last executing test programs: 40.585485042s ago: executing program 0 (id=202): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0xfffffffffffffffd, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r2) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x4004040) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) close_range$auto(0xffffffffffffffff, 0xfffffffffffff001, 0x2) socket(0x11, 0x80003, 0x300) r4 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) open_by_handle_at$auto(r4, &(0x7f0000000000)={0x8, 0x2, 'u\x00\x00\x00\x00\x00\x00\x00'}, 0x2) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r5, 0x0, 0x20) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) recvmsg$auto(r3, &(0x7f00000005c0)={&(0x7f00000002c0)="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", 0x8, &(0x7f00000004c0)={&(0x7f00000003c0), 0x3}, 0xd3, &(0x7f0000000500)="6bfee52cc6d76e1c2f8b714f9ce8de29c2b8c6a36fd1081b8f6753c4db3a957fc9f3c8ce5a1f6aae5db64bc4b8383dea96682820b78f0fdf870dba5430e851305d4713df7f1124096ace834632a497cc07ffb3b6254aa69082434244066c46fe36fd6a587c8d1a8b40662762a5e48ddb2c86fa27c693a26df7fa2dd4f5762a1616bbbc094ba84c2f033b83814b8572c7bb08c224a9b33f1ac650d8c51cff0960141e613531d3f03e45860d2c2f7110f12d60c0b21f6a1556472a2f918584", 0xc, 0xffffffff}, 0xfffffff7) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x80, 0xff00000000000000, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x41000, 0x0) syslog$auto(0x3, &(0x7f00000003c0)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x1000087) poll$auto(&(0x7f0000000180)={0xffffffffffffffff, 0xfff7, 0x9816}, 0x7f, 0x9) ioctl$auto(r6, 0x4008af24, 0xffffffffffffffff) mmap$auto(0x80, 0x20009, 0x4000000000dc, 0xeb1, r1, 0x8000) socket(0x25, 0x5, 0x6) 29.136784663s ago: executing program 3 (id=216): unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) signalfd$auto(0xffffffff, 0x0, 0x8) openat$dir(0xffffffffffffff9c, 0x0, 0x840, 0xc) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper\x00', 0x20681, 0x0) write$auto(r0, &(0x7f0000000040)='/dev/ram14\x00', 0x2) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2, 0x1, 0x0) epoll_create$auto(0x4) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000840)='/proc/sys/vm/dirty_background_ratio\x00', 0x80000, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) sysfs$auto(0x2, 0x100000000000030, 0x0) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto(r1, 0x8, 0x0, 0x0, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0xa, 0x3, 0x3, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0x8000]}, 0x0) sched_get_priority_min$auto(0x40) mmap$auto(0x0, 0x8, 0x3, 0x9b72, 0x2, 0x7ffc) getsockopt$auto(0x3, 0x200000000001, 0x19, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) unshare$auto(0x40000080) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x01\x00\xb6', 0x7f) 27.969674282s ago: executing program 3 (id=218): mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/irq/6/smp_affinity_list\x00', 0xe0182, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) madvise$auto(0x110c230000, 0x1, 0x9) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0) futex$auto(0x0, 0xc, 0xffffffff, 0x0, 0x0, 0x4) read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000000180)=""/178, 0xb2) mmap$auto(0x0, 0x4, 0x3, 0xeb1, 0xfffffffffffffffa, 0x88000) r1 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) mmap$auto(0x0, 0x7, 0x3, 0xeb2, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x80805, 0x0) shmget$auto(0xffffffffffffffff, 0xb0d, 0xa7db6ba) unshare$auto(0x8000400) memfd_secret$auto(0x0) fchownat$auto(0x2, 0x0, 0x4, 0x8001, 0x1000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001180), r1) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000040)={0x1c, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@HWSIM_ATTR_REG_CUSTOM_REG={0x8, 0xc, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x404c091}, 0x40000) 24.167600371s ago: executing program 0 (id=202): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0xfffffffffffffffd, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r2) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x4004040) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) close_range$auto(0xffffffffffffffff, 0xfffffffffffff001, 0x2) socket(0x11, 0x80003, 0x300) r4 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) open_by_handle_at$auto(r4, &(0x7f0000000000)={0x8, 0x2, 'u\x00\x00\x00\x00\x00\x00\x00'}, 0x2) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r5, 0x0, 0x20) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) recvmsg$auto(r3, &(0x7f00000005c0)={&(0x7f00000002c0)="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", 0x8, &(0x7f00000004c0)={&(0x7f00000003c0), 0x3}, 0xd3, &(0x7f0000000500)="6bfee52cc6d76e1c2f8b714f9ce8de29c2b8c6a36fd1081b8f6753c4db3a957fc9f3c8ce5a1f6aae5db64bc4b8383dea96682820b78f0fdf870dba5430e851305d4713df7f1124096ace834632a497cc07ffb3b6254aa69082434244066c46fe36fd6a587c8d1a8b40662762a5e48ddb2c86fa27c693a26df7fa2dd4f5762a1616bbbc094ba84c2f033b83814b8572c7bb08c224a9b33f1ac650d8c51cff0960141e613531d3f03e45860d2c2f7110f12d60c0b21f6a1556472a2f918584", 0xc, 0xffffffff}, 0xfffffff7) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x80, 0xff00000000000000, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x41000, 0x0) syslog$auto(0x3, &(0x7f00000003c0)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x1000087) poll$auto(&(0x7f0000000180)={0xffffffffffffffff, 0xfff7, 0x9816}, 0x7f, 0x9) ioctl$auto(r6, 0x4008af24, 0xffffffffffffffff) mmap$auto(0x80, 0x20009, 0x4000000000dc, 0xeb1, r1, 0x8000) socket(0x25, 0x5, 0x6) 21.900559138s ago: executing program 0 (id=223): mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) pread64$auto(0xffffffffffffffff, 0x0, 0x7fc, 0x400) r0 = socket(0x22, 0x1, 0x80000000) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/trace\x00', 0x600, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x74c) unshare$auto(0x40000080) sendmmsg$auto(r0, 0x0, 0x3b87, 0xa) mmap$auto(0x0, 0x400008, 0xe4, 0x9b72, 0x2, 0x400) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_7={@link_id=0x1, 0x3, 0x49147292, 0xffffffffffffffff}, 0x10) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = socket(0xa, 0x2, 0x88) setsockopt$auto_SO_INCOMING_CPU(r1, 0x103e, 0x31, &(0x7f0000000080)='/sys/devices/virtual/block/ram7/queue/dax\x00', 0x3ff) capset$auto(0x0, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x800, 0x100) setsockopt$auto(r2, 0x29, 0x10, 0x0, 0x1) socket(0xa, 0x801, 0x84) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram7/queue/dax\x00', 0x80000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000004c0)=""/206, 0xce) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0xffffffffffffffff, 0x0, 0xffffffe6) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) sendmsg$auto_OVS_DP_CMD_DEL(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3ae90f7c", @ANYRES16=0x0, @ANYBLOB="01002bbd7000ffdbdf2502"], 0x14}, 0x1, 0x0, 0x0, 0x8044}, 0x4001090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R'], 0x1ac}}, 0x40000) r4 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0xa0202, 0x0) 19.481246301s ago: executing program 0 (id=225): r0 = pidfd_open$auto(0x1, 0x0) mmap$auto(0x0, 0x2, 0x3, 0x20eb3, r0, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x5, 0x3, 0x0, 0x0, 0x1) socket(0x1d, 0x2, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) lsm_set_self_attr$auto(0x9, 0x0, 0x80, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder0\x00', 0x800, 0x0) socket(0xa, 0x1, 0x100) socket(0x1e, 0x1, 0x0) socket(0x2c, 0x3, 0x9) r2 = socket(0x15, 0x5, 0x0) getsockopt$auto(r2, 0x114, 0x2713, 0xfffffffffffffffc, 0x0) write$auto(0x1, 0x0, 0x80000000) openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/options/test_nop_refuse\x00', 0x800, 0x0) preadv$auto(0x3, &(0x7f00000004c0)={0x0, 0x8000000}, 0x3, 0x10000, 0x10) write$auto(0xffffffffffffffff, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) fcntl$auto(0x0, 0x407, 0x100000) setns(r0, 0x60020000) umount2$auto(&(0x7f0000000000)='.\x00', 0x8) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x29, 0x2, 0x0) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), r3) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/conf/team0/bc_forwarding\x00', 0x2102, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setgroups$auto(0xc00000000, 0xfffffffffffffffc) 18.264615929s ago: executing program 0 (id=227): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) r0 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$auto(r0, &(0x7f0000000c40)='gthtool\x00', 0x5) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='%\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000ffdbdf250200000008000100fcffffff08000100ffff0000"], 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) socketpair$auto(0x1, 0x400002, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x8, 0x1, 0x2, 0x4, 0x15f4da0e, 0x3, 0xd08, 0xc, 0x8, 0x4, 0x6d3f, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2c, 0x1, 0x3) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) keyctl$auto(0xa, 0x0, 0x2, 0x5, 0x8) pread64$auto(0xffffffffffffffff, 0x0, 0x3, 0x7f) mmap$auto(0x0, 0x2020009, 0x8003, 0xeb1, 0xfffffffffffffffa, 0x8000000000008000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000180)='/dev/media17\x00', 0x48000, 0x0) r3 = epoll_create$auto(0x3a) epoll_ctl$auto(r3, 0x1, 0x8000000000000000, 0x0) link$auto(&(0x7f0000000940)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2DW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xea\xa5\xff \xec\xe8\xca\xbf\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\v\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4N\xbb\xc2\xf8\x9c\xd0+t\x87r\x02\x05\xdb\xe4\xde\xed\x02\x00\x00\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00M\x83\xdb\xaf\xc4\xf23l\xae\xc5\x1d\xc4\xb0\x06\xd06\x1dX\x03\xe3\x9e\xd3\xd96\xcf\xd9\xa3\xcb\xd6B\xc3\x0f#\xd2\x1a\xf9L\xf5\x87My\xce\x19*\xde\x8d+#\x13\x15\xd3Y\x98\xe1\xc3@\x0e\x9c\xc2\xf8\b\xaf\x89\xe5\x00\x89-pWD\xb5&\xc9\x8e\x8d,\xb7}1\x84U\x18y\xa90\xf5\x80\x981U\x17\x14]\xc56j\xe7\x0e\xecBr\xa9]\"\xd36^m\x12\xb6\xbc\x80\xa4h{\xde\xcf\xf7d\x87rl\x11\xf7\x15\xcb~\xb9\x01\x0e\xd7O_\x91\xe1\xead\xee\xed]/p\xd6\xff\x17\xe4\aV\"I\xca\x90\xc7i\'\xa3R\x81\xf1}4\xbeU\x00\xa4\x1d\xea!Z\xd4|\xbe\x987\n!\x9b?\xb9l_\xd8$av\xfe%\xa2\xda\x82\x14\xc311;\xa4ob\x87\xdbY\xe2\x00', &(0x7f0000000b40)='./file0\x00') rename$auto(&(0x7f0000000680)=':,\x00', &(0x7f0000000480)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2DW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xea\xa5\xff \xec\xe8\xca\xbf\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\v\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4N\xbb\xc2\xf8\x9c\xd0+t\x87r\x02\x05\xdb\xe4\xde\xed\x02\x00\x00\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00M\x83\xdb\xaf\xc4\xf23l\xae\xc5\x1d\xc4\xb0\x06\xd06\x1dX\x03\xe3\x9e\xd3\xd96\xcf\xd9\xa3\xcb\xd6B\xc3\x0f#\xd2\x1a\xf9L\xf5\x87My\xce\x19*\xde\x8d+#\x13\x15\xd3Y\x98\xe1\xc3@\x0e\x9c\xc2\xf8\b\xaf\x89\xe5\x00\x89-pWD\xb5&\xc9\x8e\x8d,\xb7}1\x84U\x18y\xa90\xf5\x80\x981U\x17\x14]\xc56j\xe7\x0e\xecBr\xa9]\"\xd36^m\x12\xb6\xbc\x80\xa4h{\xde\xcf\xf7d\x87rl\x11\xf7\x15\xcb~\xb9\x01\x0e\xd7O_\x91\xe1\xead\xee\xed]/p\xd6\xff\x17\xe4\aV\"I\xca\x90\xc7i\'\xa3R\x81\xf1}4\xbeU\x00\xa4\x1d\xea!Z\xd4|\xbe\x987\n!\x9b?\xb9l_\xd8$av\xfe%\xa2\xda\x82\x14\xc311;\xa4ob\x87\xdbY\xe2\x00') mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) 17.709574955s ago: executing program 0 (id=228): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0xfffffffffffffffd, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r2) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000ffdbdf25040000"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) close_range$auto(0xffffffffffffffff, 0xfffffffffffff001, 0x2) socket(0x11, 0x80003, 0x300) r5 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) open_by_handle_at$auto(r5, &(0x7f0000000000)={0x8, 0x2, 'u\x00\x00\x00\x00\x00\x00\x00'}, 0x2) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r6, 0x0, 0x20) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) recvmsg$auto(r4, &(0x7f00000005c0)={&(0x7f00000002c0)="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", 0x8, &(0x7f00000004c0)={&(0x7f00000003c0), 0x3}, 0xd3, &(0x7f0000000500)="6bfee52cc6d76e1c2f8b714f9ce8de29c2b8c6a36fd1081b8f6753c4db3a957fc9f3c8ce5a1f6aae5db64bc4b8383dea96682820b78f0fdf870dba5430e851305d4713df7f1124096ace834632a497cc07ffb3b6254aa69082434244066c46fe36fd6a587c8d1a8b40662762a5e48ddb2c86fa27c693a26df7fa2dd4f5762a1616bbbc094ba84c2f033b83814b8572c7bb08c224a9b33f1ac650d8c51cff0960141e613531d3f03e45860d2c2f7110f12d60c0b21f6a1556472a2f918584", 0xc, 0xffffffff}, 0xfffffff7) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x80, 0xff00000000000000, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x41000, 0x0) syslog$auto(0x3, &(0x7f00000003c0)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x1000087) poll$auto(&(0x7f0000000180)={0xffffffffffffffff, 0xfff7, 0x9816}, 0x7f, 0x9) ioctl$auto(r7, 0x4008af24, 0xffffffffffffffff) mmap$auto(0x80, 0x20009, 0x4000000000dc, 0xeb1, r1, 0x8000) socket(0x25, 0x5, 0x6) 9.761979409s ago: executing program 3 (id=218): mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/irq/6/smp_affinity_list\x00', 0xe0182, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) madvise$auto(0x110c230000, 0x1, 0x9) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0) futex$auto(0x0, 0xc, 0xffffffff, 0x0, 0x0, 0x4) read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000000180)=""/178, 0xb2) mmap$auto(0x0, 0x4, 0x3, 0xeb1, 0xfffffffffffffffa, 0x88000) r1 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) mmap$auto(0x0, 0x7, 0x3, 0xeb2, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x80805, 0x0) shmget$auto(0xffffffffffffffff, 0xb0d, 0xa7db6ba) unshare$auto(0x8000400) memfd_secret$auto(0x0) fchownat$auto(0x2, 0x0, 0x4, 0x8001, 0x1000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001180), r1) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000040)={0x1c, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@HWSIM_ATTR_REG_CUSTOM_REG={0x8, 0xc, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x404c091}, 0x40000) 8.519149889s ago: executing program 2 (id=235): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xf, 0x3, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x50b880, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) statmount$auto(0x0, &(0x7f0000000180)={0x7d4, 0x1, 0x401bf, 0x7352, 0x3f, 0x9, 0x1ffde, 0x7, 0x1000000000000002, 0x4, 0xb, 0x3, 0x5, 0xe, 0x3000, 0x9, 0x6, 0x10002, 0x80, 0x400, 0x8, 0x7, 0x1ffc, 0x8203, 0x400, 0x84, 0x0, 0x0, 0x0, 0x5, 0x0, [0xffffffffffffffff, 0x0, 0x0, 0x1000000000000000, 0xffffffffffffffa8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x1000000005]}, 0x5, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20048810}, 0x40000) mmap$auto(0x0, 0x2000b, 0xe2, 0xeb1, 0x405, 0x8000) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x4, 0x8, 0x15f4da0a, 0x3, 0x3, 0x4, 0x3, 0x2, 0x6d3c, 0x9, 0xffffffff, 0x6]}, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/cmdline\x00', 0x481, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r3) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="20ec27bd7000fedbdf250a000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004010}, 0x810) mmap$auto(0x0, 0x8, 0xdc, 0xeb1, 0x0, 0x8002) close_range$auto(0x2, 0x8, 0x0) waitid$auto_P_ALL(0x0, 0x468e, &(0x7f0000000580)={@siginfo_0_0={0x7, 0x4, 0x309, @_rt={0x0, 0x0, @sival_ptr=&(0x7f00000000c0)="361da6425979f321f15c64a6f5fa0b6cba1f0e4285504a768d83e5b21be75dd346782ab711f42ffe91741f05e24e30be16bbe7ac358ec9c81c091f1f8538451b6f89c6fbc4edbf8b0a309e31b55bc7f04f5f7a39aaee1b9943cd809e753b48adfca1b8"}}}, 0x3, &(0x7f0000000600)={{0x8, 0x5}, {0x7, 0xffe}, 0x7, 0x1af, 0xfffffffffffffffa, 0x2, 0xfffffffffffff5a2, 0x5, 0x402, 0x2, 0xe6, 0x8, 0x4e6033bf, 0x6, 0x105, 0x8}) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/fib_trie\x00', 0x0, 0x0) pread64$auto(r5, 0x0, 0x8, 0x7fff) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) timer_create$auto(0x9, 0x0, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) signalfd4$auto(0xffffffff, 0x0, 0x4, 0x0) 8.417151281s ago: executing program 3 (id=236): r0 = pidfd_open$auto(0x1, 0x0) mmap$auto(0x0, 0x2, 0x3, 0x20eb3, r0, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x5, 0x3, 0x0, 0x0, 0x1) socket(0x1d, 0x2, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) lsm_set_self_attr$auto(0x9, 0x0, 0x80, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder0\x00', 0x800, 0x0) socket(0xa, 0x1, 0x100) socket(0x1e, 0x1, 0x0) socket(0x2c, 0x3, 0x9) r2 = socket(0x15, 0x5, 0x0) getsockopt$auto(r2, 0x114, 0x2713, 0xfffffffffffffffc, 0x0) write$auto(0x1, 0x0, 0x80000000) openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/options/test_nop_refuse\x00', 0x800, 0x0) preadv$auto(0x3, &(0x7f00000004c0)={0x0, 0x8000000}, 0x3, 0x10000, 0x10) write$auto(0xffffffffffffffff, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) fcntl$auto(0x0, 0x407, 0x100000) setns(r0, 0x60020000) umount2$auto(&(0x7f0000000000)='.\x00', 0x8) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x29, 0x2, 0x0) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), r3) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/conf/team0/bc_forwarding\x00', 0x2102, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setgroups$auto(0xc00000000, 0xfffffffffffffffc) 8.302415482s ago: executing program 1 (id=237): prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETTRIGGER(r2, 0x80045010, &(0x7f0000004440)) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20005, 0x7, 0x11, r2, 0xab) r3 = open_by_handle_at$auto(r1, &(0x7f00000002c0)={0x1b, 0x136a, "8f42b1077e737d4629d7867bca48102625b1c2c21fa15504a19b9a"}, 0x7d) setsockopt$auto(r3, 0x1, 0x1021, 0x0, 0xd) mmap$auto(0x2, 0x400008, 0xdf, 0xfffffffffffffff7, 0x2, 0x8040) r4 = geteuid() keyctl$auto(0x1e, r4, r4, 0x5, 0x8) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001a80)={0x0, 0x12c0}, 0x1, 0x0, 0x0, 0x40}, 0x200000c0) mmap$auto(0xfffffffd, 0x8, 0xdf, 0x9b7e, 0x2, 0x8003) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) r5 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000840)=ANY=[@ANYBLOB="d8", @ANYRES16=r6, @ANYBLOB="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"], 0x320}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) sendmsg$auto_NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c100000", @ANYRES16=r6, @ANYBLOB="00012bbd7000fedbdf25090000000400670004004a01"], 0x1c}, 0x1, 0x0, 0x0, 0x21}, 0x51) read$auto(r5, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x20000) unshare$auto(0x20000) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0xffffffffffffffff, 0x9) 7.381542169s ago: executing program 2 (id=238): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x8d, 0x20009, 0x4000000000df, 0x11, 0x401, 0x7ff) prctl$auto(0x23, 0x7, 0x7fffffffefff, 0x0, 0x0) brk$auto(0x7fffffffafff) mmap$auto(0x7fff, 0x400008, 0xda, 0x9b72, 0x2, 0x480000000008001) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, 0x0, 0x2100, 0x0) read$auto_stat_fops_per_vm_kvm_main(r1, 0x0, 0x0) r2 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000040)='/proc/kmsg\x00', 0x80900, 0x0) r3 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x20282, 0x0) ioctl$auto_UI_DEV_CREATE(r3, 0x5501, 0x0) read$auto_proc_single_file_operations_base(r2, &(0x7f0000000500)=""/214, 0xd6) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) symlink$auto(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000240)='./file0\x00') creat$auto(&(0x7f0000000680)='./file0\x00', 0x3) utime$auto(&(0x7f0000000000)='./file0\x00', 0x0) write$auto(0x3, 0x0, 0xfffffdef) write$auto(0x3, 0x0, 0xfffffdef) brk$auto(0x8) mmap$auto(0x0, 0x400020009, 0x10000000000df, 0x13, 0x8000000401, 0x7fffffffffffffff) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) fstat$auto(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x1a0000000000, 0x7f, 0x77d508f7, 0xee01, 0xee01, 0x0, 0x8, 0xa6ee, 0x8, 0x100000000, 0x7, 0x7fffffff, 0x10, 0x9, 0x4, 0xd}) semctl$auto_SETALL(0x2, 0x6, 0x11, 0xb1c) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 7.020097188s ago: executing program 3 (id=239): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) ioprio_get$auto(0x3, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000004) madvise$auto(0x0, 0xffffffffffff0006, 0x17) mmap$auto(0x0, 0x8de, 0xdf, 0x591b, 0x2, 0xb) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x129200, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r2 = socket(0x2b, 0x1, 0x1) ioctl$auto(r2, 0x8983, 0x4) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) acct$auto(&(0x7f0000000140)='/dev/snd/midiC2D0\x00') select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x6, 0x948b, 0x8000000000003, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) statmount$auto(0x0, &(0x7f0000000440)={0x6, 0x6, 0x53, 0x4, 0x1, 0x4, 0x2, 0x3, 0x5, 0xffffffff80000001, 0x57d6, 0x8, 0x3, 0x2, 0x8, 0x3, 0x1, 0x8001, 0x400, 0x1ff, 0xfff, 0xd8, 0x8, 0x4, 0x9, 0xbef3, 0x411, 0x7, 0x0, 0x5, 0x7, [0x6, 0x7f, 0xbce7, 0x599, 0x56, 0xf93, 0x6, 0x8, 0xffffffffffffffff, 0x0, 0x200000000000, 0x2, 0x1, 0x8, 0x1000, 0x40004545, 0x4, 0x2000000000000a, 0xb, 0xf5fd, 0x7, 0x4, 0x7fffffff, 0x1fc, 0x2, 0x5, 0x8, 0x4, 0x4, 0x1, 0x4, 0x800000, 0x5, 0x80, 0x6, 0x4, 0x7, 0x4, 0xffc0000000000000, 0x2, 0x9, 0x8, 0x80000001]}, 0x40, 0x36) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000003c0)=""/134, 0x86) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_drm_crtc_crc_control_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000000c0), 0xb02, 0x0) write$auto(0x3, 0x0, 0xfffffdef) setsockopt$auto_SO_DETACH_REUSEPORT_BPF(0xffffffffffffffff, 0x2, 0x44, &(0x7f0000000180)='\x00', 0x200007) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) 6.555713159s ago: executing program 3 (id=240): r0 = pidfd_open$auto(0x1, 0x0) mmap$auto(0x0, 0x2, 0x3, 0x20eb3, r0, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x5, 0x3, 0x0, 0x0, 0x1) socket(0x1d, 0x2, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) lsm_set_self_attr$auto(0x9, 0x0, 0x80, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder0\x00', 0x800, 0x0) socket(0xa, 0x1, 0x100) socket(0x1e, 0x1, 0x0) socket(0x2c, 0x3, 0x9) r2 = socket(0x15, 0x5, 0x0) getsockopt$auto(r2, 0x114, 0x2713, 0xfffffffffffffffc, 0x0) write$auto(0x1, 0x0, 0x80000000) preadv$auto(0x3, &(0x7f00000004c0)={0x0, 0x8000000}, 0x3, 0x10000, 0x10) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) write$auto(r3, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) fcntl$auto(0x0, 0x407, 0x100000) setns(r0, 0x60020000) umount2$auto(&(0x7f0000000000)='.\x00', 0x8) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x29, 0x2, 0x0) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), r4) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/conf/team0/bc_forwarding\x00', 0x2102, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setgroups$auto(0xc00000000, 0xfffffffffffffffc) 6.552638104s ago: executing program 1 (id=241): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/wireless\x00', 0x400, 0x0) mount_setattr$auto(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={0x46, 0x9}, 0x283) pread64$auto(r0, &(0x7f0000000080)='\xd5u+~\xa7x\xe0VQ\x1a6\xcf\xce\xfa\xfbN\x19\b\xf64\r\x122i\xd6\x0e\xfa\x96\x9aV:\xe1G\x14\xb2\xd4N\x0e#jX:\xd0\xe4\xa9\xda\xaf\x98\x94G\xa8\xb4\xa7uPc\x1ang\xdb\xb4\xa7\xad\x1b\xcbonh\xd8\x99\x03\x10\xb0\xa5\xfey\xd5F,70\xecG\x8a\fz\x95\x7f\xb0Y{\xdd\xa1\xa3E\x03\xd4\xc67U\x93\n\xfc\xa4\x0e_\xf8\x94\xc3a\x00\xe6\xea4\xa2\x7ft\xeb\x8b$\x16\x0e\xe8j\xcaI\xe0c\x05\x12(\v\xef\xc5Z\xfb\xed\xa3\x01\x001\xa5\x18%\xae/\x1b6\xaa\xf5ysD\xa6\xee\xbf\xc0v\"\x93\x96\"\xcak.\x0e_\xb3\xf7\xac\x9e\xbd/w\xdf\xfc\xe24z\x0f\x8f\b\xbe\xda\xfb\xd0Jj\x97\xfa{\x9d\xfd\xfb\x14\x1f\xb0\xe7\b#\xb9\x01\xf7\xf5\x1c1\xfbNX\xd9\xf0\x97@\xff(\x99\x13M\xadM\b\xf5\xcd\xa3\xe1Q|\r\x18\xd5\xb4\x1c\xa5\xfd\xdf\x98\xd9\xa7\xf3u\xa8ak\xfaHS\xfa\x12\x85\x85\x14\b\x9c\x15\xc10\xb3\xd5.\x13\xc6\xb6\xbak:\xbf\x8f\xcd\x7f\a\xb8\x00\x00\x00', 0x202, 0x7) mmap$auto(0x1, 0x20009, 0x8, 0xeb1, 0x7f, 0x8000) mmap$auto(0x1, 0x4, 0x7ff, 0x8000012, 0xffffffffffffffff, 0x4006) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) bpf$auto(0x9, &(0x7f00000000c0)=@link_update={r1, @new_prog_fd, 0x6}, 0x800003) ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(r1, 0x1, &(0x7f00000000c0)) open(0x0, 0x161342, 0x110) io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/tty53\x00', 0x200, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r3, 0x0, 0x1, 0x0, 0x1e) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0xb, 0xc45d, 0xb, 0x6, 0x3, 0x2, 0x3, 0x3, 0x62, 0x80000022, 0x7, 0x6d3e, 0x2000000004000009, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(0xffffffffffffffff, 0x5523, 0xffffffffffffffff) r4 = openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/etherd/discover\x00', 0x80101, 0x0) writev$auto(r4, &(0x7f0000000140)={0x0, 0xe4}, 0x4) r5 = open_tree$auto(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_START_P2P_DEVICE(r5, &(0x7f0000000540)={&(0x7f0000000040), 0xc, &(0x7f0000000500)={&(0x7f0000000240)={0x1d4, r6, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x2}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x1a6, 0x75, 0x0, 0x1, [@nested={0x11e, 0x66, 0x0, 0x1, [@nested={0x4, 0xf3}, @typed={0x8, 0xf1, 0x0, 0x0, @u32=0x855}, @generic='~', @typed={0x8, 0x11d, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="9f9befa1c5a81713fa0d5b46cbb8646281096b23b958f9f52ea73d6a98193034ecc15866102099596cced88d013d6cb872d98106ebbdab80aa3cb9301196904977dc8bd403b81e96ef8c757df7b7e175580002a2b2a1de6615657c403ef8575c3b24c8d866550aeb0fefe6a47bc49a1ec1c4b4fec0be8fdb1747bc576da089", @typed={0x6c, 0x7b, 0x0, 0x0, @binary="cbbe0879f628cd45a481db45e6b74aaa0c0b9b6f84acce6c43a9165fc40e4badc9f7615cf80637839d3ddca3b769f0296c6d29d3b4a4af2a4b391af9e4bc1228d3a125f642dc17d942ebdf659b3f462649ef314ebd37d0fddf8ea9eb8d921aaf53db99ba9a9bb6da"}, @generic="12622042aa2174a7ca5dfcaf4cb2", @typed={0x8, 0x2f, 0x0, 0x0, @ipv4=@loopback}, @generic, @nested={0x4, 0x11d}]}, @generic="3077fff08b1eae69b106fb4563632712b9ac0f65dd029f0adf13b608f7d4c95c42a50c27b3c6254c8c52731c326930be184c9f8417573dcc52e17af31b8cf2f173b5bbed05c5bfb4124b1fc22608ad940a23fb91084d2883c359f4d588f1de152698a2eb6ecccc52d3f9fec284d7d831e6e95ba99895ba51d5522b11f1d4b73df9aa"]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x2}, @NL80211_ATTR_MGMT_SUBTYPE={0x5}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x800}, 0x20040004) 5.512365634s ago: executing program 2 (id=242): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/wireless\x00', 0x400, 0x0) mount_setattr$auto(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={0x46, 0x9}, 0x283) pread64$auto(r0, &(0x7f0000000080)='\xd5u+~\xa7x\xe0VQ\x1a6\xcf\xce\xfa\xfbN\x19\b\xf64\r\x122i\xd6\x0e\xfa\x96\x9aV:\xe1G\x14\xb2\xd4N\x0e#jX:\xd0\xe4\xa9\xda\xaf\x98\x94G\xa8\xb4\xa7uPc\x1ang\xdb\xb4\xa7\xad\x1b\xcbonh\xd8\x99\x03\x10\xb0\xa5\xfey\xd5F,70\xecG\x8a\fz\x95\x7f\xb0Y{\xdd\xa1\xa3E\x03\xd4\xc67U\x93\n\xfc\xa4\x0e_\xf8\x94\xc3a\x00\xe6\xea4\xa2\x7ft\xeb\x8b$\x16\x0e\xe8j\xcaI\xe0c\x05\x12(\v\xef\xc5Z\xfb\xed\xa3\x01\x001\xa5\x18%\xae/\x1b6\xaa\xf5ysD\xa6\xee\xbf\xc0v\"\x93\x96\"\xcak.\x0e_\xb3\xf7\xac\x9e\xbd/w\xdf\xfc\xe24z\x0f\x8f\b\xbe\xda\xfb\xd0Jj\x97\xfa{\x9d\xfd\xfb\x14\x1f\xb0\xe7\b#\xb9\x01\xf7\xf5\x1c1\xfbNX\xd9\xf0\x97@\xff(\x99\x13M\xadM\b\xf5\xcd\xa3\xe1Q|\r\x18\xd5\xb4\x1c\xa5\xfd\xdf\x98\xd9\xa7\xf3u\xa8ak\xfaHS\xfa\x12\x85\x85\x14\b\x9c\x15\xc10\xb3\xd5.\x13\xc6\xb6\xbak:\xbf\x8f\xcd\x7f\a\xb8\x00\x00\x00', 0x202, 0x7) mmap$auto(0x1, 0x20009, 0x8, 0xeb1, 0x7f, 0x8000) mmap$auto(0x1, 0x4, 0x7ff, 0x8000012, 0xffffffffffffffff, 0x4006) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) bpf$auto(0x9, &(0x7f00000000c0)=@link_update={r1, @new_prog_fd, 0x6}, 0x800003) ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(r1, 0x1, &(0x7f00000000c0)) open(0x0, 0x161342, 0x110) io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/tty53\x00', 0x200, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r3, 0x0, 0x1, 0x0, 0x1e) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0xb, 0xc45d, 0xb, 0x6, 0x3, 0x2, 0x3, 0x3, 0x62, 0x80000022, 0x7, 0x6d3e, 0x2000000004000009, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(0xffffffffffffffff, 0x5523, 0xffffffffffffffff) r4 = openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/etherd/discover\x00', 0x80101, 0x0) writev$auto(r4, &(0x7f0000000140)={0x0, 0xe4}, 0x4) r5 = open_tree$auto(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_START_P2P_DEVICE(r5, &(0x7f0000000540)={&(0x7f0000000040), 0xc, &(0x7f0000000500)={&(0x7f0000000240)={0x1a8, r6, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x2}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x17b, 0x75, 0x0, 0x1, [@nested={0x11e, 0x66, 0x0, 0x1, [@nested={0x4, 0xf3}, @typed={0x8, 0xf1, 0x0, 0x0, @u32=0x855}, @generic='~', @typed={0x8, 0x11d, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="9f9befa1c5a81713fa0d5b46cbb8646281096b23b958f9f52ea73d6a98193034ecc15866102099596cced88d013d6cb872d98106ebbdab80aa3cb9301196904977dc8bd403b81e96ef8c757df7b7e175580002a2b2a1de6615657c403ef8575c3b24c8d866550aeb0fefe6a47bc49a1ec1c4b4fec0be8fdb1747bc576da089", @typed={0x6c, 0x7b, 0x0, 0x0, @binary="cbbe0879f628cd45a481db45e6b74aaa0c0b9b6f84acce6c43a9165fc40e4badc9f7615cf80637839d3ddca3b769f0296c6d29d3b4a4af2a4b391af9e4bc1228d3a125f642dc17d942ebdf659b3f462649ef314ebd37d0fddf8ea9eb8d921aaf53db99ba9a9bb6da"}, @generic="12622042aa2174a7ca5dfcaf4cb2", @typed={0x8, 0x2f, 0x0, 0x0, @ipv4=@loopback}, @generic, @nested={0x4, 0x11d}]}, @generic="3077fff08b1eae69b106fb4563632712b9ac0f65dd029f0adf13b608f7d4c95c42a50c27b3c6254c8c52731c326930be184c9f8417573dcc52e17af31b8cf2f173b5bbed05c5bfb4124b1fc22608ad940a23fb91084d28"]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x2}, @NL80211_ATTR_MGMT_SUBTYPE={0x5}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x800}, 0x20040004) 4.42098503s ago: executing program 2 (id=243): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0xfffffffffffffffd, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r2) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x4004040) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) close_range$auto(0xffffffffffffffff, 0xfffffffffffff001, 0x2) socket(0x11, 0x80003, 0x300) r4 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) open_by_handle_at$auto(r4, &(0x7f0000000000)={0x8, 0x2, 'u\x00\x00\x00\x00\x00\x00\x00'}, 0x2) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r5, 0x0, 0x20) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) recvmsg$auto(r3, &(0x7f00000005c0)={&(0x7f00000002c0)="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", 0x8, &(0x7f00000004c0)={&(0x7f00000003c0), 0x3}, 0xd3, &(0x7f0000000500)="6bfee52cc6d76e1c2f8b714f9ce8de29c2b8c6a36fd1081b8f6753c4db3a957fc9f3c8ce5a1f6aae5db64bc4b8383dea96682820b78f0fdf870dba5430e851305d4713df7f1124096ace834632a497cc07ffb3b6254aa69082434244066c46fe36fd6a587c8d1a8b40662762a5e48ddb2c86fa27c693a26df7fa2dd4f5762a1616bbbc094ba84c2f033b83814b8572c7bb08c224a9b33f1ac650d8c51cff0960141e613531d3f03e45860d2c2f7110f12d60c0b21f6a1556472a2f918584", 0xc, 0xffffffff}, 0xfffffff7) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x80, 0xff00000000000000, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x41000, 0x0) syslog$auto(0x3, &(0x7f00000003c0)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x1000087) poll$auto(&(0x7f0000000180)={0xffffffffffffffff, 0xfff7, 0x9816}, 0x7f, 0x9) ioctl$auto(r6, 0x4008af24, 0xffffffffffffffff) mmap$auto(0x80, 0x20009, 0x4000000000dc, 0xeb1, r1, 0x8000) socket(0x25, 0x5, 0x6) 3.468467956s ago: executing program 1 (id=244): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0xd, 0x2, 0x948b, 0x3, 0x80015f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x6, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffa]}, 0x0) write$auto(r0, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) write$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000000680)="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", 0x658) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) select$auto(0x9, 0x0, 0x0, &(0x7f0000000200)={[0x8001ff, 0x7, 0xd, 0x8fd6, 0x948d, 0x3, 0x80, 0x3, 0x6, 0x8000000000000001, 0x7, 0x2, 0xd, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto_lockdown_ops_lockdown(0xffffffffffffffff, 0x0, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/members\x00', 0x80280, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0xe8) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004000)='/dev/audio\x00', 0x102, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x98c7) socket(0x2, 0x2, 0x0) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) 3.378699134s ago: executing program 2 (id=245): mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/irq/6/smp_affinity_list\x00', 0xe0182, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) madvise$auto(0x110c230000, 0x1, 0x9) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0) futex$auto(0x0, 0xc, 0xffffffff, 0x0, 0x0, 0x4) read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000000180)=""/178, 0xb2) mmap$auto(0x0, 0x4, 0x3, 0xeb1, 0xfffffffffffffffa, 0x88000) r1 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) mmap$auto(0x0, 0x7, 0x3, 0xeb2, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x80805, 0x0) shmget$auto(0xffffffffffffffff, 0xb0d, 0xa7db6ba) unshare$auto(0x8000400) memfd_secret$auto(0x0) fchownat$auto(0x2, 0x0, 0x4, 0x8001, 0x1000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001180), r1) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000040)={0x1c, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@HWSIM_ATTR_REG_CUSTOM_REG={0x8, 0xc, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x404c091}, 0x40000) 2.092139801s ago: executing program 1 (id=246): mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) r0 = io_uring_setup$auto(0x2, 0x0) close_range$auto(r0, r0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm1p/sub6/xrun_injection\x00', 0x64000, 0x0) r1 = memfd_create$auto(&(0x7f0000000040)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00\x00\v\x00\x82\xcc\"K\xe1IIT\x00'/54, 0x5) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000140)={0x3, 0x0, [{0xba1c, 0x5, 0x6}]}) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/netfilter/nf_conntrack_buckets\x00', 0x101000, 0x0) read$auto(r1, &(0x7f0000000000)='}]\xde\xf7\x14P\x00\x8c\x04', 0x5) finit_module$auto(0x3, 0xfffffffffffffffe, 0x400000000004) mmap$auto(0x0, 0x20009, 0x7, 0x12, 0xffffffffffffffff, 0xf4e) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) read$auto_rfcomm_dlc_debugfs_fops_(r1, &(0x7f00000000c0)=""/55, 0x37) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r4 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) sendmsg$auto(r4, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.146175026s ago: executing program 1 (id=247): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/devices/virtual/block/ram4/queue/io_poll\x00', 0x103300, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001680)=""/59, 0x3b) openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bdi/43:192/wb_stats\x00', 0x40, 0x0) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/set_event_notrace_pid\x00', 0x582, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffcc}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180), 0x9}, 0xb) prctl$auto(0x43, 0x80000000000000, 0x0, 0x2, 0x0) r1 = socket(0x18, 0x2, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snd/pcmC1D0p\x00', 0x1, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)={0x14, r2, 0x300, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x48c3}, 0x200c0085) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x40100, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) r4 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r4, &(0x7f0000000040)=""/4096, 0xfffffe82) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r5 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/devices\x00', 0x600, 0x0) read$auto_proc_mountinfo_operations_mnt_namespace(r5, &(0x7f0000001100)=""/4096, 0x1000) mmap$auto(0x0, 0x400008, 0x40000000df, 0x7e, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) 544.075853ms ago: executing program 2 (id=248): r0 = pidfd_open$auto(0x1, 0x0) mmap$auto(0x0, 0x2, 0x3, 0x20eb3, r0, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x5, 0x3, 0x0, 0x0, 0x1) socket(0x1d, 0x2, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) lsm_set_self_attr$auto(0x9, 0x0, 0x80, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder0\x00', 0x800, 0x0) socket(0xa, 0x1, 0x100) socket(0x1e, 0x1, 0x0) socket(0x2c, 0x3, 0x9) r2 = socket(0x15, 0x5, 0x0) getsockopt$auto(r2, 0x114, 0x2713, 0xfffffffffffffffc, 0x0) write$auto(0x1, 0x0, 0x80000000) openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/options/test_nop_refuse\x00', 0x800, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) write$auto(r3, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) fcntl$auto(0x0, 0x407, 0x100000) setns(r0, 0x60020000) umount2$auto(&(0x7f0000000000)='.\x00', 0x8) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x29, 0x2, 0x0) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), r4) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/conf/team0/bc_forwarding\x00', 0x2102, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setgroups$auto(0xc00000000, 0xfffffffffffffffc) 0s ago: executing program 1 (id=249): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0xa, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) socket(0xa, 0x2, 0x88) mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000) mincore$auto(0x1000, 0x8003, 0x0) setsockopt$auto(0x3, 0x0, 0x20, 0x0, 0x28) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) r0 = ioctl$auto_TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000540)={0x2, &(0x7f0000000500)={0xa7, 0xf3, 0x1, @raw=0x2}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GROUP(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f00000010c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fedbdf25040000000c000180080001000300000010000a800c000180080001000200000008000800", @ANYRES32=r3, @ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x14) sendmsg$auto_NET_SHAPER_CMD_DELETE(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="08002cbd7000fcdbdf25030000001c00018008000100000200000800010001000000080001000500000044000180080001000000000008000200818100000800020001f8ffff080001004f0e00bfea1800419e08bdfe8b89d2000800010001000000502fe021ee08"], 0x74}, 0x1, 0x0, 0x0, 0x4000011}, 0x10) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x81, 0x0, 0x0, &(0x7f0000000300)={[0x1ff, 0x5, 0xd, 0xfffffffffffff4d6, 0x948b, 0x3, 0x15f4da0e, 0x3, 0x0, 0x9, 0x80000001, 0x1000, 0x1, 0x9, 0x3, 0x1]}, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) clock_adjtime$auto(0x1, &(0x7f0000000280)={0xfff, 0x0, 0x6fe, 0x40004, 0x7, 0x4, 0x8227, 0x0, 0x2, 0x0, 0x8, {0x7, 0x800}, 0x101, 0xf8, 0xa, 0xd94, 0x0, 0x1, 0x7, 0x6, 0xa9, 0x3, 0xfffffffe}) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/afs/sysname\x00', 0x80002, 0x0) writev$auto(r5, &(0x7f0000000240)={0x0, 0x9}, 0xb) write$auto(r4, &(0x7f0000000240)='//ev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x5014c0, 0x0) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) write$auto(r6, 0x0, 0xfffffdef) r7 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r7, &(0x7f0000000040)="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", 0xfe04) kernel console output (not intermixed with test programs): 602119][ T6919] netlink: zone id is out of range [ 153.623173][ T6919] netlink: zone id is out of range [ 153.631384][ T6919] netlink: zone id is out of range [ 153.676966][ T6919] netlink: zone id is out of range [ 153.817351][ T6696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.886945][ T6696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.901962][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.987337][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.049821][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.115111][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.407231][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.477564][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.559533][ T1007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.596027][ T1007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.939278][ T6943] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 155.805443][ T6949] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff8163f829 (__mcheck_cpu_init_clear_banks+0x109/0x1f0) [ 155.820931][ T6949] Call Trace: [ 155.824239][ T6949] [ 155.827164][ T6949] mce_cpu_restart+0x98/0xb0 [ 155.831767][ T6949] ? __pfx_mce_cpu_restart+0x10/0x10 [ 155.837056][ T6949] smp_call_function_many_cond+0x1227/0x1600 [ 155.843039][ T6949] ? __pfx_mce_cpu_restart+0x10/0x10 [ 155.848322][ T6949] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 155.854132][ T6949] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 155.860489][ T6949] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 155.866501][ T6949] ? __pfx_mce_cpu_restart+0x10/0x10 [ 155.871793][ T6949] on_each_cpu_cond_mask+0x40/0x90 [ 155.876910][ T6949] set_bank+0x240/0x3a0 [ 155.881081][ T6949] ? __pfx_set_bank+0x10/0x10 [ 155.885774][ T6949] ? find_held_lock+0x2b/0x80 [ 155.890458][ T6949] ? __pfx_set_bank+0x10/0x10 [ 155.895152][ T6949] dev_attr_store+0x58/0x80 [ 155.899669][ T6949] ? __pfx_dev_attr_store+0x10/0x10 [ 155.904892][ T6949] sysfs_kf_write+0xf2/0x150 [ 155.909505][ T6949] kernfs_fop_write_iter+0x354/0x510 [ 155.914790][ T6949] ? __pfx_sysfs_kf_write+0x10/0x10 [ 155.919995][ T6949] vfs_write+0x7d0/0x11d0 [ 155.924332][ T6949] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 155.930135][ T6949] ? __pfx___mutex_lock+0x10/0x10 [ 155.935169][ T6949] ? __pfx_vfs_write+0x10/0x10 [ 155.939957][ T6949] ksys_write+0x12a/0x250 [ 155.944293][ T6949] ? __pfx_ksys_write+0x10/0x10 [ 155.949157][ T6949] do_syscall_64+0xcd/0x490 [ 155.953671][ T6949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.959579][ T6949] RIP: 0033:0x7fae1858ebe9 [ 155.964175][ T6949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.983883][ T6949] RSP: 002b:00007fae193bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 155.992301][ T6949] RAX: ffffffffffffffda RBX: 00007fae187b6090 RCX: 00007fae1858ebe9 [ 156.000271][ T6949] RDX: 0000000000000003 RSI: 0000200000000240 RDI: 0000000000000002 [ 156.008240][ T6949] RBP: 00007fae18611e19 R08: 0000000000000000 R09: 0000000000000000 [ 156.016313][ T6949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.024402][ T6949] R13: 00007fae187b6128 R14: 00007fae187b6090 R15: 00007ffd946f0928 [ 156.032483][ T6949] [ 157.447406][ T6949] zswap: compressor not available [ 157.729897][ T6981] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input10 [ 157.778424][ T6972] netlink: 28 bytes leftover after parsing attributes in process `syz.3.90'. [ 158.267299][ T6983] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11 [ 158.367071][ T6989] Console: switching to colour VGA+ 80x25 [ 159.184517][ T6995] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input12 [ 159.707998][ T7002] random: crng reseeded on system resumption [ 159.772138][ T7003] netlink: 28 bytes leftover after parsing attributes in process `syz.0.94'. [ 159.807895][ T7003] geneve1: entered promiscuous mode [ 159.872450][ T7003] geneve1: entered allmulticast mode [ 159.894537][ T7007] netlink: 28 bytes leftover after parsing attributes in process `syz.0.94'. [ 159.928032][ T7003] Zero length message leads to an empty skb [ 160.054787][ T7008] sg_write: data in/out 2359516/158 bytes for SCSI command 0x0-- guessing data in; [ 160.054787][ T7008] program syz.2.95 not setting count and/or reply_len properly [ 160.599775][ T7011] net_ratelimit: 1 callbacks suppressed [ 160.599794][ T7011] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 161.017430][ T7019] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 161.084894][ T7022] program syz.3.98 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 161.826032][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 161.851235][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 161.859155][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 161.867146][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 161.875003][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 161.881584][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 161.889783][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 161.897018][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 161.956792][ T7015] syz.1.96 (7015) used greatest stack depth: 19752 bytes left [ 162.468823][ T7037] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input14 [ 162.576309][ T30] audit: type=1806 audit(1756495955.001:2): xattr="" res=-22 [ 162.646697][ T7040] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input15 [ 164.057166][ T7061] program syz.3.106 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 164.519817][ T7072] program syz.0.109 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 164.731796][ T7082] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 164.917696][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 164.924748][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 164.944229][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 164.950586][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 164.974142][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 164.980511][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 164.992386][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 164.998796][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 165.166696][ T7082] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.299450][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.310257][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 165.318152][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.328261][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 165.337738][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.344059][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 165.352903][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.359196][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 165.588255][ T7093] netlink: 146 bytes leftover after parsing attributes in process `syz.3.110'. [ 170.470039][ T7158] program syz.2.122 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 171.161670][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 171.168145][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 171.184790][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 171.202694][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 171.225292][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 171.234060][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 171.277298][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 171.284559][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 171.552617][ T5939] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.779083][ T7173] process 'syz.3.126' launched './file0' with NULL argv: empty string added [ 171.789808][ T5939] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.017055][ T5939] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.311385][ T5939] bridge_slave_1: left allmulticast mode [ 172.324046][ T5939] bridge_slave_1: left promiscuous mode [ 172.362166][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.386940][ T7178] FAULT_INJECTION: forcing a failure. [ 172.386940][ T7178] name failslab, interval 1, probability 0, space 0, times 0 [ 172.401418][ T7178] CPU: 1 UID: 0 PID: 7178 Comm: syz.1.127 Not tainted syzkaller #0 PREEMPT(full) [ 172.401454][ T7178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 172.401469][ T7178] Call Trace: [ 172.401477][ T7178] [ 172.401487][ T7178] dump_stack_lvl+0x16c/0x1f0 [ 172.401527][ T7178] should_fail_ex+0x512/0x640 [ 172.401560][ T7178] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 172.401587][ T7178] should_failslab+0xc2/0x120 [ 172.401624][ T7178] __kmalloc_cache_noprof+0x6a/0x3e0 [ 172.401654][ T7178] ? snd_mixer_oss_put_volume1_sw.constprop.0.isra.0+0xdc/0x610 [ 172.401703][ T7178] snd_mixer_oss_put_volume1_sw.constprop.0.isra.0+0xdc/0x610 [ 172.401754][ T7178] snd_mixer_oss_put_recsrc1_sw+0x87/0xc0 [ 172.401794][ T7178] snd_mixer_oss_ioctl1+0xb52/0x1e40 [ 172.401829][ T7178] ? lockdep_hardirqs_on+0x7c/0x110 [ 172.401865][ T7178] ? __pfx_snd_mixer_oss_put_recsrc1_sw+0x10/0x10 [ 172.401906][ T7178] ? __pfx_snd_mixer_oss_ioctl1+0x10/0x10 [ 172.401943][ T7178] ? tomoyo_path_number_perm+0x295/0x580 [ 172.401981][ T7178] ? tomoyo_path_number_perm+0x18d/0x580 [ 172.402023][ T7178] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 172.402055][ T7178] ? futex_wake+0x1ad/0x530 [ 172.402111][ T7178] snd_mixer_oss_ioctl_card+0x102/0x170 [ 172.402150][ T7178] ? __pfx_snd_mixer_oss_ioctl_card+0x10/0x10 [ 172.402200][ T7178] snd_pcm_oss_ioctl+0x137c/0x37a0 [ 172.402227][ T7178] ? find_held_lock+0x2b/0x80 [ 172.402250][ T7178] ? hook_file_ioctl_common+0x145/0x410 [ 172.402282][ T7178] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 172.402313][ T7178] ? __fget_files+0x20e/0x3c0 [ 172.402347][ T7178] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 172.402376][ T7178] __x64_sys_ioctl+0x18e/0x210 [ 172.402417][ T7178] do_syscall_64+0xcd/0x490 [ 172.402454][ T7178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.402479][ T7178] RIP: 0033:0x7fae1858ebe9 [ 172.402500][ T7178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.402523][ T7178] RSP: 002b:00007fae193dd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 172.402548][ T7178] RAX: ffffffffffffffda RBX: 00007fae187b5fa0 RCX: 00007fae1858ebe9 [ 172.402565][ T7178] RDX: 0000000000000000 RSI: 00000000c0044dff RDI: 0000000000000002 [ 172.402580][ T7178] RBP: 00007fae18611e19 R08: 0000000000000000 R09: 0000000000000000 [ 172.402595][ T7178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.402611][ T7178] R13: 00007fae187b6038 R14: 00007fae187b5fa0 R15: 00007ffd946f0928 [ 172.402646][ T7178] [ 172.704741][ T5939] bridge_slave_0: left allmulticast mode [ 172.710576][ T5939] bridge_slave_0: left promiscuous mode [ 172.717525][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.727033][ T5864] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 172.739080][ T5864] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 172.749402][ T5864] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 172.758568][ T5864] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 172.767624][ T5864] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 173.703464][ T5939] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.716229][ T5939] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.726244][ T5939] bond0 (unregistering): Released all slaves [ 174.375105][ T7221] FAULT_INJECTION: forcing a failure. [ 174.375105][ T7221] name failslab, interval 1, probability 0, space 0, times 0 [ 174.467319][ T7221] CPU: 0 UID: 0 PID: 7221 Comm: syz.2.130 Not tainted syzkaller #0 PREEMPT(full) [ 174.467356][ T7221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 174.467372][ T7221] Call Trace: [ 174.467380][ T7221] [ 174.467391][ T7221] dump_stack_lvl+0x16c/0x1f0 [ 174.467429][ T7221] should_fail_ex+0x512/0x640 [ 174.467463][ T7221] ? __kmalloc_noprof+0xbf/0x510 [ 174.467495][ T7221] ? lsm_blob_alloc+0x68/0x90 [ 174.467515][ T7221] should_failslab+0xc2/0x120 [ 174.467548][ T7221] __kmalloc_noprof+0xd2/0x510 [ 174.467586][ T7221] lsm_blob_alloc+0x68/0x90 [ 174.467612][ T7221] security_sk_alloc+0x30/0x270 [ 174.467641][ T7221] sk_prot_alloc+0xfb/0x2a0 [ 174.467665][ T7221] sk_alloc+0x36/0xc20 [ 174.467700][ T7221] tipc_sk_create+0xcf/0x21a0 [ 174.467734][ T7221] ? find_held_lock+0x2b/0x80 [ 174.467771][ T7221] ? __sock_create+0x2f2/0x8d0 [ 174.467803][ T7221] __sock_create+0x335/0x8d0 [ 174.467836][ T7221] __sys_socket+0x14d/0x260 [ 174.467861][ T7221] ? __pfx___sys_socket+0x10/0x10 [ 174.467887][ T7221] ? xfd_validate_state+0x61/0x180 [ 174.467932][ T7221] __x64_sys_socket+0x72/0xb0 [ 174.467962][ T7221] ? lockdep_hardirqs_on+0x7c/0x110 [ 174.467996][ T7221] do_syscall_64+0xcd/0x490 [ 174.468035][ T7221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.468060][ T7221] RIP: 0033:0x7f3334b8ebe9 [ 174.468079][ T7221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.468101][ T7221] RSP: 002b:00007f3332dd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 174.468126][ T7221] RAX: ffffffffffffffda RBX: 00007f3334db6180 RCX: 00007f3334b8ebe9 [ 174.468143][ T7221] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 174.468157][ T7221] RBP: 00007f3334c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 174.468172][ T7221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.468187][ T7221] R13: 00007f3334db6218 R14: 00007f3334db6180 R15: 00007ffce865d4d8 [ 174.468222][ T7221] [ 175.011231][ T5864] Bluetooth: hci2: command tx timeout [ 175.071928][ T5939] hsr_slave_0: left promiscuous mode [ 175.078107][ T5939] hsr_slave_1: left promiscuous mode [ 175.088156][ T5939] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.097841][ T5939] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.108568][ T5939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.117101][ T5939] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.145110][ T5939] veth1_macvtap: left promiscuous mode [ 175.150808][ T5939] veth0_macvtap: left promiscuous mode [ 175.156767][ T5939] veth1_vlan: left promiscuous mode [ 175.164798][ T5939] veth0_vlan: left promiscuous mode [ 175.549341][ T5939] team0 (unregistering): Port device team_slave_1 removed [ 175.583889][ T5939] team0 (unregistering): Port device team_slave_0 removed [ 176.166236][ T7183] chnl_net:caif_netlink_parms(): no params data found [ 176.504423][ T7183] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.521226][ T7183] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.538681][ T7183] bridge_slave_0: entered allmulticast mode [ 176.557253][ T7183] bridge_slave_0: entered promiscuous mode [ 176.592183][ T7183] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.626911][ T7183] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.641506][ T7183] bridge_slave_1: entered allmulticast mode [ 176.666727][ T7183] bridge_slave_1: entered promiscuous mode [ 176.760691][ T7252] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 177.107144][ T5864] Bluetooth: hci2: command tx timeout [ 177.149859][ T7183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.252810][ T7183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.567390][ T7183] team0: Port device team_slave_0 added [ 177.635450][ T7183] team0: Port device team_slave_1 added [ 177.888289][ T7183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.898236][ T7183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.994013][ T7183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.017340][ T7183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.038200][ T7183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.083685][ T7183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.547380][ T7183] hsr_slave_0: entered promiscuous mode [ 178.619775][ T7183] hsr_slave_1: entered promiscuous mode [ 178.628785][ T7183] debugfs: 'hsr0' already exists in 'hsr' [ 178.636057][ T7183] Cannot create hsr debugfs directory [ 179.171597][ T5864] Bluetooth: hci2: command tx timeout [ 179.831527][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.973670][ T5867] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 179.984651][ T5867] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 179.994298][ T5867] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 180.004429][ T5867] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 180.014262][ T5867] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 180.457357][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.706803][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.801669][ T7302] Invalid ELF header magic: != ELF [ 180.914107][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.254348][ T5867] Bluetooth: hci2: command tx timeout [ 181.716244][ T5864] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 181.725900][ T5864] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 181.734334][ T5864] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 181.743981][ T5864] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 181.756150][ T5864] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 181.885529][ T12] bridge_slave_1: left allmulticast mode [ 181.901412][ T12] bridge_slave_1: left promiscuous mode [ 181.907265][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.920118][ T12] bridge_slave_0: left allmulticast mode [ 181.926754][ T12] bridge_slave_0: left promiscuous mode [ 181.935402][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.061295][ T5867] Bluetooth: hci3: command tx timeout [ 182.546541][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 182.558017][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.568025][ T12] bond0 (unregistering): Released all slaves [ 182.587169][ T7293] chnl_net:caif_netlink_parms(): no params data found [ 182.890017][ T7293] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.901885][ T7293] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.909130][ T7293] bridge_slave_0: entered allmulticast mode [ 182.922211][ T7293] bridge_slave_0: entered promiscuous mode [ 182.983705][ T7293] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.997692][ T7293] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.009303][ T7293] bridge_slave_1: entered allmulticast mode [ 183.023657][ T7293] bridge_slave_1: entered promiscuous mode [ 183.135213][ T7293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.149304][ T7183] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 183.172914][ T7183] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 183.197710][ T7183] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 183.352779][ T7293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.508147][ T7183] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 183.649735][ T7293] team0: Port device team_slave_0 added [ 183.795874][ T12] hsr_slave_0: left promiscuous mode [ 183.815845][ T12] hsr_slave_1: left promiscuous mode [ 183.822048][ T5867] Bluetooth: hci0: command tx timeout [ 183.841930][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.849699][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.862743][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.900867][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.920982][ T12] veth1_macvtap: left promiscuous mode [ 183.928367][ T12] veth0_macvtap: left promiscuous mode [ 183.935505][ T12] veth1_vlan: left promiscuous mode [ 183.942698][ T12] veth0_vlan: left promiscuous mode [ 184.133959][ T5867] Bluetooth: hci3: command tx timeout [ 184.569430][ T12] team0 (unregistering): Port device team_slave_1 removed [ 184.603193][ T12] team0 (unregistering): Port device team_slave_0 removed [ 184.907120][ T7293] team0: Port device team_slave_1 added [ 184.924714][ T7331] chnl_net:caif_netlink_parms(): no params data found [ 185.047352][ T7293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.054557][ T7293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.081081][ T7293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.095366][ T7293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.102745][ T7293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.129319][ T7293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.200136][ T7331] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.208437][ T7331] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.215907][ T7331] bridge_slave_0: entered allmulticast mode [ 185.223296][ T7331] bridge_slave_0: entered promiscuous mode [ 185.233478][ T7331] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.242604][ T7331] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.249845][ T7331] bridge_slave_1: entered allmulticast mode [ 185.262369][ T7331] bridge_slave_1: entered promiscuous mode [ 185.293733][ T7293] hsr_slave_0: entered promiscuous mode [ 185.299969][ T7293] hsr_slave_1: entered promiscuous mode [ 185.306400][ T7293] debugfs: 'hsr0' already exists in 'hsr' [ 185.312233][ T7293] Cannot create hsr debugfs directory [ 185.368265][ T7331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.402259][ T7331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.509209][ T7331] team0: Port device team_slave_0 added [ 185.535376][ T7331] team0: Port device team_slave_1 added [ 185.802095][ T7331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.809245][ T7331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.891138][ T7331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.891252][ T5867] Bluetooth: hci0: command tx timeout [ 186.197003][ T7331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.212960][ T5867] Bluetooth: hci3: command tx timeout [ 186.224124][ T7331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.250450][ T7331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.428649][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.600036][ T7331] hsr_slave_0: entered promiscuous mode [ 186.630318][ T7331] hsr_slave_1: entered promiscuous mode [ 186.643711][ T7331] debugfs: 'hsr0' already exists in 'hsr' [ 186.654806][ T7331] Cannot create hsr debugfs directory [ 186.684112][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.806372][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.888526][ T7183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.993098][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.253815][ T7183] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.380899][ T3508] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.388122][ T3508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.465961][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.473170][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.485652][ T7293] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 187.505514][ T7293] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 187.565318][ T7293] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 187.586703][ T7293] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 187.703146][ T49] bridge_slave_1: left allmulticast mode [ 187.708857][ T49] bridge_slave_1: left promiscuous mode [ 187.720463][ T5864] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 187.723441][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.731508][ T5864] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 187.742669][ T5864] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 187.752108][ T5864] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 187.759928][ T5864] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 187.760689][ T49] bridge_slave_0: left allmulticast mode [ 187.782652][ T49] bridge_slave_0: left promiscuous mode [ 187.788374][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.972506][ T5864] Bluetooth: hci0: command tx timeout [ 188.056151][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.067240][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.077906][ T49] bond0 (unregistering): Released all slaves [ 188.291380][ T5864] Bluetooth: hci3: command tx timeout [ 188.619031][ T49] hsr_slave_0: left promiscuous mode [ 188.635394][ T49] hsr_slave_1: left promiscuous mode [ 188.645938][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.653475][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.668986][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.685083][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.710501][ T49] veth1_macvtap: left promiscuous mode [ 188.716650][ T49] veth0_macvtap: left promiscuous mode [ 188.726987][ T49] veth1_vlan: left promiscuous mode [ 188.732969][ T49] veth0_vlan: left promiscuous mode [ 189.206832][ T49] team0 (unregistering): Port device team_slave_1 removed [ 189.241157][ T49] team0 (unregistering): Port device team_slave_0 removed [ 189.756257][ T7183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.821787][ T5864] Bluetooth: hci1: command tx timeout [ 189.864166][ T7331] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 189.932325][ T7293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.941146][ T7331] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 190.007260][ T7331] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 190.046656][ T7331] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 190.054765][ T5864] Bluetooth: hci0: command tx timeout [ 190.113313][ T7293] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.167053][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.174241][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.196140][ T7436] chnl_net:caif_netlink_parms(): no params data found [ 190.246759][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.253998][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.544588][ T7436] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.555575][ T7436] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.564379][ T7436] bridge_slave_0: entered allmulticast mode [ 190.578580][ T7436] bridge_slave_0: entered promiscuous mode [ 190.589905][ T7436] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.601244][ T7436] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.608518][ T7436] bridge_slave_1: entered allmulticast mode [ 190.621697][ T7436] bridge_slave_1: entered promiscuous mode [ 190.706038][ T7436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.734865][ T7436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.813447][ T7436] team0: Port device team_slave_0 added [ 190.869878][ T7331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.888872][ T7436] team0: Port device team_slave_1 added [ 190.954335][ T7331] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.006212][ T7436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.015510][ T7436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.045402][ T7436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.068171][ T7183] veth0_vlan: entered promiscuous mode [ 191.087787][ T7436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.111584][ T7436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.145710][ T7436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.177555][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.184766][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.233531][ T7183] veth1_vlan: entered promiscuous mode [ 191.297235][ T7436] hsr_slave_0: entered promiscuous mode [ 191.322238][ T7436] hsr_slave_1: entered promiscuous mode [ 191.333456][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.340609][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.605462][ T7183] veth0_macvtap: entered promiscuous mode [ 191.628261][ T7293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.767282][ T7436] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.815017][ T7183] veth1_macvtap: entered promiscuous mode [ 191.892476][ T5864] Bluetooth: hci1: command tx timeout [ 191.924935][ T7436] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.997682][ T7436] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.030995][ T7183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.045253][ T7293] veth0_vlan: entered promiscuous mode [ 192.059035][ T7183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.080062][ T7436] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.109317][ T7331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.135370][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.146732][ T7293] veth1_vlan: entered promiscuous mode [ 192.163078][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.172325][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.309762][ T7331] veth0_vlan: entered promiscuous mode [ 192.393774][ T7331] veth1_vlan: entered promiscuous mode [ 192.401410][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.409891][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.443007][ T7293] veth0_macvtap: entered promiscuous mode [ 192.471656][ T7293] veth1_macvtap: entered promiscuous mode [ 192.499776][ T7436] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 192.520476][ T7436] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 192.520505][ T1007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.538041][ T1007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.560257][ T7436] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 192.576461][ T7436] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 192.589981][ T7331] veth0_macvtap: entered promiscuous mode [ 192.600675][ T7293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.654808][ T7331] veth1_macvtap: entered promiscuous mode [ 192.666141][ T7293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.726907][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.765793][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.804630][ T7331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.843167][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.862830][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.904869][ T7331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.957305][ T1007] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.977098][ T1007] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.007252][ T1007] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.044759][ T1007] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.090570][ T1007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.112262][ T1007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.233884][ T1007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.250690][ T7436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.265705][ T1007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.348254][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.363935][ T7436] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.373772][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.518905][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.526034][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.547770][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.557450][ T1007] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.564609][ T1007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.612546][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.971114][ T5864] Bluetooth: hci1: command tx timeout [ 193.994890][ T7436] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 194.020041][ T7436] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 194.294628][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.301420][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.324315][ T7436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.506594][ T7555] nfsd: Unknown parameter '^BÔ-' [ 195.564266][ T7436] veth0_vlan: entered promiscuous mode [ 195.629254][ T7436] veth1_vlan: entered promiscuous mode [ 195.728699][ T7436] veth0_macvtap: entered promiscuous mode [ 195.773403][ T7559] program syz.3.149 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 195.801939][ T7436] veth1_macvtap: entered promiscuous mode [ 195.804700][ T7557] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 195.837445][ T7436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.865782][ T7436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.910150][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.951745][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.989466][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.045380][ T7565] netlink: 28 bytes leftover after parsing attributes in process `syz.0.148'. [ 196.062343][ T5864] Bluetooth: hci1: command tx timeout [ 196.191840][ T7565] veth0_macvtap: left promiscuous mode [ 196.260510][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.273541][ T7573] FAULT_INJECTION: forcing a failure. [ 196.273541][ T7573] name failslab, interval 1, probability 0, space 0, times 0 [ 196.313828][ T7573] CPU: 1 UID: 0 PID: 7573 Comm: syz.1.150 Not tainted syzkaller #0 PREEMPT(full) [ 196.313864][ T7573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 196.313880][ T7573] Call Trace: [ 196.313889][ T7573] [ 196.313899][ T7573] dump_stack_lvl+0x16c/0x1f0 [ 196.313941][ T7573] should_fail_ex+0x512/0x640 [ 196.313976][ T7573] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 196.314006][ T7573] should_failslab+0xc2/0x120 [ 196.314038][ T7573] __kmalloc_cache_noprof+0x6a/0x3e0 [ 196.314066][ T7573] ? do_eventfd+0x67/0x2c0 [ 196.314105][ T7573] do_eventfd+0x67/0x2c0 [ 196.314138][ T7573] ? rcu_is_watching+0x12/0xc0 [ 196.314166][ T7573] __x64_sys_eventfd+0x32/0x50 [ 196.314201][ T7573] do_syscall_64+0xcd/0x490 [ 196.314238][ T7573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.314264][ T7573] RIP: 0033:0x7f6e5cf8ebe9 [ 196.314296][ T7573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.314322][ T7573] RSP: 002b:00007f6e5de71038 EFLAGS: 00000246 ORIG_RAX: 000000000000011c [ 196.314346][ T7573] RAX: ffffffffffffffda RBX: 00007f6e5d1b6270 RCX: 00007f6e5cf8ebe9 [ 196.314364][ T7573] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 196.314379][ T7573] RBP: 00007f6e5d011e19 R08: 0000000000000000 R09: 0000000000000000 [ 196.314395][ T7573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.314409][ T7573] R13: 00007f6e5d1b6308 R14: 00007f6e5d1b6270 R15: 00007ffc11166bf8 [ 196.314441][ T7573] [ 196.315739][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.521837][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.535844][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.549862][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.568845][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.585916][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.596012][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.611162][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.844843][ T1007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.895305][ T1007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.015771][ T1007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.056649][ T1007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.109891][ T7598] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 198.249087][ T7599] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 199.850791][ T5867] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 199.862661][ T5867] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 199.871121][ T5867] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 199.882079][ T5867] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 199.892026][ T5867] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 199.915501][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.099805][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.131308][ T7625] program syz.1.162 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 200.377788][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.538744][ T5867] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 200.549160][ T5867] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 200.559286][ T5867] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 200.568029][ T5867] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 200.580405][ T5867] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 200.643392][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.770997][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.777409][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.785755][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.792216][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.837156][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.843545][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.857943][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.864735][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.255840][ T7620] chnl_net:caif_netlink_parms(): no params data found [ 201.323414][ T7644] program syz.1.164 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 201.700285][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.781959][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 201.788251][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.800220][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 201.810216][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.820049][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 201.827142][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.835891][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 201.842518][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.978437][ T5864] Bluetooth: hci1: command tx timeout [ 202.182864][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.333757][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.370898][ T7620] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.384710][ T7620] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.407805][ T7620] bridge_slave_0: entered allmulticast mode [ 202.429632][ T7620] bridge_slave_0: entered promiscuous mode [ 202.544980][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.579993][ T7620] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.587360][ T7620] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.595049][ T7620] bridge_slave_1: entered allmulticast mode [ 202.605487][ T7620] bridge_slave_1: entered promiscuous mode [ 202.614373][ T5864] Bluetooth: hci3: command tx timeout [ 202.620640][ T7634] chnl_net:caif_netlink_parms(): no params data found [ 202.745939][ T7620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.777907][ T7620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.953989][ T7620] team0: Port device team_slave_0 added [ 202.976303][ T7620] team0: Port device team_slave_1 added [ 203.140537][ T7620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.148751][ T7620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.176841][ T7620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.204597][ T7634] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.217645][ T7634] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.226948][ T7634] bridge_slave_0: entered allmulticast mode [ 203.247351][ T7634] bridge_slave_0: entered promiscuous mode [ 203.274397][ T36] bridge_slave_1: left allmulticast mode [ 203.283934][ T36] bridge_slave_1: left promiscuous mode [ 203.289728][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.310895][ T36] bridge_slave_0: left allmulticast mode [ 203.317336][ T36] bridge_slave_0: left promiscuous mode [ 203.326475][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.337895][ T36] bridge_slave_1: left allmulticast mode [ 203.347010][ T36] bridge_slave_1: left promiscuous mode [ 203.355060][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.370080][ T36] bridge_slave_0: left allmulticast mode [ 203.376267][ T36] bridge_slave_0: left promiscuous mode [ 203.385207][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.779693][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.795120][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.809628][ T36] bond0 (unregistering): Released all slaves [ 204.054025][ T5864] Bluetooth: hci1: command tx timeout [ 204.124506][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.137387][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.147780][ T36] bond0 (unregistering): Released all slaves [ 204.159749][ T7620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.167375][ T7620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.194679][ T7620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.227300][ T7634] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.263365][ T7634] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.283105][ T7634] bridge_slave_1: entered allmulticast mode [ 204.319708][ T7634] bridge_slave_1: entered promiscuous mode [ 204.478410][ T7634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.573470][ T7634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.691395][ T5864] Bluetooth: hci3: command tx timeout [ 204.751139][ T7620] hsr_slave_0: entered promiscuous mode [ 204.759280][ T7620] hsr_slave_1: entered promiscuous mode [ 204.770401][ T7620] debugfs: 'hsr0' already exists in 'hsr' [ 204.814818][ T7620] Cannot create hsr debugfs directory [ 204.925414][ T7634] team0: Port device team_slave_0 added [ 204.996487][ T7634] team0: Port device team_slave_1 added [ 205.256710][ T7634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.271504][ T7634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.297771][ T7634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.405917][ T7634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.413879][ T7634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.463030][ T7634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.585290][ T36] hsr_slave_0: left promiscuous mode [ 205.595275][ T36] hsr_slave_1: left promiscuous mode [ 205.607757][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.616546][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.632110][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.651952][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.693058][ T36] hsr_slave_0: left promiscuous mode [ 205.702002][ T36] hsr_slave_1: left promiscuous mode [ 205.714067][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.727142][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.736581][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.748143][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.785774][ T36] veth1_macvtap: left promiscuous mode [ 205.791614][ T36] veth0_macvtap: left promiscuous mode [ 205.797301][ T36] veth1_vlan: left promiscuous mode [ 205.803337][ T36] veth0_vlan: left promiscuous mode [ 205.809944][ T36] veth1_macvtap: left promiscuous mode [ 205.821070][ T36] veth0_macvtap: left promiscuous mode [ 205.828405][ T36] veth1_vlan: left promiscuous mode [ 205.835891][ T36] veth0_vlan: left promiscuous mode [ 206.136181][ T5864] Bluetooth: hci1: command tx timeout [ 206.644911][ T36] team0 (unregistering): Port device team_slave_1 removed [ 206.679253][ T36] team0 (unregistering): Port device team_slave_0 removed [ 206.783290][ T5864] Bluetooth: hci3: command tx timeout [ 207.280573][ T36] team0 (unregistering): Port device team_slave_1 removed [ 207.321687][ T36] team0 (unregistering): Port device team_slave_0 removed [ 207.726235][ T7634] hsr_slave_0: entered promiscuous mode [ 207.736472][ T7634] hsr_slave_1: entered promiscuous mode [ 208.226523][ T5864] Bluetooth: hci1: command tx timeout [ 208.349923][ T7717] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 208.851214][ T5864] Bluetooth: hci3: command tx timeout [ 209.953809][ T7620] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 210.006385][ T7620] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 210.132077][ T7620] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 210.227439][ T7620] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 210.519054][ T7634] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 210.568360][ T7634] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 210.605891][ T7634] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 210.628315][ T7634] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 210.645332][ T5867] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 210.655489][ T5867] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 210.663487][ T5867] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 210.672585][ T5867] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 210.680411][ T5867] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 210.870590][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.075961][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.320834][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.415050][ T7764] program syz.1.175 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 211.490887][ T7620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.885036][ T7620] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.960037][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 211.966700][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 211.975463][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 211.981838][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 211.990349][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 211.996885][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 212.005072][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 212.011892][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 212.070107][ T13] bridge_slave_1: left allmulticast mode [ 212.109035][ T13] bridge_slave_1: left promiscuous mode [ 212.120438][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.144419][ T13] bridge_slave_0: left allmulticast mode [ 212.194899][ T13] bridge_slave_0: left promiscuous mode [ 212.211760][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.661760][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.673525][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.687402][ T13] bond0 (unregistering): Released all slaves [ 212.716741][ T3508] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.724045][ T3508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.769994][ T7634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.777713][ T5867] Bluetooth: hci2: command tx timeout [ 212.796459][ T3508] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.803718][ T3508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.866993][ T7746] chnl_net:caif_netlink_parms(): no params data found [ 213.048698][ T7634] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.148379][ T1007] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.155601][ T1007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.219846][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.227059][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.258875][ T13] hsr_slave_0: left promiscuous mode [ 213.289297][ T13] hsr_slave_1: left promiscuous mode [ 213.319183][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.366934][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.402068][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.409508][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.444076][ T13] veth1_macvtap: left promiscuous mode [ 213.449849][ T13] veth1_vlan: left promiscuous mode [ 213.460188][ T13] veth0_vlan: left promiscuous mode [ 214.562135][ T13] team0 (unregistering): Port device team_slave_1 removed [ 214.625563][ T13] team0 (unregistering): Port device team_slave_0 removed [ 214.861146][ T5867] Bluetooth: hci2: command tx timeout [ 215.009889][ T7746] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.018321][ T7746] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.026717][ T7746] bridge_slave_0: entered allmulticast mode [ 215.035106][ T7746] bridge_slave_0: entered promiscuous mode [ 215.048579][ T7746] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.056319][ T7746] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.063645][ T7746] bridge_slave_1: entered allmulticast mode [ 215.070589][ T7746] bridge_slave_1: entered promiscuous mode [ 215.171741][ T7746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.196126][ T7746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.350687][ T7746] team0: Port device team_slave_0 added [ 215.433357][ T7746] team0: Port device team_slave_1 added [ 215.595630][ T7746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.603058][ T7746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.630615][ T7746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.675966][ T7746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.687352][ T7746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.716094][ T7746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.804110][ T7620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.914459][ T7746] hsr_slave_0: entered promiscuous mode [ 215.928512][ T7746] hsr_slave_1: entered promiscuous mode [ 215.936015][ T7746] debugfs: 'hsr0' already exists in 'hsr' [ 215.945931][ T7746] Cannot create hsr debugfs directory [ 216.397916][ T7634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.439369][ T7620] veth0_vlan: entered promiscuous mode [ 216.600014][ T7620] veth1_vlan: entered promiscuous mode [ 216.678352][ T7634] veth0_vlan: entered promiscuous mode [ 216.726265][ T7634] veth1_vlan: entered promiscuous mode [ 216.932857][ T5867] Bluetooth: hci2: command tx timeout [ 217.055669][ T7620] veth0_macvtap: entered promiscuous mode [ 217.094170][ T7634] veth0_macvtap: entered promiscuous mode [ 217.116174][ T7620] veth1_macvtap: entered promiscuous mode [ 217.137478][ T7634] veth1_macvtap: entered promiscuous mode [ 217.288760][ T7634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.319442][ T7620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.400456][ T7620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.460796][ T7634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.526251][ T1113] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.551992][ T1113] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.561200][ T3508] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.569962][ T3508] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.670458][ T7746] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 217.696949][ T7746] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 217.744880][ T3508] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.775784][ T3508] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.820978][ T7746] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 217.873714][ T7746] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 217.910090][ T3508] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.922177][ T3508] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.112102][ T1007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.120040][ T1007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.206211][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.230785][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.320216][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.335756][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.599291][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.630322][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.897650][ T7746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.927614][ T7746] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.959515][ T3508] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.966700][ T3508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.007184][ T7912] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 219.020111][ T3508] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.025138][ T5867] Bluetooth: hci2: command tx timeout [ 219.027352][ T3508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.753480][ T7917] FAULT_INJECTION: forcing a failure. [ 219.753480][ T7917] name failslab, interval 1, probability 0, space 0, times 0 [ 219.794601][ T7917] CPU: 1 UID: 0 PID: 7917 Comm: syz.3.161 Not tainted syzkaller #0 PREEMPT(full) [ 219.794641][ T7917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 219.794657][ T7917] Call Trace: [ 219.794666][ T7917] [ 219.794676][ T7917] dump_stack_lvl+0x16c/0x1f0 [ 219.794716][ T7917] should_fail_ex+0x512/0x640 [ 219.794749][ T7917] ? __kmalloc_node_noprof+0xc5/0x500 [ 219.794784][ T7917] should_failslab+0xc2/0x120 [ 219.794813][ T7917] __kmalloc_node_noprof+0xd8/0x500 [ 219.794843][ T7917] ? crypto_alloc_tfmmem.isra.0+0x38/0x110 [ 219.794878][ T7917] ? __pfx_crypto_alg_extsize+0x10/0x10 [ 219.794904][ T7917] crypto_alloc_tfmmem.isra.0+0x38/0x110 [ 219.794942][ T7917] crypto_create_tfm_node+0x85/0x350 [ 219.794980][ T7917] crypto_alloc_tfm_node+0x102/0x260 [ 219.795023][ T7917] ? kasan_save_track+0x14/0x30 [ 219.795058][ T7917] sctp_auth_init_hmacs+0x1e1/0x440 [ 219.795091][ T7917] ? kasan_save_track+0x14/0x30 [ 219.795123][ T7917] sctp_auth_init+0x90/0x570 [ 219.795157][ T7917] sctp_setsockopt+0xa371/0xb870 [ 219.795194][ T7917] ? ksys_write+0x190/0x250 [ 219.795227][ T7917] ? __pfx_sctp_setsockopt+0x10/0x10 [ 219.795262][ T7917] ? find_held_lock+0x2b/0x80 [ 219.795290][ T7917] ? aa_sock_opt_perm+0xfd/0x1c0 [ 219.795314][ T7917] ? sock_common_setsockopt+0x2e/0xf0 [ 219.795353][ T7917] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 219.795395][ T7917] do_sock_setsockopt+0xf0/0x1d0 [ 219.795434][ T7917] __sys_setsockopt+0x120/0x1a0 [ 219.795463][ T7917] __x64_sys_setsockopt+0xbd/0x160 [ 219.795492][ T7917] ? do_syscall_64+0x91/0x490 [ 219.795524][ T7917] ? lockdep_hardirqs_on+0x7c/0x110 [ 219.795552][ T7917] do_syscall_64+0xcd/0x490 [ 219.795586][ T7917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.795611][ T7917] RIP: 0033:0x7fa88138ebe9 [ 219.795632][ T7917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.795656][ T7917] RSP: 002b:00007fa8822b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 219.795678][ T7917] RAX: ffffffffffffffda RBX: 00007fa8815b5fa0 RCX: 00007fa88138ebe9 [ 219.795692][ T7917] RDX: 0000000000000081 RSI: 0000010000000084 RDI: 0000000000000003 [ 219.795703][ T7917] RBP: 00007fa881411e19 R08: 0000000000000008 R09: 0000000000000000 [ 219.795711][ T7917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 219.795721][ T7917] R13: 00007fa8815b6038 R14: 00007fa8815b5fa0 R15: 00007ffcf59a8018 [ 219.795740][ T7917] [ 220.516648][ T7746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.189010][ T3508] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.707186][ T5864] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 221.717864][ T5864] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 221.738354][ T3508] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.763372][ T5864] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 221.773401][ T5864] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 221.784123][ T5864] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 221.825159][ T7960] program syz.1.185 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 221.879884][ T7746] veth0_vlan: entered promiscuous mode [ 221.986610][ T7746] veth1_vlan: entered promiscuous mode [ 222.075260][ T3508] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.311716][ T3508] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.355628][ T7746] veth0_macvtap: entered promiscuous mode [ 222.381632][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 222.388981][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 222.400944][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 222.409369][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 222.426151][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 222.432497][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 222.472761][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 222.479061][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 222.608839][ T7746] veth1_macvtap: entered promiscuous mode [ 222.852975][ T7746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.955935][ T7746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.102266][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.234223][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.246013][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.267614][ T3508] bridge_slave_1: left allmulticast mode [ 223.326012][ T3508] bridge_slave_1: left promiscuous mode [ 223.367429][ T3508] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.492317][ T3508] bridge_slave_0: left allmulticast mode [ 223.515183][ T3508] bridge_slave_0: left promiscuous mode [ 223.523018][ T3508] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.638580][ T3508] bridge_slave_1: left allmulticast mode [ 223.656260][ T3508] bridge_slave_1: left promiscuous mode [ 223.754860][ T3508] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.840540][ T3508] bridge_slave_0: left allmulticast mode [ 223.868119][ T3508] bridge_slave_0: left promiscuous mode [ 223.892211][ T5867] Bluetooth: hci1: command tx timeout [ 223.898940][ T3508] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.523902][ T3508] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.535961][ T3508] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.545918][ T3508] bond0 (unregistering): Released all slaves [ 224.787340][ T3508] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.797780][ T3508] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.807951][ T3508] bond0 (unregistering): Released all slaves [ 224.836670][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.076931][ T7956] chnl_net:caif_netlink_parms(): no params data found [ 225.663620][ T8010] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 225.690035][ T5939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.729257][ T5939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.971237][ T5867] Bluetooth: hci1: command tx timeout [ 226.032613][ T7956] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.039700][ T7956] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.096480][ T7956] bridge_slave_0: entered allmulticast mode [ 226.104991][ T7956] bridge_slave_0: entered promiscuous mode [ 226.180743][ T7956] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.189146][ T7956] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.196656][ T7956] bridge_slave_1: entered allmulticast mode [ 226.204598][ T7956] bridge_slave_1: entered promiscuous mode [ 226.300422][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.330237][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.378124][ T7956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.480168][ T7956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.646366][ T7956] team0: Port device team_slave_0 added [ 226.655987][ T8028] program syz.0.173 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 226.656400][ T7956] team0: Port device team_slave_1 added [ 226.710523][ T3508] hsr_slave_0: left promiscuous mode [ 226.725600][ T3508] hsr_slave_1: left promiscuous mode [ 226.735582][ T3508] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.749837][ T3508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.775554][ T3508] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.792355][ T3508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.813187][ T3508] hsr_slave_0: left promiscuous mode [ 226.838694][ T3508] hsr_slave_1: left promiscuous mode [ 226.846383][ T3508] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.854278][ T3508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.864764][ T3508] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.873826][ T3508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.955075][ T3508] veth1_macvtap: left promiscuous mode [ 226.963096][ T3508] veth0_macvtap: left promiscuous mode [ 226.981309][ T3508] veth1_vlan: left promiscuous mode [ 226.991236][ T3508] veth0_vlan: left promiscuous mode [ 227.006384][ T3508] veth1_macvtap: left promiscuous mode [ 227.013272][ T3508] veth0_macvtap: left promiscuous mode [ 227.018952][ T3508] veth1_vlan: left promiscuous mode [ 227.041150][ T3508] veth0_vlan: left promiscuous mode [ 227.078409][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 227.084983][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 227.125453][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 227.132025][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 227.165057][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 227.183132][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 227.206347][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 227.215808][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 227.609979][ T5864] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 227.626576][ T5864] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 227.637393][ T5864] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 227.650148][ T5864] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 227.664161][ T5864] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 227.913248][ T3508] team0 (unregistering): Port device team_slave_1 removed [ 227.950887][ T3508] team0 (unregistering): Port device team_slave_0 removed [ 228.054031][ T5864] Bluetooth: hci1: command tx timeout [ 228.554267][ T3508] team0 (unregistering): Port device team_slave_1 removed [ 228.589486][ T3508] team0 (unregistering): Port device team_slave_0 removed [ 228.972642][ T7956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.979639][ T7956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.006000][ T7956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.032173][ T7956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.039147][ T7956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.067087][ T7956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.262594][ T7956] hsr_slave_0: entered promiscuous mode [ 229.269269][ T7956] hsr_slave_1: entered promiscuous mode [ 229.298912][ T7956] debugfs: 'hsr0' already exists in 'hsr' [ 229.314837][ T7956] Cannot create hsr debugfs directory [ 229.731332][ T5864] Bluetooth: hci3: command tx timeout [ 230.089314][ T8052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.194'. [ 230.101677][ T8052] netlink: 25 bytes leftover after parsing attributes in process `syz.0.194'. [ 230.132134][ T5864] Bluetooth: hci1: command tx timeout [ 230.350217][ T8034] chnl_net:caif_netlink_parms(): no params data found [ 230.578478][ T3508] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.886451][ T3508] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.086984][ T3508] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.332079][ T3508] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.383864][ T8034] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.391383][ T8034] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.400249][ T8034] bridge_slave_0: entered allmulticast mode [ 231.412757][ T8034] bridge_slave_0: entered promiscuous mode [ 231.455848][ T8034] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.475123][ T8034] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.486604][ T8034] bridge_slave_1: entered allmulticast mode [ 231.504694][ T8034] bridge_slave_1: entered promiscuous mode [ 231.596687][ T8082] program syz.0.197 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 231.666982][ T8034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.686682][ T8034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.812544][ T5864] Bluetooth: hci3: command tx timeout [ 231.997636][ T8034] team0: Port device team_slave_0 added [ 232.023430][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 232.030005][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 232.044599][ T8034] team0: Port device team_slave_1 added [ 232.070141][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 232.076608][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 232.104322][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 232.120334][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 232.128728][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 232.141607][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 232.425311][ T7956] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 232.499142][ T8034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.521118][ T8034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.584138][ T8034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.607081][ T8034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.631399][ T8034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.701350][ T8034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.725561][ T7956] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 232.764938][ T3508] bridge_slave_1: left allmulticast mode [ 232.770617][ T3508] bridge_slave_1: left promiscuous mode [ 232.801529][ T3508] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.816456][ T3508] bridge_slave_0: left allmulticast mode [ 232.833632][ T3508] bridge_slave_0: left promiscuous mode [ 232.839446][ T3508] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.378573][ T3508] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.396740][ T3508] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.409241][ T3508] bond0 (unregistering): Released all slaves [ 233.558677][ T7956] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 233.607976][ T7956] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 233.898038][ T5864] Bluetooth: hci3: command tx timeout [ 233.939365][ T8034] hsr_slave_0: entered promiscuous mode [ 233.949167][ T8034] hsr_slave_1: entered promiscuous mode [ 233.956191][ T8034] debugfs: 'hsr0' already exists in 'hsr' [ 233.963762][ T8034] Cannot create hsr debugfs directory [ 234.330008][ T3508] hsr_slave_0: left promiscuous mode [ 234.350882][ T3508] hsr_slave_1: left promiscuous mode [ 234.406287][ T3508] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.419777][ T8141] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 234.448758][ T3508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.466934][ T3508] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.474763][ T3508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.525832][ T3508] veth1_macvtap: left promiscuous mode [ 234.534599][ T3508] veth0_macvtap: left promiscuous mode [ 234.566635][ T3508] veth1_vlan: left promiscuous mode [ 234.594316][ T3508] veth0_vlan: left promiscuous mode [ 235.439791][ T3508] team0 (unregistering): Port device team_slave_1 removed [ 235.474565][ T3508] team0 (unregistering): Port device team_slave_0 removed [ 235.976885][ T5864] Bluetooth: hci3: command tx timeout [ 236.347588][ T7956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.477490][ T7956] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.606893][ T3508] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.630365][ T8157] program syz.1.203 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 236.668861][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.676057][ T5939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.752157][ T3508] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.004429][ T3508] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.086283][ T5867] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 237.095205][ T5867] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 237.105085][ T5867] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 237.112980][ T5867] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 237.120450][ T5867] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 237.167427][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 237.182561][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 237.202795][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 237.211325][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 237.227698][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 237.236154][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 237.253296][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 237.260343][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 237.283435][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.290597][ T5939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.381596][ T3508] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.537691][ T8034] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 237.592785][ T8034] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 237.608580][ T8034] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 237.625948][ T8034] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 237.872362][ T3508] bridge_slave_1: left allmulticast mode [ 237.891402][ T3508] bridge_slave_1: left promiscuous mode [ 237.901871][ T3508] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.936369][ T3508] bridge_slave_0: left allmulticast mode [ 237.943699][ T3508] bridge_slave_0: left promiscuous mode [ 237.949514][ T3508] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.393730][ T3508] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.405577][ T3508] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.415880][ T3508] bond0 (unregistering): Released all slaves [ 238.713101][ T7956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.925290][ T8162] chnl_net:caif_netlink_parms(): no params data found [ 239.048888][ T3508] hsr_slave_0: left promiscuous mode [ 239.054942][ T3508] hsr_slave_1: left promiscuous mode [ 239.060710][ T3508] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.071233][ T3508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.083332][ T3508] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.104075][ T3508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.140273][ T3508] veth1_macvtap: left promiscuous mode [ 239.148124][ T3508] veth0_macvtap: left promiscuous mode [ 239.162611][ T3508] veth1_vlan: left promiscuous mode [ 239.171168][ T5867] Bluetooth: hci2: command tx timeout [ 239.178880][ T3508] veth0_vlan: left promiscuous mode [ 240.080543][ T3508] team0 (unregistering): Port device team_slave_1 removed [ 240.118858][ T3508] team0 (unregistering): Port device team_slave_0 removed [ 240.793387][ T8162] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.800741][ T8162] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.808444][ T8162] bridge_slave_0: entered allmulticast mode [ 240.820739][ T8162] bridge_slave_0: entered promiscuous mode [ 240.829751][ T8162] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.836950][ T8162] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.845212][ T8162] bridge_slave_1: entered allmulticast mode [ 240.853134][ T8162] bridge_slave_1: entered promiscuous mode [ 240.940354][ T8162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.965082][ T8034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.975200][ T8162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.086962][ T7956] veth0_vlan: entered promiscuous mode [ 241.156318][ T8162] team0: Port device team_slave_0 added [ 241.175121][ T8034] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.190879][ T8162] team0: Port device team_slave_1 added [ 241.218198][ T7956] veth1_vlan: entered promiscuous mode [ 241.251148][ T5867] Bluetooth: hci2: command tx timeout [ 241.280738][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.287983][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.338401][ T3508] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.345611][ T3508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.386144][ T8162] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.393550][ T8162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.423333][ T8162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.462017][ T8162] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.468987][ T8162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.500833][ T8162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.704699][ T8162] hsr_slave_0: entered promiscuous mode [ 241.712393][ T8162] hsr_slave_1: entered promiscuous mode [ 241.751964][ T8239] netlink: 12 bytes leftover after parsing attributes in process `syz.1.207'. [ 241.776284][ T8034] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 241.809972][ T7956] veth0_macvtap: entered promiscuous mode [ 241.918813][ T7956] veth1_macvtap: entered promiscuous mode [ 242.110426][ T7956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.276327][ T7956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.391540][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.413884][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.424675][ T5939] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.455493][ T8034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.540672][ T5939] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.813273][ T1007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.832003][ T1007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.062625][ T5939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.072573][ T5939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.135447][ T8034] veth0_vlan: entered promiscuous mode [ 243.222221][ T8034] veth1_vlan: entered promiscuous mode [ 243.336183][ T5867] Bluetooth: hci2: command tx timeout [ 243.417353][ T8034] veth0_macvtap: entered promiscuous mode [ 243.436652][ T8268] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 243.466748][ T8162] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 243.525673][ T8034] veth1_macvtap: entered promiscuous mode [ 243.553751][ T8162] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 243.562545][ T8270] netlink: 28 bytes leftover after parsing attributes in process `syz.2.182'. [ 243.626672][ T8162] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 243.675556][ T8162] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 243.722568][ T8034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.805807][ T8034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.882789][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.059595][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.092471][ T8291] program syz.1.209 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 244.114508][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.144099][ T1007] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.569823][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.585257][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.721564][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 244.727859][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 244.744943][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 244.751445][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 244.790850][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 244.798938][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 244.918636][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 244.961520][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 245.080630][ T1007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.092576][ T1007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.262395][ T8162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.392821][ T8162] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.418831][ T5867] Bluetooth: hci2: command tx timeout [ 245.489459][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.496675][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.545664][ T8313] FAULT_INJECTION: forcing a failure. [ 245.545664][ T8313] name failslab, interval 1, probability 0, space 0, times 0 [ 245.589685][ T8313] CPU: 1 UID: 0 PID: 8313 Comm: syz.3.192 Not tainted syzkaller #0 PREEMPT(full) [ 245.589723][ T8313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 245.589741][ T8313] Call Trace: [ 245.589754][ T8313] [ 245.589765][ T8313] dump_stack_lvl+0x16c/0x1f0 [ 245.589802][ T8313] should_fail_ex+0x512/0x640 [ 245.589835][ T8313] ? __kmalloc_noprof+0xbf/0x510 [ 245.589868][ T8313] ? ops_init+0x77/0x5f0 [ 245.589899][ T8313] should_failslab+0xc2/0x120 [ 245.589932][ T8313] __kmalloc_noprof+0xd2/0x510 [ 245.589958][ T8313] ? lockdep_init_map_type+0x5c/0x280 [ 245.589995][ T8313] ops_init+0x77/0x5f0 [ 245.590034][ T8313] setup_net+0x10f/0x380 [ 245.590074][ T8313] ? lockdep_init_map_type+0x5c/0x280 [ 245.590108][ T8313] ? __pfx_setup_net+0x10/0x10 [ 245.590144][ T8313] ? debug_mutex_init+0x37/0x70 [ 245.590173][ T8313] copy_net_ns+0x2a6/0x5f0 [ 245.590211][ T8313] create_new_namespaces+0x3ea/0xa90 [ 245.590245][ T8313] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 245.590275][ T8313] ksys_unshare+0x45b/0xa40 [ 245.590308][ T8313] ? __pfx_ksys_unshare+0x10/0x10 [ 245.590341][ T8313] ? xfd_validate_state+0x61/0x180 [ 245.590385][ T8313] __x64_sys_unshare+0x31/0x40 [ 245.590415][ T8313] do_syscall_64+0xcd/0x490 [ 245.590451][ T8313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.590475][ T8313] RIP: 0033:0x7f02e0d8ebe9 [ 245.590494][ T8313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.590519][ T8313] RSP: 002b:00007f02e1b18038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 245.590544][ T8313] RAX: ffffffffffffffda RBX: 00007f02e0fb5fa0 RCX: 00007f02e0d8ebe9 [ 245.590560][ T8313] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 245.590575][ T8313] RBP: 00007f02e0e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 245.590590][ T8313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 245.590605][ T8313] R13: 00007f02e0fb6038 R14: 00007f02e0fb5fa0 R15: 00007ffd0700dc48 [ 245.590640][ T8313] [ 245.809485][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.809599][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.396053][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.635865][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.819296][ T8341] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 246.837963][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.916192][ T8162] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.083454][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.789682][ T5864] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 247.798493][ T5864] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 247.807677][ T5864] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 247.816510][ T5864] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 247.825000][ T5864] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 247.897544][ T12] bridge_slave_1: left allmulticast mode [ 247.931694][ T12] bridge_slave_1: left promiscuous mode [ 247.940495][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.958941][ T12] bridge_slave_0: left allmulticast mode [ 247.975220][ T12] bridge_slave_0: left promiscuous mode [ 247.983985][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.336811][ T8366] netlink: 12 bytes leftover after parsing attributes in process `syz.1.217'. [ 248.389311][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 248.402750][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 248.418379][ T12] bond0 (unregistering): Released all slaves [ 248.703982][ T8162] veth0_vlan: entered promiscuous mode [ 249.294611][ T12] hsr_slave_0: left promiscuous mode [ 249.325925][ T12] hsr_slave_1: left promiscuous mode [ 249.341851][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.360425][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.375066][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.399591][ T5864] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 249.407865][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.425065][ T5864] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 249.434554][ T5864] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 249.444757][ T5864] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 249.461858][ T5864] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 249.472004][ T12] veth1_macvtap: left promiscuous mode [ 249.477564][ T12] veth0_macvtap: left promiscuous mode [ 249.483395][ T12] veth1_vlan: left promiscuous mode [ 249.488780][ T12] veth0_vlan: left promiscuous mode [ 249.891905][ T5864] Bluetooth: hci1: command tx timeout [ 249.942084][ T12] team0 (unregistering): Port device team_slave_1 removed [ 249.981245][ T12] team0 (unregistering): Port device team_slave_0 removed [ 250.295004][ T8162] veth1_vlan: entered promiscuous mode [ 250.445403][ T8162] veth0_macvtap: entered promiscuous mode [ 250.527005][ T8162] veth1_macvtap: entered promiscuous mode [ 250.594689][ T8162] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.637723][ T8360] chnl_net:caif_netlink_parms(): no params data found [ 250.677462][ T8162] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.827244][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.960819][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.997601][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.043197][ T8360] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.066919][ T8360] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.075396][ T8360] bridge_slave_0: entered allmulticast mode [ 251.083380][ T8360] bridge_slave_0: entered promiscuous mode [ 251.229003][ T8360] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.252768][ T8360] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.260017][ T8360] bridge_slave_1: entered allmulticast mode [ 251.274451][ T8360] bridge_slave_1: entered promiscuous mode [ 251.397060][ T8360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.492975][ T5864] Bluetooth: hci3: command tx timeout [ 251.539895][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.603698][ T8360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.667449][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.726582][ T8381] chnl_net:caif_netlink_parms(): no params data found [ 251.797619][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.827378][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.839807][ T8360] team0: Port device team_slave_0 added [ 251.876209][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.885786][ T8360] team0: Port device team_slave_1 added [ 251.959161][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.971375][ T5864] Bluetooth: hci1: command tx timeout [ 252.095868][ T8360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.103381][ T8360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.130960][ T8360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.176556][ T1007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.190468][ T8360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.232123][ T8360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.237007][ T1007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.278788][ T8360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.599320][ T8360] hsr_slave_0: entered promiscuous mode [ 252.676862][ T8360] hsr_slave_1: entered promiscuous mode [ 252.715054][ T8360] debugfs: 'hsr0' already exists in 'hsr' [ 252.720800][ T8360] Cannot create hsr debugfs directory [ 253.065244][ T8381] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.086115][ T8381] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.111956][ T8381] bridge_slave_0: entered allmulticast mode [ 253.139169][ T8381] bridge_slave_0: entered promiscuous mode [ 253.154246][ T8381] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.161568][ T8381] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.168866][ T8381] bridge_slave_1: entered allmulticast mode [ 253.178302][ T8381] bridge_slave_1: entered promiscuous mode [ 253.274729][ T8442] program syz.1.221 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 253.571164][ T5864] Bluetooth: hci3: command tx timeout [ 253.574917][ T8381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.629793][ T8381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.654838][ T12] bridge_slave_1: left allmulticast mode [ 253.662507][ T12] bridge_slave_1: left promiscuous mode [ 253.670869][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.687584][ T12] bridge_slave_0: left allmulticast mode [ 253.694588][ T12] bridge_slave_0: left promiscuous mode [ 253.707678][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.724451][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 253.730997][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 253.748289][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 253.754891][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 253.769244][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 253.779822][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 253.790105][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 253.798746][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 254.057169][ T5864] Bluetooth: hci1: command tx timeout [ 254.139528][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.149938][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.161286][ T12] bond0 (unregistering): Released all slaves [ 254.317485][ T8381] team0: Port device team_slave_0 added [ 254.326759][ T8381] team0: Port device team_slave_1 added [ 254.436228][ T8381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.445674][ T8381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.480338][ T8381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.551212][ T8381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.558569][ T8381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.588156][ T8381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.680114][ T12] hsr_slave_0: left promiscuous mode [ 254.692991][ T12] hsr_slave_1: left promiscuous mode [ 254.712781][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.750196][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.779944][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.804092][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.821355][ T8456] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 254.857625][ T12] veth1_macvtap: left promiscuous mode [ 254.875929][ T12] veth0_macvtap: left promiscuous mode [ 254.894187][ T12] veth1_vlan: left promiscuous mode [ 254.910101][ T12] veth0_vlan: left promiscuous mode [ 255.447149][ T8457] netlink: 350 bytes leftover after parsing attributes in process `syz.0.223'. [ 255.662481][ T5864] Bluetooth: hci3: command tx timeout [ 255.745685][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.752130][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.767436][ T12] team0 (unregistering): Port device team_slave_1 removed [ 255.803183][ T12] team0 (unregistering): Port device team_slave_0 removed [ 256.141350][ T5864] Bluetooth: hci1: command tx timeout [ 256.317953][ T8381] hsr_slave_0: entered promiscuous mode [ 256.325664][ T8381] hsr_slave_1: entered promiscuous mode [ 256.332327][ T8381] debugfs: 'hsr0' already exists in 'hsr' [ 256.338067][ T8381] Cannot create hsr debugfs directory [ 256.887899][ T8360] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 256.943653][ T8360] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 256.996206][ T8360] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 257.044928][ T8360] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 257.662045][ T8381] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 257.712132][ T8360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.741892][ T5864] Bluetooth: hci3: command tx timeout [ 257.755697][ T8381] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 257.770909][ T8381] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 257.790282][ T8360] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.821381][ T8381] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 257.886649][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.893881][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.005102][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.012239][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.190130][ T8360] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 258.385779][ T8381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.668726][ T8381] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.722942][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.730127][ T5939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.807283][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.814561][ T5939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.928646][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.139325][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.486729][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.579110][ T8360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.846987][ T8360] veth0_vlan: entered promiscuous mode [ 259.989543][ T8360] veth1_vlan: entered promiscuous mode [ 260.006550][ T36] bridge_slave_1: left allmulticast mode [ 260.021317][ T36] bridge_slave_1: left promiscuous mode [ 260.027241][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.068632][ T36] bridge_slave_0: left allmulticast mode [ 260.091473][ T36] bridge_slave_0: left promiscuous mode [ 260.098329][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.173685][ T5867] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 260.191449][ T5867] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 260.202890][ T5867] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 260.216963][ T5867] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 260.227126][ T5867] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 260.930476][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 260.959653][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.004062][ T36] bond0 (unregistering): Released all slaves [ 261.373471][ T8381] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.430450][ T8360] veth0_macvtap: entered promiscuous mode [ 261.625710][ T8360] veth1_macvtap: entered promiscuous mode [ 261.682790][ T8381] veth0_vlan: entered promiscuous mode [ 261.769842][ T36] hsr_slave_0: left promiscuous mode [ 261.783587][ T36] hsr_slave_1: left promiscuous mode [ 261.793255][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.802391][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.816165][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.824424][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.849359][ T36] veth1_macvtap: left promiscuous mode [ 261.855086][ T36] veth0_macvtap: left promiscuous mode [ 261.860846][ T36] veth1_vlan: left promiscuous mode [ 261.867087][ T36] veth0_vlan: left promiscuous mode [ 262.291874][ T5864] Bluetooth: hci2: command tx timeout [ 262.400007][ T8579] program syz.1.231 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 262.545482][ T36] team0 (unregistering): Port device team_slave_1 removed [ 262.583508][ T36] team0 (unregistering): Port device team_slave_0 removed [ 262.718416][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 262.727672][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.736689][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 262.745268][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.755166][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 262.761894][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.776806][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 262.783305][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.204480][ T8360] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.247492][ T8381] veth1_vlan: entered promiscuous mode [ 263.290102][ T8360] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.388060][ T3508] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.407586][ T3508] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.529222][ T3508] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.538927][ T3508] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.629589][ T8539] chnl_net:caif_netlink_parms(): no params data found [ 263.695907][ T8381] veth0_macvtap: entered promiscuous mode [ 263.772534][ T3508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.823658][ T3508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.878464][ T8381] veth1_macvtap: entered promiscuous mode [ 264.169690][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.178936][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.328688][ T8381] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.371651][ T5864] Bluetooth: hci2: command tx timeout [ 264.386046][ T8539] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.396433][ T8539] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.403894][ T8539] bridge_slave_0: entered allmulticast mode [ 264.411309][ T8539] bridge_slave_0: entered promiscuous mode [ 264.435446][ T8381] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.475162][ T8539] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.490506][ T8539] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.508270][ T8539] bridge_slave_1: entered allmulticast mode [ 264.516843][ T8539] bridge_slave_1: entered promiscuous mode [ 264.560489][ T8609] program syz.2.213 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 264.615165][ T5939] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.628675][ T5939] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.673317][ T8539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.746513][ T8539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.843991][ T5939] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.912345][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 264.919427][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 264.929614][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 264.936492][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 264.959667][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 264.968411][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 264.994931][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.008935][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.033819][ T5939] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.135053][ T8539] team0: Port device team_slave_0 added [ 265.189774][ T8539] team0: Port device team_slave_1 added [ 265.423049][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.430998][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.468460][ T8539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.477440][ T8539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.504730][ T8539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.517718][ T8539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.526184][ T8539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.553026][ T8539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.866212][ T8539] hsr_slave_0: entered promiscuous mode [ 265.896899][ T8539] hsr_slave_1: entered promiscuous mode [ 265.904969][ T8625] FAULT_INJECTION: forcing a failure. [ 265.904969][ T8625] name failslab, interval 1, probability 0, space 0, times 0 [ 265.930975][ T5939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.948218][ T5939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.009019][ T8625] CPU: 0 UID: 0 PID: 8625 Comm: syz.2.233 Not tainted syzkaller #0 PREEMPT(full) [ 266.009040][ T8625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 266.009050][ T8625] Call Trace: [ 266.009055][ T8625] [ 266.009061][ T8625] dump_stack_lvl+0x16c/0x1f0 [ 266.009085][ T8625] should_fail_ex+0x512/0x640 [ 266.009106][ T8625] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 266.009127][ T8625] should_failslab+0xc2/0x120 [ 266.009146][ T8625] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 266.009163][ T8625] ? sk_prot_alloc+0x60/0x2a0 [ 266.009188][ T8625] sk_prot_alloc+0x60/0x2a0 [ 266.009204][ T8625] sk_alloc+0x36/0xc20 [ 266.009224][ T8625] inet_create+0x3a1/0x1040 [ 266.009240][ T8625] ? inet_create+0x93/0x1040 [ 266.009257][ T8625] __sock_create+0x335/0x8d0 [ 266.009275][ T8625] mptcp_subflow_create_socket+0xf5/0xed0 [ 266.009302][ T8625] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 266.009330][ T8625] __mptcp_nmpc_sk+0x182/0x7d0 [ 266.009345][ T8625] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 266.009361][ T8625] ? __local_bh_enable_ip+0xa4/0x120 [ 266.009380][ T8625] mptcp_getsockopt+0xcf8/0xe20 [ 266.009402][ T8625] ? __pfx_mptcp_getsockopt+0x10/0x10 [ 266.009422][ T8625] ? lockdep_hardirqs_on+0x7c/0x110 [ 266.009441][ T8625] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 266.009465][ T8625] ? __pfx_mptcp_getsockopt+0x10/0x10 [ 266.009489][ T8625] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 266.009510][ T8625] do_sock_getsockopt+0x34d/0x440 [ 266.009533][ T8625] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 266.009554][ T8625] ? __fget_files+0x204/0x3c0 [ 266.009578][ T8625] __sys_getsockopt+0x123/0x1b0 [ 266.009600][ T8625] __x64_sys_getsockopt+0xbd/0x160 [ 266.009617][ T8625] ? do_syscall_64+0x91/0x490 [ 266.009635][ T8625] ? lockdep_hardirqs_on+0x7c/0x110 [ 266.009653][ T8625] do_syscall_64+0xcd/0x490 [ 266.009673][ T8625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.009688][ T8625] RIP: 0033:0x7fb7e118ebe9 [ 266.009700][ T8625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.009717][ T8625] RSP: 002b:00007fb7df3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 266.009731][ T8625] RAX: ffffffffffffffda RBX: 00007fb7e13b5fa0 RCX: 00007fb7e118ebe9 [ 266.009741][ T8625] RDX: 0000000000000021 RSI: 0000000000000006 RDI: 0000000000000006 [ 266.009750][ T8625] RBP: 00007fb7e1211e19 R08: 0000000000000000 R09: 0000000000000000 [ 266.009759][ T8625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 266.009768][ T8625] R13: 00007fb7e13b6038 R14: 00007fb7e13b5fa0 R15: 00007ffd1d1cb718 [ 266.009787][ T8625] [ 266.452652][ T8625] FAULT_INJECTION: forcing a failure. [ 266.452652][ T8625] name failslab, interval 1, probability 0, space 0, times 0 [ 266.465637][ T8625] CPU: 0 UID: 0 PID: 8625 Comm: syz.2.233 Not tainted syzkaller #0 PREEMPT(full) [ 266.465673][ T8625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 266.465687][ T8625] Call Trace: [ 266.465696][ T8625] [ 266.465706][ T8625] dump_stack_lvl+0x16c/0x1f0 [ 266.465745][ T8625] should_fail_ex+0x512/0x640 [ 266.465780][ T8625] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 266.465819][ T8625] should_failslab+0xc2/0x120 [ 266.465851][ T8625] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 266.465884][ T8625] ? create_filter_start.constprop.0+0x16a/0x300 [ 266.465976][ T8625] kstrdup+0x53/0x100 [ 266.466015][ T8625] create_filter_start.constprop.0+0x16a/0x300 [ 266.466053][ T8625] apply_subsystem_event_filter+0x188/0x17e0 [ 266.466091][ T8625] ? __might_fault+0xe3/0x190 [ 266.466119][ T8625] ? __might_fault+0x13b/0x190 [ 266.466145][ T8625] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 266.466184][ T8625] ? _copy_from_user+0x59/0xd0 [ 266.466236][ T8625] subsystem_filter_write+0x95/0x120 [ 266.466271][ T8625] ? __pfx_subsystem_filter_write+0x10/0x10 [ 266.466301][ T8625] vfs_write+0x2a0/0x11d0 [ 266.466336][ T8625] ? __pfx___mutex_lock+0x10/0x10 [ 266.466371][ T8625] ? __pfx_vfs_write+0x10/0x10 [ 266.466412][ T8625] ? __fget_files+0x20e/0x3c0 [ 266.466452][ T8625] ksys_write+0x12a/0x250 [ 266.466480][ T8625] ? __pfx_ksys_write+0x10/0x10 [ 266.466521][ T8625] do_syscall_64+0xcd/0x490 [ 266.466558][ T8625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.466584][ T8625] RIP: 0033:0x7fb7e118ebe9 [ 266.466604][ T8625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.466629][ T8625] RSP: 002b:00007fb7df3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 266.466655][ T8625] RAX: ffffffffffffffda RBX: 00007fb7e13b5fa0 RCX: 00007fb7e118ebe9 [ 266.466673][ T8625] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000009 [ 266.466689][ T8625] RBP: 00007fb7e1211e19 R08: 0000000000000000 R09: 0000000000000000 [ 266.466704][ T8625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 266.466721][ T8625] R13: 00007fb7e13b6038 R14: 00007fb7e13b5fa0 R15: 00007ffd1d1cb718 [ 266.466759][ T8625] [ 266.473250][ T5864] Bluetooth: hci2: command tx timeout [ 268.176973][ T8660] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 268.309307][ T8664] netlink: 28 bytes leftover after parsing attributes in process `syz.2.235'. [ 268.498539][ T8539] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 268.540738][ T8539] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 268.585821][ T8539] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 268.599241][ T8539] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 268.771312][ T5864] Bluetooth: hci2: command tx timeout [ 268.836612][ T8688] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 269.338975][ T8539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.357200][ T8539] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.526779][ T3508] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.533961][ T3508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.635815][ T3508] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.642959][ T3508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.148377][ T3508] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.262449][ T8707] program syz.1.241 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 270.387576][ T3508] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.622332][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 270.628709][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 270.641707][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 270.649370][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 270.661562][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 270.667884][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 270.682383][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 270.688724][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 270.885465][ T3508] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.133500][ T3508] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.147779][ T8723] program syz.2.242 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 271.709559][ T5867] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 271.728480][ T5867] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 271.751966][ T5867] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 271.776634][ T5867] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 271.795174][ T5867] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 271.904929][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 271.914687][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 271.940671][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 271.947128][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 271.994947][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 272.001445][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 272.050771][ T3508] bridge_slave_1: left allmulticast mode [ 272.057294][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 272.067223][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 272.084817][ T3508] bridge_slave_1: left promiscuous mode [ 272.111282][ T3508] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.124833][ T3508] bridge_slave_0: left allmulticast mode [ 272.130509][ T3508] bridge_slave_0: left promiscuous mode [ 272.141670][ T3508] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.796574][ T3508] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 272.809663][ T3508] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 272.823174][ T3508] bond0 (unregistering): Released all slaves [ 272.966448][ T8539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.305537][ T8539] veth0_vlan: entered promiscuous mode [ 273.347268][ T8539] veth1_vlan: entered promiscuous mode [ 273.551514][ T30] audit: type=1800 audit(1756496065.911:3): pid=8759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.244" name="members" dev="configfs" ino=35010 res=0 errno=0 [ 273.678640][ T8759] FAULT_INJECTION: forcing a failure. [ 273.678640][ T8759] name failslab, interval 1, probability 0, space 0, times 0 [ 273.691644][ T8759] CPU: 0 UID: 0 PID: 8759 Comm: syz.1.244 Not tainted syzkaller #0 PREEMPT(full) [ 273.691679][ T8759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 273.691695][ T8759] Call Trace: [ 273.691705][ T8759] [ 273.691715][ T8759] dump_stack_lvl+0x16c/0x1f0 [ 273.691757][ T8759] should_fail_ex+0x512/0x640 [ 273.691793][ T8759] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 273.691828][ T8759] should_failslab+0xc2/0x120 [ 273.691861][ T8759] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 273.691892][ T8759] ? __proc_create+0xc3/0x8e0 [ 273.691927][ T8759] ? __proc_create+0x2ce/0x8e0 [ 273.691969][ T8759] __proc_create+0x2ce/0x8e0 [ 273.692006][ T8759] ? __pfx___proc_create+0x10/0x10 [ 273.692050][ T8759] ? _raw_write_unlock+0x28/0x50 [ 273.692087][ T8759] proc_create_reg+0x7d/0x180 [ 273.692128][ T8759] proc_create_net_data+0x8e/0x1c0 [ 273.692168][ T8759] ? __pfx_proc_create_net_data+0x10/0x10 [ 273.692218][ T8759] ? __pfx_uevent_net_rcv+0x10/0x10 [ 273.692264][ T8759] ? __pfx_dev_proc_net_init+0x10/0x10 [ 273.692297][ T8759] wext_proc_init+0x53/0x70 [ 273.692329][ T8759] dev_proc_net_init+0x10b/0x220 [ 273.692361][ T8759] ops_init+0x1e2/0x5f0 [ 273.692401][ T8759] setup_net+0x10f/0x380 [ 273.692434][ T8759] ? lockdep_init_map_type+0x5c/0x280 [ 273.692470][ T8759] ? __pfx_setup_net+0x10/0x10 [ 273.692507][ T8759] ? debug_mutex_init+0x37/0x70 [ 273.692537][ T8759] copy_net_ns+0x2a6/0x5f0 [ 273.692579][ T8759] create_new_namespaces+0x3ea/0xa90 [ 273.692616][ T8759] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 273.692649][ T8759] ksys_unshare+0x45b/0xa40 [ 273.692684][ T8759] ? __pfx_ksys_unshare+0x10/0x10 [ 273.692719][ T8759] ? xfd_validate_state+0x61/0x180 [ 273.692767][ T8759] __x64_sys_unshare+0x31/0x40 [ 273.692802][ T8759] do_syscall_64+0xcd/0x490 [ 273.692840][ T8759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.692866][ T8759] RIP: 0033:0x7f6e5cf8ebe9 [ 273.692889][ T8759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.692914][ T8759] RSP: 002b:00007f6e5de92038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 273.692939][ T8759] RAX: ffffffffffffffda RBX: 00007f6e5d1b6180 RCX: 00007f6e5cf8ebe9 [ 273.692957][ T8759] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 273.692973][ T8759] RBP: 00007f6e5d011e19 R08: 0000000000000000 R09: 0000000000000000 [ 273.692988][ T8759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.693004][ T8759] R13: 00007f6e5d1b6218 R14: 00007f6e5d1b6180 R15: 00007ffc11166bf8 [ 273.693041][ T8759] [ 274.015491][ T5867] Bluetooth: hci3: command tx timeout [ 274.365533][ T8539] veth0_macvtap: entered promiscuous mode [ 274.397750][ T8733] chnl_net:caif_netlink_parms(): no params data found [ 274.565127][ T3508] hsr_slave_0: left promiscuous mode [ 274.573204][ T3508] hsr_slave_1: left promiscuous mode [ 274.579265][ T3508] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.598621][ T3508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.606734][ T3508] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.615304][ T3508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.656782][ T3508] veth1_macvtap: left promiscuous mode [ 274.675495][ T3508] veth0_macvtap: left promiscuous mode [ 274.695344][ T3508] veth1_vlan: left promiscuous mode [ 274.700741][ T3508] veth0_vlan: left promiscuous mode [ 275.227190][ T3508] team0 (unregistering): Port device team_slave_1 removed [ 275.272688][ T3508] team0 (unregistering): Port device team_slave_0 removed [ 275.773438][ T8539] veth1_macvtap: entered promiscuous mode [ 275.984624][ T8539] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.054808][ T5867] Bluetooth: hci3: command tx timeout [ 276.095787][ T8733] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.103511][ T8733] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.110910][ T8733] bridge_slave_0: entered allmulticast mode [ 276.119890][ T8733] bridge_slave_0: entered promiscuous mode [ 276.137696][ T8733] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.146566][ T8733] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.154584][ T8733] bridge_slave_1: entered allmulticast mode [ 276.163116][ T8733] bridge_slave_1: entered promiscuous mode [ 276.244503][ T8539] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.354215][ T8733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.408045][ T1007] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.645801][ T8800] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.663345][ T8800] ------------[ cut here ]------------ [ 276.669008][ T8800] ODEBUG: free active (active state 0) object: ffff8880795cce00 object type: work_struct hint: udp_tunnel_nic_device_sync_work+0x0/0xa10 [ 276.687257][ T8800] WARNING: CPU: 0 PID: 8800 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0 [ 276.697185][ T8800] Modules linked in: [ 276.701600][ T8800] CPU: 0 UID: 0 PID: 8800 Comm: syz.2.248 Not tainted syzkaller #0 PREEMPT(full) [ 276.710861][ T8800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 276.721001][ T8800] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 276.726877][ T8800] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd 60 3e 16 8c 4c 89 e6 48 c7 c7 e0 32 16 8c e8 5f 08 92 fc 90 <0f> 0b 90 90 58 83 05 66 c1 c3 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 276.746572][ T8800] RSP: 0018:ffffc90003057638 EFLAGS: 00010286 [ 276.752680][ T8800] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffc9000d570000 [ 276.760657][ T8800] RDX: 0000000000080000 RSI: ffffffff817a02d5 RDI: 0000000000000001 [ 276.768707][ T8800] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 276.776828][ T8800] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff8c163980 [ 276.784824][ T8800] R13: ffffffff8bac1660 R14: ffffffff8a1f8850 R15: ffffc90003057738 [ 276.792980][ T8800] FS: 00007fb7df3b46c0(0000) GS:ffff8881246c0000(0000) knlGS:0000000000000000 [ 276.802411][ T8800] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 276.808998][ T8800] CR2: 00007f79fbc307e8 CR3: 0000000063c44000 CR4: 00000000003526f0 [ 276.817019][ T8800] Call Trace: [ 276.820296][ T8800] [ 276.823244][ T8800] ? __pfx_udp_tunnel_nic_device_sync_work+0x10/0x10 [ 276.829924][ T8800] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 276.835769][ T8800] debug_check_no_obj_freed+0x4b7/0x600 [ 276.841338][ T8800] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 276.847410][ T8800] ? kasan_quarantine_put+0x10a/0x240 [ 276.853853][ T8800] ? lockdep_hardirqs_on+0x7c/0x110 [ 276.859066][ T8800] kfree+0x28f/0x4d0 [ 276.863304][ T8800] ? udp_tunnel_nic_netdevice_event+0xd2a/0x1fa0 [ 276.869653][ T8800] udp_tunnel_nic_netdevice_event+0xd2a/0x1fa0 [ 276.875873][ T8800] notifier_call_chain+0xbc/0x410 [ 276.880896][ T8800] ? __pfx_udp_tunnel_nic_netdevice_event+0x10/0x10 [ 276.887517][ T8800] call_netdevice_notifiers_info+0xbe/0x140 [ 276.893668][ T8800] unregister_netdevice_many_notify+0xf76/0x24c0 [ 276.900039][ T8800] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 276.907019][ T8800] ? __pfx___mutex_lock+0x10/0x10 [ 276.912103][ T8800] ? net_passive_dec+0xaa/0x1e0 [ 276.917066][ T8800] unregister_netdevice_queue+0x305/0x3f0 [ 276.923276][ T8800] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 276.929533][ T8800] nsim_destroy+0x198/0x800 [ 276.934163][ T8800] __nsim_dev_port_del+0x189/0x240 [ 276.939281][ T8800] nsim_drv_port_del+0x118/0x180 [ 276.944254][ T8800] del_port_store+0x129/0x170 [ 276.949008][ T8800] ? __pfx_del_port_store+0x10/0x10 [ 276.954238][ T8800] ? find_held_lock+0x2b/0x80 [ 276.958905][ T8800] ? sysfs_file_kobj+0xe4/0x290 [ 276.963793][ T8800] ? __pfx_del_port_store+0x10/0x10 [ 276.969008][ T8800] dev_attr_store+0x58/0x80 [ 276.973570][ T8800] ? __pfx_dev_attr_store+0x10/0x10 [ 276.978764][ T8800] sysfs_kf_write+0xf2/0x150 [ 276.983398][ T8800] kernfs_fop_write_iter+0x354/0x510 [ 276.988686][ T8800] ? __pfx_sysfs_kf_write+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 276.994150][ T8800] vfs_write+0x7d0/0x11d0 [ 276.998484][ T8800] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 277.004731][ T8800] ? __pfx___mutex_lock+0x10/0x10 [ 277.009773][ T8800] ? __pfx_vfs_write+0x10/0x10 [ 277.014658][ T8800] ksys_write+0x12a/0x250 [ 277.019015][ T8800] ? __pfx_ksys_write+0x10/0x10 [ 277.024046][ T8800] do_syscall_64+0xcd/0x490 [ 277.028594][ T8800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.034569][ T8800] RIP: 0033:0x7fb7e118ebe9 [ 277.039001][ T8800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.058708][ T8800] RSP: 002b:00007fb7df3b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 277.067431][ T8800] RAX: ffffffffffffffda RBX: 00007fb7e13b6180 RCX: 00007fb7e118ebe9 [ 277.075458][ T8800] RDX: 0000000000000001 RSI: 0000200000000380 RDI: 000000000000000b [ 277.083454][ T8800] RBP: 00007fb7e1211e19 R08: 0000000000000000 R09: 0000000000000000 [ 277.091667][ T8800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 277.099947][ T8800] R13: 00007fb7e13b6218 R14: 00007fb7e13b6180 R15: 00007ffd1d1cb718 [ 277.108285][ T8800] [ 277.111415][ T8800] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 277.118703][ T8800] CPU: 0 UID: 0 PID: 8800 Comm: syz.2.248 Not tainted syzkaller #0 PREEMPT(full) [ 277.127919][ T8800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 277.137977][ T8800] Call Trace: [ 277.141253][ T8800] [ 277.144175][ T8800] dump_stack_lvl+0x3d/0x1f0 [ 277.148856][ T8800] vpanic+0x6e8/0x7a0 [ 277.152851][ T8800] ? __pfx_vpanic+0x10/0x10 [ 277.157449][ T8800] ? debug_print_object+0x1a2/0x2b0 [ 277.162639][ T8800] panic+0xca/0xd0 [ 277.166388][ T8800] ? __pfx_panic+0x10/0x10 [ 277.170808][ T8800] check_panic_on_warn+0xab/0xb0 [ 277.175834][ T8800] __warn+0xf6/0x3c0 [ 277.179728][ T8800] ? debug_print_object+0x1a2/0x2b0 [ 277.184937][ T8800] report_bug+0x3c3/0x580 [ 277.189263][ T8800] ? debug_print_object+0x1a2/0x2b0 [ 277.194551][ T8800] handle_bug+0x184/0x210 [ 277.198882][ T8800] exc_invalid_op+0x17/0x50 [ 277.203471][ T8800] asm_exc_invalid_op+0x1a/0x20 [ 277.208315][ T8800] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 277.214203][ T8800] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd 60 3e 16 8c 4c 89 e6 48 c7 c7 e0 32 16 8c e8 5f 08 92 fc 90 <0f> 0b 90 90 58 83 05 66 c1 c3 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 277.233914][ T8800] RSP: 0018:ffffc90003057638 EFLAGS: 00010286 [ 277.239980][ T8800] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffc9000d570000 [ 277.248038][ T8800] RDX: 0000000000080000 RSI: ffffffff817a02d5 RDI: 0000000000000001 [ 277.256026][ T8800] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 277.264003][ T8800] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff8c163980 [ 277.271972][ T8800] R13: ffffffff8bac1660 R14: ffffffff8a1f8850 R15: ffffc90003057738 [ 277.279950][ T8800] ? __pfx_udp_tunnel_nic_device_sync_work+0x10/0x10 [ 277.286661][ T8800] ? __warn_printk+0x1a5/0x350 [ 277.291439][ T8800] ? debug_print_object+0x1a1/0x2b0 [ 277.296637][ T8800] ? __pfx_udp_tunnel_nic_device_sync_work+0x10/0x10 [ 277.303326][ T8800] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 277.309238][ T8800] debug_check_no_obj_freed+0x4b7/0x600 [ 277.314808][ T8800] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 277.320889][ T8800] ? kasan_quarantine_put+0x10a/0x240 [ 277.326382][ T8800] ? lockdep_hardirqs_on+0x7c/0x110 [ 277.331679][ T8800] kfree+0x28f/0x4d0 [ 277.335600][ T8800] ? udp_tunnel_nic_netdevice_event+0xd2a/0x1fa0 [ 277.341960][ T8800] udp_tunnel_nic_netdevice_event+0xd2a/0x1fa0 [ 277.348249][ T8800] notifier_call_chain+0xbc/0x410 [ 277.353372][ T8800] ? __pfx_udp_tunnel_nic_netdevice_event+0x10/0x10 [ 277.359983][ T8800] call_netdevice_notifiers_info+0xbe/0x140 [ 277.365893][ T8800] unregister_netdevice_many_notify+0xf76/0x24c0 [ 277.372254][ T8800] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 277.379120][ T8800] ? __pfx___mutex_lock+0x10/0x10 [ 277.384164][ T8800] ? net_passive_dec+0xaa/0x1e0 [ 277.389059][ T8800] unregister_netdevice_queue+0x305/0x3f0 [ 277.394796][ T8800] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 277.401106][ T8800] nsim_destroy+0x198/0x800 [ 277.405760][ T8800] __nsim_dev_port_del+0x189/0x240 [ 277.410910][ T8800] nsim_drv_port_del+0x118/0x180 [ 277.415860][ T8800] del_port_store+0x129/0x170 [ 277.420551][ T8800] ? __pfx_del_port_store+0x10/0x10 [ 277.425765][ T8800] ? find_held_lock+0x2b/0x80 [ 277.430445][ T8800] ? sysfs_file_kobj+0xe4/0x290 [ 277.435393][ T8800] ? __pfx_del_port_store+0x10/0x10 [ 277.440596][ T8800] dev_attr_store+0x58/0x80 [ 277.445108][ T8800] ? __pfx_dev_attr_store+0x10/0x10 [ 277.450313][ T8800] sysfs_kf_write+0xf2/0x150 [ 277.454994][ T8800] kernfs_fop_write_iter+0x354/0x510 [ 277.460282][ T8800] ? __pfx_sysfs_kf_write+0x10/0x10 [ 277.465488][ T8800] vfs_write+0x7d0/0x11d0 [ 277.469826][ T8800] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 277.475634][ T8800] ? __pfx___mutex_lock+0x10/0x10 [ 277.480672][ T8800] ? __pfx_vfs_write+0x10/0x10 [ 277.485464][ T8800] ksys_write+0x12a/0x250 [ 277.489824][ T8800] ? __pfx_ksys_write+0x10/0x10 [ 277.494728][ T8800] do_syscall_64+0xcd/0x490 [ 277.499283][ T8800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.505213][ T8800] RIP: 0033:0x7fb7e118ebe9 [ 277.509682][ T8800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.529312][ T8800] RSP: 002b:00007fb7df3b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 277.538044][ T8800] RAX: ffffffffffffffda RBX: 00007fb7e13b6180 RCX: 00007fb7e118ebe9 [ 277.546055][ T8800] RDX: 0000000000000001 RSI: 0000200000000380 RDI: 000000000000000b [ 277.554038][ T8800] RBP: 00007fb7e1211e19 R08: 0000000000000000 R09: 0000000000000000 [ 277.562011][ T8800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 277.569991][ T8800] R13: 00007fb7e13b6218 R14: 00007fb7e13b6180 R15: 00007ffd1d1cb718 [ 277.577987][ T8800] [ 277.581303][ T8800] Kernel Offset: disabled [ 277.585629][ T8800] Rebooting in 86400 seconds..