last executing test programs: 5m27.656164327s ago: executing program 1 (id=2159): mmap$auto(0x0, 0x4, 0x400002, 0x40eb1, 0x602, 0x300000000001) madvise$auto(0x0, 0xffffffffffff0006, 0x55) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x9, 0x3, 0x2) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x1, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0x8208ae63, 0x38) setsockopt$auto(r2, 0x6, 0x9, 0x0, 0xfb3) socket$nl_generic(0x10, 0x3, 0x10) write$auto(0xffffffffffffffff, &(0x7f0000000340)='/o1\x00\xaa\x93y\x19\x14x\xf2\xb9\x82\x8d\xbclZ\xdd\xf1\xac\xa7\xc2\xcc\xce\xa7z&\xbf\xa8\x044\x88k!\xae\x13\xcd/\x15\xc3\xc2\\\xc7\xa2\xc7\x95/L\x96\x13\x9e3\xc8~\xb6\xd8\xd1\xf4v\x8f\xed\xb5\xacY\xcaC8\xa2Pk\x19K\x9f\x16\x01\x1f\x1b\xfa6\xfd\xe0J$3lm\x04\xca\xe0\xe7\xe8C\xa4\xa2\xa5\x01\xa9Y\x96\xebC\xdcka\xe2\xbb\x93\x8e\xb1y,E\xe6\xcf\xbd\xa6\xd2\xe0\v\x10;\xb3\xbe\x1f\x0f\x0e~\xb5\xff\x0f!\xef\xf5h\xdbN^\xeb\xf6\x86C\xf6\xcf\x17_\x85\xdct\xf8\x82x\x91\xffU9\xcf\xf6\xab\xe7~q7\x1c]:\x9f+\xff\x00\x00\x00\x00\x00\x00\x00\x00', 0x100000a3d8) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8000, 0xd, 0x1, 0x948b, 0x4, 0x2, 0x3, 0xb, 0xb979, 0x8000001f, 0x8000, 0x80006d3d, 0xc, 0xe9, 0x4]}, 0x0) openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$auto(r3, 0x0, 0x5) select$auto(0x9, &(0x7f00000000c0)={[0xeeca, 0xfffffffffffffffd, 0xb, 0x9, 0xa, 0x1fc, 0x6, 0x0, 0x2, 0x4618ecd2, 0x100000003, 0x42ff, 0x6, 0x9a8c, 0x9, 0x5]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) recvfrom$auto(r1, 0x0, 0xc, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb0, 0x602, 0x300000000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a1842, 0x0) unshare$auto(0x40000080) sendmsg$auto_NFC_CMD_GET_DEVICE(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xfffffc}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="c8000000", @ANYRES16=0x0, @ANYBLOB="04002dbd7000fcdbdf2501000000050010000400000005000c00ff000000080003008214000083001f003e3fe36d2345c4a020a978d05c864042ddf8fc5dfbf4e07080a14dbd28eb1014243e49d7e98adb21c07b702a4b5d172d64253010602703b76d4ad5a4ef0a65b8b595c314c263f23bf62adaae34fb3e709d2f5dfaf9f77ed1cc0ba0215d7b170a39ab66e1ef0b72ec1da7341218461f5d028d826e0dcd1fafd700943c344cfad1b65649cda9ea2667c40005001000000000000e0014002f6465762f766d6369000000777adf28609f47c56358205574abffe8f69b283982bdf47cb041dffa39ee91a6315847f4bc80d88117f914fb0507095bb1565417cfdd0ab48af710ca5f4c90c97f01f4a1894763355aa5033fe08a598f29b9e1c47a1ceaa5d6aaecf63e2d7a5f3e85d519f7e23da0e8e8d4caab26d668ac93df4f35205de00f3f271be0e927fd7820356c1e5527ee7311b1cf3bfe7d4bd5ddd51e82875ba5d6dff1fefde17f6baf12cd8c316734bdbf1d67727f79c51a5ebc462c1a6f9dd1d424b836ab102678daa17c8444151faa454aa785cb9e5fb475d57c9058ecfd25e591d09190ad507064848e013cb321fcc94d7ba4958c9094ee4476f85af106579f14e9650e6be2a9349c41a978e08ed9f927ecde3fca0105cac47f319e106ddc3c87a39188e9effe4d7d228ae02f628c7dd92b624ce2c1"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(r0, 0x0, 0x200000c0) 5m24.089498895s ago: executing program 1 (id=2167): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socket(0x2, 0x801, 0x9) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) socket(0x21, 0x80000, 0x7) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg1\x00', 0x210880, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) socket$nl_generic(0x10, 0x3, 0x10) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) select$auto(0x10000e, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3, 0x8000001f, 0x2, 0x6d3e, 0x9, 0x2, 0x7]}, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptyzf\x00', 0x2200, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, 0x0, 0x0) prctl$auto_PR_SET_MM_ARG_END(0x9, 0x9, 0xffffffffffffffff, 0xd, 0x13) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/pci/rescan\x00', 0x20681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000200)='5', 0x1) sendmsg$auto(0xffffffffffffffff, 0x0, 0xfff) select$auto(0x9, &(0x7f0000000140)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, &(0x7f0000000200)={[0x8, 0x4, 0x2, 0xb, 0x1, 0x9, 0x0, 0x7fff, 0xa, 0x193, 0xfffffffffffffff9, 0x3, 0x5e4, 0x1000, 0x1, 0x1]}, &(0x7f0000000380)={[0x8000000000000001, 0x5, 0xfffffffffffffff2, 0x10001, 0xe, 0xf, 0x5, 0x3, 0x59fc8000, 0x200006, 0x8000000000000000, 0x3, 0x800, 0x7, 0x1ff, 0x5]}, &(0x7f0000000280)={0x6, 0xc8}) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0x7, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x40841, 0x8) 5m22.371948372s ago: executing program 1 (id=2170): r0 = socket$nl_generic(0x11, 0x3, 0x10) bind$auto(r0, &(0x7f0000000200)=@generic={0x11, "bc340f00"}, 0x80) (fail_nth: 1) 5m22.086346152s ago: executing program 1 (id=2171): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 32) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) (rerun: 32) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20000, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) r1 = socket(0xa, 0x1, 0x84) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) (async, rerun: 64) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async, rerun: 64) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x7, 0x0) (async) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES16=r2], 0x1ac}}, 0x40000) (async, rerun: 32) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) (async, rerun: 32) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x0, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x6}, 0x3, 0x0) (async, rerun: 32) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) (async, rerun: 32) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x6}, 0x3, 0x2) (async) memfd_create$auto(0x0, 0xe) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) write$auto(r3, 0x0, 0x80000000) (async) unshare$auto(0x40000080) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/sctp/remaddr\x00', 0xb00, 0x0) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) (async) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) msgget$auto(0x0, 0x5) (async, rerun: 32) msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x7) (rerun: 32) 5m21.115157448s ago: executing program 1 (id=2175): r0 = socket(0x18, 0x5, 0x2) bind$auto(r0, &(0x7f0000000440), 0x800) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/hibernate/parameters/compressor\x00', 0x1a1942, 0x0) write$auto(r2, &(0x7f0000005900)='\\\x00', 0x40db) r3 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r3, &(0x7f0000000280)={{&(0x7f0000000280), 0x1, &(0x7f0000000100)={&(0x7f0000000780)="4c0300000000000000a3677337f9ecba075f6bba44", 0xfffffffffffffff7}, 0x5, 0x0, 0x5, 0x1}, 0xe}, 0xfffffffe, 0x100) pivot_root$auto(0x0, 0x0) open(0x0, 0x7ffd, 0x12) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x7f, 0x82020009, 0x3, 0xeb1, 0xffffffffffffffff, 0xfff) madvise$auto(0xff, 0x400000000009, 0x137) connect$auto(0x3, 0x0, 0x10) unshare$auto(0x40000080) r4 = socket(0x2, 0x2, 0x1) getsockopt$auto(r4, 0x1, 0x8, &(0x7f0000000040)='/dev/cec27\x00', 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0b01, 0x0) r5 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$auto_USB_RAW_IOCTL_INIT(r5, 0x41015500, &(0x7f0000000140)={"a7a018b09bb196a05739a38a73473b93f5452886bc599ef976c54a71a5ce72a9af15390e93a8760df83859e16320e8d0b1161f13d12afae66b1d900a49586aa98d3504ca431aabab1964249251e57fa70517cc19b0e3974dc2a89e90c932b8859c767780d65e849700", "e600d778e82f8b8db7e27a036e39a8ac08de7e036d650e2184857e6b64f6a2c7fb08c6f5ce3828fb4e9498c076bef49c99c9cd91332e12b53664dc20fa879020fbd184c0d300c13be6047a70685ce029fb2385ae6e132c1c6adbcfbd873a3b925d397a08e8733e19ef5ec4f40b0b473c72efd18b8a9e9f3d12c5e44468922beb", 0x3}) 5m17.923688133s ago: executing program 1 (id=2183): r0 = socket(0x2, 0x5, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/wakeup/wakeup7/event_count\x00', 0x1c2580, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/platform/dummy_hcd.5/usb6/6-0:1.0/bInterfaceClass\x00', 0x20000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000100)=""/17, 0x11) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000080)=""/86, 0x56) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/orangefs/slot_timeout_secs\x00', 0x102, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x1000000fffd}, 0x1) getcwd$auto(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/devices/virtual/nfc/nfc1/rfkill1/soft\x00', 0xa3182, 0x0) sendfile$auto(r3, r3, 0x0, 0xffffffff) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @local}, 0x5) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) bpf$auto(0x11, &(0x7f0000000000)=@batch={0xfffffffffffffffb, 0x44, 0x2, 0x9, 0x81, 0xffffffffffffffff, 0x2, 0x8}, 0xcf) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f00000002c0)="9e6f308ddd27a585aac2758dae465fc09ce73e054bf8bca8f41e646351345b581c7def00"/51, 0x10, &(0x7f0000000200)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) ioperm$auto(0x6, 0x18001, 0x80001) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x80000001, 0x8) ioperm$auto(0x3, 0x2db, 0x10000) getsockopt$auto_SO_SNDBUF(r4, 0x3, 0x7, &(0x7f0000000180)='/sys/devices/virtual/nfc/nfc1/rfkill1/soft\x00', &(0x7f00000001c0)=0x4) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) shutdown$auto(0x200000003, 0x2) ioprio_set$auto(0x7, 0x0, 0xfff) unshare$auto(0x40000080) recvmmsg$auto(0x3, 0x0, 0x687bcbd, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0) 5m2.781588442s ago: executing program 32 (id=2183): r0 = socket(0x2, 0x5, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/wakeup/wakeup7/event_count\x00', 0x1c2580, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/platform/dummy_hcd.5/usb6/6-0:1.0/bInterfaceClass\x00', 0x20000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000100)=""/17, 0x11) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000080)=""/86, 0x56) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/orangefs/slot_timeout_secs\x00', 0x102, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x1000000fffd}, 0x1) getcwd$auto(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/devices/virtual/nfc/nfc1/rfkill1/soft\x00', 0xa3182, 0x0) sendfile$auto(r3, r3, 0x0, 0xffffffff) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @local}, 0x5) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) bpf$auto(0x11, &(0x7f0000000000)=@batch={0xfffffffffffffffb, 0x44, 0x2, 0x9, 0x81, 0xffffffffffffffff, 0x2, 0x8}, 0xcf) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f00000002c0)="9e6f308ddd27a585aac2758dae465fc09ce73e054bf8bca8f41e646351345b581c7def00"/51, 0x10, &(0x7f0000000200)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) ioperm$auto(0x6, 0x18001, 0x80001) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x80000001, 0x8) ioperm$auto(0x3, 0x2db, 0x10000) getsockopt$auto_SO_SNDBUF(r4, 0x3, 0x7, &(0x7f0000000180)='/sys/devices/virtual/nfc/nfc1/rfkill1/soft\x00', &(0x7f00000001c0)=0x4) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) shutdown$auto(0x200000003, 0x2) ioprio_set$auto(0x7, 0x0, 0xfff) unshare$auto(0x40000080) recvmmsg$auto(0x3, 0x0, 0x687bcbd, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0) 1m58.259182064s ago: executing program 4 (id=2716): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) mmap$auto(0x400, 0x1, 0x7, 0x18, r1, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r2, 0x0, 0x1f40) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket(0x1d, 0x2, 0x6) io_uring_setup$auto(0x100001, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syslog$auto(0x1, &(0x7f0000000080)='..\x00k\xce\xa0\x17\bI3\'^O\x86Ik\xd8@\x18\x05\xfa\xabK\xc5tw\xd7\x1d\x00\x80\x00\x00\x00\x00\x00\x00j<\v\xf47\n\xa7\xd2\x8b\x11eZ\xc0\xfd\x9b\xe4\x99G\xeaS\x9a\xadu(:\x94:\xaf\x06\"\xb8\xa8\x91c\x13\x88\n1q\x1a3\x01vn\x8d\xbc', 0x2005) r4 = set_tid_address$auto(0x0) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000080)) getdents$auto(r5, 0x0, 0x18) ioctl$auto_UBI_IOCATT(r1, 0x40186f40, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) capset$auto(0x0, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{&(0x7f00000002c0), 0x1, &(0x7f0000000280)={&(0x7f0000000780)="4c0300000000000000a3677337f9ecba", 0xfffffffffffffff7}, 0xc, 0x0, 0x5, 0x5}, 0x8}, 0xfffffffe, 0x100) pivot_root$auto(0x0, 0x0) nanosleep$auto(0x0, 0x0) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram2\x00', 0xc642, 0x0) 1m56.961774722s ago: executing program 3 (id=2720): write$auto_seq_oss_f_ops_seq_oss(0xffffffffffffffff, &(0x7f0000000340)="5f74ab2fc43781e047140a5cbc3ac5229b90633d9cddda9efb1f2c3d5d1e63f3fb5acf079b9336319d009cb514", 0x2d) (async) r0 = socket(0xa, 0x1, 0x84) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x80002, 0x73) (async, rerun: 64) socket(0xa, 0x5, 0x0) (async, rerun: 64) io_uring_setup$auto(0x40000002c55, 0x0) getresuid$auto(0x0, 0x0, 0x0) (async) setsockopt$auto(r0, 0x10000000084, 0x7f, 0x0, 0xad4) rename$auto(&(0x7f0000000180)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) sendmsg$auto_NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYBLOB="20062abd7000fddbdf250200"], 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x80) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) (async, rerun: 64) ppoll$auto(0x0, 0x4007f, 0x0, &(0x7f00000001c0)={0x6}, 0x8) (async, rerun: 64) mount$auto(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='nfs\x00', 0x5, &(0x7f00000001c0)) 1m56.238446555s ago: executing program 3 (id=2721): sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/nbd14/queue/iosched/prio_aging_expire\x00', 0x207a1, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)='-7', 0x2) (async) r1 = openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000000), 0x280, 0x0) read$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000000040)=""/1, 0x1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_VDPA_CMD_DEV_VSTATS_GET(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x722082}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@VDPA_ATTR_DEV_NET_CFG_MTU={0x6, 0xd, 0x7f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x10) (async) openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/tracing/options/fields\x00', 0x20001, 0x0) (async) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0xffc, 0x8, 0x80000000000000a, 0x0, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) (async) fremovexattr$auto(r2, &(0x7f0000000240)='\xef..(-+\x00') 1m55.69784066s ago: executing program 3 (id=2722): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x9, 0x948b, 0x0, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x5, 0x5, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), 0xffffffffffffffff) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80502, 0x0) write$auto_tty_fops_tty_io(r1, &(0x7f0000000340)="2a3f9218659200008a677517d554c80b25c30000000000000071dde0152c549d44cf790bd304059e64ec347e9b173c52324e7de19a503727fe47d78e0bc2c5590e61b5d86887240d03bca3460f12f2107274ade4e6e53a728e346cef781b623364989314a43e5fd9e20e24417d6b21117b3308557a7b2aa2cb541dea5cb3b6a521b869ac5ff14cb52c4487dd3a3f4a81ff5957aa1109af5a3a1ce466381cc21fea0c67d8a165f29a6b9537b178bfdd013443481ba707ba4632e0478b951e619775f83f13b36d6426", 0xc8) mmap$auto(0x0, 0x7, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto(0x3, 0x402c542b, 0x38) mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0x2, 0x8000) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/mtd\x00', 0xc40, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, 0x0, 0x4d) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r3 = gettid() process_vm_writev$auto(r3, &(0x7f0000002980)={0x0, 0x7ff}, 0x3, &(0x7f0000002a40)={0x0, 0x100000004007}, 0x4, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TCFLSH2(r5, 0x80045439, 0x0) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) r6 = ioctl$auto_TUNSETVNETLE2(0xffffffffffffffff, 0x400454dc, &(0x7f0000000040)) r7 = syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NCSI_CMD_SET_CHANNEL_MASK(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r7, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NCSI_ATTR_PACKAGE_ID={0x8, 0x3, 0x7}, @NCSI_ATTR_PACKAGE_MASK={0x8, 0x7, 0xffffffc5}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x440c0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x102, 0x0) ioctl$auto(r4, 0x89f0, r4) 1m55.137093948s ago: executing program 2 (id=2725): mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0x0, 0xffffffffffff0006, 0x17) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x30, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[], 0xf5c}, 0x1, 0x0, 0x0, 0x4044055}, 0x10) (async) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x30, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[], 0xf5c}, 0x1, 0x0, 0x0, 0x4044055}, 0x10) recvmmsg$auto(r1, &(0x7f0000000180)={{0x0, 0xf240, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x50}, 0x80000}, 0x10c, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=ANY=[@ANYBLOB=' 6\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fcdbdf250300000004000180083601"], 0x3620}, 0x1, 0x0, 0x0, 0x20000000}, 0x200400d0) (async) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=ANY=[@ANYBLOB=' 6\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fcdbdf250300000004000180083601"], 0x3620}, 0x1, 0x0, 0x0, 0x20000000}, 0x200400d0) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) (async) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) bind$auto(0x3, 0x0, 0x6a) (async) bind$auto(0x3, 0x0, 0x6a) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) sendmsg$auto(0xffffffffffffffff, 0x0, 0xfff) msync$auto(0x2, 0x9, 0x40) (async) msync$auto(0x2, 0x9, 0x40) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) sendmsg$auto_L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000540)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0xc4, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffffc}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x7}, @L2TP_ATTR_FD={0x8, 0x17, r0}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, 0x3930}, @L2TP_ATTR_NONE={0x6b, 0x0, "53051944bda285caadab3b355f2055630eb1bbe5ae453c017118ad8dcf1346d07d30b35bfc6e33569411e67d54b00b70214a598ad72d867961e58a4af064dc7538081f2432f4bdd714997169f9df766c9a285e5586cf6debdd4b77ab63ca76a24f99fdc24331cd"}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xcd74}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x7}]}, 0xc4}, 0x1, 0x0, 0x0, 0x891}, 0x90) (async) sendmsg$auto_L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000540)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0xc4, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffffc}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x7}, @L2TP_ATTR_FD={0x8, 0x17, r0}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, 0x3930}, @L2TP_ATTR_NONE={0x6b, 0x0, "53051944bda285caadab3b355f2055630eb1bbe5ae453c017118ad8dcf1346d07d30b35bfc6e33569411e67d54b00b70214a598ad72d867961e58a4af064dc7538081f2432f4bdd714997169f9df766c9a285e5586cf6debdd4b77ab63ca76a24f99fdc24331cd"}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xcd74}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x7}]}, 0xc4}, 0x1, 0x0, 0x0, 0x891}, 0x90) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) (async) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto(0xffffffffffffffff, 0x900064b5, 0xc14) socket$nl_generic(0x10, 0x3, 0x10) 1m55.064740363s ago: executing program 4 (id=2726): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/devices/system/cpu/enabled\x00', 0x880, 0x0) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/slab/kmalloc-64/ctor\x00', 0x40, 0x0) read$auto(r1, 0x0, 0x20) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000100)=""/16, 0x10) ioctl$auto_XFS_IOC_EXCHANGE_RANGE(0xffffffffffffffff, 0x40285881, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x5, 0xc437, 0x9, 0x80}) mmap$auto(0x800, 0x0, 0xdf, 0xeb1, r2, 0x80000008004) (async) r3 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sg0\x00', 0x0, 0x0) ioctl$auto_BLKSECTGET2(r3, 0x1267, 0x0) 1m54.866312598s ago: executing program 0 (id=2727): statmount$auto(0x0, &(0x7f0000000180)={0x9, 0xfffffffe, 0x3, 0xa, 0x10, 0x1007181, 0x3, 0x7, 0x7, 0x7fd, 0x0, 0x26, 0x1000000000000004, 0x200004000001, 0xffffffffc6585b00, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x862, 0xf, 0x21ffe, 0x200, 0xffffffff, 0x84, 0x0, 0x0, 0xffffffff, 0x0, 0xb626, [0xfffffffffffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x40, 0x2, 0x8a0, 0xb, 0x81, 0x0, 0xfffffffffffffffd, 0x1000000000000000, 0x200, 0x1000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x2, 0x3, 0x0, 0x6]}, 0xb, 0xbc) r0 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010026bd7000ffdbdf25050000000c00010007000000000000000c00eeff03000000000000000c000100400000f900000000020020f1"], 0x50}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) io_uring_register$auto_IORING_REGISTER_NAPI(r1, 0x1b, &(0x7f0000000040)="6e4a4fb8433210948315b37747d106985dc3ce8fbd52e57e72dff835ca5e43", 0x2) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x200000002020009, 0x20000, 0x13, 0xfffffffffffffffa, 0x8000) setfsgid$auto(0xee00) waitid$auto_P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0xb29, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) write$auto(r2, 0x0, 0x100082) ioctl$auto_FS_IOC_SETFLAGS2(r2, 0x40086602, 0x0) socket(0x10, 0x2, 0x6) r3 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$auto_VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000100)=0x643) ioctl$auto_VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000540)=0x643) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x157, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) 1m54.212217205s ago: executing program 4 (id=2728): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) rt_sigqueueinfo$auto(0x0, 0xffff7b6f, &(0x7f0000000000)={@siginfo_0_0={0xf9, 0x14, 0x1, @_sigpoll={0xd}}}) r0 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={0x0, 0x49}, 0x5, &(0x7f0000000180), 0x5, 0xe}, 0x5}, 0x2, 0x100) r1 = open(0x0, 0x22240, 0x155) socket(0x2, 0x80802, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_hcd.1/usb2/2-0:1.0/usb2-port1/power/runtime_active_time\x00', 0x200500, 0x0) read$auto(r2, 0x0, 0x20) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000340)="d32338de9b") setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) r3 = open(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x101800, 0x7) read$auto(r3, 0x0, 0x1) writev$auto(r3, &(0x7f0000000000)={&(0x7f00000001c0)="eab6793525654df663a5d15b07f34e8aff53e243ebf30bf740c1a6247db03052264b4971b6babe68dcab6470a1b23b7b8e14e5bc3f71ce8bc48006a0aff21e4c5bb73d56e897412a5a29c2c0955950a1c7afeb0e85f2887995c5e2cf4cfd5fdfc83d46707b6e82a37acc87bad9a2394caca5b64d18daa83b060ebd62463b448192d00a208d450108ac45f098eb90f579308faf1ee9a2aa77d4951cfb2bd9ef18b24153a5718421bba8e7079c3de0951f29df744c8d117e0493f951bf330ba9ec9af84ec661800bdd47164545ca21c335af48b5211423d0d9ff3e6a26", 0xe5}, 0x2961) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x0, @multicast2}, 0x55) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="00001a005a"], 0x14}, 0x1, 0x0, 0x0, 0x4000840}, 0x2000c840) 1m54.179286459s ago: executing program 2 (id=2729): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x60201, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) r0 = socket(0x1d, 0x80000, 0x0) sendmmsg$auto(r0, 0x0, 0x7, 0x8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x6, 0x1, 0x0, 0xffffffffffffffff, 0x0) (async) select$auto(0x7, 0x0, 0x0, 0x0, 0x0) (async) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) r3 = getpid() process_vm_readv$auto(r3, &(0x7f00000002c0)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) (async) ioctl$auto(0x3, 0x400454ca, 0x38) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) (async) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) sysfs$auto(0x2, 0x2b, 0x0) (async) close_range$auto(0x2, 0x5, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0x4020aeb2, 0xffffffffffffffff) (async) r5 = fsopen$auto(0x0, 0x1) fsconfig$auto(r5, 0x8, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), r0) (async) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x7, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x1, 0x800, 0x3a) io_uring_setup$auto(0x6, 0x0) (async) setsockopt$auto(0x400000000000003, 0x29, 0x24, 0x0, 0x40020000) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/018/001\x00', 0x802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000240)={0x23, 0x83, 0x14, 0x10, 0x8, 0x2, &(0x7f00000002c0)}) 1m53.606745769s ago: executing program 4 (id=2730): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020008, 0x7, 0xb9, 0xfffffffffffffffa, 0x9) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x9a6, 0x0) socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x20009, 0x6, 0xeb1, 0x7f, 0x8000) sysfs$auto(0x1002, 0x100, 0xfffffffffffffffe) fsopen$auto(0x0, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) prctl$auto(0x3a, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x3, 0x1dba, 0x6, 0xeb1, 0xfffffffffffffffa, 0x3) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) r2 = socket(0x10, 0x5, 0x3) getsockopt$auto(r2, 0x84, 0x9, 0x0, &(0x7f0000000080)=0x9b) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000ff, 0x7, 0x9}]}) madvise$auto(0x0, 0xffffffffffff0005, 0x800) r3 = pidfd_open$auto(0x1, 0x0) setns(r3, 0x60020000) open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x15c) madvise$auto(0x0, 0x200007, 0x19) 1m53.476963572s ago: executing program 3 (id=2731): unshare$auto(0x40000080) mmap$auto(0x6, 0x2000c, 0x4000000000db, 0x12, 0x400, 0x18002) mmap$auto(0x0, 0x2000d, 0x7, 0x12, 0x404, 0x10008000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000001700), r0) sendmsg$auto_NETDEV_CMD_DEV_GET(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010326bd7000fedbdf2501000004"], 0x14}, 0x1, 0xf0ffff, 0x0, 0x4005}, 0x28044004) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xfff) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r3 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2b, 0x1, 0x1) read$auto_vhci_fops_hci_vhci(r2, &(0x7f0000000440)=""/237, 0xed) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000002c0), r4) msgctl$auto_MSG_STAT_ANY(0x10000, 0xd, &(0x7f0000000340)={{0xa0, 0xee01, 0xee01, 0x7, 0x3, 0x5, 0x9dc4}, &(0x7f00000000c0)=0x4, 0x0, 0x1, 0x5dd8, 0x7fff, 0xb12, 0x2, 0x8000, 0x4, 0xac0, @inferred, @inferred=0xffffffffffffffff}) r7 = setfsuid$auto(0xee00) setresuid$auto(0xffffffffffffffff, r7, 0x8000) msgctl$auto_MSG_STAT(0xbc7, 0xb, &(0x7f0000000480)={{0x8, 0xffffffffffffffff, 0x0, 0x8, 0x10001, 0xfd36, 0xfff9}, &(0x7f00000003c0)=0x3, &(0x7f0000000440)=0x7f, 0x7fffffff, 0x4, 0x1, 0x8000000000000000, 0x6, 0xc210, 0x3, 0x3, @inferred=0xffffffffffffffff, @raw=0x45}) r9 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000006c0), r2) sendmsg$auto_TIPC_NL_MON_GET(r4, &(0x7f0000000b80)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000700)={0x428, r9, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x3f9, 0x9, 0x0, 0x1, [@typed={0x8, 0xbb, 0x0, 0x0, @uid=r8}, @nested={0x169, 0xf7, 0x0, 0x1, [@typed={0x11, 0x40, 0x0, 0x0, @str='#]$-))#!{\\@&\x00'}, @typed={0x8, 0xfe, 0x0, 0x0, @u32=0xa}, @generic="8766ba049e14d89abffd2c45272bace5eae0056c5e979310790738b72a15bcb61dfa7a9854facb027069b0116bbb6031a73e59b533b0879f62f4d55d5443cfde13028e9760c6784bb11ce3c8dcf9aa8e9582712dfa78bf9eb5050146a3fdd3f7", @generic="2f43d9b0f31f0567278b92bb14d715e780fe8742669856e5d80666e1b8906e2ee4b7cc69a2b1bb0c693b40071c910eb9f9982de19259bf14e0ea573729def5e46806ba7f362153b2db27da29ec9c07974f881a", @typed={0x56, 0x13, 0x0, 0x0, @binary="0136bfaed3c4f11addb4fc865040528eeb7807095a0ffd7144e90f7786ee7d055564520086b4eb6817665275064f366447500374d8ce0424f66d717ba2bb3a878db6270f7e3827e5bb0e43681fb104fb7b07"}, @generic="3e264e92c64bae430b7d15e85b2c71fcfa925585297b2c0fdbefe92a60fd8b3d196517d002e18ab4ed0726b60d87309115c2e0913349a0930863d7ef1a8b", @generic]}, @generic="a13883f60a7046e94729c7a348aea40f56f9952dfcdcabbc2e8be070c56ccc787c870dab48313830f2e672f8fd4a84362f7aeefac8732d954a88f97c4dcddeb898eead0fecd3870aa929d5c9498d969241088a57e489eb1e7a80ab47f60ac726a7d17b3323b1714a6d7e65aadfd53fb69462e2fdd401b4e972b2fc633530fe312221e18b299a1487fe49ab395e9b3d58edc6d03f3bf0b1", @generic="9a61b159f0417cf886f9f54f3bcb44fb38e5d143c598b8776b8213525b1a4552b5b035fdecf40eb13fae506e6eea2a38fd0184fc48485a7fb4916908d78aef997eecf9a6d54283ebf5bc5bc2e2abca8531cc2419cccac5e505e15822f5064bd1e59933239ca927f9c2677604f326baf79229915ed63882823df055a20456624e617e", @nested={0x168, 0x10e, 0x0, 0x1, [@generic="ae2c983bf2dc80ccfd20bae0c3def9b8d892e7bccf4d411a624a3109865b8eeb7846666cc15947776c4d1a5fda0a659326bfaf2a1c6c47618ed61e5bba9bbe39de3e7fe8d3d389c5dcfebdb9fc31abf4d7e3c4643eb046b7f8460391c7b4a16b569a2dbe669f75371ac330dbda23567ba6e1bd5e8b24b5d36737e3aa3846f670e723c73475888c82ddde8390d6820fb8205f214f3ce9c53e179aee371956d84375f7f94f3b007550", @nested={0x4, 0x115}, @typed={0x8, 0xaf, 0x0, 0x0, @uid=r7}, @nested={0x4, 0xe1}, @generic="6fdf5454577b0c145f914adbc25a144db9e52897252f46390d134c3165e04525f0dd0c1a44ff97264b82130050f5a3e7a74a8b79361c3a9e8e7f82e5c892af0cf5bd0b81ea27e097d166294aed54c74d0396e1ad6aae09f9a0e789e5de2bd19eecacde19a4d1116a4b504eda4f875373ca1057b7876b4c5896477a686a1ef0ae3f9f0141630b68012d6adbe6bd55bc6188357de77335fd593ae236b6df93aa0c337d2dd008703fc8adab6125"]}]}, @TIPC_NLA_NAME_TABLE={0x18, 0x8, 0x0, 0x1, [@typed={0x14, 0x105, 0x0, 0x0, @ipv6=@private1}]}]}, 0x428}, 0x1, 0x0, 0x0, 0x44800}, 0x4000010) r10 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000d80), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_PLCA_SET_CFG(r11, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001040)={0x34, r10, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_PLCA_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x3ff}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20008800) setresuid$auto(r6, r7, r8) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r4, &(0x7f0000000640)={&(0x7f0000000280), 0xc, &(0x7f0000000600)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="000000001cc8f034770cccc2fe2066bbac8f2e770a494ba5da374864dd96a77bfd776a62e2ca2238266799f891002e230c039acfe19d8d7d8c0e642bd99660712a4d6af95fd325c187d067f00839bac76c751bd2eefb71a04009a62d167ffe930d44dd705563fcc3e5609be2c1670c4fa6b128b00521d1346a8409fb9acd4f3ef5a700", @ANYRES16=r5, @ANYBLOB="000328bd7000fedbdf25050000000400cc0008000500090000000400ae00920022800400430002b4e4f21b9a0891af65d6636a5ca8d94de0125e93210f008d0024aa267b5e272f2c4026000014004d002001000000000000000000000000000105000f00000000001000df800c004b00030000000000000014004380040033800400668004003b80040009801000058008009600", @ANYRES32=r7, @ANYBLOB="0400c680140037000000000000000000000000000000000100000600950001010000"], 0xc0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40001) r12 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r2) sendmsg$auto_NL80211_CMD_SET_STATION(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000fbdbdf25120000000c00508008008200070000000500c200010000000400937a25a297c8187cbb59e8255a7d1d4c550353abe87bea6849492e0000"], 0x2c}}, 0x20) 1m53.181039719s ago: executing program 0 (id=2732): ioctl$auto_TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, &(0x7f0000000040)={0x0, &(0x7f0000000000)={0xffff, 0x5, 0x7, @raw=0x1}}) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd8\x00', 0x20000, 0x0) ioctl$auto(r0, 0xab04, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000001f80), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x1400, 0x2003f0, 0x15) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x20300, 0x0) r4 = socket(0xa, 0x5, 0x0) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rs\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'ip6_vti0\x00'}) bpf$auto(0x40000000, &(0x7f0000000100)=@iter_create={r3, 0x81}, 0x96) bpf$auto(0x18, &(0x7f0000000040)=@raw_tracepoint={0x0, 0xffffffffffffffff, 0x0, 0x800}, 0x92) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) getsockopt$auto(r4, 0x84, 0x1d, 0x0, 0x0) r5 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/dri/vgem/clients\x00', 0x60000, 0x0) read$auto_drm_debugfs_entry_fops_drm_debugfs(r5, &(0x7f0000000100)=""/153, 0x99) getpid() r6 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r6, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) semget$auto(0x0, 0x13c, 0x1ff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) 1m52.974472318s ago: executing program 2 (id=2733): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vkms/drm/card1/card1-Virtual-1/enabled\x00', 0xa000, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0xa, 0x801, 0x84) socket(0xa, 0x801, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x3, 0x1) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) socket(0x21, 0x1, 0x1) socket(0x10, 0x2, 0x0) memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) memfd_create$auto(&(0x7f0000000100)='@\\{.}\x00', 0x8) socket(0x2b, 0x4, 0xfffffff8) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r1, @new_prog_fd=0x4, 0x4, @old_map_fd}, 0xa3) 1m52.509154776s ago: executing program 3 (id=2734): mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0xa61c2, 0x84) socket(0x25, 0xa, 0x2) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) r0 = socket(0x9, 0x2, 0x1) socket(0x25, 0x5, 0x0) sendfile$auto(0x6, 0x3, 0x0, 0x100000000) ioctl$auto_SW_SYNC_GET_DEADLINE(0xffffffffffffffff, 0xc0105702, &(0x7f0000000200)={0x14d16f22, 0x0, r0}) fstat$auto(0x2, 0x0) migrate_pages$auto(0x0, 0x3, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0xc, 0x873, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto_TIOCSTI2(r1, 0x5412, &(0x7f0000000000)) ioctl$auto_TIOCSTI2(r1, 0x5412, &(0x7f00000000c0)="c0402e39") close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0x3e, &(0x7f0000000080)={0x0, 0x22750b72d7d81c}, 0x1, 0x0, 0x0, 0x40}, 0x240088d1) waitid$auto_P_ALL(0x0, 0x3, &(0x7f0000000280)={@siginfo_0_0={0x200, 0x144d, 0x1, @_sigchld={0x0, 0x0, 0x9, 0x80000002, 0x80000000}}}, 0xffd, &(0x7f0000000300)={{0x6, 0xf}, {0x9, 0x2}, 0x9, 0x7, 0x6, 0x5, 0x6, 0x0, 0x27c8, 0x9, 0x8000000000000000, 0x9, 0xfffffffffffffffb, 0xfffffffffffffffb, 0x8, 0x1}) getpgid(r2) syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_IOAM6_CMD_DUMP_NAMESPACES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008001}, 0x40000) ioctl$auto_SOUND_MIXER_READ_DEVMASK2(0xffffffffffffffff, 0x80044dfe, &(0x7f00000000c0)) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop12\x00', 0xa0000, 0x0) openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim7/psample/enable\x00', 0x0, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0xa711b0cb03f31270, 0x0) 1m52.451528734s ago: executing program 2 (id=2735): mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) getsockopt$auto_SO_ACCEPTCONN(0xffffffffffffffff, 0x200, 0x1e, 0x0, &(0x7f00000000c0)=0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) semctl$auto_SEM_INFO(0x0, 0xfffffffd, 0x13, 0x1) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) madvise$auto(0x0, 0x8000000000000000, 0x15) migrate_pages$auto(0x0, 0x3, 0x0, 0x0) madvise$auto(0x0, 0x8000000000000000, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r1) read$auto(r1, &(0x7f0000000100)='nl80211\x00', 0xbe62) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x6) socket(0x10, 0x3, 0x0) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) r2 = pidfd_open$auto(0xffffffffffffffff, 0xcb) ioctl$auto_CEC_S_MODE(r2, 0x40046109, &(0x7f0000000000)=0x5) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1m52.013354284s ago: executing program 4 (id=2736): unshare$auto(0x40000080) socket(0xa, 0x1, 0x1) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2c00, 0x0) ioctl$auto_EVIOCSMASK(r0, 0x40104593, &(0x7f0000000080)={0x2, 0x80000000, 0x7f}) ioctl$auto_EVIOCGMASK(r0, 0x80104592, &(0x7f0000000180)={0x2, 0x3c, 0xc}) socket(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/block/ram5/queue/discard_granularity\x00', 0x0, 0x0) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, r1, 0x10008000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14abfd) prctl$auto(0x1000000001c, 0x5, 0x0, 0x400000000009, 0x3fffffffff) setreuid$auto(0x0, 0x5) fcntl$auto(r3, 0x400, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40342, 0x163) close_range$auto(0x2, 0x8, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x1c, r5, 0x301, 0x70b52c, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x17}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r4) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) pread64$auto(0xffffffffffffffff, 0x0, 0x7fc, 0x8000000000400) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/trace\x00', 0x600, 0x0) 1m51.694362437s ago: executing program 0 (id=2737): mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/i8042/serio0/set\x00', 0x80302, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) mmap$auto(0x0, 0x40009, 0xa, 0x9b72, 0x2, 0x28000) select$auto(0x2, &(0x7f0000000140)={[0x3, 0xfffffffffffffffb, 0x4, 0x10000000004, 0x5, 0x1, 0x8, 0x4, 0xffffffffffff8000, 0x4, 0x0, 0x9, 0xffffffffffffffff, 0x8000000000000000, 0x4]}, &(0x7f00000001c0)={[0x2, 0xc9, 0x9, 0xd771, 0x7fffffff, 0xbe29, 0x1, 0x4, 0x40, 0x20000, 0x4, 0x5, 0x5, 0x6, 0x505]}, &(0x7f0000000240)={[0x1001, 0xf34, 0x8, 0x4, 0x1, 0x400, 0x81, 0x7fff, 0x80, 0x6, 0x3, 0x5, 0x1, 0x5, 0xfffffffffffffff8, 0x4]}, &(0x7f00000000c0)={0x34, 0x7}) close_range$auto(0x2, 0x8000, 0x0) pipe$auto(0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xc311bc98d3dbdda9, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0x4048aec9, r1) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(r0, 0xfffffffffffff000, 0x2) r3 = socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) quotactl_fd$auto(r3, 0x8, 0xffffffffffffffff, &(0x7f00000002c0)="6b3730c5556c3efb0d36521210da0cd53b9d37c011") unshare$auto(0x40000080) r4 = setfsuid$auto(0xee00) r5 = setfsuid$auto(0xee01) setresuid$auto(r4, r5, r4) r6 = setfsuid$auto(0xee00) r7 = setfsuid$auto(0xee01) setresuid$auto(r6, r7, r6) 1m51.63421902s ago: executing program 3 (id=2738): openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) mmap$auto(0x0, 0x400008, 0x3, 0x9b72, 0x2, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MON_GET(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01000d000000000000000000df41edcde61d80010e50d7c1c63898c656e9c16d992a706b4092e1233bcc1a6179efbf204244ad8faf0f535a04961b82581710aa60d8c560b182b78aafc7a9f2acbd69eef4ee483c27f10a52c0237b158825a02b3b98d700000000000000000000000006e7545072c732407a7020055dd5754aab06592b0b19a26675046c952fe9824704f31f5e1b236ee225d3f30b5661838c7dd0da24cc473276bd5f4bfa7afbf7ab691c1f8a05eb84260ec2278f64761b117ef57001bd96e458fd99900a3dbb88276fc1e644e72d7c81"], 0x14}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) write$auto(0x4, 0x0, 0x100082) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x48041, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/neigh/bridge0/locktime\x00', 0x101202, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/bridge_slave_1/ra_defrtr_metric\x00', 0x101242, 0x0) sendfile$auto(r4, r3, 0x0, 0x48) write$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000240)="1c520b214b197e", 0x7) unshare$auto(0x40000080) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x8081, 0x0) close_range$auto(0xffffffffffffffff, 0x8, 0x0) open(0x0, 0x40, 0xa2) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) fadvise64$auto_POSIX_FADV_SEQUENTIAL(0xffffffffffffffff, 0xca, 0x7, 0x2) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp\x00', 0x100, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x40102, 0x0) pread64$auto(r5, 0x0, 0x40000000f42c, 0x585) write$auto(0x3, 0x0, 0xfffffdef) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) close_range$auto(0x2, 0x8, 0x0) socket(0x1e, 0x805, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/misc/hw_random/rng_current\x00', 0x129102, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x3000000, 0x0, 0x1, 0x0, 0x10000000000000, 0x2}, 0x895}, 0x3, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/irq/1/node\x00', 0x482, 0x0) 1m51.147791259s ago: executing program 2 (id=2739): r0 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000003740)='/proc/cmdline\x00', 0x500, 0x0) finit_module$auto(r0, 0x0, 0x7) unshare$auto(0x40000080) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x1, 0x100) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) 1m50.84220031s ago: executing program 4 (id=2740): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) lseek$auto(0x3, 0x2, 0x0) r0 = socket(0x2c, 0x1, 0x80003) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x59e, 0x0, 0x2, 0x9}, 0x207}, 0x40, 0x100) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0x4400ae8f, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES16=r2, @ANYBLOB="9f00d7c02f94a20c4c68", @ANYRES8=0x0, @ANYRES32=r1, @ANYRES8=r2, @ANYRES64=r2, @ANYRES8=r1], 0x1ac}, 0x1, 0x0, 0x0, 0x20000840}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0x5}, 0x5, 0x0, 0x2, 0x200}, 0x7ff}, 0x10a, 0x8, 0x0) socket(0x18, 0x80fbda35cd66dd2d, 0xff) setsockopt$auto(r0, 0x29, 0x20, 0x0, 0x23) 1m50.798154546s ago: executing program 0 (id=2741): socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0xc) socket(0x22, 0x4, 0x8a) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3ff, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x4, "87fe7b014077e08701ee88c6923077b8542c55f8c30ccb575540f50c0a515ca3", @inferred=r0}) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000000c0)={0x7, "e6c26d22ab89af11056b0001ac097e1c423515300000c500"}) r1 = openat$auto_sync_info_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) read$auto(r1, &(0x7f0000000080)='\xbb\x00', 0x3) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) connect$auto(0xffffffffffffffff, 0x0, 0x55) socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) pipe2$auto(0x0, 0x0) io_uring_setup$auto(0x7e1b, 0x0) socket(0x2, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x2, 0x14) socketpair$auto(0x1, 0x5, 0x8000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptyab\x00', 0x109741, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa0102, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(r3, 0x4008550c, r3) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) write$auto(r2, 0x0, 0x7) 1m50.498888438s ago: executing program 2 (id=2742): openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/011/001\x00', 0x121002, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0xdef) ioctl$auto_TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, &(0x7f0000000140)={0x0, &(0x7f0000000100)={0x5, 0x62, 0x7, @raw=0x1}}) semctl$auto_GETPID(0x18000000, 0xfff, 0xb, 0x1) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) fstat$auto(0xffffffffffffffff, &(0x7f0000000180)={0x6, 0x7be089c1, 0x100000000, 0x2, 0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0x9, 0xe, 0xfffffffffffffffb, 0xdd, 0xd, 0x3ff, 0x4}) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000080)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/conf/all/drop_gratuitous_arp\x00', 0x400, 0x0) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00'}) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x8080) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x752502, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x141, 0x0) r3 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000140)={{0x0, 0x2, 0x200800, 0xffffffff, 0xfffffffb}, "0dd7fd004929347eeeccdf0732f77b1f6de0d6d51768a257a97ca5e9ca6310ea"}) ioctl$auto_SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) 1m50.296578138s ago: executing program 0 (id=2743): r0 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x7f, 0x1, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) get_robust_list$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) r1 = open(0x0, 0x22240, 0x45) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket(0x2b, 0x1, 0x1) listen$auto(0x3, 0x81) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto(0x3, 0x80a86f3d, r2) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_EDGE(r1, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x244, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@MAC802154_HWSIM_ATTR_RADIO_EDGES={0xc, 0x3, 0x0, 0x1, [@typed={0x5, 0x14d, 0x0, 0x0, @str='\x00'}]}, @MAC802154_HWSIM_ATTR_RADIO_EDGES={0x217, 0x3, 0x0, 0x1, [@typed={0x8, 0xce, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x37}}, @typed={0x8, 0x138, 0x0, 0x0, @fd=r2}, @generic="d50ca21cf927f97b3a897d86b2a455c90f4b14e609e5cc60891e863157d102efa73a1cd54275b389699553724b1c49d8114728c4cd728bb8bcd97fce4c20a94cb2953d041090931453e88389d9531f86a409cce2b2d72391615191cdb281cc69b523", @generic="a7549e873e23c76204d495021712c43b8df025245ac57a1bb2baa13777fd5b7b05e2a7d6e82405a95abb3d08c4d8d12563d73c494bf75ff1ab22aead4974203a55afc5c0036cbb3af616e9466e6294d402522d1c4b9f52ba0c13bbd9e21da40bbc46c7b44a6d2921b687d8e5768e380b70ee13b9bb898d96b468b1e676b7874afc8bfcbeb123547c3655de108a0258cee8c0d0ff88b32a49ddc8ccedc2573284712d1d9d7722205bb5125d52e9aa", @generic="2660a33efcd9c50a8024a1d1fe20ec0f2969d9802f19e84d3188f51e98e2d4ffc88b578fba2cff4c47faf3f6e60d515ddff3a6fcb595614fa8545f6ed5289cf8166d6ea74cc76ad8692b2d44d521a785ce41bf238a5ebc8c747a424f75e0fe116ef68f5efbffae7cf58fc794d7f9d46e456a234adb869b5a17255fbda2d65d1df925969a431c165ced08103bb690e5e4009e1a384bf1c1c80a3a7d121c5583aabf46c127f273db40b8a822114484548d67886411f5ffcea7a0e03fc148dce39e8cd0b554b80d831a638c5d88a97e04543e864199836b8ab411527a1aac2fccf8abf75bc771a3b0dad7fcf2a3d564b4a102c6f4"]}, @MAC802154_HWSIM_ATTR_RADIO_EDGES={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x7d, 0x0, 0x0, @fd=r0}]}]}, 0x244}, 0x1, 0x0, 0x0, 0x4000}, 0x8040) sendmsg$auto_IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000000040)={0x18, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40080}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='Z'], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x2, 0x1, 0x106) bind$auto(0x3, 0x0, 0x6a) setsockopt$auto(r3, 0x1, 0xd, 0x0, 0x9) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000600)={'batadv_slave_1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000800)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000640)={0x14c, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x9}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_MODES_OURS={0x14, 0x2, 0x0, 0x1, [@typed={0x8, 0x12c, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0xba, 0x0, 0x0, @fd=r4}]}, @ETHTOOL_A_EEE_HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @ETHTOOL_A_EEE_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8369}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}]}, 0x14c}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000085) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mouse0\x00', 0x2000, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x9}, 0x3, 0x0) r7 = openat$auto_ima_htable_violations_ops_ima_fs(0xffffffffffffff9c, &(0x7f00000001c0), 0x2800, 0x0) pread64$auto(r7, &(0x7f0000000280)='/dev/dvb/adapter0/frontend0\x00', 0xfffffffffffffffa, 0x3) 1m50.000689059s ago: executing program 0 (id=2744): mmap$auto(0xfffffffffffffffc, 0x400008, 0xdf, 0x9b72, 0x2, 0x8004) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/oom_adj\x00', 0x5a442, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0xd02, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) bpf$auto_BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)=@bpf_attr_5={@target_ifindex=r2, r0, 0x8, 0x101, r1, @relative_id=0xa, 0x8}, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmsg$auto_TASKSTATS_CMD_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x3, 0xff) openat$auto_fake_panic_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/conf/default/ioam6_id_wide\x00', 0x40100, 0x0) read$auto(r4, 0x0, 0x1ff) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000040), 0x80480, 0x0) 1m36.066645735s ago: executing program 33 (id=2738): openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) mmap$auto(0x0, 0x400008, 0x3, 0x9b72, 0x2, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MON_GET(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01000d000000000000000000df41edcde61d80010e50d7c1c63898c656e9c16d992a706b4092e1233bcc1a6179efbf204244ad8faf0f535a04961b82581710aa60d8c560b182b78aafc7a9f2acbd69eef4ee483c27f10a52c0237b158825a02b3b98d700000000000000000000000006e7545072c732407a7020055dd5754aab06592b0b19a26675046c952fe9824704f31f5e1b236ee225d3f30b5661838c7dd0da24cc473276bd5f4bfa7afbf7ab691c1f8a05eb84260ec2278f64761b117ef57001bd96e458fd99900a3dbb88276fc1e644e72d7c81"], 0x14}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) write$auto(0x4, 0x0, 0x100082) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x48041, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/neigh/bridge0/locktime\x00', 0x101202, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/bridge_slave_1/ra_defrtr_metric\x00', 0x101242, 0x0) sendfile$auto(r4, r3, 0x0, 0x48) write$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000240)="1c520b214b197e", 0x7) unshare$auto(0x40000080) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x8081, 0x0) close_range$auto(0xffffffffffffffff, 0x8, 0x0) open(0x0, 0x40, 0xa2) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) fadvise64$auto_POSIX_FADV_SEQUENTIAL(0xffffffffffffffff, 0xca, 0x7, 0x2) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp\x00', 0x100, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x40102, 0x0) pread64$auto(r5, 0x0, 0x40000000f42c, 0x585) write$auto(0x3, 0x0, 0xfffffdef) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) close_range$auto(0x2, 0x8, 0x0) socket(0x1e, 0x805, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/misc/hw_random/rng_current\x00', 0x129102, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x3000000, 0x0, 0x1, 0x0, 0x10000000000000, 0x2}, 0x895}, 0x3, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/irq/1/node\x00', 0x482, 0x0) 1m35.012666s ago: executing program 34 (id=2740): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) lseek$auto(0x3, 0x2, 0x0) r0 = socket(0x2c, 0x1, 0x80003) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x59e, 0x0, 0x2, 0x9}, 0x207}, 0x40, 0x100) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0x4400ae8f, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES16=r2, @ANYBLOB="9f00d7c02f94a20c4c68", @ANYRES8=0x0, @ANYRES32=r1, @ANYRES8=r2, @ANYRES64=r2, @ANYRES8=r1], 0x1ac}, 0x1, 0x0, 0x0, 0x20000840}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0x5}, 0x5, 0x0, 0x2, 0x200}, 0x7ff}, 0x10a, 0x8, 0x0) socket(0x18, 0x80fbda35cd66dd2d, 0xff) setsockopt$auto(r0, 0x29, 0x20, 0x0, 0x23) 1m34.901994362s ago: executing program 35 (id=2742): openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/011/001\x00', 0x121002, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0xdef) ioctl$auto_TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, &(0x7f0000000140)={0x0, &(0x7f0000000100)={0x5, 0x62, 0x7, @raw=0x1}}) semctl$auto_GETPID(0x18000000, 0xfff, 0xb, 0x1) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) fstat$auto(0xffffffffffffffff, &(0x7f0000000180)={0x6, 0x7be089c1, 0x100000000, 0x2, 0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0x9, 0xe, 0xfffffffffffffffb, 0xdd, 0xd, 0x3ff, 0x4}) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000080)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/conf/all/drop_gratuitous_arp\x00', 0x400, 0x0) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00'}) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x8080) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x752502, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x141, 0x0) r3 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000140)={{0x0, 0x2, 0x200800, 0xffffffff, 0xfffffffb}, "0dd7fd004929347eeeccdf0732f77b1f6de0d6d51768a257a97ca5e9ca6310ea"}) ioctl$auto_SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) 1m34.088591234s ago: executing program 36 (id=2744): mmap$auto(0xfffffffffffffffc, 0x400008, 0xdf, 0x9b72, 0x2, 0x8004) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/oom_adj\x00', 0x5a442, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0xd02, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) bpf$auto_BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)=@bpf_attr_5={@target_ifindex=r2, r0, 0x8, 0x101, r1, @relative_id=0xa, 0x8}, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmsg$auto_TASKSTATS_CMD_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x3, 0xff) openat$auto_fake_panic_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/conf/default/ioam6_id_wide\x00', 0x40100, 0x0) read$auto(r4, 0x0, 0x1ff) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000040), 0x80480, 0x0) 1m24.919221146s ago: executing program 7 (id=2747): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptyu1\x00', 0x80000, 0x0) ioctl$auto(r0, 0x5456, r0) madvise$auto(0x3, 0x5, 0x80000000) 1m23.647760241s ago: executing program 6 (id=2746): socket(0x1f, 0x6, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0xa8200, 0x0) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) connect$auto(0x3, &(0x7f00000000c0)=@can={0x1d, r0}, 0x18) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) msgctl$auto_IPC_INFO(0x8, 0x3, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r1, 0x560a, 0x7) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) r2 = socket(0x1d, 0x2, 0x7) r3 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(r2, &(0x7f0000000000)=@can={0x1d, r4}, 0x6a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) connect$auto(0x3, &(0x7f00000018c0)=@can={0x1d, r5}, 0x18) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffcc}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xe, 0x940, 0x1ffde, 0x3, 0x1, 0x3, 0x8, 0x5, 0x2, 0x7, 0x1, 0x9, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3bc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}, 0x1fe, 0x2) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) io_uring_setup$auto(0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_fops_atomic_t_ro_(0xffffffffffffff9c, &(0x7f0000000000), 0x200080, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) socket(0xa, 0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) 1m23.642205694s ago: executing program 5 (id=2745): creat$auto(&(0x7f0000000080)='++\x00', 0xd) (async) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/oss\x00', 0xaa102, 0x0) write$auto(r0, 0x0, 0x7ef) (async) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x50b581, 0x0) (async) socket(0xa, 0x1, 0x100) ioperm$auto(0x7, 0x5ad2, 0xc) (async) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video16\x00', 0xc0400, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64) ioctl$auto(0x3, 0xc0405665, 0x34) (async) modify_ldt$auto(0x1, 0x0, 0x10) (async, rerun: 64) r1 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) (rerun: 64) pread64$auto(r1, 0x0, 0x7ff, 0x400) (async) socket(0x2, 0x1, 0x0) (async, rerun: 64) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async, rerun: 64) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 32) select$auto(0x12, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948f, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1]}, 0x0) (rerun: 32) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/kernel/kexec_load_disabled\x00', 0x202, 0x0) sendfile$auto(r4, r4, 0x0, 0x0) (async) mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) (async, rerun: 64) mmap$auto(0x800000000, 0x10000, 0x4000000000db, 0xeb1, 0x2, 0x8000) (async, rerun: 64) r5 = open(0x0, 0x0, 0x187) newfstatat$auto(r5, 0x0, 0x0, 0x1000) (async) r6 = socket(0x2b, 0x1, 0x1) ioctl$auto(r6, 0x8901, 0x4) (async) unshare$auto(0x40000080) (async, rerun: 32) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (rerun: 32) madvise$auto(0x0, 0x8, 0x16) (async) ioctl$auto_BLKTRACESETUP32(r3, 0xc0401273, 0x0) (async) msync$auto(0x8, 0x180000000000000, 0x400000004) 1m11.595831213s ago: executing program 7 (id=2747): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptyu1\x00', 0x80000, 0x0) ioctl$auto(r0, 0x5456, r0) madvise$auto(0x3, 0x5, 0x80000000) 48.961859259s ago: executing program 7 (id=2747): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptyu1\x00', 0x80000, 0x0) ioctl$auto(r0, 0x5456, r0) madvise$auto(0x3, 0x5, 0x80000000) 27.271666982s ago: executing program 7 (id=2747): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptyu1\x00', 0x80000, 0x0) ioctl$auto(r0, 0x5456, r0) madvise$auto(0x3, 0x5, 0x80000000) 19.521899821s ago: executing program 8 (id=2748): map_shadow_stack$auto(0x2, 0x9, 0x200) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getpid() unshare$auto(0x40000080) r0 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0x88900, 0x0) readv$auto(r0, &(0x7f0000000680)={&(0x7f0000000540), 0x40200}, 0x40000003) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) ppoll$auto(&(0x7f0000000240)={0xffffffffffffffff, 0x5, 0x2}, 0x68, 0x0, 0x0, 0x8) ioctl$auto_SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0xfffffffffffffffc) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f00000000c0), r1) mmap$auto(0x0, 0x3, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_autofs_root_operations_autofs_i(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/bluetooth/hci1/hci1:201\x00', 0x80, 0x0) close_range$auto(r2, 0x8, 0x0) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r3 = socket(0xa, 0x5, 0x84) bpf$auto(0xfffffffd, &(0x7f0000000000)=@bpf_attr_5={@target_ifindex, 0xffffffffffffffff, 0x4, 0x6, 0xffffffffffffffff, @relative_fd=r3, 0xa}, 0xa3) sendto$auto(r3, 0x0, 0x401, 0xffff, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) 0s ago: executing program 8 (id=2748): map_shadow_stack$auto(0x2, 0x9, 0x200) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getpid() unshare$auto(0x40000080) r0 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0x88900, 0x0) readv$auto(r0, &(0x7f0000000680)={&(0x7f0000000540), 0x40200}, 0x40000003) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) ppoll$auto(&(0x7f0000000240)={0xffffffffffffffff, 0x5, 0x2}, 0x68, 0x0, 0x0, 0x8) ioctl$auto_SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0xfffffffffffffffc) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f00000000c0), r1) mmap$auto(0x0, 0x3, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_autofs_root_operations_autofs_i(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/bluetooth/hci1/hci1:201\x00', 0x80, 0x0) close_range$auto(r2, 0x8, 0x0) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r3 = socket(0xa, 0x5, 0x84) bpf$auto(0xfffffffd, &(0x7f0000000000)=@bpf_attr_5={@target_ifindex, 0xffffffffffffffff, 0x4, 0x6, 0xffffffffffffffff, @relative_fd=r3, 0xa}, 0xa3) sendto$auto(r3, 0x0, 0x401, 0xffff, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) kernel console output (not intermixed with test programs):                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           [ 909.299620][T19455] sysfs_service_op_show: Client not running :-5: [ 911.108424][T19490] ubi: mtd0 is already attached to ubi0 [ 911.791870][T19516] FAULT_INJECTION: forcing a failure. [ 911.791870][T19516] name failslab, interval 1, probability 0, space 0, times 0 [ 911.839913][T19516] CPU: 1 UID: 0 PID: 19516 Comm: syz.0.2582 Tainted: GF R 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 911.839971][T19516] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD [ 911.839992][T19516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 911.840012][T19516] Call Trace: [ 911.840024][T19516] [ 911.840038][T19516] dump_stack_lvl+0x16c/0x1f0 [ 911.840091][T19516] should_fail_ex+0x512/0x640 [ 911.840121][T19516] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 911.840163][T19516] should_failslab+0xc2/0x120 [ 911.840205][T19516] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 911.840238][T19516] ? __pfx___might_resched+0x10/0x10 [ 911.840270][T19516] ? __anon_vma_prepare+0x344/0x5e0 [ 911.840321][T19516] __anon_vma_prepare+0x344/0x5e0 [ 911.840349][T19516] ? __pfx___pte_alloc+0x10/0x10 [ 911.840394][T19516] __vmf_anon_prepare+0x11c/0x240 [ 911.840439][T19516] do_pte_missing+0x10bd/0x3ba0 [ 911.840488][T19516] ? do_raw_spin_unlock+0x172/0x230 [ 911.840540][T19516] ? __pmd_alloc+0x3fb/0x930 [ 911.840590][T19516] __handle_mm_fault+0x152a/0x2a50 [ 911.840634][T19516] ? __pfx___handle_mm_fault+0x10/0x10 [ 911.840702][T19516] handle_mm_fault+0x589/0xd10 [ 911.840742][T19516] __get_user_pages+0x551/0x34a0 [ 911.840806][T19516] ? __pfx___get_user_pages+0x10/0x10 [ 911.840867][T19516] populate_vma_page_range+0x267/0x3f0 [ 911.840921][T19516] ? __pfx_populate_vma_page_range+0x10/0x10 [ 911.840970][T19516] ? __pfx_find_vma_intersection+0x10/0x10 [ 911.841027][T19516] ? do_mmap+0x69c/0x1210 [ 911.841088][T19516] __mm_populate+0x1d8/0x380 [ 911.841139][T19516] ? __pfx___mm_populate+0x10/0x10 [ 911.841189][T19516] ? up_write+0x1b2/0x520 [ 911.841236][T19516] vm_mmap_pgoff+0x37f/0x470 [ 911.841282][T19516] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 911.841333][T19516] ? __x64_sys_futex+0x1e0/0x4c0 [ 911.841369][T19516] ? __x64_sys_futex+0x1e9/0x4c0 [ 911.841412][T19516] ksys_mmap_pgoff+0x7d/0x5c0 [ 911.841451][T19516] ? xfd_validate_state+0x61/0x180 [ 911.841495][T19516] ? __pfx_do_writev+0x10/0x10 [ 911.841529][T19516] __x64_sys_mmap+0x125/0x190 [ 911.841579][T19516] do_syscall_64+0xcd/0x490 [ 911.841627][T19516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.841658][T19516] RIP: 0033:0x7f7b8af8eb69 [ 911.841683][T19516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 911.841711][T19516] RSP: 002b:00007f7b8bd22038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 911.841740][T19516] RAX: ffffffffffffffda RBX: 00007f7b8b1b5fa0 RCX: 00007f7b8af8eb69 [ 911.841759][T19516] RDX: 00000000000000df RSI: 0000000000400005 RDI: 0000000000000000 [ 911.841777][T19516] RBP: 00007f7b8b011df1 R08: 0000000000000002 R09: 0000000000008000 [ 911.841794][T19516] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 911.841812][T19516] R13: 0000000000000000 R14: 00007f7b8b1b5fa0 R15: 00007ffc0008ce38 [ 911.841851][T19516] [ 912.218081][T19517] vivid-008: ================= START STATUS ================= [ 912.225807][T19517] vivid-008: Enable Output Cropping: true [ 912.232277][T19517] vivid-008: Enable Output Composing: true [ 912.238173][T19517] vivid-008: Enable Output Scaler: true [ 912.243836][T19517] vivid-008: Tx RGB Quantization Range: Automatic [ 912.250308][T19517] vivid-008: Transmit Mode: HDMI [ 912.255329][T19517] vivid-008: Hotplug Present: 0x00000000 [ 912.261028][T19517] vivid-008: RxSense Present: 0x00000000 [ 912.266762][T19517] vivid-008: EDID Present: 0x00000000 [ 912.272242][T19517] vivid-008: ================== END STATUS ================== [ 912.386414][T19519] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.2581' sets config #32769 [ 913.095944][T19527] openvswitch: netlink: Key 0 has unexpected len 16 expected 0 [ 914.644798][T19548] netlink: 330 bytes leftover after parsing attributes in process `syz.0.2589'. [ 914.715780][T19548] net veth1_virt_wifi ›: renamed from virt_wifi0 [ 915.603893][T19566] ubi: mtd0 is already attached to ubi0 [ 917.261411][T19592] openvswitch: netlink: Key 0 has unexpected len 16 expected 0 [ 919.366508][T19619] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input33 [ 920.192798][T19628] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 920.199175][T14956] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.372993][T14956] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.638103][T14956] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.017188][T14956] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.406899][T17329] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 921.418017][T17329] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 921.431404][T17329] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 921.445542][T17329] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 921.462860][T17329] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 921.667064][T14956] bridge_slave_1: left allmulticast mode [ 921.680973][T14956] bridge_slave_1: left promiscuous mode [ 921.693693][T14956] bridge0: port 2(bridge_slave_1) entered disabled state [ 921.743719][T14956] bridge_slave_0: left allmulticast mode [ 921.749423][T14956] bridge_slave_0: left promiscuous mode [ 921.766386][T14956] bridge0: port 1(bridge_slave_0) entered disabled state [ 922.398897][T19659] openvswitch: netlink: Key 0 has unexpected len 16 expected 0 [ 923.128150][T14956] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 923.178056][T14956] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 923.200099][T14956] bond0 (unregistering): Released all slaves [ 923.561848][T17329] Bluetooth: hci1: command tx timeout [ 924.571363][T14956] hsr_slave_0: left promiscuous mode [ 924.590826][T14956] hsr_slave_1: left promiscuous mode [ 924.615267][T14956] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 924.625603][T14956] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 924.668048][T14956] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 924.688624][T14956] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 924.726302][T19692] FAULT_INJECTION: forcing a failure. [ 924.726302][T19692] name failslab, interval 1, probability 0, space 0, times 0 [ 924.775478][T14956] veth1_macvtap: left promiscuous mode [ 924.781147][T14956] veth0_macvtap: left promiscuous mode [ 924.785046][T19692] CPU: 1 UID: 0 PID: 19692 Comm: syz.4.2620 Tainted: GF R 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 924.785106][T19692] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD [ 924.785121][T19692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 924.785143][T19692] Call Trace: [ 924.785154][T19692] [ 924.785167][T19692] dump_stack_lvl+0x16c/0x1f0 [ 924.785222][T19692] should_fail_ex+0x512/0x640 [ 924.785255][T19692] ? fs_reclaim_acquire+0xae/0x150 [ 924.785310][T19692] ? tomoyo_encode2+0x100/0x3e0 [ 924.785357][T19692] should_failslab+0xc2/0x120 [ 924.785402][T19692] __kmalloc_noprof+0xd2/0x510 [ 924.785443][T19692] ? d_absolute_path+0x136/0x1a0 [ 924.785500][T19692] tomoyo_encode2+0x100/0x3e0 [ 924.785545][T19692] tomoyo_encode+0x29/0x50 [ 924.785583][T19692] tomoyo_realpath_from_path+0x18f/0x6e0 [ 924.785636][T19692] tomoyo_path_number_perm+0x245/0x580 [ 924.785691][T19692] ? tomoyo_path_number_perm+0x237/0x580 [ 924.785752][T19692] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 924.785811][T19692] ? __lock_acquire+0xb8a/0x1c90 [ 924.785894][T19692] ? _raw_spin_unlock+0x28/0x50 [ 924.785935][T19692] ? current_check_access_path+0x33c/0x460 [ 924.785997][T19692] ? __pfx_current_check_access_path+0x10/0x10 [ 924.786055][T19692] ? simple_lookup+0x105/0x1d0 [ 924.786090][T19692] ? lookup_one_qstr_excl+0xb3/0x250 [ 924.786147][T19692] tomoyo_path_mkdir+0x9b/0xe0 [ 924.786194][T19692] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 924.786253][T19692] security_path_mkdir+0x154/0x2f0 [ 924.786290][T19692] do_mkdirat+0x175/0x3e0 [ 924.786342][T19692] ? __pfx_do_mkdirat+0x10/0x10 [ 924.786386][T19692] ? getname_flags.part.0+0x1c5/0x550 [ 924.786444][T19692] __x64_sys_mkdir+0xef/0x140 [ 924.786486][T19692] do_syscall_64+0xcd/0x490 [ 924.786542][T19692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.786578][T19692] RIP: 0033:0x7ff0d278eb69 [ 924.786605][T19692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 924.786638][T19692] RSP: 002b:00007ff0d35f2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 924.786670][T19692] RAX: ffffffffffffffda RBX: 00007ff0d29b5fa0 RCX: 00007ff0d278eb69 [ 924.786697][T19692] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000200000000100 [ 924.786720][T19692] RBP: 00007ff0d2811df1 R08: 0000000000000000 R09: 0000000000000000 [ 924.786743][T19692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 924.786765][T19692] R13: 0000000000000000 R14: 00007ff0d29b5fa0 R15: 00007fff9a7d0718 [ 924.786808][T19692] [ 924.786840][T19692] ERROR: Out of memory at tomoyo_realpath_from_path. [ 924.873076][T14956] veth1_vlan: left promiscuous mode [ 925.001275][T19695] FAULT_INJECTION: forcing a failure. [ 925.001275][T19695] name fail_futex, interval 1, probability 0, space 0, times 0 [ 925.067393][T19695] CPU: 1 UID: 0 PID: 19695 Comm: syz.4.2620 Tainted: GF R 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 925.067452][T19695] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD [ 925.067467][T19695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 925.067487][T19695] Call Trace: [ 925.067499][T19695] [ 925.067513][T19695] dump_stack_lvl+0x16c/0x1f0 [ 925.067566][T19695] should_fail_ex+0x512/0x640 [ 925.067605][T19695] should_fail_futex+0x4c/0x60 [ 925.067644][T19695] futex_lock_pi_atomic+0x148/0xd50 [ 925.067702][T19695] futex_lock_pi+0x23f/0x7c0 [ 925.067759][T19695] ? __pfx_futex_lock_pi+0x10/0x10 [ 925.067805][T19695] ? __futex_wait+0x24c/0x2f0 [ 925.067888][T19695] ? futex_private_hash_put+0x18a/0x300 [ 925.067946][T19695] ? __pfx_futex_wake_mark+0x10/0x10 [ 925.068007][T19695] ? ksys_write+0x190/0x250 [ 925.068048][T19695] do_futex+0x11a/0x350 [ 925.068089][T19695] ? __pfx_do_futex+0x10/0x10 [ 925.068142][T19695] __x64_sys_futex+0x1e0/0x4c0 [ 925.068187][T19695] ? fput+0x70/0xf0 [ 925.068230][T19695] ? __pfx___x64_sys_futex+0x10/0x10 [ 925.068271][T19695] ? xfd_validate_state+0x61/0x180 [ 925.068324][T19695] ? __pfx_ksys_write+0x10/0x10 [ 925.068372][T19695] do_syscall_64+0xcd/0x490 [ 925.068424][T19695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.068457][T19695] RIP: 0033:0x7ff0d278eb69 [ 925.068484][T19695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 925.068516][T19695] RSP: 002b:00007ff0d35d1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 925.068558][T19695] RAX: ffffffffffffffda RBX: 00007ff0d29b6080 RCX: 00007ff0d278eb69 [ 925.068578][T19695] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 925.068595][T19695] RBP: 00007ff0d2811df1 R08: 0000000000000000 R09: 000000008000fff2 [ 925.068615][T19695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 925.068633][T19695] R13: 0000000000000000 R14: 00007ff0d29b6080 R15: 00007fff9a7d0718 [ 925.068671][T19695] [ 925.347222][T14956] veth0_vlan: left promiscuous mode [ 925.360476][ T8684] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 925.370442][ T8684] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 925.416860][ T8684] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 925.434513][ T8684] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 925.442493][ T8684] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 925.645062][ T8684] Bluetooth: hci1: command tx timeout [ 927.006505][T14956] team0 (unregistering): Port device team_slave_1 removed [ 927.125320][T14956] team0 (unregistering): Port device team_slave_0 removed [ 927.486168][ T8684] Bluetooth: hci0: command tx timeout [ 927.721319][ T8684] Bluetooth: hci1: command tx timeout [ 927.930630][T19649] chnl_net:caif_netlink_parms(): no params data found [ 928.472002][T19649] bridge0: port 1(bridge_slave_0) entered blocking state [ 928.490213][T19649] bridge0: port 1(bridge_slave_0) entered disabled state [ 928.515738][T19649] bridge_slave_0: entered allmulticast mode [ 928.553440][T19649] bridge_slave_0: entered promiscuous mode [ 928.593056][T19649] bridge0: port 2(bridge_slave_1) entered blocking state [ 928.618226][T19649] bridge0: port 2(bridge_slave_1) entered disabled state [ 928.631938][T19649] bridge_slave_1: entered allmulticast mode [ 928.653500][T19649] bridge_slave_1: entered promiscuous mode [ 928.780317][T19649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 928.805051][T19649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 928.918583][T19649] team0: Port device team_slave_0 added [ 929.020965][T19649] team0: Port device team_slave_1 added [ 929.031388][T19762] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input34 [ 929.284712][T19649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 929.305402][T19649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 929.331344][ C1] vkms_vblank_simulate: vblank timer overrun [ 929.380550][T19649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 929.519939][T14956] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.552158][T19649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 929.561629][ T8684] Bluetooth: hci0: command tx timeout [ 929.569413][T19649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 929.595440][ C1] vkms_vblank_simulate: vblank timer overrun [ 929.643353][T19649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 929.757169][T14956] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.802050][ T8684] Bluetooth: hci1: command tx timeout [ 929.830796][T19700] chnl_net:caif_netlink_parms(): no params data found [ 929.942915][T19767] FAULT_INJECTION: forcing a failure. [ 929.942915][T19767] name failslab, interval 1, probability 0, space 0, times 0 [ 929.955832][T19767] CPU: 1 UID: 0 PID: 19767 Comm: syz.3.2633 Tainted: GF R 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 929.955886][T19767] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD [ 929.955899][T19767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 929.955917][T19767] Call Trace: [ 929.955927][T19767] [ 929.955938][T19767] dump_stack_lvl+0x16c/0x1f0 [ 929.955994][T19767] should_fail_ex+0x512/0x640 [ 929.956021][T19767] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 929.956056][T19767] should_failslab+0xc2/0x120 [ 929.956095][T19767] __kmalloc_cache_noprof+0x6a/0x3e0 [ 929.956125][T19767] ? sctp_auth_shkey_create+0x9e/0x210 [ 929.956174][T19767] sctp_auth_shkey_create+0x9e/0x210 [ 929.956228][T19767] sctp_endpoint_new+0x562/0xcd0 [ 929.956273][T19767] sctp_init_sock+0xe2d/0x1330 [ 929.956307][T19767] ? sock_init_data_uid+0x7f6/0xa00 [ 929.956341][T19767] ? __pfx_sctp_init_sock+0x10/0x10 [ 929.956377][T19767] inet_create+0x936/0x1040 [ 929.956409][T19767] ? inet_create+0x93/0x1040 [ 929.956446][T19767] __sock_create+0x335/0x8d0 [ 929.956482][T19767] __sys_socket+0x14d/0x260 [ 929.956515][T19767] ? __pfx___sys_socket+0x10/0x10 [ 929.956548][T19767] ? xfd_validate_state+0x61/0x180 [ 929.956589][T19767] ? __pfx_do_writev+0x10/0x10 [ 929.956624][T19767] __x64_sys_socket+0x72/0xb0 [ 929.956654][T19767] ? lockdep_hardirqs_on+0x7c/0x110 [ 929.956693][T19767] do_syscall_64+0xcd/0x490 [ 929.956737][T19767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.956765][T19767] RIP: 0033:0x7fb5d698eb69 [ 929.956787][T19767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 929.956816][T19767] RSP: 002b:00007fb5d7754038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 929.956844][T19767] RAX: ffffffffffffffda RBX: 00007fb5d6bb5fa0 RCX: 00007fb5d698eb69 [ 929.956863][T19767] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000002 [ 929.956879][T19767] RBP: 00007fb5d6a11df1 R08: 0000000000000000 R09: 0000000000000000 [ 929.956896][T19767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 929.956913][T19767] R13: 0000000000000000 R14: 00007fb5d6bb5fa0 R15: 00007ffd334586f8 [ 929.956954][T19767] [ 930.181118][ C1] vkms_vblank_simulate: vblank timer overrun [ 930.374825][T14956] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.614822][T14956] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.682909][T19649] hsr_slave_0: entered promiscuous mode [ 930.702851][T19649] hsr_slave_1: entered promiscuous mode [ 931.007890][T19798] FAULT_INJECTION: forcing a failure. [ 931.007890][T19798] name failslab, interval 1, probability 0, space 0, times 0 [ 931.024076][T19798] CPU: 1 UID: 0 PID: 19798 Comm: syz.3.2636 Tainted: GF R 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 931.024135][T19798] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD [ 931.024150][T19798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 931.024170][T19798] Call Trace: [ 931.024181][T19798] [ 931.024194][T19798] dump_stack_lvl+0x16c/0x1f0 [ 931.024248][T19798] should_fail_ex+0x512/0x640 [ 931.024284][T19798] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 931.024321][T19798] should_failslab+0xc2/0x120 [ 931.024366][T19798] __kmalloc_cache_noprof+0x6a/0x3e0 [ 931.024399][T19798] ? read_tsc+0x9/0x20 [ 931.024435][T19798] ? ktime_get_mono_fast_ns+0x1be/0x3c0 [ 931.024473][T19798] ? init_srcu_struct_fields+0x97a/0xde0 [ 931.024520][T19798] ? do_init_timer+0xc9/0x110 [ 931.024562][T19798] init_srcu_struct_fields+0x97a/0xde0 [ 931.024614][T19798] ? lockdep_init_map_type+0x5c/0x280 [ 931.024686][T19798] kvm_dev_ioctl+0x7a0/0x1af0 [ 931.024723][T19798] ? find_held_lock+0x2b/0x80 [ 931.024751][T19798] ? hook_file_ioctl_common+0x145/0x410 [ 931.024799][T19798] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 931.024832][T19798] ? __fget_files+0x20e/0x3c0 [ 931.024876][T19798] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 931.024910][T19798] __x64_sys_ioctl+0x18b/0x210 [ 931.024961][T19798] do_syscall_64+0xcd/0x490 [ 931.025008][T19798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.025039][T19798] RIP: 0033:0x7fb5d698eb69 [ 931.025064][T19798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 931.025095][T19798] RSP: 002b:00007fb5d7754038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 931.025125][T19798] RAX: ffffffffffffffda RBX: 00007fb5d6bb5fa0 RCX: 00007fb5d698eb69 [ 931.025145][T19798] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000002 [ 931.025162][T19798] RBP: 00007fb5d6a11df1 R08: 0000000000000000 R09: 0000000000000000 [ 931.025179][T19798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 931.025197][T19798] R13: 0000000000000000 R14: 00007fb5d6bb5fa0 R15: 00007ffd334586f8 [ 931.025235][T19798] [ 931.242539][ C1] vkms_vblank_simulate: vblank timer overrun [ 931.356917][T19700] bridge0: port 1(bridge_slave_0) entered blocking state [ 931.370985][T19700] bridge0: port 1(bridge_slave_0) entered disabled state [ 931.381392][T19700] bridge_slave_0: entered allmulticast mode [ 931.392940][T19700] bridge_slave_0: entered promiscuous mode [ 931.401876][T19700] bridge0: port 2(bridge_slave_1) entered blocking state [ 931.409173][T19700] bridge0: port 2(bridge_slave_1) entered disabled state [ 931.416828][T19700] bridge_slave_1: entered allmulticast mode [ 931.425154][T19700] bridge_slave_1: entered promiscuous mode [ 931.506963][T19802] netlink: 'syz.3.2637': attribute type 4 has an invalid length. [ 931.641637][ T8684] Bluetooth: hci0: command tx timeout [ 931.693775][T19700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 931.717142][T19700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 931.837061][T14956] bridge_slave_1: left allmulticast mode [ 931.844145][T14956] bridge_slave_1: left promiscuous mode [ 931.851056][T14956] bridge0: port 2(bridge_slave_1) entered disabled state [ 931.886643][T14956] bridge_slave_0: left allmulticast mode [ 931.894493][T14956] bridge_slave_0: left promiscuous mode [ 931.921018][T14956] bridge0: port 1(bridge_slave_0) entered disabled state [ 932.320790][T14956] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 932.335090][T14956] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 932.345428][T14956] bond0 (unregistering): Released all slaves [ 932.445968][T19700] team0: Port device team_slave_0 added [ 932.483674][T19700] team0: Port device team_slave_1 added [ 932.680504][ T8684] Bluetooth: hci3: unexpected event 0x1d length: 10 > 5 [ 932.742499][T19700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 932.761710][T19700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 932.792754][T19700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 932.917842][T19700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 932.945007][T19700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 932.991359][T19700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 933.241948][T14956] hsr_slave_0: left promiscuous mode [ 933.256831][T14956] hsr_slave_1: left promiscuous mode [ 933.275331][T14956] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 933.283682][T14956] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 933.349417][T14956] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 933.370374][T14956] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 933.418411][T14956] veth1_macvtap: left promiscuous mode [ 933.428446][T14956] veth0_macvtap: left promiscuous mode [ 933.434263][T14956] veth1_vlan: left promiscuous mode [ 933.439612][T14956] veth0_vlan: left promiscuous mode [ 933.721676][ T8684] Bluetooth: hci0: command tx timeout [ 934.296394][T14956] team0 (unregistering): Port device team_slave_1 removed [ 934.344323][T14956] team0 (unregistering): Port device team_slave_0 removed [ 934.906051][T19700] hsr_slave_0: entered promiscuous mode [ 934.935389][T19700] hsr_slave_1: entered promiscuous mode [ 934.953089][T19700] debugfs: 'hsr0' already exists in 'hsr' [ 934.958888][T19700] Cannot create hsr debugfs directory [ 935.494134][T19649] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 935.526099][T19649] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 935.600841][T19649] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 935.622085][T19649] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 936.128257][T19649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 936.267331][T19649] 8021q: adding VLAN 0 to HW filter on device team0 [ 936.396412][T14958] bridge0: port 1(bridge_slave_0) entered blocking state [ 936.403602][T14958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 936.451071][T19700] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 936.547520][T19700] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 936.607808][T14957] bridge0: port 2(bridge_slave_1) entered blocking state [ 936.614986][T14957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 936.672645][T19700] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 936.690177][T19700] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 936.976253][T19700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 937.038900][T19700] 8021q: adding VLAN 0 to HW filter on device team0 [ 937.078125][T14957] bridge0: port 1(bridge_slave_0) entered blocking state [ 937.085382][T14957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 937.134794][T14957] bridge0: port 2(bridge_slave_1) entered blocking state [ 937.142040][T14957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 937.477064][T19649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 937.559493][T19874] kmem.tcp.limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 937.619884][T19649] veth0_vlan: entered promiscuous mode [ 937.631647][T19878] bond0: option all_slaves_active: invalid value () [ 937.644686][T19649] veth1_vlan: entered promiscuous mode [ 938.130759][T19874] bond0: option all_slaves_active: invalid value () [ 938.200168][T19700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 938.271910][T19649] veth0_macvtap: entered promiscuous mode [ 938.310194][T19649] veth1_macvtap: entered promiscuous mode [ 938.417217][T19700] veth0_vlan: entered promiscuous mode [ 938.432495][T19649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 938.467799][T19649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 938.478521][T19700] veth1_vlan: entered promiscuous mode [ 938.512420][T14955] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.527297][T14955] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.618835][T14955] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.628366][T14955] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.679046][T14955] netdevsim netdevsim15 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.775652][T19700] veth0_macvtap: entered promiscuous mode [ 938.865703][T19700] veth1_macvtap: entered promiscuous mode [ 938.903698][T14955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 938.925413][T14955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 939.003754][T19700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 939.009250][T19910] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2654'. [ 939.025300][T19700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 939.050012][T19910] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.092769][T19910] bridge_slave_1 (unregistering): left allmulticast mode [ 939.099949][T19910] bridge_slave_1 (unregistering): left promiscuous mode [ 939.130242][T19910] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.178710][T19917] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2655'. [ 939.206104][T14977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 939.233807][T14977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 939.255673][T19917] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.343244][T19917] bridge_slave_1 (unregistering): left allmulticast mode [ 939.352227][T19917] bridge_slave_1 (unregistering): left promiscuous mode [ 939.359295][T19917] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.470230][ T8638] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.527484][ T8638] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.672615][ T8638] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.686956][ T8638] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.060958][T14977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 940.103623][T14977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 940.324905][ T8684] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 940.332926][ T8684] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 940.344625][ T8684] CPU: 0 UID: 0 PID: 8684 Comm: kworker/u11:1 Tainted: GF R 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 940.344677][ T8684] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD [ 940.344686][ T8684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 940.344701][ T8684] Workqueue: hci3 hci_rx_work [ 940.344731][ T8684] Call Trace: [ 940.344738][ T8684] [ 940.344746][ T8684] dump_stack_lvl+0x16c/0x1f0 [ 940.344779][ T8684] sysfs_warn_dup+0x7f/0xa0 [ 940.344804][ T8684] sysfs_create_dir_ns+0x24b/0x2b0 [ 940.344829][ T8684] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 940.344852][ T8684] ? find_held_lock+0x2b/0x80 [ 940.344877][ T8684] ? do_raw_spin_unlock+0x172/0x230 [ 940.344911][ T8684] kobject_add_internal+0x2c4/0x9b0 [ 940.344950][ T8684] kobject_add+0x16e/0x240 [ 940.344977][ T8684] ? __pfx_kobject_add+0x10/0x10 [ 940.344997][ T8684] ? do_raw_spin_unlock+0x172/0x230 [ 940.345031][ T8684] ? kobject_put+0xab/0x5a0 [ 940.345070][ T8684] device_add+0x288/0x1a70 [ 940.345094][ T8684] ? __pfx_dev_set_name+0x10/0x10 [ 940.345120][ T8684] ? __pfx_device_add+0x10/0x10 [ 940.345142][ T8684] ? mgmt_send_event_skb+0x2fb/0x460 [ 940.345174][ T8684] hci_conn_add_sysfs+0x17e/0x230 [ 940.345205][ T8684] le_conn_complete_evt+0x1075/0x1d70 [ 940.345236][ T8684] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 940.345260][ T8684] ? bt_warn+0xe4/0x120 [ 940.345281][ T8684] ? __pfx_bt_warn+0x10/0x10 [ 940.345309][ T8684] hci_le_conn_complete_evt+0x23c/0x370 [ 940.345339][ T8684] hci_le_meta_evt+0x354/0x5e0 [ 940.345366][ T8684] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 940.345395][ T8684] hci_event_packet+0x685/0x11c0 [ 940.345420][ T8684] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 940.345448][ T8684] ? __pfx_hci_event_packet+0x10/0x10 [ 940.345529][ T8684] ? kcov_remote_start+0x3c9/0x6d0 [ 940.345559][ T8684] ? lockdep_hardirqs_on+0x7c/0x110 [ 940.345596][ T8684] hci_rx_work+0x2c5/0x16b0 [ 940.345624][ T8684] ? rcu_is_watching+0x12/0xc0 [ 940.345648][ T8684] process_one_work+0x9cc/0x1b70 [ 940.345709][ T8684] ? __pfx_process_one_work+0x10/0x10 [ 940.345751][ T8684] ? assign_work+0x1a0/0x250 [ 940.345787][ T8684] worker_thread+0x6c8/0xf10 [ 940.345830][ T8684] ? __kthread_parkme+0x19e/0x250 [ 940.345859][ T8684] ? __pfx_worker_thread+0x10/0x10 [ 940.345894][ T8684] kthread+0x3c5/0x780 [ 940.345926][ T8684] ? __pfx_kthread+0x10/0x10 [ 940.345968][ T8684] ? rcu_is_watching+0x12/0xc0 [ 940.345989][ T8684] ? __pfx_kthread+0x10/0x10 [ 940.346022][ T8684] ret_from_fork+0x5d7/0x6f0 [ 940.346056][ T8684] ? __pfx_kthread+0x10/0x10 [ 940.346089][ T8684] ret_from_fork_asm+0x1a/0x30 [ 940.346128][ T8684] [ 940.346153][ T8684] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 940.630230][ T8684] Bluetooth: hci3: failed to register connection device [ 940.644955][T14957] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 940.664853][T14957] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 941.428744][T19965] random: crng reseeded on system resumption [ 941.461377][ T8638] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:1: iget: checksum invalid [ 941.496202][T14955] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:16: iget: checksum invalid [ 941.514424][ T8638] (NULL device *): loading /lib/firmware/updates/6.16.0-syzkaller-10355-gf2d282e1dfb3/regulatory.db failed with error -74 [ 941.530840][T14955] (NULL device *): loading /lib/firmware/updates/6.16.0-syzkaller-10355-gf2d282e1dfb3/regulatory.db.p7s failed with error -74 [ 941.550579][ T8638] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:1: iget: checksum invalid [ 941.574923][T14955] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:16: iget: checksum invalid [ 941.609672][ T8638] (NULL device *): loading /lib/firmware/updates/regulatory.db failed with error -74 [ 941.625204][T14955] (NULL device *): loading /lib/firmware/updates/regulatory.db.p7s failed with error -74 [ 941.636033][ T8638] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:1: iget: checksum invalid [ 941.668992][T14955] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:16: iget: checksum invalid [ 941.680766][ T8638] (NULL device *): loading /lib/firmware/6.16.0-syzkaller-10355-gf2d282e1dfb3/regulatory.db failed with error -74 [ 941.716798][T14955] (NULL device *): loading /lib/firmware/6.16.0-syzkaller-10355-gf2d282e1dfb3/regulatory.db.p7s failed with error -74 [ 941.764692][ T8638] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:1: iget: checksum invalid [ 941.825581][ T8638] (NULL device *): loading /lib/firmware/regulatory.db failed with error -74 [ 941.834760][T14955] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:16: iget: checksum invalid [ 941.869224][ T8638] (NULL device *): Direct firmware load for regulatory.db failed with error -74 [ 941.889339][T14955] (NULL device *): loading /lib/firmware/regulatory.db.p7s failed with error -74 [ 941.929882][ T8638] (NULL device *): Falling back to sysfs fallback for: regulatory.db [ 941.948003][T14955] (NULL device *): Direct firmware load for regulatory.db.p7s failed with error -74 [ 941.966251][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 941.972767][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 941.985356][T14955] (NULL device *): Falling back to sysfs fallback for: regulatory.db.p7s [ 943.957111][T20007] kexec: Could not allocate control_code_buffer [ 952.566199][T20024] smc: net device syz_tun applied user defined pnetid ETHTOOL [ 952.606767][T20026] binder: 20025:20026 unknown command 3 [ 952.622710][T20026] binder: 20025:20026 ioctl c0306201 0 returned -22 [ 955.379754][T20083] device-mapper: ioctl: Invalid ioctl structure: name ¢, dev 7f00010002 [ 958.671608][T20154] netlink: 326 bytes leftover after parsing attributes in process `syz.4.2697'. [ 959.405566][T17329] Bluetooth: hci3: command 0x0406 tx timeout [ 960.011232][T20180] input: f¬ as /devices/virtual/input/input35 [ 960.141033][T20198] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 960.650651][T20203] cifs: Unknown parameter 'no+ 1§• Ö`ÑørêsFn)ÈøaõH†šÄ¿¡h`àØÝë9k¤A}€žŠ1\D@‹Ç.ÁäZÔCg^‚' [ 963.301427][T20255] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7fe00 [ 963.431218][T20255] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 963.451485][T20255] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 963.481587][T20255] page_type: f5(slab) [ 963.506043][T20255] raw: 00fff00000000040 ffff88801b84b640 ffffea00012c6800 dead000000000002 [ 963.547379][T20255] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 963.560369][T20243] ubi: mtd0 is already attached to ubi0 [ 963.600516][T20255] head: 00fff00000000040 ffff88801b84b640 ffffea00012c6800 dead000000000002 [ 963.651205][T20255] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 963.684162][T20255] head: 00fff00000000003 ffffea0001ff8001 00000000ffffffff 00000000ffffffff [ 963.713996][T20255] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 963.782865][T20255] page dumped because: unmovable page [ 963.805108][T20255] page_owner tracks the page as allocated [ 963.835945][T20255] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5840, tgid 5840 (syz-executor), ts 97295590639, free_ts 97232395117 [ 963.917844][T20255] post_alloc_hook+0x1c0/0x230 [ 963.940717][T20255] get_page_from_freelist+0x132b/0x38e0 [ 964.005654][T20255] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 964.022739][T20255] alloc_pages_mpol+0x1fb/0x550 [ 964.061221][T20255] new_slab+0x247/0x330 [ 964.065435][T20255] ___slab_alloc+0xd1e/0x1780 [ 964.132165][T20255] __slab_alloc.constprop.0+0x56/0xb0 [ 964.151172][T20255] __kvmalloc_node_noprof+0x3b1/0x620 [ 964.156624][T20255] alloc_netdev_mqs+0xd2/0x1500 [ 964.181236][T20255] rtnl_create_link+0xc08/0xf90 [ 964.191648][T20255] rtnl_newlink+0xb69/0x2000 [ 964.208878][T20255] rtnetlink_rcv_msg+0x95e/0xe90 [ 964.219953][T20255] netlink_rcv_skb+0x155/0x420 [ 964.255160][T20255] netlink_unicast+0x5aa/0x870 [ 964.264670][T20255] netlink_sendmsg+0x8d1/0xdd0 [ 964.269480][T20255] __sys_sendto+0x4a0/0x520 [ 964.306119][T20255] page last free pid 5838 tgid 5838 stack trace: [ 964.357053][T20255] __free_frozen_pages+0x7d5/0x10f0 [ 964.377594][T20255] __put_partials+0x165/0x1c0 [ 964.410548][T20255] qlist_free_all+0x4d/0x120 [ 964.435116][T20271] bridge0: port 2(veth0_to_bridge) entered blocking state [ 964.442726][T20271] bridge0: port 2(veth0_to_bridge) entered disabled state [ 964.445380][T20255] kasan_quarantine_reduce+0x195/0x1e0 [ 964.463174][T20255] __kasan_slab_alloc+0x69/0x90 [ 964.469769][T20271] veth0_to_bridge: entered allmulticast mode [ 964.481189][T20255] kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 964.493570][T20255] __alloc_skb+0x2b2/0x380 [ 964.519557][T20255] rtmsg_ifinfo_build_skb+0x81/0x280 [ 964.528012][T20271] veth0_to_bridge: entered promiscuous mode [ 964.557515][T20255] rtnetlink_event+0xf3/0x1f0 [ 964.578216][T20271] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 964.613388][T20255] notifier_call_chain+0xbc/0x410 [ 964.618507][T20255] call_netdevice_notifiers_info+0xbe/0x140 [ 964.666152][T20271] bridge0: port 2(veth0_to_bridge) entered blocking state [ 964.673498][T20271] bridge0: port 2(veth0_to_bridge) entered forwarding state [ 964.691176][T20255] call_netdevice_notifiers+0x7c/0xb0 [ 964.702063][T20255] br_add_if+0x1602/0x1b70 [ 964.728536][T20255] do_set_master+0x40f/0x730 [ 964.751177][T20255] do_setlink.constprop.0+0xbd8/0x4380 [ 964.756725][T20255] rtnl_newlink+0x1446/0x2000 [ 966.649816][T20316] can: request_module (can-proto-0) failed. [ 968.938664][T20378] random: crng reseeded on system resumption [ 969.020768][ T8638] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:1: iget: checksum invalid [ 969.078453][ T8638] (NULL device *): loading /lib/firmware/updates/6.16.0-syzkaller-10355-gf2d282e1dfb3/regulatory.db failed with error -74 [ 969.096835][T14955] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:16: iget: checksum invalid [ 969.142407][T20370] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2735'. [ 969.166893][T14955] (NULL device *): loading /lib/firmware/updates/6.16.0-syzkaller-10355-gf2d282e1dfb3/regulatory.db.p7s failed with error -74 [ 969.185138][ T8638] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:1: iget: checksum invalid [ 969.196883][T14955] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:16: iget: checksum invalid [ 969.216313][ T8638] (NULL device *): loading /lib/firmware/updates/regulatory.db failed with error -74 [ 969.237079][ T8638] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:1: iget: checksum invalid [ 969.251281][T14955] (NULL device *): loading /lib/firmware/updates/regulatory.db.p7s failed with error -74 [ 969.265967][ T8638] (NULL device *): loading /lib/firmware/6.16.0-syzkaller-10355-gf2d282e1dfb3/regulatory.db failed with error -74 [ 969.278454][T14955] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:16: iget: checksum invalid [ 969.368267][ T8638] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:1: iget: checksum invalid [ 969.397096][T14955] (NULL device *): loading /lib/firmware/6.16.0-syzkaller-10355-gf2d282e1dfb3/regulatory.db.p7s failed with error -74 [ 969.500835][T14955] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:16: iget: checksum invalid [ 969.520502][ T8638] (NULL device *): loading /lib/firmware/regulatory.db failed with error -74 [ 969.574869][ T8638] (NULL device *): Direct firmware load for regulatory.db failed with error -74 [ 969.601055][T14955] (NULL device *): loading /lib/firmware/regulatory.db.p7s failed with error -74 [ 969.659112][ T8638] (NULL device *): Falling back to sysfs fallback for: regulatory.db [ 969.684903][T14955] (NULL device *): Direct firmware load for regulatory.db.p7s failed with error -74 [ 969.717787][T14955] (NULL device *): Falling back to sysfs fallback for: regulatory.db.p7s [ 977.804027][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 977.816266][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 977.828640][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 977.840786][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 977.853082][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 977.865228][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 977.877558][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 977.889697][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 977.901959][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 977.914102][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 982.811171][ C0] net_ratelimit: 28592 callbacks suppressed [ 982.811205][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 982.829775][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 982.842174][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 982.854408][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 982.866765][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 982.878997][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 982.891389][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 982.903603][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 982.915923][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 982.928160][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 986.901092][ C0] sched: DL replenish lagged too much [ 987.821139][ C0] net_ratelimit: 25664 callbacks suppressed [ 987.821158][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 987.839246][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 987.851458][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 987.863619][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 987.875810][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 987.887969][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 987.900204][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 987.912303][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 987.924595][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 987.936801][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 991.778772][ T8684] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 992.831331][ C0] net_ratelimit: 26838 callbacks suppressed [ 992.831358][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 992.849511][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 992.861730][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 992.873882][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 992.886066][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 992.898163][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 992.910618][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 992.922729][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 992.934927][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 992.947079][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 995.157432][T17329] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 995.182297][T10451] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 995.397380][T20422] Bluetooth: hci5: Opcode 0x0c03 failed: -4 [ 995.418400][T20423] Bluetooth: hci6: Opcode 0x0c03 failed: -4 [ 995.439894][T17329] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 995.473976][T20419] Bluetooth: hci2: Opcode 0x0c03 failed: -4 [ 995.797759][T17329] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 995.799452][T20405] smc: removing net device syz_tun with user defined pnetid ETHTOOL [ 995.996989][T17329] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 997.841167][ C0] net_ratelimit: 23455 callbacks suppressed [ 997.841196][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 997.859591][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 997.871912][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 997.884333][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 997.896606][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 997.908973][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 997.921271][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 997.933674][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 997.945915][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 997.958231][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 998.512463][T20430] Bluetooth: hci7: Opcode 0x1009 failed: -110 [ 1000.138749][T20441] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1000.159116][ T8684] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1000.193962][T20441] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1000.216574][T20441] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1000.238768][T20434] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1000.257169][ T8684] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1000.358650][T20441] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1000.380410][ T8684] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1000.415347][T20434] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1000.434349][T20434] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1000.476711][T20454] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1000.530043][T20441] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1000.562678][T20454] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1000.582831][T20454] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1000.606026][ T8684] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1000.665833][T20441] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1000.743678][ T8684] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1000.805837][ T8684] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1000.828544][T20455] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1001.608160][T10451] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1002.851170][ C0] net_ratelimit: 26255 callbacks suppressed [ 1002.851194][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1002.869305][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1002.881532][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1002.893785][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1002.906035][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1002.918274][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1002.930521][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1002.942724][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1002.954973][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1002.967180][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1003.415969][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1003.424104][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1004.711450][T17329] Bluetooth: hci0: Opcode 0x0c16 failed: -110 [ 1004.744307][T20454] Bluetooth: hci1: command tx timeout [ 1004.750261][T20454] Bluetooth: hci7: command tx timeout [ 1004.768039][T17329] Bluetooth: hci2: command tx timeout [ 1004.829080][T20455] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1007.168642][T20444] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1007.861249][ C0] net_ratelimit: 28677 callbacks suppressed [ 1007.861270][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1007.879465][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1007.891603][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1007.903904][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1007.916042][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1007.928335][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1007.941903][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1007.954158][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1007.966536][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1007.978816][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1008.840674][T20455] Bluetooth: hci1: command tx timeout [ 1008.857182][T20455] Bluetooth: hci7: command tx timeout [ 1008.967449][T20454] Bluetooth: hci2: command tx timeout [ 1011.205292][T20455] Bluetooth: hci7: command tx timeout [ 1011.210744][T20455] Bluetooth: hci2: command tx timeout [ 1011.229122][T10451] Bluetooth: hci1: command tx timeout [ 1011.247489][T10451] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1011.315668][T10451] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1011.696782][T10451] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1012.871278][ C0] net_ratelimit: 26604 callbacks suppressed [ 1012.871300][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1012.889519][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1012.901677][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1012.914010][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1012.927158][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1012.939522][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1012.951706][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1012.964067][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1012.976306][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1012.988667][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1016.476482][T20454] Bluetooth: hci0: Opcode 0x1005 failed: -110 [ 1016.532852][T10451] Bluetooth: hci2: command tx timeout [ 1016.538284][T10451] Bluetooth: hci1: command tx timeout [ 1016.557534][T20455] Bluetooth: hci7: command tx timeout [ 1017.400778][T20455] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1017.814622][T20455] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1017.881186][ C0] net_ratelimit: 28054 callbacks suppressed [ 1017.881206][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1017.899455][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1017.911804][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1017.924138][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1017.936304][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1017.948600][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1017.960777][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1017.973114][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1017.985281][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1017.997571][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1020.215802][T20455] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1021.614528][T20455] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1022.891110][ C0] net_ratelimit: 28712 callbacks suppressed [ 1022.891135][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1022.909349][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1022.921536][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1022.933895][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1022.946086][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1022.958370][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1022.970514][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1022.982807][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1022.994965][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1023.007264][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1024.281139][T20461] Bluetooth: hci0: Opcode 0x0c38 failed: -110 [ 1027.901142][ C0] net_ratelimit: 29796 callbacks suppressed [ 1027.901163][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1027.919420][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1027.931739][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1027.944131][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1027.956424][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1027.968794][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1027.981141][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1027.993638][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1028.005967][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1028.018246][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1032.911183][ C0] net_ratelimit: 28000 callbacks suppressed [ 1032.911204][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1032.929570][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1032.941953][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1032.954375][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1032.966561][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1032.978877][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1032.991247][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1033.003511][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1033.015914][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1033.028203][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1033.768122][T20455] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1033.862620][T20455] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1034.104739][T20455] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1034.349688][T20455] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1035.875685][T20455] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1037.921210][ C0] net_ratelimit: 28044 callbacks suppressed [ 1037.921231][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1037.939418][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1037.951657][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1037.963924][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1037.976119][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1037.988380][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1038.000635][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1038.012927][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1038.025187][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1038.037453][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1039.561268][T20472] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1042.931087][ C0] net_ratelimit: 30417 callbacks suppressed [ 1042.931111][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1042.949248][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1042.961669][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1042.973988][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1042.986338][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1042.998705][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1043.011024][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1043.023617][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1043.035993][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1043.048188][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1047.941252][ C0] net_ratelimit: 29279 callbacks suppressed [ 1047.941271][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1047.959472][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1047.971642][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1047.984064][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1047.996241][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1048.008642][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1048.020856][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1048.033172][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1048.045318][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1048.057629][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1049.074985][ T8684] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1049.140503][ T8684] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1049.257822][ T8684] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1050.072848][ T8684] Bluetooth: hci0: command tx timeout [ 1051.038082][T20455] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1051.638961][T20455] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1052.951182][ C0] net_ratelimit: 27364 callbacks suppressed [ 1052.951203][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1052.969376][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1052.981611][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1052.993866][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1053.006073][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1053.018392][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1053.030647][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1053.042918][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1053.055156][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1053.067427][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1054.681165][T20480] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 1057.024288][ T8684] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1057.165946][T20455] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1057.748378][T20455] Bluetooth: hci3: command tx timeout [ 1057.961086][ C0] net_ratelimit: 26030 callbacks suppressed [ 1057.961115][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1057.979453][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1057.991755][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1058.004156][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1058.016451][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1058.028831][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1058.041134][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1058.053468][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1058.065777][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1058.078149][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1058.130784][ T8684] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1058.386459][T17329] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1058.407750][ T8684] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1058.449731][T20430] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1058.470228][T20430] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1058.547954][ T8684] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1058.569691][T17329] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1058.590617][ T8684] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1058.610560][ T8684] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1058.642544][T17329] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1058.650958][T17329] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1058.683208][ T8684] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1058.705780][T10451] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1060.887425][T20454] Bluetooth: hci5: command tx timeout [ 1062.775785][T20455] Bluetooth: hci0: command tx timeout [ 1062.814567][T17329] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1062.836565][T20455] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1062.971175][ C0] net_ratelimit: 25047 callbacks suppressed [ 1062.971201][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1062.989454][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1063.001723][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1063.013980][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1063.026219][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1063.038504][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1063.050753][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1063.062947][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1063.075246][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1063.087465][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1063.104058][T20455] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1063.124034][T20455] Bluetooth: hci5: command tx timeout [ 1064.730083][T20455] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1064.847093][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1064.853576][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1065.712044][T20455] Bluetooth: hci0: command tx timeout [ 1065.717526][T20455] Bluetooth: hci4: command tx timeout [ 1065.736627][T20455] Bluetooth: hci5: command tx timeout [ 1067.981128][ C0] net_ratelimit: 26846 callbacks suppressed [ 1067.981150][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1067.999272][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1068.011581][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1068.023985][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1068.036302][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1068.048497][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1068.060751][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1068.073060][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1068.085376][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1068.097547][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1068.309399][T20455] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1068.347723][T20454] Bluetooth: hci5: command tx timeout [ 1068.364149][T20454] Bluetooth: hci4: command tx timeout [ 1068.369605][T20454] Bluetooth: hci0: command tx timeout [ 1071.040821][T20454] Bluetooth: hci0: command tx timeout [ 1071.059026][T20454] Bluetooth: hci4: command tx timeout [ 1072.991156][ C0] net_ratelimit: 27139 callbacks suppressed [ 1072.991183][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1073.009381][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1073.021771][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1073.034049][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1073.046265][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1073.058420][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1073.070793][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1073.083070][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1073.095367][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1073.107549][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1073.241126][T20498] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 1073.949387][T20454] Bluetooth: hci4: command tx timeout [ 1078.001220][ C0] net_ratelimit: 27207 callbacks suppressed [ 1078.001239][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1078.019553][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1078.031949][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1078.044250][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1078.056544][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1078.068928][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1078.081321][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1078.093616][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1078.105889][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1078.118274][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1081.086703][T20455] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1081.109345][T20455] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1081.159452][T20455] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1083.011176][ C0] net_ratelimit: 26633 callbacks suppressed [ 1083.011197][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1083.029318][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1083.041657][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1083.054027][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1083.066310][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1083.078556][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1083.090837][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1083.103148][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1083.115282][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1083.127630][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1085.136856][T20455] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1085.466451][T20455] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1088.021124][ C0] net_ratelimit: 27239 callbacks suppressed [ 1088.021150][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1088.039435][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1088.051718][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1088.064038][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1088.076168][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1088.088518][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1088.100764][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1088.113007][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1088.125167][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1088.137428][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1091.423463][T20454] Bluetooth: hci3: command tx timeout [ 1093.031101][ C0] net_ratelimit: 27916 callbacks suppressed [ 1093.031120][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1093.049634][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1093.061853][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1093.074309][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1093.086673][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1093.098864][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1093.111124][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1093.123396][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1093.135661][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1093.147877][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1098.041067][ C0] net_ratelimit: 30258 callbacks suppressed [ 1098.041092][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1098.059322][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1098.071650][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1098.084026][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1098.096385][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1098.108669][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1098.120937][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1098.133249][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1098.145571][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1098.157797][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1103.051135][ C0] net_ratelimit: 28992 callbacks suppressed [ 1103.051161][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1103.069536][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1103.081945][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1103.094204][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1103.106439][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1103.118684][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1103.130971][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1103.143169][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1103.155379][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1103.167616][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1105.822858][T20455] Bluetooth: hci3: command tx timeout [ 1108.061172][ C0] net_ratelimit: 27577 callbacks suppressed [ 1108.061191][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1108.079491][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1108.091902][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1108.104331][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1108.116716][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1108.129064][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1108.141352][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1108.153706][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1108.165922][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1108.178158][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1113.071231][ C0] net_ratelimit: 29047 callbacks suppressed [ 1113.071252][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1113.089437][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1113.101699][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1113.114089][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1113.126462][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1113.138742][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1113.151148][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1113.163401][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1113.175662][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1113.188026][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1118.081116][ C0] net_ratelimit: 27326 callbacks suppressed [ 1118.081149][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1118.099375][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1118.111680][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1118.124052][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1118.136390][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1118.148629][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1118.160889][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1118.172978][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1118.185200][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1118.197436][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1123.091168][ C0] net_ratelimit: 28249 callbacks suppressed [ 1123.091189][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1123.109399][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1123.121694][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1123.134021][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1123.146249][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1123.158541][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1123.170661][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1123.182965][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1123.195094][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1123.207312][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1126.285857][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1126.292291][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1128.101116][ C0] net_ratelimit: 29750 callbacks suppressed [ 1128.101135][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1128.119361][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1128.131639][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1128.143935][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1128.156313][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1128.168595][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1128.180839][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1128.193132][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1128.205324][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1128.217611][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1130.911362][T20454] Bluetooth: hci3: command tx timeout [ 1131.122864][T20434] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1131.146449][T20434] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1131.167987][T17329] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1131.418910][ T8684] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1131.532747][ T8684] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1131.555638][T20434] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1131.576163][ T8684] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1131.888584][T20530] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1131.973922][T20434] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1131.993077][T20530] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1132.130471][T20434] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1132.180507][ T8684] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1132.199799][ T8684] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1132.218684][T20530] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1132.252823][T10451] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1133.107394][T20455] Bluetooth: hci3: command tx timeout [ 1133.112888][ C0] net_ratelimit: 27979 callbacks suppressed [ 1133.112905][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1133.113164][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1133.113354][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1133.113566][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1133.113773][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1133.113981][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1133.114210][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1133.114421][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1133.114633][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1133.114853][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1138.121031][ C0] net_ratelimit: 29135 callbacks suppressed [ 1138.121055][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1138.139243][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1138.151607][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1138.164070][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1138.176219][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1138.188507][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1138.200646][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1138.212895][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1138.225215][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1138.237517][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1143.131196][ C0] net_ratelimit: 29465 callbacks suppressed [ 1143.131215][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1143.149378][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1143.161744][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1143.174026][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1143.186871][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1143.199189][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1143.211430][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1143.223650][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1143.235879][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1143.248122][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1148.141026][ C0] net_ratelimit: 29850 callbacks suppressed [ 1148.141051][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1148.159265][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1148.171538][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1148.183791][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1148.196077][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1148.208329][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1148.220555][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1148.232846][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1148.245130][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1148.257341][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1153.151094][ C0] net_ratelimit: 29966 callbacks suppressed [ 1153.151116][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1153.169374][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1153.181749][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1153.194087][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1153.206354][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1153.218607][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1153.230766][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1153.243058][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1153.256006][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1153.268247][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1157.641323][ T31] INFO: task kworker/1:4:5913 blocked for more than 143 seconds. [ 1157.649119][ T31] Tainted: GF R 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 [ 1157.661049][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1157.669749][ T31] task:kworker/1:4 state:D stack:25144 pid:5913 tgid:5913 ppid:2 task_flags:0x4208060 flags:0x00004000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1157.701192][ T31] Workqueue: events_power_efficient reg_check_chans_work [ 1157.736474][ T31] Call Trace: [ 1157.739820][ T31] [ 1157.762700][ T31] __schedule+0x1190/0x5df0 [ 1157.767286][ T31] ? __lock_acquire+0xfb0/0x1c90 [ 1157.791072][ T31] ? __pfx___schedule+0x10/0x10 [ 1157.796031][ T31] ? find_held_lock+0x2b/0x80 [ 1157.800747][ T31] ? schedule+0x2d7/0x3a0 [ 1157.831260][ T31] schedule+0xe7/0x3a0 [ 1157.835407][ T31] schedule_preempt_disabled+0x13/0x30 [ 1157.840912][ T31] __mutex_lock+0x81a/0x1070 [ 1157.881094][ T31] ? reg_check_chans_work+0x110/0x1170 [ 1157.886730][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1157.911132][ T31] ? find_held_lock+0x2b/0x80 [ 1157.915885][ T31] ? look_up_lock_class+0x59/0x150 [ 1157.938118][ T31] ? reg_check_chans_work+0x110/0x1170 [ 1157.961085][ T31] reg_check_chans_work+0x110/0x1170 [ 1157.966450][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1157.991105][ T31] ? debug_object_deactivate+0x1ec/0x3a0 [ 1157.996816][ T31] ? __pfx_reg_check_chans_work+0x10/0x10 [ 1158.011450][ T31] ? rcu_is_watching+0x12/0xc0 [ 1158.016284][ T31] process_one_work+0x9cc/0x1b70 [ 1158.031424][ T31] ? __pfx_process_one_work+0x10/0x10 [ 1158.036868][ T31] ? assign_work+0x1a0/0x250 [ 1158.051145][ T31] worker_thread+0x6c8/0xf10 [ 1158.055818][ T31] ? __kthread_parkme+0x19e/0x250 [ 1158.060882][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1158.082059][ T31] kthread+0x3c5/0x780 [ 1158.086226][ T31] ? __pfx_kthread+0x10/0x10 [ 1158.090873][ T31] ? rcu_is_watching+0x12/0xc0 [ 1158.111103][ T31] ? __pfx_kthread+0x10/0x10 [ 1158.115781][ T31] ret_from_fork+0x5d7/0x6f0 [ 1158.120422][ T31] ? __pfx_kthread+0x10/0x10 [ 1158.141113][ T31] ret_from_fork_asm+0x1a/0x30 [ 1158.146018][ T31] [ 1158.149092][ T31] INFO: task syz.4.2740:20396 blocked for more than 143 seconds. [ 1158.161211][ C0] net_ratelimit: 29153 callbacks suppressed [ 1158.161233][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1158.171044][ T31] Tainted: GF R 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 [ 1158.179587][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1158.200312][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1158.211054][ T31] Blocked by coredump. [ 1158.212632][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1158.216831][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1158.216846][ T31] task:syz.4.2740 state:D [ 1158.229136][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1158.254745][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1158.267038][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:14:0f:d0:b0:af, vlan:0) [ 1158.279500][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1158.291824][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1158.304146][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1158.311116][ T31] stack:25576 pid:20396 tgid:20391 ppid:17328 task_flags:0x40054c flags:0x00004002 [ 1158.401210][ T31] Call Trace: [ 1158.404564][ T31] [ 1158.407563][ T31] __schedule+0x1190/0x5df0 [ 1158.424031][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 1158.429061][ T31] ? __lock_acquire+0x622/0x1c90 [ 1158.439542][ T31] ? __pfx___schedule+0x10/0x10 [ 1158.444881][ T31] ? find_held_lock+0x2b/0x80 [ 1158.449622][ T31] ? schedule+0x2d7/0x3a0 [ 1158.454455][ T31] schedule+0xe7/0x3a0 [ 1158.458578][ T31] schedule_preempt_disabled+0x13/0x30 [ 1158.464580][ T31] __mutex_lock+0x81a/0x1070 [ 1158.469249][ T31] ? netdev_run_todo+0xeba/0x1320 [ 1158.474725][ T31] ? netdev_run_todo+0xebf/0x1320 [ 1158.479823][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1158.485362][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1158.491797][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1158.497838][ T31] ? rcu_barrier+0x461/0x6e0 [ 1158.502926][ T31] ? netdev_run_todo+0xebf/0x1320 [ 1158.508011][ T31] ? rtnl_lock+0x9/0x20 [ 1158.512645][ T31] netdev_run_todo+0xebf/0x1320 [ 1158.517559][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 1158.523379][ T31] ? mutex_is_locked+0x17/0x60 [ 1158.528193][ T31] ? rtnl_is_locked+0x15/0x20 [ 1158.533313][ T31] ? __pfx_netif_state_change+0x10/0x10 [ 1158.538914][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 1158.544612][ T31] tun_chr_close+0xea/0x230 [ 1158.549167][ T31] __fput+0x402/0xb70 [ 1158.553648][ T31] task_work_run+0x150/0x240 [ 1158.558315][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1158.564012][ T31] do_exit+0x86f/0x2bf0 [ 1158.568250][ T31] ? __pfx_do_exit+0x10/0x10 [ 1158.573379][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 1158.578454][ T31] ? find_held_lock+0x2b/0x80 [ 1158.583636][ T31] do_group_exit+0xd3/0x2a0 [ 1158.588211][ T31] get_signal+0x2673/0x26d0 [ 1158.593154][ T31] ? kmem_cache_free+0x2d1/0x4d0 [ 1158.598141][ T31] ? fd_install+0x225/0x750 [ 1158.603160][ T31] ? __pfx_get_signal+0x10/0x10 [ 1158.608073][ T31] ? do_sys_openat2+0x157/0x1d0 [ 1158.613404][ T31] arch_do_signal_or_restart+0x8f/0x790 [ 1158.619003][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1158.625727][ T31] exit_to_user_mode_loop+0x84/0x110 [ 1158.631349][ T31] do_syscall_64+0x3f6/0x490 [ 1158.636001][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1158.642443][ T31] RIP: 0033:0x7ff0d278eb69 [ 1158.646907][ T31] RSP: 002b:00007ff0d35d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1158.655815][ T31] RAX: 0000000000000005 RBX: 00007ff0d29b6080 RCX: 00007ff0d278eb69 [ 1158.669517][ T31] RDX: 0000000000101000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1158.677867][ T31] RBP: 00007ff0d2811df1 R08: 0000000000000000 R09: 0000000000000000 [ 1158.686260][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1158.694627][ T31] R13: 0000000000000000 R14: 00007ff0d29b6080 R15: 00007fff9a7d0718 [ 1158.702973][ T31] [ 1158.706026][ T31] INFO: task syz.2.2742:20405 blocked for more than 144 seconds. [ 1158.714268][ T31] Tainted: GF R 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 [ 1158.723479][ T31] Blocked by coredump. [ 1158.728087][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1158.737208][ T31] task:syz.2.2742 state:D stack:26424 pid:20405 tgid:20404 ppid:19700 task_flags:0x40044c flags:0x00004002 [ 1158.749595][ T31] Call Trace: [ 1158.753135][ T31] [ 1158.756109][ T31] __schedule+0x1190/0x5df0 [ 1158.760668][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 1158.771759][ T31] ? __pfx___schedule+0x10/0x10 [ 1158.776685][ T31] ? find_held_lock+0x2b/0x80 [ 1158.781910][ T31] ? schedule+0x2d7/0x3a0 [ 1158.786308][ T31] schedule+0xe7/0x3a0 [ 1158.790417][ T31] schedule_preempt_disabled+0x13/0x30 [ 1158.796553][ T31] __mutex_lock+0x81a/0x1070 [ 1158.801512][ T31] ? netdev_run_todo+0xebf/0x1320 [ 1158.806616][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1158.812152][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1158.818207][ T31] ? rcu_barrier+0x341/0x6e0 [ 1158.823374][ T31] ? netdev_run_todo+0xebf/0x1320 [ 1158.828461][ T31] ? rtnl_lock+0x9/0x20 [ 1158.833075][ T31] netdev_run_todo+0xebf/0x1320 [ 1158.837995][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 1158.843872][ T31] ? mutex_is_locked+0x17/0x60 [ 1158.848699][ T31] ? rtnl_is_locked+0x15/0x20 [ 1158.853882][ T31] ? __pfx_netif_state_change+0x10/0x10 [ 1158.859492][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 1158.865171][ T31] tun_chr_close+0xea/0x230 [ 1158.869720][ T31] __fput+0x402/0xb70 [ 1158.874233][ T31] task_work_run+0x150/0x240 [ 1158.878894][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1158.884574][ T31] do_exit+0x86f/0x2bf0 [ 1158.888799][ T31] ? __pfx_do_exit+0x10/0x10 [ 1158.893975][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 1158.899064][ T31] ? find_held_lock+0x2b/0x80 [ 1158.904354][ T31] do_group_exit+0xd3/0x2a0 [ 1158.908925][ T31] get_signal+0x2673/0x26d0 [ 1158.913946][ T31] ? kmem_cache_free+0x2d1/0x4d0 [ 1158.918938][ T31] ? fd_install+0x225/0x750 [ 1158.924033][ T31] ? __pfx_get_signal+0x10/0x10 [ 1158.928942][ T31] ? do_sys_openat2+0x157/0x1d0 [ 1158.934305][ T31] arch_do_signal_or_restart+0x8f/0x790 [ 1158.939911][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1158.946625][ T31] exit_to_user_mode_loop+0x84/0x110 [ 1158.952239][ T31] do_syscall_64+0x3f6/0x490 [ 1158.956915][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1158.963272][ T31] RIP: 0033:0x7f11ebb8eb69 [ 1158.967725][ T31] RSP: 002b:00007f11eca31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1158.981076][ T31] RAX: 0000000000000003 RBX: 00007f11ebdb5fa0 RCX: 00007f11ebb8eb69 [ 1158.989094][ T31] RDX: 000000000006ab82 RSI: 00002000000011c0 RDI: ffffffffffffff9c [ 1158.998775][ T31] RBP: 00007f11ebc11df1 R08: 0000000000000000 R09: 0000000000000000 [ 1159.007179][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1159.015529][ T31] R13: 0000000000000000 R14: 00007f11ebdb5fa0 R15: 00007ffed3e8aa28 [ 1159.023868][ T31] [ 1159.026926][ T31] INFO: task syz.0.2744:20412 blocked for more than 144 seconds. [ 1159.035128][ T31] Tainted: GF R 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 [ 1159.044349][ T31] Blocked by coredump. [ 1159.048972][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1159.058176][ T31] task:syz.0.2744 state:D stack:26424 pid:20412 tgid:20411 ppid:19649 task_flags:0x40054c flags:0x00004002 [ 1159.070527][ T31] Call Trace: [ 1159.074170][ T31] [ 1159.077147][ T31] __schedule+0x1190/0x5df0 [ 1159.082177][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 1159.087483][ T31] ? __lock_acquire+0x622/0x1c90 [ 1159.092952][ T31] ? __pfx___schedule+0x10/0x10 [ 1159.097869][ T31] ? find_held_lock+0x2b/0x80 [ 1159.103008][ T31] ? schedule+0x2d7/0x3a0 [ 1159.107397][ T31] schedule+0xe7/0x3a0 [ 1159.111977][ T31] schedule_preempt_disabled+0x13/0x30 [ 1159.117490][ T31] __mutex_lock+0x81a/0x1070 [ 1159.122534][ T31] ? netdev_run_todo+0xebf/0x1320 [ 1159.127635][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1159.133165][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1159.139214][ T31] ? rcu_barrier+0x341/0x6e0 [ 1159.144363][ T31] ? netdev_run_todo+0xebf/0x1320 [ 1159.149465][ T31] ? rtnl_lock+0x9/0x20 [ 1159.154140][ T31] netdev_run_todo+0xebf/0x1320 [ 1159.159083][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 1159.164865][ T31] ? mutex_is_locked+0x17/0x60 [ 1159.169695][ T31] ? rtnl_is_locked+0x15/0x20 [ 1159.174919][ T31] ? __pfx_netif_state_change+0x10/0x10 [ 1159.180528][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 1159.186127][ T31] tun_chr_close+0xea/0x230 [ 1159.190697][ T31] __fput+0x402/0xb70 [ 1159.195306][ T31] task_work_run+0x150/0x240 [ 1159.199967][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1159.205571][ T31] do_exit+0x86f/0x2bf0 [ 1159.209793][ T31] ? __pfx_do_exit+0x10/0x10 [ 1159.214964][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 1159.220046][ T31] ? find_held_lock+0x2b/0x80 [ 1159.225206][ T31] do_group_exit+0xd3/0x2a0 [ 1159.229782][ T31] get_signal+0x2673/0x26d0 [ 1159.234828][ T31] ? kmem_cache_free+0x2d1/0x4d0 [ 1159.239809][ T31] ? fd_install+0x225/0x750 [ 1159.244859][ T31] ? __pfx_get_signal+0x10/0x10 [ 1159.249772][ T31] ? do_sys_openat2+0x157/0x1d0 [ 1159.255147][ T31] arch_do_signal_or_restart+0x8f/0x790 [ 1159.260746][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1159.267390][ T31] exit_to_user_mode_loop+0x84/0x110 [ 1159.273458][ T31] do_syscall_64+0x3f6/0x490 [ 1159.278120][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1159.284460][ T31] RIP: 0033:0x7f9f4078eb69 [ 1159.289010][ T31] RSP: 002b:00007f9f41601038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1159.297998][ T31] RAX: 0000000000000005 RBX: 00007f9f409b5fa0 RCX: 00007f9f4078eb69 [ 1159.306303][ T31] RDX: 0000000000080480 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1159.314682][ T31] RBP: 00007f9f40811df1 R08: 0000000000000000 R09: 0000000000000000 [ 1159.322964][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1159.330970][ T31] R13: 0000000000000000 R14: 00007f9f409b5fa0 R15: 00007ffd8ee21678 [ 1159.339487][ T31] [ 1159.342837][ T31] INFO: task syz-executor:20431 blocked for more than 145 seconds. [ 1159.350756][ T31] Tainted: GF R 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 [ 1159.360100][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1159.369067][ T31] task:syz-executor state:D stack:25544 pid:20431 tgid:20431 ppid:1 task_flags:0x400140 flags:0x00004004 [ 1159.381360][ T31] Call Trace: [ 1159.384698][ T31] [ 1159.387678][ T31] __schedule+0x1190/0x5df0 [ 1159.392849][ T31] ? ops_init+0x77/0x5f0 [ 1159.397156][ T31] ? stack_trace_save+0x8e/0xc0 [ 1159.402537][ T31] ? __lock_acquire+0x622/0x1c90 [ 1159.407535][ T31] ? __pfx___schedule+0x10/0x10 [ 1159.412927][ T31] ? find_held_lock+0x2b/0x80 [ 1159.417658][ T31] ? schedule+0x2d7/0x3a0 [ 1159.422533][ T31] schedule+0xe7/0x3a0 [ 1159.426794][ T31] schedule_preempt_disabled+0x13/0x30 [ 1159.432792][ T31] __mutex_lock+0x81a/0x1070 [ 1159.437475][ T31] ? register_nexthop_notifier+0x1b/0x70 [ 1159.443728][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1159.448834][ T31] ? net_generic+0xea/0x2a0 [ 1159.453895][ T31] ? __pfx_vxlan_init_net+0x10/0x10 [ 1159.459150][ T31] ? register_nexthop_notifier+0x1b/0x70 [ 1159.465352][ T31] ? rtnl_lock+0x9/0x20 [ 1159.469569][ T31] register_nexthop_notifier+0x1b/0x70 [ 1159.475552][ T31] ops_init+0x1e2/0x5f0 [ 1159.479792][ T31] setup_net+0x10f/0x380 [ 1159.484621][ T31] ? lockdep_init_map_type+0x5c/0x280 [ 1159.490094][ T31] ? __pfx_setup_net+0x10/0x10 [ 1159.495422][ T31] ? debug_mutex_init+0x37/0x70 [ 1159.500347][ T31] copy_net_ns+0x2a6/0x5f0 [ 1159.505295][ T31] create_new_namespaces+0x3ea/0xa90 [ 1159.510658][ T31] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1159.516796][ T31] ksys_unshare+0x45b/0xa40 [ 1159.521670][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 1159.526768][ T31] ? __pfx_fput_close_sync+0x10/0x10 [ 1159.532534][ T31] ? dnotify_flush+0x79/0x4c0 [ 1159.537272][ T31] __x64_sys_unshare+0x31/0x40 [ 1159.542628][ T31] do_syscall_64+0xcd/0x490 [ 1159.547191][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1159.553595][ T31] RIP: 0033:0x7f0b4bf90367 [ 1159.558057][ T31] RSP: 002b:00007ffe2b94c128 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 1159.567069][ T31] RAX: ffffffffffffffda RBX: 00007f0b4c1b5f40 RCX: 00007f0b4bf90367 [ 1159.575396][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1159.590516][ T31] RBP: 00007f0b4c1b6738 R08: 0000000000000000 R09: 0000000000000000 [ 1159.598880][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 1159.607250][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 1159.615616][ T31] [ 1159.618687][ T31] INFO: task syz-executor:20449 blocked for more than 145 seconds. [ 1159.627107][ T31] Tainted: GF R 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 [ 1159.636312][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1159.645542][ T31] task:syz-executor state:D stack:25832 pid:20449 tgid:20449 ppid:1 task_flags:0x400140 flags:0x00004006 [ 1159.657938][ T31] Call Trace: [ 1159.661577][ T31] [ 1159.664588][ T31] __schedule+0x1190/0x5df0 [ 1159.669141][ T31] ? ops_init+0x77/0x5f0 [ 1159.674059][ T31] ? stack_trace_save+0x8e/0xc0 [ 1159.679003][ T31] ? __pfx___schedule+0x10/0x10 [ 1159.684482][ T31] ? find_held_lock+0x2b/0x80 [ 1159.689215][ T31] ? schedule+0x2d7/0x3a0 [ 1159.694079][ T31] schedule+0xe7/0x3a0 [ 1159.698207][ T31] schedule_preempt_disabled+0x13/0x30 [ 1159.704249][ T31] __mutex_lock+0x81a/0x1070 [ 1159.708910][ T31] ? register_nexthop_notifier+0x1b/0x70 [ 1159.715056][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1159.720146][ T31] ? net_generic+0xea/0x2a0 [ 1159.725368][ T31] ? __pfx_vxlan_init_net+0x10/0x10 [ 1159.730619][ T31] ? register_nexthop_notifier+0x1b/0x70 [ 1159.736576][ T31] ? rtnl_lock+0x9/0x20 [ 1159.740771][ T31] register_nexthop_notifier+0x1b/0x70 [ 1159.746811][ T31] ops_init+0x1e2/0x5f0 [ 1159.751368][ T31] setup_net+0x10f/0x380 [ 1159.755662][ T31] ? lockdep_init_map_type+0x5c/0x280 [ 1159.761502][ T31] ? __pfx_setup_net+0x10/0x10 [ 1159.766324][ T31] ? debug_mutex_init+0x37/0x70 [ 1159.771685][ T31] copy_net_ns+0x2a6/0x5f0 [ 1159.776153][ T31] create_new_namespaces+0x3ea/0xa90 [ 1159.781979][ T31] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1159.787670][ T31] ksys_unshare+0x45b/0xa40 [ 1159.792688][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 1159.797779][ T31] ? __pfx_fput_close_sync+0x10/0x10 [ 1159.809167][ T31] ? dnotify_flush+0x79/0x4c0 [ 1159.814352][ T31] __x64_sys_unshare+0x31/0x40 [ 1159.819203][ T31] do_syscall_64+0xcd/0x490 [ 1159.824299][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1159.830241][ T31] RIP: 0033:0x7fae6ab90367 [ 1159.835151][ T31] RSP: 002b:00007fff947df1c8 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 1159.844035][ T31] RAX: ffffffffffffffda RBX: 00007fae6adb5f40 RCX: 00007fae6ab90367 [ 1159.852382][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1159.860391][ T31] RBP: 00007fae6adb6738 R08: 0000000000000000 R09: 0000000000000000 [ 1159.868914][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 1159.877213][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 1159.890590][ T31] [ 1159.893717][ T31] INFO: task syz-executor:20451 blocked for more than 145 seconds. [ 1159.902071][ T31] Tainted: GF R 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 [ 1159.917005][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1159.926109][ T31] task:syz-executor state:D stack:26824 pid:20451 tgid:20451 ppid:1 task_flags:0x400140 flags:0x00004004 [ 1159.938435][ T31] Call Trace: [ 1159.942111][ T31] [ 1159.945088][ T31] __schedule+0x1190/0x5df0 [ 1159.949647][ T31] ? __lock_acquire+0x622/0x1c90 [ 1159.955212][ T31] ? __pfx___schedule+0x10/0x10 [ 1159.960118][ T31] ? find_held_lock+0x2b/0x80 [ 1159.965340][ T31] ? schedule+0x2d7/0x3a0 [ 1159.969722][ T31] schedule+0xe7/0x3a0 [ 1159.974418][ T31] schedule_preempt_disabled+0x13/0x30 [ 1159.979951][ T31] __mutex_lock+0x81a/0x1070 [ 1159.985123][ T31] ? rtnl_newlink+0x600/0x2000 [ 1159.989962][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1159.995507][ T31] ? apparmor_capable+0x114/0x1d0 [ 1160.000602][ T31] ? ns_capable+0xd7/0x110 [ 1160.005559][ T31] ? netlink_ns_capable+0xfa/0x130 [ 1160.010749][ T31] ? rtnl_newlink+0x600/0x2000 [ 1160.016005][ T31] rtnl_newlink+0x600/0x2000 [ 1160.020668][ T31] ? bpf_ksym_find+0x124/0x1c0 [ 1160.025932][ T31] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1160.032434][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 1160.037509][ T31] ? kernel_text_address+0x8d/0x100 [ 1160.043630][ T31] ? __kernel_text_address+0xd/0x40 [ 1160.048906][ T31] ? unwind_get_return_address+0x59/0xa0 [ 1160.055164][ T31] ? arch_stack_walk+0xa6/0x100 [ 1160.060200][ T31] ? __lock_acquire+0x622/0x1c90 [ 1160.065809][ T31] ? rcu_is_watching+0x12/0xc0 [ 1160.070629][ T31] ? trace_cap_capable+0x18d/0x200 [ 1160.076317][ T31] ? find_held_lock+0x2b/0x80 [ 1160.081390][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 1160.086478][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 1160.092032][ T31] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1160.097221][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 1160.102849][ T31] rtnetlink_rcv_msg+0x95e/0xe90 [ 1160.107859][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1160.113900][ T31] ? __lock_acquire+0x622/0x1c90 [ 1160.118902][ T31] netlink_rcv_skb+0x155/0x420 [ 1160.124297][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1160.129844][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1160.135809][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 1160.141566][ T31] ? is_vmalloc_addr+0x86/0xa0 [ 1160.146396][ T31] netlink_unicast+0x5aa/0x870 [ 1160.151672][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1160.157040][ T31] netlink_sendmsg+0x8d1/0xdd0 [ 1160.162257][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1160.167624][ T31] __sys_sendto+0x4a0/0x520 [ 1160.172680][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1160.177809][ T31] ? __pfx_fput_close_sync+0x10/0x10 [ 1160.183662][ T31] ? dnotify_flush+0x79/0x4c0 [ 1160.188410][ T31] __x64_sys_sendto+0xe0/0x1c0 [ 1160.199762][ T31] ? do_syscall_64+0x91/0x490 [ 1160.205279][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1160.210554][ T31] do_syscall_64+0xcd/0x490 [ 1160.215622][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1160.221883][ T31] RIP: 0033:0x7f7aff3909fc [ 1160.226344][ T31] RSP: 002b:00007ffc8ea6dbe0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1160.235247][ T31] RAX: ffffffffffffffda RBX: 00007f7b000e4620 RCX: 00007f7aff3909fc [ 1160.243669][ T31] RDX: 000000000000002c RSI: 00007f7b000e4670 RDI: 0000000000000003 [ 1160.252019][ T31] RBP: 0000000000000000 R08: 00007ffc8ea6dc34 R09: 000000000000000c [ 1160.260036][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1160.268560][ T31] R13: 0000000000000000 R14: 00007f7b000e4670 R15: 0000000000000000 [ 1160.276939][ T31] [ 1160.280012][ T31] [ 1160.280012][ T31] Showing all locks held in the system: [ 1160.288488][ T31] 1 lock held by khungtaskd/31: [ 1160.293809][ T31] #0: ffffffff8e5c0fa0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1160.304195][ T31] 3 locks held by kworker/R-bat_e/3408: [ 1160.309783][ T31] 3 locks held by kworker/0:5/5896: [ 1160.315495][ T31] #0: ffff88801b880d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1160.326407][ T31] #1: ffffc90004847d10 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1160.337192][ T31] #2: ffffffff90361388 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 1160.348046][ T31] 4 locks held by kworker/1:4/5913: [ 1160.353627][ T31] #0: ffff88801b882148 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1160.365994][ T31] #1: ffffc90004957d10 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1160.376894][ T31] #2: ffffffff90361388 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x83/0x1170 [ 1160.387009][ T31] #3: ffff888029548768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_check_chans_work+0x110/0x1170 [ 1160.397683][ T31] 3 locks held by kworker/u10:0/8635: [ 1160.403421][ T31] 3 locks held by kworker/u10:1/8638: [ 1160.408826][ T31] 3 locks held by kworker/u10:16/14955: [ 1160.414883][ T31] 3 locks held by kworker/u10:17/14956: [ 1160.420495][ T31] 6 locks held by kworker/u10:18/14957: [ 1160.426684][ T31] #0: ffff88801c6fe948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1160.437719][ T31] #1: ffffc9000ac27d10 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1160.448159][ T31] #2: ffffffff9034b150 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x890 [ 1160.457890][ T31] #3: ffff88804ae040e8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x12c/0x2b0 [ 1160.468412][ T31] #4: ffff88804ae03250 (&devlink->lock_key#6){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x136/0x2b0 [ 1160.479650][ T31] #5: ffffffff90361388 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x146/0x360 [ 1160.494308][ T31] 3 locks held by kworker/u10:19/14958: [ 1160.499937][ T31] 3 locks held by kworker/u10:20/14959: [ 1160.506030][ T31] 3 locks held by kworker/u10:32/14976: [ 1160.511910][ T31] 3 locks held by kworker/u10:33/14977: [ 1160.517495][ T31] 2 locks held by kworker/0:0/18419: [ 1160.523310][ T31] 2 locks held by getty/19393: [ 1160.528107][ T31] #0: ffff888034b460a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1160.538403][ T31] #1: ffffc900032702f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 1160.548987][ T31] 1 lock held by syz.4.2740/20396: [ 1160.554448][ T31] #0: ffffffff90361388 (rtnl_mutex){+.+.}-{4:4}, at: netdev_run_todo+0xebf/0x1320 [ 1160.564382][ T31] 1 lock held by syz.2.2742/20405: [ 1160.569542][ T31] #0: ffffffff90361388 (rtnl_mutex){+.+.}-{4:4}, at: netdev_run_todo+0xebf/0x1320 [ 1160.579396][ T31] 1 lock held by syz.0.2744/20412: [ 1160.584912][ T31] #0: ffffffff90361388 (rtnl_mutex){+.+.}-{4:4}, at: netdev_run_todo+0xebf/0x1320 [ 1160.594669][ T31] 3 locks held by kworker/u11:3/20430: [ 1160.600169][ T31] 2 locks held by syz-executor/20431: [ 1160.606036][ T31] #0: ffffffff9034b150 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 1160.615873][ T31] #1: ffffffff90361388 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x1b/0x70 [ 1160.626284][ T31] 4 locks held by kworker/u10:2/20436: [ 1160.632075][ T31] 4 locks held by kworker/u10:3/20437: [ 1160.637563][ T31] 3 locks held by kworker/u10:4/20438: [ 1160.643621][ T31] 3 locks held by kworker/u11:5/20441: [ 1160.649122][ T31] 4 locks held by kworker/u10:5/20443: [ 1160.655105][ T31] 3 locks held by kworker/u10:6/20448: [ 1160.660594][ T31] 2 locks held by syz-executor/20449: [ 1160.666509][ T31] #0: ffffffff9034b150 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 1160.676364][ T31] #1: ffffffff90361388 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x1b/0x70 [ 1160.686782][ T31] 1 lock held by syz-executor/20451: [ 1160.692408][ T31] #0: ffffffff90361388 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x600/0x2000 [ 1160.701951][ T31] 2 locks held by kworker/u10:7/20453: [ 1160.707449][ T31] 2 locks held by kworker/u11:7/20455: [ 1160.713442][ T31] 4 locks held by kworker/u10:8/20456: [ 1160.718946][ T31] 4 locks held by kworker/u10:9/20457: [ 1160.724976][ T31] 3 locks held by kworker/u10:10/20459: [ 1160.730567][ T31] 4 locks held by kworker/u10:11/20463: [ 1160.736625][ T31] 3 locks held by kworker/u10:12/20464: [ 1160.742580][ T31] #0: ffff88814ca2a948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1160.754090][ T31] #1: ffffc900040afd10 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1160.767603][ T31] #2: ffffffff90361388 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x12/0x30 [ 1160.777500][ T31] 3 locks held by kworker/0:1/20465: [ 1160.783249][ T31] 4 locks held by kworker/u10:13/20483: [ 1160.788852][ T31] 1 lock held by syz-executor/20486: [ 1160.799905][ T31] #0: ffffffff90361388 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 1160.809987][ T31] 1 lock held by syz-executor/20491: [ 1160.815676][ T31] #0: ffffffff90361388 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 1160.825674][ T31] 1 lock held by syz-executor/20494: [ 1160.831455][ T31] #0: ffffffff90361388 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 1160.840973][ T31] 1 lock held by syz-executor/20503: [ 1160.852499][ T31] #0: ffffffff90361388 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 1160.862418][ T31] 4 locks held by kworker/u10:14/20505: [ 1160.868006][ T31] 2 locks held by kworker/u10:15/20509: [ 1160.874150][ T31] 2 locks held by dhcpcd/20512: [ 1160.879040][ T31] #0: ffff888025ad4258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf60 [ 1160.889342][ T31] #1: ffffffff8e5cc538 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 1160.899797][ T31] 2 locks held by dhcpcd/20513: [ 1160.905110][ T31] #0: ffff888052c9c258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf60 [ 1160.915247][ T31] #1: ffffffff8e5cc538 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 1160.925747][ T31] 1 lock held by dhcpcd/20514: [ 1160.930547][ T31] #0: ffff888052c98258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf60 [ 1160.940933][ T31] 1 lock held by dhcpcd/20515: [ 1160.946187][ T31] #0: ffff8880261a6258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf60 [ 1160.956276][ T31] 1 lock held by dhcpcd/20516: [ 1160.961424][ T31] #0: ffff8880261a0258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf60 [ 1160.971547][ T31] 1 lock held by syz-executor/20518: [ 1160.976879][ T31] #0: ffffffff90361388 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 1160.986881][ T31] 1 lock held by syz-executor/20523: [ 1160.992585][ T31] #0: ffffffff90361388 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 1161.002648][ T31] 1 lock held by syz-executor/20526: [ 1161.007959][ T31] #0: ffffffff90361388 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 1161.018039][ T31] 1 lock held by dhcpcd/20528: [ 1161.023158][ T31] #0: ffff88803074c258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf60 [ 1161.033290][ T31] 3 locks held by kworker/u11:8/20529: [ 1161.038785][ T31] 1 lock held by dhcpcd/20536: [ 1161.044201][ T31] #0: ffff88803087c258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf60 [ 1161.054411][ T31] 1 lock held by dhcpcd/20537: [ 1161.059216][ T31] #0: ffff88803087a258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf60 [ 1161.069704][ T31] 1 lock held by dhcpcd/20538: [ 1161.074909][ T31] #0: ffff88805cf24258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf60 [ 1161.085147][ T31] 1 lock held by dhcpcd/20539: [ 1161.089942][ T31] #0: ffff88805c5d2258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf60 [ 1161.106911][ T31] [ 1161.109294][ T31] ============================================= [ 1161.109294][ T31] [ 1161.118386][ T31] NMI backtrace for cpu 1 [ 1161.118411][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: GF R 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 1161.118453][ T31] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD [ 1161.118465][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1161.118481][ T31] Call Trace: [ 1161.118490][ T31] [ 1161.118501][ T31] dump_stack_lvl+0x116/0x1f0 [ 1161.118545][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1161.118577][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1161.118620][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1161.118654][ T31] watchdog+0xf0e/0x1260 [ 1161.118700][ T31] ? __pfx_watchdog+0x10/0x10 [ 1161.118737][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1161.118777][ T31] ? __kthread_parkme+0x19e/0x250 [ 1161.118813][ T31] ? __pfx_watchdog+0x10/0x10 [ 1161.118852][ T31] kthread+0x3c5/0x780 [ 1161.118890][ T31] ? __pfx_kthread+0x10/0x10 [ 1161.118932][ T31] ? rcu_is_watching+0x12/0xc0 [ 1161.118959][ T31] ? __pfx_kthread+0x10/0x10 [ 1161.118999][ T31] ret_from_fork+0x5d7/0x6f0 [ 1161.119046][ T31] ? __pfx_kthread+0x10/0x10 [ 1161.119086][ T31] ret_from_fork_asm+0x1a/0x30 [ 1161.119135][ T31] [ 1161.119145][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1161.245156][ C0] NMI backtrace for cpu 0 [ 1161.245179][ C0] CPU: 0 UID: 0 PID: 3408 Comm: kworker/R-bat_e Tainted: GF R 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 1161.245219][ C0] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD [ 1161.245230][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1161.245253][ C0] Workqueue: bat_events batadv_dat_purge [ 1161.245283][ C0] RIP: 0010:debug_lockdep_rcu_enabled+0xe/0x40 [ 1161.245321][ C0] Code: 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 8b 05 c6 50 1e 05 85 c0 74 20 <8b> 05 80 81 1e 05 85 c0 74 16 65 48 8b 05 48 87 46 08 8b 80 ec 0a [ 1161.245346][ C0] RSP: 0018:ffffc900000068c0 EFLAGS: 00000202 [ 1161.245364][ C0] RAX: 0000000000000002 RBX: 0000000000000003 RCX: ffffffff8a3952aa [ 1161.245380][ C0] RDX: ffff8880311f1e00 RSI: ffffffff8a3952be RDI: 0000000000000001 [ 1161.245396][ C0] RBP: ffffc900000069d8 R08: 0000000000000001 R09: 0000000000000000 [ 1161.245411][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88807f4b28df [ 1161.245427][ C0] R13: ffff88807f4b28c8 R14: 1ffff92000000d29 R15: ffff8880456af000 [ 1161.245443][ C0] FS: 0000000000000000(0000) GS:ffff88812470b000(0000) knlGS:0000000000000000 [ 1161.245466][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1161.245482][ C0] CR2: 0000560cb7af80a8 CR3: 000000000e380000 CR4: 00000000003526f0 [ 1161.245498][ C0] Call Trace: [ 1161.245506][ C0] [ 1161.245514][ C0] rcu_read_lock_held+0x9/0x50 [ 1161.245543][ C0] find_match+0x373/0x15d0 [ 1161.245572][ C0] ? find_held_lock+0x2b/0x80 [ 1161.245594][ C0] ? veth_xmit+0x69e/0xe90 [ 1161.245632][ C0] ? __pfx_find_match+0x10/0x10 [ 1161.245664][ C0] __find_rr_leaf+0x140/0xe00 [ 1161.245696][ C0] ? __pfx___find_rr_leaf+0x10/0x10 [ 1161.245725][ C0] ? fib6_node_lookup+0x12d/0x190 [ 1161.245751][ C0] ? __pfx_fib6_node_lookup+0x10/0x10 [ 1161.245776][ C0] ? nf_hook+0x45e/0x780 [ 1161.245805][ C0] ? br_forward_finish+0xcd/0x130 [ 1161.245835][ C0] ? br_nf_hook_thresh+0x307/0x410 [ 1161.245874][ C0] ? br_flood+0x39c/0x650 [ 1161.245903][ C0] ? br_handle_frame_finish+0xf2d/0x1ca0 [ 1161.245939][ C0] ? br_nf_hook_thresh+0x2b0/0x410 [ 1161.245978][ C0] fib6_table_lookup+0x57c/0xa30 [ 1161.246018][ C0] ? __pfx_fib6_table_lookup+0x10/0x10 [ 1161.246056][ C0] ip6_pol_route+0x1cc/0x1230 [ 1161.246087][ C0] ? rt6_multipath_hash+0x1de/0x1920 [ 1161.246119][ C0] ? __pfx_ip6_pol_route+0x10/0x10 [ 1161.246150][ C0] ? __pfx_rt6_multipath_hash+0x10/0x10 [ 1161.246189][ C0] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 1161.246220][ C0] fib6_rule_lookup+0x536/0x720 [ 1161.246257][ C0] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 1161.246285][ C0] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 1161.246326][ C0] ? br_nf_post_routing+0x59b/0x1190 [ 1161.246363][ C0] ? find_held_lock+0x2b/0x80 [ 1161.246384][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1161.246422][ C0] ip6_route_input+0x662/0xc00 [ 1161.246455][ C0] ? __pfx_ip6_route_input+0x10/0x10 [ 1161.246486][ C0] ? __pfx_nf_hook+0x10/0x10 [ 1161.246527][ C0] ? __lock_acquire+0x622/0x1c90 [ 1161.246561][ C0] ip6_rcv_finish_core.constprop.0+0x1a0/0x5d0 [ 1161.246599][ C0] ip6_rcv_finish+0x130/0x580 [ 1161.246632][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1161.246665][ C0] ? __pfx_ip_sabotage_in+0x10/0x10 [ 1161.246698][ C0] ip_sabotage_in+0x21e/0x290 [ 1161.246732][ C0] nf_hook_slow+0xbe/0x200 [ 1161.246765][ C0] nf_hook.constprop.0+0x422/0x750 [ 1161.246807][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1161.246838][ C0] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 1161.246868][ C0] ? ip6_rcv_core+0xbd4/0x1c30 [ 1161.246900][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1161.246930][ C0] ? ip6_rcv_core+0xc70/0x1c30 [ 1161.246963][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 1161.246991][ C0] ipv6_rcv+0xa4/0x650 [ 1161.247021][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 1161.247050][ C0] __netif_receive_skb_one_core+0x12d/0x1e0 [ 1161.247080][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 1161.247110][ C0] ? lock_acquire+0x179/0x350 [ 1161.247142][ C0] __netif_receive_skb+0x1d/0x160 [ 1161.247170][ C0] netif_receive_skb+0x137/0x7b0 [ 1161.247197][ C0] ? __pfx_netif_receive_skb+0x10/0x10 [ 1161.247228][ C0] ? br_netif_receive_skb+0xff/0x200 [ 1161.247266][ C0] br_pass_frame_up+0x346/0x490 [ 1161.247300][ C0] br_handle_frame_finish+0xf5a/0x1ca0 [ 1161.247335][ C0] ? net_rx_action+0xa9f/0xfe0 [ 1161.247362][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1161.247396][ C0] ? __batadv_dat_purge.part.0+0x279/0x3a0 [ 1161.247419][ C0] ? __batadv_dat_purge.part.0+0x373/0x3a0 [ 1161.247442][ C0] ? process_one_work+0x9cc/0x1b70 [ 1161.247475][ C0] ? pool_mayday_timeout+0x3c0/0x5d0 [ 1161.247507][ C0] ? kthread+0x3c5/0x780 [ 1161.247537][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 1161.247572][ C0] ? nf_hook_slow+0x132/0x200 [ 1161.247601][ C0] br_nf_hook_thresh+0x307/0x410 [ 1161.247636][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1161.247672][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 1161.247710][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1161.247745][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1161.247776][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1161.247809][ C0] br_nf_pre_routing_finish_ipv6+0x76a/0xfb0 [ 1161.247831][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1161.247869][ C0] br_nf_pre_routing_ipv6+0x3cd/0x8c0 [ 1161.247891][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 1161.247911][ C0] ? lock_acquire+0x179/0x350 [ 1161.247940][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 1161.247962][ C0] ? net_generic+0xea/0x2a0 [ 1161.247999][ C0] br_nf_pre_routing+0x860/0x15b0 [ 1161.248037][ C0] br_handle_frame+0xad5/0x14b0 [ 1161.248073][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1161.248108][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1161.248146][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1161.248179][ C0] __netif_receive_skb_core.constprop.0+0xa22/0x48c0 [ 1161.248212][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1161.248241][ C0] ? debug_object_activate+0x2ec/0x4c0 [ 1161.248274][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1161.248308][ C0] ? __pfx_debug_object_activate+0x10/0x10 [ 1161.248338][ C0] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 1161.248368][ C0] ? find_held_lock+0x2b/0x80 [ 1161.248389][ C0] ? rcu_is_watching+0x12/0xc0 [ 1161.248410][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 1161.248442][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1161.248471][ C0] ? __mod_timer+0x8f2/0xd30 [ 1161.248504][ C0] ? __lock_acquire+0x622/0x1c90 [ 1161.248534][ C0] ? process_backlog+0x3f0/0x15e0 [ 1161.248560][ C0] __netif_receive_skb_one_core+0xb0/0x1e0 [ 1161.248589][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 1161.248619][ C0] ? lock_acquire+0x179/0x350 [ 1161.248650][ C0] ? process_backlog+0x3f0/0x15e0 [ 1161.248676][ C0] __netif_receive_skb+0x1d/0x160 [ 1161.248704][ C0] process_backlog+0x442/0x15e0 [ 1161.248735][ C0] __napi_poll.constprop.0+0xb7/0x550 [ 1161.248765][ C0] net_rx_action+0xa9f/0xfe0 [ 1161.248799][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1161.248827][ C0] ? mark_held_locks+0x49/0x80 [ 1161.248855][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1161.248902][ C0] ? tmigr_handle_remote+0x132/0x380 [ 1161.248944][ C0] ? run_timer_base+0x121/0x190 [ 1161.248972][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 1161.249004][ C0] handle_softirqs+0x216/0x8e0 [ 1161.249033][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1161.249061][ C0] ? __batadv_dat_purge.part.0+0x279/0x3a0 [ 1161.249087][ C0] ? __pfx_batadv_dat_to_purge+0x10/0x10 [ 1161.249111][ C0] do_softirq+0xb2/0xf0 [ 1161.249135][ C0] [ 1161.249142][ C0] [ 1161.249150][ C0] __local_bh_enable_ip+0x100/0x120 [ 1161.249177][ C0] __batadv_dat_purge.part.0+0x279/0x3a0 [ 1161.249206][ C0] batadv_dat_purge+0x4b/0xa0 [ 1161.249229][ C0] process_one_work+0x9cc/0x1b70 [ 1161.249277][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1161.249319][ C0] ? assign_work+0x1a0/0x250 [ 1161.249354][ C0] rescuer_thread+0x620/0xea0 [ 1161.249396][ C0] ? rcu_is_watching+0x12/0xc0 [ 1161.249418][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 1161.249453][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1161.249486][ C0] ? __kthread_parkme+0x19e/0x250 [ 1161.249524][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 1161.249558][ C0] kthread+0x3c5/0x780 [ 1161.249588][ C0] ? __pfx_kthread+0x10/0x10 [ 1161.249621][ C0] ? rcu_is_watching+0x12/0xc0 [ 1161.249641][ C0] ? __pfx_kthread+0x10/0x10 [ 1161.249672][ C0] ret_from_fork+0x5d7/0x6f0 [ 1161.249705][ C0] ? __pfx_kthread+0x10/0x10 [ 1161.249736][ C0] ret_from_fork_asm+0x1a/0x30 [ 1161.249769][ C0] [ 1161.269385][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1161.269418][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: GF R 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 1161.269473][ T31] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD [ 1161.269488][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1161.269509][ T31] Call Trace: [ 1161.269522][ T31] [ 1161.269536][ T31] dump_stack_lvl+0x3d/0x1f0 [ 1161.269589][ T31] vpanic+0x6a3/0x780 [ 1161.269638][ T31] ? __pfx_vpanic+0x10/0x10 [ 1161.269689][ T31] ? __pfx___irq_work_queue_local+0x10/0x10 [ 1161.269745][ T31] panic+0xca/0xd0 [ 1161.269791][ T31] ? __pfx_panic+0x10/0x10 [ 1161.269840][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1161.269890][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 1161.269932][ T31] ? watchdog+0xd78/0x1260 [ 1161.269978][ T31] ? watchdog+0xd6b/0x1260 [ 1161.270035][ T31] watchdog+0xd89/0x1260 [ 1161.270088][ T31] ? __pfx_watchdog+0x10/0x10 [ 1161.270134][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1161.270182][ T31] ? __kthread_parkme+0x19e/0x250 [ 1161.270226][ T31] ? __pfx_watchdog+0x10/0x10 [ 1161.270271][ T31] kthread+0x3c5/0x780 [ 1161.270320][ T31] ? __pfx_kthread+0x10/0x10 [ 1161.270370][ T31] ? rcu_is_watching+0x12/0xc0 [ 1161.270403][ T31] ? __pfx_kthread+0x10/0x10 [ 1161.270455][ T31] ret_from_fork+0x5d7/0x6f0 [ 1161.270507][ T31] ? __pfx_kthread+0x10/0x10 [ 1161.270556][ T31] ret_from_fork_asm+0x1a/0x30 [ 1161.270616][ T31] [ 1162.237477][ T31] Kernel Offset: disabled [ 1162.241817][ T31] Rebooting in 86400 seconds..