last executing test programs: 41.613358817s ago: executing program 3 (id=3699): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) getsockopt$auto(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) capset$auto(0xfffffffffffffffe, 0xfffffffffffffffc) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101000, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) openat$auto_tracing_total_entries_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/buffer_total_size_kb\x00', 0x20000, 0x0) dup$auto(r0) setsockopt$auto(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x4) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x121300, 0x0) r1 = pipe2$auto(0x0, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0xa, 0x0) read$auto_nsim_dev_max_vfs_fops_dev(r1, &(0x7f00000001c0)=""/22, 0x16) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/udp\x00', 0x0, 0x0) pread64$auto(r2, &(0x7f0000000040)='uete1\x00', 0x200000000006, 0x7) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) ioctl$auto_TIOCSTI2(0xffffffffffffffff, 0x5412, &(0x7f0000000140)) ioctl$auto_TIOCSTI2(0xffffffffffffffff, 0x5412, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ram6\x00', 0x10000, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 39.541363495s ago: executing program 3 (id=3703): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) getsockopt$auto(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) capset$auto(0xfffffffffffffffe, 0xfffffffffffffffc) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101000, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) openat$auto_tracing_total_entries_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/buffer_total_size_kb\x00', 0x20000, 0x0) dup$auto(r0) setsockopt$auto(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x4) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x121300, 0x0) r1 = pipe2$auto(0x0, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0xa, 0x0) read$auto_nsim_dev_max_vfs_fops_dev(r1, &(0x7f00000001c0)=""/22, 0x16) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/udp\x00', 0x0, 0x0) pread64$auto(r2, &(0x7f0000000040)='uete1\x00', 0x200000000006, 0x7) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) ioctl$auto_TIOCSTI2(0xffffffffffffffff, 0x5412, &(0x7f0000000140)) ioctl$auto_TIOCSTI2(0xffffffffffffffff, 0x5412, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ram6\x00', 0x10000, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 22.857553935s ago: executing program 2 (id=3724): sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/sched_rt_period_us\x00', 0x101202, 0x0) sendfile$auto(r0, r0, 0x0, 0x8) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)={0x2, 0x80, 0xffff, 0x5, 0x0, 0x4b47, 0x3, 0x80005, @stream_id=0x7, 0x2004b, 0xc, 0x0, [{0xbb, 0x4, 0x800}, {0x0, 0x9, 0x5}, {0x4, 0x58dc, 0x101}]}) pselect6$auto(0x1, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) settimeofday$auto(0x0, &(0x7f0000000400)={0x7fffffff, 0x3}) r1 = setfsgid$auto(0x0) r2 = socket(0x2, 0x1, 0x106) sendmsg$auto_TIPC_NL_NET_GET(r2, &(0x7f0000006140)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000006100)={&(0x7f0000001d40)=ANY=[], 0xce8}, 0x1, 0x0, 0x0, 0x4048010}, 0x40000c0) connect$auto(0x3, 0x0, 0x51) r3 = socket(0x1, 0x3, 0x0) quotactl_fd$auto(r3, 0x80000401, 0xfffffffb, 0x0) keyctl$auto(0x1f, 0x1, 0x6, r1, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_BEARER_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="4d2d107a", @ANYRES16=r4, @ANYBLOB="010627bd700003ccdf2505000000d801018008008e00ac141413f14746788c4d22ead2fe0390f4fc2fbf00d5782a372b375701811332dc1845bd5dd601728d66b3b80e178c6b33d01d30c18ba00d8c2927700c003c00b1bf00000000000086014880c2106508fbaa6914e7a54010d68f5b1e0bfc4cf24532b39481206cf2e9e6d3f0c99ff8eb3e4e42b30d5842a055efeea8aa42f0932eb4d701710627e379403829f4a5741e0a8ecd6327d122392aadfa6fd6df98804cef61acf79c5e0d246bd30b356e0fbe27d736b5126f6e97390cfe48ead2772686de0b8f847e6d3d255504", @ANYRES32, @ANYBLOB="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"], 0x1ec}, 0x1, 0x0, 0x0, 0x40090}, 0x200008d0) getpgid(0xffffffffffffffff) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PHY_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000075ef248368ea498a0ed3d12c0088a0d56671f4dc536279a4bd32bb818b02912aca1f3c04cdc1d57680a706e0b4f5bb063e23909ed4cf9e88b4eda5bceba027cdb3aa993902606d8130d7cf17c7c77c81c3dd228c560b1ec2f23970abf67e59595966f7850fcd64816afbcc9b8f7f2265a6efe17799e20ee497bdf274f04e879de9632dc19c128590ea5c2f1843b88f0a8fd5cc64b38c68b6bc6e6ae51623ea1812f8a29649911831aa4acdada1006b104b68ab9c939b17fc", @ANYRES16=r5, @ANYBLOB="10002bbd7000fcdbdf252d000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004845}, 0x0) 22.154742578s ago: executing program 0 (id=3725): socket(0xa, 0x2, 0x3a) socket(0x11, 0x2, 0x9) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/cifs/smbd_max_send_size\x00', 0x48041, 0x0) socket(0x2b, 0x1, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x742, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mq_timedreceive$auto(r0, &(0x7f0000000400)='\x00\xd4\x1bq\xd2{\x10\xc9St\xe9\x03\xad2\x90\x1d\xde[^\x87\r\xd8$\xcf]$\xec\xe5\xe5\xe5\x82\x90\x9b\x89/\x93\"\nn\x8c\xf3\"`\xe9\xe5V\v\x17\x11\\\xb6\xe9\xe0\x88f#\x8f\x1fD\x19 \xe9\xeb0\xdf\xec\r\xd64*\xb5$l\x05\x90\\\xa1\x9a\x94\xb3\xae\xe6\xb1u\x97\xcdh\xdb^\x99\t\xbf\x87\x89e\xb3\v~a\xd18\xcd\xef\xb77p\xbb\xa7}K\xbe\xd3\x01*\xbe5\x81#\x8c*\xe9\xd0\xeb_V\x11,\xd413\xc8\x94\x8f\x1e#I\n\xa3\xe3n\xe9\xf4\x8fA\x83YL\xc5\x8c\xa8\x11\x99h-l-9\xf90x0, 0x1, 0x80, 0x3, 0x8}, 0x8, 0x1ff, 0x9, 0xfffffffffffffffe, @raw=0x2, @inferred=0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)="5e96d4c4c9f11b902b31b587288ce68456d3372d700a0df0", 0x0}) r2 = setfsgid$auto(r1) msgctl$auto_IPC_STAT(0x5f, 0x2, 0x0) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, 0x0, 0x14) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) r3 = epoll_create$auto(0x8800001) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3, 0x1ff, 0x1001, 0x1, 0x717e, 0x0, 0x7, 0xf6b, 0xd, 0x2, 0x4080001, 0x4, 0x1ffffffffffd, 0x224a, 0xfffffffffffffffe, 0x7, 0x6, 0x7f, 0x7f, 0x1, 0xa, 0x4, 0x200, 0x6, 0x83, 0x3, 0x0, 0x0, 0x0, 0xfffffffc, [0x5a, 0xe, 0x0, 0x401, 0x0, 0x0, 0xfffffffffffffffc, 0xffffffff80000000, 0x0, 0x42, 0x0, 0x4, 0x0, 0x0, 0x8, 0x4, 0x400, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x400001, 0x0, 0x0, 0x0, 0x0, 0x5, 0x14, 0x0, 0x1000000, 0x0, 0x0, 0xfffffffffffffffc, 0x85, 0x1, 0x6, 0x0, 0x0, 0x7, 0x3, 0xffffffffffffffff, 0x3]}, 0x1fe, 0xd) r4 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r4, 0xfffffffffffffd03, 0x0) close_range$auto(r0, r3, 0x1) keyctl$auto(0x1f, 0x1, 0x6, r2, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) (fail_nth: 1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) 21.877675594s ago: executing program 2 (id=3726): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) unshare$auto(0x40000080) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000200)='*)', 0x2) write$auto(r0, 0x0, 0xc65d) unshare$auto(0x40000480) unshare$auto(0x40000080) r1 = pidfd_open$auto(0x1, 0x0) close_range$auto(r1, r0, 0x1) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xcd, 0x0, 0x5b) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x6, 0x2000000000cc, 0x7) r2 = ioctl$auto_TUNSETVNETLE2(r1, 0x400454dc, &(0x7f00000000c0)=0xff) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000040)=""/46, 0x23) mmap$auto(0x200000000, 0x6, 0x12, 0xd92, 0x4, 0x0) keyctl$auto(0x1f, 0x0, 0x6, 0x0, 0x8000000000000000) ioctl$auto_TUNSETNOCSUM(r2, 0x400454c8, &(0x7f0000000240)=0xffff) mmap$auto(0x0, 0x2, 0xdf, 0x9b7e, 0x2, 0xfffffffffffffffe) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x82043, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto(0xffffffffffffffff, 0xc0285629, 0xffffffffffffffff) socket(0x15, 0x5, 0x0) recvmmsg$auto(r2, 0x0, 0x86012, 0x450001, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/netlink\x00', 0x40080, 0x0) pread64$auto(r3, 0x0, 0x566, 0x80000000) listxattrat$auto(r2, &(0x7f0000000000)='./file0\x00', 0x3, &(0x7f0000000080)='/dev/cuse\x00', 0x2) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x80000000) 20.22448854s ago: executing program 0 (id=3727): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6n\xbe\xa6\x01\xc2B#\xb5\xa7\xee$\x8d\xc4\xe9h5\xf7\xb3\xfdld\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4\xdb\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00\x00', 0x100000a3d9) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) getsockopt$auto_SO_PEERPIDFD(0xffffffffffffffff, 0x0, 0x4d, 0x0, 0x0) socket(0xa, 0x3, 0x3a) mmap$auto(0xffffffffffffffff, 0x0, 0x4000000002df, 0xef1, 0x401, 0x8000) pipe2$auto(0x0, 0x80) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x4002, 0x6, 0x4, 0x8, 0xffffffffffffffff, [0x0, 0x0, 0x5], {0x9, 0xfffffff9, 0xfffffffd, 0x29b, 0x100, 0x4, 0x101, 0x4000006, 0x2000}, {0x2, 0x1, 0x52, 0x3, 0x1, 0x6, 0x104, 0x3ff, 0x100000000}}) r1 = setfsgid$auto(0xee01) keyctl$auto(0x1f, 0x1, 0x6, r1, 0x3ff) keyctl$auto(0x27, 0x0, 0x5, 0x0, 0x1000000000000007) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x1e, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x1) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) prctl$auto_PR_GET_TSC(0x19, 0x2, 0x3, 0x1000, 0x0) unshare$auto(0x0) open(0x0, 0x12db40, 0x100) prctl$auto_PR_GET_TSC(0x19, 0x1, 0x5, 0x3, 0x7) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 20.224195421s ago: executing program 3 (id=3703): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) getsockopt$auto(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) capset$auto(0xfffffffffffffffe, 0xfffffffffffffffc) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101000, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) openat$auto_tracing_total_entries_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/buffer_total_size_kb\x00', 0x20000, 0x0) dup$auto(r0) setsockopt$auto(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x4) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x121300, 0x0) r1 = pipe2$auto(0x0, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0xa, 0x0) read$auto_nsim_dev_max_vfs_fops_dev(r1, &(0x7f00000001c0)=""/22, 0x16) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/udp\x00', 0x0, 0x0) pread64$auto(r2, &(0x7f0000000040)='uete1\x00', 0x200000000006, 0x7) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) ioctl$auto_TIOCSTI2(0xffffffffffffffff, 0x5412, &(0x7f0000000140)) ioctl$auto_TIOCSTI2(0xffffffffffffffff, 0x5412, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ram6\x00', 0x10000, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 19.448387391s ago: executing program 2 (id=3728): mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/loop1/queue/discard_max_bytes\x00', 0x808882, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/transparent_hugepage/khugepaged/max_ptes_none\x00', 0x183042, 0x0) read$auto(r1, 0x0, 0x9) write$auto(r0, 0x0, 0xfdef) getsockopt$auto_SO_DOMAIN(r0, 0x2000, 0x27, &(0x7f0000000080)='/dev/ttyq2\x00', &(0x7f0000000140)=0x80) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x23, 0x80805, 0x0) getsockopt$auto(r1, 0x117, 0x9, 0xfffffffffffffffc, 0x0) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyq2\x00', 0x149d03, 0x0) write$auto_console_fops_tty_io(r2, &(0x7f0000000000)="c80d1b29", 0x4) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x0, 0x3, 0x3fda, 0x6, 0x7fffffffb000) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f0000000100)=""/184, 0xb8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x200007, 0x19) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x5d, 0x0) socket(0xa, 0x1, 0x84) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb9, 0xf, 0x7, 0x400004, 0xffffffffffffffff, 0xe7b, "00000000000000e3ffffffffffffff00", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r5, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) 18.85681091s ago: executing program 0 (id=3729): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) unshare$auto(0x40000080) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000200)='*)', 0x2) write$auto(r0, 0x0, 0xc65d) unshare$auto(0x40000480) unshare$auto(0x40000080) r1 = pidfd_open$auto(0x1, 0x0) close_range$auto(r1, r0, 0x1) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xcd, 0x0, 0x5b) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x6, 0x2000000000cc, 0x7) r2 = ioctl$auto_TUNSETVNETLE2(r1, 0x400454dc, &(0x7f00000000c0)=0xff) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000040)=""/46, 0x23) mmap$auto(0x200000000, 0x6, 0x12, 0xd92, 0x4, 0x0) keyctl$auto(0x1f, 0x0, 0x6, 0x0, 0x8000000000000000) ioctl$auto_TUNSETNOCSUM(r2, 0x400454c8, &(0x7f0000000240)=0xffff) mmap$auto(0x0, 0x2, 0xdf, 0x9b7e, 0x2, 0xfffffffffffffffe) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x82043, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto(0xffffffffffffffff, 0xc0285629, 0xffffffffffffffff) socket(0x15, 0x5, 0x0) recvmmsg$auto(r2, 0x0, 0x86012, 0x450001, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/netlink\x00', 0x40080, 0x0) pread64$auto(r3, 0x0, 0x566, 0x80000000) listxattrat$auto(r2, &(0x7f0000000000)='./file0\x00', 0x3, &(0x7f0000000080)='/dev/cuse\x00', 0x2) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x80000000) 18.585129168s ago: executing program 3 (id=3730): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x22) socket(0x1, 0x2, 0x0) getpeername$auto(0x3, 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev6\x00', 0x103281, 0x0) close_range$auto(r0, 0x8, 0x0) r1 = socket(0x1d, 0x2, 0x2) r2 = setfsgid$auto(0xee01) set_mempolicy$auto(0x8004, 0x0, 0x80000000000003) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0xb) r3 = syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000080), r1) sendmsg$auto_NCSI_CMD_CLEAR_INTERFACE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@NCSI_ATTR_PACKAGE_MASK={0x8, 0x7, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) keyctl$auto(0x1f, 0x1, 0x6, r2, 0x3ff) close_range$auto(0x0, 0xfffff004, 0x2) socket(0x1d, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x2, 0x9) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r7 = bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r6, r5, 0x8, 0x7f, 0xffffffffffffffff, @relative_fd, 0x4}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r7, 0x20, 0x1}, 0x4) keyctl$auto(0x4000001f, 0x1, 0x6, 0x3, 0x3ff) 16.76578453s ago: executing program 0 (id=3731): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) unshare$auto(0x40000080) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000200)='*)', 0x2) write$auto(r0, 0x0, 0xc65d) unshare$auto(0x40000480) unshare$auto(0x40000080) r1 = pidfd_open$auto(0x1, 0x0) close_range$auto(r1, r0, 0x1) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xcd, 0x0, 0x5b) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x6, 0x2000000000cc, 0x7) r2 = ioctl$auto_TUNSETVNETLE2(r1, 0x400454dc, &(0x7f00000000c0)=0xff) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000040)=""/46, 0x23) mmap$auto(0x200000000, 0x6, 0x12, 0xd92, 0x4, 0x0) keyctl$auto(0x1f, 0x0, 0x0, 0x0, 0x8000000000000000) ioctl$auto_TUNSETNOCSUM(r2, 0x400454c8, &(0x7f0000000240)=0xffff) mmap$auto(0x0, 0x2, 0xdf, 0x9b7e, 0x2, 0xfffffffffffffffe) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x82043, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto(0xffffffffffffffff, 0xc0285629, 0xffffffffffffffff) socket(0x15, 0x5, 0x0) recvmmsg$auto(r2, 0x0, 0x86012, 0x450001, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/tcp\x00', 0x40080, 0x0) mmap$auto(0x0, 0x400008, 0x1000dd, 0x9b72, 0xffffffffffffffff, 0x8000) socket(0x1e, 0x1, 0x0) listen$auto(0x3, 0x81) accept$auto(0x3, 0x0, 0x0) 7.181141286s ago: executing program 1 (id=3733): openat$auto_transaction_log_fops_(0xffffffffffffff9c, &(0x7f00000031c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x100, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)={0x2, 0x80, 0xffff, 0x5, &(0x7f0000000240)='#', 0x4b47, 0x3, 0x80005, @stream_id=0x7, 0x2004b, 0xc, 0x0, [{0xbb, 0x4, 0x800}, {0x1, 0x58dc, 0x101}]}) (async, rerun: 32) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) unshare$auto(0x40000080) (async, rerun: 32) unshare$auto(0x40000080) (async, rerun: 32) unshare$auto(0x6) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x181800, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) (async) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) (async) settimeofday$auto(&(0x7f0000000540)={0x5e, 0x1}, &(0x7f0000000580)={0x1, 0xdb36}) (async) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), 0xffffffffffffffff) set_mempolicy$auto(0x8043, &(0x7f0000000280)=0x7b, 0x4) (async) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, 0x0, 0x14) (async) mseal$auto(0x0, 0x7dda, 0x0) (async) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x48000, 0x0) epoll_create$auto(0x8800001) socket(0x3, 0x1, 0x5) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/batman_adv/parameters/routing_algo\x00', 0x8182, 0x0) write$auto(r0, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00\x12\xfa\b\x1c\xc7kC\xec\xd7\x88TO\xd6\x8e\x83\xa9\v\xf2\xc8Y\x1c\xd9}\xf9S\x8e\xdf\'O\xc5\xa2tH\x83m\xce<\x85\x9e\xe4\xfe\x88\xb6\xb0\xa0\xb2;\xae\xf2\x02\x00\xb08\xbe\xf0\x1ct\xa4\xe8<\xbb\x83\xebw6\xf6\xd3\t\xcb\xd6\xd7\xa5\bU\f\xb6v\x99r\x87\xafZ\xdfrY\xde\xb1\xd0\vT`\x92\nE>\xf6q1\xf2\\\n\x94\x86\\@(\x83\r2\x95\xc5[\x8b\x018\x19\xe3 \x034\xf1ux\xa8\x1a\x87o\xe4\x98\xc8\x85\xae\xce\xc8.\xcf:\xd8\x92}\xfd67\x93|\xdc\x06\x1cE\xb1+\xc0}\x8e{Si xV5\xfc1\f\x02\xc61\x8cY\x95~\xc5A~\xf5\xcc\x82\xc9\xbb\xe8\x1a\xab\x86\x1a\xaf\xd4\x02\x7f\xdb-\xac\xe6\xfdC\x98N7\x90\x94\xfc\xf7\x8eB\x83\x95\x00+\x94C\x1a\x9d\x80`\xb8zB(\xb7\xd3^^\x9d\xe6}\x89\xfc\xd6\x95$\xcb\xdd\xacC\xe13,\x1b\nu\xf5\xd2\xa8_\xd1m\b\xc3\xfc\xd3\x0f\xe5\xf2\xe5\xb1i\xdbP?\x1e\x04&\x12\xa7[\xddy\xf5\x80p\xd3\x01\xa1\xdf\xde\xc4\x90\xb0\xe3\x94\xd0', 0x1) inotify_init1$auto(0x3000000000000) (async) openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x8080, 0x0) (async, rerun: 64) keyctl$auto(0x910, 0x1, 0x0, 0x0, 0x3ff) (rerun: 64) ioctl$auto(0x4000000000000c8, 0x400454cc, 0x6f) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/mm/transparent_hugepage/khugepaged/alloc_sleep_millisecs\x00', 0x20681, 0x0) (async) r2 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/wchan\x00', 0x800, 0x0) read$auto_proc_single_file_operations_base(r2, &(0x7f00000001c0)=""/169, 0xa9) (async) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000000c0)='5', 0x1) 5.631627996s ago: executing program 1 (id=3734): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x101000, 0x0) unshare$auto(0x40000080) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000200)='*)', 0x2) write$auto(r0, 0x0, 0xc65d) unshare$auto(0x40000480) unshare$auto(0x40000080) r1 = pidfd_open$auto(0x1, 0x0) close_range$auto(r1, r0, 0x1) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xcd, 0x0, 0x5b) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/saved_cmdlines\x00', 0x20ac2, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x6, 0x2000000000cc, 0x7) r2 = ioctl$auto_TUNSETVNETLE2(r1, 0x400454dc, &(0x7f00000000c0)=0xff) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000040)=""/46, 0x23) mmap$auto(0x200000000, 0x806, 0x12, 0xd92, 0x4, 0x0) keyctl$auto(0x1f, 0x0, 0x6, 0x0, 0x8000000000000000) mmap$auto(0x0, 0x2, 0xdf, 0x9b7e, 0x2, 0xfffffffffffffffe) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x82043, 0x0) close_range$auto(0x2, 0x8, 0xffffffff) ioctl$auto(0xffffffffffffffff, 0xc0285629, 0xffffffffffffffff) socket(0x15, 0x5, 0x0) recvmmsg$auto(r2, 0x0, 0x86012, 0x450001, 0x0) sigaltstack$auto(&(0x7f0000000180)={0x0, 0x80000001, 0xffffffffffffffff}, 0x0) mmap$auto(0x0, 0x2020006, 0x7fffffff, 0xeb1, r2, 0x1008000) r3 = getpid() r4 = gettid() rt_tgsigqueueinfo$auto(r3, r4, 0x21, 0x0) 4.604960436s ago: executing program 1 (id=3735): ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) capset$auto(0x0, 0x0) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, 0x0, 0x6a) connect$auto(0x3, 0x0, 0x51) shutdown$auto(0x200000003, 0x0) statmount$auto(&(0x7f0000000040)={0x1f, @raw, 0x80000027, 0xf5ff, 0x8}, 0x0, 0x5, 0xffffffff) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x80000000007, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) settimeofday$auto(0x0, 0x0) mseal$auto(0x0, 0x7dda, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x48000, 0x0) sendmsg$auto_NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x20000090) unshare$auto(0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x2c, 0x0, 0x13, 0x70bd2c, 0x25dfdbdd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r1}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x1}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'ip_vti0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000003440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003400)={&(0x7f0000000440)={0x17b0, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x4}, @ETHTOOL_A_DEBUG_MSGMASK={0x4}, @ETHTOOL_A_DEBUG_MSGMASK={0x12af, 0x2, 0x0, 0x1, [@nested={0x10e3, 0x37, 0x0, 0x1, [@nested={0x4, 0xc9}, @typed={0xc, 0x50, 0x0, 0x0, @u64=0x5}, @typed={0x14, 0xd9, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @generic="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", @typed={0x14, 0xb1, 0x0, 0x0, @ipv6=@private1}, @typed={0xc, 0x81, 0x0, 0x0, @u64=0x2}, @generic="d7ea9bb18747f5fd18b6de02a9471ea4aeea195e89937e76718023959c8278740f67bee360bd2ad0ea96c3a344866c3416851ed3e7c9790f1096216b4ff53f1a88e80341a5f423906c91f0cf493cf35c51a665d5e35941a88f65e1f217b2ee59d0fbd23a1c62ec085a0fc22c1565422a53f707e6490a9c9d7a866c6bb0aa3c45b5f8d474bdb25620744737298d4e22a912e45f0a807f56b8b43821efbe4622"]}, @nested={0x8, 0x11f, 0x0, 0x1, [@nested={0x4, 0xdf}]}, @typed={0x8, 0x13e, 0x0, 0x0, @pid}, @nested={0xf7, 0x65, 0x0, 0x1, [@generic="70630d9dff0d446f2e5ef00bd929f3cc62e9257a7af32dda0130e0c29ad053e0503be1c6206ef404f248b582c205ce4f314aa3e9d03fef25577502ed40bb87778add7420f3b167a731f8546e9d18994e0e10078008aa55ace99f1f06c8cef9dc4f0174e6fcc58beb67c21edb375dba7ab47da788c12cda87af26d29c943fe138208d676543db3ce08d9345ff693f7b8b2b486a6a91be2dd6757b170a1617b94f448cdc7ef71e53c1c05ef4fde6d2e6929874a9a2330f0975c9095d0a7535b61b3bef9c48bf9c0ded04f135de1f705586bdf7e9e05b9baed0017cbfc4f77a89f097cbb4a166ef217879251aa927d80980b510f0"]}, @generic="c974b7d8ecd5635d808fe6b78d2e41299b31b4342e268163928e363b77512ea3b89c30e31c516a349fdc427eef02bea744911623d50fdd8fe3d8e7e8da8ec2c6763d33c54351bc48f5064a10c8ce6279fea38f88eaeea5ff708cd84634b2ee59d0d03e0a4f9fe0440c29bd5e0a549dcb8d4d0a1f27588c5ac573f50992610e64dcd1859a1abd78a484683d4b657160f4e33c57bb6826abb1309dfe86ae2b311fa71b2e02abe570aebbb4fc5a61086ac9d1cdbd70ecfa1391ec1b415fe93605"]}, @ETHTOOL_A_DEBUG_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x401}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7fffffff}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x3e7, 0x2, 0x0, 0x1, [@generic="1db010d030d03e4c6af278ef51f09e8f52d88a4e117cbf062bd4b34bc3f933655468ddc929e68cdecaaa1f0eb0dd5f080d0d8be68aa4e04c4adca967fd1b", @nested={0x4, 0xff}, @typed={0x8, 0x130, 0x0, 0x0, @u32=0x7ff}, @generic="e8b755ac36e2b6d0895cdf96074f22ff33b6ac9b052f81c1f5639738880611bb3e0d66a88896de97760fe3426f4ad8035810213b33e9551d693849d2b26ade8add5230d276a38edc2c797fb5d72834033405d652a7e8dfb5513aa8211ad99f2e68efa0af1a57d94d1f5aad3ff9b5a33801d2790826c80ff097bc46626faee1aef6f9cbfaf2a42add950b373794fe6a909c39a9e77c239a329b51a6be4392923b7c8f956e", @nested={0x222, 0xe3, 0x0, 0x1, [@nested={0x4, 0x84}, @generic="f35e49c2cc8ca0a06fe9bf98ef6d641106321981386a68dd33f3416714d1695e23b3de3288fbb9624e335f44dc450ddce94607b0bb80e7aff185e99a81f134215af3eadfa5c2e1ffacbd00c7", @nested={0x4, 0xb5}, @typed={0x8, 0xba, 0x0, 0x0, @uid}, @generic="81dfd490c771b73bba48d42754cd7a12553dee0f80b4862ef3cc85b51401a04bac2e923d04fb015facfa41420787e639b446f4513faa57ac16a6b6c47dde1a94b6f08e1a3ec1d5a410551ac62e97f234d7ae22345f5877d363164984c02cd48bb6403abd88035705c256b67441f9591d42c44439e559cacaa7bca5cd061c19c46447408204553a6614e6e67300d1cc90a60f3245a77b4e9a30046440ec0e8a15a2b7e8fc5a17e2417c57bd12cc897dcb10f9ab4d653d9b6a5dcc2756392320", @typed={0x8, 0x50, 0x0, 0x0, @uid}, @generic="a3a3abd4585718f84cfeb119850ad5e0acadda3fb2cf614844f6bc113c1e399da5892b322be7e7a3987e67398143727d1a6d4325e79268bd07cf844a5e3204633d154618e6c154dd2cf5af168a42c462279d66e445062ed62edb3f7a141e32ec1f53daadcc54ee81013c8972b6186e5a6572669cad63fd27ec8cfb42ade9593030660081a66052fec3965dc474e8cc1cdc7c1106fe67f04203bf67c733cfd02b61a62bc3c0b01b61482a6f6d5ae54a4b3219e8bbf3af0317c9e9a56405b629429d44a7ca26ec198c820937f8834226870f8f1f048e27171f1e9785ce05061c5c9ff3274f584003197d45feb3c0eb3136ffbf8c9f7f261b", @nested={0x4, 0xc}]}, @generic="f1e1976e0fa0c59c0df6f206cc23eed36cc08d59bd123d8c42e981a8e24eea3d7664e6f100269835a23bdaf6cd9b5b35834e59c24d276796f51d38374f88416a18a194b4a99ec55842e441504906026c4648033fcee941bba459d3af55c21e8184d9514c0a3b253aba07b2b02d7c21103765bbc3f8fff1486cf0c0bb97b862cdab0edb173eb0cbcc6c204856ceb51f79d6ec9ab2846881a30b70dd8bb47bf2e24f6c965970d4cb2cc053250403b8a34881", @nested={0x18, 0x168, 0x0, 0x1, [@typed={0x8, 0x6c, 0x0, 0x0, @uid}, @typed={0x8, 0x128, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x128}]}, @typed={0x8, 0x11e, 0x0, 0x0, @fd}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x4}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x80000000}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x17b0}, 0x1, 0x0, 0x0, 0x4004000}, 0x8040) ioctl$auto(0x3, 0x400442c8, 0x91) close_range$auto(0x2, 0x8, 0x0) bpf$auto(0x0, &(0x7f0000000200)=@bpf_attr_4={0x1e, 0xffffffffffffffff, 0x5}, 0xd) bpf$auto(0x2, 0x0, 0x5) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 4.080695539s ago: executing program 2 (id=3728): mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/loop1/queue/discard_max_bytes\x00', 0x808882, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/transparent_hugepage/khugepaged/max_ptes_none\x00', 0x183042, 0x0) read$auto(r1, 0x0, 0x9) write$auto(r0, 0x0, 0xfdef) getsockopt$auto_SO_DOMAIN(r0, 0x2000, 0x27, &(0x7f0000000080)='/dev/ttyq2\x00', &(0x7f0000000140)=0x80) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x23, 0x80805, 0x0) getsockopt$auto(r1, 0x117, 0x9, 0xfffffffffffffffc, 0x0) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyq2\x00', 0x149d03, 0x0) write$auto_console_fops_tty_io(r2, &(0x7f0000000000)="c80d1b29", 0x4) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x0, 0x3, 0x3fda, 0x6, 0x7fffffffb000) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f0000000100)=""/184, 0xb8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x200007, 0x19) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x5d, 0x0) socket(0xa, 0x1, 0x84) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb9, 0xf, 0x7, 0x400004, 0xffffffffffffffff, 0xe7b, "00000000000000e3ffffffffffffff00", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r5, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) 3.670347357s ago: executing program 1 (id=3736): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0xa52) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) r2 = getsockopt$auto(0x4, 0x6, 0x1b, 0xfffffffffffffffc, 0x0) r3 = open(&(0x7f0000000140)='./file0\x00', 0x123040, 0x1d4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) close$auto(0xffffffffffffffff) io_uring_register$auto(0xffffffffffffffff, 0x8, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x2) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000340), 0xffffffffffffffff) getpgid$auto(0x0) sendmsg$auto_NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001a00)={&(0x7f0000002480)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00042abd7000fddbdf255c000000c0032c80daabc52676b5c58c0b8fbf81e45ee63f6eedf236fdfa667f9397d942f0f71c167c0a53e1e7501190f4fdfedf0e7fc264f49c01828008005900", @ANYRES32, @ANYBLOB="04001680dd00550090254d54755cc4fb3011b3828fcd3885d879f83e2d5b507d43613e1ac70e94ab847a5303736ad701de35ed05d6a27ec85a6e5e2db66e23675085a20bb06cd2d1cd7379460b3c1650dfdb9b67f2d70f6a815565a1440d77f273ea5294b38cd99c5ad6ef8675efaee7b030a471065cf02a057ae8ca01f12814a62ec6bb7bcbc1cbdc1c601b61cf9b7a313de85c3cf96394cc60acc9086c70ff9fc86a8f60ac071361c625a16f090507a2f883a4ff12af9278c1164314ecd551b860cbb24219bbac4124151630a2f9eb79617d9d690c309b6a8ef1d4f076aede9400000004006b0008001d00", @ANYRES32, @ANYBLOB="91002300d73b3a3a6a94dd7ec8003aafcd35d89c02f1d334f5042fa52ff71cdce2071240c205b5177a5df2e600534ad6df4e87bf87f800756c17e339c0c315de458db08ed57662c140c6f8177d7bc41aed178bacae2e505ef1ba35180fd172bb89d5630b369834080403d503b56eb2fcc480449720e41545e80dddb790188448d7a9779b5806cb3fd243bd5d01d91a1e0d00000008004100", @ANYRESDEC=r1, @ANYBLOB="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", @ANYRESHEX=r2, @ANYBLOB="0800e7000a0000006f6343d1889803782e48a006346db4e558377b4951addcb5b9ddc3f3c67cedb7fb101b98d3b589a4fde8f0168ea38523008a536efc97e42d07571a5ef6ea364e58b4c3ba2a5d98f29dacbdd16dfe9018bb20a4b9be2250704974903b24a85bcecf1570aaa6a84b65407c5d2368ffa8ea6740d90d570f98ae3161bd3777a246d5f5dac7d7eb3024700000002a112d800800ac00", @ANYRES32, @ANYBLOB="7b6e71a761b1093d55c61d8082b03d6d7cf4197156dd8a39f6bea5886ed720a16c4358cf85287b0712062165938be6f0b5df5719a3f953667f3fd4c6c03b3d5d5c9ade95ae143847b7a1d808dae20f2fee73fbcefcd28f74c9364d05beeacb5c2a14b415e0fe7492dba419b8f89ed2ba45096f33aa685850539352c36f229dff148441e4b1ab57f26faca612e22fa7c5d51ff654f55dec0973ac2db2c180068ebdeabb9edeecd2581e439186421c1666236ea616df316352813acc1d3eb7c291b6c7c110d0f79b0832082406a0b650106e801400cc00fc01000000000000000000000000000104000f80040063800400448008002f00", @ANYRES32=0x0, @ANYBLOB="080092000900000008000000640101010800bb00", @ANYRES32, @ANYBLOB="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"], 0x1698}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000011) sendmsg$auto_NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="10010000", @ANYRES16=r4, @ANYBLOB="000728bd7000fbdbdf255e0000000800db00", @ANYRES32=r3, @ANYBLOB="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"], 0x110}, 0x1, 0x0, 0x0, 0x4000000}, 0x85) syz_clone(0x80000980, 0x0, 0xfffffe7a, 0x0, 0x0, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) open(0x0, 0x0, 0x408) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_tcp_metrics(0x0, r5) sendmsg$auto_TCP_METRICS_CMD_DEL(r5, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb1\x00', 0x4000, 0x0) bpf$auto(0xfffffffd, 0x0, 0x6f4) readv$auto(0x3, &(0x7f0000000000)={0x0, 0x10000ffff}, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) lsm_get_self_attr$auto(0x68, 0x0, &(0x7f0000002440)=0x8, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) 2.991551524s ago: executing program 2 (id=3737): ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)={0x2, 0x80, 0xffff, 0x5, &(0x7f0000000240)='#', 0x4b47, 0x3, 0x80005, @stream_id=0x7, 0x2004b, 0xc, 0x0, [{0x4, 0x58dc, 0x101}]}) pselect6$auto(0x7, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) r0 = signalfd4$auto(0xffffffffffffffff, &(0x7f0000000000), 0x512, 0x7) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, r0, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) shmctl$auto_IPC_RMID(0x6, 0x0, 0x0) shmctl$auto_IPC_STAT(0xc552, 0x2, &(0x7f0000000500)={{0x1ff, 0xee01, 0x0, 0x0, 0x161e, 0x1, 0xde}, 0x59fa, 0x2, 0xd8, 0x7fffffff, @raw=0x9, @raw=0x2, 0xe, 0x0, &(0x7f00000001c0)="6c0aaf98bea39b0bb00ac3f643dd0a511084842341b38cfcd0dc71d3304543e64c89f4cf24163664dacbc70f073106097db38b5f4efdd987fd7e052f182f1205cd1e1e9701938a6183ef9234c464dbb0611b8abe9629d21a833c", &(0x7f00000002c0)="0b4d4c144725a69ac49c17a70a7a2c50e1a322351dc99e9a70b58f48ea5bd6115e1e4afcfff1be1b008262664b2214e14e317a653ce418bc0acf92172bf6cdc9d2b703d29e5ee59f7b9be873f368433ff2120c0244fa6b73483d982ae25c425d12b51d4b45e74a1cd11e52f3ec7da55736f37c92a6258621b88a42c66dd979feabdae0118b1e1a0c54"}) r2 = setfsgid$auto(r1) socket(0x25, 0x5, 0xdf2) r3 = socket(0x2, 0x1, 0x106) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) write$auto(r4, &(0x7f0000000100)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b1\xc7k', 0x4) memfd_secret$auto(0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptyr1\x00', 0x101e81, 0x0) ioctl$auto_SNDCTL_TMR_CONTINUE(r5, 0x40045431, &(0x7f0000000400)="c2f17e12547e") bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(r3, &(0x7f0000000080)=@phonet={0x23, 0x1, 0x2, 0x5}, 0x961) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) futex$auto(&(0x7f0000000100)=0x2, 0x85, 0x2, 0x0, 0x0, 0x9) shutdown$auto(0x200000003, 0x0) sendmsg$auto_OVS_VPORT_CMD_GET(r3, 0x0, 0x2000c000) epoll_ctl$auto(0xffffffffffffffff, 0x1, 0x8000000000000000, 0x0) unshare$auto(0x6) newfstatat$auto(0xffffffffffffff9c, 0x0, &(0x7f0000000380)={0xfffffffffffffffc, 0xfff, 0x8000000000000000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0xfffffffffffffff4, 0x1, 0x9a45, 0x1, 0xff, 0x68e1, 0xcf, 0x9, 0x79}, 0x2) ioctl$auto_XFS_IOC_SWAPEXT(0xffffffffffffffff, 0xc0c0586d, &(0x7f0000000440)={0xb, @raw=0x5, @inferred=r3, 0xc0, 0x9, '\x00', {0x8, 0x9, 0x7, r6, 0x0, 0x6, 0x8, 0x0, {0xecd5, 0x200}, {0x9, 0x547}, {0x3, 0xa}, 0x8000000000000001, 0x10, 0x2, 0x2, 0xf, 0x5, 0x8, 0x401, 0xb, 0x3, '\x00', 0x5, 0x4, 0x2}}) keyctl$auto(0x1f, 0x1, 0x6, r2, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 2.496745787s ago: executing program 0 (id=3731): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) unshare$auto(0x40000080) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000200)='*)', 0x2) write$auto(r0, 0x0, 0xc65d) unshare$auto(0x40000480) unshare$auto(0x40000080) r1 = pidfd_open$auto(0x1, 0x0) close_range$auto(r1, r0, 0x1) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xcd, 0x0, 0x5b) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x6, 0x2000000000cc, 0x7) r2 = ioctl$auto_TUNSETVNETLE2(r1, 0x400454dc, &(0x7f00000000c0)=0xff) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000040)=""/46, 0x23) mmap$auto(0x200000000, 0x6, 0x12, 0xd92, 0x4, 0x0) keyctl$auto(0x1f, 0x0, 0x0, 0x0, 0x8000000000000000) ioctl$auto_TUNSETNOCSUM(r2, 0x400454c8, &(0x7f0000000240)=0xffff) mmap$auto(0x0, 0x2, 0xdf, 0x9b7e, 0x2, 0xfffffffffffffffe) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x82043, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto(0xffffffffffffffff, 0xc0285629, 0xffffffffffffffff) socket(0x15, 0x5, 0x0) recvmmsg$auto(r2, 0x0, 0x86012, 0x450001, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/tcp\x00', 0x40080, 0x0) mmap$auto(0x0, 0x400008, 0x1000dd, 0x9b72, 0xffffffffffffffff, 0x8000) socket(0x1e, 0x1, 0x0) listen$auto(0x3, 0x81) accept$auto(0x3, 0x0, 0x0) 1.959475752s ago: executing program 1 (id=3738): unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x1, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) getsockopt$auto_SO_PEERPIDFD(0xffffffffffffffff, 0x0, 0x4d, 0x0, 0x0) socket(0xa, 0x3, 0x3a) mmap$auto(0xffffffffffffffff, 0x0, 0x4000000002df, 0xef1, 0x401, 0x8000) pipe2$auto(0x0, 0x80) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x4002, 0x6, 0x4, 0x8, 0xffffffffffffffff, [0x0, 0x0, 0x5], {0x9, 0xfffffff9, 0xfffffffd, 0x29b, 0x100, 0x4, 0x101, 0x4000006, 0x2000}, {0x2, 0x1, 0x52, 0x3, 0x1, 0x6, 0x104, 0x3ff, 0x100000000}}) r0 = setfsgid$auto(0xee01) keyctl$auto(0x1f, 0x1, 0x6, r0, 0x3ff) keyctl$auto(0x27, 0x0, 0x5, 0x0, 0x1000000000000007) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x1e, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x1) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) prctl$auto_PR_GET_TSC(0x19, 0x2, 0x3, 0x1000, 0x0) unshare$auto(0x0) open(0x0, 0x12db40, 0x100) prctl$auto_PR_GET_TSC(0x19, 0x1, 0x5, 0x3, 0x7) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 1.535537093s ago: executing program 3 (id=3730): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x22) socket(0x1, 0x2, 0x0) getpeername$auto(0x3, 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev6\x00', 0x103281, 0x0) close_range$auto(r0, 0x8, 0x0) r1 = socket(0x1d, 0x2, 0x2) r2 = setfsgid$auto(0xee01) set_mempolicy$auto(0x8004, 0x0, 0x80000000000003) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0xb) r3 = syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000080), r1) sendmsg$auto_NCSI_CMD_CLEAR_INTERFACE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@NCSI_ATTR_PACKAGE_MASK={0x8, 0x7, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) keyctl$auto(0x1f, 0x1, 0x6, r2, 0x3ff) close_range$auto(0x0, 0xfffff004, 0x2) socket(0x1d, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x2, 0x9) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r7 = bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r6, r5, 0x8, 0x7f, 0xffffffffffffffff, @relative_fd, 0x4}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r7, 0x20, 0x1}, 0x4) keyctl$auto(0x4000001f, 0x1, 0x6, 0x3, 0x3ff) 1.179789099s ago: executing program 2 (id=3739): mmap$auto(0x0, 0x2020008, 0xb, 0x8000000000013, 0xfffffffffffffffa, 0x8000) r0 = eventfd$auto(0x0) readv$auto(r0, &(0x7f0000000380)={0x0, 0xfffffdef}, 0x100) socket(0x28, 0x5, 0xb) mmap$auto(0xffffffffffffffff, 0x2020009, 0x3, 0x15, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) quotactl$auto(0x8, &(0x7f0000000540)='/dev/ra\a\x96L\xad\xc8\x16\xb5\xdbW\n\xce\x93\xbex m7\x00\n\xa5\xba\xf8\x86?b\xce\x9fI\x96t\xe2\xd9u7&\xae\xc4\xe2\xa9b\x84\xc5\xd5\x8a( \xfd`z\x93n\xb3\x1f`\f\x82\"%1\x86\xe0[\x80\x971\x15\\\xed\xaa\xd53E7\x9e\xe3\xd4\xb5\xea\x99\xe2>\x18\xae\x88\xb4\xc8\xc7A,\x15\xce\x046i\xd4g\xedh\x90\x04R#\xc91,Y\v2\x15\xae\x04\x10\xef\xb3\x1b\xb5?\xb32\xd5>8\x19\xe0]\xa6\'\xae\xaa\xa3?\xc9}\xb3\x99\x8c`?Dg\v\xb4`\xae\xdf]z\xfe\xc2\xa6r@\xb4\xfc4M\xdd;\xee\xc9\x00\xd9\x06\x9c\xd04\t\x04\xb3FCO\xda.\xdf\x8f\v\x14\xd0\xdbyH3T\v\xd6#\xb0\x13\x85\xc8}\x94#uG\x01RP\xee\x01\x18\xca\x84\xa0y\x10\x95\xc6\x90/\xe0\x04\xaf\"\x01FH\x1f\'Q\x11\xa1\xd3\xe5\xd70\xfdw<\xc2rz\bm\xe5\x03\x90\r\xb0t\x06\xe1\xc0w\x02\xd8M/\x83\xc5\x99\x03\x95\xba\x99v\xb6\a\x01]\xf9t\xc1\'\x11\x89\xa4m?t\xd4\v \x98\xec\x9es\xfd\x1b\"<\x99\xa5f\xc47\xaa\xfeAz\x85\xdb\xd3\xbc_\x97z\x0f\x90l\xac\x17CF,s\x834\xe9h\xe0\xe7/\xf2Ez\xa3V\x90\t9\xec\xf8u\x17B\x96\xa7\xe7\x1f\xf0|\x1a:i^\xba\x93\xa4\xf2\x0f[\x97\xe5A%\xd9r\xe1\xf3\xf2\xa9\xa6', 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/loop14/queue/atomic_write_max_bytes\x00', 0x103861, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3dd) unshare$auto(0x40000080) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/neigh/wg1/retrans_time\x00', 0x82, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x7071) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) pwrite64$auto(r1, 0x0, 0x0, 0x8) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone(0x3001000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000040), 0x101200, 0x0) poll$auto(0x0, 0x2, 0x9) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0xe) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x80000000) (fail_nth: 1) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000200)='/dev/adsp1\x00', 0x20b42, 0x0) mmap$auto(0xfffffffffffffffc, 0x20009, 0x4000000000df, 0x8000000000000011, 0x401, 0x8000) name_to_handle_at$auto(r0, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', &(0x7f00000006c0)={0x1000, 0xa0, "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"}, &(0x7f0000001700)="5b5ce995ba2adf5acf5c7e5ac5a4531b46f1e8018ff401d7779e399bec2372cb572a227965b7abf310d1f1dfbe2bea02bc", 0xc49) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, 0x0, 0x180, 0x0) ioctl$auto_OSS_ALSAEMULVER(r2, 0x40086602, &(0x7f0000000180)="f9b614d22aa4a460cfb56a95fe2004332cbcbb0ce134b2747fcbdf6ebd276a04e2fd612f6669e487ab52b2a827737588c833b38a8a8ab7a7147d9ebdf91b73fc35fdcc8548bd41b43e43f35716724de2624e51d44c499d4ff7c6e7535c376eaad9bbfef22d356a2115e4c9617145b4ffe47ce6") 855.872186ms ago: executing program 0 (id=3740): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) unshare$auto(0x40000080) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000200)='*)', 0x2) write$auto(0xffffffffffffffff, 0x0, 0xc65a) unshare$auto(0x40000480) unshare$auto(0x40000080) shmctl$auto_IPC_RMID(0x8, 0x0, &(0x7f0000000400)={{0x8, 0x0, 0x0, 0x800, 0x3, 0x1, 0x3}, 0x3, 0x8, 0x4, 0x4, @raw=0xc6, @inferred, 0x3b6b, 0x0, &(0x7f0000000340)="18786f6d161dad8e64e3d15c3e71e0d31f8b45bb650196", &(0x7f0000000380)="db7e16ab5c108e0c73a8e1ab7ccc26b65107c9710a64960cd24d6bc860a27760ec7ca2133b189db769e195b3682de26d3bff5629a5778cd9d787932fccddbb960f101ad64cae"}) r1 = pidfd_open$auto(0x1, 0x0) close_range$auto(r1, r0, 0x1) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xcd, 0x0, 0x5b) mmap$auto(0xfffffffffffffffe, 0x6, 0x7, 0x14, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x6, 0x2000000000cc, 0x7) r2 = ioctl$auto_TUNSETVNETLE2(r1, 0x400454dc, &(0x7f00000000c0)=0xff) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000040)=""/46, 0x23) mmap$auto(0x200000000, 0x6, 0x12, 0x17, 0x4, 0x207fff) keyctl$auto(0x1f, 0x0, 0x6, 0x0, 0x8000000000000000) ioctl$auto_TUNSETNOCSUM(r2, 0x400454c8, &(0x7f0000000240)=0xffff) mmap$auto(0xfffffffffffffffb, 0x2, 0xe0, 0x40000009b7e, 0x2, 0xc0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x442240, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto(0xffffffffffffffff, 0xc0285629, 0xffffffffffffffff) socket(0x1d, 0x5, 0x9) recvmmsg$auto(r2, 0x0, 0x86012, 0x450001, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/netlink\x00', 0x40080, 0x0) pread64$auto(r3, 0x0, 0x566, 0x80000000) listxattrat$auto(r2, &(0x7f0000000000)='./file0\x00', 0x3, &(0x7f0000000080)='/dev/cuse\x00', 0x2) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0xc0000000) 165.462698ms ago: executing program 1 (id=3741): r0 = openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/bluetooth/hci7/hci7:201\x00', 0xa2300, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x705d00, 0x0) ioctl$auto_XFS_IOC_READLINK_BY_HANDLE(r0, 0xc038586c, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101000, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) setsockopt$auto(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x2c, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x84100, 0x0) openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) fcntl$auto_F_GETOWNER_UIDS(r3, 0x11, 0x8000000000000000) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x121300, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) setns(0xc9, 0x0) r4 = socket(0x1f, 0x3, 0x3) getsockopt$auto_SO_BUSY_POLL(r4, 0x112, 0x2e, 0x0, &(0x7f0000000200)=0x3) socket(0xa, 0x2, 0x3a) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) mkdir$auto(0x0, 0x2) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 0s ago: executing program 3 (id=3742): ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)={0x2, 0x80, 0xffff, 0x5, &(0x7f0000000240)='#', 0x4b47, 0x3, 0x4080005, @stream_id=0x7, 0x2004c, 0xc, 0x0, [{0xbb, 0x4, 0x800}, {0x80000, 0x9, 0x5}, {0x1, 0x400058dc, 0x101}]}) pselect6$auto(0x1, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) r0 = socket(0xa, 0x2, 0x73) getsockopt$auto_SO_TIMESTAMPNS_NEW(r0, 0x0, 0x40, 0x0, &(0x7f0000000240)=0x54) unshare$auto(0x40000080) unshare$auto(0x40000080) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) settimeofday$auto(&(0x7f0000000540)={0x5e, 0x1}, &(0x7f0000000580)={0x1, 0xdb36}) shmctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000300)={{0x6, 0xffffffffffffffff, 0x0, 0x1, 0x80, 0x3, 0x8}, 0x9, 0x1ff, 0x9, 0x2, @raw=0x2, @inferred=0xffffffffffffffff, 0xfffe, 0x0, &(0x7f00000001c0)="5e96d4c4c9f11b902b31b587288ce68456d3372d700a0df0db", 0x0}) r2 = setfsgid$auto(r1) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000100), 0x181201, 0x0) shutdown$auto(0x200000003, 0x0) rseq$auto(0x0, 0x20, 0x0, 0x8000006) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x16bd00, 0x0) pread64$auto(r3, 0x0, 0x100000001, 0x400000000000100) rseq$auto(0x0, 0x6, 0x8, 0x10) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, 0x0, 0x14) socket(0x1, 0x1, 0x1) close_range$auto(0x2, 0x8, 0x0) keyctl$auto(0x1f, 0x1, 0x6, r2, 0x37f) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/scsi/sg/device_strs\x00', 0x80, 0x0) read$auto_proc_iter_file_ops_compat_inode(r4, &(0x7f0000000280)=""/238, 0xee) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) kernel console output (not intermixed with test programs): 1903.883862][ T2807] __x64_sys_getsockopt+0xbd/0x160 [ 1903.883901][ T2807] ? do_syscall_64+0xae/0x770 [ 1903.883931][ T2807] ? lockdep_hardirqs_on+0x7d/0x110 [ 1903.883961][ T2807] do_syscall_64+0x121/0x770 [ 1903.883995][ T2807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1903.884023][ T2807] RIP: 0033:0x7fe31cd9e159 [ 1903.884046][ T2807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1903.884072][ T2807] RSP: 002b:00007fe31dcdf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1903.884102][ T2807] RAX: ffffffffffffffda RBX: 00007fe31d025fa0 RCX: 00007fe31cd9e159 [ 1903.884120][ T2807] RDX: 0000000000000068 RSI: 0000000000000011 RDI: 0000000000000003 [ 1903.884136][ T2807] RBP: 00007fe31dcdf090 R08: 0000000000000000 R09: 0000000000000000 [ 1903.884152][ T2807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1903.884168][ T2807] R13: 00007fe31d026038 R14: 00007fe31d025fa0 R15: 00007ffec082ced8 [ 1903.884204][ T2807] [ 1904.040856][ T2816] kAFS: Invalid Command on /proc/fs/afs/cells file [ 1905.877568][ T2858] cgroup: fork rejected by pids controller in /syz2 [ 1906.672166][ T3037] FAULT_INJECTION: forcing a failure. [ 1906.672166][ T3037] name failslab, interval 1, probability 0, space 0, times 0 [ 1906.672203][ T3037] CPU: 0 UID: 0 PID: 3037 Comm: syz.0.3555 Not tainted syzkaller #0 PREEMPT(full) [ 1906.672234][ T3037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1906.672251][ T3037] Call Trace: [ 1906.672260][ T3037] [ 1906.672270][ T3037] dump_stack_lvl+0x100/0x190 [ 1906.672322][ T3037] should_fail_ex.cold+0x5/0xa [ 1906.672357][ T3037] should_failslab+0xc2/0x120 [ 1906.672396][ T3037] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1906.672430][ T3037] ? mas_prev+0xa4/0x100 [ 1906.672561][ T3037] ? vm_area_alloc+0x1f/0x160 [ 1906.672661][ T3037] vm_area_alloc+0x1f/0x160 [ 1906.672700][ T3037] __mmap_region+0x1025/0x32e0 [ 1906.672757][ T3037] ? find_held_lock+0x2b/0x80 [ 1906.672787][ T3037] ? ima_match_policy+0x8c4/0x23f0 [ 1906.672870][ T3037] ? __pfx___mmap_region+0x10/0x10 [ 1906.672899][ T3037] ? __lock_acquire+0x5c0/0x1f40 [ 1906.672959][ T3037] ? __lock_acquire+0x5c0/0x1f40 [ 1906.672998][ T3037] ? find_held_lock+0x2b/0x80 [ 1906.673028][ T3037] ? process_measurement+0x4c8/0x2350 [ 1906.673093][ T3037] ? process_measurement+0x4c8/0x2350 [ 1906.673131][ T3037] ? down_write+0x146/0x1f0 [ 1906.673227][ T3037] ? lock_acquire+0x1d1/0x380 [ 1906.673262][ T3037] ? process_measurement+0x1567/0x2350 [ 1906.673365][ T3037] mmap_region+0x5a8/0x6d0 [ 1906.673427][ T3037] ? __pfx_mmap_region+0x10/0x10 [ 1906.673458][ T3037] ? shmem_mapping+0xd/0x50 [ 1906.673532][ T3037] ? __pfx_memfd_check_seals_mmap+0x10/0x10 [ 1906.673559][ T3037] ? bpf_lsm_mmap_addr+0x9/0x30 [ 1906.673658][ T3037] ? security_mmap_addr+0x71/0x1e0 [ 1906.673724][ T3037] ? __get_unmapped_area+0x255/0x3e0 [ 1906.673791][ T3037] do_mmap+0x12c7/0x1c30 [ 1906.673835][ T3037] ? lock_acquire+0x1d1/0x380 [ 1906.673872][ T3037] ? __pfx_do_mmap+0x10/0x10 [ 1906.673910][ T3037] ? __pfx___might_resched+0x10/0x10 [ 1906.673951][ T3037] ? ima_file_mmap+0x1c4/0x1f0 [ 1906.673996][ T3037] ? __pfx_down_write_killable+0x10/0x10 [ 1906.674038][ T3037] vm_mmap_pgoff+0x28d/0x470 [ 1906.674108][ T3037] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1906.674140][ T3037] ? __fget_files+0x215/0x3d0 [ 1906.674180][ T3037] ? __fget_files+0x21f/0x3d0 [ 1906.674219][ T3037] ksys_mmap_pgoff+0x3cb/0x610 [ 1906.674257][ T3037] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1906.674297][ T3037] ? fput+0x7c/0x100 [ 1906.674332][ T3037] ? ksys_write+0x1ac/0x250 [ 1906.674363][ T3037] ? __pfx_ksys_write+0x10/0x10 [ 1906.674398][ T3037] __x64_sys_mmap+0x125/0x190 [ 1906.674441][ T3037] do_syscall_64+0x121/0x770 [ 1906.674476][ T3037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1906.674505][ T3037] RIP: 0033:0x7efcf8d9e159 [ 1906.674528][ T3037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1906.674554][ T3037] RSP: 002b:00007efcf9c98028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1906.674581][ T3037] RAX: ffffffffffffffda RBX: 00007efcf9026360 RCX: 00007efcf8d9e159 [ 1906.674599][ T3037] RDX: 0000000000000007 RSI: 00000000003fffff RDI: 0000000000000000 [ 1906.674616][ T3037] RBP: 00007efcf9c98090 R08: 00000000000000dd R09: 0000000000000000 [ 1906.674633][ T3037] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 1906.674649][ T3037] R13: 00007efcf90263f8 R14: 00007efcf9026360 R15: 00007ffd1a60a808 [ 1906.674687][ T3037] [ 1908.168802][ T3045] FAULT_INJECTION: forcing a failure. [ 1908.168802][ T3045] name fail_futex, interval 1, probability 0, space 0, times 1 [ 1908.168846][ T3045] CPU: 0 UID: 0 PID: 3045 Comm: syz.1.3556 Not tainted syzkaller #0 PREEMPT(full) [ 1908.168879][ T3045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1908.168895][ T3045] Call Trace: [ 1908.168905][ T3045] [ 1908.168915][ T3045] dump_stack_lvl+0x100/0x190 [ 1908.168958][ T3045] should_fail_ex.cold+0x5/0xa [ 1908.168994][ T3045] get_futex_key+0x1d0/0x14f0 [ 1908.169076][ T3045] ? __pfx_get_futex_key+0x10/0x10 [ 1908.169106][ T3045] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1908.169148][ T3045] futex_wake+0xf4/0x5e0 [ 1908.169187][ T3045] ? __pfx_futex_wake+0x10/0x10 [ 1908.169226][ T3045] ? lock_acquire+0x1d1/0x380 [ 1908.169265][ T3045] ? detach_task_ctx_data+0x83/0x490 [ 1908.169361][ T3045] do_futex+0x2b2/0x440 [ 1908.169393][ T3045] ? __pfx_do_futex+0x10/0x10 [ 1908.169420][ T3045] ? __might_fault+0xc5/0x140 [ 1908.169458][ T3045] mm_exit_exec_release+0x256/0x2f0 [ 1908.169501][ T3045] do_exit+0x707/0x2a50 [ 1908.169529][ T3045] ? core_sys_select+0x358/0xbb0 [ 1908.169599][ T3045] ? __pfx_do_exit+0x10/0x10 [ 1908.169630][ T3045] ? do_raw_spin_lock+0x128/0x260 [ 1908.169658][ T3045] ? find_held_lock+0x2b/0x80 [ 1908.169700][ T3045] ? get_signal+0x7e0/0x21e0 [ 1908.169744][ T3045] do_group_exit+0xd5/0x2a0 [ 1908.169778][ T3045] get_signal+0x1ec7/0x21e0 [ 1908.169832][ T3045] ? __pfx_get_signal+0x10/0x10 [ 1908.169883][ T3045] arch_do_signal_or_restart+0x91/0x7a0 [ 1908.169932][ T3045] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1908.169990][ T3045] exit_to_user_mode_loop+0x139/0x700 [ 1908.170025][ T3045] ? rcu_is_watching+0x13/0xc0 [ 1908.170059][ T3045] do_syscall_64+0x603/0x770 [ 1908.170094][ T3045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1908.170124][ T3045] RIP: 0033:0x7fdfbf19e159 [ 1908.170149][ T3045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1908.170175][ T3045] RSP: 002b:00007fdfbffde028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 1908.170201][ T3045] RAX: fffffffffffffdfe RBX: 00007fdfbf426360 RCX: 00007fdfbf19e159 [ 1908.170220][ T3045] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 1908.170236][ T3045] RBP: 00007fdfbffde090 R08: 0000000000000000 R09: 0000000000000000 [ 1908.170252][ T3045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1908.170268][ T3045] R13: 00007fdfbf4263f8 R14: 00007fdfbf426360 R15: 00007ffea258af08 [ 1908.170304][ T3045] [ 1908.465551][ T3051] ubi: mtd0 is already attached to ubi0 [ 1909.012891][ T3060] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1909.033849][ T3060] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1909.034330][ T3060] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1909.037195][ T3060] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1910.943268][T24083] Bluetooth: hci4: command 0x040f tx timeout [ 1911.023269][T24083] Bluetooth: hci2: command 0x040f tx timeout [ 1911.103587][T24083] Bluetooth: hci3: command 0x040f tx timeout [ 1911.103629][T24083] Bluetooth: hci1: command 0x040f tx timeout [ 1912.511166][ T3131] FAULT_INJECTION: forcing a failure. [ 1912.511166][ T3131] name failslab, interval 1, probability 0, space 0, times 0 [ 1912.511193][ T3131] CPU: 0 UID: 0 PID: 3131 Comm: syz.2.3568 Tainted: G L syzkaller #0 PREEMPT(full) [ 1912.511213][ T3131] Tainted: [L]=SOFTLOCKUP [ 1912.511219][ T3131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1912.511228][ T3131] Call Trace: [ 1912.511233][ T3131] [ 1912.511239][ T3131] dump_stack_lvl+0x100/0x190 [ 1912.511263][ T3131] should_fail_ex.cold+0x5/0xa [ 1912.511282][ T3131] should_failslab+0xc2/0x120 [ 1912.511304][ T3131] __kmalloc_cache_noprof+0x91/0x6d0 [ 1912.511320][ T3131] ? find_held_lock+0x2b/0x80 [ 1912.511338][ T3131] ? alloc_pipe_info+0x10e/0x590 [ 1912.511441][ T3131] alloc_pipe_info+0x10e/0x590 [ 1912.511462][ T3131] splice_direct_to_actor+0x78f/0xa30 [ 1912.511528][ T3131] ? __lock_acquire+0x5c0/0x1f40 [ 1912.511548][ T3131] ? __pfx_direct_splice_actor+0x10/0x10 [ 1912.511567][ T3131] ? __pfx_aa_file_perm+0x10/0x10 [ 1912.511614][ T3131] ? lock_acquire+0x1d1/0x380 [ 1912.511633][ T3131] ? get_pid_task+0x2a/0x250 [ 1912.511658][ T3131] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1912.511680][ T3131] ? lock_acquire+0x1d1/0x380 [ 1912.511702][ T3131] do_splice_direct+0x174/0x240 [ 1912.511722][ T3131] ? __pfx_do_splice_direct+0x10/0x10 [ 1912.511742][ T3131] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1912.511761][ T3131] ? bpf_lsm_file_permission+0x9/0x10 [ 1912.511782][ T3131] ? security_file_permission+0x76/0x210 [ 1912.511799][ T3131] ? rw_verify_area+0xce/0x6d0 [ 1912.511816][ T3131] do_sendfile+0xadc/0xe20 [ 1912.511835][ T3131] ? __pfx_do_sendfile+0x10/0x10 [ 1912.511849][ T3131] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1912.511869][ T3131] ? __fget_files+0x21f/0x3d0 [ 1912.511894][ T3131] __x64_sys_sendfile64+0x1d8/0x220 [ 1912.511915][ T3131] ? ksys_write+0x1ac/0x250 [ 1912.511931][ T3131] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1912.511956][ T3131] do_syscall_64+0x121/0x770 [ 1912.511975][ T3131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1912.511990][ T3131] RIP: 0033:0x7f3640f9e159 [ 1912.512003][ T3131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1912.512017][ T3131] RSP: 002b:00007f3641e86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1912.512032][ T3131] RAX: ffffffffffffffda RBX: 00007f3641225fa0 RCX: 00007f3640f9e159 [ 1912.512042][ T3131] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1912.512050][ T3131] RBP: 00007f3641e86090 R08: 0000000000000000 R09: 0000000000000000 [ 1912.512059][ T3131] R10: 0000400000000006 R11: 0000000000000246 R12: 0000000000000001 [ 1912.512068][ T3131] R13: 00007f3641226038 R14: 00007f3641225fa0 R15: 00007ffe4d5f7888 [ 1912.512086][ T3131] [ 1913.344067][ T3143] ubi: mtd0 is already attached to ubi0 [ 1914.086621][ T3148] FAULT_INJECTION: forcing a failure. [ 1914.086621][ T3148] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1914.086666][ T3148] CPU: 1 UID: 0 PID: 3148 Comm: syz.1.3572 Tainted: G L syzkaller #0 PREEMPT(full) [ 1914.086687][ T3148] Tainted: [L]=SOFTLOCKUP [ 1914.086693][ T3148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1914.086702][ T3148] Call Trace: [ 1914.086707][ T3148] [ 1914.086716][ T3148] dump_stack_lvl+0x100/0x190 [ 1914.086755][ T3148] should_fail_ex.cold+0x5/0xa [ 1914.086775][ T3148] _copy_from_user+0x2e/0xd0 [ 1914.086807][ T3148] move_addr_to_kernel+0x65/0x170 [ 1914.086840][ T3148] __sys_connect+0xb5/0x170 [ 1914.086860][ T3148] ? __pfx___sys_connect+0x10/0x10 [ 1914.086879][ T3148] ? __fget_files+0x21f/0x3d0 [ 1914.086904][ T3148] ? __pfx_ksys_write+0x10/0x10 [ 1914.086929][ T3148] __x64_sys_connect+0x72/0xb0 [ 1914.086948][ T3148] ? lockdep_hardirqs_on+0x7d/0x110 [ 1914.086966][ T3148] do_syscall_64+0x121/0x770 [ 1914.086984][ T3148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1914.087007][ T3148] RIP: 0033:0x7fdfbf19e159 [ 1914.087025][ T3148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1914.087039][ T3148] RSP: 002b:00007fdfc0062028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1914.087053][ T3148] RAX: ffffffffffffffda RBX: 00007fdfbf425fa0 RCX: 00007fdfbf19e159 [ 1914.087063][ T3148] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000003 [ 1914.087072][ T3148] RBP: 00007fdfc0062090 R08: 0000000000000000 R09: 0000000000000000 [ 1914.087081][ T3148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1914.087090][ T3148] R13: 00007fdfbf426038 R14: 00007fdfbf425fa0 R15: 00007ffea258af08 [ 1914.087108][ T3148] [ 1914.690127][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.690194][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1916.630139][ T3192] ubi: mtd0 is already attached to ubi0 [ 1917.622561][ T3229] random: crng reseeded on system resumption [ 1918.076041][ T3220] zram: Added device: zram1 [ 1918.147635][ T3220] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 1918.673357][ T3256] FAULT_INJECTION: forcing a failure. [ 1918.673357][ T3256] name failslab, interval 1, probability 0, space 0, times 0 [ 1918.673399][ T3256] CPU: 0 UID: 0 PID: 3256 Comm: syz.0.3587 Tainted: G L syzkaller #0 PREEMPT(full) [ 1918.673435][ T3256] Tainted: [L]=SOFTLOCKUP [ 1918.673444][ T3256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1918.673459][ T3256] Call Trace: [ 1918.673468][ T3256] [ 1918.673478][ T3256] dump_stack_lvl+0x100/0x190 [ 1918.673518][ T3256] should_fail_ex.cold+0x5/0xa [ 1918.673552][ T3256] should_failslab+0xc2/0x120 [ 1918.673591][ T3256] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1918.673624][ T3256] ? ksys_write+0x190/0x250 [ 1918.673655][ T3256] ? create_new_namespaces+0x30/0xac0 [ 1918.673700][ T3256] create_new_namespaces+0x30/0xac0 [ 1918.673737][ T3256] ? bpf_lsm_capable+0x9/0x10 [ 1918.673763][ T3256] ? security_capable+0x80/0x260 [ 1918.673894][ T3256] unshare_nsproxy_namespaces+0xf2/0x220 [ 1918.673937][ T3256] ksys_unshare+0x4a2/0xa70 [ 1918.673966][ T3256] ? __pfx_ksys_unshare+0x10/0x10 [ 1918.673994][ T3256] ? ksys_write+0x1ac/0x250 [ 1918.674036][ T3256] __x64_sys_unshare+0x31/0x40 [ 1918.674063][ T3256] do_syscall_64+0x121/0x770 [ 1918.674099][ T3256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1918.674127][ T3256] RIP: 0033:0x7efcf8d9e159 [ 1918.674150][ T3256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1918.674175][ T3256] RSP: 002b:00007efcf9cb9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1918.674209][ T3256] RAX: ffffffffffffffda RBX: 00007efcf9026270 RCX: 00007efcf8d9e159 [ 1918.674227][ T3256] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1918.674244][ T3256] RBP: 00007efcf9cb9090 R08: 0000000000000000 R09: 0000000000000000 [ 1918.674261][ T3256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1918.674277][ T3256] R13: 00007efcf9026308 R14: 00007efcf9026270 R15: 00007ffd1a60a808 [ 1918.674314][ T3256] [ 1920.245908][ T3289] ubi: mtd0 is already attached to ubi0 [ 1921.193364][ T3300] FAULT_INJECTION: forcing a failure. [ 1921.193364][ T3300] name failslab, interval 1, probability 0, space 0, times 0 [ 1921.193413][ T3300] CPU: 1 UID: 0 PID: 3300 Comm: syz.0.3593 Tainted: G L syzkaller #0 PREEMPT(full) [ 1921.193450][ T3300] Tainted: [L]=SOFTLOCKUP [ 1921.193460][ T3300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1921.193475][ T3300] Call Trace: [ 1921.193484][ T3300] [ 1921.193494][ T3300] dump_stack_lvl+0x100/0x190 [ 1921.193533][ T3300] should_fail_ex.cold+0x5/0xa [ 1921.193568][ T3300] should_failslab+0xc2/0x120 [ 1921.193609][ T3300] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1921.193642][ T3300] ? ksys_write+0x190/0x250 [ 1921.193674][ T3300] ? create_new_namespaces+0x30/0xac0 [ 1921.193725][ T3300] create_new_namespaces+0x30/0xac0 [ 1921.193764][ T3300] ? bpf_lsm_capable+0x9/0x10 [ 1921.193789][ T3300] ? security_capable+0x80/0x260 [ 1921.193833][ T3300] unshare_nsproxy_namespaces+0xf2/0x220 [ 1921.193876][ T3300] ksys_unshare+0x4a2/0xa70 [ 1921.193905][ T3300] ? __pfx_ksys_unshare+0x10/0x10 [ 1921.193933][ T3300] ? ksys_write+0x1ac/0x250 [ 1921.193975][ T3300] __x64_sys_unshare+0x31/0x40 [ 1921.194002][ T3300] do_syscall_64+0x121/0x770 [ 1921.194039][ T3300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1921.194067][ T3300] RIP: 0033:0x7efcf8d9e159 [ 1921.194090][ T3300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1921.194115][ T3300] RSP: 002b:00007efcf9cda028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1921.194142][ T3300] RAX: ffffffffffffffda RBX: 00007efcf9026180 RCX: 00007efcf8d9e159 [ 1921.194160][ T3300] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1921.194176][ T3300] RBP: 00007efcf9cda090 R08: 0000000000000000 R09: 0000000000000000 [ 1921.194193][ T3300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1921.194210][ T3300] R13: 00007efcf9026218 R14: 00007efcf9026180 R15: 00007ffd1a60a808 [ 1921.194243][ T3300] [ 1923.573442][ T3352] netlink: 5324 bytes leftover after parsing attributes in process `syz.3.3599'. [ 1924.511238][ T3358] ubi: mtd0 is already attached to ubi0 [ 1925.307569][ T3394] FAULT_INJECTION: forcing a failure. [ 1925.307569][ T3394] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1925.307613][ T3394] CPU: 1 UID: 0 PID: 3394 Comm: syz.3.3604 Tainted: G L syzkaller #0 PREEMPT(full) [ 1925.307652][ T3394] Tainted: [L]=SOFTLOCKUP [ 1925.307661][ T3394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1925.307679][ T3394] Call Trace: [ 1925.307688][ T3394] [ 1925.307699][ T3394] dump_stack_lvl+0x100/0x190 [ 1925.307740][ T3394] should_fail_ex.cold+0x5/0xa [ 1925.307777][ T3394] _copy_from_user+0x2e/0xd0 [ 1925.307817][ T3394] copy_clone_args_from_user+0x152/0x7d0 [ 1925.307861][ T3394] ? get_pid_task+0xfc/0x250 [ 1925.307892][ T3394] ? get_pid_task+0xfc/0x250 [ 1925.307923][ T3394] ? __pfx_copy_clone_args_from_user+0x10/0x10 [ 1925.307970][ T3394] ? find_held_lock+0x2b/0x80 [ 1925.308009][ T3394] __do_sys_clone3+0xbf/0x290 [ 1925.308044][ T3394] ? __pfx___do_sys_clone3+0x10/0x10 [ 1925.308070][ T3394] ? ksys_write+0x190/0x250 [ 1925.308116][ T3394] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1925.308151][ T3394] ? __fget_files+0x21f/0x3d0 [ 1925.308208][ T3394] do_syscall_64+0x121/0x770 [ 1925.308244][ T3394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1925.308272][ T3394] RIP: 0033:0x7fe31cd9e159 [ 1925.308295][ T3394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1925.308319][ T3394] RSP: 002b:00007fe31dc5aef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1925.308344][ T3394] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fe31cd9e159 [ 1925.308359][ T3394] RDX: 00007fe31dc5af10 RSI: 0000000000000058 RDI: 00007fe31dc5af10 [ 1925.308374][ T3394] RBP: 00007fe31dc5b090 R08: 0000000000000000 R09: 0000000000000058 [ 1925.308391][ T3394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1925.308407][ T3394] R13: 00007fe31d0263f8 R14: 00007fe31d026360 R15: 00007ffec082ced8 [ 1925.308442][ T3394] [ 1928.120676][ T3447] ubi: mtd0 is already attached to ubi0 [ 1928.654960][ T3461] syz.1.3612 uses obsolete (PF_INET,SOCK_PACKET) [ 1929.412279][ T3472] ecryptfs_parse_packet_length: Error parsing packet length [ 1929.412377][ T3472] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 1929.798041][ T3479] FAULT_INJECTION: forcing a failure. [ 1929.798041][ T3479] name failslab, interval 1, probability 0, space 0, times 0 [ 1929.798083][ T3479] CPU: 1 UID: 0 PID: 3479 Comm: syz.3.3614 Tainted: G L syzkaller #0 PREEMPT(full) [ 1929.798121][ T3479] Tainted: [L]=SOFTLOCKUP [ 1929.798131][ T3479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1929.798149][ T3479] Call Trace: [ 1929.798158][ T3479] [ 1929.798168][ T3479] dump_stack_lvl+0x100/0x190 [ 1929.798211][ T3479] should_fail_ex.cold+0x5/0xa [ 1929.798250][ T3479] should_failslab+0xc2/0x120 [ 1929.798291][ T3479] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1929.798325][ T3479] ? percpu_counter_add_batch+0xb9/0x230 [ 1929.798476][ T3479] ? vm_area_alloc+0x1f/0x160 [ 1929.798525][ T3479] vm_area_alloc+0x1f/0x160 [ 1929.798566][ T3479] __mmap_region+0x1025/0x32e0 [ 1929.798597][ T3479] ? find_held_lock+0x2b/0x80 [ 1929.798627][ T3479] ? ima_match_policy+0x8c4/0x23f0 [ 1929.798658][ T3479] ? __pfx___mmap_region+0x10/0x10 [ 1929.798687][ T3479] ? __lock_acquire+0x5c0/0x1f40 [ 1929.798743][ T3479] ? process_measurement+0x1567/0x2350 [ 1929.798787][ T3479] ? __pfx___might_resched+0x10/0x10 [ 1929.798826][ T3479] ? find_held_lock+0x2b/0x80 [ 1929.798857][ T3479] ? process_measurement+0x4c8/0x2350 [ 1929.798892][ T3479] ? process_measurement+0x4c8/0x2350 [ 1929.798931][ T3479] ? down_write+0x146/0x1f0 [ 1929.799003][ T3479] ? lock_acquire+0x1d1/0x380 [ 1929.799092][ T3479] ? __lock_acquire+0x5c0/0x1f40 [ 1929.799137][ T3479] mmap_region+0x3db/0x6d0 [ 1929.799169][ T3479] ? rcu_is_watching+0x13/0xc0 [ 1929.799199][ T3479] ? __pfx_mmap_region+0x10/0x10 [ 1929.799233][ T3479] ? cap_mmap_addr+0x4b/0x120 [ 1929.799310][ T3479] ? bpf_lsm_mmap_addr+0x9/0x30 [ 1929.799349][ T3479] ? security_mmap_addr+0x71/0x1e0 [ 1929.799378][ T3479] ? __get_unmapped_area+0x255/0x3e0 [ 1929.799421][ T3479] do_mmap+0x12c7/0x1c30 [ 1929.799471][ T3479] ? lock_acquire+0x1d1/0x380 [ 1929.799510][ T3479] ? __pfx_do_mmap+0x10/0x10 [ 1929.799548][ T3479] ? __pfx___might_resched+0x10/0x10 [ 1929.799595][ T3479] ? __pfx_down_write_killable+0x10/0x10 [ 1929.799630][ T3479] ? find_held_lock+0x2b/0x80 [ 1929.799666][ T3479] vm_mmap_pgoff+0x28d/0x470 [ 1929.799708][ T3479] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1929.799739][ T3479] ? lock_acquire+0x1d1/0x380 [ 1929.799777][ T3479] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1929.799819][ T3479] ksys_mmap_pgoff+0xe4/0x610 [ 1929.799858][ T3479] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1929.799892][ T3479] ? fput+0x7c/0x100 [ 1929.799928][ T3479] ? ksys_write+0x1ac/0x250 [ 1929.799958][ T3479] ? __pfx_ksys_write+0x10/0x10 [ 1929.799992][ T3479] __x64_sys_mmap+0x125/0x190 [ 1929.800025][ T3479] do_syscall_64+0x121/0x770 [ 1929.800060][ T3479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1929.800089][ T3479] RIP: 0033:0x7fe31cd9e159 [ 1929.800111][ T3479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1929.800137][ T3479] RSP: 002b:00007fe31dc5b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1929.800164][ T3479] RAX: ffffffffffffffda RBX: 00007fe31d026360 RCX: 00007fe31cd9e159 [ 1929.800183][ T3479] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 1929.800199][ T3479] RBP: 00007fe31dc5b090 R08: 0000000000000002 R09: 0000000000008000 [ 1929.800216][ T3479] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000001 [ 1929.800232][ T3479] R13: 00007fe31d0263f8 R14: 00007fe31d026360 R15: 00007ffec082ced8 [ 1929.800268][ T3479] [ 1930.760333][ T3500] netlink: 290 bytes leftover after parsing attributes in process `syz.2.3617'. [ 1932.381320][ T3519] ubi: mtd0 is already attached to ubi0 [ 1932.977772][ T3539] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[26706] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[3539] [ 1935.439253][ T3590] ubi: mtd0 is already attached to ubi0 [ 1936.047592][ T3602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3631'. [ 1938.396236][ T3641] FAULT_INJECTION: forcing a failure. [ 1938.396236][ T3641] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1938.396280][ T3641] CPU: 0 UID: 0 PID: 3641 Comm: syz.1.3636 Tainted: G L syzkaller #0 PREEMPT(full) [ 1938.396325][ T3641] Tainted: [L]=SOFTLOCKUP [ 1938.396335][ T3641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1938.396351][ T3641] Call Trace: [ 1938.396360][ T3641] [ 1938.396371][ T3641] dump_stack_lvl+0x100/0x190 [ 1938.396416][ T3641] should_fail_ex.cold+0x5/0xa [ 1938.396453][ T3641] _copy_from_user+0x2e/0xd0 [ 1938.396495][ T3641] copy_msghdr_from_user+0x9f/0x4c0 [ 1938.396533][ T3641] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1938.396585][ T3641] ___sys_sendmsg+0x106/0x1e0 [ 1938.396622][ T3641] ? __pfx____sys_sendmsg+0x10/0x10 [ 1938.396674][ T3641] ? find_held_lock+0x2b/0x80 [ 1938.396730][ T3641] __sys_sendmsg+0x160/0x210 [ 1938.396757][ T3641] ? __pfx___sys_sendmsg+0x10/0x10 [ 1938.396802][ T3641] do_syscall_64+0x121/0x770 [ 1938.396838][ T3641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1938.396866][ T3641] RIP: 0033:0x7fdfbf19e159 [ 1938.396888][ T3641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1938.396913][ T3641] RSP: 002b:00007fdfc0041028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1938.396940][ T3641] RAX: ffffffffffffffda RBX: 00007fdfbf426090 RCX: 00007fdfbf19e159 [ 1938.396959][ T3641] RDX: 00000000000400c1 RSI: 0000200000000240 RDI: 0000000000000003 [ 1938.396976][ T3641] RBP: 00007fdfc0041090 R08: 0000000000000000 R09: 0000000000000000 [ 1938.396993][ T3641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1938.397009][ T3641] R13: 00007fdfbf426128 R14: 00007fdfbf426090 R15: 00007ffea258af08 [ 1938.397045][ T3641] [ 1939.534784][ T3659] ubi: mtd0 is already attached to ubi0 [ 1939.913811][ T3678] hub 1-0:1.0: USB hub found [ 1939.915663][ T3678] hub 1-0:1.0: 1 port detected [ 1939.925316][ T3678] FAULT_INJECTION: forcing a failure. [ 1939.925316][ T3678] name failslab, interval 1, probability 0, space 0, times 0 [ 1939.925356][ T3678] CPU: 1 UID: 0 PID: 3678 Comm: syz.2.3644 Tainted: G L syzkaller #0 PREEMPT(full) [ 1939.925392][ T3678] Tainted: [L]=SOFTLOCKUP [ 1939.925401][ T3678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1939.925417][ T3678] Call Trace: [ 1939.925426][ T3678] [ 1939.925435][ T3678] dump_stack_lvl+0x100/0x190 [ 1939.925477][ T3678] should_fail_ex.cold+0x5/0xa [ 1939.925511][ T3678] should_failslab+0xc2/0x120 [ 1939.925550][ T3678] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1939.925584][ T3678] ? ksys_write+0x190/0x250 [ 1939.925614][ T3678] ? create_new_namespaces+0x30/0xac0 [ 1939.925660][ T3678] create_new_namespaces+0x30/0xac0 [ 1939.925698][ T3678] ? bpf_lsm_capable+0x9/0x10 [ 1939.925723][ T3678] ? security_capable+0x80/0x260 [ 1939.925765][ T3678] unshare_nsproxy_namespaces+0xf2/0x220 [ 1939.925808][ T3678] ksys_unshare+0x4a2/0xa70 [ 1939.925836][ T3678] ? __pfx_ksys_unshare+0x10/0x10 [ 1939.925863][ T3678] ? ksys_write+0x1ac/0x250 [ 1939.925903][ T3678] __x64_sys_unshare+0x31/0x40 [ 1939.925929][ T3678] do_syscall_64+0x121/0x770 [ 1939.925967][ T3678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1939.926001][ T3678] RIP: 0033:0x7f3640f9e159 [ 1939.926022][ T3678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1939.926047][ T3678] RSP: 002b:00007f3641e44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1939.926073][ T3678] RAX: ffffffffffffffda RBX: 00007f3641226180 RCX: 00007f3640f9e159 [ 1939.926091][ T3678] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1939.926107][ T3678] RBP: 00007f3641e44090 R08: 0000000000000000 R09: 0000000000000000 [ 1939.926123][ T3678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1939.926138][ T3678] R13: 00007f3641226218 R14: 00007f3641226180 R15: 00007ffe4d5f7888 [ 1939.926173][ T3678] [ 1940.251386][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 1941.298228][ T3713] hub 1-0:1.0: USB hub found [ 1941.299269][ T3713] hub 1-0:1.0: 1 port detected [ 1941.406852][ T3717] hub 1-0:1.0: USB hub found [ 1941.407650][ T3717] hub 1-0:1.0: 1 port detected [ 1941.466257][ T3714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3647'. [ 1943.826476][T26378] bridge0: port 3(syz_tun) entered disabled state [ 1943.847042][ T3740] hub 1-0:1.0: USB hub found [ 1943.858082][ T3740] hub 1-0:1.0: 1 port detected [ 1943.884287][T26378] syz_tun (unregistering): left allmulticast mode [ 1943.884319][T26378] syz_tun (unregistering): left promiscuous mode [ 1943.884426][T26378] bridge0: port 3(syz_tun) entered disabled state [ 1944.024558][ T3231] bridge0: port 3(syz_tun) entered disabled state [ 1944.074839][ T3231] syz_tun (unregistering): left allmulticast mode [ 1944.074872][ T3231] syz_tun (unregistering): left promiscuous mode [ 1944.074948][ T3231] bridge0: port 3(syz_tun) entered disabled state [ 1944.876584][T24083] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1944.894464][ T3754] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1944.899199][ T3754] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1944.919588][ T3754] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1944.920801][ T3757] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1944.921537][ T3754] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1944.923666][ T3754] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1944.925856][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1944.947630][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1944.948213][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1945.021665][T25087] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1945.361450][T25087] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1945.531086][T25087] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1945.624040][T25087] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1945.878713][T25730] bridge0: port 3(syz_tun) entered disabled state [ 1945.897042][T25730] syz_tun (unregistering): left allmulticast mode [ 1945.897072][T25730] syz_tun (unregistering): left promiscuous mode [ 1945.897153][T25730] bridge0: port 3(syz_tun) entered disabled state [ 1946.546167][T25087] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1946.615774][ T3754] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1946.628139][ T3754] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1946.637972][ T3754] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1946.646856][ T3754] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1946.656010][ T3754] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1946.880297][T25087] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1946.996959][T24083] Bluetooth: hci0: command tx timeout [ 1947.077422][T24083] Bluetooth: hci1: command tx timeout [ 1947.142797][T25087] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1947.222738][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1947.287496][T25087] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1947.427412][ T3752] bridge0: port 1(bridge_slave_0) entered blocking state [ 1947.427531][ T3752] bridge0: port 1(bridge_slave_0) entered disabled state [ 1947.427689][ T3752] bridge_slave_0: entered allmulticast mode [ 1947.456758][ T3752] bridge_slave_0: entered promiscuous mode [ 1947.472637][ T3752] bridge0: port 2(bridge_slave_1) entered blocking state [ 1947.472816][ T3752] bridge0: port 2(bridge_slave_1) entered disabled state [ 1947.472958][ T3752] bridge_slave_1: entered allmulticast mode [ 1947.497913][ T3752] bridge_slave_1: entered promiscuous mode [ 1947.586115][ T3752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1947.631603][ T3752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1947.735866][ T3825] hub 1-0:1.0: USB hub found [ 1947.738784][ T3825] hub 1-0:1.0: 1 port detected [ 1947.929450][ T3752] team0: Port device team_slave_0 added [ 1947.994918][ T3752] team0: Port device team_slave_1 added [ 1948.005472][ T3751] bridge0: port 1(bridge_slave_0) entered blocking state [ 1948.005641][ T3751] bridge0: port 1(bridge_slave_0) entered disabled state [ 1948.005779][ T3751] bridge_slave_0: entered allmulticast mode [ 1948.012089][ T3751] bridge_slave_0: entered promiscuous mode [ 1948.043952][T25087] bridge_slave_1: left allmulticast mode [ 1948.043983][T25087] bridge_slave_1: left promiscuous mode [ 1948.044185][T25087] bridge0: port 2(bridge_slave_1) entered disabled state [ 1948.049164][T25087] bridge_slave_0: left allmulticast mode [ 1948.049193][T25087] bridge_slave_0: left promiscuous mode [ 1948.049396][T25087] bridge0: port 1(bridge_slave_0) entered disabled state [ 1948.102563][T25087] bridge_slave_1: left allmulticast mode [ 1948.102593][T25087] bridge_slave_1: left promiscuous mode [ 1948.102809][T25087] bridge0: port 2(bridge_slave_1) entered disabled state [ 1948.105968][T25087] bridge_slave_0: left allmulticast mode [ 1948.105993][T25087] bridge_slave_0: left promiscuous mode [ 1948.106266][T25087] bridge0: port 1(bridge_slave_0) entered disabled state [ 1948.372692][T25087] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1948.375978][T25087] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1948.382184][T25087] bond0 (unregistering): Released all slaves [ 1948.476865][T25087] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1948.487526][T25087] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1948.495890][T25087] bond0 (unregistering): Released all slaves [ 1948.538308][ T3751] bridge0: port 2(bridge_slave_1) entered blocking state [ 1948.538416][ T3751] bridge0: port 2(bridge_slave_1) entered disabled state [ 1948.538536][ T3751] bridge_slave_1: entered allmulticast mode [ 1948.540382][ T3751] bridge_slave_1: entered promiscuous mode [ 1948.610691][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1948.649642][ T3752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1948.649662][ T3752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1948.649691][ T3752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1948.651941][ T3752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1948.651958][ T3752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1948.651985][ T3752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1948.707749][T24083] Bluetooth: hci3: command tx timeout [ 1948.793862][ T3751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1948.807314][ T3751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1948.945759][ T3751] team0: Port device team_slave_0 added [ 1949.016535][ T3752] hsr_slave_0: entered promiscuous mode [ 1949.018865][ T3752] hsr_slave_1: entered promiscuous mode [ 1949.019706][ T3752] debugfs: 'hsr0' already exists in 'hsr' [ 1949.019730][ T3752] Cannot create hsr debugfs directory [ 1949.036977][ T3751] team0: Port device team_slave_1 added [ 1949.081989][T24083] Bluetooth: hci0: command tx timeout [ 1949.145006][T24083] Bluetooth: hci1: command tx timeout [ 1949.207959][ T3751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1949.207980][ T3751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1949.208011][ T3751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1949.246761][ T3751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1949.246780][ T3751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1949.246810][ T3751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1949.615954][T26019] bridge0: port 3(syz_tun) entered disabled state [ 1949.636710][T26019] syz_tun (unregistering): left allmulticast mode [ 1949.636739][T26019] syz_tun (unregistering): left promiscuous mode [ 1949.636832][T26019] bridge0: port 3(syz_tun) entered disabled state [ 1949.676650][ T3751] hsr_slave_0: entered promiscuous mode [ 1949.677792][ T3751] hsr_slave_1: entered promiscuous mode [ 1949.678616][ T3751] debugfs: 'hsr0' already exists in 'hsr' [ 1949.678638][ T3751] Cannot create hsr debugfs directory [ 1949.714270][T25087] hsr_slave_0: left promiscuous mode [ 1949.714788][T25087] hsr_slave_1: left promiscuous mode [ 1949.715336][T25087] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1949.715350][T25087] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1949.715904][T25087] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1949.715924][T25087] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1949.719037][T25087] hsr_slave_0: left promiscuous mode [ 1949.719502][T25087] hsr_slave_1: left promiscuous mode [ 1949.720364][T25087] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1949.720378][T25087] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1949.720904][T25087] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1949.720923][T25087] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1949.749719][T25087] veth1_macvtap: left promiscuous mode [ 1949.749761][T25087] veth0_macvtap: left promiscuous mode [ 1949.749888][T25087] veth1_vlan: left promiscuous mode [ 1949.749981][T25087] veth0_vlan: left promiscuous mode [ 1949.776162][T25087] veth1_macvtap: left promiscuous mode [ 1949.776280][T25087] veth0_macvtap: left promiscuous mode [ 1949.776389][T25087] veth1_vlan: left promiscuous mode [ 1949.776461][T25087] veth0_vlan: left promiscuous mode [ 1950.209380][T25087] team0 (unregistering): Port device team_slave_1 removed [ 1950.227013][T25087] team0 (unregistering): Port device team_slave_0 removed [ 1950.270374][ T3754] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1950.274038][ T3754] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1950.274731][ T3754] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1950.276645][ T3754] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1950.277809][ T3754] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1950.538443][T25087] team0 (unregistering): Port device team_slave_1 removed [ 1950.555303][T25087] team0 (unregistering): Port device team_slave_0 removed [ 1950.662012][ T3794] bridge0: port 1(bridge_slave_0) entered blocking state [ 1950.662179][ T3794] bridge0: port 1(bridge_slave_0) entered disabled state [ 1950.662300][ T3794] bridge_slave_0: entered allmulticast mode [ 1950.663921][ T3794] bridge_slave_0: entered promiscuous mode [ 1950.670525][ T3794] bridge0: port 2(bridge_slave_1) entered blocking state [ 1950.670628][ T3794] bridge0: port 2(bridge_slave_1) entered disabled state [ 1950.670758][ T3794] bridge_slave_1: entered allmulticast mode [ 1950.679577][ T3794] bridge_slave_1: entered promiscuous mode [ 1950.721536][ T5280] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1950.736430][T24083] Bluetooth: hci3: command tx timeout [ 1950.796955][ T3794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1950.847775][ T3794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1950.906314][ T3794] team0: Port device team_slave_0 added [ 1950.948684][ T3794] team0: Port device team_slave_1 added [ 1951.056437][ T3794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1951.056457][ T3794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1951.056487][ T3794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1951.119234][ T3794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1951.119253][ T3794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1951.119281][ T3794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1951.157150][T24083] Bluetooth: hci0: command tx timeout [ 1951.230083][T24083] Bluetooth: hci1: command tx timeout [ 1951.333037][ T3794] hsr_slave_0: entered promiscuous mode [ 1951.335236][ T3794] hsr_slave_1: entered promiscuous mode [ 1951.843109][T25087] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1951.981305][T25087] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1952.068711][T25087] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1952.153230][T25087] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1952.329090][T24083] Bluetooth: hci2: command tx timeout [ 1952.342890][ T3865] bridge0: port 1(bridge_slave_0) entered blocking state [ 1952.343065][ T3865] bridge0: port 1(bridge_slave_0) entered disabled state [ 1952.343195][ T3865] bridge_slave_0: entered allmulticast mode [ 1952.344966][ T3865] bridge_slave_0: entered promiscuous mode [ 1952.347682][ T3865] bridge0: port 2(bridge_slave_1) entered blocking state [ 1952.347973][ T3865] bridge0: port 2(bridge_slave_1) entered disabled state [ 1952.348098][ T3865] bridge_slave_1: entered allmulticast mode [ 1952.349810][ T3865] bridge_slave_1: entered promiscuous mode [ 1952.478433][ T3865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1952.511734][ T3865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1952.570431][ T3752] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1952.593121][ T3752] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1952.617165][ T3752] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1952.621612][ T3752] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1952.641121][ T3752] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1952.645545][ T3752] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1952.648487][ T3865] team0: Port device team_slave_0 added [ 1952.678511][ T3865] team0: Port device team_slave_1 added [ 1952.678589][ T3752] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1952.685476][ T3752] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1952.751020][ T3794] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1952.780753][ T3865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1952.780773][ T3865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1952.780803][ T3865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1952.818846][T24083] Bluetooth: hci3: command tx timeout [ 1952.821466][ T3865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1952.821484][ T3865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1952.821515][ T3865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1952.916058][ T3794] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1952.954438][ T3865] hsr_slave_0: entered promiscuous mode [ 1952.959183][ T3865] hsr_slave_1: entered promiscuous mode [ 1952.960844][ T3865] debugfs: 'hsr0' already exists in 'hsr' [ 1952.960866][ T3865] Cannot create hsr debugfs directory [ 1953.030408][ T3794] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1953.128975][ T3794] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1953.204170][T24083] Bluetooth: hci0: command tx timeout [ 1953.285722][T24083] Bluetooth: hci1: command tx timeout [ 1953.320540][T25087] bridge_slave_1: left allmulticast mode [ 1953.320570][T25087] bridge_slave_1: left promiscuous mode [ 1953.320776][T25087] bridge0: port 2(bridge_slave_1) entered disabled state [ 1953.331511][T25087] bridge_slave_0: left allmulticast mode [ 1953.331541][T25087] bridge_slave_0: left promiscuous mode [ 1953.331742][T25087] bridge0: port 1(bridge_slave_0) entered disabled state [ 1953.369646][T25087] bridge_slave_1: left allmulticast mode [ 1953.369678][T25087] bridge_slave_1: left promiscuous mode [ 1953.369913][T25087] bridge0: port 2(bridge_slave_1) entered disabled state [ 1953.392159][T25087] bridge_slave_0: left allmulticast mode [ 1953.392189][T25087] bridge_slave_0: left promiscuous mode [ 1953.392975][T25087] bridge0: port 1(bridge_slave_0) entered disabled state [ 1953.640338][T25087] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1953.654148][T25087] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1953.655926][T25087] bond0 (unregistering): Released all slaves [ 1953.872984][T25087] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1953.875991][T25087] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1953.877880][T25087] bond0 (unregistering): Released all slaves [ 1954.187887][ T3752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1954.234881][ T3751] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1954.252051][ T3751] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1954.281803][ T3751] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1954.295141][ T3751] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1954.337552][ T3752] 8021q: adding VLAN 0 to HW filter on device team0 [ 1954.337967][ T3751] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1954.350804][ T3751] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1954.355671][ T3751] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1954.377751][ T3751] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1954.397249][T24083] Bluetooth: hci2: command tx timeout [ 1954.420452][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 1954.420578][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1954.469949][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 1954.470034][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1954.580036][T25087] hsr_slave_0: left promiscuous mode [ 1954.580836][T25087] hsr_slave_1: left promiscuous mode [ 1954.581762][T25087] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1954.581785][T25087] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1954.582667][T25087] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1954.582688][T25087] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1954.604667][T25087] hsr_slave_0: left promiscuous mode [ 1954.612583][T25087] hsr_slave_1: left promiscuous mode [ 1954.614439][T25087] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1954.614463][T25087] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1954.616514][T25087] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1954.617372][T25087] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1954.661676][T25087] veth1_macvtap: left promiscuous mode [ 1954.661720][T25087] veth0_macvtap: left promiscuous mode [ 1954.661851][T25087] veth1_vlan: left promiscuous mode [ 1954.661924][T25087] veth0_vlan: left promiscuous mode [ 1954.687283][T25087] veth1_macvtap: left promiscuous mode [ 1954.687322][T25087] veth0_macvtap: left promiscuous mode [ 1954.687427][T25087] veth1_vlan: left promiscuous mode [ 1954.687498][T25087] veth0_vlan: left promiscuous mode [ 1954.874744][T24083] Bluetooth: hci3: command tx timeout [ 1955.120222][T25087] team0 (unregistering): Port device team_slave_1 removed [ 1955.131264][T25087] team0 (unregistering): Port device team_slave_0 removed [ 1955.352044][T25087] team0 (unregistering): Port device team_slave_1 removed [ 1955.365278][T25087] team0 (unregistering): Port device team_slave_0 removed [ 1955.537237][ T3794] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1955.557281][ T3794] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1955.558272][ T3794] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1955.567520][ T3794] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1955.579181][ T3794] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1955.589006][ T3794] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1955.594725][ T3794] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1955.606211][ T3794] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1955.656088][ T3752] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1956.113071][ T3751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1956.203743][ T3751] 8021q: adding VLAN 0 to HW filter on device team0 [ 1956.239283][ T3794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1956.264595][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 1956.264718][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1956.319726][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 1956.319856][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1956.466716][T24083] Bluetooth: hci2: command tx timeout [ 1956.482519][ T3794] 8021q: adding VLAN 0 to HW filter on device team0 [ 1956.507400][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 1956.507519][ T3316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1956.561111][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 1956.561235][ T3316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1956.581503][ T3865] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1956.597308][ T3865] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1956.613338][ T3865] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1956.627941][ T3865] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1956.643141][ T3865] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1956.659233][ T3865] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1956.660130][ T3865] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1956.684022][ T3865] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1956.744408][ T3752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1957.000833][ T3752] veth0_vlan: entered promiscuous mode [ 1957.020885][ T3752] veth1_vlan: entered promiscuous mode [ 1957.086270][ T3865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1957.161417][ T3752] veth0_macvtap: entered promiscuous mode [ 1957.171242][ T3865] 8021q: adding VLAN 0 to HW filter on device team0 [ 1957.189743][ T3752] veth1_macvtap: entered promiscuous mode [ 1957.215396][ T1111] bridge0: port 1(bridge_slave_0) entered blocking state [ 1957.215518][ T1111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1957.250603][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 1957.250728][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1957.330214][ T3752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1957.388513][ T3752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1957.546535][ T1111] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1957.645045][T25087] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1957.646028][T25087] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1957.830943][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1957.830969][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1957.967289][ T3794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1958.014612][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1958.014639][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1958.027785][ T3751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1958.028711][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1958.173752][ T3794] veth0_vlan: entered promiscuous mode [ 1958.211622][ T3751] veth0_vlan: entered promiscuous mode [ 1958.216604][ T3794] veth1_vlan: entered promiscuous mode [ 1958.256214][ T4045] hub 1-0:1.0: USB hub found [ 1958.263451][ T4045] hub 1-0:1.0: 1 port detected [ 1958.286258][ T3751] veth1_vlan: entered promiscuous mode [ 1958.390807][ T4049] FAULT_INJECTION: forcing a failure. [ 1958.390807][ T4049] name failslab, interval 1, probability 0, space 0, times 0 [ 1958.390877][ T4049] CPU: 0 UID: 0 PID: 4049 Comm: syz.1.3653 Tainted: G L syzkaller #0 PREEMPT(full) [ 1958.390915][ T4049] Tainted: [L]=SOFTLOCKUP [ 1958.390925][ T4049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1958.390941][ T4049] Call Trace: [ 1958.390950][ T4049] [ 1958.390961][ T4049] dump_stack_lvl+0x100/0x190 [ 1958.391003][ T4049] should_fail_ex.cold+0x5/0xa [ 1958.391037][ T4049] should_failslab+0xc2/0x120 [ 1958.391075][ T4049] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1958.391108][ T4049] ? mas_prev+0xa4/0x100 [ 1958.391150][ T4049] ? vm_area_alloc+0x1f/0x160 [ 1958.391197][ T4049] vm_area_alloc+0x1f/0x160 [ 1958.391236][ T4049] __mmap_region+0x1025/0x32e0 [ 1958.391266][ T4049] ? find_held_lock+0x2b/0x80 [ 1958.391297][ T4049] ? ima_match_policy+0x8c4/0x23f0 [ 1958.391328][ T4049] ? __pfx___mmap_region+0x10/0x10 [ 1958.391355][ T4049] ? __lock_acquire+0x5c0/0x1f40 [ 1958.391414][ T4049] ? __lock_acquire+0x5c0/0x1f40 [ 1958.391454][ T4049] ? find_held_lock+0x2b/0x80 [ 1958.391484][ T4049] ? process_measurement+0x4c8/0x2350 [ 1958.391522][ T4049] ? process_measurement+0x4c8/0x2350 [ 1958.391560][ T4049] ? down_write+0x146/0x1f0 [ 1958.391630][ T4049] ? lock_acquire+0x1d1/0x380 [ 1958.391667][ T4049] ? process_measurement+0x1567/0x2350 [ 1958.391764][ T4049] mmap_region+0x5a8/0x6d0 [ 1958.391799][ T4049] ? __pfx_mmap_region+0x10/0x10 [ 1958.391829][ T4049] ? shmem_mapping+0xd/0x50 [ 1958.391859][ T4049] ? __pfx_memfd_check_seals_mmap+0x10/0x10 [ 1958.391890][ T4049] ? bpf_lsm_mmap_addr+0x9/0x30 [ 1958.391929][ T4049] ? security_mmap_addr+0x71/0x1e0 [ 1958.391956][ T4049] ? __get_unmapped_area+0x255/0x3e0 [ 1958.391994][ T4049] do_mmap+0x12c7/0x1c30 [ 1958.392035][ T4049] ? lock_acquire+0x1d1/0x380 [ 1958.392073][ T4049] ? __pfx_do_mmap+0x10/0x10 [ 1958.392110][ T4049] ? __pfx___might_resched+0x10/0x10 [ 1958.392151][ T4049] ? ima_file_mmap+0x1c4/0x1f0 [ 1958.392196][ T4049] ? __pfx_down_write_killable+0x10/0x10 [ 1958.392239][ T4049] vm_mmap_pgoff+0x28d/0x470 [ 1958.392280][ T4049] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1958.392311][ T4049] ? __fget_files+0x215/0x3d0 [ 1958.392350][ T4049] ? __fget_files+0x21f/0x3d0 [ 1958.392388][ T4049] ksys_mmap_pgoff+0x3cb/0x610 [ 1958.392428][ T4049] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1958.392461][ T4049] ? fput+0x7c/0x100 [ 1958.392498][ T4049] ? ksys_write+0x1ac/0x250 [ 1958.392528][ T4049] ? __pfx_ksys_write+0x10/0x10 [ 1958.392563][ T4049] __x64_sys_mmap+0x125/0x190 [ 1958.392594][ T4049] do_syscall_64+0x121/0x770 [ 1958.392629][ T4049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1958.392657][ T4049] RIP: 0033:0x7f4679f9e159 [ 1958.392680][ T4049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1958.392705][ T4049] RSP: 002b:00007f46781d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1958.392731][ T4049] RAX: ffffffffffffffda RBX: 00007f467a226360 RCX: 00007f4679f9e159 [ 1958.392749][ T4049] RDX: 0000000000000007 RSI: 00000000003fffff RDI: 0000000000000000 [ 1958.392765][ T4049] RBP: 00007f46781d5090 R08: 00000000000000dd R09: 0000000000000000 [ 1958.392782][ T4049] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 1958.392798][ T4049] R13: 00007f467a2263f8 R14: 00007f467a226360 R15: 00007ffe87466c98 [ 1958.392835][ T4049] [ 1958.512842][ T3794] veth0_macvtap: entered promiscuous mode [ 1958.541044][T24083] Bluetooth: hci2: command tx timeout [ 1958.644822][ T3794] veth1_macvtap: entered promiscuous mode [ 1958.677685][ T3865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1958.758586][ T3751] veth0_macvtap: entered promiscuous mode [ 1958.788616][ T3751] veth1_macvtap: entered promiscuous mode [ 1958.801830][ T3794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1958.832695][ T3794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1958.858383][ T3751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1958.882469][ T3865] veth0_vlan: entered promiscuous mode [ 1958.889584][ T3751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1958.899869][ T3865] veth1_vlan: entered promiscuous mode [ 1958.914362][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1958.934520][ T3316] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1958.935494][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1958.935908][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1958.944538][ T3316] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1958.944599][ T3316] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1958.944644][ T3316] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1958.944688][ T3316] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1959.276138][ T3865] veth0_macvtap: entered promiscuous mode [ 1959.280582][T25087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1959.280606][T25087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1959.334482][ T3865] veth1_macvtap: entered promiscuous mode [ 1959.384458][T25087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1959.384482][T25087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1959.598665][ T4063] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1959.598682][ T4063] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1959.757804][ T4066] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1959.757821][ T4066] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1959.762433][ T3865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1959.798015][ T3865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1959.848928][ T4063] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1959.848984][ T4063] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1959.849038][ T4063] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1960.044968][ T4070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1960.045005][ T4070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1960.092720][ T4070] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1960.215845][ T4065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1960.215862][ T4065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1960.416127][ T4082] ubi: mtd0 is already attached to ubi0 [ 1961.736577][ T4103] FAULT_INJECTION: forcing a failure. [ 1961.736577][ T4103] name failslab, interval 1, probability 0, space 0, times 0 [ 1961.736619][ T4103] CPU: 1 UID: 0 PID: 4103 Comm: syz.2.3661 Tainted: G L syzkaller #0 PREEMPT(full) [ 1961.736656][ T4103] Tainted: [L]=SOFTLOCKUP [ 1961.736666][ T4103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1961.736682][ T4103] Call Trace: [ 1961.736690][ T4103] [ 1961.736701][ T4103] dump_stack_lvl+0x100/0x190 [ 1961.736741][ T4103] should_fail_ex.cold+0x5/0xa [ 1961.736776][ T4103] should_failslab+0xc2/0x120 [ 1961.736815][ T4103] __kmalloc_cache_noprof+0x91/0x6d0 [ 1961.736844][ T4103] ? find_held_lock+0x2b/0x80 [ 1961.736883][ T4103] ? alloc_pipe_info+0x10e/0x590 [ 1961.736923][ T4103] alloc_pipe_info+0x10e/0x590 [ 1961.736961][ T4103] splice_direct_to_actor+0x78f/0xa30 [ 1961.736997][ T4103] ? __lock_acquire+0x5c0/0x1f40 [ 1961.737034][ T4103] ? __pfx_direct_splice_actor+0x10/0x10 [ 1961.737068][ T4103] ? __pfx_aa_file_perm+0x10/0x10 [ 1961.737100][ T4103] ? lock_acquire+0x1d1/0x380 [ 1961.737135][ T4103] ? get_pid_task+0x2a/0x250 [ 1961.737164][ T4103] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1961.737205][ T4103] ? lock_acquire+0x1d1/0x380 [ 1961.737245][ T4103] do_splice_direct+0x174/0x240 [ 1961.737282][ T4103] ? __pfx_do_splice_direct+0x10/0x10 [ 1961.737322][ T4103] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1961.737363][ T4103] ? rw_verify_area+0xce/0x6d0 [ 1961.737394][ T4103] do_sendfile+0xadc/0xe20 [ 1961.737430][ T4103] ? __pfx_do_sendfile+0x10/0x10 [ 1961.737457][ T4103] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1961.737492][ T4103] ? __fget_files+0x21f/0x3d0 [ 1961.737535][ T4103] __x64_sys_sendfile64+0x1d8/0x220 [ 1961.737575][ T4103] ? ksys_write+0x1ac/0x250 [ 1961.737605][ T4103] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1961.737653][ T4103] do_syscall_64+0x121/0x770 [ 1961.737687][ T4103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1961.737712][ T4103] RIP: 0033:0x7fb8b799e159 [ 1961.737734][ T4103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1961.737777][ T4103] RSP: 002b:00007fb8b8793028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1961.737802][ T4103] RAX: ffffffffffffffda RBX: 00007fb8b7c26180 RCX: 00007fb8b799e159 [ 1961.737819][ T4103] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 1961.737833][ T4103] RBP: 00007fb8b8793090 R08: 0000000000000000 R09: 0000000000000000 [ 1961.737848][ T4103] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1961.737864][ T4103] R13: 00007fb8b7c26218 R14: 00007fb8b7c26180 R15: 00007fff1de63b88 [ 1961.737908][ T4103] [ 1962.441735][ T4118] hub 1-0:1.0: USB hub found [ 1962.442870][ T4118] hub 1-0:1.0: 1 port detected [ 1963.931850][ T4147] hub 1-0:1.0: USB hub found [ 1963.932254][ T4147] hub 1-0:1.0: 1 port detected [ 1964.588989][ T4161] ubi: mtd0 is already attached to ubi0 [ 1965.925346][ T4186] hub 1-0:1.0: USB hub found [ 1965.933951][ T4186] hub 1-0:1.0: 1 port detected [ 1969.554458][ T4254] ubi: mtd0 is already attached to ubi0 [ 1971.833641][ T4064] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1971.845504][ T4064] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1971.847046][ T4064] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1971.866568][ T4064] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1971.875758][ T4064] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1971.920215][ T4096] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1972.083712][ T4096] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1972.223475][ T4096] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1972.342569][ T4096] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1972.431402][ T4302] hub 1-0:1.0: USB hub found [ 1972.433030][ T4302] hub 1-0:1.0: 1 port detected [ 1973.380229][ T4096] bridge_slave_1: left allmulticast mode [ 1973.380251][ T4096] bridge_slave_1: left promiscuous mode [ 1973.380391][ T4096] bridge0: port 2(bridge_slave_1) entered disabled state [ 1973.383808][ T4096] bridge_slave_0: left allmulticast mode [ 1973.383827][ T4096] bridge_slave_0: left promiscuous mode [ 1973.383953][ T4096] bridge0: port 1(bridge_slave_0) entered disabled state [ 1973.541804][ T4096] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1973.543685][ T4096] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1973.544754][ T4096] bond0 (unregistering): Released all slaves [ 1973.945614][ T4096] hsr_slave_0: left promiscuous mode [ 1973.951194][ T4096] hsr_slave_1: left promiscuous mode [ 1973.952166][ T4096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1973.952189][ T4096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1973.975586][ T4068] Bluetooth: hci1: command tx timeout [ 1973.987865][ T4096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1973.987889][ T4096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1974.043254][ T4096] veth1_macvtap: left promiscuous mode [ 1974.043299][ T4096] veth0_macvtap: left promiscuous mode [ 1974.043409][ T4096] veth1_vlan: left promiscuous mode [ 1974.043484][ T4096] veth0_vlan: left promiscuous mode [ 1974.562948][ T4354] FAULT_INJECTION: forcing a failure. [ 1974.562948][ T4354] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1974.562989][ T4354] CPU: 0 UID: 0 PID: 4354 Comm: syz.0.3690 Tainted: G L syzkaller #0 PREEMPT(full) [ 1974.563025][ T4354] Tainted: [L]=SOFTLOCKUP [ 1974.563034][ T4354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1974.563050][ T4354] Call Trace: [ 1974.563058][ T4354] [ 1974.563068][ T4354] dump_stack_lvl+0x100/0x190 [ 1974.563108][ T4354] should_fail_ex.cold+0x5/0xa [ 1974.563145][ T4354] _copy_to_user+0x32/0xd0 [ 1974.563186][ T4354] keyctl_capabilities+0x5a/0x160 [ 1974.563231][ T4354] __do_sys_keyctl+0x427/0x5a0 [ 1974.563272][ T4354] do_syscall_64+0x121/0x770 [ 1974.563306][ T4354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1974.563334][ T4354] RIP: 0033:0x7fa57279e159 [ 1974.563356][ T4354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1974.563381][ T4354] RSP: 002b:00007fa57369e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1974.563408][ T4354] RAX: ffffffffffffffda RBX: 00007fa572a26450 RCX: 00007fa57279e159 [ 1974.563426][ T4354] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 000000000000001f [ 1974.563443][ T4354] RBP: 00007fa57369e090 R08: 00000000000003ff R09: 0000000000000000 [ 1974.563460][ T4354] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 1974.563476][ T4354] R13: 00007fa572a264e8 R14: 00007fa572a26450 R15: 00007ffebc563ef8 [ 1974.563519][ T4354] [ 1974.745266][ T4357] netlink: 5324 bytes leftover after parsing attributes in process `syz.2.3688'. [ 1974.787123][ T4096] team0 (unregistering): Port device team_slave_1 removed [ 1974.812945][ T4096] team0 (unregistering): Port device team_slave_0 removed [ 1975.125514][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1975.817434][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1975.817503][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.044685][ T4068] Bluetooth: hci1: command tx timeout [ 1976.352289][ T4397] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3692'. [ 1976.352600][ T4395] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3692'. [ 1976.640232][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1976.736069][ T4284] bridge0: port 1(bridge_slave_0) entered blocking state [ 1976.736234][ T4284] bridge0: port 1(bridge_slave_0) entered disabled state [ 1976.736396][ T4284] bridge_slave_0: entered allmulticast mode [ 1976.738425][ T4284] bridge_slave_0: entered promiscuous mode [ 1977.002493][ T4284] bridge0: port 2(bridge_slave_1) entered blocking state [ 1977.002654][ T4284] bridge0: port 2(bridge_slave_1) entered disabled state [ 1977.002808][ T4284] bridge_slave_1: entered allmulticast mode [ 1977.004644][ T4284] bridge_slave_1: entered promiscuous mode [ 1977.454757][ T4284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1977.461869][ T4284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1977.802173][ T4284] team0: Port device team_slave_0 added [ 1977.868277][ T4284] team0: Port device team_slave_1 added [ 1977.979182][ T5280] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1978.020220][ T4284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1978.020240][ T4284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1978.020269][ T4284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1978.022190][ T4284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1978.022208][ T4284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1978.022239][ T4284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1978.118396][ T4068] Bluetooth: hci1: command tx timeout [ 1978.250627][ T4284] hsr_slave_0: entered promiscuous mode [ 1978.255537][ T4284] hsr_slave_1: entered promiscuous mode [ 1978.256234][ T4284] debugfs: 'hsr0' already exists in 'hsr' [ 1978.256255][ T4284] Cannot create hsr debugfs directory [ 1980.187352][ T4068] Bluetooth: hci1: command tx timeout [ 1982.047218][ T4284] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1982.055181][ T4284] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1982.057405][ T4284] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1982.079121][ T4284] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1982.083981][ T4284] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1982.107043][ T4284] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1982.302821][ T4284] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1982.316023][ T4284] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1982.948463][ T4547] netlink: 5324 bytes leftover after parsing attributes in process `syz.2.3700'. [ 1983.986935][ T4284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1984.029696][ T4284] 8021q: adding VLAN 0 to HW filter on device team0 [ 1984.047676][ T4070] bridge0: port 1(bridge_slave_0) entered blocking state [ 1984.047803][ T4070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1984.081883][ T4066] bridge0: port 2(bridge_slave_1) entered blocking state [ 1984.081997][ T4066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1984.307842][ T4284] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1984.724051][ T4063] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1985.055305][ T4064] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1985.058063][ T4064] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1985.065699][ T4064] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1985.085163][ T4064] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1985.085852][ T4064] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1985.290015][ T4063] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1985.593510][ T4063] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1985.890920][ T4063] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1986.576191][ T4630] FAULT_INJECTION: forcing a failure. [ 1986.576191][ T4630] name failslab, interval 1, probability 0, space 0, times 0 [ 1986.576234][ T4630] CPU: 1 UID: 0 PID: 4630 Comm: syz.0.3705 Tainted: G L syzkaller #0 PREEMPT(full) [ 1986.576272][ T4630] Tainted: [L]=SOFTLOCKUP [ 1986.576282][ T4630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1986.576299][ T4630] Call Trace: [ 1986.576308][ T4630] [ 1986.576318][ T4630] dump_stack_lvl+0x100/0x190 [ 1986.576358][ T4630] should_fail_ex.cold+0x5/0xa [ 1986.576392][ T4630] should_failslab+0xc2/0x120 [ 1986.576430][ T4630] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1986.576465][ T4630] ? do_getname+0x35/0x390 [ 1986.576493][ T4630] do_getname+0x35/0x390 [ 1986.576523][ T4630] do_sys_openat2+0xc7/0x1e0 [ 1986.576563][ T4630] ? __pfx_do_sys_openat2+0x10/0x10 [ 1986.576605][ T4630] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1986.576640][ T4630] ? __fget_files+0x21f/0x3d0 [ 1986.576679][ T4630] __x64_sys_openat+0x12d/0x210 [ 1986.576703][ T4630] ? __pfx___x64_sys_openat+0x10/0x10 [ 1986.576727][ T4630] ? ksys_write+0x1ac/0x250 [ 1986.576768][ T4630] do_syscall_64+0x121/0x770 [ 1986.576803][ T4630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1986.576832][ T4630] RIP: 0033:0x7fa57279e159 [ 1986.576853][ T4630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1986.576884][ T4630] RSP: 002b:00007fa5736bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1986.576910][ T4630] RAX: ffffffffffffffda RBX: 00007fa572a26360 RCX: 00007fa57279e159 [ 1986.576929][ T4630] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1986.576946][ T4630] RBP: 00007fa5736bf090 R08: 0000000000000000 R09: 0000000000000000 [ 1986.576963][ T4630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1986.576979][ T4630] R13: 00007fa572a263f8 R14: 00007fa572a26360 R15: 00007ffebc563ef8 [ 1986.577016][ T4630] [ 1986.682539][ T4063] bridge_slave_1: left allmulticast mode [ 1986.682569][ T4063] bridge_slave_1: left promiscuous mode [ 1986.682793][ T4063] bridge0: port 2(bridge_slave_1) entered disabled state [ 1986.709858][ T4063] bridge_slave_0: left allmulticast mode [ 1986.709887][ T4063] bridge_slave_0: left promiscuous mode [ 1986.710095][ T4063] bridge0: port 1(bridge_slave_0) entered disabled state [ 1987.039672][ T4063] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1987.042599][ T4063] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1987.044323][ T4063] bond0 (unregistering): Released all slaves [ 1987.075228][ T4284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1987.188081][ T4068] Bluetooth: hci2: command tx timeout [ 1987.391331][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1987.613409][ T4063] hsr_slave_0: left promiscuous mode [ 1987.614183][ T4063] hsr_slave_1: left promiscuous mode [ 1987.617342][ T4063] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1987.617365][ T4063] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1987.621882][ T4063] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1987.621903][ T4063] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1987.636308][ T4063] veth1_macvtap: left promiscuous mode [ 1987.636350][ T4063] veth0_macvtap: left promiscuous mode [ 1987.636475][ T4063] veth1_vlan: left promiscuous mode [ 1987.636545][ T4063] veth0_vlan: left promiscuous mode [ 1987.897788][ T4063] team0 (unregistering): Port device team_slave_1 removed [ 1987.927403][ T4063] team0 (unregistering): Port device team_slave_0 removed [ 1988.365557][ T4603] bridge0: port 1(bridge_slave_0) entered blocking state [ 1988.365667][ T4603] bridge0: port 1(bridge_slave_0) entered disabled state [ 1988.365830][ T4603] bridge_slave_0: entered allmulticast mode [ 1988.370401][ T4603] bridge_slave_0: entered promiscuous mode [ 1988.426516][ T4603] bridge0: port 2(bridge_slave_1) entered blocking state [ 1988.426669][ T4603] bridge0: port 2(bridge_slave_1) entered disabled state [ 1988.426804][ T4603] bridge_slave_1: entered allmulticast mode [ 1988.429026][ T4603] bridge_slave_1: entered promiscuous mode [ 1988.518824][ T4284] veth0_vlan: entered promiscuous mode [ 1988.534247][ T4603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1988.543790][ T4603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1988.607586][ T4603] team0: Port device team_slave_0 added [ 1988.617510][ T4284] veth1_vlan: entered promiscuous mode [ 1988.634497][ T4603] team0: Port device team_slave_1 added [ 1988.684445][ T4603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1988.684466][ T4603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1988.684497][ T4603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1988.743405][ T4603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1988.743424][ T4603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1988.743455][ T4603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1988.972493][ T4603] hsr_slave_0: entered promiscuous mode [ 1988.973580][ T4603] hsr_slave_1: entered promiscuous mode [ 1988.974398][ T4603] debugfs: 'hsr0' already exists in 'hsr' [ 1988.974420][ T4603] Cannot create hsr debugfs directory [ 1989.069254][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1989.087153][ T4284] veth0_macvtap: entered promiscuous mode [ 1989.114070][ T4284] veth1_macvtap: entered promiscuous mode [ 1989.207076][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1989.247676][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1989.257849][ T4068] Bluetooth: hci2: command tx timeout [ 1989.306233][ T4078] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1989.306292][ T4078] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1989.306340][ T4078] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1989.306387][ T4078] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1989.796905][ T4078] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1989.796930][ T4078] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1990.094965][ T4065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1990.094998][ T4065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1990.626115][ T4727] FAULT_INJECTION: forcing a failure. [ 1990.626115][ T4727] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 1990.626159][ T4727] CPU: 0 UID: 0 PID: 4727 Comm: syz.1.3684 Tainted: G L syzkaller #0 PREEMPT(full) [ 1990.626197][ T4727] Tainted: [L]=SOFTLOCKUP [ 1990.626207][ T4727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1990.626224][ T4727] Call Trace: [ 1990.626233][ T4727] [ 1990.626243][ T4727] dump_stack_lvl+0x100/0x190 [ 1990.626286][ T4727] should_fail_ex.cold+0x5/0xa [ 1990.626317][ T4727] ? prepare_alloc_pages+0x16d/0x5b0 [ 1990.626359][ T4727] should_fail_alloc_page+0xeb/0x140 [ 1990.626401][ T4727] prepare_alloc_pages+0x1f0/0x5b0 [ 1990.626439][ T4727] ? find_held_lock+0x2b/0x80 [ 1990.626475][ T4727] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 1990.626513][ T4727] ? mark_held_locks+0x40/0x70 [ 1990.626551][ T4727] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 1990.626592][ T4727] ? lockdep_hardirqs_on+0x7d/0x110 [ 1990.626625][ T4727] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 1990.626668][ T4727] ? rcu_is_watching+0x13/0xc0 [ 1990.626699][ T4727] ? trace_sched_exit_tp+0x120/0x160 [ 1990.626728][ T4727] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1990.626774][ T4727] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 1990.626952][ T4727] ? find_held_lock+0x2b/0x80 [ 1990.626990][ T4727] ? preempt_schedule_thunk+0x16/0x40 [ 1990.627021][ T4727] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1990.627079][ T4727] ? policy_nodemask+0xed/0x4f0 [ 1990.627160][ T4727] alloc_pages_mpol+0x201/0x550 [ 1990.627200][ T4727] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1990.627240][ T4727] ? lock_acquire+0x1d1/0x380 [ 1990.627285][ T4727] folio_alloc_mpol_noprof+0x36/0x260 [ 1990.627344][ T4727] vma_alloc_folio_noprof+0xed/0x1d0 [ 1990.627372][ T4727] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1990.627406][ T4727] ? __rcu_read_unlock+0x26a/0x5e0 [ 1990.627450][ T4727] do_anonymous_page+0xac9/0x2050 [ 1990.627488][ T4727] ? __pfx_do_anonymous_page+0x10/0x10 [ 1990.627514][ T4727] ? rcu_read_unlock+0x2d/0xb0 [ 1990.627541][ T4727] ? rcu_read_unlock+0x2d/0xb0 [ 1990.627568][ T4727] ? __pte_offset_map+0x179/0x310 [ 1990.627639][ T4727] __handle_mm_fault+0x1ff3/0x2f60 [ 1990.627674][ T4727] ? lock_vma_under_rcu+0x11d/0x590 [ 1990.627716][ T4727] ? __pfx___handle_mm_fault+0x10/0x10 [ 1990.627749][ T4727] ? lock_vma_under_rcu+0x17c/0x590 [ 1990.627812][ T4727] handle_mm_fault+0x363/0xa20 [ 1990.627845][ T4727] do_user_addr_fault+0x59c/0x12f0 [ 1990.627896][ T4727] exc_page_fault+0x6f/0xd0 [ 1990.627936][ T4727] asm_exc_page_fault+0x26/0x30 [ 1990.627963][ T4727] RIP: 0033:0x7f6fce85f6cb [ 1990.627987][ T4727] Code: 00 00 00 48 8d 3d 5d b1 1a 00 48 89 c1 31 c0 e8 0b 2e ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 91 b1 1a 00 48 89 34 24 48 8b 14 24 48 8b [ 1990.628013][ T4727] RSP: 002b:00007f6fccb4ffa0 EFLAGS: 00010206 [ 1990.628036][ T4727] RAX: 0000000000000000 RBX: 00007f6fcec26450 RCX: 0000000000000000 [ 1990.628053][ T4727] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000200000000200 [ 1990.628070][ T4727] RBP: 00007f6fccb51090 R08: 0000000000000000 R09: 0000000000000000 [ 1990.628087][ T4727] R10: 0000200000000200 R11: 0000000000000000 R12: 0000000000000001 [ 1990.628103][ T4727] R13: 00007f6fcec264e8 R14: 00007f6fcec26450 R15: 00007ffebca0e6a8 [ 1990.628141][ T4727] [ 1990.675234][ T4727] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1991.196733][ T4603] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1991.200889][ T4603] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1991.203398][ T4603] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1991.230524][ T4603] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1991.325294][ T4068] Bluetooth: hci2: command tx timeout [ 1991.359937][ T4603] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1991.368682][ T4603] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1991.369655][ T4603] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1991.378624][ T4603] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1993.394504][ T4068] Bluetooth: hci2: command tx timeout [ 1993.461252][ T4800] FAULT_INJECTION: forcing a failure. [ 1993.461252][ T4800] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1993.461293][ T4800] CPU: 1 UID: 0 PID: 4800 Comm: syz.0.3713 Tainted: G L syzkaller #0 PREEMPT(full) [ 1993.461329][ T4800] Tainted: [L]=SOFTLOCKUP [ 1993.461340][ T4800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1993.461356][ T4800] Call Trace: [ 1993.461365][ T4800] [ 1993.461376][ T4800] dump_stack_lvl+0x100/0x190 [ 1993.461416][ T4800] should_fail_ex.cold+0x5/0xa [ 1993.461449][ T4800] _copy_from_user+0x2e/0xd0 [ 1993.461489][ T4800] copy_msghdr_from_user+0x9f/0x4c0 [ 1993.461526][ T4800] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1993.461566][ T4800] ? _kstrtoull+0x144/0x200 [ 1993.461594][ T4800] ? __pfx__kstrtoull+0x10/0x10 [ 1993.461628][ T4800] ___sys_sendmsg+0x106/0x1e0 [ 1993.461672][ T4800] ? __pfx____sys_sendmsg+0x10/0x10 [ 1993.461718][ T4800] ? __fget_files+0x34/0x3d0 [ 1993.461772][ T4800] __sys_sendmmsg+0x20c/0x440 [ 1993.461802][ T4800] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1993.461828][ T4800] ? ksys_write+0x190/0x250 [ 1993.461887][ T4800] ? fput+0x7c/0x100 [ 1993.461923][ T4800] ? ksys_write+0x1ac/0x250 [ 1993.461952][ T4800] ? __pfx_ksys_write+0x10/0x10 [ 1993.461990][ T4800] __x64_sys_sendmmsg+0x9c/0x100 [ 1993.462017][ T4800] ? lockdep_hardirqs_on+0x7d/0x110 [ 1993.462049][ T4800] do_syscall_64+0x121/0x770 [ 1993.462083][ T4800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1993.462111][ T4800] RIP: 0033:0x7fa57279e159 [ 1993.462131][ T4800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1993.462157][ T4800] RSP: 002b:00007fa573743028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1993.462183][ T4800] RAX: ffffffffffffffda RBX: 00007fa572a25fa0 RCX: 00007fa57279e159 [ 1993.462198][ T4800] RDX: 0000000000000002 RSI: 0000200000000400 RDI: 0000000000000002 [ 1993.462214][ T4800] RBP: 00007fa573743090 R08: 0000000000000000 R09: 0000000000000000 [ 1993.462230][ T4800] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001 [ 1993.462246][ T4800] R13: 00007fa572a26038 R14: 00007fa572a25fa0 R15: 00007ffebc563ef8 [ 1993.462281][ T4800] [ 1994.463116][ T4811] FAULT_INJECTION: forcing a failure. [ 1994.463116][ T4811] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1994.463158][ T4811] CPU: 1 UID: 0 PID: 4811 Comm: syz.0.3714 Tainted: G L syzkaller #0 PREEMPT(full) [ 1994.463193][ T4811] Tainted: [L]=SOFTLOCKUP [ 1994.463202][ T4811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1994.463217][ T4811] Call Trace: [ 1994.463227][ T4811] [ 1994.463236][ T4811] dump_stack_lvl+0x100/0x190 [ 1994.463278][ T4811] should_fail_ex.cold+0x5/0xa [ 1994.463312][ T4811] get_futex_key+0x1d0/0x14f0 [ 1994.463346][ T4811] ? __pfx_get_futex_key+0x10/0x10 [ 1994.463376][ T4811] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1994.463418][ T4811] futex_wake+0xf4/0x5e0 [ 1994.463457][ T4811] ? __pfx_futex_wake+0x10/0x10 [ 1994.463494][ T4811] ? lock_acquire+0x1d1/0x380 [ 1994.463531][ T4811] ? detach_task_ctx_data+0x83/0x490 [ 1994.463565][ T4811] do_futex+0x2b2/0x440 [ 1994.463594][ T4811] ? __pfx_do_futex+0x10/0x10 [ 1994.463619][ T4811] ? __might_fault+0xc5/0x140 [ 1994.463653][ T4811] mm_exit_exec_release+0x256/0x2f0 [ 1994.463683][ T4811] do_exit+0x707/0x2a50 [ 1994.463710][ T4811] ? core_sys_select+0x358/0xbb0 [ 1994.463747][ T4811] ? __pfx_do_exit+0x10/0x10 [ 1994.463776][ T4811] ? do_raw_spin_lock+0x128/0x260 [ 1994.463802][ T4811] ? find_held_lock+0x2b/0x80 [ 1994.463832][ T4811] ? get_signal+0x7e0/0x21e0 [ 1994.463874][ T4811] do_group_exit+0xd5/0x2a0 [ 1994.463907][ T4811] get_signal+0x1ec7/0x21e0 [ 1994.463965][ T4811] ? __pfx_get_signal+0x10/0x10 [ 1994.464016][ T4811] arch_do_signal_or_restart+0x91/0x7a0 [ 1994.464063][ T4811] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1994.464122][ T4811] exit_to_user_mode_loop+0x139/0x700 [ 1994.464149][ T4811] ? rcu_is_watching+0x13/0xc0 [ 1994.464183][ T4811] do_syscall_64+0x603/0x770 [ 1994.464219][ T4811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1994.464247][ T4811] RIP: 0033:0x7fa57279e159 [ 1994.464270][ T4811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1994.464296][ T4811] RSP: 002b:00007fa5736bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 1994.464323][ T4811] RAX: fffffffffffffdfe RBX: 00007fa572a26360 RCX: 00007fa57279e159 [ 1994.464342][ T4811] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 1994.464358][ T4811] RBP: 00007fa5736bf090 R08: 0000000000000000 R09: 0000000000000000 [ 1994.464375][ T4811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1994.464392][ T4811] R13: 00007fa572a263f8 R14: 00007fa572a26360 R15: 00007ffebc563ef8 [ 1994.464429][ T4811] [ 1994.751847][ T4603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1995.017645][ T4829] FAULT_INJECTION: forcing a failure. [ 1995.017645][ T4829] name failslab, interval 1, probability 0, space 0, times 0 [ 1995.017688][ T4829] CPU: 0 UID: 0 PID: 4829 Comm: syz.2.3715 Tainted: G L syzkaller #0 PREEMPT(full) [ 1995.017727][ T4829] Tainted: [L]=SOFTLOCKUP [ 1995.017736][ T4829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1995.017753][ T4829] Call Trace: [ 1995.017762][ T4829] [ 1995.017773][ T4829] dump_stack_lvl+0x100/0x190 [ 1995.017815][ T4829] should_fail_ex.cold+0x5/0xa [ 1995.017850][ T4829] should_failslab+0xc2/0x120 [ 1995.017890][ T4829] __kmalloc_noprof+0xfc/0x840 [ 1995.017923][ T4829] ? rcu_is_watching+0x13/0xc0 [ 1995.017952][ T4829] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1995.018088][ T4829] tomoyo_realpath_from_path+0xb6/0x690 [ 1995.018129][ T4829] tomoyo_path_number_perm+0x23c/0x580 [ 1995.018155][ T4829] ? tomoyo_path_number_perm+0x22e/0x580 [ 1995.018186][ T4829] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1995.018225][ T4829] ? __lock_acquire+0x5c0/0x1f40 [ 1995.018279][ T4829] ? __fget_files+0x34/0x3d0 [ 1995.018312][ T4829] ? find_held_lock+0x2b/0x80 [ 1995.018342][ T4829] ? hook_file_ioctl_common+0x140/0x440 [ 1995.018419][ T4829] ? __fget_files+0x21f/0x3d0 [ 1995.018459][ T4829] security_file_ioctl+0xd3/0x230 [ 1995.018490][ T4829] __x64_sys_ioctl+0xb7/0x210 [ 1995.018523][ T4829] do_syscall_64+0x121/0x770 [ 1995.018560][ T4829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1995.018589][ T4829] RIP: 0033:0x7fb8b799e159 [ 1995.018612][ T4829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1995.018638][ T4829] RSP: 002b:00007fb8b5bb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1995.018665][ T4829] RAX: ffffffffffffffda RBX: 00007fb8b7c26450 RCX: 00007fb8b799e159 [ 1995.018683][ T4829] RDX: 0000000000000000 RSI: 00000000000054a2 RDI: 0000000000000006 [ 1995.018700][ T4829] RBP: 00007fb8b5bb4090 R08: 0000000000000000 R09: 0000000000000000 [ 1995.018717][ T4829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1995.018734][ T4829] R13: 00007fb8b7c264e8 R14: 00007fb8b7c26450 R15: 00007fff1de63b88 [ 1995.018770][ T4829] [ 1995.020432][ T4829] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1995.278513][ T4603] 8021q: adding VLAN 0 to HW filter on device team0 [ 1995.488473][ T4078] bridge0: port 1(bridge_slave_0) entered blocking state [ 1995.488567][ T4078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1995.600970][ T4066] bridge0: port 2(bridge_slave_1) entered blocking state [ 1995.601039][ T4066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1996.592114][ T4096] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1996.722189][ T4064] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1996.724454][ T4064] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1996.725355][ T4064] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1996.726133][ T4064] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1996.726708][ T4064] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1996.923585][ T4096] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1997.045201][ T4096] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1997.142582][ T4096] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1997.457192][ T4096] bridge_slave_1: left allmulticast mode [ 1997.457223][ T4096] bridge_slave_1: left promiscuous mode [ 1997.457476][ T4096] bridge0: port 2(bridge_slave_1) entered disabled state [ 1997.478402][ T4096] bridge_slave_0: left allmulticast mode [ 1997.478432][ T4096] bridge_slave_0: left promiscuous mode [ 1997.478654][ T4096] bridge0: port 1(bridge_slave_0) entered disabled state [ 1997.875995][ T4096] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1997.878882][ T4096] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1997.880615][ T4096] bond0 (unregistering): Released all slaves [ 1997.962566][ T4603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1998.147981][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1998.304390][ T4096] hsr_slave_0: left promiscuous mode [ 1998.305353][ T4096] hsr_slave_1: left promiscuous mode [ 1998.306341][ T4096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1998.306363][ T4096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1998.307490][ T4096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1998.307504][ T4096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1998.332678][ T4096] veth1_macvtap: left promiscuous mode [ 1998.332720][ T4096] veth0_macvtap: left promiscuous mode [ 1998.332824][ T4096] veth1_vlan: left promiscuous mode [ 1998.332915][ T4096] veth0_vlan: left promiscuous mode [ 1998.590094][ T4096] team0 (unregistering): Port device team_slave_1 removed [ 1998.614460][ T4096] team0 (unregistering): Port device team_slave_0 removed [ 1998.808112][ T4064] Bluetooth: hci1: command tx timeout [ 1999.511439][ T4603] veth0_vlan: entered promiscuous mode [ 1999.985117][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2 [ 2000.034764][ T4603] veth1_vlan: entered promiscuous mode [ 2000.376706][ T4858] bridge0: port 1(bridge_slave_0) entered blocking state [ 2000.376861][ T4858] bridge0: port 1(bridge_slave_0) entered disabled state [ 2000.377015][ T4858] bridge_slave_0: entered allmulticast mode [ 2000.381649][ T4858] bridge_slave_0: entered promiscuous mode [ 2000.429335][ T4858] bridge0: port 2(bridge_slave_1) entered blocking state [ 2000.429516][ T4858] bridge0: port 2(bridge_slave_1) entered disabled state [ 2000.429660][ T4858] bridge_slave_1: entered allmulticast mode [ 2000.434033][ T4858] bridge_slave_1: entered promiscuous mode [ 2000.663697][ T4858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2000.821326][ T4858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2000.884223][ T4064] Bluetooth: hci1: command tx timeout [ 2000.957224][ T4858] team0: Port device team_slave_0 added [ 2000.958424][ T4603] veth0_macvtap: entered promiscuous mode [ 2001.000455][ T4858] team0: Port device team_slave_1 added [ 2001.075887][ T4603] veth1_macvtap: entered promiscuous mode [ 2001.078458][ T5280] 8021q: adding VLAN 0 to HW filter on device eth3 [ 2001.118097][ T4858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2001.118117][ T4858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2001.118146][ T4858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2001.181839][ T4858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2001.181852][ T4858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2001.181871][ T4858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2001.189542][ T4964] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1901.0.2191063462), cmd(3) [ 2001.359026][ T4858] hsr_slave_0: entered promiscuous mode [ 2001.359728][ T4858] hsr_slave_1: entered promiscuous mode [ 2001.360215][ T4858] debugfs: 'hsr0' already exists in 'hsr' [ 2001.360243][ T4858] Cannot create hsr debugfs directory [ 2001.456462][ T4603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2001.659223][ T4603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2001.915312][ T4063] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2002.119469][ T5000] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(25492.0.2175641370), cmd(3) [ 2002.120197][ T5000] FAULT_INJECTION: forcing a failure. [ 2002.120197][ T5000] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2002.120235][ T5000] CPU: 1 UID: 0 PID: 5000 Comm: syz.0.3725 Tainted: G L syzkaller #0 PREEMPT(full) [ 2002.120272][ T5000] Tainted: [L]=SOFTLOCKUP [ 2002.120282][ T5000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2002.120297][ T5000] Call Trace: [ 2002.120305][ T5000] [ 2002.120316][ T5000] dump_stack_lvl+0x100/0x190 [ 2002.120355][ T5000] should_fail_ex.cold+0x5/0xa [ 2002.120400][ T5000] _copy_to_user+0x32/0xd0 [ 2002.120440][ T5000] keyctl_capabilities+0x5a/0x160 [ 2002.120482][ T5000] __do_sys_keyctl+0x427/0x5a0 [ 2002.120522][ T5000] do_syscall_64+0x121/0x770 [ 2002.120563][ T5000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2002.120591][ T5000] RIP: 0033:0x7fa57279e159 [ 2002.120613][ T5000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2002.120638][ T5000] RSP: 002b:00007fa57369e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 2002.120665][ T5000] RAX: ffffffffffffffda RBX: 00007fa572a26450 RCX: 00007fa57279e159 [ 2002.120684][ T5000] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 000000000000001f [ 2002.120700][ T5000] RBP: 00007fa57369e090 R08: 00000000000003ff R09: 0000000000000000 [ 2002.120717][ T5000] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 2002.120734][ T5000] R13: 00007fa572a264e8 R14: 00007fa572a26450 R15: 00007ffebc563ef8 [ 2002.120771][ T5000] [ 2002.602736][ T5280] 8021q: adding VLAN 0 to HW filter on device eth4 [ 2002.698700][ T4095] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2002.699147][ T4095] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2002.699196][ T4095] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2002.950165][ T4064] Bluetooth: hci1: command tx timeout [ 2003.332560][ T4096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2003.332585][ T4096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2003.563640][ T4096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2003.563666][ T4096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2004.668655][ T4096] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2004.700227][ T4858] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2004.725646][ T4858] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2004.728557][ T4858] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2004.745467][ T4858] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2004.747832][ T4858] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2004.787817][ T4858] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2004.791036][ T4858] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2004.829964][ T4858] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2004.965341][ T4096] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2005.024898][ T4064] Bluetooth: hci1: command tx timeout [ 2005.180903][ T4096] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2005.228821][ T4068] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2005.230400][ T4068] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2005.230936][ T4068] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2005.232134][ T4068] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2005.232661][ T4068] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2005.620573][ T4096] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2005.940844][ T4068] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2005.944319][ T4068] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2005.946496][ T4068] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2005.947452][ T4068] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2005.948568][ T4068] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2006.282559][ T4858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2006.458104][ T4858] 8021q: adding VLAN 0 to HW filter on device team0 [ 2006.560392][ T4096] bridge_slave_1: left allmulticast mode [ 2006.560431][ T4096] bridge_slave_1: left promiscuous mode [ 2006.560652][ T4096] bridge0: port 2(bridge_slave_1) entered disabled state [ 2006.590379][ T4096] bridge_slave_0: left allmulticast mode [ 2006.590410][ T4096] bridge_slave_0: left promiscuous mode [ 2006.590690][ T4096] bridge0: port 1(bridge_slave_0) entered disabled state [ 2006.886906][ T4096] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2006.889724][ T4096] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2006.891506][ T4096] bond0 (unregistering): Released all slaves [ 2006.913593][ T4070] bridge0: port 1(bridge_slave_0) entered blocking state [ 2006.913728][ T4070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2007.071787][ T4070] bridge0: port 2(bridge_slave_1) entered blocking state [ 2007.071909][ T4070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2007.336972][ T4068] Bluetooth: hci0: command tx timeout [ 2007.546817][ T4096] hsr_slave_0: left promiscuous mode [ 2007.547577][ T4096] hsr_slave_1: left promiscuous mode [ 2007.548532][ T4096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2007.548555][ T4096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2007.549435][ T4096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2007.549455][ T4096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2007.593485][ T4096] veth1_macvtap: left promiscuous mode [ 2007.593553][ T4096] veth0_macvtap: left promiscuous mode [ 2007.595352][ T4096] veth1_vlan: left promiscuous mode [ 2007.595441][ T4096] veth0_vlan: left promiscuous mode [ 2007.861854][ T4064] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2007.863107][ T4064] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2007.864591][ T4064] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2007.867601][ T4064] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2007.868156][ T4064] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2008.038650][ T4064] Bluetooth: hci2: command tx timeout [ 2008.045173][ T4096] team0 (unregistering): Port device team_slave_1 removed [ 2008.065751][ T4096] team0 (unregistering): Port device team_slave_0 removed [ 2008.964696][ T5068] bridge0: port 1(bridge_slave_0) entered blocking state [ 2008.967202][ T5068] bridge0: port 1(bridge_slave_0) entered disabled state [ 2008.967349][ T5068] bridge_slave_0: entered allmulticast mode [ 2008.970330][ T5068] bridge_slave_0: entered promiscuous mode [ 2009.010192][ T5068] bridge0: port 2(bridge_slave_1) entered blocking state [ 2009.010344][ T5068] bridge0: port 2(bridge_slave_1) entered disabled state [ 2009.010488][ T5068] bridge_slave_1: entered allmulticast mode [ 2009.012575][ T5068] bridge_slave_1: entered promiscuous mode [ 2009.069778][ T5068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2009.083221][ T5068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2009.257672][ T4096] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2009.285317][ T5068] team0: Port device team_slave_0 added [ 2009.330861][ T5068] team0: Port device team_slave_1 added [ 2009.374189][ T4096] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2009.393106][ T4064] Bluetooth: hci0: command tx timeout [ 2009.516263][ T5068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2009.516284][ T5068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2009.516315][ T5068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2009.612269][ T4096] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2009.624758][ T5068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2009.624777][ T5068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2009.624808][ T5068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2009.723438][ T5088] bridge0: port 1(bridge_slave_0) entered blocking state [ 2009.723614][ T5088] bridge0: port 1(bridge_slave_0) entered disabled state [ 2009.723744][ T5088] bridge_slave_0: entered allmulticast mode [ 2009.725578][ T5088] bridge_slave_0: entered promiscuous mode [ 2009.792166][ T5088] bridge0: port 2(bridge_slave_1) entered blocking state [ 2009.792310][ T5088] bridge0: port 2(bridge_slave_1) entered disabled state [ 2009.792405][ T5088] bridge_slave_1: entered allmulticast mode [ 2009.793450][ T5088] bridge_slave_1: entered promiscuous mode [ 2009.833212][ T4096] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2009.877940][ T5068] hsr_slave_0: entered promiscuous mode [ 2009.884731][ T5068] hsr_slave_1: entered promiscuous mode [ 2009.885438][ T5068] debugfs: 'hsr0' already exists in 'hsr' [ 2009.885459][ T5068] Cannot create hsr debugfs directory [ 2009.929751][ T5088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2009.932864][ T5088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2009.948501][ T4064] Bluetooth: hci3: command tx timeout [ 2010.050206][ T4858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2010.061172][ T5088] team0: Port device team_slave_0 added [ 2010.107673][ T4064] Bluetooth: hci2: command tx timeout [ 2010.113300][ T5088] team0: Port device team_slave_1 added [ 2010.236245][ T5088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2010.236266][ T5088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2010.236296][ T5088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2010.286593][ T5088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2010.286614][ T5088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2010.286644][ T5088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2010.604710][ T5088] hsr_slave_0: entered promiscuous mode [ 2010.606145][ T5088] hsr_slave_1: entered promiscuous mode [ 2010.606912][ T5088] debugfs: 'hsr0' already exists in 'hsr' [ 2010.606934][ T5088] Cannot create hsr debugfs directory [ 2010.687182][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1 [ 2010.756995][ T4096] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2010.881068][ T5131] bridge0: port 1(bridge_slave_0) entered blocking state [ 2010.881250][ T5131] bridge0: port 1(bridge_slave_0) entered disabled state [ 2010.881384][ T5131] bridge_slave_0: entered allmulticast mode [ 2010.886684][ T5131] bridge_slave_0: entered promiscuous mode [ 2010.926338][ T4096] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2010.941479][ T4858] veth0_vlan: entered promiscuous mode [ 2010.946171][ T5131] bridge0: port 2(bridge_slave_1) entered blocking state [ 2010.948880][ T5131] bridge0: port 2(bridge_slave_1) entered disabled state [ 2010.949051][ T5131] bridge_slave_1: entered allmulticast mode [ 2010.950867][ T5131] bridge_slave_1: entered promiscuous mode [ 2011.070897][ T4096] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2011.098372][ T5131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2011.122067][ T4858] veth1_vlan: entered promiscuous mode [ 2011.137240][ T5131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2011.235169][ T4096] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2011.289681][ T5131] team0: Port device team_slave_0 added [ 2011.300896][ T5131] team0: Port device team_slave_1 added [ 2011.411591][ T5131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2011.411612][ T5131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2011.411642][ T5131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2011.434342][ T5131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2011.434362][ T5131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2011.434400][ T5131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2011.462024][ T4064] Bluetooth: hci0: command tx timeout [ 2011.649230][ T5131] hsr_slave_0: entered promiscuous mode [ 2011.652601][ T5131] hsr_slave_1: entered promiscuous mode [ 2011.653923][ T5131] debugfs: 'hsr0' already exists in 'hsr' [ 2011.653945][ T5131] Cannot create hsr debugfs directory [ 2011.657329][ T4858] veth0_macvtap: entered promiscuous mode [ 2011.685199][ T4858] veth1_macvtap: entered promiscuous mode [ 2011.737187][ T4096] bridge_slave_1: left allmulticast mode [ 2011.737220][ T4096] bridge_slave_1: left promiscuous mode [ 2011.737358][ T4096] bridge0: port 2(bridge_slave_1) entered disabled state [ 2011.753586][ T4096] bridge_slave_0: left allmulticast mode [ 2011.753607][ T4096] bridge_slave_0: left promiscuous mode [ 2011.753747][ T4096] bridge0: port 1(bridge_slave_0) entered disabled state [ 2011.783718][ T4096] bridge_slave_1: left allmulticast mode [ 2011.783739][ T4096] bridge_slave_1: left promiscuous mode [ 2011.783870][ T4096] bridge0: port 2(bridge_slave_1) entered disabled state [ 2011.786591][ T4096] bridge_slave_0: left allmulticast mode [ 2011.786610][ T4096] bridge_slave_0: left promiscuous mode [ 2011.786733][ T4096] bridge0: port 1(bridge_slave_0) entered disabled state [ 2011.966155][ T4096] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2011.970950][ T4096] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2011.985538][ T4096] bond0 (unregistering): Released all slaves [ 2012.017652][ T4064] Bluetooth: hci3: command tx timeout [ 2012.082560][ T4096] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2012.084310][ T4096] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2012.085372][ T4096] bond0 (unregistering): Released all slaves [ 2012.163147][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2 [ 2012.176952][ T4064] Bluetooth: hci2: command tx timeout [ 2012.404586][ T4858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2012.559041][ T4858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2012.745229][ T4095] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2012.745797][ T4095] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2012.745844][ T4095] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2012.745888][ T4095] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2012.890029][ T4066] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2012.890053][ T4066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2012.980951][ T4096] hsr_slave_0: left promiscuous mode [ 2012.981727][ T4096] hsr_slave_1: left promiscuous mode [ 2012.985395][ T4096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2012.985420][ T4096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2012.987900][ T4096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2012.987921][ T4096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2013.019188][ T4096] hsr_slave_0: left promiscuous mode [ 2013.026402][ T4096] hsr_slave_1: left promiscuous mode [ 2013.027343][ T4096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2013.027366][ T4096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2013.034323][ T4096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2013.034347][ T4096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2013.069485][ T4096] veth1_macvtap: left promiscuous mode [ 2013.069529][ T4096] veth0_macvtap: left promiscuous mode [ 2013.069654][ T4096] veth1_vlan: left promiscuous mode [ 2013.069729][ T4096] veth0_vlan: left promiscuous mode [ 2013.071504][ T4096] veth1_macvtap: left promiscuous mode [ 2013.071540][ T4096] veth0_macvtap: left promiscuous mode [ 2013.071650][ T4096] veth1_vlan: left promiscuous mode [ 2013.071746][ T4096] veth0_vlan: left promiscuous mode [ 2013.368846][ T4096] team0 (unregistering): Port device team_slave_1 removed [ 2013.387678][ T4096] team0 (unregistering): Port device team_slave_0 removed [ 2013.530260][ T4064] Bluetooth: hci0: command tx timeout [ 2013.606252][ T4096] team0 (unregistering): Port device team_slave_1 removed [ 2013.634591][ T4096] team0 (unregistering): Port device team_slave_0 removed [ 2013.802523][ T4065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2013.802548][ T4065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2013.828133][ T5068] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2013.847634][ T5068] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2013.850405][ T5068] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2013.868122][ T5068] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2013.932781][ T5068] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2013.944328][ T5068] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2013.966179][ T5068] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2013.983037][ T5068] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2014.087346][ T4064] Bluetooth: hci3: command tx timeout [ 2014.246729][ T4064] Bluetooth: hci2: command tx timeout [ 2015.079039][ T5131] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2015.100785][ T5131] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2015.133151][ T5131] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2015.156403][ T5131] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2015.176245][ T5131] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2015.180659][ T5131] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2015.291614][ T5131] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2015.302094][ T5131] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2015.358605][ T5068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2015.491636][ T5088] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2015.505590][ T5088] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2015.512661][ T5088] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2015.529146][ T5088] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2015.536332][ T5068] 8021q: adding VLAN 0 to HW filter on device team0 [ 2015.572490][ T5088] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2015.587646][ T5088] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2015.595721][ T5088] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2015.612898][ T5088] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2015.775336][ T4065] bridge0: port 1(bridge_slave_0) entered blocking state [ 2015.775448][ T4065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2015.892462][ T4065] bridge0: port 2(bridge_slave_1) entered blocking state [ 2015.892587][ T4065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2016.156490][ T4064] Bluetooth: hci3: command tx timeout [ 2016.552755][ T5131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2016.820791][ T5131] 8021q: adding VLAN 0 to HW filter on device team0 [ 2016.839945][ T5088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2016.861668][ T4063] bridge0: port 1(bridge_slave_0) entered blocking state [ 2016.861788][ T4063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2016.905728][ T4066] bridge0: port 2(bridge_slave_1) entered blocking state [ 2016.905851][ T4066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2016.995614][ T5338] batman_adv: Routing algorithm '' is not supported [ 2017.221999][ T5088] 8021q: adding VLAN 0 to HW filter on device team0 [ 2017.321660][ T4095] bridge0: port 1(bridge_slave_0) entered blocking state [ 2017.321729][ T4095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2017.423796][ T4095] bridge0: port 2(bridge_slave_1) entered blocking state [ 2017.423919][ T4095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2017.581323][ T5131] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2017.918407][ T5068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2018.352938][ T5068] veth0_vlan: entered promiscuous mode [ 2018.393735][ T5068] veth1_vlan: entered promiscuous mode [ 2018.665795][ T5393] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 2018.888813][ T5068] veth0_macvtap: entered promiscuous mode [ 2018.966045][ T5068] veth1_macvtap: entered promiscuous mode [ 2019.064462][ T5131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2019.080580][ T5068] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2019.114410][ T5068] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2019.173272][ T4078] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2019.266984][ T5131] veth0_vlan: entered promiscuous mode [ 2019.466124][ T5088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2019.486201][ T5131] veth1_vlan: entered promiscuous mode [ 2019.523320][ T4066] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2019.523344][ T4066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2019.583995][ T4066] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2019.607318][ T4078] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2019.615857][ T4078] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2019.697125][ T4095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2019.697150][ T4095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2020.016923][ T5131] veth0_macvtap: entered promiscuous mode [ 2020.042987][ T5088] veth0_vlan: entered promiscuous mode [ 2020.055004][ T5131] veth1_macvtap: entered promiscuous mode [ 2020.089735][ T5088] veth1_vlan: entered promiscuous mode [ 2020.105121][ T5131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2020.130706][ T5131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2020.291730][ T4078] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2020.292793][ T4078] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2020.338883][ T4096] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2020.339601][ T5088] veth0_macvtap: entered promiscuous mode [ 2020.398208][ T4078] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2020.472258][ T5088] veth1_macvtap: entered promiscuous mode [ 2020.635289][ T5088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2020.655449][ T5431] mmap: syz.1.3736 (5431) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 2020.924737][ T5088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2020.988948][ T4063] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2020.988973][ T4063] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2021.040600][ T5149] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2021.084267][ T5149] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2021.133186][ T4078] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2021.133212][ T4078] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2021.176827][ T4070] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2021.190648][ T4066] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2021.567068][ T5440] FAULT_INJECTION: forcing a failure. [ 2021.567068][ T5440] name failslab, interval 1, probability 0, space 0, times 0 [ 2021.567097][ T5440] CPU: 0 UID: 0 PID: 5440 Comm: syz.2.3737 Tainted: G L syzkaller #0 PREEMPT(full) [ 2021.567119][ T5440] Tainted: [L]=SOFTLOCKUP [ 2021.567125][ T5440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2021.567135][ T5440] Call Trace: [ 2021.567141][ T5440] [ 2021.567148][ T5440] dump_stack_lvl+0x100/0x190 [ 2021.567173][ T5440] should_fail_ex.cold+0x5/0xa [ 2021.567194][ T5440] should_failslab+0xc2/0x120 [ 2021.567217][ T5440] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 2021.567237][ T5440] ? __d_alloc+0x35/0xa50 [ 2021.567262][ T5440] __d_alloc+0x35/0xa50 [ 2021.567284][ T5440] d_alloc_pseudo+0x1c/0xc0 [ 2021.567300][ T5440] alloc_file_pseudo+0x118/0x290 [ 2021.567324][ T5440] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 2021.567346][ T5440] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 2021.567362][ T5440] ? __do_sys_memfd_secret+0x130/0x570 [ 2021.567389][ T5440] __do_sys_memfd_secret+0x266/0x570 [ 2021.567412][ T5440] do_syscall_64+0x121/0x770 [ 2021.567436][ T5440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2021.567451][ T5440] RIP: 0033:0x7fa0f1d9e159 [ 2021.567465][ T5440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2021.567480][ T5440] RSP: 002b:00007fa0ef3ae028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 2021.567496][ T5440] RAX: ffffffffffffffda RBX: 00007fa0f2026450 RCX: 00007fa0f1d9e159 [ 2021.567506][ T5440] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2021.567515][ T5440] RBP: 00007fa0f1e3506b R08: 0000000000000000 R09: 0000000000000000 [ 2021.567524][ T5440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2021.567533][ T5440] R13: 00007fa0f20264e8 R14: 00007fa0f2026450 R15: 00007fffe508f138 [ 2021.567552][ T5440] [ 2021.731845][ T5426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2021.731863][ T5426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2022.168920][ T4066] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2022.168938][ T4066] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2022.827096][ T5464] can: request_module (can-proto-0) failed. [ 2023.089551][ T5472] FAULT_INJECTION: forcing a failure. [ 2023.089551][ T5472] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2023.089594][ T5472] CPU: 0 UID: 0 PID: 5472 Comm: syz.2.3739 Tainted: G L syzkaller #0 PREEMPT(full) [ 2023.089631][ T5472] Tainted: [L]=SOFTLOCKUP [ 2023.089641][ T5472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2023.089658][ T5472] Call Trace: [ 2023.089667][ T5472] [ 2023.089677][ T5472] dump_stack_lvl+0x100/0x190 [ 2023.089719][ T5472] should_fail_ex.cold+0x5/0xa [ 2023.089754][ T5472] _copy_to_user+0x32/0xd0 [ 2023.089795][ T5472] keyctl_capabilities+0x5a/0x160 [ 2023.089838][ T5472] __do_sys_keyctl+0x427/0x5a0 [ 2023.089888][ T5472] do_syscall_64+0x121/0x770 [ 2023.089921][ T5472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2023.089949][ T5472] RIP: 0033:0x7fa0f1d9e159 [ 2023.089971][ T5472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2023.089997][ T5472] RSP: 002b:00007fa0effb4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 2023.090023][ T5472] RAX: ffffffffffffffda RBX: 00007fa0f2026450 RCX: 00007fa0f1d9e159 [ 2023.090041][ T5472] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 000000000000001f [ 2023.090057][ T5472] RBP: 00007fa0effb4090 R08: 0000000080000000 R09: 0000000000000000 [ 2023.090074][ T5472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2023.090087][ T5472] R13: 00007fa0f20264e8 R14: 00007fa0f2026450 R15: 00007fffe508f138 [ 2023.090119][ T5472] [ 2024.302009][ T5498] BUG: unable to handle page fault for address: ffffc9000f418fe8 [ 2024.309868][ T5498] #PF: supervisor write access in kernel mode [ 2024.315963][ T5498] #PF: error_code(0x0002) - not-present page [ 2024.322015][ T5498] PGD 13fe12067 P4D 13fe12067 PUD 1d2ca067 PMD 34163067 PTE 0 [ 2024.329504][ T5498] Oops: Oops: 0002 [#1] SMP KASAN PTI [ 2024.334884][ T5498] CPU: 0 UID: 0 PID: 5498 Comm: syz.3.3742 Tainted: G L syzkaller #0 PREEMPT(full) [ 2024.345745][ T5498] Tainted: [L]=SOFTLOCKUP SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2024.350066][ T5498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2024.360124][ T5498] RIP: 0010:write_comp_data+0x7c/0xa0 [ 2024.365543][ T5498] Code: 00 8b bf 1c 17 00 00 48 8b 30 48 c1 e7 03 4c 8d 1c b5 00 00 00 00 4a 8d 14 dd 28 00 00 00 48 39 d7 72 1b 48 83 c6 01 48 89 30 <4c> 89 44 10 e0 4c 89 4c 10 e8 4c 89 54 10 f0 4a 89 4c d8 20 c3 cc [ 2024.385185][ T5498] RSP: 0018:ffffc90003507e80 EFLAGS: 00050257 [ 2024.391283][ T5498] RAX: ffffc9000f419000 RBX: 0000000000000000 RCX: ffffffff82497cc5 [ 2024.399284][ T5498] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000400000 [ 2024.407273][ T5498] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000002 [ 2024.415257][ T5498] R10: 0000000000000001 R11: fffffffffffffffc R12: 0000000000000020 [ 2024.423340][ T5498] R13: 0000000000000000 R14: 00007ffffffff000 R15: 0000000000000001 [ 2024.431322][ T5498] FS: 00007fc6d29cf6c0(0000) GS:ffff888123b55000(0000) knlGS:0000000000000000 [ 2024.440270][ T5498] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2024.446866][ T5498] CR2: ffffc9000f418fe8 CR3: 000000005976e000 CR4: 00000000003526f0 [ 2024.454844][ T5498] Call Trace: [ 2024.458123][ T5498] [ 2024.461062][ T5498] rseq_register+0x115/0x350 [ 2024.465790][ T5498] __x64_sys_rseq+0x1b8/0x2e0 [ 2024.470487][ T5498] do_syscall_64+0x121/0x770 [ 2024.475095][ T5498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2024.480996][ T5498] RIP: 0033:0x7fc6d1b9e159 [ 2024.485414][ T5498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2024.505115][ T5498] RSP: 002b:00007fc6d29cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000014e [ 2024.513544][ T5498] RAX: ffffffffffffffda RBX: 00007fc6d1e26450 RCX: 00007fc6d1b9e159 [ 2024.521517][ T5498] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000000000000000 [ 2024.529490][ T5498] RBP: 00007fc6d1c3506b R08: 0000000000000000 R09: 0000000000000000 [ 2024.537463][ T5498] R10: 0000000008000006 R11: 0000000000000246 R12: 0000000000000000 [ 2024.545435][ T5498] R13: 00007fc6d1e264e8 R14: 00007fc6d1e26450 R15: 00007ffebdb1d0b8 [ 2024.553423][ T5498] [ 2024.556528][ T5498] Modules linked in: [ 2024.560440][ T5498] CR2: ffffc9000f418fe8 [ 2024.564608][ T5498] ---[ end trace 0000000000000000 ]--- [ 2024.570067][ T5498] RIP: 0010:write_comp_data+0x7c/0xa0 [ 2024.570109][ T5498] Code: 00 8b bf 1c 17 00 00 48 8b 30 48 c1 e7 03 4c 8d 1c b5 00 00 00 00 4a 8d 14 dd 28 00 00 00 48 39 d7 72 1b 48 83 c6 01 48 89 30 <4c> 89 44 10 e0 4c 89 4c 10 e8 4c 89 54 10 f0 4a 89 4c d8 20 c3 cc [ 2024.570139][ T5498] RSP: 0018:ffffc90003507e80 EFLAGS: 00050257 [ 2024.570160][ T5498] RAX: ffffc9000f419000 RBX: 0000000000000000 RCX: ffffffff82497cc5 [ 2024.570177][ T5498] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000400000 [ 2024.570193][ T5498] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000002 [ 2024.570208][ T5498] R10: 0000000000000001 R11: fffffffffffffffc R12: 0000000000000020 [ 2024.570224][ T5498] R13: 0000000000000000 R14: 00007ffffffff000 R15: 0000000000000001 [ 2024.570241][ T5498] FS: 00007fc6d29cf6c0(0000) GS:ffff888123b55000(0000) knlGS:0000000000000000 [ 2024.570265][ T5498] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2024.570282][ T5498] CR2: ffffc9000f418fe8 CR3: 000000005976e000 CR4: 00000000003526f0 [ 2024.570302][ T5498] Kernel panic - not syncing: Fatal exception [ 2024.670997][ T5498] Kernel Offset: disabled [ 2024.675322][ T5498] Rebooting in 86400 seconds..