last executing test programs: 24.485871796s ago: executing program 2 (id=3579): unshare$auto(0x40000080) quotactl$auto(0x100, &(0x7f0000000080)='/deq/ram7\x00\x00\xa9\xa5\xa2', 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6n\xbe\xa6\x01\xc2B#\xb5\xa7\xee$\x8d\xc4\xe9h5\xf7\xb3\xfdld\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4\xdb\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00\x00', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) pwrite64$auto(0xffffffffffffffff, 0x0, 0x0, 0x8) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r1 = socket(0xa, 0x3, 0x3b) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r2 = mq_open$auto(0x0, 0x7e, 0xffff, 0x0) mq_timedsend$auto(r2, &(0x7f0000000100)='\xcf\x8d\xb6\xaa\x80\xd5\xb4_:A\xacz\xdc\xa0\x1d', 0x7, 0x9, &(0x7f0000000240)={0x8000000000009, 0x101}) waitid$auto_P_PGID(0x2, 0x0, 0x0, 0x6, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) cachestat$auto(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r1) listxattrat$auto(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x2, &(0x7f0000000180)='(\x00', 0x7) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card0/pcm0p/sub4/sw_params\x00', 0x5a0, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_register$auto(0x2, 0x21, &(0x7f0000000240), 0x1f) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video7\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r3, 0x0, 0x0) r4 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mtd0\x00', 0x402, 0x0) ioctl$auto_MEMLOCK(r4, 0x40084d05, &(0x7f00000000c0)={0x6, 0x6}) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x8000000000000000) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) chown$auto(0x0, 0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x4, 0x0, 0x6, 0x0, 0x80000000) 24.243637718s ago: executing program 3 (id=3580): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rt_sigsuspend$auto(0x0, 0x8) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x200c03, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0x6, 0x0, 0x0, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = socket(0x2b, 0x1, 0x1) ioctl$auto_RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, &(0x7f0000000440)=0x77b) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000540)='/sys/bus/hid/drivers/petalynx/new_id\x00', 0x22081, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = socketcall$auto(0x9, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x200, 0x0) r5 = ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) sendmmsg$auto(r5, &(0x7f00000002c0)={{0x0, 0x9, &(0x7f0000000080)={&(0x7f0000000180)="cb7978ababe605edf078e6f2726ae03e663c080c0d6c169eec931ca2ea579299bf44495b1fe078f2e9c5586aa59caa813549", 0xfffffffffffffffd}, 0xfffffffffffffff7, 0x0, 0x6, 0x24f}, 0x800}, 0x8, 0xff) ioctl$auto(0x3, 0xae41, r3) io_uring_register$auto_IORING_REGISTER_FILES_UPDATE2(r2, 0xe, 0x0, 0x7) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYBLOB="2538a948b1ac59e46c81549f2cafa160c8b559d82e5e56d0f26cf8139c0dd454fbd27335a526e4eab0b485c0a15a6c4fb99a2220a94de1497e27c36dcbed2b7d3d6a47a907947a327e1de954498c94376cb82fb8536d15beca2979526106be45e82b1b81fd1c4120a6610d667dfb5c2fd9542964bd1e43915d1b16", @ANYRES64=r1, @ANYRES32=r3, @ANYRESHEX=r5, @ANYBLOB="050b0e690b843374d299ae7bbeb411f4b5928dc4ba10cfd229c0c1ef0929536d3a26af4854bed13977db9b5cad4d96a252d8e395835f3236b2b4f83eda662642319fab4bda174915ab18ef563c", @ANYRES32=r0, @ANYRES16=r3, @ANYRES64=r3], 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000000) ioctl$auto_KVM_GET_MSRS(r2, 0x4400ae8f, 0x0) r6 = ioctl$auto_KVM_CREATE_VM(r2, 0xae80, 0x0) keyctl$auto(0x1f, 0x0, 0x6, 0x3, 0x3ff) sendmsg$auto_NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000002500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000024c0)={&(0x7f0000001200)=ANY=[@ANYBLOB="a0120000", @ANYRES16=0x0, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="8700510097bc917cfded2e13036d535849e1a8993b76527d94b797bfa35d40badaa230645672242bd39d1d16fa88519d547f30d45b72434aa71afcfa22763518a7bef7ede6ecc0aa5a2f040000008b6580a8acf0a131b5d5192a907b7adf42260680d21ab2d52b93063c7f825dded9f90057bc54cf5d61c9ea1b457b73f99d0e442f6f95a64fbf002128d589c59290960331497bf630b8e50dcf2df55bb6d96c901af52dd754616ee72f8344972b012ce18cd5743a62efc2aaccca6917865dd000429114bd00bc2c8a249ca904b8fa2e9a80f41e6de3ae5a0f251ff78804002c80040004800400428004002d01"], 0x12a0}}, 0x8000) 22.357983604s ago: executing program 2 (id=3583): close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x84) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) close$auto(0xffffffffffffffff) unshare$auto(0x40000080) unshare$auto(0x40000080) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x420c61, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r1, &(0x7f0000000000)=""/33, 0x21) preadv$auto(0x3, &(0x7f00000004c0)={0x0, 0x8000000}, 0x3, 0x10000, 0x10) getsockopt$auto_SO_PEERPIDFD(0xffffffffffffffff, 0x0, 0x4d, &(0x7f0000000080)='/dev/ram7\x00', 0x0) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_DEACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0], 0x14e0}, 0x1, 0x0, 0x0, 0x4044041}, 0x40091) socket(0xf, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000040), r2) sendmsg$auto_OVS_FLOW_CMD_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r3, @ANYBLOB="010025bd7000fddbdf25030000000400080004020180fe019a8008004600", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0xee01, @ANYBLOB="0800a3000a01010008002300", @ANYRES32=0x0, @ANYBLOB='\b\x00z\x00', @ANYRES32=0x0, @ANYBLOB="00b432042f40b96601000080b99d368b7e0e089f0c9c4affef5ab5f4c80d6f9794a3dd5bcdc4b8479a8e2a11d85e4574cc401d010873883475ee6ccb1428f3f8af6fee8700c2135c14687aa244d93454a7f60e3798ab86f2901163ad0f93c254759f7e17b0f9464326c02b75ae6811250aa7533923fc8b9957a270a7f86b84db48816081e120b8463da76c79a7a19e18958d6539c941a204a78c9df2d8ab556220e5"], 0x21c}, 0x1, 0x0, 0x0, 0x200400f0}, 0x40044) select$auto(0x6, &(0x7f00000000c0)={[0x35cb81de, 0x0, 0x1ee, 0xffffffffffffffff, 0xfffffffffffffffe, 0x7ff, 0xe7, 0x80000001, 0x0, 0x826, 0x2, 0x2, 0x80006, 0x400, 0x2, 0x7]}, &(0x7f0000000140)={[0xffffffffffffffff, 0x1000, 0x5, 0x4000004, 0x24, 0x9, 0x10001, 0xffffffffffffff67, 0x82, 0x10001, 0x978, 0x0, 0x8000000000000001, 0x0, 0xa0, 0x3]}, 0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x80000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x480003, 0x0) mmap$auto(0x4000000000, 0x40000c, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40602, 0x0) ioctl$auto_BCH_IOCTL_DISK_ADD(0xffffffffffffffff, 0x4010bc04, 0x0) 19.231234573s ago: executing program 2 (id=3589): unshare$auto(0x40000080) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000540)=@sco, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x40000011, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) mprotect$auto(0x1ffffffff000, 0x100007, 0x0) utime$auto(0x0, &(0x7f0000000140)={0xfffffffffffffff7, 0x1ff}) r2 = open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x45) fanotify_mark$auto(r0, 0x5, 0xdc07, r2, 0x0) sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x15}, 0x4000085) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000280), 0xffffffffffffffff) msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, &(0x7f0000000180)={{0x80000100, 0xee01, 0xee01, 0xfff, 0x87, 0x40, 0x3}, 0x0, 0x0, 0x7ff, 0x20003ff, 0x2000005, 0xa, 0x40, 0x4, 0x3, 0x3fb, @raw=0x7fff}) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) ioctl$auto(0x3, 0x541b, 0x10000000000402) setrlimit$auto(0x7, &(0x7f0000000500)={0x8000000, 0x7}) futimesat$auto(r2, &(0x7f0000000200)='./bus\x00', &(0x7f0000000240)={0x731, 0x8000000000000}) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x402) sendmsg$auto_ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x2004c004) request_key$auto(&(0x7f00000003c0)='/dev/kvm\x00', 0x0, &(0x7f00000004c0)='veth0_macvtap\x00', 0x1) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 9.968405333s ago: executing program 1 (id=3601): setgroups$auto(0xc00000000, 0xfffffffffffffffc) bpf$auto(0x18, &(0x7f0000000380)=@bpf_attr_11={0x4, 0x9, 0x866b, 0x100005, 0x80000009, 0xfffffe01, 0xe6d6}, 0x92) mprotect$auto(0x110c230000, 0xa588, 0x6) mprotect$auto(0x4, 0x397, 0x4000000) ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000100)={0x2, 0x7, 0xffff, 0x1, &(0x7f0000000240), 0xc698, 0x3, 0x80005, @number_of_packets=0x8, 0x81, 0xc, 0x0, [{0x0, 0x1, 0xffffff00}, {0x9, 0xfffffffb, 0xf}, {0x0, 0x0, 0x6}, {0x401, 0xfffffff8, 0x100}]}) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r0 = prctl$auto_PR_SET_MM_ARG_START(0xec, 0x8, 0x0, 0x1ff, 0x5) futimesat$auto(r0, &(0x7f0000000080)='./file0\x00', 0x0) r1 = setfsgid$auto(0xee01) setsockopt$auto(0xffffffffffffffff, 0x7ffffffc, 0x4, 0x0, 0xff) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x2}, 0x6) msgctl$auto_IPC_STAT(0x5f, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000940)={'batadv0\x00'}) set_mempolicy$auto(0x8003, &(0x7f0000000280)=0x7b, 0x4) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, 0x0, 0x14) setsockopt$auto(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x8002) writev$auto(0x3, &(0x7f00000000c0)={0x0, 0x7111}, 0x8) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bus/usb/003/001\x00', 0x40101, 0x0) keyctl$auto(0x1f, 0x1, 0x6, r1, 0x3ff) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) mremap$auto(0x110c231000, 0x0, 0x101, 0x3, 0x0) open(&(0x7f0000000300)='}[,&*}\x00', 0x0, 0x408) socket(0xa, 0x1, 0x6) 8.306835067s ago: executing program 1 (id=3602): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rt_sigsuspend$auto(0x0, 0x8) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x200c03, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0x6, 0x0, 0x0, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = socket(0x2b, 0x1, 0x1) ioctl$auto_RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, &(0x7f0000000440)=0x77b) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000540)='/sys/bus/hid/drivers/petalynx/new_id\x00', 0x22081, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = socketcall$auto(0x9, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x200, 0x0) r5 = ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) sendmmsg$auto(r5, &(0x7f00000002c0)={{0x0, 0x9, &(0x7f0000000080)={&(0x7f0000000180)="cb7978ababe605edf078e6f2726ae03e663c080c0d6c169eec931ca2ea579299bf44495b1fe078f2e9c5586aa59caa813549", 0xfffffffffffffffd}, 0xfffffffffffffff7, 0x0, 0x6, 0x24f}, 0x800}, 0x8, 0xff) ioctl$auto(0x3, 0xae41, r3) io_uring_register$auto_IORING_REGISTER_FILES_UPDATE2(r2, 0xe, 0x0, 0x7) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYBLOB="2538a948b1ac59e46c81549f2cafa160c8b559d82e5e56d0f26cf8139c0dd454fbd27335a526e4eab0b485c0a15a6c4fb99a2220a94de1497e27c36dcbed2b7d3d6a47a907947a327e1de954498c94376cb82fb8536d15beca2979526106be45e82b1b81fd1c4120a6610d667dfb5c2fd9542964bd1e43915d1b16", @ANYRES64=r1, @ANYRES32=r3, @ANYRESHEX=r5, @ANYBLOB="050b0e690b843374d299ae7bbeb411f4b5928dc4ba10cfd229c0c1ef0929536d3a26af4854bed13977db9b5cad4d96a252d8e395835f3236b2b4f83eda662642319fab4bda174915ab18ef563c", @ANYRES32=r0, @ANYRES16=r3, @ANYRES64=r3], 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000000) ioctl$auto_KVM_GET_MSRS(r2, 0x4400ae8f, 0x0) r6 = ioctl$auto_KVM_CREATE_VM(r2, 0xae80, 0x0) keyctl$auto(0x1f, 0x0, 0x6, 0x3, 0x3ff) sendmsg$auto_NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000002500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000024c0)={&(0x7f0000001200)=ANY=[@ANYBLOB="a0120000", @ANYRES16=0x0, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="8700510097bc917cfded2e13036d535849e1a8993b76527d94b797bfa35d40badaa230645672242bd39d1d16fa88519d547f30d45b72434aa71afcfa22763518a7bef7ede6ecc0aa5a2f040000008b6580a8acf0a131b5d5192a907b7adf42260680d21ab2d52b93063c7f825dded9f90057bc54cf5d61c9ea1b457b73f99d0e442f6f95a64fbf002128d589c59290960331497bf630b8e50dcf2df55bb6d96c901af52dd754616ee72f8344972b012ce18cd5743a62efc2aaccca6917865dd000429114bd00bc2c8a249ca904b8fa2e9a80f41e6de3ae5a0f251ff78804002c80040004800400428004002d01"], 0x12a0}}, 0x8000) 6.462550165s ago: executing program 0 (id=3604): pselect6$auto(0x1, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000140)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) shutdown$auto(0x200000003, 0x2) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) ioctl$auto_PPPIOCATTCHAN(r1, 0x40047438, 0x0) 6.099080705s ago: executing program 1 (id=3605): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES64=r0, @ANYBLOB="01002fbd"], 0x30}}, 0x0) (async) sendmsg$auto_NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000002780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002740)={&(0x7f0000000840)=ANY=[@ANYBLOB='L\x00_', @ANYRES16=0x0, @ANYBLOB="000229bd7000fddbdf25600000006800360143fbaf90afda9669801aaf8fb746e467d8514a92034c67a3264099eb908342fc945e349d9b81c8849c54e955099e31e5cd43b70d3370be1d9aeaadc8fa9a82d825755eba454f6efcea327ae63462614f1b919afb4c24642beb19e071defbe14fe4fa5fb5bd00b980d0a9818fac4f79e5448e520e113b91843673adda6c16c86e217c6a68642d0924b58a302006465edbe451acc7c9f097255e821cc93d04ba53571d8f93639ef2ef8645cb23a82ecba109e9437c4ecc23adbfefdc1572c4d47091adab2ef44599f84ec5db8baa5359642c1aa3f538a0a9c85ce5497fd6aac17565d450be1ab8f6947c3d76703e5d67d5ac02c3dc5b2c75faf10800e100", @ANYRES32=0x0, @ANYBLOB="1800e78010001a800c00868008002700", @ANYRES32=r0, @ANYBLOB="0400c08008005300", @ANYRES32=0xee01, @ANYBLOB="0000000400dd000c002e010100000000000000"], 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x20008844) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x3ffffe, 0x1, 0x10, 0xdd, 0x1) (async) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) (async) mmap$auto(0x0, 0x7, 0x4000000000df, 0xeb1, 0x401, 0x7ffc) (async) r1 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000180), r0) sendmsg$auto_KSMBD_EVENT_SPNEGO_AUTHEN_RESPONSE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x10, 0x70bd25, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) (async) r2 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/pcmC1D0p\x00', 0x200, 0x0) ioctl$auto___SNDRV_PCM_IOCTL_SYNC_PTR64(r2, 0xc0884123, &(0x7f0000000080)={0x7, 0x0, @status={0x8001, 0x0, {}, 0x4, {}, {0x2, 0x6}, 0x3, 0x0, {0x7fffffff, 0x2}}, @reserved="69b0ea74c17f4805472e0fdf4b8dd947a5d7b5c336e0da7101b390627508fb991853f5c6925f133808056829f674aeca2f48c5e864001e648a89aa0e007f4336"}) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/pcrypt/pencrypt/parallel_cpumask\x00', 0x80302, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/oom_adj\x00', 0x8000, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) socket(0x11, 0x80003, 0x300) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket(0x2, 0x2, 0x73) (async) socket(0xa, 0x801, 0x84) (async) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x42, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) (async) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) socket(0x2, 0x3, 0xa) socket(0x21, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) (rerun: 32) 5.521794281s ago: executing program 3 (id=3580): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rt_sigsuspend$auto(0x0, 0x8) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x200c03, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0x6, 0x0, 0x0, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = socket(0x2b, 0x1, 0x1) ioctl$auto_RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, &(0x7f0000000440)=0x77b) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000540)='/sys/bus/hid/drivers/petalynx/new_id\x00', 0x22081, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = socketcall$auto(0x9, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x200, 0x0) r5 = ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) sendmmsg$auto(r5, &(0x7f00000002c0)={{0x0, 0x9, &(0x7f0000000080)={&(0x7f0000000180)="cb7978ababe605edf078e6f2726ae03e663c080c0d6c169eec931ca2ea579299bf44495b1fe078f2e9c5586aa59caa813549", 0xfffffffffffffffd}, 0xfffffffffffffff7, 0x0, 0x6, 0x24f}, 0x800}, 0x8, 0xff) ioctl$auto(0x3, 0xae41, r3) io_uring_register$auto_IORING_REGISTER_FILES_UPDATE2(r2, 0xe, 0x0, 0x7) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYBLOB="2538a948b1ac59e46c81549f2cafa160c8b559d82e5e56d0f26cf8139c0dd454fbd27335a526e4eab0b485c0a15a6c4fb99a2220a94de1497e27c36dcbed2b7d3d6a47a907947a327e1de954498c94376cb82fb8536d15beca2979526106be45e82b1b81fd1c4120a6610d667dfb5c2fd9542964bd1e43915d1b16", @ANYRES64=r1, @ANYRES32=r3, @ANYRESHEX=r5, @ANYBLOB="050b0e690b843374d299ae7bbeb411f4b5928dc4ba10cfd229c0c1ef0929536d3a26af4854bed13977db9b5cad4d96a252d8e395835f3236b2b4f83eda662642319fab4bda174915ab18ef563c", @ANYRES32=r0, @ANYRES16=r3, @ANYRES64=r3], 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000000) ioctl$auto_KVM_GET_MSRS(r2, 0x4400ae8f, 0x0) r6 = ioctl$auto_KVM_CREATE_VM(r2, 0xae80, 0x0) keyctl$auto(0x1f, 0x0, 0x6, 0x3, 0x3ff) sendmsg$auto_NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000002500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000024c0)={&(0x7f0000001200)=ANY=[@ANYBLOB="a0120000", @ANYRES16=0x0, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="8700510097bc917cfded2e13036d535849e1a8993b76527d94b797bfa35d40badaa230645672242bd39d1d16fa88519d547f30d45b72434aa71afcfa22763518a7bef7ede6ecc0aa5a2f040000008b6580a8acf0a131b5d5192a907b7adf42260680d21ab2d52b93063c7f825dded9f90057bc54cf5d61c9ea1b457b73f99d0e442f6f95a64fbf002128d589c59290960331497bf630b8e50dcf2df55bb6d96c901af52dd754616ee72f8344972b012ce18cd5743a62efc2aaccca6917865dd000429114bd00bc2c8a249ca904b8fa2e9a80f41e6de3ae5a0f251ff78804002c80040004800400428004002d01"], 0x12a0}}, 0x8000) 4.28715249s ago: executing program 0 (id=3606): syslog$auto(0x4, &(0x7f0000007980)='\n)&*%#.+&%\r\x00', 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_netdev(&(0x7f00000002c0), 0xffffffffffffffff) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfded, 0x3) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="17000000", @ANYBLOB="7600279e"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000) r0 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(r0, &(0x7f00000000c0)="632d1bfe595046ab5c40bd6163307acb6d16baef6176e669a216aae1836674fdd80500ffffffffffdfff1a0e00"/56, 0x38) r1 = socket(0x2b, 0x1, 0x1) capset$auto(0x0, 0x0) getsockopt$auto(r1, 0x0, 0x486, 0x0, 0x0) 4.043215262s ago: executing program 0 (id=3607): unshare$auto(0x40000080) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000540)=@sco, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x40000011, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) mprotect$auto(0x1ffffffff000, 0x100007, 0x0) utime$auto(0x0, &(0x7f0000000140)={0xfffffffffffffff7, 0x1ff}) r2 = open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x45) fanotify_mark$auto(r0, 0x5, 0xdc07, r2, 0x0) sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x15}, 0x4000085) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000280), 0xffffffffffffffff) msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, &(0x7f0000000180)={{0x80000100, 0xee01, 0xee01, 0xfff, 0x87, 0x40, 0x3}, 0x0, 0x0, 0x7ff, 0x20003ff, 0x2000005, 0xa, 0x40, 0x4, 0x3, 0x3fb, @raw=0x7fff}) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) ioctl$auto(0x3, 0x541b, 0x10000000000402) setrlimit$auto(0x7, &(0x7f0000000500)={0x8000000, 0x7}) futimesat$auto(r2, &(0x7f0000000200)='./bus\x00', &(0x7f0000000240)={0x731, 0x8000000000000}) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x402) sendmsg$auto_ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x2004c004) request_key$auto(&(0x7f00000003c0)='/dev/kvm\x00', &(0x7f0000000400)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x0, 0x1) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 3.987641816s ago: executing program 1 (id=3608): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0xa, 0x5, 0x84) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) close$auto(0xffffffffffffffff) unshare$auto(0x40000080) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x420c61, 0x0) unshare$auto(0x40000080) socket(0x2, 0x2, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) setsockopt$auto(0x3, 0xfffffffd, 0xfffffff9, 0x0, 0x6) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000000)=""/33, 0x21) preadv$auto(0x3, &(0x7f00000004c0)={0x0, 0x8000000}, 0x3, 0x10000, 0x10) getsockopt$auto_SO_PEERPIDFD(0xffffffffffffffff, 0x0, 0x4d, &(0x7f0000000080)='/dev/ram7\x00', 0x0) setns(0xc9, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NFC_CMD_DEACTIVATE_TARGET(r3, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="010027bd7000ffdbdf251e"], 0x14e0}, 0x1, 0x0, 0x0, 0x4044041}, 0x40090) socket(0xf, 0x3, 0x2) select$auto(0x6, &(0x7f00000000c0)={[0x35cb81de, 0x0, 0x1ee, 0xffffffffffffffff, 0xfffffffffffffffe, 0x7ff, 0xe7, 0x41e, 0x0, 0x826, 0x2, 0x2, 0x80006, 0x400, 0x2, 0x7]}, 0x0, 0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x80000000) mseal$auto(0x0, 0x7dda, 0x0) madvise$auto(0x0, 0x200007, 0x8) epoll_ctl$auto(r1, 0x2e, r0, &(0x7f0000000080)={0x200, 0x10001}) 3.689681376s ago: executing program 3 (id=3609): r0 = prctl$auto_PR_SET_MM_END_CODE(0x4, 0x2, 0xffffffffffffffff, 0x2, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x7ffc) mmap$auto(0x0, 0x4005, 0xb, 0x40eb2, 0x401, 0x300000000000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x7) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', &(0x7f0000000140)='nfsd\x00', 0x10003, 0x0) mount$auto(0x0, &(0x7f0000000080)='}[,&*}\x00', 0x0, 0x7ffffffc, 0x0) socket(0xa, 0x2, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x18, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) socket(0xa, 0x3, 0x3b) connect$auto(0x3, 0x0, 0x58) ioctl$auto_USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001480), 0xffffffffffffffff) getxattr$auto(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x4) setsockopt$auto(0x400000000000003, 0x29, 0x16, 0x0, 0x20056b) setsockopt$auto(0x400000000000003, 0x29, 0x16, 0x0, 0x20056b) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d80)=ANY=[@ANYBLOB="05000000", @ANYRES16=0x0, @ANYBLOB="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"], 0xb5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48880) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x240202, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0x6, 0xffffffffffffffff) 3.619934004s ago: executing program 2 (id=3589): unshare$auto(0x40000080) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000540)=@sco, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x40000011, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) mprotect$auto(0x1ffffffff000, 0x100007, 0x0) utime$auto(0x0, &(0x7f0000000140)={0xfffffffffffffff7, 0x1ff}) r2 = open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x45) fanotify_mark$auto(r0, 0x5, 0xdc07, r2, 0x0) sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x15}, 0x4000085) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000280), 0xffffffffffffffff) msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, &(0x7f0000000180)={{0x80000100, 0xee01, 0xee01, 0xfff, 0x87, 0x40, 0x3}, 0x0, 0x0, 0x7ff, 0x20003ff, 0x2000005, 0xa, 0x40, 0x4, 0x3, 0x3fb, @raw=0x7fff}) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) ioctl$auto(0x3, 0x541b, 0x10000000000402) setrlimit$auto(0x7, &(0x7f0000000500)={0x8000000, 0x7}) futimesat$auto(r2, &(0x7f0000000200)='./bus\x00', &(0x7f0000000240)={0x731, 0x8000000000000}) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x402) sendmsg$auto_ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x2004c004) request_key$auto(&(0x7f00000003c0)='/dev/kvm\x00', 0x0, &(0x7f00000004c0)='veth0_macvtap\x00', 0x1) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 3.343795262s ago: executing program 3 (id=3610): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rt_sigsuspend$auto(0x0, 0x8) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x200c03, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = socket(0x2b, 0x1, 0x1) ioctl$auto_RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, &(0x7f0000000440)=0x77b) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000540)='/sys/bus/hid/drivers/petalynx/new_id\x00', 0x22081, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) r3 = socketcall$auto(0x9, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x200, 0x0) r5 = ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r3) io_uring_register$auto_IORING_REGISTER_FILES_UPDATE2(r2, 0xe, 0x0, 0x7) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYBLOB="2538a948b1ac59e46c81549f2cafa160c8b559d82e5e56d0f26cf8139c0dd454fbd27335a526e4eab0b485c0a15a6c4fb99a2220a94de1497e27c36dcbed2b7d3d6a47a907947a327e1de954498c94376cb82fb8536d15beca2979526106be45e82b1b81fd1c4120a6610d667dfb5c2fd9542964bd1e43915d1b16108c5fcd83819166", @ANYRES64=r1, @ANYRES32=r3, @ANYRESHEX=r5, @ANYBLOB="050b0e690b843374d299ae7bbeb411f4b5928dc4ba10cfd229c0c1ef0929536d3a26af4854bed13977db9b5cad4d96a252d8e395835f3236b2b4f83eda662642319fab4bda174915ab18ef563c", @ANYRES32=r0, @ANYRES16=r3, @ANYRES64=r3], 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000000) ioctl$auto_KVM_GET_MSRS(r2, 0x4400ae8f, 0x0) 2.042506882s ago: executing program 0 (id=3611): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rt_sigsuspend$auto(0x0, 0x8) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x200c03, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0x6, 0x0, 0x0, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = socket(0x2b, 0x1, 0x1) ioctl$auto_RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, &(0x7f0000000440)=0x77b) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000540)='/sys/bus/hid/drivers/petalynx/new_id\x00', 0x22081, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = socketcall$auto(0x9, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x200, 0x0) r5 = ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) sendmmsg$auto(r5, &(0x7f00000002c0)={{0x0, 0x9, &(0x7f0000000080)={&(0x7f0000000180)="cb7978ababe605edf078e6f2726ae03e663c080c0d6c169eec931ca2ea579299bf44495b1fe078f2e9c5586aa59caa813549", 0xfffffffffffffffd}, 0xfffffffffffffff7, 0x0, 0x6, 0x24f}, 0x800}, 0x8, 0xff) ioctl$auto(0x3, 0xae41, r3) io_uring_register$auto_IORING_REGISTER_FILES_UPDATE2(r2, 0xe, 0x0, 0x7) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYBLOB="2538a948b1ac59e46c81549f2cafa160c8b559d82e5e56d0f26cf8139c0dd454fbd27335a526e4eab0b485c0a15a6c4fb99a2220a94de1497e27c36dcbed2b7d3d6a47a907947a327e1de954498c94376cb82fb8536d15beca2979526106be45e82b1b81fd1c4120a6610d667dfb5c2fd9542964bd1e43915d1b16108c5fcd8381", @ANYRES64=r1, @ANYRES32=r3, @ANYRESHEX=r5, @ANYBLOB="050b0e690b843374d299ae7bbeb411f4b5928dc4ba10cfd229c0c1ef0929536d3a26af4854bed13977db9b5cad4d96a252d8e395835f3236b2b4f83eda662642319fab4bda174915ab18ef563c", @ANYRES32=r0, @ANYRES16=r3, @ANYRES64=r3], 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000000) ioctl$auto_KVM_GET_MSRS(r2, 0x4400ae8f, 0x0) r6 = ioctl$auto_KVM_CREATE_VM(r2, 0xae80, 0x0) keyctl$auto(0x1f, 0x0, 0x6, 0x3, 0x3ff) sendmsg$auto_NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000002500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000024c0)={&(0x7f0000001200)=ANY=[@ANYBLOB="a0120000", @ANYRES16=0x0, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="8700510097bc917cfded2e13036d535849e1a8993b76527d94b797bfa35d40badaa230645672242bd39d1d16fa88519d547f30d45b72434aa71afcfa22763518a7bef7ede6ecc0aa5a2f040000008b6580a8acf0a131b5d5192a907b7adf42260680d21ab2d52b93063c7f825dded9f90057bc54cf5d61c9ea1b457b73f99d0e442f6f95a64fbf002128d589c59290960331497bf630b8e50dcf2df55bb6d96c901af52dd754616ee72f8344972b012ce18cd5743a62efc2aaccca6917865dd000429114bd00bc2c8a249ca904b8fa2e9a80f41e6de3ae5a0f251ff78804002c80040004800400428004002d01"], 0x12a0}}, 0x8000) 2.019622958s ago: executing program 1 (id=3612): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0xa, 0x5, 0x84) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) close$auto(0xffffffffffffffff) unshare$auto(0x40000080) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x420c61, 0x0) unshare$auto(0x40000080) socket(0x2, 0x2, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) setsockopt$auto(0x3, 0xfffffffd, 0xfffffff9, 0x0, 0x6) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000000)=""/33, 0x21) preadv$auto(0x3, &(0x7f00000004c0)={0x0, 0x8000000}, 0x3, 0x10000, 0x10) getsockopt$auto_SO_PEERPIDFD(0xffffffffffffffff, 0x0, 0x4d, &(0x7f0000000080)='/dev/ram7\x00', 0x0) setns(0xc9, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NFC_CMD_DEACTIVATE_TARGET(r3, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000200)=ANY=[@ANYRES16, @ANYBLOB="010027bd7000ffdbdf251e"], 0x14e0}, 0x1, 0x0, 0x0, 0x4044041}, 0x40090) socket(0xf, 0x3, 0x2) select$auto(0x6, &(0x7f00000000c0)={[0x35cb81de, 0x0, 0x1ee, 0xffffffffffffffff, 0xfffffffffffffffe, 0x7ff, 0xe7, 0x41e, 0x0, 0x826, 0x2, 0x2, 0x80006, 0x400, 0x2, 0x7]}, 0x0, 0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x80000000) mseal$auto(0x0, 0x7dda, 0x0) madvise$auto(0x0, 0x200007, 0x8) epoll_ctl$auto(r1, 0x2e, r0, &(0x7f0000000080)={0x200, 0x10001}) 1.915805942s ago: executing program 2 (id=3613): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D2\x00', 0x0, 0x0) write$auto(r0, &(0x7f0000000280)='/\x00\x00\x00\x00audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6n\xbe\xa6\x01\xc2B#\xb5\xa7\xee$\x8d\xc4\xe9h5\xf7\xb3\xfdld\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4\xdb\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00\x00', 0x100000a3d9) unshare$auto(0x8000007ff) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) getsockopt$auto_SO_PEERPIDFD(0xffffffffffffffff, 0x0, 0x4d, 0x0, 0x0) ioperm$auto(0x7, 0x5ad2, 0x8) socket(0xa, 0x3, 0x3a) mmap$auto(0xffffffffffffffff, 0x0, 0x4000000002df, 0xef1, 0x401, 0x8000) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x1e, 0x3, 0x0) socket(0x28, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x18, 0x1, 0x1) pipe2$auto(0x0, 0x80) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0xfffc, 0x3ffffd, 0x7, 0x1d, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D0p\x00', 0x8000, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_LINK(r1, 0x40044160, 0x0) keyctl$auto(0x7, 0x0, 0x0, 0x0, 0x3ff) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x8) 1.887565s ago: executing program 3 (id=3614): unshare$auto(0x40000080) r0 = socket(0x2b, 0x1, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x40000011, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) mprotect$auto(0x1ffffffff000, 0x100007, 0x0) utime$auto(0x0, &(0x7f0000000140)={0xfffffffffffffff7, 0x1ff}) r2 = open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x45) fanotify_mark$auto(r0, 0x5, 0xdc07, r2, 0x0) sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x15}, 0x4000085) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000280), 0xffffffffffffffff) msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, &(0x7f0000000180)={{0x80000100, 0xee01, 0xee01, 0xfff, 0x87, 0x40, 0x3}, 0x0, 0x0, 0x7ff, 0x20003ff, 0x2000005, 0xa, 0x40, 0x4, 0x3, 0x3fb, @raw=0x7fff}) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) ioctl$auto(0x3, 0x541b, 0x10000000000402) setrlimit$auto(0x7, &(0x7f0000000500)={0x8000000, 0x7}) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x402) sendmsg$auto_ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x2004c004) request_key$auto(&(0x7f00000003c0)='/dev/kvm\x00', &(0x7f0000000400)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', &(0x7f00000004c0)='veth0_macvtap\x00', 0x1) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 252.730798ms ago: executing program 1 (id=3615): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0xfffffffffffffff8, 0x4080000000, 0x4, 0xab1, 0xffffffffffffffff, 0x200000000a6) socket(0x10, 0x2, 0x4) get_robust_list$auto(0x1, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), 0xffffffffffffffff) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001a00)={0x0, 0x12f8}, 0x1, 0x0, 0x0, 0x4080}, 0x2404a004) sendmsg$auto_IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYRES16], 0x1c}, 0x1, 0x0, 0x0, 0x8024}, 0x2400c090) r0 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r0, 0x29, 0x3e, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x110) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) read$auto_proc_tid_children_operations_internal(0xffffffffffffffff, &(0x7f00000005c0)=""/34, 0x22) r1 = pidfd_open$auto(0x1, 0x0) setns(r1, 0x60020000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) setreuid$auto(0x0, 0x20000000004) syz_clone3(&(0x7f0000000300)={0x193104480, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000200)={0x0, 0x19, 0x3800, 0x2, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x10, 0x8c48, 0x298, 0x3, 0x7f, 0x0, 0x6, 0xfffffffffffffffd}, {0x100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x4, 0x100000000}}) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 169.591074ms ago: executing program 3 (id=3616): pselect6$auto(0x1, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) r0 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/block/sda/state\x00', 0x100, 0x0) lseek$auto(0x3, 0x40, 0x1) r1 = socket(0xa, 0x2, 0x73) getsockopt$auto_SO_TIMESTAMPNS_NEW(r1, 0x0, 0x40, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) settimeofday$auto(&(0x7f0000000540)={0x5e, 0x1}, 0x0) shmctl$auto_IPC_RMID(0x4, 0x0, 0x0) r2 = setfsgid$auto(0x0) symlink$auto(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000440)='./file0\x00') rename$auto(&(0x7f00000004c0)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00') bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) shutdown$auto(r0, 0x37c) msgctl$auto_IPC_STAT(0x5f, 0x2, 0x0) rseq$auto(0x0, 0x20, 0x0, 0x8000006) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x16bd00, 0x0) rseq$auto(0x0, 0x6, 0x8, 0x10) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, 0x0, 0x14) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/cifs/smbd_receive_credit_max\x00', 0x4000, 0x0) setsockopt$auto(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x8002) r3 = setfsuid$auto(0xee00) keyctl$auto(0x1f, r3, 0x6, r2, 0x37f) mknod$auto(&(0x7f0000000100)='./file0\x00', 0x3, 0x9) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 116.833423ms ago: executing program 0 (id=3617): syslog$auto(0x4, &(0x7f0000007980)='\n)&*%#.+&%\r\x00', 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_netdev(&(0x7f00000002c0), 0xffffffffffffffff) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfded, 0x3) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="17000000", @ANYBLOB="7600279e"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000) r0 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(r0, &(0x7f00000000c0)="632d1bfe595046ab5c40bd6163307acb6d16baef6176e669a216aae1836674fdd80500ffffffffffdfff1a0e00"/56, 0x38) r1 = socket(0x2b, 0x1, 0x1) capset$auto(0x0, 0x0) r2 = getsockopt$auto(r1, 0x0, 0x486, 0x0, 0x0) setns(0xc9, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/udp_hash_entries\x00', 0x8000, 0x0) sendfile$auto(r0, r2, &(0x7f0000000040)=0x100, 0xd57a) read$auto_proc_sys_file_operations_proc_sysctl(r3, 0x0, 0x0) 115.251422ms ago: executing program 2 (id=3618): pselect6$auto(0x1, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) r0 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/block/sda/state\x00', 0x100, 0x0) lseek$auto(0x3, 0x40, 0x1) r1 = socket(0xa, 0x2, 0x73) getsockopt$auto_SO_TIMESTAMPNS_NEW(r1, 0x0, 0x40, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) settimeofday$auto(&(0x7f0000000540)={0x5e, 0x1}, 0x0) shmctl$auto_IPC_RMID(0x4, 0x0, 0x0) r2 = setfsgid$auto(0x0) symlink$auto(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000440)='./file0\x00') rename$auto(&(0x7f00000004c0)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00') bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) shutdown$auto(r0, 0x37c) msgctl$auto_IPC_STAT(0x5f, 0x2, 0x0) rseq$auto(0x0, 0x20, 0x0, 0x8000006) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x16bd00, 0x0) rseq$auto(0x0, 0x6, 0x8, 0x10) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, 0x0, 0x14) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/cifs/smbd_receive_credit_max\x00', 0x4000, 0x0) setsockopt$auto(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x8002) r3 = setfsuid$auto(0xee00) keyctl$auto(0x1f, r3, 0x6, r2, 0x37f) (fail_nth: 1) mknod$auto(&(0x7f0000000100)='./file0\x00', 0x3, 0x9) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 0s ago: executing program 0 (id=3619): open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x9}, 0x3) r0 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r0, &(0x7f0000000400)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000440)="661b0cbd4aeb29", 0x49}, 0x1, &(0x7f0000000200), 0x5, 0x3}, 0x5}, 0x2, 0x100) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) close$auto(0xffffffffffffffff) unshare$auto(0x40000080) ioctl$auto_FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0xffffffffffff8000) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x420c61, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video7\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000000)=""/33, 0x21) getsockopt$auto_SO_PEERPIDFD(0xffffffffffffffff, 0x0, 0x4d, &(0x7f0000000080)='/dev/ram7\x00', 0x0) setns(0xc9, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000080), r3) sendmsg$auto_NFC_CMD_DEACTIVATE_TARGET(r3, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="e0140000", @ANYRES16=r4, @ANYBLOB="010027bd7000ffdbdf251e"], 0x14e0}, 0x1, 0x0, 0x0, 0x4044041}, 0x40090) socket(0xf, 0x3, 0x2) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x80000000) epoll_ctl$auto(r1, 0x2e, 0xffffffffffffffff, &(0x7f0000000080)={0x200, 0x10001}) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Virtual-1/edid_override\x00', 0x2082, 0x0) write$auto(r1, 0x0, 0x10100082) preadv2$auto(r1, 0x0, 0x6, 0xffffffffffffffff, 0x4, 0x2e) madvise$auto(0x100000000000000, 0x400053, 0x9) kernel console output (not intermixed with test programs): ] : Can't lookup blockdev [ 1257.759228][T24916] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1257.775810][T24916] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1257.776825][T24916] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1257.780510][T24916] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1257.805474][T24916] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1258.075728][T25880] : Can't lookup blockdev [ 1259.269948][ T1034] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1259.402575][ T1034] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1259.546346][ T1034] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1259.836134][ T1034] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1259.841513][ T4933] Bluetooth: hci3: command tx timeout [ 1260.554751][ T1034] bridge_slave_1: left allmulticast mode [ 1260.554772][ T1034] bridge_slave_1: left promiscuous mode [ 1260.554917][ T1034] bridge0: port 2(bridge_slave_1) entered disabled state [ 1260.556809][ T1034] bridge_slave_0: left allmulticast mode [ 1260.556827][ T1034] bridge_slave_0: left promiscuous mode [ 1260.557726][ T1034] bridge0: port 1(bridge_slave_0) entered disabled state [ 1260.707334][ T1034] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1260.709553][ T1034] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1260.714136][ T1034] bond0 (unregistering): Released all slaves [ 1260.857750][T25867] bridge0: port 1(bridge_slave_0) entered blocking state [ 1260.857866][T25867] bridge0: port 1(bridge_slave_0) entered disabled state [ 1260.858006][T25867] bridge_slave_0: entered allmulticast mode [ 1260.860047][T25867] bridge_slave_0: entered promiscuous mode [ 1260.888593][T25867] bridge0: port 2(bridge_slave_1) entered blocking state [ 1260.888696][T25867] bridge0: port 2(bridge_slave_1) entered disabled state [ 1260.888844][T25867] bridge_slave_1: entered allmulticast mode [ 1260.902585][T25867] bridge_slave_1: entered promiscuous mode [ 1261.139050][T25867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1261.153734][T25867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1261.245147][T25867] team0: Port device team_slave_0 added [ 1261.260432][ T1034] hsr_slave_0: left promiscuous mode [ 1261.267331][ T1034] hsr_slave_1: left promiscuous mode [ 1261.268218][ T1034] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1261.268240][ T1034] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1261.275959][ T1034] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1261.275984][ T1034] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1261.307367][ T1034] veth1_macvtap: left promiscuous mode [ 1261.307408][ T1034] veth0_macvtap: left promiscuous mode [ 1261.307524][ T1034] veth1_vlan: left promiscuous mode [ 1261.308128][ T1034] veth0_vlan: left promiscuous mode [ 1261.827987][ T1034] team0 (unregistering): Port device team_slave_1 removed [ 1261.856611][ T1034] team0 (unregistering): Port device team_slave_0 removed [ 1261.931902][ T4933] Bluetooth: hci3: command tx timeout [ 1262.012377][T25867] team0: Port device team_slave_1 added [ 1262.079277][T25867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1262.079296][T25867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1262.079326][T25867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1262.148824][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1262.203544][T25867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1262.203563][T25867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1262.203591][T25867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1262.719944][T25867] hsr_slave_0: entered promiscuous mode [ 1262.720992][T25867] hsr_slave_1: entered promiscuous mode [ 1262.721780][T25867] debugfs: 'hsr0' already exists in 'hsr' [ 1262.721800][T25867] Cannot create hsr debugfs directory [ 1263.820813][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1264.000661][ T4933] Bluetooth: hci3: command tx timeout [ 1264.000841][T25998] : Can't lookup blockdev [ 1265.323294][T25867] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1265.347064][T25867] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1265.350875][T25867] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1265.382914][T25867] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1265.387331][T25867] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1265.416712][T25867] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1265.428525][T25867] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1265.455653][T25867] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1266.080723][ T4933] Bluetooth: hci3: command tx timeout [ 1267.596817][T25867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1267.666106][T25867] 8021q: adding VLAN 0 to HW filter on device team0 [ 1267.676889][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 1267.677001][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1267.690239][ T98] bridge0: port 2(bridge_slave_1) entered blocking state [ 1267.690371][ T98] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1269.592368][T25867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1270.308497][T25867] veth0_vlan: entered promiscuous mode [ 1270.653476][T25867] veth1_vlan: entered promiscuous mode [ 1271.998543][T25867] veth0_macvtap: entered promiscuous mode [ 1272.136322][T25867] veth1_macvtap: entered promiscuous mode [ 1272.617085][T25867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1272.864574][T25867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1273.352461][ T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1273.355732][ T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1273.635217][ T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1273.635278][ T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1274.654777][ T1034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1274.654802][ T1034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1275.089742][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1275.089766][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1275.773564][T26233] netlink: 5324 bytes leftover after parsing attributes in process `syz.2.2459'. [ 1279.895685][T26300] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1281.139497][T26312] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1283.224882][T26357] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1285.462898][T26382] : Can't lookup blockdev [ 1287.261009][T26429] : Can't lookup blockdev [ 1289.092022][T26459] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1291.019146][T26492] : Can't lookup blockdev [ 1294.827700][T26557] : Can't lookup blockdev [ 1298.432261][T26615] scsi_dev_info_list_add_str: bad dev info string 'íÙ/&cž' '' '' [ 1298.552017][T26618] : Can't lookup blockdev [ 1299.496226][T26636] : Can't lookup blockdev [ 1300.166982][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.167053][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.898601][T26663] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1303.376713][T26701] : Can't lookup blockdev [ 1304.427989][T26715] : Can't lookup blockdev [ 1306.416303][T26752] : Can't lookup blockdev [ 1310.452231][T26819] scsi_dev_info_list_add_str: bad dev info string 'íÙ/&cž' '' '' [ 1312.638106][T26867] : Can't lookup blockdev [ 1312.718166][T26868] : Can't lookup blockdev [ 1316.554439][T26928] scsi_dev_info_list_add_str: bad dev info string 'íÙ/&cž' '' '' [ 1316.688076][T26931] : Can't lookup blockdev [ 1318.416232][T26966] netlink: 5324 bytes leftover after parsing attributes in process `syz.1.2579'. [ 1321.875481][T27029] : Can't lookup blockdev [ 1323.648834][T27069] netlink: 5324 bytes leftover after parsing attributes in process `syz.3.2591'. [ 1325.223414][T27086] : Can't lookup blockdev [ 1327.649433][T27141] : Can't lookup blockdev [ 1331.597287][T27209] : Can't lookup blockdev [ 1332.966168][ T4933] Bluetooth: hci4: command 0x0406 tx timeout [ 1336.811163][T27300] netlink: 5324 bytes leftover after parsing attributes in process `syz.1.2618'. [ 1337.260943][T27319] : Can't lookup blockdev [ 1338.968494][T27327] : Can't lookup blockdev [ 1339.551204][T27358] netlink: 5324 bytes leftover after parsing attributes in process `syz.2.2625'. [ 1341.840350][T27395] : Can't lookup blockdev [ 1343.683718][T27424] : Can't lookup blockdev [ 1347.305772][T27492] netlink: 5324 bytes leftover after parsing attributes in process `syz.0.2639'. [ 1347.575504][T27495] : Can't lookup blockdev [ 1348.320840][ T4933] Bluetooth: hci2: command 0x0406 tx timeout [ 1349.657676][T27530] : Can't lookup blockdev [ 1356.891417][T27652] netlink: 5324 bytes leftover after parsing attributes in process `syz.3.2659'. [ 1358.784364][T27692] : Can't lookup blockdev [ 1360.930143][T27746] : Can't lookup blockdev [ 1360.966253][T27748] : Can't lookup blockdev [ 1361.605215][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.605281][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.687204][T24916] Bluetooth: hci0: command 0x0406 tx timeout [ 1368.612841][T27896] : Can't lookup blockdev [ 1368.715376][T27877] : Can't lookup blockdev [ 1370.312758][T27931] netlink: 5324 bytes leftover after parsing attributes in process `syz.2.2689'. [ 1372.315573][T27966] : Can't lookup blockdev [ 1374.210643][T28004] : Can't lookup blockdev [ 1375.863500][T28030] : Can't lookup blockdev [ 1384.160630][T24916] Bluetooth: hci3: command 0x0406 tx timeout [ 1396.444315][T28383] : Can't lookup blockdev [ 1400.388632][T28480] : Can't lookup blockdev [ 1402.327265][T28495] : Can't lookup blockdev [ 1413.287269][T28721] : Can't lookup blockdev [ 1415.356053][T28750] : Can't lookup blockdev [ 1421.097991][T28859] : Can't lookup blockdev [ 1423.041908][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.041972][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.408589][T28915] : Can't lookup blockdev [ 1433.483340][T29089] : Can't lookup blockdev [ 1435.376381][T29125] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345512719 (2345512719 ns) > initial count (2345451774 ns). Using initial count to start timer. [ 1437.559051][T29173] : Can't lookup blockdev [ 1437.901135][T29191] : Can't lookup blockdev [ 1440.862950][T29252] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345512719 (2345512719 ns) > initial count (2345451774 ns). Using initial count to start timer. [ 1448.207140][T29408] : Can't lookup blockdev [ 1455.092668][T29544] : Can't lookup blockdev [ 1459.235233][T29625] : Can't lookup blockdev [ 1459.434475][T29629] : Can't lookup blockdev [ 1463.282643][T29706] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345512719 (2345512719 ns) > initial count (2345451774 ns). Using initial count to start timer. [ 1467.191673][T29770] : Can't lookup blockdev [ 1468.984856][T29806] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345512719 (2345512719 ns) > initial count (2345451774 ns). Using initial count to start timer. [ 1474.177759][T29905] : Can't lookup blockdev [ 1480.103816][T30030] : Can't lookup blockdev [ 1484.198393][T30121] : Can't lookup blockdev [ 1484.492618][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.492674][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1488.304212][T30200] : Can't lookup blockdev [ 1490.140056][T30233] : Can't lookup blockdev [ 1490.265943][T30236] : Can't lookup blockdev [ 1492.078947][T30269] : Can't lookup blockdev [ 1499.534398][T30412] : Can't lookup blockdev [ 1506.352685][T30546] : Can't lookup blockdev [ 1525.038860][T30904] : Can't lookup blockdev [ 1526.838028][T30938] : Can't lookup blockdev [ 1530.358536][T31003] : Can't lookup blockdev [ 1532.076878][T31013] : Can't lookup blockdev [ 1537.241489][T31130] : Can't lookup blockdev [ 1541.463290][T31198] : Can't lookup blockdev [ 1541.584281][T31201] : Can't lookup blockdev [ 1543.231566][T31219] : Can't lookup blockdev [ 1543.453279][T31234] : Can't lookup blockdev [ 1545.254103][T31262] : Can't lookup blockdev [ 1545.408480][T31267] : Can't lookup blockdev [ 1545.615980][T31271] : Can't lookup blockdev [ 1545.931013][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.931073][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.519208][T31301] : Can't lookup blockdev [ 1551.370592][T31374] : Can't lookup blockdev [ 1555.449444][T31439] : Can't lookup blockdev [ 1555.645049][T31425] : Can't lookup blockdev [ 1555.786937][T31449] : Can't lookup blockdev [ 1560.169441][T31526] : Can't lookup blockdev [ 1565.541490][T31621] scsi_dev_info_list_add_str: bad dev info string 'íÙ/&cž' '' '' [ 1568.938307][T31674] scsi_dev_info_list_add_str: bad dev info string 'íÙ/&cž' '' '' [ 1569.320128][T31690] : Can't lookup blockdev [ 1571.383682][T31725] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345512719 (2345512719 ns) > initial count (2345451774 ns). Using initial count to start timer. [ 1575.194071][T31789] scsi_dev_info_list_add_str: bad dev info string 'íÙ/&cž' '' '' [ 1577.511208][T31823] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345512719 (2345512719 ns) > initial count (2345451774 ns). Using initial count to start timer. [ 1578.236061][T31845] scsi_dev_info_list_add_str: bad dev info string 'íÙ/&cž' '' '' [ 1579.419561][T31863] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345512719 (2345512719 ns) > initial count (2345451774 ns). Using initial count to start timer. [ 1579.568718][T31870] netlink: 5324 bytes leftover after parsing attributes in process `syz.0.3140'. [ 1581.280098][T31893] scsi_dev_info_list_add_str: bad dev info string 'íÙ/&cž' '' '' [ 1585.432320][T31969] scsi_dev_info_list_add_str: bad dev info string 'íÙ/&cž' '' '' [ 1588.049866][T32031] scsi_dev_info_list_add_str: bad dev info string 'íÙ/&cž' '' '' [ 1589.465380][T32039] scsi_dev_info_list_add_str: bad dev info string 'íÙ/&cž' '' '' [ 1593.235179][T32122] netlink: 5324 bytes leftover after parsing attributes in process `syz.3.3170'. [ 1594.976998][T32144] scsi_dev_info_list_add_str: bad dev info string 'íÙ/&cž' '' '' [ 1595.025773][T32145] scsi_dev_info_list_add_str: bad dev info string 'íÙ/&cž' '' '' [ 1596.949483][T32177] scsi_dev_info_list_add_str: bad dev info string 'íÙ/&cž' '' '' [ 1602.840934][T32285] scsi_dev_info_list_add_str: bad dev info string 'íÙ/&cž' '' '' [ 1604.755344][T32322] scsi_dev_info_list_add_str: bad dev info string 'íÙ/&cž' '' '' [ 1604.980561][T32323] scsi_dev_info_list_add_str: bad dev info string 'íÙ/&cž' '' '' [ 1607.362268][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.362337][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.425285][T32383] scsi_dev_info_list_add_str: bad dev info string 'íÙ/&cž' '' '' [ 1612.113585][T32447] scsi_dev_info_list_add_str: bad dev info string 'íÙ/&cž' '' '' [ 1614.194932][T32481] scsi_dev_info_list_add_str: bad dev info string 'íÙ/&cž' '' '' [ 1617.798270][T32545] scsi_dev_info_list_add_str: bad dev info string 'íÙ/&cž' '' '' [ 1618.107060][T32555] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345512719 (2345512719 ns) > initial count (2345451774 ns). Using initial count to start timer. [ 1619.425555][T32576] netlink: 5324 bytes leftover after parsing attributes in process `syz.1.3227'. [ 1619.514038][T32579] scsi_dev_info_list_add_str: bad dev info string 'íÙ/&cž' '' '' [ 1619.651289][T32583] scsi_dev_info_list_add_str: bad dev info string 'íÙ/&cž' '' '' [ 1621.855929][T32613] scsi_dev_info_list_add_str: bad dev info string 'íÙ/&cž' '' '' [ 1623.740357][T32648] scsi_dev_info_list_add_str: bad dev info string 'íÙ/&cž' '' '' [ 1624.459186][T32661] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345512719 (2345512719 ns) > initial count (2345451774 ns). Using initial count to start timer. [ 1626.397791][T32692] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2180946876 (279161200128 ns) > initial count (279152019200 ns). Using initial count to start timer. [ 1627.527742][T32699] scsi_dev_info_list_add_str: bad dev info string 'íÙ/&cž' '' '' [ 1627.669347][T32715] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345512719 (2345512719 ns) > initial count (2345451774 ns). Using initial count to start timer. [ 1628.046535][T32723] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345512719 (2345512719 ns) > initial count (2345451774 ns). Using initial count to start timer. [ 1629.284705][T32748] scsi_dev_info_list_add_str: bad dev info string 'íÙ/&cž' '' '' [ 1631.246264][ T313] netlink: 5324 bytes leftover after parsing attributes in process `syz.0.3254'. [ 1631.600166][ T319] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2177428700 (8709714800 ns) > initial count (8709714116 ns). Using initial count to start timer. [ 1631.845448][ T323] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2178146450 (2178146450 ns) > initial count (2178140669 ns). Using initial count to start timer. [ 1632.049532][ T330] scsi_dev_info_list_add_str: bad dev info string 'íÙ/&cž' '' '' [ 1633.417722][ T335] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2185901721 (4371803442 ns) > initial count (4365880284 ns). Using initial count to start timer. [ 1635.327453][ T383] netlink: 5324 bytes leftover after parsing attributes in process `syz.0.3261'. [ 1635.529891][ T389] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2177898794 (34846380704 ns) > initial count (34846378528 ns). Using initial count to start timer. [ 1636.930858][ T410] scsi_dev_info_list_add_str: bad dev info string 'íÙ/&cž' '' '' [ 1638.678255][ T442] scsi_dev_info_list_add_str: bad dev info string 'íÙ/&cž' '' '' [ 1639.053862][ T452] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345512719 (2345512719 ns) > initial count (2345451774 ns). Using initial count to start timer. [ 1640.792395][ T480] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345512719 (2345512719 ns) > initial count (2345451774 ns). Using initial count to start timer. [ 1642.310314][ T507] scsi_dev_info_list_add_str: bad dev info string 'íÙ/&cž' '' '' [ 1644.444118][ T547] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345512719 (2345512719 ns) > initial count (2345451774 ns). Using initial count to start timer. [ 1647.785816][ T612] netlink: 5324 bytes leftover after parsing attributes in process `syz.3.3292'. [ 1649.966242][ T642] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345512719 (2345512719 ns) > initial count (2345451774 ns). Using initial count to start timer. [ 1650.027810][ T643] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345512719 (2345512719 ns) > initial count (2345451774 ns). Using initial count to start timer. [ 1655.241395][ T735] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345512719 (2345512719 ns) > initial count (2345451774 ns). Using initial count to start timer. [ 1655.376395][ T740] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345512719 (2345512719 ns) > initial count (2345451774 ns). Using initial count to start timer. [ 1660.205966][ T825] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345512719 (2345512719 ns) > initial count (2345451774 ns). Using initial count to start timer. [ 1660.838444][ T846] netlink: 5324 bytes leftover after parsing attributes in process `syz.1.3320'. [ 1664.349754][ T902] netlink: 5324 bytes leftover after parsing attributes in process `syz.2.3327'. [ 1665.871041][ T932] scsi_dev_info_list_add_str: bad dev info string 'íÙ/&cž' '' '' [ 1666.171463][ T946] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345512719 (2345512719 ns) > initial count (2345451774 ns). Using initial count to start timer. [ 1667.854710][ T977] scsi_dev_info_list_add_str: bad dev info string 'íÙ/&cž' '' '' [ 1667.976632][ T984] netlink: 5324 bytes leftover after parsing attributes in process `syz.2.3335'. [ 1668.105171][ T987] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345512719 (2345512719 ns) > initial count (2345451774 ns). Using initial count to start timer. [ 1668.819646][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.819713][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1671.772556][ T1063] netlink: 5324 bytes leftover after parsing attributes in process `syz.0.3343'. [ 1671.805280][ T1062] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345512719 (2345512719 ns) > initial count (2345451774 ns). Using initial count to start timer. [ 1673.581614][ T1095] netlink: 5324 bytes leftover after parsing attributes in process `syz.2.3345'. [ 1673.584311][ T1097] netlink: 5324 bytes leftover after parsing attributes in process `syz.1.3346'. [ 1673.755024][ T1101] netlink: 5324 bytes leftover after parsing attributes in process `syz.0.3348'. [ 1674.165629][ T1106] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345512719 (2345512719 ns) > initial count (2345451774 ns). Using initial count to start timer. [ 1678.367167][ T1166] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345512719 (2345512719 ns) > initial count (2345451774 ns). Using initial count to start timer. [ 1678.531748][ T1168] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345512719 (2345512719 ns) > initial count (2345451774 ns). Using initial count to start timer. [ 1682.096119][ T1222] scsi_dev_info_list_add_str: bad dev info string 'íÙ/&cž' '' '' [ 1682.438749][ T1231] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345512719 (2345512719 ns) > initial count (2345451774 ns). Using initial count to start timer. [ 1683.950730][ T1266] netlink: 5324 bytes leftover after parsing attributes in process `syz.2.3367'. [ 1685.631782][ T1286] scsi_dev_info_list_add_str: bad dev info string 'íÙ/&cž' '' '' [ 1685.875922][ T1295] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2180441448 (4360882896 ns) > initial count (4360882714 ns). Using initial count to start timer. [ 1685.944571][ T1297] netlink: 5324 bytes leftover after parsing attributes in process `syz.2.3372'. [ 1687.661938][ T1332] netlink: 5324 bytes leftover after parsing attributes in process `syz.1.3374'. [ 1689.371524][ T1352] scsi_dev_info_list_add_str: bad dev info string 'íÙ/&cž' '' '' [ 1689.775379][ T1363] scsi_dev_info_list_add_str: bad dev info string 'íÙ/&cž' '' '' [ 1689.800836][ T1367] netlink: 5324 bytes leftover after parsing attributes in process `syz.3.3379'. [ 1697.082383][ T1494] scsi_dev_info_list_add_str: bad dev info string 'íÙ/&cž' '' '' [ 1697.246439][ T1497] random: crng reseeded on system resumption [ 1699.005060][ T1525] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345512719 (2345512719 ns) > initial count (2345451774 ns). Using initial count to start timer. [ 1703.313752][ T1594] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345512719 (2345512719 ns) > initial count (2345451774 ns). Using initial count to start timer. [ 1708.606259][ T1664] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2180883324 (2180883324 ns) > initial count (2180882931 ns). Using initial count to start timer. [ 1710.733966][ T1718] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345512719 (2345512719 ns) > initial count (2345451774 ns). Using initial count to start timer. [ 1710.855061][ T1719] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345512719 (2345512719 ns) > initial count (2345451774 ns). Using initial count to start timer. [ 1713.008367][ T1757] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345512719 (2345512719 ns) > initial count (2345451774 ns). Using initial count to start timer. [ 1713.077413][ T1758] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345512719 (2345512719 ns) > initial count (2345451774 ns). Using initial count to start timer. [ 1714.848542][ T1791] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345512719 (2345512719 ns) > initial count (2345451774 ns). Using initial count to start timer. [ 1716.713538][ T1824] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345512719 (2345512719 ns) > initial count (2345451774 ns). Using initial count to start timer. [ 1716.854077][ T1827] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345512719 (2345512719 ns) > initial count (2345451774 ns). Using initial count to start timer. [ 1718.978267][ T1860] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345512719 (2345512719 ns) > initial count (2345451774 ns). Using initial count to start timer. [ 1722.848503][ T1923] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2190002834 (17520022672 ns) > initial count (17520022160 ns). Using initial count to start timer. [ 1722.987740][ T1926] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345512719 (2345512719 ns) > initial count (2345451774 ns). Using initial count to start timer. [ 1724.766448][ T1956] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345512719 (2345512719 ns) > initial count (2345451774 ns). Using initial count to start timer. [ 1724.797736][ T1958] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345512719 (2345512719 ns) > initial count (2345451774 ns). Using initial count to start timer. [ 1726.800937][ T1990] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345512719 (2345512719 ns) > initial count (2345451774 ns). Using initial count to start timer. [ 1730.243266][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.243334][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.946449][ T2067] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345512719 (2345512719 ns) > initial count (2345451774 ns). Using initial count to start timer. [ 1731.828595][ T2072] FAULT_INJECTION: forcing a failure. [ 1731.828595][ T2072] name failslab, interval 1, probability 0, space 0, times 1 [ 1731.837774][ T2072] CPU: 1 UID: 0 PID: 2072 Comm: syz.3.3467 Not tainted syzkaller #0 PREEMPT(full) [ 1731.837810][ T2072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1731.837840][ T2072] Call Trace: [ 1731.837886][ T2072] [ 1731.837897][ T2072] dump_stack_lvl+0x100/0x190 [ 1731.838079][ T2072] should_fail_ex.cold+0x5/0xa [ 1731.838134][ T2072] should_failslab+0xc2/0x120 [ 1731.838241][ T2072] __kmalloc_noprof+0xfc/0x840 [ 1731.838325][ T2072] ? rcu_is_watching+0x13/0xc0 [ 1731.838379][ T2072] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1731.838554][ T2072] tomoyo_realpath_from_path+0xb6/0x690 [ 1731.838595][ T2072] tomoyo_path_number_perm+0x23c/0x580 [ 1731.838622][ T2072] ? tomoyo_path_number_perm+0x22e/0x580 [ 1731.838652][ T2072] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1731.838694][ T2072] ? __lock_acquire+0x5c0/0x1f40 [ 1731.838764][ T2072] ? __fget_files+0x34/0x3d0 [ 1731.838858][ T2072] ? find_held_lock+0x2b/0x80 [ 1731.838889][ T2072] ? hook_file_ioctl_common+0x140/0x440 [ 1731.838958][ T2072] ? __fget_files+0x21f/0x3d0 [ 1731.838999][ T2072] security_file_ioctl+0xd3/0x230 [ 1731.839056][ T2072] __x64_sys_ioctl+0xb7/0x210 [ 1731.839115][ T2072] do_syscall_64+0x121/0x770 [ 1731.839221][ T2072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1731.839258][ T2072] RIP: 0033:0x7f135799e159 [ 1731.839289][ T2072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1731.839317][ T2072] RSP: 002b:00007f135878d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1731.839383][ T2072] RAX: ffffffffffffffda RBX: 00007f1357c25fa0 RCX: 00007f135799e159 [ 1731.839400][ T2072] RDX: 0000000000000003 RSI: 00000000400454cd RDI: 04000000000000c8 [ 1731.839416][ T2072] RBP: 00007f135878d090 R08: 0000000000000000 R09: 0000000000000000 [ 1731.839432][ T2072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1731.839447][ T2072] R13: 00007f1357c26038 R14: 00007f1357c25fa0 R15: 00007ffdb8783d18 [ 1731.839485][ T2072] [ 1732.030862][ T2072] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1734.297615][ T2127] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345512719 (2345512719 ns) > initial count (2345451774 ns). Using initial count to start timer. [ 1734.542889][ T2135] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2190002834 (17520022672 ns) > initial count (17520022160 ns). Using initial count to start timer. [ 1734.619179][ T2134] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345512719 (2345512719 ns) > initial count (2345451774 ns). Using initial count to start timer. [ 1735.596504][ T2151] FAULT_INJECTION: forcing a failure. [ 1735.596504][ T2151] name failslab, interval 1, probability 0, space 0, times 0 [ 1735.596543][ T2151] CPU: 0 UID: 0 PID: 2151 Comm: syz.2.3479 Not tainted syzkaller #0 PREEMPT(full) [ 1735.596575][ T2151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1735.596591][ T2151] Call Trace: [ 1735.596600][ T2151] [ 1735.596611][ T2151] dump_stack_lvl+0x100/0x190 [ 1735.596654][ T2151] should_fail_ex.cold+0x5/0xa [ 1735.596689][ T2151] should_failslab+0xc2/0x120 [ 1735.596729][ T2151] __kmalloc_noprof+0xfc/0x840 [ 1735.596761][ T2151] ? rcu_is_watching+0x13/0xc0 [ 1735.596791][ T2151] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1735.596834][ T2151] tomoyo_realpath_from_path+0xb6/0x690 [ 1735.596876][ T2151] tomoyo_path_number_perm+0x23c/0x580 [ 1735.596900][ T2151] ? tomoyo_path_number_perm+0x22e/0x580 [ 1735.596930][ T2151] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1735.596969][ T2151] ? __lock_acquire+0x5c0/0x1f40 [ 1735.597031][ T2151] ? __fget_files+0x34/0x3d0 [ 1735.597066][ T2151] ? find_held_lock+0x2b/0x80 [ 1735.597096][ T2151] ? hook_file_ioctl_common+0x140/0x440 [ 1735.597134][ T2151] ? __fget_files+0x21f/0x3d0 [ 1735.597174][ T2151] security_file_ioctl+0xd3/0x230 [ 1735.597204][ T2151] __x64_sys_ioctl+0xb7/0x210 [ 1735.597237][ T2151] do_syscall_64+0x121/0x770 [ 1735.597274][ T2151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1735.597303][ T2151] RIP: 0033:0x7fb1bf39e159 [ 1735.597325][ T2151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1735.597349][ T2151] RSP: 002b:00007fb1c0199028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1735.597376][ T2151] RAX: ffffffffffffffda RBX: 00007fb1bf625fa0 RCX: 00007fb1bf39e159 [ 1735.597394][ T2151] RDX: 0000200000000040 RSI: 0000000040046109 RDI: 0000000000000003 [ 1735.597411][ T2151] RBP: 00007fb1c0199090 R08: 0000000000000000 R09: 0000000000000000 [ 1735.597430][ T2151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1735.597446][ T2151] R13: 00007fb1bf626038 R14: 00007fb1bf625fa0 R15: 00007ffe5764c8f8 [ 1735.597484][ T2151] [ 1735.599067][ T2151] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1736.508966][ T2171] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345512719 (2345512719 ns) > initial count (2345451774 ns). Using initial count to start timer. [ 1736.534063][ T2170] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345350256 (4690700512 ns) > initial count (4690695732 ns). Using initial count to start timer. [ 1737.255839][ T2177] FAULT_INJECTION: forcing a failure. [ 1737.255839][ T2177] name failslab, interval 1, probability 0, space 0, times 0 [ 1737.255877][ T2177] CPU: 0 UID: 0 PID: 2177 Comm: syz.0.3483 Not tainted syzkaller #0 PREEMPT(full) [ 1737.255907][ T2177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1737.255922][ T2177] Call Trace: [ 1737.255931][ T2177] [ 1737.255941][ T2177] dump_stack_lvl+0x100/0x190 [ 1737.255984][ T2177] should_fail_ex.cold+0x5/0xa [ 1737.256019][ T2177] should_failslab+0xc2/0x120 [ 1737.256057][ T2177] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1737.256092][ T2177] ? percpu_counter_add_batch+0xb9/0x230 [ 1737.256246][ T2177] ? vm_area_alloc+0x1f/0x160 [ 1737.256350][ T2177] vm_area_alloc+0x1f/0x160 [ 1737.256388][ T2177] __mmap_region+0x1025/0x32e0 [ 1737.256468][ T2177] ? find_held_lock+0x2b/0x80 [ 1737.256497][ T2177] ? ima_match_policy+0x8c4/0x23f0 [ 1737.256555][ T2177] ? __pfx___mmap_region+0x10/0x10 [ 1737.256584][ T2177] ? __lock_acquire+0x5c0/0x1f40 [ 1737.256640][ T2177] ? process_measurement+0x1567/0x2350 [ 1737.256711][ T2177] ? __pfx___might_resched+0x10/0x10 [ 1737.256756][ T2177] ? find_held_lock+0x2b/0x80 [ 1737.256785][ T2177] ? process_measurement+0x4c8/0x2350 [ 1737.256822][ T2177] ? process_measurement+0x4c8/0x2350 [ 1737.256860][ T2177] ? down_write+0x146/0x1f0 [ 1737.256978][ T2177] ? lock_acquire+0x1d1/0x380 [ 1737.257060][ T2177] ? __lock_acquire+0x5c0/0x1f40 [ 1737.257099][ T2177] mmap_region+0x3db/0x6d0 [ 1737.257131][ T2177] ? rcu_is_watching+0x13/0xc0 [ 1737.257161][ T2177] ? __pfx_mmap_region+0x10/0x10 [ 1737.257194][ T2177] ? cap_mmap_addr+0x4b/0x120 [ 1737.257268][ T2177] ? bpf_lsm_mmap_addr+0x9/0x30 [ 1737.257360][ T2177] ? security_mmap_addr+0x71/0x1e0 [ 1737.257440][ T2177] ? __get_unmapped_area+0x255/0x3e0 [ 1737.257504][ T2177] do_mmap+0x12c7/0x1c30 [ 1737.257548][ T2177] ? lock_acquire+0x1d1/0x380 [ 1737.257585][ T2177] ? __pfx_do_mmap+0x10/0x10 [ 1737.257622][ T2177] ? __pfx___might_resched+0x10/0x10 [ 1737.257667][ T2177] ? __pfx_down_write_killable+0x10/0x10 [ 1737.257702][ T2177] ? find_held_lock+0x2b/0x80 [ 1737.257739][ T2177] vm_mmap_pgoff+0x28d/0x470 [ 1737.257825][ T2177] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1737.257853][ T2177] ? lock_acquire+0x1d1/0x380 [ 1737.257890][ T2177] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1737.257930][ T2177] ksys_mmap_pgoff+0xe4/0x610 [ 1737.257964][ T2177] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1737.257996][ T2177] ? fput+0x7c/0x100 [ 1737.258068][ T2177] ? ksys_write+0x1ac/0x250 [ 1737.258094][ T2177] ? __pfx_ksys_write+0x10/0x10 [ 1737.258127][ T2177] __x64_sys_mmap+0x125/0x190 [ 1737.258168][ T2177] do_syscall_64+0x121/0x770 [ 1737.258202][ T2177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1737.258236][ T2177] RIP: 0033:0x7f5a53f9e159 [ 1737.258292][ T2177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1737.258314][ T2177] RSP: 002b:00007f5a54e69028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1737.258340][ T2177] RAX: ffffffffffffffda RBX: 00007f5a54225fa0 RCX: 00007f5a53f9e159 [ 1737.258357][ T2177] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 1737.258372][ T2177] RBP: 00007f5a54e69090 R08: 0000000000000002 R09: 0000000000008000 [ 1737.258387][ T2177] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000001 [ 1737.258404][ T2177] R13: 00007f5a54226038 R14: 00007f5a54225fa0 R15: 00007ffc1325d498 [ 1737.258441][ T2177] [ 1737.622579][ T2174] hub 1-0:1.0: USB hub found [ 1737.625064][ T2174] hub 1-0:1.0: 1 port detected [ 1737.699482][ T2188] FAULT_INJECTION: forcing a failure. [ 1737.699482][ T2188] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1737.699523][ T2188] CPU: 0 UID: 0 PID: 2188 Comm: syz.0.3485 Not tainted syzkaller #0 PREEMPT(full) [ 1737.699553][ T2188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1737.699567][ T2188] Call Trace: [ 1737.699576][ T2188] [ 1737.699587][ T2188] dump_stack_lvl+0x100/0x190 [ 1737.699627][ T2188] should_fail_ex.cold+0x5/0xa [ 1737.699661][ T2188] _copy_from_user+0x2e/0xd0 [ 1737.699811][ T2188] copy_from_sockptr_offset.constprop.0+0x12c/0x150 [ 1737.699916][ T2188] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 1737.699959][ T2188] do_sock_getsockopt+0x530/0x6e0 [ 1737.699996][ T2188] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1737.700035][ T2188] ? __fget_files+0x34/0x3d0 [ 1737.700068][ T2188] ? find_held_lock+0x2b/0x80 [ 1737.700109][ T2188] ? __fget_files+0x21f/0x3d0 [ 1737.700149][ T2188] __sys_getsockopt+0x133/0x1d0 [ 1737.700199][ T2188] ? __x64_sys_getsockopt+0xbd/0x160 [ 1737.700238][ T2188] __x64_sys_getsockopt+0xbd/0x160 [ 1737.700277][ T2188] ? do_syscall_64+0xae/0x770 [ 1737.700308][ T2188] ? lockdep_hardirqs_on+0x7d/0x110 [ 1737.700340][ T2188] do_syscall_64+0x121/0x770 [ 1737.700372][ T2188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1737.700398][ T2188] RIP: 0033:0x7f5a53f9e159 [ 1737.700419][ T2188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1737.700440][ T2188] RSP: 002b:00007f5a54e69028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1737.700474][ T2188] RAX: ffffffffffffffda RBX: 00007f5a54225fa0 RCX: 00007f5a53f9e159 [ 1737.700491][ T2188] RDX: 000000000000001d RSI: 0000000000000084 RDI: 0000000000000003 [ 1737.700507][ T2188] RBP: 00007f5a54e69090 R08: 0000200000000040 R09: 0000000000000000 [ 1737.700523][ T2188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1737.700539][ T2188] R13: 00007f5a54226038 R14: 00007f5a54225fa0 R15: 00007ffc1325d498 [ 1737.700575][ T2188] [ 1738.163632][ T2200] FAULT_INJECTION: forcing a failure. [ 1738.163632][ T2200] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1738.163669][ T2200] CPU: 1 UID: 0 PID: 2200 Comm: syz.0.3488 Not tainted syzkaller #0 PREEMPT(full) [ 1738.163698][ T2200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1738.163713][ T2200] Call Trace: [ 1738.163722][ T2200] [ 1738.163732][ T2200] dump_stack_lvl+0x100/0x190 [ 1738.163773][ T2200] should_fail_ex.cold+0x5/0xa [ 1738.163807][ T2200] _copy_to_user+0x32/0xd0 [ 1738.163848][ T2200] simple_read_from_buffer+0xcb/0x170 [ 1738.163982][ T2200] proc_fail_nth_read+0x1af/0x230 [ 1738.164085][ T2200] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1738.164119][ T2200] ? rw_verify_area+0xce/0x6d0 [ 1738.164147][ T2200] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1738.164179][ T2200] vfs_read+0x1e4/0xb40 [ 1738.164210][ T2200] ? lock_acquire+0x1d1/0x380 [ 1738.164255][ T2200] ? __fget_files+0x34/0x3d0 [ 1738.164288][ T2200] ? __pfx_vfs_read+0x10/0x10 [ 1738.164316][ T2200] ? find_held_lock+0x2b/0x80 [ 1738.164347][ T2200] ? __fget_files+0x215/0x3d0 [ 1738.164386][ T2200] ? __fget_files+0x21f/0x3d0 [ 1738.164429][ T2200] ksys_read+0x12a/0x250 [ 1738.164459][ T2200] ? __pfx_ksys_read+0x10/0x10 [ 1738.164500][ T2200] do_syscall_64+0x121/0x770 [ 1738.164537][ T2200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1738.164564][ T2200] RIP: 0033:0x7f5a53f5e98e [ 1738.164587][ T2200] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1738.164611][ T2200] RSP: 002b:00007f5a54e68fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1738.164637][ T2200] RAX: ffffffffffffffda RBX: 00007f5a54e696c0 RCX: 00007f5a53f5e98e [ 1738.164655][ T2200] RDX: 000000000000000f RSI: 00007f5a54e690a0 RDI: 0000000000000003 [ 1738.164671][ T2200] RBP: 00007f5a54e69090 R08: 0000000000000000 R09: 0000000000000000 [ 1738.164685][ T2200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1738.164701][ T2200] R13: 00007f5a54226038 R14: 00007f5a54225fa0 R15: 00007ffc1325d498 [ 1738.164738][ T2200] [ 1739.828579][ T2225] netlink: 5324 bytes leftover after parsing attributes in process `syz.1.3490'. [ 1742.119497][ T2254] FAULT_INJECTION: forcing a failure. [ 1742.119497][ T2254] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1742.119536][ T2254] CPU: 1 UID: 0 PID: 2254 Comm: syz.0.3497 Not tainted syzkaller #0 PREEMPT(full) [ 1742.119567][ T2254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1742.119583][ T2254] Call Trace: [ 1742.119592][ T2254] [ 1742.119603][ T2254] dump_stack_lvl+0x100/0x190 [ 1742.119645][ T2254] should_fail_ex.cold+0x5/0xa [ 1742.119680][ T2254] _copy_from_user+0x2e/0xd0 [ 1742.119719][ T2254] copy_msghdr_from_user+0x9f/0x4c0 [ 1742.119757][ T2254] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1742.119801][ T2254] ? lock_acquire+0x1d1/0x380 [ 1742.119840][ T2254] ? get_pid_task+0x2a/0x250 [ 1742.119872][ T2254] ___sys_sendmsg+0x106/0x1e0 [ 1742.119909][ T2254] ? __pfx____sys_sendmsg+0x10/0x10 [ 1742.119944][ T2254] ? get_pid_task+0x106/0x250 [ 1742.119986][ T2254] ? find_held_lock+0x2b/0x80 [ 1742.120036][ T2254] __sys_sendmsg+0x160/0x210 [ 1742.120110][ T2254] ? __pfx___sys_sendmsg+0x10/0x10 [ 1742.120157][ T2254] do_syscall_64+0x121/0x770 [ 1742.120193][ T2254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1742.120221][ T2254] RIP: 0033:0x7f5a53f9e159 [ 1742.120243][ T2254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1742.120267][ T2254] RSP: 002b:00007f5a54e69028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1742.120293][ T2254] RAX: ffffffffffffffda RBX: 00007f5a54225fa0 RCX: 00007f5a53f9e159 [ 1742.120311][ T2254] RDX: 0000000000008044 RSI: 0000200000000100 RDI: 0000000000000003 [ 1742.120330][ T2254] RBP: 00007f5a54e69090 R08: 0000000000000000 R09: 0000000000000000 [ 1742.120343][ T2254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1742.120358][ T2254] R13: 00007f5a54226038 R14: 00007f5a54225fa0 R15: 00007ffc1325d498 [ 1742.120390][ T2254] [ 1742.470884][ T2265] FAULT_INJECTION: forcing a failure. [ 1742.470884][ T2265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1742.470923][ T2265] CPU: 1 UID: 0 PID: 2265 Comm: syz.2.3500 Not tainted syzkaller #0 PREEMPT(full) [ 1742.470953][ T2265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1742.470970][ T2265] Call Trace: [ 1742.470979][ T2265] [ 1742.470989][ T2265] dump_stack_lvl+0x100/0x190 [ 1742.471032][ T2265] should_fail_ex.cold+0x5/0xa [ 1742.471066][ T2265] _copy_from_user+0x2e/0xd0 [ 1742.471105][ T2265] copy_msghdr_from_user+0x9f/0x4c0 [ 1742.471140][ T2265] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1742.471178][ T2265] ? _kstrtoull+0x144/0x200 [ 1742.471205][ T2265] ? __pfx__kstrtoull+0x10/0x10 [ 1742.471236][ T2265] ___sys_sendmsg+0x106/0x1e0 [ 1742.471267][ T2265] ? __pfx____sys_sendmsg+0x10/0x10 [ 1742.471308][ T2265] ? __fget_files+0x34/0x3d0 [ 1742.471362][ T2265] __sys_sendmmsg+0x20c/0x440 [ 1742.471400][ T2265] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1742.471424][ T2265] ? ksys_write+0x190/0x250 [ 1742.471476][ T2265] ? fput+0x7c/0x100 [ 1742.471508][ T2265] ? ksys_write+0x1ac/0x250 [ 1742.471534][ T2265] ? __pfx_ksys_write+0x10/0x10 [ 1742.471570][ T2265] __x64_sys_sendmmsg+0x9c/0x100 [ 1742.471596][ T2265] ? lockdep_hardirqs_on+0x7d/0x110 [ 1742.471628][ T2265] do_syscall_64+0x121/0x770 [ 1742.471664][ T2265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1742.471691][ T2265] RIP: 0033:0x7fb1bf39e159 [ 1742.471712][ T2265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1742.471736][ T2265] RSP: 002b:00007fb1c0199028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1742.471763][ T2265] RAX: ffffffffffffffda RBX: 00007fb1bf625fa0 RCX: 00007fb1bf39e159 [ 1742.471781][ T2265] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000003 [ 1742.471798][ T2265] RBP: 00007fb1c0199090 R08: 0000000000000000 R09: 0000000000000000 [ 1742.471816][ T2265] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000001 [ 1742.471830][ T2265] R13: 00007fb1bf626038 R14: 00007fb1bf625fa0 R15: 00007ffe5764c8f8 [ 1742.471864][ T2265] [ 1742.723519][ T2275] binder: 2264:2275 ioctl 541b 0 returned -22 [ 1745.533936][ T2307] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345512719 (2345512719 ns) > initial count (2345451774 ns). Using initial count to start timer. [ 1749.627258][ T2381] netlink: 25 bytes leftover after parsing attributes in process `syz.2.3516'. [ 1750.783855][ T468] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1750.951621][T24916] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1750.953270][T24916] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1750.953870][T24916] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1750.954854][T24916] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1750.955476][T24916] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1751.075557][ T468] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1751.228385][ T468] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1751.350011][ T468] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1751.948912][ T468] bridge_slave_1: left allmulticast mode [ 1751.948944][ T468] bridge_slave_1: left promiscuous mode [ 1751.949221][ T468] bridge0: port 2(bridge_slave_1) entered disabled state [ 1751.957426][ T468] bridge_slave_0: left allmulticast mode [ 1751.957454][ T468] bridge_slave_0: left promiscuous mode [ 1751.957676][ T468] bridge0: port 1(bridge_slave_0) entered disabled state [ 1752.544147][ T468] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1752.567970][ T468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1752.575527][ T468] bond0 (unregistering): Released all slaves [ 1752.596247][ T4933] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1752.598762][ T4933] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1752.603922][ T4933] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1752.607341][ T4933] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1752.608586][ T4933] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1752.932707][T24916] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1752.935145][T24916] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1752.935827][T24916] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1752.938923][T24916] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1752.939563][T24916] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1753.047106][T24916] Bluetooth: hci0: command tx timeout [ 1753.177485][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1753.361786][ T468] hsr_slave_0: left promiscuous mode [ 1753.362518][ T468] hsr_slave_1: left promiscuous mode [ 1753.363410][ T468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1753.363448][ T468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1753.372450][ T468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1753.372474][ T468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1753.420000][ T468] veth1_macvtap: left promiscuous mode [ 1753.420044][ T468] veth0_macvtap: left promiscuous mode [ 1753.420153][ T468] veth1_vlan: left promiscuous mode [ 1753.420255][ T468] veth0_vlan: left promiscuous mode [ 1753.749751][ T468] team0 (unregistering): Port device team_slave_1 removed [ 1753.762777][ T468] team0 (unregistering): Port device team_slave_0 removed [ 1754.075630][ T2488] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345512719 (2345512719 ns) > initial count (2345451774 ns). Using initial count to start timer. [ 1754.640789][T24916] Bluetooth: hci1: command tx timeout [ 1754.858106][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1754.904603][ T468] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1755.035537][ T468] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1755.041898][T24916] Bluetooth: hci2: command tx timeout [ 1755.112072][ T2411] bridge0: port 1(bridge_slave_0) entered blocking state [ 1755.112216][ T2411] bridge0: port 1(bridge_slave_0) entered disabled state [ 1755.112396][ T2411] bridge_slave_0: entered allmulticast mode [ 1755.116199][ T2411] bridge_slave_0: entered promiscuous mode [ 1755.132943][T24916] Bluetooth: hci0: command tx timeout [ 1755.156606][ T2411] bridge0: port 2(bridge_slave_1) entered blocking state [ 1755.158304][ T2411] bridge0: port 2(bridge_slave_1) entered disabled state [ 1755.158460][ T2411] bridge_slave_1: entered allmulticast mode [ 1755.184514][ T2411] bridge_slave_1: entered promiscuous mode [ 1755.294984][ T468] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1755.383605][ T2411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1755.389294][ T2411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1755.609505][ T468] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1755.663621][ T2411] team0: Port device team_slave_0 added [ 1755.755883][ T2411] team0: Port device team_slave_1 added [ 1755.949069][ T5279] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1755.958537][ T2411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1755.958557][ T2411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1755.958588][ T2411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1756.032879][ T2411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1756.032899][ T2411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1756.032927][ T2411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1756.326452][ T2411] hsr_slave_0: entered promiscuous mode [ 1756.327093][ T2411] hsr_slave_1: entered promiscuous mode [ 1756.327510][ T2411] debugfs: 'hsr0' already exists in 'hsr' [ 1756.327529][ T2411] Cannot create hsr debugfs directory [ 1756.352399][ T2447] bridge0: port 1(bridge_slave_0) entered blocking state [ 1756.352504][ T2447] bridge0: port 1(bridge_slave_0) entered disabled state [ 1756.352633][ T2447] bridge_slave_0: entered allmulticast mode [ 1756.357962][ T2447] bridge_slave_0: entered promiscuous mode [ 1756.379102][ T2458] bridge0: port 1(bridge_slave_0) entered blocking state [ 1756.379264][ T2458] bridge0: port 1(bridge_slave_0) entered disabled state [ 1756.379395][ T2458] bridge_slave_0: entered allmulticast mode [ 1756.385599][ T2458] bridge_slave_0: entered promiscuous mode [ 1756.392102][ T2447] bridge0: port 2(bridge_slave_1) entered blocking state [ 1756.392204][ T2447] bridge0: port 2(bridge_slave_1) entered disabled state [ 1756.392324][ T2447] bridge_slave_1: entered allmulticast mode [ 1756.395461][ T2447] bridge_slave_1: entered promiscuous mode [ 1756.464226][ T468] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1756.470184][ T2458] bridge0: port 2(bridge_slave_1) entered blocking state [ 1756.470250][ T2458] bridge0: port 2(bridge_slave_1) entered disabled state [ 1756.470480][ T2458] bridge_slave_1: entered allmulticast mode [ 1756.472582][ T2458] bridge_slave_1: entered promiscuous mode [ 1756.574001][ T2458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1756.578073][ T2447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1756.624934][ T468] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1756.692117][ T2458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1756.694897][ T2447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1756.720533][T24916] Bluetooth: hci1: command tx timeout [ 1756.865565][ T468] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1756.951359][ T2458] team0: Port device team_slave_0 added [ 1756.968690][ T2447] team0: Port device team_slave_0 added [ 1756.973552][ T2447] team0: Port device team_slave_1 added [ 1756.976993][ T2458] team0: Port device team_slave_1 added [ 1757.070816][ T468] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1757.122871][T24916] Bluetooth: hci2: command tx timeout [ 1757.175561][ T2458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1757.175581][ T2458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1757.175609][ T2458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1757.226143][T24916] Bluetooth: hci0: command tx timeout [ 1757.293158][ T2447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1757.293179][ T2447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1757.293211][ T2447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1757.296396][ T2458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1757.296413][ T2458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1757.296442][ T2458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1757.350051][ T2447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1757.350071][ T2447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1757.350116][ T2447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1757.576885][ T2447] hsr_slave_0: entered promiscuous mode [ 1757.577964][ T2447] hsr_slave_1: entered promiscuous mode [ 1757.578712][ T2447] debugfs: 'hsr0' already exists in 'hsr' [ 1757.578733][ T2447] Cannot create hsr debugfs directory [ 1757.698376][ T4933] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1757.707983][ T4933] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1757.715849][ T4933] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1757.725877][ T4933] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1757.726555][ T4933] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1757.751470][ T2458] hsr_slave_0: entered promiscuous mode [ 1757.753817][ T2458] hsr_slave_1: entered promiscuous mode [ 1757.754656][ T2458] debugfs: 'hsr0' already exists in 'hsr' [ 1757.754677][ T2458] Cannot create hsr debugfs directory [ 1758.104157][ T468] bridge_slave_1: left allmulticast mode [ 1758.104188][ T468] bridge_slave_1: left promiscuous mode [ 1758.104413][ T468] bridge0: port 2(bridge_slave_1) entered disabled state [ 1758.108568][ T468] bridge_slave_0: left allmulticast mode [ 1758.108595][ T468] bridge_slave_0: left promiscuous mode [ 1758.108807][ T468] bridge0: port 1(bridge_slave_0) entered disabled state [ 1758.194213][ T468] bridge_slave_1: left allmulticast mode [ 1758.194233][ T468] bridge_slave_1: left promiscuous mode [ 1758.194371][ T468] bridge0: port 2(bridge_slave_1) entered disabled state [ 1758.197065][ T468] bridge_slave_0: left allmulticast mode [ 1758.197090][ T468] bridge_slave_0: left promiscuous mode [ 1758.197281][ T468] bridge0: port 1(bridge_slave_0) entered disabled state [ 1758.525899][ T468] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1758.530220][ T468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1758.551936][ T468] bond0 (unregistering): Released all slaves [ 1758.675947][ T468] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1758.677715][ T468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1758.678841][ T468] bond0 (unregistering): Released all slaves [ 1758.789290][ T5279] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1758.801386][ T4933] Bluetooth: hci1: command tx timeout [ 1759.201468][ T4933] Bluetooth: hci2: command tx timeout [ 1759.283284][ T4933] Bluetooth: hci0: command tx timeout [ 1759.307521][ T2411] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1759.329437][ T2411] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1759.370545][ T2411] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1759.377142][ T2411] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1759.381112][ T2411] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1759.395712][ T2411] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1759.474656][ T2411] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1759.490486][ T2411] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1759.636973][ T468] hsr_slave_0: left promiscuous mode [ 1759.637914][ T468] hsr_slave_1: left promiscuous mode [ 1759.638849][ T468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1759.638871][ T468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1759.639762][ T468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1759.639783][ T468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1759.684652][ T468] hsr_slave_0: left promiscuous mode [ 1759.686771][ T468] hsr_slave_1: left promiscuous mode [ 1759.687743][ T468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1759.687764][ T468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1759.688772][ T468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1759.688793][ T468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1759.712446][ T468] veth1_macvtap: left promiscuous mode [ 1759.712487][ T468] veth0_macvtap: left promiscuous mode [ 1759.712590][ T468] veth1_vlan: left promiscuous mode [ 1759.712691][ T468] veth0_vlan: left promiscuous mode [ 1759.736976][ T468] veth1_macvtap: left promiscuous mode [ 1759.737016][ T468] veth0_macvtap: left promiscuous mode [ 1759.737127][ T468] veth1_vlan: left promiscuous mode [ 1759.737197][ T468] veth0_vlan: left promiscuous mode [ 1759.763983][ T4933] Bluetooth: hci3: command tx timeout [ 1760.045154][ T468] team0 (unregistering): Port device team_slave_1 removed [ 1760.069636][ T468] team0 (unregistering): Port device team_slave_0 removed [ 1760.272754][ T468] team0 (unregistering): Port device team_slave_1 removed [ 1760.279276][ T468] team0 (unregistering): Port device team_slave_0 removed [ 1760.417897][ T5279] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1760.893789][ T4933] Bluetooth: hci1: command tx timeout [ 1760.983199][ T2411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1761.004166][ T2577] bridge0: port 1(bridge_slave_0) entered blocking state [ 1761.004331][ T2577] bridge0: port 1(bridge_slave_0) entered disabled state [ 1761.004451][ T2577] bridge_slave_0: entered allmulticast mode [ 1761.006264][ T2577] bridge_slave_0: entered promiscuous mode [ 1761.009353][ T2577] bridge0: port 2(bridge_slave_1) entered blocking state [ 1761.009452][ T2577] bridge0: port 2(bridge_slave_1) entered disabled state [ 1761.009599][ T2577] bridge_slave_1: entered allmulticast mode [ 1761.013758][ T2577] bridge_slave_1: entered promiscuous mode [ 1761.029855][ T2411] 8021q: adding VLAN 0 to HW filter on device team0 [ 1761.066383][T24032] bridge0: port 1(bridge_slave_0) entered blocking state [ 1761.066505][T24032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1761.069789][T24032] bridge0: port 2(bridge_slave_1) entered blocking state [ 1761.069902][T24032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1761.239700][ T2577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1761.267779][ T2577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1761.282889][ T4933] Bluetooth: hci2: command tx timeout [ 1761.398412][ T2577] team0: Port device team_slave_0 added [ 1761.418708][ T2577] team0: Port device team_slave_1 added [ 1761.509374][ T2577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1761.509393][ T2577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1761.509423][ T2577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1761.574121][ T468] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1761.581253][ T2577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1761.581271][ T2577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1761.581300][ T2577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1761.789472][ T468] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1761.828168][ T2577] hsr_slave_0: entered promiscuous mode [ 1761.834907][ T2577] hsr_slave_1: entered promiscuous mode [ 1761.843184][ T4933] Bluetooth: hci3: command tx timeout [ 1761.995068][ T468] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1762.077032][ T468] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1762.126157][ T2447] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1762.140983][ T2447] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1762.163268][ T2447] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1762.174187][ T2447] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1762.175079][ T2447] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1762.201509][ T2447] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1762.243762][ T2447] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1762.261716][ T2447] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1762.602250][ T468] bridge_slave_1: left allmulticast mode [ 1762.602282][ T468] bridge_slave_1: left promiscuous mode [ 1762.602517][ T468] bridge0: port 2(bridge_slave_1) entered disabled state [ 1762.608567][ T468] bridge_slave_0: left allmulticast mode [ 1762.608595][ T468] bridge_slave_0: left promiscuous mode [ 1762.608814][ T468] bridge0: port 1(bridge_slave_0) entered disabled state [ 1762.859876][ T468] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1762.880146][ T468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1762.894373][ T468] bond0 (unregistering): Released all slaves [ 1762.934164][ T2458] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1762.951986][ T2458] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1762.964863][ T2411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1762.981408][ T2458] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1763.002324][ T2458] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1763.003250][ T2458] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1763.023315][ T2458] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1763.027101][ T2458] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1763.058611][ T2458] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1763.346883][ T468] hsr_slave_0: left promiscuous mode [ 1763.347354][ T468] hsr_slave_1: left promiscuous mode [ 1763.347876][ T468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1763.347891][ T468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1763.348420][ T468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1763.348440][ T468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1763.373397][ T468] veth1_macvtap: left promiscuous mode [ 1763.373439][ T468] veth0_macvtap: left promiscuous mode [ 1763.373545][ T468] veth1_vlan: left promiscuous mode [ 1763.373618][ T468] veth0_vlan: left promiscuous mode [ 1763.572729][ T468] team0 (unregistering): Port device team_slave_1 removed [ 1763.579542][ T468] team0 (unregistering): Port device team_slave_0 removed [ 1763.838630][ T2447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1763.872654][ T2411] veth0_vlan: entered promiscuous mode [ 1763.921735][ T4933] Bluetooth: hci3: command tx timeout [ 1763.925849][ T2411] veth1_vlan: entered promiscuous mode [ 1763.978452][ T2447] 8021q: adding VLAN 0 to HW filter on device team0 [ 1764.017500][ T98] bridge0: port 1(bridge_slave_0) entered blocking state [ 1764.017618][ T98] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1764.054832][ T98] bridge0: port 2(bridge_slave_1) entered blocking state [ 1764.054951][ T98] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1764.157398][ T2458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1764.158172][ T2411] veth0_macvtap: entered promiscuous mode [ 1764.199976][ T2411] veth1_macvtap: entered promiscuous mode [ 1764.276981][ T2577] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1764.284207][ T2577] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1764.291310][ T2458] 8021q: adding VLAN 0 to HW filter on device team0 [ 1764.303289][ T2577] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1764.316256][ T2577] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1764.329284][ T2411] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1764.334114][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 1764.334226][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1764.354818][ T2577] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1764.358345][ T2577] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1764.359266][ T2577] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1764.385654][ T2577] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1764.402454][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 1764.402575][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1764.448289][ T2411] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1764.818970][ T468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1764.819009][ T468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1764.822431][ T98] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1764.927580][T13099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1764.927604][T13099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1764.951278][ T98] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1764.955862][T13099] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1765.013529][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1765.059869][ T2577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1765.168584][ T2577] 8021q: adding VLAN 0 to HW filter on device team0 [ 1765.198335][ T98] bridge0: port 1(bridge_slave_0) entered blocking state [ 1765.198459][ T98] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1765.233435][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1765.233550][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1765.771130][ T2447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1766.000430][ T4933] Bluetooth: hci3: command tx timeout [ 1766.042078][ T2458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1766.224378][ T2447] veth0_vlan: entered promiscuous mode [ 1766.294419][ T2447] veth1_vlan: entered promiscuous mode [ 1766.337782][ T2458] veth0_vlan: entered promiscuous mode [ 1766.393539][ T2458] veth1_vlan: entered promiscuous mode [ 1766.493362][ T2447] veth0_macvtap: entered promiscuous mode [ 1766.538327][ T2447] veth1_macvtap: entered promiscuous mode [ 1766.615681][ T2458] veth0_macvtap: entered promiscuous mode [ 1766.659720][ T2447] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1766.686470][ T2447] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1766.686882][ T2458] veth1_macvtap: entered promiscuous mode [ 1766.706507][ T2577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1766.742704][ T98] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1766.743859][ T98] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1766.743908][ T98] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1766.750525][ T98] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1766.788418][ T2458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1766.819266][ T2458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1766.865586][ T1034] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1766.865635][ T1034] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1766.951619][ T2779] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1767.135492][ T2779] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1767.135515][ T2779] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1767.315312][ T98] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1767.524181][ T2577] veth0_vlan: entered promiscuous mode [ 1767.558931][ T98] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1767.558955][ T98] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1767.643416][ T2577] veth1_vlan: entered promiscuous mode [ 1767.658533][ T2779] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1767.658558][ T2779] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1767.862784][ T98] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1767.862808][ T98] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1767.909931][ T2577] veth0_macvtap: entered promiscuous mode [ 1767.967212][ T2577] veth1_macvtap: entered promiscuous mode [ 1768.045033][ T2577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1768.085274][ T2577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1768.710441][ T1034] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1768.710500][ T1034] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1768.710545][ T1034] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1768.710589][ T1034] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1769.083940][T24032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1769.083967][T24032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1769.818673][ T468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1769.818690][ T468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1770.583659][ T2938] FAULT_INJECTION: forcing a failure. [ 1770.583659][ T2938] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1770.583700][ T2938] CPU: 0 UID: 0 PID: 2938 Comm: syz.3.3530 Not tainted syzkaller #0 PREEMPT(full) [ 1770.583732][ T2938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1770.583749][ T2938] Call Trace: [ 1770.583759][ T2938] [ 1770.583770][ T2938] dump_stack_lvl+0x100/0x190 [ 1770.583812][ T2938] should_fail_ex.cold+0x5/0xa [ 1770.583848][ T2938] _copy_to_user+0x32/0xd0 [ 1770.583890][ T2938] keyctl_capabilities+0x5a/0x160 [ 1770.583937][ T2938] __do_sys_keyctl+0x427/0x5a0 [ 1770.583980][ T2938] do_syscall_64+0x121/0x770 [ 1770.584018][ T2938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1770.584046][ T2938] RIP: 0033:0x7f9d5319e159 [ 1770.584069][ T2938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1770.584094][ T2938] RSP: 002b:00007f9d54045028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1770.584120][ T2938] RAX: ffffffffffffffda RBX: 00007f9d53426450 RCX: 00007f9d5319e159 [ 1770.584139][ T2938] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 000000000000001f [ 1770.584155][ T2938] RBP: 00007f9d54045090 R08: 00000000000003ff R09: 0000000000000000 [ 1770.584172][ T2938] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 1770.584189][ T2938] R13: 00007f9d534264e8 R14: 00007f9d53426450 R15: 00007ffdaac18ff8 [ 1770.584226][ T2938] [ 1771.060085][ T31] audit: type=1804 audit(1790902960.020:610): pid=2943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3531" name="/newroot/dev/binderfs/features/freeze_notification" dev="binder" ino=1048654 res=1 errno=0 [ 1771.541159][ T37] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1771.744274][T24916] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1771.748578][T24916] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1771.749690][T24916] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1771.751314][T24916] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1771.751977][T24916] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1772.137262][ T37] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1772.350262][ T37] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1772.558296][ T37] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1773.103685][ T37] bridge_slave_1: left allmulticast mode [ 1773.103715][ T37] bridge_slave_1: left promiscuous mode [ 1773.103939][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 1773.135703][ T37] bridge_slave_0: left allmulticast mode [ 1773.135736][ T37] bridge_slave_0: left promiscuous mode [ 1773.135963][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 1773.713151][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1773.717518][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1773.719238][ T37] bond0 (unregistering): Released all slaves [ 1773.857143][T24916] Bluetooth: hci0: command tx timeout [ 1774.169831][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1774.318229][ T2962] bridge0: port 1(bridge_slave_0) entered blocking state [ 1774.318331][ T2962] bridge0: port 1(bridge_slave_0) entered disabled state [ 1774.318462][ T2962] bridge_slave_0: entered allmulticast mode [ 1774.320005][ T2962] bridge_slave_0: entered promiscuous mode [ 1774.333137][ T2962] bridge0: port 2(bridge_slave_1) entered blocking state [ 1774.333265][ T2962] bridge0: port 2(bridge_slave_1) entered disabled state [ 1774.333395][ T2962] bridge_slave_1: entered allmulticast mode [ 1774.335262][ T2962] bridge_slave_1: entered promiscuous mode [ 1774.461548][ T37] hsr_slave_0: left promiscuous mode [ 1774.462054][ T37] hsr_slave_1: left promiscuous mode [ 1774.462606][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1774.462622][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1774.463170][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1774.463190][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1774.466449][ T37] veth1_macvtap: left promiscuous mode [ 1774.466474][ T37] veth0_macvtap: left promiscuous mode [ 1774.466535][ T37] veth1_vlan: left promiscuous mode [ 1774.466577][ T37] veth0_vlan: left promiscuous mode [ 1774.684466][ T37] team0 (unregistering): Port device team_slave_1 removed [ 1774.698684][ T37] team0 (unregistering): Port device team_slave_0 removed [ 1774.788613][ T2962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1774.838348][ T2962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1774.906305][ T2962] team0: Port device team_slave_0 added [ 1774.939093][ T2962] team0: Port device team_slave_1 added [ 1775.008609][ T2962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1775.008629][ T2962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1775.008656][ T2962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1775.019953][ T2962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1775.019973][ T2962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1775.020002][ T2962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1775.201748][ T2962] hsr_slave_0: entered promiscuous mode [ 1775.205860][ T2962] hsr_slave_1: entered promiscuous mode [ 1775.206639][ T2962] debugfs: 'hsr0' already exists in 'hsr' [ 1775.206661][ T2962] Cannot create hsr debugfs directory [ 1775.903069][ T3034] FAULT_INJECTION: forcing a failure. [ 1775.903069][ T3034] name failslab, interval 1, probability 0, space 0, times 0 [ 1775.903112][ T3034] CPU: 0 UID: 0 PID: 3034 Comm: syz.2.3536 Not tainted syzkaller #0 PREEMPT(full) [ 1775.903146][ T3034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1775.903165][ T3034] Call Trace: [ 1775.903175][ T3034] [ 1775.903186][ T3034] dump_stack_lvl+0x100/0x190 [ 1775.903233][ T3034] should_fail_ex.cold+0x5/0xa [ 1775.903274][ T3034] should_failslab+0xc2/0x120 [ 1775.903326][ T3034] __kmalloc_noprof+0xfc/0x840 [ 1775.903361][ T3034] ? rcu_is_watching+0x13/0xc0 [ 1775.903395][ T3034] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1775.903440][ T3034] tomoyo_realpath_from_path+0xb6/0x690 [ 1775.903485][ T3034] tomoyo_check_open_permission+0x2af/0x3c0 [ 1775.903518][ T3034] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1775.903549][ T3034] ? __lock_acquire+0x5c0/0x1f40 [ 1775.903602][ T3034] ? hook_file_open+0x248/0x8e0 [ 1775.903662][ T3034] ? path_get+0x61/0x80 [ 1775.903804][ T3034] tomoyo_file_open+0x6b/0x90 [ 1775.903846][ T3034] security_file_open+0xb5/0x1e0 [ 1775.903886][ T3034] do_dentry_open+0x588/0x14d0 [ 1775.903963][ T3034] vfs_open+0x82/0x3f0 [ 1775.904012][ T3034] path_openat+0x19fa/0x2440 [ 1775.904057][ T3034] ? __pfx_path_openat+0x10/0x10 [ 1775.904107][ T3034] do_file_open+0x20e/0x430 [ 1775.904149][ T3034] ? __pfx_do_file_open+0x10/0x10 [ 1775.904215][ T3034] ? _raw_spin_unlock+0x28/0x50 [ 1775.904245][ T3034] ? alloc_fd+0x471/0x7a0 [ 1775.904440][ T3034] do_sys_openat2+0x10f/0x1e0 [ 1775.904489][ T3034] ? __pfx_do_sys_openat2+0x10/0x10 [ 1775.904538][ T3034] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1775.904586][ T3034] __x64_sys_openat+0x12d/0x210 [ 1775.904615][ T3034] ? __pfx___x64_sys_openat+0x10/0x10 [ 1775.904659][ T3034] do_syscall_64+0x121/0x770 [ 1775.904698][ T3034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1775.904728][ T3034] RIP: 0033:0x7fdfbf79e159 [ 1775.904753][ T3034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1775.904780][ T3034] RSP: 002b:00007fdfbcdae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1775.904809][ T3034] RAX: ffffffffffffffda RBX: 00007fdfbfa26450 RCX: 00007fdfbf79e159 [ 1775.904828][ T3034] RDX: 0000000000000200 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1775.904847][ T3034] RBP: 00007fdfbf83506b R08: 0000000000000000 R09: 0000000000000000 [ 1775.904865][ T3034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1775.904883][ T3034] R13: 00007fdfbfa264e8 R14: 00007fdfbfa26450 R15: 00007ffd48207e18 [ 1775.904923][ T3034] [ 1775.920624][ T3034] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1775.930392][T24916] Bluetooth: hci0: command tx timeout [ 1777.015753][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1777.188324][ T4933] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1777.189513][ T4933] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1777.190096][ T4933] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1777.211746][ T4933] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1777.213522][ T4933] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1777.541273][ T98] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1777.732498][ T98] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1777.889600][ T98] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1778.000963][T24916] Bluetooth: hci0: command tx timeout [ 1778.077485][ T98] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1778.494599][ T3077] netlink: 5324 bytes leftover after parsing attributes in process `syz.0.3539'. [ 1779.281155][T24916] Bluetooth: hci2: command tx timeout [ 1779.342066][ T3102] FAULT_INJECTION: forcing a failure. [ 1779.342066][ T3102] name failslab, interval 1, probability 0, space 0, times 0 [ 1779.342105][ T3102] CPU: 1 UID: 0 PID: 3102 Comm: syz.2.3541 Not tainted syzkaller #0 PREEMPT(full) [ 1779.342135][ T3102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1779.342152][ T3102] Call Trace: [ 1779.342161][ T3102] [ 1779.342171][ T3102] dump_stack_lvl+0x100/0x190 [ 1779.342214][ T3102] should_fail_ex.cold+0x5/0xa [ 1779.342249][ T3102] should_failslab+0xc2/0x120 [ 1779.342289][ T3102] __kmalloc_noprof+0xfc/0x840 [ 1779.342322][ T3102] ? rcu_is_watching+0x13/0xc0 [ 1779.342355][ T3102] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1779.342397][ T3102] tomoyo_realpath_from_path+0xb6/0x690 [ 1779.342440][ T3102] tomoyo_path_number_perm+0x23c/0x580 [ 1779.342468][ T3102] ? tomoyo_path_number_perm+0x22e/0x580 [ 1779.342501][ T3102] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1779.342530][ T3102] ? futex_unqueue+0x133/0x2c0 [ 1779.342597][ T3102] ? __futex_wait+0x256/0x300 [ 1779.342669][ T3102] ? from_kgid+0x8f/0xd0 [ 1779.342725][ T3102] ? __pfx_from_kgid+0x10/0x10 [ 1779.342774][ T3102] tomoyo_path_chown+0x14b/0x1b0 [ 1779.342812][ T3102] ? __pfx_tomoyo_path_chown+0x10/0x10 [ 1779.342850][ T3102] ? __pfx_make_vfsgid+0x10/0x10 [ 1779.342939][ T3102] ? from_vfsuid+0xea/0x140 [ 1779.342969][ T3102] ? __pfx_from_vfsuid+0x10/0x10 [ 1779.343005][ T3102] security_path_chown+0x12a/0x2d0 [ 1779.343051][ T3102] chown_common+0x3da/0x6e0 [ 1779.343100][ T3102] ? __pfx_chown_common+0x10/0x10 [ 1779.343141][ T3102] ? lock_acquire+0x1d1/0x380 [ 1779.343181][ T3102] ? vfs_fchown+0x20/0x110 [ 1779.343232][ T3102] ? rcu_read_lock_any_held+0x6a/0x90 [ 1779.343269][ T3102] vfs_fchown+0xcd/0x110 [ 1779.343308][ T3102] __x64_sys_fchown+0xad/0x130 [ 1779.343350][ T3102] do_syscall_64+0x121/0x770 [ 1779.343387][ T3102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1779.343416][ T3102] RIP: 0033:0x7fdfbf79e159 [ 1779.343439][ T3102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1779.343463][ T3102] RSP: 002b:00007fdfbcdae028 EFLAGS: 00000246 ORIG_RAX: 000000000000005d [ 1779.343489][ T3102] RAX: ffffffffffffffda RBX: 00007fdfbfa26450 RCX: 00007fdfbf79e159 [ 1779.343506][ T3102] RDX: 0000000000000005 RSI: 0000000000000e5a RDI: 0000000000000006 [ 1779.343522][ T3102] RBP: 00007fdfbf83506b R08: 0000000000000000 R09: 0000000000000000 [ 1779.343539][ T3102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1779.343556][ T3102] R13: 00007fdfbfa264e8 R14: 00007fdfbfa26450 R15: 00007ffd48207e18 [ 1779.343592][ T3102] [ 1779.346219][ T3102] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1779.644213][ T98] bridge_slave_1: left allmulticast mode [ 1779.644243][ T98] bridge_slave_1: left promiscuous mode [ 1779.644488][ T98] bridge0: port 2(bridge_slave_1) entered disabled state [ 1779.648738][ T98] bridge_slave_0: left allmulticast mode [ 1779.648766][ T98] bridge_slave_0: left promiscuous mode [ 1779.648968][ T98] bridge0: port 1(bridge_slave_0) entered disabled state [ 1779.928096][ T98] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1779.949267][ T98] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1779.963532][ T98] bond0 (unregistering): Released all slaves [ 1780.081335][T24916] Bluetooth: hci0: command tx timeout [ 1780.090280][ T2962] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1780.111835][ T2962] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1780.124323][ T2962] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1780.147488][ T2962] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1780.293818][ T2962] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1780.299205][ T2962] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1780.484504][ T2962] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1780.488754][ T2962] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1780.742721][ T98] hsr_slave_0: left promiscuous mode [ 1780.746411][ T98] hsr_slave_1: left promiscuous mode [ 1780.748927][ T98] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1780.748952][ T98] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1780.751566][ T98] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1780.751588][ T98] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1780.770993][ T98] veth1_macvtap: left promiscuous mode [ 1780.771035][ T98] veth0_macvtap: left promiscuous mode [ 1780.771137][ T98] veth1_vlan: left promiscuous mode [ 1780.771208][ T98] veth0_vlan: left promiscuous mode [ 1781.222456][ T98] team0 (unregistering): Port device team_slave_1 removed [ 1781.247274][ T98] team0 (unregistering): Port device team_slave_0 removed [ 1781.360456][T24916] Bluetooth: hci2: command tx timeout [ 1781.556222][ T3044] bridge0: port 1(bridge_slave_0) entered blocking state [ 1781.556443][ T3044] bridge0: port 1(bridge_slave_0) entered disabled state [ 1781.556583][ T3044] bridge_slave_0: entered allmulticast mode [ 1781.558546][ T3044] bridge_slave_0: entered promiscuous mode [ 1781.590266][ T3044] bridge0: port 2(bridge_slave_1) entered blocking state [ 1781.599782][ T3044] bridge0: port 2(bridge_slave_1) entered disabled state [ 1781.599949][ T3044] bridge_slave_1: entered allmulticast mode [ 1781.616442][ T3044] bridge_slave_1: entered promiscuous mode [ 1781.876399][ T3044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1781.974218][ T3044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1782.151650][ T3044] team0: Port device team_slave_0 added [ 1782.220034][ T3044] team0: Port device team_slave_1 added [ 1782.227597][ T3177] FAULT_INJECTION: forcing a failure. [ 1782.227597][ T3177] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1782.227634][ T3177] CPU: 0 UID: 0 PID: 3177 Comm: syz.2.3543 Not tainted syzkaller #0 PREEMPT(full) [ 1782.227665][ T3177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1782.227681][ T3177] Call Trace: [ 1782.227689][ T3177] [ 1782.227699][ T3177] dump_stack_lvl+0x100/0x190 [ 1782.227741][ T3177] should_fail_ex.cold+0x5/0xa [ 1782.227776][ T3177] _copy_to_user+0x32/0xd0 [ 1782.227820][ T3177] keyctl_capabilities+0x5a/0x160 [ 1782.227867][ T3177] __do_sys_keyctl+0x427/0x5a0 [ 1782.227902][ T3177] do_syscall_64+0x121/0x770 [ 1782.227938][ T3177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1782.227966][ T3177] RIP: 0033:0x7fdfbf79e159 [ 1782.227988][ T3177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1782.228011][ T3177] RSP: 002b:00007fdfbd9b4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1782.228036][ T3177] RAX: ffffffffffffffda RBX: 00007fdfbfa26450 RCX: 00007fdfbf79e159 [ 1782.228054][ T3177] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 000000000000001f [ 1782.228066][ T3177] RBP: 00007fdfbd9b4090 R08: 00000000000003ff R09: 0000000000000000 [ 1782.228079][ T3177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1782.228094][ T3177] R13: 00007fdfbfa264e8 R14: 00007fdfbfa26450 R15: 00007ffd48207e18 [ 1782.228130][ T3177] [ 1782.672449][ T3044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1782.672471][ T3044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1782.672502][ T3044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1782.775390][ T3044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1782.775409][ T3044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1782.775435][ T3044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1783.046446][ T2962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1783.147153][ T3044] hsr_slave_0: entered promiscuous mode [ 1783.148261][ T3044] hsr_slave_1: entered promiscuous mode [ 1783.149058][ T3044] debugfs: 'hsr0' already exists in 'hsr' [ 1783.149081][ T3044] Cannot create hsr debugfs directory [ 1783.441659][T24916] Bluetooth: hci2: command tx timeout [ 1783.500823][ T2962] 8021q: adding VLAN 0 to HW filter on device team0 [ 1783.901750][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1784.049637][ T1034] bridge0: port 1(bridge_slave_0) entered blocking state [ 1784.049761][ T1034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1784.269206][ T2779] bridge0: port 2(bridge_slave_1) entered blocking state [ 1784.269381][ T2779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1785.522444][T24916] Bluetooth: hci2: command tx timeout [ 1787.036281][ T3044] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1787.057066][ T3044] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1787.164296][ T3044] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1787.182253][ T3044] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1787.183277][ T3044] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1787.210363][ T3044] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1787.274591][ T3044] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1787.279613][ T3044] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1787.301986][ T2962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1787.820059][ T2962] veth0_vlan: entered promiscuous mode [ 1787.917409][ T2962] veth1_vlan: entered promiscuous mode [ 1788.168020][ T3044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1788.207607][ T2962] veth0_macvtap: entered promiscuous mode [ 1788.242055][ T2962] veth1_macvtap: entered promiscuous mode [ 1788.248412][ T3044] 8021q: adding VLAN 0 to HW filter on device team0 [ 1788.362474][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 1788.362548][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1788.367788][ T2962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1788.426766][ T2962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1788.445340][ T468] bridge0: port 2(bridge_slave_1) entered blocking state [ 1788.445410][ T468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1789.440540][ T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1789.440631][ T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1789.440674][ T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1789.440716][ T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1790.114914][T24032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1790.114949][T24032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1790.455327][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1790.455366][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1791.003221][ T3364] hub 1-0:1.0: USB hub found [ 1791.007154][ T3364] hub 1-0:1.0: 1 port detected [ 1791.316429][ T3376] FAULT_INJECTION: forcing a failure. [ 1791.316429][ T3376] name failslab, interval 1, probability 0, space 0, times 0 [ 1791.316471][ T3376] CPU: 0 UID: 0 PID: 3376 Comm: syz.2.3553 Not tainted syzkaller #0 PREEMPT(full) [ 1791.316503][ T3376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1791.316521][ T3376] Call Trace: [ 1791.316530][ T3376] [ 1791.316540][ T3376] dump_stack_lvl+0x100/0x190 [ 1791.316582][ T3376] should_fail_ex.cold+0x5/0xa [ 1791.316617][ T3376] should_failslab+0xc2/0x120 [ 1791.316658][ T3376] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1791.316695][ T3376] ? sk_prot_alloc+0x60/0x2a0 [ 1791.316734][ T3376] sk_prot_alloc+0x60/0x2a0 [ 1791.316772][ T3376] sk_alloc+0x36/0xe80 [ 1791.316815][ T3376] kcm_create+0xfc/0x6a0 [ 1791.316941][ T3376] __sock_create+0x339/0x860 [ 1791.316984][ T3376] __sys_socket+0x14d/0x260 [ 1791.317017][ T3376] ? __pfx___sys_socket+0x10/0x10 [ 1791.317062][ T3376] __x64_sys_socket+0x72/0xb0 [ 1791.317095][ T3376] ? lockdep_hardirqs_on+0x7d/0x110 [ 1791.317129][ T3376] do_syscall_64+0x121/0x770 [ 1791.317166][ T3376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1791.317195][ T3376] RIP: 0033:0x7fdfbf79e159 [ 1791.317217][ T3376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1791.317246][ T3376] RSP: 002b:00007fdfbcdae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1791.317273][ T3376] RAX: ffffffffffffffda RBX: 00007fdfbfa26450 RCX: 00007fdfbf79e159 [ 1791.317291][ T3376] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000029 [ 1791.317308][ T3376] RBP: 00007fdfbf83506b R08: 0000000000000000 R09: 0000000000000000 [ 1791.317324][ T3376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1791.317341][ T3376] R13: 00007fdfbfa264e8 R14: 00007fdfbfa26450 R15: 00007ffd48207e18 [ 1791.317374][ T3376] [ 1791.636810][ T3044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1791.682975][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.683040][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.612373][ T3044] veth0_vlan: entered promiscuous mode [ 1792.642118][ T3044] veth1_vlan: entered promiscuous mode [ 1792.705798][ T3399] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1793.497506][ T3044] veth0_macvtap: entered promiscuous mode [ 1794.212285][ T3044] veth1_macvtap: entered promiscuous mode [ 1794.526994][ T3044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1794.548483][ T3044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1794.620779][ T37] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1794.621499][ T37] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1794.621538][ T37] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1794.621561][ T37] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1794.799260][T13099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1794.799286][T13099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1794.903691][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1794.903716][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1797.164235][ T3466] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345512719 (2345512719 ns) > initial count (2345451774 ns). Using initial count to start timer. [ 1799.498646][ T3518] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345512719 (2345512719 ns) > initial count (2345451774 ns). Using initial count to start timer. [ 1801.003383][ T3521] FAULT_INJECTION: forcing a failure. [ 1801.003383][ T3521] name failslab, interval 1, probability 0, space 0, times 0 [ 1801.003421][ T3521] CPU: 1 UID: 0 PID: 3521 Comm: syz.1.3572 Not tainted syzkaller #0 PREEMPT(full) [ 1801.003452][ T3521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1801.003468][ T3521] Call Trace: [ 1801.003477][ T3521] [ 1801.003487][ T3521] dump_stack_lvl+0x100/0x190 [ 1801.003530][ T3521] should_fail_ex.cold+0x5/0xa [ 1801.003565][ T3521] should_failslab+0xc2/0x120 [ 1801.003604][ T3521] __kmalloc_noprof+0xfc/0x840 [ 1801.003635][ T3521] ? rcu_is_watching+0x13/0xc0 [ 1801.003665][ T3521] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1801.003706][ T3521] tomoyo_realpath_from_path+0xb6/0x690 [ 1801.003747][ T3521] tomoyo_path_number_perm+0x23c/0x580 [ 1801.003774][ T3521] ? tomoyo_path_number_perm+0x22e/0x580 [ 1801.003804][ T3521] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1801.003845][ T3521] ? __lock_acquire+0x5c0/0x1f40 [ 1801.003900][ T3521] ? __fget_files+0x34/0x3d0 [ 1801.003941][ T3521] ? find_held_lock+0x2b/0x80 [ 1801.003972][ T3521] ? hook_file_ioctl_common+0x140/0x440 [ 1801.004009][ T3521] ? __fget_files+0x21f/0x3d0 [ 1801.004048][ T3521] security_file_ioctl+0xd3/0x230 [ 1801.004078][ T3521] __x64_sys_ioctl+0xb7/0x210 [ 1801.004111][ T3521] do_syscall_64+0x121/0x770 [ 1801.004147][ T3521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1801.004175][ T3521] RIP: 0033:0x7fc7c599e159 [ 1801.004197][ T3521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1801.004222][ T3521] RSP: 002b:00007fc7c6896028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1801.004249][ T3521] RAX: ffffffffffffffda RBX: 00007fc7c5c25fa0 RCX: 00007fc7c599e159 [ 1801.004267][ T3521] RDX: 00002000000000c0 RSI: 0000000040084d05 RDI: 0000000000000003 [ 1801.004284][ T3521] RBP: 00007fc7c6896090 R08: 0000000000000000 R09: 0000000000000000 [ 1801.004301][ T3521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1801.004317][ T3521] R13: 00007fc7c5c26038 R14: 00007fc7c5c25fa0 R15: 00007ffd2ac1e898 [ 1801.004357][ T3521] [ 1801.012925][ T3521] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1801.302899][ T3547] FAULT_INJECTION: forcing a failure. [ 1801.302899][ T3547] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1801.302937][ T3547] CPU: 1 UID: 0 PID: 3547 Comm: syz.2.3575 Not tainted syzkaller #0 PREEMPT(full) [ 1801.302968][ T3547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1801.302984][ T3547] Call Trace: [ 1801.302992][ T3547] [ 1801.303002][ T3547] dump_stack_lvl+0x100/0x190 [ 1801.303045][ T3547] should_fail_ex.cold+0x5/0xa [ 1801.303080][ T3547] _copy_to_user+0x32/0xd0 [ 1801.303120][ T3547] keyctl_capabilities+0x5a/0x160 [ 1801.303163][ T3547] __do_sys_keyctl+0x427/0x5a0 [ 1801.303205][ T3547] do_syscall_64+0x121/0x770 [ 1801.303242][ T3547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1801.303266][ T3547] RIP: 0033:0x7fdfbf79e159 [ 1801.303288][ T3547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1801.303312][ T3547] RSP: 002b:00007fdfbd9b4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1801.303338][ T3547] RAX: ffffffffffffffda RBX: 00007fdfbfa26450 RCX: 00007fdfbf79e159 [ 1801.303356][ T3547] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 000000000000001f [ 1801.303371][ T3547] RBP: 00007fdfbd9b4090 R08: 00000000000003ff R09: 0000000000000000 [ 1801.303388][ T3547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1801.303404][ T3547] R13: 00007fdfbfa264e8 R14: 00007fdfbfa26450 R15: 00007ffd48207e18 [ 1801.303440][ T3547] [ 1803.640805][ T3450] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1803.800983][ T3440] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1803.803152][ T3440] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1803.806943][ T3440] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1803.808459][ T3440] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1803.809067][ T3440] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1804.007155][ T3450] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1804.231374][ T3450] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1804.444684][ T3450] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1804.541347][ T3587] FAULT_INJECTION: forcing a failure. [ 1804.541347][ T3587] name failslab, interval 1, probability 0, space 0, times 0 [ 1804.541388][ T3587] CPU: 1 UID: 0 PID: 3587 Comm: syz.0.3582 Not tainted syzkaller #0 PREEMPT(full) [ 1804.541420][ T3587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1804.541436][ T3587] Call Trace: [ 1804.541444][ T3587] [ 1804.541454][ T3587] dump_stack_lvl+0x100/0x190 [ 1804.541497][ T3587] should_fail_ex.cold+0x5/0xa [ 1804.541541][ T3587] should_failslab+0xc2/0x120 [ 1804.541584][ T3587] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1804.541619][ T3587] ? __asan_memcpy+0x3c/0x60 [ 1804.541650][ T3587] ? __kernfs_new_node+0xd2/0xa10 [ 1804.541747][ T3587] __kernfs_new_node+0xd2/0xa10 [ 1804.541795][ T3587] ? __pfx___kernfs_new_node+0x10/0x10 [ 1804.541843][ T3587] ? lock_acquire+0x1d1/0x380 [ 1804.541884][ T3587] ? kernfs_root+0x23/0x2a0 [ 1804.541921][ T3587] ? find_held_lock+0x2b/0x80 [ 1804.541953][ T3587] ? kernfs_root+0xee/0x2a0 [ 1804.541987][ T3587] ? kernfs_root+0xee/0x2a0 [ 1804.542031][ T3587] kernfs_new_node+0x117/0x150 [ 1804.542095][ T3587] __kernfs_create_file+0x53/0x350 [ 1804.542168][ T3587] cgroup_addrm_files+0x4ef/0xdb0 [ 1804.542231][ T3587] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 1804.542288][ T3587] ? idr_replace+0xfa/0x170 [ 1804.542372][ T3587] css_populate_dir+0x161/0x590 [ 1804.542407][ T3587] cgroup_apply_control_enable+0x441/0xdd0 [ 1804.542462][ T3587] cgroup_mkdir+0x57f/0x1330 [ 1804.542506][ T3587] ? __pfx_cgroup_mkdir+0x10/0x10 [ 1804.542557][ T3587] kernfs_iop_mkdir+0x111/0x190 [ 1804.542598][ T3587] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 1804.542641][ T3587] vfs_mkdir+0x364/0x850 [ 1804.542676][ T3587] filename_mkdirat+0x48b/0x5e0 [ 1804.542719][ T3587] ? __pfx_filename_mkdirat+0x10/0x10 [ 1804.542757][ T3587] ? strncpy_from_user+0x19d/0x2d0 [ 1804.542803][ T3587] ? do_getname+0x191/0x390 [ 1804.542833][ T3587] __x64_sys_mkdir+0x6b/0x90 [ 1804.542873][ T3587] do_syscall_64+0x121/0x770 [ 1804.542910][ T3587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1804.542940][ T3587] RIP: 0033:0x7f0d7ab9e159 [ 1804.542965][ T3587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1804.542991][ T3587] RSP: 002b:00007f0d7b9e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1804.543020][ T3587] RAX: ffffffffffffffda RBX: 00007f0d7ae25fa0 RCX: 00007f0d7ab9e159 [ 1804.543039][ T3587] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 1804.543057][ T3587] RBP: 00007f0d7ac3506b R08: 0000000000000000 R09: 0000000000000000 [ 1804.543075][ T3587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1804.543093][ T3587] R13: 00007f0d7ae26038 R14: 00007f0d7ae25fa0 R15: 00007ffce160e7e8 [ 1804.543132][ T3587] [ 1804.546508][ T3587] cgroup: cgroup_addrm_files: failed to add usage_user, err=-12 [ 1805.164232][ T3450] bridge_slave_1: left allmulticast mode [ 1805.164255][ T3450] bridge_slave_1: left promiscuous mode [ 1805.164395][ T3450] bridge0: port 2(bridge_slave_1) entered disabled state [ 1805.168346][ T3450] bridge_slave_0: left allmulticast mode [ 1805.168365][ T3450] bridge_slave_0: left promiscuous mode [ 1805.168501][ T3450] bridge0: port 1(bridge_slave_0) entered disabled state [ 1805.400733][ T3611] openvswitch: netlink: Key type 154 is out of range max 32 [ 1805.429265][ T3450] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1805.443941][ T3450] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1805.445088][ T3450] bond0 (unregistering): Released all slaves [ 1805.840996][ T3440] Bluetooth: hci2: command tx timeout [ 1806.356157][ T3450] hsr_slave_0: left promiscuous mode [ 1806.356623][ T3450] hsr_slave_1: left promiscuous mode [ 1806.357169][ T3450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1806.357184][ T3450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1806.358798][ T3450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1806.358814][ T3450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1806.373043][ T3450] veth1_macvtap: left promiscuous mode [ 1806.373085][ T3450] veth0_macvtap: left promiscuous mode [ 1806.373192][ T3450] veth1_vlan: left promiscuous mode [ 1806.373265][ T3450] veth0_vlan: left promiscuous mode [ 1806.599802][ T3450] team0 (unregistering): Port device team_slave_1 removed [ 1806.615392][ T3450] team0 (unregistering): Port device team_slave_0 removed [ 1806.731976][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1807.482996][ T3641] FAULT_INJECTION: forcing a failure. [ 1807.482996][ T3641] name failslab, interval 1, probability 0, space 0, times 0 [ 1807.483033][ T3641] CPU: 1 UID: 0 PID: 3641 Comm: syz.0.3587 Not tainted syzkaller #0 PREEMPT(full) [ 1807.483062][ T3641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1807.483076][ T3641] Call Trace: [ 1807.483085][ T3641] [ 1807.483094][ T3641] dump_stack_lvl+0x100/0x190 [ 1807.483136][ T3641] should_fail_ex.cold+0x5/0xa [ 1807.483171][ T3641] should_failslab+0xc2/0x120 [ 1807.483205][ T3641] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1807.483246][ T3641] ? ksys_write+0x190/0x250 [ 1807.483278][ T3641] ? create_new_namespaces+0x30/0xac0 [ 1807.483323][ T3641] create_new_namespaces+0x30/0xac0 [ 1807.483361][ T3641] ? bpf_lsm_capable+0x9/0x10 [ 1807.483384][ T3641] ? security_capable+0x80/0x260 [ 1807.483426][ T3641] unshare_nsproxy_namespaces+0xf2/0x220 [ 1807.483468][ T3641] ksys_unshare+0x4a2/0xa70 [ 1807.483530][ T3641] ? __pfx_ksys_unshare+0x10/0x10 [ 1807.483555][ T3641] ? ksys_write+0x1ac/0x250 [ 1807.483596][ T3641] __x64_sys_unshare+0x31/0x40 [ 1807.483621][ T3641] do_syscall_64+0x121/0x770 [ 1807.483656][ T3641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1807.483682][ T3641] RIP: 0033:0x7f0d7ab9e159 [ 1807.483705][ T3641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1807.483730][ T3641] RSP: 002b:00007f0d7b9e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1807.483754][ T3641] RAX: ffffffffffffffda RBX: 00007f0d7ae25fa0 RCX: 00007f0d7ab9e159 [ 1807.483772][ T3641] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1807.483789][ T3641] RBP: 00007f0d7b9e7090 R08: 0000000000000000 R09: 0000000000000000 [ 1807.483805][ T3641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1807.483822][ T3641] R13: 00007f0d7ae26038 R14: 00007f0d7ae25fa0 R15: 00007ffce160e7e8 [ 1807.483857][ T3641] [ 1807.789568][ T3650] openvswitch: netlink: Key type 154 is out of range max 32 [ 1807.920612][ T3440] Bluetooth: hci2: command tx timeout [ 1808.120249][ T3574] bridge0: port 1(bridge_slave_0) entered blocking state [ 1808.138175][ T3574] bridge0: port 1(bridge_slave_0) entered disabled state [ 1808.138340][ T3574] bridge_slave_0: entered allmulticast mode [ 1808.140248][ T3574] bridge_slave_0: entered promiscuous mode [ 1808.286030][ T3574] bridge0: port 2(bridge_slave_1) entered blocking state [ 1808.286151][ T3574] bridge0: port 2(bridge_slave_1) entered disabled state [ 1808.286298][ T3574] bridge_slave_1: entered allmulticast mode [ 1808.292141][ T3574] bridge_slave_1: entered promiscuous mode [ 1808.515374][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1808.576518][ T3574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1808.638560][ T3455] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1808.647912][ T3455] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1808.648995][ T3455] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1808.666426][ T3455] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1808.668477][ T3455] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1808.741392][ T3574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1808.894139][ T3450] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1809.004600][ T3574] team0: Port device team_slave_0 added [ 1809.104375][ T3574] team0: Port device team_slave_1 added [ 1809.147448][ T3450] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1809.245225][ T3574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1809.245248][ T3574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1809.245276][ T3574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1809.254925][ T3574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1809.254945][ T3574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1809.254974][ T3574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1809.400275][ T3450] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1809.471707][ T3574] hsr_slave_0: entered promiscuous mode [ 1809.472755][ T3574] hsr_slave_1: entered promiscuous mode [ 1809.473497][ T3574] debugfs: 'hsr0' already exists in 'hsr' [ 1809.473518][ T3574] Cannot create hsr debugfs directory [ 1809.593119][ T3450] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1810.002473][ T3440] Bluetooth: hci2: command tx timeout [ 1810.049554][ T3696] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1810.506466][ T5279] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1810.720455][ T3440] Bluetooth: hci3: command tx timeout [ 1811.063879][ T3450] bridge_slave_1: left allmulticast mode [ 1811.063909][ T3450] bridge_slave_1: left promiscuous mode [ 1811.064115][ T3450] bridge0: port 2(bridge_slave_1) entered disabled state [ 1811.068127][ T3450] bridge_slave_0: left allmulticast mode [ 1811.068155][ T3450] bridge_slave_0: left promiscuous mode [ 1811.068357][ T3450] bridge0: port 1(bridge_slave_0) entered disabled state [ 1811.238537][ T3450] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1811.249317][ T3450] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1811.253215][ T3450] bond0 (unregistering): Released all slaves [ 1811.966127][ T3450] hsr_slave_0: left promiscuous mode [ 1811.966899][ T3450] hsr_slave_1: left promiscuous mode [ 1811.967806][ T3450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1811.967828][ T3450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1811.968675][ T3450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1811.968695][ T3450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1811.983743][ T3450] veth1_macvtap: left promiscuous mode [ 1811.983794][ T3450] veth0_macvtap: left promiscuous mode [ 1811.983899][ T3450] veth1_vlan: left promiscuous mode [ 1811.983970][ T3450] veth0_vlan: left promiscuous mode [ 1812.081631][ T3440] Bluetooth: hci2: command tx timeout [ 1812.086860][ T3739] openvswitch: netlink: Key type 154 is out of range max 32 [ 1812.314853][ T3450] team0 (unregistering): Port device team_slave_1 removed [ 1812.335262][ T3450] team0 (unregistering): Port device team_slave_0 removed [ 1812.531587][ T5279] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1812.553130][ T3669] bridge0: port 1(bridge_slave_0) entered blocking state [ 1812.553290][ T3669] bridge0: port 1(bridge_slave_0) entered disabled state [ 1812.553430][ T3669] bridge_slave_0: entered allmulticast mode [ 1812.562692][ T3669] bridge_slave_0: entered promiscuous mode [ 1812.565450][ T3669] bridge0: port 2(bridge_slave_1) entered blocking state [ 1812.565552][ T3669] bridge0: port 2(bridge_slave_1) entered disabled state [ 1812.565678][ T3669] bridge_slave_1: entered allmulticast mode [ 1812.567474][ T3669] bridge_slave_1: entered promiscuous mode [ 1812.607487][ T3669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1812.692842][ T3669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1812.801480][ T3440] Bluetooth: hci3: command tx timeout [ 1812.894959][ T3669] team0: Port device team_slave_0 added [ 1812.917600][ T3669] team0: Port device team_slave_1 added [ 1813.009193][ T3574] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1813.014401][ T3574] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1813.015350][ T3574] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1813.020105][ T3574] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1813.023998][ T3574] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1813.049646][ T3574] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1813.065628][ T3669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1813.065647][ T3669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1813.065685][ T3669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1813.066962][ T3574] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1813.070129][ T3574] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1813.076532][ T3669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1813.076551][ T3669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1813.076582][ T3669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1813.237019][ T3669] hsr_slave_0: entered promiscuous mode [ 1813.241116][ T3669] hsr_slave_1: entered promiscuous mode [ 1814.186600][ T5279] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1814.697529][ T3574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1814.776851][ T3574] 8021q: adding VLAN 0 to HW filter on device team0 [ 1814.817625][ T3442] bridge0: port 1(bridge_slave_0) entered blocking state [ 1814.817748][ T3442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1814.846629][ T3457] bridge0: port 2(bridge_slave_1) entered blocking state [ 1814.846747][ T3457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1814.881733][ T3440] Bluetooth: hci3: command tx timeout [ 1815.067022][ T3793] FAULT_INJECTION: forcing a failure. [ 1815.067022][ T3793] name failslab, interval 1, probability 0, space 0, times 0 [ 1815.067061][ T3793] CPU: 0 UID: 0 PID: 3793 Comm: syz.1.3597 Not tainted syzkaller #0 PREEMPT(full) [ 1815.067093][ T3793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1815.067109][ T3793] Call Trace: [ 1815.067117][ T3793] [ 1815.067128][ T3793] dump_stack_lvl+0x100/0x190 [ 1815.067169][ T3793] should_fail_ex.cold+0x5/0xa [ 1815.067203][ T3793] should_failslab+0xc2/0x120 [ 1815.067257][ T3793] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1815.067293][ T3793] ? do_getname+0x35/0x390 [ 1815.067324][ T3793] do_getname+0x35/0x390 [ 1815.067352][ T3793] do_sys_openat2+0xc7/0x1e0 [ 1815.067393][ T3793] ? __pfx_do_sys_openat2+0x10/0x10 [ 1815.067435][ T3793] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1815.067471][ T3793] ? __fget_files+0x21f/0x3d0 [ 1815.067519][ T3793] __x64_sys_openat+0x12d/0x210 [ 1815.067544][ T3793] ? fput+0x7c/0x100 [ 1815.067580][ T3793] ? __pfx___x64_sys_openat+0x10/0x10 [ 1815.067605][ T3793] ? ksys_write+0x1ac/0x250 [ 1815.067649][ T3793] do_syscall_64+0x121/0x770 [ 1815.067686][ T3793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1815.067713][ T3793] RIP: 0033:0x7fc7c599e159 [ 1815.067736][ T3793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1815.067762][ T3793] RSP: 002b:00007fc7c6896028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1815.067789][ T3793] RAX: ffffffffffffffda RBX: 00007fc7c5c25fa0 RCX: 00007fc7c599e159 [ 1815.067808][ T3793] RDX: 0000000000200000 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 1815.067826][ T3793] RBP: 00007fc7c6896090 R08: 0000000000000000 R09: 0000000000000000 [ 1815.067843][ T3793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1815.067862][ T3793] R13: 00007fc7c5c26038 R14: 00007fc7c5c25fa0 R15: 00007ffd2ac1e898 [ 1815.067900][ T3793] [ 1815.389110][ T3669] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1815.395048][ T3669] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1815.395931][ T3669] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1815.404491][ T3669] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1815.456253][ T3669] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1815.467151][ T3669] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1815.474741][ T3669] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1815.506012][ T3669] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1815.685632][ T3808] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345512719 (2345512719 ns) > initial count (2345451774 ns). Using initial count to start timer. [ 1816.783675][ T3669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1816.849032][ T3669] 8021q: adding VLAN 0 to HW filter on device team0 [ 1816.869671][ T3451] bridge0: port 1(bridge_slave_0) entered blocking state [ 1816.869806][ T3451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1816.887223][ T3445] bridge0: port 2(bridge_slave_1) entered blocking state [ 1816.887329][ T3445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1816.960758][ T3440] Bluetooth: hci3: command tx timeout [ 1817.083349][ T3849] FAULT_INJECTION: forcing a failure. [ 1817.083349][ T3849] name failslab, interval 1, probability 0, space 0, times 0 [ 1817.083387][ T3849] CPU: 1 UID: 0 PID: 3849 Comm: syz.1.3600 Not tainted syzkaller #0 PREEMPT(full) [ 1817.083418][ T3849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1817.083434][ T3849] Call Trace: [ 1817.083443][ T3849] [ 1817.083453][ T3849] dump_stack_lvl+0x100/0x190 [ 1817.083495][ T3849] should_fail_ex.cold+0x5/0xa [ 1817.083530][ T3849] should_failslab+0xc2/0x120 [ 1817.083570][ T3849] __kmalloc_noprof+0xfc/0x840 [ 1817.083601][ T3849] ? rcu_is_watching+0x13/0xc0 [ 1817.083631][ T3849] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1817.083673][ T3849] tomoyo_realpath_from_path+0xb6/0x690 [ 1817.083715][ T3849] tomoyo_path_number_perm+0x23c/0x580 [ 1817.083741][ T3849] ? tomoyo_path_number_perm+0x22e/0x580 [ 1817.083770][ T3849] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1817.083813][ T3849] ? __lock_acquire+0x5c0/0x1f40 [ 1817.083869][ T3849] ? __fget_files+0x34/0x3d0 [ 1817.083903][ T3849] ? find_held_lock+0x2b/0x80 [ 1817.083933][ T3849] ? hook_file_ioctl_common+0x140/0x440 [ 1817.083971][ T3849] ? __fget_files+0x21f/0x3d0 [ 1817.084011][ T3849] security_file_ioctl+0xd3/0x230 [ 1817.084041][ T3849] __x64_sys_ioctl+0xb7/0x210 [ 1817.084073][ T3849] do_syscall_64+0x121/0x770 [ 1817.084110][ T3849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1817.084139][ T3849] RIP: 0033:0x7fc7c599e159 [ 1817.084161][ T3849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1817.084187][ T3849] RSP: 002b:00007fc7c6896028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1817.084214][ T3849] RAX: ffffffffffffffda RBX: 00007fc7c5c25fa0 RCX: 00007fc7c599e159 [ 1817.084232][ T3849] RDX: 0000000000000003 RSI: 00000000c0105303 RDI: 0000000000000003 [ 1817.084257][ T3849] RBP: 00007fc7c6896090 R08: 0000000000000000 R09: 0000000000000000 [ 1817.084272][ T3849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1817.084287][ T3849] R13: 00007fc7c5c26038 R14: 00007fc7c5c25fa0 R15: 00007ffd2ac1e898 [ 1817.084322][ T3849] [ 1817.084332][ T3849] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1817.805915][ T3574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1817.856362][ T3876] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2190002834 (17520022672 ns) > initial count (17520022160 ns). Using initial count to start timer. [ 1818.829170][ T3574] veth0_vlan: entered promiscuous mode [ 1819.016644][ T3574] veth1_vlan: entered promiscuous mode [ 1819.413485][ T3669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1819.492264][ T3923] process 'syz.0.3603' launched '/dev/fd/10/./file0' with NULL argv: empty string added [ 1819.761853][ T3574] veth0_macvtap: entered promiscuous mode [ 1819.859763][ T3928] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2181506585 (2181506585 ns) > initial count (2181506435 ns). Using initial count to start timer. [ 1820.228303][ T3574] veth1_macvtap: entered promiscuous mode [ 1820.616003][ T3574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1820.649797][ T3574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1820.658217][ T3669] veth0_vlan: entered promiscuous mode [ 1820.770557][ T3457] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1820.795416][ T3669] veth1_vlan: entered promiscuous mode [ 1820.850581][ T3445] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1820.851312][ T3457] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1820.851520][ T3457] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1821.077806][ T3669] veth0_macvtap: entered promiscuous mode [ 1821.135248][ T3669] veth1_macvtap: entered promiscuous mode [ 1821.136667][ T3457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1821.136689][ T3457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1821.447165][ T3445] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1821.447189][ T3445] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1821.641340][ T3669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1821.649024][ T3669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1822.333127][ T3445] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1822.333189][ T3445] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1822.333235][ T3445] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1822.333278][ T3445] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1822.465903][ T4005] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345512719 (2345512719 ns) > initial count (2345451774 ns). Using initial count to start timer. [ 1823.244930][ T3450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1823.244955][ T3450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1823.426794][ T3450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1823.426819][ T3450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1825.852102][ T4074] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345512719 (2345512719 ns) > initial count (2345451774 ns). Using initial count to start timer. [ 1827.469966][ T4106] BUG: unable to handle page fault for address: ffffc90014028fe8 [ 1827.477723][ T4106] #PF: supervisor write access in kernel mode [ 1827.483782][ T4106] #PF: error_code(0x0002) - not-present page [ 1827.489826][ T4106] PGD 13fe12067 P4D 13fe12067 PUD 1d2ca067 PMD 635b6067 PTE 0 [ 1827.497312][ T4106] Oops: Oops: 0002 [#1] SMP KASAN PTI [ 1827.502810][ T4106] CPU: 0 UID: 0 PID: 4106 Comm: syz.3.3616 Not tainted syzkaller #0 PREEMPT(full) [ 1827.512157][ T4106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1827.522241][ T4106] RIP: 0010:write_comp_data+0x7c/0xa0 [ 1827.527670][ T4106] Code: 00 8b bf 1c 17 00 00 48 8b 30 48 c1 e7 03 4c 8d 1c b5 00 00 00 00 4a 8d 14 dd 28 00 00 00 48 39 d7 72 1b 48 83 c6 01 48 89 30 <4c> 89 44 10 e0 4c 89 4c 10 e8 4c 89 54 10 f0 4a 89 4c d8 20 c3 cc [ 1827.547301][ T4106] RSP: 0018:ffffc90003647e80 EFLAGS: 00050257 [ 1827.553403][ T4106] RAX: ffffc90014029000 RBX: 0000000000000000 RCX: ffffffff82497f85 [ 1827.561397][ T4106] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000400000 [ 1827.569471][ T4106] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000002 [ 1827.577470][ T4106] R10: 0000000000000001 R11: fffffffffffffffc R12: 0000000000000020 [ 1827.585454][ T4106] R13: 0000000000000000 R14: 00007ffffffff000 R15: 0000000000000001 [ 1827.593453][ T4106] FS: 00007fef32fc76c0(0000) GS:ffff888123b53000(0000) knlGS:0000000000000000 [ 1827.602407][ T4106] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1827.609015][ T4106] CR2: ffffc90014028fe8 CR3: 00000000756b4000 CR4: 00000000003526f0 [ 1827.617025][ T4106] Call Trace: [ 1827.620309][ T4106] [ 1827.623238][ T4106] rseq_register+0x115/0x350 [ 1827.627957][ T4106] __x64_sys_rseq+0x1b8/0x2e0 [ 1827.632674][ T4106] do_syscall_64+0x121/0x770 [ 1827.637277][ T4106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1827.645064][ T4106] RIP: 0033:0x7fef3219e159 [ 1827.650474][ T4106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1827.670888][ T4106] RSP: 002b:00007fef32fc7028 EFLAGS: 00000246 ORIG_RAX: 000000000000014e [ 1827.679324][ T4106] RAX: ffffffffffffffda RBX: 00007fef32426450 RCX: 00007fef3219e159 [ 1827.687306][ T4106] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000000000000000 [ 1827.695284][ T4106] RBP: 00007fef3223506b R08: 0000000000000000 R09: 0000000000000000 [ 1827.703256][ T4106] R10: 0000000008000006 R11: 0000000000000246 R12: 0000000000000000 [ 1827.711234][ T4106] R13: 00007fef324264e8 R14: 00007fef32426450 R15: 00007ffc4efa59f8 [ 1827.719234][ T4106] [ 1827.722343][ T4106] Modules linked in: [ 1827.726271][ T4106] CR2: ffffc90014028fe8 [ 1827.730464][ T4106] ---[ end trace 0000000000000000 ]--- [ 1827.735935][ T4106] RIP: 0010:write_comp_data+0x7c/0xa0 [ 1827.735980][ T4106] Code: 00 8b bf 1c 17 00 00 48 8b 30 48 c1 e7 03 4c 8d 1c b5 00 00 00 00 4a 8d 14 dd 28 00 00 00 48 39 d7 72 1b 48 83 c6 01 48 89 30 <4c> 89 44 10 e0 4c 89 4c 10 e8 4c 89 54 10 f0 4a 89 4c d8 20 c3 cc [ 1827.736005][ T4106] RSP: 0018:ffffc90003647e80 EFLAGS: 00050257 [ 1827.736027][ T4106] RAX: ffffc90014029000 RBX: 0000000000000000 RCX: ffffffff82497f85 [ 1827.736046][ T4106] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000400000 [ 1827.736063][ T4106] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000002 [ 1827.736080][ T4106] R10: 0000000000000001 R11: fffffffffffffffc R12: 0000000000000020 [ 1827.736098][ T4106] R13: 0000000000000000 R14: 00007ffffffff000 R15: 0000000000000001 [ 1827.736117][ T4106] FS: 00007fef32fc76c0(0000) GS:ffff888123b53000(0000) knlGS:0000000000000000 [ 1827.736151][ T4106] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1827.736169][ T4106] CR2: ffffc90014028fe8 CR3: 00000000756b4000 CR4: 00000000003526f0 [ 1827.736188][ T4106] Kernel panic - not syncing: Fatal exception [ 1827.838068][ T4106] Kernel Offset: disabled [ 1827.842400][ T4106] Rebooting in 86400 seconds..