last executing test programs: 10m12.042915554s ago: executing program 2 (id=1796): socket(0x29, 0x5, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/v4l-subdev2\x00', 0x80000, 0x0) r0 = socket(0xa, 0x2, 0x3a) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/bdi/43:320/uevent\x00', 0x0, 0x0) mprotect$auto(0x1ffff000, 0x7ffffffffffffffd, 0x4) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/auto_online_blocks\x00', 0x400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000e80)=""/193, 0xc1) socket(0x11, 0x80003, 0x300) socket(0xa, 0x801, 0x106) mmap$auto(0x0, 0x2020009, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0x5, 0x0) fanotify_init$auto(0x5, 0x2000000000002) inotify_init1$auto(0x3000000000000) socket(0x15, 0x5, 0x0) getsockopt$auto(0x2, 0x114, 0x271d, 0xfffffffffffffffc, 0x0) setsockopt$auto(r0, 0x29, 0x4b, 0x0, 0x10000110) 10m11.853876929s ago: executing program 2 (id=1797): io_uring_setup$auto(0x8, &(0x7f0000000140)={0x3ff, 0x3, 0x9, 0x10001, 0x12, 0xc05, 0xffffffffffffffff, [0x7ff, 0xfff, 0x8], {0x9, 0x1, 0x5, 0x100, 0x400, 0x0, 0x3fdf, 0x5, 0x1000000000e8}, {0x2, 0x100, 0x54f1, 0x0, 0x101, 0xff, 0x8d6, 0xa, 0x3}}) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) r0 = socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) 10m11.762873487s ago: executing program 2 (id=1799): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x80502, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) clock_getres$auto(0xfffffffe, 0x0) sysfs$auto(0x2, 0x3d, 0x0) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto(r1, 0x8, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getsockopt$auto(0xffffffffffffffff, 0x40000000029, 0x43, 0xfffffffffffffffe, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/binderfs/binder0\x00', 0x102, 0x0) ioctl$auto_BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat$auto_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000040), 0x189800, 0x0) pread64$auto(r3, 0x0, 0x2, 0x3) ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000001c0)) 10m11.391545761s ago: executing program 2 (id=1803): socket(0x10, 0xa, 0x6) socket(0x10, 0x2, 0x14) socket(0x11, 0x80003, 0x300) socket(0x1d, 0x2, 0x7) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x201, 0x0) open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80842, 0x91) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC0\x00', 0x60000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000280)={0x1, 0x8}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x8000009b72, 0x2, 0x8000) socket(0xa, 0x3, 0x86) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x401c5820, 0x0) mkdir$auto(0x0, 0x353) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/options/hash-ptr\x00', 0x10b000, 0x0) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x1, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) 10m10.816695993s ago: executing program 2 (id=1805): r0 = socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) kexec_load$auto(0x6, 0x0, 0x0, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) shmctl$auto(0xa0000000, 0x6, &(0x7f00000002c0)={{0x3, 0x0, 0x0, 0x0, 0x7, 0xd, 0xff}, 0x2, 0xffffffff80000001, 0x3ff, 0x800, @raw=0x61a, @inferred=0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0}) sendmsg$auto_IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="a8140000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="00000800060006000000"], 0x14a8}, 0x1, 0x0, 0x0, 0x24008000}, 0x20000000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x101000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) io_setup$auto(0x7ffe, &(0x7f0000000000)) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x1, 0x0) execve$auto(0x0, 0x0, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffff7fffffffffd, 0xd1, 0x3, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x31, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) sendmsg$auto_ILA_CMD_ADD(r1, 0x0, 0x4000010) r3 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) read$auto_proc_pid_maps_operations_internal(0xffffffffffffffff, 0x0, 0x0) sendfile$auto(r3, r3, 0x0, 0x10000800000003) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 10m10.160592454s ago: executing program 2 (id=1807): io_uring_setup$auto(0x8, &(0x7f0000000140)={0x3ff, 0x3, 0x9, 0x10001, 0x12, 0xc05, 0xffffffffffffffff, [0x7ff, 0xfff, 0x8], {0x9, 0x1, 0x5, 0x100, 0x400, 0x0, 0x3fdf, 0x5, 0x1000000000e8}, {0x2, 0x100, 0x54f1, 0x0, 0x101, 0xff, 0x8d6, 0xa, 0x3}}) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) r0 = socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) 10m9.634261365s ago: executing program 32 (id=1807): io_uring_setup$auto(0x8, &(0x7f0000000140)={0x3ff, 0x3, 0x9, 0x10001, 0x12, 0xc05, 0xffffffffffffffff, [0x7ff, 0xfff, 0x8], {0x9, 0x1, 0x5, 0x100, 0x400, 0x0, 0x3fdf, 0x5, 0x1000000000e8}, {0x2, 0x100, 0x54f1, 0x0, 0x101, 0xff, 0x8d6, 0xa, 0x3}}) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) r0 = socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) 9m11.195908034s ago: executing program 4 (id=2027): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) sched_setattr$auto(0x0, &(0x7f00000002c0)={0x1000, 0x50, 0x1d, 0xa9, 0x0, 0x4, 0x9, 0x9, 0xb, 0x6}, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/uprobe/perf_event_mux_interval_ms\x00', 0x121102, 0x0) write$auto(r0, &(0x7f0000000000)='\x00', 0x9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ttya7/power/runtime_status\x00', 0x600000, 0x0) 9m11.042632842s ago: executing program 4 (id=2028): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setresuid$auto(0x2, 0x7, 0x8080) r0 = pidfd_open$auto(0x1, 0x0) process_madvise$auto(r0, 0x0, 0xffffffffffffb1e0, 0x0, 0x8000000000000000) 9m10.921225377s ago: executing program 4 (id=2030): close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0x8208ae63, 0x38) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setresuid$auto(0x2, 0x7, 0x8080) r1 = pidfd_open$auto(0x1, 0x0) process_madvise$auto(r1, 0x0, 0x3, 0x201, 0x3) 9m10.705321858s ago: executing program 4 (id=2031): r0 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async, rerun: 32) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), r0) (async, rerun: 32) write$auto(0x3, 0x0, 0xfdef) 9m10.102556931s ago: executing program 4 (id=2035): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) mq_getsetattr$auto(0x3, &(0x7f00000000c0)={0x0, 0xe, 0x5, 0xce}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400005, 0xffffffffffeffffe, 0x9b72, 0xc76, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00'}) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) r1 = socket(0x18, 0x5, 0x1) connect$auto(r1, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x4000804) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0xe000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x8000003, 0x7) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) capget$auto(&(0x7f00000000c0)={0x20071026, 0xffffffffffffffff}, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r3, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(0x3, 0x4040ae79, 0x38) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) 9m8.385502387s ago: executing program 4 (id=2042): mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setresuid$auto(0x2, 0x7, 0x8080) close_range$auto(0x2, 0x8, 0x8) socket(0x10, 0x2, 0xc) (async) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x46af82, 0x0) (async) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x46af82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) (async) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae90, &(0x7f0000000040)={0x2}) (async) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae90, &(0x7f0000000040)={0x2}) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/acpi/wakeup\x00', 0x48041, 0x0) (async) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/acpi/wakeup\x00', 0x48041, 0x0) mmap$auto(0x5, 0x400202000a, 0x3fd, 0x40eb3, r1, 0x8000) (async) mmap$auto(0x5, 0x400202000a, 0x3fd, 0x40eb3, r1, 0x8000) getrandom$auto(0x0, 0x0, 0x7) capset$auto(0x0, 0x0) capget$auto(0x0, &(0x7f0000000180)={0xea69, 0xd, 0x1}) write$auto(r2, 0x0, 0x6) unshare$auto(0x200) (async) unshare$auto(0x200) r3 = socket(0x2, 0x80802, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x824000, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) ioctl$auto(r3, 0x10, r3) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/adsp1\x00', 0x2, 0x0) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/adsp1\x00', 0x2, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp1\x00', 0x2141c0, 0x0) (async) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp1\x00', 0x2141c0, 0x0) ioctl$auto_SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000100)="000004") close_range$auto(0x2, 0x8, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') madvise$auto(0x0, 0x7fffffffffffffff, 0xa) sigaltstack$auto(&(0x7f0000000040)={0x0, 0x4b, 0x6}, 0x0) acct$auto(&(0x7f0000000100)='./cgroup/cgroup.subtree_control\x00') 8m52.878462797s ago: executing program 33 (id=2042): mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setresuid$auto(0x2, 0x7, 0x8080) close_range$auto(0x2, 0x8, 0x8) socket(0x10, 0x2, 0xc) (async) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x46af82, 0x0) (async) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x46af82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) (async) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae90, &(0x7f0000000040)={0x2}) (async) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae90, &(0x7f0000000040)={0x2}) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/acpi/wakeup\x00', 0x48041, 0x0) (async) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/acpi/wakeup\x00', 0x48041, 0x0) mmap$auto(0x5, 0x400202000a, 0x3fd, 0x40eb3, r1, 0x8000) (async) mmap$auto(0x5, 0x400202000a, 0x3fd, 0x40eb3, r1, 0x8000) getrandom$auto(0x0, 0x0, 0x7) capset$auto(0x0, 0x0) capget$auto(0x0, &(0x7f0000000180)={0xea69, 0xd, 0x1}) write$auto(r2, 0x0, 0x6) unshare$auto(0x200) (async) unshare$auto(0x200) r3 = socket(0x2, 0x80802, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x824000, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) ioctl$auto(r3, 0x10, r3) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/adsp1\x00', 0x2, 0x0) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/adsp1\x00', 0x2, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp1\x00', 0x2141c0, 0x0) (async) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp1\x00', 0x2141c0, 0x0) ioctl$auto_SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000100)="000004") close_range$auto(0x2, 0x8, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') madvise$auto(0x0, 0x7fffffffffffffff, 0xa) sigaltstack$auto(&(0x7f0000000040)={0x0, 0x4b, 0x6}, 0x0) acct$auto(&(0x7f0000000100)='./cgroup/cgroup.subtree_control\x00') 3m7.365354004s ago: executing program 5 (id=3207): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = socket(0x2b, 0x1, 0x1) getsockopt$auto(r1, 0x1, 0x1a, 0x0, 0x0) (async) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) (async) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f000001f300), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES32=r2], 0x1ac}}, 0x40000) (async) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x30, 0xff, 0x0, @raw=0xfffff020}}) 3m6.886354861s ago: executing program 5 (id=3209): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000340)='/proc/thread-self/net/dev_mcast\x00', 0x404080, 0x0) write$auto(r0, 0x0, 0x7ef) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/mac80211_hwsim/hwsim1/net/wlan1/type\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000040)=""/116, 0x74) socket(0xa, 0x1, 0x100) modify_ldt$auto(0x1, 0x0, 0x10) pread64$auto(0xffffffffffffffff, 0x0, 0x7ff, 0x400) socket(0x2, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x12, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948f, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1]}, 0x0) write$auto(r2, &(0x7f0000000440)='/Eev/audio1\x00VI\xa3\xaa\xb1\x05\x00\x00\x00\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\x89C:\xc3\xcbx*=\x12\xb4q\xeeC\x81\n\\_\x04D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\x9e\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x8cec, 0x6]}, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/kernel/kexec_load_disabled\x00', 0x202, 0x0) sendfile$auto(r3, r3, 0x0, 0x0) mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x80400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0xffffffffffffbfff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0004, 0x19) madvise$auto(0x0, 0x200007, 0x19) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) close_range$auto(0x2, 0x8, 0x0) 3m5.149474819s ago: executing program 1 (id=3217): memfd_secret$auto(0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) ftruncate$auto(0x3, 0x700) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010600bd7000fbdbdf250a"], 0x1c}}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='>'], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x7, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x7, 0x1}, 0x5}, 0x3, 0x0) (fail_nth: 7) 3m4.446287323s ago: executing program 5 (id=3220): mmap$auto(0x200000000, 0x2000a, 0x4, 0xeb2, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0xffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card1/pcm1p/sub5/sw_params\x00', 0x8f3b7a51b8360c21, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0) socketpair$auto(0xffff7fff, 0x4, 0x80000001, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x20000000008000) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x840, 0x0) r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r0, 0x4b72, r1) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x8, 0x0, 0x0, 0x0, 0x4, 0x8, 0x80000000000000a, 0x0, 0xa, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0) r4 = io_uring_setup$auto(0x2, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r5, 0x5423, 0x0) io_uring_setup$auto(0x1, 0x0) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0) ioctl$auto_TIOCSETD2(r6, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r5, 0x5437, 0x0) ioctl$auto_TIOCNOTTY2(r4, 0x5422, &(0x7f0000000300)="c24af288295eef34b8eb54553609bc3f5b1c7b98f0e2096318ac28d38c4c5e97526843e184b423e0d52f0a8a65bc0b469e184bcc3fe4a1f8d64392b9a452c19e2e17928f474e8abf6f39acd07c8b5b056f78eca1ba683c2944905b6e10a78256ef5af9ef7725af4f2597ce1e0e5584b2d9df37a4fdd61dadece0a4960e311d7edc4ce483d3faf9d13928f4cfbfda2ed5d674e472e7dcf30916eee7dc849e97cf65e84c0d85e02f81dbc413e6eca9f5c2830cc8f50ce3059204e1f2790c6b92427b3d9a855555894f935017645bf6b739826dedc668d9aed77c42778a2df454b1dfbe5e0e1028e07558ceeab3277e64") mmap$auto(0x0, 0x4020009, 0xdf, 0xeb2, 0x401, 0x8000) r7 = getpgid(0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f00000001c0)={{@raw=0x6, 0x1, 0x4002, 0x80000001, "a2b8e85fc56865ba529faa0000000000000000000000692a008000"}, 0x6, 0x5, 0x7, @inferred=r7, @reserved="fb99d320be0de941ac3f58d7aae0c84cbe332d618e0342761e3ac6e9a9df07cf9b1c017c611ac455c01804d0d4c89bee7005c5affd5ab891b44e48364e8de3f3445849964f062d38f590125ed264000000000000000000000000000100000000000600", "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970bedd3460c667373fcc59b584d81592f4ab606c276852295e00af49090000008034"}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REMOVE(r3, 0xc0405519, &(0x7f00000000c0)={@inferred=r7, 0x6, 0xd, 0xa4, "e3eabf11dce36a2eac9cb4682c339b3ce615a9b97386d4462bc6553245da56e4978f37368e849db4a6e0aa4e", @inferred=r7}) setsockopt$auto_SO_BSDCOMPAT(r3, 0x7f, 0xe, &(0x7f00000018c0)='\x00', 0x4) recvmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000000), 0x9, &(0x7f0000000100)={&(0x7f0000000040)="b1e32a62c344b856a23a449acba9b409be234445b2b317bfeef250b7179a05701a12274b75596b2a944c26f96e1678691058a8", 0x37}, 0x0, &(0x7f0000000200)="64cbaa33427ba6be9cd444df224685889427509a1720cf345ba94c91045757c0a35df6b0297857d03966f6c2cd8c3afa326cd440846511065e8892d7723bc51ad7702bc459f3d9b4c94976c979f14d6015fecc3ff6570a1fb125d52b2e88505bff97691dbb7b2481114f62afa95877289da5ede4d9d073b23054a762b0becaffe9ed6ba428a866455999db927e3beaf1c2ddbcb318ec3e1b608498", 0x7a7, 0x6}, 0x3}, 0x4, 0x81, &(0x7f0000000180)={0x3, 0x9}) 3m4.439579193s ago: executing program 1 (id=3228): r0 = semctl$auto(0x7, 0x5, 0x0, 0x6) sendmsg$auto_NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800c000}, 0xc, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[@ANYBLOB="80050000", @ANYRESDEC=r0, @ANYBLOB="02002bbd7000fcdbdf25010000000400e2000000002000328005000300020000000500030002000000040005000800040000000000000be24c183fde5b9d4eaa60152c220b90f9370ed909cb387efd44283302b1f53dcde4e9bc252c784fea90af25c968b063e49d0c7166e007d16e", @ANYRES16=r0, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB, @ANYRESHEX=r0], 0x580}, 0x1, 0x0, 0x0, 0x60008810}, 0x20000040) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r1, 0x107, 0x12, 0x0, 0x4) pwrite64$auto(r1, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x89\x06s\x1cJ\x99\x8a>c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2\x00\x00', 0x7, 0x3) socket(0x2, 0x5, 0x0) listen$auto(0x3, 0x83) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r2 = clone$auto(0x21, 0x7, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = getpgid$auto(r2) sched_getattr$auto(r3, &(0x7f0000000000)={0x5, 0x80000001, 0x2, 0xc19, 0x1, 0x0, 0xfffffffffffffff8, 0x4, 0xfff, 0x1}, 0xfff, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x1) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r4 = socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) r5 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x80100, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r5, 0x40146f2c, 0x0) close_range$auto(0x2, 0xa, 0x0) setsockopt$auto(r4, 0x107, 0x12, 0x0, 0x4) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0xffffffffffffffff, 0xfffffffffffffffe, 0x3ff, 0xffffffffffffffff, 0x8001) mmap$auto(0x0, 0x801004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) 3m3.74120856s ago: executing program 1 (id=3222): memfd_secret$auto(0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) ftruncate$auto(0x3, 0x700) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/vkms/graphics/fb0/bits_per_pixel\x00', 0x82942, 0x0) mmap$auto(0x0, 0x2020009, 0x100003, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x2, 0x73) mmap$auto(0x0, 0x2020009, 0x126, 0xf8, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x1, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x0, 0x5, 0x0) pipe$auto(0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xc048aec8, r0) mmap$auto(0x7, 0xe984, 0x0, 0xeb8, 0x401, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x7, 0x6ea, 0x7fff, 0xfff, 0x401, 0x200000000008000) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) keyctl$auto(0x15, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x80000, 0xa) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x3c000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 3m3.561137753s ago: executing program 5 (id=3223): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) select$auto(0x3, 0x0, 0x0, 0x0, 0x0) syslog$auto(0x2, 0x0, 0xcf) mmap$auto(0x0, 0x10001, 0x80003, 0x10011, 0xffffffffffffffff, 0x8000) write$auto(0xca, &(0x7f0000000040)='\x04>2\x0f\x00\x00\x96\x18am\xea\xf4\x1b\xf8', 0x7e) close_range$auto(0x2, 0x8, 0x0) shmget$auto(0x400, 0x10563, 0x568c12f2) sendmsg$auto_NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x24048800) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0xffffffffffffffff, 0x400008, 0xe0, 0x9b72, 0xffffffffffffffff, 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x2020009, 0x3, 0x20000000eb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, 0x38) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0xfbe1) write$auto_tomoyo_operations_securityfs_if(0xffffffffffffffff, &(0x7f0000001300), 0x0) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0xc76, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) r1 = socket(0x15, 0x5, 0x0) setsockopt$auto(r1, 0x114, 0x8, 0x0, 0x4) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) shmdt$auto(&(0x7f0000000000)=':-h!/-^@(\']@%]/\x00') 3m2.164288727s ago: executing program 1 (id=3229): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mlock$auto(0x1a81, 0x2) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) openat$auto_transactions_fops_(0xffffffffffffff9c, &(0x7f0000001100), 0x40, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4400000000df, 0xc157, 0x101000000000000, 0x7) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x1, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x4, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x4, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2, 0x1, 0x0) epoll_create$auto(0x4) mq_open$auto(0x0, 0x5, 0x3, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000840)='/proc/sys/vm/dirty_background_ratio\x00', 0x80000, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0xa, 0x3, 0x3, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0x8000]}, 0x0) sched_get_priority_min$auto(0x40) socket(0x2, 0xa, 0x0) mmap$auto(0x0, 0x8, 0x3, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) unshare$auto(0x40000080) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video43\x00', 0x129900, 0x0) ppoll$auto(&(0x7f0000000200)={r0, 0x7, 0x6}, 0x88f, 0x0, 0x0, 0x8) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video43\x00', 0x129900, 0x0) 3m1.861336579s ago: executing program 5 (id=3231): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) select$auto(0x3, 0x0, 0x0, 0x0, 0x0) syslog$auto(0x2, 0x0, 0xcf) mmap$auto(0x0, 0x10001, 0x80003, 0x10011, 0xffffffffffffffff, 0x8000) write$auto(0xca, &(0x7f0000000040)='\x04>2\x0f\x00\x00\x96\x18am\xea\xf4\x1b\xf8', 0x7e) close_range$auto(0x2, 0x8, 0x0) shmget$auto(0x400, 0x10563, 0x568c12f2) sendmsg$auto_NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x24048800) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0xffffffffffffffff, 0x400008, 0xe0, 0x9b72, 0xffffffffffffffff, 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x2020009, 0x3, 0x20000000eb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, 0x38) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0xfbe1) write$auto_tomoyo_operations_securityfs_if(0xffffffffffffffff, &(0x7f0000001300), 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) r1 = socket(0x15, 0x5, 0x0) setsockopt$auto(r1, 0x114, 0x8, 0x0, 0x4) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) shmdt$auto(&(0x7f0000000000)=':-h!/-^@(\']@%]/\x00') 3m1.181165536s ago: executing program 3 (id=3232): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) r0 = epoll_create$auto(0x4) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) rt_sigtimedwait$auto(0x0, 0x0, 0x0, 0x8) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x8000, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) read$auto(r1, 0x0, 0xcefbce6) read$auto_nsim_dev_trap_fa_cookie_fops_dev(r1, &(0x7f0000000000)=""/156, 0x9c) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xdffffffa) kill$auto(0x0, 0x11) syz_clone3(&(0x7f0000000500)={0x400, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/admmidi2\x00', 0x1, 0x0) madvise$auto(0xfff, 0x7, 0xab8) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) socket(0x1e, 0x1, 0x0) setsockopt$auto(r0, 0x6, 0x100000000, 0xfffffffffffffffc, 0x9) socket(0x29, 0x801, 0x100) 3m0.989543757s ago: executing program 0 (id=3233): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) r0 = epoll_create$auto(0x4) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) rt_sigtimedwait$auto(0x0, 0x0, 0x0, 0x8) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x8000, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) read$auto(r1, 0x0, 0xcefbce6) read$auto_nsim_dev_trap_fa_cookie_fops_dev(r1, &(0x7f0000000000)=""/156, 0x9c) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xdffffffa) kill$auto(0x0, 0x11) syz_clone3(&(0x7f0000000500)={0x400, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/admmidi2\x00', 0x1, 0x0) madvise$auto(0xfff, 0x7, 0xab8) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) socket(0x1e, 0x1, 0x0) setsockopt$auto(r0, 0x6, 0x100000000, 0xfffffffffffffffc, 0x9) socket(0x29, 0x801, 0x100) 3m0.548705395s ago: executing program 1 (id=3234): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fbdbdf250200000008000300", @ANYRES32=r3, @ANYBLOB='\b\x00?'], 0x24}, 0x1, 0x0, 0x0, 0x20040810}, 0x20000084) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(r4, r0, 0xd1d8) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r6 = ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket(0x2b, 0x1, 0x1) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f00000002c0)={0x5, "9aac7bb4d31a21364fc0f1b2ba088e2b8d90f95df875c19306b3e11fba4f11ae", @inferred=r2}) mmap$auto_proc_iter_file_ops_compat_inode(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x110, r8, 0x5) ioctl$auto(r7, 0x8941, 0x4) r9 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_KSMBD_EVENT_SPNEGO_AUTHEN_REQUEST(r7, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r9, 0x0, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x80000) ioctl$auto(0x3, 0xae41, r5) ioctl$auto_KVM_GET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x2ff, 0x400, 0x2}]}) 3m0.222837745s ago: executing program 3 (id=3235): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(0xffffffffffffffff, 0x4b44, r0) 3m0.197726865s ago: executing program 1 (id=3236): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) close_range$auto(0x2, 0xa, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x101001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x4, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) connect$auto(0x3, 0x0, 0x10) unshare$auto(0x40000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000f9dbdf250100000008000a0008000000050007003b000000080009009c781e01060002000100000008001700", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x48080) (fail_nth: 7) 3m0.108727465s ago: executing program 3 (id=3237): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) epoll_create$auto(0x4) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) rt_sigtimedwait$auto(0x0, 0x0, 0x0, 0x8) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x8000, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) read$auto(r0, 0x0, 0xcefbce6) read$auto_nsim_dev_trap_fa_cookie_fops_dev(r0, &(0x7f0000000000)=""/156, 0x9c) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xdffffffa) kill$auto(0x0, 0x11) syz_clone3(&(0x7f0000000500)={0x400, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0xfff, 0x7, 0xab8) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) 2m59.519310667s ago: executing program 0 (id=3238): r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) waitid$auto(0x1, 0xffffffffffffffff, &(0x7f0000000200)={@siginfo_0_0={0x4, 0x1, 0x1, @_rt={0xffffffffffffffff, 0xee01, @sival_ptr=&(0x7f0000000180)="03f389caf3c90de0f97ec6501085eb8a7425a38c3ea2dffad12bf6920a4226e4e31c89dce4dcf4fc29501cdc230f5f062416d2e8aa8044ea004626a342b2d3c8ac009c"}}}, 0x3, &(0x7f0000000280)={{0x4, 0xe69}, {0xa4, 0x9}, 0x3, 0x1c049bdd, 0x100, 0x4cdc0fb0, 0x8000000000000001, 0x1, 0x15ec, 0x5, 0x9, 0x8, 0x8001, 0x6, 0x6, 0x8}) sendmsg$auto_OVS_DP_CMD_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)={0x34, r2, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, r3}, @OVS_DP_ATTR_NAME={0x8, 0x1, '.SR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x80) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/cifs/LookupCacheEnabled\x00', 0x48041, 0x0) lseek$auto(0x3, 0x4000000000008, 0x1) bpf$auto(0xd, 0x0, 0x6f5) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x480, 0x0) mprotect$auto(0x0, 0x806121, 0x6) r4 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r4, 0xc0606610, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) close_range$auto(r0, r0, 0xc0) mmap$auto(0x0, 0x0, 0x8, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(0x0, 0x0) r5 = socket(0x2d, 0x2, 0x0) sendmsg$auto_SMC_NETLINK_ENABLE_SEID(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x10}, 0xc, &(0x7f0000000100)={0x0, 0xa0}}, 0x20040804) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) keyctl$auto(0x2000000000000017, 0x3ff, 0x2a, 0x0, 0x4) keyctl$auto(0x2000000000000017, 0x3ff, 0x0, 0x0, 0x3) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80, 0x0) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x91e4) mmap$auto(0x0, 0x200003, 0x4000000000df, 0x40eb2, 0x402, 0x2) 2m57.951841533s ago: executing program 5 (id=3239): socket(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_DEL_RXSA(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf2508000000040002800400038008000100", @ANYRES32=0x0], 0x24}, 0x1, 0x500, 0x0, 0x844}, 0x20004010) r2 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f000000c380)={0x60, 0x1, 0x100000, 0x7fffffffefff, 0x0, 0x1, 0x6, 0xfffffffffffffffb, 0x0, 0x8, 0x0, 0x9}) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) iopl$auto(0x3) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd13/queue/rotational\x00', 0x10b142, 0x0) sendfile$auto(r3, r3, 0x0, 0x2f2) clone$auto(0x21002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x6, 0x15, 0x0, 0xfb3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYBLOB="040006"], 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r4) r5 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000005c0), r4) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000400)={0x1c, r5, 0x8ff972b65c311bf5, 0x70bd26, 0x25dfdbfe, {}, [@MACSEC_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x4000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) shmat$auto(0x59, &(0x7f0000000580)='(\x04', 0xfffffffd) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper\x00', 0x20681, 0x0) write$auto(0x3, 0x0, 0x100082) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='-\x00', @ANYBLOB=']'], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2m48.610690821s ago: executing program 0 (id=3240): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = prctl$auto(0x16, 0x800000000000012, 0x0, 0x9, 0x10000) r2 = ioctl$auto_TUNGETVNETBE2(r1, 0x800454df, &(0x7f0000000040)=0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) select$auto(0x1ff, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x1000000000000005, 0x9, 0x250, 0x100000001, 0x275, 0x4dec, 0x1, 0x3f, 0xd, 0xd59, 0x6, 0x102, 0x21, 0x6]}, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="013b"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) ioctl$auto_PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f00000000c0)=0x2070bb26) ioctl$auto_BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)="f08654f6186eb95dcf7d80d0285fd57574f0739cc4139e87b8d041a7b552a0338c7ebefb09fcd643fce20e439620e5732cbc550c97504b671874e9147e48e0407bc4693a8837cbc67df80dcf2c440d0442752106643559a0e6ebac4eb9e675a186f6dbe16aac44b93ea36d62cff3c16711ae0385993590428b28157e2d9c430737d24b2ee00481dd6612ebf5ab501e2519f57565e78d6670d0d28333b7921f2a88af0193beae4ef7ff0bd21516bb5b20730ffa169283834e60ab602888031c85739e73ad9d7a4e4f5382bafcb233e4c665956458bb968d5229a9ec5565") openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/error_log\x00', 0xb01, 0x0) sendmsg$auto_L2TP_CMD_NOOP(r0, &(0x7f0000004fc0)={0x0, 0x0, &(0x7f0000004f80)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="010026bd7000fddbdf254c734807ebdd07e5ecdbc84fe7710a00000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40) 2m48.239900596s ago: executing program 3 (id=3241): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x1, 0x8, 0x9) r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) pidfd_send_signal$auto_PIDFD_SELF_THREAD_GROUP(0xffffffffffffb1e0, 0xc63e, &(0x7f0000000100)={@siginfo_0_0={0x2, 0x1, 0x2, @_timer={0x0, 0xffff301b, @sival_ptr=0x0, 0xf182}}}, 0x6dc6) tkill$auto(0x0, 0xffffff73) read$auto_proc_pid_maps_operations_internal(r0, &(0x7f00000010c0)=""/4082, 0xff2) mlockall$auto(0x7) close_range$auto(0x2, 0x8, 0x0) bind$auto(0x3, 0x0, 0x6a) listen$auto(0x3, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x34, 0xf1, 0xb0, @raw=0xfffff024}}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="5e0027b4839f3015398d3b", @ANYRES32, @ANYRES32, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0\x00'}) r2 = socket(0x18, 0x5, 0x1) connect$auto(r2, &(0x7f0000000080)=@in={0x2, 0x4e01, @multicast1}, 0x0) 2m45.072734526s ago: executing program 34 (id=3236): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) close_range$auto(0x2, 0xa, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x101001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x4, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) connect$auto(0x3, 0x0, 0x10) unshare$auto(0x40000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000f9dbdf250100000008000a0008000000050007003b000000080009009c781e01060002000100000008001700", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x48080) (fail_nth: 7) 2m42.666442361s ago: executing program 0 (id=3243): openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) r0 = socket(0xa, 0x5, 0x0) getsockopt$auto(r0, 0x84, 0x7a, 0x0, 0x0) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x10, 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = socket(0x18, 0x5, 0x1) connect$auto(r2, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) sendmsg$auto_IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x11a8, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x110, 0x1, 0x0, 0x1, [@nested={0x101, 0x116, 0x0, 0x1, [@generic="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"]}, @typed={0x8, 0x5c, 0x0, 0x0, @fd=r1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DEST={0x107c, 0x2, 0x0, 0x1, [@nested={0x1078, 0xda, 0x0, 0x1, [@typed={0x61, 0x9f, 0x0, 0x0, @binary="4d8b3c4267089464b4aa1bab29ba85b4292fed2f8b900e0101096d00fcf9c595552d54be4ebe3d547ff067f1a26893f5f1131ef9e9b26672e3b1ea0e9e302c7136cc4d46ee3098174d51c9d48fd52224d6245f9b63bd03195708387543"}, @generic="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", @typed={0x8, 0xf3, 0x0, 0x0, @fd}, @typed={0xc, 0xab, 0x0, 0x0, @u64=0x2}, @typed={0x14, 0xbd, 0x0, 0x0, @ipv6=@private0}]}]}]}, 0x11a8}, 0x1, 0x0, 0x0, 0x90}, 0x0) recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0x803}, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0) 2m42.195483484s ago: executing program 35 (id=3239): socket(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_DEL_RXSA(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf2508000000040002800400038008000100", @ANYRES32=0x0], 0x24}, 0x1, 0x500, 0x0, 0x844}, 0x20004010) r2 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f000000c380)={0x60, 0x1, 0x100000, 0x7fffffffefff, 0x0, 0x1, 0x6, 0xfffffffffffffffb, 0x0, 0x8, 0x0, 0x9}) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) iopl$auto(0x3) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd13/queue/rotational\x00', 0x10b142, 0x0) sendfile$auto(r3, r3, 0x0, 0x2f2) clone$auto(0x21002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x6, 0x15, 0x0, 0xfb3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYBLOB="040006"], 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r4) r5 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000005c0), r4) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000400)={0x1c, r5, 0x8ff972b65c311bf5, 0x70bd26, 0x25dfdbfe, {}, [@MACSEC_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x4000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) shmat$auto(0x59, &(0x7f0000000580)='(\x04', 0xfffffffd) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper\x00', 0x20681, 0x0) write$auto(0x3, 0x0, 0x100082) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='-\x00', @ANYBLOB=']'], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2m41.403923272s ago: executing program 0 (id=3245): r0 = socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x7, @local}, 0x55) capget$auto(0x0, 0xfffffffffffffffe) setsockopt$auto(0x3, 0x10000000084, 0x1e, 0x0, 0x8) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000040), r0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x1328, r1, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@OVS_PACKET_ATTR_MRU={0x6, 0x9, 0x1}, @OVS_PACKET_ATTR_MRU={0x6, 0x9, 0x38af}, @OVS_PACKET_ATTR_ACTIONS={0x1fe, 0x3, 0x0, 0x1, [@typed={0x8, 0xf0, 0x0, 0x0, @u32=0x1}, @nested={0x139, 0x142, 0x0, 0x1, [@generic="012f668e3b351539cbe67a4bf91401b212bb129ef6e0df", @typed={0x8, 0x52, 0x0, 0x0, @ipv4=@empty}, @generic="4f4b89d09ed8ce171cec619108b674ff4b608f61a3d81852edec6ea901192bba658f499dc597a3aeabd6c4426fdaae07d68f8d765ee128ee5349030d9d37f08df21b2887317805d4a132564c8fd20b42c3281f3c6989cc1e0ccf1acc929cfe25e130cd79a0", @generic="5cc95b23467078bbabd9adc39f946513b67548903bbd7325bf92920d47750814748416bc73a5c6c4273ea97e9c004b0673484af531eb4bd6a9044feaacd8f224369e40ecc5067760be8e9ef67f2294297c636bdebdc07faea56b27a9d3ddbee096c31b06a3be88f55e4255f44e3c90c5d780820ede947681201feabaf7e702181eb057200a997f1231f9d7190855d8c884da337dab86374fc0e07db8e795e267b9680e46fc108a5a83949880ab9d944c82"]}, @generic="22ba277feafd1a5234cff792ac3c94bc", @generic="e696942485851eb9177c5fa329918c6243fe27090fffa6cf12681bfee7116b1f77a5dc6050578c4bee07cdcb9f3a87bee8830a0c5488d7ccb59d06cb7165f6ee9179e3c336eced14b7c44b741b4d43d518ca9eb241e688212a72fff4b3e8de3203951e56674e3ad900f70b22cb253942b64b43bea7a50416f69e03f4758d2c3dcc9d84a121745853fad7cfa6a04f1c9c0be7cf401b547f3e5a32182456d6952071eb43bef89a"]}, @OVS_PACKET_ATTR_MRU={0x6, 0x9, 0x101}, @OVS_PACKET_ATTR_KEY={0x10fc, 0x2, 0x0, 0x1, [@nested={0x100c, 0x104, 0x0, 0x1, [@nested={0x4, 0x13c}, @generic="4802afacea6e67c7fed695246756445b0dea635303fb10e7c0f623254f05e89d8bbe3331b5e871712a2a5664dfa776209276b0f65c9424c801cd80c90c945e4e50ce8cd687c533ebf15c4e666d17ce8f7bd9f96bd4e264765499d045a8e17f38eb48a373d5eba427c1dfb82f23065abab80ee388d7143e709c9d269d64594bb2a236a866c84080ba53c4624cf5dfb39ebd1e5ae00d095891cd6a6eba9a2f47a12709356d050ed8e27f878aa462cd1617f2e5f2ccdeb57124ee741ea535583857ac40be3fb090bb5f537d3eb376404748624b28ca5faa7c3454d2c9c8ce96f08b4a1569272eb9604cd26c1f3498d450093ff73fd4f08564659839676f2d6db44b35922e8c3102cbdd6431f50806c19145d506904ea36990fcf07a3a00032416c40ab2558afcd6d9cec757b93e2bf3c47092ea0188250324023602aad972be3beca1b3969bb1547b26e1207ed8e9162dde6082c864f08f1b0cb3753682e3189d06df3bb97624bc7847de0d01de8ba4f109926fdc3bf48188397444a6a58e426a6add72356373d52f91a56c95b949a0ed08a182dc8efc5d650640717d7ac85582dc2f4a809ddf34126790733a8022b52e2eb39228ac12e16e28390bd278ac3098b65179a4da4fe9c2c5adc641d4423c24aabda32e50b99453f24b4192f577c2b56295a5214194fe5cbe1bdcf4f33bcd8aa37329486cbd4d0fc89a0d46202ca3f71c2e783af51f33440c0a9c4f5d0d30612ad962d0fb2ab5a4ec52bd84efdfd6683194f1a39c3672aaab5070b895331b496d9a9fd3c7764094d169e5331ae96e6e9371bd5deaed4095ea205b3ae6a1731c2416dffaec8e9c95767da93a7a63b78b76e0102eb2d2585619e349999ed82774abf0428fbc7234a3383d013350e374427dc8c5a0922365f2b363cba8864c0462fce18e6892f7989d305e2535a24da8ef3dd62e586354304856628ed7eb9197e4feb529b6557f43ab660060b9e262a1ed19775606fe98b7093008f13af67f07eb50c435027bee8e5a5e63d363a62d8eefc6e06509f7903a4ea6b6ae8d87d42a617281ef862e4aec902a288a968e23826fb2aca8964d7a952f8e4f24b2a8ed42bbea02214418ab91573381294184b645880d6a98a2808be615f7699070fb2f271eca7dbdbb0347b2a7ff7d1a38872b23a6948203c70280d68c673e891acbee3a78ad8bb0914d7051a62e2387cb675356bf52b7456c2cee597af9a872b2403bf5fc607c715fd11c635446941e4a9cc2efeb7e5e45cd8b934c036b8ff7405f43a8e4d568ca4ec696486829b50ea41b4488f104b0772a19e673be7f51dcfd1fb97b8650bf9f9349f26f3dfccb9911bb032f9dc33a6fa0da12f78a8974013f448753ab80885492fa7f20f17d74ae97c838e971c9c3f99875501d1fffcaf98cac471b969048bcf40655f6408f18342855dd570791bd028d65635c54219e620bb94451b02244d555a92ee9be699a229c5fd885f90d63a6fb94026d5604f9c2fd84c1daef45b099e85b15dfd86138fb85e8bde48ab46f9ffe5001a470c3dc720e7355b6c61abdca70844f909f267584a9466fe656a726c5a6b181b55eb1ca72e5d897b58098b4874096e29245ccb72c619216a4279052200d9644c60ea5b64cb37db80c5c861e320d43cc281d6d50c21129ceb13c5692c5b53b062c328884eff5468e61ad07e3ab63b8b67bea3b288b5761d644f16761ee5165a1488820466537e9e278da8d06c92b130fb630c78ba75123b8cad1744629e6b56071d354481c35e4cd9be652582b8b900dee4e7e24ff9bda5436586cbea12048379d4ca31eef1fb9edc256bdba73580da80ec3548257456d5a326a28784bd3ed613719c65ad4181c66c4d6bd436622ea225ccbb9d85c682a12b0a0d0abba91799664868f0fc5835a131e570ca4f6cd483d91ce994d720031f6c46873c35417eb1a7f1fef4b282d96892ad059c86bde5142d9e8dfda0cf79b1e20c2eb315608cc7df78aaf5c282790b9356fa54d0d235548ebc68cbfefd4dea15fa0de8ae5348d1a58905cf66b8d0063465fc7072413258dac5a56104f57499c4db3644c50d75212307592aedacc9356d2a56ed8c0c06dc9f58f1c3e9001fad8cef639d3d455bf5f1221bfbfcb0795cb9d9f3a3e94ef7cfec89a8962ed37796cbea097ca82457103cc6d9f5b221e5456db87180c51ea12b77499173c2faa23e88a86902d5b4e6a0533983856c19ccdc106b2f37c0a45520e52b58d75f29c5105d78d99b7dbdc7308425b95b26509af45a841e98c9fc0e66fd6f39ec4371b61b21baf150f315b31a591b26dfc582c4582a7e6ad4818fd46d5d8e8b911e887051c823834ffc400e1be99dee2a1d790b9760e66738419b21eab5559c3abe210e57544e9de444c5e25f9b9aea2fecd63299467795da9fa69841dba7f05e09fb2fde7baed868dadd594daeb5d24c9f628effe1ce568ec8de7b9e458fd2cbf0f6ce3377d63f78ee6560434d79b4569f10eba063554146be01821e77c7f7182d0f5d54707f432fff3d0f6a831511f795734c5da1ac584422d3bfbedee08952bb283f4994842e8075db78c5b4095df7c74198d9bc3188c5a596e5d2035fb24e0a8e45597927af91c62c0a6c3e2a6feaaaad66aedec2ae5c5426ce96157c080954e405ee69e15ff8bace8f884bc7a128ee4f1082308d96a89683e044069e634c442c58777edcf5ff81b055f7dee9e438d2a04edcaf3407b9a21ae233d8a53b63e0a01a26a17de112d1693488231e468882f3d2404cd518dd512959bb6c853fc15ffff5aeefcda3cb1c1e584043ca9ca2e0d353c28b713b5f26cff186ec3ca3731c091470fc10716bef55964b16e075a54e7a02618a623b105b23c9ff0fa645a353ed0af19a714defaa06e327a78d976dd10d1591ba7cffb5613195ea30287626fd1a0d1138e7f12d41a7f4d2c6280b670f745dac73eb71ba9c8cb8082ea5dd4707e6ff25b92fcec61b018cd7042f5baf0e73db0f237ccb98e0cdebe6f5e6b09ebe22343288d83f5680bb46fb6cff61ba2b3a296396db7215176bfa06c1dd3b7413907d993a99906c5d7d34337d9a13cf66110868d2ae14b693e6d13b1327c13352a7c0ac5578cf7577694b7659920061c48ba474bab006bb1eefc031f76cfa9a0a490ef3fb3e260be30433a2c69354f5441448201d4aa2255af07ba5cedf5bbb2b51352be60ec1279f24dbeb14ca56c0fc27a085575348c30711304b90a32b33c65cc166b018567fd63d735599f9d6328996764179204bdd964258bedf97eb9158f0db813082d5da92ca7f4490127515897c09feef9f66ba0bbd464a5298e3fc5dcda7d582b354602ffcc00581d30c7c67e397527b0a768cd79d2004af0b4778be5bc85b8e669ccac5e0386f0c17de56120a8fe5dee11c522a307a25ebe6521ce26a83bdf7c55be7f08021be002fd502b5ac6a39dac36f45f3335f47932fd81e5dbb6a8190823fead2ae431f5583027be0c9469f6f03d523ac360f60e251ab5545ca6a1e560aa8c1899e680bf99885d8d92adb4f8191e6cc9fd3483a4139efa921ac8bc6fd034a23d5a0f85a9fb3183e6b7a3dd45ffdc863428168b480402e4771065e41f348762a2c4b996359e73bae37989d0e3bc8f5a7993fe8efdac9bb26227f35661f1cfb67fbfe829c897c4acc74acb357026be20c9a84415b714395811eaded060f510b561f91f85d3ad83e3276603f2247bdc3bf83e9fbdfbbc776605962e521c3b8fa1093bac4c78236691885c3ed82c87e2c0dfc6bca6887823ecb602f1bb8ddd01e6e0a2f03304de75d5191401707a9697fe864a8884053ed66dcf9a4c2236999997a47701a6366eecee68238ba9dfe6c1b10a8be9548f61611c09e24fbdf779e5a55def3316c50441bd69f6f3e00e9d81fb02d83a539e9350ca96956c415e911fe4439c416b5c454f945ba2a155e6511c9ee0ab6ec0b8260f66ad62c16835d2f634fdc9df7b25680a1f2c3157b08f1f9f39509fc8d90c0547145f7369c984c61d4e8bbccd2bf732fceff3a7a9f42b0b142466867a4517be527761da9d8a965c3938131766f5625d81481b8cf234469482412674fed98f0560c049f37c6ef4aae2da9ecf73f95c981fa0ff6dfb45e521f968052ec79946f6dd7c21951552e15ae48bec87bb06a7b0c97c8477a1dfb48449a1a1b406955d931e3ab2f391599bafdc9afe534ae1a236059dec081074d3dd02661176774b96eae678d425a8439049b36e0f0d12d9150d47c33cb1e0adab093f0849649191d52b260fe41232d35c645c000405f31a559ce47c245d3809ed95867f187890ba9e5ac73570124aba5e094fc9c8c5dc6418e94dcd7342ccb859722430f75dbfeda13f1d5e7cd3d23d1039acb8d3362088739563d5a60c2861e3a332e64bbf40723e962d8e0abb6319c55fad527f750c23404841382e05b8e28973e36e6029a2affa6541f85980701169cdf62505e00a347703c0433ad3c45f2a83045c6d9d5d71a6f84a82c8f2c35c37b5d87927ee588f300aa2a4c6edcb86799f7aae34309d731ae108db66634701d5c439aa9ac139da42e07645a0b5e6b6d578ebd5d89e11469d1a9c0b331b5b2daf627f0ba1bdc2f06ffd7b6ed413fdd4cb72099235ccb49b5139fafec52d6c6e8aacef1faa399895704a013f23e582ac69f463e34b8d8af9582c09b31671806fa3862c2af6191ec6298b482f58fbbb29a11fba5a55b2196cc67a0557afc3ffc3313e18821f2b7485f2e3fd86556fb3e1da9135ae900d89bf1bc35ffa6a134d86f3028776828d2b9db78e2b8931ab11496ae1fd8efdee36c44a50afee9bf06eedb480a7e0373fa5c71704846e2ab130ff31090647c5ceb91739bf171fb7a49c482648d290183bc955a4a3e83e2a71e7ee674bd93effa2336f4d8382047f647862e2b2d78dc59b26ffd09c29236758988d965705601e999ac9dfa3a1c0391d24db60b75289a44c976ddebdba9b782e60404fa9cb8539695609e64c799d04ea65de2eb0fef51af0d25c4b1ab57e75660d21f2d34e91d3b1cff5288e85b333b53f1d5c468e6236966e2c2f5ec9f6bc27e5534da5ed3ea06e65b5b00f031d54003f4c73548eca68688b2f790d3d42089070abcc714661e7b0bc4ab018f3e19988431046369239b38327df5b00408458a31c3b1b7a819fee1247caf77ec39b9b7b666f53b9abc553da524ead981e223067a8c760d9b09f3ef62d470735630041fcee4039ddc1d97de6562dac9d94be2cdf057feb592e1d4f59ad08ebd131f2fa8e8bac4d159e59b40cc574b88ebcb109384602d5c52038b6674a2064129483a3d86a015b8d7d0b4029cd11cd9fe7db93fd7d4f5e6514c02701bd3e662940828e3c8b97f52722f27392f8871389f1408acf70de7da95e3326b863ed3d54f61be2bd68e2e52b7de9520d8b12d69fd42669196b1496471b660048dc0c46cc69fc11175595b6ccb18ffb635fd4b32c7dd83051d50bbe7ce7c3971c03dd68730b037075fffb58bc90f19b80462c95b15816c61b35ac05a91addc73d7c800b65b357f5d812c0c248a478b80dd8715540ae1c9757a4078f0d1401776d4619c9b3efcee5302ada05785cd0cab37c1f2a04bcb970f5dec9d26f8b51e607a572f00b97fed17a66f98273cfb1ab7bf66596175a629d0cd7f68e4aa39b47ead110c5677d57a17726fb827da658785b2f6225e980be34d3d89b0a62d442d9fa4107d1e4bf9e7f2f46a39731f52cfbf05761e14e676af4752af3e3cf662295a602460a958d71a402325391553623", @nested={0x4, 0x5}]}, @nested={0xec, 0x12a, 0x0, 0x1, [@generic="d1bfb298b6bac90168e22b7257a43f8151ebf8526c45212cc982c3953004bbbd7202b369794ff81df281697d96f1cea64d64a26a756ebb1b658bcc053991f3930c5173356aacdfd45b707edb2c5f66b08745e71ec38980595d031dd7a3185c1dd87c69039cbf2607f6f75f56dbf74b4cda438086fe2c381de55542b306240064a93fd50ee600723190efa2eeb682730412bec3f245eee45ab2f6de037b2bb03910f7769a397ea8e38aaebe4a3f87d5331ce54fa5a3379889e9c2bb22141279cb3b52293027eda465a3ec7e85af32fdc64e4586a8f84232134061f88021780881281a2e5a1bbad4c6"]}]}]}, 0x1328}, 0x1, 0x0, 0x0, 0x44}, 0x20000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) getsockopt$auto(0x3, 0x200000000001, 0x19, 0x0, 0x0) close_range$auto(0x2, 0x8000, 0x0) 2m41.262032018s ago: executing program 3 (id=3246): unshare$auto(0x4000284) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/asound/card1/pcm1p/sub3/hw_params\x00', 0x1900, 0x0) pread64$auto(r1, 0x0, 0xe, 0x100000000007) read$auto(r0, 0x0, 0xe8) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={"2252f65ca1b92f72a92538725b0694531629e8c3e6ba91c62e2e9d42cf4aef15", 0x4, 0x3, 0x8000, 0x6, 0xff}) read$auto_mousedev_fops_mousedev(0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x1d, 0x6, 0x84) migrate_pages$auto(0x0, 0x99, 0x0, &(0x7f00000001c0)=0x7b) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8f3b7a51b80ebd01, 0x0) write$auto_proc_reg_file_ops_compat_inode(r3, 0x0, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)) ioctl$auto_SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f00000001c0)) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) close_range$auto(r0, r2, 0x0) socket(0x10, 0x2, 0x4) socket(0x10, 0x3, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop0/alignment_offset\x00', 0x183142, 0x0) mmap$auto(0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x400eb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0xfffffffffffffffd, 0x4000000000df, 0x15, 0x402, 0x1) bpf$auto(0x5, 0x0, 0x4a) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$auto(r3, 0xb, 0x0) read$auto(0x3, 0x0, 0x1f40) symlink$auto(&(0x7f00000000c0)='./file0\x00', &(0x7f0000001100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000380)={0x400, 0x1, 0x2d}, 0x18) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/block/sr0/rqos/wbt/enabled\x00', 0x80, 0x0) 2m40.636954366s ago: executing program 0 (id=3247): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/vhci_hcd.14/usb38/38-0:1.0/usb38-port4/power/runtime_active_time\x00', 0x18d03, 0x0) read$auto(r0, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/lacp_rate\x00', 0x34e6) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000001c0)=0x6) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x3, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x4, 0x2003f4, 0x15) madvise$auto(0x0, 0x200007, 0x19) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000005800), r3) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(0xffffffffffffffff, &(0x7f0000006940)={0x0, 0x0, &(0x7f0000006900)={&(0x7f0000001640)=ANY=[@ANYRESHEX=r0, @ANYRES16=r4, @ANYRES32=r3], 0x124c}, 0x1, 0x0, 0x0, 0x24000000}, 0x24004840) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x7f, 0x1, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="180000032d588cd673e67dcf90f3a03a5cc98e9a968c57aaf24210c2f8d20c6052cf84e9ca298db1994ff9980a34c109b8ba3d58d74b4e525e42124c745a", @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf250900000004000380"], 0x18}, 0x1, 0x0, 0x0, 0x40080}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='Z'], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x9}, 0x3, 0x0) mmap$auto(0xfffffffffffffffd, 0x2020009, 0x8000000003, 0xeb4, 0xffffffffffffffff, 0x8000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x4, 0x20009, 0x4000000000df, 0xeb3, r3, 0x8000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x111081, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xaa102, 0x0) write$auto(r5, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00x \xec(\x1d\x98\xe9\xc4\xe8\xfc@6=\xab\xf4\x89\x01\x93\xdc\x19\xffv\'\xa1\xd5\x14\x06S\xae\xadB}\xdf]\x99\xc9\x9f4\xbb\xc5\x81\x9d\x8ak\xdeB\xcbd\xd3\x05\xe4P\x84\xcb\xb8#\x13\nYU\'\x95R\xc8\x9d\xb7*\xe0.\xd2\xdf\x1b\x88D\x8c{k\xcec\xe1\xa2j\xec\xc9\xd2\x98\x94I\x102h\x06\x8c\xa2\xc8\x8a7\xb7t', 0x7ef) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0) socket(0xa, 0x1, 0x100) 2m36.864479094s ago: executing program 3 (id=3248): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) select$auto(0x3, 0x0, 0x0, 0x0, 0x0) syslog$auto(0x2, 0x0, 0xcf) mmap$auto(0x0, 0x10001, 0x80003, 0x10011, 0xffffffffffffffff, 0x8000) write$auto(0xca, &(0x7f0000000040)='\x04>2\x0f\x00\x00\x96\x18am\xea\xf4\x1b\xf8', 0x7e) close_range$auto(0x2, 0x8, 0x0) shmget$auto(0x400, 0x10563, 0x568c12f2) sendmsg$auto_NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x24048800) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0xffffffffffffffff, 0x400008, 0xe0, 0x9b72, 0xffffffffffffffff, 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x2020009, 0x3, 0x20000000eb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, 0x38) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0xfbe1) write$auto_tomoyo_operations_securityfs_if(0xffffffffffffffff, &(0x7f0000001300), 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) r1 = socket(0x15, 0x5, 0x0) setsockopt$auto(r1, 0x114, 0x8, 0x0, 0x4) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) shmdt$auto(&(0x7f0000000000)=':-h!/-^@(\']@%]/\x00') 2m24.840519213s ago: executing program 36 (id=3247): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/vhci_hcd.14/usb38/38-0:1.0/usb38-port4/power/runtime_active_time\x00', 0x18d03, 0x0) read$auto(r0, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/lacp_rate\x00', 0x34e6) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000001c0)=0x6) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x3, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x4, 0x2003f4, 0x15) madvise$auto(0x0, 0x200007, 0x19) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000005800), r3) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(0xffffffffffffffff, &(0x7f0000006940)={0x0, 0x0, &(0x7f0000006900)={&(0x7f0000001640)=ANY=[@ANYRESHEX=r0, @ANYRES16=r4, @ANYRES32=r3], 0x124c}, 0x1, 0x0, 0x0, 0x24000000}, 0x24004840) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x7f, 0x1, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="180000032d588cd673e67dcf90f3a03a5cc98e9a968c57aaf24210c2f8d20c6052cf84e9ca298db1994ff9980a34c109b8ba3d58d74b4e525e42124c745a", @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf250900000004000380"], 0x18}, 0x1, 0x0, 0x0, 0x40080}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='Z'], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x9}, 0x3, 0x0) mmap$auto(0xfffffffffffffffd, 0x2020009, 0x8000000003, 0xeb4, 0xffffffffffffffff, 0x8000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x4, 0x20009, 0x4000000000df, 0xeb3, r3, 0x8000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x111081, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xaa102, 0x0) write$auto(r5, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00x \xec(\x1d\x98\xe9\xc4\xe8\xfc@6=\xab\xf4\x89\x01\x93\xdc\x19\xffv\'\xa1\xd5\x14\x06S\xae\xadB}\xdf]\x99\xc9\x9f4\xbb\xc5\x81\x9d\x8ak\xdeB\xcbd\xd3\x05\xe4P\x84\xcb\xb8#\x13\nYU\'\x95R\xc8\x9d\xb7*\xe0.\xd2\xdf\x1b\x88D\x8c{k\xcec\xe1\xa2j\xec\xc9\xd2\x98\x94I\x102h\x06\x8c\xa2\xc8\x8a7\xb7t', 0x7ef) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0) socket(0xa, 0x1, 0x100) 2m20.795465392s ago: executing program 37 (id=3248): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) select$auto(0x3, 0x0, 0x0, 0x0, 0x0) syslog$auto(0x2, 0x0, 0xcf) mmap$auto(0x0, 0x10001, 0x80003, 0x10011, 0xffffffffffffffff, 0x8000) write$auto(0xca, &(0x7f0000000040)='\x04>2\x0f\x00\x00\x96\x18am\xea\xf4\x1b\xf8', 0x7e) close_range$auto(0x2, 0x8, 0x0) shmget$auto(0x400, 0x10563, 0x568c12f2) sendmsg$auto_NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x24048800) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0xffffffffffffffff, 0x400008, 0xe0, 0x9b72, 0xffffffffffffffff, 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x2020009, 0x3, 0x20000000eb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, 0x38) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0xfbe1) write$auto_tomoyo_operations_securityfs_if(0xffffffffffffffff, &(0x7f0000001300), 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) r1 = socket(0x15, 0x5, 0x0) setsockopt$auto(r1, 0x114, 0x8, 0x0, 0x4) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) shmdt$auto(&(0x7f0000000000)=':-h!/-^@(\']@%]/\x00') 2m10.932102123s ago: executing program 9 (id=3250): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) mknod$auto(&(0x7f0000000540)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_', 0x1081, 0x200005) acct$auto(&(0x7f0000000240)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e') open(&(0x7f0000000000)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_\x00', 0x100, 0x6) mmap$auto(0x0, 0x400008, 0xe3, 0xbb72, 0x2, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$auto(0x3, 0x0, 0x100082) 1m52.830002029s ago: executing program 9 (id=3250): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) mknod$auto(&(0x7f0000000540)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_', 0x1081, 0x200005) acct$auto(&(0x7f0000000240)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e') open(&(0x7f0000000000)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_\x00', 0x100, 0x6) mmap$auto(0x0, 0x400008, 0xe3, 0xbb72, 0x2, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$auto(0x3, 0x0, 0x100082) 1m7.754765965s ago: executing program 6 (id=3242): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000003}, 0x5, 0x4, 0x8004, 0x2e) (async) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) (async) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(0x3, 0x400, 0x1) open(&(0x7f0000000040)='./file0\x00', 0x20042, 0x50) fcntl$auto(0x3, 0x401, 0x3) (async) r1 = socket(0x1e, 0x6, 0x0) (async) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/midi2\x00', 0x80102, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5,\xcc\xfa`\xfa\x90\xf0C\xdc\xbebBW\x8a\x95\xf4\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x9ef\x19R\xff\xd2\xd8\x98\xa8\x17\xcb\x84\xe8\xfb\x00`\xc2\xce~U\xca\\\xc1\xb7\xf1\n\xb9\xbfk\x1e\xdb\xed\x81{\x1f\x18j\x16\rk\x0eO\xe3\xa78&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3\x846&\x1a\xbb\x9c:e\x9c\x18\x11\xf0\x8eQ\xd8\x8a3^?\x13\x00\xcbx\xb2\x18e\x95$\x9d\x804', 0x100000a3d9) (async) sendmsg$auto_HSR_C_GET_NODE_STATUS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x8000000007, 0x11, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20008, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r3, 0x0, 0xfff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/loop15/queue/discard_granularity\x00', 0x8000, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000100), r4) (async) sendmsg$auto_SMC_PNETID_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYBLOB="638428bd7000fedbdf2559374902000003"], 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x1c054) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/002/001\x00', 0x10040, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) (async) r5 = socket(0x10, 0x2, 0x4) write$auto(r5, &(0x7f0000000000)='-\x00', 0x2fb) madvise$auto(0x0, 0xffffffffffff0009, 0x13) 58.961244514s ago: executing program 8 (id=3249): openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ptrace$auto_PTRACE_GETSIGMASK(0x420a, 0x0, 0x6e3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptyzf\x00', 0x2200, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) io_setup$auto(0x7ffe, 0x0) io_setup$auto(0x7ffe, &(0x7f0000000000)) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/pci/rescan\x00', 0x20681, 0x0) syz_genetlink_get_family_id$auto_smc_gen_netlink(0x0, r2) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000200)='5', 0x1) capset$auto(&(0x7f0000000340)={0x19980330}, 0x0) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, &(0x7f0000000200)={[0xd8, 0x4, 0x2, 0xb, 0x1, 0x4, 0x0, 0x7fff, 0xa, 0x193, 0xfffffffffffffff9, 0x3, 0x5e4, 0x1000, 0x1, 0x1]}, &(0x7f0000000380)={[0x8000000000000001, 0x5, 0x1, 0x10001, 0xe, 0xf, 0x5, 0x3, 0x59fc8000, 0x200006, 0x8000000000000000, 0x3, 0x800, 0x7, 0x1ff, 0x5]}, &(0x7f0000000280)={0x6, 0xc8}) io_uring_register$auto_IORING_UNREGISTER_PERSONALITY(r0, 0xa, &(0x7f0000000180)="221aa2a2e1a47c16e9b935b36eb66fa98ca6d90b78e1fc1799ad1e15807c54f58fa1ee6c6927048cbda12b4e1ad0336a4b88db6e5c7e4fedd6852f33d0b576", 0x2f) socket(0xa, 0x5, 0x94) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dri/card0\x00', 0x6c800, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) 52.661962559s ago: executing program 6 (id=3242): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000003}, 0x5, 0x4, 0x8004, 0x2e) (async) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) (async) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(0x3, 0x400, 0x1) open(&(0x7f0000000040)='./file0\x00', 0x20042, 0x50) fcntl$auto(0x3, 0x401, 0x3) (async) r1 = socket(0x1e, 0x6, 0x0) (async) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/midi2\x00', 0x80102, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5,\xcc\xfa`\xfa\x90\xf0C\xdc\xbebBW\x8a\x95\xf4\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x9ef\x19R\xff\xd2\xd8\x98\xa8\x17\xcb\x84\xe8\xfb\x00`\xc2\xce~U\xca\\\xc1\xb7\xf1\n\xb9\xbfk\x1e\xdb\xed\x81{\x1f\x18j\x16\rk\x0eO\xe3\xa78&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3\x846&\x1a\xbb\x9c:e\x9c\x18\x11\xf0\x8eQ\xd8\x8a3^?\x13\x00\xcbx\xb2\x18e\x95$\x9d\x804', 0x100000a3d9) (async) sendmsg$auto_HSR_C_GET_NODE_STATUS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x8000000007, 0x11, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20008, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r3, 0x0, 0xfff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/loop15/queue/discard_granularity\x00', 0x8000, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000100), r4) (async) sendmsg$auto_SMC_PNETID_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYBLOB="638428bd7000fedbdf2559374902000003"], 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x1c054) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/002/001\x00', 0x10040, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) (async) r5 = socket(0x10, 0x2, 0x4) write$auto(r5, &(0x7f0000000000)='-\x00', 0x2fb) madvise$auto(0x0, 0xffffffffffff0009, 0x13) 46.358602014s ago: executing program 8 (id=3249): openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ptrace$auto_PTRACE_GETSIGMASK(0x420a, 0x0, 0x6e3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptyzf\x00', 0x2200, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) io_setup$auto(0x7ffe, 0x0) io_setup$auto(0x7ffe, &(0x7f0000000000)) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/pci/rescan\x00', 0x20681, 0x0) syz_genetlink_get_family_id$auto_smc_gen_netlink(0x0, r2) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000200)='5', 0x1) capset$auto(&(0x7f0000000340)={0x19980330}, 0x0) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, &(0x7f0000000200)={[0xd8, 0x4, 0x2, 0xb, 0x1, 0x4, 0x0, 0x7fff, 0xa, 0x193, 0xfffffffffffffff9, 0x3, 0x5e4, 0x1000, 0x1, 0x1]}, &(0x7f0000000380)={[0x8000000000000001, 0x5, 0x1, 0x10001, 0xe, 0xf, 0x5, 0x3, 0x59fc8000, 0x200006, 0x8000000000000000, 0x3, 0x800, 0x7, 0x1ff, 0x5]}, &(0x7f0000000280)={0x6, 0xc8}) io_uring_register$auto_IORING_UNREGISTER_PERSONALITY(r0, 0xa, &(0x7f0000000180)="221aa2a2e1a47c16e9b935b36eb66fa98ca6d90b78e1fc1799ad1e15807c54f58fa1ee6c6927048cbda12b4e1ad0336a4b88db6e5c7e4fedd6852f33d0b576", 0x2f) socket(0xa, 0x5, 0x94) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dri/card0\x00', 0x6c800, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) 39.783216928s ago: executing program 6 (id=3242): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000003}, 0x5, 0x4, 0x8004, 0x2e) (async) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) (async) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(0x3, 0x400, 0x1) open(&(0x7f0000000040)='./file0\x00', 0x20042, 0x50) fcntl$auto(0x3, 0x401, 0x3) (async) r1 = socket(0x1e, 0x6, 0x0) (async) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/midi2\x00', 0x80102, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5,\xcc\xfa`\xfa\x90\xf0C\xdc\xbebBW\x8a\x95\xf4\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x9ef\x19R\xff\xd2\xd8\x98\xa8\x17\xcb\x84\xe8\xfb\x00`\xc2\xce~U\xca\\\xc1\xb7\xf1\n\xb9\xbfk\x1e\xdb\xed\x81{\x1f\x18j\x16\rk\x0eO\xe3\xa78&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3\x846&\x1a\xbb\x9c:e\x9c\x18\x11\xf0\x8eQ\xd8\x8a3^?\x13\x00\xcbx\xb2\x18e\x95$\x9d\x804', 0x100000a3d9) (async) sendmsg$auto_HSR_C_GET_NODE_STATUS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x8000000007, 0x11, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20008, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r3, 0x0, 0xfff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/loop15/queue/discard_granularity\x00', 0x8000, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000100), r4) (async) sendmsg$auto_SMC_PNETID_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYBLOB="638428bd7000fedbdf2559374902000003"], 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x1c054) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/002/001\x00', 0x10040, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) (async) r5 = socket(0x10, 0x2, 0x4) write$auto(r5, &(0x7f0000000000)='-\x00', 0x2fb) madvise$auto(0x0, 0xffffffffffff0009, 0x13) 26.482069344s ago: executing program 7 (id=3244): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1_to_bond\x00', 0x0}) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, r1, 0xb31c3be54ec352e6, 0x70bd25, 0x25dfdbff, {}, [@NETDEV_A_QUEUE_IFINDEX={0x0, 0x2, r2}, @NETDEV_A_QUEUE_ID={0x0, 0x1, 0x10}, @NETDEV_A_QUEUE_ID={0x8}]}, 0xfffffffffffffffc}, 0x1, 0x0, 0x0, 0x4000}, 0x810) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r5 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cec24\x00', 0x400, 0x0) ioctl$auto_CEC_S_MODE(r5, 0x40046109, &(0x7f0000002c40)=0x40) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x244200}, 0xc, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00022dbd7000fbdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYRES16=r0], 0x24}, 0x1, 0x0, 0x0, 0x4050}, 0x20008040) select$auto(0x3, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_AUTHENTICATE(r6, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4004000}, 0x24048800) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x100000000000028, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) r7 = io_uring_setup$auto(0x1, 0x0) io_uring_register$auto_IORING_REGISTER_FILE_ALLOC_RANGE(r7, 0x19, &(0x7f0000000000), 0x2) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000340), 0x200000, 0x0) read$auto_drm_debugfs_entry_fops_drm_debugfs(r7, &(0x7f0000000300)=""/59, 0x3b) close_range$auto(0x2, 0x8, 0x0) shmat$auto(0x0, &(0x7f0000000140)='\b\x00\xfa\x02\xa5\xb1u\xd1\xe0\x0e\x14\b\x00c\x18\x15l\x92-\x81\xf3\x8f\x17\xa8\x01\xa5D\xf0\xd9\x89s\xe3\xf6\xa9\xd6\xb3\xbei/\xc4\x94\xff\xed\x88F\xe96x\x01,\xa0\xe1\xf3\x89\xdb\x92\x1d\xe0a\x03\x8c\xe6\xb9\x14\xb7\x9bag\xe3\x80\xc4\xf9\x10\xc9\xccJ\xb7\xbe\\\xe4\xc4\x12E\xc7\x06\xb7\x1f\x16\xba\x9f\xf6Onb\xa3\x94\x155\xe8\xc3P\xf8\xe8\x0f\xaa', 0xfffffffa) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0xc76, 0x8000) shmdt$auto(&(0x7f0000000000)=':-h!/-^@(\']@%]/\x00') sendmsg$auto_NLBL_CALIPSO_C_REMOVE(r6, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022dbd7000ffdbdf25020000000800010000000000080002000090000008000200014000000800b50c0100020000f6"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x20000014) mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) 26.410502633s ago: executing program 6 (id=3242): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000003}, 0x5, 0x4, 0x8004, 0x2e) (async) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) (async) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(0x3, 0x400, 0x1) open(&(0x7f0000000040)='./file0\x00', 0x20042, 0x50) fcntl$auto(0x3, 0x401, 0x3) (async) r1 = socket(0x1e, 0x6, 0x0) (async) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/midi2\x00', 0x80102, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5,\xcc\xfa`\xfa\x90\xf0C\xdc\xbebBW\x8a\x95\xf4\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x9ef\x19R\xff\xd2\xd8\x98\xa8\x17\xcb\x84\xe8\xfb\x00`\xc2\xce~U\xca\\\xc1\xb7\xf1\n\xb9\xbfk\x1e\xdb\xed\x81{\x1f\x18j\x16\rk\x0eO\xe3\xa78&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3\x846&\x1a\xbb\x9c:e\x9c\x18\x11\xf0\x8eQ\xd8\x8a3^?\x13\x00\xcbx\xb2\x18e\x95$\x9d\x804', 0x100000a3d9) (async) sendmsg$auto_HSR_C_GET_NODE_STATUS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x8000000007, 0x11, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20008, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r3, 0x0, 0xfff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/loop15/queue/discard_granularity\x00', 0x8000, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000100), r4) (async) sendmsg$auto_SMC_PNETID_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYBLOB="638428bd7000fedbdf2559374902000003"], 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x1c054) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/002/001\x00', 0x10040, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) (async) r5 = socket(0x10, 0x2, 0x4) write$auto(r5, &(0x7f0000000000)='-\x00', 0x2fb) madvise$auto(0x0, 0xffffffffffff0009, 0x13) 13.700892229s ago: executing program 6 (id=3242): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000003}, 0x5, 0x4, 0x8004, 0x2e) (async) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) (async) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(0x3, 0x400, 0x1) open(&(0x7f0000000040)='./file0\x00', 0x20042, 0x50) fcntl$auto(0x3, 0x401, 0x3) (async) r1 = socket(0x1e, 0x6, 0x0) (async) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/midi2\x00', 0x80102, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5,\xcc\xfa`\xfa\x90\xf0C\xdc\xbebBW\x8a\x95\xf4\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x9ef\x19R\xff\xd2\xd8\x98\xa8\x17\xcb\x84\xe8\xfb\x00`\xc2\xce~U\xca\\\xc1\xb7\xf1\n\xb9\xbfk\x1e\xdb\xed\x81{\x1f\x18j\x16\rk\x0eO\xe3\xa78&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3\x846&\x1a\xbb\x9c:e\x9c\x18\x11\xf0\x8eQ\xd8\x8a3^?\x13\x00\xcbx\xb2\x18e\x95$\x9d\x804', 0x100000a3d9) (async) sendmsg$auto_HSR_C_GET_NODE_STATUS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x8000000007, 0x11, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20008, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r3, 0x0, 0xfff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/loop15/queue/discard_granularity\x00', 0x8000, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000100), r4) (async) sendmsg$auto_SMC_PNETID_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYBLOB="638428bd7000fedbdf2559374902000003"], 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x1c054) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/002/001\x00', 0x10040, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) (async) r5 = socket(0x10, 0x2, 0x4) write$auto(r5, &(0x7f0000000000)='-\x00', 0x2fb) madvise$auto(0x0, 0xffffffffffff0009, 0x13) 2.349797452s ago: executing program 7 (id=3244): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1_to_bond\x00', 0x0}) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, r1, 0xb31c3be54ec352e6, 0x70bd25, 0x25dfdbff, {}, [@NETDEV_A_QUEUE_IFINDEX={0x0, 0x2, r2}, @NETDEV_A_QUEUE_ID={0x0, 0x1, 0x10}, @NETDEV_A_QUEUE_ID={0x8}]}, 0xfffffffffffffffc}, 0x1, 0x0, 0x0, 0x4000}, 0x810) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r5 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cec24\x00', 0x400, 0x0) ioctl$auto_CEC_S_MODE(r5, 0x40046109, &(0x7f0000002c40)=0x40) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x244200}, 0xc, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00022dbd7000fbdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYRES16=r0], 0x24}, 0x1, 0x0, 0x0, 0x4050}, 0x20008040) select$auto(0x3, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_AUTHENTICATE(r6, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4004000}, 0x24048800) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x100000000000028, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) r7 = io_uring_setup$auto(0x1, 0x0) io_uring_register$auto_IORING_REGISTER_FILE_ALLOC_RANGE(r7, 0x19, &(0x7f0000000000), 0x2) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000340), 0x200000, 0x0) read$auto_drm_debugfs_entry_fops_drm_debugfs(r7, &(0x7f0000000300)=""/59, 0x3b) close_range$auto(0x2, 0x8, 0x0) shmat$auto(0x0, &(0x7f0000000140)='\b\x00\xfa\x02\xa5\xb1u\xd1\xe0\x0e\x14\b\x00c\x18\x15l\x92-\x81\xf3\x8f\x17\xa8\x01\xa5D\xf0\xd9\x89s\xe3\xf6\xa9\xd6\xb3\xbei/\xc4\x94\xff\xed\x88F\xe96x\x01,\xa0\xe1\xf3\x89\xdb\x92\x1d\xe0a\x03\x8c\xe6\xb9\x14\xb7\x9bag\xe3\x80\xc4\xf9\x10\xc9\xccJ\xb7\xbe\\\xe4\xc4\x12E\xc7\x06\xb7\x1f\x16\xba\x9f\xf6Onb\xa3\x94\x155\xe8\xc3P\xf8\xe8\x0f\xaa', 0xfffffffa) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0xc76, 0x8000) shmdt$auto(&(0x7f0000000000)=':-h!/-^@(\']@%]/\x00') sendmsg$auto_NLBL_CALIPSO_C_REMOVE(r6, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022dbd7000ffdbdf25020000000800010000000000080002000090000008000200014000000800b50c0100020000f6"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x20000014) mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) 0s ago: executing program 6 (id=3242): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000003}, 0x5, 0x4, 0x8004, 0x2e) (async) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) (async) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(0x3, 0x400, 0x1) open(&(0x7f0000000040)='./file0\x00', 0x20042, 0x50) fcntl$auto(0x3, 0x401, 0x3) (async) r1 = socket(0x1e, 0x6, 0x0) (async) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/midi2\x00', 0x80102, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5,\xcc\xfa`\xfa\x90\xf0C\xdc\xbebBW\x8a\x95\xf4\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x9ef\x19R\xff\xd2\xd8\x98\xa8\x17\xcb\x84\xe8\xfb\x00`\xc2\xce~U\xca\\\xc1\xb7\xf1\n\xb9\xbfk\x1e\xdb\xed\x81{\x1f\x18j\x16\rk\x0eO\xe3\xa78&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3\x846&\x1a\xbb\x9c:e\x9c\x18\x11\xf0\x8eQ\xd8\x8a3^?\x13\x00\xcbx\xb2\x18e\x95$\x9d\x804', 0x100000a3d9) (async) sendmsg$auto_HSR_C_GET_NODE_STATUS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x8000000007, 0x11, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20008, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r3, 0x0, 0xfff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/loop15/queue/discard_granularity\x00', 0x8000, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000100), r4) (async) sendmsg$auto_SMC_PNETID_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYBLOB="638428bd7000fedbdf2559374902000003"], 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x1c054) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/002/001\x00', 0x10040, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) (async) r5 = socket(0x10, 0x2, 0x4) write$auto(r5, &(0x7f0000000000)='-\x00', 0x2fb) madvise$auto(0x0, 0xffffffffffff0009, 0x13) kernel console output (not intermixed with test programs): Program Type: 0 inactive [ 1005.797592][T20520] vivid-003: RDS PS Name: inactive [ 1005.802878][T20520] vivid-003: RDS Radio Text: inactive [ 1005.888502][T20520] vivid-003: RDS Traffic Announcement: false inactive [ 1005.895452][T20520] vivid-003: RDS Traffic Program: false inactive [ 1005.947457][T20520] vivid-003: RDS Music: false inactive [ 1005.987448][T20520] vivid-003: ================== END STATUS ================== [ 1006.283543][T20531] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x2eb pfn:0x78000 [ 1006.303823][T20531] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1006.345348][T20531] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 1006.387427][T20531] raw: 00000000000002eb 0000000000000000 00000001ffffffff 0000000000000000 [ 1006.411837][T12204] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 1006.456204][T20531] page dumped because: unmovable page [ 1006.516274][T20531] page_owner tracks the page as allocated [ 1006.613705][T20531] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x44dc0(GFP_KERNEL|__GFP_ZERO|__GFP_RETRY_MAYFAIL|__GFP_COMP), pid 11221, tgid 11219 (syz.2.913), ts 422967217383, free_ts 421807234322 [ 1006.633473][ C1] vkms_vblank_simulate: vblank timer overrun [ 1006.752487][T20531] post_alloc_hook+0x1c0/0x230 [ 1006.778996][T20531] get_page_from_freelist+0x1321/0x3890 [ 1006.784656][T20531] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 1006.827436][T20531] __alloc_pages_noprof+0xb/0x1b0 [ 1006.861552][T20531] __rb_allocate_pages+0x650/0xeb0 [ 1006.867276][T20531] ring_buffer_resize+0x71a/0x15c0 [ 1006.877387][T20531] __tracing_resize_ring_buffer.part.0+0x52/0x1f0 [ 1006.883903][T20531] tracing_update_buffers+0x102/0x130 [ 1006.958418][T20531] ftrace_event_write+0x14a/0x290 [ 1006.964218][T20531] vfs_write+0x29d/0x1150 [ 1006.997380][T20531] ksys_write+0x12a/0x250 [ 1007.002243][T20531] do_syscall_64+0xcd/0x490 [ 1007.006784][T20531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1007.087406][T20531] page last free pid 36 tgid 36 stack trace: [ 1007.093730][T20531] __free_frozen_pages+0x7fe/0x1180 [ 1007.136136][T20531] __folio_put+0x329/0x450 [ 1007.177394][T20531] gup_put_folio+0x1cb/0x260 [ 1007.196943][T20531] unpin_user_page+0xce/0x1e0 [ 1007.240038][T20531] io_release_ubuf+0xb3/0x110 [ 1007.244789][T20531] io_free_rsrc_node+0x278/0x690 [ 1007.267588][T20531] io_sqe_buffers_unregister+0x293/0x350 [ 1007.273554][T20531] io_ring_exit_work+0x7aa/0x1120 [ 1007.320787][T20531] process_one_work+0x9cc/0x1b70 [ 1007.377830][T20531] worker_thread+0x6c8/0xf10 [ 1007.389947][T20531] kthread+0x3c5/0x780 [ 1007.396003][T20531] ret_from_fork+0x5d4/0x6f0 [ 1007.410794][T20531] ret_from_fork_asm+0x1a/0x30 [ 1008.249892][T20561] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2966'. [ 1008.262679][T20561] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2966'. [ 1008.275751][T20561] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2966'. [ 1008.284983][T20561] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2966'. [ 1008.305560][T20561] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2966'. [ 1008.366424][T20561] netlink: 294 bytes leftover after parsing attributes in process `syz.5.2966'. [ 1008.439355][T20561] openvswitch: netlink: Message has 20 unknown bytes. [ 1010.440443][T20590] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2973'. [ 1010.532524][T20590] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1010.567421][T20590] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1010.618347][T20590] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1010.657982][T20571] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2970'. [ 1010.674167][T20590] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1010.753028][T20571] ipvlan0: entered allmulticast mode [ 1010.758769][T20571] veth0_vlan: entered allmulticast mode [ 1011.689038][ T30] audit: type=1800 audit(6045848284.514:38): pid=20614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2977" name="SYSV00000400" dev="tmpfs" ino=0 res=0 errno=0 [ 1012.464475][ T30] audit: type=1800 audit(6045848285.284:39): pid=20637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2980" name="SYSV00000400" dev="tmpfs" ino=0 res=0 errno=0 [ 1013.701337][T20644] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2985'. [ 1013.764280][T20644] ipvlan0: entered allmulticast mode [ 1013.798123][T20644] veth0_vlan: entered allmulticast mode [ 1014.116793][T20666] netlink: 330 bytes leftover after parsing attributes in process `syz.0.2989'. [ 1014.155014][T20667] netlink: 330 bytes leftover after parsing attributes in process `syz.5.2988'. [ 1014.234523][T20666] veth0_macvtap: left promiscuous mode [ 1015.408922][ T30] audit: type=1800 audit(6045848288.234:40): pid=20682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2991" name="SYSV00000400" dev="tmpfs" ino=0 res=0 errno=0 [ 1015.636523][T20697] netlink: 206 bytes leftover after parsing attributes in process `syz.1.2994'. [ 1015.775061][T20701] netlink: 206 bytes leftover after parsing attributes in process `syz.3.2995'. [ 1016.301449][T20711] FAULT_INJECTION: forcing a failure. [ 1016.301449][T20711] name failslab, interval 1, probability 0, space 0, times 0 [ 1016.324453][T20711] CPU: 0 UID: 0 PID: 20711 Comm: syz.1.2996 Tainted: G U 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 1016.324490][T20711] Tainted: [U]=USER [ 1016.324499][T20711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1016.324513][T20711] Call Trace: [ 1016.324521][T20711] [ 1016.324530][T20711] dump_stack_lvl+0x16c/0x1f0 [ 1016.324569][T20711] should_fail_ex+0x512/0x640 [ 1016.324600][T20711] ? __kmalloc_noprof+0xbf/0x510 [ 1016.324633][T20711] ? lsm_blob_alloc+0x68/0x90 [ 1016.324654][T20711] should_failslab+0xc2/0x120 [ 1016.324669][T20711] __kmalloc_noprof+0xd2/0x510 [ 1016.324694][T20711] lsm_blob_alloc+0x68/0x90 [ 1016.324715][T20711] security_sk_alloc+0x30/0x270 [ 1016.324732][T20711] sk_prot_alloc+0xfb/0x2a0 [ 1016.324750][T20711] sk_alloc+0x36/0xc20 [ 1016.324771][T20711] unix_create1+0xa6/0x700 [ 1016.324791][T20711] unix_create+0x10e/0x1d0 [ 1016.324810][T20711] __sock_create+0x338/0x8d0 [ 1016.324830][T20711] __sys_socketpair+0x1d8/0x5a0 [ 1016.324850][T20711] ? __pfx___sys_socketpair+0x10/0x10 [ 1016.324870][T20711] ? __pfx_ksys_write+0x10/0x10 [ 1016.324894][T20711] __x64_sys_socketpair+0x96/0x100 [ 1016.324912][T20711] ? lockdep_hardirqs_on+0x7c/0x110 [ 1016.324933][T20711] do_syscall_64+0xcd/0x490 [ 1016.324957][T20711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.324972][T20711] RIP: 0033:0x7f5d48b8e929 [ 1016.324985][T20711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1016.324999][T20711] RSP: 002b:00007f5d4994b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1016.325014][T20711] RAX: ffffffffffffffda RBX: 00007f5d48db6160 RCX: 00007f5d48b8e929 [ 1016.325024][T20711] RDX: 8000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 1016.325033][T20711] RBP: 00007f5d4994b090 R08: 0000000000000000 R09: 0000000000000000 [ 1016.325042][T20711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1016.325050][T20711] R13: 0000000000000000 R14: 00007f5d48db6160 R15: 00007fff001b7b38 [ 1016.325069][T20711] [ 1016.541581][T20711] netlink: 330 bytes leftover after parsing attributes in process `syz.1.2996'. [ 1017.242555][T20723] netlink: 330 bytes leftover after parsing attributes in process `syz.0.3001'. [ 1018.746339][T20764] netlink: 330 bytes leftover after parsing attributes in process `syz.1.3009'. [ 1019.260264][T20743] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1019.277632][T20743] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1019.295304][T20743] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1019.308345][T20743] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1019.432387][T20743] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1019.457761][T20743] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1019.502219][T20743] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1019.520631][T20743] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1019.593559][T20743] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1019.618328][T20743] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1019.647905][T20743] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1019.709136][T20743] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1019.824847][T20776] netlink: 330 bytes leftover after parsing attributes in process `syz.5.3011'. [ 1020.312399][T20779] FAULT_INJECTION: forcing a failure. [ 1020.312399][T20779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1020.367582][T19451] Bluetooth: hci1: command 0x0406 tx timeout [ 1020.397532][T20779] CPU: 1 UID: 0 PID: 20779 Comm: syz.1.3013 Tainted: G U 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 1020.397572][T20779] Tainted: [U]=USER [ 1020.397580][T20779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1020.397594][T20779] Call Trace: [ 1020.397603][T20779] [ 1020.397612][T20779] dump_stack_lvl+0x16c/0x1f0 [ 1020.397649][T20779] should_fail_ex+0x512/0x640 [ 1020.397686][T20779] _copy_from_user+0x2e/0xd0 [ 1020.397722][T20779] snd_rawmidi_kernel_write1+0x50a/0x8a0 [ 1020.397762][T20779] snd_rawmidi_write+0x26e/0xc10 [ 1020.397808][T20779] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 1020.397840][T20779] ? __pfx_default_wake_function+0x10/0x10 [ 1020.397868][T20779] ? bpf_lsm_file_permission+0x9/0x10 [ 1020.397894][T20779] ? security_file_permission+0x71/0x210 [ 1020.397926][T20779] ? rw_verify_area+0xcf/0x680 [ 1020.397959][T20779] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 1020.397986][T20779] vfs_write+0x29d/0x1150 [ 1020.398025][T20779] ? __pfx_vfs_write+0x10/0x10 [ 1020.398052][T20779] ? find_held_lock+0x2b/0x80 [ 1020.398076][T20779] ? __fget_files+0x204/0x3c0 [ 1020.398111][T20779] ? __fget_files+0x20e/0x3c0 [ 1020.398148][T20779] ksys_write+0x1f8/0x250 [ 1020.398178][T20779] ? __pfx_ksys_write+0x10/0x10 [ 1020.398219][T20779] do_syscall_64+0xcd/0x490 [ 1020.398256][T20779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1020.398281][T20779] RIP: 0033:0x7f5d48b8e929 [ 1020.398301][T20779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1020.398325][T20779] RSP: 002b:00007f5d4998d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1020.398348][T20779] RAX: ffffffffffffffda RBX: 00007f5d48db5fa0 RCX: 00007f5d48b8e929 [ 1020.398364][T20779] RDX: 000000100000a3d9 RSI: 00002000000000c0 RDI: 0000000000000007 [ 1020.398379][T20779] RBP: 00007f5d4998d090 R08: 0000000000000000 R09: 0000000000000000 [ 1020.398393][T20779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1020.398408][T20779] R13: 0000000000000000 R14: 00007f5d48db5fa0 R15: 00007fff001b7b38 [ 1020.398439][T20779] [ 1020.616039][ C1] vkms_vblank_simulate: vblank timer overrun [ 1020.693832][T20783] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3014'. [ 1020.789051][T20779] netlink: 330 bytes leftover after parsing attributes in process `syz.1.3013'. [ 1021.327585][T19451] Bluetooth: hci0: command 0x0406 tx timeout [ 1021.497552][T19451] Bluetooth: hci2: command 0x0406 tx timeout [ 1021.577900][T19451] Bluetooth: hci5: command 0x0406 tx timeout [ 1021.647613][T19451] Bluetooth: hci3: command 0x0c1a tx timeout [ 1022.449196][T19451] Bluetooth: hci1: command 0x0406 tx timeout [ 1023.407449][T19451] Bluetooth: hci0: command 0x0406 tx timeout [ 1023.567615][T19451] Bluetooth: hci2: command 0x0406 tx timeout [ 1023.647773][T19451] Bluetooth: hci5: command 0x0406 tx timeout [ 1023.735213][T19451] Bluetooth: hci3: command 0x0c1a tx timeout [ 1024.007133][T20832] FAULT_INJECTION: forcing a failure. [ 1024.007133][T20832] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1024.080354][T20832] CPU: 1 UID: 0 PID: 20832 Comm: syz.1.3025 Tainted: G U 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 1024.080390][T20832] Tainted: [U]=USER [ 1024.080399][T20832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1024.080413][T20832] Call Trace: [ 1024.080422][T20832] [ 1024.080433][T20832] dump_stack_lvl+0x16c/0x1f0 [ 1024.080471][T20832] should_fail_ex+0x512/0x640 [ 1024.080506][T20832] _copy_from_user+0x2e/0xd0 [ 1024.080541][T20832] copy_msghdr_from_user+0x98/0x160 [ 1024.080576][T20832] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1024.080606][T20832] ? trace_sched_exit_tp+0xde/0x130 [ 1024.080644][T20832] ___sys_sendmsg+0xfe/0x1d0 [ 1024.080678][T20832] ? __pfx____sys_sendmsg+0x10/0x10 [ 1024.080745][T20832] ? __sys_sendmmsg+0x110/0x420 [ 1024.080775][T20832] ? __sys_sendmmsg+0x11e/0x420 [ 1024.080812][T20832] __sys_sendmmsg+0x200/0x420 [ 1024.080849][T20832] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1024.080893][T20832] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1024.080939][T20832] ? fput+0x70/0xf0 [ 1024.080960][T20832] ? ksys_write+0x1ac/0x250 [ 1024.080990][T20832] ? __pfx_ksys_write+0x10/0x10 [ 1024.081025][T20832] __x64_sys_sendmmsg+0x9c/0x100 [ 1024.081058][T20832] ? lockdep_hardirqs_on+0x7c/0x110 [ 1024.081090][T20832] do_syscall_64+0xcd/0x490 [ 1024.081127][T20832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.081153][T20832] RIP: 0033:0x7f5d48b8e929 [ 1024.081173][T20832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1024.081196][T20832] RSP: 002b:00007f5d4998d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1024.081218][T20832] RAX: ffffffffffffffda RBX: 00007f5d48db5fa0 RCX: 00007f5d48b8e929 [ 1024.081233][T20832] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 1024.081247][T20832] RBP: 00007f5d4998d090 R08: 0000000000000000 R09: 0000000000000000 [ 1024.081261][T20832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1024.081275][T20832] R13: 0000000000000000 R14: 00007f5d48db5fa0 R15: 00007fff001b7b38 [ 1024.081304][T20832] [ 1024.518494][T20851] netlink: 330 bytes leftover after parsing attributes in process `syz.3.3028'. [ 1024.601414][T20852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3028'. [ 1024.955554][T20851] veth0_macvtap: left promiscuous mode [ 1025.807541][T19451] Bluetooth: hci3: command 0x0c1a tx timeout [ 1027.890976][T19451] Bluetooth: hci3: command 0x0c1a tx timeout [ 1028.412906][T20913] FAULT_INJECTION: forcing a failure. [ 1028.412906][T20913] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1028.453354][T20913] CPU: 1 UID: 0 PID: 20913 Comm: syz.1.3038 Tainted: G U 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 1028.453395][T20913] Tainted: [U]=USER [ 1028.453403][T20913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1028.453417][T20913] Call Trace: [ 1028.453426][T20913] [ 1028.453436][T20913] dump_stack_lvl+0x16c/0x1f0 [ 1028.453477][T20913] should_fail_ex+0x512/0x640 [ 1028.453514][T20913] _copy_from_user+0x2e/0xd0 [ 1028.453550][T20913] move_addr_to_kernel+0x65/0x170 [ 1028.453581][T20913] __sys_bind+0x11b/0x260 [ 1028.453610][T20913] ? __pfx___sys_bind+0x10/0x10 [ 1028.453637][T20913] ? __fget_files+0x20e/0x3c0 [ 1028.453681][T20913] ? __pfx_ksys_write+0x10/0x10 [ 1028.453722][T20913] __x64_sys_bind+0x72/0xb0 [ 1028.453749][T20913] ? lockdep_hardirqs_on+0x7c/0x110 [ 1028.453782][T20913] do_syscall_64+0xcd/0x490 [ 1028.453819][T20913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1028.453845][T20913] RIP: 0033:0x7f5d48b8e929 [ 1028.453865][T20913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1028.453889][T20913] RSP: 002b:00007f5d4992a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1028.453913][T20913] RAX: ffffffffffffffda RBX: 00007f5d48db6240 RCX: 00007f5d48b8e929 [ 1028.453930][T20913] RDX: 000000000000006a RSI: 0000200000000040 RDI: 0000000000000003 [ 1028.453947][T20913] RBP: 00007f5d4992a090 R08: 0000000000000000 R09: 0000000000000000 [ 1028.453962][T20913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1028.453978][T20913] R13: 0000000000000000 R14: 00007f5d48db6240 R15: 00007fff001b7b38 [ 1028.454011][T20913] [ 1028.847414][ T30] audit: type=1804 audit(6045848301.654:41): pid=20909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3039" name="/newroot/151/file0" dev="tmpfs" ino=804 res=1 errno=0 [ 1028.936252][T20906] FAULT_INJECTION: forcing a failure. [ 1028.936252][T20906] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1028.954843][T20906] CPU: 0 UID: 0 PID: 20906 Comm: syz.0.3039 Tainted: G U 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 1028.954885][T20906] Tainted: [U]=USER [ 1028.954894][T20906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1028.954909][T20906] Call Trace: [ 1028.954919][T20906] [ 1028.954929][T20906] dump_stack_lvl+0x16c/0x1f0 [ 1028.955015][T20906] should_fail_ex+0x512/0x640 [ 1028.955062][T20906] get_futex_key+0x1d0/0x1540 [ 1028.955095][T20906] ? __pfx_get_futex_key+0x10/0x10 [ 1028.955135][T20906] futex_wake+0xea/0x530 [ 1028.955165][T20906] ? futex_wait+0x120/0x380 [ 1028.955198][T20906] ? __pfx_futex_wait+0x10/0x10 [ 1028.955231][T20906] ? __pfx_futex_wake+0x10/0x10 [ 1028.955264][T20906] ? __lock_acquire+0x622/0x1c90 [ 1028.955298][T20906] do_futex+0x1e3/0x350 [ 1028.955326][T20906] ? __pfx_do_futex+0x10/0x10 [ 1028.955354][T20906] ? find_held_lock+0x2b/0x80 [ 1028.955380][T20906] __x64_sys_futex+0x1e0/0x4c0 [ 1028.955410][T20906] ? __fget_files+0x20e/0x3c0 [ 1028.955438][T20906] ? __pfx___x64_sys_futex+0x10/0x10 [ 1028.955467][T20906] ? xfd_validate_state+0x61/0x180 [ 1028.955506][T20906] do_syscall_64+0xcd/0x490 [ 1028.955540][T20906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1028.955563][T20906] RIP: 0033:0x7f782138e929 [ 1028.955582][T20906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1028.955605][T20906] RSP: 002b:00007f781f1b40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1028.955626][T20906] RAX: ffffffffffffffda RBX: 00007f78215b6168 RCX: 00007f782138e929 [ 1028.955641][T20906] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f78215b616c [ 1028.955657][T20906] RBP: 00007f78215b6160 R08: 00007f78220f2000 R09: 0000000000000000 [ 1028.955670][T20906] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f78215b616c [ 1028.955685][T20906] R13: 0000000000000000 R14: 00007ffdba2126c0 R15: 00007ffdba2127a8 [ 1028.955715][T20906] [ 1029.457820][ T30] audit: type=1800 audit(6045848301.654:42): pid=20909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3039" name="file0" dev="tmpfs" ino=804 res=0 errno=0 [ 1033.425239][T20994] netlink: 330 bytes leftover after parsing attributes in process `syz.1.3057'. [ 1033.507096][T20994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3057'. [ 1035.270948][T21022] Invalid ELF header magic: != ELF [ 1035.323785][T21029] netlink: 330 bytes leftover after parsing attributes in process `syz.0.3065'. [ 1035.372370][T21029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3065'. [ 1038.424647][T21085] random: crng reseeded on system resumption [ 1040.578051][T21121] netlink: 330 bytes leftover after parsing attributes in process `syz.3.3085'. [ 1040.604254][T21121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3085'. [ 1040.699001][T21124] FAULT_INJECTION: forcing a failure. [ 1040.699001][T21124] name failslab, interval 1, probability 0, space 0, times 0 [ 1040.712003][T21124] CPU: 1 UID: 0 PID: 21124 Comm: syz.1.3086 Tainted: G U 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 1040.712041][T21124] Tainted: [U]=USER [ 1040.712050][T21124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1040.712060][T21124] Call Trace: [ 1040.712066][T21124] [ 1040.712072][T21124] dump_stack_lvl+0x16c/0x1f0 [ 1040.712099][T21124] should_fail_ex+0x512/0x640 [ 1040.712121][T21124] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1040.712145][T21124] should_failslab+0xc2/0x120 [ 1040.712160][T21124] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1040.712182][T21124] ? ovs_flow_alloc+0x1e/0x210 [ 1040.712204][T21124] ovs_flow_alloc+0x1e/0x210 [ 1040.712228][T21124] ovs_packet_cmd_execute+0x536/0x15b0 [ 1040.712254][T21124] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 1040.712279][T21124] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1040.712300][T21124] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1040.712323][T21124] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1040.712342][T21124] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1040.712364][T21124] ? trace_cap_capable+0x18d/0x200 [ 1040.712383][T21124] ? bpf_lsm_capable+0x9/0x10 [ 1040.712401][T21124] ? security_capable+0x7e/0x260 [ 1040.712427][T21124] ? ns_capable+0xd7/0x110 [ 1040.712444][T21124] genl_rcv_msg+0x55c/0x800 [ 1040.712464][T21124] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1040.712482][T21124] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 1040.712511][T21124] netlink_rcv_skb+0x158/0x420 [ 1040.712526][T21124] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1040.712545][T21124] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1040.712568][T21124] ? netlink_deliver_tap+0x1ae/0xd30 [ 1040.712585][T21124] genl_rcv+0x28/0x40 [ 1040.712601][T21124] netlink_unicast+0x53a/0x7f0 [ 1040.712618][T21124] ? __pfx_netlink_unicast+0x10/0x10 [ 1040.712639][T21124] netlink_sendmsg+0x8d1/0xdd0 [ 1040.712657][T21124] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1040.712680][T21124] ____sys_sendmsg+0xa98/0xc70 [ 1040.712697][T21124] ? copy_msghdr_from_user+0x10a/0x160 [ 1040.712719][T21124] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1040.712744][T21124] ___sys_sendmsg+0x134/0x1d0 [ 1040.712767][T21124] ? __pfx____sys_sendmsg+0x10/0x10 [ 1040.712788][T21124] ? __lock_acquire+0x622/0x1c90 [ 1040.712830][T21124] __sys_sendmsg+0x16d/0x220 [ 1040.712853][T21124] ? __pfx___sys_sendmsg+0x10/0x10 [ 1040.712887][T21124] do_syscall_64+0xcd/0x490 [ 1040.712914][T21124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1040.712930][T21124] RIP: 0033:0x7f5d48b8e929 [ 1040.712942][T21124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1040.712956][T21124] RSP: 002b:00007f5d4998d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1040.712972][T21124] RAX: ffffffffffffffda RBX: 00007f5d48db5fa0 RCX: 00007f5d48b8e929 [ 1040.712982][T21124] RDX: 0000000000004814 RSI: 0000200000000000 RDI: 0000000000000003 [ 1040.712991][T21124] RBP: 00007f5d4998d090 R08: 0000000000000000 R09: 0000000000000000 [ 1040.713000][T21124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1040.713008][T21124] R13: 0000000000000000 R14: 00007f5d48db5fa0 R15: 00007fff001b7b38 [ 1040.713027][T21124] [ 1041.036335][T21126] netlink: 330 bytes leftover after parsing attributes in process `syz.0.3084'. [ 1042.309026][T21158] FAULT_INJECTION: forcing a failure. [ 1042.309026][T21158] name failslab, interval 1, probability 0, space 0, times 0 [ 1042.331960][T21158] CPU: 0 UID: 0 PID: 21158 Comm: syz.5.3094 Tainted: G U 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 1042.332003][T21158] Tainted: [U]=USER [ 1042.332012][T21158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1042.332026][T21158] Call Trace: [ 1042.332035][T21158] [ 1042.332045][T21158] dump_stack_lvl+0x16c/0x1f0 [ 1042.332086][T21158] should_fail_ex+0x512/0x640 [ 1042.332124][T21158] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1042.332164][T21158] should_failslab+0xc2/0x120 [ 1042.332187][T21158] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1042.332221][T21158] ? __alloc_skb+0x2b2/0x380 [ 1042.332260][T21158] __alloc_skb+0x2b2/0x380 [ 1042.332292][T21158] ? __pfx___alloc_skb+0x10/0x10 [ 1042.332339][T21158] tcp_stream_alloc_skb+0x34/0x570 [ 1042.332374][T21158] tcp_sendmsg_locked+0x130f/0x4300 [ 1042.332431][T21158] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 1042.332466][T21158] ? do_raw_spin_lock+0x12c/0x2b0 [ 1042.332503][T21158] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1042.332545][T21158] ? __local_bh_enable_ip+0xa4/0x120 [ 1042.332575][T21158] tcp_sendmsg+0x2e/0x50 [ 1042.332603][T21158] ? __pfx_tcp_sendmsg+0x10/0x10 [ 1042.332632][T21158] inet_sendmsg+0xb9/0x140 [ 1042.332666][T21158] sock_write_iter+0x4aa/0x5b0 [ 1042.332694][T21158] ? __pfx_sock_write_iter+0x10/0x10 [ 1042.332734][T21158] ? bpf_lsm_file_permission+0x9/0x10 [ 1042.332760][T21158] ? security_file_permission+0x71/0x210 [ 1042.332800][T21158] ? rw_verify_area+0xcf/0x680 [ 1042.332833][T21158] vfs_write+0x6c4/0x1150 [ 1042.332866][T21158] ? __pfx_sock_write_iter+0x10/0x10 [ 1042.332897][T21158] ? __pfx_vfs_write+0x10/0x10 [ 1042.332927][T21158] ? find_held_lock+0x2b/0x80 [ 1042.332974][T21158] ksys_write+0x1f8/0x250 [ 1042.333005][T21158] ? __pfx_ksys_write+0x10/0x10 [ 1042.333048][T21158] do_syscall_64+0xcd/0x490 [ 1042.333084][T21158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1042.333116][T21158] RIP: 0033:0x7f891df8e929 [ 1042.333137][T21158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1042.333160][T21158] RSP: 002b:00007f891edc1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1042.333183][T21158] RAX: ffffffffffffffda RBX: 00007f891e1b5fa0 RCX: 00007f891df8e929 [ 1042.333199][T21158] RDX: 0000000000100085 RSI: 0000000000000000 RDI: 0000000000000003 [ 1042.333214][T21158] RBP: 00007f891edc1090 R08: 0000000000000000 R09: 0000000000000000 [ 1042.333230][T21158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1042.333243][T21158] R13: 0000000000000000 R14: 00007f891e1b5fa0 R15: 00007ffdadd6bd58 [ 1042.333276][T21158] [ 1043.309394][T21176] FAULT_INJECTION: forcing a failure. [ 1043.309394][T21176] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1043.370954][T21176] CPU: 1 UID: 0 PID: 21176 Comm: syz.3.3096 Tainted: G U 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 1043.370993][T21176] Tainted: [U]=USER [ 1043.371002][T21176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1043.371015][T21176] Call Trace: [ 1043.371023][T21176] [ 1043.371034][T21176] dump_stack_lvl+0x16c/0x1f0 [ 1043.371072][T21176] should_fail_ex+0x512/0x640 [ 1043.371109][T21176] _copy_from_user+0x2e/0xd0 [ 1043.371143][T21176] kstrtouint_from_user+0xd6/0x1d0 [ 1043.371171][T21176] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1043.371196][T21176] ? __lock_acquire+0xb8a/0x1c90 [ 1043.371238][T21176] proc_fail_nth_write+0x83/0x250 [ 1043.371267][T21176] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1043.371304][T21176] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1043.371330][T21176] vfs_write+0x29d/0x1150 [ 1043.371366][T21176] ? __pfx___mutex_lock+0x10/0x10 [ 1043.371399][T21176] ? __pfx_vfs_write+0x10/0x10 [ 1043.371440][T21176] ? __fget_files+0x20e/0x3c0 [ 1043.371481][T21176] ksys_write+0x12a/0x250 [ 1043.371512][T21176] ? __pfx_ksys_write+0x10/0x10 [ 1043.371541][T21176] ? syscall_user_dispatch+0x78/0x140 [ 1043.371584][T21176] do_syscall_64+0xcd/0x490 [ 1043.371622][T21176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1043.371648][T21176] RIP: 0033:0x7fd41fd8d3df [ 1043.371669][T21176] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1043.371693][T21176] RSP: 002b:00007fd420b9b030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1043.371716][T21176] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd41fd8d3df [ 1043.371741][T21176] RDX: 0000000000000001 RSI: 00007fd420b9b0a0 RDI: 0000000000000006 [ 1043.371755][T21176] RBP: 00007fd420b9b090 R08: 0000000000000000 R09: 0000000000000000 [ 1043.371769][T21176] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1043.371784][T21176] R13: 0000000000000000 R14: 00007fd41ffb6160 R15: 00007fff10166598 [ 1043.371817][T21176] [ 1043.962068][T21184] FAULT_INJECTION: forcing a failure. [ 1043.962068][T21184] name failslab, interval 1, probability 0, space 0, times 0 [ 1044.006820][T21184] CPU: 1 UID: 0 PID: 21184 Comm: syz.3.3099 Tainted: G U 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 1044.006862][T21184] Tainted: [U]=USER [ 1044.006871][T21184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1044.006886][T21184] Call Trace: [ 1044.006894][T21184] [ 1044.006905][T21184] dump_stack_lvl+0x16c/0x1f0 [ 1044.006944][T21184] should_fail_ex+0x512/0x640 [ 1044.006976][T21184] ? fs_reclaim_acquire+0xae/0x150 [ 1044.007007][T21184] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1044.007039][T21184] should_failslab+0xc2/0x120 [ 1044.007063][T21184] __kmalloc_noprof+0xd2/0x510 [ 1044.007105][T21184] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1044.007141][T21184] ? tomoyo_profile+0x47/0x60 [ 1044.007179][T21184] tomoyo_path_number_perm+0x245/0x580 [ 1044.007204][T21184] ? tomoyo_path_number_perm+0x237/0x580 [ 1044.007236][T21184] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1044.007266][T21184] ? find_held_lock+0x2b/0x80 [ 1044.007325][T21184] ? find_held_lock+0x2b/0x80 [ 1044.007347][T21184] ? hook_file_ioctl_common+0x145/0x410 [ 1044.007379][T21184] ? __fget_files+0x20e/0x3c0 [ 1044.007415][T21184] security_file_ioctl+0x9b/0x240 [ 1044.007446][T21184] __x64_sys_ioctl+0xb7/0x210 [ 1044.007476][T21184] do_syscall_64+0xcd/0x490 [ 1044.007511][T21184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1044.007531][T21184] RIP: 0033:0x7fd41fd8e929 [ 1044.007548][T21184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1044.007567][T21184] RSP: 002b:00007fd420bdd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1044.007586][T21184] RAX: ffffffffffffffda RBX: 00007fd41ffb5fa0 RCX: 00007fd41fd8e929 [ 1044.007600][T21184] RDX: 0000000000000000 RSI: 0000000040085500 RDI: 0000000000000003 [ 1044.007612][T21184] RBP: 00007fd420bdd090 R08: 0000000000000000 R09: 0000000000000000 [ 1044.007624][T21184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1044.007636][T21184] R13: 0000000000000000 R14: 00007fd41ffb5fa0 R15: 00007fff10166598 [ 1044.007663][T21184] [ 1044.238355][T21184] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1046.122690][T21226] netlink: 330 bytes leftover after parsing attributes in process `syz.3.3110'. [ 1047.056773][T21243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3113'. [ 1048.275285][ T30] audit: type=1800 audit(6045848321.094:43): pid=21259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=97747 res=0 errno=0 [ 1048.296654][T19451] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 1048.328720][T21259] bridge0: port 3(vlan1) entered blocking state [ 1048.352457][T21259] bridge0: port 3(vlan1) entered disabled state [ 1048.427634][T21259] vlan1: entered allmulticast mode [ 1048.445542][T21259] veth0_vlan: entered allmulticast mode [ 1048.469188][T21259] vlan1: entered promiscuous mode [ 1048.501357][T21259] bridge0: port 3(vlan1) entered blocking state [ 1048.507932][T21259] bridge0: port 3(vlan1) entered forwarding state [ 1050.552136][T21315] netlink: 330 bytes leftover after parsing attributes in process `syz.0.3132'. [ 1052.346771][T21326] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1052.368995][T21326] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1052.381250][T21326] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1052.401775][T21326] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1052.411845][T21326] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1053.977441][T19451] Bluetooth: hci1: command 0x0406 tx timeout [ 1054.377214][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.383644][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.447836][T19451] Bluetooth: hci3: command 0x0c1a tx timeout [ 1054.453957][T12204] Bluetooth: hci5: command 0x0406 tx timeout [ 1054.463324][T12204] Bluetooth: hci2: command 0x0406 tx timeout [ 1054.471580][T17603] Bluetooth: hci0: command 0x0406 tx timeout [ 1054.837408][ T30] audit: type=1800 audit(6045848327.654:44): pid=21384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3149" name="file0" dev="tmpfs" ino=960 res=0 errno=0 [ 1055.240341][T21398] netlink: 342 bytes leftover after parsing attributes in process `syz.5.3153'. [ 1055.251240][T21398] netlink: 102 bytes leftover after parsing attributes in process `syz.5.3153'. [ 1056.185776][T21422] netlink: 330 bytes leftover after parsing attributes in process `syz.0.3158'. [ 1056.213703][T21422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3158'. [ 1057.520060][T21440] FAULT_INJECTION: forcing a failure. [ 1057.520060][T21440] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1057.627197][T21440] CPU: 0 UID: 0 PID: 21440 Comm: syz.0.3163 Tainted: G U 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 1057.627244][T21440] Tainted: [U]=USER [ 1057.627253][T21440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1057.627269][T21440] Call Trace: [ 1057.627279][T21440] [ 1057.627290][T21440] dump_stack_lvl+0x16c/0x1f0 [ 1057.627357][T21440] should_fail_ex+0x512/0x640 [ 1057.627397][T21440] get_futex_key+0x1d0/0x1540 [ 1057.627429][T21440] ? kasan_quarantine_put+0x10a/0x240 [ 1057.627476][T21440] ? __pfx_get_futex_key+0x10/0x10 [ 1057.627504][T21440] ? kmem_cache_free+0x2d1/0x4d0 [ 1057.627538][T21440] ? kfree_skbmem+0x1a4/0x1f0 [ 1057.627573][T21440] futex_wake+0xea/0x530 [ 1057.627606][T21440] ? kfree_skbmem+0x1a4/0x1f0 [ 1057.627635][T21440] ? sk_skb_reason_drop+0x136/0x1a0 [ 1057.627660][T21440] ? __pfx_futex_wake+0x10/0x10 [ 1057.627698][T21440] ? vfs_write+0x15d/0x1150 [ 1057.627732][T21440] ? __pfx_vhci_write+0x10/0x10 [ 1057.627774][T21440] do_futex+0x1e3/0x350 [ 1057.627805][T21440] ? __pfx_do_futex+0x10/0x10 [ 1057.627845][T21440] __x64_sys_futex+0x1e0/0x4c0 [ 1057.627880][T21440] ? fput+0x70/0xf0 [ 1057.627902][T21440] ? __pfx___x64_sys_futex+0x10/0x10 [ 1057.627931][T21440] ? ksys_write+0x1ac/0x250 [ 1057.627964][T21440] ? __pfx_ksys_write+0x10/0x10 [ 1057.628007][T21440] do_syscall_64+0xcd/0x490 [ 1057.628046][T21440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1057.628072][T21440] RIP: 0033:0x7f782138e929 [ 1057.628094][T21440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1057.628120][T21440] RSP: 002b:00007f781f1f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1057.628145][T21440] RAX: ffffffffffffffda RBX: 00007f78215b5fa8 RCX: 00007f782138e929 [ 1057.628162][T21440] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f78215b5fac [ 1057.628178][T21440] RBP: 00007f78215b5fa0 R08: 00007f78220f2000 R09: 0000000000000000 [ 1057.628194][T21440] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f78215b5fac [ 1057.628210][T21440] R13: 0000000000000000 R14: 00007ffdba2126c0 R15: 00007ffdba2127a8 [ 1057.628244][T21440] [ 1057.909121][T21440] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3163'. [ 1058.295778][T21459] netlink: 330 bytes leftover after parsing attributes in process `syz.0.3168'. [ 1058.376737][T21459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3168'. [ 1058.737106][T21469] Invalid ELF header magic: != ELF [ 1059.886152][T21489] netlink: 330 bytes leftover after parsing attributes in process `syz.5.3178'. [ 1060.016637][T21494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3180'. [ 1060.060304][T21489] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3178'. [ 1060.077883][T21494] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 1060.132588][T21494] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1060.187129][T21494] FAULT_INJECTION: forcing a failure. [ 1060.187129][T21494] name failslab, interval 1, probability 0, space 0, times 0 [ 1060.217680][T21494] CPU: 0 UID: 0 PID: 21494 Comm: syz.1.3180 Tainted: G U 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 1060.217707][T21494] Tainted: [U]=USER [ 1060.217712][T21494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1060.217721][T21494] Call Trace: [ 1060.217727][T21494] [ 1060.217733][T21494] dump_stack_lvl+0x16c/0x1f0 [ 1060.217760][T21494] should_fail_ex+0x512/0x640 [ 1060.217785][T21494] should_failslab+0xc2/0x120 [ 1060.217800][T21494] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1060.217824][T21494] ? skb_clone+0x190/0x3f0 [ 1060.217850][T21494] skb_clone+0x190/0x3f0 [ 1060.217873][T21494] netlink_deliver_tap+0xabd/0xd30 [ 1060.217892][T21494] netlink_unicast+0x6b2/0x7f0 [ 1060.217910][T21494] ? __pfx_netlink_unicast+0x10/0x10 [ 1060.217924][T21494] ? genl_rcv_msg+0x4bb/0x800 [ 1060.217947][T21494] netlink_ack+0x696/0xb80 [ 1060.217968][T21494] netlink_rcv_skb+0x332/0x420 [ 1060.217983][T21494] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1060.218002][T21494] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1060.218025][T21494] ? netlink_deliver_tap+0x1ae/0xd30 [ 1060.218042][T21494] genl_rcv+0x28/0x40 [ 1060.218057][T21494] netlink_unicast+0x53a/0x7f0 [ 1060.218075][T21494] ? __pfx_netlink_unicast+0x10/0x10 [ 1060.218096][T21494] netlink_sendmsg+0x8d1/0xdd0 [ 1060.218115][T21494] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1060.218137][T21494] ____sys_sendmsg+0xa98/0xc70 [ 1060.218155][T21494] ? copy_msghdr_from_user+0x10a/0x160 [ 1060.218177][T21494] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1060.218203][T21494] ___sys_sendmsg+0x134/0x1d0 [ 1060.218226][T21494] ? __pfx____sys_sendmsg+0x10/0x10 [ 1060.218252][T21494] ? __lock_acquire+0x622/0x1c90 [ 1060.218295][T21494] __sys_sendmsg+0x16d/0x220 [ 1060.218318][T21494] ? __pfx___sys_sendmsg+0x10/0x10 [ 1060.218352][T21494] do_syscall_64+0xcd/0x490 [ 1060.218377][T21494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1060.218392][T21494] RIP: 0033:0x7f5d48b8e929 [ 1060.218405][T21494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1060.218418][T21494] RSP: 002b:00007f5d4998d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1060.218433][T21494] RAX: ffffffffffffffda RBX: 00007f5d48db5fa0 RCX: 00007f5d48b8e929 [ 1060.218443][T21494] RDX: 0000000000000000 RSI: 00002000000025c0 RDI: 0000000000000003 [ 1060.218452][T21494] RBP: 00007f5d4998d090 R08: 0000000000000000 R09: 0000000000000000 [ 1060.218461][T21494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1060.218469][T21494] R13: 0000000000000000 R14: 00007f5d48db5fa0 R15: 00007fff001b7b38 [ 1060.218488][T21494] [ 1061.361416][T21513] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1061.384733][T21513] bridge0: port 3(veth0_to_bridge) entered disabled state [ 1061.460765][T21513] veth0_to_bridge: entered allmulticast mode [ 1061.477522][T21516] snd_aloop snd_aloop.0: control 1:16386:-2147483647:¢¸è_ÅheºRŸª:0 is already present [ 1061.583633][T21513] veth0_to_bridge: entered promiscuous mode [ 1061.622731][T21513] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1061.706021][T21513] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1061.713372][T21513] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 1062.376999][T21523] FAULT_INJECTION: forcing a failure. [ 1062.376999][T21523] name failslab, interval 1, probability 0, space 0, times 0 [ 1062.443072][T21523] CPU: 0 UID: 0 PID: 21523 Comm: syz.0.3188 Tainted: G U 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 1062.443120][T21523] Tainted: [U]=USER [ 1062.443129][T21523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1062.443146][T21523] Call Trace: [ 1062.443156][T21523] [ 1062.443167][T21523] dump_stack_lvl+0x16c/0x1f0 [ 1062.443211][T21523] should_fail_ex+0x512/0x640 [ 1062.443246][T21523] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 1062.443299][T21523] should_failslab+0xc2/0x120 [ 1062.443327][T21523] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 1062.443367][T21523] ? kstrdup_const+0x63/0x80 [ 1062.443403][T21523] ? kasan_save_stack+0x42/0x60 [ 1062.443441][T21523] kstrdup+0x53/0x100 [ 1062.443478][T21523] kstrdup_const+0x63/0x80 [ 1062.443513][T21523] __kernfs_new_node+0x9b/0x8e0 [ 1062.443549][T21523] ? do_syscall_64+0xcd/0x490 [ 1062.443583][T21523] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1062.443611][T21523] ? __pfx___kernfs_new_node+0x10/0x10 [ 1062.443655][T21523] ? find_held_lock+0x2b/0x80 [ 1062.443682][T21523] ? kernfs_root+0xee/0x2a0 [ 1062.443723][T21523] kernfs_new_node+0x13c/0x1e0 [ 1062.443767][T21523] kernfs_create_dir_ns+0x4c/0x1a0 [ 1062.443809][T21523] sysfs_create_dir_ns+0x13a/0x2b0 [ 1062.443842][T21523] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1062.443872][T21523] ? find_held_lock+0x2b/0x80 [ 1062.443904][T21523] ? do_raw_spin_unlock+0x172/0x230 [ 1062.443944][T21523] kobject_add_internal+0x2c4/0x9b0 [ 1062.443976][T21523] kobject_init_and_add+0x11b/0x190 [ 1062.444004][T21523] ? __pfx_kobject_init_and_add+0x10/0x10 [ 1062.444039][T21523] ? up_write+0x1b2/0x520 [ 1062.444083][T21523] sysfs_slab_add+0x18e/0x1e0 [ 1062.444118][T21523] do_kmem_cache_create+0x530/0x730 [ 1062.444155][T21523] ? __kmem_cache_create_args+0x205/0x390 [ 1062.444195][T21523] __kmem_cache_create_args+0x225/0x390 [ 1062.444233][T21523] mon_text_open+0x313/0x4f0 [ 1062.444280][T21523] ? __pfx_mon_text_open+0x10/0x10 [ 1062.444315][T21523] ? __debugfs_file_get+0x1fe/0x840 [ 1062.444342][T21523] ? __pfx_mon_text_ctor+0x10/0x10 [ 1062.444376][T21523] ? __pfx_apparmor_file_open+0x10/0x10 [ 1062.444406][T21523] ? lockdown_is_locked_down+0x3f/0x130 [ 1062.444440][T21523] ? bpf_lsm_locked_down+0x9/0x10 [ 1062.444475][T21523] ? __pfx_mon_text_open+0x10/0x10 [ 1062.444509][T21523] full_proxy_open_regular+0x1b6/0x360 [ 1062.444540][T21523] do_dentry_open+0x744/0x1c10 [ 1062.444578][T21523] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 1062.444614][T21523] vfs_open+0x82/0x3f0 [ 1062.444647][T21523] path_openat+0x1de4/0x2cb0 [ 1062.444695][T21523] ? __pfx_path_openat+0x10/0x10 [ 1062.444733][T21523] ? __lock_acquire+0xb8a/0x1c90 [ 1062.444769][T21523] do_filp_open+0x20b/0x470 [ 1062.444806][T21523] ? __pfx_do_filp_open+0x10/0x10 [ 1062.444868][T21523] ? alloc_fd+0x471/0x7d0 [ 1062.444913][T21523] do_sys_openat2+0x11b/0x1d0 [ 1062.444941][T21523] ? __pfx_do_sys_openat2+0x10/0x10 [ 1062.444984][T21523] __x64_sys_openat+0x174/0x210 [ 1062.445012][T21523] ? __pfx___x64_sys_openat+0x10/0x10 [ 1062.445057][T21523] do_syscall_64+0xcd/0x490 [ 1062.445096][T21523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1062.445123][T21523] RIP: 0033:0x7f782138e929 [ 1062.445146][T21523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1062.445173][T21523] RSP: 002b:00007f781f1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1062.445197][T21523] RAX: ffffffffffffffda RBX: 00007f78215b5fa0 RCX: 00007f782138e929 [ 1062.445216][T21523] RDX: 0000000000008002 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 1062.445233][T21523] RBP: 00007f7821410b39 R08: 0000000000000000 R09: 0000000000000000 [ 1062.445256][T21523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1062.445273][T21523] R13: 0000000000000000 R14: 00007f78215b5fa0 R15: 00007ffdba2127a8 [ 1062.445311][T21523] [ 1062.445654][T21523] kobject: kobject_add_internal failed for mon_text_ffff88805bd51800 (error: -12 parent: slab) [ 1062.889161][T21524] netlink: 19 bytes leftover after parsing attributes in process `syz.0.3188'. [ 1062.929094][T21523] SLUB: Unable to add cache mon_text_ffff88805bd51800 to sysfs [ 1064.903097][T21563] netlink: 330 bytes leftover after parsing attributes in process `syz.3.3197'. [ 1064.937750][T21563] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3197'. [ 1065.751955][T21576] FAULT_INJECTION: forcing a failure. [ 1065.751955][T21576] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1065.765353][T21576] CPU: 1 UID: 0 PID: 21576 Comm: syz.0.3201 Tainted: G U 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 1065.765378][T21576] Tainted: [U]=USER [ 1065.765383][T21576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1065.765392][T21576] Call Trace: [ 1065.765398][T21576] [ 1065.765405][T21576] dump_stack_lvl+0x16c/0x1f0 [ 1065.765432][T21576] should_fail_ex+0x512/0x640 [ 1065.765456][T21576] should_fail_alloc_page+0xe7/0x130 [ 1065.765473][T21576] prepare_alloc_pages+0x3c2/0x610 [ 1065.765495][T21576] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1065.765520][T21576] ? __lock_acquire+0xb8a/0x1c90 [ 1065.765543][T21576] ? psi_task_switch+0x2c1/0x8e0 [ 1065.765560][T21576] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1065.765582][T21576] ? lock_acquire+0x179/0x350 [ 1065.765600][T21576] ? find_held_lock+0x2b/0x80 [ 1065.765615][T21576] ? finish_task_switch.isra.0+0x21c/0xc10 [ 1065.765632][T21576] ? finish_task_switch.isra.0+0x221/0xc10 [ 1065.765647][T21576] ? lockdep_hardirqs_on+0x7c/0x110 [ 1065.765668][T21576] ? finish_task_switch.isra.0+0x221/0xc10 [ 1065.765684][T21576] ? rcu_is_watching+0x12/0xc0 [ 1065.765699][T21576] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1065.765723][T21576] ? policy_nodemask+0xea/0x4e0 [ 1065.765738][T21576] alloc_pages_mpol+0x1fb/0x550 [ 1065.765753][T21576] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1065.765771][T21576] ? __lock_acquire+0x622/0x1c90 [ 1065.765794][T21576] alloc_pages_noprof+0x131/0x390 [ 1065.765809][T21576] pte_alloc_one+0x1c/0x3a0 [ 1065.765832][T21576] __do_fault+0x320/0x490 [ 1065.765853][T21576] ? find_held_lock+0x2b/0x80 [ 1065.765867][T21576] ? __pfx_filemap_map_pages+0x10/0x10 [ 1065.765891][T21576] __handle_mm_fault+0x374c/0x5490 [ 1065.765915][T21576] ? __pfx___handle_mm_fault+0x10/0x10 [ 1065.765933][T21576] ? __pfx_mt_find+0x10/0x10 [ 1065.765957][T21576] ? find_vma+0xbf/0x140 [ 1065.765971][T21576] ? __pfx_find_vma+0x10/0x10 [ 1065.765988][T21576] handle_mm_fault+0x589/0xd10 [ 1065.766008][T21576] ? __pkru_allows_pkey+0x41/0xb0 [ 1065.766028][T21576] do_user_addr_fault+0x7a6/0x1370 [ 1065.766050][T21576] ? rcu_is_watching+0x12/0xc0 [ 1065.766066][T21576] exc_page_fault+0x5c/0xb0 [ 1065.766087][T21576] asm_exc_page_fault+0x26/0x30 [ 1065.766101][T21576] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 1065.766120][T21576] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 bd 10 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 1065.766135][T21576] RSP: 0018:ffffc90003d8fba0 EFLAGS: 00050246 [ 1065.766148][T21576] RAX: 0000000000000000 RBX: 0000000000000008 RCX: 0000000000000008 [ 1065.766157][T21576] RDX: fffff520007b1f84 RSI: ffffc90003d8fc18 RDI: 0000000000000000 [ 1065.766166][T21576] RBP: 0000000000000000 R08: 0000000000000000 R09: fffff520007b1f83 [ 1065.766175][T21576] R10: ffffc90003d8fc1f R11: 0000000000000001 R12: ffffc90003d8fc18 [ 1065.766185][T21576] R13: 0000000000000008 R14: 00007ffffffff000 R15: 0000000000000000 [ 1065.766204][T21576] _copy_to_user+0xbb/0xd0 [ 1065.766228][T21576] msr_read+0x14e/0x250 [ 1065.766244][T21576] ? __pfx_msr_read+0x10/0x10 [ 1065.766258][T21576] ? bpf_lsm_file_permission+0x9/0x10 [ 1065.766274][T21576] ? security_file_permission+0x71/0x210 [ 1065.766295][T21576] ? rw_verify_area+0xcf/0x680 [ 1065.766314][T21576] ? __pfx_msr_read+0x10/0x10 [ 1065.766328][T21576] vfs_readv+0x5c1/0x8b0 [ 1065.766351][T21576] ? __pfx_vfs_readv+0x10/0x10 [ 1065.766384][T21576] ? __fget_files+0x20e/0x3c0 [ 1065.766402][T21576] ? __fget_files+0x200/0x3c0 [ 1065.766426][T21576] ? do_readv+0x132/0x340 [ 1065.766443][T21576] do_readv+0x132/0x340 [ 1065.766462][T21576] ? __pfx_do_readv+0x10/0x10 [ 1065.766486][T21576] do_syscall_64+0xcd/0x490 [ 1065.766510][T21576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1065.766524][T21576] RIP: 0033:0x7f782138e929 [ 1065.766536][T21576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1065.766549][T21576] RSP: 002b:00007f781f1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 1065.766575][T21576] RAX: ffffffffffffffda RBX: 00007f78215b5fa0 RCX: 00007f782138e929 [ 1065.766585][T21576] RDX: 0000000000000400 RSI: 00002000000000c0 RDI: 0000000000000007 [ 1065.766594][T21576] RBP: 00007f781f1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1065.766603][T21576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1065.766611][T21576] R13: 0000000000000000 R14: 00007f78215b5fa0 R15: 00007ffdba2127a8 [ 1065.766630][T21576] [ 1066.216535][T21573] Invalid ELF header magic: != ELF [ 1067.743790][T21606] bridge0: port 4(veth0_to_bridge) entered blocking state [ 1067.767602][T21606] bridge0: port 4(veth0_to_bridge) entered disabled state [ 1067.774956][T21606] veth0_to_bridge: entered allmulticast mode [ 1067.789213][T21606] veth0_to_bridge: entered promiscuous mode [ 1067.795342][T21606] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1067.850297][T21606] bridge0: port 4(veth0_to_bridge) entered blocking state [ 1067.857619][T21606] bridge0: port 4(veth0_to_bridge) entered forwarding state [ 1067.892242][T21607] snd_aloop snd_aloop.0: control 1:16386:-2147483647:¢¸è_ÅheºRŸª:0 is already present [ 1069.706052][T21648] FAULT_INJECTION: forcing a failure. [ 1069.706052][T21648] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1069.723619][T21648] CPU: 1 UID: 0 PID: 21648 Comm: syz.1.3217 Tainted: G U 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 1069.723660][T21648] Tainted: [U]=USER [ 1069.723669][T21648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1069.723682][T21648] Call Trace: [ 1069.723690][T21648] [ 1069.723699][T21648] dump_stack_lvl+0x16c/0x1f0 [ 1069.723738][T21648] should_fail_ex+0x512/0x640 [ 1069.723775][T21648] should_fail_alloc_page+0xe7/0x130 [ 1069.723801][T21648] prepare_alloc_pages+0x3c2/0x610 [ 1069.723834][T21648] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1069.723876][T21648] ? __lock_acquire+0x622/0x1c90 [ 1069.723910][T21648] ? handle_mm_fault+0x589/0xd10 [ 1069.723937][T21648] ? do_user_addr_fault+0x7a6/0x1370 [ 1069.723965][T21648] ? exc_page_fault+0x5c/0xb0 [ 1069.723994][T21648] ? asm_exc_page_fault+0x26/0x30 [ 1069.724020][T21648] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1069.724060][T21648] ? find_held_lock+0x2b/0x80 [ 1069.724093][T21648] ? filemap_get_entry+0x1b1/0x3b0 [ 1069.724116][T21648] ? __pfx_filemap_get_entry+0x10/0x10 [ 1069.724135][T21648] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1069.724173][T21648] ? policy_nodemask+0xea/0x4e0 [ 1069.724198][T21648] alloc_pages_mpol+0x1fb/0x550 [ 1069.724222][T21648] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1069.724252][T21648] folio_alloc_noprof+0x20/0x2d0 [ 1069.724276][T21648] secretmem_fault+0x17e/0x5d0 [ 1069.724295][T21648] ? pte_alloc_one+0x2b6/0x3a0 [ 1069.724327][T21648] ? lockdep_hardirqs_on+0x7c/0x110 [ 1069.724362][T21648] __do_fault+0x10a/0x490 [ 1069.724399][T21648] __handle_mm_fault+0x3c2a/0x5490 [ 1069.724443][T21648] ? __pfx___handle_mm_fault+0x10/0x10 [ 1069.724471][T21648] ? __pfx_mt_find+0x10/0x10 [ 1069.724514][T21648] ? find_vma+0xbf/0x140 [ 1069.724537][T21648] ? __pfx_find_vma+0x10/0x10 [ 1069.724565][T21648] handle_mm_fault+0x589/0xd10 [ 1069.724597][T21648] ? __pkru_allows_pkey+0x41/0xb0 [ 1069.724634][T21648] do_user_addr_fault+0x7a6/0x1370 [ 1069.724669][T21648] ? rcu_is_watching+0x12/0xc0 [ 1069.724698][T21648] exc_page_fault+0x5c/0xb0 [ 1069.724731][T21648] asm_exc_page_fault+0x26/0x30 [ 1069.724754][T21648] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 1069.724782][T21648] Code: c4 10 c3 cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 bd 10 04 00 66 66 [ 1069.724805][T21648] RSP: 0018:ffffc900034e79d0 EFLAGS: 00050202 [ 1069.724823][T21648] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000007 [ 1069.724838][T21648] RDX: fffff5200069cf4c RSI: 0000000000000000 RDI: ffffc900034e7a58 [ 1069.724852][T21648] RBP: 0000000000000007 R08: 0000000000000001 R09: fffff5200069cf4b [ 1069.724865][T21648] R10: ffffc900034e7a5e R11: 0000000000000001 R12: 0000000000000000 [ 1069.724879][T21648] R13: ffffc900034e7a58 R14: 1ffff9200069cf45 R15: ffffc900034e7d8c [ 1069.724917][T21648] _copy_from_user+0x98/0xd0 [ 1069.724954][T21648] ____sys_sendmsg+0x607/0xc70 [ 1069.724986][T21648] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1069.725020][T21648] ? __pfx__kstrtoull+0x10/0x10 [ 1069.725056][T21648] ___sys_sendmsg+0x134/0x1d0 [ 1069.725093][T21648] ? __pfx____sys_sendmsg+0x10/0x10 [ 1069.725144][T21648] ? find_held_lock+0x2b/0x80 [ 1069.725190][T21648] __sys_sendmmsg+0x200/0x420 [ 1069.725228][T21648] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1069.725275][T21648] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1069.725325][T21648] ? fput+0x70/0xf0 [ 1069.725348][T21648] ? ksys_write+0x1ac/0x250 [ 1069.725379][T21648] ? __pfx_ksys_write+0x10/0x10 [ 1069.725418][T21648] __x64_sys_sendmmsg+0x9c/0x100 [ 1069.725452][T21648] ? lockdep_hardirqs_on+0x7c/0x110 [ 1069.725484][T21648] do_syscall_64+0xcd/0x490 [ 1069.725525][T21648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1069.725550][T21648] RIP: 0033:0x7f5d48b8e929 [ 1069.725568][T21648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1069.725588][T21648] RSP: 002b:00007f5d4998d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1069.725605][T21648] RAX: ffffffffffffffda RBX: 00007f5d48db5fa0 RCX: 00007f5d48b8e929 [ 1069.725625][T21648] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000004 [ 1069.725640][T21648] RBP: 00007f5d4998d090 R08: 0000000000000000 R09: 0000000000000000 [ 1069.725656][T21648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1069.725678][T21648] R13: 0000000000000000 R14: 00007f5d48db5fa0 R15: 00007fff001b7b38 [ 1069.725712][T21648] [ 1070.710306][T21662] snd_aloop snd_aloop.0: control 1:16386:-2147483647:¢¸è_ÅheºRŸª:0 is already present [ 1070.769430][T21656] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1070.777074][T21656] bridge0: port 3(veth0_to_bridge) entered disabled state [ 1070.784802][T21656] veth0_to_bridge: entered allmulticast mode [ 1070.793017][T21656] veth0_to_bridge: entered promiscuous mode [ 1070.799522][T21656] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1070.814258][T21656] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1070.821583][T21656] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 1074.793009][T21735] FAULT_INJECTION: forcing a failure. [ 1074.793009][T21735] name failslab, interval 1, probability 0, space 0, times 0 [ 1074.825891][T21735] CPU: 1 UID: 0 PID: 21735 Comm: syz.1.3236 Tainted: G U 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 1074.825934][T21735] Tainted: [U]=USER [ 1074.825943][T21735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1074.825957][T21735] Call Trace: [ 1074.825966][T21735] [ 1074.825977][T21735] dump_stack_lvl+0x16c/0x1f0 [ 1074.826018][T21735] should_fail_ex+0x512/0x640 [ 1074.826051][T21735] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1074.826085][T21735] should_failslab+0xc2/0x120 [ 1074.826110][T21735] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1074.826142][T21735] ? l2tp_tunnel_create+0x96/0x460 [ 1074.826176][T21735] l2tp_tunnel_create+0x96/0x460 [ 1074.826213][T21735] l2tp_nl_cmd_tunnel_create+0x3ae/0x990 [ 1074.826254][T21735] ? __pfx_l2tp_nl_cmd_tunnel_create+0x10/0x10 [ 1074.826303][T21735] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1074.826336][T21735] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1074.826375][T21735] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1074.826408][T21735] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1074.826438][T21735] ? trace_cap_capable+0x18d/0x200 [ 1074.826473][T21735] ? bpf_lsm_capable+0x9/0x10 [ 1074.826500][T21735] ? security_capable+0x7e/0x260 [ 1074.826538][T21735] ? ns_capable+0xd7/0x110 [ 1074.826570][T21735] genl_rcv_msg+0x55c/0x800 [ 1074.826604][T21735] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1074.826635][T21735] ? __pfx_l2tp_nl_cmd_tunnel_create+0x10/0x10 [ 1074.826685][T21735] netlink_rcv_skb+0x158/0x420 [ 1074.826712][T21735] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1074.826743][T21735] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1074.826786][T21735] ? netlink_deliver_tap+0x1ae/0xd30 [ 1074.826817][T21735] genl_rcv+0x28/0x40 [ 1074.826843][T21735] netlink_unicast+0x53a/0x7f0 [ 1074.826874][T21735] ? __pfx_netlink_unicast+0x10/0x10 [ 1074.826911][T21735] netlink_sendmsg+0x8d1/0xdd0 [ 1074.826943][T21735] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1074.826985][T21735] ____sys_sendmsg+0xa98/0xc70 [ 1074.827015][T21735] ? copy_msghdr_from_user+0x10a/0x160 [ 1074.827049][T21735] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1074.827096][T21735] ___sys_sendmsg+0x134/0x1d0 [ 1074.827133][T21735] ? __pfx____sys_sendmsg+0x10/0x10 [ 1074.827164][T21735] ? __lock_acquire+0x622/0x1c90 [ 1074.827247][T21735] __sys_sendmsg+0x16d/0x220 [ 1074.827284][T21735] ? __pfx___sys_sendmsg+0x10/0x10 [ 1074.827340][T21735] do_syscall_64+0xcd/0x490 [ 1074.827377][T21735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1074.827402][T21735] RIP: 0033:0x7f5d48b8e929 [ 1074.827423][T21735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1074.827448][T21735] RSP: 002b:00007f5d4994b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1074.827471][T21735] RAX: ffffffffffffffda RBX: 00007f5d48db6160 RCX: 00007f5d48b8e929 [ 1074.827489][T21735] RDX: 0000000000048080 RSI: 0000200000000140 RDI: 0000000000000005 [ 1074.827504][T21735] RBP: 00007f5d4994b090 R08: 0000000000000000 R09: 0000000000000000 [ 1074.827520][T21735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1074.827535][T21735] R13: 0000000000000000 R14: 00007f5d48db6160 R15: 00007fff001b7b38 [ 1074.827571][T21735] [ 1074.853195][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1074.855096][ C1] vkms_vblank_simulate: vblank timer overrun [ 1074.859604][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1075.169452][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1075.181791][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1075.194053][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1075.206297][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1075.218525][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1075.230785][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1075.243006][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1075.255220][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1079.857535][ C0] net_ratelimit: 20213 callbacks suppressed [ 1079.857551][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1079.875632][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1079.887793][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1079.899952][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1079.912120][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1079.924315][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1079.936484][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1079.948666][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1079.960823][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1079.972969][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1083.487528][T21750] sched: DL replenish lagged too much [ 1084.867754][ C0] net_ratelimit: 5056 callbacks suppressed [ 1084.867770][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1084.886451][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1084.899315][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1084.912162][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1084.924998][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1084.937912][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1084.950728][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1084.963548][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1084.976362][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1084.989244][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1086.025979][T21752] Invalid ELF header magic: != ELF [ 1089.877694][ C0] net_ratelimit: 10716 callbacks suppressed [ 1089.877720][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1089.896158][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1089.908946][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1089.921491][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1089.934123][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1089.947784][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1089.960292][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1089.972893][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1089.985385][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1089.997915][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1092.564673][T17603] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1092.687690][T17603] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1093.294672][T17603] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1094.887661][ C0] net_ratelimit: 9204 callbacks suppressed [ 1094.887677][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1094.906526][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1094.918736][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1094.930989][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1094.943285][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1094.955539][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1094.968409][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1094.980646][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1094.992868][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1095.005121][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1097.709234][T12316] Bluetooth: hci4: Opcode 0x1005 failed: -110 [ 1097.852713][T17603] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1097.941459][T12204] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1099.897613][ C0] net_ratelimit: 11785 callbacks suppressed [ 1099.897644][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1099.916048][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1099.928506][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1099.940973][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1099.953444][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1099.965898][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1099.979375][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1099.991835][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1100.004294][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1100.016737][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1100.047401][T21767] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1101.917481][T12204] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1101.926910][T17603] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1102.295991][T17603] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1103.408667][T12316] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1103.479479][T12316] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1103.504814][T12316] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1103.556721][T21794] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1104.565788][T12316] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1104.907412][ C0] net_ratelimit: 8153 callbacks suppressed [ 1104.907435][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1104.925759][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1104.938252][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1104.952126][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:dc:78:ec:63:26, vlan:0) [ 1104.964594][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1104.977000][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1104.989506][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1105.001912][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1105.014387][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1105.026814][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1108.363788][T12316] Bluetooth: hci3: command tx timeout [ 1109.917702][ C0] net_ratelimit: 8426 callbacks suppressed [ 1109.917726][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1109.936142][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1109.950883][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:dc:78:ec:63:26, vlan:0) [ 1109.963392][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1109.975824][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1109.988324][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1110.000785][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1110.013312][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1110.025778][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1110.039346][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:dc:78:ec:63:26, vlan:0) [ 1112.544888][T17603] Bluetooth: hci4: Opcode 0x1005 failed: -110 [ 1112.613208][T12316] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1113.244090][T12316] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1113.295987][T17603] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1113.764291][T17603] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1113.821993][T12316] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1113.954381][T12316] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1114.290077][T12316] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1114.442586][T12316] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1114.510762][T17603] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1114.661094][T12316] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1114.730839][T17603] Bluetooth: hci3: command tx timeout [ 1114.736914][T17603] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1114.806106][T17603] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1114.927524][ C0] net_ratelimit: 8005 callbacks suppressed [ 1114.927554][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1114.945926][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1114.959710][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:dc:78:ec:63:26, vlan:0) [ 1114.972194][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1114.984666][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1114.997197][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1115.009674][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1115.022225][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1115.034711][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1115.048465][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:dc:78:ec:63:26, vlan:0) [ 1115.076995][T19451] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1115.918232][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.924586][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1119.236968][T12316] Bluetooth: hci7: Opcode 0x1005 failed: -110 [ 1119.260589][T19451] Bluetooth: hci3: command tx timeout [ 1119.280949][T12316] Bluetooth: hci4: command tx timeout [ 1119.287017][T12316] Bluetooth: hci6: command tx timeout [ 1119.335981][T17603] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1119.402638][T12316] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1119.476706][T12316] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1119.937404][ C0] net_ratelimit: 8143 callbacks suppressed [ 1119.937428][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1119.955763][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1119.968306][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1119.980751][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1119.994342][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:dc:78:ec:63:26, vlan:0) [ 1120.006788][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1120.019213][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1120.031722][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1120.044192][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1120.058270][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1121.732885][T21805] Bluetooth: hci7: Opcode 0x1005 failed: -110 [ 1123.773534][T12316] Bluetooth: hci4: command tx timeout [ 1123.795069][T12316] Bluetooth: hci3: command tx timeout [ 1123.816340][T17603] Bluetooth: hci6: command tx timeout [ 1124.947467][ C0] net_ratelimit: 8468 callbacks suppressed [ 1124.947492][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:dc:78:ec:63:26, vlan:0) [ 1124.965778][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1124.978227][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1124.990715][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1125.003140][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1125.015624][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1125.028072][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1125.041131][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:b1:05:3c:39:08, vlan:0) [ 1125.054410][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:dc:78:ec:63:26, vlan:0) [ 1125.066884][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1129.957629][ C0] net_ratelimit: 8812 callbacks suppressed [ 1129.957654][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1129.976422][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:b1:05:3c:39:08, vlan:0) [ 1129.989419][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:dc:78:ec:63:26, vlan:0) [ 1130.001839][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1130.014238][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1130.026722][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1130.039141][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1130.051623][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1130.064048][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1130.076977][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:b1:05:3c:39:08, vlan:0) [ 1130.270818][T12316] Bluetooth: hci4: command tx timeout [ 1130.276280][T12316] Bluetooth: hci6: command tx timeout [ 1130.387135][T12316] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1130.573937][T12316] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1132.607165][T12316] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1132.716979][T19451] Bluetooth: hci6: command tx timeout [ 1132.752514][T19451] Bluetooth: hci4: command tx timeout [ 1132.772075][T17603] Bluetooth: hci7: Opcode 0x1001 failed: -110 [ 1133.669126][T17603] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1134.136481][T17603] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1134.707827][T17603] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1134.967495][ C0] net_ratelimit: 8450 callbacks suppressed [ 1134.967520][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1134.985858][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1134.998323][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1135.010823][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1135.023333][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1135.036408][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:b1:05:3c:39:08, vlan:0) [ 1135.049507][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:dc:78:ec:63:26, vlan:0) [ 1135.061957][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1135.074407][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1135.086920][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1137.136919][T12316] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1138.070603][T12316] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1139.977397][ C0] net_ratelimit: 8598 callbacks suppressed [ 1139.977432][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1139.995756][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1140.008254][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1140.020764][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1140.033248][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1140.046311][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:b1:05:3c:39:08, vlan:0) [ 1140.059379][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:dc:78:ec:63:26, vlan:0) [ 1140.071815][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1140.084424][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1140.097144][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1141.887744][T21817] Bluetooth: hci7: Opcode 0x0c1a failed: -110 [ 1143.246290][T12316] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1143.271823][T12316] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1143.343507][T12316] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1144.112323][T12316] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1144.563531][T12316] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1144.987593][ C0] net_ratelimit: 8522 callbacks suppressed [ 1144.987621][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1145.006643][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:b1:05:3c:39:08, vlan:0) [ 1145.019855][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:dc:78:ec:63:26, vlan:0) [ 1145.032314][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1145.044789][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1145.057274][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1145.069717][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1145.083441][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1145.095904][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1145.108926][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:b1:05:3c:39:08, vlan:0) [ 1149.997626][ C0] net_ratelimit: 8743 callbacks suppressed [ 1149.997650][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:b1:05:3c:39:08, vlan:0) [ 1150.016615][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:dc:78:ec:63:26, vlan:0) [ 1150.029101][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1150.041576][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1150.054100][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1150.066564][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1150.079111][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1150.091557][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1150.106508][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:b1:05:3c:39:08, vlan:0) [ 1150.119495][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:dc:78:ec:63:26, vlan:0) [ 1152.461259][T12316] Bluetooth: hci7: command tx timeout [ 1155.008103][ C0] net_ratelimit: 8662 callbacks suppressed [ 1155.008130][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:b1:05:3c:39:08, vlan:0) [ 1155.027132][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:dc:78:ec:63:26, vlan:0) [ 1155.039624][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1155.052121][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1155.064680][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1155.077173][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1155.089731][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1155.102190][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1155.115300][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:b1:05:3c:39:08, vlan:0) [ 1155.128446][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:dc:78:ec:63:26, vlan:0) [ 1156.311466][T17603] Bluetooth: hci7: command tx timeout [ 1160.017580][ C0] net_ratelimit: 8834 callbacks suppressed [ 1160.017606][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1160.035856][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1160.048368][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1160.060816][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1160.073769][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:b1:05:3c:39:08, vlan:0) [ 1160.086742][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:dc:78:ec:63:26, vlan:0) [ 1160.099158][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1160.111569][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1160.124000][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1160.136419][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1160.563214][T17603] Bluetooth: hci7: command tx timeout [ 1165.027513][ C0] net_ratelimit: 8967 callbacks suppressed [ 1165.027538][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1165.045927][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1165.058429][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1165.071440][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:b1:05:3c:39:08, vlan:0) [ 1165.084485][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:dc:78:ec:63:26, vlan:0) [ 1165.096931][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1165.109373][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1165.121832][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1165.134326][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1165.146935][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1166.134228][T19451] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1166.156850][T12316] Bluetooth: hci7: command tx timeout [ 1166.271119][T17603] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1166.349967][T17603] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1166.372594][T17603] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1166.953966][T17603] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1168.112408][T17603] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1169.961929][T17603] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1170.037669][ C0] net_ratelimit: 8709 callbacks suppressed [ 1170.037694][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1170.056078][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1170.068611][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1170.081045][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1170.094078][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:b1:05:3c:39:08, vlan:0) [ 1170.107117][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:dc:78:ec:63:26, vlan:0) [ 1170.119562][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1170.131961][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1170.144523][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1170.156987][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1175.047500][ C0] net_ratelimit: 8688 callbacks suppressed [ 1175.047524][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1175.065860][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1175.078946][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:b1:05:3c:39:08, vlan:0) [ 1175.092114][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:dc:78:ec:63:26, vlan:0) [ 1175.104615][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1175.117094][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1175.129632][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1175.142166][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1175.154790][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1175.167243][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1176.011914][T12316] Bluetooth: hci5: command tx timeout [ 1177.255651][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.262129][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1179.907449][T12316] Bluetooth: hci5: command tx timeout [ 1179.945222][T21794] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1179.968225][T19451] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1180.025654][T21794] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1180.051124][T19451] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1180.058236][ C0] net_ratelimit: 8524 callbacks suppressed [ 1180.058254][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1180.058743][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1180.059316][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1180.059740][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1180.060832][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:b1:05:3c:39:08, vlan:0) [ 1180.061880][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:dc:78:ec:63:26, vlan:0) [ 1180.062285][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1180.062751][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1180.063282][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1180.063700][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1183.063686][T21851] Bluetooth: hci5: command tx timeout [ 1183.084913][T21851] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1183.220061][T17603] Bluetooth: hci9: Opcode 0x1003 failed: -110 [ 1184.309948][T17603] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1184.332113][T17603] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1184.355364][T17603] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1184.481965][T19451] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1184.611717][T19451] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1185.067708][ C0] net_ratelimit: 8378 callbacks suppressed [ 1185.067734][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:b1:05:3c:39:08, vlan:0) [ 1185.086674][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:dc:78:ec:63:26, vlan:0) [ 1185.099179][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1185.111607][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1185.124131][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1185.136655][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1185.150666][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1185.163201][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1185.176295][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:b1:05:3c:39:08, vlan:0) [ 1185.189459][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:dc:78:ec:63:26, vlan:0) [ 1186.527465][T21846] Bluetooth: hci9: Opcode 0x1001 failed: -110 [ 1186.993377][T19451] Bluetooth: hci5: command tx timeout [ 1190.078298][ C0] net_ratelimit: 7511 callbacks suppressed [ 1190.078324][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:dc:78:ec:63:26, vlan:0) [ 1190.096625][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1190.109106][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1190.121669][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1190.134277][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1190.147909][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1190.160394][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1190.173411][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:b1:05:3c:39:08, vlan:0) [ 1190.186563][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:dc:78:ec:63:26, vlan:0) [ 1190.199075][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1191.590886][T12316] Bluetooth: hci8: Opcode 0x0c16 failed: -110 [ 1191.733128][T19451] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1191.769545][T12316] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1191.976325][T21851] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1192.028389][T12316] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1192.036848][T12316] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1192.109846][T19451] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1192.190922][T19451] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1194.287448][T21845] Bluetooth: hci8: Opcode 0x0c38 failed: -110 [ 1195.088554][ C0] net_ratelimit: 6739 callbacks suppressed [ 1195.088580][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1195.106883][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1195.120057][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:b1:05:3c:39:08, vlan:0) [ 1195.133119][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:dc:78:ec:63:26, vlan:0) [ 1195.145953][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1195.158451][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1195.171214][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1195.183730][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1195.197502][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1195.209996][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1196.234580][T12316] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1198.933886][T21851] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1199.503985][T19451] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1199.632823][T19451] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1199.977264][T21851] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1200.097460][ C0] net_ratelimit: 7035 callbacks suppressed [ 1200.097484][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1200.115795][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1200.128870][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:b1:05:3c:39:08, vlan:0) [ 1200.141955][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:dc:78:ec:63:26, vlan:0) [ 1200.154489][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1200.167008][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1200.179525][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1200.191974][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1200.205574][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1200.218100][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1202.047442][T21859] Bluetooth: hci9: Opcode 0x0c1a failed: -110 [ 1202.293291][T12316] Bluetooth: hci8: Opcode 0x1009 failed: -110 [ 1205.087522][T21866] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 1205.108400][ C0] net_ratelimit: 7099 callbacks suppressed [ 1205.108422][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1205.126692][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1205.139303][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1205.152427][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:b1:05:3c:39:08, vlan:0) [ 1205.165536][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:dc:78:ec:63:26, vlan:0) [ 1205.178002][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1205.190450][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1205.203035][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1205.215687][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1205.229423][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1208.373615][T19451] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1208.399108][T21851] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1208.505212][T21851] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1208.562438][T19451] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1208.604453][T19451] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1208.951147][T19451] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1210.117401][ C0] net_ratelimit: 7319 callbacks suppressed [ 1210.117425][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:dc:78:ec:63:26, vlan:0) [ 1210.135700][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1210.148168][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1210.160713][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1210.173227][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1210.185712][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1210.198159][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1210.211646][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1210.224102][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1210.236616][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1210.993272][T21794] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1211.118287][T12316] Bluetooth: hci9: Opcode 0x1005 failed: -110 [ 1211.508508][T12316] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1211.703246][T12316] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1212.044735][T21794] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1212.111713][T12316] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1212.274557][T17603] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1212.373653][T12204] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1212.629950][T12204] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1212.655412][T12316] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1212.946026][T12316] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1214.499136][T17603] Bluetooth: hci10: command tx timeout [ 1214.721135][T21851] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1214.747080][T21851] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1214.767732][T21873] Bluetooth: hci9: Opcode 0x0c1a failed: -110 [ 1214.950556][T12316] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1215.128347][ C0] net_ratelimit: 7565 callbacks suppressed [ 1215.128372][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1215.146730][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1215.159217][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1215.172289][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:b1:05:3c:39:08, vlan:0) [ 1215.185330][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:dc:78:ec:63:26, vlan:0) [ 1215.197803][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1215.210256][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1215.222756][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1215.235229][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1215.247833][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1215.446540][T12316] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1215.672867][T21851] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1216.503675][T21851] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1216.541090][T12204] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1216.566057][T12204] Bluetooth: hci10: command tx timeout [ 1216.664114][T21794] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1216.704402][T21794] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1216.790000][T21851] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1218.873663][T17603] Bluetooth: hci11: Opcode 0x0c39 failed: -110 [ 1218.896175][T19451] Bluetooth: hci9: Opcode 0x1009 failed: -110 [ 1218.944882][T21794] Bluetooth: hci8: command tx timeout [ 1218.966142][T12316] Bluetooth: hci10: command tx timeout [ 1220.137729][ C0] net_ratelimit: 7171 callbacks suppressed [ 1220.137756][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1220.156087][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1220.169625][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1220.182086][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1220.194527][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1220.207537][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:b1:05:3c:39:08, vlan:0) [ 1220.220565][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:dc:78:ec:63:26, vlan:0) [ 1220.233014][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1220.246719][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1220.259271][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1220.408036][T12204] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1221.635876][T17603] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1221.793475][T17603] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1221.836071][T21851] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1221.919966][T21851] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1222.535657][T17603] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1222.558648][T17603] Bluetooth: hci10: command tx timeout [ 1222.564180][T17603] Bluetooth: hci8: command tx timeout [ 1222.702168][T17603] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1224.767523][T21894] Bluetooth: hci11: Opcode 0x0c23 failed: -110 [ 1224.847466][T21897] Bluetooth: hci9: Opcode 0x0c14 failed: -110 [ 1225.147511][ C0] net_ratelimit: 6270 callbacks suppressed [ 1225.147536][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1225.165858][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1225.178347][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1225.191985][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1225.204472][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1225.216919][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1225.229958][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:b1:05:3c:39:08, vlan:0) [ 1225.243076][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:dc:78:ec:63:26, vlan:0) [ 1225.255550][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1225.269332][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1228.186190][T12204] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1228.228718][T17603] Bluetooth: hci8: command tx timeout [ 1230.157585][ C0] net_ratelimit: 6278 callbacks suppressed [ 1230.157616][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:dc:78:ec:63:26, vlan:0) [ 1230.176105][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1230.190302][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1230.202938][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1230.215522][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1230.228143][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1230.240690][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1230.254362][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1230.266867][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1230.279376][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1232.243255][T21851] Bluetooth: hci8: command tx timeout [ 1232.344337][T19451] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1233.586101][T12316] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1233.614521][T19451] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1235.100163][T12316] Bluetooth: hci3: command 0x0406 tx timeout [ 1235.106319][T17603] Bluetooth: hci11: Opcode 0x1003 failed: -110 [ 1235.169176][ C0] net_ratelimit: 6130 callbacks suppressed [ 1235.169201][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1235.187660][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1235.200187][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1235.212721][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1235.225228][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1235.238918][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1235.251494][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1235.263991][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1235.277105][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:b1:05:3c:39:08, vlan:0) [ 1235.290257][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:dc:78:ec:63:26, vlan:0) [ 1235.343771][T21794] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1235.385415][T17603] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1235.409864][T17603] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1235.434114][T19451] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1235.506918][T19451] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1237.567543][T21905] Bluetooth: hci11: Opcode 0x1009 failed: -110 [ 1238.709544][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.715997][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.177480][ C0] net_ratelimit: 6170 callbacks suppressed [ 1240.177505][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:dc:78:ec:63:26, vlan:0) [ 1240.195945][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1240.210226][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1240.223170][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1240.235725][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1240.248304][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1240.260995][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1240.274703][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1240.287432][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1240.300136][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1240.999396][T17603] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1245.189166][ C0] net_ratelimit: 6163 callbacks suppressed [ 1245.189191][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1245.207692][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1245.220765][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1245.234141][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1245.246691][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1245.260683][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1245.273207][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1245.285699][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1245.298846][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:b1:05:3c:39:08, vlan:0) [ 1245.311999][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:dc:78:ec:63:26, vlan:0) [ 1245.370963][T12204] Bluetooth: hci9: Opcode 0x0c14 failed: -110 [ 1245.426839][T12204] Bluetooth: hci6: command 0x0406 tx timeout [ 1245.449248][T12204] Bluetooth: hci4: command 0x0406 tx timeout [ 1245.518541][T17603] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1245.563968][T21890] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1245.586897][T12204] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1245.613233][T12204] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1245.636627][T21890] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1245.791524][T21890] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1246.855050][T21890] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1246.880524][T21890] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1249.087546][T21902] Bluetooth: hci9: Opcode 0x0c38 failed: -110 [ 1250.197540][ C0] net_ratelimit: 6064 callbacks suppressed [ 1250.197565][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1250.216129][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1250.229183][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1250.242908][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1250.255430][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1250.267916][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1250.281037][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:b1:05:3c:39:08, vlan:0) [ 1250.294202][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:dc:78:ec:63:26, vlan:0) [ 1250.306713][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1250.321294][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1252.245762][T12316] Bluetooth: hci11: Opcode 0x0c14 failed: -110 [ 1252.336007][T12204] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1252.646632][T12316] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1254.414428][T12204] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1254.683200][T17603] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1254.697497][T21911] Bluetooth: hci11: Opcode 0x1003 failed: -110 [ 1255.208730][ C0] net_ratelimit: 6082 callbacks suppressed [ 1255.208756][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1255.227135][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1255.239699][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1255.252329][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1255.264943][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1255.278510][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1255.291046][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1255.303489][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1255.316507][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:b1:05:3c:39:08, vlan:0) [ 1255.329566][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:dc:78:ec:63:26, vlan:0) [ 1256.104281][T17603] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1260.217730][ C0] net_ratelimit: 6439 callbacks suppressed [ 1260.217755][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:dc:78:ec:63:26, vlan:0) [ 1260.237535][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1260.250078][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1260.262514][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1260.275044][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1260.287515][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1260.302483][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1260.314950][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1260.327446][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1260.340474][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:b1:05:3c:39:08, vlan:0) [ 1262.797201][T21890] Bluetooth: hci9: Opcode 0x1001 failed: -110 [ 1262.874876][T17603] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1263.524314][T12204] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1263.612016][T12204] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1263.871007][T21890] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1264.117140][T12204] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1264.198065][T21890] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1264.221380][T21890] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1264.945916][T21890] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1265.228250][ C0] net_ratelimit: 6324 callbacks suppressed [ 1265.228276][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:dc:78:ec:63:26, vlan:0) [ 1265.247309][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1265.259900][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:dc:78:ec:63:26, vlan:0) [ 1265.273781][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1265.286335][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1265.298802][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1265.311343][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1265.323789][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1265.337440][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1265.349932][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1267.007481][T21919] Bluetooth: hci9: Opcode 0x0c14 failed: -110 [ 1268.127622][ T31] INFO: task syz-executor:21792 blocked for more than 143 seconds. [ 1268.135601][ T31] Tainted: G U 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1268.176439][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1268.202096][T12316] Bluetooth: hci11: Opcode 0x0c23 failed: -110 [ 1268.211816][ T31] task:syz-executor state:D stack:28216 pid:21792 tgid:21792 ppid:1 task_flags:0x400140 flags:0x00004004 [ 1268.211909][ T31] Call Trace: [ 1268.211919][ T31] [ 1268.211936][ T31] __schedule+0x116a/0x5de0 [ 1268.211988][ T31] ? __lock_acquire+0x622/0x1c90 [ 1268.212028][ T31] ? __pfx___schedule+0x10/0x10 [ 1268.212065][ T31] ? find_held_lock+0x2b/0x80 [ 1268.212093][ T31] ? schedule+0x2d7/0x3a0 [ 1268.212130][ T31] schedule+0xe7/0x3a0 [ 1268.212164][ T31] schedule_preempt_disabled+0x13/0x30 [ 1268.212198][ T31] __mutex_lock+0x6c7/0xb90 [ 1268.212239][ T31] ? inet_rtm_newaddr+0x30c/0x1540 [ 1268.212272][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1268.212308][ T31] ? __kernel_text_address+0xd/0x40 [ 1268.212358][ T31] ? __nla_parse+0x40/0x60 [ 1268.212390][ T31] ? inet_rtm_newaddr+0x30c/0x1540 [ 1268.212416][ T31] inet_rtm_newaddr+0x30c/0x1540 [ 1268.212453][ T31] ? rcu_is_watching+0x12/0xc0 [ 1268.212489][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1268.212528][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1268.212556][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1268.212583][ T31] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1268.212624][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1268.212655][ T31] rtnetlink_rcv_msg+0x95b/0xe90 [ 1268.212697][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1268.212743][ T31] ? __lock_acquire+0x622/0x1c90 [ 1268.212783][ T31] netlink_rcv_skb+0x158/0x420 [ 1268.212812][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1268.212853][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1268.212895][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 1268.212921][ T31] ? is_vmalloc_addr+0x86/0xa0 [ 1268.212963][ T31] netlink_unicast+0x53a/0x7f0 [ 1268.212996][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1268.213035][ T31] netlink_sendmsg+0x8d1/0xdd0 [ 1268.213069][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1268.213112][ T31] __sys_sendto+0x4a0/0x520 [ 1268.213150][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1268.213195][ T31] ? find_held_lock+0x2b/0x80 [ 1268.213248][ T31] __x64_sys_sendto+0xe0/0x1c0 [ 1268.213281][ T31] ? do_syscall_64+0x91/0x490 [ 1268.213317][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1268.213353][ T31] do_syscall_64+0xcd/0x490 [ 1268.213393][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1268.213421][ T31] RIP: 0033:0x7fae665907bc [ 1268.213444][ T31] RSP: 002b:00007fff796dce00 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1268.213479][ T31] RAX: ffffffffffffffda RBX: 00007fae672e4620 RCX: 00007fae665907bc [ 1268.213500][ T31] RDX: 0000000000000028 RSI: 00007fae672e4670 RDI: 0000000000000003 [ 1268.213517][ T31] RBP: 0000000000000000 R08: 00007fff796dce54 R09: 000000000000000c [ 1268.213534][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1268.213552][ T31] R13: 0000000000000000 R14: 00007fae672e4670 R15: 0000000000000000 [ 1268.213589][ T31] [ 1268.213603][ T31] INFO: task syz-executor:21797 blocked for more than 143 seconds. [ 1268.213625][ T31] Tainted: G U 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 [ 1268.213643][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1268.213655][ T31] task:syz-executor state:D stack:27800 pid:21797 tgid:21797 ppid:1 task_flags:0x400140 flags:0x00004004 [ 1268.213741][ T31] Call Trace: [ 1268.213751][ T31] [ 1268.213766][ T31] __schedule+0x116a/0x5de0 [ 1268.213822][ T31] ? __lock_acquire+0x622/0x1c90 [ 1268.213862][ T31] ? __pfx___schedule+0x10/0x10 [ 1268.213904][ T31] ? find_held_lock+0x2b/0x80 [ 1268.213930][ T31] ? schedule+0x2d7/0x3a0 [ 1268.213968][ T31] schedule+0xe7/0x3a0 [ 1268.214002][ T31] schedule_preempt_disabled+0x13/0x30 [ 1268.214037][ T31] __mutex_lock+0x6c7/0xb90 [ 1268.214078][ T31] ? inet_rtm_newaddr+0x30c/0x1540 [ 1268.214109][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1268.214146][ T31] ? __kernel_text_address+0xd/0x40 [ 1268.214195][ T31] ? __nla_parse+0x40/0x60 [ 1268.214227][ T31] ? inet_rtm_newaddr+0x30c/0x1540 [ 1268.214254][ T31] inet_rtm_newaddr+0x30c/0x1540 [ 1268.214290][ T31] ? rcu_is_watching+0x12/0xc0 [ 1268.214319][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1268.214358][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1268.214385][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1268.214411][ T31] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1268.214452][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1268.214488][ T31] rtnetlink_rcv_msg+0x95b/0xe90 [ 1268.214531][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1268.214577][ T31] ? __lock_acquire+0x622/0x1c90 [ 1268.214617][ T31] netlink_rcv_skb+0x158/0x420 [ 1268.214646][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1268.214686][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1268.214727][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 1268.214753][ T31] ? is_vmalloc_addr+0x86/0xa0 [ 1268.214794][ T31] netlink_unicast+0x53a/0x7f0 [ 1268.214827][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1268.214866][ T31] netlink_sendmsg+0x8d1/0xdd0 [ 1268.214902][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1268.214945][ T31] __sys_sendto+0x4a0/0x520 [ 1268.214979][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1268.215025][ T31] ? find_held_lock+0x2b/0x80 [ 1268.215077][ T31] __x64_sys_sendto+0xe0/0x1c0 [ 1268.215111][ T31] ? do_syscall_64+0x91/0x490 [ 1268.215146][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1268.215181][ T31] do_syscall_64+0xcd/0x490 [ 1268.215221][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1268.215249][ T31] RIP: 0033:0x7f1a6fb907bc [ 1268.215270][ T31] RSP: 002b:00007fffbcf7be40 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1268.215296][ T31] RAX: ffffffffffffffda RBX: 00007f1a708e4620 RCX: 00007f1a6fb907bc [ 1268.215316][ T31] RDX: 0000000000000028 RSI: 00007f1a708e4670 RDI: 0000000000000003 [ 1268.215333][ T31] RBP: 0000000000000000 R08: 00007fffbcf7be94 R09: 000000000000000c [ 1268.215351][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1268.215368][ T31] R13: 0000000000000000 R14: 00007f1a708e4670 R15: 0000000000000000 [ 1268.215403][ T31] [ 1268.215417][ T31] INFO: task kworker/u10:18:21809 blocked for more than 143 seconds. [ 1268.215438][ T31] Tainted: G U 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 [ 1268.215456][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1268.215467][ T31] task:kworker/u10:18 state:D stack:29688 pid:21809 tgid:21809 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1268.215565][ T31] Workqueue: events_unbound linkwatch_event [ 1268.215596][ T31] Call Trace: [ 1268.215605][ T31] [ 1268.215621][ T31] __schedule+0x116a/0x5de0 [ 1268.215665][ T31] ? __lock_acquire+0x622/0x1c90 [ 1268.215705][ T31] ? __pfx___schedule+0x10/0x10 [ 1268.215747][ T31] ? find_held_lock+0x2b/0x80 [ 1268.215774][ T31] ? schedule+0x2d7/0x3a0 [ 1268.215812][ T31] schedule+0xe7/0x3a0 [ 1268.215846][ T31] schedule_preempt_disabled+0x13/0x30 [ 1268.215880][ T31] __mutex_lock+0x6c7/0xb90 [ 1268.215919][ T31] ? linkwatch_event+0x51/0xc0 [ 1268.215951][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1268.215986][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 1268.216039][ T31] ? linkwatch_event+0x51/0xc0 [ 1268.216066][ T31] linkwatch_event+0x51/0xc0 [ 1268.216097][ T31] ? __pfx_linkwatch_event+0x10/0x10 [ 1268.216128][ T31] ? rcu_is_watching+0x12/0xc0 [ 1268.216155][ T31] process_one_work+0x9cc/0x1b70 [ 1268.216207][ T31] ? __pfx_process_one_work+0x10/0x10 [ 1268.216255][ T31] ? assign_work+0x1a0/0x250 [ 1268.216293][ T31] worker_thread+0x6c8/0xf10 [ 1268.216345][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1268.216382][ T31] kthread+0x3c5/0x780 [ 1268.216417][ T31] ? __pfx_kthread+0x10/0x10 [ 1268.216454][ T31] ? rcu_is_watching+0x12/0xc0 [ 1268.216487][ T31] ? __pfx_kthread+0x10/0x10 [ 1268.216523][ T31] ret_from_fork+0x5d4/0x6f0 [ 1268.216556][ T31] ? __pfx_kthread+0x10/0x10 [ 1268.216591][ T31] ret_from_fork_asm+0x1a/0x30 [ 1268.216636][ T31] [ 1268.216672][ T31] [ 1268.216672][ T31] Showing all locks held in the system: [ 1268.216684][ T31] 4 locks held by kworker/R-netns/8: [ 1268.216700][ T31] #0: ffff88801c6fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1268.216777][ T31] #1: ffffc900000d7ca8 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1268.216851][ T31] #2: ffffffff90338250 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x890 [ 1268.216916][ T31] #3: ffffffff9034e2a8 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_pernet_exit+0x17/0x150 [ 1268.216987][ T31] 1 lock held by khungtaskd/31: [ 1268.217002][ T31] #0: ffffffff8e5c47c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1268.217100][ T31] 2 locks held by syz-executor/5819: [ 1268.217117][ T31] 4 locks held by kworker/1:5/5839: [ 1268.217132][ T31] #0: ffff8880342dd148 ((wq_completion)wg-kex-wg1#16){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1268.217215][ T31] #1: ffffc9000403fd10 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1268.217311][ T31] #2: ffff88805c94d308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1c2/0x880 [ 1268.239532][ T31] #3: ffff88805c830338 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x5ac/0x880 [ 1268.239613][ T31] 4 locks held by kworker/1:7/5904: [ 1268.239629][ T31] #0: ffff888066124948 ((wq_completion)wg-kex-wg0#16){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1268.239710][ T31] #1: ffffc9000441fd10 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1268.239800][ T31] #2: ffff888066d89308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_response+0x22b/0x950 [ 1268.239875][ T31] #3: ffff88805f145c60 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_response+0x2f7/0x950 [ 1268.239953][ T31] 3 locks held by kworker/0:4/5923: [ 1268.239969][ T31] 2 locks held by kworker/0:5/5924: [ 1268.239985][ T31] 4 locks held by kworker/1:0/10766: [ 1268.240001][ T31] #0: ffff88801b881d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1268.240077][ T31] #1: ffffc900045e7d10 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1268.240151][ T31] #2: ffffffff9034e2a8 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x83/0x1170 [ 1268.240218][ T31] #3: ffff888059e00768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_check_chans_work+0x110/0x1170 [ 1268.240283][ T31] 3 locks held by kworker/u10:0/12198: [ 1268.240299][ T31] 3 locks held by kworker/u10:1/12201: [ 1268.240315][ T31] 3 locks held by kworker/u10:2/12202: [ 1268.240333][ T31] 3 locks held by kworker/u10:3/12207: [ 1268.240349][ T31] 3 locks held by kworker/u10:4/12233: [ 1268.240365][ T31] 9 locks held by kworker/u11:3/12316: [ 1268.240381][ T31] 3 locks held by kworker/u10:5/12345: [ 1268.240398][ T31] 3 locks held by kworker/u10:6/12654: [ 1268.240417][ T31] 3 locks held by kworker/0:1/15345: [ 1268.240432][ T31] #0: ffff88801b880d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1268.240512][ T31] #1: ffffc90005287d10 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1268.240586][ T31] #2: ffffffff9034e2a8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 1268.240662][ T31] 3 locks held by kworker/u10:7/15616: [ 1268.240679][ T31] 1 lock held by syz.4.2042/16406: [ 1268.240695][ T31] 1 lock held by syz.4.2042/16407: [ 1268.240711][ T31] 3 locks held by kworker/u10:8/16449: [ 1268.240726][ T31] 2 locks held by getty/16941: [ 1268.240741][ T31] #0: ffff8880322930a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1268.240811][ T31] #1: ffffc9000357b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 1268.240883][ T31] 1 lock held by syz-executor/19450: [ 1268.240899][ T31] #0: ffffffff9034e2a8 (rtnl_mutex){+.+.}-{4:4}, at: netdev_run_todo+0xebf/0x1320 [ 1268.240962][ T31] 5 locks held by kworker/u11:2/19451: [ 1268.240978][ T31] #0: ffff888025b0b148 ((wq_completion)hci4){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1268.241051][ T31] #1: ffffc900051cfd10 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1268.241124][ T31] #2: ffff888041ec8d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x175/0x430 [ 1268.241190][ T31] #3: ffff888041ec8078 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x13f/0xb10 [ 1268.241255][ T31] #4: ffffffff905bf988 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x14f/0x330 [ 1268.241322][ T31] 2 locks held by syz.1.3236/21734: [ 1268.241337][ T31] #0: ffffffff90338250 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 1268.241402][ T31] #1: ffffffff9034e2a8 (rtnl_mutex){+.+.}-{4:4}, at: netdev_run_todo+0xebf/0x1320 [ 1268.241464][ T31] 4 locks held by kworker/u10:9/21742: [ 1268.241488][ T31] 3 locks held by kworker/u10:10/21750: [ 1268.241504][ T31] 2 locks held by kworker/u10:11/21753: [ 1268.241521][ T31] 3 locks held by kworker/u10:12/21774: [ 1268.241537][ T31] #0: ffff888031097148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1268.241612][ T31] #1: ffffc9000ba87d10 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1268.241688][ T31] #2: ffffffff9034e2a8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x12/0x30 [ 1268.241753][ T31] 2 locks held by syz-executor/21779: [ 1268.241770][ T31] #0: ffffffff90338250 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 1268.241834][ T31] #1: ffffffff9034e2a8 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x1b/0x70 [ 1268.241911][ T31] 2 locks held by syz.0.3247/21784: [ 1268.241927][ T31] #0: ffffffff90338250 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 1268.241990][ T31] #1: ffffffff9034e2a8 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x1b/0x70 [ 1268.242067][ T31] 4 locks held by kworker/u10:13/21783: [ 1268.242084][ T31] 1 lock held by syz.3.3248/21788: [ 1268.242099][ T31] #0: ffffffff9034e2a8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 1268.242173][ T31] 1 lock held by syz-executor/21792: [ 1268.242189][ T31] #0: ffffffff9034e2a8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 1268.242256][ T31] 5 locks held by kworker/u11:4/21794: [ 1268.242272][ T31] #0: ffff888030c80948 ((wq_completion)hci6){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1268.242347][ T31] #1: ffffc9000baa7d10 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1268.242422][ T31] #2: ffff888041eccd80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x175/0x430 [ 1268.242493][ T31] #3: ffff888041ecc078 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x13f/0xb10 [ 1268.242557][ T31] #4: ffffffff905bf988 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x14f/0x330 [ 1268.242622][ T31] 3 locks held by kworker/u10:14/21795: [ 1268.242638][ T31] 1 lock held by syz-executor/21797: [ 1268.242653][ T31] #0: ffffffff9034e2a8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 1268.242717][ T31] 4 locks held by kworker/u10:15/21800: [ 1268.242734][ T31] 4 locks held by kworker/u10:16/21801: [ 1268.242750][ T31] 4 locks held by kworker/u10:17/21802: [ 1268.242766][ T31] 3 locks held by kworker/u10:18/21809: [ 1268.242781][ T31] #0: ffff88801b889148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1268.242856][ T31] #1: ffffc9000b797d10 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1268.242928][ T31] #2: ffffffff9034e2a8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 1268.242988][ T31] 3 locks held by kworker/u10:19/21812: [ 1268.243004][ T31] 3 locks held by kworker/u10:20/21813: [ 1268.243019][ T31] 4 locks held by kworker/u10:21/21819: [ 1268.243036][ T31] 3 locks held by kworker/u10:22/21821: [ 1268.243053][ T31] 4 locks held by kworker/u10:23/21822: [ 1268.243069][ T31] 2 locks held by kworker/u10:24/21823: [ 1268.243085][ T31] 1 lock held by syz-executor/21826: [ 1268.243101][ T31] #0: ffffffff9034e2a8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 1268.243167][ T31] 4 locks held by kworker/u10:25/21835: [ 1268.243183][ T31] 1 lock held by syz-executor/21837: [ 1268.243199][ T31] #0: ffffffff9034e2a8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 1268.243263][ T31] 2 locks held by kworker/0:6/21841: [ 1268.243280][ T31] 7 locks held by kworker/u11:5/21851: [ 1268.243296][ T31] #0: ffff888061522148 ((wq_completion)hci3){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1268.243369][ T31] #1: ffffc90003fcfd10 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1268.243445][ T31] #2: ffff8880233dcd80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x175/0x430 [ 1268.243517][ T31] #3: ffff8880233dc078 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x13f/0xb10 [ 1268.243581][ T31] #4: ffffffff905bf988 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x14f/0x330 [ 1268.243645][ T31] #5: ffff8880494d8b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x730 [ 1268.243721][ T31] #6: ffffffff8e5cfdb8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 1268.243794][ T31] 4 locks held by kworker/u10:26/21854: [ 1268.243811][ T31] 4 locks held by kworker/u10:27/21856: [ 1268.243828][ T31] 3 locks held by kworker/u10:28/21861: [ 1268.243844][ T31] 4 locks held by kworker/u10:29/21862: [ 1268.243861][ T31] 4 locks held by kworker/1:1/21863: [ 1268.243876][ T31] #0: ffff88804b064948 ((wq_completion)wg-kex-wg0#10){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1268.243958][ T31] #1: ffffc9000418fd10 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1268.244052][ T31] #2: ffff888058275308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1c2/0x880 [ 1268.244131][ T31] #3: ffff88805c835c60 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x5ac/0x880 [ 1268.244210][ T31] 4 locks held by kworker/u10:30/21869: [ 1268.244227][ T31] 4 locks held by kworker/u10:31/21870: [ 1268.244244][ T31] 1 lock held by syz-executor/21876: [ 1268.244260][ T31] #0: ffffffff9034e2a8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 1268.244325][ T31] 3 locks held by kworker/u10:32/21881: [ 1268.244342][ T31] 4 locks held by kworker/u10:33/21882: [ 1268.244359][ T31] 1 lock held by syz-executor/21886: [ 1268.244375][ T31] #0: ffffffff9034e2a8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 1268.244441][ T31] 4 locks held by kworker/u10:34/21891: [ 1268.244457][ T31] 1 lock held by dhcpcd/21907: [ 1268.244478][ T31] #0: ffff8880784de258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf60 [ 1268.244550][ T31] 4 locks held by kworker/1:6/21909: [ 1268.244566][ T31] #0: ffff8880595b2948 ((wq_completion)wg-kex-wg0#18){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1268.244647][ T31] #1: ffffc90003017d10 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1268.244741][ T31] #2: ffff888069289308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_response+0x22b/0x950 [ 1268.244820][ T31] #3: ffff88807bd39708 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_response+0x2f7/0x950 [ 1268.244898][ T31] 1 lock held by dhcpcd/21913: [ 1268.244914][ T31] #0: ffff88803142c258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf60 [ 1268.244984][ T31] 1 lock held by dhcpcd/21914: [ 1268.245000][ T31] #0: ffff888025f50258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf60 [ 1268.245070][ T31] 2 locks held by dhcpcd/21915: [ 1268.245086][ T31] #0: ffff88802a6f6258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf60 [ 1268.245156][ T31] #1: ffffffff8e5cfdb8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 1268.245227][ T31] 1 lock held by syz-executor/21919: [ 1268.245243][ T31] #0: ffff888060224d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_open+0x22/0x90 [ 1268.245318][ T31] 3 locks held by kworker/u10:35/21922: [ 1268.245335][ T31] 4 locks held by kworker/u10:36/21923: [ 1268.245351][ T31] 4 locks held by kworker/u10:37/21927: [ 1268.245370][ T31] [ 1268.245379][ T31] ============================================= [ 1268.245379][ T31] [ 1268.245407][ T31] NMI backtrace for cpu 1 [ 1268.245433][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 1268.245475][ T31] Tainted: [U]=USER [ 1268.245484][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1268.245498][ T31] Call Trace: [ 1268.245507][ T31] [ 1268.245517][ T31] dump_stack_lvl+0x116/0x1f0 [ 1268.245554][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1268.245583][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1268.245615][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1268.245647][ T31] watchdog+0xf70/0x12c0 [ 1268.245687][ T31] ? __pfx_watchdog+0x10/0x10 [ 1268.245718][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1268.245753][ T31] ? __kthread_parkme+0x19e/0x250 [ 1268.245783][ T31] ? __pfx_watchdog+0x10/0x10 [ 1268.245815][ T31] kthread+0x3c5/0x780 [ 1268.245848][ T31] ? __pfx_kthread+0x10/0x10 [ 1268.245881][ T31] ? rcu_is_watching+0x12/0xc0 [ 1268.245905][ T31] ? __pfx_kthread+0x10/0x10 [ 1268.245938][ T31] ret_from_fork+0x5d4/0x6f0 [ 1268.245968][ T31] ? __pfx_kthread+0x10/0x10 [ 1268.246000][ T31] ret_from_fork_asm+0x1a/0x30 [ 1268.246037][ T31] [ 1268.246045][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1268.246086][ C0] NMI backtrace for cpu 0 [ 1268.246104][ C0] CPU: 0 UID: 0 PID: 12316 Comm: kworker/u11:3 Tainted: G U 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 1268.246144][ C0] Tainted: [U]=USER [ 1268.246153][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1268.246172][ C0] Workqueue: hci11 hci_power_on [ 1268.246196][ C0] RIP: 0010:__lock_acquire+0x65f/0x1c90 [ 1268.246231][ C0] Code: 10 8b 74 24 18 44 8b 74 24 28 c1 e0 0d 66 0b 04 24 98 29 f0 8b 74 24 20 31 f0 89 c2 41 29 c6 01 c8 c1 c2 06 41 31 d6 44 89 f2 <44> 29 f1 41 01 c6 c1 c2 08 31 d1 89 ca 29 c8 44 01 f1 c1 c2 10 89 [ 1268.246257][ C0] RSP: 0018:ffffc90000006b58 EFLAGS: 00000002 [ 1268.246277][ C0] RAX: 0000000090fb3ac7 RBX: 0000000000000007 RCX: 0000000036198be1 [ 1268.246294][ C0] RDX: 000000005e5e646b RSI: 00000000501fefef RDI: ffff88802b958c08 [ 1268.246313][ C0] RBP: ffff88802b958000 R08: 0000000000000000 R09: 0000000000000000 [ 1268.246330][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88802b958af0 [ 1268.246347][ C0] R13: ffff88802b958c08 R14: 000000005e5e646b R15: 0000000000000001 [ 1268.246371][ C0] FS: 0000000000000000(0000) GS:ffff888124760000(0000) knlGS:0000000000000000 [ 1268.246396][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1268.246413][ C0] CR2: 000056101c8490e0 CR3: 000000000e382000 CR4: 00000000003526f0 [ 1268.246430][ C0] Call Trace: [ 1268.246438][ C0] [ 1268.246450][ C0] ? lock_acquire+0x179/0x350 [ 1268.246484][ C0] lock_acquire+0x179/0x350 [ 1268.246515][ C0] ? unwind_next_frame+0xbd/0x20a0 [ 1268.246554][ C0] ? unwind_next_frame+0x3f4/0x20a0 [ 1268.246592][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1268.246622][ C0] unwind_next_frame+0xd1/0x20a0 [ 1268.246658][ C0] ? unwind_next_frame+0xbd/0x20a0 [ 1268.246695][ C0] ? vprintk_emit+0x418/0x6d0 [ 1268.246728][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1268.246758][ C0] arch_stack_walk+0x94/0x100 [ 1268.246798][ C0] ? vprintk_emit+0x418/0x6d0 [ 1268.246825][ C0] stack_trace_save+0x8e/0xc0 [ 1268.246852][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1268.246882][ C0] ? __lock_acquire+0xb8a/0x1c90 [ 1268.246915][ C0] kasan_save_stack+0x33/0x60 [ 1268.246951][ C0] ? kasan_save_stack+0x33/0x60 [ 1268.246985][ C0] ? kasan_save_track+0x14/0x30 [ 1268.247020][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 1268.247057][ C0] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 1268.247095][ C0] ? skb_ext_add+0xf8/0x7a0 [ 1268.247124][ C0] ? br_nf_forward_ip.part.0+0x28/0x810 [ 1268.247150][ C0] ? br_nf_forward+0xf0f/0x1be0 [ 1268.247173][ C0] ? nf_hook_slow+0xbe/0x200 [ 1268.247209][ C0] ? nf_hook+0x45e/0x780 [ 1268.247241][ C0] ? __br_forward+0x1be/0x5b0 [ 1268.247275][ C0] ? br_flood+0x39c/0x650 [ 1268.247307][ C0] ? br_handle_frame_finish+0xf2d/0x1ca0 [ 1268.247346][ C0] ? br_nf_hook_thresh+0x304/0x410 [ 1268.247366][ C0] ? br_nf_pre_routing_finish_ipv6+0x76a/0xfb0 [ 1268.247392][ C0] ? br_nf_pre_routing_ipv6+0x3cd/0x8c0 [ 1268.247418][ C0] ? br_nf_pre_routing+0x860/0x15b0 [ 1268.247442][ C0] ? br_handle_frame+0xad8/0x14b0 [ 1268.247479][ C0] ? __netif_receive_skb_core.constprop.0+0xa23/0x4a00 [ 1268.247516][ C0] ? __netif_receive_skb_one_core+0xb0/0x1e0 [ 1268.247555][ C0] ? __netif_receive_skb+0x1d/0x160 [ 1268.247587][ C0] ? process_backlog+0x442/0x15e0 [ 1268.247620][ C0] ? __napi_poll.constprop.0+0xb7/0x550 [ 1268.247654][ C0] ? net_rx_action+0xa9f/0xfe0 [ 1268.247687][ C0] ? handle_softirqs+0x216/0x8e0 [ 1268.247713][ C0] ? __irq_exit_rcu+0x109/0x170 [ 1268.247743][ C0] ? irq_exit_rcu+0x9/0x30 [ 1268.247768][ C0] ? sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1268.247803][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1268.247832][ C0] ? console_flush_all+0x9a2/0xc60 [ 1268.247855][ C0] ? console_unlock+0xd8/0x210 [ 1268.247876][ C0] ? vprintk_emit+0x418/0x6d0 [ 1268.247912][ C0] kasan_save_track+0x14/0x30 [ 1268.247948][ C0] __kasan_slab_alloc+0x89/0x90 [ 1268.247986][ C0] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 1268.248022][ C0] ? ebt_do_table+0x1bd9/0x21a0 [ 1268.248052][ C0] ? skb_ext_add+0xf8/0x7a0 [ 1268.248082][ C0] skb_ext_add+0xf8/0x7a0 [ 1268.248111][ C0] ? find_held_lock+0x2b/0x80 [ 1268.248137][ C0] br_nf_forward_ip.part.0+0x28/0x810 [ 1268.248166][ C0] br_nf_forward+0xf0f/0x1be0 [ 1268.248192][ C0] ? __pfx_br_nf_forward+0x10/0x10 [ 1268.248216][ C0] nf_hook_slow+0xbe/0x200 [ 1268.248254][ C0] nf_hook+0x45e/0x780 [ 1268.248304][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1268.248341][ C0] ? __pfx_nf_hook+0x10/0x10 [ 1268.248376][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1268.248415][ C0] __br_forward+0x1be/0x5b0 [ 1268.248449][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1268.248486][ C0] br_flood+0x39c/0x650 [ 1268.248525][ C0] br_handle_frame_finish+0xf2d/0x1ca0 [ 1268.248568][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1268.248614][ C0] ? ip6t_do_table+0xc25/0x1c30 [ 1268.248646][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 1268.248677][ C0] ? nf_hook_slow+0x132/0x200 [ 1268.248714][ C0] br_nf_hook_thresh+0x304/0x410 [ 1268.248743][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1268.248786][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 1268.248813][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1268.248854][ C0] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 1268.248887][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1268.248923][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1268.248962][ C0] br_nf_pre_routing_finish_ipv6+0x76a/0xfb0 [ 1268.248989][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1268.249034][ C0] br_nf_pre_routing_ipv6+0x3cd/0x8c0 [ 1268.249062][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 1268.249088][ C0] ? lock_acquire+0x179/0x350 [ 1268.249122][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 1268.249150][ C0] ? net_generic+0xea/0x2a0 [ 1268.249191][ C0] br_nf_pre_routing+0x860/0x15b0 [ 1268.249219][ C0] br_handle_frame+0xad8/0x14b0 [ 1268.249260][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1268.249302][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1268.249346][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1268.249385][ C0] __netif_receive_skb_core.constprop.0+0xa23/0x4a00 [ 1268.249422][ C0] ? kasan_quarantine_put+0xa0/0x240 [ 1268.249462][ C0] ? kmem_cache_free+0x2d1/0x4d0 [ 1268.249498][ C0] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 1268.249536][ C0] ? kfree_skbmem+0x1a4/0x1f0 [ 1268.249565][ C0] ? sk_skb_reason_drop+0x136/0x1a0 [ 1268.249589][ C0] ? ip6_mc_input+0x46c/0xfd0 [ 1268.249623][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 1268.249659][ C0] ? __lock_acquire+0x622/0x1c90 [ 1268.249694][ C0] ? process_backlog+0x3f0/0x15e0 [ 1268.249731][ C0] __netif_receive_skb_one_core+0xb0/0x1e0 [ 1268.249767][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 1268.249804][ C0] ? lock_acquire+0x179/0x350 [ 1268.249839][ C0] ? process_backlog+0x3f0/0x15e0 [ 1268.249872][ C0] __netif_receive_skb+0x1d/0x160 [ 1268.249906][ C0] process_backlog+0x442/0x15e0 [ 1268.249944][ C0] __napi_poll.constprop.0+0xb7/0x550 [ 1268.249981][ C0] net_rx_action+0xa9f/0xfe0 [ 1268.250020][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1268.250055][ C0] ? mark_held_locks+0x49/0x80 [ 1268.250086][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1268.250122][ C0] ? tmigr_handle_remote+0x132/0x380 [ 1268.250166][ C0] ? run_timer_base+0x121/0x190 [ 1268.250197][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 1268.250231][ C0] handle_softirqs+0x216/0x8e0 [ 1268.250260][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1268.250290][ C0] __irq_exit_rcu+0x109/0x170 [ 1268.250315][ C0] irq_exit_rcu+0x9/0x30 [ 1268.250341][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1268.250375][ C0] [ 1268.250384][ C0] [ 1268.250393][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1268.250421][ C0] RIP: 0010:console_flush_all+0x9a2/0xc60 [ 1268.250446][ C0] Code: 00 e8 32 7e 28 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 00 aa 20 00 48 85 db 0f 85 55 01 00 00 e8 82 ae 20 00 fb 4c 89 e0 <48> c1 e8 03 42 80 3c 38 00 0f 84 11 ff ff ff 4c 89 e7 e8 17 92 86 [ 1268.250471][ C0] RSP: 0018:ffffc90004aef628 EFLAGS: 00000293 [ 1268.250490][ C0] RAX: ffffffff8f2ed158 RBX: 0000000000000000 RCX: ffffffff819adb70 [ 1268.250508][ C0] RDX: ffff88802b958000 RSI: ffffffff819adb7e RDI: 0000000000000007 [ 1268.250525][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 1268.250541][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff8f2ed158 [ 1268.250559][ C0] R13: ffffffff8f2ed100 R14: ffffc90004aef6b8 R15: dffffc0000000000 [ 1268.250581][ C0] ? console_flush_all+0x990/0xc60 [ 1268.250605][ C0] ? console_flush_all+0x99e/0xc60 [ 1268.250630][ C0] ? console_flush_all+0x99e/0xc60 [ 1268.250658][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 1268.250687][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1268.250718][ C0] console_unlock+0xd8/0x210 [ 1268.250745][ C0] ? __pfx_console_unlock+0x10/0x10 [ 1268.250770][ C0] ? _printk+0xc7/0x100 [ 1268.250802][ C0] ? __down_trylock_console_sem+0xb0/0x140 [ 1268.250840][ C0] vprintk_emit+0x418/0x6d0 [ 1268.250865][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 1268.250894][ C0] ? __pfx_hci_read_dev_class_sync+0x10/0x10 [ 1268.250932][ C0] _printk+0xc7/0x100 [ 1268.250963][ C0] ? __pfx__printk+0x10/0x10 [ 1268.250996][ C0] ? __hci_cmd_sync_sk+0x4a2/0xc90 [ 1268.251025][ C0] ? __pfx___hci_cmd_sync_sk+0x10/0x10 [ 1268.251057][ C0] bt_err+0xe4/0x120 [ 1268.251089][ C0] ? __pfx_bt_err+0x10/0x10 [ 1268.251130][ C0] hci_read_dev_class_sync+0x13e/0x160 [ 1268.251167][ C0] hci_dev_open_sync+0x1b70/0x2430 [ 1268.251198][ C0] ? __pfx_hci_dev_open_sync+0x10/0x10 [ 1268.251230][ C0] ? lockdep_unlock+0x64/0xe0 [ 1268.251253][ C0] ? __lock_acquire+0x1053/0x1c90 [ 1268.251288][ C0] hci_dev_do_open+0x2a/0x90 [ 1268.251325][ C0] hci_power_on+0x131/0x610 [ 1268.251350][ C0] ? __pfx_hci_power_on+0x10/0x10 [ 1268.251378][ C0] ? rcu_is_watching+0x12/0xc0 [ 1268.251405][ C0] process_one_work+0x9cc/0x1b70 [ 1268.251448][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1268.251490][ C0] ? assign_work+0x1a0/0x250 [ 1268.251526][ C0] worker_thread+0x6c8/0xf10 [ 1268.251569][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1268.251606][ C0] kthread+0x3c5/0x780 [ 1268.251655][ C0] ? __pfx_kthread+0x10/0x10 [ 1268.251690][ C0] ? rcu_is_watching+0x12/0xc0 [ 1268.251715][ C0] ? __pfx_kthread+0x10/0x10 [ 1268.251770][ C0] ret_from_fork+0x5d4/0x6f0 [ 1268.251804][ C0] ? __pfx_kthread+0x10/0x10 [ 1268.251838][ C0] ret_from_fork_asm+0x1a/0x30 [ 1268.251872][ C0] [ 1268.292759][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1268.292785][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 1268.292823][ T31] Tainted: [U]=USER [ 1268.292833][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1268.292848][ T31] Call Trace: [ 1268.292858][ T31] [ 1268.292868][ T31] dump_stack_lvl+0x3d/0x1f0 [ 1268.292907][ T31] panic+0x71c/0x800 [ 1268.292938][ T31] ? __pfx___irq_work_queue_local+0x10/0x10 [ 1268.292976][ T31] ? __pfx_panic+0x10/0x10 [ 1268.293006][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1268.293041][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1268.293072][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1268.293102][ T31] ? watchdog+0xdda/0x12c0 [ 1268.293135][ T31] ? watchdog+0xdcd/0x12c0 [ 1268.293172][ T31] watchdog+0xdeb/0x12c0 [ 1271.524260][ T31] ? __pfx_watchdog+0x10/0x10 [ 1271.528985][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1271.534230][ T31] ? __kthread_parkme+0x19e/0x250 [ 1271.539293][ T31] ? __pfx_watchdog+0x10/0x10 [ 1271.544025][ T31] kthread+0x3c5/0x780 [ 1271.548149][ T31] ? __pfx_kthread+0x10/0x10 [ 1271.553215][ T31] ? rcu_is_watching+0x12/0xc0 [ 1271.558110][ T31] ? __pfx_kthread+0x10/0x10 [ 1271.562753][ T31] ret_from_fork+0x5d4/0x6f0 [ 1271.567373][ T31] ? __pfx_kthread+0x10/0x10 [ 1271.572000][ T31] ret_from_fork_asm+0x1a/0x30 [ 1271.576812][ T31] [ 1271.580116][ T31] Kernel Offset: disabled [ 1271.584449][ T31] Rebooting in 86400 seconds..