last executing test programs: 2m52.906848778s ago: executing program 1 (id=1711): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\xdcn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r1 = socket(0x2, 0x5, 0x0) bind$auto(0xffffffffffffffff, 0x0, 0x6a) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) umount2$auto(0x0, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_GTP_CMD_NEWPDP(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYRESHEX, @ANYRES8=r2], 0xfffffffffffffd6c}}, 0x14) r3 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$auto_USB_RAW_IOCTL_EVENT_FETCH(r3, 0x80085502, &(0x7f0000000200)=ANY=[]) read$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffffff, 0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/module/ath9k/parameters/use_msi\x00', 0x8502, 0x0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) write$auto(r5, &(0x7f0000000640)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x14\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\x00\x00\x00\x00[r4G\xc5\x8d\xcb\x10\xae\x88\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C\xf8B^`\xf8\xc2\x0e\xfc>\xa1\xc5\x1dc\xb5S\xb0eX\xba\xe2\xb8\x17\xd1?\xec\xa3Rc2U\xc2OD\x1cl\xc6\xf0,4\x84A\x8f\xa0\xecJ\xb7\xfcnDO\n[^\xfc\xee\xf4\x98\xb3:K\x05\xd6ElP\xb1\xdc\xa2cg\xafENM\xb2\x1e\xfe\x0f}\xba\x83\x00\x81\x1at\xbf\x9ezF+x\xec\xe1`Qfm:\xfd\xeek\xa6#\xde\x16\x8f\xe9\xe9\xccbP\xb2z\xe1\xed\x97\x11\xaa\xea@\xee:\r\xb8\xe5\xd9CNG\x94\xe5\xcf\xfc3\xc7Z8\x03\x00\x00\x00\xc9\xe2ny\xa7\xd4\xb5A\x8e\xe2\x87\xf0\x17\x90%c\x1dE\xb1j2\x13\x10\xc2\x98\xeak\xa8\x10\xa0\x0f\xe8\x828\"9\xc1\xf2\xb6\x18\x9atD\xf13\xb2+$\x06q\xd6\x8e\xc18\x85\xd2\xd2\x1f\x97\x1d\xd7\x88\"\x01w\xaa\\\f\x98\xbf\xff\xeb\xceg\xa7\x8e\x84B\x7fn\xddu\xe0i\xd3\xf8\x8e\xf4\x111\x86\xfd\xcb\xa1\xd41\x8cI\xe0\xfa\xb3/(s\xd6\xd8\xcdCr\xf5MZ\xb8\xd4\x97\xae1\xc23ph\x84-@\xd4N_\n\xef\x86\x93T\\x\xf2\xce \xfe\v2E\xcatr\x00\xe5\xd7\xb2\x13\xe6\xd8@\x00|f\xaa\xadX@!\xc2]\xf9\x80\x9a\x1d\xcbt;\xfew\x14\x92\xc27\xbf\xad\x10\xa4\x93\xcd\xdc\x89\xa15\xe7r\x85\xcc\xd2p?\xf2\x0f`+\xb2\xcb\xf1\xddXw\xd2}Is%x\xbbJx\xebo{\x80\xc6o\x9e\xb2\"\x1c\vzL\"\x880|\v\xe0N\x8f\xd6\x8a\xaf\xf5\x9a\xfd\xdeA\x9dZ\x1e\xdb\x1b\x1b\xb02\x03\x87c^\x85\xa9\x1dD$\xd4\xe4\x86\x95=\xf1\x19w$1yL>\xcd\x94W>xzP\x17\x93\x9alN\x9f\xfa\\\x84\xa8\x92\xbfG\x18s\x01\xc2\xe1\xed\xb3\"\xeb\x9d\x8b\x04\xc3\xda\xe4L\x9c\x8d\v\x96o\x14\xf7\x9c?\xf2\r>\xc3\xad\xaeQA\x05\xe6\n\x9el\x85]\xed\xf0\xa2T\xbc:\xefD\f[C\xb0:\x0f\xafqgl\x02R\x01\x16\x81S\xbdk\xd8\x9dZ%W\xbc~J\xd7\xf4?\xa2\xbd\x00\xa2\x7f\x11\x81\xce\xe55X38\xac\xd4\x15\x97\x83\"g\x15|\xf3t\x93ymYi\x1b\xdf\xd3>nS\xad\xa6/\xe7\x88\x8a\xc3\x00\xb7\xb8\xf24\x11\xe6\x15\xea\x16\xec\xaf?\xe0Y\xf30\x9a\xf5\x02\x9a0\x97\x1d\x11wL|\xde\xff\xbc\xa7\x03%i\xdc\x92\n\xb9U{m2\xba\\B\xb7U\f-r\xef\"\xbc\xa8\xcbc\x11z\x88\x9f\xa7\x06\xe2\xe8\x9c\x87ZL\xfeju\x15\xbeLf\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.5/usb20/rx_lanes\x00', 0x20ac00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000001c00)=""/4111, 0x100f) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) ioctl$auto_SNDCTL_SYNTH_MEMAVL(0xffffffffffffffff, 0xc004510e, &(0x7f0000000280)="c97ce1a48c50ac2344cfd7c9") select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000500), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_TCP_METRICS_CMD_DEL(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="00bbacd5", @ANYRES16=r5, @ANYRESDEC=r2], 0x14}, 0x1, 0x0, 0x0, 0x8014}, 0x840) sendmsg$auto_TCP_METRICS_CMD_GET(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="003e28bd7000fbdbdf250169ba3bbb488998c18fd0982600000008000100ac1414f6ffff2b8ab737243e178700"/54], 0x30}}, 0x4880) sendmsg$auto_NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000ffdbdf251900000004000600"/30], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000001) r6 = socket(0x28, 0x1, 0x0) sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(r6, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x4000085) msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram9\x00', 0x800, 0x0) openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000680)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/inject\x00', 0x8340, 0x0) setfsuid$auto(0xee00) socket(0x2, 0x3, 0x100) add_key$auto_KEY_SPEC_REQKEY_AUTH_KEY(&(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy2/long_retry_limit\x00', 0x0, 0x0, 0x3, 0xfffffffffffffff9) timer_settime$auto(0x8, 0xffff, &(0x7f00000002c0)={{0x5, 0x9375}, {0x8, 0x185}}, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x0, 0x6, 0x3, 0x3ff) 2m48.165393617s ago: executing program 1 (id=1717): unshare$auto(0x40000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = getpgid$auto(0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000002a00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000029c0)={&(0x7f0000002a40)=ANY=[@ANYBLOB="c0120000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="05000d00000000000800a600ce0300000578150f3a6059ddd59b8b68869a65f5a20dbca43dc2020bbf523193edd4246174a4603045b0873ad834e0d96aecdfa65293ff11a6bd74eb8668ad1ff64ac23cecdd6bf37dcc8c0de618cf78b66955800400000010005e002f6465762f617564696f31000800eb00", @ANYRES32=0x0, @ANYBLOB="058bd246", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="c250aa47cd09531fadbec2bb2e08b12ef916f9f35bceaf7ffc74fa7811cb82d379e811073fb190b9615e4c5ef86f23d02d098058e3d203cd268b3147bdd09e641e9e5ffbb8becea8f6e16beb106d6e8dda99cf13802d3465e2c4086a63164d6b891bbc2feb832c3d89d504a7c21406eab40ae0287e851b5d441c24b90b0f892f8d3844743840eca80e6427d4e395a59748aa120a0be9b07bb1bf6dc354e1d35b76734e3408004d00", @ANYRESDEC=r0, @ANYBLOB], 0x12c0}, 0x1, 0x0, 0x0, 0x20000000}, 0x82) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000240), 0xffffffffffffffff) socket(0x6, 0xa, 0x2) mmap$auto(0x0, 0x4005, 0xb, 0x40eb2, 0x401, 0x300000000000) preadv$auto(0xffffffffffffffff, 0x0, 0x7, 0x7, 0x402) madvise$auto(0x110c230000, 0x4008031ca, 0xa) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x40100, 0x0) read$auto_proc_pagemap_operations_internal(r2, &(0x7f0000001540)=""/209, 0xd1) unshare$auto(0x40000080) socket(0x2, 0xf, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/admmidi2\x00', 0x200143, 0x0) write$auto(r0, &(0x7f0000000100)='/Eev/audio1\x00VI\xa3\xaa\xb1;W\x12q\xb5\xfagS4M\x1e\x92\xee\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03cY\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1cU\x9d\x8b\xa4U\x95s.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xc5\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x04]@\xb3\"\xae\xb3=\xad', 0x100000a3da) unshare$auto(0x40000080) timer_create$auto(0x8, &(0x7f0000000200)={@sival_int=0x8, @inferred, 0x1}, 0x0) timer_gettime$auto(0x0, &(0x7f0000000080)={{0x5, 0x8}, {0x7f, 0x10000}}) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x40, 0x0) ioctl$auto_SOUND_PCM_READ_CHANNELS(r3, 0x80045006, 0x0) openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000040), 0x101002, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3fc) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x0, 0x0) ioctl$auto_SG_SET_RESERVED_SIZE2(r4, 0x2275, 0x0) 2m45.645856507s ago: executing program 1 (id=1720): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101000, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x9) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) r0 = socket(0xa, 0x2, 0x3a) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0xa, 0x3, 0x3b) setsockopt$auto(r0, 0x29, 0x4e, &(0x7f0000000180)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91_\vBj\x0eQ\xce\x16\'C\x8c\x01\x80\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\x00\x00\x00\x00\xe4\xa5\xfe\xb5', 0x10000110) bind$auto(0x3, &(0x7f0000000040)=@generic={0x5, "02d0ac0c00e435826339c7328903"}, 0x6a) unshare$auto(0x4) unshare$auto(0x40000080) madvise$auto(0x0, 0x2003f2, 0x14) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop1\x00', 0x84100, 0x0) fcntl$auto_F_GETOWNER_UIDS(r1, 0x11, 0x8000000000000000) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x121300, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x2, 0x3a) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000180), 0xffffffffffffffff) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/ip6_flowlabel\x00', 0x42000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000340)=""/15, 0x40) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) mkdir$auto(&(0x7f0000000300)='./file1\x00', 0x1c67) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9) 2m44.078414297s ago: executing program 1 (id=1722): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = open(0x0, 0x0, 0x57e) ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0x48a, 0x400, 0x9}]}) mmap$auto(0x0, 0x400008, 0x5f, 0x9b73, 0x2, 0x8000) fsconfig$auto_SHMEM_HUGE_ALWAYS(0xffffffffffffffff, 0x1, &(0x7f00000001c0)='/dev/bus/usb/010/001\x00', 0x0, 0x1) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) timerfd_gettime$auto(0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x1e3a02, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) ioctl$auto_BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000180)={0x0, 0x3}) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0) openat$auto_mon_fops_stat_usb_mon(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/16s\x00', 0x40000, 0x0) close_range$auto(0x2, 0x8, 0x0) waitid$auto_P_PIDFD(0x3, r2, &(0x7f0000000300)={@_si_pad}, 0x6, &(0x7f0000000380)={{0x9}, {0x10001, 0xffffffffffffff5e}, 0x5, 0x4dbf, 0x4832, 0x4, 0x3, 0x2, 0x4, 0x1000, 0x10001, 0x6, 0x5, 0x2, 0x101, 0x1}) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) 2m42.612272133s ago: executing program 3 (id=1695): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="5e0027b4839f3015398d3b", @ANYRES32, @ANYRES32, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r0 = socket(0x18, 0xa, 0x1) connect$auto(r0, &(0x7f0000000000)=@in={0x2, 0x100}, 0x26) (fail_nth: 1) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 2m42.227070484s ago: executing program 1 (id=1724): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x4bf15e08, 0x0) get_robust_list$auto(0x1, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r0, 0x107, 0x1, 0x0, 0x8004) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000180)={0x2, 0x80, 0xffff, 0x5, &(0x7f0000000240)="2303", 0xc694, 0x3, 0x80005, @stream_id=0x7, 0x2004b, 0xc, 0x0, [{0x10001, 0x6a, 0x40}, {0x5, 0x6, 0x9}, {0xc57a, 0x2, 0x400}, {0x9, 0x8, 0x1}]}) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_ADD_LINK_STA(r0, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r1, 0x4, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x814}, 0x801) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) sendmsg$auto_IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8024}, 0x2400c090) r2 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r2, 0x29, 0x3e, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x110) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000580), 0x301, 0x0) shmctl$auto_SHM_LOCK(0x2, 0xb, &(0x7f0000000440)={{0x2, 0x0, 0x0, 0x2, 0x4, 0x3, 0x1}, 0x1, 0x5, 0x5, 0x1, @raw=0x1, @raw=0x4, 0x1, 0x0, &(0x7f0000000280)="df517d8f0ab3a9a9958f903fd9e6c43d1a486883c3b6ff629775c3be7f103db92b19894c09f0a1610b32be6774886d1ae5a48ad4711aaffb1f6b9add3a28fe5655060d0246d518e9ca76ffa534ef4b5226304ce3c37b2342f93ecb0ff45661bfd9ee7e580315d80fbeddce141749b24e19820c64ce06d7b55b2640969a86c3ff38ea47ceaee5ae2220f70876840446a04fd6580db75fd613c2fc169f3ac50578d2055adc39cc1d00c29eb79b35a9866da082afe3a664ec991bcc283b5486", &(0x7f0000000340)="0090600ada734c09e7f3592ab83b5837a02b6e16f55c1a6b3af8985b99ccd4a3d3090f5f0769c51d5b462f5b14b12aac713660cfba0741cd8fb64201dd8b6bfa0dee626e22c0ed0318510d5223bd057b8c5e398e72abaa6aecabe88e60ecafcae03bbc1f70554128bad808bfa7287be93686d3b1795043eea46c793239dbb133fe38a455eb46305a283eca21cafb5da5fdc36573dfa4e29e99b0040a36df27866465218de76c36a2b5a2c668e2057b6a35d49fa61a2650664686494a8eeacc84bd31539f2a70614dbf775cacb29806cc850dcfd2496e516d1488582c7af39ccc2ddb3a601e96ebe8b25f"}) read$auto_proc_tid_children_operations_internal(0xffffffffffffffff, &(0x7f00000005c0)=""/34, 0x22) r3 = socket(0x1, 0x1, 0x1) setsockopt$auto(r3, 0x29, 0x20, 0x0, 0x8002) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 2m40.638987454s ago: executing program 3 (id=1726): r0 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000300)='/dev/input/mouse0\x00', 0x1, 0x0) close_range$auto(0xffffffffffffffff, r0, 0xdf9b) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.5/usb20/rx_lanes\x00', 0x20ac00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000001c00)=""/4111, 0x100f) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) ioctl$auto_SNDCTL_SYNTH_MEMAVL(0xffffffffffffffff, 0xc004510e, &(0x7f0000000280)="c97ce1a48c50ac2344cfd7c9") select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000500), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_TCP_METRICS_CMD_DEL(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="00bbacd5", @ANYRES16=r5, @ANYRESDEC=r2], 0x14}, 0x1, 0x0, 0x0, 0x8014}, 0x840) sendmsg$auto_TCP_METRICS_CMD_GET(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="003e28bd7000fbdbdf250169ba3bbb488998c18fd0982600000008000100ac1414f6ffff2b8ab737243e178700"/54], 0x30}}, 0x4880) sendmsg$auto_NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000ffdbdf251900000004000600"/30], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000001) r6 = socket(0x28, 0x1, 0x0) sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(r6, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x4000085) msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram9\x00', 0x800, 0x0) openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000680)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/inject\x00', 0x8340, 0x0) setfsuid$auto(0xee00) socket(0x2, 0x3, 0x100) add_key$auto_KEY_SPEC_REQKEY_AUTH_KEY(&(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy2/long_retry_limit\x00', 0x0, 0x0, 0x3, 0xfffffffffffffff9) timer_settime$auto(0x8, 0xffff, &(0x7f00000002c0)={{0x5, 0x9375}, {0x8, 0x185}}, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x0, 0x6, 0x3, 0x3ff) 2m38.150747664s ago: executing program 3 (id=1728): unshare$auto(0x40000080) (async, rerun: 32) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (rerun: 32) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) unshare$auto(0x40000080) (async) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000200), r0) (async) unshare$auto(0x40000080) (async) r1 = socket(0x2, 0x801, 0x100) setsockopt$auto_SO_TIMESTAMPING_OLD(r1, 0x6, 0x18, &(0x7f0000000140)='macsec\x00', 0x3ff) (async) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) (async, rerun: 64) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r2 = socket(0x28, 0x1, 0x0) (async) ioctl$auto(0xffffffffffffffff, 0x5, r1) (async) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) (async) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x44800}, 0x0) (async, rerun: 32) keyctl$auto_KEYCTL_PKEY_VERIFY(0x1c, 0x1, 0x5d, 0x42d, 0x5) (async, rerun: 32) shmctl$auto_SHM_LOCK(0x7f, 0xb, &(0x7f00000006c0)={{0x1, 0x0, 0xee00, 0x5, 0x6, 0x2}, 0x2, 0x0, 0xb32, 0x7, @raw=0xe68, @raw=0x5, 0xa0, 0x0, &(0x7f0000000540)="9e9dab4c57b4a6b8f2c5cc1cbbb7e63d665e0d9c85e7af0db002af39574e50cfccb9c357996d27d52e1c0b67d69eccb420188cfd0527418511f323ea6d6fa04c892802d805d3c636d03dbff26c3a64ba6b87e320be30ff5ebc6ef15100ec01f5e623ee2fc27b5f58f8f30735ec60d2aef8ab6ebfc7b5c8a3adafccb7a98b9969d13c5481aafb8272459836994d2fbc0fd76330bbef20ae75408be209dbb43df0fe224ae3f1b2be5a7787da4f9f6d817eda4841046590481c6232f241981ef2e79496865d", &(0x7f0000000680)}) (async) setns(0xc9, 0x0) socket(0x2, 0x2, 0x1) (async) r4 = wait4$auto(0xffffffffffffffff, &(0x7f0000000040)=0x1, 0xfffffb3b, &(0x7f00000003c0)={{0x3, 0x100000001}, {0x1000, 0x6}, 0xe0, 0x3ff, 0x8, 0x333, 0xffffffffffffff00, 0x4, 0xfffffffffffff56c, 0x3, 0xf1, 0x1c0000000000000, 0x0, 0x1, 0xfffffffffffffffb, 0x2}) shmctl$auto_SHM_STAT(0x3, 0xd, &(0x7f00000004c0)={{0x8, r3, 0x0, 0x2, 0x2, 0x0, 0x800}, 0x9, 0x80, 0xffffffffffffff81, 0x8d, @inferred=r4, @inferred=0x0, 0x3ff, 0x0, &(0x7f0000000240), 0x0}) sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x4000085) (async) msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, &(0x7f0000000180)={{0x80000100, 0xee01, 0xee01, 0xfff, 0x87, 0x40, 0x3}, 0x0, 0x0, 0x7ff, 0x20003ff, 0x2000005, 0x1ff, 0x40, 0x4, 0x3, 0x3fb, @raw=0x7fff, @inferred=r5}) (async) setresgid$auto(0x0, 0x0, 0x0) (async) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x402) (async, rerun: 32) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) (rerun: 32) 2m36.271649223s ago: executing program 3 (id=1730): mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = prctl$auto_PR_SET_MM_ARG_START(0x7, 0x8, 0xffffffffffffffff, 0x7fffffffffffffff, 0xfffffffffffffff7) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001500)={0x126c, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_OURS={0x1258, 0x3, 0x0, 0x1, [@typed={0x8, 0x56, 0x0, 0x0, @ipv4=@multicast2}, @generic="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", @typed={0x4, 0x11}, @typed={0x8, 0x2e, 0x0, 0x0, @fd}, @generic="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32dd7c33b14cc842bc1e2a5da4203e64ceaa9db5223aa655b6313c011b3e73925f1aa1f7b2ea43344b15bd494886e355cf6d92c8fe670a42bc675e30013e9c4aa4fa30c3e6630bf0ed13206d5a18f6813c6fb03466112aedf5d67bb5b99fe96a6dcd279916b0bce029925b63c48d41ca8a76e46c584a3578153271c453b10978f4d8265b07414b0cf8fbdc2ade5c624866a7512dd31c245f15b888600e3f90c1a7684baa398874de73386821fa280651715c1e6af12ae98ccf344fceba9b7ccf61f228c763441b2bf49933a0f33ac00748437eca5a9ca83fe6e697b90d6b7d25c675878b389cf4fb908bf0d534cc405103f14e0393f9e94c86e34fc904e60c164456796d05ca4197aaa4e8b8e487185c110686701add3cf0cecac8ee34bd595078ebbcdde5fd05b0c820b331a10bf8539a362ba95e44aa2a98600f0247905e7f98676e9a0f6466a12974262144ad11251eddeca2fd8eb7a49be59ac5b6dfe3328552853ca1a3d6ba47cf63462368b4c195ad5cee108e374c8ba8d3edfd8e763f48ccd12b85dec287e66892699df14c3f3eee577a8e5d02e33683c83556c9a5dfb85fcdd14e5d15c02ba3b8e525950ad6f0dee787bffcb891fa7a4ef335352aa29d8e9879c9751da3399be83e098894458b988a018663c7fe0bcf450ae06c40010f03ac99", @nested={0x30, 0x3, 0x0, 0x1, [@nested={0x2c, 0x63, 0x0, 0x1, [@nested={0x28, 0x9e, 0x0, 0x1, [@typed={0x8, 0x5a, 0x0, 0x0, @str='/}!\x18'}, @nested={0x10, 0x86, 0x0, 0x1, [@typed={0xc, 0xd, 0x0, 0x0, @u64=0x6}]}, @nested={0x4, 0xc9}, @typed={0x8, 0x71, 0x0, 0x0, @fd}]}]}]}]}]}, 0x126c}, 0x1, 0x0, 0x0, 0x40000}, 0x2404c810) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'macvlan1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb0, r1, 0x200, 0x7fff, 0x25dfdbff, {}, [@ETHTOOL_A_TSINFO_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfff}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @ETHTOOL_A_TSINFO_HWTSTAMP_PROVIDER={0x1c, 0x7, 0x0, 0x1, [@ETHTOOL_A_TS_HWTSTAMP_PROVIDER_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_TS_HWTSTAMP_PROVIDER_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_TS_HWTSTAMP_PROVIDER_INDEX={0x8, 0x1, 0x5}]}, @ETHTOOL_A_TSINFO_HWTSTAMP_PROVIDER={0x14, 0x7, 0x0, 0x1, [@ETHTOOL_A_TS_HWTSTAMP_PROVIDER_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_TS_HWTSTAMP_PROVIDER_INDEX={0x8, 0x1, 0x3}]}, @ETHTOOL_A_TSINFO_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4}, 0x811) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000014c0)={0x2c, r4, 0xd0d58b333228212f, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_SCAN_SSIDS={0xd, 0x2d, 0x0, 0x1, [@typed={0x4, 0x139}, @generic='f', @nested={0x4, 0x28}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bond_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syzkaller1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'macsec0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00', 0x0}) r13 = gettid() sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)={0x294, r1, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_CABLE_TEST_TDR_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @ETHTOOL_A_CABLE_TEST_TDR_CFG={0x18b, 0x2, 0x0, 0x1, [@typed={0x8, 0x2c, 0x0, 0x0, @str='\xf5@)\x00'}, @nested={0x96, 0x158, 0x0, 0x1, [@generic="23a44c6c2cc307ecab9ff374aae8a9a44f39227094a9442947bdddd3d15c10afc28e5a092e0eb98f920a5901d3", @generic="0ae8865915d3ab62095dd972e7fa1895408fe7ca2607a63b10f532687fb4699342cbef468e7ac01c34e75b0eefdfe76c6095969e15b0ab0d9439a9f200278174eb9f4d00c613f3ab1232a5408a5737e20f066635d464c194d18b78cac38431f7d5bff4b53c"]}, @nested={0x36, 0xdb, 0x0, 0x1, [@generic="bf1f3ee5f4e18359f8855b1c0cc743d2a9524c2f892f419b757d83f13f4f73f661ad9f8d4379127645f54299845ec6faf6fe"]}, @generic="cf53bdceef5db0b967d89a88bb9116db74bc737c15af660df1698eb212ac54f766cdc1ab3feace28ab1c22bc52d2bf11825194a0129454dbc99ebf7fb8849c4d5a5a117a26438e24f3814573f03551a9a3bec3262f3dda5ab80dd7d9469caef59fc475049eceb92a185e4b8101c8fa95d727a0e870147ece4913c6f368c75568d4d3148729ee4fcb46bfc12380549f7cd455c46b98fcce998de88cc09fc422a3a5ddd604405311dc4607b9b22b6f3a"]}, @ETHTOOL_A_CABLE_TEST_TDR_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @ETHTOOL_A_CABLE_TEST_TDR_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfffffffb}]}, @ETHTOOL_A_CABLE_TEST_TDR_CFG={0x18, 0x2, 0x0, 0x1, [@typed={0x14, 0x161, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xe}}}]}, @ETHTOOL_A_CABLE_TEST_TDR_CFG={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x34, 0x0, 0x0, @pid=r13}]}]}, 0x294}, 0x1, 0x0, 0x0, 0x4040}, 0xd3de51cfb61e66a5) statmount$auto(0x0, 0x0, 0x2, 0x800000d) open(0x0, 0x101300, 0x147) readv$auto(0x3, 0x0, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_COALESCE_GET(r14, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001300)={0x2c, r15, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x18}, 0x4004) rseq$auto(0x0, 0x8000, 0x0, 0x6) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2048000}, 0x40000) kexec_load$auto(0x70, 0x2, &(0x7f0000000080)={@kbuf=0x0, 0x0, 0x8000, 0x403000}, 0x4) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) 2m35.869269287s ago: executing program 3 (id=1731): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x2001, 0x0) write$auto(r0, &(0x7f0000000640)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) newfstatat$auto(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)={0x0, 0x4, 0xff, 0xa, 0xffffffffffffffff, 0x0, 0x0, 0x3c, 0x9, 0x3, 0x1f7, 0x8, 0x81, 0xd68, 0x5, 0x6, 0x5}, 0xed) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) poll$auto(0x0, 0x25, 0x109) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) sendmsg$auto_NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x4000000) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop12\x00', 0x80, 0x0) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x89802, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f0000000040)={@raw=0x5, 0x555c, 0xffff, 0x550, "8f9638544ae4bbff000000dbb5a3760f9b6b2c854e49fac493b9ab034dde3b02000000000000008192f5488f", @raw=0x4}) close_range$auto(0x2, 0x8, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto_KEY_REQKEY_DEFL_THREAD_KEYRING(0x7, 0x1, 0x0, 0x0, 0x6) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/modalias\x00', 0x200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000012c0)=""/4128, 0x1020) timerfd_create$auto_CLOCK_REALTIME(0x0, 0x953) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 2m34.540546508s ago: executing program 3 (id=1733): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x1f40) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, 0x0, 0x3892977e, 0x0) mmap$auto(0xfffffffffffffffe, 0x400008, 0xa1, 0x9b72, r0, 0x6) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\xc5(\x13P\x8f\x97\r\xe6\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00\x00\x00\x00\x00\x00\x00', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000001c40)='/sys/kernel/debug/tracing/buffer_size_kb\x00', 0x42802, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socket(0x28, 0x1, 0x0) getsockopt$auto(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="01002a025a000000e70000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4008004}, 0x4880) r5 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/netdevsim/netdevsim1/health/break_health\x00', 0x101, 0x0) write$auto_nsim_dev_health_break_fops_health(r5, &(0x7f0000000280)="fca3a5c8f56e144a4a016cf65685cca8da50fb558aef4568f9de22668bd88f91b2f311060f7ec7c1c82556860d600bbe435bb0e89ddb0844c130ba4e67d94897ad3b73b6f4143208dccef35f47c67e1dac00a9e00161ce4fc3d4d43b1f531ece43581a6feec0f0bea20bbba3582dc2d8dfc5e05bbfa734325a3380de3992baccd572460bd70a6580cf", 0x89) syz_clone3(&(0x7f0000000140)={0x1045100, 0x0, 0x0, 0x0, {0x15}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2m23.424246808s ago: executing program 0 (id=1746): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x1000000001) syz_clone(0x2000300, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x5004000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop13\x00', 0x0, 0x0) r3 = setfsuid$auto(0xee00) r4 = setfsuid$auto(0xee01) setresuid$auto(r3, r4, r3) ioctl$auto_SG_GET_RESERVED_SIZE(r2, 0x4c09, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1e, 0x5, 0xfffffffe, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x219) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) clone$auto(0x7, 0x1, 0x0, 0x0, 0xe) io_uring_setup$auto(0x3, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) sendmsg$auto_NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x21, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x40}, @NL80211_ATTR_TWT_RESPONDER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000814) 2m23.350105597s ago: executing program 0 (id=1747): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ram10\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x29, 0x2, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/kcore\x00', 0x28000, 0x0) pread64$auto(r1, 0x0, 0x840003, 0x2e6c) write$auto_userio_fops_userio(0xffffffffffffffff, &(0x7f0000001200)="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", 0xee0) shmctl$auto_SHM_INFO(0x0, 0xe, &(0x7f0000000400)={{0xfffffffd, 0x0, 0xee00, 0x6, 0x7, 0x10001, 0x9}, 0xfffffbff, 0x7, 0x9, 0xb, @raw=0x68, @inferred=0x0, 0x8, 0x0, 0x0, &(0x7f0000000340)}) sysfs$auto(0x2, 0x100000000000011, 0x0) fsconfig$auto(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) readahead$auto(0xffffffffffffffff, 0x2, 0xff41) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x0, 0x0) lseek$auto(0x3, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0xedfad77e43a82143) r5 = io_uring_setup$auto(0x6, 0x0) r6 = openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/trace_clock\x00', 0x6801, 0x0) shmctl$auto_IPC_INFO(0x5, 0x3, &(0x7f0000000500)={{0xe7, r2, r3, 0xfffffffc, 0xffff, 0x100, 0x7}, 0x40, 0x5, 0x2, 0x8, @inferred=r4, @raw=0xfffffff8, 0x3, 0x0, &(0x7f0000000340)="2f3c14e017a9782b0ec83c96e1decb2c2fb5850b638587eb77a61a398672a0a1cec43d5a896f761937b14813e5e4eba89c47732bb58be13d574b25c3bf04d7b48cb72db4e963c0d667e3d077ce1b659f69e3baee50eb76ec1899852ae120298c10019766f003cce6fc79be4a8b00e2ac72bbd6722277037cc440e8cd020a19ab3f3bb2cad861d27c043bbb35d7838ee3", &(0x7f0000000480)="6b4c96962a185c864f5ac26c6a24d38074b7be69d76a2248e8a012e3d2be5503ffd82a481e881c3c37d7dfefb52b6bb2b3ac4fec9c9d21a162924d6d3b6595655b399b56"}) ioctl$auto_FS_IOC_FSGETXATTR(r6, 0x801c581f, 0x5) io_uring_register$auto(r5, 0x1, &(0x7f00000002c0)="8b1b3f05ead2c07ea7850000b8ed5c1822e5a582a0bfea1f3be154baecdf4a73d7fb9e5c88e1c0c27bf2cbeaa867e06eb7dc2043c683c30db06481eacf66b948e8bb1f2059b700"/84, 0x3) syz_clone(0x80f400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0xe97f, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x8a240, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x81) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/27u\x00', 0x22202, 0x0) 2m21.769220539s ago: executing program 0 (id=1749): r0 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000300)='/dev/input/mouse0\x00', 0x1, 0x0) close_range$auto(0xffffffffffffffff, r0, 0xdf9b) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.5/usb20/rx_lanes\x00', 0x20ac00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000001c00)=""/4111, 0x100f) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) ioctl$auto_SNDCTL_SYNTH_MEMAVL(0xffffffffffffffff, 0xc004510e, &(0x7f0000000280)) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000500), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_TCP_METRICS_CMD_DEL(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="00bbacd5", @ANYRES16=r5, @ANYRESDEC=r2], 0x14}, 0x1, 0x0, 0x0, 0x8014}, 0x840) sendmsg$auto_TCP_METRICS_CMD_GET(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="003e28bd7000fbdbdf250169ba3bbb488998c18fd0982600000008000100ac1414f6ffff2b8ab737243e178700"/54], 0x30}}, 0x4880) sendmsg$auto_NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000ffdbdf251900000004000600"/30], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000001) sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x4000085) msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, 0x0) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram9\x00', 0x800, 0x0) openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000680)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/inject\x00', 0x8340, 0x0) ioctl$auto_BLKGETSIZE(r6, 0x1260, 0x0) setfsuid$auto(0xee00) socket(0x2, 0x3, 0x100) add_key$auto_KEY_SPEC_REQKEY_AUTH_KEY(&(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy2/long_retry_limit\x00', 0x0, 0x0, 0x3, 0xfffffffffffffff9) timer_settime$auto(0x8, 0xffff, &(0x7f00000002c0)={{0x5, 0x9375}, {0x8, 0x185}}, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x0, 0x6, 0x3, 0x3ff) 2m20.783410464s ago: executing program 0 (id=1751): prctl$auto_PR_SET_SYSCALL_USER_DISPATCH(0x3b, 0x401, 0x9808, 0x4, 0x800) prctl$auto_PR_SET_SYSCALL_USER_DISPATCH(0x3b, 0x94, 0xff, 0x8, 0x80000001) prctl$auto_PR_SET_SYSCALL_USER_DISPATCH(0x3b, 0x100000001, 0x8, 0x4, 0x101) prctl$auto_PR_SET_SYSCALL_USER_DISPATCH(0x3b, 0xfffffffffffffffc, 0x10, 0x9, 0xc) prctl$auto_PR_SET_SYSCALL_USER_DISPATCH(0x3b, 0x3, 0xa, 0x8, 0x7fffffff) prctl$auto_PR_SET_SYSCALL_USER_DISPATCH(0x3b, 0x8000, 0x0, 0xfffffffffffffffe, 0x0) prctl$auto_PR_SET_SYSCALL_USER_DISPATCH(0x3b, 0x0, 0xfffffffffffffffe, 0x3, 0x5) prctl$auto_PR_SET_SYSCALL_USER_DISPATCH(0x3b, 0x8, 0x2, 0x7f, 0x6) prctl$auto_PR_SET_SYSCALL_USER_DISPATCH(0x3b, 0x8, 0x81, 0x4, 0x165edfd6) prctl$auto_PR_SET_SYSCALL_USER_DISPATCH(0x3b, 0xa, 0x5, 0x5db, 0x5) prctl$auto_PR_SET_SYSCALL_USER_DISPATCH(0x3b, 0x9, 0xffffffff, 0x7, 0x5) prctl$auto_PR_SET_SYSCALL_USER_DISPATCH(0x3b, 0x5, 0x8, 0x7c, 0x7) prctl$auto_PR_SET_SYSCALL_USER_DISPATCH(0x3b, 0xb95, 0x100000000, 0x800, 0x1) prctl$auto_PR_SET_SYSCALL_USER_DISPATCH(0x3b, 0x4, 0x9, 0x2, 0x1) prctl$auto_PR_SET_SYSCALL_USER_DISPATCH(0x3b, 0x2, 0x0, 0x7, 0x100) prctl$auto_PR_SET_SYSCALL_USER_DISPATCH(0x3b, 0x8, 0x40, 0x10001, 0x8) prctl$auto_PR_SET_SYSCALL_USER_DISPATCH(0x3b, 0x9dc, 0x3, 0x5, 0x6) prctl$auto_PR_SET_SYSCALL_USER_DISPATCH(0x3b, 0x1000, 0x3, 0x1, 0x3) prctl$auto_PR_SET_SYSCALL_USER_DISPATCH(0x3b, 0x0, 0x100, 0x6, 0x1) prctl$auto_PR_SET_SYSCALL_USER_DISPATCH(0x3b, 0x22c, 0x1, 0x5cc, 0x526) prctl$auto_PR_SET_SYSCALL_USER_DISPATCH(0x3b, 0x800000000, 0xcfd7, 0x9, 0x0) prctl$auto_PR_SET_SYSCALL_USER_DISPATCH(0x3b, 0x10000, 0x8, 0x9, 0x8) prctl$auto_PR_SET_SYSCALL_USER_DISPATCH(0x3b, 0xdaec, 0x0, 0x94, 0x3ff) prctl$auto_PR_SET_SYSCALL_USER_DISPATCH(0x3b, 0x1, 0xf9e3, 0xe, 0x1) prctl$auto_PR_SET_SYSCALL_USER_DISPATCH(0x3b, 0x8000, 0xc, 0x0, 0x1) prctl$auto_PR_SET_SYSCALL_USER_DISPATCH(0x3b, 0x4f7, 0x1, 0x1, 0xb41d) prctl$auto_PR_SET_SYSCALL_USER_DISPATCH(0x3b, 0x6, 0x1000, 0xb, 0x6) prctl$auto_PR_SET_SYSCALL_USER_DISPATCH(0x3b, 0x8001, 0xfffffffffffffffb, 0x4, 0x6) prctl$auto_PR_SET_SYSCALL_USER_DISPATCH(0x3b, 0x1, 0x200, 0x4, 0x7) prctl$auto_PR_SET_SYSCALL_USER_DISPATCH(0x3b, 0x2, 0x3, 0x7, 0x7) 2m19.006712779s ago: executing program 32 (id=1733): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x1f40) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, 0x0, 0x3892977e, 0x0) mmap$auto(0xfffffffffffffffe, 0x400008, 0xa1, 0x9b72, r0, 0x6) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\xc5(\x13P\x8f\x97\r\xe6\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00\x00\x00\x00\x00\x00\x00', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000001c40)='/sys/kernel/debug/tracing/buffer_size_kb\x00', 0x42802, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socket(0x28, 0x1, 0x0) getsockopt$auto(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="01002a025a000000e70000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4008004}, 0x4880) r5 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/netdevsim/netdevsim1/health/break_health\x00', 0x101, 0x0) write$auto_nsim_dev_health_break_fops_health(r5, &(0x7f0000000280)="fca3a5c8f56e144a4a016cf65685cca8da50fb558aef4568f9de22668bd88f91b2f311060f7ec7c1c82556860d600bbe435bb0e89ddb0844c130ba4e67d94897ad3b73b6f4143208dccef35f47c67e1dac00a9e00161ce4fc3d4d43b1f531ece43581a6feec0f0bea20bbba3582dc2d8dfc5e05bbfa734325a3380de3992baccd572460bd70a6580cf", 0x89) syz_clone3(&(0x7f0000000140)={0x1045100, 0x0, 0x0, 0x0, {0x15}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2m18.798779471s ago: executing program 0 (id=1754): io_uring_register$auto_IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0x25, &(0x7f0000000280), 0x1) r0 = openat$auto_sc_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000040), 0x8a0001, 0x0) pread64$auto(r0, 0x0, 0xffffffffffffffff, 0x3a) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYRES16, @ANYRES32, @ANYRES8=r0, @ANYRESOCT], 0x34}, 0x1, 0x0, 0x0, 0x400c01d}, 0x8040001) syz_genetlink_get_family_id$auto_psample(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_PSAMPLE_CMD_GET_GROUP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1810000}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)={0x5fa5, 0x0, 0x2, 0x70bd2e, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2004c000}, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) ioctl$auto_EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) unshare$auto(0x2) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r2 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r3 = fcntl$auto_F_GETOWN(0xffffffffffffffff, 0x9, 0xb4) setpriority$auto_PRIO_PGRP(0x1, r3, 0x200) msgctl$auto_IPC_STAT(0x5f, 0x2, &(0x7f0000000180)={{0x8, 0x0, 0x0, 0x3, 0x100, 0x5, 0x2}, &(0x7f0000000380)=0x53, &(0x7f0000000080)=0x5, 0xfffffffffffffffd, 0x17aa, 0x7b, 0x4, 0x8, 0x8, 0x9, 0x27, @inferred, @raw=0x3}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/cpu0/topology/core_id\x00', 0x101000, 0x0) keyctl$auto(0x8, 0x1, r4, 0x0, 0x100000001) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x20080, 0x100) fspick$auto(r5, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x5) adjtimex$auto(&(0x7f0000000200)={0x5f98, 0x0, 0x2, 0x2000000a, 0xff7d, 0xbc58, 0x4000005, 0x0, 0x5, 0x8, 0x80000000, {0x7ff, 0xf423f}, 0x2744, 0x200000001, 0xff, 0x7, 0x0, 0x3c8, 0x8, 0x8, 0xffffffffffffffff, 0x1560cc85, 0x9}) r6 = ioctl$auto_SW_SYNC_GET_DEADLINE(r2, 0xc0105702, 0x0) keyctl$auto(0x1f, r4, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) sendmsg$auto_NL802154_CMD_SET_SHORT_ADDR(r6, 0x0, 0x4040804) 2m15.897349491s ago: executing program 0 (id=1758): unshare$auto(0x40000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = getpgid$auto(0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000002a00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000029c0)={&(0x7f0000002a40)={0x128, 0x0, 0x100, 0x70bd29, 0x6, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x8c6f}, @NL802154_ATTR_PEER={0x10, 0x28, 0x0, 0x1, [@nested={0x8, 0x11, 0x0, 0x1, [@nested={0x4, 0x41}]}, @typed={0x4, 0xac}]}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@generic="97c540b51a07b81dca6f1523f9fd011ce753c5ff291fb372", @nested={0x4, 0x72, 0x0, 0x1, [@generic]}, @nested={0x4, 0x8ff}]}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x9}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x7}, @NL802154_ATTR_SCAN_TYPE={0x5, 0x1f, 0x7}, @NL802154_ATTR_SEC_DEVKEY={0xb7, 0x2f, 0x0, 0x1, [@typed={0x8, 0x9e, 0x0, 0x0, @pid=r1}, @generic="c250aa47cd09531fadbec2bb2e08b12ef916f9f35bceaf7ffc74fa7811cb82d379e811073fb190b9615e4c5ef86f23d02d098058e3d203cd268b3147bdd09e641e9e5ffbb8becea8f6e16beb106d6e8dda99cf13802d3465e2c4086a63164d6b891bbc2feb832c3d89d504a7c21406eab40ae0287e851b5d441c24b90b0f892f8d3844743840eca80e6427d4e395a59748aa120a0be9b07bb1bf6dc354e1d35b76734e", @typed={0x8, 0x4d, 0x0, 0x0, @fd=r0}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x82) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000240), 0xffffffffffffffff) socket(0xf, 0x3, 0x2) mmap$auto(0x0, 0x4005, 0xb, 0x40eb2, 0x401, 0x300000000000) preadv$auto(0xffffffffffffffff, 0x0, 0x7, 0x7, 0x402) madvise$auto(0x110c230000, 0x8031ca, 0x9) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x40100, 0x0) read$auto_proc_pagemap_operations_internal(r2, &(0x7f0000001540)=""/209, 0xd1) unshare$auto(0x40000080) socket(0x2, 0xf, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/admmidi2\x00', 0x200143, 0x0) write$auto(r0, &(0x7f0000000280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03cY\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x95s.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x04]@\xb3\"\xae\xb3=\xad\x8a\xa6q\xb4\xc5\xa8exA|\xe8.', 0x100000a3d9) unshare$auto(0x40000080) timer_create$auto(0x8, &(0x7f0000000200)={@sival_int=0x8, @inferred, 0x1}, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x40, 0x0) ioctl$auto_SOUND_PCM_READ_CHANNELS(r3, 0x80045006, 0x0) openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000040), 0x101002, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x0, 0x0) ioctl$auto_SG_SET_RESERVED_SIZE2(r4, 0x2275, 0x0) 4.0225834s ago: executing program 2 (id=1922): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x7) mkdir$auto(&(0x7f0000000080)='./file0\x00', 0x1) rmdir$auto(&(0x7f0000000280)='./file0\x00') unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x10000000028000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x502, 0x0) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x5, 0x7, 0x6, 0x1f2, 0x9, 0xe8, 0x400000000ff, 0xa, 0x4, 0xaab, 0x5, 0x7]}, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r0 = pidfd_open$auto(0x1, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f00000001c0)="61a280226046bd2d42c1446da47d434bb2370ed4ea3455a7095ba3a3dbbbe561169b2c7505155296d3412daec0748c4142c37471fe5ebf71c18b4cbeb3b1d61ec734f1be12996a1a448de18bbcb640ed91afeb61e3a79a7c000fbbcf18d8592ce69ef42d403824f95191ce10691610e37c8b1c39139d433fe6a07a4072736f7da8d12933f851b8668bfe4c3fc5bbd8a9f5430d7fcb537acc00e9e3f24ae4bcfcdaf5498f6a3d928aeeef7f66b21400186b9a3f89a7ef8e0e1d3852ce3335f958af008910bf0de56d60d3f8ad1e694dcb44f6aa2b49a8337babe88034752259b08302c50ee5a894c78bc8cd245d", 0xed) r1 = openat$auto_supply_map_fops_(0xffffffffffffff9c, &(0x7f0000000200), 0x8400, 0x0) sendmsg$auto_TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x4, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_NAME_TABLE={0x4}, @TIPC_NLA_NAME_TABLE={0x0, 0x8, 0x0, 0x1, [@nested={0x0, 0x71, 0x0, 0x1, [@typed={0x0, 0x108, 0x0, 0x0, @str='vcan0\x00'}, @generic="0a9ea314dbfb94e97ddc9a9bcc75ba2ec7", @nested={0x0, 0xb2}, @generic="946b6df8783ecd384443acb3202be68cf987f5d4551356156b9b04a1ced75ce3d91024248c9dbec8e2e7b2df580b7a86b254743e6beb97cdd63a7370df4c1b77e38f634dd9ea119e6c5a56f981247f5b2eb7359fd53d3c55ae61a1ee3c3ced9f3421d2a56f097d61ac1a4422"]}, @typed={0x0, 0xa, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x44}}, @nested={0x0, 0x150, 0x0, 0x1, [@typed={0x0, 0x22, 0x0, 0x0, @fd=r0}]}, @nested={0x0, 0x50, 0x0, 0x1, [@nested={0x0, 0xe0}, @typed={0x0, 0x118, 0x0, 0x0, @u32=0xfffffff8}, @generic="0b19ff36658c30ee64d92fe2bb59ffc6547d4abcc57d76bff28d6cd82317fabb71e0f163d46fa209e63547eeaf71aa4828eb926f307efc5cb5aa29d6de3625fbe0098aeeabdb0b3fc522343121c21a84c9cfa695f896133e242aa25088c0931e2d7a58956f7cb2f473004cd211a81be5de", @typed={0x0, 0x2f, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x16}}, @generic="9a5bf0cfd4429d3dd74c41585b0d3bec5af89a5027123cd92a66a8eaa874955008c6a25606cb627c00354fc1d1b63575970c78e7f730249f56bb8d432e4e754fd4a74904fc5aaa2a0473fe2f3292f7f5ab2897c0a9edf73b622eea801200c6c6dd8ada8e5b3cf46516d33074c75920aa4809c9379f4a7ea307bf9b5142", @generic="0ef232f950008016a8e1fd11008ec999b2195e5a3ec3d6fb8653deb6fe51a67c41470c3f9ec0c0c9e2f99227fb973834f11edcc1768b85967d054de64580f48db69e9a14b31f483869f0b00069b1e0bd81398595829135e268bfca5d8834b6d40db6972586ffe83514a76ac5424afe170f36a4a328dc583ff89bf0f020fcbc04c20c67ffea5365c9fd69dfbe0a0e4d18f8ca2b233913a6b148fc58", @nested={0x0, 0x25}]}, @typed={0x0, 0x9f, 0x0, 0x0, @fd=r1}, @generic="036d0c231f13e134ebc8d1adaa545077f4214ab4c3ced71939c78b526876b3bef55bd87c6dee096fc63797ba42a53d987baba4b36ba7d3270971ad7798da0abee770803413129b57f8ef6ef02beee4614544b3bbefb603433444bbececebc50c64f5f589d15f6feeb630de66d8dc800f2d1b9687e9585fb4e89488ea889114c55f44135a3a416e6fae469dcc242a62389f563d305815", @generic="f4de9548e5b32d258448d447264341e5d9af204171c827777bda674c31335efee6164d700444d267cb6fed7db2662e99ea9d24e6336f53eb15baca4ad36f4d29ebed3dbedd7558def5ef482e4f42f77ee27f7fe3698eff652788f3eef4cd426f85285a88", @typed={0x0, 0x137}, @generic="730756033cbe059dae3d25ba9d134ae72b9db84c7c58f0b0", @nested={0x0, 0x127, 0x0, 0x1, [@nested={0x0, 0x90}, @typed={0x0, 0x4c, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x42}}, @nested={0x0, 0xf3}]}]}, @TIPC_NLA_UNSPEC]}, 0x18}, 0x1, 0x0, 0x0, 0x8010}, 0x4000840) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) setitimer$auto(0x2, &(0x7f0000000040)={{0x0, 0x5}, {0x0, 0x8}}, 0x0) setitimer$auto_ITIMER_PROF(0x2, 0x0, 0x0) r3 = socket(0x1d, 0x6, 0x1) sendmsg$auto_NL802154_CMD_LIST_ASSOCIATIONS(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0xc}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x64004) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 3.138429269s ago: executing program 2 (id=1923): r0 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000300)='/dev/input/mouse0\x00', 0x1, 0x0) close_range$auto(0xffffffffffffffff, r0, 0xdf9b) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.5/usb20/rx_lanes\x00', 0x20ac00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000001c00)=""/4111, 0x100f) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) ioctl$auto_SNDCTL_SYNTH_MEMAVL(0xffffffffffffffff, 0xc004510e, &(0x7f0000000280)="c97ce1a48c50ac2344cfd7c9") select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000500), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_TCP_METRICS_CMD_DEL(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="00bbacd5", @ANYRES16=r5, @ANYRESDEC=r2], 0x14}, 0x1, 0x0, 0x0, 0x8014}, 0x840) sendmsg$auto_TCP_METRICS_CMD_GET(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="003e28bd7000fbdbdf250169ba3bbb488998c18fd0982600000008000100ac1414f6ffff2b8ab737243e178700"/54], 0x30}}, 0x4880) sendmsg$auto_NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000ffdbdf251900000004000600"/30], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000001) r6 = socket(0x28, 0x1, 0x0) sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x4000085) msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, &(0x7f0000000180)={{0x80000000, 0xee01, 0xee01, 0xfff, 0xc, 0x40, 0x7}, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x8, 0x7ff, 0x3ff, 0x5, 0xa, 0xf9eb, 0x4, 0x3, 0x3ff, @inferred=0xffffffffffffffff, @raw=0x7fffffff}) r7 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram9\x00', 0x800, 0x0) openat$auto_event_inject_fops_trace(0xffffffffffffff9c, 0x0, 0x8340, 0x0) ioctl$auto_BLKGETSIZE(r7, 0x1260, 0x0) setfsuid$auto(0xee00) socket(0x2, 0x3, 0x100) add_key$auto_KEY_SPEC_REQKEY_AUTH_KEY(&(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy2/long_retry_limit\x00', 0x0, 0x0, 0x3, 0xfffffffffffffff9) timer_settime$auto(0x8, 0xffff, &(0x7f00000002c0)={{0x5, 0x9375}, {0x8, 0x185}}, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x0, 0x6, 0x3, 0x3ff) 2.239254515s ago: executing program 2 (id=1924): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) r1 = socket(0x10, 0x2, 0xf) bpf$auto(0x0, &(0x7f0000000080)=@bpf_attr_4={0x1e, r1, 0xffffffff}, 0xd) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x4000085) msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, &(0x7f0000000180)={{0x80000000, 0xee01, 0xee01, 0xfff, 0xc, 0x40, 0x7}, &(0x7f0000000040)=0x1, &(0x7f0000000400)=0x8, 0x802, 0x3ff, 0x5, 0xa, 0xf9eb, 0x4, 0x2, 0x3ff, @inferred=0xffffffffffffffff, @raw=0x7fffffff}) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop12\x00', 0x80, 0x0) ioctl$auto_BLKGETSIZE(r4, 0x1260, 0x0) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC0\x00', 0x89802, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REMOVE(r5, 0xc0405519, &(0x7f0000000040)={@raw=0x5, 0x555c, 0xffff, 0x8, "8f9638544ae4bbff000000dbb5a3760f9b6b2c854e49fac493b9ab034dde3b02000000000000008192f5488f", @raw=0x3}) close_range$auto(r1, r2, 0x0) socket(0x27, 0x4, 0x101) socket(0x2, 0x1, 0x0) keyctl$auto(0x1c, 0x1, 0x6, r3, 0x3ff) creat$auto(&(0x7f0000000080)='./file0\x00', 0x58) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000200)={{@inferred, 0x8, 0x5, 0x2, "f8ef6c1c79da6204bef65c6e4e4ed40b3a01d5bc6b51a9dbfd0374a1b0b3e232551ee254ceadf6c5baaea715", @raw=0x1}, 0x9, 0x11, 0x8376, @raw=0x1, @integer64={0x2, 0x7, 0x7fff}, "ad23d68574c0eb58174981074b35735c7e63d3203809c9ad557433485da9529e191e6720c60c00cda0371a87df6508e0ddf4249d38c3dc34d7896a97751f016b"}) ioctl$auto_BLKTRACESETUP2(0xffffffffffffffff, 0xc0481273, &(0x7f0000000300)={"3cbaef38c2291a07e381cefc27c8884a0095257b09753199fe0c58e183b8a795", 0x7f, 0x5, 0x3ff, 0x1, 0x40}) sigaltstack$auto(0x0, &(0x7f0000000440)={&(0x7f0000000540)="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", 0x9, 0x8}) ppoll$auto(0x0, 0x7f, 0x0, &(0x7f00000001c0)={0x5}, 0x8) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs\x00\x00', 0x200, &(0x7f00000001c0)) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000240)=""/213, 0xd5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) 1.323711778s ago: executing program 2 (id=1925): r0 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000300)='/dev/input/mouse0\x00', 0x1, 0x0) close_range$auto(0xffffffffffffffff, r0, 0xdf9b) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.5/usb20/rx_lanes\x00', 0x20ac00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000001c00)=""/4111, 0x100f) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) ioctl$auto_SNDCTL_SYNTH_MEMAVL(0xffffffffffffffff, 0xc004510e, &(0x7f0000000280)="c97ce1a48c50ac2344cfd7c9") select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000500), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_TCP_METRICS_CMD_DEL(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="00bbacd5", @ANYRES16=r5, @ANYRESDEC=r2], 0x14}, 0x1, 0x0, 0x0, 0x8014}, 0x840) sendmsg$auto_TCP_METRICS_CMD_GET(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="003e28bd7000fbdbdf250169ba3bbb488998c18fd0982600000008000100ac1414f6ffff2b8ab737243e178700"/54], 0x30}}, 0x4880) sendmsg$auto_NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000ffdbdf251900000004000600"/30], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000001) socket(0x28, 0x1, 0x0) msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, 0x0) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram9\x00', 0x800, 0x0) openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000680)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/inject\x00', 0x8340, 0x0) ioctl$auto_BLKGETSIZE(r6, 0x1260, 0x0) setfsuid$auto(0xee00) socket(0x2, 0x3, 0x100) add_key$auto_KEY_SPEC_REQKEY_AUTH_KEY(&(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy2/long_retry_limit\x00', 0x0, 0x0, 0x3, 0xfffffffffffffff9) timer_settime$auto(0x8, 0xffff, &(0x7f00000002c0)={{0x5, 0x9375}, {0x8, 0x185}}, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x0, 0x6, 0x3, 0x3ff) 429.831871ms ago: executing program 2 (id=1926): unshare$auto(0x40000080) quotactl$auto(0x100, &(0x7f0000000140)='/dev/ram7\x00', 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x3) close_range$auto(0x0, 0xffffffffffffffff, 0x0) r2 = socket(0x2, 0x2, 0x1) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x1f, r2, 0x1000000}, 0x10) 0s ago: executing program 2 (id=1927): io_uring_register$auto_IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0x25, &(0x7f0000000280), 0x1) r0 = openat$auto_sc_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000040), 0x8a0001, 0x0) pread64$auto(r0, 0x0, 0xffffffffffffffff, 0x3a) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYRES16, @ANYRES32, @ANYRES8=r0, @ANYRESOCT], 0x34}, 0x1, 0x0, 0x0, 0x400c01d}, 0x8040001) syz_genetlink_get_family_id$auto_psample(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_PSAMPLE_CMD_GET_GROUP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1810000}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)={0x5fa5, 0x0, 0x2, 0x70bd2e, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2004c000}, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) ioctl$auto_EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) unshare$auto(0x2) r2 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/cgroup\x00', 0x0, 0x0) read$auto_proc_single_file_operations_base(r2, &(0x7f0000000ac0)=""/4096, 0x1000) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r3 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r4 = fcntl$auto_F_GETOWN(0xffffffffffffffff, 0x9, 0xb4) setpriority$auto_PRIO_PGRP(0x1, r4, 0x200) msgctl$auto_IPC_STAT(0x5f, 0x2, &(0x7f0000000180)={{0x8, 0x0, 0x0, 0x3, 0x100, 0x5, 0x2}, &(0x7f0000000380)=0x53, &(0x7f0000000080)=0x5, 0xfffffffffffffffd, 0x17aa, 0x7b, 0x4, 0x8, 0x8, 0x9, 0x27, @inferred, @raw=0x3}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/cpu0/topology/core_id\x00', 0x101000, 0x0) keyctl$auto(0x8, 0x1, r5, 0x0, 0x100000001) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x20080, 0x100) fspick$auto(r6, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x5) adjtimex$auto(&(0x7f0000000200)={0x5f98, 0x0, 0x2, 0x2000000a, 0xff7d, 0xbc58, 0x4000005, 0x0, 0x5, 0x8, 0x80000000, {0x7ff, 0xf423f}, 0x2744, 0x200000001, 0xff, 0x7, 0x0, 0x3c8, 0x8, 0x8, 0xffffffffffffffff, 0x1560cc85, 0x9}) r7 = ioctl$auto_SW_SYNC_GET_DEADLINE(r3, 0xc0105702, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) sendmsg$auto_NL802154_CMD_SET_SHORT_ADDR(r7, 0x0, 0x4040804) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.69' (ED25519) to the list of known hosts. [ 77.011848][ T5607] cgroup: Unknown subsys name 'net' [ 77.102191][ T5607] cgroup: Unknown subsys name 'cpuset' [ 77.111804][ T5607] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.609407][ T5607] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.575398][ T5625] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.579187][ T5625] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.580896][ T5621] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.583752][ T5631] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.591308][ T5633] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.591547][ T5631] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.591883][ T5631] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.592178][ T5633] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.593952][ T5631] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.594011][ T5633] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.594382][ T5631] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.594715][ T5631] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.595546][ T5631] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.596207][ T5631] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.607418][ T5633] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.608413][ T5633] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.625091][ T5624] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.625492][ T5624] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.630339][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.630573][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.415403][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.415522][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.417408][ T5618] bridge_slave_0: entered allmulticast mode [ 82.419618][ T5618] bridge_slave_0: entered promiscuous mode [ 82.425228][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.425331][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.426053][ T5620] bridge_slave_0: entered allmulticast mode [ 82.427924][ T5620] bridge_slave_0: entered promiscuous mode [ 82.431849][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.431950][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.432098][ T5620] bridge_slave_1: entered allmulticast mode [ 82.433911][ T5620] bridge_slave_1: entered promiscuous mode [ 82.498082][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.498923][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.499067][ T5618] bridge_slave_1: entered allmulticast mode [ 82.500778][ T5618] bridge_slave_1: entered promiscuous mode [ 82.528927][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.564747][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.581842][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.582082][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.582219][ T5627] bridge_slave_0: entered allmulticast mode [ 82.584269][ T5627] bridge_slave_0: entered promiscuous mode [ 82.588477][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.588578][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.590022][ T5627] bridge_slave_1: entered allmulticast mode [ 82.591885][ T5627] bridge_slave_1: entered promiscuous mode [ 82.597519][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.645586][ T5625] Bluetooth: hci2: command tx timeout [ 82.646103][ T4936] Bluetooth: hci1: command tx timeout [ 82.669747][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.669958][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.670055][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.670439][ T5619] bridge_slave_0: entered allmulticast mode [ 82.672557][ T5619] bridge_slave_0: entered promiscuous mode [ 82.677677][ T5620] team0: Port device team_slave_0 added [ 82.680347][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.682069][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.682479][ T5619] bridge_slave_1: entered allmulticast mode [ 82.684334][ T5619] bridge_slave_1: entered promiscuous mode [ 82.689526][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.719109][ T4936] Bluetooth: hci0: command tx timeout [ 82.722937][ T4936] Bluetooth: hci3: command tx timeout [ 82.732211][ T5620] team0: Port device team_slave_1 added [ 82.766276][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.770552][ T5618] team0: Port device team_slave_0 added [ 82.798601][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.803222][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.819660][ T5618] team0: Port device team_slave_1 added [ 82.821151][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.821434][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.821470][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.896873][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.896918][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.896959][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.918363][ T5627] team0: Port device team_slave_0 added [ 82.947882][ T5619] team0: Port device team_slave_0 added [ 82.951805][ T5627] team0: Port device team_slave_1 added [ 82.975985][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.976014][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.976929][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.981221][ T5619] team0: Port device team_slave_1 added [ 82.996998][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.997019][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.997047][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.000168][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.000186][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.000216][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.002786][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.002802][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.002832][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.077805][ T5620] hsr_slave_0: entered promiscuous mode [ 83.079381][ T5620] hsr_slave_1: entered promiscuous mode [ 83.088299][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.088319][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.088347][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.153674][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.153694][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.153741][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.208153][ T5627] hsr_slave_0: entered promiscuous mode [ 83.209507][ T5627] hsr_slave_1: entered promiscuous mode [ 83.210356][ T5627] debugfs: 'hsr0' already exists in 'hsr' [ 83.210455][ T5627] Cannot create hsr debugfs directory [ 83.232785][ T5618] hsr_slave_0: entered promiscuous mode [ 83.233818][ T5618] hsr_slave_1: entered promiscuous mode [ 83.234544][ T5618] debugfs: 'hsr0' already exists in 'hsr' [ 83.234565][ T5618] Cannot create hsr debugfs directory [ 83.357121][ T5619] hsr_slave_0: entered promiscuous mode [ 83.358394][ T5619] hsr_slave_1: entered promiscuous mode [ 83.359760][ T5619] debugfs: 'hsr0' already exists in 'hsr' [ 83.359783][ T5619] Cannot create hsr debugfs directory [ 83.734940][ T5620] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.748197][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.756858][ T5620] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.770153][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.780037][ T5620] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.789744][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.806418][ T5620] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.816127][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.870143][ T5627] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.886188][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.896163][ T5627] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.905918][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.916320][ T5627] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.927719][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.942450][ T5627] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.954706][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.031306][ T5619] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.042615][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.043796][ T5619] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.048252][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.050551][ T5619] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.055900][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.072653][ T5619] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.081305][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.191693][ T5618] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.203002][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.216178][ T5618] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.225714][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.238792][ T5618] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.248392][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.263463][ T5618] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.272664][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.326082][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.379946][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.384758][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.396926][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.397175][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.432019][ T800] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.432457][ T800] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.481961][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.488585][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.507432][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.507576][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.516444][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.516556][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.584698][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.621897][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.622038][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.632280][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.647229][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.676814][ T1015] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.677029][ T1015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.691589][ T1015] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.691707][ T1015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.718929][ T5625] Bluetooth: hci2: command tx timeout [ 84.723632][ T1015] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.723745][ T1015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.731875][ T4936] Bluetooth: hci1: command tx timeout [ 84.799068][ T5625] Bluetooth: hci0: command tx timeout [ 84.807336][ T4936] Bluetooth: hci3: command tx timeout [ 85.652351][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.709234][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.828330][ T5620] veth0_vlan: entered promiscuous mode [ 85.857426][ T5627] veth0_vlan: entered promiscuous mode [ 85.867661][ T5620] veth1_vlan: entered promiscuous mode [ 85.904507][ T5627] veth1_vlan: entered promiscuous mode [ 85.954790][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.990663][ T5620] veth0_macvtap: entered promiscuous mode [ 86.014708][ T5620] veth1_macvtap: entered promiscuous mode [ 86.050939][ T5627] veth0_macvtap: entered promiscuous mode [ 86.074301][ T5627] veth1_macvtap: entered promiscuous mode [ 86.083858][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.091747][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.124938][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.141305][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.176384][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.200519][ T5619] veth0_vlan: entered promiscuous mode [ 86.253085][ T5619] veth1_vlan: entered promiscuous mode [ 86.266312][ T5618] veth0_vlan: entered promiscuous mode [ 86.325491][ T5618] veth1_vlan: entered promiscuous mode [ 86.345977][ T1015] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.357347][ T800] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.357534][ T800] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.357598][ T800] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.357644][ T800] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.357690][ T800] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.357733][ T800] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.357776][ T800] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.445954][ T5619] veth0_macvtap: entered promiscuous mode [ 86.476438][ T5619] veth1_macvtap: entered promiscuous mode [ 86.493369][ T1015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.493424][ T1015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.547502][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.553516][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.567331][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.567379][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.616134][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.616190][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.633384][ T5618] veth0_macvtap: entered promiscuous mode [ 86.670181][ T5618] veth1_macvtap: entered promiscuous mode [ 86.677515][ T1015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.677562][ T1015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.701124][ T59] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.701199][ T59] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.701260][ T59] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.701307][ T59] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.799319][ T5625] Bluetooth: hci2: command tx timeout [ 86.799444][ T4936] Bluetooth: hci1: command tx timeout [ 86.817135][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.817185][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.848060][ T5620] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 86.881983][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.886481][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.886504][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.889527][ T5625] Bluetooth: hci0: command tx timeout [ 86.889611][ T4936] Bluetooth: hci3: command tx timeout [ 86.895566][ T30] cfg80211: failed to load regulatory.db [ 86.905573][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.976339][ T1015] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.977063][ T1015] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.140870][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.140959][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.192205][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.192249][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.303375][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.303424][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.604052][ T5798] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 88.878881][ T5625] Bluetooth: hci2: command tx timeout [ 88.878959][ T4936] Bluetooth: hci1: command tx timeout [ 88.960190][ T5625] Bluetooth: hci0: command tx timeout [ 88.960268][ T4936] Bluetooth: hci3: command tx timeout [ 93.989497][ T5884] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 93.997846][ T5882] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 100.464725][ T5969] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 132.960841][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.960970][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.402986][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.410040][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 206.729511][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 206.729582][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 206.729610][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 206.729656][ T5621] Bluetooth: hci1: command 0x0406 tx timeout [ 255.842540][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.849024][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.294592][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.302190][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.666849][ T8806] process 'syz.0.400' launched ':,' with NULL argv: empty string added [ 378.722715][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.727839][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.162460][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.162543][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.601852][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.602769][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.042915][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.049451][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.480086][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.480159][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 672.630477][T13736] Zero length message leads to an empty skb [ 685.920997][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.927444][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.370579][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.378254][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.801578][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.801671][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.243091][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.249970][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.680225][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.688448][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 958.323505][T18051] FAULT_INJECTION: forcing a failure. [ 958.323505][T18051] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 958.323669][T18051] CPU: 0 UID: 0 PID: 18051 Comm: syz.1.1638 Not tainted syzkaller #0 PREEMPT(full) [ 958.323701][T18051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 958.323728][T18051] Call Trace: [ 958.323774][T18051] [ 958.323784][T18051] dump_stack_lvl+0x100/0x190 [ 958.323906][T18051] should_fail_ex.cold+0x5/0xa [ 958.323958][T18051] _copy_to_user+0x32/0xd0 [ 958.324091][T18051] simple_read_from_buffer+0xcb/0x170 [ 958.324180][T18051] proc_fail_nth_read+0x1af/0x230 [ 958.324331][T18051] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 958.324377][T18051] ? rw_verify_area+0xce/0x6d0 [ 958.324472][T18051] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 958.324512][T18051] vfs_read+0x1e4/0xb40 [ 958.324553][T18051] ? lock_acquire+0x1d1/0x380 [ 958.324604][T18051] ? __fget_files+0x34/0x3d0 [ 958.324685][T18051] ? __pfx_vfs_read+0x10/0x10 [ 958.324722][T18051] ? find_held_lock+0x2b/0x80 [ 958.324749][T18051] ? __fget_files+0x215/0x3d0 [ 958.324782][T18051] ? __fget_files+0x21f/0x3d0 [ 958.324817][T18051] ksys_read+0x12a/0x250 [ 958.324841][T18051] ? __pfx_ksys_read+0x10/0x10 [ 958.324876][T18051] do_syscall_64+0x121/0x770 [ 958.325005][T18051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.325044][T18051] RIP: 0033:0x7fbb15f5e98e [ 958.325073][T18051] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 958.325102][T18051] RSP: 002b:00007fbb141f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 958.325196][T18051] RAX: ffffffffffffffda RBX: 00007fbb141f66c0 RCX: 00007fbb15f5e98e [ 958.325214][T18051] RDX: 000000000000000f RSI: 00007fbb141f60a0 RDI: 0000000000000003 [ 958.325230][T18051] RBP: 00007fbb141f6090 R08: 0000000000000000 R09: 0000000000000000 [ 958.325245][T18051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 958.325261][T18051] R13: 00007fbb16226038 R14: 00007fbb16225fa0 R15: 00007ffc91a1dab8 [ 958.325296][T18051] [ 964.325373][T18147] FAULT_INJECTION: forcing a failure. [ 964.325373][T18147] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 964.325435][T18147] CPU: 0 UID: 0 PID: 18147 Comm: syz.1.1652 Not tainted syzkaller #0 PREEMPT(full) [ 964.325463][T18147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 964.325475][T18147] Call Trace: [ 964.325482][T18147] [ 964.325491][T18147] dump_stack_lvl+0x100/0x190 [ 964.325532][T18147] should_fail_ex.cold+0x5/0xa [ 964.325566][T18147] _copy_to_user+0x32/0xd0 [ 964.325609][T18147] simple_read_from_buffer+0xcb/0x170 [ 964.325638][T18147] proc_fail_nth_read+0x1af/0x230 [ 964.325680][T18147] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 964.325723][T18147] ? rw_verify_area+0xce/0x6d0 [ 964.325760][T18147] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 964.325800][T18147] vfs_read+0x1e4/0xb40 [ 964.325850][T18147] ? lock_acquire+0x1d1/0x380 [ 964.325883][T18147] ? __fget_files+0x34/0x3d0 [ 964.325909][T18147] ? __pfx_vfs_read+0x10/0x10 [ 964.325946][T18147] ? find_held_lock+0x2b/0x80 [ 964.325972][T18147] ? __fget_files+0x215/0x3d0 [ 964.326004][T18147] ? __fget_files+0x21f/0x3d0 [ 964.326040][T18147] ksys_read+0x12a/0x250 [ 964.326063][T18147] ? __pfx_ksys_read+0x10/0x10 [ 964.326097][T18147] do_syscall_64+0x121/0x770 [ 964.326131][T18147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 964.326159][T18147] RIP: 0033:0x7fbb15f5e98e [ 964.326181][T18147] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 964.326204][T18147] RSP: 002b:00007fbb141f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 964.326228][T18147] RAX: ffffffffffffffda RBX: 00007fbb141f66c0 RCX: 00007fbb15f5e98e [ 964.326246][T18147] RDX: 000000000000000f RSI: 00007fbb141f60a0 RDI: 0000000000000003 [ 964.326262][T18147] RBP: 00007fbb141f6090 R08: 0000000000000000 R09: 0000000000000000 [ 964.326277][T18147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 964.326293][T18147] R13: 00007fbb16226038 R14: 00007fbb16225fa0 R15: 00007ffc91a1dab8 [ 964.326327][T18147] [ 964.522988][T18154] capability: warning: `syz.3.1653' uses 32-bit capabilities (legacy support in use) [ 968.124561][T18217] FAULT_INJECTION: forcing a failure. [ 968.124561][T18217] name failslab, interval 1, probability 0, space 0, times 1 [ 968.124619][T18217] CPU: 0 UID: 0 PID: 18217 Comm: syz.2.1663 Not tainted syzkaller #0 PREEMPT(full) [ 968.124648][T18217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 968.124660][T18217] Call Trace: [ 968.124667][T18217] [ 968.124676][T18217] dump_stack_lvl+0x100/0x190 [ 968.124715][T18217] should_fail_ex.cold+0x5/0xa [ 968.124748][T18217] should_failslab+0xc2/0x120 [ 968.124884][T18217] kmem_cache_alloc_noprof+0x92/0x6a0 [ 968.124948][T18217] ? mas_prev+0xa4/0x100 [ 968.125045][T18217] ? vm_area_alloc+0x1f/0x160 [ 968.125136][T18217] vm_area_alloc+0x1f/0x160 [ 968.125169][T18217] __mmap_region+0x107c/0x32c0 [ 968.125235][T18217] ? find_held_lock+0x2b/0x80 [ 968.125261][T18217] ? ima_match_policy+0x8c4/0x23f0 [ 968.125370][T18217] ? __pfx___mmap_region+0x10/0x10 [ 968.125408][T18217] ? __lock_acquire+0x4c5/0x1ec0 [ 968.125465][T18217] ? process_measurement+0x1567/0x2350 [ 968.125495][T18217] ? __pfx___might_resched+0x10/0x10 [ 968.125529][T18217] ? find_held_lock+0x2b/0x80 [ 968.125554][T18217] ? process_measurement+0x4c8/0x2350 [ 968.125579][T18217] ? process_measurement+0x4c8/0x2350 [ 968.125604][T18217] ? down_write+0x146/0x1f0 [ 968.125700][T18217] ? lock_acquire+0x1d1/0x380 [ 968.125790][T18217] mmap_region+0x5a8/0x6d0 [ 968.125832][T18217] ? __pfx_mmap_region+0x10/0x10 [ 968.125872][T18217] ? shmem_mapping+0xd/0x50 [ 968.125946][T18217] ? __pfx_memfd_check_seals_mmap+0x10/0x10 [ 968.126008][T18217] ? bpf_lsm_mmap_addr+0x9/0x30 [ 968.126100][T18217] ? security_mmap_addr+0x71/0x1e0 [ 968.126184][T18217] ? __get_unmapped_area+0x255/0x3e0 [ 968.126244][T18217] do_mmap+0x12c7/0x1c30 [ 968.126280][T18217] ? lock_acquire+0x1d1/0x380 [ 968.126313][T18217] ? __pfx_do_mmap+0x10/0x10 [ 968.126343][T18217] ? __pfx___might_resched+0x10/0x10 [ 968.126373][T18217] ? bpf_lsm_current_getlsmprop_subj+0x9/0x10 [ 968.126412][T18217] ? security_current_getlsmprop_subj+0x6e/0x130 [ 968.126491][T18217] ? __pfx_down_write_killable+0x10/0x10 [ 968.126532][T18217] vm_mmap_pgoff+0x28d/0x470 [ 968.126593][T18217] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 968.126619][T18217] ? __fget_files+0x215/0x3d0 [ 968.126651][T18217] ? __fget_files+0x21f/0x3d0 [ 968.126684][T18217] ksys_mmap_pgoff+0x3cb/0x610 [ 968.126717][T18217] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 968.126745][T18217] ? fput+0x7c/0x100 [ 968.126774][T18217] ? ksys_write+0x1ac/0x250 [ 968.126797][T18217] ? __pfx_ksys_write+0x10/0x10 [ 968.126826][T18217] __x64_sys_mmap+0x125/0x190 [ 968.126884][T18217] do_syscall_64+0x121/0x770 [ 968.126918][T18217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.126945][T18217] RIP: 0033:0x7fe29f59e159 [ 968.126967][T18217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 968.126990][T18217] RSP: 002b:00007fe2a04bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 968.127016][T18217] RAX: ffffffffffffffda RBX: 00007fe29f825fa0 RCX: 00007fe29f59e159 [ 968.127033][T18217] RDX: 0000000000000ffb RSI: 0000000000000009 RDI: 0000000000000000 [ 968.127048][T18217] RBP: 00007fe2a04bf090 R08: 0000000000000003 R09: 0000000000000000 [ 968.127064][T18217] R10: 0008000000008011 R11: 0000000000000246 R12: 0000000000000001 [ 968.127079][T18217] R13: 00007fe29f826038 R14: 00007fe29f825fa0 R15: 00007ffd3cb566c8 [ 968.127115][T18217] [ 970.424558][T18254] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 970.424713][T18254] vhci_hcd vhci_hcd.2: invalid port number 0 [ 970.600467][T18259] FAULT_INJECTION: forcing a failure. [ 970.600467][T18259] name failslab, interval 1, probability 0, space 0, times 0 [ 970.615331][T18259] CPU: 1 UID: 0 PID: 18259 Comm: syz.3.1672 Not tainted syzkaller #0 PREEMPT(full) [ 970.615370][T18259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 970.615386][T18259] Call Trace: [ 970.615396][T18259] [ 970.615406][T18259] dump_stack_lvl+0x100/0x190 [ 970.615449][T18259] should_fail_ex.cold+0x5/0xa [ 970.615483][T18259] should_failslab+0xc2/0x120 [ 970.615518][T18259] __kmalloc_cache_noprof+0x91/0x6d0 [ 970.615642][T18259] ? find_held_lock+0x2b/0x80 [ 970.615669][T18259] ? alloc_pipe_info+0x10e/0x590 [ 970.615762][T18259] alloc_pipe_info+0x10e/0x590 [ 970.615803][T18259] splice_direct_to_actor+0x78f/0xa30 [ 970.615870][T18259] ? __lock_acquire+0x4c5/0x1ec0 [ 970.615905][T18259] ? __pfx_direct_splice_actor+0x10/0x10 [ 970.615933][T18259] ? __pfx_aa_file_perm+0x10/0x10 [ 970.616040][T18259] ? lock_acquire+0x1d1/0x380 [ 970.616074][T18259] ? get_pid_task+0x2a/0x250 [ 970.616116][T18259] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 970.616152][T18259] ? lock_acquire+0x1d1/0x380 [ 970.616192][T18259] do_splice_direct+0x174/0x240 [ 970.616225][T18259] ? __pfx_do_splice_direct+0x10/0x10 [ 970.616257][T18259] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 970.616290][T18259] ? rw_verify_area+0xce/0x6d0 [ 970.616332][T18259] do_sendfile+0xadc/0xe20 [ 970.616379][T18259] ? __pfx_do_sendfile+0x10/0x10 [ 970.616417][T18259] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 970.616452][T18259] ? __fget_files+0x21f/0x3d0 [ 970.616490][T18259] __x64_sys_sendfile64+0x1d8/0x220 [ 970.616520][T18259] ? ksys_write+0x1ac/0x250 [ 970.616545][T18259] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 970.616588][T18259] do_syscall_64+0x121/0x770 [ 970.616623][T18259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.616652][T18259] RIP: 0033:0x7f504559e159 [ 970.616675][T18259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 970.616699][T18259] RSP: 002b:00007f50437f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 970.616727][T18259] RAX: ffffffffffffffda RBX: 00007f5045825fa0 RCX: 00007f504559e159 [ 970.616745][T18259] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 970.616761][T18259] RBP: 00007f50437f6090 R08: 0000000000000000 R09: 0000000000000000 [ 970.616786][T18259] R10: 0000400000000006 R11: 0000000000000246 R12: 0000000000000001 [ 970.616804][T18259] R13: 00007f5045826038 R14: 00007f5045825fa0 R15: 00007ffc76f5c628 [ 970.616840][T18259] [ 970.815704][T18266] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1673'. [ 974.557307][T18328] FAULT_INJECTION: forcing a failure. [ 974.557307][T18328] name failslab, interval 1, probability 0, space 0, times 0 [ 974.557365][T18328] CPU: 1 UID: 0 PID: 18328 Comm: syz.2.1684 Not tainted syzkaller #0 PREEMPT(full) [ 974.557399][T18328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 974.557416][T18328] Call Trace: [ 974.557425][T18328] [ 974.557436][T18328] dump_stack_lvl+0x100/0x190 [ 974.557485][T18328] should_fail_ex.cold+0x5/0xa [ 974.557520][T18328] should_failslab+0xc2/0x120 [ 974.557554][T18328] __kmalloc_cache_noprof+0x91/0x6d0 [ 974.557595][T18328] ? io_uring_alloc_task_context+0xa7/0x656 [ 974.557666][T18328] io_uring_alloc_task_context+0xa7/0x656 [ 974.557707][T18328] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 974.557749][T18328] ? __pfx_io_uring_alloc_task_context+0x10/0x10 [ 974.557794][T18328] ? lock_acquire+0x1d1/0x380 [ 974.557829][T18328] ? __fget_files+0x34/0x3d0 [ 974.557861][T18328] __io_uring_add_tctx_node.cold+0x15/0x20a [ 974.557906][T18328] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 974.558006][T18328] ? __fget_files+0x21f/0x3d0 [ 974.558040][T18328] __io_uring_add_tctx_node_from_submit+0x89/0x130 [ 974.558083][T18328] __do_sys_io_uring_enter+0x1626/0x1b10 [ 974.558119][T18328] ? irqentry_exit+0x24d/0xa10 [ 974.558150][T18328] ? lockdep_hardirqs_on+0x7d/0x110 [ 974.558179][T18328] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 974.558230][T18328] do_syscall_64+0x121/0x770 [ 974.558262][T18328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.558287][T18328] RIP: 0033:0x7fe29f59e159 [ 974.558308][T18328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 974.558331][T18328] RSP: 002b:00007fe2a049e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 974.558355][T18328] RAX: ffffffffffffffda RBX: 00007fe29f826090 RCX: 00007fe29f59e159 [ 974.558372][T18328] RDX: 0000000080000001 RSI: 0000000000000a84 RDI: 0000000000000003 [ 974.558388][T18328] RBP: 00007fe2a049e090 R08: 0000000000000000 R09: 0000000000000046 [ 974.558403][T18328] R10: 000000000000000a R11: 0000000000000246 R12: 0000000000000001 [ 974.558417][T18328] R13: 00007fe29f826128 R14: 00007fe29f826090 R15: 00007ffd3cb566c8 [ 974.558456][T18328] [ 974.704786][T18335] FAULT_INJECTION: forcing a failure. [ 974.704786][T18335] name failslab, interval 1, probability 0, space 0, times 0 [ 974.704824][T18335] CPU: 1 UID: 0 PID: 18335 Comm: syz.0.1685 Not tainted syzkaller #0 PREEMPT(full) [ 974.704855][T18335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 974.704871][T18335] Call Trace: [ 974.704880][T18335] [ 974.704895][T18335] dump_stack_lvl+0x100/0x190 [ 974.704935][T18335] should_fail_ex.cold+0x5/0xa [ 974.704970][T18335] should_failslab+0xc2/0x120 [ 974.705004][T18335] __kmalloc_cache_noprof+0x91/0x6d0 [ 974.705046][T18335] ? io_uring_alloc_task_context+0xa7/0x656 [ 974.705104][T18335] io_uring_alloc_task_context+0xa7/0x656 [ 974.705149][T18335] ? __pfx_io_uring_alloc_task_context+0x10/0x10 [ 974.705194][T18335] ? lock_acquire+0x1d1/0x380 [ 974.705228][T18335] ? __fget_files+0x34/0x3d0 [ 974.705261][T18335] __io_uring_add_tctx_node.cold+0x15/0x20a [ 974.705306][T18335] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 974.705347][T18335] ? __fget_files+0x21f/0x3d0 [ 974.705382][T18335] __io_uring_add_tctx_node_from_submit+0x89/0x130 [ 974.705424][T18335] __do_sys_io_uring_enter+0x1626/0x1b10 [ 974.705458][T18335] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 974.705493][T18335] ? __fget_files+0x21f/0x3d0 [ 974.705519][T18335] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 974.705554][T18335] ? fput+0x7c/0x100 [ 974.705585][T18335] ? ksys_write+0x1ac/0x250 [ 974.705609][T18335] ? __pfx_ksys_write+0x10/0x10 [ 974.705644][T18335] do_syscall_64+0x121/0x770 [ 974.705679][T18335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.705707][T18335] RIP: 0033:0x7febf319e159 [ 974.705729][T18335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 974.705753][T18335] RSP: 002b:00007febf13d5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 974.705779][T18335] RAX: ffffffffffffffda RBX: 00007febf3426180 RCX: 00007febf319e159 [ 974.705797][T18335] RDX: 000000007ffffffb RSI: 0000000004000007 RDI: 0000000000000003 [ 974.705814][T18335] RBP: 00007febf13d5090 R08: 0000000000000000 R09: 0000000000000005 [ 974.705830][T18335] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 974.705846][T18335] R13: 00007febf3426218 R14: 00007febf3426180 R15: 00007ffc97e07e38 [ 974.705882][T18335] [ 976.379186][T18361] FAULT_INJECTION: forcing a failure. [ 976.379186][T18361] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 976.379244][T18361] CPU: 0 UID: 0 PID: 18361 Comm: syz.3.1688 Not tainted syzkaller #0 PREEMPT(full) [ 976.379273][T18361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 976.379285][T18361] Call Trace: [ 976.379292][T18361] [ 976.379309][T18361] dump_stack_lvl+0x100/0x190 [ 976.379349][T18361] should_fail_ex.cold+0x5/0xa [ 976.379383][T18361] _copy_to_iter+0x1f3/0x1720 [ 976.379426][T18361] ? chacha_block_generic+0x265/0x360 [ 976.379547][T18361] ? __pfx__copy_to_iter+0x10/0x10 [ 976.379592][T18361] ? lockdep_hardirqs_on+0x7d/0x110 [ 976.379622][T18361] ? crng_make_state+0x2b0/0x6c0 [ 976.379733][T18361] get_random_bytes_user+0x17b/0x3d0 [ 976.379773][T18361] ? __pfx_get_random_bytes_user+0x10/0x10 [ 976.379825][T18361] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 976.379858][T18361] ? import_ubuf+0x1b6/0x220 [ 976.379900][T18361] __x64_sys_getrandom+0x183/0x290 [ 976.379938][T18361] ? __pfx___x64_sys_getrandom+0x10/0x10 [ 976.379974][T18361] ? fput+0x7c/0x100 [ 976.380020][T18361] do_syscall_64+0x121/0x770 [ 976.380052][T18361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 976.380079][T18361] RIP: 0033:0x7f504559e159 [ 976.380101][T18361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 976.380125][T18361] RSP: 002b:00007f50437f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 976.380152][T18361] RAX: ffffffffffffffda RBX: 00007f5045825fa0 RCX: 00007f504559e159 [ 976.380169][T18361] RDX: 0000000000000003 RSI: 0000000006000000 RDI: 0000000000000000 [ 976.380185][T18361] RBP: 00007f50437f6090 R08: 0000000000000000 R09: 0000000000000000 [ 976.380201][T18361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 976.380216][T18361] R13: 00007f5045826038 R14: 00007f5045825fa0 R15: 00007ffc76f5c628 [ 976.380251][T18361] [ 979.355921][ T5624] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 979.362866][ T5624] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 979.364538][ T5624] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 979.365497][ T5624] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 979.366130][ T5624] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 979.460589][ T1015] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.723531][ T1015] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.903268][ T1015] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.012665][ T1015] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.850605][ T1015] bridge_slave_1: left allmulticast mode [ 980.850685][ T1015] bridge_slave_1: left promiscuous mode [ 980.853329][ T1015] bridge0: port 2(bridge_slave_1) entered disabled state [ 980.872106][ T1015] bridge_slave_0: left allmulticast mode [ 980.872156][ T1015] bridge_slave_0: left promiscuous mode [ 980.872400][ T1015] bridge0: port 1(bridge_slave_0) entered disabled state [ 981.030502][ T1015] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 981.055713][ T1015] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 981.065950][ T1015] bond0 (unregistering): Released all slaves [ 981.438682][ T5624] Bluetooth: hci1: command tx timeout [ 981.636186][ T1015] hsr_slave_0: left promiscuous mode [ 981.643655][ T1015] hsr_slave_1: left promiscuous mode [ 981.649298][ T1015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 981.649551][ T1015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 981.660732][ T1015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 981.660759][ T1015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 981.680039][ T1015] veth1_macvtap: left promiscuous mode [ 981.680142][ T1015] veth0_macvtap: left promiscuous mode [ 981.680275][ T1015] veth1_vlan: left promiscuous mode [ 981.680379][ T1015] veth0_vlan: left promiscuous mode [ 982.022587][ T1015] team0 (unregistering): Port device team_slave_1 removed [ 982.043469][ T1015] team0 (unregistering): Port device team_slave_0 removed [ 982.580365][ T31] audit: type=1804 audit(1787939781.333:2): pid=18471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1702" name="/newroot/426/file0" dev="tmpfs" ino=2214 res=1 errno=0 [ 983.452164][ T5281] 8021q: adding VLAN 0 to HW filter on device eth1 [ 983.518842][ T5624] Bluetooth: hci1: command tx timeout [ 983.655373][T18411] bridge0: port 1(bridge_slave_0) entered blocking state [ 983.663186][T18411] bridge0: port 1(bridge_slave_0) entered disabled state [ 983.663367][T18411] bridge_slave_0: entered allmulticast mode [ 983.678344][T18411] bridge_slave_0: entered promiscuous mode [ 983.695636][T18411] bridge0: port 2(bridge_slave_1) entered blocking state [ 983.704398][T18411] bridge0: port 2(bridge_slave_1) entered disabled state [ 983.711853][T18411] bridge_slave_1: entered allmulticast mode [ 983.721361][T18411] bridge_slave_1: entered promiscuous mode [ 984.019662][T18411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 984.035601][T18411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 984.130577][T18411] team0: Port device team_slave_0 added [ 984.141088][T18411] team0: Port device team_slave_1 added [ 984.296135][T18411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 984.305608][T18411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 984.331807][T18411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 984.378694][T18411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 984.385848][T18411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 984.413393][T18411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 985.379238][T18411] hsr_slave_0: entered promiscuous mode [ 985.391996][T18411] hsr_slave_1: entered promiscuous mode [ 985.400244][T18411] debugfs: 'hsr0' already exists in 'hsr' [ 985.400294][T18411] Cannot create hsr debugfs directory [ 985.461854][ T5281] 8021q: adding VLAN 0 to HW filter on device eth2 [ 985.599002][ T5624] Bluetooth: hci1: command tx timeout [ 987.366822][ T5281] 8021q: adding VLAN 0 to HW filter on device eth3 [ 987.679455][ T5624] Bluetooth: hci1: command tx timeout [ 989.134510][T18411] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 989.146841][T18411] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 989.147834][T18411] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 989.165994][T18411] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 989.336269][T18411] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 989.347736][T18411] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 989.541160][T18411] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 989.554545][T18411] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 990.798907][T18411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 990.913334][T18411] 8021q: adding VLAN 0 to HW filter on device team0 [ 990.937475][ T1015] bridge0: port 1(bridge_slave_0) entered blocking state [ 990.937605][ T1015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 991.079477][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 991.079614][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 991.350826][ T1015] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.006837][ T5633] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 992.009148][ T5633] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 992.009798][ T5633] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 992.010691][ T5633] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 992.011248][ T5633] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 992.133217][ T1015] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.460206][ T1015] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.625593][ T1015] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 993.122909][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.122991][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.233246][ T1015] bridge_slave_1: left allmulticast mode [ 993.233287][ T1015] bridge_slave_1: left promiscuous mode [ 993.233888][ T1015] bridge0: port 2(bridge_slave_1) entered disabled state [ 993.246738][ T1015] bridge_slave_0: left allmulticast mode [ 993.246758][ T1015] bridge_slave_0: left promiscuous mode [ 993.246896][ T1015] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.496229][ T1015] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 993.523144][ T1015] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 993.539995][ T1015] bond0 (unregistering): Released all slaves [ 994.079375][ T5633] Bluetooth: hci0: command tx timeout [ 994.474681][ T1015] hsr_slave_0: left promiscuous mode [ 994.487552][ T1015] hsr_slave_1: left promiscuous mode [ 994.494762][ T1015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 994.502583][ T1015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 994.511027][ T1015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 994.519834][ T1015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 994.536736][ T1015] veth1_macvtap: left promiscuous mode [ 994.536788][ T1015] veth0_macvtap: left promiscuous mode [ 994.537325][ T1015] veth1_vlan: left promiscuous mode [ 994.537398][ T1015] veth0_vlan: left promiscuous mode [ 994.823021][ T1015] team0 (unregistering): Port device team_slave_1 removed [ 994.844167][ T1015] team0 (unregistering): Port device team_slave_0 removed [ 995.006817][ T5281] 8021q: adding VLAN 0 to HW filter on device eth1 [ 995.086742][T18411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 995.304340][T18411] veth0_vlan: entered promiscuous mode [ 995.327995][T18411] veth1_vlan: entered promiscuous mode [ 995.753165][T18691] bridge0: port 1(bridge_slave_0) entered blocking state [ 995.753280][T18691] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.771826][T18691] bridge_slave_0: entered allmulticast mode [ 995.773663][T18691] bridge_slave_0: entered promiscuous mode [ 995.777420][T18691] bridge0: port 2(bridge_slave_1) entered blocking state [ 995.779427][T18691] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.779570][T18691] bridge_slave_1: entered allmulticast mode [ 995.783228][T18691] bridge_slave_1: entered promiscuous mode [ 996.142332][T18691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 996.155173][T18691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 996.159151][ T5633] Bluetooth: hci0: command tx timeout [ 996.185704][T18411] veth0_macvtap: entered promiscuous mode [ 996.266717][T18411] veth1_macvtap: entered promiscuous mode [ 996.281043][ T5281] 8021q: adding VLAN 0 to HW filter on device eth2 [ 996.284890][T18691] team0: Port device team_slave_0 added [ 996.308143][T18691] team0: Port device team_slave_1 added [ 996.593338][T18691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 996.602324][T18691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 996.618389][T18691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 996.674330][T18691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 996.674371][T18691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 996.674412][T18691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 996.755589][T18411] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 996.807834][T18691] hsr_slave_0: entered promiscuous mode [ 996.816462][T18691] hsr_slave_1: entered promiscuous mode [ 996.823003][T18691] debugfs: 'hsr0' already exists in 'hsr' [ 996.828987][T18691] Cannot create hsr debugfs directory [ 996.920749][T18411] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 997.362567][ T449] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.857968][ T5281] 8021q: adding VLAN 0 to HW filter on device eth3 [ 997.969218][ T1015] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.042633][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.044205][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.092731][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 998.092784][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 998.239977][ T5633] Bluetooth: hci0: command tx timeout [ 998.268443][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 998.268488][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 998.973001][T18838] FAULT_INJECTION: forcing a failure. [ 998.973001][T18838] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 998.973057][T18838] CPU: 1 UID: 0 PID: 18838 Comm: syz.3.1695 Not tainted syzkaller #0 PREEMPT(full) [ 998.973089][T18838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 998.973104][T18838] Call Trace: [ 998.973113][T18838] [ 998.973124][T18838] dump_stack_lvl+0x100/0x190 [ 998.973164][T18838] should_fail_ex.cold+0x5/0xa [ 998.973199][T18838] _copy_from_user+0x2e/0xd0 [ 998.973242][T18838] move_addr_to_kernel+0x65/0x170 [ 998.973438][T18838] __sys_connect+0xb5/0x170 [ 998.973475][T18838] ? __pfx___sys_connect+0x10/0x10 [ 998.973511][T18838] ? __fget_files+0x21f/0x3d0 [ 998.973551][T18838] ? __pfx_ksys_write+0x10/0x10 [ 998.973585][T18838] __x64_sys_connect+0x72/0xb0 [ 998.973624][T18838] ? lockdep_hardirqs_on+0x7d/0x110 [ 998.973653][T18838] do_syscall_64+0x121/0x770 [ 998.973686][T18838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.973712][T18838] RIP: 0033:0x7f1b1059e159 [ 998.973734][T18838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 998.973757][T18838] RSP: 002b:00007f1b114a4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 998.973781][T18838] RAX: ffffffffffffffda RBX: 00007f1b10826450 RCX: 00007f1b1059e159 [ 998.973798][T18838] RDX: 0000000000000026 RSI: 0000200000000000 RDI: 0000000000000003 [ 998.973812][T18838] RBP: 00007f1b114a4090 R08: 0000000000000000 R09: 0000000000000000 [ 998.973826][T18838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 998.973840][T18838] R13: 00007f1b108264e8 R14: 00007f1b10826450 R15: 00007fffa0456818 [ 998.973872][T18838] [ 999.346167][ T59] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.635773][ T59] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.657803][ T5624] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 999.669495][ T5624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 999.676798][ T5624] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 999.685513][ T5624] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 999.687897][ T5624] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 999.907082][ T59] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.173097][ T59] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.266094][T18691] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1000.294708][T18691] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1000.308168][T18691] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1000.321855][ T5624] Bluetooth: hci0: command tx timeout [ 1000.337226][T18691] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1000.367941][T18691] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1000.385533][T18691] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1000.393795][T18691] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1000.416681][T18691] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1001.096874][T18894] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1001.270998][ T59] bridge_slave_1: left allmulticast mode [ 1001.271053][ T59] bridge_slave_1: left promiscuous mode [ 1001.271258][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1001.283918][ T59] bridge_slave_0: left allmulticast mode [ 1001.283946][ T59] bridge_slave_0: left promiscuous mode [ 1001.284176][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1001.563616][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1001.574593][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1001.585683][ T59] bond0 (unregistering): Released all slaves [ 1001.759591][ T5624] Bluetooth: hci2: command tx timeout [ 1002.112741][ T59] hsr_slave_0: left promiscuous mode [ 1002.124374][ T59] hsr_slave_1: left promiscuous mode [ 1002.125385][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1002.125429][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1002.156542][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1002.156597][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1002.196690][ T59] veth1_macvtap: left promiscuous mode [ 1002.202775][ T59] veth0_macvtap: left promiscuous mode [ 1002.208690][ T59] veth1_vlan: left promiscuous mode [ 1002.214137][ T59] veth0_vlan: left promiscuous mode [ 1002.542558][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1002.571393][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1002.672931][T18929] syz.2.1727 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1003.844264][ T5624] Bluetooth: hci2: command tx timeout [ 1004.221508][T18845] bridge0: port 1(bridge_slave_0) entered blocking state [ 1004.221685][T18845] bridge0: port 1(bridge_slave_0) entered disabled state [ 1004.221820][T18845] bridge_slave_0: entered allmulticast mode [ 1004.223598][T18845] bridge_slave_0: entered promiscuous mode [ 1004.282815][T18845] bridge0: port 2(bridge_slave_1) entered blocking state [ 1004.282971][T18845] bridge0: port 2(bridge_slave_1) entered disabled state [ 1004.283120][T18845] bridge_slave_1: entered allmulticast mode [ 1004.284914][T18845] bridge_slave_1: entered promiscuous mode [ 1004.337099][T18691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1004.445563][T18845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1004.458802][T18845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1004.519144][T18845] team0: Port device team_slave_0 added [ 1004.529728][T18845] team0: Port device team_slave_1 added [ 1004.633096][T18845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1004.633133][T18845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1004.633160][T18845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1004.635209][T18845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1004.635225][T18845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1004.635253][T18845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1004.689108][T18691] 8021q: adding VLAN 0 to HW filter on device team0 [ 1005.001507][T17352] bridge0: port 1(bridge_slave_0) entered blocking state [ 1005.001632][T17352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1005.274334][T18845] hsr_slave_0: entered promiscuous mode [ 1005.275430][T18845] hsr_slave_1: entered promiscuous mode [ 1005.281601][ T449] bridge0: port 2(bridge_slave_1) entered blocking state [ 1005.281711][ T449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1005.564078][ T5281] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1005.931078][ T5624] Bluetooth: hci2: command tx timeout [ 1007.976622][T18691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1007.998437][ T5624] Bluetooth: hci2: command tx timeout [ 1008.423156][T19062] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 1008.510542][T18691] veth0_vlan: entered promiscuous mode [ 1008.526823][T18691] veth1_vlan: entered promiscuous mode [ 1008.570807][T18691] veth0_macvtap: entered promiscuous mode [ 1008.577747][T18691] veth1_macvtap: entered promiscuous mode [ 1008.672179][T18691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1008.716181][T18691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1008.987313][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.987394][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.987431][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.987471][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1009.093484][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1009.093535][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1009.405390][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1009.415802][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1012.561388][T19119] bond0: option arp_interval: invalid value (/dev/vmci) [ 1012.569548][T19119] bond0: option arp_interval: allowed values 0 - 2147483647 [ 1015.447390][T19165] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1022.527724][ T5633] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1022.540851][ T5633] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1022.562568][ T5633] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1022.579661][T19249] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1022.587437][T19249] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1023.772885][T19278] FAULT_INJECTION: forcing a failure. [ 1023.772885][T19278] name failslab, interval 1, probability 0, space 0, times 0 [ 1023.772941][T19278] CPU: 1 UID: 0 PID: 19278 Comm: syz.2.1756 Not tainted syzkaller #0 PREEMPT(full) [ 1023.772974][T19278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1023.772989][T19278] Call Trace: [ 1023.772998][T19278] [ 1023.773009][T19278] dump_stack_lvl+0x100/0x190 [ 1023.773046][T19278] should_fail_ex.cold+0x5/0xa [ 1023.773076][T19278] should_failslab+0xc2/0x120 [ 1023.773106][T19278] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1023.773133][T19278] ? ksys_write+0x190/0x250 [ 1023.773158][T19278] ? create_new_namespaces+0x30/0xac0 [ 1023.773201][T19278] create_new_namespaces+0x30/0xac0 [ 1023.773237][T19278] ? bpf_lsm_capable+0x9/0x10 [ 1023.773346][T19278] ? security_capable+0x80/0x260 [ 1023.773392][T19278] unshare_nsproxy_namespaces+0xf2/0x220 [ 1023.773433][T19278] ksys_unshare+0x4a2/0xa70 [ 1023.773477][T19278] ? __pfx_ksys_unshare+0x10/0x10 [ 1023.773503][T19278] ? ksys_write+0x1ac/0x250 [ 1023.773540][T19278] __x64_sys_unshare+0x31/0x40 [ 1023.773565][T19278] do_syscall_64+0x121/0x770 [ 1023.773601][T19278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.773628][T19278] RIP: 0033:0x7fe29f59e159 [ 1023.773650][T19278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1023.773674][T19278] RSP: 002b:00007fe2a04bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1023.773708][T19278] RAX: ffffffffffffffda RBX: 00007fe29f825fa0 RCX: 00007fe29f59e159 [ 1023.773725][T19278] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1023.773742][T19278] RBP: 00007fe2a04bf090 R08: 0000000000000000 R09: 0000000000000000 [ 1023.773757][T19278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1023.773773][T19278] R13: 00007fe29f826038 R14: 00007fe29f825fa0 R15: 00007ffd3cb566c8 [ 1023.773808][T19278] [ 1024.636082][ T5624] Bluetooth: hci4: command tx timeout [ 1024.671668][T19247] bridge0: port 1(bridge_slave_0) entered blocking state [ 1024.671778][T19247] bridge0: port 1(bridge_slave_0) entered disabled state [ 1024.671921][T19247] bridge_slave_0: entered allmulticast mode [ 1024.673851][T19247] bridge_slave_0: entered promiscuous mode [ 1024.678656][T19247] bridge0: port 2(bridge_slave_1) entered blocking state [ 1024.678818][T19247] bridge0: port 2(bridge_slave_1) entered disabled state [ 1024.679000][T19247] bridge_slave_1: entered allmulticast mode [ 1024.680866][T19247] bridge_slave_1: entered promiscuous mode [ 1024.761139][T19247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1024.764439][T19247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1024.801958][T19247] team0: Port device team_slave_0 added [ 1024.817464][T19247] team0: Port device team_slave_1 added [ 1024.880697][T19247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1024.880747][T19247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1024.880776][T19247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1024.883213][T19247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1024.883231][T19247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1024.883259][T19247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1024.943088][T19247] hsr_slave_0: entered promiscuous mode [ 1024.944611][T19247] hsr_slave_1: entered promiscuous mode [ 1024.945381][T19247] debugfs: 'hsr0' already exists in 'hsr' [ 1024.945403][T19247] Cannot create hsr debugfs directory [ 1025.383820][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.602012][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.729193][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.808901][T19249] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1025.821086][T19249] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1025.829178][T19249] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1025.839388][T19249] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1025.850881][T19249] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1025.922298][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.203392][ T13] bridge_slave_1: left allmulticast mode [ 1026.210101][ T13] bridge_slave_1: left promiscuous mode [ 1026.216771][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1026.235430][ T13] bridge_slave_0: left allmulticast mode [ 1026.241578][ T13] bridge_slave_0: left promiscuous mode [ 1026.248187][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1026.499563][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1026.511889][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1026.522655][ T13] bond0 (unregistering): Released all slaves [ 1026.705339][T19249] Bluetooth: hci4: command tx timeout [ 1027.140796][ T13] hsr_slave_0: left promiscuous mode [ 1027.147969][ T13] hsr_slave_1: left promiscuous mode [ 1027.154767][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1027.162447][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1027.170657][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1027.178841][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1027.193840][ T13] veth1_macvtap: left promiscuous mode [ 1027.199540][ T13] veth0_macvtap: left promiscuous mode [ 1027.205499][ T13] veth1_vlan: left promiscuous mode [ 1027.210973][ T13] veth0_vlan: left promiscuous mode [ 1027.444657][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1027.464501][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1027.566966][ T5281] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1027.909106][T19249] Bluetooth: hci0: command tx timeout [ 1028.742464][T19300] bridge0: port 1(bridge_slave_0) entered blocking state [ 1028.751086][T19300] bridge0: port 1(bridge_slave_0) entered disabled state [ 1028.758994][T19300] bridge_slave_0: entered allmulticast mode [ 1028.760885][T19300] bridge_slave_0: entered promiscuous mode [ 1028.774345][T19249] Bluetooth: hci4: command tx timeout [ 1028.789470][ T5281] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1028.802661][T19300] bridge0: port 2(bridge_slave_1) entered blocking state [ 1028.810219][T19300] bridge0: port 2(bridge_slave_1) entered disabled state [ 1028.810404][T19300] bridge_slave_1: entered allmulticast mode [ 1028.812232][T19300] bridge_slave_1: entered promiscuous mode [ 1028.909889][T19300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1028.945981][T19300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1028.992594][T19300] team0: Port device team_slave_0 added [ 1029.009598][T19300] team0: Port device team_slave_1 added [ 1029.048126][T19300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1029.055445][T19300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1029.055483][T19300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1029.094730][T19300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1029.102111][T19300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1029.128816][T19300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1029.192502][T19300] hsr_slave_0: entered promiscuous mode [ 1029.199408][T19300] hsr_slave_1: entered promiscuous mode [ 1029.206147][T19300] debugfs: 'hsr0' already exists in 'hsr' [ 1029.212040][T19300] Cannot create hsr debugfs directory [ 1029.616342][ T5281] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1029.969341][T19249] Bluetooth: hci0: command tx timeout [ 1030.354787][ T5281] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1030.853291][T19249] Bluetooth: hci4: command tx timeout [ 1032.037077][T19249] Bluetooth: hci0: command tx timeout [ 1034.025792][T19429] FAULT_INJECTION: forcing a failure. [ 1034.025792][T19429] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1034.025850][T19429] CPU: 1 UID: 0 PID: 19429 Comm: syz.2.1765 Not tainted syzkaller #0 PREEMPT(full) [ 1034.025880][T19429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1034.025892][T19429] Call Trace: [ 1034.025900][T19429] [ 1034.025908][T19429] dump_stack_lvl+0x100/0x190 [ 1034.025944][T19429] should_fail_ex.cold+0x5/0xa [ 1034.025977][T19429] _copy_to_user+0x32/0xd0 [ 1034.026022][T19429] keyctl_capabilities+0x5a/0x160 [ 1034.026143][T19429] __do_sys_keyctl+0x427/0x5a0 [ 1034.026176][T19429] do_syscall_64+0x121/0x770 [ 1034.026210][T19429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1034.026237][T19429] RIP: 0033:0x7fe29f59e159 [ 1034.026259][T19429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1034.026282][T19429] RSP: 002b:00007fe2a049e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1034.026307][T19429] RAX: ffffffffffffffda RBX: 00007fe29f826090 RCX: 00007fe29f59e159 [ 1034.026324][T19429] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 000000000000001f [ 1034.026340][T19429] RBP: 00007fe2a049e090 R08: 00000000000003ff R09: 0000000000000000 [ 1034.026356][T19429] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 1034.026371][T19429] R13: 00007fe29f826128 R14: 00007fe29f826090 R15: 00007ffd3cb566c8 [ 1034.026414][T19429] [ 1034.127124][T19249] Bluetooth: hci0: command tx timeout [ 1051.994444][T19644] FAULT_INJECTION: forcing a failure. [ 1051.994444][T19644] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1051.994502][T19644] CPU: 1 UID: 0 PID: 19644 Comm: syz.2.1787 Not tainted syzkaller #0 PREEMPT(full) [ 1051.994532][T19644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1051.994546][T19644] Call Trace: [ 1051.994555][T19644] [ 1051.994565][T19644] dump_stack_lvl+0x100/0x190 [ 1051.994599][T19644] should_fail_ex.cold+0x5/0xa [ 1051.994631][T19644] _copy_to_user+0x32/0xd0 [ 1051.994676][T19644] keyctl_capabilities+0x5a/0x160 [ 1051.994707][T19644] __do_sys_keyctl+0x427/0x5a0 [ 1051.994740][T19644] do_syscall_64+0x121/0x770 [ 1051.994769][T19644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1051.994794][T19644] RIP: 0033:0x7fe29f59e159 [ 1051.994816][T19644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1051.994840][T19644] RSP: 002b:00007fe2a049e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1051.994865][T19644] RAX: ffffffffffffffda RBX: 00007fe29f826090 RCX: 00007fe29f59e159 [ 1051.994882][T19644] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 000000000000001f [ 1051.994897][T19644] RBP: 00007fe2a049e090 R08: 0000000000000401 R09: 0000000000000000 [ 1051.994916][T19644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1051.994932][T19644] R13: 00007fe29f826128 R14: 00007fe29f826090 R15: 00007ffd3cb566c8 [ 1051.994970][T19644] [ 1054.403730][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.403814][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.598032][T19691] FAULT_INJECTION: forcing a failure. [ 1056.598032][T19691] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1056.613339][T19691] CPU: 0 UID: 0 PID: 19691 Comm: syz.2.1792 Not tainted syzkaller #0 PREEMPT(full) [ 1056.613375][T19691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1056.613391][T19691] Call Trace: [ 1056.613400][T19691] [ 1056.613410][T19691] dump_stack_lvl+0x100/0x190 [ 1056.613452][T19691] should_fail_ex.cold+0x5/0xa [ 1056.613486][T19691] _copy_to_user+0x32/0xd0 [ 1056.613531][T19691] keyctl_capabilities+0x5a/0x160 [ 1056.613564][T19691] __do_sys_keyctl+0x427/0x5a0 [ 1056.613595][T19691] do_syscall_64+0x121/0x770 [ 1056.613630][T19691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1056.613658][T19691] RIP: 0033:0x7fe29f59e159 [ 1056.613681][T19691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1056.613712][T19691] RSP: 002b:00007fe2a043b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1056.613738][T19691] RAX: ffffffffffffffda RBX: 00007fe29f826360 RCX: 00007fe29f59e159 [ 1056.613756][T19691] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 000000000000001f [ 1056.613772][T19691] RBP: 00007fe2a043b090 R08: 00000000000003ff R09: 0000000000000000 [ 1056.613788][T19691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1056.613804][T19691] R13: 00007fe29f8263f8 R14: 00007fe29f826360 R15: 00007ffd3cb566c8 [ 1056.613839][T19691] [ 1059.866450][ T5624] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1059.881194][ T5624] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1059.901156][ T5624] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1059.909873][ T5624] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1059.920840][ T5624] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1061.083711][T19727] bridge0: port 1(bridge_slave_0) entered blocking state [ 1061.083859][T19727] bridge0: port 1(bridge_slave_0) entered disabled state [ 1061.083992][T19727] bridge_slave_0: entered allmulticast mode [ 1061.085835][T19727] bridge_slave_0: entered promiscuous mode [ 1061.089222][T19727] bridge0: port 2(bridge_slave_1) entered blocking state [ 1061.089390][T19727] bridge0: port 2(bridge_slave_1) entered disabled state [ 1061.089520][T19727] bridge_slave_1: entered allmulticast mode [ 1061.091224][T19727] bridge_slave_1: entered promiscuous mode [ 1061.131892][T19727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1061.136612][T19727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1061.171298][T19727] team0: Port device team_slave_0 added [ 1061.174504][T19727] team0: Port device team_slave_1 added [ 1061.289802][T19727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1061.297121][T19727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1061.323756][T19727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1061.336918][T19727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1061.344324][T19727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1061.344357][T19727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1061.528644][T19727] hsr_slave_0: entered promiscuous mode [ 1061.532922][T19727] hsr_slave_1: entered promiscuous mode [ 1061.537566][T19727] debugfs: 'hsr0' already exists in 'hsr' [ 1061.537592][T19727] Cannot create hsr debugfs directory [ 1061.963175][ T5624] Bluetooth: hci5: command tx timeout [ 1062.152067][T19766] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1800'. [ 1064.032732][T19249] Bluetooth: hci5: command tx timeout [ 1066.105392][T19249] Bluetooth: hci5: command tx timeout [ 1067.185502][T19801] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1067.185634][T19801] vhci_hcd vhci_hcd.2: default hub control req: 2300 v0000 i0000 l0 [ 1068.055124][T19808] FAULT_INJECTION: forcing a failure. [ 1068.055124][T19808] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1068.071999][T19808] CPU: 1 UID: 0 PID: 19808 Comm: syz.2.1807 Not tainted syzkaller #0 PREEMPT(full) [ 1068.072028][T19808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1068.072040][T19808] Call Trace: [ 1068.072047][T19808] [ 1068.072056][T19808] dump_stack_lvl+0x100/0x190 [ 1068.072088][T19808] should_fail_ex.cold+0x5/0xa [ 1068.072113][T19808] _copy_to_user+0x32/0xd0 [ 1068.072147][T19808] simple_read_from_buffer+0xcb/0x170 [ 1068.072170][T19808] proc_fail_nth_read+0x1af/0x230 [ 1068.072203][T19808] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1068.072235][T19808] ? rw_verify_area+0xce/0x6d0 [ 1068.072263][T19808] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1068.072295][T19808] vfs_read+0x1e4/0xb40 [ 1068.072326][T19808] ? lock_acquire+0x1d1/0x380 [ 1068.072352][T19808] ? __fget_files+0x34/0x3d0 [ 1068.072373][T19808] ? __pfx_vfs_read+0x10/0x10 [ 1068.072403][T19808] ? find_held_lock+0x2b/0x80 [ 1068.072435][T19808] ? __fget_files+0x215/0x3d0 [ 1068.072463][T19808] ? __fget_files+0x21f/0x3d0 [ 1068.072496][T19808] ksys_read+0x12a/0x250 [ 1068.072513][T19808] ? __pfx_ksys_read+0x10/0x10 [ 1068.072538][T19808] do_syscall_64+0x121/0x770 [ 1068.072567][T19808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1068.072588][T19808] RIP: 0033:0x7fe29f55e98e [ 1068.072606][T19808] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1068.072627][T19808] RSP: 002b:00007fe2a04befe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1068.072650][T19808] RAX: ffffffffffffffda RBX: 00007fe2a04bf6c0 RCX: 00007fe29f55e98e [ 1068.072664][T19808] RDX: 000000000000000f RSI: 00007fe2a04bf0a0 RDI: 0000000000000003 [ 1068.072678][T19808] RBP: 00007fe2a04bf090 R08: 0000000000000000 R09: 0000000000000000 [ 1068.072692][T19808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1068.072705][T19808] R13: 00007fe29f826038 R14: 00007fe29f825fa0 R15: 00007ffd3cb566c8 [ 1068.072732][T19808] [ 1068.179934][T19249] Bluetooth: hci5: command tx timeout [ 1073.585551][T19857] FAULT_INJECTION: forcing a failure. [ 1073.585551][T19857] name failslab, interval 1, probability 0, space 0, times 0 [ 1073.585590][T19857] CPU: 1 UID: 0 PID: 19857 Comm: syz.2.1816 Not tainted syzkaller #0 PREEMPT(full) [ 1073.585623][T19857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1073.585638][T19857] Call Trace: [ 1073.585646][T19857] [ 1073.585654][T19857] dump_stack_lvl+0x100/0x190 [ 1073.585698][T19857] should_fail_ex.cold+0x5/0xa [ 1073.585732][T19857] should_failslab+0xc2/0x120 [ 1073.585767][T19857] __kmalloc_noprof+0xfc/0x840 [ 1073.585793][T19857] ? rcu_is_watching+0x13/0xc0 [ 1073.585850][T19857] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1073.585991][T19857] tomoyo_realpath_from_path+0xb6/0x690 [ 1073.586037][T19857] tomoyo_path_number_perm+0x23c/0x580 [ 1073.586067][T19857] ? tomoyo_path_number_perm+0x22e/0x580 [ 1073.586101][T19857] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1073.586145][T19857] ? __lock_acquire+0x4c5/0x1ec0 [ 1073.586196][T19857] ? __fget_files+0x34/0x3d0 [ 1073.586224][T19857] ? find_held_lock+0x2b/0x80 [ 1073.586249][T19857] ? hook_file_ioctl_common+0x140/0x440 [ 1073.586344][T19857] ? __fget_files+0x21f/0x3d0 [ 1073.586376][T19857] security_file_ioctl+0xd3/0x230 [ 1073.586415][T19857] __x64_sys_ioctl+0xb7/0x210 [ 1073.586490][T19857] do_syscall_64+0x121/0x770 [ 1073.586529][T19857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1073.586557][T19857] RIP: 0033:0x7fe29f59e159 [ 1073.586582][T19857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1073.586606][T19857] RSP: 002b:00007fe2a04bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1073.586632][T19857] RAX: ffffffffffffffda RBX: 00007fe29f825fa0 RCX: 00007fe29f59e159 [ 1073.586651][T19857] RDX: 0000000000000003 RSI: 000000004008af10 RDI: 0000000000000003 [ 1073.586668][T19857] RBP: 00007fe2a04bf090 R08: 0000000000000000 R09: 0000000000000000 [ 1073.586684][T19857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1073.586700][T19857] R13: 00007fe29f826038 R14: 00007fe29f825fa0 R15: 00007ffd3cb566c8 [ 1073.586737][T19857] [ 1073.590139][T19857] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1082.333788][ T5624] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1082.348161][ T5624] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1082.357153][ T5624] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1082.369004][ T5624] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1082.378191][ T5624] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1082.518691][T19958] FAULT_INJECTION: forcing a failure. [ 1082.518691][T19958] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1082.533124][T19958] CPU: 0 UID: 0 PID: 19958 Comm: syz.2.1827 Not tainted syzkaller #0 PREEMPT(full) [ 1082.533161][T19958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1082.533177][T19958] Call Trace: [ 1082.533186][T19958] [ 1082.533197][T19958] dump_stack_lvl+0x100/0x190 [ 1082.533240][T19958] should_fail_ex.cold+0x5/0xa [ 1082.533274][T19958] _copy_to_user+0x32/0xd0 [ 1082.533320][T19958] keyctl_capabilities+0x5a/0x160 [ 1082.533350][T19958] __do_sys_keyctl+0x427/0x5a0 [ 1082.533388][T19958] do_syscall_64+0x121/0x770 [ 1082.533419][T19958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.533444][T19958] RIP: 0033:0x7fe29f59e159 [ 1082.533466][T19958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1082.533488][T19958] RSP: 002b:00007fe2a043b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1082.533511][T19958] RAX: ffffffffffffffda RBX: 00007fe29f826360 RCX: 00007fe29f59e159 [ 1082.533528][T19958] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 000000000000001f [ 1082.533543][T19958] RBP: 00007fe2a043b090 R08: 00000000000003ff R09: 0000000000000000 [ 1082.533559][T19958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1082.533575][T19958] R13: 00007fe29f8263f8 R14: 00007fe29f826360 R15: 00007ffd3cb566c8 [ 1082.533612][T19958] [ 1083.683211][T19950] bridge0: port 1(bridge_slave_0) entered blocking state [ 1083.692509][T19950] bridge0: port 1(bridge_slave_0) entered disabled state [ 1083.692718][T19950] bridge_slave_0: entered allmulticast mode [ 1083.702341][T19950] bridge_slave_0: entered promiscuous mode [ 1083.721143][T19950] bridge0: port 2(bridge_slave_1) entered blocking state [ 1083.729139][T19950] bridge0: port 2(bridge_slave_1) entered disabled state [ 1083.729276][T19950] bridge_slave_1: entered allmulticast mode [ 1083.743747][T19950] bridge_slave_1: entered promiscuous mode [ 1083.803598][T19950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1083.814456][T19950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1084.014589][T19950] team0: Port device team_slave_0 added [ 1084.021027][T19950] team0: Port device team_slave_1 added [ 1084.085868][T19950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1084.085909][T19950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1084.087096][T19950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1084.163955][T19950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1084.163987][T19950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1084.164016][T19950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1084.382315][T19950] hsr_slave_0: entered promiscuous mode [ 1084.390346][T19950] hsr_slave_1: entered promiscuous mode [ 1084.391802][T19950] debugfs: 'hsr0' already exists in 'hsr' [ 1084.391825][T19950] Cannot create hsr debugfs directory [ 1084.409914][T19249] Bluetooth: hci6: command tx timeout [ 1085.577151][ T5624] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1085.589071][ T5624] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1085.596870][ T5624] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1085.608175][ T5624] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1085.620066][ T5624] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1086.474124][ T5624] Bluetooth: hci6: command tx timeout [ 1086.640705][T19994] bridge0: port 1(bridge_slave_0) entered blocking state [ 1086.640863][T19994] bridge0: port 1(bridge_slave_0) entered disabled state [ 1086.640997][T19994] bridge_slave_0: entered allmulticast mode [ 1086.642803][T19994] bridge_slave_0: entered promiscuous mode [ 1086.646591][T19994] bridge0: port 2(bridge_slave_1) entered blocking state [ 1086.646770][T19994] bridge0: port 2(bridge_slave_1) entered disabled state [ 1086.646904][T19994] bridge_slave_1: entered allmulticast mode [ 1086.648673][T19994] bridge_slave_1: entered promiscuous mode [ 1086.693488][T19994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1086.702002][T19994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1086.742925][T19994] team0: Port device team_slave_0 added [ 1086.746099][T19994] team0: Port device team_slave_1 added [ 1086.943188][T19994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1086.943246][T19994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1086.943707][T19994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1086.947534][T19994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1086.947553][T19994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1086.947583][T19994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1087.045768][T19994] hsr_slave_0: entered promiscuous mode [ 1087.049705][T19994] hsr_slave_1: entered promiscuous mode [ 1087.052489][T19994] debugfs: 'hsr0' already exists in 'hsr' [ 1087.052532][T19994] Cannot create hsr debugfs directory [ 1087.082875][T20024] FAULT_INJECTION: forcing a failure. [ 1087.082875][T20024] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1087.098412][T20024] CPU: 0 UID: 0 PID: 20024 Comm: syz.2.1833 Not tainted syzkaller #0 PREEMPT(full) [ 1087.098442][T20024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1087.098454][T20024] Call Trace: [ 1087.098461][T20024] [ 1087.098469][T20024] dump_stack_lvl+0x100/0x190 [ 1087.098502][T20024] should_fail_ex.cold+0x5/0xa [ 1087.098524][T20024] ? prepare_alloc_pages+0x16d/0x5b0 [ 1087.098641][T20024] should_fail_alloc_page+0xeb/0x140 [ 1087.098674][T20024] prepare_alloc_pages+0x1f0/0x5b0 [ 1087.098709][T20024] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 1087.098756][T20024] ? lock_acquire+0x1d1/0x380 [ 1087.098790][T20024] ? page_table_check_set+0x11d/0x580 [ 1087.098886][T20024] ? find_held_lock+0x2b/0x80 [ 1087.098911][T20024] ? page_table_check_set+0x30f/0x580 [ 1087.098941][T20024] ? page_table_check_set+0x30f/0x580 [ 1087.098978][T20024] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1087.099021][T20024] ? page_table_check_set+0x31e/0x580 [ 1087.099061][T20024] ? __page_table_check_ptes_set+0x1d5/0x530 [ 1087.099101][T20024] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 1087.099141][T20024] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1087.099183][T20024] ? xas_find+0x32c/0x8e0 [ 1087.099223][T20024] ? find_held_lock+0x2b/0x80 [ 1087.099248][T20024] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1087.099311][T20024] ? policy_nodemask+0xed/0x4f0 [ 1087.099380][T20024] alloc_pages_mpol+0x201/0x550 [ 1087.099416][T20024] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1087.099460][T20024] folio_alloc_mpol_noprof+0x36/0x260 [ 1087.099529][T20024] vma_alloc_folio_noprof+0xed/0x1d0 [ 1087.099567][T20024] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1087.099618][T20024] do_anonymous_page+0xac9/0x2050 [ 1087.099669][T20024] ? __pfx_do_anonymous_page+0x10/0x10 [ 1087.099705][T20024] ? rcu_read_unlock+0x2d/0xb0 [ 1087.099742][T20024] ? rcu_read_unlock+0x2d/0xb0 [ 1087.099782][T20024] ? __pte_offset_map+0x179/0x310 [ 1087.099851][T20024] __handle_mm_fault+0x1ff3/0x2f60 [ 1087.099894][T20024] ? lock_vma_under_rcu+0x11d/0x590 [ 1087.099930][T20024] ? __pfx___handle_mm_fault+0x10/0x10 [ 1087.099974][T20024] ? lock_vma_under_rcu+0x17c/0x590 [ 1087.100032][T20024] handle_mm_fault+0x363/0xa20 [ 1087.100078][T20024] do_user_addr_fault+0x59c/0x12f0 [ 1087.100119][T20024] exc_page_fault+0x6f/0xd0 [ 1087.100151][T20024] asm_exc_page_fault+0x26/0x30 [ 1087.100180][T20024] RIP: 0033:0x7fe29f45f6cb [ 1087.100204][T20024] Code: 00 00 00 48 8d 3d 2d b1 1a 00 48 89 c1 31 c0 e8 0b 2e ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 61 b1 1a 00 48 89 34 24 48 8b 14 24 48 8b [ 1087.100229][T20024] RSP: 002b:00007fe2a04bdfa0 EFLAGS: 00010206 [ 1087.100252][T20024] RAX: 0000000000000000 RBX: 00007fe29f825fa0 RCX: 0000000000000000 [ 1087.100269][T20024] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 1087.100286][T20024] RBP: 00007fe2a04bf090 R08: 0000000000000000 R09: 0000000000000000 [ 1087.100302][T20024] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 1087.100318][T20024] R13: 00007fe29f826038 R14: 00007fe29f825fa0 R15: 00007ffd3cb566c8 [ 1087.100356][T20024] [ 1087.163789][T20024] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1087.667899][ T5624] Bluetooth: hci7: command tx timeout [ 1088.544587][ T5624] Bluetooth: hci6: command tx timeout [ 1089.737010][ T5624] Bluetooth: hci7: command tx timeout [ 1090.613922][ T5624] Bluetooth: hci6: command tx timeout [ 1091.806369][ T5624] Bluetooth: hci7: command tx timeout [ 1093.879318][ T5624] Bluetooth: hci7: command tx timeout [ 1095.299856][T20126] FAULT_INJECTION: forcing a failure. [ 1095.299856][T20126] name failslab, interval 1, probability 0, space 0, times 0 [ 1095.300222][T20126] CPU: 1 UID: 0 PID: 20126 Comm: syz.2.1845 Not tainted syzkaller #0 PREEMPT(full) [ 1095.300255][T20126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1095.300271][T20126] Call Trace: [ 1095.300280][T20126] [ 1095.300289][T20126] dump_stack_lvl+0x100/0x190 [ 1095.300322][T20126] should_fail_ex.cold+0x5/0xa [ 1095.300347][T20126] should_failslab+0xc2/0x120 [ 1095.300371][T20126] __kmalloc_noprof+0xfc/0x840 [ 1095.300391][T20126] ? rcu_is_watching+0x13/0xc0 [ 1095.300410][T20126] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1095.300445][T20126] tomoyo_realpath_from_path+0xb6/0x690 [ 1095.300482][T20126] tomoyo_path_number_perm+0x23c/0x580 [ 1095.300504][T20126] ? tomoyo_path_number_perm+0x22e/0x580 [ 1095.300530][T20126] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1095.300568][T20126] ? __lock_acquire+0x4c5/0x1ec0 [ 1095.300614][T20126] ? __fget_files+0x34/0x3d0 [ 1095.300638][T20126] ? find_held_lock+0x2b/0x80 [ 1095.300658][T20126] ? hook_file_ioctl_common+0x140/0x440 [ 1095.300694][T20126] ? __fget_files+0x21f/0x3d0 [ 1095.300722][T20126] security_file_ioctl+0xd3/0x230 [ 1095.300768][T20126] __x64_sys_ioctl+0xb7/0x210 [ 1095.300808][T20126] do_syscall_64+0x121/0x770 [ 1095.300842][T20126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1095.300866][T20126] RIP: 0033:0x7fe29f59e159 [ 1095.300887][T20126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1095.300908][T20126] RSP: 002b:00007fe2a04bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1095.300931][T20126] RAX: ffffffffffffffda RBX: 00007fe29f825fa0 RCX: 00007fe29f59e159 [ 1095.300947][T20126] RDX: 0000000000000000 RSI: 000000004068aea3 RDI: 0000000000000004 [ 1095.300961][T20126] RBP: 00007fe2a04bf090 R08: 0000000000000000 R09: 0000000000000000 [ 1095.300976][T20126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1095.300989][T20126] R13: 00007fe29f826038 R14: 00007fe29f825fa0 R15: 00007ffd3cb566c8 [ 1095.301024][T20126] [ 1095.301086][T20126] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1102.317384][T19249] Bluetooth: hci1: command 0x0406 tx timeout [ 1110.203303][T20274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1866'. [ 1114.653303][T20308] binder: 20307:20308 ioctl c018620c 200000000040 returned -22 [ 1115.524669][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.531181][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1119.847853][T19249] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1119.861332][T19249] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1119.869070][T19249] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1119.882775][T19249] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1119.893331][T19249] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1120.479269][T20354] bridge0: port 1(bridge_slave_0) entered blocking state [ 1120.479477][T20354] bridge0: port 1(bridge_slave_0) entered disabled state [ 1120.479977][T20354] bridge_slave_0: entered allmulticast mode [ 1120.481786][T20354] bridge_slave_0: entered promiscuous mode [ 1120.485117][T20354] bridge0: port 2(bridge_slave_1) entered blocking state [ 1120.485278][T20354] bridge0: port 2(bridge_slave_1) entered disabled state [ 1120.485675][T20354] bridge_slave_1: entered allmulticast mode [ 1120.488010][T20354] bridge_slave_1: entered promiscuous mode [ 1120.527180][T20354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1120.531026][T20354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1120.561269][T20354] team0: Port device team_slave_0 added [ 1120.564441][T20354] team0: Port device team_slave_1 added [ 1120.738508][T20354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1120.738557][T20354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1120.738601][T20354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1120.743168][T20354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1120.743187][T20354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1120.743217][T20354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1120.836863][T20354] hsr_slave_0: entered promiscuous mode [ 1120.840874][T20354] hsr_slave_1: entered promiscuous mode [ 1120.843228][T20354] debugfs: 'hsr0' already exists in 'hsr' [ 1120.843251][T20354] Cannot create hsr debugfs directory [ 1121.969539][ T5624] Bluetooth: hci8: command tx timeout [ 1122.695691][T18412] Bluetooth: hci2: command 0x0406 tx timeout [ 1124.039488][T19249] Bluetooth: hci8: command tx timeout [ 1126.110205][T19249] Bluetooth: hci8: command tx timeout [ 1127.271997][T20438] FAULT_INJECTION: forcing a failure. [ 1127.271997][T20438] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1127.285487][T20438] CPU: 1 UID: 0 PID: 20438 Comm: syz.2.1888 Not tainted syzkaller #0 PREEMPT(full) [ 1127.285523][T20438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1127.285539][T20438] Call Trace: [ 1127.285548][T20438] [ 1127.285558][T20438] dump_stack_lvl+0x100/0x190 [ 1127.285602][T20438] should_fail_ex.cold+0x5/0xa [ 1127.285635][T20438] _copy_to_user+0x32/0xd0 [ 1127.285680][T20438] simple_read_from_buffer+0xcb/0x170 [ 1127.285711][T20438] proc_fail_nth_read+0x1af/0x230 [ 1127.285756][T20438] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1127.285800][T20438] ? rw_verify_area+0xce/0x6d0 [ 1127.285838][T20438] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1127.285879][T20438] vfs_read+0x1e4/0xb40 [ 1127.285919][T20438] ? lock_acquire+0x1d1/0x380 [ 1127.285953][T20438] ? __fget_files+0x34/0x3d0 [ 1127.285994][T20438] ? __pfx_vfs_read+0x10/0x10 [ 1127.286031][T20438] ? find_held_lock+0x2b/0x80 [ 1127.286059][T20438] ? __fget_files+0x215/0x3d0 [ 1127.286091][T20438] ? __fget_files+0x21f/0x3d0 [ 1127.286128][T20438] ksys_read+0x12a/0x250 [ 1127.286153][T20438] ? __pfx_ksys_read+0x10/0x10 [ 1127.286188][T20438] do_syscall_64+0x121/0x770 [ 1127.286225][T20438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1127.286253][T20438] RIP: 0033:0x7fe29f55e98e [ 1127.286276][T20438] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1127.286300][T20438] RSP: 002b:00007fe2a043afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1127.286326][T20438] RAX: ffffffffffffffda RBX: 00007fe2a043b6c0 RCX: 00007fe29f55e98e [ 1127.286344][T20438] RDX: 000000000000000f RSI: 00007fe2a043b0a0 RDI: 000000000000000a [ 1127.286360][T20438] RBP: 00007fe2a043b090 R08: 0000000000000000 R09: 0000000000000000 [ 1127.286376][T20438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1127.286399][T20438] R13: 00007fe29f8263f8 R14: 00007fe29f826360 R15: 00007ffd3cb566c8 [ 1127.286435][T20438] [ 1128.177425][T19249] Bluetooth: hci8: command tx timeout [ 1131.448247][T20475] netlink: 146 bytes leftover after parsing attributes in process `syz.2.1893'. [ 1132.575885][T20487] kAFS: unparsable volume name [ 1133.191278][T20484] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1133.191410][T20484] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1133.212325][T20484] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1133.218393][T20484] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1133.228619][T20484] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1133.236043][T20484] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1133.246158][T20484] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1133.253823][T20484] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1133.263292][T20484] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1133.272392][T20484] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1133.278523][T20484] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1133.287298][T20484] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1133.295627][T20484] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1133.304240][T20484] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1133.313439][T20484] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1133.324850][T20484] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1133.331693][T20484] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1133.340031][T20484] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1133.356839][T20484] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1133.360257][T20484] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1133.375354][T20484] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1133.382602][T20484] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 1133.389626][T20484] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 1133.397216][T20484] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 1134.942067][T18412] Bluetooth: hci3: command 0x0406 tx timeout [ 1135.261218][T18412] Bluetooth: hci0: command 0x0c1a tx timeout [ 1135.261302][T18412] Bluetooth: hci4: command 0x0c1a tx timeout [ 1135.261352][T18412] Bluetooth: hci2: command 0x0406 tx timeout [ 1135.261383][T18412] Bluetooth: hci1: command 0x0406 tx timeout [ 1135.339990][T19249] Bluetooth: hci6: command 0x0c1a tx timeout [ 1135.340000][T18412] Bluetooth: hci5: command 0x0c1a tx timeout [ 1135.419668][T19249] Bluetooth: hci8: command 0x0c1a tx timeout [ 1135.419783][T18412] Bluetooth: hci7: command 0x0c1a tx timeout [ 1137.011500][T19249] Bluetooth: hci3: command 0x0406 tx timeout [ 1137.330953][T19249] Bluetooth: hci1: command 0x0406 tx timeout [ 1137.331041][T19249] Bluetooth: hci2: command 0x0406 tx timeout [ 1137.331100][T19249] Bluetooth: hci4: command 0x0c1a tx timeout [ 1137.331130][T18412] Bluetooth: hci0: command 0x0c1a tx timeout [ 1137.409571][T19249] Bluetooth: hci6: command 0x0c1a tx timeout [ 1137.416068][ T5624] Bluetooth: hci5: command 0x0c1a tx timeout [ 1137.488737][ T5624] Bluetooth: hci8: command 0x0c1a tx timeout [ 1137.488787][ T5624] Bluetooth: hci7: command 0x0c1a tx timeout [ 1138.101456][T20539] binder: 20538:20539 ioctl 541b 0 returned -22 [ 1139.398866][T18412] Bluetooth: hci0: command 0x0c1a tx timeout [ 1139.398903][ T5624] Bluetooth: hci4: command 0x0c1a tx timeout [ 1139.478387][ T5624] Bluetooth: hci5: command 0x0c1a tx timeout [ 1139.478407][T18412] Bluetooth: hci6: command 0x0c1a tx timeout [ 1139.558028][ T5624] Bluetooth: hci7: command 0x0c1a tx timeout [ 1139.558058][T18412] Bluetooth: hci8: command 0x0c1a tx timeout [ 1142.623896][ T5624] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1142.633458][ T5624] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1142.640881][ T5624] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1142.648875][ T5624] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1142.656650][ T5624] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1144.049609][T20620] FAULT_INJECTION: forcing a failure. [ 1144.049609][T20620] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1144.063329][T20620] CPU: 1 UID: 0 PID: 20620 Comm: syz.2.1907 Not tainted syzkaller #0 PREEMPT(full) [ 1144.063365][T20620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1144.063380][T20620] Call Trace: [ 1144.063388][T20620] [ 1144.063397][T20620] dump_stack_lvl+0x100/0x190 [ 1144.063433][T20620] should_fail_ex.cold+0x5/0xa [ 1144.063464][T20620] _copy_to_user+0x32/0xd0 [ 1144.063504][T20620] keyctl_capabilities+0x5a/0x160 [ 1144.063532][T20620] __do_sys_keyctl+0x427/0x5a0 [ 1144.063558][T20620] do_syscall_64+0x121/0x770 [ 1144.063600][T20620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1144.063624][T20620] RIP: 0033:0x7fe29f59e159 [ 1144.063644][T20620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1144.063665][T20620] RSP: 002b:00007fe2a041a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1144.063689][T20620] RAX: ffffffffffffffda RBX: 00007fe29f826450 RCX: 00007fe29f59e159 [ 1144.063704][T20620] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 000000000000001f [ 1144.063718][T20620] RBP: 00007fe2a041a090 R08: 00000000000003ff R09: 0000000000000000 [ 1144.063732][T20620] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 1144.063745][T20620] R13: 00007fe29f8264e8 R14: 00007fe29f826450 R15: 00007ffd3cb566c8 [ 1144.063776][T20620] [ 1144.291596][T20588] bridge0: port 1(bridge_slave_0) entered blocking state [ 1144.291842][T20588] bridge0: port 1(bridge_slave_0) entered disabled state [ 1144.292028][T20588] bridge_slave_0: entered allmulticast mode [ 1144.298477][T20588] bridge_slave_0: entered promiscuous mode [ 1144.324310][T20588] bridge0: port 2(bridge_slave_1) entered blocking state [ 1144.324502][T20588] bridge0: port 2(bridge_slave_1) entered disabled state [ 1144.325860][T20588] bridge_slave_1: entered allmulticast mode [ 1144.327785][T20588] bridge_slave_1: entered promiscuous mode [ 1144.381934][T20588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1144.398175][T20588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1144.428497][T20588] team0: Port device team_slave_0 added [ 1144.431418][T20588] team0: Port device team_slave_1 added [ 1144.453548][T20588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1144.453579][T20588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1144.453607][T20588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1144.455631][T20588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1144.455647][T20588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1144.455675][T20588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1144.513971][T20588] hsr_slave_0: entered promiscuous mode [ 1144.515424][T20588] hsr_slave_1: entered promiscuous mode [ 1144.516130][T20588] debugfs: 'hsr0' already exists in 'hsr' [ 1144.516152][T20588] Cannot create hsr debugfs directory [ 1144.731173][T18412] Bluetooth: hci9: command tx timeout [ 1145.682922][ T5624] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1145.694975][ T5624] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1145.706231][ T5624] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1145.716895][ T5624] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1145.726622][ T5624] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1146.810333][ T5624] Bluetooth: hci9: command tx timeout [ 1146.848708][T20639] bridge0: port 1(bridge_slave_0) entered blocking state [ 1146.858318][T20639] bridge0: port 1(bridge_slave_0) entered disabled state [ 1146.866523][T20639] bridge_slave_0: entered allmulticast mode [ 1146.877127][T20639] bridge_slave_0: entered promiscuous mode [ 1146.996403][T20639] bridge0: port 2(bridge_slave_1) entered blocking state [ 1147.008279][T20639] bridge0: port 2(bridge_slave_1) entered disabled state [ 1147.009706][T20639] bridge_slave_1: entered allmulticast mode [ 1147.028479][T20639] bridge_slave_1: entered promiscuous mode [ 1147.095101][T20639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1147.110386][T20639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1147.149274][T20639] team0: Port device team_slave_0 added [ 1147.178951][T20639] team0: Port device team_slave_1 added [ 1147.235294][T20639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1147.242447][T20639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1147.242484][T20639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1147.284578][T20639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1147.292492][T20639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1147.321267][T20639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1147.429755][T20639] hsr_slave_0: entered promiscuous mode [ 1147.436659][T20639] hsr_slave_1: entered promiscuous mode [ 1147.443705][T20639] debugfs: 'hsr0' already exists in 'hsr' [ 1147.451312][T20639] Cannot create hsr debugfs directory [ 1147.755310][ T5624] Bluetooth: hci10: command tx timeout [ 1148.869750][ T5624] Bluetooth: hci9: command tx timeout [ 1149.824623][ T5624] Bluetooth: hci10: command tx timeout [ 1150.938757][ T5624] Bluetooth: hci9: command tx timeout [ 1151.893926][ T5624] Bluetooth: hci10: command tx timeout [ 1153.963145][ T5624] Bluetooth: hci10: command tx timeout [ 1155.349026][T20762] netlink: 146 bytes leftover after parsing attributes in process `syz.2.1920'. [ 1161.366681][ T32] INFO: task syz-executor:18845 blocked for more than 143 seconds. [ 1161.366721][ T32] Not tainted syzkaller #0 [ 1161.366745][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1161.366756][ T32] task:syz-executor state:D stack:24408 pid:18845 tgid:18845 ppid:1 task_flags:0x480140 flags:0x00080002 [ 1161.366826][ T32] Call Trace: [ 1161.366836][ T32] [ 1161.366851][ T32] __schedule+0x1259/0x6920 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1161.366880][ T32] ? __lock_acquire+0x4c5/0x1ec0 [ 1161.366941][ T32] ? __pfx___schedule+0x10/0x10 [ 1161.366963][ T32] ? find_held_lock+0x2b/0x80 [ 1161.366989][ T32] ? schedule+0x225/0x2c0 [ 1161.367018][ T32] schedule+0xdd/0x2c0 [ 1161.367045][ T32] schedule_timeout+0x1b2/0x280 [ 1161.367171][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 1161.367223][ T32] ? mark_held_locks+0x40/0x70 [ 1161.367275][ T32] __wait_for_common+0x2e7/0x4c0 [ 1161.367306][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 1161.367349][ T32] ? __pfx___wait_for_common+0x10/0x10 [ 1161.367394][ T32] remove_one+0x312/0x420 [ 1161.367495][ T32] ? up_write+0x2dc/0x5b0 [ 1161.367543][ T32] __simple_recursive_removal+0x148/0x5c0 [ 1161.367580][ T32] ? __pfx_remove_one+0x10/0x10 [ 1161.367620][ T32] debugfs_remove+0x5d/0x80 [ 1161.367650][ T32] nsim_dev_health_exit+0x3b/0xe0 [ 1161.367746][ T32] nsim_dev_reload_destroy+0x144/0x490 [ 1161.367819][ T32] nsim_drv_remove+0x52/0x1e0 [ 1161.367851][ T32] ? __pfx_nsim_bus_remove+0x10/0x10 [ 1161.367892][ T32] device_remove+0xcb/0x180 [ 1161.367976][ T32] device_release_driver_internal+0x44e/0x620 [ 1161.368019][ T32] bus_remove_device+0x2bc/0x560 [ 1161.368118][ T32] ? __pfx_bus_remove_device+0x10/0x10 [ 1161.368162][ T32] ? __pfx_ ** replaying previous printk message ** [ 1161.368162][ T32] ? __pfx_device_remove_attrs+0x10/0x10 [ 1161.368254][ T32] device_del+0x376/0x9b0 [ 1161.368290][ T32] ? __pfx_device_del+0x10/0x10 [ 1161.368323][ T32] ? __lock_acquire+0x4c5/0x1ec0 [ 1161.368369][ T32] device_unregister+0x1d/0xe0 [ 1161.368401][ T32] del_device_store+0x346/0x480 [ 1161.368449][ T32] ? __pfx_del_device_store+0x10/0x10 [ 1161.368495][ T32] ? find_held_lock+0x2b/0x80 [ 1161.368526][ T32] ? sysfs_file_kobj+0xe4/0x290 [ 1161.368644][ T32] ? sysfs_file_kobj+0xe4/0x290 [ 1161.368689][ T32] ? __pfx_del_device_store+0x10/0x10 [ 1161.368736][ T32] bus_attr_store+0x74/0xb0 [ 1161.368776][ T32] ? __pfx_bus_attr_store+0x10/0x10 [ 1161.368814][ T32] sysfs_kf_write+0xf2/0x150 [ 1161.368863][ T32] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1161.368905][ T32] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1161.368954][ T32] vfs_write+0x6af/0x1050 [ 1161.368986][ T32] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1161.369032][ T32] ? __pfx_vfs_write+0x10/0x10 [ 1161.369064][ T32] ? __pfx_do_sys_openat2+0x10/0x10 [ 1161.369123][ T32] ksys_write+0x12a/0x250 [ 1161.369153][ T32] ? __pfx_ksys_write+0x10/0x10 [ 1161.369193][ T32] do_syscall_64+0x121/0x770 [ 1161.369241][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1161.369274][ T32] RIP: 0033:0x7fe32495e98e [ 1161.369301][ T32] RSP: 002b:00007ffd14f6cab8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1161.369335][ T32] RAX: ffffffffffffffda RBX: 0000555584da1500 RCX: 00007fe32495e98e [ 1161.369358][ T32] RDX: 0000000000000001 RSI: 00007ffd14f6cb40 RDI: 0000000000000005 [ 1161.369378][ T32] RBP: 00007fe324a358a7 R08: 0000000000000000 R09: 0000000000000000 [ 1161.369399][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1161.369419][ T32] R13: 00007ffd14f6cb40 R14: 00007fe325754620 R15: 0000000000000003 [ 1161.369459][ T32] [ 1161.369480][ T32] INFO: task syz.3.1733:19046 blocked for more than 143 seconds. [ 1161.369503][ T32] Not tainted syzkaller #0 [ 1161.369520][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1161.369533][ T32] task:syz.3.1733 state:D stack:27544 pid:19046 tgid:19030 ppid:18411 task_flags:0x400140 flags:0x00080002 [ 1161.369612][ T32] Call Trace: [ 1161.369624][ T32] [ 1161.369642][ T32] __schedule+0x1259/0x6920 [ 1161.369673][ T32] ? __lock_acquire+0x4c5/0x1ec0 [ 1161.369732][ T32] ? __pfx___schedule+0x10/0x10 [ 1161.369761][ T32] ? find_held_lock+0x2b/0x80 [ 1161.369794][ T32] ? schedule+0x225/0x2c0 [ 1161.369830][ T32] schedule+0xdd/0x2c0 [ 1161.369861][ T32] schedule_preempt_disabled+0x13/0x30 [ 1161.369893][ T32] __mutex_lock+0xcbf/0x1bc0 [ 1161.369929][ T32] ? devlink_health_report+0x656/0xb00 [ 1161.504533][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1161.504578][ T32] ? devlink_recover_notify.constprop.0+0x1e3/0x550 [ 1161.504624][ T32] ? lock_acquire+0x1d1/0x380 [ 1161.504665][ T32] ? devlink_health_report+0x656/0xb00 [ 1161.504690][ T32] devlink_health_report+0x656/0xb00 [ 1161.504731][ T32] ? __pfx_devlink_health_report+0x10/0x10 [ 1161.504762][ T32] ? _copy_from_user+0x59/0xd0 [ 1161.504808][ T32] nsim_dev_health_break_write+0x166/0x210 [ 1161.504839][ T32] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 1161.504867][ T32] ? lock_acquire+0x1d1/0x380 [ 1161.504899][ T32] ? ksys_write+0x12a/0x250 [ 1161.504932][ T32] full_proxy_write+0x135/0x1a0 [ 1161.505056][ T32] vfs_write+0x2aa/0x1050 [ 1161.505081][ T32] ? __pfx_full_proxy_write+0x10/0x10 [ 1161.505117][ T32] ? lock_acquire+0x1d1/0x380 [ 1161.505149][ T32] ? __fget_files+0x34/0x3d0 [ 1161.505176][ T32] ? __pfx_vfs_write+0x10/0x10 [ 1161.505199][ T32] ? find_held_lock+0x2b/0x80 [ 1161.505226][ T32] ? __fget_files+0x215/0x3d0 [ 1161.505258][ T32] ? __fget_files+0x21f/0x3d0 [ 1161.505295][ T32] ksys_write+0x12a/0x250 [ 1161.505320][ T32] ? __pfx_ksys_write+0x10/0x10 [ 1161.505355][ T32] do_syscall_64+0x121/0x770 [ 1161.505404][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1161.505432][ T32] RIP: 0033:0x7f1b1059e159 [ 1161.505454][ T32] RSP: 002b:00007f1b114a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1161.505479][ T32] RAX: ffffffffffffffda RBX: 00007f1b10826450 RCX: 00007f1b1059e159 [ 1161.505497][ T32] RDX: 0000000000000089 RSI: 0000200000000280 RDI: 000000000000000c [ 1161.505514][ T32] RBP: 00007f1b10635024 R08: 0000000000000000 R09: 0000000000000000 [ 1161.505530][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1161.505546][ T32] R13: 00007f1b108264e8 R14: 00007f1b10826450 R15: 00007fffa0456818 [ 1161.505582][ T32] [ 1161.505641][ T32] [ 1161.505641][ T32] Showing all locks held in the system: [ 1161.505701][ T32] locks held by pr/ttyS0/16: 2, last CPU#0: [ 1161.505787][ T32] #0: ffffffff8edd8138 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x49/0x60 [ 1161.505872][ T32] #1: ffffffff9bc4a078 (&port_lock_key){-...}-{3:3}, at: univ8250_console_device_lock+0x64/0xc0 [ 1161.509685][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 1161.509708][ T32] #0: ffffffff8edebe60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1161.509802][ T32] locks held by kworker/u8:3/50: 4, on CPU#0: [ 1161.509821][ T32] #0: ffff88801d2c6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1161.509889][ T32] #1: ffffc90000ba7d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1161.509953][ T32] #2: ffffffff90cb74a8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 1161.510094][ T32] #3: ffffffff90ccff80 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_notifier_net+0x1c/0xf0 [ 1161.510234][ T32] locks held by getty/5378: 2, on CPU#1: [ 1161.510253][ T32] #0: ffff888036ebc0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1161.510390][ T32] #1: ffffc900032262e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 1161.510475][ T32] locks held by syz-executor/5607: 1, last CPU#1: [ 1161.510495][ T32] #0: ffff88802c025038 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x124/0xa00 [ 1161.510566][ T32] locks held by syz-executor/18845: 7, on CPU#1: [ 1161.510583][ T32] #0: ffff88803336a460 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1161.510646][ T32] #1: ffff8880340ec880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1161.510716][ T32] #2: ffff888029d08d28 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1161.510801][ T32] #3: ffffffff90236a20 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1161.510876][ T32] #4: ffff888078f81128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 1161.510941][ T32] #5: ffff888078f80258 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_drv_remove+0x4a/0x1e0 [ 1161.511008][ T32] #6: ffff888065203630 (&sb->s_type->i_mutex_key#9/2){+.+.}-{4:4}, at: __simple_recursive_removal+0xe0/0x5c0 [ 1161.511090][ T32] locks held by syz.3.1733/19046: 3, on CPU#0: [ 1161.515520][ T32] #0: ffff8880581a82b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1161.515594][ T32] #1: ffff888020eee460 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1161.515660][ T32] #2: ffff888078f80258 (&devlink->lock_key){+.+.}-{4:4}, at: devlink_health_report+0x656/0xb00 [ 1161.515736][ T32] locks held by syz-executor/19247: 4, on CPU#0: [ 1161.515756][ T32] #0: ffff88803336a460 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1161.515834][ T32] #1: ffff8880353e5080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1161.515907][ T32] #2: ffff888029d08d28 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1161.515985][ T32] #3: ffffffff90236a20 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1161.516063][ T32] locks held by syz-executor/19300: 4, on CPU#1: [ 1161.516082][ T32] #0: ffff88803336a460 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1161.516147][ T32] #1: ffff8880681b4c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1161.516218][ T32] #2: ffff888029d08d28 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1161.516294][ T32] #3: ffffffff90236a20 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1161.516364][ T32] locks held by syz-executor/19727: 4, on CPU#1: [ 1161.516383][ T32] #0: ffff88803336a460 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1161.516447][ T32] #1: ffff888079eef080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1161.516515][ T32] #2: ffff888029d08d28 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1161.516590][ T32] #3: ffffffff90236a20 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1161.516664][ T32] locks held by syz-executor/19950: 4, on CPU#1: [ 1161.516681][ T32] #0: ffff88803336a460 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1161.516754][ T32] #1: ffff888067a50880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1161.516821][ T32] #2: ffff888029d08d28 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1161.516896][ T32] #3: ffffffff90236a20 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1161.522492][ T32] locks held by syz-executor/19994: 4, on CPU#1: [ 1161.522515][ T32] #0: ffff88803336a460 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1161.522584][ T32] #1: ffff88807b56bc80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1161.522655][ T32] #2: ffff888029d08d28 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1161.522738][ T32] #3: ffffffff90236a20 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1161.522814][ T32] locks held by syz-executor/20354: 4, on CPU#0: [ 1161.522832][ T32] #0: ffff88803336a460 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1161.522895][ T32] #1: ffff88807e3d3880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1161.522965][ T32] #2: ffff888029d08d28 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1161.523039][ T32] #3: ffffffff90236a20 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1161.523113][ T32] locks held by syz-executor/20588: 4, on CPU#0: [ 1161.523132][ T32] #0: ffff88803336a460 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1161.523195][ T32] #1: ffff88803e848880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1161.523264][ T32] #2: ffff888029d08d28 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1161.523338][ T32] #3: ffffffff90236a20 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1161.523429][ T32] locks held by syz-executor/20639: 4, on CPU#0: [ 1161.523448][ T32] #0: ffff88803336a460 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1161.523510][ T32] #1: ffff888067865c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1161.523786][ T32] #2: ffff888029d08d28 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1161.523861][ T32] #3: ffffffff90236a20 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1161.527958][ T32] locks held by syz.2.1927/20823: 2, last CPU#0: [ 1161.527980][ T32] #0: ffffffff90cb74a8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0 [ 1161.528053][ T32] #1: ffffffff90ccff80 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x21e/0x780 [ 1161.530035][ T32] locks held by syz.2.1927/20824: 2, last CPU#0: [ 1161.530054][ T32] #0: ffffffff90cb74a8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0 [ 1161.530121][ T32] #1: ffffffff8edebe60 (rcu_read_lock){....}-{1:3}, at: is_bpf_text_address+0x25/0x1a0 [ 1161.530243][ T32] [ 1161.530249][ T32] ============================================= [ 1161.530249][ T32] [ 1161.530273][ T32] NMI backtrace for cpu 1 [ 1161.530289][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1161.530320][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1161.530334][ T32] Call Trace: [ 1161.530343][ T32] [ 1161.530353][ T32] dump_stack_lvl+0x100/0x190 [ 1161.530388][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1161.530425][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1161.530466][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 1161.530512][ T32] sys_info+0x141/0x190 [ 1161.530545][ T32] watchdog+0xcb1/0x1030 [ 1161.530589][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1161.530617][ T32] ? __pfx_watchdog+0x10/0x10 [ 1161.530650][ T32] ? __kthread_parkme+0x18f/0x230 [ 1161.530691][ T32] ? kthread+0x13a/0x450 [ 1161.530716][ T32] ? __pfx_watchdog+0x10/0x10 [ 1161.530756][ T32] kthread+0x373/0x450 [ 1161.530781][ T32] ? __pfx_kthread+0x10/0x10 [ 1161.530809][ T32] ret_from_fork+0x730/0xd60 [ 1161.530850][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1161.530890][ T32] ? __switch_to+0x800/0x10f0 [ 1161.530930][ T32] ? __switch_to_asm+0x39/0x70 [ 1161.530967][ T32] ? __pfx_kthread+0x10/0x10 [ 1161.530996][ T32] ret_from_fork_asm+0x1a/0x30 [ 1161.531050][ T32] [ 1161.531070][ T32] Sending NMI from CPU 1 to CPUs 0: [ 1161.531111][ C0] NMI backtrace for cpu 0 [ 1161.531125][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 1161.531152][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1161.531166][ C0] RIP: 0010:io_serial_in+0x87/0xb0 [ 1161.531253][ C0] Code: f4 5d fc 48 8d 7d 40 44 89 e1 48 b8 00 00 00 00 00 fc ff df 48 89 fa d3 e3 48 c1 ea 03 80 3c 02 00 75 1a 66 03 5d 40 89 da ec <5b> 0f b6 c0 5d 41 5c e9 3d 47 22 06 e8 68 0b d0 fc eb a2 e8 f1 0b [ 1161.531275][ C0] RSP: 0018:ffffc90000157958 EFLAGS: 00000002 [ 1161.531295][ C0] RAX: dffffc0000000000 RBX: 00000000000003fd RCX: 0000000000000000 [ 1161.531311][ C0] RDX: 00000000000003fd RSI: ffffffff85ad2e70 RDI: ffffffff9bc4a0a0 [ 1161.531326][ C0] RBP: ffffffff9bc4a060 R08: 0000000000000001 R09: 000000000000001f [ 1161.531342][ C0] R10: 0000000000000000 R11: 205d323354202020 R12: 0000000000000000 [ 1161.531358][ C0] R13: 0000000000000020 R14: fffffbfff3789469 R15: dffffc0000000000 [ 1161.531374][ C0] FS: 0000000000000000(0000) GS:ffff888123b6d000(0000) knlGS:0000000000000000 [ 1161.531397][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1161.531413][ C0] CR2: 0000200000387000 CR3: 00000000715ce000 CR4: 00000000003526f0 [ 1161.531429][ C0] Call Trace: [ 1161.531437][ C0] [ 1161.531446][ C0] wait_for_lsr+0x13a/0x210 [ 1161.531475][ C0] serial8250_fifo_wait_for_lsr_thre+0x5f/0xd0 [ 1161.531505][ C0] __serial8250_console_fifo_write+0xa5/0x290 [ 1161.531531][ C0] ? __pfx_io_serial_out+0x10/0x10 [ 1161.531570][ C0] serial8250_console_write+0xf46/0x1330 [ 1161.531606][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 1161.531639][ C0] ? __nbcon_context_update_unsafe+0x1b6/0x220 [ 1161.531670][ C0] ? __pfx___nbcon_context_update_unsafe+0x10/0x10 [ 1161.531706][ C0] nbcon_emit_next_record+0x8f7/0xa70 [ 1161.531738][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 1161.531768][ C0] ? nbcon_context_try_acquire+0x3a6/0xc60 [ 1161.531796][ C0] ? do_raw_spin_lock+0xd0/0x260 [ 1161.531837][ C0] ? __pfx___cant_migrate+0x10/0x10 [ 1161.531860][ C0] ? _raw_spin_lock_irqsave+0x42/0x60 [ 1161.531900][ C0] nbcon_emit_one+0x1a8/0x2b0 [ 1161.531928][ C0] ? __pfx_nbcon_emit_one+0x10/0x10 [ 1161.531961][ C0] nbcon_kthread_func+0x613/0x7d0 [ 1161.531993][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1161.532026][ C0] ? __kthread_parkme+0x18f/0x230 [ 1161.532063][ C0] ? kthread+0x13a/0x450 [ 1161.532085][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1161.532114][ C0] kthread+0x373/0x450 [ 1161.532137][ C0] ? __pfx_kthread+0x10/0x10 [ 1161.532163][ C0] ret_from_fork+0x730/0xd60 [ 1161.532199][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1161.532246][ C0] ? __switch_to+0x800/0x10f0 [ 1161.532274][ C0] ? __switch_to_asm+0x39/0x70 [ 1161.532309][ C0] ? __pfx_kthread+0x10/0x10 [ 1161.532338][ C0] ret_from_fork_asm+0x1a/0x30 [ 1161.532383][ C0] [ 1161.545761][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1163.074070][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1163.083186][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1163.093254][ T32] Call Trace: [ 1163.096532][ T32] [ 1163.099462][ T32] dump_stack_lvl+0x100/0x190 [ 1163.104154][ T32] vpanic+0x553/0x970 [ 1163.108140][ T32] ? __pfx_vpanic+0x10/0x10 [ 1163.112655][ T32] panic+0xd1/0xe0 [ 1163.116377][ T32] ? __pfx_panic+0x10/0x10 [ 1163.120971][ T32] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 1163.127138][ T32] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 1163.133304][ T32] ? watchdog.cold+0x1ec/0x234 [ 1163.138076][ T32] watchdog.cold+0x1fd/0x234 [ 1163.142693][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1163.148533][ T32] ? __pfx_watchdog+0x10/0x10 [ 1163.153223][ T32] ? __kthread_parkme+0x18f/0x230 [ 1163.158261][ T32] ? kthread+0x13a/0x450 [ 1163.162503][ T32] ? __pfx_watchdog+0x10/0x10 [ 1163.167363][ T32] kthread+0x373/0x450 [ 1163.171437][ T32] ? __pfx_kthread+0x10/0x10 [ 1163.176033][ T32] ret_from_fork+0x730/0xd60 [ 1163.180667][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1163.185799][ T32] ? __switch_to+0x800/0x10f0 [ 1163.190486][ T32] ? __switch_to_asm+0x39/0x70 [ 1163.195261][ T32] ? __pfx_kthread+0x10/0x10 [ 1163.199987][ T32] ret_from_fork_asm+0x1a/0x30 [ 1163.204801][ T32] [ 1163.208102][ T32] Kernel Offset: disabled [ 1163.212423][ T32] Rebooting in 86400 seconds..