last executing test programs: 44.422647971s ago: executing program 0 (id=587): r0 = pidfd_open$auto(0x1, 0x0) mmap$auto(0x0, 0x2, 0x3, 0x20eb3, r0, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x5, 0x3, 0x0, 0x7, 0x6) r1 = socket(0x10, 0x2, 0xfffffe05) mmap$auto(0x0, 0x400008, 0xdf, 0x2000009b72, r1, 0x8000) lsm_set_self_attr$auto(0x9, 0x0, 0x80, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x2a0001, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000005c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\b\x00\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x02\x00\x00\x00\x00\x00\x00\x00\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\xa7\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5\xe6w\xee\x02b\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\xa8=\x8b\xc8\xa1j\xb6q\xa5\xb3\xb5\x81\xe8~\x13\xb3#\x10\xda8,\x0e\xe3\x1c\x017\xf2D2T\xb4\xcfGsg\x0f\xd9\xa9\bS\xdb\x9b~D\aQiX\xefg\xbd\xebP\xd4e\xc0c\xda\xec\xca\xff\xbdA&THU\xb3\xf3\xec\xad\xb3FTX\xb1\x851x\xd9:\xd8\",\x93\xdb\xf5\xec\xbf\x82\x9d\xa9\xb6\x8fB&\xef\x90g\xc5\x19\rH\f\x0f_\xd2\xfaL\xef\xf78\v\xc4\x9dt\xcb\x9d\xaaA\xb6SF\x11\xd0\xd7I\xbdG.B\xf5\xbe', 0x100000a3d9) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder0\x00', 0x800, 0x0) socket(0xa, 0x1, 0x100) socket(0x1e, 0x1, 0x0) socket(0x2c, 0x3, 0x9) r3 = socket(0x15, 0x5, 0x0) getsockopt$auto(r3, 0x114, 0x2713, 0xfffffffffffffffc, 0x0) write$auto(0x1, 0x0, 0x80000000) openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/options/test_nop_refuse\x00', 0x4ca40, 0x0) preadv$auto(0x3, &(0x7f00000004c0)={0x0, 0x8000000}, 0x3, 0x10000, 0x10) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) write$auto(r4, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) fcntl$auto(0x0, 0x407, 0x100000) setns(r0, 0x60020000) umount2$auto(&(0x7f0000000000)='.\x00', 0x8) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), r5) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/conf/team0/bc_forwarding\x00', 0x2102, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setgroups$auto(0xc00000000, 0xfffffffffffffffc) 43.225313283s ago: executing program 0 (id=591): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0xfffffffffffffffd, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r2) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000ffdbdf25040000000a0016070000000400000000"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) socket(0x11, 0x80003, 0x300) ioctl$auto_UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000300)={0x5, 0x9b8, {0xb, 0x2, 0x805, {0x7f, 0x3ff}, {0x9, 0x7}, @rumble={0x5, 0xc3d}}, {0x10, 0x6084, 0xbacc, {0x2, 0x400}, {0xd, 0x4}, @periodic={0x6, 0x8, 0xff, 0x5b, 0x417, {0x8, 0x8, 0x2, 0x8}, 0x32c2, &(0x7f0000000380)=0x6}}}) r4 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) open_by_handle_at$auto(r4, &(0x7f0000000000)={0x8, 0x2, 'u\x00\x00\x00\x00\x00\x00\x00'}, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x1, 0x0, 0x80000000) close_range$auto(0x2, 0xa, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) r5 = pipe$auto(0x0) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, r5, 0x0, 0x80000001, 0x9) 42.760379342s ago: executing program 0 (id=592): r0 = pidfd_open$auto(0x1, 0x0) mmap$auto(0x0, 0x2, 0x3, 0x20eb3, r0, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x5, 0x3, 0x0, 0x7, 0x6) r1 = socket(0x10, 0x2, 0xfffffe05) mmap$auto(0x0, 0x400008, 0xdf, 0x2000009b72, r1, 0x8000) lsm_set_self_attr$auto(0x9, 0x0, 0x80, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x2a0001, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000005c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\b\x00\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x02\x00\x00\x00\x00\x00\x00\x00\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\xa7\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5\xe6w\xee\x02b\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\xa8=\x8b\xc8\xa1j\xb6q\xa5\xb3\xb5\x81\xe8~\x13\xb3#\x10\xda8,\x0e\xe3\x1c\x017\xf2D2T\xb4\xcfGsg\x0f\xd9\xa9\bS\xdb\x9b~D\aQiX\xefg\xbd\xebP\xd4e\xc0c\xda\xec\xca\xff\xbdA&THU\xb3\xf3\xec\xad\xb3FTX\xb1\x851x\xd9:\xd8\",\x93\xdb\xf5\xec\xbf\x82\x9d\xa9\xb6\x8fB&\xef\x90g\xc5\x19\rH\f\x0f_\xd2\xfaL\xef\xf78\v\xc4\x9dt\xcb\x9d\xaaA\xb6SF\x11\xd0\xd7I\xbdG.B\xf5\xbe', 0x100000a3d9) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder0\x00', 0x800, 0x0) socket(0xa, 0x1, 0x100) socket(0x1e, 0x1, 0x0) socket(0x2c, 0x3, 0x9) r3 = socket(0x15, 0x5, 0x0) getsockopt$auto(r3, 0x114, 0x2713, 0xfffffffffffffffc, 0x0) write$auto(0x1, 0x0, 0x80000000) openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/options/test_nop_refuse\x00', 0x4ca40, 0x0) preadv$auto(0x3, &(0x7f00000004c0)={0x0, 0x8000000}, 0x3, 0x10000, 0x10) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) write$auto(r4, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) fcntl$auto(0x0, 0x407, 0x100000) setns(r0, 0x60020000) umount2$auto(&(0x7f0000000000)='.\x00', 0x8) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), r5) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/conf/team0/bc_forwarding\x00', 0x2102, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setgroups$auto(0xc00000000, 0xfffffffffffffffc) 30.166190496s ago: executing program 3 (id=616): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0xfffffffffffffffd, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r2) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000ffdbdf25040000000a0016070000000400000000"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) socket(0x11, 0x80003, 0x300) ioctl$auto_UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000300)={0x5, 0x9b8, {0xb, 0x2, 0x805, {0x7f, 0x3ff}, {0x9, 0x7}, @rumble={0x5, 0xc3d}}, {0x10, 0x6084, 0xbacc, {0x2, 0x400}, {0xd, 0x4}, @periodic={0x6, 0x8, 0xff, 0x5b, 0x417, {0x8, 0x8, 0x2, 0x8}, 0x32c2, &(0x7f0000000380)=0x6}}}) r4 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) open_by_handle_at$auto(r4, &(0x7f0000000000)={0x8, 0x2, 'u\x00\x00\x00\x00\x00\x00\x00'}, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x1, 0x0, 0x80000000) close_range$auto(0x2, 0xa, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) r5 = pipe$auto(0x0) write$auto(0x6, 0x0, 0x100000001) splice$auto(0x4, 0x0, r5, 0x0, 0x80000001, 0x9) 23.826204991s ago: executing program 2 (id=623): r0 = pidfd_open$auto(0x1, 0x0) mmap$auto(0x0, 0x2, 0x3, 0x20eb3, r0, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x5, 0x3, 0x0, 0x7, 0x6) r1 = socket(0x10, 0x2, 0xfffffe05) mmap$auto(0x0, 0x400008, 0xdf, 0x2000009b72, r1, 0x8000) lsm_set_self_attr$auto(0x9, 0x0, 0x80, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x2a0001, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000005c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\b\x00\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x02\x00\x00\x00\x00\x00\x00\x00\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\xa7\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5\xe6w\xee\x02b\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\xa8=\x8b\xc8\xa1j\xb6q\xa5\xb3\xb5\x81\xe8~\x13\xb3#\x10\xda8,\x0e\xe3\x1c\x017\xf2D2T\xb4\xcfGsg\x0f\xd9\xa9\bS\xdb\x9b~D\aQiX\xefg\xbd\xebP\xd4e\xc0c\xda\xec\xca\xff\xbdA&THU\xb3\xf3\xec\xad\xb3FTX\xb1\x851x\xd9:\xd8\",\x93\xdb\xf5\xec\xbf\x82\x9d\xa9\xb6\x8fB&\xef\x90g\xc5\x19\rH\f\x0f_\xd2\xfaL\xef\xf78\v\xc4\x9dt\xcb\x9d\xaaA\xb6SF\x11\xd0\xd7I\xbdG.B\xf5\xbe', 0x100000a3d9) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder0\x00', 0x800, 0x0) socket(0xa, 0x1, 0x100) socket(0x1e, 0x1, 0x0) socket(0x2c, 0x3, 0x9) r3 = socket(0x15, 0x5, 0x0) getsockopt$auto(r3, 0x114, 0x2713, 0xfffffffffffffffc, 0x0) write$auto(0x1, 0x0, 0x80000000) openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/options/test_nop_refuse\x00', 0x4ca40, 0x0) preadv$auto(0x3, &(0x7f00000004c0)={0x0, 0x8000000}, 0x3, 0x10000, 0x10) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) write$auto(r4, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) fcntl$auto(0x0, 0x407, 0x100000) setns(r0, 0x60020000) umount2$auto(&(0x7f0000000000)='.\x00', 0x8) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) socket(0x29, 0x2, 0x0) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/conf/team0/bc_forwarding\x00', 0x2102, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setgroups$auto(0xc00000000, 0xfffffffffffffffc) 21.858112707s ago: executing program 2 (id=624): unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) read$auto(r0, 0x0, 0x102) r1 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$auto(r1, 0x40246f4c, 0x38) 21.022322619s ago: executing program 2 (id=625): socket(0x10, 0x2, 0xc) setresuid$auto(0x2, 0x7, 0x8080) r0 = socket(0x25, 0x1, 0x0) sendto$auto(r0, 0x0, 0x0, 0x0, 0x0, 0x3) r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x4201, 0x0) ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, 0x0) mmap$auto(0xa, 0x4, 0x3800000000000, 0x10011, 0xffffffffffffffff, 0xf71) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x3000, 0x6, 0x8, 0x7fffffff, 0xffffffffffffffff, [], {0x6, 0x6, 0x3, 0x29f, 0xfe, 0x7ffffffb, 0x101, 0x800, 0x3}, {0x2000008, 0x1, 0x52, 0x5, 0x2, 0x40, 0x76c5, 0x8, 0x100000000}}) mmap$auto(0x2, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) io_uring_enter$auto(0x3, 0x5, 0xffffffff, 0x3, 0x0, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) shutdown$auto(0xffffffffffffffff, 0x2) socket(0x5, 0x800, 0xed) r2 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/lru_gen\x00', 0xd0080, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/00/01.3\x00', 0x682, 0x0) pread64$auto(r3, 0x0, 0x8, 0x8000) pread64$auto(r2, 0x0, 0x7ff, 0x400) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x1, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x5, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x9, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0x1]}, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) ioctl$auto(0x3, 0x2287, 0xffffffffffffffff) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) ioctl$auto_TIOCSTI2(r5, 0x5412, &(0x7f0000000040)="1a38") socket(0x23, 0x80805, 0x0) close_range$auto(0x2, 0x8, 0x0) 17.169773564s ago: executing program 0 (id=592): r0 = pidfd_open$auto(0x1, 0x0) mmap$auto(0x0, 0x2, 0x3, 0x20eb3, r0, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x5, 0x3, 0x0, 0x7, 0x6) r1 = socket(0x10, 0x2, 0xfffffe05) mmap$auto(0x0, 0x400008, 0xdf, 0x2000009b72, r1, 0x8000) lsm_set_self_attr$auto(0x9, 0x0, 0x80, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x2a0001, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000005c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\b\x00\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x02\x00\x00\x00\x00\x00\x00\x00\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\xa7\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5\xe6w\xee\x02b\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\xa8=\x8b\xc8\xa1j\xb6q\xa5\xb3\xb5\x81\xe8~\x13\xb3#\x10\xda8,\x0e\xe3\x1c\x017\xf2D2T\xb4\xcfGsg\x0f\xd9\xa9\bS\xdb\x9b~D\aQiX\xefg\xbd\xebP\xd4e\xc0c\xda\xec\xca\xff\xbdA&THU\xb3\xf3\xec\xad\xb3FTX\xb1\x851x\xd9:\xd8\",\x93\xdb\xf5\xec\xbf\x82\x9d\xa9\xb6\x8fB&\xef\x90g\xc5\x19\rH\f\x0f_\xd2\xfaL\xef\xf78\v\xc4\x9dt\xcb\x9d\xaaA\xb6SF\x11\xd0\xd7I\xbdG.B\xf5\xbe', 0x100000a3d9) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder0\x00', 0x800, 0x0) socket(0xa, 0x1, 0x100) socket(0x1e, 0x1, 0x0) socket(0x2c, 0x3, 0x9) r3 = socket(0x15, 0x5, 0x0) getsockopt$auto(r3, 0x114, 0x2713, 0xfffffffffffffffc, 0x0) write$auto(0x1, 0x0, 0x80000000) openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/options/test_nop_refuse\x00', 0x4ca40, 0x0) preadv$auto(0x3, &(0x7f00000004c0)={0x0, 0x8000000}, 0x3, 0x10000, 0x10) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) write$auto(r4, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) fcntl$auto(0x0, 0x407, 0x100000) setns(r0, 0x60020000) umount2$auto(&(0x7f0000000000)='.\x00', 0x8) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), r5) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/conf/team0/bc_forwarding\x00', 0x2102, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setgroups$auto(0xc00000000, 0xfffffffffffffffc) 16.141230767s ago: executing program 0 (id=626): unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) read$auto(r0, 0x0, 0x102) r1 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$auto(r1, 0x40246f4c, 0x38) 15.755929315s ago: executing program 0 (id=627): openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x1a, 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/modules\x00', 0x88400, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x0) socketpair$auto(0x1e, 0x5, 0x1ff, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000001bc0)='/dev/sequencer2\x00', 0x1, 0x0) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x8, 0x7181, 0x1ffe2, 0x7, 0x3, 0x3, 0x0, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0xd762, 0x2, 0x0, 0xe, 0x22002, 0x202, 0x0, 0x84, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x1fa, 0xd) r2 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000580), 0x2802, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r2, 0xfffffff7effffd06, &(0x7f00000001c0)) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x80802, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) fcntl$auto(r3, 0x402, 0xffffffffffffffff) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) 11.110265695s ago: executing program 1 (id=628): r0 = set_tid_address$auto(0x0) ioprio_get$auto_IOPRIO_WHO_PROCESS(0x1, r0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = socket(0xa, 0x5, 0x0) getsockopt$auto(r2, 0x6, 0x23, 0x0, &(0x7f0000000100)=0x3b) (async) r4 = getsockopt$auto(r2, 0x6, 0x23, 0x0, &(0x7f0000000100)=0x3b) sendmsg$auto_NL80211_CMD_CONNECT(r3, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002bbd7000fddbdf252e0000002c008180050001002e000002000b0000000500020004000000050002000400000005002f01000000000500190108000000040021010b004e01e9ad8a59c1ebae00"], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x24000110) mmap$auto(0x0, 0x0, 0xdd, 0x937f, r2, 0x7ffe) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) (async) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x20000080) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) r5 = io_uring_setup$auto(0x8, 0x0) madvise$auto(0x42, 0xffffffffffff0001, 0x3) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) (async) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) sendmsg$auto_NL80211_CMD_NEW_KEY(r2, &(0x7f00000048c0)={0x0, 0x0, &(0x7f0000004880)={&(0x7f0000000140)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40810}, 0x890) (async) sendmsg$auto_NL80211_CMD_NEW_KEY(r2, &(0x7f00000048c0)={0x0, 0x0, &(0x7f0000004880)={&(0x7f0000000140)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40810}, 0x890) ioctl$auto_VHOST_SET_VRING_CALL(r4, 0x4008af21, &(0x7f0000000040)={0x8}) (async) ioctl$auto_VHOST_SET_VRING_CALL(r4, 0x4008af21, &(0x7f0000000040)={0x8}) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/ip6_vti0/stable_secret\x00', 0x2, 0x0) pwrite64$auto(r6, 0x0, 0x1, 0x27) mmap$auto(0x0, 0x400008, 0x400000000000df, 0x9b72, r4, 0x4000000000008000) r7 = socket(0x2, 0x1, 0x0) sendmmsg$auto(r7, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) (async) sendmmsg$auto(r7, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) splice$auto(r8, 0x0, r8, 0xfffffffffffffffe, 0x5, 0x1) (async) splice$auto(r8, 0x0, r8, 0xfffffffffffffffe, 0x5, 0x1) statmount$auto(0x0, &(0x7f0000000380)={0xa, 0x801, 0x1ff, 0x7, 0x1f, 0xfffffffffffffff2, 0x1ffde, 0x0, 0x3, 0x9, 0x7fff, 0x13, 0x4, 0x1, 0xb4, 0x9, 0x9, 0x10003, 0x80, 0x4, 0x0, 0xa, 0x22000, 0x200, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x9, [0x44, 0x80000000000, 0x0, 0x0, 0x0, 0x4, 0x80000, 0x1, 0x0, 0x8000000000000000, 0x400000, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x6], "0d35b8667d65f6268731cbe05a27ea298da30a28e19f916ff16ebd2c28381855a79642792ebff97548ee41e0c5a025d9b06ed36107db0825dd494e69ba9c80fe72b8960d32f92ea549cabc60411038264ad0f44b172a36d58ec44d9654dedd12a3ab2360ffdbcec881d3fb48b9a8ec534362b5dd54d3efa09b3b16ea8c0c4705ec0792697ff02fad45a4902976463b683bcd99895d7e958e"}, 0x1fe, 0xd) (async) statmount$auto(0x0, &(0x7f0000000380)={0xa, 0x801, 0x1ff, 0x7, 0x1f, 0xfffffffffffffff2, 0x1ffde, 0x0, 0x3, 0x9, 0x7fff, 0x13, 0x4, 0x1, 0xb4, 0x9, 0x9, 0x10003, 0x80, 0x4, 0x0, 0xa, 0x22000, 0x200, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x9, [0x44, 0x80000000000, 0x0, 0x0, 0x0, 0x4, 0x80000, 0x1, 0x0, 0x8000000000000000, 0x400000, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x6], "0d35b8667d65f6268731cbe05a27ea298da30a28e19f916ff16ebd2c28381855a79642792ebff97548ee41e0c5a025d9b06ed36107db0825dd494e69ba9c80fe72b8960d32f92ea549cabc60411038264ad0f44b172a36d58ec44d9654dedd12a3ab2360ffdbcec881d3fb48b9a8ec534362b5dd54d3efa09b3b16ea8c0c4705ec0792697ff02fad45a4902976463b683bcd99895d7e958e"}, 0x1fe, 0xd) ioctl$auto_SNDRV_TIMER_IOCTL_STATUS64(r5, 0x80605414, &(0x7f0000000180)={0x2, 0x1, 0x9, 0x6, 0x8, 0xca30, "035a02c9fe8f65ed1c4cfe934ba2b8edc245e439ec89ad6a7ae7de496ad5a200c4390cc1760e290ad3030a8d29250e4a82fe4fdb6158779aae1eef27900d99be"}) 8.760971549s ago: executing program 1 (id=629): mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2902, 0x0) openat$auto_generic(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000400), r1) sendmsg$auto_IPVS_CMD_ZERO(r1, &(0x7f0000002900)={0x0, 0x0, &(0x7f00000028c0)={&(0x7f0000002600)={0x14, r2, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4805}, 0x0) sendmsg$auto_IPVS_CMD_DEL_SERVICE(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10202000}, 0xc, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="24030000", @ANYRES16=r2, @ANYBLOB="10002abd7000ffdbdf2503000000080006000d00000008000400ad0f000008000500e300000064010280496584f93f6be944c64e47ba5763829d5a5c2f02bce478c853d198ad31747d44f33462c7cd5a87741a766429354e55a85c667da53f4b8d15324c968698111c1315d272f6330751d336111643f9c74abc1c8dc120f8b1db18443f45cbbb641fb29a19617e351ee0dfbdd7505f3e55a70c004000feffffffffffffff916306e3f4e32e70d5e7fcb1b68a9b7b9f3a254262b8f6d937ad59413f1f1c4de769a0ea13674ce9c408329b5d2037351da964cbf5e903431eb256de46d9da74cf600b4816c563bf2d070f681d17cc12fe783b3b22893765a7e8afe2e400406457d38a322c15ca464ed2acb72e0404a15f28eed7330ab97dafcc7e4cd9cdb836575d6fd621e8f44a5058a763ef52a37acc348a79c95bd462c8bc2422778cf6ff107bf6720f0a038fa1bf72588082dc916836e0852df7526f6179931de84424581a153644e0a4ce14f6622fc8d50c4ba238edf0dd20cad1b4f2a85524c24e7e7ee5a040f52d08000600f7ffffff8901018024005f8008000c00", @ANYRES32=0x0, @ANYBLOB="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"], 0x324}, 0x1, 0x0, 0x0, 0x4c890}, 0x20000800) open(0x0, 0xa22c0, 0x155) r3 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r3, 0x107, 0xf, 0x0, 0x6) read$auto(0x3, 0x0, 0x80) 8.580004924s ago: executing program 1 (id=630): openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x1a, 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/modules\x00', 0x88400, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x0) socketpair$auto(0x1e, 0x5, 0x1ff, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000001bc0)='/dev/sequencer2\x00', 0x1, 0x0) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x8, 0x7181, 0x1ffe2, 0x7, 0x3, 0x3, 0x0, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0xd762, 0x2, 0x0, 0xe, 0x22002, 0x202, 0x0, 0x84, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x1fa, 0xd) r2 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000580), 0x2802, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r2, 0xfffffff7effffd06, &(0x7f00000001c0)) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x80802, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) fcntl$auto(r3, 0x402, 0xffffffffffffffff) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) 8.373151567s ago: executing program 3 (id=616): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0xfffffffffffffffd, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r2) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000ffdbdf25040000000a0016070000000400000000"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) socket(0x11, 0x80003, 0x300) ioctl$auto_UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000300)={0x5, 0x9b8, {0xb, 0x2, 0x805, {0x7f, 0x3ff}, {0x9, 0x7}, @rumble={0x5, 0xc3d}}, {0x10, 0x6084, 0xbacc, {0x2, 0x400}, {0xd, 0x4}, @periodic={0x6, 0x8, 0xff, 0x5b, 0x417, {0x8, 0x8, 0x2, 0x8}, 0x32c2, &(0x7f0000000380)=0x6}}}) r4 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) open_by_handle_at$auto(r4, &(0x7f0000000000)={0x8, 0x2, 'u\x00\x00\x00\x00\x00\x00\x00'}, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x1, 0x0, 0x80000000) close_range$auto(0x2, 0xa, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) r5 = pipe$auto(0x0) write$auto(0x6, 0x0, 0x100000001) splice$auto(0x4, 0x0, r5, 0x0, 0x80000001, 0x9) 7.293885131s ago: executing program 3 (id=631): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0xfffffffffffffffd, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r2) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000ffdbdf25040000000a0016070000000400000000"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) socket(0x11, 0x80003, 0x300) ioctl$auto_UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000300)={0x5, 0x9b8, {0xb, 0x2, 0x805, {0x7f, 0x3ff}, {0x9, 0x7}, @rumble={0x5, 0xc3d}}, {0x10, 0x6084, 0xbacc, {0x2, 0x400}, {0xd, 0x4}, @periodic={0x6, 0x8, 0xff, 0x5b, 0x417, {0x8, 0x8, 0x2, 0x8}, 0x32c2, &(0x7f0000000380)=0x6}}}) r5 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) open_by_handle_at$auto(r5, &(0x7f0000000000)={0x8, 0x2, 'u\x00\x00\x00\x00\x00\x00\x00'}, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x1, 0x0, 0x80000000) close_range$auto(0x2, 0xa, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) r6 = pipe$auto(0x0) dup2$auto(0x5, 0x4) write$auto(0x6, 0x0, 0x100000001) splice$auto(0x4, 0x0, r6, 0x0, 0x80000001, 0x9) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) recvmsg$auto(r4, &(0x7f00000005c0)={0x0, 0x8, &(0x7f00000004c0)={&(0x7f00000003c0)="444debcb5d4827b41b873d646e2663fb2d4aa24da78f4b3472bd8daf8c57304fe5302fe1869cfca458a5a39bd4006710640f6032088c509f0c082c1b04896afe04d524b8b80ce2949dae1a1d2bec705c343bc92a41212ae3ed0a036e67d0c6d7b35e6cb8956ef9b289a7e42615af9f0470dc70d3deea952a1d85a1a845530a190757f55d6e53993d1e8f22b49f44b8a5b9b989d8ed44e1a1f0002bb9f9c8813bee34cfb9b329b8b45794054ee04fdb17a945013b532f53854704c99cc8f02c1582b9c91704e2ed3d57e019cf620547", 0x3}, 0xd3, &(0x7f0000000500), 0xc, 0xffffffff}, 0xfffffff7) 6.238092647s ago: executing program 1 (id=632): openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x1a, 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/modules\x00', 0x88400, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x0) socketpair$auto(0x1e, 0x5, 0x1ff, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000001bc0)='/dev/sequencer2\x00', 0x1, 0x0) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x8, 0x7181, 0x1ffe2, 0x7, 0x3, 0x3, 0x0, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0xd762, 0x2, 0x0, 0xe, 0x22002, 0x202, 0x0, 0x84, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x1fa, 0xd) r2 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000580), 0x2802, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r2, 0xfffffff7effffd06, &(0x7f00000001c0)) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x80802, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) fcntl$auto(r3, 0x402, 0xffffffffffffffff) socket(0x2, 0x801, 0x106) socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) 5.343820706s ago: executing program 3 (id=633): openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x1a, 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/modules\x00', 0x88400, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x0) socketpair$auto(0x1e, 0x5, 0x1ff, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000001bc0)='/dev/sequencer2\x00', 0x1, 0x0) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x8, 0x7181, 0x1ffe2, 0x7, 0x3, 0x3, 0x0, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0xd762, 0x2, 0x0, 0xe, 0x22002, 0x202, 0x0, 0x84, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x1fa, 0xd) r2 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000580), 0x2802, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r2, 0xfffffff7effffd06, &(0x7f00000001c0)) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x80802, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) fcntl$auto(r3, 0x402, 0xffffffffffffffff) socket(0x2, 0x801, 0x106) socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) 5.19449324s ago: executing program 2 (id=625): socket(0x10, 0x2, 0xc) setresuid$auto(0x2, 0x7, 0x8080) r0 = socket(0x25, 0x1, 0x0) sendto$auto(r0, 0x0, 0x0, 0x0, 0x0, 0x3) r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x4201, 0x0) ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, 0x0) mmap$auto(0xa, 0x4, 0x3800000000000, 0x10011, 0xffffffffffffffff, 0xf71) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x3000, 0x6, 0x8, 0x7fffffff, 0xffffffffffffffff, [], {0x6, 0x6, 0x3, 0x29f, 0xfe, 0x7ffffffb, 0x101, 0x800, 0x3}, {0x2000008, 0x1, 0x52, 0x5, 0x2, 0x40, 0x76c5, 0x8, 0x100000000}}) mmap$auto(0x2, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) io_uring_enter$auto(0x3, 0x5, 0xffffffff, 0x3, 0x0, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) shutdown$auto(0xffffffffffffffff, 0x2) socket(0x5, 0x800, 0xed) r2 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/lru_gen\x00', 0xd0080, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/00/01.3\x00', 0x682, 0x0) pread64$auto(r3, 0x0, 0x8, 0x8000) pread64$auto(r2, 0x0, 0x7ff, 0x400) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x1, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x5, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x9, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0x1]}, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) ioctl$auto(0x3, 0x2287, 0xffffffffffffffff) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) ioctl$auto_TIOCSTI2(r5, 0x5412, &(0x7f0000000040)="1a38") socket(0x23, 0x80805, 0x0) close_range$auto(0x2, 0x8, 0x0) 4.347107367s ago: executing program 1 (id=634): mmap$auto(0x0, 0x4020009, 0xdf, 0x400000000e31, 0xffffffffffffffff, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) r1 = socket(0x10, 0x2, 0xf) r2 = bpf$auto(0x0, &(0x7f0000000080)=@bpf_attr_4={0x1e, r1, 0xffffffff, 0xffffffffffffffff}, 0xd) bpf$auto(0x3, &(0x7f00000001c0)=@link_update={r2, @new_map_fd, 0x403, @old_prog_fd=r3}, 0x8) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000004c0)=""/244, 0xf4) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/module/i915/parameters/mitigations\x00', 0x88302, 0x0) sendfile$auto(r4, r4, 0x0, 0x7ffff000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) r5 = socket(0x1d, 0x2, 0x7) r6 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r7}, 0x6a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) connect$auto(0x3, &(0x7f00000018c0)=@can={0x1d, r8}, 0x18) recvmmsg$auto(0x3, &(0x7f0000000100)={{0x0, 0x400003, &(0x7f0000000080)={0x0, 0x9}, 0x7, 0x0, 0x1, 0x4}, 0x4}, 0x10000, 0x2, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffcc}, 0x1, 0x0, 0x0, 0x2000009}, 0x9}, 0x3, 0x0) socket(0xa, 0x1, 0x100) mmap$auto(0x0, 0x400008, 0xdf, 0x16, 0x2, 0x8000) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/snd/pcmC0D0p\x00', 0x40, 0x0) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x101600, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) 4.168474178s ago: executing program 2 (id=635): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x2, 0x0) unshare$auto(0x40000080) r0 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r0, 0x107, 0x5, 0x0, 0x8004) r1 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0xfff, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x182, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) ioperm$auto(0x3, 0xe, 0x2000000000000149) msgctl$auto_IPC_RMID(0x9, 0x0, 0x0) statx$auto(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x6, 0x233, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000001c00), r4) sendmsg$auto_IOAM6_CMD_ADD_NAMESPACE(r4, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f0000000000)={0x28, r5, 0xa2d601c1e7b11e31, 0x70bd27, 0x25dfdbfd, {}, [@IOAM6_ATTR_NS_ID={0x6}, @IOAM6_ATTR_NS_DATA_WIDE={0xc, 0x3, 0x72c}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioperm$auto(0x8, 0x8, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[], 0x3d0}, 0x1, 0x0, 0x0, 0x4004004}, 0x800) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/stat/rt_cache\x00', 0x20000, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x8000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mbind$auto(0xf1, 0x2091d2, 0x4, 0x0, 0x6, 0x2) writev$auto(r0, &(0x7f00000000c0)={&(0x7f0000000140)="d780f6940cc1452d0a28e57cf9aa6c428372a4739646d9aff435901b8a7c4997ce8124d24ca31ede64c98db9f21a10146b2acfecf8fcb72ab1a76981068113d729855f5eda34a266a249873d8bc7e950c614b613bd3d4b9f2d0fb40c3f8b0ae54542fd489d20604839ac184b3f855d58e324f7d8b47127b51a", 0x1}, 0x71) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) 2.109985507s ago: executing program 3 (id=636): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0xfffffffffffffffd, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r2) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000ffdbdf25040000000a0016070000000400000000"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) socket(0x11, 0x80003, 0x300) ioctl$auto_UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000300)={0x5, 0x9b8, {0xb, 0x2, 0x805, {0x7f, 0x3ff}, {0x9, 0x7}, @rumble={0x5, 0xc3d}}, {0x10, 0x6084, 0xbacc, {0x2, 0x400}, {0xd, 0x4}, @periodic={0x6, 0x8, 0xff, 0x5b, 0x417, {0x8, 0x8, 0x2, 0x8}, 0x32c2, &(0x7f0000000380)=0x6}}}) r5 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) open_by_handle_at$auto(r5, &(0x7f0000000000)={0x8, 0x2, 'u\x00\x00\x00\x00\x00\x00\x00'}, 0x2) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x1, 0x0, 0x80000000) close_range$auto(0x2, 0xa, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) dup2$auto(0x5, 0x4) write$auto(0x6, 0x0, 0x100000001) splice$auto(0x4, 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x9) read$auto(r6, 0x0, 0x20) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) recvmsg$auto(r4, &(0x7f00000005c0)={0x0, 0x8, &(0x7f00000004c0)={&(0x7f00000003c0)="444debcb5d4827b41b873d646e2663fb2d4aa24da78f4b3472bd8daf8c57304fe5302fe1869cfca458a5a39bd4006710640f6032088c509f0c082c1b04896afe04d524b8b80ce2949dae1a1d2bec705c343bc92a41212ae3ed0a036e67d0c6d7b35e6cb8956ef9b289a7e42615af9f0470dc70d3deea952a1d85a1a845530a190757f55d6e53993d1e8f22b49f44b8a5b9b989d8ed44e1a1f0002bb9f9c8813bee34cfb9b329b8b45794054ee04fdb17a945013b532f53854704c99cc8f02c1582b9c91704e2ed3d57e019cf620547", 0x3}, 0xd3, &(0x7f0000000500), 0xc, 0xffffffff}, 0xfffffff7) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) 954.740032ms ago: executing program 1 (id=637): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0xfffffffffffffffd, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r2) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000ffdbdf25040000000a0016070000000400000000"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) socket(0x11, 0x80003, 0x300) ioctl$auto_UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000300)={0x5, 0x9b8, {0xb, 0x2, 0x805, {0x7f, 0x3ff}, {0x9, 0x7}, @rumble={0x5, 0xc3d}}, {0x10, 0x6084, 0xbacc, {0x2, 0x400}, {0xd, 0x4}, @periodic={0x6, 0x8, 0xff, 0x5b, 0x417, {0x8, 0x8, 0x2, 0x8}, 0x32c2, &(0x7f0000000380)=0x6}}}) r5 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) open_by_handle_at$auto(r5, &(0x7f0000000000)={0x8, 0x2, 'u\x00\x00\x00\x00\x00\x00\x00'}, 0x2) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x1, 0x0, 0x80000000) close_range$auto(0x2, 0xa, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) pipe$auto(0x0) dup2$auto(0x5, 0x4) write$auto(0x6, 0x0, 0x100000001) read$auto(r6, 0x0, 0x20) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) recvmsg$auto(r4, &(0x7f00000005c0)={0x0, 0x8, &(0x7f00000004c0)={&(0x7f00000003c0)="444debcb5d4827b41b873d646e2663fb2d4aa24da78f4b3472bd8daf8c57304fe5302fe1869cfca458a5a39bd4006710640f6032088c509f0c082c1b04896afe04d524b8b80ce2949dae1a1d2bec705c343bc92a41212ae3ed0a036e67d0c6d7b35e6cb8956ef9b289a7e42615af9f0470dc70d3deea952a1d85a1a845530a190757f55d6e53993d1e8f22b49f44b8a5b9b989d8ed44e1a1f0002bb9f9c8813bee34cfb9b329b8b45794054ee04fdb17a945013b532f53854704c99cc8f02c1582b9c91704e2ed3d57e019cf620547", 0x3}, 0xd3, &(0x7f0000000500), 0xc, 0xffffffff}, 0xfffffff7) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) 753.439575ms ago: executing program 2 (id=638): r0 = pidfd_open$auto(0x1, 0x0) mmap$auto(0x0, 0x2, 0x3, 0x20eb3, r0, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x5, 0x3, 0x0, 0x7, 0x6) r1 = socket(0x10, 0x2, 0xfffffe05) mmap$auto(0x0, 0x400008, 0xdf, 0x2000009b72, r1, 0x8000) lsm_set_self_attr$auto(0x9, 0x0, 0x80, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x2a0001, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000005c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\b\x00\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x02\x00\x00\x00\x00\x00\x00\x00\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\xa7\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5\xe6w\xee\x02b\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\xa8=\x8b\xc8\xa1j\xb6q\xa5\xb3\xb5\x81\xe8~\x13\xb3#\x10\xda8,\x0e\xe3\x1c\x017\xf2D2T\xb4\xcfGsg\x0f\xd9\xa9\bS\xdb\x9b~D\aQiX\xefg\xbd\xebP\xd4e\xc0c\xda\xec\xca\xff\xbdA&THU\xb3\xf3\xec\xad\xb3FTX\xb1\x851x\xd9:\xd8\",\x93\xdb\xf5\xec\xbf\x82\x9d\xa9\xb6\x8fB&\xef\x90g\xc5\x19\rH\f\x0f_\xd2\xfaL\xef\xf78\v\xc4\x9dt\xcb\x9d\xaaA\xb6SF\x11\xd0\xd7I\xbdG.B\xf5\xbe', 0x100000a3d9) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder0\x00', 0x800, 0x0) socket(0xa, 0x1, 0x100) socket(0x1e, 0x1, 0x0) socket(0x2c, 0x3, 0x9) r3 = socket(0x15, 0x5, 0x0) getsockopt$auto(r3, 0x114, 0x2713, 0xfffffffffffffffc, 0x0) write$auto(0x1, 0x0, 0x80000000) openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/options/test_nop_refuse\x00', 0x4ca40, 0x0) preadv$auto(0x3, &(0x7f00000004c0)={0x0, 0x8000000}, 0x3, 0x10000, 0x10) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) write$auto(r4, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) fcntl$auto(0x0, 0x407, 0x100000) setns(r0, 0x60020000) umount2$auto(&(0x7f0000000000)='.\x00', 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x29, 0x2, 0x0) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), r5) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/conf/team0/bc_forwarding\x00', 0x2102, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setgroups$auto(0xc00000000, 0xfffffffffffffffc) 0s ago: executing program 3 (id=639): r0 = pidfd_open$auto(0x1, 0x0) mmap$auto(0x0, 0x2, 0x3, 0x20eb3, r0, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x5, 0x3, 0x0, 0x7, 0x6) r1 = socket(0x10, 0x2, 0xfffffe05) mmap$auto(0x0, 0x400008, 0xdf, 0x2000009b72, r1, 0x8000) lsm_set_self_attr$auto(0x9, 0x0, 0x80, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x2a0001, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000005c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\b\x00\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x02\x00\x00\x00\x00\x00\x00\x00\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\xa7\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5\xe6w\xee\x02b\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\xa8=\x8b\xc8\xa1j\xb6q\xa5\xb3\xb5\x81\xe8~\x13\xb3#\x10\xda8,\x0e\xe3\x1c\x017\xf2D2T\xb4\xcfGsg\x0f\xd9\xa9\bS\xdb\x9b~D\aQiX\xefg\xbd\xebP\xd4e\xc0c\xda\xec\xca\xff\xbdA&THU\xb3\xf3\xec\xad\xb3FTX\xb1\x851x\xd9:\xd8\",\x93\xdb\xf5\xec\xbf\x82\x9d\xa9\xb6\x8fB&\xef\x90g\xc5\x19\rH\f\x0f_\xd2\xfaL\xef\xf78\v\xc4\x9dt\xcb\x9d\xaaA\xb6SF\x11\xd0\xd7I\xbdG.B\xf5\xbe', 0x100000a3d9) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder0\x00', 0x800, 0x0) socket(0xa, 0x1, 0x100) socket(0x1e, 0x1, 0x0) socket(0x2c, 0x3, 0x9) r3 = socket(0x15, 0x5, 0x0) getsockopt$auto(r3, 0x114, 0x2713, 0xfffffffffffffffc, 0x0) write$auto(0x1, 0x0, 0x80000000) openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/options/test_nop_refuse\x00', 0x4ca40, 0x0) preadv$auto(0x3, &(0x7f00000004c0)={0x0, 0x8000000}, 0x3, 0x10000, 0x10) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) write$auto(r4, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) fcntl$auto(0x0, 0x407, 0x100000) setns(r0, 0x60020000) umount2$auto(&(0x7f0000000000)='.\x00', 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x29, 0x2, 0x0) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), r5) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/conf/team0/bc_forwarding\x00', 0x2102, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setgroups$auto(0xc00000000, 0xfffffffffffffffc) kernel console output (not intermixed with test programs): e, BIOS Google 07/12/2025 [ 236.981229][ T8237] Call Trace: [ 236.981238][ T8237] [ 236.981247][ T8237] dump_stack_lvl+0x16c/0x1f0 [ 236.981288][ T8237] should_fail_ex+0x512/0x640 [ 236.981322][ T8237] ? __kmalloc_noprof+0xbf/0x510 [ 236.981355][ T8237] ? rfkill_alloc+0xac/0x330 [ 236.981391][ T8237] should_failslab+0xc2/0x120 [ 236.981425][ T8237] __kmalloc_noprof+0xd2/0x510 [ 236.981457][ T8237] ? lockdep_init_map_type+0x5c/0x280 [ 236.981493][ T8237] rfkill_alloc+0xac/0x330 [ 236.981528][ T8237] wiphy_new_nm+0x136a/0x2190 [ 236.981565][ T8237] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 236.981602][ T8237] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 236.981637][ T8237] ieee80211_alloc_hw_nm+0x1b7a/0x2260 [ 236.981670][ T8237] ? __local_bh_enable_ip+0xa4/0x120 [ 236.981702][ T8237] mac80211_hwsim_new_radio+0x1d4/0x54d0 [ 236.981774][ T8237] ? __asan_memset+0x23/0x50 [ 236.981802][ T8237] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 236.981841][ T8237] hwsim_new_radio_nl+0xb51/0x12c0 [ 236.981872][ T8237] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 236.981910][ T8237] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 236.981951][ T8237] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 236.982000][ T8237] genl_family_rcv_msg_doit+0x209/0x2f0 [ 236.982043][ T8237] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 236.982096][ T8237] ? bpf_lsm_capable+0x9/0x10 [ 236.982119][ T8237] ? security_capable+0x7e/0x260 [ 236.982146][ T8237] ? ns_capable+0xd7/0x110 [ 236.982176][ T8237] genl_rcv_msg+0x55c/0x800 [ 236.982204][ T8237] ? __pfx_genl_rcv_msg+0x10/0x10 [ 236.982244][ T8237] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 236.982284][ T8237] netlink_rcv_skb+0x158/0x420 [ 236.982315][ T8237] ? __pfx_genl_rcv_msg+0x10/0x10 [ 236.982350][ T8237] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 236.982393][ T8237] ? netlink_deliver_tap+0x1ae/0xd30 [ 236.982429][ T8237] genl_rcv+0x28/0x40 [ 236.982461][ T8237] netlink_unicast+0x5a7/0x870 [ 236.982499][ T8237] ? __pfx_netlink_unicast+0x10/0x10 [ 236.982531][ T8237] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 236.982560][ T8237] ? __lock_acquire+0xb97/0x1ce0 [ 236.982599][ T8237] netlink_sendmsg+0x8d1/0xdd0 [ 236.982635][ T8237] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.982673][ T8237] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 236.982706][ T8237] ____sys_sendmsg+0xa98/0xc70 [ 236.982732][ T8237] ? copy_msghdr_from_user+0x10a/0x160 [ 236.982785][ T8237] ? __pfx_____sys_sendmsg+0x10/0x10 [ 236.982825][ T8237] ___sys_sendmsg+0x134/0x1d0 [ 236.982858][ T8237] ? __pfx____sys_sendmsg+0x10/0x10 [ 236.982926][ T8237] __sys_sendmsg+0x16d/0x220 [ 236.982958][ T8237] ? __pfx___sys_sendmsg+0x10/0x10 [ 236.982987][ T8237] ? __x64_sys_futex+0x1e0/0x4c0 [ 236.983039][ T8237] do_syscall_64+0xcd/0x490 [ 236.983077][ T8237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.983103][ T8237] RIP: 0033:0x7fd6a578ebe9 [ 236.983125][ T8237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.983149][ T8237] RSP: 002b:00007fd6a6661038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 236.983174][ T8237] RAX: ffffffffffffffda RBX: 00007fd6a59c5fa0 RCX: 00007fd6a578ebe9 [ 236.983191][ T8237] RDX: 0000000004048000 RSI: 0000200000004240 RDI: 000000000000000a [ 236.983207][ T8237] RBP: 00007fd6a5811e19 R08: 0000000000000000 R09: 0000000000000000 [ 236.983223][ T8237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.983239][ T8237] R13: 00007fd6a59c6038 R14: 00007fd6a59c5fa0 R15: 00007ffd98283f28 [ 236.983275][ T8237] [ 237.031161][ T7772] Bluetooth: hci1: command 0x0406 tx timeout [ 237.042404][ T8238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.395'. [ 237.111182][ T7772] Bluetooth: hci2: command 0x0406 tx timeout [ 237.389367][ T6664] Bluetooth: hci3: command 0x0406 tx timeout [ 237.980224][ T8247] FAULT_INJECTION: forcing a failure. [ 237.980224][ T8247] name failslab, interval 1, probability 0, space 0, times 0 [ 238.031702][ T8247] CPU: 1 UID: 0 PID: 8247 Comm: syz.2.397 Tainted: G U syzkaller #0 PREEMPT(full) [ 238.031746][ T8247] Tainted: [U]=USER [ 238.031754][ T8247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 238.031768][ T8247] Call Trace: [ 238.031776][ T8247] [ 238.031786][ T8247] dump_stack_lvl+0x16c/0x1f0 [ 238.031826][ T8247] should_fail_ex+0x512/0x640 [ 238.031860][ T8247] ? fs_reclaim_acquire+0xae/0x150 [ 238.031897][ T8247] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 238.031928][ T8247] should_failslab+0xc2/0x120 [ 238.031959][ T8247] __kmalloc_noprof+0xd2/0x510 [ 238.031995][ T8247] tomoyo_realpath_from_path+0xc2/0x6e0 [ 238.032042][ T8247] tomoyo_check_open_permission+0x2ab/0x3c0 [ 238.032075][ T8247] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 238.032145][ T8247] ? find_held_lock+0x2b/0x80 [ 238.032180][ T8247] tomoyo_file_open+0x6b/0x90 [ 238.032207][ T8247] security_file_open+0x84/0x1e0 [ 238.032239][ T8247] do_dentry_open+0x596/0x1530 [ 238.032278][ T8247] vfs_open+0x82/0x3f0 [ 238.032319][ T8247] path_openat+0x1de4/0x2cb0 [ 238.032359][ T8247] ? __pfx_path_openat+0x10/0x10 [ 238.032397][ T8247] do_filp_open+0x20b/0x470 [ 238.032426][ T8247] ? __pfx_do_filp_open+0x10/0x10 [ 238.032482][ T8247] ? alloc_fd+0x471/0x7d0 [ 238.032519][ T8247] do_sys_openat2+0x11b/0x1d0 [ 238.032556][ T8247] ? __pfx_do_sys_openat2+0x10/0x10 [ 238.032615][ T8247] __x64_sys_openat+0x174/0x210 [ 238.032655][ T8247] ? __pfx___x64_sys_openat+0x10/0x10 [ 238.032697][ T8247] do_syscall_64+0xcd/0x490 [ 238.032731][ T8247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.032756][ T8247] RIP: 0033:0x7fd6a578ebe9 [ 238.032778][ T8247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.032801][ T8247] RSP: 002b:00007fd6a6661038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 238.032826][ T8247] RAX: ffffffffffffffda RBX: 00007fd6a59c5fa0 RCX: 00007fd6a578ebe9 [ 238.032844][ T8247] RDX: 0000000000181841 RSI: 0000200000000540 RDI: ffffffffffffff9c [ 238.032861][ T8247] RBP: 00007fd6a5811e19 R08: 0000000000000000 R09: 0000000000000000 [ 238.032875][ T8247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 238.032888][ T8247] R13: 00007fd6a59c6038 R14: 00007fd6a59c5fa0 R15: 00007ffd98283f28 [ 238.032921][ T8247] [ 238.032931][ T8247] ERROR: Out of memory at tomoyo_realpath_from_path. [ 238.952178][ T7772] Bluetooth: hci0: command 0x0406 tx timeout [ 239.112180][ T7772] Bluetooth: hci1: command 0x0406 tx timeout [ 239.433162][ T7772] Bluetooth: hci2: command 0x0406 tx timeout [ 239.440112][ T6664] Bluetooth: hci3: command 0x0406 tx timeout [ 241.522944][ T8288] FAULT_INJECTION: forcing a failure. [ 241.522944][ T8288] name failslab, interval 1, probability 0, space 0, times 0 [ 241.541243][ T8288] CPU: 1 UID: 0 PID: 8288 Comm: syz.2.408 Tainted: G U syzkaller #0 PREEMPT(full) [ 241.541278][ T8288] Tainted: [U]=USER [ 241.541283][ T8288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 241.541292][ T8288] Call Trace: [ 241.541299][ T8288] [ 241.541306][ T8288] dump_stack_lvl+0x16c/0x1f0 [ 241.541332][ T8288] should_fail_ex+0x512/0x640 [ 241.541352][ T8288] ? fs_reclaim_acquire+0xae/0x150 [ 241.541375][ T8288] ? tomoyo_encode2+0x100/0x3e0 [ 241.541395][ T8288] should_failslab+0xc2/0x120 [ 241.541415][ T8288] __kmalloc_noprof+0xd2/0x510 [ 241.541436][ T8288] tomoyo_encode2+0x100/0x3e0 [ 241.541458][ T8288] tomoyo_encode+0x29/0x50 [ 241.541476][ T8288] tomoyo_realpath_from_path+0x18f/0x6e0 [ 241.541501][ T8288] tomoyo_check_open_permission+0x2ab/0x3c0 [ 241.541519][ T8288] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 241.541555][ T8288] ? find_held_lock+0x2b/0x80 [ 241.541575][ T8288] tomoyo_file_open+0x6b/0x90 [ 241.541589][ T8288] security_file_open+0x84/0x1e0 [ 241.541608][ T8288] do_dentry_open+0x596/0x1530 [ 241.541632][ T8288] vfs_open+0x82/0x3f0 [ 241.541655][ T8288] path_openat+0x1de4/0x2cb0 [ 241.541678][ T8288] ? __pfx_path_openat+0x10/0x10 [ 241.541699][ T8288] do_filp_open+0x20b/0x470 [ 241.541716][ T8288] ? __pfx_do_filp_open+0x10/0x10 [ 241.541745][ T8288] ? alloc_fd+0x471/0x7d0 [ 241.541766][ T8288] do_sys_openat2+0x11b/0x1d0 [ 241.541786][ T8288] ? __pfx_do_sys_openat2+0x10/0x10 [ 241.541814][ T8288] __x64_sys_openat+0x174/0x210 [ 241.541835][ T8288] ? __pfx___x64_sys_openat+0x10/0x10 [ 241.541864][ T8288] do_syscall_64+0xcd/0x490 [ 241.541884][ T8288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.541899][ T8288] RIP: 0033:0x7fd6a578ebe9 [ 241.541911][ T8288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.541925][ T8288] RSP: 002b:00007fd6a6661038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 241.541939][ T8288] RAX: ffffffffffffffda RBX: 00007fd6a59c5fa0 RCX: 00007fd6a578ebe9 [ 241.541948][ T8288] RDX: 0000000000181841 RSI: 0000200000000540 RDI: ffffffffffffff9c [ 241.541957][ T8288] RBP: 00007fd6a5811e19 R08: 0000000000000000 R09: 0000000000000000 [ 241.541965][ T8288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.541973][ T8288] R13: 00007fd6a59c6038 R14: 00007fd6a59c5fa0 R15: 00007ffd98283f28 [ 241.541991][ T8288] [ 241.542012][ T8288] ERROR: Out of memory at tomoyo_realpath_from_path. [ 242.175563][ T6664] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 242.187783][ T6664] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 242.206382][ T6664] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 242.217275][ T6664] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 242.225084][ T6664] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 243.204197][ T8294] chnl_net:caif_netlink_parms(): no params data found [ 243.564989][ T8294] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.599015][ T8294] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.624822][ T8294] bridge_slave_0: entered allmulticast mode [ 243.632645][ T8294] bridge_slave_0: entered promiscuous mode [ 244.314882][ T6664] Bluetooth: hci0: command tx timeout [ 244.455117][ T8322] zswap: compressor not available [ 244.552060][ T8326] Setting dangerous option i915.mitigations - tainting kernel [ 244.615216][ T8294] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.631300][ T8294] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.676216][ T8294] bridge_slave_1: entered allmulticast mode [ 244.690589][ T8294] bridge_slave_1: entered promiscuous mode [ 245.757170][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 245.782825][ T8294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.916038][ T8294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.126162][ T8294] team0: Port device team_slave_0 added [ 246.159205][ T8294] team0: Port device team_slave_1 added [ 246.315224][ T8294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.342776][ T8294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.373998][ T8344] zswap: compressor not available [ 246.389574][ T8347] Setting dangerous option i915.mitigations - tainting kernel [ 246.397346][ T6664] Bluetooth: hci0: command tx timeout [ 246.454225][ T8294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.508054][ T8294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.515038][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e2a6c00: rx timeout, send abort [ 246.523457][ T8351] FAULT_INJECTION: forcing a failure. [ 246.523457][ T8351] name failslab, interval 1, probability 0, space 0, times 0 [ 246.537147][ T8351] CPU: 0 UID: 0 PID: 8351 Comm: syz.1.417 Tainted: G U syzkaller #0 PREEMPT(full) [ 246.537186][ T8351] Tainted: [U]=USER [ 246.537194][ T8351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 246.537221][ T8351] Call Trace: [ 246.537231][ T8351] [ 246.537240][ T8351] dump_stack_lvl+0x16c/0x1f0 [ 246.537279][ T8351] should_fail_ex+0x512/0x640 [ 246.537312][ T8351] ? __kvmalloc_node_noprof+0x124/0x620 [ 246.537343][ T8351] should_failslab+0xc2/0x120 [ 246.537375][ T8351] __kvmalloc_node_noprof+0x137/0x620 [ 246.537402][ T8351] ? __pfx___debug_object_init+0x10/0x10 [ 246.537427][ T8351] ? bucket_table_alloc.isra.0+0x83/0x460 [ 246.537467][ T8351] ? bucket_table_alloc.isra.0+0x83/0x460 [ 246.537499][ T8351] bucket_table_alloc.isra.0+0x83/0x460 [ 246.537533][ T8351] rhashtable_init_noprof+0x41a/0x7e0 [ 246.537563][ T8351] ? __init_waitqueue_head+0xca/0x150 [ 246.537603][ T8351] rhltable_init_noprof+0x20/0x60 [ 246.537634][ T8351] sta_info_init+0x27/0x160 [ 246.537664][ T8351] ieee80211_alloc_hw_nm+0x840/0x2260 [ 246.537698][ T8351] ? __local_bh_enable_ip+0xa4/0x120 [ 246.537743][ T8351] mac80211_hwsim_new_radio+0x1d4/0x54d0 [ 246.537785][ T8351] ? __asan_memset+0x23/0x50 [ 246.537811][ T8351] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 246.537846][ T8351] hwsim_new_radio_nl+0xb51/0x12c0 [ 246.537875][ T8351] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 246.537911][ T8351] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 246.537948][ T8351] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 246.537993][ T8351] genl_family_rcv_msg_doit+0x209/0x2f0 [ 246.538036][ T8351] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 246.538087][ T8351] ? bpf_lsm_capable+0x9/0x10 [ 246.538109][ T8351] ? security_capable+0x7e/0x260 [ 246.538136][ T8351] ? ns_capable+0xd7/0x110 [ 246.538165][ T8351] genl_rcv_msg+0x55c/0x800 [ 246.538192][ T8351] ? __pfx_genl_rcv_msg+0x10/0x10 [ 246.538230][ T8351] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 246.538261][ T8351] ? __lock_acquire+0x62e/0x1ce0 [ 246.538297][ T8351] netlink_rcv_skb+0x158/0x420 [ 246.538332][ T8351] ? __pfx_genl_rcv_msg+0x10/0x10 [ 246.538371][ T8351] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 246.538421][ T8351] ? netlink_deliver_tap+0x1ae/0xd30 [ 246.538451][ T8351] ? is_vmalloc_addr+0x86/0xa0 [ 246.538483][ T8351] genl_rcv+0x28/0x40 [ 246.538517][ T8351] netlink_unicast+0x5a7/0x870 [ 246.538557][ T8351] ? __pfx_netlink_unicast+0x10/0x10 [ 246.538592][ T8351] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 246.538624][ T8351] ? __lock_acquire+0xb97/0x1ce0 [ 246.538666][ T8351] netlink_sendmsg+0x8d1/0xdd0 [ 246.538717][ T8351] ? __pfx_netlink_sendmsg+0x10/0x10 [ 246.538759][ T8351] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 246.538794][ T8351] ____sys_sendmsg+0xa98/0xc70 [ 246.538820][ T8351] ? copy_msghdr_from_user+0x10a/0x160 [ 246.538853][ T8351] ? __pfx_____sys_sendmsg+0x10/0x10 [ 246.538896][ T8351] ___sys_sendmsg+0x134/0x1d0 [ 246.538932][ T8351] ? __pfx____sys_sendmsg+0x10/0x10 [ 246.539011][ T8351] __sys_sendmsg+0x16d/0x220 [ 246.539045][ T8351] ? __pfx___sys_sendmsg+0x10/0x10 [ 246.539077][ T8351] ? __x64_sys_futex+0x1e0/0x4c0 [ 246.539124][ T8351] do_syscall_64+0xcd/0x490 [ 246.539160][ T8351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.539185][ T8351] RIP: 0033:0x7f030198ebe9 [ 246.539203][ T8351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.539226][ T8351] RSP: 002b:00007f0302760038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 246.539243][ T8294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.539250][ T8351] RAX: ffffffffffffffda RBX: 00007f0301bc5fa0 RCX: 00007f030198ebe9 [ 246.539267][ T8351] RDX: 0000000004048000 RSI: 0000200000004240 RDI: 000000000000000a [ 246.539282][ T8351] RBP: 00007f0301a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 246.539295][ T8351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.539306][ T8351] R13: 00007f0301bc6038 R14: 00007f0301bc5fa0 R15: 00007ffd297aac48 [ 246.539338][ T8351] [ 246.963283][ T8294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.015393][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e2a6c00: abort rx timeout. Force session deactivation [ 247.159924][ T8294] hsr_slave_0: entered promiscuous mode [ 247.187234][ T8294] hsr_slave_1: entered promiscuous mode [ 247.193643][ T8294] debugfs: 'hsr0' already exists in 'hsr' [ 247.226547][ T8294] Cannot create hsr debugfs directory [ 247.300333][ T8355] FAULT_INJECTION: forcing a failure. [ 247.300333][ T8355] name failslab, interval 1, probability 0, space 0, times 0 [ 247.356360][ T8355] CPU: 0 UID: 0 PID: 8355 Comm: syz.1.418 Tainted: G U syzkaller #0 PREEMPT(full) [ 247.356405][ T8355] Tainted: [U]=USER [ 247.356413][ T8355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 247.356427][ T8355] Call Trace: [ 247.356436][ T8355] [ 247.356446][ T8355] dump_stack_lvl+0x16c/0x1f0 [ 247.356473][ T8355] should_fail_ex+0x512/0x640 [ 247.356493][ T8355] ? fs_reclaim_acquire+0xae/0x150 [ 247.356516][ T8355] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 247.356537][ T8355] should_failslab+0xc2/0x120 [ 247.356556][ T8355] __kmalloc_noprof+0xd2/0x510 [ 247.356577][ T8355] tomoyo_realpath_from_path+0xc2/0x6e0 [ 247.356602][ T8355] tomoyo_check_open_permission+0x2ab/0x3c0 [ 247.356621][ T8355] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 247.356657][ T8355] ? find_held_lock+0x2b/0x80 [ 247.356675][ T8355] tomoyo_file_open+0x6b/0x90 [ 247.356690][ T8355] security_file_open+0x84/0x1e0 [ 247.356710][ T8355] do_dentry_open+0x596/0x1530 [ 247.356733][ T8355] vfs_open+0x82/0x3f0 [ 247.356756][ T8355] path_openat+0x1de4/0x2cb0 [ 247.356779][ T8355] ? __pfx_path_openat+0x10/0x10 [ 247.356800][ T8355] do_filp_open+0x20b/0x470 [ 247.356817][ T8355] ? __pfx_do_filp_open+0x10/0x10 [ 247.356846][ T8355] ? alloc_fd+0x471/0x7d0 [ 247.356867][ T8355] do_sys_openat2+0x11b/0x1d0 [ 247.356888][ T8355] ? __pfx_do_sys_openat2+0x10/0x10 [ 247.356925][ T8355] __x64_sys_openat+0x174/0x210 [ 247.356947][ T8355] ? __pfx___x64_sys_openat+0x10/0x10 [ 247.356976][ T8355] do_syscall_64+0xcd/0x490 [ 247.356999][ T8355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.357014][ T8355] RIP: 0033:0x7f030198ebe9 [ 247.357027][ T8355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.357040][ T8355] RSP: 002b:00007f0302760038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 247.357054][ T8355] RAX: ffffffffffffffda RBX: 00007f0301bc5fa0 RCX: 00007f030198ebe9 [ 247.357064][ T8355] RDX: 0000000000181841 RSI: 0000200000000540 RDI: ffffffffffffff9c [ 247.357073][ T8355] RBP: 00007f0301a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 247.357081][ T8355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.357090][ T8355] R13: 00007f0301bc6038 R14: 00007f0301bc5fa0 R15: 00007ffd297aac48 [ 247.357109][ T8355] [ 247.357155][ T8355] ERROR: Out of memory at tomoyo_realpath_from_path. [ 248.309505][ T8360] FAULT_INJECTION: forcing a failure. [ 248.309505][ T8360] name failslab, interval 1, probability 0, space 0, times 0 [ 248.329293][ T8360] CPU: 0 UID: 0 PID: 8360 Comm: syz.1.419 Tainted: G U syzkaller #0 PREEMPT(full) [ 248.329343][ T8360] Tainted: [U]=USER [ 248.329351][ T8360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 248.329367][ T8360] Call Trace: [ 248.329376][ T8360] [ 248.329386][ T8360] dump_stack_lvl+0x16c/0x1f0 [ 248.329426][ T8360] should_fail_ex+0x512/0x640 [ 248.329474][ T8360] ? __kmalloc_noprof+0xbf/0x510 [ 248.329507][ T8360] ? rfkill_alloc+0xac/0x330 [ 248.329546][ T8360] should_failslab+0xc2/0x120 [ 248.329579][ T8360] __kmalloc_noprof+0xd2/0x510 [ 248.329619][ T8360] ? lockdep_init_map_type+0x5c/0x280 [ 248.329659][ T8360] rfkill_alloc+0xac/0x330 [ 248.329699][ T8360] wiphy_new_nm+0x136a/0x2190 [ 248.329730][ T8360] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 248.329766][ T8360] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 248.329799][ T8360] ieee80211_alloc_hw_nm+0x1b7a/0x2260 [ 248.329832][ T8360] ? __local_bh_enable_ip+0xa4/0x120 [ 248.329866][ T8360] mac80211_hwsim_new_radio+0x1d4/0x54d0 [ 248.329906][ T8360] ? __asan_memset+0x23/0x50 [ 248.329934][ T8360] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 248.329973][ T8360] hwsim_new_radio_nl+0xb51/0x12c0 [ 248.330002][ T8360] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 248.330039][ T8360] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 248.330080][ T8360] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 248.330129][ T8360] genl_family_rcv_msg_doit+0x209/0x2f0 [ 248.330172][ T8360] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 248.330224][ T8360] ? bpf_lsm_capable+0x9/0x10 [ 248.330246][ T8360] ? security_capable+0x7e/0x260 [ 248.330274][ T8360] ? ns_capable+0xd7/0x110 [ 248.330304][ T8360] genl_rcv_msg+0x55c/0x800 [ 248.330332][ T8360] ? __pfx_genl_rcv_msg+0x10/0x10 [ 248.330371][ T8360] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 248.330401][ T8360] ? __lock_acquire+0x62e/0x1ce0 [ 248.330440][ T8360] netlink_rcv_skb+0x158/0x420 [ 248.330474][ T8360] ? __pfx_genl_rcv_msg+0x10/0x10 [ 248.330515][ T8360] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 248.330565][ T8360] ? netlink_deliver_tap+0x1ae/0xd30 [ 248.330605][ T8360] ? is_vmalloc_addr+0x86/0xa0 [ 248.330639][ T8360] genl_rcv+0x28/0x40 [ 248.330674][ T8360] netlink_unicast+0x5a7/0x870 [ 248.330716][ T8360] ? __pfx_netlink_unicast+0x10/0x10 [ 248.330751][ T8360] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 248.330784][ T8360] ? __lock_acquire+0xb97/0x1ce0 [ 248.330826][ T8360] netlink_sendmsg+0x8d1/0xdd0 [ 248.330867][ T8360] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.330907][ T8360] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 248.330940][ T8360] ____sys_sendmsg+0xa98/0xc70 [ 248.330967][ T8360] ? copy_msghdr_from_user+0x10a/0x160 [ 248.331000][ T8360] ? __pfx_____sys_sendmsg+0x10/0x10 [ 248.331034][ T8360] ? __pfx_futex_wake_mark+0x10/0x10 [ 248.331077][ T8360] ___sys_sendmsg+0x134/0x1d0 [ 248.331113][ T8360] ? __pfx____sys_sendmsg+0x10/0x10 [ 248.331194][ T8360] __sys_sendmsg+0x16d/0x220 [ 248.331230][ T8360] ? __pfx___sys_sendmsg+0x10/0x10 [ 248.331262][ T8360] ? __x64_sys_futex+0x1e0/0x4c0 [ 248.331318][ T8360] do_syscall_64+0xcd/0x490 [ 248.331357][ T8360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.331382][ T8360] RIP: 0033:0x7f030198ebe9 [ 248.331404][ T8360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.331430][ T8360] RSP: 002b:00007f0302760038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 248.331455][ T8360] RAX: ffffffffffffffda RBX: 00007f0301bc5fa0 RCX: 00007f030198ebe9 [ 248.331472][ T8360] RDX: 0000000004048000 RSI: 0000200000004240 RDI: 000000000000000a [ 248.331489][ T8360] RBP: 00007f0301a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 248.331506][ T8360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.331522][ T8360] R13: 00007f0301bc6038 R14: 00007f0301bc5fa0 R15: 00007ffd297aac48 [ 248.331555][ T8360] [ 248.719203][ T6664] Bluetooth: hci0: command tx timeout [ 248.736730][ T8360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.419'. [ 248.875588][ T8294] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.985938][ T8294] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.101112][ T8294] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.640067][ T8294] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 249.676747][ T8294] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 249.848438][ T8294] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 249.897269][ T8376] device-mapper: ioctl: Invalid ioctl structure: name , dev d76200010006 [ 249.901776][ T8294] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 250.676705][ T8294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.755286][ T8294] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.798435][ T6664] Bluetooth: hci0: command tx timeout [ 250.884220][ T6668] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.892326][ T6668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.954297][ T6885] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.961494][ T6885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.174699][ T8403] __vm_enough_memory: pid: 8403, comm: syz.1.425, bytes: 4398046511104 not enough memory for the allocation [ 251.681664][ T8402] bcachefs: bch2_ioctl_fsck_offline() ret EFAULT [ 252.657219][ T8431] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 252.660678][ T8294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.193640][ T8294] veth0_vlan: entered promiscuous mode [ 253.211389][ T8294] veth1_vlan: entered promiscuous mode [ 253.348544][ T8294] veth0_macvtap: entered promiscuous mode [ 253.399033][ T8294] veth1_macvtap: entered promiscuous mode [ 253.471021][ T8443] netlink: 504 bytes leftover after parsing attributes in process `syz.3.431'. [ 253.484447][ T8294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.573748][ T8294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.753015][ T6669] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.764855][ T6669] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.792049][ T6669] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.806127][ T6669] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.160328][ T7918] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.168198][ T7918] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.276449][ T8450] random: crng reseeded on system resumption [ 254.366232][ T6669] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.382071][ T6669] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.843263][ T8479] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 260.262123][ T8523] ptrace attach of "./syz-executor exec"[8524] was attempted by "./syz-executor exec"[8523] [ 261.127858][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.143494][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.481496][ T8560] random: crng reseeded on system resumption [ 264.900322][ T8573] zswap: compressor not available [ 264.916081][ T8576] Setting dangerous option i915.mitigations - tainting kernel [ 265.151861][ T8587] input: f¬ as /devices/virtual/input/input28 [ 265.856314][ T8598] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.897227][ T8611] FAULT_INJECTION: forcing a failure. [ 266.897227][ T8611] name failslab, interval 1, probability 0, space 0, times 0 [ 266.913174][ T8611] CPU: 0 UID: 0 PID: 8611 Comm: syz.2.460 Tainted: G U syzkaller #0 PREEMPT(full) [ 266.913217][ T8611] Tainted: [U]=USER [ 266.913226][ T8611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 266.913241][ T8611] Call Trace: [ 266.913250][ T8611] [ 266.913260][ T8611] dump_stack_lvl+0x16c/0x1f0 [ 266.913308][ T8611] should_fail_ex+0x512/0x640 [ 266.913341][ T8611] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 266.913381][ T8611] should_failslab+0xc2/0x120 [ 266.913414][ T8611] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 266.913449][ T8611] ? kvasprintf_const+0x66/0x1a0 [ 266.913480][ T8611] kvasprintf+0xbc/0x160 [ 266.913501][ T8611] ? __pfx_kvasprintf+0x10/0x10 [ 266.913525][ T8611] ? find_held_lock+0x2b/0x80 [ 266.913550][ T8611] ? rcu_read_unlock+0x17/0x60 [ 266.913585][ T8611] kvasprintf_const+0x66/0x1a0 [ 266.913610][ T8611] kobject_set_name_vargs+0x5a/0x140 [ 266.913650][ T8611] dev_set_name+0xc7/0x100 [ 266.913676][ T8611] ? __pfx_dev_set_name+0x10/0x10 [ 266.913700][ T8611] ? rcu_is_watching+0x12/0xc0 [ 266.913728][ T8611] ? rcu_is_watching+0x12/0xc0 [ 266.913754][ T8611] ? trace_kmalloc+0x2b/0xd0 [ 266.913786][ T8611] ? __kmalloc_noprof.cold+0x5c/0x61 [ 266.913830][ T8611] wiphy_new_nm+0x811/0x2190 [ 266.913864][ T8611] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 266.913900][ T8611] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 266.913935][ T8611] ieee80211_alloc_hw_nm+0x1b7a/0x2260 [ 266.913968][ T8611] ? __local_bh_enable_ip+0xa4/0x120 [ 266.914002][ T8611] mac80211_hwsim_new_radio+0x1d4/0x54d0 [ 266.914045][ T8611] ? __asan_memset+0x23/0x50 [ 266.914070][ T8611] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 266.914105][ T8611] hwsim_new_radio_nl+0xb51/0x12c0 [ 266.914132][ T8611] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 266.914166][ T8611] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 266.914205][ T8611] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 266.914253][ T8611] genl_family_rcv_msg_doit+0x209/0x2f0 [ 266.914308][ T8611] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 266.914360][ T8611] ? bpf_lsm_capable+0x9/0x10 [ 266.914384][ T8611] ? security_capable+0x7e/0x260 [ 266.914412][ T8611] ? ns_capable+0xd7/0x110 [ 266.914443][ T8611] genl_rcv_msg+0x55c/0x800 [ 266.914471][ T8611] ? __pfx_genl_rcv_msg+0x10/0x10 [ 266.914510][ T8611] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 266.914548][ T8611] netlink_rcv_skb+0x158/0x420 [ 266.914581][ T8611] ? __pfx_genl_rcv_msg+0x10/0x10 [ 266.914619][ T8611] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 266.914669][ T8611] ? netlink_deliver_tap+0x1ae/0xd30 [ 266.914707][ T8611] genl_rcv+0x28/0x40 [ 266.914741][ T8611] netlink_unicast+0x5a7/0x870 [ 266.914780][ T8611] ? __pfx_netlink_unicast+0x10/0x10 [ 266.914815][ T8611] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 266.914846][ T8611] ? __lock_acquire+0xb97/0x1ce0 [ 266.914887][ T8611] netlink_sendmsg+0x8d1/0xdd0 [ 266.914927][ T8611] ? __pfx_netlink_sendmsg+0x10/0x10 [ 266.914965][ T8611] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 266.914999][ T8611] ____sys_sendmsg+0xa98/0xc70 [ 266.915025][ T8611] ? copy_msghdr_from_user+0x10a/0x160 [ 266.915057][ T8611] ? __pfx_____sys_sendmsg+0x10/0x10 [ 266.915091][ T8611] ? __pfx_futex_wake_mark+0x10/0x10 [ 266.915133][ T8611] ___sys_sendmsg+0x134/0x1d0 [ 266.915168][ T8611] ? __pfx____sys_sendmsg+0x10/0x10 [ 266.915248][ T8611] __sys_sendmsg+0x16d/0x220 [ 266.915303][ T8611] ? __pfx___sys_sendmsg+0x10/0x10 [ 266.915337][ T8611] ? __x64_sys_futex+0x1e0/0x4c0 [ 266.915392][ T8611] do_syscall_64+0xcd/0x490 [ 266.915429][ T8611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.915455][ T8611] RIP: 0033:0x7fd6a578ebe9 [ 266.915477][ T8611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.915503][ T8611] RSP: 002b:00007fd6a6661038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 266.915527][ T8611] RAX: ffffffffffffffda RBX: 00007fd6a59c5fa0 RCX: 00007fd6a578ebe9 [ 266.915545][ T8611] RDX: 0000000004048000 RSI: 0000200000004240 RDI: 000000000000000a [ 266.915561][ T8611] RBP: 00007fd6a5811e19 R08: 0000000000000000 R09: 0000000000000000 [ 266.915576][ T8611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 266.915591][ T8611] R13: 00007fd6a59c6038 R14: 00007fd6a59c5fa0 R15: 00007ffd98283f28 [ 266.915627][ T8611] [ 267.961974][ T7772] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 267.974332][ T7772] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 267.983494][ T7772] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 267.993030][ T7772] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 268.002955][ T7772] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 269.733402][ T8627] chnl_net:caif_netlink_parms(): no params data found [ 270.089239][ T6664] Bluetooth: hci1: command tx timeout [ 270.111338][ T8627] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.125044][ T8627] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.178270][ T8627] bridge_slave_0: entered allmulticast mode [ 270.228352][ T8627] bridge_slave_0: entered promiscuous mode [ 270.390180][ T8658] device-mapper: ioctl: Invalid ioctl structure: name , dev d76200010006 [ 270.393823][ T8627] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.428822][ T8627] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.436318][ T8627] bridge_slave_1: entered allmulticast mode [ 270.443887][ T8627] bridge_slave_1: entered promiscuous mode [ 270.704557][ T8627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.776170][ T8627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.064021][ T8627] team0: Port device team_slave_0 added [ 271.115974][ T8627] team0: Port device team_slave_1 added [ 271.416814][ T8664] zswap: compressor not available [ 271.426486][ T8670] Setting dangerous option i915.mitigations - tainting kernel [ 271.493722][ T8627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.501028][ T8627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.258813][ T6664] Bluetooth: hci1: command tx timeout [ 273.333351][ T8627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.349411][ T7772] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 273.361006][ T7772] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 273.369302][ T7772] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 273.378431][ T7772] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 273.387772][ T7772] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 273.549827][ T8627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.580241][ T8627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.655424][ T8627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.893156][ T8627] hsr_slave_0: entered promiscuous mode [ 273.909996][ T8627] hsr_slave_1: entered promiscuous mode [ 273.916431][ T8627] debugfs: 'hsr0' already exists in 'hsr' [ 273.922261][ T8627] Cannot create hsr debugfs directory [ 274.329753][ T7772] Bluetooth: hci1: command tx timeout [ 274.602491][ T8672] chnl_net:caif_netlink_parms(): no params data found [ 274.776799][ T8627] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.974425][ T8627] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.093191][ T8689] random: crng reseeded on system resumption [ 275.118286][ T8691] ptrace attach of "./syz-executor exec"[8692] was attempted by "./syz-executor exec"[8691] [ 275.245227][ T8627] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.388934][ T8627] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.450478][ T7772] Bluetooth: hci2: command tx timeout [ 275.627454][ T8672] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.658352][ T8672] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.688881][ T8672] bridge_slave_0: entered allmulticast mode [ 275.726957][ T8672] bridge_slave_0: entered promiscuous mode [ 275.760181][ T8672] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.771606][ T8672] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.780039][ T8672] bridge_slave_1: entered allmulticast mode [ 275.787629][ T8672] bridge_slave_1: entered promiscuous mode [ 275.985844][ T8672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.159019][ T8672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.295217][ T8627] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 276.355704][ T8627] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 276.431657][ T7772] Bluetooth: hci1: command tx timeout [ 276.563847][ T8627] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 276.595539][ T8627] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 276.645887][ T8672] team0: Port device team_slave_0 added [ 276.675240][ T8672] team0: Port device team_slave_1 added [ 276.799205][ T8672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.809078][ T8672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.866442][ T8672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.896415][ T8672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.903558][ T8672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.931091][ T8672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.076895][ T8672] hsr_slave_0: entered promiscuous mode [ 277.086149][ T8672] hsr_slave_1: entered promiscuous mode [ 277.093462][ T8672] debugfs: 'hsr0' already exists in 'hsr' [ 277.099793][ T8672] Cannot create hsr debugfs directory [ 277.531440][ T7772] Bluetooth: hci2: command tx timeout [ 277.904246][ T8627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.116049][ T8672] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.190941][ T8627] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.315913][ T8672] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.338994][ T6661] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.346240][ T6661] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.450213][ T8672] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.490956][ T8578] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.498190][ T8578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.627147][ T8672] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.785383][ T8627] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 278.795902][ T8627] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 279.329735][ T8672] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 279.374978][ T8672] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 279.392493][ T8672] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 279.425032][ T8672] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 279.612877][ T7772] Bluetooth: hci2: command tx timeout [ 279.960323][ T8672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.016216][ T8627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.071914][ T8765] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(6) [ 280.079972][ T8672] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.115923][ T6975] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.123253][ T6975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.157043][ T8578] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.164269][ T8578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.393607][ T8627] veth0_vlan: entered promiscuous mode [ 280.474621][ T8627] veth1_vlan: entered promiscuous mode [ 280.524202][ T8627] veth0_macvtap: entered promiscuous mode [ 280.535140][ T8627] veth1_macvtap: entered promiscuous mode [ 280.601797][ T8627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.657167][ T8627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.759307][ T6669] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.790655][ T6669] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.874873][ T6669] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.897346][ T6669] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.933869][ T8776] ptrace attach of "./syz-executor exec"[8780] was attempted by "./syz-executor exec"[8776] [ 280.997332][ T8672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.192636][ T8578] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.229319][ T8578] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.421818][ T8672] veth0_vlan: entered promiscuous mode [ 281.437207][ T8785] netlink: 504 bytes leftover after parsing attributes in process `syz.1.484'. [ 281.550654][ T6668] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.575888][ T6668] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.597036][ T8672] veth1_vlan: entered promiscuous mode [ 281.693754][ T7772] Bluetooth: hci2: command tx timeout [ 281.899086][ T8672] veth0_macvtap: entered promiscuous mode [ 281.917125][ T8672] veth1_macvtap: entered promiscuous mode [ 282.292654][ T8672] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.622979][ T8672] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.682247][ T6668] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.812119][ T6668] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.834130][ T6668] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.954426][ T6668] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.280040][ T6669] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.304356][ T6669] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.430026][ T6975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.438892][ T6975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.952800][ T8821] input: f¬ as /devices/virtual/input/input29 [ 284.083266][ T8822] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 284.858631][ T8831] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(6) [ 287.885466][ T8874] FAULT_INJECTION: forcing a failure. [ 287.885466][ T8874] name failslab, interval 1, probability 0, space 0, times 0 [ 287.909424][ T8874] CPU: 1 UID: 0 PID: 8874 Comm: syz.0.498 Tainted: G U syzkaller #0 PREEMPT(full) [ 287.909458][ T8874] Tainted: [U]=USER [ 287.909463][ T8874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 287.909473][ T8874] Call Trace: [ 287.909479][ T8874] [ 287.909485][ T8874] dump_stack_lvl+0x16c/0x1f0 [ 287.909510][ T8874] should_fail_ex+0x512/0x640 [ 287.909532][ T8874] ? fs_reclaim_acquire+0xae/0x150 [ 287.909556][ T8874] ? tomoyo_encode2+0x100/0x3e0 [ 287.909575][ T8874] should_failslab+0xc2/0x120 [ 287.909595][ T8874] __kmalloc_noprof+0xd2/0x510 [ 287.909616][ T8874] tomoyo_encode2+0x100/0x3e0 [ 287.909638][ T8874] tomoyo_encode+0x29/0x50 [ 287.909657][ T8874] tomoyo_realpath_from_path+0x18f/0x6e0 [ 287.909691][ T8874] tomoyo_check_open_permission+0x2ab/0x3c0 [ 287.909710][ T8874] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 287.909749][ T8874] ? find_held_lock+0x2b/0x80 [ 287.909770][ T8874] tomoyo_file_open+0x6b/0x90 [ 287.909784][ T8874] security_file_open+0x84/0x1e0 [ 287.909804][ T8874] do_dentry_open+0x596/0x1530 [ 287.909828][ T8874] vfs_open+0x82/0x3f0 [ 287.909850][ T8874] path_openat+0x1de4/0x2cb0 [ 287.909873][ T8874] ? __pfx_path_openat+0x10/0x10 [ 287.909895][ T8874] do_filp_open+0x20b/0x470 [ 287.909912][ T8874] ? __pfx_do_filp_open+0x10/0x10 [ 287.909944][ T8874] ? alloc_fd+0x471/0x7d0 [ 287.909965][ T8874] do_sys_openat2+0x11b/0x1d0 [ 287.909986][ T8874] ? __pfx_do_sys_openat2+0x10/0x10 [ 287.910014][ T8874] __x64_sys_openat+0x174/0x210 [ 287.910039][ T8874] ? __pfx___x64_sys_openat+0x10/0x10 [ 287.910068][ T8874] do_syscall_64+0xcd/0x490 [ 287.910089][ T8874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.910104][ T8874] RIP: 0033:0x7fe5b8b8ebe9 [ 287.910118][ T8874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.910133][ T8874] RSP: 002b:00007fe5b9935038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 287.910147][ T8874] RAX: ffffffffffffffda RBX: 00007fe5b8dc6090 RCX: 00007fe5b8b8ebe9 [ 287.910156][ T8874] RDX: 0000000000181841 RSI: 0000200000000540 RDI: ffffffffffffff9c [ 287.910166][ T8874] RBP: 00007fe5b8c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 287.910174][ T8874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 287.910183][ T8874] R13: 00007fe5b8dc6128 R14: 00007fe5b8dc6090 R15: 00007ffc269b59c8 [ 287.910202][ T8874] [ 287.911498][ T8874] ERROR: Out of memory at tomoyo_realpath_from_path. [ 288.452218][ T8878] FAULT_INJECTION: forcing a failure. [ 288.452218][ T8878] name failslab, interval 1, probability 0, space 0, times 0 [ 288.655670][ T8878] CPU: 0 UID: 0 PID: 8878 Comm: syz.3.499 Tainted: G U syzkaller #0 PREEMPT(full) [ 288.655735][ T8878] Tainted: [U]=USER [ 288.655744][ T8878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 288.655761][ T8878] Call Trace: [ 288.655770][ T8878] [ 288.655781][ T8878] dump_stack_lvl+0x16c/0x1f0 [ 288.655823][ T8878] should_fail_ex+0x512/0x640 [ 288.655860][ T8878] ? fs_reclaim_acquire+0xae/0x150 [ 288.655900][ T8878] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 288.655937][ T8878] should_failslab+0xc2/0x120 [ 288.655971][ T8878] __kmalloc_noprof+0xd2/0x510 [ 288.656011][ T8878] tomoyo_realpath_from_path+0xc2/0x6e0 [ 288.656058][ T8878] tomoyo_check_open_permission+0x2ab/0x3c0 [ 288.656092][ T8878] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 288.656167][ T8878] ? find_held_lock+0x2b/0x80 [ 288.656203][ T8878] tomoyo_file_open+0x6b/0x90 [ 288.656231][ T8878] security_file_open+0x84/0x1e0 [ 288.656268][ T8878] do_dentry_open+0x596/0x1530 [ 288.656311][ T8878] vfs_open+0x82/0x3f0 [ 288.656354][ T8878] path_openat+0x1de4/0x2cb0 [ 288.656398][ T8878] ? __pfx_path_openat+0x10/0x10 [ 288.656439][ T8878] do_filp_open+0x20b/0x470 [ 288.656471][ T8878] ? __pfx_do_filp_open+0x10/0x10 [ 288.656528][ T8878] ? alloc_fd+0x471/0x7d0 [ 288.656566][ T8878] do_sys_openat2+0x11b/0x1d0 [ 288.656615][ T8878] ? __pfx_do_sys_openat2+0x10/0x10 [ 288.656669][ T8878] __x64_sys_openat+0x174/0x210 [ 288.656710][ T8878] ? __pfx___x64_sys_openat+0x10/0x10 [ 288.656765][ T8878] do_syscall_64+0xcd/0x490 [ 288.656805][ T8878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.656827][ T8878] RIP: 0033:0x7fe5e978ebe9 [ 288.656858][ T8878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.656883][ T8878] RSP: 002b:00007fe5ea543038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 288.656908][ T8878] RAX: ffffffffffffffda RBX: 00007fe5e99c6090 RCX: 00007fe5e978ebe9 [ 288.656925][ T8878] RDX: 0000000000181841 RSI: 0000200000000540 RDI: ffffffffffffff9c [ 288.656942][ T8878] RBP: 00007fe5e9811e19 R08: 0000000000000000 R09: 0000000000000000 [ 288.656958][ T8878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 288.656972][ T8878] R13: 00007fe5e99c6128 R14: 00007fe5e99c6090 R15: 00007ffc3e896858 [ 288.657008][ T8878] [ 288.945299][ T8879] zswap: compressor not available [ 288.953679][ T8882] Setting dangerous option i915.mitigations - tainting kernel [ 289.148281][ T8878] ERROR: Out of memory at tomoyo_realpath_from_path. [ 289.832142][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 289.838791][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 289.845307][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 289.851953][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 289.859007][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 289.865532][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 289.872052][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 289.878694][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 289.885261][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 289.891839][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 289.898448][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 289.905016][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 289.911735][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 289.918288][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 289.924770][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 289.931289][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 289.937793][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 289.944252][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 289.950763][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 289.957320][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 289.963831][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 289.970320][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 289.976893][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 289.983535][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 289.990147][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 289.996746][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 290.003304][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 290.009944][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 290.016483][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 290.023009][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 290.029544][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 290.036046][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 290.042657][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 290.049228][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 290.055741][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 290.062289][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 290.068874][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 290.075398][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 290.081940][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 290.088439][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 290.094930][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 290.101445][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 290.108075][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 290.114551][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 290.121048][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 290.127582][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 290.134089][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 290.140607][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 290.147478][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 290.154073][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 290.160614][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 290.167109][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 290.173615][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 290.180153][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 290.186771][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 290.193333][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 290.199869][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 290.206373][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 290.212901][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 290.219454][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 290.226111][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 290.232739][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 290.239266][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 290.245780][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 291.503750][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805d943c00: rx timeout, send abort [ 291.939413][ T8907] ptrace attach of "./syz-executor exec"[8910] was attempted by "./syz-executor exec"[8907] [ 292.012473][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805d943c00: abort rx timeout. Force session deactivation [ 292.248954][ T8913] ptrace attach of ""[8916] was attempted by "./syz-executor exec"[8913] [ 295.166858][ T6668] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.494215][ T6668] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.781245][ T6668] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.836756][ T8970] Invalid ELF header magic: != ELF [ 296.006830][ T6668] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.138734][ T6664] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 296.150072][ T6664] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 296.162094][ T6664] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 296.174300][ T6664] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 296.185566][ T6664] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 296.503702][ T8978] netlink: 330 bytes leftover after parsing attributes in process `syz.2.521'. [ 296.707610][ T6668] bridge_slave_1: left allmulticast mode [ 296.713990][ T6668] bridge_slave_1: left promiscuous mode [ 296.721662][ T6668] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.324000][ T6668] bridge_slave_0: left allmulticast mode [ 297.331455][ T6668] bridge_slave_0: left promiscuous mode [ 297.351742][ T6668] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.906899][ T6668] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.918505][ T6668] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.930007][ T6668] bond0 (unregistering): Released all slaves [ 298.262153][ T6664] Bluetooth: hci1: command tx timeout [ 298.386435][ T8974] chnl_net:caif_netlink_parms(): no params data found [ 298.991255][ T6668] hsr_slave_0: left promiscuous mode [ 299.030521][ T6668] hsr_slave_1: left promiscuous mode [ 299.067178][ T6668] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.103082][ T6668] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.164247][ T6668] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.243444][ T6668] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.425700][ T6668] veth1_macvtap: left promiscuous mode [ 299.431513][ T6668] veth0_macvtap: left promiscuous mode [ 299.457798][ T6668] veth1_vlan: left promiscuous mode [ 299.482902][ T6668] veth0_vlan: left promiscuous mode [ 300.347956][ T6664] Bluetooth: hci1: command tx timeout [ 300.606111][ T9027] snd_aloop snd_aloop.0: control 61678:131081:3:yªƒ>oÆ[k<÷:1 is already present [ 300.757190][ T6668] team0 (unregistering): Port device team_slave_1 removed [ 300.839116][ T6668] team0 (unregistering): Port device team_slave_0 removed [ 301.605650][ T8974] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.633043][ T8974] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.662883][ T8974] bridge_slave_0: entered allmulticast mode [ 301.682056][ T8974] bridge_slave_0: entered promiscuous mode [ 301.784564][ T8974] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.801795][ T8974] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.809617][ T8974] bridge_slave_1: entered allmulticast mode [ 301.822393][ T8974] bridge_slave_1: entered promiscuous mode [ 302.139415][ T8974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.196551][ T8974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.365398][ T8974] team0: Port device team_slave_0 added [ 302.397486][ T8974] team0: Port device team_slave_1 added [ 302.424144][ T6664] Bluetooth: hci1: command tx timeout [ 302.582575][ T8974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.599472][ T8974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.637228][ T7772] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 302.648364][ T7772] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 302.656564][ T7772] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 302.665628][ T7772] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 302.674869][ T7772] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 302.745116][ T8974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.855908][ T8974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.887539][ T8974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.957371][ T8974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.465902][ T8974] hsr_slave_0: entered promiscuous mode [ 303.477595][ T8974] hsr_slave_1: entered promiscuous mode [ 303.493610][ T8974] debugfs: 'hsr0' already exists in 'hsr' [ 303.576308][ T8974] Cannot create hsr debugfs directory [ 304.327794][ T9051] chnl_net:caif_netlink_parms(): no params data found [ 304.473276][ T9072] device-mapper: ioctl: Invalid ioctl structure: name , dev d76200010006 [ 304.504974][ T6664] Bluetooth: hci1: command tx timeout [ 304.745112][ T6664] Bluetooth: hci3: command tx timeout [ 305.644041][ T9051] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.655421][ T9051] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.663473][ T9051] bridge_slave_0: entered allmulticast mode [ 305.672387][ T9051] bridge_slave_0: entered promiscuous mode [ 305.711821][ T9051] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.758231][ T9051] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.771697][ T9051] bridge_slave_1: entered allmulticast mode [ 305.790286][ T9051] bridge_slave_1: entered promiscuous mode [ 306.010136][ T9051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.055204][ T9051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.754828][ T9051] team0: Port device team_slave_0 added [ 306.805624][ T9051] team0: Port device team_slave_1 added [ 306.826526][ T6664] Bluetooth: hci3: command tx timeout [ 307.232511][ T9051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.257600][ T9051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.283529][ C0] vkms_vblank_simulate: vblank timer overrun [ 307.323637][ T9051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.357778][ T9051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.364762][ T9051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.507762][ T9051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.571279][ T8974] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 307.614883][ T8974] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 307.697466][ T8974] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 307.776490][ T8974] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 307.860341][ T9051] hsr_slave_0: entered promiscuous mode [ 307.877373][ T9051] hsr_slave_1: entered promiscuous mode [ 307.896982][ T9051] debugfs: 'hsr0' already exists in 'hsr' [ 307.904856][ T9051] Cannot create hsr debugfs directory [ 308.032355][ T6668] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.201096][ T6668] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.330090][ T6668] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.345362][ T7772] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 308.357676][ T7772] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 308.367101][ T7772] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 308.378996][ T7772] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 308.388626][ T7772] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 308.495325][ T6668] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.907214][ T7772] Bluetooth: hci3: command tx timeout [ 308.988386][ T9051] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.219492][ T9051] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.266540][ T8974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.380094][ T9051] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.411073][ T6668] bridge_slave_1: left allmulticast mode [ 309.416801][ T6668] bridge_slave_1: left promiscuous mode [ 309.424058][ T6668] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.446692][ T6668] bridge_slave_0: left allmulticast mode [ 309.460423][ T6668] bridge_slave_0: left promiscuous mode [ 309.466295][ T6668] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.502028][ T9179] ptrace attach of "./syz-executor exec"[9180] was attempted by "./syz-executor exec"[9179] [ 310.103207][ T6668] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 310.134364][ T6668] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 310.156772][ T6668] bond0 (unregistering): Released all slaves [ 310.297189][ T9051] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.428815][ T7772] Bluetooth: hci2: command tx timeout [ 310.535125][ T8974] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.611700][ T8578] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.618935][ T8578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.688520][ T6669] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.695679][ T6669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.751637][ T9157] chnl_net:caif_netlink_parms(): no params data found [ 310.988527][ T7772] Bluetooth: hci3: command tx timeout [ 311.473578][ T6668] hsr_slave_0: left promiscuous mode [ 311.515388][ T6668] hsr_slave_1: left promiscuous mode [ 311.535178][ T6668] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.562906][ T6668] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.577714][ T6668] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.585451][ T6668] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.617937][ T6668] veth1_macvtap: left promiscuous mode [ 311.624227][ T6668] veth0_macvtap: left promiscuous mode [ 311.633703][ T6668] veth1_vlan: left promiscuous mode [ 311.642326][ T6668] veth0_vlan: left promiscuous mode [ 312.232509][ T6668] team0 (unregistering): Port device team_slave_1 removed [ 312.276042][ T6668] team0 (unregistering): Port device team_slave_0 removed [ 312.509020][ T7772] Bluetooth: hci2: command tx timeout [ 312.705835][ T9051] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 312.725909][ T9051] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 312.749753][ T9157] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.757087][ T9157] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.764523][ T9157] bridge_slave_0: entered allmulticast mode [ 312.772535][ T9157] bridge_slave_0: entered promiscuous mode [ 312.797144][ T9051] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 312.807183][ T9051] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 312.819985][ T9157] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.828362][ T9157] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.837243][ T9157] bridge_slave_1: entered allmulticast mode [ 312.863779][ T9157] bridge_slave_1: entered promiscuous mode [ 312.930320][ T9157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.943879][ T9157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.996464][ T9157] team0: Port device team_slave_0 added [ 313.016533][ T9157] team0: Port device team_slave_1 added [ 313.078815][ T9157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.100377][ T9157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.156780][ T9157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.189578][ T9157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.206822][ T9157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.257779][ T9157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.529193][ T9157] hsr_slave_0: entered promiscuous mode [ 313.543088][ T9157] hsr_slave_1: entered promiscuous mode [ 313.566069][ T9157] debugfs: 'hsr0' already exists in 'hsr' [ 313.580795][ T9157] Cannot create hsr debugfs directory [ 313.828203][ T8974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.464725][ T9051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.593535][ T7772] Bluetooth: hci2: command tx timeout [ 314.837883][ T9051] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.857324][ T8974] veth0_vlan: entered promiscuous mode [ 314.908506][ T6669] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.915725][ T6669] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.989042][ T8974] veth1_vlan: entered promiscuous mode [ 315.007066][ T6669] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.014330][ T6669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.187428][ T8974] veth0_macvtap: entered promiscuous mode [ 315.216627][ T8974] veth1_macvtap: entered promiscuous mode [ 315.363992][ T8974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.373512][ T9157] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 315.392342][ T9157] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 315.404261][ T9157] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 315.436455][ T9157] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 315.462501][ T8974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.515242][ T6668] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.542755][ T6668] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.623342][ T6668] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.651739][ T6668] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.725472][ T9051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.064777][ T6669] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.092254][ T6669] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.168022][ T9051] veth0_vlan: entered promiscuous mode [ 316.299175][ T6669] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.318039][ T6669] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.399284][ T9051] veth1_vlan: entered promiscuous mode [ 316.446306][ T9157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.671739][ T7772] Bluetooth: hci2: command tx timeout [ 316.702752][ T9157] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.809846][ T6668] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.817084][ T6668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.877525][ T6668] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.884769][ T6668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.964639][ T9051] veth0_macvtap: entered promiscuous mode [ 317.072512][ T9051] veth1_macvtap: entered promiscuous mode [ 317.200856][ T9051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.365501][ T9051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.467240][ T8578] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.505159][ T8578] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.617325][ T8578] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.644892][ T8578] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.936977][ T9157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.981771][ T6975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.989626][ T6975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.196403][ T6885] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.248808][ T6885] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.379578][ T9157] veth0_vlan: entered promiscuous mode [ 318.417391][ T9157] veth1_vlan: entered promiscuous mode [ 318.622305][ T9157] veth0_macvtap: entered promiscuous mode [ 318.648389][ T9157] veth1_macvtap: entered promiscuous mode [ 318.713400][ T9348] 0x000200000001-0xa29656a63616329 : "" [ 318.734231][ T9157] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.762557][ T9348] mtd: partition "" is out of reach -- disabled [ 318.786302][ T9157] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.828180][ T7918] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.853061][ T7918] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.861832][ T7918] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.889482][ T9348] ftl_cs: FTL header not found. [ 318.908459][ T7918] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.191493][ T6661] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.223083][ T6661] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.356149][ T6885] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.395304][ T6885] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.842783][ T9365] zswap: compressor not available [ 320.103007][ T9369] Setting dangerous option i915.mitigations - tainting kernel [ 320.604465][ C1] vcan0: j1939_xtp_rx_dpo: no connection found [ 320.614036][ T9380] input: f¬ as /devices/virtual/input/input31 [ 320.650397][ T9385] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 321.361128][ C1] vcan0: j1939_tp_rxtimer: 0xffff888024ea9800: rx timeout, send abort [ 321.869706][ C1] vcan0: j1939_tp_rxtimer: 0xffff888024ea9800: abort rx timeout. Force session deactivation [ 322.607274][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.614562][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.648310][ T9431] device-mapper: ioctl: Invalid ioctl structure: name , dev d76200010006 [ 327.676732][ T9503] FAULT_INJECTION: forcing a failure. [ 327.676732][ T9503] name failslab, interval 1, probability 0, space 0, times 0 [ 327.690710][ T9503] CPU: 0 UID: 0 PID: 9503 Comm: syz.0.565 Tainted: G U syzkaller #0 PREEMPT(full) [ 327.690752][ T9503] Tainted: [U]=USER [ 327.690761][ T9503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 327.690775][ T9503] Call Trace: [ 327.690785][ T9503] [ 327.690791][ T9503] dump_stack_lvl+0x16c/0x1f0 [ 327.690817][ T9503] should_fail_ex+0x512/0x640 [ 327.690838][ T9503] ? fs_reclaim_acquire+0xae/0x150 [ 327.690862][ T9503] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 327.690883][ T9503] should_failslab+0xc2/0x120 [ 327.690903][ T9503] __kmalloc_noprof+0xd2/0x510 [ 327.690924][ T9503] tomoyo_realpath_from_path+0xc2/0x6e0 [ 327.690950][ T9503] tomoyo_check_open_permission+0x2ab/0x3c0 [ 327.690968][ T9503] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 327.691005][ T9503] ? find_held_lock+0x2b/0x80 [ 327.691024][ T9503] tomoyo_file_open+0x6b/0x90 [ 327.691038][ T9503] security_file_open+0x84/0x1e0 [ 327.691058][ T9503] do_dentry_open+0x596/0x1530 [ 327.691081][ T9503] vfs_open+0x82/0x3f0 [ 327.691104][ T9503] path_openat+0x1de4/0x2cb0 [ 327.691127][ T9503] ? __pfx_path_openat+0x10/0x10 [ 327.691148][ T9503] do_filp_open+0x20b/0x470 [ 327.691165][ T9503] ? __pfx_do_filp_open+0x10/0x10 [ 327.691196][ T9503] ? alloc_fd+0x471/0x7d0 [ 327.691216][ T9503] do_sys_openat2+0x11b/0x1d0 [ 327.691237][ T9503] ? __pfx_do_sys_openat2+0x10/0x10 [ 327.691265][ T9503] __x64_sys_openat+0x174/0x210 [ 327.691286][ T9503] ? __pfx___x64_sys_openat+0x10/0x10 [ 327.691316][ T9503] do_syscall_64+0xcd/0x490 [ 327.691337][ T9503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.691351][ T9503] RIP: 0033:0x7fe5b8b8ebe9 [ 327.691364][ T9503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.691379][ T9503] RSP: 002b:00007fe5b9956038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 327.691393][ T9503] RAX: ffffffffffffffda RBX: 00007fe5b8dc5fa0 RCX: 00007fe5b8b8ebe9 [ 327.691403][ T9503] RDX: 0000000000181841 RSI: 0000200000000540 RDI: ffffffffffffff9c [ 327.691412][ T9503] RBP: 00007fe5b8c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 327.691421][ T9503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 327.691430][ T9503] R13: 00007fe5b8dc6038 R14: 00007fe5b8dc5fa0 R15: 00007ffc269b59c8 [ 327.691450][ T9503] [ 327.691468][ T9503] ERROR: Out of memory at tomoyo_realpath_from_path. [ 327.888786][ C0] vkms_vblank_simulate: vblank timer overrun [ 329.809597][ T9524] device-mapper: ioctl: Invalid ioctl structure: name , dev d76200010006 [ 331.056875][ T9548] input: f¬ as /devices/virtual/input/input32 [ 331.845054][ T9560] device-mapper: ioctl: Invalid ioctl structure: name , dev d76200010006 [ 332.463958][ T9562] zswap: compressor not available [ 332.546735][ T9569] Setting dangerous option i915.mitigations - tainting kernel [ 333.428250][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 334.008295][ T9574] device-mapper: ioctl: Invalid ioctl structure: name , dev d76200010006 [ 334.185230][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806b99cc00: rx timeout, send abort [ 334.693801][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806b99cc00: abort rx timeout. Force session deactivation [ 335.383832][ T9594] program syz.1.580 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 335.757416][ T9602] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 336.073291][ T9600] device-mapper: ioctl: Invalid ioctl structure: name , dev d76200010006 [ 337.001970][ T9612] input: f¬ as /devices/virtual/input/input33 [ 337.153150][ T9615] FAULT_INJECTION: forcing a failure. [ 337.153150][ T9615] name failslab, interval 1, probability 0, space 0, times 0 [ 337.211941][ T9615] CPU: 1 UID: 0 PID: 9615 Comm: syz.3.584 Tainted: G U syzkaller #0 PREEMPT(full) [ 337.211987][ T9615] Tainted: [U]=USER [ 337.211995][ T9615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 337.212011][ T9615] Call Trace: [ 337.212021][ T9615] [ 337.212031][ T9615] dump_stack_lvl+0x16c/0x1f0 [ 337.212071][ T9615] should_fail_ex+0x512/0x640 [ 337.212106][ T9615] ? fs_reclaim_acquire+0xae/0x150 [ 337.212146][ T9615] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 337.212191][ T9615] should_failslab+0xc2/0x120 [ 337.212225][ T9615] __kmalloc_noprof+0xd2/0x510 [ 337.212251][ T9615] tomoyo_realpath_from_path+0xc2/0x6e0 [ 337.212277][ T9615] tomoyo_check_open_permission+0x2ab/0x3c0 [ 337.212296][ T9615] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 337.212332][ T9615] ? find_held_lock+0x2b/0x80 [ 337.212351][ T9615] tomoyo_file_open+0x6b/0x90 [ 337.212366][ T9615] security_file_open+0x84/0x1e0 [ 337.212385][ T9615] do_dentry_open+0x596/0x1530 [ 337.212409][ T9615] vfs_open+0x82/0x3f0 [ 337.212431][ T9615] path_openat+0x1de4/0x2cb0 [ 337.212455][ T9615] ? __pfx_path_openat+0x10/0x10 [ 337.212477][ T9615] do_filp_open+0x20b/0x470 [ 337.212494][ T9615] ? __pfx_do_filp_open+0x10/0x10 [ 337.212524][ T9615] ? alloc_fd+0x471/0x7d0 [ 337.212545][ T9615] do_sys_openat2+0x11b/0x1d0 [ 337.212566][ T9615] ? __pfx_do_sys_openat2+0x10/0x10 [ 337.212594][ T9615] __x64_sys_openat+0x174/0x210 [ 337.212615][ T9615] ? __pfx___x64_sys_openat+0x10/0x10 [ 337.212644][ T9615] do_syscall_64+0xcd/0x490 [ 337.212665][ T9615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.212680][ T9615] RIP: 0033:0x7fc62058ebe9 [ 337.212693][ T9615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.212708][ T9615] RSP: 002b:00007fc6213d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 337.212722][ T9615] RAX: ffffffffffffffda RBX: 00007fc6207c5fa0 RCX: 00007fc62058ebe9 [ 337.212732][ T9615] RDX: 0000000000181841 RSI: 0000200000000540 RDI: ffffffffffffff9c [ 337.212741][ T9615] RBP: 00007fc620611e19 R08: 0000000000000000 R09: 0000000000000000 [ 337.212750][ T9615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 337.212759][ T9615] R13: 00007fc6207c6038 R14: 00007fc6207c5fa0 R15: 00007ffead1dae38 [ 337.212779][ T9615] [ 337.216823][ T9615] ERROR: Out of memory at tomoyo_realpath_from_path. [ 339.705522][ T9653] input: f¬ as /devices/virtual/input/input34 [ 341.148407][ T7918] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.317821][ T7918] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.391288][ T7918] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.513660][ T9675] FAULT_INJECTION: forcing a failure. [ 341.513660][ T9675] name fail_futex, interval 1, probability 0, space 0, times 0 [ 341.531351][ T9674] FAULT_INJECTION: forcing a failure. [ 341.531351][ T9674] name fail_futex, interval 1, probability 0, space 0, times 0 [ 341.573774][ T9674] CPU: 0 UID: 0 PID: 9674 Comm: syz.2.595 Tainted: G U syzkaller #0 PREEMPT(full) [ 341.573816][ T9674] Tainted: [U]=USER [ 341.573824][ T9674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 341.573837][ T9674] Call Trace: [ 341.573846][ T9674] [ 341.573856][ T9674] dump_stack_lvl+0x16c/0x1f0 [ 341.573905][ T9674] should_fail_ex+0x512/0x640 [ 341.573945][ T9674] get_futex_key+0x1d0/0x1560 [ 341.573979][ T9674] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 341.574017][ T9674] ? __pfx_get_futex_key+0x10/0x10 [ 341.574049][ T9674] ? blk_finish_plug+0x53/0xa0 [ 341.574074][ T9674] ? madvise_do_behavior+0x1f4/0x530 [ 341.574109][ T9674] futex_wake+0xea/0x530 [ 341.574141][ T9674] ? __pfx___up_read+0x10/0x10 [ 341.574174][ T9674] ? __pfx_futex_wake+0x10/0x10 [ 341.574205][ T9674] ? madvise_unlock+0x16d/0x220 [ 341.574240][ T9674] ? madvise_unlock+0x7c/0x220 [ 341.574275][ T9674] do_futex+0x1e3/0x350 [ 341.574306][ T9674] ? __pfx_do_futex+0x10/0x10 [ 341.574345][ T9674] __x64_sys_futex+0x1e0/0x4c0 [ 341.574378][ T9674] ? __pfx___x64_sys_futex+0x10/0x10 [ 341.574409][ T9674] ? syscall_user_dispatch+0x78/0x140 [ 341.574457][ T9674] do_syscall_64+0xcd/0x490 [ 341.574493][ T9674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.574517][ T9674] RIP: 0033:0x7f2cb238ebe9 [ 341.574536][ T9674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.574562][ T9674] RSP: 002b:00007f2cb31c10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 341.574587][ T9674] RAX: ffffffffffffffda RBX: 00007f2cb25c6098 RCX: 00007f2cb238ebe9 [ 341.574606][ T9674] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2cb25c609c [ 341.574622][ T9674] RBP: 00007f2cb25c6090 R08: 00007f2cb31e3000 R09: 0000000000000000 [ 341.574639][ T9674] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 341.574654][ T9674] R13: 00007f2cb25c6128 R14: 00007fff6160f120 R15: 00007fff6160f208 [ 341.574689][ T9674] [ 341.603361][ T9675] CPU: 1 UID: 0 PID: 9675 Comm: syz.1.594 Tainted: G U syzkaller #0 PREEMPT(full) [ 341.603404][ T9675] Tainted: [U]=USER [ 341.603412][ T9675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 341.603428][ T9675] Call Trace: [ 341.603437][ T9675] [ 341.603446][ T9675] dump_stack_lvl+0x16c/0x1f0 [ 341.603486][ T9675] should_fail_ex+0x512/0x640 [ 341.603524][ T9675] get_futex_key+0x1d0/0x1560 [ 341.603561][ T9675] ? __pfx_get_futex_key+0x10/0x10 [ 341.603592][ T9675] ? __pick_eevdf+0x30a/0x670 [ 341.603630][ T9675] futex_wait_setup+0x9d/0x550 [ 341.603691][ T9675] __futex_wait+0x194/0x2f0 [ 341.603731][ T9675] ? __pfx___futex_wait+0x10/0x10 [ 341.603767][ T9675] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 341.603799][ T9675] ? lockdep_hardirqs_on+0x7c/0x110 [ 341.603835][ T9675] ? __pfx_futex_wake_mark+0x10/0x10 [ 341.603876][ T9675] ? futex_private_hash_put+0x176/0x300 [ 341.603910][ T9675] ? futex_private_hash_put+0x18a/0x300 [ 341.603941][ T9675] futex_wait+0xe8/0x380 [ 341.603977][ T9675] ? __pfx_futex_wait+0x10/0x10 [ 341.604023][ T9675] ? madvise_unlock+0x7c/0x220 [ 341.604062][ T9675] do_futex+0x229/0x350 [ 341.604095][ T9675] ? __pfx_do_futex+0x10/0x10 [ 341.604124][ T9675] ? map_id_range_up+0x2ce/0x3b0 [ 341.604168][ T9675] __x64_sys_futex+0x1e0/0x4c0 [ 341.604205][ T9675] ? __pfx___x64_sys_futex+0x10/0x10 [ 341.604238][ T9675] ? syscall_user_dispatch+0x78/0x140 [ 341.604285][ T9675] do_syscall_64+0xcd/0x490 [ 341.604321][ T9675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.604347][ T9675] RIP: 0033:0x7f760bd8ebe9 [ 341.604367][ T9675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.604398][ T9675] RSP: 002b:00007f760cbff0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 341.604422][ T9675] RAX: ffffffffffffffda RBX: 00007f760bfc6098 RCX: 00007f760bd8ebe9 [ 341.604440][ T9675] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f760bfc6098 [ 341.604456][ T9675] RBP: 00007f760bfc6090 R08: 0000000000000000 R09: 0000000000000000 [ 341.604473][ T9675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 341.604488][ T9675] R13: 00007f760bfc6128 R14: 00007fff5aceccc0 R15: 00007fff5acecda8 [ 341.604523][ T9675] [ 342.207576][ T6664] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 342.217320][ T6664] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 342.227414][ T6664] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 342.274800][ T7918] bridge_slave_1: left allmulticast mode [ 342.280490][ T7918] bridge_slave_1: left promiscuous mode [ 342.287186][ T7918] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.299522][ T6664] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 342.307730][ T6664] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 342.362934][ T7918] bridge_slave_0: left allmulticast mode [ 342.369100][ T7918] bridge_slave_0: left promiscuous mode [ 342.375038][ T7918] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.669025][ T9686] input: f¬ as /devices/virtual/input/input35 [ 343.448257][ T7918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 343.499574][ T7918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.516271][ T7918] bond0 (unregistering): Released all slaves [ 344.444938][ T6664] Bluetooth: hci0: command tx timeout [ 345.194149][ T9676] chnl_net:caif_netlink_parms(): no params data found [ 345.653251][ T9734] netlink: 334 bytes leftover after parsing attributes in process `syz.1.603'. [ 345.996239][ T9676] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.019070][ T9676] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.045757][ T9676] bridge_slave_0: entered allmulticast mode [ 346.094193][ T9676] bridge_slave_0: entered promiscuous mode [ 346.221853][ T9749] zswap: compressor not available [ 347.415513][ T6664] Bluetooth: hci0: command tx timeout [ 347.475691][ T9676] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.493419][ T9754] Setting dangerous option i915.mitigations - tainting kernel [ 347.496052][ T9676] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.797943][ T9676] bridge_slave_1: entered allmulticast mode [ 347.809094][ T9676] bridge_slave_1: entered promiscuous mode [ 348.192707][ T9676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.285053][ T9676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.472025][ T9676] team0: Port device team_slave_0 added [ 348.499248][ T9676] team0: Port device team_slave_1 added [ 348.692974][ T9676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.715006][ T9676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.776945][ T9676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.858200][ T9676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.865191][ T9676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.911500][ T9676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.042179][ C0] vcan0: j1939_tp_rxtimer: 0xffff888053a4f400: rx timeout, send abort [ 349.240719][ T9790] zswap: compressor not available [ 349.255504][ T9795] Setting dangerous option i915.mitigations - tainting kernel [ 349.488822][ T6664] Bluetooth: hci0: command tx timeout [ 349.550740][ C0] vcan0: j1939_tp_rxtimer: 0xffff888053a4f400: abort rx timeout. Force session deactivation [ 349.957263][ T9676] hsr_slave_0: entered promiscuous mode [ 349.990537][ T9676] hsr_slave_1: entered promiscuous mode [ 350.070230][ T9676] debugfs: 'hsr0' already exists in 'hsr' [ 350.076558][ T9676] Cannot create hsr debugfs directory [ 350.260896][ T7918] hsr_slave_0: left promiscuous mode [ 350.281004][ T7918] hsr_slave_1: left promiscuous mode [ 350.299121][ T7918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.322627][ T7918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.344715][ T7918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.386021][ T7918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.424733][ T7918] veth1_macvtap: left promiscuous mode [ 350.435932][ T7918] veth0_macvtap: left promiscuous mode [ 350.442264][ T7918] veth1_vlan: left promiscuous mode [ 350.448682][ T7918] veth0_vlan: left promiscuous mode [ 350.906474][ T7918] team0 (unregistering): Port device team_slave_1 removed [ 350.952215][ T7918] team0 (unregistering): Port device team_slave_0 removed [ 351.437200][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803628c400: rx timeout, send abort [ 351.568791][ T6664] Bluetooth: hci0: command tx timeout [ 351.945706][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803628c400: abort rx timeout. Force session deactivation [ 353.466234][ T7918] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.817457][ T7918] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.221261][ T7918] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.358127][ T9676] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 354.538663][ T7918] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.619569][ T7772] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 354.640875][ T7772] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 354.649005][ T7772] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 354.662408][ T7772] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 354.673206][ T7772] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 354.854222][ T9676] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 354.896441][ T9676] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 354.946276][ T9676] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 355.153768][ T7772] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 355.163952][ T7772] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 355.173681][ T7772] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 355.181673][ T7772] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 355.189160][ T7772] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 355.526173][ T7918] bridge_slave_1: left allmulticast mode [ 355.544203][ T7918] bridge_slave_1: left promiscuous mode [ 355.550145][ T7918] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.571978][ T7918] bridge_slave_0: left allmulticast mode [ 355.581269][ T7918] bridge_slave_0: left promiscuous mode [ 355.588275][ T7918] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.127605][ T7918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 356.140007][ T7918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 356.152373][ T7918] bond0 (unregistering): Released all slaves [ 356.725679][ T9853] chnl_net:caif_netlink_parms(): no params data found [ 356.776082][ T7772] Bluetooth: hci1: command tx timeout [ 356.810307][ T9905] FAULT_INJECTION: forcing a failure. [ 356.810307][ T9905] name failslab, interval 1, probability 0, space 0, times 0 [ 356.841047][ T9905] CPU: 1 UID: 0 PID: 9905 Comm: syz.2.621 Tainted: G U syzkaller #0 PREEMPT(full) [ 356.841093][ T9905] Tainted: [U]=USER [ 356.841102][ T9905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 356.841119][ T9905] Call Trace: [ 356.841128][ T9905] [ 356.841139][ T9905] dump_stack_lvl+0x16c/0x1f0 [ 356.841178][ T9905] should_fail_ex+0x512/0x640 [ 356.841214][ T9905] ? fs_reclaim_acquire+0xae/0x150 [ 356.841255][ T9905] ? tomoyo_encode2+0x100/0x3e0 [ 356.841289][ T9905] should_failslab+0xc2/0x120 [ 356.841322][ T9905] __kmalloc_noprof+0xd2/0x510 [ 356.841359][ T9905] tomoyo_encode2+0x100/0x3e0 [ 356.841400][ T9905] tomoyo_encode+0x29/0x50 [ 356.841433][ T9905] tomoyo_realpath_from_path+0x18f/0x6e0 [ 356.841491][ T9905] tomoyo_check_open_permission+0x2ab/0x3c0 [ 356.841525][ T9905] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 356.841592][ T9905] ? find_held_lock+0x2b/0x80 [ 356.841627][ T9905] tomoyo_file_open+0x6b/0x90 [ 356.841650][ T9905] security_file_open+0x84/0x1e0 [ 356.841684][ T9905] do_dentry_open+0x596/0x1530 [ 356.841726][ T9905] vfs_open+0x82/0x3f0 [ 356.841766][ T9905] path_openat+0x1de4/0x2cb0 [ 356.841809][ T9905] ? __pfx_path_openat+0x10/0x10 [ 356.841849][ T9905] do_filp_open+0x20b/0x470 [ 356.841879][ T9905] ? __pfx_do_filp_open+0x10/0x10 [ 356.841933][ T9905] ? alloc_fd+0x471/0x7d0 [ 356.841969][ T9905] do_sys_openat2+0x11b/0x1d0 [ 356.842006][ T9905] ? __pfx_do_sys_openat2+0x10/0x10 [ 356.842059][ T9905] __x64_sys_openat+0x174/0x210 [ 356.842096][ T9905] ? __pfx___x64_sys_openat+0x10/0x10 [ 356.842148][ T9905] do_syscall_64+0xcd/0x490 [ 356.842185][ T9905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.842210][ T9905] RIP: 0033:0x7f2cb238ebe9 [ 356.842232][ T9905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.842256][ T9905] RSP: 002b:00007f2cb31e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 356.842281][ T9905] RAX: ffffffffffffffda RBX: 00007f2cb25c5fa0 RCX: 00007f2cb238ebe9 [ 356.842297][ T9905] RDX: 0000000000181841 RSI: 0000200000000540 RDI: ffffffffffffff9c [ 356.842312][ T9905] RBP: 00007f2cb2411e19 R08: 0000000000000000 R09: 0000000000000000 [ 356.842327][ T9905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 356.842341][ T9905] R13: 00007f2cb25c6038 R14: 00007f2cb25c5fa0 R15: 00007fff6160f208 [ 356.842374][ T9905] [ 356.842398][ T9905] ERROR: Out of memory at tomoyo_realpath_from_path. [ 357.119775][ T9857] chnl_net:caif_netlink_parms(): no params data found [ 357.169987][ T9676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.252519][ T7772] Bluetooth: hci3: command tx timeout [ 357.510830][ T9857] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.518300][ T9857] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.528664][ T9857] bridge_slave_0: entered allmulticast mode [ 357.538138][ T9857] bridge_slave_0: entered promiscuous mode [ 357.557065][ T9853] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.592551][ T9853] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.599854][ T9853] bridge_slave_0: entered allmulticast mode [ 357.626187][ T9853] bridge_slave_0: entered promiscuous mode [ 357.649416][ T9853] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.659505][ T9853] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.669413][ T9853] bridge_slave_1: entered allmulticast mode [ 357.680409][ T9853] bridge_slave_1: entered promiscuous mode [ 357.719200][ T7918] hsr_slave_0: left promiscuous mode [ 357.728458][ T7918] hsr_slave_1: left promiscuous mode [ 357.742822][ T7918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.750250][ T7918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.768056][ T9933] FAULT_INJECTION: forcing a failure. [ 357.768056][ T9933] name failslab, interval 1, probability 0, space 0, times 0 [ 357.773861][ T7918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.785015][ T9933] CPU: 1 UID: 0 PID: 9933 Comm: syz.2.622 Tainted: G U syzkaller #0 PREEMPT(full) [ 357.785057][ T9933] Tainted: [U]=USER [ 357.785067][ T9933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 357.785082][ T9933] Call Trace: [ 357.785091][ T9933] [ 357.785101][ T9933] dump_stack_lvl+0x16c/0x1f0 [ 357.785141][ T9933] should_fail_ex+0x512/0x640 [ 357.785175][ T9933] ? fs_reclaim_acquire+0xae/0x150 [ 357.785214][ T9933] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 357.785249][ T9933] should_failslab+0xc2/0x120 [ 357.785282][ T9933] __kmalloc_noprof+0xd2/0x510 [ 357.785320][ T9933] tomoyo_realpath_from_path+0xc2/0x6e0 [ 357.785365][ T9933] tomoyo_check_open_permission+0x2ab/0x3c0 [ 357.785407][ T9933] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 357.785477][ T9933] ? find_held_lock+0x2b/0x80 [ 357.785511][ T9933] tomoyo_file_open+0x6b/0x90 [ 357.785538][ T9933] security_file_open+0x84/0x1e0 [ 357.785572][ T9933] do_dentry_open+0x596/0x1530 [ 357.785613][ T9933] vfs_open+0x82/0x3f0 [ 357.785653][ T9933] path_openat+0x1de4/0x2cb0 [ 357.785696][ T9933] ? __pfx_path_openat+0x10/0x10 [ 357.785734][ T9933] do_filp_open+0x20b/0x470 [ 357.785764][ T9933] ? __pfx_do_filp_open+0x10/0x10 [ 357.785819][ T9933] ? alloc_fd+0x471/0x7d0 [ 357.785856][ T9933] do_sys_openat2+0x11b/0x1d0 [ 357.785892][ T9933] ? __pfx_do_sys_openat2+0x10/0x10 [ 357.785943][ T9933] __x64_sys_openat+0x174/0x210 [ 357.785981][ T9933] ? __pfx___x64_sys_openat+0x10/0x10 [ 357.786032][ T9933] do_syscall_64+0xcd/0x490 [ 357.786069][ T9933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.786096][ T9933] RIP: 0033:0x7f2cb238ebe9 [ 357.786116][ T9933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.786140][ T9933] RSP: 002b:00007f2cb31e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 357.786164][ T9933] RAX: ffffffffffffffda RBX: 00007f2cb25c5fa0 RCX: 00007f2cb238ebe9 [ 357.786182][ T9933] RDX: 0000000000181841 RSI: 0000200000000540 RDI: ffffffffffffff9c [ 357.786200][ T9933] RBP: 00007f2cb2411e19 R08: 0000000000000000 R09: 0000000000000000 [ 357.786216][ T9933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 357.786231][ T9933] R13: 00007f2cb25c6038 R14: 00007f2cb25c5fa0 R15: 00007fff6160f208 [ 357.786267][ T9933] [ 357.786278][ T9933] ERROR: Out of memory at tomoyo_realpath_from_path. [ 357.801563][ T7918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.075309][ T7918] veth1_macvtap: left promiscuous mode [ 358.080973][ T7918] veth0_macvtap: left promiscuous mode [ 358.088107][ T7918] veth1_vlan: left promiscuous mode [ 358.095915][ T7918] veth0_vlan: left promiscuous mode [ 358.631573][ T7918] team0 (unregistering): Port device team_slave_1 removed [ 358.690820][ T7918] team0 (unregistering): Port device team_slave_0 removed [ 358.857130][ T7772] Bluetooth: hci1: command tx timeout [ 359.310526][ T9857] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.317875][ T9857] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.332589][ T7772] Bluetooth: hci3: command tx timeout [ 359.365120][ T9857] bridge_slave_1: entered allmulticast mode [ 359.388567][ T9857] bridge_slave_1: entered promiscuous mode [ 359.416695][ T9676] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.496893][ T9853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.509697][ T9857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.536760][ T9853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.575273][ T9857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.650297][ T9853] team0: Port device team_slave_0 added [ 359.708099][ T6885] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.715322][ T6885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.730726][ T9853] team0: Port device team_slave_1 added [ 359.755399][ T9857] team0: Port device team_slave_0 added [ 359.784467][ T6661] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.791634][ T6661] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.845902][ T9857] team0: Port device team_slave_1 added [ 359.898760][ T9853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.907901][ T9853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.940860][ T9853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.991257][ T9857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.012929][ T9857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.066402][ T9857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.086305][ T9853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.102797][ T9853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.136738][ T9853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.167276][ T9857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.182603][ T9857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.242658][ T9857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.438121][ T9857] hsr_slave_0: entered promiscuous mode [ 360.453970][ T9857] hsr_slave_1: entered promiscuous mode [ 360.460436][ T9857] debugfs: 'hsr0' already exists in 'hsr' [ 360.482761][ T9857] Cannot create hsr debugfs directory [ 360.547834][ T7918] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.587327][ T9853] hsr_slave_0: entered promiscuous mode [ 360.597948][ T9853] hsr_slave_1: entered promiscuous mode [ 360.605365][ T9853] debugfs: 'hsr0' already exists in 'hsr' [ 360.611108][ T9853] Cannot create hsr debugfs directory [ 360.659053][ T7918] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.836229][ T7918] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.933301][ T7772] Bluetooth: hci1: command tx timeout [ 360.947673][ T7918] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.415557][ T7772] Bluetooth: hci3: command tx timeout [ 361.643616][ T7918] bridge_slave_1: left allmulticast mode [ 361.651449][ T7918] bridge_slave_1: left promiscuous mode [ 361.673767][ T7918] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.685210][ T7918] bridge_slave_0: left allmulticast mode [ 361.690882][ T7918] bridge_slave_0: left promiscuous mode [ 361.725277][ T7918] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.171055][ T7918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.184222][ T7918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 362.194736][ T7918] bond0 (unregistering): Released all slaves [ 362.332486][ T9676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.949612][ T9857] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 363.015015][ T7772] Bluetooth: hci1: command tx timeout [ 363.042378][ T9857] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 363.083414][ T9857] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 363.185268][ T9857] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 363.424784][ T6664] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 363.434694][ T6664] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 363.443769][ T6664] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 363.453392][ T6664] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 363.461913][ T6664] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 363.495269][ T6664] Bluetooth: hci3: command tx timeout [ 363.517070][ T9676] veth0_vlan: entered promiscuous mode [ 363.610163][ T9676] veth1_vlan: entered promiscuous mode [ 363.643742][ T7918] hsr_slave_0: left promiscuous mode [ 363.649801][ T7918] hsr_slave_1: left promiscuous mode [ 363.658367][ T7918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.665953][ T7918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.674260][ T7918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.681856][ T7918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.701050][ T7918] veth1_macvtap: left promiscuous mode [ 363.711410][ T7918] veth0_macvtap: left promiscuous mode [ 363.717377][ T7918] veth1_vlan: left promiscuous mode [ 363.722662][ T7918] veth0_vlan: left promiscuous mode [ 364.128523][ T7918] team0 (unregistering): Port device team_slave_1 removed [ 364.171683][ T7918] team0 (unregistering): Port device team_slave_0 removed [ 364.687129][ T9853] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 364.758704][ T9853] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 364.782308][ T9853] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 364.824533][ T9676] veth0_macvtap: entered promiscuous mode [ 364.840049][ T9853] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 364.918262][ T9676] veth1_macvtap: entered promiscuous mode [ 365.027883][ T9857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.089143][ T9676] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.184819][ T7918] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.249899][ T9676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.269797][ T9999] chnl_net:caif_netlink_parms(): no params data found [ 365.300969][ T9857] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.315365][ T6669] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.324299][ T6669] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.361387][ T7918] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.398823][ T6669] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.497086][ T6664] Bluetooth: hci2: command tx timeout [ 365.503922][ T7918] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.539618][ T6669] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.546839][ T6669] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.653152][ T6669] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.660398][ T6669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.707472][ T7918] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.772209][ T9999] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.782550][ T9999] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.792577][ T9999] bridge_slave_0: entered allmulticast mode [ 365.800876][ T9999] bridge_slave_0: entered promiscuous mode [ 365.810907][ T9999] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.820859][ T9999] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.830785][ T9999] bridge_slave_1: entered allmulticast mode [ 365.838667][ T9999] bridge_slave_1: entered promiscuous mode [ 365.899832][ T8578] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.921703][ T8578] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.020656][ T9999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.065026][ T9999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.147965][ T9999] team0: Port device team_slave_0 added [ 366.171147][ T9853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.179144][ T6668] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.194018][ T6668] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.221783][ T9999] team0: Port device team_slave_1 added [ 366.403524][ T9999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.427073][ T9999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.467043][ T9999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.483251][ T9853] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.500137][ T9999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.516044][ T9999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.588807][ T9999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.635625][ T7918] bridge_slave_1: left allmulticast mode [ 366.644639][ T7918] bridge_slave_1: left promiscuous mode [ 366.655043][ T7918] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.673444][ T7918] bridge_slave_0: left allmulticast mode [ 366.680893][ T7918] bridge_slave_0: left promiscuous mode [ 366.687281][ T7918] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.214262][ T7918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 367.260183][ T7918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 367.289509][ T7918] bond0 (unregistering): Released all slaves [ 367.367696][ T6669] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.374821][ T6669] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.462617][ T6669] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.469811][ T6669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.495900][ T9999] hsr_slave_0: entered promiscuous mode [ 367.524272][ T9999] hsr_slave_1: entered promiscuous mode [ 367.531207][ T9999] debugfs: 'hsr0' already exists in 'hsr' [ 367.538055][ T9999] Cannot create hsr debugfs directory [ 367.580093][ T6664] Bluetooth: hci2: command tx timeout [ 367.662416][ T9857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.436066][ T9857] veth0_vlan: entered promiscuous mode [ 368.526213][ T9857] veth1_vlan: entered promiscuous mode [ 368.542085][ T7772] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 368.553995][ T7772] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 368.562145][ T7772] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 368.574438][ T7772] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 368.582972][ T7772] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 368.608035][ T7918] hsr_slave_0: left promiscuous mode [ 368.618449][ T7918] hsr_slave_1: left promiscuous mode [ 368.624294][ T7918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.638076][ T7918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.645775][ T7918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.653734][ T7918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.671553][ T7918] veth1_macvtap: left promiscuous mode [ 368.677299][ T7918] veth0_macvtap: left promiscuous mode [ 368.682886][ T7918] veth1_vlan: left promiscuous mode [ 368.689743][ T7918] veth0_vlan: left promiscuous mode [ 369.102131][ T7918] team0 (unregistering): Port device team_slave_1 removed [ 369.143897][ T7918] team0 (unregistering): Port device team_slave_0 removed [ 369.657491][ T7772] Bluetooth: hci2: command tx timeout [ 369.816852][ T9999] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 369.880543][ T9999] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 369.904588][ T9999] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 369.939029][ T9999] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 369.953806][ T9857] veth0_macvtap: entered promiscuous mode [ 370.012756][ T9857] veth1_macvtap: entered promiscuous mode [ 370.080686][ T9853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.169832][ T9857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.225204][ T9857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.301692][ T7918] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.361543][T10080] chnl_net:caif_netlink_parms(): no params data found [ 370.386917][ T7918] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.409441][ T6668] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.421305][ T6668] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.462716][ T7918] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.476574][ T6668] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.486127][ T6668] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.584057][ T9853] veth0_vlan: entered promiscuous mode [ 370.622203][ T7772] Bluetooth: hci0: command tx timeout [ 370.698964][ T6668] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.706821][ T6668] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.721440][T10080] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.728979][T10080] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.736302][T10080] bridge_slave_0: entered allmulticast mode [ 370.744377][T10080] bridge_slave_0: entered promiscuous mode [ 370.752771][ T9853] veth1_vlan: entered promiscuous mode [ 370.796084][T10080] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.803556][T10080] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.811277][T10080] bridge_slave_1: entered allmulticast mode [ 370.819235][T10080] bridge_slave_1: entered promiscuous mode [ 370.870241][ T8578] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.879392][ T8578] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.892017][T10080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.922564][T10080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.989175][ T7918] bridge_slave_1: left allmulticast mode [ 370.994855][ T7918] bridge_slave_1: left promiscuous mode [ 371.018398][ T7918] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.050939][ T7918] bridge_slave_0: left allmulticast mode [ 371.067231][ T7918] bridge_slave_0: left promiscuous mode [ 371.085490][ T7918] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.744420][ T7772] Bluetooth: hci2: command tx timeout [ 371.834935][ T7918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 371.847064][ T7918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 371.868659][ T7918] bond0 (unregistering): Released all slaves [ 371.894146][T10080] team0: Port device team_slave_0 added [ 371.903776][T10080] team0: Port device team_slave_1 added [ 371.977136][ T9999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.998272][T10080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.005708][T10080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.031729][T10080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.071392][T10080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.078362][T10080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.106891][T10080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.204006][ T9999] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.225479][ T9853] veth0_macvtap: entered promiscuous mode [ 372.236777][ T9853] veth1_macvtap: entered promiscuous mode [ 372.283900][T10080] hsr_slave_0: entered promiscuous mode [ 372.290950][T10080] hsr_slave_1: entered promiscuous mode [ 372.297376][T10080] debugfs: 'hsr0' already exists in 'hsr' [ 372.312103][T10080] Cannot create hsr debugfs directory [ 372.324236][ T8578] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.331453][ T8578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.349878][ T6975] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.357021][ T6975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.442109][ T7918] hsr_slave_0: left promiscuous mode [ 372.496402][ T7918] hsr_slave_1: left promiscuous mode [ 372.529732][ T7918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 372.546129][ T7918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 372.557434][T10138] random: crng reseeded on system resumption [ 372.583962][ T7918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 372.603035][ T7918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 372.700352][ T7772] Bluetooth: hci0: command tx timeout [ 372.738235][ T7918] veth1_macvtap: left promiscuous mode [ 372.756858][ T7918] veth0_macvtap: left promiscuous mode [ 372.768567][ T7918] veth1_vlan: left promiscuous mode [ 372.777201][ T7918] veth0_vlan: left promiscuous mode [ 373.576136][ T7918] team0 (unregistering): Port device team_slave_1 removed [ 373.617831][ T7918] team0 (unregistering): Port device team_slave_0 removed [ 374.115649][ T9853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.210724][ T9853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.228169][ T6668] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.277514][ T6668] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.287620][ T6668] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.349132][ T6668] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.707254][ T6668] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.759153][ T6668] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.782384][ T7772] Bluetooth: hci0: command tx timeout [ 374.958166][ T6668] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.985528][ T6668] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.107593][ T9999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.363384][ T9999] veth0_vlan: entered promiscuous mode [ 375.605500][ T9999] veth1_vlan: entered promiscuous mode [ 375.657824][ T9999] veth0_macvtap: entered promiscuous mode [ 375.935904][T10181] device-mapper: ioctl: Invalid ioctl structure: name , dev d76200010006 [ 375.976338][ T9999] veth1_macvtap: entered promiscuous mode [ 376.185663][ T9999] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.222923][T10080] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 376.355257][T10080] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 376.401612][ T9999] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.474122][T10080] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 376.566884][T10080] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 376.681514][ T6661] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.861320][ T7772] Bluetooth: hci0: command tx timeout [ 377.007353][ T6661] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.017644][ T6661] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.227063][ T6661] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.747111][ T6669] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.759124][ T6669] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.000256][ T6661] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.020766][ T6661] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.024242][T10222] device-mapper: ioctl: Invalid ioctl structure: name , dev d76200010006 [ 378.488400][T10080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.599598][T10080] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.761065][ T6661] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.768265][ T6661] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.827293][ T6661] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.834488][ T6661] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.261961][T10244] device-mapper: ioctl: Invalid ioctl structure: name , dev d76200010006 [ 379.572539][T10252] zswap: compressor not available [ 380.552531][T10258] Setting dangerous option i915.mitigations - tainting kernel [ 380.710632][T10080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.896912][T10267] FAULT_INJECTION: forcing a failure. [ 380.896912][T10267] name failslab, interval 1, probability 0, space 0, times 0 [ 381.008619][T10267] CPU: 0 UID: 0 PID: 10267 Comm: syz.2.635 Tainted: G U syzkaller #0 PREEMPT(full) [ 381.008662][T10267] Tainted: [U]=USER [ 381.008671][T10267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 381.008686][T10267] Call Trace: [ 381.008695][T10267] [ 381.008706][T10267] dump_stack_lvl+0x16c/0x1f0 [ 381.008745][T10267] should_fail_ex+0x512/0x640 [ 381.008790][T10267] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 381.008826][T10267] should_failslab+0xc2/0x120 [ 381.008863][T10267] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 381.008894][T10267] ? vma_merge_new_range+0x3ae/0xa50 [ 381.008922][T10267] ? vm_area_alloc+0x1f/0x160 [ 381.008953][T10267] vm_area_alloc+0x1f/0x160 [ 381.008980][T10267] __mmap_region+0xf90/0x27b0 [ 381.009012][T10267] ? lock_acquire+0x179/0x350 [ 381.009044][T10267] ? __pfx___mmap_region+0x10/0x10 [ 381.009083][T10267] ? lockdep_hardirqs_on+0x7c/0x110 [ 381.009115][T10267] ? finish_task_switch.isra.0+0x221/0xc10 [ 381.009145][T10267] ? rcu_is_watching+0x12/0xc0 [ 381.009171][T10267] ? trace_sched_exit_tp+0xd1/0x120 [ 381.009209][T10267] ? __schedule+0x11a3/0x5de0 [ 381.009300][T10267] ? trace_cap_capable+0x18d/0x200 [ 381.009340][T10267] mmap_region+0x1ab/0x3f0 [ 381.009371][T10267] ? __get_unmapped_area+0x267/0x440 [ 381.009412][T10267] do_mmap+0xa3e/0x1210 [ 381.009455][T10267] ? __pfx_do_mmap+0x10/0x10 [ 381.009492][T10267] ? __pfx_down_write_killable+0x10/0x10 [ 381.009528][T10267] ? kmem_cache_free+0x2d1/0x4d0 [ 381.009562][T10267] vm_mmap_pgoff+0x29e/0x470 [ 381.009605][T10267] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 381.009639][T10267] ? fput+0x9b/0xd0 [ 381.009682][T10267] ? __x64_sys_futex+0x1e0/0x4c0 [ 381.009721][T10267] ksys_mmap_pgoff+0x7d/0x5c0 [ 381.009755][T10267] ? xfd_validate_state+0x61/0x180 [ 381.009806][T10267] __x64_sys_mmap+0x125/0x190 [ 381.009851][T10267] do_syscall_64+0xcd/0x490 [ 381.009891][T10267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.009917][T10267] RIP: 0033:0x7fbf6bd8ebe9 [ 381.009937][T10267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.009964][T10267] RSP: 002b:00007fbf6cc13038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 381.009989][T10267] RAX: ffffffffffffffda RBX: 00007fbf6bfc6090 RCX: 00007fbf6bd8ebe9 [ 381.010007][T10267] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 381.010022][T10267] RBP: 00007fbf6be11e19 R08: fffffffffffffffa R09: 0000000000008000 [ 381.010038][T10267] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 381.010055][T10267] R13: 00007fbf6bfc6128 R14: 00007fbf6bfc6090 R15: 00007fffe93e8c68 [ 381.010090][T10267] [ 381.276710][ C0] vkms_vblank_simulate: vblank timer overrun [ 382.110154][T10080] veth0_vlan: entered promiscuous mode [ 382.264665][T10080] veth1_vlan: entered promiscuous mode [ 382.362499][ C1] vcan0: j1939_tp_rxtimer: 0xffff888061b0d400: rx timeout, send abort [ 382.443621][T10080] veth0_macvtap: entered promiscuous mode [ 382.453396][T10080] veth1_macvtap: entered promiscuous mode [ 382.677075][T10080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.799701][T10080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.871103][ C1] vcan0: j1939_tp_rxtimer: 0xffff888061b0d400: abort rx timeout. Force session deactivation [ 383.416708][ T6669] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.590436][T10304] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.612979][T10304] ------------[ cut here ]------------ [ 383.618958][T10304] ODEBUG: free active (active state 0) object: ffff88803618c600 object type: work_struct hint: udp_tunnel_nic_device_sync_work+0x0/0xa10 [ 383.700726][T10304] WARNING: CPU: 0 PID: 10304 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0 [ 383.710678][T10304] Modules linked in: [ 383.714916][T10304] CPU: 0 UID: 0 PID: 10304 Comm: syz.2.638 Tainted: G U syzkaller #0 PREEMPT(full) [ 383.725946][T10304] Tainted: [U]=USER [ 383.729743][T10304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 383.739938][T10304] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 383.745906][T10304] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd 60 3e 16 8c 4c 89 e6 48 c7 c7 e0 32 16 8c e8 5f 08 92 fc 90 <0f> 0b 90 90 58 83 05 66 c1 c3 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 383.766415][T10304] RSP: 0018:ffffc900037b7638 EFLAGS: 00010286 [ 383.773237][T10304] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffc9000cd42000 [ 383.781631][T10304] RDX: 0000000000080000 RSI: ffffffff817a02d5 RDI: 0000000000000001 [ 383.789921][T10304] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 383.797928][T10304] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff8c163980 [ 383.806007][T10304] R13: ffffffff8bac1660 R14: ffffffff8a1f8850 R15: ffffc900037b7738 [ 383.813971][T10304] FS: 00007fbf6cc136c0(0000) GS:ffff8881246c0000(0000) knlGS:0000000000000000 [ 383.823190][T10304] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 383.829894][T10304] CR2: 000020000055f000 CR3: 0000000034800000 CR4: 00000000003526f0 [ 383.837958][T10304] Call Trace: [ 383.841233][T10304] [ 383.844160][T10304] ? __pfx_udp_tunnel_nic_device_sync_work+0x10/0x10 [ 383.850932][T10304] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 383.857611][T10304] debug_check_no_obj_freed+0x4b7/0x600 [ 383.863176][T10304] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 383.869919][T10304] ? kasan_quarantine_put+0x10a/0x240 [ 383.875349][T10304] ? lockdep_hardirqs_on+0x7c/0x110 [ 383.880927][T10304] kfree+0x28f/0x4d0 [ 383.885125][T10304] ? udp_tunnel_nic_netdevice_event+0xd2a/0x1fa0 [ 383.891464][T10304] udp_tunnel_nic_netdevice_event+0xd2a/0x1fa0 [ 383.897694][T10304] notifier_call_chain+0xbc/0x410 [ 383.902828][T10304] ? __pfx_udp_tunnel_nic_netdevice_event+0x10/0x10 [ 383.909683][T10304] call_netdevice_notifiers_info+0xbe/0x140 [ 383.915620][T10304] unregister_netdevice_many_notify+0xf76/0x24c0 [ 383.921988][T10304] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 383.928831][T10304] ? __pfx___mutex_lock+0x10/0x10 [ 383.933855][T10304] ? net_passive_dec+0xaa/0x1e0 [ 383.938757][T10304] unregister_netdevice_queue+0x305/0x3f0 [ 383.944526][T10304] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 383.950772][T10304] nsim_destroy+0x198/0x800 [ 383.956130][T10304] __nsim_dev_port_del+0x189/0x240 [ 383.961246][T10304] nsim_drv_port_del+0x118/0x180 [ 383.966854][T10304] del_port_store+0x129/0x170 [ 383.971589][T10304] ? __pfx_del_port_store+0x10/0x10 [ 383.976833][T10304] ? find_held_lock+0x2b/0x80 [ 383.981894][T10304] ? sysfs_file_kobj+0xe4/0x290 [ 383.987189][T10304] ? __pfx_del_port_store+0x10/0x10 [ 383.992414][T10304] dev_attr_store+0x58/0x80 [ 383.996956][T10304] ? __pfx_dev_attr_store+0x10/0x10 [ 384.002169][T10304] sysfs_kf_write+0xf2/0x150 [ 384.006801][T10304] kernfs_fop_write_iter+0x354/0x510 [ 384.012094][T10304] ? __pfx_sysfs_kf_write+0x10/0x10 [ 384.017335][T10304] vfs_write+0x7d0/0x11d0 [ 384.021678][T10304] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 384.027496][T10304] ? __pfx___mutex_lock+0x10/0x10 [ 384.032520][T10304] ? __pfx_vfs_write+0x10/0x10 [ 384.037371][T10304] ksys_write+0x12a/0x250 [ 384.041692][T10304] ? __pfx_ksys_write+0x10/0x10 [ 384.046575][T10304] do_syscall_64+0xcd/0x490 [ 384.051072][T10304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.057779][T10304] RIP: 0033:0x7fbf6bd8ebe9 [ 384.062189][T10304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.089041][T10304] RSP: 002b:00007fbf6cc13038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 384.098446][T10304] RAX: ffffffffffffffda RBX: 00007fbf6bfc6090 RCX: 00007fbf6bd8ebe9 [ 384.106479][T10304] RDX: 0000000000000001 RSI: 0000200000000380 RDI: 0000000000000009 [ 384.114442][T10304] RBP: 00007fbf6be11e19 R08: 0000000000000000 R09: 0000000000000000 [ 384.122462][T10304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 384.130463][T10304] R13: 00007fbf6bfc6128 R14: 00007fbf6bfc6090 R15: 00007fffe93e8c68 [ 384.138536][T10304] [ 384.141545][T10304] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 384.148806][T10304] CPU: 0 UID: 0 PID: 10304 Comm: syz.2.638 Tainted: G U syzkaller #0 PREEMPT(full) [ 384.159640][T10304] Tainted: [U]=USER [ 384.163424][T10304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 384.173475][T10304] Call Trace: [ 384.176750][T10304] [ 384.179669][T10304] dump_stack_lvl+0x3d/0x1f0 [ 384.184253][T10304] vpanic+0x6e8/0x7a0 [ 384.188228][T10304] ? __pfx_vpanic+0x10/0x10 [ 384.192741][T10304] ? debug_print_object+0x1a2/0x2b0 [ 384.198111][T10304] panic+0xca/0xd0 [ 384.201860][T10304] ? __pfx_panic+0x10/0x10 [ 384.206303][T10304] check_panic_on_warn+0xab/0xb0 [ 384.211234][T10304] __warn+0xf6/0x3c0 [ 384.215121][T10304] ? debug_print_object+0x1a2/0x2b0 [ 384.220322][T10304] report_bug+0x3c3/0x580 [ 384.224640][T10304] ? debug_print_object+0x1a2/0x2b0 [ 384.229841][T10304] handle_bug+0x184/0x210 [ 384.234188][T10304] exc_invalid_op+0x17/0x50 [ 384.238679][T10304] asm_exc_invalid_op+0x1a/0x20 [ 384.243510][T10304] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 384.249330][T10304] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd 60 3e 16 8c 4c 89 e6 48 c7 c7 e0 32 16 8c e8 5f 08 92 fc 90 <0f> 0b 90 90 58 83 05 66 c1 c3 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 384.268953][T10304] RSP: 0018:ffffc900037b7638 EFLAGS: 00010286 [ 384.275018][T10304] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffc9000cd42000 [ 384.282971][T10304] RDX: 0000000000080000 RSI: ffffffff817a02d5 RDI: 0000000000000001 [ 384.290932][T10304] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 384.298909][T10304] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff8c163980 [ 384.306889][T10304] R13: ffffffff8bac1660 R14: ffffffff8a1f8850 R15: ffffc900037b7738 [ 384.314864][T10304] ? __pfx_udp_tunnel_nic_device_sync_work+0x10/0x10 [ 384.321559][T10304] ? __warn_printk+0x1a5/0x350 [ 384.326343][T10304] ? debug_print_object+0x1a1/0x2b0 [ 384.331538][T10304] ? __pfx_udp_tunnel_nic_device_sync_work+0x10/0x10 [ 384.338326][T10304] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 384.344186][T10304] debug_check_no_obj_freed+0x4b7/0x600 [ 384.349746][T10304] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 384.355815][T10304] ? kasan_quarantine_put+0x10a/0x240 [ 384.361175][T10304] ? lockdep_hardirqs_on+0x7c/0x110 [ 384.366367][T10304] kfree+0x28f/0x4d0 [ 384.370247][T10304] ? udp_tunnel_nic_netdevice_event+0xd2a/0x1fa0 [ 384.376572][T10304] udp_tunnel_nic_netdevice_event+0xd2a/0x1fa0 [ 384.382998][T10304] notifier_call_chain+0xbc/0x410 [ 384.388105][T10304] ? __pfx_udp_tunnel_nic_netdevice_event+0x10/0x10 [ 384.394729][T10304] call_netdevice_notifiers_info+0xbe/0x140 [ 384.400642][T10304] unregister_netdevice_many_notify+0xf76/0x24c0 [ 384.406978][T10304] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 384.413757][T10304] ? __pfx___mutex_lock+0x10/0x10 [ 384.418792][T10304] ? net_passive_dec+0xaa/0x1e0 [ 384.423644][T10304] unregister_netdevice_queue+0x305/0x3f0 [ 384.429366][T10304] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 384.435708][T10304] nsim_destroy+0x198/0x800 [ 384.440216][T10304] __nsim_dev_port_del+0x189/0x240 [ 384.445326][T10304] nsim_drv_port_del+0x118/0x180 [ 384.450267][T10304] del_port_store+0x129/0x170 [ 384.454932][T10304] ? __pfx_del_port_store+0x10/0x10 [ 384.460117][T10304] ? find_held_lock+0x2b/0x80 [ 384.464797][T10304] ? sysfs_file_kobj+0xe4/0x290 [ 384.469634][T10304] ? __pfx_del_port_store+0x10/0x10 [ 384.474816][T10304] dev_attr_store+0x58/0x80 [ 384.479397][T10304] ? __pfx_dev_attr_store+0x10/0x10 [ 384.484589][T10304] sysfs_kf_write+0xf2/0x150 [ 384.489170][T10304] kernfs_fop_write_iter+0x354/0x510 [ 384.494457][T10304] ? __pfx_sysfs_kf_write+0x10/0x10 [ 384.499659][T10304] vfs_write+0x7d0/0x11d0 [ 384.504005][T10304] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 384.509821][T10304] ? __pfx___mutex_lock+0x10/0x10 [ 384.515217][T10304] ? __pfx_vfs_write+0x10/0x10 [ 384.519988][T10304] ksys_write+0x12a/0x250 [ 384.524312][T10304] ? __pfx_ksys_write+0x10/0x10 [ 384.529166][T10304] do_syscall_64+0xcd/0x490 [ 384.533666][T10304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.539564][T10304] RIP: 0033:0x7fbf6bd8ebe9 [ 384.543974][T10304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.563572][T10304] RSP: 002b:00007fbf6cc13038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 384.571982][T10304] RAX: ffffffffffffffda RBX: 00007fbf6bfc6090 RCX: 00007fbf6bd8ebe9 [ 384.579965][T10304] RDX: 0000000000000001 RSI: 0000200000000380 RDI: 0000000000000009 [ 384.587931][T10304] RBP: 00007fbf6be11e19 R08: 0000000000000000 R09: 0000000000000000 [ 384.595890][T10304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 384.603852][T10304] R13: 00007fbf6bfc6128 R14: 00007fbf6bfc6090 R15: 00007fffe93e8c68 [ 384.611840][T10304] [ 384.615200][T10304] Kernel Offset: disabled [ 384.619641][T10304] Rebooting in 86400 seconds..