last executing test programs: 5m25.653011057s ago: executing program 3 (id=3747): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket(0x15, 0x5, 0x0) getsockopt$auto(r0, 0x114, 0x271d, 0xfffffffffffffffc, 0x0) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, 0x0, 0x20000004) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r1) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006400)={0x2e20, r2, 0x1, 0x51bd2e, 0x25dfcbfb, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x2e07}]}, 0x2e20}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r3, &(0x7f0000003480)={0x0, 0x0, &(0x7f0000003440)={&(0x7f00000009c0)={0x38, r4, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x20, 0x1, 0x0, 0x1, [@nested={0x1c, 0x2f, 0x0, 0x1, [@typed={0x14, 0x42, 0x0, 0x0, @ipv6=@local}, @nested={0x4, 0xf7}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40c4}, 0x4000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r6, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0xfffffffffffffeee, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x80) r7 = socket(0x2, 0x1, 0x0) getsockopt$auto(r7, 0x6, 0x25, 0x0, 0x0) mlock$auto(0x800, 0x85fc) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x200403, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card1/pcm0c/oss\x00', 0xc100, 0x0) r8 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="01002dbd7000f9dbdf2501000000060002000100000005000700570000000800090108000000050004000300000014001f00fe88000000000000000000000000000114002000ff010000000000000000000000000001"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$auto_SG_GET_PACK_ID(r8, 0x227c, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) 5m24.585727251s ago: executing program 3 (id=3750): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB='\v', @ANYRES16, @ANYBLOB="14000000"], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) setreuid$auto(0x7, 0x0) r1 = getpgid(0x0) prlimit64$auto(r1, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) read$auto(r0, &(0x7f0000000100)='nl80211\x00', 0xbe62) mmap$auto(0x0, 0x20020009, 0xdf, 0xeb1, 0x401, 0x9) r3 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cec6\x00', 0x121480, 0x0) ioctl$auto_CEC_ADAP_G_PHYS_ADDR(r3, 0x80026101, &(0x7f0000000200)=0x2) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x40000003, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x11, 0xa, 0x300) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x7, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x238240, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) preadv$auto(0x3, 0x0, 0x3, 0x3, 0x10) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/set_event_notrace_pid\x00', 0x582, 0x0) write$auto(0x3, 0x0, 0x5) r4 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000280)='/dev/mtd0ro\x00', 0x20800, 0x0) ioctl$auto_MEMGETREGIONCOUNT(r4, 0x80044d07, &(0x7f0000000040)=0x51) clone$auto(0x4, 0x401, &(0x7f0000000000)=0x7ff, &(0x7f0000000240)=0x9, 0x5) lsm_get_self_attr$auto(0x64, &(0x7f0000000080)={0x10, 0x1, 0x7fffffffffffffff}, &(0x7f0000002440)=0x1fb, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030009000000060007000080000008000200", @ANYRES32=r2, @ANYBLOB="0a00050000000000000000000a000100aaaaaaaaaabb00000a000500aaaaaaaaaa3700000800040010000000"], 0x68}, 0x1, 0x0, 0x0, 0x20040000}, 0x40090) 5m23.308519835s ago: executing program 3 (id=3754): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000300), r0) sendmsg$auto_TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}}, 0x40) mmap$auto(0x0, 0x20009, 0x4000000000e0, 0xeb4, 0x401, 0x8000) bpf$auto_BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=@bpf_attr_3={0x2b, 0xffff, 0x6, 0x5, 0x9, 0x21, 0x4, 0x8, 0xd, "9cb752c613de1e128a360e822228879b", 0x0, 0xd0, 0xffffffffffffffff, 0x200, 0x800000000, 0x3, 0x8, 0x20009, 0x6, 0x2, @attach_prog_fd, 0x0, 0x3, 0x5b, 0x6, 0x6}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r2 = open(0x0, 0x161342, 0x100) write$auto(r2, &(0x7f0000000000)='}\x00', 0x5) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mremap$auto(0x200000000000, 0x40000000004, 0x4, 0x3, 0x100000000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, 0x0, 0x20202, 0x0) madvise$auto(0x3, 0x3c, 0x19) memfd_create$auto(0x0, 0x7) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r3, &(0x7f0000000180)='\x05\x00\x00\x00', 0x80000005) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_STATION(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000900)={0x14, 0x0, 0x4, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x2000c040) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000fc0), r4) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001040), r4) sendmsg$auto_NL80211_CMD_NEW_KEY(r5, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f00000011c0)={0x18, r6, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x864) 5m20.452788893s ago: executing program 3 (id=3765): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, r0, 0x8000) lsm_list_modules$auto(0x0, 0x0, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x2) set_mempolicy$auto(0x1, 0x0, 0x803) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x400) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008012, 0x3, 0x0) msync$auto(0x0, 0xe0, 0x6) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) msgget$auto(0xc, 0x77d9) msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x9) 5m18.93318016s ago: executing program 3 (id=3775): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x203b, 0xffffffffffffffff, 0x4, 0x0, 0xf54) sysinfo$auto(0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/zram0/mem_limit\x00', 0x183841, 0x0) pwrite64$auto(r0, &(0x7f0000000040)='+Dev/loop\xff\x0f\x00\x1bl\x00\xee\xb2g\xb8\x05\xaa\xa3\xe1\xfb\xc0/\xd9\x05\x98\x00\xb6!/?\xef\\y\x06\xfe\x90\x95\xd5\rJ\x7f\x80Lg\x9a\xa9\xfeE\xbb/~\xee\x8c*\f\xb3\x1cDT\x15JB\xf7\'\x8cq\xc1\xfd\x85]\a\xa7\x94\x98c1\x85\xbd\xde?\t\x89\xb5\xc4Nb\x9cg8h\xd9%\xd1\x06\x81\x00\x00\x00\xd2m\xbe\x12\xa9\xb6\x1bTL\xf0\x1f\xb3\xb7I\xe9\x00\xa5\x90\x94\x1ajm3V\x03{\x99(v\xe8y\xf5\xec\xe6\xe6\xdaj\xdb\xa9\xb5\xe6\x17D\x92\xdaOB& \x8c\xbf\xf2\xc4*\xbdvn!\x02\xc3\x96\x10ZN\x8d\xe8^\x14\x8c\xc0\xa1`\xb4_\x98\xa9M\xb2\x8e\tna,\x92\x94\x8a8\xdb\xd0\x91A\x8c\xc7\xf8m\xef>O\xe5\xd0x\xa7\xb4\xcf-\xd0\x1e\xdf\xe7p\x91m\x95\x17[\x8d\xe3\xc2t\xf4\xb9\x9d\xb1RY\xd8\xe8\x89\xb9\x10.S\x14\x1e\xbd\x19\x88=\xf8\x85m\xb0\xfe*Dl\r\xb2\\j\x8doJ\x87\xd1\'\x04O\x8cn\fB<8TL~l\xfcg\x03\x11&7J\xfbV\xda\x03\xdc\xdc5%\xe5p\\!8\xacp\xa7\xc5s\x87\x10\x87\x9c\xbf\xd4\xcb\xd8\x12', 0x80000001, 0x80000000006) 5m18.690345939s ago: executing program 3 (id=3778): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a9402, 0x0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x20044885) timer_create$auto(0x9, 0x0, 0x0) read$auto(0x3, 0x0, 0x8080) socket(0xa, 0x1, 0x100) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) r1 = openat$auto_ptdump_fops_(0xffffffffffffff9c, &(0x7f0000005b80), 0x101000, 0x0) preadv$auto(r1, &(0x7f0000005c40)={0x0, 0x3ff}, 0x1, 0x9, 0x1) shmctl$auto_IPC_SET(0x849b, 0x1, &(0x7f0000000340)={{0x80, 0xee00, 0xee00, 0x7, 0x8, 0x4bd6, 0x5}, 0x7fffffff, 0x5, 0x0, 0x1, @raw=0x100, @inferred=0xffffffffffffffff, 0xa, 0x0, &(0x7f00000000c0)="4f0d6995e943b6bc1919e836e1a6e889b4881e233d3b51e066bb0a054c9e474be535fd29da", &(0x7f00000003c0)="e3ac9b01ee8d985b677531eeeee5cb5bf774d2df4d9ae6dccbc98def20b72c7c2826a585ba3a8d67815abade214708a4ade77c6faa2f2889ca3e7989f32645dd597a3ae1b46e8d8c7e03ae6b8aaa49f6bf64cc5fa98e2528e1b31020995166b1c667db8c5bdeec94d498f4114004e286730072b48eb4a8b8fd768b46b7050824f12f5e7623a15a0cd41491702573b0a52675c7b02ca4f4f05c6857539e183567cc6fbbad629f60b3f6"}) fsconfig$auto(r0, 0x800, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/power/wakeup_abort_count\x00', 0x0, r2) write$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffffff, &(0x7f00000001c0)="624d1bfe595046ab5c98199adf260600de16baef6176e6021e1dce210500e8fdffff0000000000fffffffe00a7ed73de11", 0x31) process_mrelease$auto(0xffffffffffffffff, 0xa) mmap$auto(0x0, 0x40000b, 0xde, 0x9b72, 0xffffffffffffffff, 0x8000) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mount$auto(0x0, 0xfffffffffffffffe, 0x0, 0x80, 0xfffffffffffffffe) write$auto(r3, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) mkdir$auto(&(0x7f0000000100)='./file0\x00', 0xff) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/036/001\x00', 0x802, 0x0) socket(0x2, 0x1, 0x106) mmap$auto(0x1000000000, 0x100000400008, 0x1000000000000df, 0x4000009b73, 0xffffffffffffffff, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x40080, 0x0) select$auto(0x80000003, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001fd, 0x7, 0xd3e, 0x5, 0x9687, 0x100000000000002, 0x3c2a19d5, 0x6, 0x3, 0x5e, 0x8, 0x5, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffd]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x1, 0x4, 0x3, 0x3, 0x3, 0xffffffffffffffff, 0x3, 0x8000000000400000, 0x2, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0) close_range$auto(0x2, 0x8, 0x0) 5m3.64082439s ago: executing program 32 (id=3778): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a9402, 0x0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x20044885) timer_create$auto(0x9, 0x0, 0x0) read$auto(0x3, 0x0, 0x8080) socket(0xa, 0x1, 0x100) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) r1 = openat$auto_ptdump_fops_(0xffffffffffffff9c, &(0x7f0000005b80), 0x101000, 0x0) preadv$auto(r1, &(0x7f0000005c40)={0x0, 0x3ff}, 0x1, 0x9, 0x1) shmctl$auto_IPC_SET(0x849b, 0x1, &(0x7f0000000340)={{0x80, 0xee00, 0xee00, 0x7, 0x8, 0x4bd6, 0x5}, 0x7fffffff, 0x5, 0x0, 0x1, @raw=0x100, @inferred=0xffffffffffffffff, 0xa, 0x0, &(0x7f00000000c0)="4f0d6995e943b6bc1919e836e1a6e889b4881e233d3b51e066bb0a054c9e474be535fd29da", &(0x7f00000003c0)="e3ac9b01ee8d985b677531eeeee5cb5bf774d2df4d9ae6dccbc98def20b72c7c2826a585ba3a8d67815abade214708a4ade77c6faa2f2889ca3e7989f32645dd597a3ae1b46e8d8c7e03ae6b8aaa49f6bf64cc5fa98e2528e1b31020995166b1c667db8c5bdeec94d498f4114004e286730072b48eb4a8b8fd768b46b7050824f12f5e7623a15a0cd41491702573b0a52675c7b02ca4f4f05c6857539e183567cc6fbbad629f60b3f6"}) fsconfig$auto(r0, 0x800, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/power/wakeup_abort_count\x00', 0x0, r2) write$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffffff, &(0x7f00000001c0)="624d1bfe595046ab5c98199adf260600de16baef6176e6021e1dce210500e8fdffff0000000000fffffffe00a7ed73de11", 0x31) process_mrelease$auto(0xffffffffffffffff, 0xa) mmap$auto(0x0, 0x40000b, 0xde, 0x9b72, 0xffffffffffffffff, 0x8000) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mount$auto(0x0, 0xfffffffffffffffe, 0x0, 0x80, 0xfffffffffffffffe) write$auto(r3, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) mkdir$auto(&(0x7f0000000100)='./file0\x00', 0xff) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/036/001\x00', 0x802, 0x0) socket(0x2, 0x1, 0x106) mmap$auto(0x1000000000, 0x100000400008, 0x1000000000000df, 0x4000009b73, 0xffffffffffffffff, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x40080, 0x0) select$auto(0x80000003, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001fd, 0x7, 0xd3e, 0x5, 0x9687, 0x100000000000002, 0x3c2a19d5, 0x6, 0x3, 0x5e, 0x8, 0x5, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffd]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x1, 0x4, 0x3, 0x3, 0x3, 0xffffffffffffffff, 0x3, 0x8000000000400000, 0x2, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0) close_range$auto(0x2, 0x8, 0x0) 3m57.141229581s ago: executing program 0 (id=4106): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket(0x15, 0x5, 0x0) getsockopt$auto(r0, 0x114, 0x271d, 0xfffffffffffffffc, 0x0) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, 0x0, 0x20000004) r1 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006400)={0x2e20, r1, 0x1, 0x51bd2e, 0x25dfcbfb, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x2e07}]}, 0x2e20}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4) r2 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(0xffffffffffffffff, &(0x7f0000003480)={0x0, 0x0, &(0x7f0000003440)={&(0x7f00000009c0)={0x38, r2, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x20, 0x1, 0x0, 0x1, [@nested={0x1c, 0x2f, 0x0, 0x1, [@typed={0x14, 0x42, 0x0, 0x0, @ipv6=@local}, @nested={0x4, 0xf7}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40c4}, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r4, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0xfffffffffffffeee, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x80) r5 = socket(0x2, 0x1, 0x0) getsockopt$auto(r5, 0x6, 0x25, 0x0, 0x0) mlock$auto(0x800, 0x85fc) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x200403, 0x0) mmap$auto(0x0, 0x4, 0x3, 0x40eb2, 0x401, 0x300000000000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card1/pcm0c/oss\x00', 0xc100, 0x0) r6 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="01002dbd7000f9dbdf2501000000060002000100000005000700570000000800090108000000050004000300000014001f00fe88000000000000000000000000000114002000ff010000000000000000000000000001"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$auto_SG_GET_PACK_ID(r6, 0x227c, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) 3m56.669783256s ago: executing program 0 (id=4107): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x40008000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x2) socketpair$auto(0x3, 0x5, 0x6, 0x0) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) mmap$auto(0x0, 0xa00006, 0x100, 0x80000000010, 0xffffffffffffffff, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0xb, 0x734f, 0x36, 0x67f, 0x1ffde, 0x7, 0x3, 0x20000002, 0xd, 0x3, 0x1, 0x2091, 0xb4, 0x9, 0x6, 0x6, 0x80, 0x4, 0x1cd7, 0x1000, 0x2000, 0x203, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x1fe, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x7980, 0x6}, 0x2, 0x0, 0x0, 0x8) fcntl$auto(0x0, 0x407, 0x100000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x13, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x2, &(0x7f0000000140), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x200, 0x1c7) sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0xc804) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) write$auto(0x3, 0x0, 0xfffffdef) setsockopt$auto(0x3, 0x1000800, 0x8ba2, 0x0, 0xb) bind$auto(0x3, 0x0, 0x6b) 3m55.69230661s ago: executing program 0 (id=4110): mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket(0x15, 0x5, 0x0) getsockopt$auto(r0, 0x114, 0x271d, 0xfffffffffffffffc, 0x0) sendmsg$auto_NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, 0x0, 0x20000004) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_ct_limit(0x0, r1) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006400)={0x2e20, r2, 0x1, 0x51bd2e, 0x25dfcbfb, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x2e07}]}, 0x2e20}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r3, &(0x7f0000003480)={0x0, 0x0, &(0x7f0000003440)={&(0x7f00000009c0)={0x38, r4, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x20, 0x1, 0x0, 0x1, [@nested={0x1c, 0x2f, 0x0, 0x1, [@typed={0x14, 0x42, 0x0, 0x0, @ipv6=@local}, @nested={0x4, 0xf7}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40c4}, 0x4000) socket(0x2, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xe8) r5 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="01002dbd7000f9dbdf2501000000060002000100000005000700570000000800090108000000050004000300000014001f00fe88000000000000000000000000000114002000ff010000000000000000000000000001"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$auto(r5, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) ioctl$auto_SG_GET_PACK_ID(r5, 0x227c, 0x0) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000100), 0x401, 0x0) ioctl$auto_XFS_IOC_ALLOCSP64(0xffffffffffffffff, 0x40305824, &(0x7f00000000c0)={0x3, 0xfff7, 0x1, 0x9}) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) 3m55.262366467s ago: executing program 0 (id=4112): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) r1 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r3, r2, 0x4, 0x34c, r1, @relative_id=0x3, 0xe600}, 0xf) bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x4}, 0xc) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x6) r4 = socket(0x2, 0x1, 0x0) bind$auto(r4, &(0x7f0000000040)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x6a) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800008}, 0x5, 0x20000000) select$auto(0x6, 0x0, 0x0, &(0x7f0000000040)={[0xfffffffffffffffd, 0xb, 0xa, 0x4, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x5e, 0x80000001, 0x7, 0x2, 0x93, 0x400000001, 0x2]}, 0x0) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) 3m54.795341997s ago: executing program 0 (id=4116): setreuid$auto(0x3, 0x7) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) mlock$auto(0xfbe8, 0x1000000000000004) syz_genetlink_get_family_id$auto_psample(&(0x7f00000000c0), 0xffffffffffffffff) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x4e080, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r0, 0x4c09, 0x0) mlock$auto(0x6, 0x4) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-0/xps_cpus\x00', 0x10b062, 0x0) mlock$auto(0x7, 0x9) write$auto(r1, &(0x7f00000002c0)='3\xe2[\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x9b\x1a\x1e-T\xef\xf4,\xfe\xb5\xe8x\xd0`\xf8\xcfHx|j\xa0\n\xc7q\x93\x8e\bPp\xd8\x05\x94\xb77\x8d.\xb3t\xbd\x15\xfdR\xfd3\xa0\xe4\xecz8\x1a\xa1V8\xa4\xe3O\xc8w|\xd4\x7f\xea\xa2X\x86\xa0\xec\xd7\x91\xb1B\xcdd9\x1a[\x96\xe0=\x9aU\xeb\r\xb5\x8e\x8b\xaeq\xa12\xc9\\\xb2\xd5\xfd\xf5\xfb\x88R\xa7\xb5\xfd\xe3\xf9\x10\xf2f\xe7\t}\xe61\xcb\x14\x88\xa2\x0f\xfa\xb5T%\xc6\xb0\xc6\xa9g \\\xa3\xa1\x10@y\xbd\x16\xe1\xdfh\xee\xde\xaa\xa2U\xd7\xf4\xa8\xd6\xc1\xe0X\x8f{m\'(\xfb\xab\x8bXW\x9a>Hl\x9d\xcb\xa3T\x9a%\x1e\x92|a\x9f\xbc\xe4\xd0\xa7\xeb\xb1\xe6\x8e\xae\x02\x964q#u\x8c\x19\x17\xeb\xfc\x16\xab\xb7\b_\xdfh\r\f\xa8/\xb3;(s\x81\xe8\x91\xc2\xfee;\xd1\x86\x8f\xcey+\xe8an\x0e\xd1M\x9d\xa0(u\xb8V\x05\xe9\x8a\xa3\x06C\v]_0\x95\x1el\x16)3\xebb&\xa7\xd9\xf9\xbc\x93D\x06(\xac\xc03G\x1dwX\xb7\xb0\x15\xed\x11\xe6\x0eo?=\x98o\x1a\xd9\x80\xbds\xa9\xb0 \x00', 0x81) getsockopt$auto_SO_PASSSEC(r0, 0x1, 0x22, &(0x7f0000000000)='[/{\x00', &(0x7f0000000080)=0x9) 3m54.583361467s ago: executing program 0 (id=4117): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = socket(0x11, 0x3, 0x9) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x5) ioctl$auto(r2, 0x4008af03, 0x0) ioctl$auto_VHOST_NET_SET_BACKEND(r2, 0x4008af30, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) setuid$auto(0xe) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/lru_gen/enabled\x00', 0x80b02, 0x0) r4 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000140), r0) sendmsg$auto_SMC_NETLINK_FLUSH_UEID(r1, &(0x7f0000001200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000011c0)={&(0x7f0000000180)={0x1014, r4, 0x100, 0x70bd28, 0x25dfdbfc, {}, "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"}, 0x1014}, 0x1, 0x0, 0x0, 0x44801}, 0x0) sendfile$auto(r3, r3, 0x0, 0x1) ioctl$auto(0x3, 0x400454ca, 0x38) open(0x0, 0x261c2, 0x184) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000080)='/proc/kpageflags\x00', 0x2, 0x0) readv$auto(0x3, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) 3m38.940792971s ago: executing program 33 (id=4117): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = socket(0x11, 0x3, 0x9) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x5) ioctl$auto(r2, 0x4008af03, 0x0) ioctl$auto_VHOST_NET_SET_BACKEND(r2, 0x4008af30, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) setuid$auto(0xe) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/lru_gen/enabled\x00', 0x80b02, 0x0) r4 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000140), r0) sendmsg$auto_SMC_NETLINK_FLUSH_UEID(r1, &(0x7f0000001200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000011c0)={&(0x7f0000000180)={0x1014, r4, 0x100, 0x70bd28, 0x25dfdbfc, {}, "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"}, 0x1014}, 0x1, 0x0, 0x0, 0x44801}, 0x0) sendfile$auto(r3, r3, 0x0, 0x1) ioctl$auto(0x3, 0x400454ca, 0x38) open(0x0, 0x261c2, 0x184) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000080)='/proc/kpageflags\x00', 0x2, 0x0) readv$auto(0x3, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) 3m18.915105056s ago: executing program 4 (id=4226): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) socket(0xa, 0x2, 0x88) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0xffffffffffffffff) ioctl$auto(0x3, 0x4040ae77, 0x38) ioctl$auto(0x3, 0x4040ae77, 0x38) lsm_list_modules$auto(0x0, 0x0, 0x0) sendmmsg$auto(r0, 0x0, 0x8, 0x26) set_mempolicy$auto(0x1, 0x0, 0x803) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x400) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008012, 0x3, 0x0) msync$auto(0x0, 0xe0, 0x6) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) close_range$auto(r0, 0x8, 0x0) setrlimit$auto(0x0, &(0x7f0000000040)={0x4d42, 0x9}) mmap$auto(0x0, 0xe983, 0xdf, 0x16, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0xfffffffe) unshare$auto(0x40000080) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon33\x00', 0x2a400, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0xffe, 0x0) close_range$auto(0x2, 0x8, 0x0) msgget$auto(0xc, 0x77d9) msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x9) 3m18.906787511s ago: executing program 5 (id=4227): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) r0 = socket(0xa, 0x2, 0x88) lsm_list_modules$auto(0x0, 0x0, 0x0) sendmmsg$auto(r0, 0x0, 0x7, 0x2) set_mempolicy$auto(0x1, 0x0, 0x803) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x400) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008012, 0x3, 0x0) msync$auto(0x0, 0xe0, 0x6) madvise$auto(0x18000000000, 0xfffffffffffefffd, 0x17) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) msgget$auto(0xc, 0x77d9) msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x9) 3m18.241427345s ago: executing program 5 (id=4229): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2, 0xa, 0xa) r1 = syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) setrlimit$auto(0x0, &(0x7f0000000000)={0x1, 0xfb3}) sigaltstack$auto(&(0x7f0000000080)={0x0, 0x2, 0x4}, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, 0x0, 0xd, 0x10000002, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x1000000000, 0xffffffffffff0001, 0x15) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000001c0), r2) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28040000", @ANYRES16=r3, @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="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", @ANYBLOB="00000014000000fe80000000000000000000000000001409f2b646bf9ce14b00a95f667a064a99faa891d93fe26c2b527de138c78733e7324d24123bd5837bc83a0005002900010000000c002d8008003b00", @ANYRES32=r1, @ANYBLOB="08000100e6c90000"], 0x428}, 0x1, 0x0, 0x0, 0x4}, 0x4000080) sendmsg$auto_NETDEV_CMD_DEV_GET(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x40004) r4 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, 0x0, 0x3) openat$auto_ima_ascii_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) syz_clone3(&(0x7f0000000340)={0x1045100, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/pagemap\x00', 0x2, 0x0) read$auto(r4, 0x0, 0x39ba) io_uring_register$auto(0x2, 0x0, &(0x7f00000003c0)="2b3611e1806f93ab44bc7b11f3aeaeab904d17a161a11bcf8832be117b91a63ec8dc759b1df37b21a338ddbe566281a354c3a3fcb8dff86df7af52b94fdf45377010393a90a6d28e9feb536175618588920c494e08055795da99c3f190ac8843b42bf7a23bc6ff6a4ea77f0260281bd51ef948acbc15686b9f59fb127348069a8d2fa9e5c8d620c85d115125126ab3425dbe8587320749ff90ffa37070cdeba1d3668492cdcf9ae4ed00b2946941920c4075070669caad1037e376e81f5ca03a6239cc5caf4c801d1426a0b2e7d296bb706c693a556149c3e37b52c1e2d2241eaca3f927cbc342c2ba5e779d7073869ff62c7f", 0x3) clone$auto(0x7f, 0x800005feb, 0x0, 0x0, 0x2000000000003) wait4$auto(0x0, 0xfffffffffffffffc, 0x60000003, 0x0) sendmsg$auto_TIPC_NL_LINK_SET(r2, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4004000}, 0x24040840) clone$auto(0x6db, 0x10, 0x0, 0x0, 0x40000006) capset$auto(0x0, 0x0) sendmmsg$auto(r0, &(0x7f0000000040)={{&(0x7f0000000140), 0xff, &(0x7f0000000280)={0x0, 0x4e}, 0x7, 0x0, 0x0, 0x1}, 0x5}, 0x9, 0x7ffe) syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000000), r0) madvise$auto(0x0, 0xec, 0x17) 3m16.465925744s ago: executing program 5 (id=4232): sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x20008800) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r0 = socket$nl_generic(0x10, 0x3, 0x10) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, 0x0, 0xa, 0x0) r1 = socket(0x2, 0x5, 0x0) setsockopt$auto_SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)='}]\x00', 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x40, r2, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0xc, 0x0, 0x1, [@nested={0x4, 0x6}, @nested={0x4, 0x101}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x50}, 0xc800) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x68800}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x15c, r3, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_IE_RIC={0xf2, 0xb2, "112c3b6fc61805ffe4b75dbf193ca60d0245bf6e966f8e4615d5bfdc9917804b5a01efa0d58275f0dc6eaff10946aef3e75ffa74b168a4903b326f6d766cdd19f66767186e5f496a263546309be7870fe4d63ad233cd7293623d067060a540b09a9d339514739c5ff9f369e6e61799f3be68afc98b818d6edcd78e3e3f22b2111b78e47f9afe34b3d693d9e49330ff42a655ed4ced4c970526febdf864f63b3710dc21305b2d4a75a1a971c8b9e2317b30e91d410b370ec1db005263b631a379b2a72bbf51747840adee0c8e1522cffcfa4320b78b66b10d95c6d2235c792ad3027dac79ea808dbdbe91e9b4a73f"}, @NL80211_ATTR_STA_FLAGS2={0x47, 0x43, "d401f7e0c13ac79a9976ed401d4b295ac5e609c2607f9cab2d82c2ac125d4a58a329e2e673ddc45ef4fb8a648544b2672595100e95f0a4271940a8d9635f90c118577e"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4000004}, 0x800) pipe2$auto(0x0, 0x80) syz_clone(0x0, &(0x7f0000000000)="114f6ba81db214ad6ba5918c61a72b83b9d9009946bcf80d6b70", 0x1a, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000240)="61bc6fc1098e7a9eb455a2bf0e88c416949d2ff5d6cd3243cad4ab156bc93e8d885aea47d4aef80fb1904771826220925db16c053c2651c78d2005a1a335964259dde8df8cc1068e84d19c62b86a8c804e85c7b8f587d9e6d040b81530c661fc2afd83d578621840665b4501fb0c79942fe66235418f28193801faf5754b1a8770d315d9159ea9076d4db2") socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x28, 0x5, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0xffffffff, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) bind$auto(r4, &(0x7f0000000080)=@in={0x28, 0x0, @rand_addr=0xffffffff}, 0x68) listen$auto(0x3, 0x81) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, &(0x7f00000001c0)={0x3}, 0x8) mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r5 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2c00, 0x0) ioctl$auto_EVIOCSMASK(r5, 0x40104593, &(0x7f0000000080)={0x2, 0x80000000, 0x7f}) ioctl$auto_EVIOCGMASK(r5, 0x80104592, &(0x7f0000000180)={0x2, 0x3c, 0xc}) close_range$auto(0x2, 0x8, 0x0) 3m15.360179859s ago: executing program 1 (id=4235): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x40008000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x2) socketpair$auto(0x3, 0x5, 0x6, 0x0) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) mmap$auto(0x0, 0xa00006, 0x100, 0x80000000010, 0xffffffffffffffff, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0xb, 0x734f, 0x36, 0x67f, 0x1ffde, 0x7, 0x3, 0x20000002, 0xd, 0x3, 0x1, 0x2091, 0xb4, 0x9, 0x6, 0x6, 0x80, 0x4, 0x1cd7, 0x1000, 0x2000, 0x203, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x1fe, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x7980, 0x6}, 0x2, 0x0, 0x0, 0x8) fcntl$auto(0x0, 0x407, 0x100000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x13, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x200, 0x1c7) sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(r2, 0x0, 0xc804) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) write$auto(0x3, 0x0, 0xfffffdef) setsockopt$auto(0x3, 0x1000800, 0x8ba2, 0x0, 0xb) bind$auto(0x3, 0x0, 0x6b) 3m15.164614431s ago: executing program 5 (id=4236): r0 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000080), 0x200100, 0x0) setsockopt$auto_SO_DEVMEM_DONTNEED(r0, 0x6a1, 0x50, &(0x7f00000000c0)='}}@}\x00', 0x5) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-0/xps_cpus\x00', 0x10b062, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE2(0xffffffffffffffff, 0x2272, &(0x7f0000000000)) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GROUP(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="3940b68f", @ANYRES16=r2, @ANYBLOB="010029bd7000fedbdf25040000000c000180080001000100000004000a8008000800", @ANYRES32=r3, @ANYBLOB="0c0009800800010002000000"], 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x14) open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b) memfd_secret$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/duplex\x00', 0x8000, 0x0) fanotify_init$auto(0x1f53, 0x2000000000002) open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) socket(0x2, 0x1, 0x106) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vivid.0/video4linux/vbi17/dev\x00', 0x208183, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) socket(0x23, 0x2, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x40, 0x18) 3m14.789814358s ago: executing program 2 (id=4237): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) ppoll$auto(&(0x7f0000000000)={0xffffffffffffffff, 0x1, 0xa3}, 0x4, &(0x7f0000000040)={0x8000000000000000, 0x9}, &(0x7f0000000080)={0x9}, 0x8) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MPATH(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x18, r1, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20044890}, 0x810) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket(0x2b, 0x1, 0x1) getsockopt$auto(r2, 0x0, 0x80, 0x0, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, 0x0, 0x24084005) mmap$auto(0x800000, 0x202000b, 0x4, 0x15, 0xfffffffffffffffa, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x4000, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sysfs$auto(0x2, 0x23, 0x0) r3 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r3, 0x0, 0x3) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x1, 0x2020009, 0x3, 0xebe, 0xfffffffffffffffa, 0x8000) shmctl$auto_IPC_SET(0xc, 0x1, &(0x7f0000000300)={{0xffffffff, 0xffffffffffffffff, 0xee01, 0x1000, 0xae, 0x9, 0x6}, 0x1, 0x7, 0x2, 0x280, @raw, @raw=0x5, 0x3, 0x0, &(0x7f0000000140)="4666def67af41b4f051e39fd6511fd6cfab11faa93fdd757f3a42ab52c0db46c7c57737a54cb9ad1fccd9f47e3400debebecee8c4b3ab4b0ecd15cb89799d7a8a423d738e2914ff98f43b494873650cfa841ca9b379cdbceb067f222f9852e4e248e519e6e2d25bc83b3fb9ec16cbc5fe503b9662d19861c9bb377749418140efde7024c7215d323a6c79c5be94bc04ed0d9afbb9c9574ff829522a54b91ef7bcef85e226564639c87b944203a6814a00eea8134d42bc137511ab276827b7ee17d85c2722c34b6d9cd3c095bd1094df859fd44defb05f086d48e42b8cfe4f20b057126cfb78738004716a5e21149cc372c89149624db41", &(0x7f0000000240)="41b431f15aa64d11716c2908cc9f948827ddb702f4ae4ad578a4d9e2fa81507ca870d066e25696b0b2ac35abb53a8fc6e9df9fdbbc11fe705ab85e88111e5684e28f8599bc486b93eea020ee76a340a548c82e805e2d182d741e51d53c799f7bb722a591e8ac4c48f3317ac8926b8b"}) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nullb0/queue/virt_boundary_mask\x00', 0x101000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000003c0)=""/251, 0xfb) socket(0xb, 0xa, 0xd9) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r5 = socket(0xa, 0x1, 0x84) bind$auto(r5, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) 3m14.760077585s ago: executing program 4 (id=4238): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) 3m14.156071264s ago: executing program 1 (id=4239): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/swradio12\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/usb/drivers/usbip-host/rebind\x00', 0x121681, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0x1000000ffde) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) r2 = openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/error_log\x00', 0x2028c2, 0x0) writev$auto(r2, &(0x7f0000000240)={0x0, 0x80}, 0x7f) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f00000000c0)={0x2415, &(0x7f0000000000)={0x28, 0xf3, 0xb0, @inferred=r1}}) poll$auto(&(0x7f0000000480)={r0, 0xffff, 0x29}, 0x3, 0x8) keyctl$auto_KEYCTL_SETPERM(0x5, 0x8001, 0xdbf7, 0x5, 0x10) read$auto_ftrace_set_event_notrace_pid_fops_trace_events(r3, &(0x7f0000000180)=""/161, 0xa1) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x0, 0x9, 0xcd) close_range$auto(0x2, 0x8, 0x0) openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000002f80), 0x2, 0x0) fstat$auto(0x2, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video13\x00', 0x20000, 0x0) ioctl$auto(0x3, 0xc0285628, 0x8) 3m13.984500978s ago: executing program 5 (id=4240): mmap$auto(0x0, 0xaaf, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0xb, 0xd, 0xfffffffd, 0x0) mmap$auto(0x0, 0x5, 0xdf, 0x1a, 0x2, 0x7ffc) r0 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) madvise$auto(0x4000000, 0xffffffffffff0085, 0x1004) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000080)='/dev/audio1\x00', 0x100000a3d9) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_MEM_TABLE(r2, 0x4001af84, &(0x7f0000000000)={0x6}) mmap$auto(0x0, 0x2020008, 0x3, 0xeb1, r0, 0x8000) pread64$auto(0xffffffffffffffff, 0x0, 0x1000f42d, 0x100) r3 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r3, 0x0, 0x4) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match\x00', 0x20080, 0x0) mmap$auto(0x0, 0x4, 0x0, 0x12, 0xfffffffffffffffa, 0xe4) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001f00), r5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x3c, r7, 0x1b, 0x70bc26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0xb, 0x0, 0x0, @fd=r6}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000280)=""/175, 0xaf) mount$auto(&(0x7f0000000140)='macsec0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='/dev/audio1\x00', 0xa76, &(0x7f0000000200)="de956b3182ea1927f1451b79") 3m13.882842754s ago: executing program 2 (id=4241): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/irq/1/type\x00', 0x0, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200d01532f2ed0d", 0x18) r2 = waitid$auto(0x5, 0xffffffffffffffff, &(0x7f0000000000)={@_si_pad}, 0x6, &(0x7f0000000180)={{0xff, 0x70}, {0x1ff, 0x1e}, 0x3, 0x5000000000000, 0x4, 0x8, 0x2, 0xf, 0x5, 0x4, 0x40, 0x6, 0x1, 0xffff, 0x5, 0x30}) syz_open_procfs$namespace(r2, &(0x7f0000000080)='ns/time\x00') openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x68880, 0x0) seccomp$auto_SECCOMP_SET_MODE_FILTER(0x1, 0x8, &(0x7f0000000080)) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000140)=""/33, 0x21) 3m13.753655353s ago: executing program 4 (id=4242): mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) r0 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x26, 0x5, 0x0) openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/smaps\x00', 0xc0000, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) open(0x0, 0x22240, 0x154) ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0) mmap$auto(0x0, 0x4, 0x10000000000, 0x11, 0x3, 0x100000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x8000009, 0x800007, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_5={@target_fd=0x5, 0x7f, 0x9c, 0x7b2, 0x1, @relative_fd=0x2, 0x80}, 0x96) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x7}, 0xc) r2 = socket(0x15, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r2, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x9, 0xfffffffd}, 0x1}, 0x5, 0x20000000) prctl$auto(0x2, 0x2000000000001, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) ioctl$auto(0x3, 0x80108907, 0x38) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r1) sendmsg$auto_NL80211_CMD_SET_SAR_SPECS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r3, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_START_SCHED_SCAN(r2, 0x0, 0x20008040) write$auto(0x3, 0x0, 0xfffffdef) 3m13.631483698s ago: executing program 2 (id=4243): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) r0 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) statx$auto(r0, 0x0, 0x401006, 0x4015, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) memfd_secret$auto(0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) pidfd_open$auto(0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x2, 0x1aa438a6, 0x3, 0x0, 0x15f4da0e, 0x6, 0x9, 0x100000000000000c, 0x8, 0x4, 0x0, 0x9, 0x3, 0x4000000000000d]}, 0x0) 3m13.331132158s ago: executing program 2 (id=4244): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x400, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) fsconfig$auto_SHMEM_HUGE_FORCE(r0, 0x401, &(0x7f0000000000)='[[\x00', &(0x7f0000000040)="bd23d0d02dfb1bb8f668bba5df19a04c31e632d1f1efdc1c0b5888dde525ca17024719c171db11504564769744788e0bc19b7541b87eb8575f365b927766b4ea1df2e075395a66c68e50d8fa2a0af12350597d0d2528907bcc0dfbb8ae31d3f7d13ce380794b9a0592f3de5dfddf2cc7101f05ffe61a0ed4c89a23649c8b6a9a232482bebdba602ce7da0cd9a6acef8c9b05cfea1ba40c3918079586e129403fa4bec663ebb1", 0xfffffffffffffffe) unshare$auto(0x40000080) setgroups$auto(0x2, 0x0) 3m12.988661322s ago: executing program 1 (id=4245): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) ppoll$auto(&(0x7f0000000000)={0xffffffffffffffff, 0x1, 0xa3}, 0x4, &(0x7f0000000040)={0x8000000000000000, 0x9}, &(0x7f0000000080)={0x9}, 0x8) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MPATH(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x18, r1, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20044890}, 0x810) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket(0x2b, 0x1, 0x1) getsockopt$auto(r2, 0x0, 0x80, 0x0, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, 0x0, 0x24084005) mmap$auto(0x800000, 0x202000b, 0x4, 0x15, 0xfffffffffffffffa, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x4000, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sysfs$auto(0x2, 0x23, 0x0) r3 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r3, 0x0, 0x3) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x1, 0x2020009, 0x3, 0xebe, 0xfffffffffffffffa, 0x8000) shmctl$auto_IPC_SET(0xc, 0x1, &(0x7f0000000300)={{0xffffffff, 0xffffffffffffffff, 0xee01, 0x1000, 0xae, 0x9, 0x6}, 0x1, 0x7, 0x2, 0x280, @raw, @raw=0x5, 0x3, 0x0, &(0x7f0000000140)="4666def67af41b4f051e39fd6511fd6cfab11faa93fdd757f3a42ab52c0db46c7c57737a54cb9ad1fccd9f47e3400debebecee8c4b3ab4b0ecd15cb89799d7a8a423d738e2914ff98f43b494873650cfa841ca9b379cdbceb067f222f9852e4e248e519e6e2d25bc83b3fb9ec16cbc5fe503b9662d19861c9bb377749418140efde7024c7215d323a6c79c5be94bc04ed0d9afbb9c9574ff829522a54b91ef7bcef85e226564639c87b944203a6814a00eea8134d42bc137511ab276827b7ee17d85c2722c34b6d9cd3c095bd1094df859fd44defb05f086d48e42b8cfe4f20b057126cfb78738004716a5e21149cc372c89149624db4102", 0x0}) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nullb0/queue/virt_boundary_mask\x00', 0x101000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000003c0)=""/251, 0xfb) socket(0xb, 0xa, 0xd9) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r5 = socket(0xa, 0x1, 0x84) bind$auto(r5, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) 3m12.351397894s ago: executing program 4 (id=4246): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x40008000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x2) socketpair$auto(0x3, 0x5, 0x6, 0x0) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) mmap$auto(0x0, 0xa00006, 0x100, 0x80000000010, 0xffffffffffffffff, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0xb, 0x734f, 0x36, 0x67f, 0x1ffde, 0x7, 0x3, 0x20000002, 0xd, 0x3, 0x1, 0x2091, 0xb4, 0x9, 0x6, 0x6, 0x80, 0x4, 0x1cd7, 0x1000, 0x2000, 0x203, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x1fe, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x7980, 0x6}, 0x2, 0x0, 0x0, 0x8) fcntl$auto(0x0, 0x407, 0x100000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x13, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x200, 0x1c7) sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(r2, 0x0, 0xc804) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) write$auto(0x3, 0x0, 0xfffffdef) setsockopt$auto(0x3, 0x1000800, 0x8ba2, 0x0, 0xb) bind$auto(0x3, 0x0, 0x6b) 3m12.332774231s ago: executing program 1 (id=4247): mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket(0x15, 0x5, 0x0) getsockopt$auto(r0, 0x114, 0x271d, 0xfffffffffffffffc, 0x0) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, 0x0, 0x20000004) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r1) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006400)={0x2e20, r2, 0x1, 0x51bd2e, 0x25dfcbfb, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x2e07}]}, 0x2e20}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4) r3 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(0xffffffffffffffff, &(0x7f0000003480)={0x0, 0x0, &(0x7f0000003440)={&(0x7f00000009c0)={0x38, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x20, 0x1, 0x0, 0x1, [@nested={0x1c, 0x2f, 0x0, 0x1, [@typed={0x14, 0x42, 0x0, 0x0, @ipv6=@local}, @nested={0x4, 0xf7}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40c4}, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r5, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0xfffffffffffffeee, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x80) r6 = socket(0x2, 0x1, 0x0) getsockopt$auto(r6, 0x6, 0x25, 0x0, 0x0) mlock$auto(0x800, 0x85fc) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x200403, 0x0) mmap$auto(0x0, 0x4, 0x3, 0x40eb2, 0x401, 0x300000000000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card1/pcm0c/oss\x00', 0xc100, 0x0) r7 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="01002dbd7000f9dbdf2501000000060002000100000005000700570000000800090108000000050004000300000014001f00fe88000000000000000000000000000114002000ff010000000000000000000000000001"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$auto_SG_GET_PACK_ID(r7, 0x227c, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) 3m11.986274687s ago: executing program 2 (id=4248): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x400, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) setgroups$auto(0x2, 0x0) 3m11.652785024s ago: executing program 1 (id=4249): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video42\x00', 0x426080, 0x0) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)) ioctl$auto_SNDCTL_DSP_GETODELAY(r0, 0x80045017, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) r1 = socket(0xa, 0x2, 0x88) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) accept4$auto(r0, &(0x7f0000000080)=@nfc={0x27, r2, 0x1, 0x3}, &(0x7f0000000140)=0x9, 0x2f9) sendmmsg$auto(r1, 0x0, 0x7, 0x2) set_mempolicy$auto(0x1, 0x0, 0x803) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x400) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008012, 0x3, 0x0) msync$auto(0x0, 0xe0, 0x6) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) msgget$auto(0xc, 0x77d9) msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x9) 3m11.628989426s ago: executing program 5 (id=4250): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) ppoll$auto(&(0x7f0000000000)={0xffffffffffffffff, 0x1, 0xa3}, 0x4, &(0x7f0000000040)={0x8000000000000000, 0x9}, &(0x7f0000000080)={0x9}, 0x8) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MPATH(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x18, r1, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20044890}, 0x810) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket(0x2b, 0x1, 0x1) getsockopt$auto(r2, 0x0, 0x80, 0x0, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, 0x0, 0x24084005) mmap$auto(0x800000, 0x202000b, 0x4, 0x15, 0xfffffffffffffffa, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x4000, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sysfs$auto(0x2, 0x23, 0x0) r3 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r3, 0x0, 0x3) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x1, 0x2020009, 0x3, 0xebe, 0xfffffffffffffffa, 0x8000) shmctl$auto_IPC_SET(0xc, 0x1, &(0x7f0000000300)={{0xffffffff, 0xffffffffffffffff, 0xee01, 0x1000, 0xae, 0x9, 0x6}, 0x1, 0x7, 0x2, 0x280, @raw, @raw=0x5, 0x3, 0x0, &(0x7f0000000140)="4666def67af41b4f051e39fd6511fd6cfab11faa93fdd757f3a42ab52c0db46c7c57737a54cb9ad1fccd9f47e3400debebecee8c4b3ab4b0ecd15cb89799d7a8a423d738e2914ff98f43b494873650cfa841ca9b379cdbceb067f222f9852e4e248e519e6e2d25bc83b3fb9ec16cbc5fe503b9662d19861c9bb377749418140efde7024c7215d323a6c79c5be94bc04ed0d9afbb9c9574ff829522a54b91ef7bcef85e226564639c87b944203a6814a00eea8134d42bc137511ab276827b7ee17d85c2722c34b6d9cd3c095bd1094df859fd44defb05f086d48e42b8cfe4f20b057126cfb78738004716a5e21149cc372c89149624db41", &(0x7f0000000240)="41b431f15aa64d11716c2908cc9f948827ddb702f4ae4ad578a4d9e2fa81507ca870d066e25696b0b2ac35abb53a8fc6e9df9fdbbc11fe705ab85e88111e5684e28f8599bc486b93eea020ee76a340a548c82e805e2d182d741e51d53c799f7bb722a591e8ac4c48f3317ac8926b8b"}) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nullb0/queue/virt_boundary_mask\x00', 0x101000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000003c0)=""/251, 0xfb) socket(0xb, 0xa, 0xd9) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r5 = socket(0xa, 0x1, 0x84) bind$auto(r5, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) 3m11.268363406s ago: executing program 4 (id=4251): io_pgetevents$auto(0x8, 0xc313, 0x7, 0x0, 0x0, 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/zram0/mem_limit\x00', 0x183841, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_ADD_LINK_STA(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000840)={0x7ec, r0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_AUTH_DATA={0x7c1, 0x9c, "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"}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x4}, @NL80211_ATTR_REG_ALPHA2={0x4}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x7}]}, 0x7ec}, 0x1, 0x0, 0x0, 0x40}, 0x850) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000080), 0xffffffffffffffff) shmat$auto(0x43, 0x0, 0x8) sendmsg$auto_NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x4000) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/pci/00/01.3\x00', 0x149041, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0xc) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r2, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) 3m11.229333945s ago: executing program 1 (id=4252): mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket(0x15, 0x5, 0x0) getsockopt$auto(r0, 0x114, 0x271d, 0xfffffffffffffffc, 0x0) sendmsg$auto_NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, 0x0, 0x20000004) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r1) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006400)={0x2e20, r2, 0x1, 0x51bd2e, 0x25dfcbfb, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x2e07}]}, 0x2e20}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r3, 0x0, 0x4000) socket(0x2, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xe8) r4 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="01002dbd7000f9dbdf2501000000060002000100000005000700570000000800090108000000050004000300000014001f00fe88000000000000000000000000000114002000ff010000000000000000000000000001"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$auto(r4, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) ioctl$auto_SG_GET_PACK_ID(r4, 0x227c, 0x0) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000100), 0x401, 0x0) ioctl$auto_XFS_IOC_ALLOCSP64(0xffffffffffffffff, 0x40305824, &(0x7f00000000c0)={0x3, 0xfff7, 0x1, 0x9}) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) 3m11.010142798s ago: executing program 2 (id=4253): mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket(0x15, 0x5, 0x0) getsockopt$auto(r0, 0x114, 0x271d, 0xfffffffffffffffc, 0x0) sendmsg$auto_NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, 0x0, 0x20000004) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r1) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006400)={0x2e20, r2, 0x1, 0x51bd2e, 0x25dfcbfb, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x2e07}]}, 0x2e20}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_ct_limit(0x0, 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r3, &(0x7f0000003480)={0x0, 0x0, &(0x7f0000003440)={&(0x7f00000009c0)={0x38, r4, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x20, 0x1, 0x0, 0x1, [@nested={0x1c, 0x2f, 0x0, 0x1, [@typed={0x14, 0x42, 0x0, 0x0, @ipv6=@local}, @nested={0x4, 0xf7}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40c4}, 0x4000) socket(0x2, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xe8) r5 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="01002dbd7000f9dbdf2501000000060002000100000005000700570000000800090108000000050004000300000014001f00fe88000000000000000000000000000114002000ff010000000000000000000000000001"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$auto(r5, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) ioctl$auto_SG_GET_PACK_ID(r5, 0x227c, 0x0) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000100), 0x401, 0x0) ioctl$auto_XFS_IOC_ALLOCSP64(0xffffffffffffffff, 0x40305824, &(0x7f00000000c0)={0x3, 0xfff7, 0x1, 0x9}) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) 3m8.66296251s ago: executing program 4 (id=4254): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x22a40, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000200)={[0x8, 0xffffffffffffff4d, 0x5, 0x5, 0x800000000004, 0x0, 0x5, 0x19, 0x10, 0x5, 0x2dde, 0x4000000000008, 0xfffffffffffffffa, 0xab, 0x0, 0x9]}, &(0x7f0000000040)={0x0, 0x7}) prctl$auto(0x3e, 0x4, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/i8042/serio0/force_release\x00', 0xc2082, 0x0) write$auto(r0, &(0x7f00000004c0)='7@\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x7ff) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_severities_coverage_fops_severity(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto_severities_coverage_fops_severity(r1, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x1, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) munlock$auto(0xf, 0x6) gettid() r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) ioctl$auto_PPPIOCSMRRU(r2, 0x4004743b, 0x0) ioperm$auto(0x3, 0x5, 0x149) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x7fffffff, 0x3ef) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/controlC0\x00', 0x80, 0x0) 2m54.475996208s ago: executing program 34 (id=4250): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) ppoll$auto(&(0x7f0000000000)={0xffffffffffffffff, 0x1, 0xa3}, 0x4, &(0x7f0000000040)={0x8000000000000000, 0x9}, &(0x7f0000000080)={0x9}, 0x8) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MPATH(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x18, r1, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20044890}, 0x810) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket(0x2b, 0x1, 0x1) getsockopt$auto(r2, 0x0, 0x80, 0x0, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, 0x0, 0x24084005) mmap$auto(0x800000, 0x202000b, 0x4, 0x15, 0xfffffffffffffffa, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x4000, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sysfs$auto(0x2, 0x23, 0x0) r3 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r3, 0x0, 0x3) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x1, 0x2020009, 0x3, 0xebe, 0xfffffffffffffffa, 0x8000) shmctl$auto_IPC_SET(0xc, 0x1, &(0x7f0000000300)={{0xffffffff, 0xffffffffffffffff, 0xee01, 0x1000, 0xae, 0x9, 0x6}, 0x1, 0x7, 0x2, 0x280, @raw, @raw=0x5, 0x3, 0x0, &(0x7f0000000140)="4666def67af41b4f051e39fd6511fd6cfab11faa93fdd757f3a42ab52c0db46c7c57737a54cb9ad1fccd9f47e3400debebecee8c4b3ab4b0ecd15cb89799d7a8a423d738e2914ff98f43b494873650cfa841ca9b379cdbceb067f222f9852e4e248e519e6e2d25bc83b3fb9ec16cbc5fe503b9662d19861c9bb377749418140efde7024c7215d323a6c79c5be94bc04ed0d9afbb9c9574ff829522a54b91ef7bcef85e226564639c87b944203a6814a00eea8134d42bc137511ab276827b7ee17d85c2722c34b6d9cd3c095bd1094df859fd44defb05f086d48e42b8cfe4f20b057126cfb78738004716a5e21149cc372c89149624db41", &(0x7f0000000240)="41b431f15aa64d11716c2908cc9f948827ddb702f4ae4ad578a4d9e2fa81507ca870d066e25696b0b2ac35abb53a8fc6e9df9fdbbc11fe705ab85e88111e5684e28f8599bc486b93eea020ee76a340a548c82e805e2d182d741e51d53c799f7bb722a591e8ac4c48f3317ac8926b8b"}) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nullb0/queue/virt_boundary_mask\x00', 0x101000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000003c0)=""/251, 0xfb) socket(0xb, 0xa, 0xd9) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r5 = socket(0xa, 0x1, 0x84) bind$auto(r5, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) 2m54.307035744s ago: executing program 35 (id=4252): mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket(0x15, 0x5, 0x0) getsockopt$auto(r0, 0x114, 0x271d, 0xfffffffffffffffc, 0x0) sendmsg$auto_NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, 0x0, 0x20000004) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r1) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006400)={0x2e20, r2, 0x1, 0x51bd2e, 0x25dfcbfb, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x2e07}]}, 0x2e20}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r3, 0x0, 0x4000) socket(0x2, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xe8) r4 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="01002dbd7000f9dbdf2501000000060002000100000005000700570000000800090108000000050004000300000014001f00fe88000000000000000000000000000114002000ff010000000000000000000000000001"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$auto(r4, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) ioctl$auto_SG_GET_PACK_ID(r4, 0x227c, 0x0) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000100), 0x401, 0x0) ioctl$auto_XFS_IOC_ALLOCSP64(0xffffffffffffffff, 0x40305824, &(0x7f00000000c0)={0x3, 0xfff7, 0x1, 0x9}) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) 2m54.128036665s ago: executing program 36 (id=4253): mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket(0x15, 0x5, 0x0) getsockopt$auto(r0, 0x114, 0x271d, 0xfffffffffffffffc, 0x0) sendmsg$auto_NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, 0x0, 0x20000004) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r1) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006400)={0x2e20, r2, 0x1, 0x51bd2e, 0x25dfcbfb, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x2e07}]}, 0x2e20}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_ct_limit(0x0, 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r3, &(0x7f0000003480)={0x0, 0x0, &(0x7f0000003440)={&(0x7f00000009c0)={0x38, r4, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x20, 0x1, 0x0, 0x1, [@nested={0x1c, 0x2f, 0x0, 0x1, [@typed={0x14, 0x42, 0x0, 0x0, @ipv6=@local}, @nested={0x4, 0xf7}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40c4}, 0x4000) socket(0x2, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xe8) r5 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="01002dbd7000f9dbdf2501000000060002000100000005000700570000000800090108000000050004000300000014001f00fe88000000000000000000000000000114002000ff010000000000000000000000000001"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$auto(r5, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) ioctl$auto_SG_GET_PACK_ID(r5, 0x227c, 0x0) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000100), 0x401, 0x0) ioctl$auto_XFS_IOC_ALLOCSP64(0xffffffffffffffff, 0x40305824, &(0x7f00000000c0)={0x3, 0xfff7, 0x1, 0x9}) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) 2m40.016849405s ago: executing program 37 (id=4254): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x22a40, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000200)={[0x8, 0xffffffffffffff4d, 0x5, 0x5, 0x800000000004, 0x0, 0x5, 0x19, 0x10, 0x5, 0x2dde, 0x4000000000008, 0xfffffffffffffffa, 0xab, 0x0, 0x9]}, &(0x7f0000000040)={0x0, 0x7}) prctl$auto(0x3e, 0x4, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/i8042/serio0/force_release\x00', 0xc2082, 0x0) write$auto(r0, &(0x7f00000004c0)='7@\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x7ff) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_severities_coverage_fops_severity(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto_severities_coverage_fops_severity(r1, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x1, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) munlock$auto(0xf, 0x6) gettid() r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) ioctl$auto_PPPIOCSMRRU(r2, 0x4004743b, 0x0) ioperm$auto(0x3, 0x5, 0x149) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x7fffffff, 0x3ef) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/controlC0\x00', 0x80, 0x0) 1m41.711188883s ago: executing program 9 (id=4258): mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket(0x15, 0x5, 0x0) getsockopt$auto(r0, 0x114, 0x271d, 0xfffffffffffffffc, 0x0) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, 0x0, 0x20000004) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r1) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006400)={0x2e20, r2, 0x1, 0x51bd2e, 0x25dfcbfb, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x2e07}]}, 0x2e20}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4) r3 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(0xffffffffffffffff, &(0x7f0000003480)={0x0, 0x0, &(0x7f0000003440)={&(0x7f00000009c0)={0x38, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x20, 0x1, 0x0, 0x1, [@nested={0x1c, 0x2f, 0x0, 0x1, [@typed={0x14, 0x42, 0x0, 0x0, @ipv6=@local}, @nested={0x4, 0xf7}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40c4}, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r5, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0xfffffffffffffeee, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x80) r6 = socket(0x2, 0x1, 0x0) getsockopt$auto(r6, 0x6, 0x25, 0x0, 0x0) mlock$auto(0x800, 0x85fc) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x200403, 0x0) mmap$auto(0x0, 0x4, 0x3, 0x40eb2, 0x401, 0x300000000000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card1/pcm0c/oss\x00', 0xc100, 0x0) r7 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="01002dbd7000f9dbdf2501000000060002000100000005000700570000000800090108000000050004000300000014001f00fe88000000000000000000000000000114002000ff010000000000000000000000000001"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$auto_SG_GET_PACK_ID(r7, 0x227c, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) 0s ago: executing program 9 (id=4258): mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket(0x15, 0x5, 0x0) getsockopt$auto(r0, 0x114, 0x271d, 0xfffffffffffffffc, 0x0) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, 0x0, 0x20000004) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r1) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006400)={0x2e20, r2, 0x1, 0x51bd2e, 0x25dfcbfb, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x2e07}]}, 0x2e20}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4) r3 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(0xffffffffffffffff, &(0x7f0000003480)={0x0, 0x0, &(0x7f0000003440)={&(0x7f00000009c0)={0x38, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x20, 0x1, 0x0, 0x1, [@nested={0x1c, 0x2f, 0x0, 0x1, [@typed={0x14, 0x42, 0x0, 0x0, @ipv6=@local}, @nested={0x4, 0xf7}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40c4}, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r5, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0xfffffffffffffeee, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x80) r6 = socket(0x2, 0x1, 0x0) getsockopt$auto(r6, 0x6, 0x25, 0x0, 0x0) mlock$auto(0x800, 0x85fc) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x200403, 0x0) mmap$auto(0x0, 0x4, 0x3, 0x40eb2, 0x401, 0x300000000000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card1/pcm0c/oss\x00', 0xc100, 0x0) r7 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="01002dbd7000f9dbdf2501000000060002000100000005000700570000000800090108000000050004000300000014001f00fe88000000000000000000000000000114002000ff010000000000000000000000000001"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$auto_SG_GET_PACK_ID(r7, 0x227c, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) kernel console output (not intermixed with test programs): Comm: syz.0.3914 Tainted: G L syzkaller #0 PREEMPT(full) [ 1365.843827][T24171] Tainted: [L]=SOFTLOCKUP [ 1365.843841][T24171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1365.843861][T24171] Call Trace: [ 1365.843873][T24171] [ 1365.843887][T24171] dump_stack_lvl+0x16c/0x1f0 [ 1365.843945][T24171] should_fail_ex+0x512/0x640 [ 1365.843983][T24171] ? __kmalloc_noprof+0xca/0x910 [ 1365.844024][T24171] should_failslab+0xc2/0x120 [ 1365.844076][T24171] __kmalloc_noprof+0xeb/0x910 [ 1365.844113][T24171] ? vb2_core_allocated_buffers_storage+0xc4/0x220 [ 1365.844160][T24171] ? vb2_core_allocated_buffers_storage+0xc4/0x220 [ 1365.844197][T24171] vb2_core_allocated_buffers_storage+0xc4/0x220 [ 1365.844239][T24171] vb2_core_reqbufs+0x398/0xfe0 [ 1365.844285][T24171] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 1365.844344][T24171] __vb2_init_fileio+0x3f1/0x1100 [ 1365.844397][T24171] vb2_core_poll+0x486/0x700 [ 1365.844437][T24171] vb2_poll+0x4b/0xe0 [ 1365.844470][T24171] vb2_fop_poll+0x10f/0x2c0 [ 1365.844507][T24171] ? __pfx_vb2_fop_poll+0x10/0x10 [ 1365.844539][T24171] v4l2_poll+0x163/0x320 [ 1365.844586][T24171] ? __pfx_v4l2_poll+0x10/0x10 [ 1365.844632][T24171] do_select+0xd3d/0x17e0 [ 1365.844710][T24171] ? __pfx_do_select+0x10/0x10 [ 1365.844777][T24171] ? __pfx_pollwake+0x10/0x10 [ 1365.844894][T24171] ? find_held_lock+0x2b/0x80 [ 1365.844939][T24171] ? __might_fault+0xe3/0x190 [ 1365.844978][T24171] ? __might_fault+0xe3/0x190 [ 1365.845016][T24171] ? __might_fault+0x13b/0x190 [ 1365.845072][T24171] ? core_sys_select+0x453/0xc20 [ 1365.845116][T24171] core_sys_select+0x453/0xc20 [ 1365.845175][T24171] ? __pfx_core_sys_select+0x10/0x10 [ 1365.845232][T24171] ? futex_wake+0x1ad/0x530 [ 1365.845311][T24171] ? __pfx_do_futex+0x10/0x10 [ 1365.845362][T24171] kern_select+0x15d/0x1e0 [ 1365.845409][T24171] ? __pfx_kern_select+0x10/0x10 [ 1365.845462][T24171] ? xfd_validate_state+0x61/0x180 [ 1365.845493][T24171] ? __pfx_ksys_write+0x10/0x10 [ 1365.845550][T24171] __x64_sys_select+0xbd/0x160 [ 1365.845596][T24171] ? do_syscall_64+0x91/0xf80 [ 1365.845648][T24171] ? lockdep_hardirqs_on+0x7c/0x110 [ 1365.845700][T24171] do_syscall_64+0xcd/0xf80 [ 1365.845753][T24171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1365.845796][T24171] RIP: 0033:0x7f667b98f7c9 [ 1365.845824][T24171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1365.845860][T24171] RSP: 002b:00007f667c815038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 1365.845894][T24171] RAX: ffffffffffffffda RBX: 00007f667bbe5fa0 RCX: 00007f667b98f7c9 [ 1365.845917][T24171] RDX: 00002000000005c0 RSI: 0000000000000000 RDI: 0000000000000005 [ 1365.845939][T24171] RBP: 00007f667ba13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1365.845961][T24171] R10: 00002000000006c0 R11: 0000000000000246 R12: 0000000000000000 [ 1365.845982][T24171] R13: 00007f667bbe6038 R14: 00007f667bbe5fa0 R15: 00007ffe33b58ae8 [ 1365.846028][T24171] [ 1366.546633][T24187] FAULT_INJECTION: forcing a failure. [ 1366.546633][T24187] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1366.561320][ T31] audit: type=1800 audit(2147486278.683:32): pid=24193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3920" name="lu_gp_id" dev="configfs" ino=122992 res=0 errno=0 [ 1366.594291][T24187] CPU: 1 UID: 0 PID: 24187 Comm: syz.4.3920 Tainted: G L syzkaller #0 PREEMPT(full) [ 1366.594343][T24187] Tainted: [L]=SOFTLOCKUP [ 1366.594355][T24187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1366.594376][T24187] Call Trace: [ 1366.594388][T24187] [ 1366.594401][T24187] dump_stack_lvl+0x16c/0x1f0 [ 1366.594457][T24187] should_fail_ex+0x512/0x640 [ 1366.594500][T24187] get_futex_key+0x1d0/0x15f0 [ 1366.594539][T24187] ? __lock_acquire+0x436/0x2890 [ 1366.594570][T24187] ? __pfx_get_futex_key+0x10/0x10 [ 1366.594620][T24187] futex_wait_setup+0x9d/0x570 [ 1366.594676][T24187] __futex_wait+0x193/0x2f0 [ 1366.594723][T24187] ? __pfx___futex_wait+0x10/0x10 [ 1366.594776][T24187] ? __pfx_futex_wake_mark+0x10/0x10 [ 1366.594827][T24187] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1366.594867][T24187] ? __hrtimer_setup+0x176/0x280 [ 1366.594912][T24187] ? ktime_add_safe+0x60/0x70 [ 1366.594956][T24187] futex_wait+0xe8/0x380 [ 1366.595005][T24187] ? __pfx_futex_wait+0x10/0x10 [ 1366.595047][T24187] ? __lock_acquire+0x436/0x2890 [ 1366.595078][T24187] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1366.595131][T24187] do_futex+0x229/0x350 [ 1366.595168][T24187] ? __pfx_do_futex+0x10/0x10 [ 1366.595207][T24187] ? rcu_is_watching+0x12/0xc0 [ 1366.595252][T24187] ? ktime_get+0x200/0x310 [ 1366.595282][T24187] ? lockdep_hardirqs_on+0x7c/0x110 [ 1366.595327][T24187] ? read_tsc+0x9/0x20 [ 1366.595373][T24187] __x64_sys_futex+0x1e0/0x4c0 [ 1366.595417][T24187] ? __pfx___x64_sys_futex+0x10/0x10 [ 1366.595453][T24187] ? xfd_validate_state+0x61/0x180 [ 1366.595494][T24187] do_syscall_64+0xcd/0xf80 [ 1366.595546][T24187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1366.595578][T24187] RIP: 0033:0x7f7e8158f7c9 [ 1366.595603][T24187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1366.595631][T24187] RSP: 002b:00007ffcabf4db68 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1366.595662][T24187] RAX: ffffffffffffffda RBX: 000000000014e336 RCX: 00007f7e8158f7c9 [ 1366.595683][T24187] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7e817e5fac [ 1366.595703][T24187] RBP: 0000000000000032 R08: 00007f7e8250e000 R09: 0000001babf4de5f [ 1366.595725][T24187] R10: 00007ffcabf4dc60 R11: 0000000000000246 R12: 00007f7e817e5fac [ 1366.595745][T24187] R13: 00007ffcabf4dc60 R14: 000000000014e368 R15: 00007ffcabf4dc80 [ 1366.595787][T24187] [ 1367.270041][T24196] netlink: 'syz.0.3919': attribute type 1 has an invalid length. [ 1367.306096][T24196] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 1367.572920][T24212] netlink: set zone limit has 8 unknown bytes [ 1367.681961][T24215] HfR: entered promiscuous mode [ 1368.207124][T24223] netlink: zone id is out of range [ 1368.227194][T24223] netlink: del zone limit has 4 unknown bytes [ 1368.270236][T24221] netlink: set zone limit has 8 unknown bytes [ 1368.642529][T24231] futex_wake_op: syz.4.3928 tries to shift op by -2048; fix this program [ 1368.679354][T24231] futex_wake_op: syz.4.3928 tries to shift op by -2048; fix this program [ 1368.702135][T24231] 0x000000000001-0x000000020000 : "" [ 1368.722677][T24231] ftl_cs: FTL header corrupt! [ 1369.369278][T24247] netlink: 318 bytes leftover after parsing attributes in process `syz.4.3932'. [ 1369.597795][T24249] futex_wake_op: syz.4.3933 tries to shift op by -2048; fix this program [ 1369.614494][T24249] futex_wake_op: syz.4.3933 tries to shift op by -2048; fix this program [ 1369.628007][T24249] 0x000000000001-0x000000020000 : "" [ 1369.666774][T24249] ftl_cs: FTL header corrupt! [ 1369.709254][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1369.715702][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1370.143352][T24260] FAULT_INJECTION: forcing a failure. [ 1370.143352][T24260] name failslab, interval 1, probability 0, space 0, times 0 [ 1370.200292][T24260] CPU: 1 UID: 0 PID: 24260 Comm: syz.2.3936 Tainted: G L syzkaller #0 PREEMPT(full) [ 1370.200349][T24260] Tainted: [L]=SOFTLOCKUP [ 1370.200362][T24260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1370.200384][T24260] Call Trace: [ 1370.200396][T24260] [ 1370.200410][T24260] dump_stack_lvl+0x16c/0x1f0 [ 1370.200470][T24260] should_fail_ex+0x512/0x640 [ 1370.200511][T24260] ? __kmalloc_cache_noprof+0x5f/0x800 [ 1370.200558][T24260] should_failslab+0xc2/0x120 [ 1370.200623][T24260] __kmalloc_cache_noprof+0x80/0x800 [ 1370.200665][T24260] ? ima_calc_file_hash_tfm+0x234/0x350 [ 1370.200714][T24260] ? ima_calc_file_hash_tfm+0x234/0x350 [ 1370.200752][T24260] ima_calc_file_hash_tfm+0x234/0x350 [ 1370.200795][T24260] ? __pfx_ima_calc_file_hash_tfm+0x10/0x10 [ 1370.200872][T24260] ? filter_irq_stacks+0x90/0x90 [ 1370.200928][T24260] ? __pfx_stack_trace_save+0x10/0x10 [ 1370.200984][T24260] ? ima_alloc_tfm+0x21a/0x2e0 [ 1370.201015][T24260] ? generic_fillattr+0x6bf/0x940 [ 1370.201054][T24260] ima_calc_file_hash+0x1ba/0x490 [ 1370.201091][T24260] ima_collect_measurement+0x8a6/0xa50 [ 1370.201128][T24260] ? ksys_mmap_pgoff+0x1c8/0x5c0 [ 1370.201186][T24260] ? __pfx_ima_collect_measurement+0x10/0x10 [ 1370.201225][T24260] ? lock_acquire+0x179/0x330 [ 1370.201279][T24260] ? process_measurement+0x7f8/0x22d0 [ 1370.201333][T24260] ? is_bad_inode+0xd/0x40 [ 1370.201376][T24260] ? xattr_resolve_name+0x27b/0x3f0 [ 1370.201431][T24260] ? vfs_getxattr_alloc+0xec/0x350 [ 1370.201490][T24260] ? ima_get_hash_algo+0x27c/0x400 [ 1370.201541][T24260] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 1370.201617][T24260] ? process_measurement+0x11b9/0x22d0 [ 1370.201670][T24260] process_measurement+0x11b9/0x22d0 [ 1370.201739][T24260] ? __pfx_process_measurement+0x10/0x10 [ 1370.201799][T24260] ? kasan_save_stack+0x42/0x60 [ 1370.201846][T24260] ? kasan_save_track+0x14/0x30 [ 1370.201892][T24260] ? kmem_cache_alloc_noprof+0x25e/0x770 [ 1370.201949][T24260] ? find_held_lock+0x2b/0x80 [ 1370.201994][T24260] ? aa_file_perm+0x29e/0x1560 [ 1370.202095][T24260] ima_file_mmap+0x1b6/0x1e0 [ 1370.202152][T24260] ? __pfx_ima_file_mmap+0x10/0x10 [ 1370.202231][T24260] security_mmap_file+0x88c/0x990 [ 1370.202278][T24260] vm_mmap_pgoff+0xec/0x470 [ 1370.202332][T24260] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1370.202377][T24260] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1370.202417][T24260] ? hugetlbfs_get_inode+0x31f/0x700 [ 1370.202465][T24260] ksys_mmap_pgoff+0x1c8/0x5c0 [ 1370.202523][T24260] __x64_sys_mmap+0x125/0x190 [ 1370.202563][T24260] do_syscall_64+0xcd/0xf80 [ 1370.202628][T24260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1370.202664][T24260] RIP: 0033:0x7fa39b98f7c9 [ 1370.202693][T24260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1370.202728][T24260] RSP: 002b:00007fa39c759038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1370.202761][T24260] RAX: ffffffffffffffda RBX: 00007fa39bbe5fa0 RCX: 00007fa39b98f7c9 [ 1370.202786][T24260] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 1370.202807][T24260] RBP: 00007fa39ba13f91 R08: 0000000000000402 R09: 0000300000000000 [ 1370.202831][T24260] R10: 0000000000040eb2 R11: 0000000000000246 R12: 0000000000000000 [ 1370.202854][T24260] R13: 00007fa39bbe6038 R14: 00007fa39bbe5fa0 R15: 00007fff964efe98 [ 1370.202899][T24260] [ 1370.557780][T24262] netlink: set zone limit has 8 unknown bytes [ 1370.582078][ T31] audit: type=1800 audit(2147486282.754:33): pid=24260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3936" name="anon_hugepage" dev="hugetlbfs" ino=123220 res=0 errno=0 [ 1370.629388][T24262] netlink: zone id is out of range [ 1370.644415][T24240] mkiss: ax0: crc mode is auto. [ 1370.680480][T24262] netlink: del zone limit has 4 unknown bytes [ 1371.997716][T24292] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 36 out of range (51000000..2150000000) [ 1373.301553][T24322] netlink: set zone limit has 8 unknown bytes [ 1373.417077][T24326] openvswitch: HfR: Dropping previously announced user features [ 1374.355779][T24343] zswap: compressor not available [ 1374.579289][T24317] mkiss: ax0: crc mode is auto. [ 1376.485445][T24374] FAULT_INJECTION: forcing a failure. [ 1376.485445][T24374] name failslab, interval 1, probability 0, space 0, times 0 [ 1376.524069][T24374] CPU: 0 UID: 0 PID: 24374 Comm: syz.2.3960 Tainted: G L syzkaller #0 PREEMPT(full) [ 1376.524123][T24374] Tainted: [L]=SOFTLOCKUP [ 1376.524144][T24374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1376.524166][T24374] Call Trace: [ 1376.524176][T24374] [ 1376.524189][T24374] dump_stack_lvl+0x16c/0x1f0 [ 1376.524245][T24374] should_fail_ex+0x512/0x640 [ 1376.524282][T24374] ? __kmalloc_noprof+0xca/0x910 [ 1376.524322][T24374] should_failslab+0xc2/0x120 [ 1376.524373][T24374] __kmalloc_noprof+0xeb/0x910 [ 1376.524411][T24374] ? kernfs_fop_write_iter+0x237/0x570 [ 1376.524468][T24374] ? kernfs_fop_write_iter+0x237/0x570 [ 1376.524517][T24374] kernfs_fop_write_iter+0x237/0x570 [ 1376.524572][T24374] vfs_write+0x7d3/0x11d0 [ 1376.524621][T24374] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1376.524678][T24374] ? __pfx_vfs_write+0x10/0x10 [ 1376.524754][T24374] ksys_write+0x12a/0x250 [ 1376.524802][T24374] ? __pfx_ksys_write+0x10/0x10 [ 1376.524863][T24374] do_syscall_64+0xcd/0xf80 [ 1376.524916][T24374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1376.524949][T24374] RIP: 0033:0x7fa39b98f7c9 [ 1376.524976][T24374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1376.525010][T24374] RSP: 002b:00007fa39c759038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1376.525041][T24374] RAX: ffffffffffffffda RBX: 00007fa39bbe5fa0 RCX: 00007fa39b98f7c9 [ 1376.525064][T24374] RDX: 000000007fffffff RSI: 0000000000000000 RDI: 0000000000000003 [ 1376.525085][T24374] RBP: 00007fa39c759090 R08: 0000000000000000 R09: 0000000000000000 [ 1376.525106][T24374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1376.525127][T24374] R13: 00007fa39bbe6038 R14: 00007fa39bbe5fa0 R15: 00007fff964efe98 [ 1376.525180][T24374] [ 1377.217771][T24381] openvswitch: HfR: Dropping previously announced user features [ 1377.387477][T24379] netlink: set zone limit has 8 unknown bytes [ 1378.095807][T24407] netlink: zone id is out of range [ 1378.112701][T24406] netlink: 318 bytes leftover after parsing attributes in process `syz.1.3967'. [ 1378.153510][T24407] netlink: del zone limit has 4 unknown bytes [ 1378.181633][T24398] netlink: set zone limit has 8 unknown bytes [ 1378.362264][T24412] futex_wake_op: syz.2.3969 tries to shift op by -2048; fix this program [ 1378.498050][T24412] futex_wake_op: syz.2.3969 tries to shift op by -2048; fix this program [ 1379.244124][T24433] FAULT_INJECTION: forcing a failure. [ 1379.244124][T24433] name failslab, interval 1, probability 0, space 0, times 0 [ 1379.267005][T24433] CPU: 0 UID: 0 PID: 24433 Comm: syz.4.3971 Tainted: G L syzkaller #0 PREEMPT(full) [ 1379.267059][T24433] Tainted: [L]=SOFTLOCKUP [ 1379.267071][T24433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1379.267092][T24433] Call Trace: [ 1379.267102][T24433] [ 1379.267115][T24433] dump_stack_lvl+0x16c/0x1f0 [ 1379.267172][T24433] should_fail_ex+0x512/0x640 [ 1379.267215][T24433] ? __kmalloc_noprof+0xca/0x910 [ 1379.267255][T24433] should_failslab+0xc2/0x120 [ 1379.267306][T24433] __kmalloc_noprof+0xeb/0x910 [ 1379.267343][T24433] ? vb2_core_allocated_buffers_storage+0xc4/0x220 [ 1379.267389][T24433] ? vb2_core_allocated_buffers_storage+0xc4/0x220 [ 1379.267425][T24433] vb2_core_allocated_buffers_storage+0xc4/0x220 [ 1379.267466][T24433] vb2_core_reqbufs+0x398/0xfe0 [ 1379.267509][T24433] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 1379.267568][T24433] __vb2_init_fileio+0x3f1/0x1100 [ 1379.267618][T24433] vb2_core_poll+0x486/0x700 [ 1379.267658][T24433] vb2_poll+0x4b/0xe0 [ 1379.267688][T24433] vb2_fop_poll+0x10f/0x2c0 [ 1379.267723][T24433] ? __pfx_vb2_fop_poll+0x10/0x10 [ 1379.267755][T24433] v4l2_poll+0x163/0x320 [ 1379.267807][T24433] ? __pfx_v4l2_poll+0x10/0x10 [ 1379.267850][T24433] do_select+0xd3d/0x17e0 [ 1379.267924][T24433] ? __pfx_do_select+0x10/0x10 [ 1379.267979][T24433] ? __pfx_pollwake+0x10/0x10 [ 1379.268083][T24433] ? find_held_lock+0x2b/0x80 [ 1379.268126][T24433] ? __might_fault+0xe3/0x190 [ 1379.268161][T24433] ? __might_fault+0xe3/0x190 [ 1379.268202][T24433] ? __might_fault+0x13b/0x190 [ 1379.268254][T24433] ? core_sys_select+0x453/0xc20 [ 1379.268297][T24433] core_sys_select+0x453/0xc20 [ 1379.268353][T24433] ? __pfx_core_sys_select+0x10/0x10 [ 1379.268407][T24433] ? futex_wake+0x1ad/0x530 [ 1379.268483][T24433] ? __pfx_do_futex+0x10/0x10 [ 1379.268531][T24433] kern_select+0x15d/0x1e0 [ 1379.268578][T24433] ? __pfx_kern_select+0x10/0x10 [ 1379.268628][T24433] ? xfd_validate_state+0x61/0x180 [ 1379.268656][T24433] ? __pfx_ksys_write+0x10/0x10 [ 1379.268710][T24433] __x64_sys_select+0xbd/0x160 [ 1379.268755][T24433] ? do_syscall_64+0x91/0xf80 [ 1379.268803][T24433] ? lockdep_hardirqs_on+0x7c/0x110 [ 1379.268852][T24433] do_syscall_64+0xcd/0xf80 [ 1379.268904][T24433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1379.268937][T24433] RIP: 0033:0x7f7e8158f7c9 [ 1379.268966][T24433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1379.268998][T24433] RSP: 002b:00007f7e824ec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 1379.269029][T24433] RAX: ffffffffffffffda RBX: 00007f7e817e6090 RCX: 00007f7e8158f7c9 [ 1379.269052][T24433] RDX: 00002000000005c0 RSI: 0000000000000000 RDI: 0000000000000005 [ 1379.269073][T24433] RBP: 00007f7e81613f91 R08: 0000000000000000 R09: 0000000000000000 [ 1379.269093][T24433] R10: 00002000000006c0 R11: 0000000000000246 R12: 0000000000000000 [ 1379.269114][T24433] R13: 00007f7e817e6128 R14: 00007f7e817e6090 R15: 00007ffcabf4da08 [ 1379.269158][T24433] [ 1379.880640][T24445] openvswitch: HfR: Dropping previously announced user features [ 1380.024034][T24444] netlink: set zone limit has 8 unknown bytes [ 1380.261126][T24454] usbcore.quirks: string doesn't fit in 127 chars. [ 1380.574379][T24456] ima: policy update failed [ 1380.586135][ T31] audit: type=1802 audit(2147486292.806:34): pid=24456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.3977" res=0 errno=0 [ 1380.789239][T24469] futex_wake_op: syz.0.3982 tries to shift op by -2048; fix this program [ 1380.816072][T24469] futex_wake_op: syz.0.3982 tries to shift op by -2048; fix this program [ 1380.863530][T24469] 0x000000000001-0x000000020000 : "" [ 1380.918702][T24469] ftl_cs: FTL header corrupt! [ 1381.076900][T24472] binder: BINDER_SET_CONTEXT_MGR already set [ 1381.082933][T24472] binder: 24471:24472 ioctl 4018620d 9 returned -16 [ 1381.832522][T24490] futex_wake_op: syz.1.3984 tries to shift op by -2048; fix this program [ 1381.915593][T24490] futex_wake_op: syz.1.3984 tries to shift op by -2048; fix this program [ 1382.362357][T24501] netlink: 'syz.4.3985': attribute type 1 has an invalid length. [ 1382.414296][T24508] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 1382.570374][T24510] openvswitch: HfR: Dropping previously announced user features [ 1382.644478][T24504] netlink: set zone limit has 8 unknown bytes [ 1382.798593][T24515] openvswitch: HfR: Dropping previously announced user features [ 1382.942210][T24514] netlink: set zone limit has 8 unknown bytes [ 1383.011172][T24519] FAULT_INJECTION: forcing a failure. [ 1383.011172][T24519] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1383.064559][T24519] CPU: 0 UID: 0 PID: 24519 Comm: syz.0.3990 Tainted: G L syzkaller #0 PREEMPT(full) [ 1383.064613][T24519] Tainted: [L]=SOFTLOCKUP [ 1383.064626][T24519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1383.064646][T24519] Call Trace: [ 1383.064658][T24519] [ 1383.064671][T24519] dump_stack_lvl+0x16c/0x1f0 [ 1383.064730][T24519] should_fail_ex+0x512/0x640 [ 1383.064769][T24519] ? arch_stack_walk+0xa6/0x100 [ 1383.064814][T24519] get_futex_key+0x1d0/0x15f0 [ 1383.064856][T24519] ? __pfx_get_futex_key+0x10/0x10 [ 1383.064902][T24519] ? stack_trace_save+0x8e/0xc0 [ 1383.064956][T24519] ? __pfx_stack_trace_save+0x10/0x10 [ 1383.065013][T24519] ? stack_depot_save_flags+0x29/0x9b0 [ 1383.065060][T24519] futex_wait_setup+0x9d/0x570 [ 1383.065119][T24519] __futex_wait+0x193/0x2f0 [ 1383.065170][T24519] ? __pfx___futex_wait+0x10/0x10 [ 1383.065226][T24519] ? __pfx_futex_wake_mark+0x10/0x10 [ 1383.065281][T24519] ? futex_hash+0x2c5/0x380 [ 1383.065321][T24519] ? futex_private_hash_put+0x160/0x1b0 [ 1383.065360][T24519] futex_wait+0xe8/0x380 [ 1383.065406][T24519] ? __pfx_futex_wait+0x10/0x10 [ 1383.065478][T24519] ? putname+0xf5/0x1a0 [ 1383.065520][T24519] do_futex+0x229/0x350 [ 1383.065559][T24519] ? __pfx_do_futex+0x10/0x10 [ 1383.065611][T24519] __x64_sys_futex+0x1e0/0x4c0 [ 1383.065654][T24519] ? __x64_sys_openat+0x174/0x210 [ 1383.065693][T24519] ? __pfx___x64_sys_futex+0x10/0x10 [ 1383.065750][T24519] do_syscall_64+0xcd/0xf80 [ 1383.065806][T24519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1383.065843][T24519] RIP: 0033:0x7f667b98f7c9 [ 1383.065870][T24519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1383.065914][T24519] RSP: 002b:00007f667c8150e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1383.065948][T24519] RAX: ffffffffffffffda RBX: 00007f667bbe5fa8 RCX: 00007f667b98f7c9 [ 1383.065972][T24519] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f667bbe5fa8 [ 1383.065993][T24519] RBP: 00007f667bbe5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1383.066014][T24519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1383.066036][T24519] R13: 00007f667bbe6038 R14: 00007ffe33b58a00 R15: 00007ffe33b58ae8 [ 1383.066081][T24519] [ 1383.467759][T24529] random: crng reseeded on system resumption [ 1384.558260][T24558] futex_wake_op: syz.4.3998 tries to shift op by -2048; fix this program [ 1384.579316][T24558] futex_wake_op: syz.4.3998 tries to shift op by -2048; fix this program [ 1384.622598][T24558] 0x000000000001-0x000000020000 : "" [ 1384.651386][T24558] ftl_cs: FTL header corrupt! [ 1385.843931][T16618] Bluetooth: hci3: unexpected event 0x1c length: 725 > 5 [ 1386.103311][T24581] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 36 out of range (51000000..2150000000) [ 1386.925062][T24599] netlink: zone id is out of range [ 1386.988003][T24599] netlink: del zone limit has 4 unknown bytes [ 1387.069684][T24597] netlink: set zone limit has 8 unknown bytes [ 1387.400469][T24612] futex_wake_op: syz.0.4009 tries to shift op by -2048; fix this program [ 1387.442058][T24612] futex_wake_op: syz.0.4009 tries to shift op by -2048; fix this program [ 1387.472121][T24612] 0x000000000001-0x000000020000 : "" [ 1387.504028][T24612] ftl_cs: FTL header corrupt! [ 1388.537933][T24631] netlink: zone id is out of range [ 1388.555665][T24631] netlink: del zone limit has 4 unknown bytes [ 1388.563324][T24628] netlink: set zone limit has 8 unknown bytes [ 1389.024739][T24640] netlink: 330 bytes leftover after parsing attributes in process `syz.1.4013'. [ 1389.189985][T24648] random: crng reseeded on system resumption [ 1389.574973][T24655] futex_wake_op: syz.1.4018 tries to shift op by -2048; fix this program [ 1389.594272][T24655] futex_wake_op: syz.1.4018 tries to shift op by -2048; fix this program [ 1389.702961][T24655] 0x000000000001-0x000000020000 : "" [ 1389.735749][T24655] ftl_cs: FTL header corrupt! [ 1390.203678][T24666] FAULT_INJECTION: forcing a failure. [ 1390.203678][T24666] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1390.340106][T24666] CPU: 1 UID: 0 PID: 24666 Comm: syz.2.4020 Tainted: G L syzkaller #0 PREEMPT(full) [ 1390.340171][T24666] Tainted: [L]=SOFTLOCKUP [ 1390.340186][T24666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1390.340207][T24666] Call Trace: [ 1390.340218][T24666] [ 1390.340231][T24666] dump_stack_lvl+0x16c/0x1f0 [ 1390.340288][T24666] should_fail_ex+0x512/0x640 [ 1390.340325][T24666] ? arch_stack_walk+0xa6/0x100 [ 1390.340372][T24666] get_futex_key+0x1d0/0x15f0 [ 1390.340414][T24666] ? __pfx_get_futex_key+0x10/0x10 [ 1390.340450][T24666] ? stack_trace_save+0x8e/0xc0 [ 1390.340503][T24666] ? __pfx_stack_trace_save+0x10/0x10 [ 1390.340557][T24666] ? stack_depot_save_flags+0x29/0x9b0 [ 1390.340605][T24666] futex_wait_setup+0x9d/0x570 [ 1390.340672][T24666] __futex_wait+0x193/0x2f0 [ 1390.340726][T24666] ? __pfx___futex_wait+0x10/0x10 [ 1390.340781][T24666] ? __pfx_futex_wake_mark+0x10/0x10 [ 1390.340841][T24666] ? futex_hash+0x2c5/0x380 [ 1390.340890][T24666] ? futex_private_hash_put+0x160/0x1b0 [ 1390.340931][T24666] futex_wait+0xe8/0x380 [ 1390.340977][T24666] ? __pfx_futex_wait+0x10/0x10 [ 1390.341039][T24666] ? putname+0xf5/0x1a0 [ 1390.341081][T24666] do_futex+0x229/0x350 [ 1390.341131][T24666] ? __pfx_do_futex+0x10/0x10 [ 1390.341182][T24666] __x64_sys_futex+0x1e0/0x4c0 [ 1390.341225][T24666] ? __x64_sys_openat+0x174/0x210 [ 1390.341266][T24666] ? __pfx___x64_sys_futex+0x10/0x10 [ 1390.341323][T24666] do_syscall_64+0xcd/0xf80 [ 1390.341378][T24666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1390.341415][T24666] RIP: 0033:0x7fa39b98f7c9 [ 1390.341442][T24666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1390.341478][T24666] RSP: 002b:00007fa39c7590e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1390.341511][T24666] RAX: ffffffffffffffda RBX: 00007fa39bbe5fa8 RCX: 00007fa39b98f7c9 [ 1390.341535][T24666] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa39bbe5fa8 [ 1390.341558][T24666] RBP: 00007fa39bbe5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1390.341579][T24666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1390.341601][T24666] R13: 00007fa39bbe6038 R14: 00007fff964efdb0 R15: 00007fff964efe98 [ 1390.341646][T24666] [ 1391.425259][T24678] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1391.529775][T16618] Bluetooth: hci2: unexpected event 0x1c length: 725 > 5 [ 1391.654840][T24680] random: crng reseeded on system resumption [ 1391.798440][T24682] openvswitch: HfR: Dropping previously announced user features [ 1392.299111][T24690] futex_wake_op: syz.4.4029 tries to shift op by -2048; fix this program [ 1392.336268][T24690] futex_wake_op: syz.4.4029 tries to shift op by -2048; fix this program [ 1392.366204][T24691] 0x000000000001-0x000000020000 : "" [ 1392.401126][T24691] ftl_cs: FTL header corrupt! [ 1392.548950][T24698] FAULT_INJECTION: forcing a failure. [ 1392.548950][T24698] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1392.619205][T24698] CPU: 0 UID: 0 PID: 24698 Comm: syz.0.4030 Tainted: G L syzkaller #0 PREEMPT(full) [ 1392.619258][T24698] Tainted: [L]=SOFTLOCKUP [ 1392.619270][T24698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1392.619289][T24698] Call Trace: [ 1392.619300][T24698] [ 1392.619312][T24698] dump_stack_lvl+0x16c/0x1f0 [ 1392.619368][T24698] should_fail_ex+0x512/0x640 [ 1392.619412][T24698] _copy_from_user+0x2e/0xd0 [ 1392.619449][T24698] kstrtouint_from_user+0xd6/0x1d0 [ 1392.619497][T24698] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1392.619543][T24698] ? __lock_acquire+0x436/0x2890 [ 1392.619579][T24698] ? lock_acquire+0x179/0x330 [ 1392.619619][T24698] proc_fail_nth_write+0x83/0x220 [ 1392.619652][T24698] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1392.619696][T24698] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1392.619726][T24698] vfs_write+0x2a0/0x11d0 [ 1392.619774][T24698] ? __pfx___mutex_lock+0x10/0x10 [ 1392.619830][T24698] ? __pfx_vfs_write+0x10/0x10 [ 1392.619887][T24698] ? __fget_files+0x20e/0x3c0 [ 1392.619955][T24698] ksys_write+0x12a/0x250 [ 1392.620005][T24698] ? __pfx_ksys_write+0x10/0x10 [ 1392.620066][T24698] do_syscall_64+0xcd/0xf80 [ 1392.620120][T24698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1392.620153][T24698] RIP: 0033:0x7f667b98e27f [ 1392.620183][T24698] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1392.620215][T24698] RSP: 002b:00007f667c815030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1392.620247][T24698] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f667b98e27f [ 1392.620269][T24698] RDX: 0000000000000001 RSI: 00007f667c8150a0 RDI: 0000000000000004 [ 1392.620289][T24698] RBP: 00007f667c815090 R08: 0000000000000000 R09: 0000000000000000 [ 1392.620310][T24698] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1392.620330][T24698] R13: 00007f667bbe6038 R14: 00007f667bbe5fa0 R15: 00007ffe33b58ae8 [ 1392.620375][T24698] [ 1393.253098][T24700] netlink: 'syz.2.4032': attribute type 3 has an invalid length. [ 1393.280650][T24700] netlink: 30 bytes leftover after parsing attributes in process `syz.2.4032'. [ 1393.320898][T24700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4032'. [ 1393.367164][T24707] netlink: zone id is out of range [ 1393.440282][T24707] netlink: del zone limit has 4 unknown bytes [ 1393.477168][T24704] netlink: set zone limit has 8 unknown bytes [ 1393.820725][T24719] FAULT_INJECTION: forcing a failure. [ 1393.820725][T24719] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1393.834580][T24719] CPU: 0 UID: 0 PID: 24719 Comm: syz.1.4037 Tainted: G L syzkaller #0 PREEMPT(full) [ 1393.834634][T24719] Tainted: [L]=SOFTLOCKUP [ 1393.834647][T24719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1393.834668][T24719] Call Trace: [ 1393.834680][T24719] [ 1393.834693][T24719] dump_stack_lvl+0x16c/0x1f0 [ 1393.834753][T24719] should_fail_ex+0x512/0x640 [ 1393.834789][T24719] ? arch_stack_walk+0xa6/0x100 [ 1393.834834][T24719] get_futex_key+0x1d0/0x15f0 [ 1393.834875][T24719] ? __pfx_get_futex_key+0x10/0x10 [ 1393.834922][T24719] ? stack_trace_save+0x8e/0xc0 [ 1393.834975][T24719] ? __pfx_stack_trace_save+0x10/0x10 [ 1393.835029][T24719] ? stack_depot_save_flags+0x29/0x9b0 [ 1393.835075][T24719] futex_wait_setup+0x9d/0x570 [ 1393.835135][T24719] __futex_wait+0x193/0x2f0 [ 1393.835183][T24719] ? __pfx___futex_wait+0x10/0x10 [ 1393.835237][T24719] ? __pfx_futex_wake_mark+0x10/0x10 [ 1393.835288][T24719] ? futex_hash+0x2c5/0x380 [ 1393.835327][T24719] ? futex_private_hash_put+0x160/0x1b0 [ 1393.835367][T24719] futex_wait+0xe8/0x380 [ 1393.835413][T24719] ? __pfx_futex_wait+0x10/0x10 [ 1393.835469][T24719] ? putname+0xf5/0x1a0 [ 1393.835510][T24719] do_futex+0x229/0x350 [ 1393.835548][T24719] ? __pfx_do_futex+0x10/0x10 [ 1393.835599][T24719] __x64_sys_futex+0x1e0/0x4c0 [ 1393.835642][T24719] ? __x64_sys_openat+0x174/0x210 [ 1393.835681][T24719] ? __pfx___x64_sys_futex+0x10/0x10 [ 1393.835738][T24719] do_syscall_64+0xcd/0xf80 [ 1393.835794][T24719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1393.835829][T24719] RIP: 0033:0x7f9c8f18f7c9 [ 1393.835855][T24719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1393.835891][T24719] RSP: 002b:00007f9c900920e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1393.835931][T24719] RAX: ffffffffffffffda RBX: 00007f9c8f3e5fa8 RCX: 00007f9c8f18f7c9 [ 1393.835955][T24719] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9c8f3e5fa8 [ 1393.835977][T24719] RBP: 00007f9c8f3e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1393.835999][T24719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1393.836021][T24719] R13: 00007f9c8f3e6038 R14: 00007ffcea7d83f0 R15: 00007ffcea7d84d8 [ 1393.836067][T24719] [ 1394.382293][T24732] futex_wake_op: syz.2.4040 tries to shift op by -2048; fix this program [ 1394.401653][T24732] futex_wake_op: syz.2.4040 tries to shift op by -2048; fix this program [ 1394.419009][T24732] 0x000000000001-0x000000020000 : "" [ 1394.437249][T24732] ftl_cs: FTL header corrupt! [ 1395.120454][T24748] Unable to find swap-space signature [ 1395.536018][T24759] netlink: zone id is out of range [ 1395.551798][T24759] netlink: del zone limit has 4 unknown bytes [ 1395.642936][T24755] netlink: set zone limit has 8 unknown bytes [ 1395.770327][T24766] futex_wake_op: syz.2.4050 tries to shift op by -2048; fix this program [ 1395.779222][T24766] futex_wake_op: syz.2.4050 tries to shift op by -2048; fix this program [ 1395.793133][T24766] 0x000000000001-0x000000020000 : "" [ 1395.802672][T24766] ftl_cs: FTL header corrupt! [ 1396.001475][T24772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4049'. [ 1396.511055][T24777] zswap: compressor not available [ 1396.771855][T24783] futex_wake_op: syz.4.4053 tries to shift op by -2048; fix this program [ 1396.803796][T24783] futex_wake_op: syz.4.4053 tries to shift op by -2048; fix this program [ 1396.836061][T24783] 0x000000000001-0x000000020000 : "" [ 1396.853349][T16618] Bluetooth: hci1: unexpected event 0x1d length: 6 > 5 [ 1396.951563][T24783] ftl_cs: FTL header corrupt! [ 1397.475306][T24798] openvswitch: HfR: Dropping previously announced user features [ 1397.801408][T24809] futex_wake_op: syz.2.4060 tries to shift op by -2048; fix this program [ 1397.826970][T24809] futex_wake_op: syz.2.4060 tries to shift op by -2048; fix this program [ 1397.857705][T24809] 0x000000000001-0x000000020000 : "" [ 1397.903600][T24809] ftl_cs: FTL header corrupt! [ 1401.888589][T24904] futex_wake_op: syz.4.4075 tries to shift op by -2048; fix this program [ 1401.963495][T24904] futex_wake_op: syz.4.4075 tries to shift op by -2048; fix this program [ 1402.056478][T24904] 0x000000000001-0x000000020000 : "" [ 1402.090424][T24904] ftl_cs: FTL header corrupt! [ 1402.551531][T24922] netlink: zone id is out of range [ 1402.618615][T24919] netlink: set zone limit has 8 unknown bytes [ 1402.701934][T24922] netlink: del zone limit has 4 unknown bytes [ 1403.378531][T24938] FAULT_INJECTION: forcing a failure. [ 1403.378531][T24938] name failslab, interval 1, probability 0, space 0, times 0 [ 1403.438154][T24938] CPU: 0 UID: 0 PID: 24938 Comm: syz.1.4078 Tainted: G L syzkaller #0 PREEMPT(full) [ 1403.438193][T24938] Tainted: [L]=SOFTLOCKUP [ 1403.438202][T24938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1403.438216][T24938] Call Trace: [ 1403.438229][T24938] [ 1403.438239][T24938] dump_stack_lvl+0x16c/0x1f0 [ 1403.438292][T24938] should_fail_ex+0x512/0x640 [ 1403.438319][T24938] ? __kmalloc_noprof+0xca/0x910 [ 1403.438375][T24938] should_failslab+0xc2/0x120 [ 1403.438426][T24938] __kmalloc_noprof+0xeb/0x910 [ 1403.438459][T24938] ? __lock_acquire+0x436/0x2890 [ 1403.438490][T24938] ? __netif_set_xps_queue+0x80b/0x2310 [ 1403.438545][T24938] ? __netif_set_xps_queue+0x80b/0x2310 [ 1403.438589][T24938] __netif_set_xps_queue+0x80b/0x2310 [ 1403.438661][T24938] netif_set_xps_queue+0x2a/0x40 [ 1403.438708][T24938] xps_cpus_store+0x279/0x320 [ 1403.438751][T24938] ? __pfx_xps_cpus_store+0x10/0x10 [ 1403.438792][T24938] ? find_held_lock+0x2b/0x80 [ 1403.438842][T24938] ? __pfx_xps_cpus_store+0x10/0x10 [ 1403.438881][T24938] netdev_queue_attr_store+0x61/0x90 [ 1403.438934][T24938] ? __pfx_netdev_queue_attr_store+0x10/0x10 [ 1403.438987][T24938] sysfs_kf_write+0xf2/0x150 [ 1403.439024][T24938] kernfs_fop_write_iter+0x3af/0x570 [ 1403.439071][T24938] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1403.439109][T24938] vfs_write+0x7d3/0x11d0 [ 1403.439157][T24938] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1403.439213][T24938] ? __pfx_vfs_write+0x10/0x10 [ 1403.439296][T24938] ksys_write+0x12a/0x250 [ 1403.439348][T24938] ? __pfx_ksys_write+0x10/0x10 [ 1403.439409][T24938] do_syscall_64+0xcd/0xf80 [ 1403.439466][T24938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1403.439500][T24938] RIP: 0033:0x7f9c8f18f7c9 [ 1403.439526][T24938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1403.439559][T24938] RSP: 002b:00007f9c90092038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1403.439592][T24938] RAX: ffffffffffffffda RBX: 00007f9c8f3e5fa0 RCX: 00007f9c8f18f7c9 [ 1403.439614][T24938] RDX: 0000000000000081 RSI: 0000200000000080 RDI: 0000000000000003 [ 1403.439635][T24938] RBP: 00007f9c90092090 R08: 0000000000000000 R09: 0000000000000000 [ 1403.439656][T24938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1403.439676][T24938] R13: 00007f9c8f3e6038 R14: 00007f9c8f3e5fa0 R15: 00007ffcea7d84d8 [ 1403.439723][T24938] [ 1406.223881][T24997] futex_wake_op: syz.2.4088 tries to shift op by -2048; fix this program [ 1406.283619][T24997] futex_wake_op: syz.2.4088 tries to shift op by -2048; fix this program [ 1407.694788][T25027] openvswitch: HfR: Dropping previously announced user features [ 1407.707532][T25028] netlink: zone id is out of range [ 1407.726814][T25028] netlink: del zone limit has 4 unknown bytes [ 1407.774429][T25024] netlink: set zone limit has 8 unknown bytes [ 1408.518316][T25049] futex_wake_op: syz.4.4099 tries to shift op by -2048; fix this program [ 1408.582794][T25049] futex_wake_op: syz.4.4099 tries to shift op by -2048; fix this program [ 1408.621361][T25055] 0x000000000001-0x000000020000 : "" [ 1408.694437][T25055] ftl_cs: FTL header corrupt! [ 1409.579522][T25075] futex_wake_op: syz.0.4104 tries to shift op by -2048; fix this program [ 1409.636386][T25075] futex_wake_op: syz.0.4104 tries to shift op by -2048; fix this program [ 1410.143560][T25082] __vm_enough_memory: pid: 25082, comm: syz.4.4105, bytes: 4398046511104 not enough memory for the allocation [ 1410.678335][T25087] openvswitch: HfR: Dropping previously announced user features [ 1410.690396][T16618] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1412.101910][T25107] netlink: zone id is out of range [ 1412.122945][T25107] netlink: del zone limit has 4 unknown bytes [ 1412.256843][T25112] bridge0: port 2(veth0_to_bridge) entered blocking state [ 1412.311961][T25112] bridge0: port 2(veth0_to_bridge) entered disabled state [ 1412.334976][T25112] veth0_to_bridge: entered allmulticast mode [ 1412.345573][T25112] veth0_to_bridge: entered promiscuous mode [ 1412.353621][T25112] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1412.424025][T25112] bridge0: port 2(veth0_to_bridge) entered blocking state [ 1412.431371][T25112] bridge0: port 2(veth0_to_bridge) entered forwarding state [ 1412.954823][T25127] openvswitch: HfR: Dropping previously announced user features [ 1413.073012][T25121] netlink: set zone limit has 8 unknown bytes [ 1413.864194][T25147] netlink: zone id is out of range [ 1413.912434][T25147] netlink: del zone limit has 4 unknown bytes [ 1414.322785][T25149] nvme_fabrics: unknown parameter or missing value 'û@è' in ctrl creation request [ 1414.556593][ T31] audit: type=1804 audit(2147486326.954:35): pid=25154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4122" name="/newroot/sys/kernel/tracing/trace" dev="tracefs" ino=1075 res=1 errno=0 [ 1415.612994][T25166] futex_wake_op: syz.1.4126 tries to shift op by -2048; fix this program [ 1415.694589][T25166] futex_wake_op: syz.1.4126 tries to shift op by -2048; fix this program [ 1415.786572][T25166] 0x000000000001-0x000000020000 : "" [ 1415.853862][T25166] ftl_cs: FTL header corrupt! [ 1416.125597][T25171] openvswitch: HfR: Dropping previously announced user features [ 1416.161215][T25170] netlink: set zone limit has 8 unknown bytes [ 1416.626669][T25180] __vm_enough_memory: pid: 25180, comm: syz.4.4130, bytes: 4398046511104 not enough memory for the allocation [ 1417.443938][T25188] openvswitch: HfR: Dropping previously announced user features [ 1418.811411][T25210] netlink: 'syz.1.4138': attribute type 2 has an invalid length. [ 1419.306189][T25218] vhci_hcd: pdev 6446445 [ 1419.416473][T25218] vhci_hcd: not connected 4 [ 1419.664489][T25224] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4141'. [ 1419.954689][T25229] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4143'. [ 1421.740542][T25253] bond0: invalid ARP target specified [ 1422.929768][T25266] netlink: zone id is out of range [ 1422.965399][T25266] netlink: del zone limit has 4 unknown bytes [ 1423.460876][T25273] openvswitch: HfR: Dropping previously announced user features [ 1423.526562][T25270] netlink: set zone limit has 8 unknown bytes [ 1425.098157][T25294] __vm_enough_memory: pid: 25294, comm: syz.2.4159, bytes: 4398046511104 not enough memory for the allocation [ 1425.769702][T25309] netlink: zone id is out of range [ 1425.784020][T25309] netlink: del zone limit has 4 unknown bytes [ 1428.172847][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.180061][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1429.064681][T25348] nvme_fabrics: unknown parameter or missing value 'û@è' in ctrl creation request [ 1429.227356][T16050] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1429.246597][T16050] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1429.258036][T16050] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1429.266431][T16050] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1429.274477][T16050] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1429.562450][T25353] netlink: zone id is out of range [ 1429.584040][T25353] netlink: del zone limit has 4 unknown bytes [ 1430.056421][T25349] chnl_net:caif_netlink_parms(): no params data found [ 1430.195620][T25366] hub 1-0:1.0: USB hub found [ 1430.200979][T25366] hub 1-0:1.0: 1 port detected [ 1430.449931][T25349] bridge0: port 1(bridge_slave_0) entered blocking state [ 1430.471050][T25349] bridge0: port 1(bridge_slave_0) entered disabled state [ 1430.517426][T25349] bridge_slave_0: entered allmulticast mode [ 1430.541976][T25349] bridge_slave_0: entered promiscuous mode [ 1430.583004][T25349] bridge0: port 2(bridge_slave_1) entered blocking state [ 1430.640369][T25349] bridge0: port 2(bridge_slave_1) entered disabled state [ 1430.684037][T25349] bridge_slave_1: entered allmulticast mode [ 1430.704523][T25349] bridge_slave_1: entered promiscuous mode [ 1430.831552][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1430.838429][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1430.897969][T25349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1430.959949][T25349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1431.138878][T25349] team0: Port device team_slave_0 added [ 1431.156563][T25349] team0: Port device team_slave_1 added [ 1431.274546][T25349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1431.281572][T25349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1431.310308][T16050] Bluetooth: hci4: command tx timeout [ 1431.323161][T25349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1431.343622][T25349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1431.350612][T25349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1431.443142][T25349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1431.616491][T25384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4178'. [ 1431.633346][T25349] hsr_slave_0: entered promiscuous mode [ 1431.672962][T25349] hsr_slave_1: entered promiscuous mode [ 1431.718040][T25349] debugfs: 'hsr0' already exists in 'hsr' [ 1431.760905][T25349] Cannot create hsr debugfs directory [ 1432.390402][T25398] netlink: zone id is out of range [ 1432.408103][T25398] netlink: del zone limit has 4 unknown bytes [ 1432.459952][T25399] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4180'. [ 1432.706769][T25403] FAULT_INJECTION: forcing a failure. [ 1432.706769][T25403] name failslab, interval 1, probability 0, space 0, times 0 [ 1432.741019][T25403] CPU: 1 UID: 0 PID: 25403 Comm: syz.1.4182 Tainted: G L syzkaller #0 PREEMPT(full) [ 1432.741084][T25403] Tainted: [L]=SOFTLOCKUP [ 1432.741097][T25403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1432.741118][T25403] Call Trace: [ 1432.741131][T25403] [ 1432.741145][T25403] dump_stack_lvl+0x16c/0x1f0 [ 1432.741204][T25403] should_fail_ex+0x512/0x640 [ 1432.741244][T25403] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1432.741291][T25403] should_failslab+0xc2/0x120 [ 1432.741344][T25403] kmem_cache_alloc_noprof+0x83/0x770 [ 1432.741386][T25403] ? create_new_namespaces+0x30/0xab0 [ 1432.741442][T25403] ? create_new_namespaces+0x30/0xab0 [ 1432.741489][T25403] create_new_namespaces+0x30/0xab0 [ 1432.741553][T25403] ? bpf_lsm_capable+0x9/0x10 [ 1432.741599][T25403] ? security_capable+0x7e/0x260 [ 1432.741661][T25403] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1432.741713][T25403] ksys_unshare+0x45b/0xa40 [ 1432.741767][T25403] ? __pfx_ksys_unshare+0x10/0x10 [ 1432.741822][T25403] ? xfd_validate_state+0x61/0x180 [ 1432.741864][T25403] __x64_sys_unshare+0x31/0x40 [ 1432.741916][T25403] do_syscall_64+0xcd/0xf80 [ 1432.741992][T25403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1432.742027][T25403] RIP: 0033:0x7f9c8f18f7c9 [ 1432.742056][T25403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1432.742099][T25403] RSP: 002b:00007f9c90092038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1432.742131][T25403] RAX: ffffffffffffffda RBX: 00007f9c8f3e5fa0 RCX: 00007f9c8f18f7c9 [ 1432.742155][T25403] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1432.742176][T25403] RBP: 00007f9c8f213f91 R08: 0000000000000000 R09: 0000000000000000 [ 1432.742198][T25403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1432.742218][T25403] R13: 00007f9c8f3e6038 R14: 00007f9c8f3e5fa0 R15: 00007ffcea7d84d8 [ 1432.742263][T25403] [ 1433.215833][T25411] __vm_enough_memory: pid: 25411, comm: syz.1.4185, bytes: 4398046478336 not enough memory for the allocation [ 1433.385641][T16050] Bluetooth: hci4: command tx timeout [ 1433.824981][T25349] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1433.901380][T25349] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1434.014898][T25349] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1434.104699][T25420] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4187'. [ 1434.169563][T25349] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1435.091509][T25349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1435.118435][T25349] 8021q: adding VLAN 0 to HW filter on device team0 [ 1435.207436][T15446] bridge0: port 1(bridge_slave_0) entered blocking state [ 1435.214665][T15446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1435.294361][T15446] bridge0: port 2(bridge_slave_1) entered blocking state [ 1435.301539][T15446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1435.453222][T16050] Bluetooth: hci4: command tx timeout [ 1435.802769][T25444] netlink: zone id is out of range [ 1435.808017][T25444] netlink: del zone limit has 4 unknown bytes [ 1436.480612][T25349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1437.510940][T16050] Bluetooth: hci4: command tx timeout [ 1437.943507][T25349] veth0_vlan: entered promiscuous mode [ 1437.971572][T25349] veth1_vlan: entered promiscuous mode [ 1438.062604][T25349] veth0_macvtap: entered promiscuous mode [ 1438.087769][T25349] veth1_macvtap: entered promiscuous mode [ 1438.137172][T25486] FAULT_INJECTION: forcing a failure. [ 1438.137172][T25486] name failslab, interval 1, probability 0, space 0, times 0 [ 1438.156944][T25349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1438.166778][T25486] CPU: 1 UID: 0 PID: 25486 Comm: syz.1.4204 Tainted: G L syzkaller #0 PREEMPT(full) [ 1438.166831][T25486] Tainted: [L]=SOFTLOCKUP [ 1438.166844][T25486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1438.166865][T25486] Call Trace: [ 1438.166876][T25486] [ 1438.166890][T25486] dump_stack_lvl+0x16c/0x1f0 [ 1438.166955][T25486] should_fail_ex+0x512/0x640 [ 1438.166992][T25486] ? __kmalloc_noprof+0xca/0x910 [ 1438.167032][T25486] should_failslab+0xc2/0x120 [ 1438.167085][T25486] __kmalloc_noprof+0xeb/0x910 [ 1438.167122][T25486] ? __pfx_inc_ucount+0x10/0x10 [ 1438.167151][T25486] ? net_alloc_generic+0x1e/0x70 [ 1438.167203][T25486] ? net_alloc_generic+0x1e/0x70 [ 1438.167248][T25486] net_alloc_generic+0x1e/0x70 [ 1438.167294][T25486] copy_net_ns+0xc6/0x7c0 [ 1438.167347][T25486] ? copy_cgroup_ns+0x71/0x980 [ 1438.167385][T25486] create_new_namespaces+0x3ea/0xab0 [ 1438.167440][T25486] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1438.167494][T25486] ksys_unshare+0x45b/0xa40 [ 1438.167548][T25486] ? __pfx_ksys_unshare+0x10/0x10 [ 1438.167605][T25486] ? xfd_validate_state+0x61/0x180 [ 1438.167649][T25486] __x64_sys_unshare+0x31/0x40 [ 1438.167703][T25486] do_syscall_64+0xcd/0xf80 [ 1438.167771][T25486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1438.167806][T25486] RIP: 0033:0x7f9c8f18f7c9 [ 1438.167833][T25486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1438.167868][T25486] RSP: 002b:00007f9c90092038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1438.167901][T25486] RAX: ffffffffffffffda RBX: 00007f9c8f3e5fa0 RCX: 00007f9c8f18f7c9 [ 1438.167923][T25486] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1438.167943][T25486] RBP: 00007f9c8f213f91 R08: 0000000000000000 R09: 0000000000000000 [ 1438.167964][T25486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1438.167985][T25486] R13: 00007f9c8f3e6038 R14: 00007f9c8f3e5fa0 R15: 00007ffcea7d84d8 [ 1438.168029][T25486] [ 1438.378313][T25349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1438.391954][T15449] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1438.416298][T15449] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1438.431208][T25490] hub 1-0:1.0: USB hub found [ 1438.438241][T25490] hub 1-0:1.0: 1 port detected [ 1438.524222][T15449] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1438.734202][T15445] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1438.777872][T15449] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1439.064946][T15445] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1439.238328][T15445] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1439.427749][T15449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1439.456514][T15449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1439.612029][T15445] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1439.705726][T25507] FAULT_INJECTION: forcing a failure. [ 1439.705726][T25507] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1439.779280][T25507] CPU: 1 UID: 0 PID: 25507 Comm: syz.1.4203 Tainted: G L syzkaller #0 PREEMPT(full) [ 1439.779329][T25507] Tainted: [L]=SOFTLOCKUP [ 1439.779340][T25507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1439.779358][T25507] Call Trace: [ 1439.779369][T25507] [ 1439.779381][T25507] dump_stack_lvl+0x16c/0x1f0 [ 1439.779434][T25507] should_fail_ex+0x512/0x640 [ 1439.779477][T25507] _copy_from_user+0x2e/0xd0 [ 1439.779514][T25507] move_addr_to_kernel+0x65/0x170 [ 1439.779549][T25507] __sys_sendto+0x1be/0x520 [ 1439.779589][T25507] ? __pfx___sys_sendto+0x10/0x10 [ 1439.779667][T25507] ? ksys_write+0x1ac/0x250 [ 1439.779714][T25507] ? __pfx_ksys_write+0x10/0x10 [ 1439.779767][T25507] __x64_sys_sendto+0xe0/0x1c0 [ 1439.779803][T25507] ? do_syscall_64+0x91/0xf80 [ 1439.779851][T25507] ? lockdep_hardirqs_on+0x7c/0x110 [ 1439.779900][T25507] do_syscall_64+0xcd/0xf80 [ 1439.779951][T25507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1439.779985][T25507] RIP: 0033:0x7f9c8f18f7c9 [ 1439.780010][T25507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1439.780041][T25507] RSP: 002b:00007f9c90092038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1439.780072][T25507] RAX: ffffffffffffffda RBX: 00007f9c8f3e5fa0 RCX: 00007f9c8f18f7c9 [ 1439.780095][T25507] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000003 [ 1439.780114][T25507] RBP: 00007f9c90092090 R08: 0000200000000440 R09: 0000000000000020 [ 1439.780136][T25507] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 1439.780156][T25507] R13: 00007f9c8f3e6038 R14: 00007f9c8f3e5fa0 R15: 00007ffcea7d84d8 [ 1439.780200][T25507] [ 1440.334102][T25511] netlink: zone id is out of range [ 1440.366028][T14397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1440.373917][T14397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1440.421587][T25511] netlink: del zone limit has 4 unknown bytes [ 1440.949344][T15445] bridge_slave_0: left allmulticast mode [ 1441.023452][T15445] bridge_slave_0: left promiscuous mode [ 1441.041632][T15445] bridge0: port 1(bridge_slave_0) entered disabled state [ 1441.219867][T25527] netlink: zone id is out of range [ 1441.332947][T25527] netlink: del zone limit has 4 unknown bytes [ 1441.514005][T25530] FAULT_INJECTION: forcing a failure. [ 1441.514005][T25530] name failslab, interval 1, probability 0, space 0, times 0 [ 1441.539983][T25530] CPU: 1 UID: 0 PID: 25530 Comm: syz.5.4208 Tainted: G L syzkaller #0 PREEMPT(full) [ 1441.540037][T25530] Tainted: [L]=SOFTLOCKUP [ 1441.540051][T25530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1441.540071][T25530] Call Trace: [ 1441.540082][T25530] [ 1441.540095][T25530] dump_stack_lvl+0x16c/0x1f0 [ 1441.540153][T25530] should_fail_ex+0x512/0x640 [ 1441.540191][T25530] ? __kmalloc_noprof+0xca/0x910 [ 1441.540234][T25530] should_failslab+0xc2/0x120 [ 1441.540287][T25530] __kmalloc_noprof+0xeb/0x910 [ 1441.540324][T25530] ? __pfx_inc_ucount+0x10/0x10 [ 1441.540356][T25530] ? net_alloc_generic+0x1e/0x70 [ 1441.540409][T25530] ? net_alloc_generic+0x1e/0x70 [ 1441.540453][T25530] net_alloc_generic+0x1e/0x70 [ 1441.540500][T25530] copy_net_ns+0xc6/0x7c0 [ 1441.540559][T25530] ? copy_cgroup_ns+0x71/0x980 [ 1441.540597][T25530] create_new_namespaces+0x3ea/0xab0 [ 1441.540655][T25530] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1441.540708][T25530] ksys_unshare+0x45b/0xa40 [ 1441.540765][T25530] ? __pfx_ksys_unshare+0x10/0x10 [ 1441.540823][T25530] ? xfd_validate_state+0x61/0x180 [ 1441.540865][T25530] __x64_sys_unshare+0x31/0x40 [ 1441.540926][T25530] do_syscall_64+0xcd/0xf80 [ 1441.540982][T25530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1441.541017][T25530] RIP: 0033:0x7f5b0e18f7c9 [ 1441.541045][T25530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1441.541079][T25530] RSP: 002b:00007f5b0f0a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1441.541113][T25530] RAX: ffffffffffffffda RBX: 00007f5b0e3e5fa0 RCX: 00007f5b0e18f7c9 [ 1441.541138][T25530] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1441.541158][T25530] RBP: 00007f5b0e213f91 R08: 0000000000000000 R09: 0000000000000000 [ 1441.541179][T25530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1441.541200][T25530] R13: 00007f5b0e3e6038 R14: 00007f5b0e3e5fa0 R15: 00007fffc1d002f8 [ 1441.541246][T25530] [ 1441.814627][T25532] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4209'. [ 1442.639151][T15445] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1442.663145][T15445] bond0 (unregistering): Released all slaves [ 1442.706686][T25532] debugfs: '!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„LÓÄ]' already exists in 'ieee80211' [ 1443.033318][T15445] HfR: left promiscuous mode [ 1443.882961][T25573] FAULT_INJECTION: forcing a failure. [ 1443.882961][T25573] name failslab, interval 1, probability 0, space 0, times 0 [ 1443.961296][T25573] CPU: 0 UID: 0 PID: 25573 Comm: syz.2.4216 Tainted: G L syzkaller #0 PREEMPT(full) [ 1443.961340][T25573] Tainted: [L]=SOFTLOCKUP [ 1443.961349][T25573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1443.961363][T25573] Call Trace: [ 1443.961372][T25573] [ 1443.961381][T25573] dump_stack_lvl+0x16c/0x1f0 [ 1443.961423][T25573] should_fail_ex+0x512/0x640 [ 1443.961449][T25573] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 1443.961484][T25573] should_failslab+0xc2/0x120 [ 1443.961522][T25573] kmem_cache_alloc_node_noprof+0x86/0x800 [ 1443.961552][T25573] ? __alloc_skb+0x156/0x410 [ 1443.961579][T25573] ? look_up_lock_class+0x59/0x130 [ 1443.961621][T25573] ? __alloc_skb+0x156/0x410 [ 1443.961645][T25573] __alloc_skb+0x156/0x410 [ 1443.961671][T25573] ? __pfx___alloc_skb+0x10/0x10 [ 1443.961699][T25573] ? __lock_acquire+0x436/0x2890 [ 1443.961722][T25573] ? __asan_memset+0x23/0x50 [ 1443.961754][T25573] tipc_buf_acquire+0x26/0xe0 [ 1443.961801][T25573] tipc_msg_build+0x59c/0x1150 [ 1443.961853][T25573] ? __pfx_tipc_msg_build+0x10/0x10 [ 1443.961910][T25573] ? tipc_nametbl_lookup_mcast_nodes+0x214/0x370 [ 1443.961957][T25573] tipc_sendmcast+0x79a/0xb70 [ 1443.961984][T25573] ? process_measurement+0x1e6/0x22d0 [ 1443.962034][T25573] ? __pfx_tipc_sendmcast+0x10/0x10 [ 1443.962064][T25573] ? __lock_acquire+0x436/0x2890 [ 1443.962092][T25573] ? __pfx_woken_wake_function+0x10/0x10 [ 1443.962134][T25573] ? is_bpf_text_address+0x8a/0x1a0 [ 1443.962167][T25573] ? bpf_ksym_find+0x124/0x1c0 [ 1443.962198][T25573] __tipc_sendmsg+0x1331/0x1970 [ 1443.962224][T25573] ? __kernel_text_address+0xd/0x40 [ 1443.962261][T25573] ? __pfx___tipc_sendmsg+0x10/0x10 [ 1443.962292][T25573] ? aa_label_sk_perm+0x194/0x5f0 [ 1443.962326][T25573] ? __lock_acquire+0x436/0x2890 [ 1443.962346][T25573] ? _parse_integer_limit+0x17f/0x1d0 [ 1443.962383][T25573] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1443.962412][T25573] ? _kstrtoull+0x145/0x200 [ 1443.962443][T25573] ? __pfx__kstrtoull+0x10/0x10 [ 1443.962482][T25573] ? register_lock_class+0x41/0x4b0 [ 1443.962506][T25573] ? register_lock_class+0x41/0x4b0 [ 1443.962535][T25573] __tipc_sendstream+0xddc/0x1140 [ 1443.962575][T25573] ? __pfx___tipc_sendstream+0x10/0x10 [ 1443.962603][T25573] ? do_raw_spin_lock+0x12c/0x2b0 [ 1443.962631][T25573] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1443.962666][T25573] ? __local_bh_enable_ip+0xa4/0x120 [ 1443.962705][T25573] tipc_sendstream+0x4f/0x70 [ 1443.962733][T25573] __sys_sendto+0x4a3/0x520 [ 1443.962762][T25573] ? __pfx___sys_sendto+0x10/0x10 [ 1443.962814][T25573] ? ksys_write+0x1ac/0x250 [ 1443.962849][T25573] ? __pfx_ksys_write+0x10/0x10 [ 1443.962888][T25573] __x64_sys_sendto+0xe0/0x1c0 [ 1443.962938][T25573] ? do_syscall_64+0x91/0xf80 [ 1443.962986][T25573] ? lockdep_hardirqs_on+0x7c/0x110 [ 1443.963054][T25573] do_syscall_64+0xcd/0xf80 [ 1443.963107][T25573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1443.963132][T25573] RIP: 0033:0x7fa39b98f7c9 [ 1443.963151][T25573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1443.963174][T25573] RSP: 002b:00007fa39c759038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1443.963197][T25573] RAX: ffffffffffffffda RBX: 00007fa39bbe5fa0 RCX: 00007fa39b98f7c9 [ 1443.963213][T25573] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000003 [ 1443.963228][T25573] RBP: 00007fa39c759090 R08: 0000200000000440 R09: 0000000000000020 [ 1443.963244][T25573] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 1443.963259][T25573] R13: 00007fa39bbe6038 R14: 00007fa39bbe5fa0 R15: 00007fff964efe98 [ 1443.963290][T25573] [ 1444.860483][T25584] FAULT_INJECTION: forcing a failure. [ 1444.860483][T25584] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1444.902165][T25584] CPU: 0 UID: 0 PID: 25584 Comm: syz.2.4218 Tainted: G L syzkaller #0 PREEMPT(full) [ 1444.902220][T25584] Tainted: [L]=SOFTLOCKUP [ 1444.902234][T25584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1444.902268][T25584] Call Trace: [ 1444.902280][T25584] [ 1444.902294][T25584] dump_stack_lvl+0x16c/0x1f0 [ 1444.902354][T25584] should_fail_ex+0x512/0x640 [ 1444.902392][T25584] ? arch_stack_walk+0xa6/0x100 [ 1444.902436][T25584] get_futex_key+0x1d0/0x15f0 [ 1444.902479][T25584] ? __pfx_get_futex_key+0x10/0x10 [ 1444.902511][T25584] ? stack_trace_save+0x8e/0xc0 [ 1444.902560][T25584] ? __pfx_stack_trace_save+0x10/0x10 [ 1444.902615][T25584] ? stack_depot_save_flags+0x29/0x9b0 [ 1444.902662][T25584] futex_wait_setup+0x9d/0x570 [ 1444.902721][T25584] __futex_wait+0x193/0x2f0 [ 1444.902770][T25584] ? __pfx___futex_wait+0x10/0x10 [ 1444.902824][T25584] ? __pfx_futex_wake_mark+0x10/0x10 [ 1444.902877][T25584] ? futex_hash+0x2c5/0x380 [ 1444.902915][T25584] ? futex_private_hash_put+0x160/0x1b0 [ 1444.902956][T25584] futex_wait+0xe8/0x380 [ 1444.903002][T25584] ? __pfx_futex_wait+0x10/0x10 [ 1444.903059][T25584] ? putname+0xf5/0x1a0 [ 1444.903099][T25584] do_futex+0x229/0x350 [ 1444.903137][T25584] ? __pfx_do_futex+0x10/0x10 [ 1444.903188][T25584] __x64_sys_futex+0x1e0/0x4c0 [ 1444.903230][T25584] ? __x64_sys_openat+0x174/0x210 [ 1444.903281][T25584] ? __pfx___x64_sys_futex+0x10/0x10 [ 1444.903340][T25584] do_syscall_64+0xcd/0xf80 [ 1444.903395][T25584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1444.903430][T25584] RIP: 0033:0x7fa39b98f7c9 [ 1444.903457][T25584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1444.903491][T25584] RSP: 002b:00007fa39c7590e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1444.903524][T25584] RAX: ffffffffffffffda RBX: 00007fa39bbe5fa8 RCX: 00007fa39b98f7c9 [ 1444.903547][T25584] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa39bbe5fa8 [ 1444.903569][T25584] RBP: 00007fa39bbe5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1444.903591][T25584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1444.903611][T25584] R13: 00007fa39bbe6038 R14: 00007fff964efdb0 R15: 00007fff964efe98 [ 1444.903657][T25584] [ 1445.498972][T15445] veth1_macvtap: left promiscuous mode [ 1445.506009][T15445] veth0_macvtap: left promiscuous mode [ 1446.072949][T25597] aoe: can't write to that file. [ 1446.610024][T15445] team0 (unregistering): Port device team_slave_1 removed [ 1446.710583][T15445] team0 (unregistering): Port device team_slave_0 removed [ 1450.718598][T25665] zswap: compressor not available [ 1451.190736][T25679] FAULT_INJECTION: forcing a failure. [ 1451.190736][T25679] name failslab, interval 1, probability 0, space 0, times 0 [ 1451.214152][T25679] CPU: 1 UID: 0 PID: 25679 Comm: syz.2.4233 Tainted: G L syzkaller #0 PREEMPT(full) [ 1451.214204][T25679] Tainted: [L]=SOFTLOCKUP [ 1451.214216][T25679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1451.214235][T25679] Call Trace: [ 1451.214247][T25679] [ 1451.214261][T25679] dump_stack_lvl+0x16c/0x1f0 [ 1451.214316][T25679] should_fail_ex+0x512/0x640 [ 1451.214352][T25679] ? __kvmalloc_node_noprof+0x129/0xa40 [ 1451.214404][T25679] should_failslab+0xc2/0x120 [ 1451.214455][T25679] __kvmalloc_node_noprof+0x14a/0xa40 [ 1451.214504][T25679] ? seq_read_iter+0x830/0x12d0 [ 1451.214547][T25679] ? find_held_lock+0x2b/0x80 [ 1451.214598][T25679] ? seq_read_iter+0x830/0x12d0 [ 1451.214640][T25679] seq_read_iter+0x830/0x12d0 [ 1451.214685][T25679] ? aa_file_perm+0x2ad/0x1560 [ 1451.214747][T25679] seq_read+0x3a3/0x570 [ 1451.214792][T25679] ? __pfx_seq_read+0x10/0x10 [ 1451.214845][T25679] ? lock_acquire+0x179/0x330 [ 1451.214898][T25679] ? __pfx_seq_read+0x10/0x10 [ 1451.214941][T25679] proc_reg_read+0x240/0x330 [ 1451.214982][T25679] ? __pfx_proc_reg_read+0x10/0x10 [ 1451.215024][T25679] vfs_read+0x1e4/0xcf0 [ 1451.215072][T25679] ? __pfx___mutex_lock+0x10/0x10 [ 1451.215129][T25679] ? __pfx_vfs_read+0x10/0x10 [ 1451.215187][T25679] ? __fget_files+0x20e/0x3c0 [ 1451.215244][T25679] ksys_read+0x12a/0x250 [ 1451.215288][T25679] ? __pfx_ksys_read+0x10/0x10 [ 1451.215347][T25679] do_syscall_64+0xcd/0xf80 [ 1451.215398][T25679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1451.215432][T25679] RIP: 0033:0x7fa39b98f7c9 [ 1451.215457][T25679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1451.215490][T25679] RSP: 002b:00007fa39c759038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1451.215520][T25679] RAX: ffffffffffffffda RBX: 00007fa39bbe5fa0 RCX: 00007fa39b98f7c9 [ 1451.215542][T25679] RDX: 000000000000000a RSI: 00002000000000c0 RDI: 0000000000000004 [ 1451.215562][T25679] RBP: 00007fa39c759090 R08: 0000000000000000 R09: 0000000000000000 [ 1451.215582][T25679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1451.215601][T25679] R13: 00007fa39bbe6038 R14: 00007fa39bbe5fa0 R15: 00007fff964efe98 [ 1451.215646][T25679] [ 1451.445884][T25680] FAULT_INJECTION: forcing a failure. [ 1451.445884][T25680] name failslab, interval 1, probability 0, space 0, times 0 [ 1451.458729][T25680] CPU: 1 UID: 0 PID: 25680 Comm: syz.2.4233 Tainted: G L syzkaller #0 PREEMPT(full) [ 1451.458779][T25680] Tainted: [L]=SOFTLOCKUP [ 1451.458790][T25680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1451.458810][T25680] Call Trace: [ 1451.458822][T25680] [ 1451.458835][T25680] dump_stack_lvl+0x16c/0x1f0 [ 1451.458897][T25680] should_fail_ex+0x512/0x640 [ 1451.458934][T25680] ? __kmalloc_noprof+0xca/0x910 [ 1451.458974][T25680] should_failslab+0xc2/0x120 [ 1451.459026][T25680] __kmalloc_noprof+0xeb/0x910 [ 1451.459059][T25680] ? __pfx_inc_ucount+0x10/0x10 [ 1451.459089][T25680] ? net_alloc_generic+0x1e/0x70 [ 1451.459140][T25680] ? net_alloc_generic+0x1e/0x70 [ 1451.459183][T25680] net_alloc_generic+0x1e/0x70 [ 1451.459227][T25680] copy_net_ns+0xc6/0x7c0 [ 1451.459272][T25680] ? copy_cgroup_ns+0x71/0x980 [ 1451.459315][T25680] create_new_namespaces+0x3ea/0xab0 [ 1451.459370][T25680] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1451.459420][T25680] ksys_unshare+0x45b/0xa40 [ 1451.459473][T25680] ? __pfx_ksys_unshare+0x10/0x10 [ 1451.459526][T25680] ? xfd_validate_state+0x61/0x180 [ 1451.459568][T25680] __x64_sys_unshare+0x31/0x40 [ 1451.459621][T25680] do_syscall_64+0xcd/0xf80 [ 1451.459673][T25680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1451.459707][T25680] RIP: 0033:0x7fa39b98f7c9 [ 1451.459733][T25680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1451.459765][T25680] RSP: 002b:00007fa399bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1451.459797][T25680] RAX: ffffffffffffffda RBX: 00007fa39bbe6090 RCX: 00007fa39b98f7c9 [ 1451.459820][T25680] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1451.459840][T25680] RBP: 00007fa39ba13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1451.459867][T25680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1451.459887][T25680] R13: 00007fa39bbe6128 R14: 00007fa39bbe6090 R15: 00007fff964efe98 [ 1451.459931][T25680] [ 1451.730693][T25682] netlink: Unknown conntrack attr (type=257, max=9) [ 1451.848923][T25686] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4234'. [ 1452.440110][T25695] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4235'. [ 1455.446496][T25755] openvswitch: HfR: Dropping previously announced user features [ 1455.518067][T25756] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4246'. [ 1455.652123][T25751] netlink: set zone limit has 8 unknown bytes [ 1456.294589][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1456.306976][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1456.319536][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1456.331909][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1456.344378][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1456.356807][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1456.369253][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1456.381640][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1456.711275][ C0] net_ratelimit: 1063 callbacks suppressed [ 1456.711308][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1456.711646][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1456.711971][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1456.712267][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1456.712563][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1456.712873][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1456.713198][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1456.713754][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1456.816132][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1456.816355][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1461.695234][ C0] net_ratelimit: 24420 callbacks suppressed [ 1461.695255][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1461.713711][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1461.726005][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1461.738296][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1461.750481][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1461.762791][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1461.775181][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1461.787503][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1461.799704][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1461.812065][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1466.679290][ C0] net_ratelimit: 25076 callbacks suppressed [ 1466.679312][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1466.697549][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1466.709782][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1466.722072][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1466.734296][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1466.746659][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1466.759026][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1466.771392][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1466.783650][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1466.796001][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1471.663381][ C0] net_ratelimit: 24632 callbacks suppressed [ 1471.663417][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1471.682010][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1471.694307][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1471.706721][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1471.719693][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1471.732268][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1471.744477][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1471.756768][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1471.769034][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1471.781453][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1476.647481][ C0] net_ratelimit: 24279 callbacks suppressed [ 1476.647508][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1476.665841][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1476.678395][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1476.690675][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1476.703070][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1476.715502][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1476.728124][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1476.740369][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1476.752727][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1476.764951][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1481.631623][ C0] net_ratelimit: 26333 callbacks suppressed [ 1481.631644][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1481.649903][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1481.662135][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1481.674411][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1481.686672][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1481.699115][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1481.711391][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1481.723661][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1481.735857][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1481.748168][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1486.615582][ C0] net_ratelimit: 25977 callbacks suppressed [ 1486.615605][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1486.633789][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1486.646167][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1486.658436][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1486.670850][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1486.683093][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1486.695475][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1486.707730][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1486.720028][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1486.732254][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1490.761662][T16618] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1491.599784][ C0] net_ratelimit: 20296 callbacks suppressed [ 1491.599816][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1491.618154][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1491.630505][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1491.642830][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1491.655142][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1491.667571][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1491.679927][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1491.692321][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1491.704666][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1491.717338][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1491.961835][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1491.968446][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1492.757729][T25806] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 1492.900577][T16618] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 1493.397774][T25807] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 1496.583823][ C0] net_ratelimit: 25014 callbacks suppressed [ 1496.583845][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1496.602176][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1496.614698][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1496.626945][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1496.639344][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1496.651555][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1496.663986][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1496.676250][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1496.688655][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1496.700962][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1497.400649][T25783] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1497.444374][T25802] Bluetooth: hci7: Opcode 0x0c03 failed: -4 [ 1497.911239][T25800] Bluetooth: hci6: Opcode 0x0c03 failed: -4 [ 1497.931613][T25808] Bluetooth: hci0: command 0x0406 tx timeout [ 1497.956287][T25797] Bluetooth: hci5: Opcode 0x0c03 failed: -4 [ 1497.966515][T25804] Bluetooth: hci8: Opcode 0x0c03 failed: -4 [ 1501.567949][ C0] net_ratelimit: 24275 callbacks suppressed [ 1501.567979][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1501.586367][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1501.598739][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1501.611206][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1501.623615][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1501.636127][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1501.648414][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1501.660821][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1501.673061][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1501.685555][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1506.551943][ C0] net_ratelimit: 25108 callbacks suppressed [ 1506.551965][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1506.570397][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1506.582747][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1506.595191][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1506.607520][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1506.619985][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1506.632337][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1506.644854][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1506.657096][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1506.669510][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1511.535956][ C0] net_ratelimit: 23232 callbacks suppressed [ 1511.535978][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1511.554404][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1511.566805][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1511.579303][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1511.591706][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1511.604204][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1511.617008][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1511.629522][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1511.641980][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1511.654583][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1516.520169][ C0] net_ratelimit: 25279 callbacks suppressed [ 1516.520199][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1516.538635][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1516.551095][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1516.563452][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1516.575797][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1516.588118][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1516.600415][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1516.612746][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1516.625085][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1516.637533][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1521.504140][ C0] net_ratelimit: 25346 callbacks suppressed [ 1521.504168][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1521.522453][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1521.534922][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1521.547512][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1521.560012][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1521.572386][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1521.584887][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1521.597264][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1521.609767][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1521.622166][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1526.488169][ C0] net_ratelimit: 25125 callbacks suppressed [ 1526.488197][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1526.506608][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1526.519030][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1526.531529][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1526.543949][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1526.556463][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1526.568849][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1526.581319][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1526.593701][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1526.606307][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1531.472305][ C0] net_ratelimit: 24858 callbacks suppressed [ 1531.472333][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1531.490706][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1531.503077][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1531.515554][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1531.527917][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1531.540384][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1531.552758][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1531.565277][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1531.577652][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1531.590101][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1536.456487][ C0] net_ratelimit: 25345 callbacks suppressed [ 1536.456509][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1536.474823][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1536.487289][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1536.499536][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1536.511960][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1536.524195][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1536.536774][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1536.549110][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1536.561566][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1536.573852][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1541.440455][ C0] net_ratelimit: 23686 callbacks suppressed [ 1541.440491][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1541.458880][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1541.471351][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1541.483754][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1541.496219][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1541.508608][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1541.521060][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1541.533619][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1541.546107][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1541.558507][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1546.424515][ C0] net_ratelimit: 24725 callbacks suppressed [ 1546.424536][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1546.443028][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1546.455403][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1546.467861][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1546.480216][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1546.492564][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1546.504862][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1546.517140][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1546.529490][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1546.541831][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1551.408642][ C0] net_ratelimit: 24812 callbacks suppressed [ 1551.408664][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1551.427086][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1551.439440][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1551.451864][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1551.464328][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1551.476761][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1551.489109][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1551.501534][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1551.513899][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1551.526316][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1553.076015][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1553.082643][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1556.392738][ C0] net_ratelimit: 24824 callbacks suppressed [ 1556.392759][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1556.411088][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1556.423419][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1556.435845][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1556.448174][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1556.460699][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1556.473058][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1556.485534][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1556.497992][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1556.510497][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1561.376628][ C0] net_ratelimit: 25674 callbacks suppressed [ 1561.376649][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1561.395211][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1561.407555][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1561.420003][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1561.432377][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1561.444814][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1561.457176][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1561.469644][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1561.482003][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1561.494465][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1566.360913][ C0] net_ratelimit: 26203 callbacks suppressed [ 1566.360935][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1566.379164][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1566.391563][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1566.403986][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1566.416400][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1566.428761][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1566.441216][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1566.453530][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1566.465986][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1566.478498][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1571.345017][ C0] net_ratelimit: 24398 callbacks suppressed [ 1571.345038][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1571.363383][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1571.375885][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1571.388227][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1571.400669][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1571.413072][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1571.425614][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1571.437952][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1571.450384][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1571.462809][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1576.329034][ C0] net_ratelimit: 24846 callbacks suppressed [ 1576.329055][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1576.347421][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1576.359860][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1576.372217][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1576.385113][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1576.397524][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1576.410051][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1576.422409][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1576.434842][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1576.447174][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1581.313157][ C0] net_ratelimit: 24584 callbacks suppressed [ 1581.313178][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1581.331488][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1581.343923][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1581.356236][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1581.368633][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1581.380617][ C0] sched: DL replenish lagged too much [ 1581.386411][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1581.398847][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1581.411172][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1581.423682][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1581.435914][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1586.297101][ C0] net_ratelimit: 24240 callbacks suppressed [ 1586.297128][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1586.315840][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1586.328525][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1586.340888][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1586.353217][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1586.365561][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1586.377849][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1586.390144][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1586.402481][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1586.414853][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1591.281328][ C0] net_ratelimit: 25433 callbacks suppressed [ 1591.281349][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1591.299679][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1591.312031][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1591.324465][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1591.336774][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1591.349184][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1591.361497][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1591.373913][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1591.386232][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1591.398647][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1596.265306][ C0] net_ratelimit: 24737 callbacks suppressed [ 1596.265333][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1596.283695][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1596.296143][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1596.308511][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1596.321009][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1596.333414][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1596.345897][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1596.358278][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1596.370832][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1596.383261][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1601.249654][ C0] net_ratelimit: 25032 callbacks suppressed [ 1601.249675][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1601.267921][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1601.280345][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1601.292688][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1601.305314][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1601.317672][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1601.330099][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1601.342454][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1601.354935][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1601.367290][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1606.233455][ C0] net_ratelimit: 25903 callbacks suppressed [ 1606.233479][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1606.252100][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1606.264499][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1606.276975][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1606.289371][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1606.301825][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1606.314203][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1606.326646][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1606.339049][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1606.351524][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1611.217570][ C0] net_ratelimit: 24636 callbacks suppressed [ 1611.217600][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1611.236053][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1611.248431][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1611.260908][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1611.273307][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1611.285762][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1611.298127][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1611.311616][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1611.323999][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1611.336442][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1614.201346][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1614.207865][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1616.201799][ C0] net_ratelimit: 24864 callbacks suppressed [ 1616.201821][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1616.220163][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1616.232531][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1616.244967][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1616.257335][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1616.269814][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1616.282198][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1616.294664][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1616.307035][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1616.319504][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1619.792482][T16618] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1621.185669][ C0] net_ratelimit: 23412 callbacks suppressed [ 1621.185689][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1621.204080][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1621.216459][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1621.228946][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1621.241222][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1621.253653][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1621.265991][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1621.278465][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1621.290698][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1621.303134][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1622.953927][T23771] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1622.989121][T25783] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1623.037189][T25854] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1623.101675][T16618] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1623.427312][T25855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1623.595845][T25783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1623.680738][T25783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1623.716896][T23771] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1623.791175][T16618] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1624.080173][T16618] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1624.114824][T25854] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1624.163155][T25854] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1625.393122][T25783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1625.442261][T25855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1625.571918][T16618] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1625.617084][T25854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1626.047496][T16618] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1626.096668][T23771] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1626.158147][T25783] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1626.169821][ C0] net_ratelimit: 23025 callbacks suppressed [ 1626.169850][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1626.170080][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1626.170301][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1626.170520][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1626.170749][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1626.170988][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1626.171223][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1626.171441][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1626.171668][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1626.171888][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1626.673537][T16618] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1626.708947][T23771] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1626.793574][T23771] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1626.814352][T25855] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1628.369782][T25853] Bluetooth: hci4: Opcode 0x0c23 failed: -110 [ 1628.696213][T25783] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1629.366501][T25783] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1631.002060][T25806] Bluetooth: hci1: command tx timeout [ 1631.153921][ C0] net_ratelimit: 23266 callbacks suppressed [ 1631.153943][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1631.172132][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1631.184453][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1631.196767][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1631.209035][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1631.221309][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1631.233681][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1631.246003][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1631.258306][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1631.270663][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1631.382807][T25844] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1631.878276][T23771] Bluetooth: hci2: command tx timeout [ 1634.031274][T23771] Bluetooth: hci3: command tx timeout [ 1634.269422][T25806] Bluetooth: hci0: command tx timeout [ 1634.350121][T25783] Bluetooth: hci1: command tx timeout [ 1636.137969][ C0] net_ratelimit: 24242 callbacks suppressed [ 1636.137990][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1636.156282][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1636.168710][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1636.180946][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1636.193345][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1636.205573][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1636.218002][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1636.230308][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1636.242765][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1636.255026][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1636.331783][T25783] Bluetooth: hci0: command tx timeout [ 1636.408041][T25783] Bluetooth: hci1: command tx timeout [ 1638.407021][T16050] Bluetooth: hci0: command tx timeout [ 1640.471731][T16050] Bluetooth: hci0: command tx timeout [ 1640.583708][T25806] Bluetooth: hci2: command tx timeout [ 1641.122049][ C0] net_ratelimit: 23878 callbacks suppressed [ 1641.122078][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1641.140400][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1641.152947][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1641.165330][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1641.177686][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1641.190115][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1641.202550][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1641.214951][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1641.227343][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1641.239753][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1646.106105][ C0] net_ratelimit: 24849 callbacks suppressed [ 1646.106126][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1646.124476][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1646.136847][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1646.149305][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1646.161692][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1646.174258][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1646.186621][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1646.199073][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1646.211438][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1646.223903][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1647.598422][T16050] Bluetooth: hci3: command tx timeout [ 1647.603982][T25806] Bluetooth: hci2: command tx timeout [ 1647.704464][T16050] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1649.210357][ T32] INFO: task dhcpcd:5492 blocked for more than 143 seconds. [ 1649.217754][ T32] Tainted: G L syzkaller #0 [ 1649.229820][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1649.238558][ T32] task:dhcpcd state:D stack:22680 pid:5492 tgid:5492 ppid:5491 task_flags:0x400140 flags:0x00080000 [ 1649.269658][ T32] Call Trace: [ 1649.273868][ T32] [ 1649.276857][ T32] ? __schedule+0x10b9/0x6150 [ 1649.297666][ T32] __schedule+0x1139/0x6150 [ 1649.303304][ T32] ? __lock_acquire+0x436/0x2890 [ 1649.308341][ T32] ? __pfx___schedule+0x10/0x10 [ 1649.313763][ T32] ? find_held_lock+0x2b/0x80 [ 1649.318520][ T32] ? schedule+0x2d7/0x3a0 [ 1649.323656][ T32] schedule+0xe7/0x3a0 [ 1649.327809][ T32] schedule_preempt_disabled+0x13/0x30 [ 1649.333874][ T32] __mutex_lock+0xc69/0x1ca0 [ 1649.338553][ T32] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1649.344946][ T32] ? inet_rtm_newaddr+0x30c/0x1540 [ 1649.350490][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1649.355602][ T32] ? kernel_text_address+0x8d/0x100 [ 1649.361331][ T32] ? unwind_get_return_address+0x59/0xa0 [ 1649.367054][ T32] ? __nla_parse+0x40/0x60 [ 1649.372329][ T32] ? inet_rtm_newaddr+0x30c/0x1540 [ 1649.377519][ T32] inet_rtm_newaddr+0x30c/0x1540 [ 1649.383018][ T32] ? __lock_acquire+0x436/0x2890 [ 1649.388018][ T32] ? stack_depot_save_flags+0x29/0x9b0 [ 1649.394115][ T32] ? __pfx_stack_trace_save+0x10/0x10 [ 1649.399964][ T32] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1649.405437][ T32] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1649.411392][ T32] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1649.416880][ T32] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1649.422548][ T32] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1649.428012][ T32] rtnetlink_rcv_msg+0x95e/0xe90 [ 1649.433531][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1649.439389][ T32] ? __lock_acquire+0x436/0x2890 [ 1649.444397][ T32] netlink_rcv_skb+0x158/0x420 [ 1649.449714][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1649.455264][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1649.461089][ T32] ? netlink_deliver_tap+0x1ae/0xd30 [ 1649.466478][ T32] netlink_unicast+0x5aa/0x870 [ 1649.471820][ T32] ? __pfx_netlink_unicast+0x10/0x10 [ 1649.477187][ T32] ? __pfx___might_resched+0x10/0x10 [ 1649.483045][ T32] ? __lock_acquire+0x436/0x2890 [ 1649.488062][ T32] netlink_sendmsg+0x8c8/0xdd0 [ 1649.493441][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1649.499090][ T32] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 1649.505269][ T32] ____sys_sendmsg+0xa5d/0xc30 [ 1649.510454][ T32] ? copy_msghdr_from_user+0x10a/0x160 [ 1649.515991][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1649.521855][ T32] ___sys_sendmsg+0x134/0x1d0 [ 1649.526610][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 1649.538214][ T32] ? __lock_acquire+0x436/0x2890 [ 1649.543288][ T32] ? memcg_rstat_updated.part.0+0x110/0x250 [ 1649.549812][ T32] __sys_sendmsg+0x16d/0x220 [ 1649.554486][ T32] ? __pfx___sys_sendmsg+0x10/0x10 [ 1649.560168][ T32] ? find_held_lock+0x2b/0x80 [ 1649.565017][ T32] ? do_user_addr_fault+0x843/0x1370 [ 1649.570854][ T32] do_syscall_64+0xcd/0xf80 [ 1649.575441][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1649.581888][ T32] RIP: 0033:0x7fde7ed15407 [ 1649.586359][ T32] RSP: 002b:00007ffdc65452c0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 1649.595414][ T32] RAX: ffffffffffffffda RBX: 00007fde7ec8b740 RCX: 00007fde7ed15407 [ 1649.603775][ T32] RDX: 0000000000000000 RSI: 00007ffdc65594a0 RDI: 0000000000000004 [ 1649.612170][ T32] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1649.620507][ T32] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffdc65696d0 [ 1649.628883][ T32] R13: 00007fde7ec8b6c8 R14: 0000000000000044 R15: 00007ffdc65594a0 [ 1649.637028][ T32] [ 1649.640679][ T32] [ 1649.640679][ T32] Showing all locks held in the system: [ 1649.648899][ T32] 1 lock held by pool_workqueue_/3: [ 1649.654147][ T32] #0: ffffffff8e3d4c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 1649.664756][ T32] 1 lock held by khungtaskd/32: [ 1649.669915][T25783] Bluetooth: hci1: command tx timeout [ 1649.670540][ T32] #0: ffffffff8e3c9520 ( [ 1649.675366][T25783] Bluetooth: hci3: command tx timeout [ 1649.675370][ T32] rcu_read_lock [ 1649.680142][ T32] ){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1649.680225][ T32] 1 lock held by dhcpcd/5492: [ 1649.680255][ T32] #0: ffffffff901454a8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 1649.680365][ T32] 4 locks held by syz-executor/5814: [ 1649.680386][ T32] #0: ffff88807843d6c8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x117/0x580 [ 1649.680474][ T32] #1: ffff8880351d4518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x174/0x380 [ 1649.680570][ T32] #2: ffff888079a06f60 (mapping.invalidate_lock#2){++++}-{4:4}, at: ext4_page_mkwrite+0x353/0x1880 [ 1649.680679][ T32] #3: ffff888079a06c50 (&ei->i_data_sem){++++}-{4:4}, at: ext4_da_get_block_prep+0x6ad/0x1230 [ 1649.680766][ T32] 4 locks held by kworker/1:4/5919: [ 1649.680788][ T32] #0: ffff8880319ed548 ((wq_completion)wg-kex-wg2#16){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 1649.680888][ T32] #1: ffffc9000441fc90 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 1649.681018][ T32] #2: ffff88805abfd308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1c2/0x880 [ 1649.681146][ T32] #3: ffff888075874890 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x5ac/0x880 [ 1649.681259][ T32] 3 locks held by kworker/1:6/5932: [ 1649.681281][ T32] #0: ffff88813ff55948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 1649.681373][ T32] #1: ffffc9000456fc90 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 1649.681469][ T32] #2: ffffffff90677ca8 (ovs_mutex){+.+.}-{4:4}, at: ovs_dp_masks_rebalance+0x24/0xf0 [ 1649.681566][ T32] 3 locks held by kworker/0:0/9556: [ 1649.681589][ T32] 4 locks held by kworker/1:5/14145: [ 1649.681609][ T32] #0: ffff888059c7f148 ((wq_completion)wg-kex-wg2#12){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 1649.681712][ T32] #1: ffffc9000458fc90 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 1649.681845][ T32] #2: ffff88805be6d308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1c2/0x880 [ 1649.681959][ T32] #3: ffff8880297abea8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x5ac/0x880 [ 1649.682072][ T32] 4 locks held by kworker/u10:0/14218: [ 1649.682093][ T32] 3 locks held by kworker/u10:1/14220: [ 1649.682122][ T32] 3 locks held by kworker/u10:2/14221: [ 1649.682145][ T32] 3 locks held by kworker/u10:3/14222: [ 1649.682166][ T32] 3 locks held by kworker/u10:7/14231: [ 1649.682188][ T32] 6 locks held by kworker/u10:13/14272: [ 1649.682211][ T32] 4 locks held by kworker/u10:16/14332: [ 1649.682234][ T32] 3 locks held by kworker/u10:18/14628: [ 1649.682256][ T32] 3 locks held by kworker/u10:20/15436: [ 1649.682277][ T32] 4 locks held by kworker/u10:22/15438: [ 1649.682300][ T32] 3 locks held by kworker/u10:25/15441: [ 1649.682321][ T32] 2 locks held by kworker/u10:27/15443: [ 1649.682344][ T32] 4 locks held by kworker/u10:29/15445: [ 1649.682366][ T32] 3 locks held by kworker/u10:31/15447: [ 1649.682389][ T32] 4 locks held by kworker/u10:32/15448: [ 1649.682411][ T32] 4 locks held by kworker/u10:33/15449: [ 1649.682433][ T32] 3 locks held by kworker/u10:35/15451: [ 1649.682456][ T32] 2 locks held by kworker/u11:2/16050: [ 1649.682482][ T32] 3 locks held by kworker/1:3/21142: [ 1649.682505][ T32] #0: ffff88813ff55948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 1649.682598][ T32] #1: ffffc9000482fc90 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 1649.682693][ T32] #2: ffffffff90677ca8 (ovs_mutex){+.+.}-{4:4}, at: ovs_dp_masks_rebalance+0x24/0xf0 [ 1649.682788][ T32] 2 locks held by getty/21167: [ 1649.682809][ T32] #0: ffff8880318270a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1649.682905][ T32] #1: ffffc900042592f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x1510 [ 1649.682993][ T32] 3 locks held by kworker/1:8/22825: [ 1649.683015][ T32] #0: ffff88813ff55948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 1649.683112][ T32] #1: ffffc900049ffc90 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 1649.683208][ T32] #2: ffffffff90677ca8 (ovs_mutex){+.+.}-{4:4}, at: ovs_dp_masks_rebalance+0x24/0xf0 [ 1649.683302][ T32] 5 locks held by kworker/0:2/23296: [ 1649.683325][ T32] 2 locks held by kworker/u11:0/23771: [ 1649.683349][ T32] 1 lock held by syz.2.4103/25076: [ 1649.683370][ T32] #0: ffffffff901454a8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 1649.683457][ T32] 1 lock held by syz.4.4143/25232: [ 1649.683479][ T32] #0: ffffffff901454a8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 1649.683564][ T32] 4 locks held by kworker/u10:4/25533: [ 1649.683587][ T32] 5 locks held by kworker/u10:5/25579: [ 1649.683609][ T32] 1 lock held by syz.5.4229/25671: [ 1649.683629][ T32] #0: ffffffff901454a8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 1649.683714][ T32] 1 lock held by syz.1.4252/25766: [ 1649.683748][ T32] #0: ffffffff901454a8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 1649.683832][ T32] 2 locks held by kworker/u10:6/25779: [ 1649.683854][ T32] 4 locks held by kworker/u11:1/25783: [ 1649.683877][ T32] 3 locks held by kworker/u11:4/25806: [ 1649.683923][ T32] #0: ffff88806add9148 ((wq_completion)hci4){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 1649.684016][ T32] #1: ffffc9000492fc90 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 1649.684126][ T32] #2: ffff88805c630ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_open+0x22/0xb0 [ 1649.684224][ T32] 3 locks held by kworker/u10:9/25810: [ 1649.684245][ T32] #0: ffff88814ce31948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 1649.684337][ T32] #1: ffffc90003b37c90 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 1649.684432][ T32] #2: ffffffff901454a8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x12/0x30 [ 1649.684521][ T32] 3 locks held by kworker/0:9/25813: [ 1649.684543][ T32] #0: ffff88813ff55948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 1649.684635][ T32] #1: ffffc900048afc90 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 1649.684728][ T32] #2: ffffffff901454a8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 1649.684829][ T32] 3 locks held by kworker/0:10/25814: [ 1649.684851][ T32] 3 locks held by kworker/0:12/25816: [ 1649.684873][ T32] #0: ffff88813ff56948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 1649.684967][ T32] #1: ffffc90004b9fc90 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 1649.685060][ T32] #2: ffffffff901454a8 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x91/0x1190 [ 1649.685176][ T32] 3 locks held by kworker/0:13/25817: [ 1649.685198][ T32] 2 locks held by kworker/0:14/25818: [ 1649.685220][ T32] 3 locks held by kworker/u10:10/25820: [ 1649.685242][ T32] 1 lock held by syz-executor/25833: [ 1649.685263][ T32] #0: ffffffff901454a8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 1649.685369][ T32] 1 lock held by syz-executor/25836: [ 1649.685390][ T32] #0: ffffffff901454a8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 1649.685497][ T32] 1 lock held by syz-executor/25838: [ 1649.685518][ T32] #0: ffffffff901454a8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 1649.685624][ T32] 1 lock held by syz-executor/25842: [ 1649.685646][ T32] #0: ffffffff901454a8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 1649.685752][ T32] 4 locks held by kworker/u10:11/25846: [ 1649.685774][ T32] 3 locks held by kworker/u10:12/25847: [ 1649.685796][ T32] 3 locks held by kworker/u10:14/25848: [ 1649.685818][ T32] 3 locks held by kworker/u10:15/25849: [ 1649.685841][ T32] 3 locks held by kworker/u10:21/25851: [ 1649.685864][ T32] 3 locks held by kworker/0:17/25859: [ 1649.685888][ T32] [ 1649.685898][ T32] ============================================= [ 1649.685898][ T32] [ 1649.685914][ T32] NMI backtrace for cpu 1 [ 1649.685940][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1649.685984][ T32] Tainted: [L]=SOFTLOCKUP [ 1649.685996][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1649.686015][ T32] Call Trace: [ 1649.686026][ T32] [ 1649.686038][ T32] dump_stack_lvl+0x116/0x1f0 [ 1649.686090][ T32] nmi_cpu_backtrace+0x27b/0x390 [ 1649.686137][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1649.686171][ T32] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1649.686214][ T32] sys_info+0x133/0x180 [ 1649.686246][ T32] watchdog+0xe66/0x1180 [ 1649.686301][ T32] ? rcu_is_watching+0x12/0xc0 [ 1649.686345][ T32] ? __pfx_watchdog+0x10/0x10 [ 1649.686389][ T32] ? lockdep_hardirqs_on+0x7c/0x110 [ 1649.686441][ T32] ? __kthread_parkme+0x19e/0x250 [ 1649.686490][ T32] ? __pfx_watchdog+0x10/0x10 [ 1649.686536][ T32] kthread+0x3c5/0x780 [ 1649.686569][ T32] ? __pfx_kthread+0x10/0x10 [ 1649.686604][ T32] ? rcu_is_watching+0x12/0xc0 [ 1649.686650][ T32] ? __pfx_kthread+0x10/0x10 [ 1649.686684][ T32] ret_from_fork+0x983/0xb10 [ 1649.686737][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1649.686773][ T32] ? __switch_to+0x7af/0x10d0 [ 1649.686815][ T32] ? __pfx_kthread+0x10/0x10 [ 1649.686849][ T32] ret_from_fork_asm+0x1a/0x30 [ 1649.686919][ T32] [ 1649.686931][ T32] Sending NMI from CPU 1 to CPUs 0: [ 1649.686977][ C0] NMI backtrace for cpu 0 [ 1649.686998][ C0] CPU: 0 UID: 0 PID: 25783 Comm: kworker/u11:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1649.687041][ C0] Tainted: [L]=SOFTLOCKUP [ 1649.687050][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1649.687069][ C0] Workqueue: hci3 hci_cmd_timeout [ 1649.687104][ C0] RIP: 0010:__orc_find+0x70/0xf0 [ 1649.687140][ C0] Code: ec 72 4e 4c 89 e2 48 29 ea 48 89 d6 48 c1 ea 3f 48 c1 fe 02 48 01 f2 48 d1 fa 48 8d 5c 95 00 48 89 da 48 c1 ea 03 0f b6 34 0a <48> 89 da 83 e2 07 83 c2 03 40 38 f2 7c 05 40 84 f6 75 4b 48 63 13 [ 1649.687169][ C0] RSP: 0018:ffffc90000006eb8 EFLAGS: 00000a02 [ 1649.687189][ C0] RAX: ffffffff9124df68 RBX: ffffffff90a070c8 RCX: dffffc0000000000 [ 1649.687209][ C0] RDX: 1ffffffff2140e19 RSI: 0000000000000000 RDI: ffffffff90a070c4 [ 1649.687227][ C0] RBP: ffffffff90a070c4 R08: ffffffff9124df80 R09: 000000000ac0d5af [ 1649.687245][ C0] R10: 0000000000000002 R11: 0000000000009c16 R12: ffffffff90a070d0 [ 1649.687263][ C0] R13: ffffffff819c16d6 R14: ffffffff90a070c4 R15: ffffffff90a070c4 [ 1649.687281][ C0] FS: 0000000000000000(0000) GS:ffff8881248fc000(0000) knlGS:0000000000000000 [ 1649.687306][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1649.687324][ C0] CR2: 00007f9c52fda6b0 CR3: 000000000e184000 CR4: 00000000003526f0 [ 1649.687342][ C0] Call Trace: [ 1649.687350][ C0] [ 1649.687367][ C0] ? _printk+0xc6/0x100 [ 1649.687394][ C0] unwind_next_frame+0x2ec/0x20b0 [ 1649.687431][ C0] ? _printk+0xc7/0x100 [ 1649.687459][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1649.687504][ C0] arch_stack_walk+0x94/0x100 [ 1649.687539][ C0] ? _printk+0xc7/0x100 [ 1649.687567][ C0] stack_trace_save+0x8e/0xc0 [ 1649.687608][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1649.687657][ C0] kasan_save_stack+0x33/0x60 [ 1649.687693][ C0] ? kasan_save_stack+0x33/0x60 [ 1649.687727][ C0] ? kasan_save_track+0x14/0x30 [ 1649.687762][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 1649.687800][ C0] ? kmem_cache_alloc_noprof+0x25e/0x770 [ 1649.687831][ C0] ? skb_clone+0x190/0x3f0 [ 1649.687870][ C0] ? br_flood+0x37c/0x650 [ 1649.687903][ C0] ? br_handle_frame_finish+0x1117/0x1f00 [ 1649.687941][ C0] ? br_nf_hook_thresh+0x307/0x410 [ 1649.687979][ C0] ? br_nf_pre_routing_finish_ipv6+0x76a/0xfc0 [ 1649.688021][ C0] ? br_nf_pre_routing_ipv6+0x3cd/0x8c0 [ 1649.688061][ C0] ? br_nf_pre_routing+0x860/0x15b0 [ 1649.688099][ C0] ? br_handle_frame+0xb28/0x14e0 [ 1649.688137][ C0] ? __netif_receive_skb_core.constprop.0+0x6b3/0x35b0 [ 1649.688171][ C0] ? __netif_receive_skb_one_core+0xb0/0x1e0 [ 1649.688201][ C0] ? __netif_receive_skb+0x1d/0x160 [ 1649.688230][ C0] ? process_backlog+0x4a2/0x1650 [ 1649.688259][ C0] ? __napi_poll.constprop.0+0xb3/0x540 [ 1649.688289][ C0] ? net_rx_action+0x9f9/0xfa0 [ 1649.688318][ C0] ? handle_softirqs+0x219/0x950 [ 1649.688354][ C0] ? __irq_exit_rcu+0x109/0x170 [ 1649.688390][ C0] ? irq_exit_rcu+0x9/0x30 [ 1649.688426][ C0] ? sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1649.688466][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1649.688495][ C0] ? vprintk_emit+0x556/0x6b0 [ 1649.688530][ C0] ? _printk+0xc7/0x100 [ 1649.688574][ C0] kasan_save_track+0x14/0x30 [ 1649.688611][ C0] __kasan_slab_alloc+0x89/0x90 [ 1649.688651][ C0] kmem_cache_alloc_noprof+0x25e/0x770 [ 1649.688683][ C0] ? skb_clone+0x190/0x3f0 [ 1649.688720][ C0] ? skb_clone+0x190/0x3f0 [ 1649.688753][ C0] skb_clone+0x190/0x3f0 [ 1649.688788][ C0] br_flood+0x37c/0x650 [ 1649.688826][ C0] br_handle_frame_finish+0x1117/0x1f00 [ 1649.688875][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1649.688924][ C0] ? ip6t_do_table+0xc25/0x1c30 [ 1649.688956][ C0] ? nf_hook_slow+0x132/0x200 [ 1649.688994][ C0] br_nf_hook_thresh+0x307/0x410 [ 1649.689033][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1649.689076][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 1649.689116][ C0] ? ip6table_mangle_hook+0xcb/0x770 [ 1649.689149][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1649.689189][ C0] ? __pfx_ip6table_mangle_hook+0x10/0x10 [ 1649.689221][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1649.689261][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1649.689303][ C0] br_nf_pre_routing_finish_ipv6+0x76a/0xfc0 [ 1649.689345][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1649.689390][ C0] br_nf_pre_routing_ipv6+0x3cd/0x8c0 [ 1649.689432][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 1649.689474][ C0] ? lock_acquire+0x179/0x330 [ 1649.689500][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 1649.689543][ C0] ? net_generic+0xea/0x2a0 [ 1649.689583][ C0] br_nf_pre_routing+0x860/0x15b0 [ 1649.689627][ C0] br_handle_frame+0xb28/0x14e0 [ 1649.689669][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1649.689707][ C0] ? __lock_acquire+0x436/0x2890 [ 1649.689734][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1649.689778][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1649.689818][ C0] __netif_receive_skb_core.constprop.0+0x6b3/0x35b0 [ 1649.689862][ C0] ? debug_object_activate+0x2ec/0x4c0 [ 1649.689906][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 1649.689938][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1649.689978][ C0] ? debug_object_activate+0x2ec/0x4c0 [ 1649.690019][ C0] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 1649.690054][ C0] ? __pfx_debug_object_activate+0x10/0x10 [ 1649.690102][ C0] ? mark_held_locks+0x49/0x80 [ 1649.690127][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1649.690165][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1649.690209][ C0] ? __lock_acquire+0x436/0x2890 [ 1649.690234][ C0] ? __pfx___mod_timer+0x10/0x10 [ 1649.690265][ C0] ? process_backlog+0x450/0x1650 [ 1649.690294][ C0] __netif_receive_skb_one_core+0xb0/0x1e0 [ 1649.690327][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 1649.690360][ C0] ? lock_acquire+0x179/0x330 [ 1649.690390][ C0] ? process_backlog+0x450/0x1650 [ 1649.690419][ C0] __netif_receive_skb+0x1d/0x160 [ 1649.690450][ C0] process_backlog+0x4a2/0x1650 [ 1649.690486][ C0] __napi_poll.constprop.0+0xb3/0x540 [ 1649.690519][ C0] net_rx_action+0x9f9/0xfa0 [ 1649.690556][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1649.690587][ C0] ? mark_held_locks+0x49/0x80 [ 1649.690612][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1649.690652][ C0] ? tmigr_handle_remote+0x132/0x380 [ 1649.690698][ C0] ? run_timer_base+0x121/0x190 [ 1649.690725][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 1649.690754][ C0] handle_softirqs+0x219/0x950 [ 1649.690795][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1649.690836][ C0] __irq_exit_rcu+0x109/0x170 [ 1649.690880][ C0] irq_exit_rcu+0x9/0x30 [ 1649.690915][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1649.690955][ C0] [ 1649.690963][ C0] [ 1649.690973][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1649.691002][ C0] RIP: 0010:vprintk_emit+0x556/0x6b0 [ 1649.691040][ C0] Code: 00 4d 85 ed 0f 85 19 01 00 00 e8 e5 c2 21 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 a3 bd 21 00 48 85 ed 0f 85 25 01 00 00 c5 c2 21 00 45 31 c9 41 b8 01 00 00 00 31 c9 48 8d 05 00 00 00 [ 1649.691066][ C0] RSP: 0018:ffffc9000546f948 EFLAGS: 00000293 [ 1649.691086][ C0] RAX: 0000000000000000 RBX: 0000000000000023 RCX: ffffffff819ca92b [ 1649.691103][ C0] RDX: ffff8880759f5b80 RSI: ffffffff819ca935 RDI: 0000000000000007 [ 1649.691122][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 1649.691138][ C0] R10: 0000000000000000 R11: ffff8880759f66b0 R12: 1ffff92000a8df2b [ 1649.691156][ C0] R13: 0000000000000200 R14: ffff88801eee3d00 R15: ffffc9000546fa10 [ 1649.691180][ C0] ? vprintk_emit+0x66b/0x6b0 [ 1649.691215][ C0] ? vprintk_emit+0x675/0x6b0 [ 1649.691254][ C0] ? vprintk_emit+0x675/0x6b0 [ 1649.691291][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 1649.691327][ C0] ? __lock_acquire+0x436/0x2890 [ 1649.691356][ C0] _printk+0xc7/0x100 [ 1649.691382][ C0] ? __pfx__printk+0x10/0x10 [ 1649.691411][ C0] ? find_held_lock+0x2b/0x80 [ 1649.691451][ C0] bt_err+0xe4/0x120 [ 1649.691482][ C0] ? __pfx_bt_err+0x10/0x10 [ 1649.691521][ C0] ? process_one_work+0x138e/0x1b20 [ 1649.691553][ C0] hci_cmd_timeout+0x1ff/0x260 [ 1649.691590][ C0] process_one_work+0x9ba/0x1b20 [ 1649.691625][ C0] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 1649.691661][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1649.691696][ C0] ? assign_work+0x1a0/0x250 [ 1649.691725][ C0] worker_thread+0x6c8/0xf10 [ 1649.691760][ C0] ? __kthread_parkme+0x19e/0x250 [ 1649.691800][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1649.691830][ C0] kthread+0x3c5/0x780 [ 1649.691862][ C0] ? __pfx_kthread+0x10/0x10 [ 1649.691889][ C0] ? rcu_is_watching+0x12/0xc0 [ 1649.691927][ C0] ? __pfx_kthread+0x10/0x10 [ 1649.691953][ C0] ret_from_fork+0x983/0xb10 [ 1649.691979][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1649.692007][ C0] ? rcu_is_watching+0x12/0xc0 [ 1649.692044][ C0] ? __switch_to+0x7af/0x10d0 [ 1649.692079][ C0] ? __pfx_kthread+0x10/0x10 [ 1649.692105][ C0] ret_from_fork_asm+0x1a/0x30 [ 1649.692155][ C0] [ 1649.693349][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1649.693377][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1649.693423][ T32] Tainted: [L]=SOFTLOCKUP [ 1649.693436][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1649.693457][ T32] Call Trace: [ 1649.693469][ T32] [ 1649.693482][ T32] dump_stack_lvl+0x3d/0x1f0 [ 1649.693535][ T32] vpanic+0x640/0x6f0 [ 1649.693572][ T32] panic+0xca/0xd0 [ 1649.693604][ T32] ? __pfx_panic+0x10/0x10 [ 1649.693635][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1649.693674][ T32] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 1649.693728][ T32] ? nmi_trigger_cpumask_backtrace+0x2be/0x300 [ 1649.693771][ T32] ? watchdog+0xe83/0x1180 [ 1649.693820][ T32] ? watchdog+0xe76/0x1180 [ 1649.693870][ T32] watchdog+0xe94/0x1180 [ 1649.693927][ T32] ? rcu_is_watching+0x12/0xc0 [ 1649.693974][ T32] ? __pfx_watchdog+0x10/0x10 [ 1649.694022][ T32] ? lockdep_hardirqs_on+0x7c/0x110 [ 1649.694076][ T32] ? __kthread_parkme+0x19e/0x250 [ 1649.694136][ T32] ? __pfx_watchdog+0x10/0x10 [ 1649.694184][ T32] kthread+0x3c5/0x780 [ 1649.694218][ T32] ? __pfx_kthread+0x10/0x10 [ 1649.694254][ T32] ? rcu_is_watching+0x12/0xc0 [ 1649.694301][ T32] ? __pfx_kthread+0x10/0x10 [ 1649.694336][ T32] ret_from_fork+0x983/0xb10 [ 1649.694371][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1649.694410][ T32] ? __switch_to+0x7af/0x10d0 [ 1649.694456][ T32] ? __pfx_kthread+0x10/0x10 [ 1649.694490][ T32] ret_from_fork_asm+0x1a/0x30 [ 1649.694561][ T32] [ 1649.695169][ T32] Kernel Offset: disabled