last executing test programs: 10.57527745s ago: executing program 2 (id=3252): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r0, 0x400, 0x1) open(&(0x7f0000000800)='./file0\x00', 0x1, 0x154) execve$auto(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x2, 0xebe, 0xfffffffffffffffa, 0x8) socket(0xa, 0x3, 0x3a) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) ioctl$auto_TCSBRKP2(0xffffffffffffffff, 0x5425, 0x0) io_uring_setup$auto(0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020006, 0x4051, 0xeb1, 0x0, 0x0) r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r4, 0xaf01, 0x5) ioctl$auto(r4, 0xc008af12, r3) close_range$auto(0x2, 0xa, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r5 = socket(0x2, 0x1, 0x0) sendmmsg$auto(r5, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) r6 = socket(0x10, 0x2, 0x0) r7 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_STOP_BEACONS(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="e4110000", @ANYRES16=r7, @ANYRESOCT=r4], 0x11e4}, 0x1, 0x0, 0x0, 0x90}, 0x4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/cgroup\x00') 10.457145741s ago: executing program 2 (id=3253): mmap$auto(0x0, 0x2a, 0x1df, 0x9b72, 0x1000, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x4, 0x9, 0x9b7f, 0xffffffffffffffff, 0x7f136b49) r0 = socket(0xa, 0x5, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mmap$auto(0x4, 0xe9, 0x3, 0xebf, r0, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0) pipe$auto(&(0x7f00000000c0)=r1) ioctl$auto(0xffffffffffffffff, 0x80045438, 0x10000000000402) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x7, 0x0, 0x23) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000002940)='/dev/fb0\x00', 0x7c1bc1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x6, 0x3, 0x4000000eb4, r2, 0x2) keyctl$auto(0xf, 0xfffff7ffffffffff, 0x0, 0x8, 0x8) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r3, &(0x7f0000000040)='\v\xc93\xf6', 0x80000000) getrlimit$auto(0x3, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) 10.439617568s ago: executing program 2 (id=3254): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) mmap$auto(0x2, 0xfffffffffffffff7, 0x400, 0x8000000008011, 0x3, 0x1) r0 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0) write$auto(r0, &(0x7f0000008d40)=' \v\xb0]E\x00', 0x3) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/dummy0/carrier\x00', 0xc2061, 0x0) write$auto(r1, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xab\b\x00\x00\x00\x00\x00\x00\x00}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2oc!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x83) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x10) sysfs$auto(0x2, 0x23, 0x0) r2 = fsopen$auto(0x0, 0x1) fsconfig$auto(r2, 0x8, 0x0, 0x0, 0xee01) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000140), 0x189000, 0x0) setsockopt$auto_SO_CNX_ADVICE(r1, 0x41, 0x35, &(0x7f00000001c0)='/dev/cec29\x00', 0x1) readv$auto(r3, &(0x7f00000018c0)={0x0, 0x1}, 0x9) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/personality\x00', 0x8002, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec29\x00', 0x900, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f0000000100)={"fda256c4", 0xffff, 0x6, 0x4, 0x9b4, 0x6, "0800aa7c241cd010c2543bfbca2ce1", "0200", "00000600", "03b31d0f", ['\x00', "f8ffffffffffffff00000001", "0004154db00b0004000400", "5fe10eedab2c4b353c392a92"]}) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) 10.348187414s ago: executing program 2 (id=3255): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x11, 0x80000, 0x9) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) (async) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6\x00\x00\x00', 0x0, 0x0) (async) getcwd$auto(0x0, 0xffffffffffffffff) (async) fspick$auto(0xffffffffffffffff, 0x0, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x10000, 0x4080000000db, 0xeb1, 0x2, 0x8000) (async) open(0x0, 0x161342, 0x130) (async) r1 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0) pread64$auto(r1, 0x0, 0x101, 0x103) (async) read$auto_mon_fops_text_t_mon_text(r1, 0x0, 0x0) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) (async) write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, 0x0, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2ab42, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f0000000840)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB, @ANYRESOCT=r0, @ANYRESOCT, @ANYRES16, @ANYRES64=r2, @ANYRES16], 0xb4}}, 0x20000054) (async) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0xfff) (async) write$auto(r2, 0x0, 0x98c7) (async) madvise$auto(0x0, 0x8, 0x15) (async) unshare$auto(0x40000080) (async) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/rt_cache\x00', 0x2000, 0x0) (async) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) mmap$auto(0x0, 0x61, 0x100001000000004, 0xfa31, 0x400, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) (async) write$auto_console_fops_tty_io(r3, &(0x7f0000001bc0)="51426572911c17e9dd66bf94ea32689283bb895dbc0a97721ed6e250c974356905898b7d48acecddf280cf6dd4ba18c1aa3928071c6585025ceab0e2f34f37ddec138ea587fc4def825608b0ab2a6ecac42062bd3c58ba606307b7471b20a40ffa168b91dde6727571c4ec94bfbde1df90ccb265ffda374c98ffb1ee22069af38a3f200532dbbe5e98f4455170e9a137517b9b7b8840359940ab00f37125c2bec0ac36606b6c69edb35967d723fb81a15faea2bd280d1581ad1ef597bb4dc09f6a5d53aaff1877b77c4e425761dc09d34498c1fce72c0ba1041a99b8748a37597b9567cda1de2cbf6962798e5ee11bf7cb2c70a9502f33c43b8e5dc54de743a2e24cb94c22d669b434888a7ce4cb16cd77b324258e07af32adc0cb38f8c622085783f6804edc3913fb9e98c55713fa0bf8101ad0f6f43407ce4be0001d1bb201bec283ade79ab23484c1076e703864629ac9a6031533dc956f705f89f0e0ef7d3109e46859d1f2ad1b8cb3cfcedf868a3be101e8b9acd75e39e6a27a541aa9fe86ad3119b7049c3fad2a901222eb948cabb4b5c3e5ba6ffc02a15bf7d550b00ab0f3dd3002924f7bd0701269ae293c4cb231b9127d1f6b38dd6fbb3429905384eed7eed9330a9c5e732bdd510169d9ca3e420ea2102be3770a0ab598c037b8f01e8910cf8b0942aafb156ac90724cf552df158a7f59c26e62f3fcf32d860c2259cb1b3118a773ff3cfbaf9c5b068dade5cd7778f1ea98700629b62534735fef3071c30afa6ea26f7e651ec140936c07d9e90f1c9faef3e05376b1e121af6a6691616c10e19fd4f16b1858b44d99e597908cda0e8fa8c21d8b700987d7723a4b5a4ff3c371f2d1cb9fb2f054abc58727239ba67a173f1431083fedc7c4304488c13c75e4995a58ac9de085377356ddc5338aeb44e7f3d06f82a5e0c846159c881a0395a3dbf32a9f2530a520721431a752b13b01a89bdf2b38387b72e8a533936623ec396f6ef94ddfcca047bf20a6fe450a03dedb36a57355e2519ff579b5c63095f48407ece8a7c6c4f5b2582616f0a6bba059810c0a28355fb08dceec9e290026452c3135f8ad93f9617f22e590122d43f6fdc1ea0f9ec12c551b5127108443bb081f7a89660034ea4f3c4305108428cc91918dbb28c2a117f09609e40903b13055e92a727afa767b1f97df335ee729686c0113e4cc18aa50f4ad82b1d403cc6c11ac3bf63415560417d7d488df01b69c925ca3fce60ca7ac767fd11df61caf62f3ab67dad043faf1cc334903e0f419c2e97553ecaad5814bf097192e76e9a16bc5c9be932718aba32cd7dbcc6bc634a463c6f709cc81963b39442e710c14c7e107b0aeb7b6a0e3f3757860d10dd741863277c43ce4dcec49f4558959b08f59182baf4f250aa045fee383ceaec280817bf222dfbeeca8c1ec8473176326c1ffd49ea072b5f3c73f36865b6052a1595c1bb76cfe37f976848fbcb408381ddeff9c318a2e6bbfe6c18ef16531fec3c47874a5391238c0d6b0e033db3fce94127cc9c98a4211e5d873f7b4810846d96be2d6cac532fce0ddee737e4d1ddb65b8b2449984a897e4090449ed4fb4006fb9d133e51396d4664a3f0c395c5b24781f8389979ccb565c6461b66db7134d15cff5ae8f935a5bcb23caace2edd2b37a726575e3cb0528de05edd9f03e30feb617767b6a557280a0a288b52af44a1607b6063867e5c9d8d56c44968fd509b5983fa06e6b1eefb2f8cee0c1cb49b8b569cf13b77adbc22ce972cd718167ac571ee41a446d13931f849d5636c729996b36ec84171fde260a4e01e9770cf687591a79833ae6473c51e12c0faab96ef093e6178d485526dbf775c94324c76bd4af2652e9036b1cc0d3df05c9232ee6eef7c4f46a6cf8ad160ad087aba6928bf156bf3ade1d135a965c4a2b283485737da67fe99227f2fbfb3baa74d75fe29122adfd82fcb9325b7ea826a52559654e76d494a374d9535facfcd4ab248e388c516bb8a0dc151b1557e418fd7c625c67ab1c50d6f05b97ba15c55631aeea44b21131aa93ead176f7bfd1418856e38782f004f272738827a64bb695f6b6a08cff8d1917be52a8851bd2bfd57d08bb0660e2ffc23792a419c2e9b006e3b0ad05044d99b97391fd2cceb86cf26acebe089a861340b04fd01e1baa70583032a30ea2e605217b80f7ee16d7e28be43d12bb2b67937dd26a8aeb84fef2f2d52f75232a400e7b279dcfc01953b0c46203477a50b5853e8f7b14b2ba31db742504bca6ed95b18846706c9fd85bf2a3a2642029b9ff2828bf0f7cbd96109a237961be8fe5c62f0fcc04c994f123f4a22f048403eac9308cfd2f2e4350c72e9ef83416ce973d3aa90d281a0275886dd3858b5869784ae58e257aa5af6d373dcc9cf520e364be748833adbb10daa6f6a334b51d27529d86ea5ce874562f9f93da45d244224b936fced3b658abbe7aa1f0d502fffce823f528ab47ea3540722f144733666229ae08cfc7e61247742ea4e3c180938ae7c7b81c1ee975c831f79672e044cefc49894c2ab73bba2580ac476cc0e56b6748b8edbb37a3f8dda7ffad4ec07abce7c4d10fc32e40d5a9db37f7b1e3a6eabedbefa9dd8eef189b92363d3391d384af26b7d47958d3d82845c9b668da5bcbd64058dc9e1c6d903ab5d2aa049d197116a11309a1abe9e5b3f9e7f1c623242b1d8089bc369d145a7070e8a9bdf543dbffe899ff9366009a3b0424a634681b530dad9ef23f136a10c7287068e57f3c2de45adf0a105c328e0035b97168f4c17aa4610b2e6e1a6ba0b71c06417b7a9497be4a009b19d7162adfd4d7b6490faf3782a920281333ad09b848ab5f4d15534b8c4e43dc9604b0630f8d349b2c80a98fde04693c31cbed7d460edfc0138dcc5d3974e682bbd555ac19625bf6e0607d8803391ec9c2dc41fc4e8bceae4f53507137324dd02914a067d52a577b812ddac4a34765c26a98839b3edb6290abff0c75991d6f8c1bd7540f38a7f25fec2f3539f894c938e1f3cf0ff1e6994d6a6ecc457a482f045ba712a85e8e31afd49c8e3480dc1c36d56ab2eceac6e5a847455d8ef4e3d45cd463c421bd1bce2ca57dd88f0e7ab3446cdfa8cb3914c240936f1738af7009e9131b240b59af55d7e38307b91fc8f00410cfdcfacaa341607a801afa63640091eb00b860700ea882878a8d9838f5597b970366be7d167ddebfe3c9253b5dbf7f30a67ee4d87dccb3c723c20200aa5fc036caf12811b19ce49c81ce328d7b24587353ecb99bafd327e33303cf447b36800d1bed8ee10df527d55c0d5f7506fb11cb133", 0x930) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x8883, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) 10.153394902s ago: executing program 2 (id=3256): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(r0, 0x0, 0x1800) r1 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x4002, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0xa, 0x6, 0xf, 0x29f, 0x103, 0x7f, 0x101, 0x6, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x400053, 0x9) socketpair$auto(0x7, 0x1, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ustat$auto(0x801, 0x0) r3 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r3, 0x7ab, 0x0) r4 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000140), r2) sendmsg$auto_NFC_CMD_ACTIVATE_TARGET(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r4, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x4}, @NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x40) write$auto(0xffffffffffffffff, 0x0, 0x81) ioctl$auto_RTC_RD_TIME(0xffffffffffffffff, 0x80247009, 0x0) unshare$auto(0x40000080) socket(0xa, 0x2, 0x3a) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x20000080) syz_clone3(&(0x7f0000000300)={0x28020400, 0x0, 0x0, 0x0, {0x35}, 0x0, 0x0, 0x0, 0x0}, 0x58) write$auto(0xffffffffffffffff, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) socket$nl_generic(0x10, 0x3, 0x10) 10.147164765s ago: executing program 2 (id=3263): r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev3\x00', 0x169000, 0x0) ioctl$auto(r0, 0xc040564b, r0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, r0, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon32\x00', 0x640, 0x0) ioctl$auto_MON_IOCX_GET(r1, 0x40189206, 0x0) r2 = openat$auto_percpu_stats_fops_(0xffffffffffffff9c, &(0x7f0000000240), 0x303101, 0x0) getsockopt$auto_SO_PEEK_OFF(r2, 0x8, 0x2a, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', &(0x7f00000001c0)=0x6) r3 = gettid() r4 = epoll_create$auto(0x2) epoll_pwait2$auto(r4, 0x0, 0x8, 0x0, 0x0, 0x8) kill$auto(r3, 0x11) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/controlC2\x00', 0x400, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/035/001\x00', 0x1102, 0x0) ioctl$auto_USBDEVFS_ALLOC_STREAMS(r6, 0x8008551c, &(0x7f0000000180)={0x7f3, 0x2}) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r7) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) clock_gettime$auto(0x0, 0x0) r8 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev3\x00', 0x169000, 0x0) ioctl$auto(r8, 0xc040564a, r8) ioctl$auto_FS_IOC_GETFSUUID(r6, 0x80111500, 0x5) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f000000c380)={0x60, 0x800000003, 0xffffe, 0x7fffffffefff, 0xfffffffffffffffa, 0x2000001, 0x7, 0xbfd, 0x2f, 0x2c, 0x3, 0x9}) 5.988575901s ago: executing program 3 (id=3257): mmap$auto(0x0, 0x2020009, 0x1000000000000006, 0xf8, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x11, 0x80003, 0x300) r0 = socket(0x10, 0x2, 0x4) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) getsockopt$auto(0x3, 0x200000000001, 0x19, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mlock$auto(0xfbe8, 0x4) mlock$auto(0x5, 0x10) mlock$auto(0x7c88, 0x7fff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41, 0x3}, 0x4}}, 0x6a) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0xffffffff}, 0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r3, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) write$auto(r0, &(0x7f0000000000)='-\x00', 0x2fb) sendmsg$auto_BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, 0x0, 0x20008800) read$auto(0x3, 0x0, 0x7fffffff) 4.971472762s ago: executing program 3 (id=3261): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/adsp1\x00', 0x80502, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x9, 0x1000000000e2, 0xf3, 0x401, 0x7fff) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/fail-nth\x00', 0x100, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/netdevsim/new_device\x00', 0x149b01, 0x0) writev$auto(r0, &(0x7f0000000200)={0x0, 0x9}, 0x7) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@xdp={0x2c, 0x0, 0x0, 0x32}, 0x54) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x8000, 0x0) socket(0x10, 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2000, 0x0) fsconfig$auto_SHMEM_HUGE_FORCE(0xffffffffffffffff, 0x7, &(0x7f0000000100)='@+\\!\x00', &(0x7f00000001c0)="5b0fdf8e7220ade733b697e361a312e8797cf9bc410c090dd180de688ae19ee0f7d3ce7f185fa1b9c9867d234fdb5c62c6e305f1df4ca134c6413371cb668566fc407fc2b99e953d74e9fe557dc0d6dd24b7fd497737dfcd44938915c5131197660e57624aba5b26b726415e50", 0xfffffffffffffffe) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000180)={0x0, 0x60, &(0x7f0000000040)={&(0x7f0000000480)={0x28, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000dc0), r3) sendmsg$auto_IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000003a40)={0x0, 0x0, &(0x7f0000003a00)={&(0x7f0000000e80)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="ffa727bd7000ccc8753d08000000"], 0x14}, 0x1, 0x0, 0x0, 0x20068041}, 0x40010) sendmsg$auto_IPVS_CMD_SET_DEST(r1, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x108, r4, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffc}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x80, 0x0, 0x0, @pid}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0xd6, 0x1, 0x0, 0x1, [@generic="93aa1eee5506dadf23557d300c166626b82ccb18821c72fdb323ad2ed191ca0b2159e7ec3f2eb9f8a9f061837a7fc47da351cba8ef296b51ec83984f5444a2f2a70d47ed031833e32b342ccd1300393e7769101ed7e0d6c0682dd372e5f4f7f062a8b385f652f358044ee9ff490dd116448eeaf8c032aa34a5c1a45f0535c226fe78bd9a776bda2674090beee62302e0ba791bf1c86a0f676aecbc18bc4044d36de3f1b4cc714e3685ae2b13ff0d06a46fccb5302b83a3e970eff9ac83491ddc8eb1d7e5c0b716616971541212c49b236b98"]}]}, 0x108}, 0x1, 0x0, 0x0, 0x2bb1f3f23ec0e74c}, 0x4) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r5, &(0x7f00000000c0)='/dev/audio1\x00', 0x100000a3d9) 3.922785206s ago: executing program 3 (id=3268): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2b, 0x4, 0x400) socket(0x11, 0x80003, 0x300) socket(0x1d, 0x2, 0x2) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) connect$auto(0x3, 0x0, 0x55) (async) r0 = socket(0x10, 0x3, 0x6) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async) write$auto(0x3, 0x0, 0x5c8) (async) close_range$auto(r0, 0xfffffffffffff000, 0x4000000000002) socket(0x10, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0x5c8) socket(0x1d, 0x2, 0x7) (async) socket(0x2, 0x1, 0x0) (async) socket(0x10, 0x2, 0x0) (async, rerun: 32) socket(0xa, 0x2, 0x73) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket(0x2, 0x1, 0x0) (async, rerun: 64) socket(0xa, 0x5, 0x0) (rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket(0x10, 0x2, 0x14) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r1], 0x1ac}}, 0x4040805) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) 3.368451132s ago: executing program 3 (id=3269): madvise$auto(0xf70, 0x8, 0x1) madvise$auto(0x1, 0x10, 0x6) r0 = socketpair$auto(0x4, 0x10, 0xca, &(0x7f0000000000)=0x9a) madvise$auto(0xbcdf, 0x7fff, 0x4000) madvise$auto(0x0, 0x8000000000000000, 0x2) madvise$auto(0x5140c885, 0xfffffffffffffffe, 0x2) madvise$auto(0x200000, 0x0, 0x8) r1 = openat$auto_ima_htable_violations_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000040), 0x200001, 0x0) mq_timedreceive$auto(r1, &(0x7f0000000080)='+#.\x00', 0x1ff, &(0x7f00000000c0)=0x4, &(0x7f0000000100)={0x1000, 0x4}) shmdt$auto(&(0x7f0000000140)='\x00') request_key$auto_KEY_SPEC_SESSION_KEYRING(&(0x7f0000000180)='+#.\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000200)='/sys/kernel/security/integrity/ima/violations\x00', 0xfffffffffffffffd) madvise$auto(0x3f, 0x40, 0x5) madvise$auto(0xbdc, 0xb2, 0x0) fadvise64$auto(r1, 0x2, 0x1, 0x8000) adjtimex$auto(&(0x7f0000000240)={0x4f, 0x0, 0xe30, 0x4, 0xfffffffffffffffc, 0xfffffffffffffffa, 0xd, 0x0, 0x7, 0xfffffffffffffbff, 0x4, {0xfe, 0x1}, 0x6, 0x3, 0x2, 0xfff, 0x0, 0x7, 0x5, 0x80000000, 0x2, 0x3, 0x54}) shmdt$auto(&(0x7f0000000340)='\x00') r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000003c0), r0) sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x50, r2, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_DISABLE_EHT={0x4}, @NL80211_ATTR_FILS_ERP_RRK={0x17, 0xfc, "0a34e87051d589e9b39c1fd25340ece62f52c2"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0xdc}, @NL80211_ATTR_FILS_ERP_USERNAME={0x7, 0xf9, "c2d948"}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, "29a4f9b9e8404ff923159927"}]}, 0x50}, 0x1, 0x0, 0x0, 0x10008080}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'batadv_slave_0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, 0x0, 0x21, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x401}, @BATADV_ATTR_BANDWIDTH_UP={0x8, 0x1b, 0xec8d}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ALGO_NAME={0x5, 0x2, '\x00'}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xa0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20042080}, 0x48880) madvise$auto(0x1529b770, 0x4, 0x9) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/security/tomoyo/exception_policy\x00', 0xa0040, 0x0) r4 = pidfd_getfd$auto(r1, r1, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000680)='/proc/self/net/igmp\x00', 0x300, 0x0) request_key$auto_KEY_SPEC_SESSION_KEYRING(&(0x7f00000006c0)='\x00', &(0x7f0000000700)='batadv_slave_0\x00', &(0x7f0000000740)='\x00', 0xfffffffffffffffd) pread64$auto(r4, &(0x7f0000000780)='\x00', 0x6, 0x8) setsockopt$auto_SO_RCVLOWAT(r1, 0x4, 0x12, &(0x7f00000007c0)='batadv_slave_0\x00', 0x1) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000840), r0) sendmsg$auto_NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000001980)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001940)={&(0x7f0000000880)={0x10a0, r5, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x3}, @NL80211_ATTR_SUPPORTED_SELECTORS={0x80, 0x14e, "cb1388a1eea24fc276d8a3be45f6a34a94bf96d78530b0fb0740c2a6634dff004800a50bb0bf611e7b9c22c116878913870123b03f2951006683764c14b3d50efc6ecf9ceb5a6b99b13b540f04f6e744e57721397a038749855918d82797c66b2a2860900eb5a5db896befef11a104a224f4ec4f7b9c0cff4fd1e787"}, @NL80211_ATTR_MAC_MASK={0x1004, 0xd7, "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"}]}, 0x10a0}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) 3.270791166s ago: executing program 3 (id=3271): set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7ffffffffffffffb, 0x3) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) r0 = openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_clock\x00', 0x4140, 0x0) mmap$auto(0xfffffffffffffff8, 0x200400008, 0x9, 0x10810, r0, 0x8000) mmap$auto(0x0, 0x400008, 0x4, 0xa910, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x6, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) socket(0xa, 0x3, 0x3b) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x0, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r1, 0x4c01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_stats_fops_2(0xffffffffffffff9c, &(0x7f000000b000), 0x80, 0x0) pread64$auto(r2, &(0x7f000000b040)='\x00', 0x7, 0x6) connect$auto(0x3, 0x0, 0x54) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000001040), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_NEWPDP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100e6000000fddbdf25000000a3020001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x14) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x181b80, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r6, r6, 0x0, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/netdevsim/netdevsim3/hwstats/l3/disable_ifindex\x00', 0x1242, 0x0) 2.953166203s ago: executing program 1 (id=3272): r0 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mmap$auto(0x0, 0xb9f, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto(r1, 0x8, 0x0, 0x0, 0x0) ioctl$auto_TIOCSTI2(r1, 0x5412, &(0x7f0000000100)="f8095b0b97b82e115c4386e4467a0b69c08188325d6587c1eb3ae033c08d2648a194aee87ed5871d43979159018038633b2719486f7ff3e1daf5c405041c07e76ee1d9c4b1ea594f1d71e04d61b565b205ad010ac5ba86e8527e") prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/zram0/disksize\x00', 0x2202, 0x0) r2 = prctl$auto_SECCOMP_MODE_FILTER(0x6, 0x2, 0x0, 0x0, 0xffffffffffffff81) mmap$auto(0x40000000000000, 0xa, 0x200, 0x9b76, r2, 0x8000) write$auto(r0, 0x0, 0x8) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r3 = socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x0, 0x1, 0x4) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), r3) iopl$auto(0x3) clone$auto(0x21002, 0xfffffffffffffffb, 0xfffffffffffffffe, 0xfffffffffffffffd, 0xff) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x800, 0x0) read$auto(r4, 0x0, 0x7) ioctl$auto_BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000f80)=[{0x3ff, 0x3, 0xfffffffffffffefa}, {0x805, 0x5, 0x2}, {0x7, 0x0, 0x2}]) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) ioctl$auto_X86_IOC_RDMSR_REGS(0xffffffffffffffff, 0xc02063a0, &(0x7f0000000080)=[0x3, 0x0, 0x0, 0x35, 0x2, 0x4543, 0x2, 0x6902351d]) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) write$auto(0x3, 0x0, 0xfffffdef) io_destroy$auto(0x70f) 2.092310398s ago: executing program 0 (id=3273): arch_prctl$auto_ARCH_GET_FS(0x1003, 0xffffffffffffce85) arch_prctl$auto_ARCH_GET_FS(0x1003, 0x200) arch_prctl$auto_ARCH_GET_FS(0x1003, 0x8000000000000000) arch_prctl$auto_ARCH_GET_FS(0x1003, 0x8) arch_prctl$auto_ARCH_GET_FS(0x1003, 0xbb11) arch_prctl$auto_ARCH_GET_FS(0x1003, 0x3) arch_prctl$auto_ARCH_GET_FS(0x1003, 0x100000000) arch_prctl$auto_ARCH_GET_FS(0x1003, 0x7) arch_prctl$auto_ARCH_GET_FS(0x1003, 0x3) arch_prctl$auto_ARCH_GET_FS(0x1003, 0x1000) arch_prctl$auto_ARCH_GET_FS(0x1003, 0xe8) arch_prctl$auto_ARCH_GET_FS(0x1003, 0x2) arch_prctl$auto_ARCH_GET_FS(0x1003, 0xfffffffffffff000) arch_prctl$auto_ARCH_GET_FS(0x1003, 0x0) arch_prctl$auto_ARCH_GET_FS(0x1003, 0x6) arch_prctl$auto_ARCH_GET_FS(0x1003, 0xf9eb) arch_prctl$auto_ARCH_GET_FS(0x1003, 0x3b) arch_prctl$auto_ARCH_GET_FS(0x1003, 0x8) arch_prctl$auto_ARCH_GET_FS(0x1003, 0x9) arch_prctl$auto_ARCH_GET_FS(0x1003, 0x7fff) arch_prctl$auto_ARCH_GET_FS(0x1003, 0x8) r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC0D0c\x00', 0x2a00, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_REFINE2(r0, 0xc2604110, &(0x7f0000000040)={0x6, [{[0x6, 0x10, 0xffff, 0xff, 0x2, 0x176c, 0x9, 0x63e]}, {[0x1, 0x37f, 0x7, 0x5, 0x4afe, 0x0, 0x5, 0x591]}, {[0x8, 0x40, 0x7, 0x2bc, 0xffff8001, 0x7ff, 0xfffffffe, 0x7dd5]}], [{[0x0, 0x0, 0x7, 0x4, 0x5, 0xffffffff, 0x473, 0x7]}, {[0x3, 0x41, 0x8217, 0x7, 0x0, 0x1, 0x6, 0x5]}, {[0x2, 0x4101, 0x1, 0x4, 0x0, 0x3, 0xb15, 0xd]}, {[0x1, 0x8001, 0x9, 0x2, 0x10000, 0x8, 0x6, 0xe5]}, {[0x0, 0xfff, 0x1, 0xb18f, 0x10001, 0xffffbd3e, 0x0, 0xd]}], [{0x7, 0x8, 0x1, 0x1}, {0xffffff00, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x3, 0x7a, 0x0, 0x1, 0x1}, {0x7, 0x4, 0x0, 0x0, 0x1}, {0x9, 0x10, 0x0, 0x1, 0x0, 0x1}, {0x7, 0x7, 0x0, 0x0, 0x0, 0x1}, {0x1, 0xffffbfd2, 0x1, 0x0, 0x1, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1, 0x1}, {0x7, 0xdfd, 0x1, 0x1, 0x1}, {0x7, 0x36b, 0x1, 0x0, 0x1}, {0x1, 0x2, 0x0, 0x1, 0x1}, {0x2, 0x101, 0x1, 0x0, 0x1, 0x1}], [{0xf, 0x8001, 0x1}, {0x8, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x1ff, 0x1, 0x0, 0x1, 0x1}, {0x3, 0xfffffffb}, {0x101, 0x8, 0x0, 0x1}, {0x7, 0xf6f16115, 0x1, 0x1}, {0x7, 0x44f, 0x1, 0x0, 0x0, 0x1}, {0x100, 0x3, 0x1}, {0x5, 0x5de, 0x0, 0x1, 0x1, 0x1}], 0x0, 0x7, 0x7, 0x80000001, 0xfffffffa, 0x1, 0x1, "b3c6542e10ba82c91958d3d4858e6133", "f19cdb1f2d87c940221b4092876cbaa74244d3b27730f52e74f2a1a85c8460aa52af892ac9bbc397b0521710c7375b9a"}) arch_prctl$auto_ARCH_GET_FS(0x1003, 0xf) arch_prctl$auto_ARCH_GET_FS(0x1003, 0x9) arch_prctl$auto_ARCH_GET_FS(0x1003, 0xfffffffffffffff8) arch_prctl$auto_ARCH_GET_FS(0x1003, 0x0) arch_prctl$auto_ARCH_GET_FS(0x1003, 0x4c99) arch_prctl$auto_ARCH_GET_FS(0x1003, 0xbe4) arch_prctl$auto_ARCH_GET_FS(0x1003, 0xe) 1.976982267s ago: executing program 1 (id=3274): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) (async) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) select$auto(0xe2, &(0x7f0000000000)={[0xf8a9, 0x9, 0x56e7095b, 0x7, 0x3, 0x1, 0x2, 0x8b, 0x1, 0xec0a, 0x5, 0x3, 0x77a, 0x7, 0x6, 0x6]}, &(0x7f00000000c0)={[0x6, 0x7fffffffffffffff, 0x7, 0x8000000000000000, 0x7, 0x2, 0x4f, 0xfffffffffffffff7, 0x7, 0x1, 0x8, 0x6, 0x100000000, 0xc0, 0x9, 0x7fff]}, &(0x7f0000000140)={[0xfffffffffffffff7, 0x6, 0x81, 0x4, 0xfff, 0x7, 0x5, 0x0, 0x0, 0x7, 0x8, 0x1, 0x2, 0x3, 0xffffffff, 0x4]}, &(0x7f00000001c0)={0x3, 0x7}) mmap$auto(0x0, 0xffff, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 1.830455315s ago: executing program 0 (id=3275): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) clone$auto(0x1ff00, 0x0, &(0x7f0000002040)=0x7, 0x0, 0x9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1\x00', 0x20342, 0x0) 1.587341775s ago: executing program 1 (id=3276): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) (async) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) close_range$auto(0x0, 0xe903, 0x2) r0 = socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) setsockopt$auto(0x2, 0x1, 0x50, &(0x7f0000000000)='\x00', 0x40) socket(0x2, 0x2, 0x0) (async) socket(0x2, 0x2, 0x0) r1 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) io_uring_setup$auto(0x6, 0x0) (async) r2 = io_uring_setup$auto(0x6, 0x0) socket(0x28, 0x2, 0x1) (async) r3 = socket(0x28, 0x2, 0x1) r4 = openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) mmap$auto(0x28000000000000, 0x200000001180, 0x8, 0x14, r2, 0x300000000002) process_vm_readv$auto(0x0, 0x0, 0x3, 0x0, 0x7fffffff, 0x0) read$auto(r4, &(0x7f0000000080)='[\x00', 0x2e) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x397841, 0x0) (async) r5 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x397841, 0x0) setsockopt$auto_SO_TIMESTAMPNS_NEW(r3, 0x7fffffff, 0x40, &(0x7f00000000c0)='/dev/bus/usb/035/001\x00', 0xfff) fcntl$auto_F_GETOWN_EX(r5, 0x10, 0x7f) mmap$auto(0x800000, 0x400008, 0xdf, 0x9b72, r1, 0x7f) mmap$auto(0x3, 0x6, 0x2000000003, 0xeb1, r0, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000880)='/dev/input/event0\x00', 0x40100, 0x0) (async) r6 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000880)='/dev/input/event0\x00', 0x40100, 0x0) ioctl$auto_EVIOCGMASK(r6, 0x80104592, &(0x7f0000000000)={0x2000, 0x800004, 0x9}) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000280)='/dev/input/event0\x00', 0x0, 0x0) (async) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000280)='/dev/input/event0\x00', 0x0, 0x0) io_uring_setup$auto(0x2008, 0x0) (async) io_uring_setup$auto(0x2008, 0x0) ioctl$auto_FS_IOC_GETFSUUID(0xffffffffffffffff, 0x80111500, 0x5) getsockopt$auto_SO_MAX_PACING_RATE(0xffffffffffffffff, 0xffffffff, 0x2f, &(0x7f0000000000)='[\x00', &(0x7f0000000040)=0x74) 1.578916856s ago: executing program 0 (id=3277): r0 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, 0x0, 0x400, 0x0) setsockopt$auto(0x400000000000003, 0x2d, 0x1c, 0x0, 0x3) syz_genetlink_get_family_id$auto_nlctrl(0x0, 0xffffffffffffffff) r1 = socket(0x10, 0x2, 0xc) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x24, r2, 0x10, 0x70bd2c, 0x25dfdbfa, {0xa, 0x0, 0xa00}, [@CTRL_ATTR_FAMILY_NAME={0x0, 0x2, '%/\x00\xe2\xa8\\A\xe7Z\x02q[\xcb\xc0\xb0N\\\xdc\xdf(\xff\xfee\xc3\x17py\x9f\xda\xb88\xaa\xf6q*\x82\xe6(\xc9\xe6B\x9aJ82\v-i(c\x92{\xd7D\xb4\xf7\xb4\t\xb2\x98b\xd3%vu\xd4\xfd\t\xd7J\x83\x19)\xb1\x00[\xdd(\xef?\xc5\xae(\x84\xefjx\xfe\xdb\xeb\xbceaAw\x1eW\x12Bh\xc3y2\xc9\x0e\xc9\x99#\x92j\x97\xbbDOi\x03\xa4\x11\x02F0x0, @raw=0xd}) ioctl$auto_TUNGETVNETLE2(0xffffffffffffffff, 0x800454dd, &(0x7f0000000180)=0x4) getsockopt$auto_SO_ZEROCOPY(r3, 0x1, 0x3c, &(0x7f0000005b00)=')\x00', &(0x7f0000005b40)=0x7ff) socket(0xa, 0x3, 0xff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/workqueue/scsi_tmf_0/power/autosuspend_delay_ms\x00', 0x8000, 0x0) openat$auto_force_wakeup_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/hci8/force_wakeup\x00', 0x20000, 0x0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/ib_srp/parameters/reconnect_delay\x00', 0x20681, 0x0) sendmsg$auto_NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000740)={0x3b4, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_CENTER_FREQ1_OFFSET={0x8, 0x123, 0x7}, @NL80211_ATTR_FILS_NONCES={0xc0, 0xf3, "2a51e9fa8deca328142dc11ff52efeffb71f403cf8f095b283ca0a5a159f4d702dbce3547cf41c8dff11f6199df88514e8106d5518a4a5e73c6c11f76dee56764a13fd01d8fbf446c663df98f21132a3f4731ef048e289eb1440993640f86c70cc395474c8840c80dc165cc8fe18caa2ed46d1d9f75cd1fce819e32293fd0ed8d2d7e8909813a8e4a1dc4b3c6e0d405619383d36da82174e893a6585acbe8faf855558d4d57a0b31719ed5e72f424b39b586f5399f9cd83035c49615"}, @NL80211_ATTR_MAC_HINT={0x32, 0xc8, "11f83b7b05dc04a67b740dc70d017450e696e551c1189ee11a685b11d89db8c43ce09276643b4f1a2861626cf853"}, @NL80211_ATTR_TID_CONFIG={0x54, 0x11d, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x9}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x9}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0xa1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x9}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffff7}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x81}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x2}]}]}, @NL80211_ATTR_SSID={0x8, 0x34, "2b108731"}, @NL80211_ATTR_SCHED_SCAN_MATCH={0xd3, 0x84, 0x0, 0x1, [@typed={0x8, 0x1c, 0x0, 0x0, @pid=r6}, @generic="ec2ebea63658192ef90af4f7e98f9fc2d00fcd75fd57fdb3bd67432428c58d6b36818bb86b29c5cadf8ed025a74bbecba97aef89b8a01bbbe5e6567dcc4be87b36db4d8dffb8b22ae0d14614b4b8a0273cff806d86831a3be7f95e9dcdfdb303f6e0e57a4806a3f6bfa8bfc56a7a3e737a960bdd513547b0c2d775c37373e645088c2b5089cebac2c44a09df9e77d45f0191e49dba3b16dc73fd5299d833cd33686833bbc6b0c4941e38fbaed8df7f7d75377e6d7efbd807e2362577e86b10d1667f0246c82a5a"]}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4}, @NL80211_ATTR_EMA_RNR_ELEMS={0x169, 0x145, 0x0, 0x1, [@typed={0x6, 0xb2, 0x0, 0x0, @str='{\x00'}, @generic="1c259e", @nested={0x28, 0x59, 0x0, 0x1, [@typed={0x14, 0x4, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @nested={0x4, 0xb}, @typed={0xc, 0xf5, 0x0, 0x0, @u64=0xf973}]}, @generic="d06544fc24bad431996124ab7c5b69bf52adc16e89d5aae0ea1326c9b10c8c871e3bca45505769574c37158b1883551727a2200c10899d1055e2a2018391f20dbee2ee35e1a598a5d22c21e95647f90ff7e6f69fec918cfcb5fb90890fc5f73617304999ed7e17b7a7611380cb19f3784a40437e3b500595c628f93b16a417d8a20e4bd55439a9380ee4a7c98dbec5096e1e91942aa0971b5652e7c890d375c0a773050a5ecf4c2081a864a83423ae4057f2028efcacd21626af65f93bf239e49cfee43422cbbad655c06e6e642b42372a5a3f744ee64fe1c6fa0b56c85f4d4e71957f42f0b9192eeae16ab446b7300ce68e494596a160b166b258b6416d", @nested={0x34, 0x151, 0x0, 0x1, [@typed={0x14, 0x85, 0x0, 0x0, @ipv6=@private2}, @typed={0x8, 0xb7, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x24}}, @typed={0x14, 0x5, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}]}]}, 0x3b4}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) write$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f00000000c0)='-7', 0x2) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r8 = socket(0x10, 0x4, 0xffffffc0) r9 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r8, 0x0, 0xc000) write$auto(r9, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) write$auto(0xffffffffffffffff, &(0x7f00000001c0)='c', 0x5) socket(0x10, 0x2, 0xffffffff) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/bond_slave_1/disable_policy\x00', 0x202, 0x0) 662.797361ms ago: executing program 0 (id=3279): r0 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) setsockopt$auto(0x3, 0x10000000084, 0x7c, 0x0, 0x7) openat$auto_severities_coverage_fops_severity(0xffffffffffffff9c, &(0x7f00000000c0), 0x60042, 0x0) mkdir$auto(&(0x7f0000000100)='./file0\x00', 0x5) r1 = getsockopt$auto(r0, 0x84, 0x7c, 0x0, &(0x7f0000000000)=0x7ffe) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) mremap$auto(0x1ff000, 0xff, 0x843, 0x3, 0xfffff000) mmap$auto(0x6, 0x5, 0x0, 0x13, r1, 0xffffffff) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0xa, 0x1, 0x84) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000040)='/proc/version\x00', 0x28c40, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyr0\x00', 0x60540, 0x0) socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe2$auto(0x0, 0x0) io_uring_setup$auto(0x7, 0x0) socketpair$auto(0x1, 0x5, 0x100000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyc4\x00', 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa0102, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto(0x3, 0x540b, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) 370.314188ms ago: executing program 0 (id=3280): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x600c00, 0x0) socket(0x18, 0xa, 0x1) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) 275.918661ms ago: executing program 1 (id=3281): socket(0x2, 0x5, 0x0) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x80) (async) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x123042, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto_SO_SNDTIMEO_NEW(r0, 0x1, 0x43, &(0x7f0000000540)='veth1_to_batadv\x00', 0x5) (async) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event2\x00', 0x20881, 0x0) (async) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6\x00\x00\x00', 0x0, 0x0) (async) getcwd$auto(0x0, 0xffffffffffffffff) (async) fspick$auto(0xffffffffffffffff, 0x0, 0x9) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000840)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB, @ANYRESOCT, @ANYRESOCT, @ANYRES16, @ANYRES64=r1, @ANYRES16], 0xb4}}, 0x454) (async) write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0xfff) (async) write$auto(r1, 0x0, 0x98c7) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) rt_sigsuspend$auto(0x0, 0x8) (async) madvise$auto(0x0, 0x4, 0x15) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/rt_cache\x00', 0x2000, 0x0) (async) mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram2\x00', 0x141740, 0x0) fstat$auto(r2, 0x0) r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x4610, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d7) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) (async) socket(0x2, 0x80000, 0x84) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0xc0) 165.521995ms ago: executing program 0 (id=3282): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001140)='/sys/devices/virtual/block/zram0/comp_algorithm\x00', 0x20b42, 0x0) sendfile$auto(r0, 0x3, 0x0, 0x7) r1 = socket(0x1d, 0x2, 0x2) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/oom_adj\x00', 0x142, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match\x00', 0x20080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000280)=""/175, 0xaf) r5 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_UPD_RXSC(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, r5, 0x201, 0x70bd2a, 0x25dfdbfe, {}, [@MACSEC_ATTR_RXSC_CONFIG={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@multicast2}]}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0x28}}, 0x48010) r6 = socket$nl_generic(0x10, 0x3, 0x10) poll$auto(&(0x7f0000003640)={r6, 0x7, 0x6}, 0x7, 0x3) r8 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003900), r6) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000004c0)={'team_slave_0\x00', 0x0}) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r7, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000003980)={&(0x7f0000000500)={0x1c, r8, 0x301, 0x70bd2e, 0x25dfdbfd, {}, [@NETDEV_A_QUEUE_IFINDEX={0x8, 0x2, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc4) sendmsg$auto_MACSEC_CMD_DEL_RXSC(r1, &(0x7f00000009c0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000001180)={0x7fc, r5, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@MACSEC_ATTR_OFFLOAD={0x715, 0x9, 0x0, 0x1, [@generic="01a8a2952b1099f3130b49db15108bb93a033fa84a36e996e3215fe55086b1dd4678fd2c4034680aa11f20b88f35578327654dfbecc80e6a19a5ae7c990214ceb39dd68e3bd927a8f466351e03823471c0f76cf216a946439425c055915f47538bab6398d431e2ae199312861b299a1fbfed1b35ee3cfc211b9050c66a846979f7c7d63741382c47adfa94ae4134dbc7debc8fbe4832f29ac37bfdd439d8c7041f81e6b4eda1df5285b25fd17a60df4b57a2a072", @typed={0xc, 0x9a, 0x0, 0x0, @u64}, @generic="b1ec681343139ebbc56ab68f79945f4789a5ad02a3d157f3501104fee67002d401083d6fdd493672b5b0882b07dff507d5ef10fdb98223a34a04dea24829cbee1fa8e1597c5657a4708ab3f905c8034b2d239865ede152a1c6c7f0eb0c", @generic="3f56b0d3f2bd777d4604c591c73454f2f369e294b7372f40603f6672a450286910907fdc2a2239bb2a1cbcfc33f1da5ec78b3a7e03e10febd7699a7f950d9c01c968355d77ecac91b1034215db38a3cdb30af727af2db5688cf739fe4b2f19bf381f409756a98fe60b5ed108de998d4772cb3fe1244a867e8cda9c0b43d4eb2f7b1fbfb573e8935913040248c6334545bb1d808aebd18d92aed1b2afb52effb5be5a564a72676df0965e6ace37606bf597b52b115d7afc359ee7ca9bdf00463c8e02a3d942d73a61946f31bd8d1cc785fc6655", @generic="57a08b5b5f04c409f3c3ba73c69f3992aacc97b03afda6ca5e3dae1614d46f259c9b38954b098b640f57d7d98630391ec301ba5ad97606358943922c72e6c22fb99998d7558cfb4b9eceeaba401ad5ef6377ed5bd415b4d92cef47cd1f3d245c15d47fa51a91360bb9df7d4971ef6ba5c0617189c86cfaf6ede8586b08a82e0b9191daaf0686ba51b92e03cd43bcd2f7ac66ea5f82e5b6ed33c38c2dbd50e672cde6d7ae55", @nested={0xd7, 0x112, 0x0, 0x1, [@generic="6c95759bc183d83871a13d949a75d49d98c53ad8ad035acc908e049ca97c820cb2f26e475bd535e8fecc0ce215b184323da42bfdebef50501b0d21c4b6a7e5d49040bed2d6fc8c6504ec4878117e65365355ac155c442e617f8556e936057b622fcfcb4bebe498c5c6a5786fb91c733616fced8bd289dce2280f29162a57e70ee16206ee24c59deaac99fc85dc2a0190111312bf58c0e609098b4bcf9c4f2ff8a16e4921025c6bf05374bdfbb8f99df993ae7cccfe1c3e80c74b9729269c947c01855f329f1f593957e70215ae5fd0", @nested={0x4, 0x130}]}, @nested={0x25b, 0xc3, 0x0, 0x1, [@generic="7b94c7ceddfa7f0f423585da05", @generic="c494f670ff57175be5cacf39dd55d869b9d1c3a59563df7544b4389b260cb56858ef18c75ff3d4a574d10092edab76d8fa0efbd87a4e8f187e947cd387a980c03d00ed360d11c020b27389e8054a75fb8f722702a0b4ca49dcbf3a49f51941cb120354fe7fb8439f2ae0443c74590e8ff00ae5df6f3de43420a028d6b24c6a7cb2cd1d5a9f4ffa810bed57a1d52712243ae2dabb86ea6fa9641c73f2842dd4f38ad40335a4f9c92f6aee9de5694615c817d85f69cc4b9c580dffe43f7b08a4f1e282418cbc1d33ffc37d", @typed={0x8, 0x97, 0x0, 0x0, @pid}, @nested={0x8, 0x96, 0x0, 0x1, [@nested={0x4, 0x97}]}, @generic="8f6845b5f6958f799dc8a4c631f84866461a40b1b10c72b1a6a06b0bb235f26b4e647bcd6e260573e102fb30", @nested={0x13a, 0x5e, 0x0, 0x1, [@typed={0x6, 0x93, 0x0, 0x0, @str='%\x00'}, @generic="2fb45e6819a2a3e628fa5f3e4f035ebf176e9a6eb01ab35a1f619b4f5084cc9539d53154c5e06227a6159bd1882f21fbab65bdb7f03c9f679888db631316acdf36a45ce17e63500b038c07", @generic="f5b0c56a02285d59503ba0a63e6c14185568d09155a635d80d82e4ab1235aff5128774b453889fa8800d42cd017554288ea979ba2922c94fbfeabeeabfdf6bdbdc1719658c38fc93cf0e90dbbe5d8644ed191d3ae3569a4c69bf168f0acc973ef3f8239221abd4018c5f0cd055adbbb85418aed08a47d4a8f5c975cc35b10ca2ff11b62507bc575db685dc733bd4b31ab5a1bd56feeb6deb9dce0a", @generic="858ca3900a41f023a0a2713a2731a3b4ebd7172a7b2ad61d65742a642f1a9b35e02cfa0bd1", @generic="3de36637dc99f9b656aae8298f514cef461ad4851dc5f6fe2ec5c981cdd4fb3d0a2e39"]}, @typed={0x8, 0xbe, 0x0, 0x0, @fd=r6}]}, @generic="2736de5744530b09e773202ef80394ab88a74a3bd0010113aa888eba44ff101a579175393a0972f11262802f4ac87dee893cfe994398fbc459a937743fe9a846a7044ea736ec4d796b5b14194903fd06ca89dd978ed961a5dbf26c521d1b5bdd19d17795800b072e8566f98f665aae5e227873a63aa2d77421d608f5dda07dfaa112987a84ffcfb92c83e027ad5a575a0aea47d7c0c4542887d2e4448049d08a04c5e3273a9ba05e1f023cf2a682447ce5dcae8e05f1a008f8f486992dcaa926c6655eb40de7839bf18c47c52b5eb6c9a4e7", @generic="62acfd96c231183a1aab3c2b8469912ec18945e87d93bf01e102d77c0ae5615b58b1ef002a1f3f21afea2c3c1959dc2e67d80137ea577a25687a66860062ce9f1173492e4488f4ae9e1e26e1946129b81973f07e4f48ef2ccdc77c144e7e5e92a6121a1f1df41209f9cf03a8daf52d9d11dcb8965155"]}, @MACSEC_ATTR_OFFLOAD={0x5c, 0x9, 0x0, 0x1, [@nested={0x49, 0x13b, 0x0, 0x1, [@generic="fbf0f758b375a792535e237f0724aa5f02c8b8dddeb6524219d214a57d0322ffbec93e07b2b9ee0802", @nested={0x4, 0x13c}, @typed={0x14, 0x12e, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @nested={0x4, 0x151}]}, @typed={0xc, 0xb2, 0x0, 0x0, @u64=0x1}]}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r9}, @MACSEC_ATTR_RXSC_CONFIG={0x6a, 0x2, 0x0, 0x1, [@generic="c464b08e2ee5bf6b74e1b4b0aa398e5ad70f000afc48580ac5b5a335626a442bf5a20b87dcf1506bbb45e34d471af8db677d53afbea81856e808e978ffc40b58b877c315db699d32ec3997fe63786e3b0d6fc9159175df9dd90a2265ee1832234b37c3c1bc19"]}]}, 0x7fc}}, 0x80) read$auto(r2, 0x0, 0x4) r10 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r10, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x100842, 0x0) close_range$auto(0x2, 0x8, 0x0) r11 = open(&(0x7f00000000c0)='./file0\x00', 0x161342, 0x130) bind$auto(r11, &(0x7f0000000040)=@in={0x2, 0x4e20, @remote}, 0x6a) syz_clone3(&(0x7f00000007c0)={0x48000, &(0x7f0000000100)=0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180), {0x1d}, &(0x7f00000001c0)=""/38, 0x26, &(0x7f0000000380)=""/2, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x7, {r11}}, 0x58) process_madvise$auto_MADV_KEEPONFORK(r12, &(0x7f0000000900)={&(0x7f0000000840)="604c9ae31bd26aa9d8398e87aef8e402c7a82cb2d21086f37bf135e3cddbc10290695f070f934098bac4603d59c5ef7bc5dd2db00b3b8d015290ed3c11e0cdfbb4f1ee3b77a2e640bbaaa685737a437447dfdf8eaee18735c9f1a1dacf0536db545a72233579db0574e380c0194da3f3c6d03eb4d2026f2235999ccbb4c1612e7df80fda1af5120f36db61ad574a6ab0ac26a122b08f9f91e8e65ffb526fdb9ec07187a5fcacb49644be8fbdce1121df53308c4bde5b18e10fe785", 0x9}, 0x6, 0x13, 0x200) ioctl$auto_USB_RAW_IOCTL_EPS_INFO(r11, 0x83c0550b, &(0x7f00000003c0)={[{"41ac7a2c9c03bbea1b9bc5af2371b761", 0xfffffff8, {0x1, 0x0, 0x0, 0x1}, {0x8000, 0x9, 0xf7}}, {"4be7c8c55265bf03db97f91e9b68710c", 0x1, {0x1, 0x1, 0x0, 0x1}, {0x3, 0x1, 0x5}}, {"58080ca78179a10bf038e648207afcec", 0x5e, {0x0, 0x1, 0x0, 0x0, 0x1}, {0x92dd, 0x1, 0x4}}, {"fe501a9c74d51595e85d19cbebb5b253", 0x5, {0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x4, 0x400, 0x2}}, {"f294e47bfbb9be061da59906e540cef4", 0x2, {0x0, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x88e6, 0x2, 0xa9}}, {"6ebc301bb2cb50e5577e65b750978828", 0x79c, {0x0, 0x1, 0x1, 0x1, 0x1}, {0xb5, 0x3}}, {"9ffb6735ad4e54dbbcaac1fa47bfd810", 0xfff, {0x1, 0x1, 0x1, 0x0, 0x1}, {0x2, 0xfff9, 0x8}}, {"c65743ffdf18cca8ec28d194ca7153ce", 0xd2be, {0x0, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x8, 0x3, 0x56ae}}, {"2e0620e18badb00192969b6edf4afb5f", 0x5, {0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x800, 0x3, 0x62f8}}, {"cce8b976e17656af15027d598ffc0b6b", 0x3, {0x0, 0x1}, {0x0, 0x0, 0xd6d8}}, {"0ace1798e2b1d8104e3f2044d3a38494", 0x400000, {0x1, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x1c09, 0x0, 0x3}}, {"ed5773d5d50c55e0a5c34d914ed270fd", 0x1, {0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x5, 0xd, 0x9}}, {"29600df0ad63e08ca650c60b13dc4277", 0x1e8ecf6e, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x8, 0x8, 0x336}}, {"5edf301ef6bc0b881dad5f6c1933bc27", 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xd679, 0xfff7, 0x1c}}, {"dcbdabdf9c8ef848be4992fe3af38b71", 0xd060, {0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x7, 0x2, 0x2}}, {"8e17df0461a544d461082dc093b551b7", 0xd3f7, {0x0, 0x0, 0x1}, {0xfffb, 0x3, 0x7}}, {"b700ff6a1d72bfa5ee4ccf556ba4da52", 0x3, {0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x0, 0x1fb, 0xa1}}, {"813b0a656f76f748329b7eb5792d686a", 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x2, 0x0, 0x7}}, {"05cc9723d17dcd8b9e45182935e09ecf", 0x8, {0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x3, 0x0, 0xcf}}, {"d359d8a9959abc34db7484e500", 0x10, {0x0, 0x0, 0x0, 0x1}, {0x5, 0x1, 0x8}}, {"aaee063b6a38948bc5d79f01682954db", 0xffff0359, {0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x2, 0x5, 0x8}}, {"951bb7dcc772bc0ef0ffd9c22930bafe", 0x3, {0x0, 0x0, 0x0, 0x1, 0x1}, {0x5, 0x5, 0x7}}, {"8a62bacb6ba1803e20d1040551bc7ccc", 0x4, {0x1, 0x0, 0x1}, {0x4, 0x7, 0x8}}, {"ff45cd4447424c41c48ca63ab7e851e0", 0x73b, {0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x5, 0x7, 0x6}}, {"c55e0da5e379973f600927158222aba0", 0x634, {0x1, 0x0, 0x1, 0x1, 0x1, 0x1}, {0xca7, 0xfffe, 0x6}}, {"4211db8b4a678a000000009100", 0x0, {0x1}, {0xf, 0x1, 0x8b8}}, {"9106000000000000acf0b72a76cb4f88", 0x40000003, {0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0xb, 0x8, 0x1ff}}, {"f2654e62c46c7ec3336d71c0b9d8e9c2", 0x400, {0x0, 0x0, 0x0, 0x0, 0x1}, {0xfa17, 0x8, 0x9}}, {"c852a485f25cc9c71c8cb127a6ba8776", 0x9, {0x0, 0x1}, {0x3, 0xf7, 0x8}}, {"60d20d0000238e0300000000000000a0", 0xf, {0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0xfffb, 0xf, 0x8}}]}) read$auto_mon_fops_binary_mon_bin(r11, &(0x7f0000000000)=""/198, 0xc6) ioctl$auto_USBDEVFS_DISCONNECT_CLAIM(r11, 0x8108551b, &(0x7f0000000240)={0x9, 0x1, "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"}) 101.052829ms ago: executing program 1 (id=3283): socket(0x2, 0x1, 0x106) setsockopt$auto(0x400000000000003, 0x29, 0xca, 0x0, 0x565) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x200, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0xa, 0x1, 0x84) getsockopt$auto(r1, 0x0, 0x34, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r2 = syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f0000000040), r0) shmctl$auto_SHM_UNLOCK(0x4, 0xc, &(0x7f0000000240)={{0x6, 0xee00, 0xee00, 0xf, 0x2, 0x9b, 0x4}, 0x0, 0x0, 0x5, 0x2, @raw=0x6, @inferred=0xffffffffffffffff, 0x7, 0x0, &(0x7f0000000080)="499a97f172bdf7e0ce4d3af6c440e37ad9f6aa05075bf5d667fad84089dc2785dfd34dcb08bb711cf630bc5ee24916eacf5269a40125d9b76523f566e61d", &(0x7f0000000140)="dfcd582d011357cc7476dbbcc0fd04d9791f2b3a30dbd97d9e86a4304ddbb262dcf9b04bcf836f94688fa93e824d1cb7c73ab0a01a661adf8e41bcec1bf497ffb5fc84d178caa2ce65fef4e4822a45632c486f7e65a9edf8ef4698166e978b1a4f6b95ca87d106984eef2c5f8497d188fd5df29e1759e8798ed891ac60d0eb74ed8d91e99c922beee61c5eaf"}) sendmsg$auto_NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000002600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000025c0)={&(0x7f0000004b00)={0x249c, r2, 0x18, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [@typed={0xc, 0x6c, 0x0, 0x0, @u64=0x5}]}, @NLBL_CIPSOV4_A_MLSLVL={0x1069, 0x7, 0x0, 0x1, [@typed={0x8, 0x65, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x75, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x8, 0x115, 0x0, 0x0, @uid=r3}, @generic="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", @generic="2e2b2eb4d96f92a1229f88e622a2852c46d56677cc89db630c88202feb32f57471306463ea761b289bd9e516be9a4921799ba29f40cbfbcba7c256fe84de00f83651f20d614f4c76e7ac4d10ef"]}, @NLBL_CIPSOV4_A_MLSCATLST={0x13f3, 0xc, 0x0, 0x1, [@nested={0x10, 0x42, 0x0, 0x1, [@nested={0x4, 0x5a}, @typed={0x8, 0x115, 0x0, 0x0, @uid=0xee01}]}, @typed={0x8, 0x151, 0x0, 0x0, @fd=r0}, @generic="63d63ccfd3deed97f8fd209faecccb230a4d707593d7e704a37f0d8517de6824620b90905a4492d3621ea66e29936c280ecced3256c1ffde3b64a01d1c3f76dd39dbd82ae573323bf857e5f50f31550f56", @generic="0f525543fa056c013b1eb1f78d2a711af605f72d0068d82a7884b72220562f939b0261e44961b7f45e28105b61b3460ad789be389a4f90aa13c3e515405d497200ba381a9388c9c2ded5c9e6849df718c4c5dee20934729ece435311d7ddec0df5d1805dc04bd2302b04caf84537c59117f5ca37314487fa3daab8a41bf0b547472f055549317afe1612a21a01f0a6872a1574cbe9f13b47b45ed665b8c4d44a47160d9be20c51bcfb92ee4a1be23cde950b6bf90d9348b33f15d88367da6e5e42224afb614d5152ed3c9b34b25700d4d75adba511d7e2a3b4d720e0dd7746013624cca3f486f7996b90", @typed={0x4, 0x136}, @nested={0x296, 0x104, 0x0, 0x1, [@generic="6f2f80babd8a12e3d9b97a44ae97b68d2dc4d72ccbac42f235263ae2a83654301790f904f5f0bddcbccad34f2dbc958ef86e9987781d13e8200372d3629275d64154c9b1a970839ca9ea7eb70baf05f6bec851caaa2c7ad78c2e0bf541bbf2435e6eacbb134f4e3f3f97b93a9d13fc6a4d65b48652897410cdab853e5af9bb7a110c09b39975e5f9fe7f3d8c71166ccdffcdc0d5e43e942a60f963e8", @generic="d887f96f5bed86137aebf392f7d9cb504c5005ce139299369fef8fc85e96b290f5539741fc0724b50c9a00bcac494048dcac61d8965398015f0bab6c606af2a90ebbdbe4ebf64797fe36db573af12d0bf387ddf9a99daab6666ba629a747ee4012038f4164", @generic="c4dc5eca3eaf421aa2e1e792c48d92a545574ded3165064643906057", @nested={0x10, 0x138, 0x0, 0x1, [@nested={0x4, 0x127}, @nested={0x4, 0x118}, @nested={0x4, 0x9f}]}, @typed={0x14, 0xe6, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0xae, 0x0, 0x0, @ipv4=@loopback}, @generic="0cd2ee23460d78f43d8bf976b5e86fa57aa7067eb8f8b943612287cbaa9355c41992c24720f0d16922395e5c0f5f8f4e152823b8fc2a74e0cbe11af8f734e02c845d1a7ae3ab21c918ea306e3b72343678e0c2ce45113664e18c1dfa520a4b233c263ecf58", @typed={0x8, 0x4a, 0x0, 0x0, @pid=r4}, @nested={0xd9, 0x63, 0x0, 0x1, [@nested={0x4, 0x7}, @nested={0x4, 0x2b}, @typed={0x8, 0x0, 0x0, 0x0, @uid=r3}, @generic="69bcfb3fd6279c2645021b22cb9ceefe46550839cbc5b1be650a0a8051ab5058eca3697c0b1729d153cb0a05ef874807b85acc3244a84167d24fa3e02a2bad303d4f84c64c0d6a489692f409d720a824bdc85c4f7b0d16781f4ab974254f709c600306b43f126ee5fb68b54189379d620f35feed517f3160740aa7ce1c67b7568f69049ceaa27ad9a6d608478e179afe1b1fe2804df41e0c46b9a626032a22e777a178e890663418672a6f05f4add249754b1034f99788ed559ceba6d749a51cf8a150dc62"]}]}, @generic="73a41a81087330c5ba587bbe0cdf1de111adb955fe6dbaf1654be9f3671c026cce7eff514d3ac0ad49a4e3e6500b0b84e3cceaa09cf4b323d0c72c0f739458f1be2a5ccd493611473f63c57c012bd183d5762252fbce94fb4118b454ab3d01f3a3fa9c56737dda791d15d6a83efa2ab31dea0bfc62759dbe45f79031ba72f50eb576741311058e09648682dbd9a360a4c832499f9e5c808fd9a2eba9f6b5eed18d37dc784015c650f510b2782082bf7fe765ac7e10a9c5730073153242b85a177486bf11d2d4bb47255f80405706464a5f25edd3026cbb2f8952b64beaf1b5245a9ed2181da6ead139b0409364764778d4daf5eef3e488e524f4130f004c71f56c58fad44e38e17eab013a450f2e67a7557479f2dce419429d9cfc2f962cc0fb5958aeef7acb10af775de555843a5d99fb18ce1e46e15e15c7e5a536237e1f6b473bdce22502a679dcf58e94e066ba8d96ac5ce8f96c715c3de6913d758031eeacd030fc3989153a760bec642f093f92c09e86d738e662de3fe8256bd689021f74d813cd748dee7ff54539cf7b5509e680736e55e15f3f85cea469fdb5cf4d65ab242720079934c119b6ca7189c903bad948a8f86f70d224333e279d4773ec64810d3f63e3339f2c591e6aa2121011871987de8c8649af770822635aba7732817a3afe6a728911eb7d64041828e3a100f3dd0e6781ac50285486cdf85a9e27e7933af5d47c35a17401198c13c4fcd0426e36fac93a4c2dc500d6469d72589de60dfe6272e1227d2fb13528167f01c28a832b5e473e69f770330f2e6d52e12cfcb1540047ac1e720a7698d01923b1100808d966cac94260556034c920c7d5642e32b12d645c2a322cb5b8a49e1c9262429b66262e69f37b7a855ffe548032750e10c0f0d412f994ac8223cf7576e20de5ec5e78afc227b1be472255ac63d446c810dc40b88bf3a67ee894206b29865323dbce7722ee9b9475d9ce0b75ae8abda7b4769f1c7649e9f03a09e766977226094e8d0aa2d981f2e423ea502414071ec7fe8d9aef91155213fd8bfe3dfd1a1bfab3c4da9dc6f218eb8e680eface17b52f37cf564e7c47fd453907feee7b1a1e0f4d3fb9057e42a8a1e7164bcfcc1f1445c82d48cd9df594522481179ea4b8a2fd0bfad264df9c5207816780120734251c2955447bed283b312174a292e49a5a01d6a643f42c350496ff8aa7d16594a67d6103aeb503aac00c569a7ad84f2f7cbaa2aca40949766cd0c9b1e83acadc8dbc9a4a56a0fa7aa2f3d86bb5838edecb7126dede36b5700f5c912759f2f4954e5521c8419eb268a18db4d5b635131e61dd746dc53924fd4fe4657ad195eb5a7500f30ccbb0ac03d60a81c6323a7eed1c7e463b4dd803d92829d85f74bdef99919ae2625b7e30c701e7295cb9cb7a1dee9e3a6de27c4fd19a21b76788b30d4b80c71fdbe4e137fbb332a158da98c4d1d18e77e0c8c5be4e6c308460a44662687e9f1c8ca39d391d6e02c052b85edfdda72ecca6bacf164d6c9c7588dcd215d63a1d370a6544eef188cf6b8680a9f6a93518f937bdc5283d518fb7ef6dfd300c82ed3ccc7bc029cda905af8b9d6ccd36d614b35ccce8013170c1e29c38ec31ed1589b9041e852cc6a51d05f1c8673c8d6711e7f8919409f1ead50206d90864bbda7dc627268b55277b85f462417ca3059e562e88930ae012be02c27df67e0b784c938fa2d122635629059d0918ed284e9d1166193b35a3287e5b6a801ab26cf4fb2c3e360f60d19785aa4da7d5eba0fd7f7df95b121da6e18648097e081d9fc1e6ff7b7a256e6ff65083b5d8d2b13a606e5c9696fdd27dcb718d00acce88228179850417fc3f0fa83ea63a6bc63bb88872cd2c262e7c1e2b0192ec1076cc66fea4a5bc67964be469606a2773c5d9ed31d1ede111a82b3707dc17387a814ec0abd86de84f86390d25838a96b6dde8174e1bcf2df5d2fa02d26f911cfb5a6a8be27b9e42fc2969dd96849543fa3bdca5d3ea21838b69fd227fcd27848503cf9c61a990662b747fbd44230c49a598bda2bfbcb123091c52c05abe7b0f9b33a6104a82ff59dd3d97b5a11e159d3c5646ad8732ef3f33ac1b98d026f2b68644e3cab60a375bbcba35af451b56c62003a9913865220b1c6dc5d1e1f317d2a799ca81ee52a0463bf9c486476e3a1ec0b41c3b009e5a6c41b44a6cbfdab5fd876ebe0caf6062686146aad553d6f25432e64d763fffbfc152ef001837d21606ae29b6d44923542f87a55e431f122beea6dcf1ea549ddf129fe4e51c7e8a18d2b027d2256df8f0c8c5f2df27eb397e7013134520913a504db11544887a5607eb3afc405196ed375bd0920b1871d52fe3d4593a4733104845fccb3fb64a32f91e1fcc51b2dff1222be8d058eeab4f39ad042ef979d27aa3c823f19cbd0ed4dafbb6a2c9ca24adf97d9fc946206a606e06ad0801dce65f355b25c53fc8266201b2d5298734c210ecf45eb9d8e13eed2ce37eee807031c7f230ed51c3279a1b1d5c9f2868656bb52b4931a8c2ed4d66e87a13233dcf1f448129d945dad6454a31b8153fbf9487942efd3e6418a195c478be1675960ca9c0c77ca396ead253ae41726fe55341716c3ef5d1b3c1979de21fbedc9ac9b453c71daf42a44b3fca681caaf7c37bb2d053185a380d54db6d0240f1a462613393c98e87c69870ab9879392a3e9b36c799173f674af024edc6219072b275b5c8c3631a5e8a4cb0361a04c2405aa1bf38ecd8ccb0dc48afa917b55a6de4f8ba8283ccd333d414075fcbc288b42f53efa4513f63f24e5dffc240996a91d99fba18e5f4daee509acc1890fc7c69611794e45785a132858fa3d54cbba5fbedb2ce5b1ee394775e5bdb58af6672b1e74e8ae21ac22e1ea46d0e084aa664c2f55dca27221dd9356584681dabc87684adb93487511f9d5f6671fb7bf55ae76e0e5bec47c776d361a959fce8c8887bfe03f93f4c17e11c8436d8452feda975617618768ba694775b639684a28bb5b4c757a71bb807f40d58a9062b93ae0586dd5e13fe7c512bbf5a0f837913b62200c85f626f1194f632f0ce706ec3828acd6c118b1175c658d991564a085bc0dd283f9c6949feec1793a103e890d04945f2681d4c8b14d5cceb6b94c1652e3330880b95b71e277b74959826b33bf39849339bc7747380dea18d140892e579184785a48d19f051061d4fab815bb23eeebfe050c29b5fc7f5a0cb9efdc446ee0846dac5c83e64ae4c410f7d48b64a87a7e91377e0e0c75d5dbd8a520f412a1ddc24a21b65be27efd41b9a79ffaba4d37d19cf238caf961be6877bc225a63a21def60cbc97958faf57b36a321a813b3bd6f46cfaec846a711409110ad6faffe04a0b06158ade7ee240d2dda8032683d108742fc8ea95763bfc881de79e83dd70dde0bd9c1d1ea886107f29fdbe27240fd82ee1163df56f18d15c72d586b843c172c4fd3c5164cd83e2044eaa4517e2a63de09b05da651d9dc50ac7d5464e285b3866efea2c98fe5c67ee262479e89dd23174212c6df6eab2f10afc5b31965fd46cd2747137fd3b0d981e08d7042c80ac9ba8ba381942e2b3b4207bdaf83292cc42b0003af282d44ca0c250a7e7ad6d5da462b4bebe82c0e87b1f74e3924f151649309d42cacf85199cc0b0d8af0e036ab747b67bbb20d70de3af0aeb13cbc434cff983303b2193eea188b90052c87b87dd84f2fa6e66f0ae93ec2bc98df6daeba148a65349776784334227b677e4034a87afcefc725405a0ff1907432d6c432f9a7ff8dd821f1cc85b9ae7845899ffd2cac44eccf80a656ffde4e0d257bb10ec97542ce4107c4286faeee1a9aecce8306be7267355c8f07417595fb140c9b96e5bf2a7f3acf61e2491d36270db71e1d760bf444efe2a155088274835a7f3fc53f4313c808fdd077fa823facacc9f5ae15f393e85fd4973026671b05f220c884089c3e856a26341cecb48c17fc38902db1235181d867e96a9188b2ee4694ddba18d2c6e4975dcaa3c5d10b89b97ce43ad5f7dcb65b73e5064ba29d5b86b95881bb23ceb4394ab72dd2a335b8b46c60ab2f4af4a46cc9be8898e6c26b7c598b784cdb749bb38d3143defa36a737fd87d82d4b5bf863310d4c441bd9536f7a202e06f29cb34bb9a44dabb9a9306efd13fc04969a3848d183a034fd65d0c2a93bbddc9d781e66187b9bd226816fb5492f6e6e1034f19697aed578f0cf8b7a3aead323b72fdb052d3aa3146f50263d8c49bc2e28bba918822321aadafba01f4b9e2bfb71e5b616ca6b126d0b124065dcb02d582d6487a76fff6d9db1bf981820f61cca65c7690eacacc5507b41cf57605b3c52025c8c2bcbf0107d9921e08ceece43b42022044b685dbfe983eafa7cd061f0c16af59dc40608e9c46596ce932f6a2af7fd3ee0263f34be982c301d9e4eb4123c46c750586765f27fda60d54bdd8924d62f5ea3cc8a1e7884bde140e6433f65be68275073ef9bc8f5c6487fcc394eec7b272f88955b92a7085f2954545fb0db92725a4865492a7278ac685a6d2b3060fbacc9adea52107db8b09d7afd5a61a9861bcd1f04c52364da94d31a4f12e7d972e87579890d0fe2099b6c3709ca7f834e2096e70055773aa4b4d382fcf1bf43641da683cb0a5eb8db59533139af38cad8306ea546bd115af0bb0847bc26db89a29afba58f6b985f0c7bcc4a84d6a40ccb4ccd0cb58db3ee4af67665cbf30730fb8c71974b8dae492da3b03f97ab0c345fa86501e6fccd66425e074579bc95a143e532fe9b947df36bf402338898cd801e9bd59ec4bd6f5b15a322223e66c2ccbe6adc31769c7452a6fbf25d1ddc0b4a5827b1371ba5f4bff1479c37d5b40d5848855cbebe3e835199f14ff1ecb06414e447dd8afc7a51de49a5baa00dace17c0f613683832c66fd25be551cb6cdc66fbbf041267798eaa9548b2c09c478d2ae74faa780ac4609026f114c0b07d6eb0524ced0d8ba9649540de2fedbb139e87675dad3e290a49322f44de5427010edc3e9fe45ff555eba83a6412a25ea655d0558405ec4cdc258e381722acd80eb8539a9e78c824d3e41015fcc0736856fb9d7c3fb17c229e030c85dab1ca3e215af2569a7359a297eaf59242953df8b35c6f7b6356e7bcc421f2a6164ae7d1229e9fdcea86cda6e8af21ba51b9c2a648ea587e5e5f4e44b6182cfc667727982899324cf1af6f7fd76acf1ebd8dc7f3bdc2fbf7a7a3c0caf7965ee33ec42090847b4deb33e1310b4b71847c720bfe32156db5c12232803ba2138e9fa79b348fec1cf1db2c6c19efaf91ed6c7969390fa4ff2ac9f0a941db086017f5745cc025cf3ee91169c5b2b60480efec8a781183446b3563c444776344d3d51b32737433b62058af8c023392bbb271bcf5c98426db071d960a39c205165cc634433bc17804c0ee321256f5399f1272388648c69d068b508121f51158f4d105aaccbf310f0f4f2f7f86ad21827a12ad57d212e0995a1691333103af0a478278aa2775a8d8eb3f09f3824daa538edad0fe579ac5a93fdb38c88ca5dec45f6e9fe9771661101188b70c4b2e2ba61ff5fddb63ccd3e6c99ca8eb140a232859bcfda95ac18741a38007f67df8c13096cdfa83c4b31bbc5ade8f8b3f63cbea532aa844bd964487beee6e9f7f7c1fcc1297c4e9d2cabf1bfc18e7d889f08482b7f5bc5d2b9f3a16d059a5ad45031bfc3b53602b6e38d91b65a4c2716635b0959f39998f018a97dc8a86b97ae09cf43f0962b76f76dd744e01cde14ec2f53b65592a85cda14795"]}, @NLBL_CIPSOV4_A_TAG={0x5, 0x3, 0x10}]}, 0x249c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/oom_adj\x00', 0x300, 0x0) read$auto(r5, 0x0, 0x1f40) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3) mknod$auto(0x0, 0x63c1, 0x7fc) close_range$auto(0x2, 0x8, 0x0) 0s ago: executing program 3 (id=3284): open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) socket(0x2, 0x3, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket(0x1d, 0x3, 0x1) (async, rerun: 64) unshare$auto(0x40000080) (async, rerun: 64) mmap$auto(0x0, 0x20009, 0x7, 0x12, 0xffffffffffffffff, 0xf4e) (async, rerun: 64) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) (async) clock_nanosleep$auto(0xfffffffa, 0x4, &(0x7f0000000040)={0x2, 0x7fffffffffffffff}, &(0x7f00000000c0)={0x5, 0x8}) (async, rerun: 64) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64) r0 = socket(0x10, 0x2, 0x0) recvmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0x3, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/ati_remote2/parameters/mode_mask\x00', 0x88401, 0x0) (async, rerun: 64) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) (async, rerun: 64) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) (async, rerun: 32) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/controlC1\x00', 0x200001, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, r1, 0x0) socket(0x10, 0x2, 0x4) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r2) read$auto(r2, &(0x7f0000000000)='\x00', 0x91e2) (async) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon7\x00', 0x0, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x10, 0x2, 0xc) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async) fanotify_init$auto(0x65, 0x2) (async, rerun: 64) socket(0x22, 0x3, 0x0) (async, rerun: 64) pipe$auto(0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.19' (ED25519) to the list of known hosts. [ 81.346466][ T5816] cgroup: Unknown subsys name 'net' [ 81.456163][ T5816] cgroup: Unknown subsys name 'cpuset' [ 81.465267][ T5816] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.999547][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.726112][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.734754][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.743241][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.761630][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.769442][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.851668][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.860747][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.879269][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.886765][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.894966][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.902865][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.913076][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.921441][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.928613][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.937895][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.962254][ T5150] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.970619][ T5150] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.979785][ T5150] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.992801][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.008915][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.306596][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 85.526440][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.540330][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.547839][ T5827] bridge_slave_0: entered allmulticast mode [ 85.558693][ T5827] bridge_slave_0: entered promiscuous mode [ 85.586197][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.596008][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.603655][ T5827] bridge_slave_1: entered allmulticast mode [ 85.611790][ T5827] bridge_slave_1: entered promiscuous mode [ 85.619797][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 85.662343][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 85.673755][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 85.711261][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.745327][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.850969][ T5827] team0: Port device team_slave_0 added [ 85.879717][ T5827] team0: Port device team_slave_1 added [ 85.896547][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.905154][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.913674][ T5831] bridge_slave_0: entered allmulticast mode [ 85.922087][ T5831] bridge_slave_0: entered promiscuous mode [ 85.956459][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.963815][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.971563][ T5831] bridge_slave_1: entered allmulticast mode [ 85.979099][ T5831] bridge_slave_1: entered promiscuous mode [ 86.026153][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.033268][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.059541][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.071372][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.078572][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.086192][ T5837] bridge_slave_0: entered allmulticast mode [ 86.093364][ T5837] bridge_slave_0: entered promiscuous mode [ 86.100705][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.107840][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.115409][ T5830] bridge_slave_0: entered allmulticast mode [ 86.122507][ T5830] bridge_slave_0: entered promiscuous mode [ 86.140480][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.147458][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.174733][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.196851][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.204404][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.211762][ T5837] bridge_slave_1: entered allmulticast mode [ 86.218729][ T5837] bridge_slave_1: entered promiscuous mode [ 86.225949][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.233521][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.240786][ T5830] bridge_slave_1: entered allmulticast mode [ 86.247836][ T5830] bridge_slave_1: entered promiscuous mode [ 86.257317][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.269965][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.354927][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.366744][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.387957][ T5831] team0: Port device team_slave_0 added [ 86.395857][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.407055][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.422959][ T5827] hsr_slave_0: entered promiscuous mode [ 86.429322][ T5827] hsr_slave_1: entered promiscuous mode [ 86.437682][ T5831] team0: Port device team_slave_1 added [ 86.507890][ T5837] team0: Port device team_slave_0 added [ 86.526065][ T5830] team0: Port device team_slave_0 added [ 86.532839][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.539800][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.566515][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.579566][ T5837] team0: Port device team_slave_1 added [ 86.594933][ T5830] team0: Port device team_slave_1 added [ 86.602042][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.609001][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.635338][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.713388][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.721179][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.747253][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.760117][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.767082][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.793458][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.820749][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.827810][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.854097][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.865725][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.870975][ T5836] Bluetooth: hci0: command tx timeout [ 86.873007][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.904119][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.982246][ T5831] hsr_slave_0: entered promiscuous mode [ 86.989275][ T5831] hsr_slave_1: entered promiscuous mode [ 86.996212][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 87.002675][ T5831] Cannot create hsr debugfs directory [ 87.020162][ T5836] Bluetooth: hci2: command tx timeout [ 87.020167][ T52] Bluetooth: hci1: command tx timeout [ 87.101103][ T52] Bluetooth: hci3: command tx timeout [ 87.109520][ T5830] hsr_slave_0: entered promiscuous mode [ 87.116694][ T5830] hsr_slave_1: entered promiscuous mode [ 87.123343][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 87.129094][ T5830] Cannot create hsr debugfs directory [ 87.188947][ T5837] hsr_slave_0: entered promiscuous mode [ 87.196014][ T5837] hsr_slave_1: entered promiscuous mode [ 87.202847][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 87.208602][ T5837] Cannot create hsr debugfs directory [ 87.532296][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.570709][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.594769][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.626231][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.695684][ T5831] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.707040][ T5831] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.717881][ T5831] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.729572][ T5831] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.825151][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.837280][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.853291][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.875720][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.955530][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.979854][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.992693][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.011893][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.063743][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.128448][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.139339][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.167757][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.174998][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.196896][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.204148][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.226689][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.265373][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.272570][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.288757][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.305729][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.312856][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.364865][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.405472][ T3822] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.412663][ T3822] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.446678][ T3822] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.453872][ T3822] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.484671][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.622342][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.661641][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.668767][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.697455][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.704696][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.889385][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.940280][ T52] Bluetooth: hci0: command tx timeout [ 89.015210][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.056777][ T5827] veth0_vlan: entered promiscuous mode [ 89.093507][ T5827] veth1_vlan: entered promiscuous mode [ 89.102523][ T52] Bluetooth: hci1: command tx timeout [ 89.102719][ T5836] Bluetooth: hci2: command tx timeout [ 89.180554][ T5836] Bluetooth: hci3: command tx timeout [ 89.203417][ T5831] veth0_vlan: entered promiscuous mode [ 89.238786][ T5831] veth1_vlan: entered promiscuous mode [ 89.248915][ T5827] veth0_macvtap: entered promiscuous mode [ 89.265794][ T5827] veth1_macvtap: entered promiscuous mode [ 89.281952][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.297495][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.328918][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.356566][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.393036][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.403630][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.415643][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.426594][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.438168][ T5831] veth0_macvtap: entered promiscuous mode [ 89.473281][ T5831] veth1_macvtap: entered promiscuous mode [ 89.517645][ T5830] veth0_vlan: entered promiscuous mode [ 89.536127][ T5837] veth0_vlan: entered promiscuous mode [ 89.561373][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.576874][ T5837] veth1_vlan: entered promiscuous mode [ 89.615214][ T5830] veth1_vlan: entered promiscuous mode [ 89.626545][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.642077][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.662843][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.681918][ T2936] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.692771][ T2936] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.702573][ T2936] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.721062][ T2936] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.768629][ T2936] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.788265][ T2936] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.798772][ T5830] veth0_macvtap: entered promiscuous mode [ 89.823986][ T5837] veth0_macvtap: entered promiscuous mode [ 89.856868][ T5837] veth1_macvtap: entered promiscuous mode [ 89.869077][ T5830] veth1_macvtap: entered promiscuous mode [ 89.923448][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 89.983741][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.991432][ T2936] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.999281][ T2936] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.035740][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.053771][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.113840][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.143030][ T3822] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.155688][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.170518][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.179554][ T3822] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.190983][ T3822] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.210430][ T3822] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.219666][ T3822] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.242766][ T3822] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.254328][ T3822] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.298855][ T3822] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.506974][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.521346][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.527591][ T5921] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 90.612725][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.635737][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.704140][ T3514] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.713367][ T3514] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.767281][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.788034][ T5923] netlink: 'syz.0.5': attribute type 1 has an invalid length. [ 90.796147][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.020110][ T5836] Bluetooth: hci0: command tx timeout [ 91.089754][ T5929] Invalid ELF header magic: != ELF [ 91.181386][ T5836] Bluetooth: hci2: command tx timeout [ 91.181473][ T52] Bluetooth: hci1: command tx timeout [ 91.260917][ T52] Bluetooth: hci3: command tx timeout [ 91.393630][ T5933] FAULT_INJECTION: forcing a failure. [ 91.393630][ T5933] name failslab, interval 1, probability 0, space 0, times 1 [ 91.407043][ T5933] CPU: 0 UID: 0 PID: 5933 Comm: syz.0.6 Not tainted syzkaller #0 PREEMPT(full) [ 91.407081][ T5933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 91.407104][ T5933] Call Trace: [ 91.407114][ T5933] [ 91.407125][ T5933] dump_stack_lvl+0x16c/0x1f0 [ 91.407176][ T5933] should_fail_ex+0x512/0x640 [ 91.407206][ T5933] ? kmem_cache_alloc_noprof+0x62/0x770 [ 91.407242][ T5933] should_failslab+0xc2/0x120 [ 91.407285][ T5933] kmem_cache_alloc_noprof+0x83/0x770 [ 91.407318][ T5933] ? sk_prot_alloc+0x60/0x2a0 [ 91.407364][ T5933] ? sk_prot_alloc+0x60/0x2a0 [ 91.407401][ T5933] sk_prot_alloc+0x60/0x2a0 [ 91.407443][ T5933] sk_alloc+0x36/0xe30 [ 91.407476][ T5933] rds_create+0x9e/0x5f0 [ 91.407509][ T5933] __sock_create+0x339/0x8a0 [ 91.407558][ T5933] __sys_socket+0x14d/0x260 [ 91.407583][ T5933] ? __pfx___sys_socket+0x10/0x10 [ 91.407606][ T5933] ? xfd_validate_state+0x61/0x180 [ 91.407627][ T5933] ? __pfx_ksys_write+0x10/0x10 [ 91.407671][ T5933] __x64_sys_socket+0x72/0xb0 [ 91.407694][ T5933] ? lockdep_hardirqs_on+0x7c/0x110 [ 91.407735][ T5933] do_syscall_64+0xcd/0xf80 [ 91.407779][ T5933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.407809][ T5933] RIP: 0033:0x7f607e58f7c9 [ 91.407838][ T5933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.407865][ T5933] RSP: 002b:00007f607f3ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 91.407891][ T5933] RAX: ffffffffffffffda RBX: 00007f607e7e5fa0 RCX: 00007f607e58f7c9 [ 91.407910][ T5933] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000015 [ 91.407926][ T5933] RBP: 00007f607e613f91 R08: 0000000000000000 R09: 0000000000000000 [ 91.407943][ T5933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.407968][ T5933] R13: 00007f607e7e6038 R14: 00007f607e7e5fa0 R15: 00007ffd0a314ce8 [ 91.408006][ T5933] [ 92.027235][ T117] cfg80211: failed to load regulatory.db [ 92.404207][ T5945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9'. [ 93.111658][ T52] Bluetooth: hci0: command tx timeout [ 93.256911][ T5955] zswap: compressor not available [ 93.260453][ T52] Bluetooth: hci1: command tx timeout [ 93.267596][ T52] Bluetooth: hci2: command tx timeout [ 93.340843][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.351291][ T52] Bluetooth: hci3: command tx timeout [ 93.660414][ T0] NOHZ tick-stop error: local softirq work is pending, handler #212!!! [ 93.930371][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.940343][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.305371][ T30] audit: type=1800 audit(1765915857.969:2): pid=5945 uid=60928 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.9" name="dbroot" dev="configfs" ino=8614 res=0 errno=0 [ 94.319675][ T5974] netlink: 'syz.0.14': attribute type 1 has an invalid length. [ 94.419093][ T5978] FAULT_INJECTION: forcing a failure. [ 94.419093][ T5978] name failslab, interval 1, probability 0, space 0, times 0 [ 94.440981][ T5978] CPU: 0 UID: 0 PID: 5978 Comm: syz.0.14 Not tainted syzkaller #0 PREEMPT(full) [ 94.441019][ T5978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 94.441035][ T5978] Call Trace: [ 94.441044][ T5978] [ 94.441054][ T5978] dump_stack_lvl+0x16c/0x1f0 [ 94.441100][ T5978] should_fail_ex+0x512/0x640 [ 94.441135][ T5978] ? __kmalloc_cache_noprof+0x5f/0x800 [ 94.441169][ T5978] should_failslab+0xc2/0x120 [ 94.441206][ T5978] __kmalloc_cache_noprof+0x80/0x800 [ 94.441237][ T5978] ? snd_timer_instance_new+0x47/0x2e0 [ 94.441287][ T5978] ? snd_timer_instance_new+0x47/0x2e0 [ 94.441324][ T5978] snd_timer_instance_new+0x47/0x2e0 [ 94.441364][ T5978] snd_seq_timer_open+0x1cc/0x600 [ 94.441399][ T5978] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 94.441442][ T5978] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 94.441480][ T5978] ? lockdep_hardirqs_on+0x7c/0x110 [ 94.441517][ T5978] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 94.441552][ T5978] queue_use+0xe3/0x250 [ 94.441578][ T5978] snd_seq_queue_alloc+0x2e5/0x5a0 [ 94.441635][ T5978] snd_seq_ioctl_create_queue+0xa9/0x390 [ 94.441673][ T5978] call_seq_client_ctl+0xa3/0x130 [ 94.441713][ T5978] snd_seq_kernel_client_ctl+0x7a/0xc0 [ 94.441753][ T5978] alloc_seq_queue+0xda/0x180 [ 94.441787][ T5978] ? __pfx_alloc_seq_queue+0x10/0x10 [ 94.441837][ T5978] ? mark_held_locks+0x49/0x80 [ 94.441859][ T5978] ? _raw_spin_unlock_irq+0x23/0x50 [ 94.441889][ T5978] ? lockdep_hardirqs_on+0x7c/0x110 [ 94.441920][ T5978] snd_seq_oss_open+0x38c/0xa40 [ 94.441957][ T5978] odev_open+0x79/0xc0 [ 94.441986][ T5978] ? __pfx_odev_open+0x10/0x10 [ 94.442017][ T5978] soundcore_open+0x40c/0x580 [ 94.442050][ T5978] ? __pfx_soundcore_open+0x10/0x10 [ 94.442081][ T5978] chrdev_open+0x234/0x6a0 [ 94.442116][ T5978] ? __pfx_apparmor_file_open+0x10/0x10 [ 94.442142][ T5978] ? __pfx_chrdev_open+0x10/0x10 [ 94.442184][ T5978] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 94.442229][ T5978] do_dentry_open+0x748/0x1590 [ 94.442263][ T5978] ? __pfx_chrdev_open+0x10/0x10 [ 94.442311][ T5978] vfs_open+0x82/0x3f0 [ 94.442344][ T5978] path_openat+0x2078/0x3140 [ 94.442393][ T5978] ? __pfx_path_openat+0x10/0x10 [ 94.442444][ T5978] do_filp_open+0x20b/0x470 [ 94.442482][ T5978] ? __pfx_do_filp_open+0x10/0x10 [ 94.442542][ T5978] ? alloc_fd+0x471/0x7d0 [ 94.442598][ T5978] do_sys_openat2+0x121/0x290 [ 94.442628][ T5978] ? __pfx_do_sys_openat2+0x10/0x10 [ 94.442674][ T5978] __x64_sys_openat+0x174/0x210 [ 94.442711][ T5978] ? __pfx___x64_sys_openat+0x10/0x10 [ 94.442755][ T5978] do_syscall_64+0xcd/0xf80 [ 94.442796][ T5978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.442826][ T5978] RIP: 0033:0x7f607e58f7c9 [ 94.442847][ T5978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.442870][ T5978] RSP: 002b:00007f607f38c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 94.442892][ T5978] RAX: ffffffffffffffda RBX: 00007f607e7e6090 RCX: 00007f607e58f7c9 [ 94.442908][ T5978] RDX: 0000000000100842 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 94.442924][ T5978] RBP: 00007f607e613f91 R08: 0000000000000000 R09: 0000000000000000 [ 94.442938][ T5978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.442954][ T5978] R13: 00007f607e7e6128 R14: 00007f607e7e6090 R15: 00007ffd0a314ce8 [ 94.442992][ T5978] [ 94.815694][ T5982] Zero length message leads to an empty skb [ 94.861627][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 95.173710][ T5987] process 'syz.1.16' launched './file0' with NULL argv: empty string added [ 95.671928][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.710528][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.719915][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.431037][ T6007] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 96.974890][ T6015] ptp ptp0: new virtual clock ptp1 [ 96.994085][ T6015] ptp ptp0: new virtual clock ptp2 [ 97.042212][ T6015] ptp ptp0: new virtual clock ptp3 [ 97.071771][ T6015] ptp ptp0: new virtual clock ptp4 [ 97.104661][ T6015] ptp ptp0: new virtual clock ptp5 [ 97.134514][ T6015] ptp ptp0: new virtual clock ptp6 [ 97.153967][ T6015] ptp ptp0: new virtual clock ptp7 [ 97.178777][ T6015] ptp ptp0: new virtual clock ptp8 [ 97.206324][ T6015] ptp ptp0: new virtual clock ptp9 [ 97.320101][ T6015] ptp ptp0: new virtual clock ptp10 [ 97.380899][ T6015] ptp ptp0: guarantee physical clock free running [ 97.400367][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.420316][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 98.931901][ T6063] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 99.284303][ T6072] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 99.341213][ T6077] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 100.378687][ T6088] netlink: 'syz.3.35': attribute type 1 has an invalid length. [ 100.440705][ T6088] FAULT_INJECTION: forcing a failure. [ 100.440705][ T6088] name failslab, interval 1, probability 0, space 0, times 0 [ 100.495173][ T6088] CPU: 0 UID: 0 PID: 6088 Comm: syz.3.35 Not tainted syzkaller #0 PREEMPT(full) [ 100.495215][ T6088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 100.495229][ T6088] Call Trace: [ 100.495238][ T6088] [ 100.495253][ T6088] dump_stack_lvl+0x16c/0x1f0 [ 100.495297][ T6088] should_fail_ex+0x512/0x640 [ 100.495333][ T6088] ? __kmalloc_cache_noprof+0x5f/0x800 [ 100.495368][ T6088] should_failslab+0xc2/0x120 [ 100.495409][ T6088] __kmalloc_cache_noprof+0x80/0x800 [ 100.495441][ T6088] ? snd_timer_instance_new+0x47/0x2e0 [ 100.495490][ T6088] ? snd_timer_instance_new+0x47/0x2e0 [ 100.495535][ T6088] snd_timer_instance_new+0x47/0x2e0 [ 100.495573][ T6088] snd_seq_timer_open+0x1cc/0x600 [ 100.495610][ T6088] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 100.495656][ T6088] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 100.495698][ T6088] ? lockdep_hardirqs_on+0x7c/0x110 [ 100.495738][ T6088] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 100.495782][ T6088] queue_use+0xe3/0x250 [ 100.495808][ T6088] snd_seq_queue_alloc+0x2e5/0x5a0 [ 100.495846][ T6088] snd_seq_ioctl_create_queue+0xa9/0x390 [ 100.495889][ T6088] call_seq_client_ctl+0xa3/0x130 [ 100.495927][ T6088] snd_seq_kernel_client_ctl+0x7a/0xc0 [ 100.495968][ T6088] alloc_seq_queue+0xda/0x180 [ 100.496002][ T6088] ? __pfx_alloc_seq_queue+0x10/0x10 [ 100.496066][ T6088] ? mark_held_locks+0x49/0x80 [ 100.496091][ T6088] ? _raw_spin_unlock_irq+0x23/0x50 [ 100.496127][ T6088] ? lockdep_hardirqs_on+0x7c/0x110 [ 100.496169][ T6088] snd_seq_oss_open+0x38c/0xa40 [ 100.496218][ T6088] odev_open+0x79/0xc0 [ 100.496253][ T6088] ? __pfx_odev_open+0x10/0x10 [ 100.496289][ T6088] soundcore_open+0x40c/0x580 [ 100.496340][ T6088] ? __pfx_soundcore_open+0x10/0x10 [ 100.496380][ T6088] chrdev_open+0x234/0x6a0 [ 100.496423][ T6088] ? __pfx_apparmor_file_open+0x10/0x10 [ 100.496452][ T6088] ? __pfx_chrdev_open+0x10/0x10 [ 100.496495][ T6088] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 100.496548][ T6088] do_dentry_open+0x748/0x1590 [ 100.496588][ T6088] ? __pfx_chrdev_open+0x10/0x10 [ 100.496639][ T6088] vfs_open+0x82/0x3f0 [ 100.496674][ T6088] path_openat+0x2078/0x3140 [ 100.496727][ T6088] ? __pfx_path_openat+0x10/0x10 [ 100.496780][ T6088] do_filp_open+0x20b/0x470 [ 100.496821][ T6088] ? __pfx_do_filp_open+0x10/0x10 [ 100.496890][ T6088] ? alloc_fd+0x471/0x7d0 [ 100.496944][ T6088] do_sys_openat2+0x121/0x290 [ 100.496975][ T6088] ? __pfx_do_sys_openat2+0x10/0x10 [ 100.497022][ T6088] __x64_sys_openat+0x174/0x210 [ 100.497054][ T6088] ? __pfx___x64_sys_openat+0x10/0x10 [ 100.497096][ T6088] do_syscall_64+0xcd/0xf80 [ 100.497137][ T6088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.497165][ T6088] RIP: 0033:0x7f16abd8f7c9 [ 100.497188][ T6088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.497216][ T6088] RSP: 002b:00007f16acb88038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 100.497242][ T6088] RAX: ffffffffffffffda RBX: 00007f16abfe5fa0 RCX: 00007f16abd8f7c9 [ 100.497259][ T6088] RDX: 0000000000100842 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 100.497277][ T6088] RBP: 00007f16abe13f91 R08: 0000000000000000 R09: 0000000000000000 [ 100.497293][ T6088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.497310][ T6088] R13: 00007f16abfe6038 R14: 00007f16abfe5fa0 R15: 00007ffe94587a28 [ 100.497356][ T6088] [ 101.504814][ T6080] kexec: Could not allocate control_code_buffer [ 101.600300][ T6114] netlink: 'syz.2.37': attribute type 1 has an invalid length. [ 101.647315][ T6114] FAULT_INJECTION: forcing a failure. [ 101.647315][ T6114] name failslab, interval 1, probability 0, space 0, times 0 [ 101.670215][ T6114] CPU: 0 UID: 0 PID: 6114 Comm: syz.2.37 Not tainted syzkaller #0 PREEMPT(full) [ 101.670259][ T6114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 101.670276][ T6114] Call Trace: [ 101.670286][ T6114] [ 101.670297][ T6114] dump_stack_lvl+0x16c/0x1f0 [ 101.670345][ T6114] should_fail_ex+0x512/0x640 [ 101.670375][ T6114] ? __kmalloc_cache_noprof+0x5f/0x800 [ 101.670410][ T6114] should_failslab+0xc2/0x120 [ 101.670451][ T6114] __kmalloc_cache_noprof+0x80/0x800 [ 101.670483][ T6114] ? snd_timer_instance_new+0x47/0x2e0 [ 101.670534][ T6114] ? snd_timer_instance_new+0x47/0x2e0 [ 101.670576][ T6114] snd_timer_instance_new+0x47/0x2e0 [ 101.670620][ T6114] snd_seq_timer_open+0x1cc/0x600 [ 101.670656][ T6114] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 101.670703][ T6114] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 101.670740][ T6114] ? lockdep_hardirqs_on+0x7c/0x110 [ 101.670779][ T6114] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 101.670821][ T6114] queue_use+0xe3/0x250 [ 101.670849][ T6114] snd_seq_queue_alloc+0x2e5/0x5a0 [ 101.670884][ T6114] snd_seq_ioctl_create_queue+0xa9/0x390 [ 101.670925][ T6114] call_seq_client_ctl+0xa3/0x130 [ 101.670963][ T6114] snd_seq_kernel_client_ctl+0x7a/0xc0 [ 101.671003][ T6114] alloc_seq_queue+0xda/0x180 [ 101.671041][ T6114] ? __pfx_alloc_seq_queue+0x10/0x10 [ 101.671097][ T6114] ? mark_held_locks+0x49/0x80 [ 101.671123][ T6114] ? _raw_spin_unlock_irq+0x23/0x50 [ 101.671159][ T6114] ? lockdep_hardirqs_on+0x7c/0x110 [ 101.671202][ T6114] snd_seq_oss_open+0x38c/0xa40 [ 101.671257][ T6114] odev_open+0x79/0xc0 [ 101.671294][ T6114] ? __pfx_odev_open+0x10/0x10 [ 101.671332][ T6114] soundcore_open+0x40c/0x580 [ 101.671377][ T6114] ? __pfx_soundcore_open+0x10/0x10 [ 101.671416][ T6114] chrdev_open+0x234/0x6a0 [ 101.671462][ T6114] ? __pfx_apparmor_file_open+0x10/0x10 [ 101.671495][ T6114] ? __pfx_chrdev_open+0x10/0x10 [ 101.671540][ T6114] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 101.671592][ T6114] do_dentry_open+0x748/0x1590 [ 101.671630][ T6114] ? __pfx_chrdev_open+0x10/0x10 [ 101.671681][ T6114] vfs_open+0x82/0x3f0 [ 101.671715][ T6114] path_openat+0x2078/0x3140 [ 101.671767][ T6114] ? __pfx_path_openat+0x10/0x10 [ 101.671826][ T6114] do_filp_open+0x20b/0x470 [ 101.671868][ T6114] ? __pfx_do_filp_open+0x10/0x10 [ 101.671935][ T6114] ? alloc_fd+0x471/0x7d0 [ 101.671989][ T6114] do_sys_openat2+0x121/0x290 [ 101.672019][ T6114] ? __pfx_do_sys_openat2+0x10/0x10 [ 101.672061][ T6114] __x64_sys_openat+0x174/0x210 [ 101.672089][ T6114] ? __pfx___x64_sys_openat+0x10/0x10 [ 101.672136][ T6114] do_syscall_64+0xcd/0xf80 [ 101.672178][ T6114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.672208][ T6114] RIP: 0033:0x7ff13df8f7c9 [ 101.672231][ T6114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.672264][ T6114] RSP: 002b:00007ff13ed83038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 101.672291][ T6114] RAX: ffffffffffffffda RBX: 00007ff13e1e5fa0 RCX: 00007ff13df8f7c9 [ 101.672310][ T6114] RDX: 0000000000100842 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 101.672329][ T6114] RBP: 00007ff13e013f91 R08: 0000000000000000 R09: 0000000000000000 [ 101.672350][ T6114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.672366][ T6114] R13: 00007ff13e1e6038 R14: 00007ff13e1e5fa0 R15: 00007fff30273358 [ 101.672406][ T6114] [ 103.297576][ T6139] mmap: syz.2.42 (6139) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 105.365990][ T6179] batman_adv: batadv0: adding TT local entry 00:20:00:00:00:00 to non-existent VLAN 16 [ 106.289341][ T6190] syz.3.50 (6190) used greatest stack depth: 19688 bytes left [ 107.503255][ T6202] netlink: 'syz.3.52': attribute type 1 has an invalid length. [ 107.566744][ T6202] FAULT_INJECTION: forcing a failure. [ 107.566744][ T6202] name failslab, interval 1, probability 0, space 0, times 0 [ 107.631205][ T6202] CPU: 0 UID: 0 PID: 6202 Comm: syz.3.52 Not tainted syzkaller #0 PREEMPT(full) [ 107.631228][ T6202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 107.631237][ T6202] Call Trace: [ 107.631244][ T6202] [ 107.631250][ T6202] dump_stack_lvl+0x16c/0x1f0 [ 107.631277][ T6202] should_fail_ex+0x512/0x640 [ 107.631295][ T6202] ? __kmalloc_node_track_caller_noprof+0xcb/0x930 [ 107.631319][ T6202] should_failslab+0xc2/0x120 [ 107.631341][ T6202] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 107.631362][ T6202] ? snd_timer_instance_new+0x65/0x2e0 [ 107.631388][ T6202] ? kstrdup+0x53/0x100 [ 107.631403][ T6202] kstrdup+0x53/0x100 [ 107.631420][ T6202] snd_timer_instance_new+0x65/0x2e0 [ 107.631443][ T6202] snd_seq_timer_open+0x1cc/0x600 [ 107.631470][ T6202] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 107.631495][ T6202] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 107.631515][ T6202] ? lockdep_hardirqs_on+0x7c/0x110 [ 107.631537][ T6202] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 107.631559][ T6202] queue_use+0xe3/0x250 [ 107.631574][ T6202] snd_seq_queue_alloc+0x2e5/0x5a0 [ 107.631592][ T6202] snd_seq_ioctl_create_queue+0xa9/0x390 [ 107.631613][ T6202] call_seq_client_ctl+0xa3/0x130 [ 107.631633][ T6202] snd_seq_kernel_client_ctl+0x7a/0xc0 [ 107.631654][ T6202] alloc_seq_queue+0xda/0x180 [ 107.631675][ T6202] ? __pfx_alloc_seq_queue+0x10/0x10 [ 107.631706][ T6202] ? mark_held_locks+0x49/0x80 [ 107.631729][ T6202] ? _raw_spin_unlock_irq+0x23/0x50 [ 107.631747][ T6202] ? lockdep_hardirqs_on+0x7c/0x110 [ 107.631769][ T6202] snd_seq_oss_open+0x38c/0xa40 [ 107.631794][ T6202] odev_open+0x79/0xc0 [ 107.631812][ T6202] ? __pfx_odev_open+0x10/0x10 [ 107.631830][ T6202] soundcore_open+0x40c/0x580 [ 107.631852][ T6202] ? __pfx_soundcore_open+0x10/0x10 [ 107.631872][ T6202] chrdev_open+0x234/0x6a0 [ 107.631893][ T6202] ? __pfx_apparmor_file_open+0x10/0x10 [ 107.631908][ T6202] ? __pfx_chrdev_open+0x10/0x10 [ 107.631929][ T6202] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 107.631963][ T6202] do_dentry_open+0x748/0x1590 [ 107.631983][ T6202] ? __pfx_chrdev_open+0x10/0x10 [ 107.632011][ T6202] vfs_open+0x82/0x3f0 [ 107.632028][ T6202] path_openat+0x2078/0x3140 [ 107.632056][ T6202] ? __pfx_path_openat+0x10/0x10 [ 107.632084][ T6202] do_filp_open+0x20b/0x470 [ 107.632105][ T6202] ? __pfx_do_filp_open+0x10/0x10 [ 107.632139][ T6202] ? alloc_fd+0x471/0x7d0 [ 107.632165][ T6202] do_sys_openat2+0x121/0x290 [ 107.632180][ T6202] ? __pfx_do_sys_openat2+0x10/0x10 [ 107.632203][ T6202] __x64_sys_openat+0x174/0x210 [ 107.632219][ T6202] ? __pfx___x64_sys_openat+0x10/0x10 [ 107.632243][ T6202] do_syscall_64+0xcd/0xf80 [ 107.632264][ T6202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.632279][ T6202] RIP: 0033:0x7f16abd8f7c9 [ 107.632293][ T6202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.632306][ T6202] RSP: 002b:00007f16acb88038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 107.632320][ T6202] RAX: ffffffffffffffda RBX: 00007f16abfe5fa0 RCX: 00007f16abd8f7c9 [ 107.632330][ T6202] RDX: 0000000000100842 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 107.632339][ T6202] RBP: 00007f16abe13f91 R08: 0000000000000000 R09: 0000000000000000 [ 107.632348][ T6202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.632357][ T6202] R13: 00007f16abfe6038 R14: 00007f16abfe5fa0 R15: 00007ffe94587a28 [ 107.632376][ T6202] [ 108.099164][ T6212] sg_write: data in/out 3292/1 bytes for SCSI command 0xa3-- guessing data in; [ 108.099164][ T6212] program syz.0.55 not setting count and/or reply_len properly [ 108.623282][ T6208] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 108.666294][ T6212] warning: `syz.0.55' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 109.124445][ T30] audit: type=1800 audit(1765915872.799:3): pid=6231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.60" name="dbroot" dev="configfs" ino=9157 res=0 errno=0 [ 109.269793][ T30] audit: type=1804 audit(1765915872.939:4): pid=6233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.61" name="/newroot/sys/kernel/config/target/dbroot" dev="configfs" ino=9157 res=1 errno=0 [ 110.302853][ T6240] netlink: 'syz.2.62': attribute type 1 has an invalid length. [ 110.337557][ T6240] FAULT_INJECTION: forcing a failure. [ 110.337557][ T6240] name failslab, interval 1, probability 0, space 0, times 0 [ 110.352016][ T6240] CPU: 0 UID: 0 PID: 6240 Comm: syz.2.62 Not tainted syzkaller #0 PREEMPT(full) [ 110.352054][ T6240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 110.352070][ T6240] Call Trace: [ 110.352079][ T6240] [ 110.352090][ T6240] dump_stack_lvl+0x16c/0x1f0 [ 110.352136][ T6240] should_fail_ex+0x512/0x640 [ 110.352167][ T6240] ? __kmalloc_cache_noprof+0x5f/0x800 [ 110.352204][ T6240] should_failslab+0xc2/0x120 [ 110.352258][ T6240] __kmalloc_cache_noprof+0x80/0x800 [ 110.352292][ T6240] ? snd_timer_instance_new+0x47/0x2e0 [ 110.352341][ T6240] ? snd_timer_instance_new+0x47/0x2e0 [ 110.352384][ T6240] snd_timer_instance_new+0x47/0x2e0 [ 110.352428][ T6240] snd_seq_timer_open+0x1cc/0x600 [ 110.352464][ T6240] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 110.352510][ T6240] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 110.352549][ T6240] ? lockdep_hardirqs_on+0x7c/0x110 [ 110.352588][ T6240] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 110.352627][ T6240] queue_use+0xe3/0x250 [ 110.352654][ T6240] snd_seq_queue_alloc+0x2e5/0x5a0 [ 110.352688][ T6240] snd_seq_ioctl_create_queue+0xa9/0x390 [ 110.352729][ T6240] call_seq_client_ctl+0xa3/0x130 [ 110.352770][ T6240] snd_seq_kernel_client_ctl+0x7a/0xc0 [ 110.352811][ T6240] alloc_seq_queue+0xda/0x180 [ 110.352853][ T6240] ? __pfx_alloc_seq_queue+0x10/0x10 [ 110.352913][ T6240] ? mark_held_locks+0x49/0x80 [ 110.352939][ T6240] ? _raw_spin_unlock_irq+0x23/0x50 [ 110.352974][ T6240] ? lockdep_hardirqs_on+0x7c/0x110 [ 110.353018][ T6240] snd_seq_oss_open+0x38c/0xa40 [ 110.353066][ T6240] odev_open+0x79/0xc0 [ 110.353102][ T6240] ? __pfx_odev_open+0x10/0x10 [ 110.353139][ T6240] soundcore_open+0x40c/0x580 [ 110.353182][ T6240] ? __pfx_soundcore_open+0x10/0x10 [ 110.353229][ T6240] chrdev_open+0x234/0x6a0 [ 110.353271][ T6240] ? __pfx_apparmor_file_open+0x10/0x10 [ 110.353301][ T6240] ? __pfx_chrdev_open+0x10/0x10 [ 110.353346][ T6240] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 110.353396][ T6240] do_dentry_open+0x748/0x1590 [ 110.353434][ T6240] ? __pfx_chrdev_open+0x10/0x10 [ 110.353483][ T6240] vfs_open+0x82/0x3f0 [ 110.353518][ T6240] path_openat+0x2078/0x3140 [ 110.353574][ T6240] ? __pfx_path_openat+0x10/0x10 [ 110.353629][ T6240] do_filp_open+0x20b/0x470 [ 110.353671][ T6240] ? __pfx_do_filp_open+0x10/0x10 [ 110.353737][ T6240] ? alloc_fd+0x471/0x7d0 [ 110.353784][ T6240] do_sys_openat2+0x121/0x290 [ 110.353814][ T6240] ? __pfx_do_sys_openat2+0x10/0x10 [ 110.353864][ T6240] __x64_sys_openat+0x174/0x210 [ 110.353896][ T6240] ? __pfx___x64_sys_openat+0x10/0x10 [ 110.353942][ T6240] do_syscall_64+0xcd/0xf80 [ 110.353986][ T6240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.354015][ T6240] RIP: 0033:0x7ff13df8f7c9 [ 110.354038][ T6240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.354064][ T6240] RSP: 002b:00007ff13ed83038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 110.354089][ T6240] RAX: ffffffffffffffda RBX: 00007ff13e1e5fa0 RCX: 00007ff13df8f7c9 [ 110.354108][ T6240] RDX: 0000000000100842 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 110.354126][ T6240] RBP: 00007ff13e013f91 R08: 0000000000000000 R09: 0000000000000000 [ 110.354143][ T6240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.354160][ T6240] R13: 00007ff13e1e6038 R14: 00007ff13e1e5fa0 R15: 00007fff30273358 [ 110.354199][ T6240] [ 110.393751][ T6243] netlink: 342 bytes leftover after parsing attributes in process `syz.0.63'. [ 110.639438][ T6249] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 111.357112][ T6258] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 111.462453][ T6264] ubi0: attaching mtd0 [ 111.467949][ T6264] ubi0: scanning is finished [ 111.467984][ T6264] ubi0: empty MTD device detected [ 111.595269][ T6264] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 111.595303][ T6264] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 111.595326][ T6264] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 111.595348][ T6264] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 111.595369][ T6264] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 111.595391][ T6264] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 111.595414][ T6264] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3570102828 [ 111.595441][ T6264] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 111.596217][ T6265] ubi0: background thread "ubi_bgt0d" started, PID 6265 [ 112.437958][ T6273] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 112.672036][ T6275] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9 [ 112.782959][ T6278] random: crng reseeded on system resumption [ 113.154029][ T6275] block2mtd: illegal erase size [ 113.168898][ T3514] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.530893][ T6293] netlink: 12 bytes leftover after parsing attributes in process `syz.2.76'. [ 113.774194][ T6315] netlink: 12 bytes leftover after parsing attributes in process `syz.1.79'. [ 114.651898][ T6346] ptp ptp0: delete virtual clock ptp10 [ 114.708422][ T6346] ptp ptp0: delete virtual clock ptp9 [ 114.810926][ T6346] ptp ptp0: delete virtual clock ptp8 [ 114.815727][ T6351] netlink: 4 bytes leftover after parsing attributes in process `syz.3.83'. [ 114.827434][ T6351] netlink: 4 bytes leftover after parsing attributes in process `syz.3.83'. [ 114.895045][ T6346] ptp ptp0: delete virtual clock ptp7 [ 114.964127][ T6346] ptp ptp0: delete virtual clock ptp6 [ 115.056203][ T6346] ptp ptp0: delete virtual clock ptp5 [ 115.142028][ T6346] ptp ptp0: delete virtual clock ptp4 [ 115.204399][ T6346] ptp ptp0: delete virtual clock ptp3 [ 115.213990][ T6346] ptp ptp0: delete virtual clock ptp2 [ 115.217263][ T6346] ptp ptp0: delete virtual clock ptp1 [ 115.246199][ T6346] ptp ptp0: only physical clock in use now [ 115.515605][ T6367] netlink: zone id is out of range [ 115.521025][ T6367] netlink: zone id is out of range [ 115.547064][ T6367] netlink: zone id is out of range [ 115.563219][ T6367] netlink: zone id is out of range [ 115.568371][ T6367] netlink: zone id is out of range [ 115.584269][ T6354] netlink: 330 bytes leftover after parsing attributes in process `syz.2.84'. [ 115.597256][ T6354] tipc: Started in network mode [ 115.602792][ T6354] tipc: Node identity ffffffff, cluster identity 4711 [ 115.610436][ T6354] tipc: Node number set to 4294967295 [ 115.616731][ T6367] netlink: zone id is out of range [ 115.641590][ T6367] netlink: zone id is out of range [ 115.672921][ T6367] netlink: zone id is out of range [ 115.695821][ T6367] netlink: zone id is out of range [ 115.711346][ T6367] netlink: zone id is out of range [ 116.103289][ T6384] netlink: 12 bytes leftover after parsing attributes in process `syz.2.90'. [ 116.319766][ T6381] capability: warning: `syz.0.89' uses 32-bit capabilities (legacy support in use) [ 116.573680][ T6396] ubi: mtd0 is already attached to ubi0 [ 116.600889][ T6396] ubi0: detaching mtd0 [ 116.630716][ T6396] ubi0: mtd0 is detached [ 118.140931][ T6423] netlink: 342 bytes leftover after parsing attributes in process `syz.3.98'. [ 118.842424][ T6399] kexec: Could not allocate control_code_buffer [ 119.384645][ T6455] bridge0: port 3(bond0) entered blocking state [ 119.401698][ T6455] bridge0: port 3(bond0) entered disabled state [ 119.516004][ T6455] bond0: entered allmulticast mode [ 119.532042][ T6466] netlink: 12 bytes leftover after parsing attributes in process `syz.0.101'. [ 119.611789][ T6455] bond_slave_0: entered allmulticast mode [ 119.631248][ T6455] bond_slave_1: entered allmulticast mode [ 119.641379][ T6455] bond0: entered promiscuous mode [ 119.646459][ T6455] bond_slave_0: entered promiscuous mode [ 119.653017][ T6455] bond_slave_1: entered promiscuous mode [ 119.659799][ T6455] bridge0: port 3(bond0) entered blocking state [ 119.666541][ T6455] bridge0: port 3(bond0) entered forwarding state [ 120.706945][ T52] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 120.716489][ T52] Bluetooth: hci3: Invalid handle: 0x3a4a > 0x0eff [ 123.550679][ T6557] input: jJǸ-¶š9ã%vø“ûJ86Ö‘ as /devices/virtual/input/input10 [ 124.044700][ T6564] usb usb36: usbfs: process 6564 (syz.2.124) did not claim interface 0 before use [ 124.085624][ T6568] mkiss: ax0: crc mode is auto. [ 124.118958][ T6566] binder: 6561:6566 ioctl c018620c 0 returned -1 [ 124.304544][ T6554] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 124.459263][ T6572] FAULT_INJECTION: forcing a failure. [ 124.459263][ T6572] name fail_futex, interval 1, probability 0, space 0, times 1 [ 124.472828][ T6572] CPU: 1 UID: 0 PID: 6572 Comm: syz.3.127 Not tainted syzkaller #0 PREEMPT(full) [ 124.472862][ T6572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 124.472877][ T6572] Call Trace: [ 124.472884][ T6572] [ 124.472894][ T6572] dump_stack_lvl+0x16c/0x1f0 [ 124.472991][ T6572] should_fail_ex+0x512/0x640 [ 124.473021][ T6572] get_futex_key+0x1d0/0x15f0 [ 124.473051][ T6572] ? __pfx_get_futex_key+0x10/0x10 [ 124.473075][ T6572] ? find_held_lock+0x2b/0x80 [ 124.473113][ T6572] futex_wake+0xea/0x530 [ 124.473149][ T6572] ? __pfx_futex_wake+0x10/0x10 [ 124.473184][ T6572] ? lookup_user_key+0x2ce/0x1300 [ 124.473216][ T6572] do_futex+0x1e3/0x350 [ 124.473242][ T6572] ? __pfx_do_futex+0x10/0x10 [ 124.473267][ T6572] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 124.473299][ T6572] __x64_sys_futex+0x1e0/0x4c0 [ 124.473328][ T6572] ? __x64_sys_quotactl+0x209/0x440 [ 124.473365][ T6572] ? __pfx___x64_sys_futex+0x10/0x10 [ 124.473391][ T6572] ? keyctl_describe_key+0x2c1/0x550 [ 124.473428][ T6572] do_syscall_64+0xcd/0xf80 [ 124.473468][ T6572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.473494][ T6572] RIP: 0033:0x7f16abd8f7c9 [ 124.473513][ T6572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.473540][ T6572] RSP: 002b:00007f16acb880e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 124.473564][ T6572] RAX: ffffffffffffffda RBX: 00007f16abfe5fa8 RCX: 00007f16abd8f7c9 [ 124.473586][ T6572] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f16abfe5fac [ 124.473602][ T6572] RBP: 00007f16abfe5fa0 R08: 00007f16acb89000 R09: 0000000000000000 [ 124.473617][ T6572] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 124.473632][ T6572] R13: 00007f16abfe6038 R14: 00007ffe94587940 R15: 00007ffe94587a28 [ 124.473651][ T6572] [ 125.463190][ T6580] netlink: 'syz.3.129': attribute type 10 has an invalid length. [ 125.501130][ T6580] netlink: 230 bytes leftover after parsing attributes in process `syz.3.129'. [ 125.582731][ T6580] net_ratelimit: 7 callbacks suppressed [ 125.582756][ T6580] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 125.792981][ T6589] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 126.354683][ T6602] FAULT_INJECTION: forcing a failure. [ 126.354683][ T6602] name failslab, interval 1, probability 0, space 0, times 0 [ 126.416872][ T6602] CPU: 0 UID: 0 PID: 6602 Comm: syz.1.133 Not tainted syzkaller #0 PREEMPT(full) [ 126.416912][ T6602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 126.416929][ T6602] Call Trace: [ 126.416937][ T6602] [ 126.416948][ T6602] dump_stack_lvl+0x16c/0x1f0 [ 126.416995][ T6602] should_fail_ex+0x512/0x640 [ 126.417032][ T6602] should_failslab+0xc2/0x120 [ 126.417075][ T6602] kmem_cache_alloc_node_noprof+0x86/0x800 [ 126.417111][ T6602] ? alloc_io_context+0x21/0x2f0 [ 126.417146][ T6602] ? alloc_io_context+0x21/0x2f0 [ 126.417171][ T6602] alloc_io_context+0x21/0x2f0 [ 126.417199][ T6602] set_task_ioprio+0x49e/0x670 [ 126.417231][ T6602] __do_sys_ioprio_set+0x55b/0xb50 [ 126.417271][ T6602] ? __do_sys_ioprio_set+0x3dd/0xb50 [ 126.417320][ T6602] do_syscall_64+0xcd/0xf80 [ 126.417363][ T6602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.417391][ T6602] RIP: 0033:0x7f20bef8f7c9 [ 126.417415][ T6602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.417442][ T6602] RSP: 002b:00007f20bfe8f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fb [ 126.417469][ T6602] RAX: ffffffffffffffda RBX: 00007f20bf1e6180 RCX: 00007f20bef8f7c9 [ 126.417487][ T6602] RDX: 0000000000004b34 RSI: 0000000000000000 RDI: 0000000000000003 [ 126.417504][ T6602] RBP: 00007f20bf013f91 R08: 0000000000000000 R09: 0000000000000000 [ 126.417520][ T6602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.417537][ T6602] R13: 00007f20bf1e6218 R14: 00007f20bf1e6180 R15: 00007ffc19158a78 [ 126.417575][ T6602] [ 127.085206][ T6601] zswap: compressor not available [ 127.922275][ T6615] FAULT_INJECTION: forcing a failure. [ 127.922275][ T6615] name failslab, interval 1, probability 0, space 0, times 0 [ 127.950048][ T6615] CPU: 1 UID: 0 PID: 6615 Comm: syz.0.136 Not tainted syzkaller #0 PREEMPT(full) [ 127.950085][ T6615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 127.950100][ T6615] Call Trace: [ 127.950108][ T6615] [ 127.950118][ T6615] dump_stack_lvl+0x16c/0x1f0 [ 127.950163][ T6615] should_fail_ex+0x512/0x640 [ 127.950193][ T6615] ? __kmalloc_cache_noprof+0x5f/0x800 [ 127.950229][ T6615] should_failslab+0xc2/0x120 [ 127.950271][ T6615] __kmalloc_cache_noprof+0x80/0x800 [ 127.950298][ T6615] ? snd_timer_instance_new+0x47/0x2e0 [ 127.950345][ T6615] ? snd_timer_instance_new+0x47/0x2e0 [ 127.950383][ T6615] snd_timer_instance_new+0x47/0x2e0 [ 127.950421][ T6615] snd_seq_timer_open+0x1cc/0x600 [ 127.950456][ T6615] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 127.950500][ T6615] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 127.950537][ T6615] ? lockdep_hardirqs_on+0x7c/0x110 [ 127.950576][ T6615] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 127.950617][ T6615] queue_use+0xe3/0x250 [ 127.950646][ T6615] snd_seq_queue_alloc+0x2e5/0x5a0 [ 127.950682][ T6615] snd_seq_ioctl_create_queue+0xa9/0x390 [ 127.950723][ T6615] call_seq_client_ctl+0xa3/0x130 [ 127.950764][ T6615] snd_seq_kernel_client_ctl+0x7a/0xc0 [ 127.950805][ T6615] alloc_seq_queue+0xda/0x180 [ 127.950846][ T6615] ? __pfx_alloc_seq_queue+0x10/0x10 [ 127.950915][ T6615] ? mark_held_locks+0x49/0x80 [ 127.950942][ T6615] ? _raw_spin_unlock_irq+0x23/0x50 [ 127.950977][ T6615] ? lockdep_hardirqs_on+0x7c/0x110 [ 127.951020][ T6615] snd_seq_oss_open+0x38c/0xa40 [ 127.951065][ T6615] odev_open+0x79/0xc0 [ 127.951099][ T6615] ? __pfx_odev_open+0x10/0x10 [ 127.951135][ T6615] soundcore_open+0x40c/0x580 [ 127.951178][ T6615] ? __pfx_soundcore_open+0x10/0x10 [ 127.951216][ T6615] chrdev_open+0x234/0x6a0 [ 127.951256][ T6615] ? __pfx_apparmor_file_open+0x10/0x10 [ 127.951285][ T6615] ? __pfx_chrdev_open+0x10/0x10 [ 127.951328][ T6615] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 127.951379][ T6615] do_dentry_open+0x748/0x1590 [ 127.951419][ T6615] ? __pfx_chrdev_open+0x10/0x10 [ 127.951469][ T6615] vfs_open+0x82/0x3f0 [ 127.951508][ T6615] path_openat+0x2078/0x3140 [ 127.951561][ T6615] ? __pfx_path_openat+0x10/0x10 [ 127.951616][ T6615] do_filp_open+0x20b/0x470 [ 127.951657][ T6615] ? __pfx_do_filp_open+0x10/0x10 [ 127.951725][ T6615] ? alloc_fd+0x471/0x7d0 [ 127.951775][ T6615] do_sys_openat2+0x121/0x290 [ 127.951804][ T6615] ? __pfx_do_sys_openat2+0x10/0x10 [ 127.951847][ T6615] __x64_sys_openat+0x174/0x210 [ 127.951886][ T6615] ? __pfx___x64_sys_openat+0x10/0x10 [ 127.951931][ T6615] do_syscall_64+0xcd/0xf80 [ 127.951975][ T6615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.952004][ T6615] RIP: 0033:0x7f607e58f7c9 [ 127.952027][ T6615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.952054][ T6615] RSP: 002b:00007f607f3ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 127.952081][ T6615] RAX: ffffffffffffffda RBX: 00007f607e7e5fa0 RCX: 00007f607e58f7c9 [ 127.952100][ T6615] RDX: 0000000000100842 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 127.952118][ T6615] RBP: 00007f607e613f91 R08: 0000000000000000 R09: 0000000000000000 [ 127.952136][ T6615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.952153][ T6615] R13: 00007f607e7e6038 R14: 00007f607e7e5fa0 R15: 00007ffd0a314ce8 [ 127.952193][ T6615] [ 130.365907][ T6666] FAULT_INJECTION: forcing a failure. [ 130.365907][ T6666] name failslab, interval 1, probability 0, space 0, times 0 [ 130.420226][ T6666] CPU: 1 UID: 0 PID: 6666 Comm: syz.1.149 Tainted: G L syzkaller #0 PREEMPT(full) [ 130.420273][ T6666] Tainted: [L]=SOFTLOCKUP [ 130.420283][ T6666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 130.420308][ T6666] Call Trace: [ 130.420317][ T6666] [ 130.420328][ T6666] dump_stack_lvl+0x16c/0x1f0 [ 130.420376][ T6666] should_fail_ex+0x512/0x640 [ 130.420406][ T6666] ? __kmalloc_cache_noprof+0x5f/0x800 [ 130.420443][ T6666] should_failslab+0xc2/0x120 [ 130.420485][ T6666] __kmalloc_cache_noprof+0x80/0x800 [ 130.420518][ T6666] ? snd_timer_instance_new+0x47/0x2e0 [ 130.420566][ T6666] ? snd_timer_instance_new+0x47/0x2e0 [ 130.420608][ T6666] snd_timer_instance_new+0x47/0x2e0 [ 130.420656][ T6666] snd_seq_timer_open+0x1cc/0x600 [ 130.420693][ T6666] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 130.420740][ T6666] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 130.420778][ T6666] ? lockdep_hardirqs_on+0x7c/0x110 [ 130.420817][ T6666] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 130.420859][ T6666] queue_use+0xe3/0x250 [ 130.420887][ T6666] snd_seq_queue_alloc+0x2e5/0x5a0 [ 130.420923][ T6666] snd_seq_ioctl_create_queue+0xa9/0x390 [ 130.420963][ T6666] call_seq_client_ctl+0xa3/0x130 [ 130.421003][ T6666] snd_seq_kernel_client_ctl+0x7a/0xc0 [ 130.421045][ T6666] alloc_seq_queue+0xda/0x180 [ 130.421085][ T6666] ? __pfx_alloc_seq_queue+0x10/0x10 [ 130.421143][ T6666] ? mark_held_locks+0x49/0x80 [ 130.421169][ T6666] ? _raw_spin_unlock_irq+0x23/0x50 [ 130.421204][ T6666] ? lockdep_hardirqs_on+0x7c/0x110 [ 130.421247][ T6666] snd_seq_oss_open+0x38c/0xa40 [ 130.421301][ T6666] odev_open+0x79/0xc0 [ 130.421338][ T6666] ? __pfx_odev_open+0x10/0x10 [ 130.421376][ T6666] soundcore_open+0x40c/0x580 [ 130.421419][ T6666] ? __pfx_soundcore_open+0x10/0x10 [ 130.421457][ T6666] chrdev_open+0x234/0x6a0 [ 130.421497][ T6666] ? __pfx_apparmor_file_open+0x10/0x10 [ 130.421526][ T6666] ? __pfx_chrdev_open+0x10/0x10 [ 130.421568][ T6666] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 130.421618][ T6666] do_dentry_open+0x748/0x1590 [ 130.421655][ T6666] ? __pfx_chrdev_open+0x10/0x10 [ 130.421706][ T6666] vfs_open+0x82/0x3f0 [ 130.421740][ T6666] path_openat+0x2078/0x3140 [ 130.421792][ T6666] ? __pfx_path_openat+0x10/0x10 [ 130.421846][ T6666] do_filp_open+0x20b/0x470 [ 130.421887][ T6666] ? __pfx_do_filp_open+0x10/0x10 [ 130.421954][ T6666] ? alloc_fd+0x471/0x7d0 [ 130.422004][ T6666] do_sys_openat2+0x121/0x290 [ 130.422034][ T6666] ? __pfx_do_sys_openat2+0x10/0x10 [ 130.422079][ T6666] __x64_sys_openat+0x174/0x210 [ 130.422111][ T6666] ? __pfx___x64_sys_openat+0x10/0x10 [ 130.422158][ T6666] do_syscall_64+0xcd/0xf80 [ 130.422200][ T6666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.422229][ T6666] RIP: 0033:0x7f20bef8f7c9 [ 130.422252][ T6666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.422278][ T6666] RSP: 002b:00007f20bfed1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 130.422311][ T6666] RAX: ffffffffffffffda RBX: 00007f20bf1e5fa0 RCX: 00007f20bef8f7c9 [ 130.422330][ T6666] RDX: 0000000000100842 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 130.422349][ T6666] RBP: 00007f20bf013f91 R08: 0000000000000000 R09: 0000000000000000 [ 130.422366][ T6666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.422383][ T6666] R13: 00007f20bf1e6038 R14: 00007f20bf1e5fa0 R15: 00007ffc19158a78 [ 130.422421][ T6666] syzkaller syzkaller login: [ 131.561664][ T6697] FAULT_INJECTION: forcing a failure. [ 131.561664][ T6697] name failslab, interval 1, probability 0, space 0, times 0 [ 131.612395][ T6697] CPU: 1 UID: 0 PID: 6697 Comm: syz.2.159 Tainted: G L syzkaller #0 PREEMPT(full) [ 131.612445][ T6697] Tainted: [L]=SOFTLOCKUP [ 131.612455][ T6697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 131.612470][ T6697] Call Trace: [ 131.612480][ T6697] [ 131.612491][ T6697] dump_stack_lvl+0x16c/0x1f0 [ 131.612545][ T6697] should_fail_ex+0x512/0x640 [ 131.612577][ T6697] ? __kmalloc_noprof+0xca/0x910 [ 131.612610][ T6697] should_failslab+0xc2/0x120 [ 131.612652][ T6697] __kmalloc_noprof+0xeb/0x910 [ 131.612682][ T6697] ? process_vm_rw_core.constprop.0+0x1d8/0x970 [ 131.612726][ T6697] ? process_vm_rw_core.constprop.0+0x1d8/0x970 [ 131.612761][ T6697] process_vm_rw_core.constprop.0+0x1d8/0x970 [ 131.612813][ T6697] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 131.612877][ T6697] ? iovec_from_user+0xbb/0x140 [ 131.612912][ T6697] process_vm_rw+0x216/0x2c0 [ 131.612950][ T6697] ? __pfx_process_vm_rw+0x10/0x10 [ 131.613030][ T6697] ? __pfx___x64_sys_futex+0x10/0x10 [ 131.613064][ T6697] ? __pfx_kernel_set_mempolicy+0x10/0x10 [ 131.613110][ T6697] __x64_sys_process_vm_readv+0xe2/0x1c0 [ 131.613147][ T6697] ? do_syscall_64+0x91/0xf80 [ 131.613186][ T6697] ? lockdep_hardirqs_on+0x7c/0x110 [ 131.613234][ T6697] do_syscall_64+0xcd/0xf80 [ 131.613280][ T6697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.613313][ T6697] RIP: 0033:0x7ff13df8f7c9 [ 131.613335][ T6697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.613362][ T6697] RSP: 002b:00007ff13ed83038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 131.613394][ T6697] RAX: ffffffffffffffda RBX: 00007ff13e1e5fa0 RCX: 00007ff13df8f7c9 [ 131.613413][ T6697] RDX: 0000040000000001 RSI: 0000200000000000 RDI: 0000000000000000 [ 131.613431][ T6697] RBP: 00007ff13e013f91 R08: 000000000000000a R09: 0000000000000000 [ 131.613448][ T6697] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 131.613464][ T6697] R13: 00007ff13e1e6038 R14: 00007ff13e1e5fa0 R15: 00007fff30273358 [ 131.613501][ T6697] [ 138.073315][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.090488][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 170.796759][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 170.807358][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 170.815801][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 170.825436][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 170.833260][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 171.463092][ T9535] chnl_net:caif_netlink_parms(): no params data found [ 171.609441][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.738702][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.903099][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.947802][ T9535] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.977380][ T9535] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.991572][ T9535] bridge_slave_0: entered allmulticast mode [ 171.999477][ T9535] bridge_slave_0: entered promiscuous mode [ 172.037050][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.057294][ T9535] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.067265][ T9535] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.075941][ T9535] bridge_slave_1: entered allmulticast mode [ 172.088105][ T9535] bridge_slave_1: entered promiscuous mode [ 172.175406][ T9535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.231150][ T9535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.324848][ T9535] team0: Port device team_slave_0 added [ 172.369497][ T9535] team0: Port device team_slave_1 added [ 172.462509][ T9535] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.470697][ T9535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.514232][ T9535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.527729][ T9535] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.545998][ T9535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.588995][ T9535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.601820][ T13] bridge_slave_1: left allmulticast mode [ 172.630926][ T13] bridge_slave_1: left promiscuous mode [ 172.638607][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.669854][ T13] bridge_slave_0: left allmulticast mode [ 172.676060][ T13] bridge_slave_0: left promiscuous mode [ 172.685560][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.863717][ T5836] Bluetooth: hci4: command tx timeout [ 173.182105][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.213270][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.235295][ T13] bond0 (unregistering): Released all slaves [ 173.399317][ T9535] hsr_slave_0: entered promiscuous mode [ 173.416850][ T9535] hsr_slave_1: entered promiscuous mode [ 173.428016][ T9535] debugfs: 'hsr0' already exists in 'hsr' [ 173.439426][ T9535] Cannot create hsr debugfs directory [ 173.956022][ T13] hsr_slave_0: left promiscuous mode [ 173.975371][ T13] hsr_slave_1: left promiscuous mode [ 173.996529][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.013225][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.041539][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.049051][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.117907][ T13] veth1_macvtap: left promiscuous mode [ 174.137097][ T13] veth0_macvtap: left promiscuous mode [ 174.150523][ T13] veth1_vlan: left promiscuous mode [ 174.162087][ T13] veth0_vlan: left promiscuous mode [ 174.946067][ T5836] Bluetooth: hci4: command tx timeout [ 175.426898][ T13] team0 (unregistering): Port device team_slave_1 removed [ 175.545403][ T13] team0 (unregistering): Port device team_slave_0 removed [ 177.022493][ T5836] Bluetooth: hci4: command tx timeout [ 177.381569][ T9535] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 177.407451][ T9535] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 177.468007][ T9535] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 177.526623][ T9535] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 177.836022][ T9535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.897679][ T9535] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.954970][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.962281][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.999925][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.007180][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.156539][ T9535] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 178.173804][ T9535] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 178.608797][ T9535] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.774375][ T9535] veth0_vlan: entered promiscuous mode [ 178.805065][ T9535] veth1_vlan: entered promiscuous mode [ 178.893051][ T9535] veth0_macvtap: entered promiscuous mode [ 178.918988][ T9535] veth1_macvtap: entered promiscuous mode [ 178.951429][ T9535] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.991183][ T9535] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.012219][ T66] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.035956][ T66] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.071833][ T66] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.100183][ T5836] Bluetooth: hci4: command tx timeout [ 179.183503][ T66] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.311735][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.342513][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.472084][ T6336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.481663][ T6336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.153486][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 180.182661][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 180.191669][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 180.214365][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 180.224712][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 180.982561][T10218] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2829'. [ 180.996743][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.188281][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.337911][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.927717][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.948744][T10176] chnl_net:caif_netlink_parms(): no params data found [ 181.999338][T10267] netlink: 'syz.1.2854': attribute type 21 has an invalid length. [ 182.029211][T10267] netlink: 326 bytes leftover after parsing attributes in process `syz.1.2854'. [ 182.302401][ T52] Bluetooth: hci3: command tx timeout [ 182.335966][ T49] bond0: left allmulticast mode [ 182.343413][ T49] bond_slave_0: left allmulticast mode [ 182.348912][ T49] bond_slave_1: left allmulticast mode [ 182.354703][ T49] bond0: left promiscuous mode [ 182.359490][ T49] bond_slave_0: left promiscuous mode [ 182.369833][ T49] bond_slave_1: left promiscuous mode [ 182.377265][ T49] bridge0: port 3(bond0) entered disabled state [ 182.388890][ T49] bridge_slave_1: left allmulticast mode [ 182.394790][ T49] bridge_slave_1: left promiscuous mode [ 182.401809][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.415141][ T49] bridge_slave_0: left allmulticast mode [ 182.430539][ T49] bridge_slave_0: left promiscuous mode [ 182.446603][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.119331][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.171564][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.194545][ T49] bond0 (unregistering): Released all slaves [ 183.208010][T10176] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.222720][T10176] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.232976][T10176] bridge_slave_0: entered allmulticast mode [ 183.243835][T10176] bridge_slave_0: entered promiscuous mode [ 183.265524][T10176] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.290408][T10176] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.310221][T10176] bridge_slave_1: entered allmulticast mode [ 183.318042][T10176] bridge_slave_1: entered promiscuous mode [ 183.488409][T10176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.546285][T10176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.790250][ T49] hsr_slave_0: left promiscuous mode [ 183.801183][ T49] hsr_slave_1: left promiscuous mode [ 183.822916][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.843895][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.860889][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.875111][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.904482][ T49] veth1_macvtap: left promiscuous mode [ 183.913508][ T49] veth0_macvtap: left promiscuous mode [ 183.919201][ T49] veth1_vlan: left promiscuous mode [ 183.927643][ T49] veth0_vlan: left promiscuous mode [ 184.390070][ T52] Bluetooth: hci3: command tx timeout [ 184.823590][ T49] team0 (unregistering): Port device team_slave_1 removed [ 184.894212][ T49] team0 (unregistering): Port device team_slave_0 removed [ 185.544187][T10176] team0: Port device team_slave_0 added [ 185.611722][T10176] team0: Port device team_slave_1 added [ 185.741007][T10176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.747993][T10176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 185.782050][T10176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.853768][T10176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.866469][T10176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 185.922234][T10176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.138944][T10176] hsr_slave_0: entered promiscuous mode [ 186.153420][T10176] hsr_slave_1: entered promiscuous mode [ 186.460115][ T52] Bluetooth: hci3: command tx timeout [ 187.152516][T10176] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 187.209232][T10176] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 187.236775][T10176] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 187.269020][T10176] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 187.365279][T10602] netlink: del zone limit has 8 unknown bytes [ 187.514832][T10176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.575981][T10176] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.631723][ T3560] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.638912][ T3560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.715455][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.722689][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.414869][T10176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.541283][ T52] Bluetooth: hci3: command tx timeout [ 188.549455][T10176] veth0_vlan: entered promiscuous mode [ 188.568061][T10176] veth1_vlan: entered promiscuous mode [ 188.623037][T10176] veth0_macvtap: entered promiscuous mode [ 188.638062][T10677] FAULT_INJECTION: forcing a failure. [ 188.638062][T10677] name failslab, interval 1, probability 0, space 0, times 0 [ 188.638426][T10176] veth1_macvtap: entered promiscuous mode [ 188.664816][T10677] CPU: 1 UID: 0 PID: 10677 Comm: syz.1.3110 Tainted: G L syzkaller #0 PREEMPT(full) [ 188.664859][T10677] Tainted: [L]=SOFTLOCKUP [ 188.664868][T10677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 188.664883][T10677] Call Trace: [ 188.664891][T10677] [ 188.664906][T10677] dump_stack_lvl+0x16c/0x1f0 [ 188.664971][T10677] should_fail_ex+0x512/0x640 [ 188.665000][T10677] ? __kmalloc_noprof+0xca/0x910 [ 188.665033][T10677] should_failslab+0xc2/0x120 [ 188.665074][T10677] __kmalloc_noprof+0xeb/0x910 [ 188.665103][T10677] ? constrain_params_by_rules+0x175/0xca0 [ 188.665152][T10677] ? constrain_params_by_rules+0x175/0xca0 [ 188.665196][T10677] constrain_params_by_rules+0x175/0xca0 [ 188.665238][T10677] ? arch_stack_walk+0xa6/0x100 [ 188.665282][T10677] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 188.665324][T10677] ? stack_trace_save+0x8e/0xc0 [ 188.665363][T10677] ? __pfx_stack_trace_save+0x10/0x10 [ 188.665405][T10677] ? __pfx_stack_trace_save+0x10/0x10 [ 188.665452][T10677] ? snd_pcm_oss_change_params_locked+0xb46/0x3ab0 [ 188.665494][T10677] ? snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 188.665533][T10677] ? snd_pcm_oss_sync+0x32e/0x840 [ 188.665557][T10677] ? snd_pcm_oss_release+0x28b/0x310 [ 188.665581][T10677] ? __fput+0x402/0xb70 [ 188.665605][T10677] ? task_work_run+0x150/0x240 [ 188.665632][T10677] ? snd_interval_refine+0x2fa/0x580 [ 188.665672][T10677] snd_pcm_hw_refine+0x7de/0xad0 [ 188.665729][T10677] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 188.665797][T10677] snd_pcm_hw_param_first+0x334/0x6f0 [ 188.665832][T10677] snd_pcm_hw_param_near.constprop.0+0x702/0x8e0 [ 188.665881][T10677] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 188.665937][T10677] snd_pcm_oss_change_params_locked+0xb46/0x3ab0 [ 188.666007][T10677] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 188.666057][T10677] ? __pfx___mutex_lock+0x10/0x10 [ 188.666119][T10677] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 188.666166][T10677] snd_pcm_oss_sync+0x32e/0x840 [ 188.666192][T10677] ? kmem_cache_free+0x171/0x770 [ 188.666229][T10677] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 188.666256][T10677] snd_pcm_oss_release+0x28b/0x310 [ 188.666285][T10677] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 188.666311][T10677] __fput+0x402/0xb70 [ 188.666348][T10677] task_work_run+0x150/0x240 [ 188.666379][T10677] ? __pfx_task_work_run+0x10/0x10 [ 188.666406][T10677] ? __do_sys_close_range+0x278/0x730 [ 188.666458][T10677] exit_to_user_mode_loop+0xfb/0x540 [ 188.666497][T10677] do_syscall_64+0x4ee/0xf80 [ 188.666540][T10677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.666568][T10677] RIP: 0033:0x7f0a1478f7c9 [ 188.666591][T10677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.666617][T10677] RSP: 002b:00007f0a1562e038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 188.666643][T10677] RAX: 0000000000000000 RBX: 00007f0a149e5fa0 RCX: 00007f0a1478f7c9 [ 188.666660][T10677] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 188.666676][T10677] RBP: 00007f0a14813f91 R08: 0000000000000000 R09: 0000000000000000 [ 188.666693][T10677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.666709][T10677] R13: 00007f0a149e6038 R14: 00007f0a149e5fa0 R15: 00007ffcdfd46888 [ 188.666748][T10677] [ 188.692408][T10176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.823007][T10688] FAULT_INJECTION: forcing a failure. [ 188.823007][T10688] name failslab, interval 1, probability 0, space 0, times 0 [ 188.843197][T10176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.930169][T10688] CPU: 1 UID: 0 PID: 10688 Comm: syz.1.3118 Tainted: G L syzkaller #0 PREEMPT(full) [ 188.930220][T10688] Tainted: [L]=SOFTLOCKUP [ 188.930230][T10688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 188.930246][T10688] Call Trace: [ 188.930255][T10688] [ 188.930265][T10688] dump_stack_lvl+0x16c/0x1f0 [ 188.930311][T10688] should_fail_ex+0x512/0x640 [ 188.930340][T10688] ? __kmalloc_cache_noprof+0x5f/0x800 [ 188.930375][T10688] should_failslab+0xc2/0x120 [ 188.930416][T10688] __kmalloc_cache_noprof+0x80/0x800 [ 188.930447][T10688] ? snd_seq_port_connect+0x61/0x580 [ 188.930491][T10688] ? snd_seq_port_connect+0x61/0x580 [ 188.930529][T10688] snd_seq_port_connect+0x61/0x580 [ 188.930566][T10688] ? _raw_read_unlock+0x28/0x50 [ 188.930602][T10688] ? check_subscription_permission.isra.0+0xf5/0x240 [ 188.930647][T10688] snd_seq_ioctl_subscribe_port+0x209/0x4b0 [ 188.930691][T10688] ? __pfx_snd_seq_ioctl_subscribe_port+0x10/0x10 [ 188.930735][T10688] ? do_raw_spin_lock+0x12c/0x2b0 [ 188.930777][T10688] call_seq_client_ctl+0xa3/0x130 [ 188.930817][T10688] snd_seq_kernel_client_ctl+0x7a/0xc0 [ 188.930857][T10688] snd_seq_oss_midi_open+0x5ab/0x6a0 [ 188.930889][T10688] ? __pfx_snd_seq_oss_midi_open+0x10/0x10 [ 188.930919][T10688] ? snd_seq_oss_midi_reset+0x11a/0x4c0 [ 188.930960][T10688] ? __mutex_lock+0x27b/0x1ca0 [ 188.931006][T10688] snd_seq_oss_synth_reset+0x437/0x900 [ 188.931034][T10688] ? __pfx___mutex_lock+0x10/0x10 [ 188.931068][T10688] ? __pfx_snd_seq_oss_synth_reset+0x10/0x10 [ 188.931097][T10688] ? __pfx___fsnotify_parent+0x10/0x10 [ 188.931141][T10688] snd_seq_oss_reset+0x73/0x290 [ 188.931190][T10688] ? __pfx_odev_release+0x10/0x10 [ 188.931229][T10688] snd_seq_oss_release+0x7c/0x180 [ 188.931270][T10688] odev_release+0x56/0xa0 [ 188.931305][T10688] __fput+0x402/0xb70 [ 188.931342][T10688] task_work_run+0x150/0x240 [ 188.931372][T10688] ? __pfx_task_work_run+0x10/0x10 [ 188.931399][T10688] ? __do_sys_close_range+0x278/0x730 [ 188.931449][T10688] exit_to_user_mode_loop+0xfb/0x540 [ 188.931487][T10688] do_syscall_64+0x4ee/0xf80 [ 188.931529][T10688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.931556][T10688] RIP: 0033:0x7f0a1478f7c9 [ 188.931579][T10688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.931605][T10688] RSP: 002b:00007f0a1562e038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 188.931631][T10688] RAX: 0000000000000000 RBX: 00007f0a149e5fa0 RCX: 00007f0a1478f7c9 [ 188.931648][T10688] RDX: 0000000000000000 RSI: fffffffffffff000 RDI: 0000000000000000 [ 188.931665][T10688] RBP: 00007f0a14813f91 R08: 0000000000000000 R09: 0000000000000000 [ 188.931681][T10688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.931697][T10688] R13: 00007f0a149e6038 R14: 00007f0a149e5fa0 R15: 00007ffcdfd46888 [ 188.931735][T10688] [ 189.421497][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.454396][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.465620][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.494861][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.715103][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.730585][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.801122][ T6336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.833473][ T6336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.170852][T10741] netlink: 'syz.0.2794': attribute type 1 has an invalid length. [ 190.211214][T10741] FAULT_INJECTION: forcing a failure. [ 190.211214][T10741] name failslab, interval 1, probability 0, space 0, times 0 [ 190.241420][T10741] CPU: 0 UID: 0 PID: 10741 Comm: syz.0.2794 Tainted: G L syzkaller #0 PREEMPT(full) [ 190.241467][T10741] Tainted: [L]=SOFTLOCKUP [ 190.241477][T10741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 190.241494][T10741] Call Trace: [ 190.241503][T10741] [ 190.241513][T10741] dump_stack_lvl+0x16c/0x1f0 [ 190.241558][T10741] should_fail_ex+0x512/0x640 [ 190.241588][T10741] ? __kmalloc_node_track_caller_noprof+0xcb/0x930 [ 190.241627][T10741] should_failslab+0xc2/0x120 [ 190.241660][T10741] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 190.241697][T10741] ? snd_timer_instance_new+0x65/0x2e0 [ 190.241750][T10741] ? kstrdup+0x53/0x100 [ 190.241782][T10741] kstrdup+0x53/0x100 [ 190.241817][T10741] snd_timer_instance_new+0x65/0x2e0 [ 190.241876][T10741] snd_seq_timer_open+0x1cc/0x600 [ 190.241915][T10741] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 190.241960][T10741] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 190.241997][T10741] ? lockdep_hardirqs_on+0x7c/0x110 [ 190.242034][T10741] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 190.242075][T10741] queue_use+0xe3/0x250 [ 190.242100][T10741] snd_seq_queue_alloc+0x2e5/0x5a0 [ 190.242130][T10741] snd_seq_ioctl_create_queue+0xa9/0x390 [ 190.242176][T10741] call_seq_client_ctl+0xa3/0x130 [ 190.242213][T10741] snd_seq_kernel_client_ctl+0x7a/0xc0 [ 190.242252][T10741] alloc_seq_queue+0xda/0x180 [ 190.242292][T10741] ? __pfx_alloc_seq_queue+0x10/0x10 [ 190.242351][T10741] ? mark_held_locks+0x49/0x80 [ 190.242378][T10741] ? _raw_spin_unlock_irq+0x23/0x50 [ 190.242413][T10741] ? lockdep_hardirqs_on+0x7c/0x110 [ 190.242456][T10741] snd_seq_oss_open+0x38c/0xa40 [ 190.242504][T10741] odev_open+0x79/0xc0 [ 190.242540][T10741] ? __pfx_odev_open+0x10/0x10 [ 190.242577][T10741] soundcore_open+0x40c/0x580 [ 190.242620][T10741] ? __pfx_soundcore_open+0x10/0x10 [ 190.242659][T10741] chrdev_open+0x234/0x6a0 [ 190.242699][T10741] ? __pfx_apparmor_file_open+0x10/0x10 [ 190.242728][T10741] ? __pfx_chrdev_open+0x10/0x10 [ 190.242772][T10741] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 190.242821][T10741] do_dentry_open+0x748/0x1590 [ 190.242861][T10741] ? __pfx_chrdev_open+0x10/0x10 [ 190.242912][T10741] vfs_open+0x82/0x3f0 [ 190.242947][T10741] path_openat+0x2078/0x3140 [ 190.243000][T10741] ? __pfx_path_openat+0x10/0x10 [ 190.243054][T10741] do_filp_open+0x20b/0x470 [ 190.243100][T10741] ? __pfx_do_filp_open+0x10/0x10 [ 190.243176][T10741] ? alloc_fd+0x471/0x7d0 [ 190.243227][T10741] do_sys_openat2+0x121/0x290 [ 190.243258][T10741] ? __pfx_do_sys_openat2+0x10/0x10 [ 190.243305][T10741] __x64_sys_openat+0x174/0x210 [ 190.243337][T10741] ? __pfx___x64_sys_openat+0x10/0x10 [ 190.243384][T10741] do_syscall_64+0xcd/0xf80 [ 190.243426][T10741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.243455][T10741] RIP: 0033:0x7fda4a58f7c9 [ 190.243478][T10741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.243505][T10741] RSP: 002b:00007fda4b43d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 190.243533][T10741] RAX: ffffffffffffffda RBX: 00007fda4a7e5fa0 RCX: 00007fda4a58f7c9 [ 190.243551][T10741] RDX: 0000000000100842 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 190.243570][T10741] RBP: 00007fda4a613f91 R08: 0000000000000000 R09: 0000000000000000 [ 190.243588][T10741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.243604][T10741] R13: 00007fda4a7e6038 R14: 00007fda4a7e5fa0 R15: 00007ffc5dedf0a8 [ 190.243644][T10741] [ 190.285094][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 190.624039][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 190.644058][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 190.659503][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 190.668325][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 190.956697][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.181239][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.287559][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.392070][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.620857][T10751] chnl_net:caif_netlink_parms(): no params data found [ 191.899438][ T13] bridge_slave_1: left allmulticast mode [ 191.909139][ T13] bridge_slave_1: left promiscuous mode [ 191.920535][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.937971][ T13] bridge_slave_0: left allmulticast mode [ 191.947947][ T13] bridge_slave_0: left promiscuous mode [ 191.962695][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.584959][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.607682][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.622823][ T13] bond0 (unregistering): Released all slaves [ 192.678773][T10751] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.686193][T10751] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.700109][ T52] Bluetooth: hci0: command tx timeout [ 192.714020][T10751] bridge_slave_0: entered allmulticast mode [ 192.727161][T10751] bridge_slave_0: entered promiscuous mode [ 192.743991][T10751] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.753602][T10751] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.763678][T10751] bridge_slave_1: entered allmulticast mode [ 192.779094][T10751] bridge_slave_1: entered promiscuous mode [ 192.879845][T10751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.921077][T10751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.069346][T10751] team0: Port device team_slave_0 added [ 193.197630][ T13] hsr_slave_0: left promiscuous mode [ 193.233597][ T13] hsr_slave_1: left promiscuous mode [ 193.251473][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.258907][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.287009][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.304497][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.349054][ T13] veth1_macvtap: left promiscuous mode [ 193.362007][ T13] veth0_macvtap: left promiscuous mode [ 193.375383][ T13] veth1_vlan: left promiscuous mode [ 193.386655][ T13] veth0_vlan: left promiscuous mode [ 194.788652][ T52] Bluetooth: hci0: command tx timeout [ 194.989695][ T13] team0 (unregistering): Port device team_slave_1 removed [ 195.102970][ T13] team0 (unregistering): Port device team_slave_0 removed [ 195.988003][T10923] FAULT_INJECTION: forcing a failure. [ 195.988003][T10923] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 196.003074][T10923] CPU: 0 UID: 0 PID: 10923 Comm: syz.0.3249 Tainted: G L syzkaller #0 PREEMPT(full) [ 196.003120][T10923] Tainted: [L]=SOFTLOCKUP [ 196.003130][T10923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 196.003146][T10923] Call Trace: [ 196.003161][T10923] [ 196.003185][T10751] team0: Port device team_slave_1 added [ 196.003172][T10923] dump_stack_lvl+0x16c/0x1f0 [ 196.003223][T10923] should_fail_ex+0x512/0x640 [ 196.003255][T10923] should_fail_alloc_page+0xe7/0x130 [ 196.003301][T10923] prepare_alloc_pages+0x401/0x670 [ 196.003358][T10923] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 196.003401][T10923] ? find_held_lock+0x2b/0x80 [ 196.003438][T10923] ? is_bpf_text_address+0x8a/0x1a0 [ 196.003473][T10923] ? bpf_ksym_find+0x124/0x1c0 [ 196.003502][T10923] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 196.003537][T10923] ? kernel_text_address+0x8d/0x100 [ 196.003567][T10923] ? __kernel_text_address+0xd/0x40 [ 196.003683][T10923] ? unwind_get_return_address+0x59/0xa0 [ 196.003739][T10923] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 196.003784][T10923] ? policy_nodemask+0xea/0x4e0 [ 196.003830][T10923] alloc_pages_mpol+0x1fb/0x550 [ 196.003874][T10923] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 196.003911][T10923] ? kasan_save_stack+0x42/0x60 [ 196.003947][T10923] ? kasan_save_track+0x14/0x30 [ 196.003980][T10923] ? __kasan_kmalloc+0xaa/0xb0 [ 196.004012][T10923] ? __get_vm_area_node+0x101/0x330 [ 196.004065][T10923] alloc_pages_noprof+0x131/0x390 [ 196.004107][T10923] get_free_pages_noprof+0x10/0xb0 [ 196.004146][T10923] __kasan_populate_vmalloc+0xa0/0x220 [ 196.004192][T10923] alloc_vmap_area+0x98d/0x2a50 [ 196.004248][T10923] ? __pfx_alloc_vmap_area+0x10/0x10 [ 196.004298][T10923] __get_vm_area_node+0x1ca/0x330 [ 196.004349][T10923] __vmalloc_node_range_noprof+0x247/0x16b0 [ 196.004377][T10923] ? zcomp_cpu_up_prepare+0x13e/0x360 [ 196.004417][T10923] ? __lock_acquire+0x436/0x2890 [ 196.004451][T10923] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 196.004494][T10923] ? zcomp_cpu_up_prepare+0x13e/0x360 [ 196.004542][T10923] ? find_held_lock+0x2b/0x80 [ 196.004584][T10923] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 196.004612][T10923] ? rcu_read_unlock+0x17/0x60 [ 196.004637][T10923] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 196.004684][T10923] ? lruvec_stat_mod_folio+0x25b/0x3b0 [ 196.004725][T10923] ? zcomp_cpu_up_prepare+0x13e/0x360 [ 196.004765][T10923] __vmalloc_node_noprof+0xad/0xf0 [ 196.004793][T10923] ? zcomp_cpu_up_prepare+0x13e/0x360 [ 196.004839][T10923] zcomp_cpu_up_prepare+0x13e/0x360 [ 196.004879][T10923] ? trace_cpuhp_multi_enter+0x189/0x1d0 [ 196.004923][T10923] ? __pfx_zcomp_cpu_up_prepare+0x10/0x10 [ 196.004963][T10923] cpuhp_invoke_callback+0x20d/0xa10 [ 196.005004][T10923] ? __pfx_zcomp_cpu_up_prepare+0x10/0x10 [ 196.005050][T10923] cpuhp_issue_call+0x1c0/0x980 [ 196.005096][T10923] __cpuhp_state_add_instance_cpuslocked+0x1a4/0x3c0 [ 196.005148][T10923] __cpuhp_state_add_instance+0xd7/0x2e0 [ 196.005196][T10923] zcomp_create+0x39c/0x650 [ 196.005242][T10923] disksize_store+0x2a0/0x670 [ 196.005275][T10923] ? __pfx_disksize_store+0x10/0x10 [ 196.005301][T10923] dev_attr_store+0x58/0x80 [ 196.005335][T10923] ? __pfx_dev_attr_store+0x10/0x10 [ 196.005369][T10923] sysfs_kf_write+0xf2/0x150 [ 196.005399][T10923] kernfs_fop_write_iter+0x3af/0x570 [ 196.005438][T10923] ? __pfx_sysfs_kf_write+0x10/0x10 [ 196.005469][T10923] vfs_write+0x7d3/0x11d0 [ 196.005509][T10923] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 196.005553][T10923] ? __pfx_vfs_write+0x10/0x10 [ 196.005624][T10923] ksys_write+0x12a/0x250 [ 196.005663][T10923] ? __pfx_ksys_write+0x10/0x10 [ 196.005715][T10923] do_syscall_64+0xcd/0xf80 [ 196.005763][T10923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.005792][T10923] RIP: 0033:0x7fda4a58f7c9 [ 196.005821][T10923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.005849][T10923] RSP: 002b:00007fda4b41c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 196.005877][T10923] RAX: ffffffffffffffda RBX: 00007fda4a7e6090 RCX: 00007fda4a58f7c9 [ 196.005896][T10923] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 196.005913][T10923] RBP: 00007fda4a613f91 R08: 0000000000000000 R09: 0000000000000000 [ 196.005929][T10923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.005945][T10923] R13: 00007fda4a7e6128 R14: 00007fda4a7e6090 R15: 00007ffc5dedf0a8 [ 196.005985][T10923] [ 196.006295][T10923] syz.0.3249: vmalloc error: size 4096, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 196.471128][T10923] CPU: 0 UID: 0 PID: 10923 Comm: syz.0.3249 Tainted: G L syzkaller #0 PREEMPT(full) [ 196.471168][T10923] Tainted: [L]=SOFTLOCKUP [ 196.471177][T10923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 196.471192][T10923] Call Trace: [ 196.471200][T10923] [ 196.471210][T10923] dump_stack_lvl+0x16c/0x1f0 [ 196.471255][T10923] warn_alloc+0x248/0x3a0 [ 196.471288][T10923] ? __pfx_warn_alloc+0x10/0x10 [ 196.471395][T10923] ? kfree+0x2f8/0x6e0 [ 196.471418][T10923] ? __get_vm_area_node+0x2cd/0x330 [ 196.471456][T10923] ? __get_vm_area_node+0x2cd/0x330 [ 196.471486][T10923] ? __get_vm_area_node+0x1dc/0x330 [ 196.471516][T10923] ? __get_vm_area_node+0x208/0x330 [ 196.471555][T10923] __vmalloc_node_range_noprof+0xbe0/0x16b0 [ 196.471577][T10923] ? __lock_acquire+0x436/0x2890 [ 196.471607][T10923] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 196.471638][T10923] ? zcomp_cpu_up_prepare+0x13e/0x360 [ 196.471678][T10923] ? find_held_lock+0x2b/0x80 [ 196.471706][T10923] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 196.471728][T10923] ? rcu_read_unlock+0x17/0x60 [ 196.471751][T10923] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 196.471795][T10923] ? lruvec_stat_mod_folio+0x25b/0x3b0 [ 196.471832][T10923] ? zcomp_cpu_up_prepare+0x13e/0x360 [ 196.471865][T10923] __vmalloc_node_noprof+0xad/0xf0 [ 196.471890][T10923] ? zcomp_cpu_up_prepare+0x13e/0x360 [ 196.471933][T10923] zcomp_cpu_up_prepare+0x13e/0x360 [ 196.471970][T10923] ? trace_cpuhp_multi_enter+0x189/0x1d0 [ 196.472009][T10923] ? __pfx_zcomp_cpu_up_prepare+0x10/0x10 [ 196.472048][T10923] cpuhp_invoke_callback+0x20d/0xa10 [ 196.472082][T10923] ? __pfx_zcomp_cpu_up_prepare+0x10/0x10 [ 196.472117][T10923] cpuhp_issue_call+0x1c0/0x980 [ 196.472161][T10923] __cpuhp_state_add_instance_cpuslocked+0x1a4/0x3c0 [ 196.472212][T10923] __cpuhp_state_add_instance+0xd7/0x2e0 [ 196.472280][T10923] zcomp_create+0x39c/0x650 [ 196.472328][T10923] disksize_store+0x2a0/0x670 [ 196.472358][T10923] ? __pfx_disksize_store+0x10/0x10 [ 196.472382][T10923] dev_attr_store+0x58/0x80 [ 196.472412][T10923] ? __pfx_dev_attr_store+0x10/0x10 [ 196.472442][T10923] sysfs_kf_write+0xf2/0x150 [ 196.472473][T10923] kernfs_fop_write_iter+0x3af/0x570 [ 196.472512][T10923] ? __pfx_sysfs_kf_write+0x10/0x10 [ 196.472543][T10923] vfs_write+0x7d3/0x11d0 [ 196.472582][T10923] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 196.472626][T10923] ? __pfx_vfs_write+0x10/0x10 [ 196.472689][T10923] ksys_write+0x12a/0x250 [ 196.472726][T10923] ? __pfx_ksys_write+0x10/0x10 [ 196.472776][T10923] do_syscall_64+0xcd/0xf80 [ 196.472817][T10923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.472846][T10923] RIP: 0033:0x7fda4a58f7c9 [ 196.472867][T10923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.472890][T10923] RSP: 002b:00007fda4b41c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 196.472916][T10923] RAX: ffffffffffffffda RBX: 00007fda4a7e6090 RCX: 00007fda4a58f7c9 [ 196.472934][T10923] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 196.472949][T10923] RBP: 00007fda4a613f91 R08: 0000000000000000 R09: 0000000000000000 [ 196.472963][T10923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.472977][T10923] R13: 00007fda4a7e6128 R14: 00007fda4a7e6090 R15: 00007ffc5dedf0a8 [ 196.473016][T10923] [ 196.473027][T10923] Mem-Info: [ 196.809672][T10923] active_anon:24671 inactive_anon:5 isolated_anon:0 [ 196.809672][T10923] active_file:16266 inactive_file:39693 isolated_file:0 [ 196.809672][T10923] unevictable:768 dirty:316 writeback:0 [ 196.809672][T10923] slab_reclaimable:11340 slab_unreclaimable:91678 [ 196.809672][T10923] mapped:29445 shmem:17234 pagetables:1108 [ 196.809672][T10923] sec_pagetables:0 bounce:0 [ 196.809672][T10923] kernel_misc_reclaimable:0 [ 196.809672][T10923] free:1311182 free_pcp:14031 free_cma:0 [ 196.882077][ T52] Bluetooth: hci0: command tx timeout [ 196.887643][T10923] Node 0 active_anon:98684kB inactive_anon:20kB active_file:65064kB inactive_file:158640kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117780kB dirty:1264kB writeback:0kB shmem:67400kB shmem_thp:2048kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11812kB pagetables:4088kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 196.931092][T10751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.938078][T10751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.000131][T10923] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 197.040884][T10751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.057127][T10751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.067913][T10923] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 197.098209][T10751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.128545][T10751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.139598][T10923] lowmem_reserve[]: 0 2481 2483 2483 2483 [ 197.149505][T10923] Node 0 DMA32 free:1337260kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0KB free_highatomic:0KB active_anon:105404kB inactive_anon:20kB active_file:65064kB inactive_file:158640kB unevictable:1536kB writepending:1296kB zspages:0kB present:3129332kB managed:2541032kB mlocked:0kB bounce:0kB free_pcp:34284kB local_pcp:16664kB free_cma:0kB [ 197.197959][T10923] lowmem_reserve[]: 0 0 1 1 1 [ 197.203191][T10923] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 197.285498][T10751] hsr_slave_0: entered promiscuous mode [ 197.300091][T10923] lowmem_reserve[]: 0 0 0 0 0 [ 197.305643][T10751] hsr_slave_1: entered promiscuous mode [ 197.314491][T10923] Node 1 Normal free:3885656kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:22276kB local_pcp:12068kB free_cma:0kB [ 197.350988][T10751] debugfs: 'hsr0' already exists in 'hsr' [ 197.361504][T10751] Cannot create hsr debugfs directory [ 197.380141][T10923] lowmem_reserve[]: 0 0 0 0 0 [ 197.385140][T10923] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 197.401743][T10923] Node 0 DMA32: 1602*4kB (UE) 1822*8kB (UME) 700*16kB (UE) 585*32kB (UE) 148*64kB (U) 86*128kB (UE) 188*256kB (UME) 146*512kB (UME) 65*1024kB (UME) 22*2048kB (UM) 251*4096kB (UM) = 1333976kB [ 197.421646][T10923] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 197.499766][T10923] Node 1 Normal: 192*4kB (UME) 55*8kB (UME) 52*16kB (UME) 77*32kB (UME) 23*64kB (UME) 6*128kB (UME) 8*256kB (UME) 6*512kB (UME) 1*1024kB (M) 1*2048kB (E) 945*4096kB (M) = 3885656kB [ 197.580205][T10923] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 197.612924][T10923] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 197.660072][T10923] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 197.695878][T10923] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 197.732102][T10923] 76956 total pagecache pages [ 197.736844][T10923] 26 pages in swap cache [ 197.751562][T10923] Free swap = 124892kB [ 197.755798][T10923] Total swap = 124996kB [ 197.780068][T10923] 2097051 pages RAM [ 197.783923][T10923] 0 pages HighMem/MovableOnly [ 197.788584][T10923] 429767 pages reserved [ 197.800071][T10923] 0 pages cma reserved [ 197.813256][T10923] Can't allocate a compression stream [ 197.819280][T10923] zram: Cannot initialise lzo-rle compressing backend [ 198.370902][T10751] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 198.395712][T10751] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 198.424730][T10751] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 198.444537][T10751] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 198.646379][T10751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.694836][T10751] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.727681][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.734890][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.778965][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.786304][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.940376][ T52] Bluetooth: hci0: command tx timeout [ 199.283751][T10751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.379539][T10751] veth0_vlan: entered promiscuous mode [ 199.395087][T10751] veth1_vlan: entered promiscuous mode [ 199.444705][T10751] veth0_macvtap: entered promiscuous mode [ 199.467356][T10751] veth1_macvtap: entered promiscuous mode [ 199.506512][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.515236][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.535932][T10751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.564731][T10751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.596254][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.622629][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.642003][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.663273][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.830516][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.838429][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.899368][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.908374][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.128622][ T30] audit: type=1800 audit(1765915963.799:5): pid=10988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3265" name="lu_gp_id" dev="configfs" ino=32761 res=0 errno=0 [ 200.482417][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 200.493624][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 200.503058][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 200.511159][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 200.519048][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 200.775512][T11006] netlink: zone id is out of range [ 200.817475][T11006] netlink: set zone limit has 8 unknown bytes [ 200.960640][T11022] openvswitch: netlink: Flow key attribute not present in set flow. [ 201.049491][ T1844] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.126617][T11008] chnl_net:caif_netlink_parms(): no params data found [ 201.196805][ T1844] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.338635][ T1844] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.493498][ T1844] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.637851][ T1844] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.721259][T11008] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.755644][T11008] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.771484][T11008] bridge_slave_0: entered allmulticast mode [ 201.783616][T11008] bridge_slave_0: entered promiscuous mode [ 201.802501][T11008] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.813792][T11008] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.836521][T11008] bridge_slave_1: entered allmulticast mode [ 201.860288][T11008] bridge_slave_1: entered promiscuous mode [ 201.959706][T11008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.032467][T11008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.176986][T11008] team0: Port device team_slave_0 added [ 202.238811][T11008] team0: Port device team_slave_1 added [ 202.393038][ T1844] bridge_slave_1: left allmulticast mode [ 202.399683][ T1844] bridge_slave_1: left promiscuous mode [ 202.406133][ T1844] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.428638][ T1844] bridge_slave_0: left allmulticast mode [ 202.439820][ T1844] bridge_slave_0: left promiscuous mode [ 202.446351][ T1844] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.620115][ T52] Bluetooth: hci2: command tx timeout [ 202.715975][T11037] Invalid ELF header magic: != ELF [ 203.123332][T11057] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3271'. [ 203.562022][ T1844] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.666696][T11061] zram0: detected capacity change from 0 to 8 [ 203.683785][ T1844] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.711467][ T1844] bond0 (unregistering): Released all slaves [ 203.762539][T11008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.783270][T11008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.850990][T11008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.885509][T11008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.899007][T11008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.958345][T11008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.000655][ T1844] tipc: Left network mode [ 204.276858][T11008] hsr_slave_0: entered promiscuous mode [ 204.283814][T11008] hsr_slave_1: entered promiscuous mode [ 204.290230][T11008] debugfs: 'hsr0' already exists in 'hsr' [ 204.295999][T11008] Cannot create hsr debugfs directory [ 204.577832][ T1844] hsr_slave_0: left promiscuous mode [ 204.591565][ T1844] hsr_slave_1: left promiscuous mode [ 204.601798][ T1844] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.619699][ T1844] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.639816][ T1844] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.647639][ T1844] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.699346][ T1844] veth1_macvtap: left promiscuous mode [ 204.705681][ T52] Bluetooth: hci2: command tx timeout [ 204.714343][ T1844] veth0_macvtap: left promiscuous mode [ 204.720714][ T1844] veth1_vlan: left promiscuous mode [ 204.726781][ T1844] veth0_vlan: left promiscuous mode [ 204.973526][T11086] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3277'. [ 205.038701][T11085] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3277'. [ 205.416934][ T1844] team0 (unregistering): Port device team_slave_1 removed [ 205.459656][ T1844] team0 (unregistering): Port device team_slave_0 removed [ 206.414346][T11101] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 206.426301][T11101] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 206.434727][T11101] CPU: 0 UID: 0 PID: 11101 Comm: syz.0.3282 Tainted: G L syzkaller #0 PREEMPT(full) [ 206.445688][T11101] Tainted: [L]=SOFTLOCKUP [ 206.450019][T11101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 206.460129][T11101] RIP: 0010:strcmp+0x39/0xb0 [ 206.464746][T11101] Code: df 41 54 55 53 48 89 fb 48 83 ec 08 eb 08 40 84 ed 74 61 4c 89 e6 48 89 df 48 83 c3 01 48 89 f8 48 89 fa 48 c1 e8 03 83 e2 07 <42> 0f b6 04 28 38 d0 7f 04 84 c0 75 58 48 89 f0 48 89 f2 0f b6 6b [ 206.484373][T11101] RSP: 0018:ffffc9000401f7a8 EFLAGS: 00010246 [ 206.490450][T11101] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffc9000cb09000 [ 206.498422][T11101] RDX: 0000000000000000 RSI: ffffffff8c237700 RDI: 0000000000000000 [ 206.506405][T11101] RBP: ffffffff8c236660 R08: 0000000000000001 R09: ffffed1004c55b09 [ 206.514390][T11101] R10: ffff8880262ad84f R11: ffff888035450b30 R12: ffff88805b962000 [ 206.522376][T11101] R13: dffffc0000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 206.530350][T11101] FS: 00007fda4b43d6c0(0000) GS:ffff8881248fd000(0000) knlGS:0000000000000000 [ 206.539294][T11101] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 206.545881][T11101] CR2: 0000001b2fd06ff8 CR3: 000000007804e000 CR4: 00000000003526f0 [ 206.553864][T11101] Call Trace: [ 206.557140][T11101] [ 206.560070][T11101] zcomp_available_show+0x73/0x130 [ 206.565205][T11101] ? __pfx_comp_algorithm_show+0x10/0x10 [ 206.570869][T11101] comp_algorithm_show+0x98/0xd0 [ 206.575828][T11101] dev_attr_show+0x56/0xe0 [ 206.580260][T11101] ? __pfx_dev_attr_show+0x10/0x10 [ 206.585394][T11101] sysfs_kf_seq_show+0x216/0x3e0 [ 206.590340][T11101] seq_read_iter+0x50e/0x12d0 [ 206.595039][T11101] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 206.601032][T11101] kernfs_fop_read_iter+0x46c/0x610 [ 206.606251][T11101] copy_splice_read+0x618/0xc20 [ 206.611120][T11101] ? __pfx_copy_splice_read+0x10/0x10 [ 206.616503][T11101] ? look_up_lock_class+0x59/0x130 [ 206.621634][T11101] ? lockdep_init_map_type+0x5c/0x270 [ 206.627007][T11101] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 206.632395][T11101] ? __pfx_copy_splice_read+0x10/0x10 [ 206.637801][T11101] do_splice_read+0x285/0x370 [ 206.642520][T11101] splice_direct_to_actor+0x2a1/0xa30 [ 206.647924][T11101] ? __pfx_direct_splice_actor+0x10/0x10 [ 206.653771][T11101] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 206.659689][T11101] do_splice_direct+0x174/0x240 [ 206.664569][T11101] ? __pfx_do_splice_direct+0x10/0x10 [ 206.669951][T11101] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 206.675863][T11101] ? rw_verify_area+0xcf/0x6c0 [ 206.680650][T11101] do_sendfile+0xb06/0xe50 [ 206.685083][T11101] ? __pfx_do_sendfile+0x10/0x10 [ 206.690122][T11101] ? __x64_sys_futex+0x1e0/0x4c0 [ 206.695065][T11101] ? __x64_sys_futex+0x1e9/0x4c0 [ 206.700095][T11101] __x64_sys_sendfile64+0x1d8/0x220 [ 206.705411][T11101] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 206.711136][T11101] do_syscall_64+0xcd/0xf80 [ 206.715687][T11101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.721582][T11101] RIP: 0033:0x7fda4a58f7c9 [ 206.725996][T11101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.745605][T11101] RSP: 002b:00007fda4b43d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 206.754017][T11101] RAX: ffffffffffffffda RBX: 00007fda4a7e5fa0 RCX: 00007fda4a58f7c9 [ 206.761983][T11101] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 206.769946][T11101] RBP: 00007fda4a613f91 R08: 0000000000000000 R09: 0000000000000000 [ 206.777914][T11101] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 206.785881][T11101] R13: 00007fda4a7e6038 R14: 00007fda4a7e5fa0 R15: 00007ffc5dedf0a8 [ 206.793872][T11101] [ 206.796905][T11101] Modules linked in: [ 206.801220][T11101] ---[ end trace 0000000000000000 ]--- [ 206.805279][T11112] netlink: 'syz.0.3282': attribute type 1 has an invalid length. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 206.826452][ T52] Bluetooth: hci2: command tx timeout [ 206.846193][T11101] RIP: 0010:strcmp+0x39/0xb0 [ 206.852412][T11112] FAULT_INJECTION: forcing a failure. [ 206.852412][T11112] name failslab, interval 1, probability 0, space 0, times 0 [ 206.853147][T11101] Code: df 41 54 55 53 48 89 fb 48 83 ec 08 eb 08 40 84 ed 74 61 4c 89 e6 48 89 df 48 83 c3 01 48 89 f8 48 89 fa 48 c1 e8 03 83 e2 07 <42> 0f b6 04 28 38 d0 7f 04 84 c0 75 58 48 89 f0 48 89 f2 0f b6 6b [ 206.878134][T11112] CPU: 1 UID: 0 PID: 11112 Comm: syz.0.3282 Tainted: G D L syzkaller #0 PREEMPT(full) [ 206.878184][T11112] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 206.878194][T11112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 206.878210][T11112] Call Trace: [ 206.878218][T11112] [ 206.878228][T11112] dump_stack_lvl+0x16c/0x1f0 [ 206.878272][T11112] should_fail_ex+0x512/0x640 [ 206.878304][T11112] should_failslab+0xc2/0x120 [ 206.878345][T11112] __kmalloc_cache_noprof+0x80/0x800 [ 206.878376][T11112] ? snd_timer_instance_new+0x47/0x2e0 [ 206.878420][T11112] ? snd_timer_instance_new+0x47/0x2e0 [ 206.878459][T11112] snd_timer_instance_new+0x47/0x2e0 [ 206.878500][T11112] snd_seq_timer_open+0x1cc/0x600 [ 206.878542][T11112] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 206.878577][T11112] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 206.878609][T11112] ? snd_seq_timer_defaults+0x46a/0x580 [ 206.878642][T11112] ? rcu_is_watching+0x12/0xc0 [ 206.878680][T11112] ? trace_irq_enable.constprop.0+0xd4/0x110 [ 206.878723][T11112] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 206.878761][T11112] queue_use+0xe3/0x250 [ 206.878786][T11112] snd_seq_queue_alloc+0x2e5/0x5a0 [ 206.878816][T11112] snd_seq_ioctl_create_queue+0xa9/0x390 [ 206.878850][T11112] call_seq_client_ctl+0xa3/0x130 [ 206.878887][T11112] snd_seq_kernel_client_ctl+0x7a/0xc0 [ 206.878926][T11112] alloc_seq_queue+0xda/0x180 [ 206.878964][T11112] ? __pfx_alloc_seq_queue+0x10/0x10 [ 206.879012][T11112] ? rcu_is_watching+0x12/0xc0 [ 206.879046][T11112] ? trace_irq_enable.constprop.0+0xd4/0x110 [ 206.879090][T11112] snd_seq_oss_open+0x38c/0xa40 [ 206.879132][T11112] odev_open+0x79/0xc0 [ 206.879166][T11112] ? __pfx_odev_open+0x10/0x10 [ 206.879202][T11112] soundcore_open+0x40c/0x580 [ 206.879240][T11112] ? __pfx_soundcore_open+0x10/0x10 [ 206.879277][T11112] chrdev_open+0x234/0x6a0 [ 206.879315][T11112] ? __pfx_apparmor_file_open+0x10/0x10 [ 206.879341][T11112] ? __pfx_chrdev_open+0x10/0x10 [ 206.879381][T11112] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 206.879426][T11112] do_dentry_open+0x748/0x1590 [ 206.879463][T11112] ? __pfx_chrdev_open+0x10/0x10 [ 206.879506][T11112] vfs_open+0x82/0x3f0 [ 206.879539][T11112] path_openat+0x2078/0x3140 [ 206.879585][T11112] ? __pfx_path_openat+0x10/0x10 [ 206.879631][T11112] do_filp_open+0x20b/0x470 [ 206.879671][T11112] ? __pfx_do_filp_open+0x10/0x10 [ 206.879722][T11112] ? alloc_fd+0x471/0x7d0 [ 206.879763][T11112] do_sys_openat2+0x121/0x290 [ 206.879791][T11112] ? __pfx_do_sys_openat2+0x10/0x10 [ 206.879826][T11112] __x64_sys_openat+0x174/0x210 [ 206.879855][T11112] ? __pfx___x64_sys_openat+0x10/0x10 [ 206.879892][T11112] do_syscall_64+0xcd/0xf80 [ 206.879930][T11112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.879958][T11112] RIP: 0033:0x7fda4a58f7c9 [ 206.879983][T11112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.880009][T11112] RSP: 002b:00007fda4b41c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 206.880035][T11112] RAX: ffffffffffffffda RBX: 00007fda4a7e6090 RCX: 00007fda4a58f7c9 [ 206.880054][T11112] RDX: 0000000000100842 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 206.880072][T11112] RBP: 00007fda4a613f91 R08: 0000000000000000 R09: 0000000000000000 [ 206.880090][T11112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.880106][T11112] R13: 00007fda4a7e6128 R14: 00007fda4a7e6090 R15: 00007ffc5dedf0a8 [ 206.880133][T11112] [ 207.240487][T11101] RSP: 0018:ffffc9000401f7a8 EFLAGS: 00010246 [ 207.246777][T11101] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffc9000cb09000 [ 207.254841][T11101] RDX: 0000000000000000 RSI: ffffffff8c237700 RDI: 0000000000000000 [ 207.262866][T11101] RBP: ffffffff8c236660 R08: 0000000000000001 R09: ffffed1004c55b09 [ 207.271037][T11101] R10: ffff8880262ad84f R11: ffff888035450b30 R12: ffff88805b962000 [ 207.279047][T11101] R13: dffffc0000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 207.287083][T11101] FS: 00007fda4b43d6c0(0000) GS:ffff8881248fd000(0000) knlGS:0000000000000000 [ 207.298475][T11101] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 207.305165][T11101] CR2: 0000001b2fd01ff8 CR3: 000000007804e000 CR4: 00000000003526f0 [ 207.313278][T11101] Kernel panic - not syncing: Fatal exception [ 207.320265][T11101] Kernel Offset: disabled [ 207.324584][T11101] Rebooting in 86400 seconds..