfd5180990b2195c6e6e52424d0b83787cf7824e4c75ede834ed7f2544191836a31c5c6df9cde8649506f4ef6449b5955636066a93a2c5674fd9c25e5f735b66630e760014de1f7ad75b00066a184d5ce3f12fb4914146e052d5c6b7858e537a817b6e3ffd1aea4a3fd18deb6f0bda7cfbe7d7eb822a27dff1c92715a20700b9932d989c4a01f0ae4f83265f1295df980511c1991b4af98d64a06584771b14581c9da8a88", &(0x7f00000001c0)="17cc4591de6ca92e4febe9e85211f61c3a2decb2a8ff7850f8d3b32d468840a3f8a490aa6f58d23668586fd3a80613ff1a0222805fbe8b9115faa3730df9"}) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r2, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002e80)=ANY=[@ANYBLOB="54150000", @ANYRES16=r3, @ANYBLOB="01002abd7000fbdbdf25010000000400018087130180dd00dc800400bc8008007200", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="040092800400e280006a9d0d0a75db08000800", @ANYRES32=0x0, @ANYBLOB="00ba00018021d7a56419fa6cfe0cf12836adbdc514fa11c75fe40402000000000000009ce53ff0ba73bde87f0000005cd99c5e39f9e85180578ac89075da01edff5905a19598b2732c6782e803fd88da4befbe96095fb178835f01128a98e5128c47ad672bfa18bb51647f0ef4650ca523edb3314624fed2a134fa89267350283e643fdbc18785b34a465472e1dce5074441d49eb973e0d0e8598038d7d6cbe2f9a929f86800c5278f694e08006100", @ANYRES32=r6, @ANYBLOB="08001000090000000000f70001801800f98014000800200100000000000000000000000000011a8a5a7c5d54321cfcd73e7f95c4ffa27fceab05cf575143327799c78da074f5b39c594efaba84e03d8e11ffe7e535106cd27df8b3c00e5f305eb3feef7ccfc58cd61b98cd073fe7045e6b717f557fe2de188d0009220c0d43c296e09482f0c4a2b6f543b2faa5b8e4ab49af6fd80d9b1049546a51396a1442d630a23a55f0d58c718598f25783dd2f1254abeeaac1428a4eebce811bf7abfddee18d536be0ce1fc2afb17bcf016e751761c764419885d1a98decd584016716ee290b0e111be6922c1f1f223a67ca1730492132ca700c008a8004006f800400108000"], 0x1554}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) r7 = socket(0x2000000000000021, 0x2, 0x10000000000002) shutdown$auto(0x200000003, 0x2) setsockopt$auto(r7, 0x110, 0x7, 0x0, 0x4) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x40, r1, 0x1b, 0x70bd25, 0x25dfdbfe, {}, [@OVS_PACKET_ATTR_MRU={0x0, 0x9, 0x2}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x2, 0x0, 0x1, [@typed={0x5f, 0x1, 0x0, 0x0, @u64=0x5}]}]}, @OVS_PACKET_ATTR_PROBE, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040}, 0x4800) 2m53.948927271s ago: executing program 5 (id=2626): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffffffd}, 0x10001}, 0x5, 0x20000000) prctl$auto_PR_TIMER_CREATE_RESTORE_IDS(0x4d, 0xf, 0x0, 0x0, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) ioctl$auto_PPPIOCSMRRU(r1, 0x4004743b, 0x0) write$auto(0xca, &(0x7f0000000000)='\x04#\x01\n2\x7f\x88\x83\xa9\xd7\xbea\xcd\x00\x00\x00\xef\xabJY\xee,\xf6\x80\xecP\x9f\x00\x00\x00\x00\x00\x00\x00\x80\xe0Z\x1bsZ\xac\xff\x92+\xc9\x9fs\xbf\xd8\f\xf5\xa7jUA\x11\xf9\xb4U\xc5\x92\xf1', 0x82) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r2) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000fbdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200ff00000005000500030000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000840}, 0x2000c840) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000080)="f66026f1a5f19d7d7fba5f5156d52cdaee5926e18a17bffc7df4913979b4e5e93ca377d7a88dba42c64f74e9b86c52f143c9c6e18cfe2b31", 0xb0, &(0x7f00000000c0)={&(0x7f00000001c0)="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", 0x6}, 0x2, &(0x7f0000000100)="1fd1150eaa1d752cee3e0a7115261e7fb3fba4e8", 0x40, 0x200}, 0xf}, 0x1ff, 0x40) prctl$auto_PR_GET_TID_ADDRESS(0x28, 0x2, 0x0, 0x0, 0x40) setsockopt$auto(0x3, 0x6, 0x3, 0x0, 0xd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d1, 0x1, 0x0, 0x6, 0x2) write$auto(0x3, 0x0, 0xfffffdef) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) socket(0x2, 0x3, 0xa) sendfile$auto(0x1, 0x3, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 2m53.196425707s ago: executing program 0 (id=2627): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto_KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000003900)='\t', 0x1) msgrcv$auto(0xff, &(0x7f00000000c0)={0x6, 0xd}, 0x2400000000, 0x6, 0x6bc2cc7d) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/workqueue/parameters/default_affinity_scope\x00', 0x1a9242, 0x0) sendfile$auto(r2, r2, 0x0, 0x5) 2m53.131283945s ago: executing program 3 (id=2628): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r0) sendmsg$auto_NL802154_CMD_SET_PAN_ID(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000011c0)=ANY=[], 0x1058}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="ee8c6d5dd86692fbdf257e0000020800db00", @ANYRES32=r2, @ANYBLOB="0c002e010010000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) sendmsg$auto_NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="810b25bd7080fbdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) recvmmsg$auto(r0, &(0x7f0000000180)={{0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x6}, 0x803}, 0x10a, 0x6, 0x0) getsockopt$auto_SO_TYPE(r0, 0x1, 0x3, &(0x7f0000000240)='nl80211\x00', &(0x7f0000000280)=0x7) 2m52.845054579s ago: executing program 3 (id=2629): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x800000000012, 0x4, 0x80000001, 0x8}, 0x6f4) mmap$auto(0xc8, 0xa00002, 0x400002, 0xfffffffffffffffd, 0x602, 0x10004) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(r1, 0xffffffffffffffff, 0xc4c6) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) write$auto(0x3, 0x0, 0xfffffdef) select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x2, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x6, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) select$auto(0x8, &(0x7f00000000c0)={[0xeeda, 0x7, 0x6, 0x9, 0x34, 0x1ff, 0x6, 0x4, 0x5, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8e, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f00000001c0)={0x6, 0x2}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00042dbd7000fbe2df2502000000080002000100000028e5ff102d084475a9db785e92655ba955715583cc8a50063b3f5b86a34d4538191f112a8151d1cd40b92ef28fecf0ee5384dc719adb2cdb504b5061949d21c6c08399099c7aeb25a44be34571d51bd758e1d8a1135a4f734dc9494b025b6bdf4fbbf44b5355558911de93218243672f35b4eebeff5095141729de40aee41da2a874a3096581f618dd02d4f9ea95617b64f8b2b91222aa5c540d25e26833945b44d647c86bb617"], 0x1c}, 0x1, 0x0, 0x0, 0x24008054}, 0x40) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000ffdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='Z'], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) socket(0x10, 0x2, 0xc) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) 2m52.841790132s ago: executing program 6 (id=2637): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x123042, 0x0) ioctl$auto(r1, 0x921064b1, 0x8) mmap$auto(0x0, 0x400007, 0xe2, 0x9b72, 0xffffffffffffffff, 0x8000) r2 = socket(0xa, 0x801, 0x84) r3 = getpid() openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/mtd/mtd0/bitflip_threshold\x00', 0x2062, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f00000002c0)={&(0x7f00000001c0)="21de156acaa0fc59ebe010c641071e41ea395b72704e9ca50f0f90cb704794be77f7607acb9dc269310c2a3fa73ed9a1516fdad36714c9f336ac1db46e076951cedb92bd238e8e99d05b66f6ea35ef46cfc392332244b9fcf8b6d0c8db51b45ddf50b981b8558b897317d0987f7bd7bff7bf50d75429761b660afdfc896b476f3fce1a887ef843ceaaa81b468f41d0b6b68f98", 0x1}, 0x6, 0x0) setsockopt$auto(r2, 0x10000000084, 0x9, 0x0, 0x9c) write$auto(r0, &(0x7f0000000040)='//\xf2\x02', 0x80000002) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCMBIS2(r4, 0x5416, &(0x7f0000001a40)) socket(0xa, 0x801, 0x84) mmap$auto(0x5, 0x400008, 0xdf, 0x8000210, r1, 0x4000000008000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@vsock={0x28, 0x0, 0x2710, @host}, 0x54) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) mmap$auto(0x0, 0x810004, 0xff7, 0x8000000008011, 0x3, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r6) ioctl$auto_KVM_GET_MSRS(r5, 0x4008ae89, &(0x7f00000000c0)={0xdd, 0x0, [{0x40000080, 0x400, 0x7}]}) socket(0x28, 0x1, 0x0) 2m52.591943706s ago: executing program 5 (id=2630): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r0 = io_uring_setup$auto(0xc, 0x0) r1 = pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) r2 = socket(0x2, 0x80000, 0x100) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x4) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), r2) sendmsg$auto_NFC_CMD_DEP_LINK_UP(r1, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x108, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@NFC_ATTR_RF_MODE={0x5, 0xb, 0x8}, @NFC_ATTR_SE_APDU={0xb8, 0x19, "6069094d162121ccfdd2f72d8954ad97ffddb4b26968380d344dbe2fd0df5d589cea747e8f3ba0a54b82a4e3a890ae1798be9ce6b0cf389c0a8d9b7c4ee3dd1ea00bbeb6e4abbfb0b4395932325ba8d2f90718fb2b6613da741bfef4c966329d0a41c8cbb94d001fe2c3341201b3d6cbdbeb0959b2c19a5137d88050cf6fc43fe047d25ec0eb9fb24b9d3e16eef105963f105ca9d477bc7c0299aa34249cfac329b0d78f150b36f3bef56dabe8c6a0475ca60272"}, @NFC_ATTR_RF_MODE={0x5, 0xb, 0x7}, @NFC_ATTR_FIRMWARE_NAME={0x4}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x7}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x2}, @NFC_ATTR_LLC_SDP={0x18, 0x13, 0x0, 0x1, [@typed={0x14, 0x144, 0x0, 0x0, @ipv6=@private2}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x1c63e06e7ba8fbe0}, 0x4000014) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x3, 0xfff, 0x9b72, 0xffffffffffffffff, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0x3, 0x15) madvise$auto(0x108000, 0x800032, 0x4) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mremap$auto(0x10, 0x1, 0xfffffffffffffffe, 0x6, 0x32fe) r6 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000480), r4) sendmsg$auto_KSMBD_EVENT_SPNEGO_AUTHEN_RESPONSE(r5, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0xb01db70cfbc89e45}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r6, 0x4, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x40080) getresgid$auto(0x0, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r3, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@HWSIM_ATTR_USE_CHANCTX={0x4}, @HWSIM_ATTR_USE_CHANCTX={0x4}, @HWSIM_ATTR_SUPPORT_P2P_DEVICE={0x4}, @HWSIM_ATTR_MULTI_RADIO={0x4}, @HWSIM_ATTR_TX_INFO_FLAGS={0x9c, 0x15, "0c811a69a7563894eda1daac06e43bd8508ff4a27052cd6074aef550f9ba3a50b5a91c32a84527a1f17b9d2590532a50add49e5524e6f43971d16b57edd62d223f7baceda445d97478f427f70445f5b9ad9393d02d21a87a8438d32a5aa4a67de6e3c1c0a6e319ebcb9425243790a308a278d1f5a89c2e2921d290496bfb0d749b34a71f85c9bea2390e63db0f7802b50258913a8dab29d6"}, @HWSIM_ATTR_REG_CUSTOM_REG={0x8, 0xc, 0x7ff}, @HWSIM_ATTR_CIPHER_SUPPORT={0x2c, 0x18, "e719c58a9b16d0976a374a085b05137b1942612fdd44b3af92563bf6211cbdd837b98714b26ae717"}, @HWSIM_ATTR_IFTYPE_SUPPORT={0x8, 0x17, 0x9}, @HWSIM_ATTR_IFTYPE_SUPPORT={0x8, 0x17, 0x28b7}]}, 0x104}, 0x1, 0x0, 0x0, 0x8804}, 0x801) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000580), r2) 2m52.581582662s ago: executing program 0 (id=2631): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r0) r1 = socket(0x28, 0x1, 0x0) r2 = open(&(0x7f0000000100)='.\x00', 0x591002, 0x408) close_range$auto(r1, 0x8, 0x6) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x100, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_GET_MSRS(r2, 0x4008ae89, &(0x7f0000001380)={0x7}) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.net/blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000040)=""/9, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00'}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/oom_adj\x00', 0xc8402, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xa4e00, 0x0) socket(0xa, 0x801, 0x84) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace\x00', 0x2, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) close_range$auto(0x2, 0x8000, 0x0) r7 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0) ioctl$auto(r7, 0x3b8e, r6) read$auto(r5, 0x0, 0x1f40) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_LOCAL(r8, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="050328bd7000fbeedf250700000008000300", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x40008}, 0x0) 2m26.123388172s ago: executing program 35 (id=2630): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r0 = io_uring_setup$auto(0xc, 0x0) r1 = pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) r2 = socket(0x2, 0x80000, 0x100) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x4) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), r2) sendmsg$auto_NFC_CMD_DEP_LINK_UP(r1, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x108, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@NFC_ATTR_RF_MODE={0x5, 0xb, 0x8}, @NFC_ATTR_SE_APDU={0xb8, 0x19, "6069094d162121ccfdd2f72d8954ad97ffddb4b26968380d344dbe2fd0df5d589cea747e8f3ba0a54b82a4e3a890ae1798be9ce6b0cf389c0a8d9b7c4ee3dd1ea00bbeb6e4abbfb0b4395932325ba8d2f90718fb2b6613da741bfef4c966329d0a41c8cbb94d001fe2c3341201b3d6cbdbeb0959b2c19a5137d88050cf6fc43fe047d25ec0eb9fb24b9d3e16eef105963f105ca9d477bc7c0299aa34249cfac329b0d78f150b36f3bef56dabe8c6a0475ca60272"}, @NFC_ATTR_RF_MODE={0x5, 0xb, 0x7}, @NFC_ATTR_FIRMWARE_NAME={0x4}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x7}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x2}, @NFC_ATTR_LLC_SDP={0x18, 0x13, 0x0, 0x1, [@typed={0x14, 0x144, 0x0, 0x0, @ipv6=@private2}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x1c63e06e7ba8fbe0}, 0x4000014) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x3, 0xfff, 0x9b72, 0xffffffffffffffff, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0x3, 0x15) madvise$auto(0x108000, 0x800032, 0x4) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mremap$auto(0x10, 0x1, 0xfffffffffffffffe, 0x6, 0x32fe) r6 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000480), r4) sendmsg$auto_KSMBD_EVENT_SPNEGO_AUTHEN_RESPONSE(r5, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0xb01db70cfbc89e45}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r6, 0x4, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x40080) getresgid$auto(0x0, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r3, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@HWSIM_ATTR_USE_CHANCTX={0x4}, @HWSIM_ATTR_USE_CHANCTX={0x4}, @HWSIM_ATTR_SUPPORT_P2P_DEVICE={0x4}, @HWSIM_ATTR_MULTI_RADIO={0x4}, @HWSIM_ATTR_TX_INFO_FLAGS={0x9c, 0x15, "0c811a69a7563894eda1daac06e43bd8508ff4a27052cd6074aef550f9ba3a50b5a91c32a84527a1f17b9d2590532a50add49e5524e6f43971d16b57edd62d223f7baceda445d97478f427f70445f5b9ad9393d02d21a87a8438d32a5aa4a67de6e3c1c0a6e319ebcb9425243790a308a278d1f5a89c2e2921d290496bfb0d749b34a71f85c9bea2390e63db0f7802b50258913a8dab29d6"}, @HWSIM_ATTR_REG_CUSTOM_REG={0x8, 0xc, 0x7ff}, @HWSIM_ATTR_CIPHER_SUPPORT={0x2c, 0x18, "e719c58a9b16d0976a374a085b05137b1942612fdd44b3af92563bf6211cbdd837b98714b26ae717"}, @HWSIM_ATTR_IFTYPE_SUPPORT={0x8, 0x17, 0x9}, @HWSIM_ATTR_IFTYPE_SUPPORT={0x8, 0x17, 0x28b7}]}, 0x104}, 0x1, 0x0, 0x0, 0x8804}, 0x801) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000580), r2) 2m25.618050923s ago: executing program 36 (id=2637): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x123042, 0x0) ioctl$auto(r1, 0x921064b1, 0x8) mmap$auto(0x0, 0x400007, 0xe2, 0x9b72, 0xffffffffffffffff, 0x8000) r2 = socket(0xa, 0x801, 0x84) r3 = getpid() openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/mtd/mtd0/bitflip_threshold\x00', 0x2062, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f00000002c0)={&(0x7f00000001c0)="21de156acaa0fc59ebe010c641071e41ea395b72704e9ca50f0f90cb704794be77f7607acb9dc269310c2a3fa73ed9a1516fdad36714c9f336ac1db46e076951cedb92bd238e8e99d05b66f6ea35ef46cfc392332244b9fcf8b6d0c8db51b45ddf50b981b8558b897317d0987f7bd7bff7bf50d75429761b660afdfc896b476f3fce1a887ef843ceaaa81b468f41d0b6b68f98", 0x1}, 0x6, 0x0) setsockopt$auto(r2, 0x10000000084, 0x9, 0x0, 0x9c) write$auto(r0, &(0x7f0000000040)='//\xf2\x02', 0x80000002) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCMBIS2(r4, 0x5416, &(0x7f0000001a40)) socket(0xa, 0x801, 0x84) mmap$auto(0x5, 0x400008, 0xdf, 0x8000210, r1, 0x4000000008000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@vsock={0x28, 0x0, 0x2710, @host}, 0x54) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) mmap$auto(0x0, 0x810004, 0xff7, 0x8000000008011, 0x3, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r6) ioctl$auto_KVM_GET_MSRS(r5, 0x4008ae89, &(0x7f00000000c0)={0xdd, 0x0, [{0x40000080, 0x400, 0x7}]}) socket(0x28, 0x1, 0x0) 2m25.245761078s ago: executing program 37 (id=2629): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x800000000012, 0x4, 0x80000001, 0x8}, 0x6f4) mmap$auto(0xc8, 0xa00002, 0x400002, 0xfffffffffffffffd, 0x602, 0x10004) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(r1, 0xffffffffffffffff, 0xc4c6) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) write$auto(0x3, 0x0, 0xfffffdef) select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x2, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x6, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) select$auto(0x8, &(0x7f00000000c0)={[0xeeda, 0x7, 0x6, 0x9, 0x34, 0x1ff, 0x6, 0x4, 0x5, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8e, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f00000001c0)={0x6, 0x2}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00042dbd7000fbe2df2502000000080002000100000028e5ff102d084475a9db785e92655ba955715583cc8a50063b3f5b86a34d4538191f112a8151d1cd40b92ef28fecf0ee5384dc719adb2cdb504b5061949d21c6c08399099c7aeb25a44be34571d51bd758e1d8a1135a4f734dc9494b025b6bdf4fbbf44b5355558911de93218243672f35b4eebeff5095141729de40aee41da2a874a3096581f618dd02d4f9ea95617b64f8b2b91222aa5c540d25e26833945b44d647c86bb617"], 0x1c}, 0x1, 0x0, 0x0, 0x24008054}, 0x40) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000ffdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='Z'], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) socket(0x10, 0x2, 0xc) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) 2m25.237943053s ago: executing program 0 (id=2635): openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x8402, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) unshare$auto(0x21) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0xffffffffffffff09) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, 0x0, 0x40001, 0x0) r0 = socket(0x5, 0x1, 0xa) sendto$auto(r0, 0x0, 0x401, 0x7f, 0x0, 0x17) listmount$auto(0x0, 0x0, 0x4, 0x101) init_module$auto(0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0xa, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/tty6\x00', 0x0, 0x0) r1 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r1, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) sysfs$auto(0x2, 0x27, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) write$auto(0x3, 0x0, 0x100082) setgroups$auto(0xe32, 0x0) mmap$auto(0x0, 0x5, 0xfffffffffffffffe, 0x40eb2, 0x401, 0x300000000000) capget$auto(0x0, 0xfffffffffffffffe) clone3$auto(&(0x7f0000000400)={0x100008000, 0x980, 0x4, 0x6, 0x0, 0x2, 0x1, 0x8, 0x1, 0x0, 0x1000003}, 0x40) r2 = socket(0xa, 0x5, 0x308) getsockopt$auto(r2, 0x84, 0x21, 0x0, 0x0) get_mempolicy$auto(0x0, 0x0, 0x400, 0x0, 0x1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/hugetlb.1GB.rsvd.limit_in_bytes\x00', 0xc2481, 0x0) write$auto(r3, &(0x7f0000000040)='P\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x8) 2m22.969793042s ago: executing program 0 (id=2636): statmount$auto(&(0x7f0000000000)={0xa, @raw=0x4, 0x1, 0xffffffffffffb472, 0xcb02}, &(0x7f0000000040)={0x5a51be88, 0xa1, 0xfffffffffffffffa, 0xc, 0x6c, 0x5, 0x2, 0x8, 0x8, 0x7f, 0x200, 0x4, 0x7, 0x6, 0x10001, 0x100000001, 0x1, 0xd, 0xd, 0x77b9, 0x81, 0x7, 0x0, 0x0, 0x0, 0x8025, 0x5, 0x10000, 0xb, 0x6, 0x6, [0x0, 0x0, 0x7, 0x2, 0x2, 0xe, 0x3, 0x100000000, 0x1, 0x8, 0x101, 0x1, 0x10000, 0xaee2, 0xeb2, 0x3, 0xb, 0x69, 0xa66, 0x8000, 0xffffffffffffffff, 0x0, 0x8000, 0xd11, 0x8, 0x49, 0x0, 0x7fffffffffffffff, 0x7, 0x800, 0x80000000, 0x6, 0x8, 0x6, 0x7, 0x200, 0x1ff, 0x3, 0x7, 0x7, 0x9, 0x2, 0xffff], "66c64efb7fdd75429f44fa802c0c25ba7ba4f51c742352e268d10b373168"}, 0x9a4e, 0x2798413) ppoll$auto(&(0x7f0000000280)={0xffffffffffffffff, 0x3, 0x6}, 0xb026, &(0x7f00000002c0)={0xa, 0x9}, &(0x7f0000000300)={0x332}, 0x8) sendmmsg$auto(r0, &(0x7f00000005c0)={{&(0x7f0000000340)="1f78fd1f4fa200796e94366a51caaf77634fb69e51c4032d50bb815d4a0508bb977cfeb66508ce9ff5969a924ff7226810894dd7d0c9e4c62009cd45b98a72aed331a96989b3e65cccef59d88c3dfd46c881cf7296a2d1a0df85ae533d18392c3de24cf0322973395dd8527b93d9bcba8465c696b35bc6158e7699281cdec9a700c9dbb33e", 0x1, &(0x7f00000004c0)={&(0x7f0000000400)="d56dab658cfc7b632cd7928848fdce3ca6df664ffdd1b58fd43bdd9edf02d0d41dc5d1f2f3e807dd863b96ccd828a1b5f9f52454b1eb25b29b4a0eb6672ecbdb460a0ff404b8d2405aa7e1114c101538d83d67cfadc4fd080851f7bdd45c37c765b30aef1c463904927b864974fe204c1bb54d6621529f69174dac4fc3c3bee178ec5a88db26b0091838ca3ed4d20078462055d08edca5b953d71612b77c", 0x3}, 0x8, &(0x7f0000000500)="42d1da5081af3458e9dca85c4e8a2467e3aa0d1e1ce9afd61ac6d7ac481f98aa33a519cd280b8215a5e6e64391b3d8c6df350cde663727aabdd06224303b6060285f0266d6492bbe0a6ac8c8fc68063778ba8131b3544f29a100391a477c0ebdf0f817ff8492eff9161963d819312e57856b69530f65d83a51b3ab8e0c2fd80b558500066ef62b2521ab27c0a89e984b6c04989d450046", 0x5, 0xfffffff8}, 0x7ff}, 0x6, 0x7) select$auto(0x1, &(0x7f0000000600)={[0x8, 0x1, 0xb, 0x3, 0x5, 0x8, 0xd3b, 0x3, 0x101, 0x8000000000000001, 0x100000001, 0xfffffffffffffff2, 0x100000000, 0x7c, 0x9, 0x101]}, &(0x7f0000000680)={[0x0, 0xba8, 0xffffffff, 0x2, 0x42d1, 0x2, 0x7, 0x82, 0xe670, 0xffff, 0x1, 0x6, 0xfa, 0x2, 0x7, 0x1]}, &(0x7f0000000700)={[0xe74, 0x0, 0x7, 0xe27f, 0x6, 0x81, 0x0, 0x9, 0x10001, 0x6, 0x651f, 0x8, 0x75, 0x4, 0x5, 0x3]}, &(0x7f0000000780)={0x2, 0x5}) fadvise64$auto_POSIX_FADV_SEQUENTIAL(r0, 0x5, 0x3ff, 0x2) setsockopt$auto_SO_BUSY_POLL(r0, 0x7fff, 0x2e, &(0x7f00000007c0)='*%!.@:[\xce!\x00', 0x10001) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/kernel/debug/block/loop3/rqos/wbt/unknown_cnt\x00', 0x9002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000840)='/sys/devices/platform/vivid.0/media10/power/runtime_active_time\x00', 0x20000, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$auto_NET_SHAPER_CMD_GROUP(r1, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x30, 0x0, 0x5dc53d5417e0e991, 0x70bd2d, 0x25dfdbfc, {}, [@NET_SHAPER_A_LEAVES={0xc, 0xa, 0x0, 0x1, [@NET_SHAPER_A_PRIORITY={0x8, 0x6, 0x7b5}]}, @NET_SHAPER_A_PRIORITY={0x8, 0x6, 0xcc}, @NET_SHAPER_A_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x814}, 0x20000001) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/input/event2\x00', 0x8000, 0x0) ioctl$auto_EVIOCGKEYCODE(r2, 0x80084504, &(0x7f0000000a00)=[0x3, 0x1]) 2m21.909656239s ago: executing program 0 (id=2638): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r0) sendmsg$auto_NL802154_CMD_SET_PAN_ID(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000011c0)=ANY=[], 0x1058}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="ee8c6d5dd86692fbdf257e0000020800db00", @ANYRES32=r2, @ANYBLOB="0c002e010010000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) sendmsg$auto_NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="810b25bd7080fbdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) recvmmsg$auto(r0, &(0x7f0000000180)={{0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x6}, 0x803}, 0x10a, 0x6, 0x0) getsockopt$auto_SO_TYPE(r0, 0x1, 0x3, &(0x7f0000000240)='nl80211\x00', &(0x7f0000000280)=0x7) 2m3.882223513s ago: executing program 38 (id=2638): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r0) sendmsg$auto_NL802154_CMD_SET_PAN_ID(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000011c0)=ANY=[], 0x1058}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="ee8c6d5dd86692fbdf257e0000020800db00", @ANYRES32=r2, @ANYBLOB="0c002e010010000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) sendmsg$auto_NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="810b25bd7080fbdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) recvmmsg$auto(r0, &(0x7f0000000180)={{0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x6}, 0x803}, 0x10a, 0x6, 0x0) getsockopt$auto_SO_TYPE(r0, 0x1, 0x3, &(0x7f0000000240)='nl80211\x00', &(0x7f0000000280)=0x7) 1m43.430122359s ago: executing program 8 (id=2633): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x2c402, 0x0) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000980)='/dev/ttye9\x00', 0x102, 0x0) sendfile$auto(r1, r0, 0x0, 0x10000) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/vhci_hcd.11/usb31/31-0:1.0/usb31-port1/early_stop\x00', 0x0, 0x0) sendfile$auto(r2, r2, 0x0, 0x7) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0xc800) r3 = socketpair$auto(0x22, 0x3, 0x8000000000000000, 0x0) shmctl$auto_IPC_INFO(0x28, 0x3, 0x0) read$auto_proc_auxv_operations_base(r3, 0x0, 0x0) shmctl$auto_IPC_SET(0x10000, 0x1, &(0x7f0000000380)={{0x2, 0xee00, 0xee01, 0x0, 0x9, 0x9, 0x9}, 0xb20, 0xfffffffffffffffe, 0x9f51, 0xfffffffffffffffd, @raw=0x7, @raw=0x200000, 0x200, 0x0, &(0x7f0000000840), &(0x7f0000000280)="81726da2c24df37e85f1ad146d92ae0e24799cc6ebc5cd4119eeef3b8d91d2a35959582bb9abf959be"}) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000080), 0xffffffffffffffff) mmap$auto(0x400000000000003, 0x81, 0x53, 0x110, 0xfffffffffffffffa, 0x9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xe0201, 0x0) close_range$auto(r3, r1, 0x10001) write$auto(0xffffffffffffffff, 0x0, 0xfffffdef) fcntl$auto_F_ADD_SEALS(0xffffffffffffffff, 0x409, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000540)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) setsockopt$auto(0xffffffffffffffff, 0x29, 0x43, &(0x7f0000000680)='\xa1\x00\x16\x12\xf8\x98\xcf\x9b\x87\xf6I}T\x99\xb4\xd8S]\xbb\f\xdaY\xac\xf1\xa2\x98c\x1ds3\xfe@\v\xc2\x90X\x81\xa3r\xfdH\xb2\x0f\x01v2\x13Lo$\xb4d\xf1\'\xa0^\xa9[\x1b\xba\xe6\xd3zkL\xa8s\x8ccT=\xac\'\x93 %\xd4l\xfcfQ=\x10z%\x16\b\xd3\xa9\x11~\x11\x19c\x1e\xde\x0f\x9deB\xb3\xb2\xed0\xab', 0x4) sendfile$auto(r4, r4, 0x0, 0x2) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) sendfile$auto(r5, r5, 0x0, 0x2) r6 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event2\x00', 0x40040, 0x0) ioctl$auto_EVIOCSKEYCODE(r6, 0x40084504, &(0x7f00000000c0)=[0xa, 0x6]) sendmsg$auto_SEG6_CMD_SETHMAC(r3, 0x0, 0x20000000) r7 = socket(0xa, 0x2, 0x0) setsockopt$auto_SO_WIFI_STATUS(r7, 0x0, 0x29, 0x0, 0xbff) close_range$auto(0x2, 0x8, 0x0) 52.900644787s ago: executing program 8 (id=2633): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x2c402, 0x0) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000980)='/dev/ttye9\x00', 0x102, 0x0) sendfile$auto(r1, r0, 0x0, 0x10000) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/vhci_hcd.11/usb31/31-0:1.0/usb31-port1/early_stop\x00', 0x0, 0x0) sendfile$auto(r2, r2, 0x0, 0x7) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0xc800) r3 = socketpair$auto(0x22, 0x3, 0x8000000000000000, 0x0) shmctl$auto_IPC_INFO(0x28, 0x3, 0x0) read$auto_proc_auxv_operations_base(r3, 0x0, 0x0) shmctl$auto_IPC_SET(0x10000, 0x1, &(0x7f0000000380)={{0x2, 0xee00, 0xee01, 0x0, 0x9, 0x9, 0x9}, 0xb20, 0xfffffffffffffffe, 0x9f51, 0xfffffffffffffffd, @raw=0x7, @raw=0x200000, 0x200, 0x0, &(0x7f0000000840), &(0x7f0000000280)="81726da2c24df37e85f1ad146d92ae0e24799cc6ebc5cd4119eeef3b8d91d2a35959582bb9abf959be"}) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000080), 0xffffffffffffffff) mmap$auto(0x400000000000003, 0x81, 0x53, 0x110, 0xfffffffffffffffa, 0x9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xe0201, 0x0) close_range$auto(r3, r1, 0x10001) write$auto(0xffffffffffffffff, 0x0, 0xfffffdef) fcntl$auto_F_ADD_SEALS(0xffffffffffffffff, 0x409, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000540)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) setsockopt$auto(0xffffffffffffffff, 0x29, 0x43, &(0x7f0000000680)='\xa1\x00\x16\x12\xf8\x98\xcf\x9b\x87\xf6I}T\x99\xb4\xd8S]\xbb\f\xdaY\xac\xf1\xa2\x98c\x1ds3\xfe@\v\xc2\x90X\x81\xa3r\xfdH\xb2\x0f\x01v2\x13Lo$\xb4d\xf1\'\xa0^\xa9[\x1b\xba\xe6\xd3zkL\xa8s\x8ccT=\xac\'\x93 %\xd4l\xfcfQ=\x10z%\x16\b\xd3\xa9\x11~\x11\x19c\x1e\xde\x0f\x9deB\xb3\xb2\xed0\xab', 0x4) sendfile$auto(r4, r4, 0x0, 0x2) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) sendfile$auto(r5, r5, 0x0, 0x2) r6 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event2\x00', 0x40040, 0x0) ioctl$auto_EVIOCSKEYCODE(r6, 0x40084504, &(0x7f00000000c0)=[0xa, 0x6]) sendmsg$auto_SEG6_CMD_SETHMAC(r3, 0x0, 0x20000000) r7 = socket(0xa, 0x2, 0x0) setsockopt$auto_SO_WIFI_STATUS(r7, 0x0, 0x29, 0x0, 0xbff) close_range$auto(0x2, 0x8, 0x0) 44.151757784s ago: executing program 7 (id=2632): socket(0x1d, 0xa, 0x1) setsockopt$auto(0x400000000000003, 0x29, 0x16, 0x0, 0x20056b) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r0 = open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x15, r0, 0x800) mlockall$auto(0x2) setresuid$auto(0x2, 0x7, 0x8080) mmap$auto(0xf000, 0x4, 0x2, 0x9b72, 0x2, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x80000000000000, 0x2000c, 0x4000000000db, 0x12, 0x400, 0x18002) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb701, 0x0) getsockopt$auto_SO_LINGER(0xffffffffffffffff, 0xc00000, 0xd, &(0x7f0000000100)='MAC802154_HWSIM\x00', &(0x7f0000000140)=0x8) io_cancel$auto(0x90ee, &(0x7f0000000080)={0x400, 0x154e, 0x4f, 0x8, 0x5, r2, 0xc, 0xffffffff7fffffff, 0x7, 0x0, 0xd9}, &(0x7f00000000c0)={0xffffffffffffffff, 0x4, 0xfffffffffffffff0, 0xa610}) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r3 = socket(0x10, 0x5, 0x19) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) read$auto(r3, &(0x7f0000002300)='MAC802154_HWSIM\x00', 0xfdef) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x34d802, 0x0) r4 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/binderfs/binder0\x00', 0x102, 0x0) r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r5, &(0x7f0000000000)="c80d1b5d399b41", 0x7) ioctl$auto_BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r6 = openat$auto_state_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x1e9482, 0x0) read$auto_state_fops_(r6, &(0x7f0000000180)=""/61, 0xfffffeeb) 44.129040065s ago: executing program 9 (id=2634): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x5) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) r1 = socket(0x2, 0x1, 0x6) setsockopt$auto(r1, 0x0, 0x24, 0x0, 0x9) r2 = socket(0x2b, 0x1, 0x1) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00"}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2000000b752, 0x1}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) r3 = syz_genetlink_get_family_id$auto_batadv(&(0x7f00000000c0), r2) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), r2) openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/bluetooth/hci1/power\x00', 0x440000, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000480)='/dev/video6\x00', 0x8000, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0xa0, r4, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_FRAME_MATCH={0x89, 0x5b, "42a8f17e04b7b46316412d33f7748dcf96602796d8ddb1402a9322a8797025d25d5d79d1769f1968877cc0699add838c71e00f6201759dfae4e2d536a9b9978ffc0a8e8a227f2a94b8e5320232cb578db8af1f8a5800c87bb8bb8a6939535533436643967f31df70f8a70384b7bc1bed12e23d5eed49889560d8ae96f68eaffb8fdec29f32"}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4040800}, 0x4080) sendmsg$auto_BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}}, 0x34008000) r5 = open(&(0x7f0000000080)='./bus\x00', 0x64040, 0xc0) fcntl$auto(r5, 0x0, 0xa8) ioctl$auto_USB_RAW_IOCTL_EPS_INFO(r5, 0x83c0550b, &(0x7f00000006c0)={[{"e984d0ce43e5eae65a262f4851b688fb", 0x0, {0x1, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x1, 0xfff1, 0x10}}, {"cd32d0125aa7612e7ba85bba99a0953d", 0x5, {0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x7f, 0x1ff, 0x2}}, {"f1fd4b3fe407434c975f329c428d5732", 0xfffffffb, {0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x8, 0xf9, 0x2}}, {"e2450c12ab088ce3a389c7ead7490219", 0x0, {0x0, 0x0, 0x1, 0x1, 0x1}, {0x8001, 0x8, 0x3}}, {"3a38fc27bcda271ea746b7b2cab5636c", 0x7, {0x1, 0x1, 0x1}, {0x3, 0x4, 0x2000}}, {"b53eae1bcc08000e157aa807b8b98072", 0x2000200, {0x1, 0x1, 0x0, 0x1}, {0x9, 0x3, 0xfffffffa}}, {"c38ec50110b5bd04711b5489e6b68ea5", 0x1436, {0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, {0xc2a5, 0x9, 0x9}}, {"e6df2b877e6cdcf3b2f2184539efda65", 0xa, {0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0xfff, 0x0, 0x9}}, {"110e8a7bee8f0d233e29f5c99395e8da", 0x8000, {0x1, 0x1, 0x0, 0x1}, {0xab3, 0x400, 0x8000}}, {"27df4316f9dcf42394074908a097e949", 0x8, {0x1, 0x1, 0x0, 0x1}, {0x85, 0x1, 0x7}}, {"6c7996a6395fa7b83ceeb9344e47463a", 0x4, {0x0, 0x1, 0x1}, {0x9acc, 0xb, 0x401}}, {"6b7f74375e04c9e14e3d06893ed9b39f", 0x8, {0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0xfffd, 0x8, 0xfffffffa}}, {"5f25eaeed116fbe5d47e071d6d930b82", 0x2, {0x1, 0x1, 0x0, 0x1, 0x1}, {0x6, 0x7, 0x5}}, {"fbeaa210160ac67af96c41e06d96f5e0", 0x3, {0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0xfffd, 0x7, 0x7}}, {"ef324eae1dba70585205d1fa5f7a8f10", 0x28000, {0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1, 0xfff9, 0x4}}, {"1f5abc460bcdeba03607e4d777062984", 0x2f9a, {0x1, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x5, 0xf, 0x9}}, {"ac6ca82f62d1cefd9e7952b172ba0f86", 0x2, {}, {0x2, 0x4dac, 0x4}}, {"b09a92f955871caa6ad636298bc98978", 0x6, {0x0, 0x1, 0x0, 0x0, 0x1}, {0x1000, 0x7, 0x1}}, {"753ff8daa29188ed4464ac6882b6ace6", 0x1, {0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x8, 0x1ff, 0xd}}, {"69396537dd41447e3042183d19a1fad4", 0x40, {0x0, 0x1, 0x1}, {0x80, 0x5, 0x5}}, {"e245065ba24334ffafc099c4b2f8117c", 0x0, {0x1, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x2, 0x9, 0x4}}, {"f5afb5ec00f4afe0e85372e051830dea", 0xf, {0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x3, 0x3, 0x668f}}, {"2da55925eb0bccbb5ab9fc16cb108edf", 0x1, {0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x3, 0x8, 0x7}}, {"825bdf69f0258d865d83b3d15d093174", 0x1ff, {0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x7fff, 0x9, 0x81}}, {"662a590e30f4cbdc91ff2069bc600310", 0xa, {0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x8001, 0x5, 0x7fff}}, {"837b88fa5f05189db9d5f62a8b3208e4", 0x3, {0x0, 0x1, 0x1, 0x0, 0x1}, {0x7f, 0x1, 0x7}}, {"20f69c9a243bc0a5ce219bfc1e3a30dc", 0xc, {0x1, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x9, 0x7}}, {"7c3671e70847eca7d174dd6311cac84e", 0x7a0, {0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x8, 0x5, 0x4}}, {"7b42dda444fa0904dec181268cfba7f0", 0x9, {0x1, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x1800, 0x2, 0x8001}}, {"1c1e337b1c403bf27181d79463853b0b", 0xffff, {0x1, 0x1}, {0x3, 0x4, 0x548}}]}) socket(0x1e, 0x5, 0x6) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x8, 0xfffffffffffffffe]}, 0x0) 955.764808ms ago: executing program 8 (id=2633): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x2c402, 0x0) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000980)='/dev/ttye9\x00', 0x102, 0x0) sendfile$auto(r1, r0, 0x0, 0x10000) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/vhci_hcd.11/usb31/31-0:1.0/usb31-port1/early_stop\x00', 0x0, 0x0) sendfile$auto(r2, r2, 0x0, 0x7) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0xc800) r3 = socketpair$auto(0x22, 0x3, 0x8000000000000000, 0x0) shmctl$auto_IPC_INFO(0x28, 0x3, 0x0) read$auto_proc_auxv_operations_base(r3, 0x0, 0x0) shmctl$auto_IPC_SET(0x10000, 0x1, &(0x7f0000000380)={{0x2, 0xee00, 0xee01, 0x0, 0x9, 0x9, 0x9}, 0xb20, 0xfffffffffffffffe, 0x9f51, 0xfffffffffffffffd, @raw=0x7, @raw=0x200000, 0x200, 0x0, &(0x7f0000000840), &(0x7f0000000280)="81726da2c24df37e85f1ad146d92ae0e24799cc6ebc5cd4119eeef3b8d91d2a35959582bb9abf959be"}) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000080), 0xffffffffffffffff) mmap$auto(0x400000000000003, 0x81, 0x53, 0x110, 0xfffffffffffffffa, 0x9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xe0201, 0x0) close_range$auto(r3, r1, 0x10001) write$auto(0xffffffffffffffff, 0x0, 0xfffffdef) fcntl$auto_F_ADD_SEALS(0xffffffffffffffff, 0x409, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000540)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) setsockopt$auto(0xffffffffffffffff, 0x29, 0x43, &(0x7f0000000680)='\xa1\x00\x16\x12\xf8\x98\xcf\x9b\x87\xf6I}T\x99\xb4\xd8S]\xbb\f\xdaY\xac\xf1\xa2\x98c\x1ds3\xfe@\v\xc2\x90X\x81\xa3r\xfdH\xb2\x0f\x01v2\x13Lo$\xb4d\xf1\'\xa0^\xa9[\x1b\xba\xe6\xd3zkL\xa8s\x8ccT=\xac\'\x93 %\xd4l\xfcfQ=\x10z%\x16\b\xd3\xa9\x11~\x11\x19c\x1e\xde\x0f\x9deB\xb3\xb2\xed0\xab', 0x4) sendfile$auto(r4, r4, 0x0, 0x2) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) sendfile$auto(r5, r5, 0x0, 0x2) r6 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event2\x00', 0x40040, 0x0) ioctl$auto_EVIOCSKEYCODE(r6, 0x40084504, &(0x7f00000000c0)=[0xa, 0x6]) sendmsg$auto_SEG6_CMD_SETHMAC(r3, 0x0, 0x20000000) r7 = socket(0xa, 0x2, 0x0) setsockopt$auto_SO_WIFI_STATUS(r7, 0x0, 0x29, 0x0, 0xbff) close_range$auto(0x2, 0x8, 0x0) 937.987106ms ago: executing program 7 (id=2632): socket(0x1d, 0xa, 0x1) setsockopt$auto(0x400000000000003, 0x29, 0x16, 0x0, 0x20056b) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r0 = open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x15, r0, 0x800) mlockall$auto(0x2) setresuid$auto(0x2, 0x7, 0x8080) mmap$auto(0xf000, 0x4, 0x2, 0x9b72, 0x2, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x80000000000000, 0x2000c, 0x4000000000db, 0x12, 0x400, 0x18002) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb701, 0x0) getsockopt$auto_SO_LINGER(0xffffffffffffffff, 0xc00000, 0xd, &(0x7f0000000100)='MAC802154_HWSIM\x00', &(0x7f0000000140)=0x8) io_cancel$auto(0x90ee, &(0x7f0000000080)={0x400, 0x154e, 0x4f, 0x8, 0x5, r2, 0xc, 0xffffffff7fffffff, 0x7, 0x0, 0xd9}, &(0x7f00000000c0)={0xffffffffffffffff, 0x4, 0xfffffffffffffff0, 0xa610}) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r3 = socket(0x10, 0x5, 0x19) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) read$auto(r3, &(0x7f0000002300)='MAC802154_HWSIM\x00', 0xfdef) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x34d802, 0x0) r4 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/binderfs/binder0\x00', 0x102, 0x0) r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r5, &(0x7f0000000000)="c80d1b5d399b41", 0x7) ioctl$auto_BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r6 = openat$auto_state_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x1e9482, 0x0) read$auto_state_fops_(r6, &(0x7f0000000180)=""/61, 0xfffffeeb) 0s ago: executing program 9 (id=2634): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x5) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) r1 = socket(0x2, 0x1, 0x6) setsockopt$auto(r1, 0x0, 0x24, 0x0, 0x9) r2 = socket(0x2b, 0x1, 0x1) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00"}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2000000b752, 0x1}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) r3 = syz_genetlink_get_family_id$auto_batadv(&(0x7f00000000c0), r2) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), r2) openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/bluetooth/hci1/power\x00', 0x440000, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000480)='/dev/video6\x00', 0x8000, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0xa0, r4, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_FRAME_MATCH={0x89, 0x5b, "42a8f17e04b7b46316412d33f7748dcf96602796d8ddb1402a9322a8797025d25d5d79d1769f1968877cc0699add838c71e00f6201759dfae4e2d536a9b9978ffc0a8e8a227f2a94b8e5320232cb578db8af1f8a5800c87bb8bb8a6939535533436643967f31df70f8a70384b7bc1bed12e23d5eed49889560d8ae96f68eaffb8fdec29f32"}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4040800}, 0x4080) sendmsg$auto_BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}}, 0x34008000) r5 = open(&(0x7f0000000080)='./bus\x00', 0x64040, 0xc0) fcntl$auto(r5, 0x0, 0xa8) ioctl$auto_USB_RAW_IOCTL_EPS_INFO(r5, 0x83c0550b, &(0x7f00000006c0)={[{"e984d0ce43e5eae65a262f4851b688fb", 0x0, {0x1, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x1, 0xfff1, 0x10}}, {"cd32d0125aa7612e7ba85bba99a0953d", 0x5, {0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x7f, 0x1ff, 0x2}}, {"f1fd4b3fe407434c975f329c428d5732", 0xfffffffb, {0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x8, 0xf9, 0x2}}, {"e2450c12ab088ce3a389c7ead7490219", 0x0, {0x0, 0x0, 0x1, 0x1, 0x1}, {0x8001, 0x8, 0x3}}, {"3a38fc27bcda271ea746b7b2cab5636c", 0x7, {0x1, 0x1, 0x1}, {0x3, 0x4, 0x2000}}, {"b53eae1bcc08000e157aa807b8b98072", 0x2000200, {0x1, 0x1, 0x0, 0x1}, {0x9, 0x3, 0xfffffffa}}, {"c38ec50110b5bd04711b5489e6b68ea5", 0x1436, {0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, {0xc2a5, 0x9, 0x9}}, {"e6df2b877e6cdcf3b2f2184539efda65", 0xa, {0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0xfff, 0x0, 0x9}}, {"110e8a7bee8f0d233e29f5c99395e8da", 0x8000, {0x1, 0x1, 0x0, 0x1}, {0xab3, 0x400, 0x8000}}, {"27df4316f9dcf42394074908a097e949", 0x8, {0x1, 0x1, 0x0, 0x1}, {0x85, 0x1, 0x7}}, {"6c7996a6395fa7b83ceeb9344e47463a", 0x4, {0x0, 0x1, 0x1}, {0x9acc, 0xb, 0x401}}, {"6b7f74375e04c9e14e3d06893ed9b39f", 0x8, {0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0xfffd, 0x8, 0xfffffffa}}, {"5f25eaeed116fbe5d47e071d6d930b82", 0x2, {0x1, 0x1, 0x0, 0x1, 0x1}, {0x6, 0x7, 0x5}}, {"fbeaa210160ac67af96c41e06d96f5e0", 0x3, {0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0xfffd, 0x7, 0x7}}, {"ef324eae1dba70585205d1fa5f7a8f10", 0x28000, {0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1, 0xfff9, 0x4}}, {"1f5abc460bcdeba03607e4d777062984", 0x2f9a, {0x1, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x5, 0xf, 0x9}}, {"ac6ca82f62d1cefd9e7952b172ba0f86", 0x2, {}, {0x2, 0x4dac, 0x4}}, {"b09a92f955871caa6ad636298bc98978", 0x6, {0x0, 0x1, 0x0, 0x0, 0x1}, {0x1000, 0x7, 0x1}}, {"753ff8daa29188ed4464ac6882b6ace6", 0x1, {0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x8, 0x1ff, 0xd}}, {"69396537dd41447e3042183d19a1fad4", 0x40, {0x0, 0x1, 0x1}, {0x80, 0x5, 0x5}}, {"e245065ba24334ffafc099c4b2f8117c", 0x0, {0x1, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x2, 0x9, 0x4}}, {"f5afb5ec00f4afe0e85372e051830dea", 0xf, {0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x3, 0x3, 0x668f}}, {"2da55925eb0bccbb5ab9fc16cb108edf", 0x1, {0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x3, 0x8, 0x7}}, {"825bdf69f0258d865d83b3d15d093174", 0x1ff, {0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x7fff, 0x9, 0x81}}, {"662a590e30f4cbdc91ff2069bc600310", 0xa, {0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x8001, 0x5, 0x7fff}}, {"837b88fa5f05189db9d5f62a8b3208e4", 0x3, {0x0, 0x1, 0x1, 0x0, 0x1}, {0x7f, 0x1, 0x7}}, {"20f69c9a243bc0a5ce219bfc1e3a30dc", 0xc, {0x1, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x9, 0x7}}, {"7c3671e70847eca7d174dd6311cac84e", 0x7a0, {0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x8, 0x5, 0x4}}, {"7b42dda444fa0904dec181268cfba7f0", 0x9, {0x1, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x1800, 0x2, 0x8001}}, {"1c1e337b1c403bf27181d79463853b0b", 0xffff, {0x1, 0x1}, {0x3, 0x4, 0x548}}]}) socket(0x1e, 0x5, 0x6) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x8, 0xfffffffffffffffe]}, 0x0) kernel console output (not intermixed with test programs): e [ 655.133488][T17005] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.603840][T17015] FAULT_INJECTION: forcing a failure. [ 655.603840][T17015] name fail_futex, interval 1, probability 0, space 0, times 0 [ 655.644090][T17015] CPU: 0 UID: 0 PID: 17015 Comm: syz.3.2221 Tainted: G U L syzkaller #0 PREEMPT(full) [ 655.644146][T17015] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 655.644157][T17015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 655.644173][T17015] Call Trace: [ 655.644183][T17015] [ 655.644195][T17015] dump_stack_lvl+0x16c/0x1f0 [ 655.644242][T17015] should_fail_ex+0x512/0x640 [ 655.644277][T17015] get_futex_key+0x1d0/0x15f0 [ 655.644312][T17015] ? __pfx_get_futex_key+0x10/0x10 [ 655.644340][T17015] ? find_held_lock+0x2b/0x80 [ 655.644383][T17015] futex_wake+0xea/0x530 [ 655.644422][T17015] ? __pfx_futex_wake+0x10/0x10 [ 655.644459][T17015] ? __pfx_vfs_writev+0x10/0x10 [ 655.644512][T17015] ? do_writev+0x218/0x340 [ 655.644554][T17015] do_futex+0x1e3/0x350 [ 655.644587][T17015] ? __pfx_do_futex+0x10/0x10 [ 655.644612][T17015] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 655.644662][T17015] __x64_sys_futex+0x1e0/0x4c0 [ 655.644697][T17015] ? fput+0x70/0xf0 [ 655.644721][T17015] ? __pfx___x64_sys_futex+0x10/0x10 [ 655.644754][T17015] ? __pfx_do_writev+0x10/0x10 [ 655.644808][T17015] do_syscall_64+0xcd/0xf80 [ 655.644852][T17015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.644880][T17015] RIP: 0033:0x7f7dda78f7c9 [ 655.644902][T17015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 655.644930][T17015] RSP: 002b:00007f7ddb5c60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 655.644957][T17015] RAX: ffffffffffffffda RBX: 00007f7dda9e5fa8 RCX: 00007f7dda78f7c9 [ 655.644977][T17015] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7dda9e5fac [ 655.644994][T17015] RBP: 00007f7dda9e5fa0 R08: 00007f7ddb5c7000 R09: 0000000000000000 [ 655.645013][T17015] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 655.645032][T17015] R13: 00007f7dda9e6038 R14: 00007ffe9b289920 R15: 00007ffe9b289a08 [ 655.645071][T17015] [ 655.927077][T17018] netlink: 330 bytes leftover after parsing attributes in process `syz.3.2223'. [ 656.617073][T17046] futex_wake_op: syz.3.2228 tries to shift op by -2048; fix this program [ 656.654388][T17046] futex_wake_op: syz.3.2228 tries to shift op by -2048; fix this program [ 659.135581][T17092] mkiss: ax0: crc mode is auto. [ 660.086674][ T7222] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 662.083753][T17178] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 662.632311][T17200] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 663.062555][T17205] binder: BINDER_SET_CONTEXT_MGR already set [ 663.068620][T17205] binder: 17204:17205 ioctl 4018620d 9 returned -16 [ 663.961181][T17228] FAULT_INJECTION: forcing a failure. [ 663.961181][T17228] name failslab, interval 1, probability 0, space 0, times 0 [ 664.037333][T17228] CPU: 1 UID: 0 PID: 17228 Comm: syz.6.2266 Tainted: G U L syzkaller #0 PREEMPT(full) [ 664.037381][T17228] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 664.037392][T17228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 664.037408][T17228] Call Trace: [ 664.037418][T17228] [ 664.037429][T17228] dump_stack_lvl+0x16c/0x1f0 [ 664.037474][T17228] should_fail_ex+0x512/0x640 [ 664.037504][T17228] ? kmem_cache_alloc_noprof+0x62/0x770 [ 664.037539][T17228] should_failslab+0xc2/0x120 [ 664.037579][T17228] kmem_cache_alloc_noprof+0x83/0x770 [ 664.037609][T17228] ? proc_reg_open+0x23f/0x5f0 [ 664.037647][T17228] ? proc_reg_open+0x23f/0x5f0 [ 664.037676][T17228] proc_reg_open+0x23f/0x5f0 [ 664.037710][T17228] do_dentry_open+0x748/0x1590 [ 664.037745][T17228] ? __pfx_proc_reg_open+0x10/0x10 [ 664.037785][T17228] vfs_open+0x82/0x3f0 [ 664.037859][T17228] path_openat+0x2078/0x3140 [ 664.037908][T17228] ? __pfx_path_openat+0x10/0x10 [ 664.037959][T17228] do_filp_open+0x20b/0x470 [ 664.037997][T17228] ? __pfx_do_filp_open+0x10/0x10 [ 664.038059][T17228] ? alloc_fd+0x471/0x7d0 [ 664.038165][T17228] do_sys_openat2+0x121/0x290 [ 664.038197][T17228] ? __pfx_do_sys_openat2+0x10/0x10 [ 664.038247][T17228] __x64_sys_openat+0x174/0x210 [ 664.038279][T17228] ? __pfx___x64_sys_openat+0x10/0x10 [ 664.038311][T17228] ? syscall_user_dispatch+0x78/0x140 [ 664.038355][T17228] do_syscall_64+0xcd/0xf80 [ 664.038396][T17228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.038423][T17228] RIP: 0033:0x7fa94d18f7c9 [ 664.038445][T17228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 664.038472][T17228] RSP: 002b:00007fa94e0c4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 664.038498][T17228] RAX: ffffffffffffffda RBX: 00007fa94d3e5fa0 RCX: 00007fa94d18f7c9 [ 664.038517][T17228] RDX: 0000000000008340 RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 664.038535][T17228] RBP: 00007fa94d213f91 R08: 0000000000000000 R09: 0000000000000000 [ 664.038553][T17228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 664.038569][T17228] R13: 00007fa94d3e6038 R14: 00007fa94d3e5fa0 R15: 00007ffd2fcd0b98 [ 664.038604][T17228] [ 665.042833][ T30] audit: type=1804 audit(4294967355.710:38): pid=17255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2271" name="/newroot/sys/kernel/tracing/set_event" dev="tracefs" ino=28 res=1 errno=0 [ 666.284502][T17277] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 666.541431][T17278] could not allocate digest TFM handle 237 [ 666.541431][T17278] [ 668.114501][T17314] FAULT_INJECTION: forcing a failure. [ 668.114501][T17314] name failslab, interval 1, probability 0, space 0, times 0 [ 668.142502][T17314] CPU: 1 UID: 0 PID: 17314 Comm: syz.3.2284 Tainted: G U L syzkaller #0 PREEMPT(full) [ 668.142555][T17314] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 668.142565][T17314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 668.142582][T17314] Call Trace: [ 668.142591][T17314] [ 668.142604][T17314] dump_stack_lvl+0x16c/0x1f0 [ 668.142653][T17314] should_fail_ex+0x512/0x640 [ 668.142685][T17314] ? fs_reclaim_acquire+0xae/0x150 [ 668.142739][T17314] should_failslab+0xc2/0x120 [ 668.142783][T17314] __kmalloc_noprof+0xeb/0x910 [ 668.142816][T17314] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 668.142863][T17314] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 668.142898][T17314] tomoyo_realpath_from_path+0xc2/0x6e0 [ 668.142947][T17314] tomoyo_check_open_permission+0x2ab/0x3c0 [ 668.142984][T17314] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 668.143065][T17314] ? do_raw_spin_lock+0x12c/0x2b0 [ 668.143109][T17314] tomoyo_file_open+0x6b/0x90 [ 668.143154][T17314] security_file_open+0x84/0x1e0 [ 668.143192][T17314] do_dentry_open+0x597/0x1590 [ 668.143241][T17314] ? security_inode_permission+0xbf/0x260 [ 668.143282][T17314] vfs_open+0x82/0x3f0 [ 668.143319][T17314] path_openat+0x2078/0x3140 [ 668.143373][T17314] ? __pfx_path_openat+0x10/0x10 [ 668.143432][T17314] ? kasan_save_stack+0x42/0x60 [ 668.143470][T17314] ? kasan_save_track+0x14/0x30 [ 668.143509][T17314] ? __kasan_slab_alloc+0x89/0x90 [ 668.143547][T17314] ? kmem_cache_alloc_noprof+0x25e/0x770 [ 668.143579][T17314] ? getname_flags.part.0+0x4c/0x550 [ 668.143608][T17314] ? getname_flags+0x93/0xf0 [ 668.143642][T17314] ? acct_on+0x82/0xa00 [ 668.143675][T17314] ? __x64_sys_acct+0x81/0x1e0 [ 668.143709][T17314] ? do_syscall_64+0xcd/0xf80 [ 668.143756][T17314] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.143793][T17314] do_filp_open+0x20b/0x470 [ 668.143838][T17314] ? __pfx_do_filp_open+0x10/0x10 [ 668.143902][T17314] ? find_held_lock+0x2b/0x80 [ 668.143932][T17314] ? __might_fault+0xe3/0x190 [ 668.143960][T17314] ? __might_fault+0xe3/0x190 [ 668.143986][T17314] ? __might_fault+0x13b/0x190 [ 668.144019][T17314] file_open_name+0x2a3/0x450 [ 668.144052][T17314] ? __pfx_file_open_name+0x10/0x10 [ 668.144088][T17314] ? getname_flags.part.0+0x1c5/0x550 [ 668.144125][T17314] acct_on+0xc7/0xa00 [ 668.144162][T17314] ? __pfx_acct_on+0x10/0x10 [ 668.144200][T17314] ? bpf_lsm_capable+0x9/0x10 [ 668.144244][T17314] __x64_sys_acct+0x81/0x1e0 [ 668.144278][T17314] ? lockdep_hardirqs_on+0x7c/0x110 [ 668.144318][T17314] do_syscall_64+0xcd/0xf80 [ 668.144362][T17314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.144392][T17314] RIP: 0033:0x7f7dda78f7c9 [ 668.144417][T17314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 668.144446][T17314] RSP: 002b:00007f7ddb5c6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 668.144474][T17314] RAX: ffffffffffffffda RBX: 00007f7dda9e5fa0 RCX: 00007f7dda78f7c9 [ 668.144493][T17314] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 668.144511][T17314] RBP: 00007f7dda813f91 R08: 0000000000000000 R09: 0000000000000000 [ 668.144528][T17314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 668.144546][T17314] R13: 00007f7dda9e6038 R14: 00007f7dda9e5fa0 R15: 00007ffe9b289a08 [ 668.144586][T17314] [ 668.504126][T17314] ERROR: Out of memory at tomoyo_realpath_from_path. [ 669.050594][T17329] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2289'. [ 669.071290][T17329] bond0: entered promiscuous mode [ 669.083987][T17329] bond_slave_0: entered promiscuous mode [ 669.102177][T17329] bond0: entered allmulticast mode [ 669.111971][T17331] futex_wake_op: syz.5.2290 tries to shift op by -2048; fix this program [ 669.121422][T17329] bond_slave_0: entered allmulticast mode [ 669.154157][T17331] futex_wake_op: syz.5.2290 tries to shift op by -2048; fix this program [ 669.186225][T17331] 0x000000000001-0x000000020000 : "" [ 669.211873][T17335] lo: entered allmulticast mode [ 669.219569][T17331] ftl_cs: FTL header corrupt! [ 669.259921][T17335] lo: left allmulticast mode [ 669.453081][T17335] zswap: compressor û not available [ 669.474202][T17343] Setting dangerous option i915.mitigations - tainting kernel [ 669.495574][T17341] Setting dangerous option i915.mitigations - tainting kernel [ 670.074884][T17356] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 670.452946][ T7830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 670.494397][ T7830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 670.505686][ T7830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 670.528077][ T7830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 670.545418][ T7830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 670.892868][T17369] zswap: compressor not available [ 672.039090][T17388] netlink: 'syz.0.2300': attribute type 11 has an invalid length. [ 672.096048][T10759] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.667674][T10759] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.724658][ T7830] Bluetooth: hci4: command tx timeout [ 672.804915][T10759] bridge0: port 3(netdevsim1) entered disabled state [ 672.856752][T10759] netdevsim netdevsim3 netdevsim1 (unregistering): left allmulticast mode [ 672.876392][T10759] netdevsim netdevsim3 netdevsim1 (unregistering): left promiscuous mode [ 672.910345][T10759] bridge0: port 3(netdevsim1) entered disabled state [ 672.993628][T10759] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.021065][T17401] zswap: compressor not available [ 673.183494][T10759] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.298803][T17364] chnl_net:caif_netlink_parms(): no params data found [ 673.720159][T17412] vhci_hcd: not connected 4 [ 673.795082][T10759] team0: left allmulticast mode [ 673.812820][T10759] team_slave_0: left allmulticast mode [ 673.822962][T10759] team_slave_1: left allmulticast mode [ 673.833188][T10759] team0: left promiscuous mode [ 673.839086][T10759] team_slave_0: left promiscuous mode [ 673.854251][T10759] team_slave_1: left promiscuous mode [ 673.860202][T10759] bridge0: port 4(team0) entered disabled state [ 673.877492][T10759] bridge_slave_1: left allmulticast mode [ 673.893431][T10759] bridge_slave_1: left promiscuous mode [ 673.904813][T10759] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.926309][T10759] bridge_slave_0: left allmulticast mode [ 673.932175][T10759] bridge_slave_0: left promiscuous mode [ 673.946552][T10759] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.108762][T17414] zswap: compressor not available [ 674.804274][ T7830] Bluetooth: hci4: command tx timeout [ 674.898033][T10759] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 674.930779][T10759] bond_slave_0: left promiscuous mode [ 674.937547][T10759] bond_slave_0: left allmulticast mode [ 674.955297][T10759] bond0 (unregistering): Released all slaves [ 675.131789][T17364] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.152645][T17364] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.176971][T17364] bridge_slave_0: entered allmulticast mode [ 675.195992][T17364] bridge_slave_0: entered promiscuous mode [ 675.213322][T10759] HfR: left promiscuous mode [ 675.302572][T17364] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.320252][T17364] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.344592][T17364] bridge_slave_1: entered allmulticast mode [ 675.384941][T17364] bridge_slave_1: entered promiscuous mode [ 675.495371][T17364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 675.547363][T17364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 675.577203][T10759] tipc: Left network mode [ 675.696346][T17364] team0: Port device team_slave_0 added [ 675.700669][T17424] FAULT_INJECTION: forcing a failure. [ 675.700669][T17424] name failslab, interval 1, probability 0, space 0, times 0 [ 675.725678][T17424] CPU: 0 UID: 0 PID: 17424 Comm: syz.0.2307 Tainted: G U L syzkaller #0 PREEMPT(full) [ 675.725708][T17424] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 675.725714][T17424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 675.725724][T17424] Call Trace: [ 675.725730][T17424] [ 675.725737][T17424] dump_stack_lvl+0x16c/0x1f0 [ 675.725764][T17424] should_fail_ex+0x512/0x640 [ 675.725781][T17424] ? fs_reclaim_acquire+0xae/0x150 [ 675.725806][T17424] should_failslab+0xc2/0x120 [ 675.725836][T17424] __kmalloc_noprof+0xeb/0x910 [ 675.725853][T17424] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 675.725878][T17424] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 675.725898][T17424] tomoyo_realpath_from_path+0xc2/0x6e0 [ 675.725924][T17424] tomoyo_check_open_permission+0x2ab/0x3c0 [ 675.725943][T17424] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 675.725979][T17424] ? do_raw_spin_lock+0x12c/0x2b0 [ 675.726001][T17424] tomoyo_file_open+0x6b/0x90 [ 675.726024][T17424] security_file_open+0x84/0x1e0 [ 675.726043][T17424] do_dentry_open+0x597/0x1590 [ 675.726066][T17424] ? security_inode_permission+0xbf/0x260 [ 675.726086][T17424] vfs_open+0x82/0x3f0 [ 675.726104][T17424] path_openat+0x2078/0x3140 [ 675.726132][T17424] ? __pfx_path_openat+0x10/0x10 [ 675.726160][T17424] do_filp_open+0x20b/0x470 [ 675.726181][T17424] ? __pfx_do_filp_open+0x10/0x10 [ 675.726216][T17424] ? alloc_fd+0x471/0x7d0 [ 675.726242][T17424] do_sys_openat2+0x121/0x290 [ 675.726258][T17424] ? __pfx_do_sys_openat2+0x10/0x10 [ 675.726282][T17424] __x64_sys_openat+0x174/0x210 [ 675.726299][T17424] ? __pfx___x64_sys_openat+0x10/0x10 [ 675.726323][T17424] do_syscall_64+0xcd/0xf80 [ 675.726345][T17424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.726361][T17424] RIP: 0033:0x7fb63df8f7c9 [ 675.726374][T17424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 675.726388][T17424] RSP: 002b:00007fb63ee57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 675.726402][T17424] RAX: ffffffffffffffda RBX: 00007fb63e1e5fa0 RCX: 00007fb63df8f7c9 [ 675.726413][T17424] RDX: 0000000000020800 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 675.726422][T17424] RBP: 00007fb63e013f91 R08: 0000000000000000 R09: 0000000000000000 [ 675.726432][T17424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 675.726441][T17424] R13: 00007fb63e1e6038 R14: 00007fb63e1e5fa0 R15: 00007ffdba07b4b8 [ 675.726461][T17424] [ 675.726469][T17424] ERROR: Out of memory at tomoyo_realpath_from_path. [ 676.038704][T17364] team0: Port device team_slave_1 added [ 676.256635][T17364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 676.283949][T17364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 676.354016][T17364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 676.562550][T17364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 676.573024][T17364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 676.658171][T17364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 676.760594][T17438] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2310'. [ 676.885590][ T7830] Bluetooth: hci4: command tx timeout [ 676.962493][T17445] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 676.965954][T17364] hsr_slave_0: entered promiscuous mode [ 677.005079][T17364] hsr_slave_1: entered promiscuous mode [ 677.011490][T17364] debugfs: 'hsr0' already exists in 'hsr' [ 677.064011][T17364] Cannot create hsr debugfs directory [ 677.396600][T17460] QAT: Device 8 not found [ 677.599859][T17470] netlink: 206 bytes leftover after parsing attributes in process `syz.5.2319'. [ 677.614960][T17469] FAULT_INJECTION: forcing a failure. [ 677.614960][T17469] name failslab, interval 1, probability 0, space 0, times 0 [ 677.628236][T17469] CPU: 1 UID: 0 PID: 17469 Comm: syz.0.2318 Tainted: G U L syzkaller #0 PREEMPT(full) [ 677.628286][T17469] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 677.628297][T17469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 677.628314][T17469] Call Trace: [ 677.628324][T17469] [ 677.628336][T17469] dump_stack_lvl+0x16c/0x1f0 [ 677.628385][T17469] should_fail_ex+0x512/0x640 [ 677.628415][T17469] ? fs_reclaim_acquire+0xae/0x150 [ 677.628462][T17469] should_failslab+0xc2/0x120 [ 677.628505][T17469] __kmalloc_noprof+0xeb/0x910 [ 677.628537][T17469] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 677.628584][T17469] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 677.628622][T17469] tomoyo_realpath_from_path+0xc2/0x6e0 [ 677.628671][T17469] ? tomoyo_profile+0x47/0x60 [ 677.628714][T17469] tomoyo_path_number_perm+0x245/0x580 [ 677.628745][T17469] ? tomoyo_path_number_perm+0x237/0x580 [ 677.628779][T17469] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 677.628848][T17469] ? d_alloc_parallel+0xb4e/0x1510 [ 677.628884][T17469] ? current_check_access_path+0x33b/0x460 [ 677.628920][T17469] ? __pfx_current_check_access_path+0x10/0x10 [ 677.628963][T17469] tomoyo_path_mknod+0x10c/0x190 [ 677.629001][T17469] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 677.629041][T17469] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 677.629087][T17469] security_path_mknod+0x161/0x310 [ 677.629119][T17469] lookup_open.isra.0+0xc10/0x1780 [ 677.629167][T17469] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 677.629211][T17469] ? find_held_lock+0x2b/0x80 [ 677.629257][T17469] ? __pfx_down_write+0x10/0x10 [ 677.629293][T17469] path_openat+0xa95/0x3140 [ 677.629348][T17469] ? __pfx_path_openat+0x10/0x10 [ 677.629396][T17469] ? __lock_acquire+0x436/0x2890 [ 677.629429][T17469] do_filp_open+0x20b/0x470 [ 677.629470][T17469] ? __pfx_do_filp_open+0x10/0x10 [ 677.629540][T17469] ? _raw_spin_unlock+0x28/0x50 [ 677.629577][T17469] ? alloc_fd+0x471/0x7d0 [ 677.629628][T17469] do_sys_openat2+0x121/0x290 [ 677.629667][T17469] ? __pfx_do_sys_openat2+0x10/0x10 [ 677.629716][T17469] __x64_sys_open+0x153/0x1e0 [ 677.629749][T17469] ? __pfx___x64_sys_open+0x10/0x10 [ 677.629790][T17469] ? rcu_is_watching+0x12/0xc0 [ 677.629835][T17469] do_syscall_64+0xcd/0xf80 [ 677.629879][T17469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.629910][T17469] RIP: 0033:0x7fb63df8f7c9 [ 677.629934][T17469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 677.629961][T17469] RSP: 002b:00007fb63ee57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 677.629989][T17469] RAX: ffffffffffffffda RBX: 00007fb63e1e5fa0 RCX: 00007fb63df8f7c9 [ 677.630009][T17469] RDX: 0000000000000084 RSI: 00000000000261c2 RDI: 0000200000000000 [ 677.630029][T17469] RBP: 00007fb63e013f91 R08: 0000000000000000 R09: 0000000000000000 [ 677.630047][T17469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 677.630066][T17469] R13: 00007fb63e1e6038 R14: 00007fb63e1e5fa0 R15: 00007ffdba07b4b8 [ 677.630106][T17469] [ 677.630199][T17469] ERROR: Out of memory at tomoyo_realpath_from_path. [ 678.132967][T10759] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 678.155352][T10759] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 678.177855][T10759] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 678.194022][T10759] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 678.238220][T10759] veth1_macvtap: left allmulticast mode [ 678.244984][T10759] veth1_macvtap: left promiscuous mode [ 678.251007][T10759] veth0_macvtap: left promiscuous mode [ 678.260349][T10759] veth1_vlan: left promiscuous mode [ 678.265983][T10759] veth0_vlan: left promiscuous mode [ 678.349455][T17480] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2323'. [ 678.963962][ T7830] Bluetooth: hci4: command tx timeout [ 679.661912][T10759] team0 (unregistering): Port device team_slave_1 removed [ 679.731205][T10759] team0 (unregistering): Port device team_slave_0 removed [ 680.411630][T17489] erspan0: entered allmulticast mode [ 680.729754][T17513] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input126 [ 681.178532][T17522] FAULT_INJECTION: forcing a failure. [ 681.178532][T17522] name failslab, interval 1, probability 0, space 0, times 0 [ 681.235282][T17522] CPU: 0 UID: 0 PID: 17522 Comm: syz.6.2329 Tainted: G U L syzkaller #0 PREEMPT(full) [ 681.235319][T17522] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 681.235326][T17522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 681.235336][T17522] Call Trace: [ 681.235342][T17522] [ 681.235348][T17522] dump_stack_lvl+0x16c/0x1f0 [ 681.235375][T17522] should_fail_ex+0x512/0x640 [ 681.235393][T17522] ? fs_reclaim_acquire+0xae/0x150 [ 681.235419][T17522] should_failslab+0xc2/0x120 [ 681.235442][T17522] __kmalloc_noprof+0xeb/0x910 [ 681.235459][T17522] ? ima_alloc_init_template+0x19d/0x720 [ 681.235479][T17522] ? ima_alloc_init_template+0x19d/0x720 [ 681.235493][T17522] ima_alloc_init_template+0x19d/0x720 [ 681.235510][T17522] ? take_dentry_name_snapshot+0x319/0x7d0 [ 681.235530][T17522] ima_store_measurement+0x1eb/0x5c0 [ 681.235547][T17522] ? __pfx_ima_store_measurement+0x10/0x10 [ 681.235562][T17522] ? release_dentry_name_snapshot+0x10/0x90 [ 681.235585][T17522] ? ima_d_path+0x12b/0x2a0 [ 681.235604][T17522] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 681.235630][T17522] process_measurement+0x17fa/0x22d0 [ 681.235659][T17522] ? __pfx_process_measurement+0x10/0x10 [ 681.235680][T17522] ? kasan_save_stack+0x42/0x60 [ 681.235699][T17522] ? kasan_save_track+0x14/0x30 [ 681.235717][T17522] ? kmem_cache_alloc_noprof+0x25e/0x770 [ 681.235739][T17522] ? find_held_lock+0x2b/0x80 [ 681.235759][T17522] ? aa_file_perm+0x29e/0x1560 [ 681.235800][T17522] ima_file_mmap+0x1b6/0x1e0 [ 681.235822][T17522] ? __pfx_ima_file_mmap+0x10/0x10 [ 681.235849][T17522] security_mmap_file+0x88c/0x990 [ 681.235869][T17522] vm_mmap_pgoff+0xec/0x470 [ 681.235891][T17522] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 681.235910][T17522] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 681.235928][T17522] ? hugetlbfs_get_inode+0x31f/0x700 [ 681.235948][T17522] ksys_mmap_pgoff+0x1c8/0x5c0 [ 681.235973][T17522] __x64_sys_mmap+0x125/0x190 [ 681.235991][T17522] do_syscall_64+0xcd/0xf80 [ 681.236014][T17522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.236029][T17522] RIP: 0033:0x7fa94d18f7c9 [ 681.236043][T17522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 681.236057][T17522] RSP: 002b:00007fa94e0c4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 681.236071][T17522] RAX: ffffffffffffffda RBX: 00007fa94d3e5fa0 RCX: 00007fa94d18f7c9 [ 681.236081][T17522] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 681.236090][T17522] RBP: 00007fa94d213f91 R08: 0000000000000401 R09: 0000300000000000 [ 681.236099][T17522] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 681.236109][T17522] R13: 00007fa94d3e6038 R14: 00007fa94d3e5fa0 R15: 00007ffd2fcd0b98 [ 681.236129][T17522] [ 681.237707][ T30] audit: type=1804 audit(4294967371.910:39): pid=17522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.6.2329" name="anon_hugepage" dev="hugetlbfs" ino=78857 res=0 errno=0 [ 681.450579][T17364] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 681.779124][T17364] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 681.820211][T17364] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 681.897568][T17364] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 682.338075][T17364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 682.398986][T17364] 8021q: adding VLAN 0 to HW filter on device team0 [ 682.483240][ T7636] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.490500][ T7636] bridge0: port 1(bridge_slave_0) entered forwarding state [ 682.597073][ T7468] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.604267][ T7468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 683.177003][T17364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 683.330385][T17364] veth0_vlan: entered promiscuous mode [ 683.386587][T17364] veth1_vlan: entered promiscuous mode [ 683.556829][T17364] veth0_macvtap: entered promiscuous mode [ 683.664679][T17364] veth1_macvtap: entered promiscuous mode [ 683.817695][T17364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 683.940138][T17364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 684.067512][ T7636] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.087557][ T7636] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.109799][ T7636] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.274427][ T7636] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.659349][T10771] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 684.670103][T10771] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.242580][T10771] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.274069][T10771] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 686.125209][ T30] audit: type=1800 audit(4294967376.800:40): pid=17621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2350" name="dbroot" dev="configfs" ino=80172 res=0 errno=0 [ 686.191365][T17622] vhci_hcd vhci_hcd.1: default hub control req: 0000 v0000 i0000 l0 [ 686.820390][T17633] FAULT_INJECTION: forcing a failure. [ 686.820390][T17633] name failslab, interval 1, probability 0, space 0, times 0 [ 686.842665][T17633] CPU: 0 UID: 0 PID: 17633 Comm: syz.0.2353 Tainted: G U L syzkaller #0 PREEMPT(full) [ 686.842717][T17633] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 686.842729][T17633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 686.842748][T17633] Call Trace: [ 686.842757][T17633] [ 686.842768][T17633] dump_stack_lvl+0x16c/0x1f0 [ 686.842815][T17633] should_fail_ex+0x512/0x640 [ 686.842847][T17633] ? __kmalloc_cache_noprof+0x5f/0x800 [ 686.842884][T17633] should_failslab+0xc2/0x120 [ 686.842927][T17633] __kmalloc_cache_noprof+0x80/0x800 [ 686.842959][T17633] ? __pfx_find_ucounts+0x10/0x10 [ 686.843004][T17633] ? alloc_ucounts+0x13d/0x5c0 [ 686.843036][T17633] ? alloc_ucounts+0x13d/0x5c0 [ 686.843062][T17633] alloc_ucounts+0x13d/0x5c0 [ 686.843090][T17633] ? __pfx_alloc_ucounts+0x10/0x10 [ 686.843133][T17633] set_cred_ucounts+0xcd/0x200 [ 686.843174][T17633] __sys_setuid+0x2b6/0x440 [ 686.843215][T17633] do_syscall_64+0xcd/0xf80 [ 686.843260][T17633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.843291][T17633] RIP: 0033:0x7fb63df8f7c9 [ 686.843314][T17633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 686.843343][T17633] RSP: 002b:00007fb63ee36038 EFLAGS: 00000246 ORIG_RAX: 0000000000000069 [ 686.843370][T17633] RAX: ffffffffffffffda RBX: 00007fb63e1e6090 RCX: 00007fb63df8f7c9 [ 686.843390][T17633] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 686.843408][T17633] RBP: 00007fb63e013f91 R08: 0000000000000000 R09: 0000000000000000 [ 686.843426][T17633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 686.843443][T17633] R13: 00007fb63e1e6128 R14: 00007fb63e1e6090 R15: 00007ffdba07b4b8 [ 686.843482][T17633] [ 687.406195][T17645] netlink: 326 bytes leftover after parsing attributes in process `syz.6.2356'. [ 687.967904][T17672] Invalid ELF header magic: != ELF [ 688.309080][T17655] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 688.318352][T17655] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 688.365629][T17655] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 688.388333][T17655] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 688.395528][T17655] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 688.407693][T17655] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 688.657959][T17681] netlink: 326 bytes leftover after parsing attributes in process `syz.0.2363'. [ 689.234836][T17688] netlink: 322 bytes leftover after parsing attributes in process `syz.5.2367'. [ 689.414603][ T7222] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 689.426938][ T7222] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 689.436431][ T7222] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 689.445350][ T7222] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 689.453132][ T7222] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 689.694357][ T7222] Bluetooth: hci2: command 0x0c1a tx timeout [ 690.066822][T17704] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 690.324409][ T7222] Bluetooth: hci0: command 0x0c1a tx timeout [ 690.413603][ T7830] Bluetooth: hci1: command 0x0c1a tx timeout [ 690.420388][ T7222] Bluetooth: hci4: command 0x0c1a tx timeout [ 690.470599][T17696] chnl_net:caif_netlink_parms(): no params data found [ 691.210075][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.216540][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.524081][ T7830] Bluetooth: hci3: command tx timeout [ 691.842319][T11530] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.420488][T11530] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.495242][ T7830] Bluetooth: hci4: command 0x0c1a tx timeout [ 692.798608][T11530] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.840315][T17696] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.873389][T17696] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.893991][T17696] bridge_slave_0: entered allmulticast mode [ 692.925435][T17696] bridge_slave_0: entered promiscuous mode [ 692.945951][T17696] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.965908][T17696] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.973342][T17696] bridge_slave_1: entered allmulticast mode [ 692.999528][T17696] bridge_slave_1: entered promiscuous mode [ 693.176844][T17696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 693.272941][T17696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 693.503784][T17696] team0: Port device team_slave_0 added [ 693.603959][ T7830] Bluetooth: hci3: command tx timeout [ 693.711761][T17696] team0: Port device team_slave_1 added [ 693.870406][T17696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 693.913929][T17696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 693.953447][T17725] FAULT_INJECTION: forcing a failure. [ 693.953447][T17725] name failslab, interval 1, probability 0, space 0, times 0 [ 693.981999][T17696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 693.992899][T17725] CPU: 0 UID: 0 PID: 17725 Comm: syz.5.2375 Tainted: G U L syzkaller #0 PREEMPT(full) [ 693.992942][T17725] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 693.992953][T17725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 693.992968][T17725] Call Trace: [ 693.992978][T17725] [ 693.992989][T17725] dump_stack_lvl+0x16c/0x1f0 [ 693.993034][T17725] should_fail_ex+0x512/0x640 [ 693.993064][T17725] ? fs_reclaim_acquire+0xae/0x150 [ 693.993109][T17725] should_failslab+0xc2/0x120 [ 693.993150][T17725] kmem_cache_alloc_noprof+0x83/0x770 [ 693.993181][T17725] ? __kernfs_new_node+0xd2/0x990 [ 693.993219][T17725] ? __kernfs_new_node+0xd2/0x990 [ 693.993249][T17725] __kernfs_new_node+0xd2/0x990 [ 693.993285][T17725] ? __pfx___kernfs_new_node+0x10/0x10 [ 693.993326][T17725] ? find_held_lock+0x2b/0x80 [ 693.993363][T17725] ? kernfs_root+0xee/0x2a0 [ 693.993402][T17725] kernfs_new_node+0x13c/0x1e0 [ 693.993452][T17725] __kernfs_create_file+0x53/0x350 [ 693.993496][T17725] sysfs_add_file_mode_ns+0x207/0x3c0 [ 693.993531][T17725] internal_create_group+0x597/0xf70 [ 693.993568][T17725] ? __pfx_internal_create_group+0x10/0x10 [ 693.993602][T17725] ? sysfs_create_dir_ns+0x14c/0x2b0 [ 693.993632][T17725] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 693.993661][T17725] ? rcu_is_watching+0x12/0xc0 [ 693.993703][T17725] internal_create_groups+0x9d/0x150 [ 693.993740][T17725] kobject_add_internal+0x311/0x9d0 [ 693.993765][T17725] ? kfree_const+0x55/0x60 [ 693.993800][T17725] kobject_add+0x16e/0x240 [ 693.993826][T17725] ? __pfx_kobject_add+0x10/0x10 [ 693.993853][T17725] ? __pfx_kobject_add+0x10/0x10 [ 693.993895][T17725] blk_register_queue+0x89/0x4e0 [ 693.993941][T17725] __add_disk+0x74a/0xf00 [ 693.993986][T17725] add_disk_fwnode+0x13f/0x5d0 [ 693.994026][T17725] loop_add+0x903/0xb70 [ 693.994068][T17725] ? __pfx_loop_add+0x10/0x10 [ 693.994129][T17725] ? rcu_is_watching+0x12/0xc0 [ 693.994173][T17725] loop_control_ioctl+0x13e/0x630 [ 693.994215][T17725] ? __pfx_loop_control_ioctl+0x10/0x10 [ 693.994254][T17725] ? __x64_sys_ioctl+0x94/0x210 [ 693.994285][T17725] ? security_file_ioctl+0x18/0x240 [ 693.994321][T17725] ? __pfx_loop_control_ioctl+0x10/0x10 [ 693.994364][T17725] __x64_sys_ioctl+0x18e/0x210 [ 693.994401][T17725] do_syscall_64+0xcd/0xf80 [ 693.994448][T17725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.994478][T17725] RIP: 0033:0x7f014cd8f7c9 [ 693.994500][T17725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 693.994525][T17725] RSP: 002b:00007f014db87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 693.994550][T17725] RAX: ffffffffffffffda RBX: 00007f014cfe6090 RCX: 00007f014cd8f7c9 [ 693.994568][T17725] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000044 [ 693.994586][T17725] RBP: 00007f014ce13f91 R08: 0000000000000000 R09: 0000000000000000 [ 693.994602][T17725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 693.994619][T17725] R13: 00007f014cfe6128 R14: 00007f014cfe6090 R15: 00007ffee6a65508 [ 693.994656][T17725] [ 694.324763][T17725] kobject: kobject_add_internal failed for queue (error: -12 parent: loop33) [ 694.403829][T11530] bridge_slave_1: left allmulticast mode [ 694.411899][T11530] bridge_slave_1: left promiscuous mode [ 694.584097][ T7830] Bluetooth: hci4: command 0x0c1a tx timeout [ 694.637316][T11530] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.754273][T11530] bridge_slave_0: left allmulticast mode [ 694.760279][T11530] bridge_slave_0: left promiscuous mode [ 694.770660][T17735] futex_wake_op: syz.3.2373 tries to shift op by -2048; fix this program [ 694.784732][T11530] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.824239][T17735] futex_wake_op: syz.3.2373 tries to shift op by -2048; fix this program [ 694.949230][T17740] FAULT_INJECTION: forcing a failure. [ 694.949230][T17740] name failslab, interval 1, probability 0, space 0, times 0 [ 694.979223][T17740] CPU: 1 UID: 0 PID: 17740 Comm: syz.5.2377 Tainted: G U L syzkaller #0 PREEMPT(full) [ 694.979273][T17740] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 694.979285][T17740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 694.979299][T17740] Call Trace: [ 694.979306][T17740] [ 694.979312][T17740] dump_stack_lvl+0x16c/0x1f0 [ 694.979339][T17740] should_fail_ex+0x512/0x640 [ 694.979363][T17740] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 694.979397][T17740] should_failslab+0xc2/0x120 [ 694.979424][T17740] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 694.979444][T17740] ? __d_alloc+0x35/0xa80 [ 694.979470][T17740] ? __d_alloc+0x35/0xa80 [ 694.979491][T17740] __d_alloc+0x35/0xa80 [ 694.979516][T17740] d_alloc_pseudo+0x1c/0xc0 [ 694.979533][T17740] alloc_file_pseudo+0xcf/0x230 [ 694.979550][T17740] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 694.979566][T17740] ? alloc_fd+0x471/0x7d0 [ 694.979590][T17740] sock_alloc_file+0x50/0x210 [ 694.979611][T17740] __sys_socket+0x1c0/0x260 [ 694.979623][T17740] ? fput+0x70/0xf0 [ 694.979636][T17740] ? __pfx___sys_socket+0x10/0x10 [ 694.979650][T17740] ? xfd_validate_state+0x61/0x180 [ 694.979664][T17740] ? __pfx_ksys_write+0x10/0x10 [ 694.979688][T17740] __x64_sys_socket+0x72/0xb0 [ 694.979701][T17740] ? lockdep_hardirqs_on+0x7c/0x110 [ 694.979722][T17740] do_syscall_64+0xcd/0xf80 [ 694.979744][T17740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.979759][T17740] RIP: 0033:0x7f014cd8f7c9 [ 694.979773][T17740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 694.979787][T17740] RSP: 002b:00007f014dba8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 694.979802][T17740] RAX: ffffffffffffffda RBX: 00007f014cfe5fa0 RCX: 00007f014cd8f7c9 [ 694.979812][T17740] RDX: 0000000000000300 RSI: 0000000000080003 RDI: 0000000000000011 [ 694.979822][T17740] RBP: 00007f014ce13f91 R08: 0000000000000000 R09: 0000000000000000 [ 694.979831][T17740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 694.979840][T17740] R13: 00007f014cfe6038 R14: 00007f014cfe5fa0 R15: 00007ffee6a65508 [ 694.979861][T17740] [ 695.371382][T17746] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 695.456303][ T7830] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 695.576473][T11530] erspan0 (unregistering): left allmulticast mode [ 695.687351][ T7830] Bluetooth: hci3: command tx timeout [ 695.810334][T11530] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 695.830970][T11530] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 695.842484][T11530] bond0 (unregistering): Released all slaves [ 695.859356][T17696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 695.872852][T17696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 695.937490][T17696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 695.978526][T11530] ovs_: left promiscuous mode [ 696.266957][T17696] hsr_slave_0: entered promiscuous mode [ 696.284425][T17696] hsr_slave_1: entered promiscuous mode [ 696.290841][T17696] debugfs: 'hsr0' already exists in 'hsr' [ 696.303954][T17696] Cannot create hsr debugfs directory [ 696.876133][T17761] sg_write: data in/out 8156/1 bytes for SCSI command 0x0-- guessing data in; [ 696.876133][T17761] program syz.3.2382 not setting count and/or reply_len properly [ 697.529290][T11530] hsr_slave_0: left promiscuous mode [ 697.539633][T11530] hsr_slave_1: left promiscuous mode [ 697.662453][T11530] veth1_macvtap: left promiscuous mode [ 697.700341][T11530] veth0_macvtap: left promiscuous mode [ 697.721752][T11530] veth1_vlan: left promiscuous mode [ 697.747362][T11530] veth0_vlan: left promiscuous mode [ 697.764118][ T7830] Bluetooth: hci3: command tx timeout [ 698.112940][T17783] zswap: compressor not available [ 699.255566][T11530] team0 (unregistering): Port device team_slave_1 removed [ 699.370975][T11530] team0 (unregistering): Port device team_slave_0 removed [ 700.218345][T17791] ovs_: entered promiscuous mode [ 700.255608][T17800] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 700.261759][T17800] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 700.274222][T17800] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 700.283502][T17800] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 700.315869][T17800] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 700.391300][T17800] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 700.649995][T17696] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 700.677933][T17696] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 700.741355][T17696] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 700.749912][T17806] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input127 [ 700.794441][T17696] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 701.137613][T17807] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input128 [ 701.609153][T17828] input: jJǸí¸ü;9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input129 [ 701.906096][T17823] zswap: compressor û not available [ 702.214650][T17696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 702.334164][ T7222] Bluetooth: hci4: command 0x0c1a tx timeout [ 702.340248][ T7222] Bluetooth: hci1: command 0x0c1a tx timeout [ 702.347350][T10483] Bluetooth: hci0: command 0x0c1a tx timeout [ 702.353418][ T7830] Bluetooth: hci3: command 0x0c1a tx timeout [ 702.357958][T17696] 8021q: adding VLAN 0 to HW filter on device team0 [ 702.420694][T10756] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.427831][T10756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 702.533490][T10756] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.540737][T10756] bridge0: port 2(bridge_slave_1) entered forwarding state [ 703.275021][T17860] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 703.422952][T17864] FAULT_INJECTION: forcing a failure. [ 703.422952][T17864] name failslab, interval 1, probability 0, space 0, times 0 [ 703.476277][T17696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 703.485624][T17864] CPU: 0 UID: 0 PID: 17864 Comm: syz.3.2402 Tainted: G U L syzkaller #0 PREEMPT(full) [ 703.485670][T17864] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 703.485680][T17864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 703.485695][T17864] Call Trace: [ 703.485704][T17864] [ 703.485714][T17864] dump_stack_lvl+0x16c/0x1f0 [ 703.485757][T17864] should_fail_ex+0x512/0x640 [ 703.485784][T17864] ? __kmalloc_noprof+0xca/0x910 [ 703.485814][T17864] should_failslab+0xc2/0x120 [ 703.485852][T17864] __kmalloc_noprof+0xeb/0x910 [ 703.485877][T17864] ? fib_rules_register+0x403/0x500 [ 703.485914][T17864] ? fib_default_rule_add+0x4f/0x420 [ 703.485952][T17864] ? fib_default_rule_add+0x4f/0x420 [ 703.485985][T17864] fib_default_rule_add+0x4f/0x420 [ 703.486024][T17864] fib4_rules_init+0x7c/0x1c0 [ 703.486057][T17864] fib_net_init+0x1dc/0x3f0 [ 703.486095][T17864] ? __pfx___register_sysctl_table+0x10/0x10 [ 703.486132][T17864] ? __pfx_fib_net_init+0x10/0x10 [ 703.486170][T17864] ? lockdep_init_map_type+0x5c/0x270 [ 703.486199][T17864] ? do_init_timer+0xc9/0x110 [ 703.486240][T17864] ? devinet_init_net+0x5c2/0x910 [ 703.486270][T17864] ? __pfx_fib_net_init+0x10/0x10 [ 703.486308][T17864] ops_init+0x1e2/0x5f0 [ 703.486354][T17864] setup_net+0x11d/0x3a0 [ 703.486390][T17864] ? __pfx_setup_net+0x10/0x10 [ 703.486422][T17864] ? lockdep_init_map_type+0x5c/0x270 [ 703.486450][T17864] ? mutex_init_lockep+0x110/0x150 [ 703.486484][T17864] copy_net_ns+0x351/0x7c0 [ 703.486526][T17864] create_new_namespaces+0x3ea/0xab0 [ 703.486571][T17864] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 703.486610][T17864] ksys_unshare+0x45b/0xa40 [ 703.486651][T17864] ? __pfx_ksys_unshare+0x10/0x10 [ 703.486695][T17864] ? syscall_user_dispatch+0x78/0x140 [ 703.486738][T17864] __x64_sys_unshare+0x31/0x40 [ 703.486762][T17864] do_syscall_64+0xcd/0xf80 [ 703.486802][T17864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.486830][T17864] RIP: 0033:0x7f2494f8f7c9 [ 703.486852][T17864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 703.486878][T17864] RSP: 002b:00007f24931f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 703.486904][T17864] RAX: ffffffffffffffda RBX: 00007f24951e5fa0 RCX: 00007f2494f8f7c9 [ 703.486923][T17864] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 703.486940][T17864] RBP: 00007f2495013f91 R08: 0000000000000000 R09: 0000000000000000 [ 703.486957][T17864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 703.486974][T17864] R13: 00007f24951e6038 R14: 00007f24951e5fa0 R15: 00007ffefecce8d8 [ 703.487011][T17864] [ 703.872479][T17696] veth0_vlan: entered promiscuous mode [ 703.957930][T17696] veth1_vlan: entered promiscuous mode [ 704.002589][T17696] veth0_macvtap: entered promiscuous mode [ 704.028241][T17696] veth1_macvtap: entered promiscuous mode [ 704.054363][T17696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 704.071555][T17696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 704.094569][ T7637] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.158560][ T7637] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.168383][ T7637] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.186690][ T7637] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.405510][T17074] Bluetooth: hci3: command 0x0c1a tx timeout [ 704.412113][T10771] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.424885][T10771] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.583466][ T7468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.606575][ T7468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.774939][T17886] Unable to find swap-space signature [ 705.108529][T17894] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 705.908266][T17917] FAULT_INJECTION: forcing a failure. [ 705.908266][T17917] name failslab, interval 1, probability 0, space 0, times 0 [ 705.944549][T17917] CPU: 1 UID: 0 PID: 17917 Comm: syz.3.2412 Tainted: G U L syzkaller #0 PREEMPT(full) [ 705.944601][T17917] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 705.944614][T17917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 705.944630][T17917] Call Trace: [ 705.944638][T17917] [ 705.944644][T17917] dump_stack_lvl+0x16c/0x1f0 [ 705.944672][T17917] should_fail_ex+0x512/0x640 [ 705.944689][T17917] ? __kmalloc_cache_noprof+0x5f/0x800 [ 705.944709][T17917] should_failslab+0xc2/0x120 [ 705.944732][T17917] __kmalloc_cache_noprof+0x80/0x800 [ 705.944749][T17917] ? snd_pcm_hw_param_near.constprop.0+0x72f/0x8e0 [ 705.944774][T17917] ? snd_pcm_hw_param_near.constprop.0+0xbc/0x8e0 [ 705.944800][T17917] ? snd_pcm_hw_param_near.constprop.0+0xbc/0x8e0 [ 705.944824][T17917] snd_pcm_hw_param_near.constprop.0+0xbc/0x8e0 [ 705.944855][T17917] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 705.944879][T17917] ? __asan_memset+0x23/0x50 [ 705.944896][T17917] ? calc_src_frames.isra.0+0x187/0x1d0 [ 705.944916][T17917] snd_pcm_oss_change_params_locked+0x1572/0x3ab0 [ 705.944950][T17917] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 705.944975][T17917] ? __pfx___mutex_lock+0x10/0x10 [ 705.944996][T17917] ? snd_pcm_oss_ioctl+0x110e/0x37f0 [ 705.945023][T17917] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 705.945050][T17917] snd_pcm_oss_ioctl+0x2212/0x37f0 [ 705.945066][T17917] ? hook_file_ioctl_common+0x144/0x410 [ 705.945084][T17917] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 705.945102][T17917] ? __fget_files+0x20e/0x3c0 [ 705.945125][T17917] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 705.945141][T17917] __x64_sys_ioctl+0x18e/0x210 [ 705.945160][T17917] do_syscall_64+0xcd/0xf80 [ 705.945183][T17917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.945198][T17917] RIP: 0033:0x7f2494f8f7c9 [ 705.945211][T17917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 705.945226][T17917] RSP: 002b:00007f24931f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 705.945241][T17917] RAX: ffffffffffffffda RBX: 00007f24951e5fa0 RCX: 00007f2494f8f7c9 [ 705.945251][T17917] RDX: 0000000000000000 RSI: 00000000c0045002 RDI: 0000000000000007 [ 705.945261][T17917] RBP: 00007f2495013f91 R08: 0000000000000000 R09: 0000000000000000 [ 705.945270][T17917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 705.945280][T17917] R13: 00007f24951e6038 R14: 00007f24951e5fa0 R15: 00007ffefecce8d8 [ 705.945300][T17917] [ 706.484469][T17074] Bluetooth: hci3: command 0x0c1a tx timeout [ 706.884415][T17928] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 706.889415][T17929] random: crng reseeded on system resumption [ 706.939835][T17921] usb usb2: usbfs: process 17921 (syz.3.2413) did not claim interface 0 before use [ 707.347463][T17950] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 707.558797][T17950] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 707.734313][T17950] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 707.921817][T17962] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 708.025006][T17950] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 708.119155][T17950] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 712.754335][T18077] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2442'. [ 712.799555][T18076] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2442'. [ 714.201628][T18119] random: crng reseeded on system resumption [ 714.434933][T17074] bt_warn_ratelimited: 23 callbacks suppressed [ 714.434956][T17074] Bluetooth: hci3: unexpected event 0x1c length: 725 > 5 [ 714.598994][T18124] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 716.406405][T18149] zswap: compressor not available [ 716.610665][T18150] zswap: compressor not available [ 718.179472][T18191] netlink: 334 bytes leftover after parsing attributes in process `syz.6.2465'. [ 719.728828][T18221] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2471'. [ 720.634415][T18233] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 721.762490][T18252] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input131 [ 722.027377][ T30] audit: type=1800 audit(4294967412.690:41): pid=18257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2481" name="features" dev="configfs" ino=83479 res=0 errno=0 [ 722.537392][T18271] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 722.585175][T18271] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [2147479552]. [ 722.649680][T18253] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input132 [ 722.888172][T18274] netlink: 'syz.0.2483': attribute type 11 has an invalid length. [ 723.592786][T18291] binder: 18290:18291 ioctl c0306201 0 returned -14 [ 723.620785][T18291] random: crng reseeded on system resumption [ 724.786020][T18311] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2492'. [ 725.834692][T18309] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 725.907907][T18309] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 725.937992][T18309] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 725.993788][T18309] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 726.450950][T18330] netlink: 342 bytes leftover after parsing attributes in process `syz.6.2495'. [ 727.845060][T17074] Bluetooth: hci0: command 0x0c1a tx timeout [ 727.924029][T17074] Bluetooth: hci1: command 0x0c1a tx timeout [ 728.009257][ T7830] Bluetooth: hci4: command 0x0c1a tx timeout [ 728.015486][T17074] Bluetooth: hci3: command 0x0c1a tx timeout [ 728.529687][T18377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2507'. [ 728.910239][T18392] netlink: 62 bytes leftover after parsing attributes in process `syz.6.2511'. [ 732.045217][T18430] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2522'. [ 732.086128][T18430] netlink: 17 bytes leftover after parsing attributes in process `syz.5.2522'. [ 732.108322][T18430] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2522'. [ 732.431791][T18441] sg_read: process 1104 (syz.6.2524) changed security contexts after opening file descriptor, this is not allowed. [ 733.327832][T18460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2527'. [ 736.600058][T18508] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input133 [ 736.695068][T18516] block2mtd: illegal erase size [ 737.215896][T18517] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input134 [ 738.458408][T18516] kexec: Could not allocate control_code_buffer [ 740.425920][T18585] __vm_enough_memory: pid: 18585, comm: syz.3.2555, bytes: 4398046511104 not enough memory for the allocation [ 741.718897][T18609] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2561'. [ 741.809584][T18613] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input135 [ 742.362436][T18623] random: crng reseeded on system resumption [ 742.545227][T18608] netlink: 334 bytes leftover after parsing attributes in process `syz.0.2559'. [ 743.043335][T18615] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input136 [ 743.347809][T18636] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2564'. [ 747.108797][T18694] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 747.224494][T18694] FAULT_INJECTION: forcing a failure. [ 747.224494][T18694] name failslab, interval 1, probability 0, space 0, times 0 [ 747.273812][T18697] __vm_enough_memory: pid: 18697, comm: syz.0.2578, bytes: 4398046511104 not enough memory for the allocation [ 747.274118][T18694] CPU: 1 UID: 0 PID: 18694 Comm: syz.3.2577 Tainted: G U L syzkaller #0 PREEMPT(full) [ 747.274163][T18694] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 747.274174][T18694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 747.274191][T18694] Call Trace: [ 747.274202][T18694] [ 747.274213][T18694] dump_stack_lvl+0x16c/0x1f0 [ 747.274260][T18694] should_fail_ex+0x512/0x640 [ 747.274290][T18694] ? kmem_cache_alloc_noprof+0x62/0x770 [ 747.274333][T18694] should_failslab+0xc2/0x120 [ 747.274375][T18694] kmem_cache_alloc_noprof+0x83/0x770 [ 747.274407][T18694] ? __asan_memset+0x23/0x50 [ 747.274438][T18694] ? copy_fs_struct+0x49/0x340 [ 747.274478][T18694] ? copy_fs_struct+0x49/0x340 [ 747.274510][T18694] copy_fs_struct+0x49/0x340 [ 747.274544][T18694] copy_process+0x329c/0x7430 [ 747.274583][T18694] ? __pfx___schedule+0x10/0x10 [ 747.274635][T18694] ? __pfx_copy_process+0x10/0x10 [ 747.274686][T18694] ? _copy_from_user+0x59/0xd0 [ 747.274720][T18694] kernel_clone+0xfc/0x910 [ 747.274762][T18694] ? __pfx_kernel_clone+0x10/0x10 [ 747.274808][T18694] ? futex_private_hash_put+0x160/0x1b0 [ 747.274849][T18694] ? __pfx_futex_wake+0x10/0x10 [ 747.274893][T18694] __do_sys_clone3+0x212/0x290 [ 747.274935][T18694] ? __pfx___do_sys_clone3+0x10/0x10 [ 747.275019][T18694] do_syscall_64+0xcd/0xf80 [ 747.275061][T18694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.275090][T18694] RIP: 0033:0x7f2494f8f7c9 [ 747.275112][T18694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 747.275142][T18694] RSP: 002b:00007f24931f5f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 747.275169][T18694] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f2494f8f7c9 [ 747.275187][T18694] RDX: 00007f24931f5f20 RSI: 0000000000000058 RDI: 00007f24931f5f20 [ 747.275206][T18694] RBP: 00007f2495013f91 R08: 0000000000000000 R09: 0000000000000058 [ 747.275224][T18694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 747.275241][T18694] R13: 00007f24951e6038 R14: 00007f24951e5fa0 R15: 00007ffefecce8d8 [ 747.275278][T18694] [ 747.328705][T18694] vhci_hcd vhci_hcd.2: default hub control req: 0000 v0000 i0000 l0 [ 748.538242][T18724] __vm_enough_memory: pid: 18724, comm: syz.5.2589, bytes: 4398046511104 not enough memory for the allocation [ 748.578308][T18722] FAULT_INJECTION: forcing a failure. [ 748.578308][T18722] name fail_futex, interval 1, probability 0, space 0, times 0 [ 748.639032][T18722] CPU: 0 UID: 0 PID: 18722 Comm: syz.0.2588 Tainted: G U L syzkaller #0 PREEMPT(full) [ 748.639080][T18722] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 748.639092][T18722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 748.639109][T18722] Call Trace: [ 748.639117][T18722] [ 748.639129][T18722] dump_stack_lvl+0x16c/0x1f0 [ 748.639177][T18722] should_fail_ex+0x512/0x640 [ 748.639207][T18722] ? arch_stack_walk+0xa6/0x100 [ 748.639242][T18722] get_futex_key+0x1d0/0x15f0 [ 748.639276][T18722] ? __pfx_get_futex_key+0x10/0x10 [ 748.639303][T18722] ? stack_trace_save+0x8e/0xc0 [ 748.639343][T18722] ? __pfx_stack_trace_save+0x10/0x10 [ 748.639383][T18722] ? stack_depot_save_flags+0x29/0x9b0 [ 748.639419][T18722] futex_wait_setup+0x9d/0x570 [ 748.639464][T18722] __futex_wait+0x193/0x2f0 [ 748.639501][T18722] ? __pfx___futex_wait+0x10/0x10 [ 748.639542][T18722] ? __pfx_futex_wake_mark+0x10/0x10 [ 748.639582][T18722] ? futex_hash+0x2c5/0x380 [ 748.639614][T18722] ? futex_private_hash_put+0x160/0x1b0 [ 748.639644][T18722] futex_wait+0xe8/0x380 [ 748.639681][T18722] ? __pfx_futex_wait+0x10/0x10 [ 748.639726][T18722] ? putname+0xf5/0x1a0 [ 748.639769][T18722] do_futex+0x229/0x350 [ 748.639803][T18722] ? __pfx_do_futex+0x10/0x10 [ 748.639836][T18722] ? find_held_lock+0x2b/0x80 [ 748.639876][T18722] __x64_sys_futex+0x1e0/0x4c0 [ 748.639910][T18722] ? __x64_sys_openat+0x174/0x210 [ 748.639940][T18722] ? __pfx___x64_sys_futex+0x10/0x10 [ 748.639985][T18722] do_syscall_64+0xcd/0xf80 [ 748.640027][T18722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.640056][T18722] RIP: 0033:0x7fb781b8f7c9 [ 748.640080][T18722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 748.640104][T18722] RSP: 002b:00007fb77fdf60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 748.640128][T18722] RAX: ffffffffffffffda RBX: 00007fb781de5fa8 RCX: 00007fb781b8f7c9 [ 748.640146][T18722] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb781de5fa8 [ 748.640161][T18722] RBP: 00007fb781de5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 748.640178][T18722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 748.640192][T18722] R13: 00007fb781de6038 R14: 00007ffd304358a0 R15: 00007ffd30435988 [ 748.640223][T18722] [ 749.027008][T18735] bridge0: port 3(veth0_to_bridge) entered blocking state [ 749.055928][T18735] bridge0: port 3(veth0_to_bridge) entered disabled state [ 749.079974][T18735] veth0_to_bridge: entered allmulticast mode [ 749.115982][T18735] veth0_to_bridge: entered promiscuous mode [ 749.138004][T18735] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 749.195129][T18735] bridge0: port 3(veth0_to_bridge) entered blocking state [ 749.202477][T18735] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 752.160070][T18797] binder: 18796:18797 ioctl c0306201 200000000000 returned -14 [ 752.650688][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.657152][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 757.373245][T18889] input: jJǸ-¶š9ã%vø“ûJ86Ö‘ as /devices/virtual/input/input137 [ 758.357478][T18905] FAULT_INJECTION: forcing a failure. [ 758.357478][T18905] name failslab, interval 1, probability 0, space 0, times 0 [ 758.386541][T18905] CPU: 0 UID: 0 PID: 18905 Comm: syz.0.2624 Tainted: G U L syzkaller #0 PREEMPT(full) [ 758.386591][T18905] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 758.386603][T18905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 758.386620][T18905] Call Trace: [ 758.386630][T18905] [ 758.386642][T18905] dump_stack_lvl+0x16c/0x1f0 [ 758.386689][T18905] should_fail_ex+0x512/0x640 [ 758.386721][T18905] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 758.386762][T18905] should_failslab+0xc2/0x120 [ 758.386803][T18905] kmem_cache_alloc_node_noprof+0x86/0x800 [ 758.386845][T18905] ? alloc_unbound_pwq+0x3ff/0xe10 [ 758.386892][T18905] ? alloc_unbound_pwq+0x3ff/0xe10 [ 758.386924][T18905] alloc_unbound_pwq+0x3ff/0xe10 [ 758.386972][T18905] apply_wqattrs_prepare+0x3af/0xbd0 [ 758.387023][T18905] apply_workqueue_attrs_locked+0x64/0xe0 [ 758.387060][T18905] __alloc_workqueue+0xf42/0x1810 [ 758.387114][T18905] alloc_workqueue_noprof+0xd2/0x200 [ 758.387157][T18905] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 758.387206][T18905] ? rcu_is_watching+0x12/0xc0 [ 758.387244][T18905] ? trace_kmalloc+0x2b/0xb0 [ 758.387283][T18905] ? __kmalloc_noprof+0x35d/0x910 [ 758.387314][T18905] ? ieee80211_register_hw+0x15c9/0x4160 [ 758.387350][T18905] ieee80211_register_hw+0x1f1a/0x4160 [ 758.387383][T18905] ? lockdep_hardirqs_on+0x11/0x110 [ 758.387424][T18905] ? _raw_spin_unlock+0x41/0x50 [ 758.387465][T18905] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 758.387509][T18905] ? __pfx___debug_object_init+0x10/0x10 [ 758.387558][T18905] ? find_held_lock+0x2b/0x80 [ 758.387595][T18905] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 758.387639][T18905] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 758.387676][T18905] ? __hrtimer_setup+0x176/0x280 [ 758.387711][T18905] mac80211_hwsim_new_radio+0x3323/0x5150 [ 758.387766][T18905] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 758.387819][T18905] hwsim_new_radio_nl+0xba2/0x1330 [ 758.387858][T18905] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 758.387904][T18905] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 758.387952][T18905] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 758.388008][T18905] genl_family_rcv_msg_doit+0x209/0x2f0 [ 758.388056][T18905] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 758.388103][T18905] ? genl_get_cmd+0x194/0x580 [ 758.388152][T18905] ? bpf_lsm_capable+0x9/0x10 [ 758.388188][T18905] ? security_capable+0x7e/0x260 [ 758.388232][T18905] ? ns_capable+0xd7/0x110 [ 758.388272][T18905] genl_rcv_msg+0x55c/0x800 [ 758.388304][T18905] ? __pfx_genl_rcv_msg+0x10/0x10 [ 758.388333][T18905] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 758.388379][T18905] netlink_rcv_skb+0x158/0x420 [ 758.388419][T18905] ? __pfx_genl_rcv_msg+0x10/0x10 [ 758.388448][T18905] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 758.388504][T18905] ? netlink_deliver_tap+0x1ae/0xd30 [ 758.388549][T18905] genl_rcv+0x28/0x40 [ 758.388588][T18905] netlink_unicast+0x5aa/0x870 [ 758.388634][T18905] ? __pfx_netlink_unicast+0x10/0x10 [ 758.388689][T18905] netlink_sendmsg+0x8c8/0xdd0 [ 758.388731][T18905] ? __pfx_netlink_sendmsg+0x10/0x10 [ 758.388777][T18905] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 758.388838][T18905] ____sys_sendmsg+0xa5d/0xc30 [ 758.388885][T18905] ? copy_msghdr_from_user+0x10a/0x160 [ 758.388922][T18905] ? __pfx_____sys_sendmsg+0x10/0x10 [ 758.388975][T18905] ? __pfx_futex_wake_mark+0x10/0x10 [ 758.389021][T18905] ___sys_sendmsg+0x134/0x1d0 [ 758.389059][T18905] ? __pfx____sys_sendmsg+0x10/0x10 [ 758.389095][T18905] ? futex_private_hash_put+0x160/0x1b0 [ 758.389171][T18905] __sys_sendmsg+0x16d/0x220 [ 758.389208][T18905] ? __pfx___sys_sendmsg+0x10/0x10 [ 758.389241][T18905] ? __x64_sys_futex+0x1e0/0x4c0 [ 758.389294][T18905] do_syscall_64+0xcd/0xf80 [ 758.389339][T18905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.389369][T18905] RIP: 0033:0x7fb781b8f7c9 [ 758.389394][T18905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 758.389421][T18905] RSP: 002b:00007fb77fdf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 758.389448][T18905] RAX: ffffffffffffffda RBX: 00007fb781de5fa0 RCX: 00007fb781b8f7c9 [ 758.389468][T18905] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000006 [ 758.389487][T18905] RBP: 00007fb781c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 758.389506][T18905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 758.389524][T18905] R13: 00007fb781de6038 R14: 00007fb781de5fa0 R15: 00007ffd30435988 [ 758.389563][T18905] [ 758.845962][T18892] netlink: set zone limit has 8 unknown bytes [ 759.311478][ T7830] Bluetooth: hci0: unexpected event 0x23 length: 127 > 13 [ 759.477666][T18914] zswap: compressor not available [ 760.325110][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 760.337537][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 760.350091][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 760.362602][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 760.375142][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 760.387667][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 760.399934][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 760.412117][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 760.424327][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 763.854039][ C0] net_ratelimit: 15328 callbacks suppressed [ 763.854057][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 763.872286][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 763.884505][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 763.896715][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 763.908920][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 763.921103][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 763.933387][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 763.945584][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 763.957774][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 763.970079][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 768.864389][ C0] net_ratelimit: 11242 callbacks suppressed [ 768.864406][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 768.883110][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 768.895869][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 768.908582][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 768.921284][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 768.934053][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 768.946822][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 768.959533][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 768.972235][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 768.985276][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 773.874445][ C0] net_ratelimit: 9433 callbacks suppressed [ 773.874463][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 773.892473][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 773.904711][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 773.916954][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 773.929776][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 773.941938][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 773.954253][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 773.966529][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 773.979347][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 773.991543][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 778.883891][ C0] net_ratelimit: 13566 callbacks suppressed [ 778.883914][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 778.902109][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 778.914325][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 778.926606][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 778.939457][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 778.951638][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 778.963874][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 778.976159][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 778.988936][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 779.001114][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 780.093864][ C0] sched: DL replenish lagged too much [ 783.894436][ C0] net_ratelimit: 13374 callbacks suppressed [ 783.894454][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 783.912562][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 783.929466][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 783.941944][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 783.955304][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 783.967586][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 783.979877][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 783.992189][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 784.005629][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 784.018118][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 788.589546][ T7830] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 788.904081][ C0] net_ratelimit: 10331 callbacks suppressed [ 788.904110][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 788.922612][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 788.935189][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 788.949077][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 788.961615][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 788.974211][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 788.986823][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 789.000391][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 789.012997][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 789.025557][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 791.082741][ T7830] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 791.110440][T17074] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 791.110909][T17842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 791.292081][ T7830] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 791.319129][ T7830] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 791.394776][T17842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 791.437352][ T7830] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 791.597571][T17074] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 791.662573][T17842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 792.235233][T17074] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 793.290072][T17842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 793.914349][ C0] net_ratelimit: 6809 callbacks suppressed [ 793.914377][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 793.932742][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 793.945303][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 793.957972][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 793.971641][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 793.984163][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 793.996731][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 794.009310][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 794.022980][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 794.035495][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 794.279954][T17074] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 794.303080][ T7830] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 794.341577][T17842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 794.737866][ T7830] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 794.776211][T10483] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 797.623481][ T7222] Bluetooth: hci5: Opcode 0x0c16 failed: -110 [ 798.918435][T18964] Bluetooth: hci6: Opcode 0x0c16 failed: -110 [ 798.925083][ C0] net_ratelimit: 6926 callbacks suppressed [ 798.925119][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 798.925695][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 798.926269][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 798.926805][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 798.928395][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 798.928880][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 798.929456][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 798.929944][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 798.931517][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 798.932034][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 803.934568][ C0] net_ratelimit: 7094 callbacks suppressed [ 803.934595][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 803.952935][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 803.965515][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 803.978122][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 803.991702][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 804.004235][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 804.016787][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 804.029380][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 804.042923][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 804.055786][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 808.943962][ C0] net_ratelimit: 7032 callbacks suppressed [ 808.943988][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 808.962426][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 808.976069][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 808.988694][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 809.001290][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 809.013894][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 809.027457][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 809.039950][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 809.052515][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 809.065101][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 813.954006][ C0] net_ratelimit: 7125 callbacks suppressed [ 813.954033][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 813.972402][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 813.985350][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 813.998866][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 814.011323][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 814.023914][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 814.036459][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 814.050005][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 814.062479][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 814.075019][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 814.091104][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.098049][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 815.741411][T17842] Bluetooth: hci2: command tx timeout [ 816.082329][T18959] Bluetooth: hci5: Opcode 0x0c03 failed: -4 [ 816.112110][T17842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 816.667923][T18986] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 818.119851][ T7222] Bluetooth: hci2: command tx timeout [ 818.349726][T18986] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 818.715754][T18964] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 818.740572][T18964] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 818.963964][ C0] net_ratelimit: 6833 callbacks suppressed [ 818.963988][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 818.982297][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 818.994879][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 819.007486][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 819.021072][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 819.033640][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 819.046211][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 819.058803][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 819.072291][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 819.084780][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 820.362525][T18964] Bluetooth: hci2: command tx timeout [ 820.399856][T18964] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 820.798999][T18986] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 821.381296][T18964] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 821.405728][T18964] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 821.725123][T18986] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 822.482847][ T7222] Bluetooth: hci2: command tx timeout [ 823.974331][ C0] net_ratelimit: 6934 callbacks suppressed [ 823.974358][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 823.992707][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 824.005284][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 824.017828][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 824.031310][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 824.043776][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 824.056317][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 824.068852][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 824.082353][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 824.094828][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 826.602009][T10483] Bluetooth: hci6: command tx timeout [ 828.983852][ C0] net_ratelimit: 7273 callbacks suppressed [ 828.983877][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 829.002382][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 829.015980][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 829.028452][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 829.040910][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 829.054522][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 829.067100][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 829.080644][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 829.093106][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 829.105545][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 829.410335][T18986] Bluetooth: hci6: command tx timeout [ 833.313607][ T7222] Bluetooth: hci4: command tx timeout [ 833.355482][T18986] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 833.552620][T10483] Bluetooth: hci6: command tx timeout [ 833.575734][T18986] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 833.994247][ C0] net_ratelimit: 5965 callbacks suppressed [ 833.994274][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 834.012780][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 834.027100][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 834.039612][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 834.052098][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 834.065062][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 834.077735][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 834.092139][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 834.104612][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 834.117106][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 834.132658][T18986] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 835.387539][T10483] Bluetooth: hci4: command tx timeout [ 835.662440][T10483] Bluetooth: hci6: command tx timeout [ 838.752639][ T7222] Bluetooth: hci4: command tx timeout [ 839.003893][ C0] net_ratelimit: 5886 callbacks suppressed [ 839.003919][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 839.024154][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 839.036656][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 839.049134][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 839.061671][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 839.074285][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 839.088694][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 839.101349][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 839.113957][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 839.126502][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 840.990805][ T7222] Bluetooth: hci4: command tx timeout [ 841.356100][T18964] Bluetooth: hci5: Opcode 0x0c23 failed: -110 [ 842.901788][T18997] Bluetooth: hci5: Opcode 0x0c03 failed: -4 [ 844.014543][ C0] net_ratelimit: 5986 callbacks suppressed [ 844.014571][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 844.032944][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 844.045904][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 844.058504][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 844.071122][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 844.086735][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 844.099289][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 844.111872][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 844.124470][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 844.137076][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 849.024060][ C0] net_ratelimit: 6801 callbacks suppressed [ 849.024088][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 849.042534][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 849.055041][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 849.067532][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 849.080108][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 849.093219][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 849.107561][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 849.120096][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 849.132670][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 849.145159][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 852.390180][T10483] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 852.532619][ T7222] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 852.928231][ T7222] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 852.953669][T10483] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 853.008464][T10483] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 853.137797][ T7222] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 853.606952][ T7222] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 854.034409][ C0] net_ratelimit: 6999 callbacks suppressed [ 854.034438][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 854.052780][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 854.065244][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 854.077797][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 854.090301][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 854.102798][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 854.115341][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 854.127898][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 854.142332][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 854.154854][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 856.350275][T18986] Bluetooth: hci1: Opcode 0x0c14 failed: -110 [ 856.602330][T10483] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 858.483945][T19000] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 858.509775][T18964] Bluetooth: hci7: Opcode 0x0c23 failed: -110 [ 859.043904][ C0] net_ratelimit: 7048 callbacks suppressed [ 859.043928][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 859.062353][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 859.074912][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 859.087487][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 859.100081][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 859.112874][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 859.127504][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 859.140056][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 859.152570][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 859.165185][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 859.631773][ T7222] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 860.041689][T18964] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 860.064454][T18964] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 862.094112][T19003] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 864.055947][ C0] net_ratelimit: 7100 callbacks suppressed [ 864.055974][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 864.074333][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 864.086802][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 864.099339][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 864.111803][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 864.124306][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 864.136804][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 864.149371][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 864.165591][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 864.178157][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 868.898123][ T7222] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 869.064646][ C0] net_ratelimit: 7182 callbacks suppressed [ 869.064672][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 869.083092][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 869.095652][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 869.108319][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 869.120893][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 869.133499][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 869.146181][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 869.158853][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 869.173747][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 869.186399][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 872.943292][ T7222] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 874.073814][ C0] net_ratelimit: 7220 callbacks suppressed [ 874.073842][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 874.092289][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 874.106757][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 874.119265][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 874.131741][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 874.144283][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 874.156756][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 874.169203][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 874.181766][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 874.194310][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 875.594102][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.605530][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 876.831415][T18964] Bluetooth: hci0: Opcode 0x1001 failed: -110 [ 879.084044][ C0] net_ratelimit: 7021 callbacks suppressed [ 879.084071][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 879.102439][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 879.115028][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 879.129439][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 879.141919][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 879.154419][ T7222] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 879.164936][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 879.177515][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 879.190008][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 879.202494][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 879.215060][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 879.259210][T18964] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 879.311778][T18964] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 880.530292][T18986] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 880.618902][T18986] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 880.825695][T10483] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 880.850392][T18986] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 880.850498][T10483] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 881.013389][T18964] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 884.093904][ C0] net_ratelimit: 7003 callbacks suppressed [ 884.093929][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 884.112329][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 884.124829][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 884.137297][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 884.149826][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 884.162387][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 884.176919][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 884.189401][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 884.201856][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 884.214407][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 884.309319][ T7222] Bluetooth: hci5: Opcode 0x0c23 failed: -110 [ 886.568627][T10483] Bluetooth: hci0: command tx timeout [ 886.590971][T18964] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 886.680205][T18964] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 888.665934][ T7222] Bluetooth: hci0: command tx timeout [ 888.733908][T19009] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 889.104922][ C0] net_ratelimit: 7108 callbacks suppressed [ 889.104947][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 889.123323][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 889.135795][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 889.148389][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 889.160874][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 889.173359][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 889.185923][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 889.198501][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 889.212890][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 889.225390][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 890.745289][T18986] Bluetooth: hci0: command tx timeout [ 890.772913][T18986] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 890.978328][T17074] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 891.097160][T18986] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 891.135931][T17074] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 891.188964][T18986] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 891.317309][T18986] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 892.834314][T18986] Bluetooth: hci0: command tx timeout [ 893.468515][ T7222] Bluetooth: hci1: Opcode 0x1005 failed: -110 [ 893.539351][T19015] Bluetooth: hci1: Opcode 0x0c03 failed: -4 [ 894.114590][ C0] net_ratelimit: 7038 callbacks suppressed [ 894.114618][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 894.132971][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 894.145472][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 894.158062][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 894.170552][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 894.183032][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 894.195576][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 894.208155][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 894.222589][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 894.235089][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 896.419034][T10483] Bluetooth: hci7: Opcode 0x0c23 failed: -110 [ 898.859682][T19016] Bluetooth: hci7: Opcode 0x0c03 failed: -4 [ 899.126109][ C0] net_ratelimit: 7198 callbacks suppressed [ 899.126137][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 899.144502][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 899.157010][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 899.169644][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 899.182176][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 899.194690][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 899.207282][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 899.219924][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 899.234635][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 899.247156][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 904.134100][ C0] net_ratelimit: 7095 callbacks suppressed [ 904.134127][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 904.152476][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 904.165009][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 904.177528][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 904.189993][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 904.202555][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 904.215093][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 904.229526][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 904.242037][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 904.254523][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 909.143951][ C0] net_ratelimit: 7111 callbacks suppressed [ 909.143979][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 909.162479][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 909.175028][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 909.187567][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 909.200173][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 909.212829][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 909.227465][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 909.239998][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 909.252524][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 909.265106][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 914.155290][ C0] net_ratelimit: 7172 callbacks suppressed [ 914.155318][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 914.173650][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 914.186134][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 914.198697][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 914.211217][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 914.223688][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 914.236248][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 914.248841][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 914.263383][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 914.275880][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 918.688880][T17074] Bluetooth: hci2: command 0x0406 tx timeout [ 919.165155][ C0] net_ratelimit: 6902 callbacks suppressed [ 919.165182][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 919.183558][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 919.196056][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 919.208611][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 919.221196][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 919.233683][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 919.246271][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 919.258849][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 919.273463][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 919.285977][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 924.174469][ C0] net_ratelimit: 6966 callbacks suppressed [ 924.174496][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 924.192876][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 924.205352][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 924.217964][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 924.230526][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 924.243030][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 924.255630][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 924.268234][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 924.283208][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 924.295736][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 929.069930][T17074] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 929.185338][ C0] net_ratelimit: 6926 callbacks suppressed [ 929.185367][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 929.203697][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 929.216206][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 929.228741][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 929.241236][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 929.253694][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 929.266259][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 929.278806][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 929.293249][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 929.305729][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 933.960025][T19042] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 934.053381][T18986] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 934.193987][ C0] net_ratelimit: 7075 callbacks suppressed [ 934.194014][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 934.212424][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 934.225037][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 934.239469][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 934.251988][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 934.264445][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 934.276993][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 934.289472][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 934.301992][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 934.314576][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 934.431166][T17842] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 934.492921][T18986] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 934.728487][T19042] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 934.880191][T19042] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 934.952935][T18986] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 935.007823][T18986] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 935.137491][T17074] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 935.176801][T17842] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 935.266356][T17074] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 935.450259][T19042] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 936.110557][T17074] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 936.969783][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.976428][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.386642][ T7222] Bluetooth: hci8: Opcode 0x1009 failed: -110 [ 939.203825][ C0] net_ratelimit: 6893 callbacks suppressed [ 939.203850][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 939.222166][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 939.234712][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 939.247278][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 939.261741][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 939.274227][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 939.286697][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 939.299274][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 939.311770][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 939.324276][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 939.966646][T19041] Bluetooth: hci7: Opcode 0x0c14 failed: -110 [ 940.136197][ T7830] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 940.186336][T18964] Bluetooth: hci5: Opcode 0x0c23 failed: -110 [ 940.193166][T18986] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 940.273111][T19039] Bluetooth: hci7: Opcode 0x0c03 failed: -4 [ 940.289307][T19043] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 940.332955][T17074] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 940.386286][T18986] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 940.409949][T18986] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 940.577049][T17074] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 940.804118][ T31] INFO: task syz-executor:18955 blocked for more than 143 seconds. [ 940.812075][ T31] Tainted: G U L syzkaller #0 [ 940.833800][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 940.842514][ T31] task:syz-executor state:D stack:27624 pid:18955 tgid:18955 ppid:1 task_flags:0x400140 flags:0x00080002 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 940.893879][ T31] Call Trace: [ 940.897215][ T31] [ 940.900162][ T31] ? __schedule+0x10b9/0x6150 [ 940.926096][ T31] __schedule+0x1139/0x6150 [ 940.930676][ T31] ? __lock_acquire+0x436/0x2890 [ 940.975817][ T31] ? __pfx___schedule+0x10/0x10 [ 940.980743][ T31] ? find_held_lock+0x2b/0x80 [ 941.040039][T18986] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 941.044082][ T31] ? schedule+0x2d7/0x3a0 [ 941.051372][ T31] schedule+0xe7/0x3a0 [ 941.133880][ T31] schedule_preempt_disabled+0x13/0x30 [ 941.139518][ T31] __mutex_lock+0xc69/0x1ca0 [ 941.173861][ T31] ? inet_rtm_newaddr+0x30c/0x1540 [ 941.179056][ T31] ? __nla_validate_parse+0x600/0x2880 [ 941.199346][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 941.223876][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 941.229678][ T31] ? __kernel_text_address+0xd/0x40 [ 941.253920][ T31] ? inet_rtm_newaddr+0x30c/0x1540 [ 941.259106][ T31] ? rtnl_lock+0x9/0x20 [ 941.263281][ T31] inet_rtm_newaddr+0x30c/0x1540 [ 941.293862][ T31] ? __lock_acquire+0x436/0x2890 [ 941.298870][ T31] ? stack_trace_save+0x8e/0xc0 [ 941.310729][T18986] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 941.333898][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 941.339487][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 941.347249][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 941.373988][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 941.379451][ T31] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 941.390204][T17074] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 941.403816][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 941.403874][ T31] rtnetlink_rcv_msg+0x95e/0xe90 [ 941.403919][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 941.403966][ T31] ? __lock_acquire+0x436/0x2890 [ 941.404003][ T31] netlink_rcv_skb+0x158/0x420 [ 941.404044][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 941.404086][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 941.404140][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 941.404185][ T31] netlink_unicast+0x5aa/0x870 [ 941.404231][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 941.404285][ T31] netlink_sendmsg+0x8c8/0xdd0 [ 941.404332][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 941.404377][ T31] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 941.404430][ T31] __sys_sendto+0x4a3/0x520 [ 941.404465][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 941.404511][ T31] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 941.404551][ T31] ? count_memcg_events+0x122/0x290 [ 941.404623][ T31] __x64_sys_sendto+0xe0/0x1c0 [ 941.404655][ T31] ? do_syscall_64+0x91/0xf80 [ 941.404695][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 941.404735][ T31] do_syscall_64+0xcd/0xf80 [ 941.404778][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 941.404810][ T31] RIP: 0033:0x7fa238b9165c [ 941.404834][ T31] RSP: 002b:00007ffe360c6690 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 941.404864][ T31] RAX: ffffffffffffffda RBX: 00007fa239914620 RCX: 00007fa238b9165c [ 941.404886][ T31] RDX: 0000000000000028 RSI: 00007fa239914670 RDI: 0000000000000003 [ 941.404906][ T31] RBP: 0000000000000000 R08: 00007ffe360c66e4 R09: 000000000000000c [ 941.404925][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 941.404944][ T31] R13: 0000000000000000 R14: 00007fa239914670 R15: 0000000000000000 [ 941.404984][ T31] [ 941.405074][ T31] INFO: task syz.0.2638:18971 blocked for more than 143 seconds. [ 941.405100][ T31] Tainted: G U L syzkaller #0 [ 941.405118][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 941.405130][ T31] task:syz.0.2638 state:D stack:27496 pid:18971 tgid:18970 ppid:17696 task_flags:0x400140 flags:0x00080002 [ 941.405227][ T31] Call Trace: [ 941.405237][ T31] [ 941.405253][ T31] ? __schedule+0x10b9/0x6150 [ 941.405290][ T31] __schedule+0x1139/0x6150 [ 941.405327][ T31] ? __lock_acquire+0x436/0x2890 [ 941.405374][ T31] ? __pfx___schedule+0x10/0x10 [ 941.405409][ T31] ? find_held_lock+0x2b/0x80 [ 941.405447][ T31] ? schedule+0x2d7/0x3a0 [ 941.405489][ T31] schedule+0xe7/0x3a0 [ 941.405527][ T31] schedule_preempt_disabled+0x13/0x30 [ 941.405566][ T31] __mutex_lock+0xc69/0x1ca0 [ 941.405617][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 941.405656][ T31] ? nl80211_dump_wiphy+0x280/0x800 [ 941.405702][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 941.405752][ T31] ? nl80211_dump_wiphy_parse.constprop.0+0x45d/0x5a0 [ 941.405794][ T31] ? __pfx_nl80211_dump_wiphy_parse.constprop.0+0x10/0x10 [ 941.405841][ T31] ? nl80211_dump_wiphy+0x280/0x800 [ 941.405878][ T31] ? rtnl_is_locked+0x15/0x20 [ 941.405904][ T31] nl80211_dump_wiphy+0x280/0x800 [ 941.405954][ T31] genl_dumpit+0x125/0x230 [ 941.406000][ T31] netlink_dump+0x539/0xd30 [ 941.406041][ T31] ? __pfx_netlink_dump+0x10/0x10 [ 941.406093][ T31] ? __asan_memset+0x23/0x50 [ 941.406127][ T31] ? genl_start+0x67f/0x980 [ 941.406175][ T31] __netlink_dump_start+0x6d6/0x990 [ 941.406219][ T31] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 941.406252][ T31] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 941.406296][ T31] ? consume_skb+0xcc/0x100 [ 941.406342][ T31] ? __pfx_genl_get_cmd+0x10/0x10 [ 941.406381][ T31] ? __pfx_genl_start+0x10/0x10 [ 941.406421][ T31] ? __pfx_genl_dumpit+0x10/0x10 [ 941.406463][ T31] ? __pfx_genl_done+0x10/0x10 [ 941.406494][ T31] ? __radix_tree_lookup+0x21f/0x2c0 [ 941.406538][ T31] genl_rcv_msg+0x46e/0x800 [ 941.406571][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 941.406605][ T31] ? __pfx_nl80211_dump_wiphy+0x10/0x10 [ 941.406643][ T31] ? __pfx_nl80211_dump_wiphy_done+0x10/0x10 [ 941.406700][ T31] netlink_rcv_skb+0x158/0x420 [ 941.406740][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 941.406770][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 941.406827][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 941.406870][ T31] genl_rcv+0x28/0x40 [ 941.406911][ T31] netlink_unicast+0x5aa/0x870 [ 941.406957][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 941.406995][ T31] ? __pfx___might_resched+0x10/0x10 [ 941.407035][ T31] ? __lock_acquire+0x436/0x2890 [ 941.407073][ T31] netlink_sendmsg+0x8c8/0xdd0 [ 941.407118][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 941.407164][ T31] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 941.407214][ T31] ____sys_sendmsg+0xa5d/0xc30 [ 941.407260][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 941.407296][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 941.407336][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 941.407373][ T31] ? try_to_wake_up+0xa67/0x1860 [ 941.407418][ T31] ___sys_sendmsg+0x134/0x1d0 [ 941.407457][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 941.407493][ T31] ? futex_private_hash_put+0x160/0x1b0 [ 941.407567][ T31] __sys_sendmsg+0x16d/0x220 [ 941.407610][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 941.407647][ T31] ? __x64_sys_futex+0x1e0/0x4c0 [ 941.407703][ T31] do_syscall_64+0xcd/0xf80 [ 941.407747][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 941.407777][ T31] RIP: 0033:0x7fb781b8f7c9 [ 941.407801][ T31] RSP: 002b:00007fb77fdf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 941.407830][ T31] RAX: ffffffffffffffda RBX: 00007fb781de5fa0 RCX: 00007fb781b8f7c9 [ 941.407851][ T31] RDX: 000000000000c004 RSI: 0000200000000000 RDI: 0000000000000003 [ 941.407871][ T31] RBP: 00007fb781c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 941.407891][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 941.407910][ T31] R13: 00007fb781de6038 R14: 00007fb781de5fa0 R15: 00007ffd30435988 [ 941.407952][ T31] [ 941.407964][ T31] INFO: task syz.0.2638:18972 blocked for more than 143 seconds. [ 941.407987][ T31] Tainted: G U L syzkaller #0 [ 941.408005][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 941.408017][ T31] task:syz.0.2638 state:D stack:28728 pid:18972 tgid:18970 ppid:17696 task_flags:0x400040 flags:0x00080002 [ 941.408116][ T31] Call Trace: [ 941.408127][ T31] [ 941.408142][ T31] ? __schedule+0x10b9/0x6150 [ 941.408178][ T31] __schedule+0x1139/0x6150 [ 941.408215][ T31] ? __lock_acquire+0x436/0x2890 [ 941.408262][ T31] ? __pfx___schedule+0x10/0x10 [ 941.408297][ T31] ? find_held_lock+0x2b/0x80 [ 941.408335][ T31] ? schedule+0x2d7/0x3a0 [ 941.408377][ T31] schedule+0xe7/0x3a0 [ 941.408414][ T31] schedule_preempt_disabled+0x13/0x30 [ 941.408453][ T31] __mutex_lock+0xc69/0x1ca0 [ 941.408498][ T31] ? netlink_dump+0xa25/0xd30 [ 941.408541][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 941.408593][ T31] ? __might_fault+0x154/0x190 [ 941.408633][ T31] ? __pfx___skb_try_recv_datagram+0x10/0x10 [ 941.408666][ T31] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 941.408707][ T31] ? netlink_dump+0xa25/0xd30 [ 941.408741][ T31] netlink_dump+0xa25/0xd30 [ 941.408784][ T31] ? __pfx_netlink_dump+0x10/0x10 [ 941.408848][ T31] netlink_recvmsg+0x7dc/0xa90 [ 941.408889][ T31] ? __pfx_netlink_recvmsg+0x10/0x10 [ 941.408926][ T31] ? __lock_acquire+0x436/0x2890 [ 941.408959][ T31] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 941.409011][ T31] sock_recvmsg+0x1f9/0x250 [ 941.409055][ T31] ____sys_recvmsg+0x218/0x6b0 [ 941.409105][ T31] ? __pfx_____sys_recvmsg+0x10/0x10 [ 941.409162][ T31] ? __lock_acquire+0x436/0x2890 [ 941.409197][ T31] ___sys_recvmsg+0x114/0x1a0 [ 941.409234][ T31] ? __pfx____sys_recvmsg+0x10/0x10 [ 941.409274][ T31] ? find_held_lock+0x2b/0x80 [ 941.409332][ T31] do_recvmmsg+0x2fe/0x750 [ 941.409374][ T31] ? __pfx_do_recvmmsg+0x10/0x10 [ 941.409406][ T31] ? __pfx_css_rstat_updated+0x10/0x10 [ 941.409464][ T31] ? find_held_lock+0x2b/0x80 [ 941.409504][ T31] __x64_sys_recvmmsg+0x22a/0x280 [ 941.409544][ T31] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 941.409599][ T31] do_syscall_64+0xcd/0xf80 [ 941.409643][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 941.409672][ T31] RIP: 0033:0x7fb781b8f7c9 [ 941.409695][ T31] RSP: 002b:00007fb77fdd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 941.409724][ T31] RAX: ffffffffffffffda RBX: 00007fb781de6090 RCX: 00007fb781b8f7c9 [ 941.409746][ T31] RDX: 000000000000010a RSI: 0000200000000180 RDI: 0000000000000003 [ 941.409766][ T31] RBP: 00007fb781c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 941.409786][ T31] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 941.409805][ T31] R13: 00007fb781de6128 R14: 00007fb781de6090 R15: 00007ffd30435988 [ 941.409845][ T31] [ 941.409872][ T31] [ 941.409872][ T31] Showing all locks held in the system: [ 941.409884][ T31] 2 locks held by kworker/0:0/9: [ 941.409904][ T31] 1 lock held by khungtaskd/31: [ 941.409921][ T31] #0: ffffffff8e3c94a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 941.409994][ T31] 1 lock held by khugepaged/38: [ 941.410011][ T31] #0: ffffffff8e506548 (lock#5){+.+.}-{4:4}, at: __lru_add_drain_all+0x6e/0x6f0 [ 941.410099][ T31] 3 locks held by kworker/1:1/48: [ 941.410116][ T31] #0: ffff88813ff56948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 941.410192][ T31] #1: ffffc90000b87c90 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 941.410266][ T31] #2: ffffffff90144ea8 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x91/0x1190 [ 941.410354][ T31] 4 locks held by kworker/1:2/914: [ 941.410371][ T31] #0: ffff888058a75948 ((wq_completion)wg-kex-wg2#12){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 941.410452][ T31] #1: ffffc90003697c90 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 941.410550][ T31] #2: ffff888027b79308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1c2/0x880 [ 941.410644][ T31] #3: ffff888056094890 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x5ac/0x880 [ 941.410733][ T31] 4 locks held by kworker/0:2/978: [ 941.410766][ T31] 1 lock held by udevd/5203: [ 941.410783][ T31] 2 locks held by kworker/0:3/5839: [ 941.410801][ T31] 2 locks held by kworker/0:5/5878: [ 941.410819][ T31] 2 locks held by kworker/0:7/5886: [ 941.410835][ T31] 4 locks held by kworker/1:3/5899: [ 941.410851][ T31] #0: ffff88807b37ed48 ((wq_completion)wg-kex-wg2#14){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 941.410934][ T31] #1: ffffc900044bfc90 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 941.411029][ T31] #2: ffff88805c1e1308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1c2/0x880 [ 941.411116][ T31] #3: ffff888034839708 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x5ac/0x880 [ 941.411205][ T31] 3 locks held by kworker/u10:0/7221: [ 941.411223][ T31] 3 locks held by kworker/u10:1/7224: [ 941.411240][ T31] 4 locks held by kworker/u10:3/7229: [ 941.411257][ T31] 3 locks held by kworker/u10:4/7230: [ 941.411274][ T31] 4 locks held by kworker/u10:6/7235: [ 941.411291][ T31] 3 locks held by kworker/u10:7/7241: [ 941.411309][ T31] 2 locks held by kworker/u10:8/7244: [ 941.411327][ T31] 3 locks held by kworker/u10:9/7249: [ 941.411344][ T31] #0: ffff88814dad2948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 941.411417][ T31] #1: ffffc900033e7c90 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 941.411492][ T31] #2: ffffffff90144ea8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x12/0x30 [ 941.411578][ T31] 3 locks held by kworker/u10:12/7313: [ 941.411601][ T31] 3 locks held by kworker/u10:13/7462: [ 941.411619][ T31] 4 locks held by kworker/u10:14/7468: [ 941.411636][ T31] #0: ffff88801badf148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 941.411714][ T31] #1: ffffc9000b397c90 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 941.411786][ T31] #2: ffffffff9012e6d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x830 [ 941.411866][ T31] #3: ffffffff90144ea8 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_pernet_exit+0x17/0x120 [ 941.411950][ T31] 3 locks held by kworker/u10:16/7633: [ 941.411968][ T31] 4 locks held by kworker/u10:17/7634: [ 941.411986][ T31] 3 locks held by kworker/u10:18/7636: [ 941.412003][ T31] 2 locks held by kworker/u10:19/7637: [ 941.412021][ T31] 3 locks held by kworker/u10:21/7639: [ 941.412041][ T31] 1 lock held by syz-executor/10479: [ 941.412058][ T31] #0: ffffffff90144ea8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 941.412123][ T31] 3 locks held by kworker/u11:3/10483: [ 941.412142][ T31] 4 locks held by kworker/u10:22/10752: [ 941.412160][ T31] 4 locks held by kworker/u10:24/10754: [ 941.412178][ T31] 4 locks held by kworker/u10:25/10755: [ 941.412196][ T31] 4 locks held by kworker/u10:27/10757: [ 941.412213][ T31] #0: ffff8880126a1148 ((wq_completion)wg-kex-wg2#15){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 941.412295][ T31] #1: ffffc9000bb77c90 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 941.412369][ T31] #2: ffff8880635cd308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0xec/0x610 [ 941.412457][ T31] #3: ffff88807c1a8338 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x100/0x610 [ 941.412545][ T31] 4 locks held by kworker/u10:29/10759: [ 941.412563][ T31] 4 locks held by kworker/u10:30/10760: [ 941.412588][ T31] 4 locks held by kworker/u10:33/10763: [ 941.412606][ T31] 3 locks held by kworker/u10:34/10764: [ 941.412624][ T31] 3 locks held by kworker/u10:35/10767: [ 941.412642][ T31] 4 locks held by kworker/u10:37/10769: [ 941.412660][ T31] 3 locks held by kworker/u10:39/10771: [ 941.412678][ T31] 4 locks held by kworker/1:7/10942: [ 941.412695][ T31] #0: ffff88807f21c148 ((wq_completion)wg-kex-wg1#18){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 941.412777][ T31] #1: ffffc9000bee7c90 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 941.412867][ T31] #2: ffff888041935308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1c2/0x880 [ 941.412948][ T31] #3: ffff88807f4134c0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x5ac/0x880 [ 941.413033][ T31] 3 locks held by kworker/u10:40/11529: [ 941.413050][ T31] 4 locks held by kworker/u10:41/11530: [ 941.413070][ T31] 2 locks held by kworker/0:8/13290: [ 941.413088][ T31] 2 locks held by getty/14708: [ 941.413104][ T31] #0: ffff88814ece00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 941.413179][ T31] #1: ffffc9000c7cb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x1510 [ 941.413247][ T31] 6 locks held by kworker/u11:1/17074: [ 941.413265][ T31] 1 lock held by syz-executor/17364: [ 941.413281][ T31] #0: ffffffff90144ea8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 941.413351][ T31] 1 lock held by syz.6.2637/18940: [ 941.413368][ T31] #0: ffffffff90144ea8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 941.413435][ T31] 1 lock held by syz-executor/18955: [ 941.413452][ T31] #0: ffffffff90144ea8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 941.413535][ T31] 1 lock held by syz-executor/18961: [ 941.413551][ T31] #0: ffffffff90144ea8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 941.413641][ T31] 4 locks held by syz.0.2638/18971: [ 941.413656][ T31] #0: ffffffff901eb350 [ 944.214067][ C0] net_ratelimit: 7086 callbacks suppressed [ 944.214095][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 944.236606][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 944.249174][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 944.261737][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 944.276128][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:03:21:cf:7e:c8, vlan:0) [ 944.288624][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 944.301106][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 944.313655][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 944.326135][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 944.338631][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 944.823888][ T31] (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 944.830335][ T31] #1: ffff8880343b46f0 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0x150/0x990 [ 944.873819][ T31] #2: ffffffff90144ea8 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_dump_wiphy+0x47/0x800 [ 944.883331][ T31] #3: ffff888032f80788 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: nl80211_dump_wiphy+0x280/0x800 [ 944.913814][ T31] 1 lock held by syz.0.2638/18972: [ 944.918977][ T31] #0: ffff8880343b46f0 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: netlink_dump+0xa25/0xd30 [ 944.943885][ T31] 3 locks held by kworker/0:1/18974: [ 944.949228][ T31] #0: ffff888058a75948 ((wq_completion)wg-kex-wg2#12){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 944.974117][ T31] #1: ffffc9000b877c90 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 945.063931][ T31] #2: ffff888056095278 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x30/0xe80 [ 945.083864][ T31] 2 locks held by kworker/0:4/18975: [ 945.089200][ T31] 2 locks held by kworker/0:9/18976: [ 945.103921][ T31] 1 lock held by syz-executor/18979: [ 945.109249][ T31] #0: ffffffff90144ea8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 945.133807][ T31] 3 locks held by kworker/0:13/18983: [ 945.139225][ T31] 2 locks held by kworker/0:17/18989: [ 945.154177][ T31] 1 lock held by syz-executor/19006: [ 945.159505][ T31] #0: ffffffff90144ea8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 945.184185][ T31] 3 locks held by kworker/0:19/19011: [ 945.189599][ T31] #0: ffff88807b37ed48 ((wq_completion)wg-kex-wg2#14){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 945.223856][ T31] #1: ffffc9000cef7c90 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 945.303796][ T31] #2: ffff888034839708 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x30/0xe80 [ 945.323797][ T31] 1 lock held by syz-executor/19026: [ 945.329130][ T31] #0: ffff8880439d0ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_open+0x22/0xb0 [ 945.353909][ T31] 3 locks held by kworker/0:21/19028: [ 945.364326][ T31] 3 locks held by kworker/u10:2/19033: [ 945.369821][ T31] 1 lock held by syz-executor/19035: [ 945.393968][ T31] #0: ffffffff90144ea8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 945.403481][ T31] 1 lock held by syz-executor/19036: [ 945.423798][ T31] #0: ffff8880207e4ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_open+0x22/0xb0 [ 945.443882][T19036] Bluetooth: hci5: Opcode 0x0c38 failed: -110 [ 945.450180][ T31] [ 945.452519][ T31] ============================================= [ 945.452519][ T31] [ 945.473808][ T31] NMI backtrace for cpu 1 [ 945.473838][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 945.473881][ T31] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 945.473891][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 945.473908][ T31] Call Trace: [ 945.473917][ T31] [ 945.473928][ T31] dump_stack_lvl+0x116/0x1f0 [ 945.473973][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 945.474004][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 945.474034][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 945.474069][ T31] sys_info+0x133/0x180 [ 945.474094][ T31] watchdog+0xe66/0x1180 [ 945.474140][ T31] ? rcu_is_watching+0x12/0xc0 [ 945.474178][ T31] ? __pfx_watchdog+0x10/0x10 [ 945.474213][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 945.474254][ T31] ? __kthread_parkme+0x19e/0x250 [ 945.474294][ T31] ? __pfx_watchdog+0x10/0x10 [ 945.474331][ T31] kthread+0x3c5/0x780 [ 945.474359][ T31] ? __pfx_kthread+0x10/0x10 [ 945.474389][ T31] ? rcu_is_watching+0x12/0xc0 [ 945.474444][ T31] ? __pfx_kthread+0x10/0x10 [ 945.474472][ T31] ret_from_fork+0x983/0xb10 [ 945.474501][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 945.474532][ T31] ? __switch_to+0x7af/0x10d0 [ 945.474572][ T31] ? __pfx_kthread+0x10/0x10 [ 945.474600][ T31] ret_from_fork_asm+0x1a/0x30 [ 945.474657][ T31] [ 945.474667][ T31] Sending NMI from CPU 1 to CPUs 0: [ 945.616027][ C0] NMI backtrace for cpu 0 [ 945.616050][ C0] CPU: 0 UID: 0 PID: 18984 Comm: kworker/0:14 Tainted: G U L syzkaller #0 PREEMPT(full) [ 945.616089][ C0] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 945.616099][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 945.616116][ C0] Workqueue: wg-kex-wg1 wg_packet_handshake_receive_worker [ 945.616152][ C0] RIP: 0010:memcmp+0x8d/0x1d0 [ 945.616190][ C0] Code: 42 0f b6 04 28 38 d0 7f 08 84 c0 0f 85 2f 01 00 00 48 89 ea 48 89 e9 0f b6 03 48 c1 ea 03 83 e1 07 42 0f b6 14 2a 38 ca 7f 08 <84> d2 0f 85 f9 00 00 00 0f b6 55 00 29 d0 74 a8 48 83 c4 08 5b 5d [ 945.616215][ C0] RSP: 0018:ffffc90000007720 EFLAGS: 00000297 [ 945.616235][ C0] RAX: 00000000000000ff RBX: ffffc9000000784c RCX: 0000000000000004 [ 945.616251][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffc9000000784c [ 945.616267][ C0] RBP: ffffc9000000783c R08: 0000000000000003 R09: 0000000000000003 [ 945.616283][ C0] R10: 0000000000000003 R11: ffff8880548995b8 R12: ffffc9000000785c [ 945.616300][ C0] R13: dffffc0000000000 R14: 00000000000002ff R15: ffff888054899500 [ 945.616317][ C0] FS: 0000000000000000(0000) GS:ffff8881248fd000(0000) knlGS:0000000000000000 [ 945.616342][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 945.616359][ C0] CR2: 00007f5ff4e7ee9c CR3: 000000000e184000 CR4: 00000000003526f0 [ 945.616375][ C0] Call Trace: [ 945.616383][ C0] [ 945.616392][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 945.616432][ C0] __flow_hash_from_keys+0x88/0x4e0 [ 945.616470][ C0] ? __local_bh_enable_ip+0xa4/0x120 [ 945.616513][ C0] rt6_multipath_hash+0x691/0x1920 [ 945.616543][ C0] ? __pfx_rt6_multipath_hash+0x10/0x10 [ 945.616577][ C0] ? ip6t_do_table+0xc25/0x1c30 [ 945.616604][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 945.616630][ C0] ? nf_nat_ipv6_fn+0xff/0x2e0 [ 945.616657][ C0] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 945.616689][ C0] ? ip6_route_input+0xacd/0xc70 [ 945.616715][ C0] ip6_route_input+0xacd/0xc70 [ 945.616744][ C0] ? __pfx_ip6_route_input+0x10/0x10 [ 945.616770][ C0] ? lock_acquire+0x179/0x330 [ 945.616806][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 945.616837][ C0] ip6_rcv_finish_core.constprop.0+0x1a0/0x5d0 [ 945.616869][ C0] ipv6_rcv+0x1e8/0x650 [ 945.616896][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 945.616921][ C0] __netif_receive_skb_one_core+0x12d/0x1e0 [ 945.616950][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 945.616980][ C0] ? lock_acquire+0x179/0x330 [ 945.617007][ C0] ? process_backlog+0x450/0x1650 [ 945.617033][ C0] __netif_receive_skb+0x1d/0x160 [ 945.617060][ C0] process_backlog+0x4a2/0x1650 [ 945.617091][ C0] __napi_poll.constprop.0+0xb3/0x540 [ 945.617120][ C0] net_rx_action+0x9f9/0xfa0 [ 945.617153][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 945.617180][ C0] ? __print_lock_name+0x60/0xe0 [ 945.617212][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 945.617245][ C0] ? sched_clock+0x38/0x60 [ 945.617281][ C0] ? sched_clock_cpu+0x6c/0x530 [ 945.617325][ C0] ? mark_held_locks+0x49/0x80 [ 945.617348][ C0] handle_softirqs+0x219/0x950 [ 945.617384][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 945.617418][ C0] ? wg_pubkey_hashtable_lookup+0x19b/0x3f0 [ 945.617451][ C0] do_softirq+0xb2/0xf0 [ 945.617483][ C0] [ 945.617495][ C0] [ 945.617503][ C0] __local_bh_enable_ip+0x100/0x120 [ 945.617537][ C0] ? wg_pubkey_hashtable_lookup+0x19b/0x3f0 [ 945.617569][ C0] wg_pubkey_hashtable_lookup+0x1b0/0x3f0 [ 945.617599][ C0] ? blake2s_final+0x110/0x160 [ 945.617627][ C0] wg_noise_handshake_consume_initiation+0x452/0x880 [ 945.617674][ C0] ? kernel_fpu_end+0x59/0x70 [ 945.617702][ C0] ? __local_bh_enable_ip+0xa4/0x120 [ 945.617740][ C0] ? __pfx_wg_noise_handshake_consume_initiation+0x10/0x10 [ 945.617822][ C0] ? __crypto_memneq+0x203/0x430 [ 945.617845][ C0] ? rcu_is_watching+0x12/0xc0 [ 945.617912][ C0] ? wg_cookie_validate_packet+0x16e/0x360 [ 945.617951][ C0] ? __pfx_wg_cookie_validate_packet+0x10/0x10 [ 945.617994][ C0] wg_receive_handshake_packet+0x219/0xbf0 [ 945.618029][ C0] ? __pfx_wg_receive_handshake_packet+0x10/0x10 [ 945.618073][ C0] ? __local_bh_enable_ip+0xa4/0x120 [ 945.618113][ C0] wg_packet_handshake_receive_worker+0x16d/0x380 [ 945.618149][ C0] process_one_work+0x9ba/0x1b20 [ 945.618186][ C0] ? __pfx_process_one_work+0x10/0x10 [ 945.618218][ C0] ? assign_work+0x1a0/0x250 [ 945.618251][ C0] worker_thread+0x6c8/0xf10 [ 945.618293][ C0] ? __kthread_parkme+0x19e/0x250 [ 945.618329][ C0] ? __pfx_worker_thread+0x10/0x10 [ 945.618357][ C0] kthread+0x3c5/0x780 [ 945.618388][ C0] ? __pfx_kthread+0x10/0x10 [ 945.618413][ C0] ? rcu_is_watching+0x12/0xc0 [ 945.618451][ C0] ? __pfx_kthread+0x10/0x10 [ 945.618475][ C0] ret_from_fork+0x983/0xb10 [ 945.618512][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 945.618538][ C0] ? __switch_to+0x7af/0x10d0 [ 945.618569][ C0] ? __pfx_kthread+0x10/0x10 [ 945.618594][ C0] ret_from_fork_asm+0x1a/0x30 [ 945.618638][ C0] [ 946.245259][T19026] Bluetooth: hci8: Opcode 0x0c38 failed: -110 [ 947.153795][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 947.160703][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 947.171411][ T31] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 947.176611][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 947.186677][ T31] Call Trace: [ 947.189960][ T31] [ 947.192896][ T31] dump_stack_lvl+0x3d/0x1f0 [ 947.197520][ T31] vpanic+0x640/0x6f0 [ 947.201520][ T31] panic+0xca/0xd0 [ 947.205253][ T31] ? __pfx_panic+0x10/0x10 [ 947.209679][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 947.215680][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 947.221851][ T31] ? nmi_trigger_cpumask_backtrace+0x2be/0x300 [ 947.228033][ T31] ? watchdog+0xe83/0x1180 [ 947.232487][ T31] ? watchdog+0xe76/0x1180 [ 947.236934][ T31] watchdog+0xe94/0x1180 [ 947.241212][ T31] ? rcu_is_watching+0x12/0xc0 [ 947.246000][ T31] ? __pfx_watchdog+0x10/0x10 [ 947.250707][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 947.255935][ T31] ? __kthread_parkme+0x19e/0x250 [ 947.260989][ T31] ? __pfx_watchdog+0x10/0x10 [ 947.265691][ T31] kthread+0x3c5/0x780 [ 947.269775][ T31] ? __pfx_kthread+0x10/0x10 [ 947.274384][ T31] ? rcu_is_watching+0x12/0xc0 [ 947.279176][ T31] ? __pfx_kthread+0x10/0x10 [ 947.283779][ T31] ret_from_fork+0x983/0xb10 [ 947.288387][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 947.293513][ T31] ? __switch_to+0x7af/0x10d0 [ 947.298211][ T31] ? __pfx_kthread+0x10/0x10 [ 947.302815][ T31] ret_from_fork_asm+0x1a/0x30 [ 947.307623][ T31] [ 947.310998][ T31] Kernel Offset: disabled [ 947.315323][ T31] Rebooting in 86400 seconds..