last executing test programs: 8.887835355s ago: executing program 1 (id=8959): pread64$auto(0xffffffffffffffff, 0x0, 0x4, 0x3a) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYRES8=r2, @ANYRES32=r2, @ANYBLOB='\b\x00a\x00\x00\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) r3 = getpid() r4 = gettid() rt_tgsigqueueinfo$auto(0x0, r4, 0x100001f, &(0x7f0000000400)={@_si_pad}) sendmsg$auto_NL80211_CMD_SET_HW_TIMESTAMP(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0400d1009fd11b05273cbbf1135e93990dcc62b0cbbbd9b55e8243e21046e504cbd8d2b8efef7bc0d9a1b6bf27717523099f1b2d3f1a4ea9b5494d29125dfb89a3e128eb3b3e986f9d66dfb691a9a8960600000000000000076b1b5194eec8bbf7a2ca5c2c04ec5fd3d97a84d89275b7ee387326afadabc393a9c556d478940fef48093ad49d6007ec300e7b6efdf77b7eaaa28ef400a7"], 0x130}, 0x1, 0x0, 0x0, 0x400}, 0x4) pwrite64$auto(0xc8, &(0x7f0000000600)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rBBJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x99\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xb3\x9c2\xa2\xacyl\xb8\x00Y\xc8\'\xb6S(\xf2\xc2\xf2\x9dP\b\x88J\xae8\xf9>\xb6\xed\xb5/\xc9\xaa\xd8\xc4\xba\x94\xe6jv\x12Bp+\xb8\x16\x19kw\xbc\xbb5-i\xf0\xb9\xac\x9f&6\x89g\x9bh\x83D\xb3\x9fxe\x13\xd1\xb9\xe4\x7f|a\xf2\xdd\xa0\xfb\xfau-7\x94\x13\xa8\xec\xf6~\xacV\xa2S)\xc2\xce\x9b{+\x9ct2>\x98D\t\xc5HP\xc4\xb7\x84\xda*\x82)\x01\xd1\f\x1e\xd4\x8d0K\xa8\xd6\xa1\xa7\xd8VP\xfd\x19\x1cd\x84\xe7\xc6#\x9c\xdd\x88\xf9\x128\x0e\xe2\n\xd3\xd33\x01\xda\x83]\xd6\xd5U\xb0^\xaf\x12\x91\x85\x86\xfd\x95\'f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fe02, 0x0) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ttyy7/power/runtime_suspended_time\x00', 0x3c5800, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x2, 0x4, 0x73) unshare$auto(0x8000000) semtimedop$auto(0x0, &(0x7f0000000000)={0x7, 0x9, 0x36ec}, 0xbf3, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_mark$auto(0x0, 0x451, 0x8000, 0xffffffffffffffff, 0x0) bind$auto(r0, &(0x7f0000000040)=@l2={0x1f, 0x1ff, @none, 0xc983, 0x1}, 0xfffffffa) setsockopt$auto_SO_BUSY_POLL(r4, 0x3, 0x2e, &(0x7f0000000080)='\x00', 0x6) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 8.491851275s ago: executing program 3 (id=8962): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto_MEMGETBADBLOCK(0xffffffffffffffff, 0x40084d0b, &(0x7f0000000040)=0x3f80000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r1 = syz_clone3(&(0x7f0000000440)={0x40000000, &(0x7f00000004c0)=0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200), {0xf}, &(0x7f0000000280)=""/147, 0x93, 0x0, &(0x7f0000000640)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x5}, 0x58) ioctl$auto_XFS_IOC_COMMIT_RANGE(0xffffffffffffffff, 0x40585883, &(0x7f0000000580)={r2, 0x0, 0x8, 0x4, 0x5, 0xffffffffffffffff, [0x3, 0x0, 0xb0ed, 0x7f, 0x4, 0x9ad]}) fcntl$auto(r0, 0xb, r1) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x5, 0x202000c, 0x5, 0x8000000000000011, 0xfffffffffffffffa, 0x7ffc) r3 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x60000080) unshare$auto(0x40000084) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xdd\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83\x16\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/221, 0x8fe8, 0x6) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/advisor_target_scan_time\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000010c0)=""/4096, 0x1000) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) madvise$auto(0x6, 0x4, 0x3) rseq$auto(0x0, 0x20, 0x0, 0xe) msync$auto(0x110c230000, 0x200001, 0x6) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x5ef40, 0x0) mq_timedsend$auto(r3, &(0x7f0000000000)='(.,\r^[\x00', 0x5, 0x2b3, &(0x7f0000000040)={0x1, 0x1}) sysfs$auto(0x2, 0x3b, 0x0) sendfile$auto(r0, r0, 0x0, 0x8) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x2a742, 0x0) 7.241503814s ago: executing program 0 (id=8963): mmap$auto(0x0, 0x95, 0x4000000000e3, 0x40eb2, 0xffffffffffffffff, 0x300000000000) socket(0xa, 0x801, 0x84) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bus/usb/010/001\x00', 0x80d00, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ttyy7/power/runtime_suspended_time\x00', 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x2, 0x2, 0x73) unshare$auto(0x8000000) semtimedop$auto(0x0, &(0x7f0000000000)={0x7, 0x9, 0x36ec}, 0x1f4, 0x0) unshare$auto(0x8000400) bind$auto(r0, &(0x7f0000000040)=@l2={0x1f, 0x1ff, @none, 0xc983, 0x1}, 0xfffffffa) setsockopt$auto_SO_BUSY_POLL(r2, 0x3, 0x2e, &(0x7f0000000080)='\x00', 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002740), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_GET_SEC_DEV(r3, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000c00)={0x14, r4, 0x309, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x48800}, 0x0) sendmsg$auto_NL802154_CMD_SET_MAX_ASSOCIATIONS(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xd4, r4, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_PEER={0xc0, 0x28, 0x0, 0x1, [@generic="65f9e2f6d771323b715635166fd66c51221da19b8e07d5b1180c346cdf4c3306cbf92665e699ca8d796abb2ff1ddc23fc65210db97aea56a83e6ae018fed98e398245b913e620cc2ddbcdc7847b2c09121e5847b86af137c1a4fce783af3f705cd92b16bdb4db6b2bdff4b1b229ba92c578f0ec422e82f1cc1c1a0484c8bb05439ed7c2f6efcbdd5b2303047d17bffe2be5d5f2fc483dd19a419fce7b01bf87e3a112419902df04964476a4220e13608bb5bf885ea6624e5ea1a1181"]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0x20040100) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) clone3$auto(0x0, 0x40) io_uring_setup$auto(0x80, 0x0) 7.141889716s ago: executing program 2 (id=8964): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/zram0/io_stat\x00', 0xe80, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000c4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='v'], 0x1ac}}, 0x40000) futex_wait$auto(&(0x7f0000000300)="fd0a47ffcc8ef523d1b3c4959a6fa8e76b79a8004a472d2a659738e51eb0fe7946dd1b53b27b9e36629fdc6d0bee5844e92b04b9b7c5de636c43985acdec8378e7458ed5ece946a7d9cab4dc507dca234e5f6cf06e60ecfee077f8b364b2a2bc7b40f214f0f7787ea18bf6b05b428c163e689f4891eeab1ee5bb9ddc84ede8790c32bffe92b8c5bc416d1d9c5157cf52a675040578745eb4723ee3a468ec970f03b1e2d6eba1f641eb9151b8ebb6033a33a113da740ffd90dd8d99c5", 0x7fffffffffffffff, 0x5, 0x4, &(0x7f00000003c0)={0x9, 0x3}, 0x1) r0 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto_MEMGETBADBLOCK(0xffffffffffffffff, 0x40084d0b, &(0x7f0000000040)=0x3f80000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv6/neigh/macvtap0/retrans_time_ms\x00', 0x101202, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r1 = io_uring_setup$auto(0x6, 0x0) ioctl$auto_RTC_AIE_OFF(r1, 0x7002, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfded, 0x3) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x48800, 0x0) mq_timedsend$auto(r1, &(0x7f0000000000)='(.,\r^[\x00', 0x5, 0x2b3, &(0x7f0000000040)={0x1, 0x1}) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/conf/bridge_slave_0/rp_filter\x00', 0x202, 0x0) sendfile$auto(r2, 0x3, 0x0, 0x7ffff000) clock_getres$auto(0x1ece, &(0x7f00000001c0)={0xfffffffffffffffa, 0x7656}) sysfs$auto(0x2, 0x3b, 0x0) sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x6, 0x1}, 0x5}, 0x3, 0x8) 7.125182677s ago: executing program 1 (id=8965): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto_MEMGETBADBLOCK(0xffffffffffffffff, 0x40084d0b, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r1 = syz_clone3(&(0x7f0000000440)={0x40000000, &(0x7f00000004c0)=0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200), {0xf}, &(0x7f0000000280)=""/147, 0x93, &(0x7f0000000340)=""/152, &(0x7f0000000640)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x5}, 0x58) ioctl$auto_XFS_IOC_COMMIT_RANGE(0xffffffffffffffff, 0x40585883, &(0x7f0000000580)={r2, 0x0, 0x8, 0x4, 0x5, 0xffffffffffffffff, [0x3, 0x0, 0xb0ed, 0x7f, 0x4, 0x9ad]}) fcntl$auto(r0, 0xb, r1) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x5, 0x202000c, 0x5, 0x8000000000000011, 0xfffffffffffffffa, 0x7ffc) io_uring_setup$auto(0x6, 0x0) unshare$auto(0x60000080) unshare$auto(0x40000084) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xdd\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83\x16\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/221, 0x8fe8, 0x6) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/advisor_target_scan_time\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000010c0)=""/4096, 0x1000) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) madvise$auto(0x6, 0x4, 0x3) rseq$auto(0x0, 0x20, 0x0, 0xe) msync$auto(0x110c230000, 0x200001, 0x6) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x5ef40, 0x0) sysfs$auto(0x2, 0x3b, 0x0) sendfile$auto(r0, r0, 0x0, 0x8) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x2a742, 0x0) 7.075824513s ago: executing program 3 (id=8966): pread64$auto(0xffffffffffffffff, 0x0, 0x4, 0x3a) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYRES8=r2, @ANYRES32=r2, @ANYBLOB='\b\x00a\x00\x00\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) r3 = getpid() r4 = gettid() rt_tgsigqueueinfo$auto(0x0, r4, 0x100001f, &(0x7f0000000400)={@_si_pad}) sendmsg$auto_NL80211_CMD_SET_HW_TIMESTAMP(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0400d1009fd11b05273cbbf1135e93990dcc62b0cbbbd9b55e8243e21046e504cbd8d2b8efef7bc0d9a1b6bf27717523099f1b2d3f1a4ea9b5494d29125dfb89a3e128eb3b3e986f9d66dfb691a9a8960600000000000000076b1b5194eec8bbf7a2ca5c2c04ec5fd3d97a84d89275b7ee387326afadabc393a9c556d478940fef48093ad49d6007ec300e7b6efdf77b7eaaa28ef400a7"], 0x130}, 0x1, 0x0, 0x0, 0x400}, 0x4) pwrite64$auto(0xc8, &(0x7f0000000600)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rBBJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x99\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xb3\x9c2\xa2\xacyl\xb8\x00Y\xc8\'\xb6S(\xf2\xc2\xf2\x9dP\b\x88J\xae8\xf9>\xb6\xed\xb5/\xc9\xaa\xd8\xc4\xba\x94\xe6jv\x12Bp+\xb8\x16\x19kw\xbc\xbb5-i\xf0\xb9\xac\x9f&6\x89g\x9bh\x83D\xb3\x9fxe\x13\xd1\xb9\xe4\x7f|a\xf2\xdd\xa0\xfb\xfau-7\x94\x13\xa8\xec\xf6~\xacV\xa2S)\xc2\xce\x9b{+\x9ct2>\x98D\t\xc5HP\xc4\xb7\x84\xda*\x82)\x01\xd1\f\x1e\xd4\x8d0K\xa8\xd6\xa1\xa7\xd8VP\xfd\x19\x1cd\x84\xe7\xc6#\x9c\xdd\x88\xf9\x128\x0e\xe2\n\xd3\xd33\x01\xda\x83]\xd6\xd5U\xb0^\xaf\x12\x91\x85\x86\xfd\x95\'0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200), {0xf}, &(0x7f0000000280)=""/147, 0x93, &(0x7f0000000340)=""/152, &(0x7f0000000640)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x5}, 0x58) ioctl$auto_XFS_IOC_COMMIT_RANGE(0xffffffffffffffff, 0x40585883, &(0x7f0000000580)={r2, 0x0, 0x8, 0x4, 0x5, 0xffffffffffffffff, [0x3, 0x0, 0xb0ed, 0x7f, 0x4, 0x9ad]}) fcntl$auto(r0, 0xb, r1) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x5, 0x202000c, 0x5, 0x8000000000000011, 0xfffffffffffffffa, 0x7ffc) r3 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x60000080) unshare$auto(0x40000084) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xdd\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83\x16\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/221, 0x8fe8, 0x6) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000010c0)=""/4096, 0x1000) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) madvise$auto(0x6, 0x4, 0x3) rseq$auto(0x0, 0x20, 0x0, 0xe) msync$auto(0x110c230000, 0x200001, 0x6) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x5ef40, 0x0) mq_timedsend$auto(r3, &(0x7f0000000000)='(.,\r^[\x00', 0x5, 0x2b3, &(0x7f0000000040)={0x1, 0x1}) sendfile$auto(0xffffffffffffffff, 0x3, 0x0, 0x7ffff000) sysfs$auto(0x2, 0x3b, 0x0) sendfile$auto(r0, r0, 0x0, 0x8) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x2a742, 0x0) 5.48650567s ago: executing program 1 (id=8968): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000001080), 0x2800, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mprotect$auto(0x1000, 0x441000, 0x4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x0, 0x4, 0x0, 0x0, 0x0, 0x400000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r2, &(0x7f0000000080)={0x0, 0x1000}, 0x3) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(0xffffffffffffffff, 0x0, 0x30004850) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getgroups$auto(0xeda, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x6, 0x0, 0x84) ioctl$auto(0xffffffffffffffff, 0x4b47, 0x1) newfstatat$auto(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000180)={0xcf68, 0x7, 0x6, 0x0, 0xee00, 0xffffffffffffffff, 0x0, 0x1, 0x3, 0x1f, 0x7d, 0x0, 0x1, 0x1, 0xfffffffffffffff9, 0xffffffffffff7fff, 0x1000}, 0x8) openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/error_log\x00', 0xb01, 0x0) close_range$auto(0x2, 0x8, 0x0) write$auto(r0, 0x0, 0xfffffdef) io_uring_setup$auto(0x6, 0x0) semtimedop$auto(0x1, &(0x7f0000000000)={0x9, 0x0, 0x6}, 0x7, &(0x7f0000000040)={0x8, 0x3}) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000040), 0xffffffffffffffff) 5.464547396s ago: executing program 2 (id=8969): pread64$auto(0xffffffffffffffff, 0x0, 0x4, 0x3a) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYRES8=r2, @ANYRES32=r2, @ANYBLOB='\b\x00a\x00\x00\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) r3 = getpid() r4 = gettid() rt_tgsigqueueinfo$auto(0x0, r4, 0x100001f, &(0x7f0000000400)={@_si_pad}) sendmsg$auto_NL80211_CMD_SET_HW_TIMESTAMP(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="30010000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0400d1009fd11b05273cbbf1135e93990dcc62b0cbbbd9b55e8243e21046e504cbd8d2b8efef7bc0d9a1b6bf27717523099f1b2d3f1a4ea9b5494d29125dfb89a3e128eb3b3e986f9d66dfb691a9a8960600000000000000076b1b5194eec8bbf7a2ca5c2c04ec5fd3d97a84d89275b7ee387326afadabc393a9c556d478940fef48093ad49d6007ec300e7b6efdf77b7eaaa28ef400a7"], 0x130}, 0x1, 0x0, 0x0, 0x400}, 0x4) pwrite64$auto(0xc8, &(0x7f0000000600)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rBBJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x99\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xb3\x9c2\xa2\xacyl\xb8\x00Y\xc8\'\xb6S(\xf2\xc2\xf2\x9dP\b\x88J\xae8\xf9>\xb6\xed\xb5/\xc9\xaa\xd8\xc4\xba\x94\xe6jv\x12Bp+\xb8\x16\x19kw\xbc\xbb5-i\xf0\xb9\xac\x9f&6\x89g\x9bh\x83D\xb3\x9fxe\x13\xd1\xb9\xe4\x7f|a\xf2\xdd\xa0\xfb\xfau-7\x94\x13\xa8\xec\xf6~\xacV\xa2S)\xc2\xce\x9b{+\x9ct2>\x98D\t\xc5HP\xc4\xb7\x84\xda*\x82)\x01\xd1\f\x1e\xd4\x8d0K\xa8\xd6\xa1\xa7\xd8VP\xfd\x19\x1cd\x84\xe7\xc6#\x9c\xdd\x88\xf9\x128\x0e\xe2\n\xd3\xd33\x01\xda\x83]\xd6\xd5U\xb0^\xaf\x12\x91\x85\x86\xfd\x95\'f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) r1 = socket(0xa, 0x2, 0x3a) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = socket(0x2, 0x1, 0x0) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x200, 0x0) read$auto(r4, 0x0, 0x20) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) getsockopt$auto_SO_PROTOCOL(r2, 0x1000000b, 0x26, 0x0, 0x0) recvmsg$auto(r3, 0x0, 0xfffffff7) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) unshare$auto(0x9) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000080), 0x141501, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_SESSION_CREATE(r5, &(0x7f0000001200)={&(0x7f0000001040), 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x50, r6, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_FD={0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xf9}, @L2TP_ATTR_USING_IPSEC={0x5, 0x15, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, 0x6}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xe}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'dvmrp1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x8801}, 0x0) ioctl$auto_PPPIOCGIDLE32(0xffffffffffffffff, 0x8008743f, &(0x7f0000000000)={0x7, 0xffff1dc8}) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r6, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8010}, 0x4) socket(0xa, 0x801, 0x84) getsockopt$auto_SO_TIMESTAMPING_NEW(r1, 0x0, 0x41, 0x0, &(0x7f00000000c0)=0xfffffffc) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/ip_vs\x00', 0x100, 0x0) 3.606897339s ago: executing program 2 (id=8971): r0 = socket(0x2c, 0x2, 0x4) setsockopt$auto(r0, 0x110, 0x4, 0x0, 0x4) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x28342, 0x0) unshare$auto(0x40000080) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x100000000000034, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x24, r1, 0x13, 0x70bd2c, 0x25dfdbdd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x20201, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) r5 = socket(0xf, 0x1, 0x84) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x4) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dmmidi2\x00', 0x244201, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$auto_ecryptfs_dir_fops_ecryptfs_kernel(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/mac80211_hwsim/hwsim13\x00', 0x12081, 0x0) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x141041, 0x0) write$auto(r6, &(0x7f0000001340)='\x04\"\x8e U\x00\x00\x00\xb8\n08\xc6\xb05>ha9\x89|e\x00\x00\x00\xa8%\xdc~kD\xa1\x1b\xc3\xe4\xc7\x89\x0e\xd4\x88\xac\x95\xacS\xe9$\xe7*\xcd\x8b\x9b\xd0o\xc7\xd8\xf7\x8a@%\x1d\xf8b\x14[H\xa2` \xb2\xef\xd7\xac\xfak\xb7\x02\x00}\xbcv\xfc\xe6\xbf\x14\x82jO\xde\xda\xda\x929\xd3\x04\xd0\xa2\xa0\xa6\xcb\x86\x15\xac\xcc\xf8\xa2\x01Z\x83`\xa1d\xedj8\x1e\xcc\x0fD\xa4\xe3\xa5\xba\xf9\xbe\x85\f\xbbrY\xb9\xc77\xd9d\xb5\x16\xc1\xe9\xe5\xc8X_\xefPG\x86=\x17>3\xb2\xdd\xbd\xa9\xe4R\x9c\xb0j[\"\f\xfb\tNz\xf4X]\xb90\x1c\xc3\x91jd\xe9\xb9\x87I\x19\xe4\x16\xa4\xad\xdcJ\xe4\x00\xd03/\x13,3\x87K\xd0J\xbb\xb9B\xff\xd9\xf1\xed\x04\xeb\x8d\x92\xa7-\x91\x8ai\xc6j\xeb\x90#1\x1d\xfd\xa3\xfeO\xcc\xe0\xe5\x1d\x8e\xedd\f,\t\xd8\x10Ho.z4\'\xe2\xad`\x94\xa6\xa2\xb2\xd6zMB\xf5\xcd\r7MO\x8f\xbc7%\xf1\xbbxB\xb4q\xa0\xe1-\x1c\xa2\xeb\xc0C\x04\x00\xfcG\xb6\x1e\x82\xaao\x1a\xa7\xbdw\x8b\xe6\bI\xfc\xa1\a\"\xe6\xc7z\xac\xe6\xce\xe34\x16\x9bdp\xb9\x02R\b\x83\x95\xde\x93\x12hP\xcbr6F\x84\xa7sf\xea\x8a\x1aee\xa4\xd0~\x00IC\xefT\xdc_G=]\xa3\xcb\xe0\x9f\n\xc5%\xe8PT\x87\xa4\xf3?f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fe02, 0x0) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ttyy7/power/runtime_suspended_time\x00', 0x3c5800, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x2, 0x4, 0x73) unshare$auto(0x8000000) semtimedop$auto(0x0, &(0x7f0000000000)={0x7, 0x9, 0x36ec}, 0xbf3, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_mark$auto(0x0, 0x451, 0x8000, 0xffffffffffffffff, 0x0) bind$auto(r0, &(0x7f0000000040)=@l2={0x1f, 0x1ff, @none, 0xc983, 0x1}, 0xfffffffa) setsockopt$auto_SO_BUSY_POLL(r4, 0x3, 0x2e, &(0x7f0000000080)='\x00', 0x6) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 2.005446842s ago: executing program 0 (id=8975): mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r0, 0x0, 0xfffffdf1) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000480)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xf6\x04W\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xed\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\x9bg\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\a\x00\xa2\xe4\x81\xb9\x92\xda\x13\xfe5jd\x8d?\x01\xd4\x14\x13\x9d\xba\x0e\x9f?L\xca\xf5V\xf4s4\x9b\xe7\xf0\xcbe\xf4(\xd5j6\x1d\b\x88\xf0u.\xff\xa5\x86M^\xbf\x89\xd1U', 0xc, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) mknod$auto(&(0x7f0000000040)='&&\x00', 0x1, 0x6862) mprotect$auto(0x0, 0x8000000000000001, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r1, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x40, r2, 0x419, 0x2070bd22, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_UPCALL_PID={0x8}, @OVS_DP_ATTR_NAME={0xd, 0x1, '&#$@\\]\\-\x00'}, @OVS_DP_ATTR_NAME={0xc, 0x1, '@*%!@,@\x00'}]}, 0x40}, 0x1, 0x300, 0x0, 0x2004c011}, 0x811) socket(0x2000000000000021, 0x2, 0x10000000000002) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0) r3 = socket(0x1d, 0x2, 0x7) r4 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(r3, &(0x7f0000000000)=@can={0x1d, r5}, 0x6a) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_hcd.6/usb7/ep_00/bInterval\x00', 0x80080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000280)=""/228, 0xe4) socket(0x1d, 0x2, 0x7) r7 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) 1.916834187s ago: executing program 1 (id=8976): mmap$auto(0x0, 0x95, 0x4000000000e3, 0x40eb2, 0xffffffffffffffff, 0x300000000000) socket(0xa, 0x801, 0x84) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bus/usb/010/001\x00', 0x80d00, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ttyy7/power/runtime_suspended_time\x00', 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x2, 0x2, 0x73) unshare$auto(0x8000000) semtimedop$auto(0x0, &(0x7f0000000000)={0x7, 0x9, 0x36ec}, 0x1f4, 0x0) unshare$auto(0x8000400) bind$auto(r0, &(0x7f0000000040)=@l2={0x1f, 0x1ff, @none, 0xc983, 0x1}, 0xfffffffa) setsockopt$auto_SO_BUSY_POLL(r2, 0x3, 0x2e, &(0x7f0000000080)='\x00', 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002740), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_GET_SEC_DEV(r3, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000c00)={0x14, r4, 0x309, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x48800}, 0x0) sendmsg$auto_NL802154_CMD_SET_MAX_ASSOCIATIONS(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xd4, r4, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_PEER={0xc0, 0x28, 0x0, 0x1, [@generic="65f9e2f6d771323b715635166fd66c51221da19b8e07d5b1180c346cdf4c3306cbf92665e699ca8d796abb2ff1ddc23fc65210db97aea56a83e6ae018fed98e398245b913e620cc2ddbcdc7847b2c09121e5847b86af137c1a4fce783af3f705cd92b16bdb4db6b2bdff4b1b229ba92c578f0ec422e82f1cc1c1a0484c8bb05439ed7c2f6efcbdd5b2303047d17bffe2be5d5f2fc483dd19a419fce7b01bf87e3a112419902df04964476a4220e13608bb5bf885ea6624e5ea1a1181"]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0x20040100) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) clone3$auto(0x0, 0x40) io_uring_setup$auto(0x80, 0x0) 1.914680019s ago: executing program 3 (id=8977): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto_MEMGETBADBLOCK(0xffffffffffffffff, 0x40084d0b, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r1 = syz_clone3(&(0x7f0000000440)={0x40000000, &(0x7f00000004c0)=0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200), {0xf}, &(0x7f0000000280)=""/147, 0x93, &(0x7f0000000340)=""/152, &(0x7f0000000640)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x5}, 0x58) ioctl$auto_XFS_IOC_COMMIT_RANGE(0xffffffffffffffff, 0x40585883, &(0x7f0000000580)={r2, 0x0, 0x8, 0x4, 0x5, 0xffffffffffffffff, [0x3, 0x0, 0xb0ed, 0x7f, 0x4, 0x9ad]}) fcntl$auto(r0, 0xb, r1) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x5, 0x202000c, 0x5, 0x8000000000000011, 0xfffffffffffffffa, 0x7ffc) io_uring_setup$auto(0x6, 0x0) unshare$auto(0x60000080) unshare$auto(0x40000084) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xdd\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83\x16\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/221, 0x8fe8, 0x6) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/advisor_target_scan_time\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000010c0)=""/4096, 0x1000) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) madvise$auto(0x6, 0x4, 0x3) rseq$auto(0x0, 0x20, 0x0, 0xe) msync$auto(0x110c230000, 0x200001, 0x6) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x5ef40, 0x0) sysfs$auto(0x2, 0x3b, 0x0) sendfile$auto(r0, r0, 0x0, 0x8) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x2a742, 0x0) 1.909141376s ago: executing program 2 (id=8978): pread64$auto(0xffffffffffffffff, 0x0, 0x4, 0x3a) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYRES8=r2, @ANYRES32=r2, @ANYBLOB='\b\x00a\x00\x00\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) r3 = getpid() r4 = gettid() rt_tgsigqueueinfo$auto(0x0, r4, 0x100001f, &(0x7f0000000400)={@_si_pad}) sendmsg$auto_NL80211_CMD_SET_HW_TIMESTAMP(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0400d1009fd11b05273cbbf1135e93990dcc62b0cbbbd9b55e8243e21046e504cbd8d2b8efef7bc0d9a1b6bf27717523099f1b2d3f1a4ea9b5494d29125dfb89a3e128eb3b3e986f9d66dfb691a9a8960600000000000000076b1b5194eec8bbf7a2ca5c2c04ec5fd3d97a84d89275b7ee387326afadabc393a9c556d478940fef48093ad49d6007ec300e7b6efdf77b7eaaa28ef400a7"], 0x130}, 0x1, 0x0, 0x0, 0x400}, 0x4) pwrite64$auto(0xc8, &(0x7f0000000600)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rBBJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x99\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xb3\x9c2\xa2\xacyl\xb8\x00Y\xc8\'\xb6S(\xf2\xc2\xf2\x9dP\b\x88J\xae8\xf9>\xb6\xed\xb5/\xc9\xaa\xd8\xc4\xba\x94\xe6jv\x12Bp+\xb8\x16\x19kw\xbc\xbb5-i\xf0\xb9\xac\x9f&6\x89g\x9bh\x83D\xb3\x9fxe\x13\xd1\xb9\xe4\x7f|a\xf2\xdd\xa0\xfb\xfau-7\x94\x13\xa8\xec\xf6~\xacV\xa2S)\xc2\xce\x9b{+\x9ct2>\x98D\t\xc5HP\xc4\xb7\x84\xda*\x82)\x01\xd1\f\x1e\xd4\x8d0K\xa8\xd6\xa1\xa7\xd8VP\xfd\x19\x1cd\x84\xe7\xc6#\x9c\xdd\x88\xf9\x128\x0e\xe2\n\xd3\xd33\x01\xda\x83]\xd6\xd5U\xb0^\xaf\x12\x91\x85\x86\xfd\x95\'f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYRES8=r2, @ANYRES32=r2, @ANYBLOB='\b\x00a\x00\x00\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) r3 = getpid() r4 = gettid() rt_tgsigqueueinfo$auto(0x0, r4, 0x100001f, &(0x7f0000000400)={@_si_pad}) sendmsg$auto_NL80211_CMD_SET_HW_TIMESTAMP(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="30010000", @ANYRES16=0x0, @ANYBLOB="00082dbd7000fddbdf259900000008004a0004000000f5003601a9ab9faefaa0756c7b4537ccb51bb7c55e9c12ce99050d5c18f0a1fa1bde5437c27cfe365f71961b66144834ae835c8b91233848ad9c48c31d44e9b53b77dbf592e21d9dcacefbfff37a4cd7271766c53b90858f655cb74dbdd0e3c69e6a0926a701c013e9e86147fc556cef896dc09dc2fa41996b5a0ca7d07f7db18a06e041d7887a831b934e78c441f885dd03140faca3da2dfc1fb57d55c509a9c10b503fb3e56512b1eeb650ca43bd9c324f191606f8ca46ceaabd9a8da9f01a3794b6664bc4aba324eaad5da88ded92ce18df272cc9482f21b20eeae8a031d2d132b61118151249763c1d7bfb37eec8aa230c026f0000000800610009000000040037010400e20008005200", @ANYRES32=0x0, @ANYBLOB="0400d1009fd11b05273cbbf1135e93990dcc62b0cbbbd9b55e8243e21046e504cbd8d2b8efef7bc0d9a1b6bf27717523099f1b2d3f1a4ea9b5494d29125dfb89a3e128eb3b3e986f9d66dfb691a9a8960600000000000000076b1b5194eec8bbf7a2ca5c2c04ec5fd3d97a84d89275b7ee387326afadabc393a9c556d478940fef48093ad49d6007ec300e7b6efdf77b7eaaa28ef400a7"], 0x130}, 0x1, 0x0, 0x0, 0x400}, 0x4) pwrite64$auto(0xc8, &(0x7f0000000600)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rBBJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x99\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xb3\x9c2\xa2\xacyl\xb8\x00Y\xc8\'\xb6S(\xf2\xc2\xf2\x9dP\b\x88J\xae8\xf9>\xb6\xed\xb5/\xc9\xaa\xd8\xc4\xba\x94\xe6jv\x12Bp+\xb8\x16\x19kw\xbc\xbb5-i\xf0\xb9\xac\x9f&6\x89g\x9bh\x83D\xb3\x9fxe\x13\xd1\xb9\xe4\x7f|a\xf2\xdd\xa0\xfb\xfau-7\x94\x13\xa8\xec\xf6~\xacV\xa2S)\xc2\xce\x9b{+\x9ct2>\x98D\t\xc5HP\xc4\xb7\x84\xda*\x82)\x01\xd1\f\x1e\xd4\x8d0K\xa8\xd6\xa1\xa7\xd8VP\xfd\x19\x1cd\x84\xe7\xc6#\x9c\xdd\x88\xf9\x128\x0e\xe2\n\xd3\xd33\x01\xda\x83]\xd6\xd5U\xb0^\xaf\x12\x91\x85\x86\xfd\x95\'0xffffffffffffffff, 0x0, &(0x7f0000000200), {0xf}, &(0x7f0000000280)=""/147, 0x93, &(0x7f0000000340)=""/152, &(0x7f0000000640)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x5}, 0x58) ioctl$auto_XFS_IOC_COMMIT_RANGE(0xffffffffffffffff, 0x40585883, &(0x7f0000000580)={r2, 0x0, 0x8, 0x4, 0x5, 0xffffffffffffffff, [0x3, 0x0, 0xb0ed, 0x7f, 0x4, 0x9ad]}) fcntl$auto(r0, 0xb, r1) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x5, 0x202000c, 0x5, 0x8000000000000011, 0xfffffffffffffffa, 0x7ffc) r3 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x60000080) unshare$auto(0x40000084) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xdd\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83\x16\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/221, 0x8fe8, 0x6) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/advisor_target_scan_time\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000010c0)=""/4096, 0x1000) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) madvise$auto(0x6, 0x4, 0x3) msync$auto(0x110c230000, 0x200001, 0x6) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x5ef40, 0x0) mq_timedsend$auto(r3, &(0x7f0000000000)='(.,\r^[\x00', 0x5, 0x2b3, &(0x7f0000000040)={0x1, 0x1}) sendfile$auto(0xffffffffffffffff, 0x3, 0x0, 0x7ffff000) sysfs$auto(0x2, 0x3b, 0x0) sendfile$auto(r0, r0, 0x0, 0x8) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x2a742, 0x0) 154.80004ms ago: executing program 2 (id=8982): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto_MEMGETBADBLOCK(0xffffffffffffffff, 0x40084d0b, &(0x7f0000000040)=0x3f80000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r1 = syz_clone3(&(0x7f0000000440)={0x40000000, &(0x7f00000004c0)=0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200), {0xf}, &(0x7f0000000280)=""/147, 0x93, &(0x7f0000000340)=""/152, &(0x7f0000000640)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x5}, 0x58) ioctl$auto_XFS_IOC_COMMIT_RANGE(0xffffffffffffffff, 0x40585883, &(0x7f0000000580)={r2, 0x0, 0x8, 0x4, 0x5, 0xffffffffffffffff, [0x3, 0x0, 0xb0ed, 0x7f, 0x4, 0x9ad]}) fcntl$auto(r0, 0xb, r1) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x5, 0x202000c, 0x5, 0x8000000000000011, 0xfffffffffffffffa, 0x7ffc) r3 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x60000080) unshare$auto(0x40000084) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xdd\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83\x16\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/221, 0x8fe8, 0x6) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000010c0)=""/4096, 0x1000) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) madvise$auto(0x6, 0x4, 0x3) rseq$auto(0x0, 0x20, 0x0, 0xe) msync$auto(0x110c230000, 0x200001, 0x6) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x5ef40, 0x0) mq_timedsend$auto(r3, &(0x7f0000000000)='(.,\r^[\x00', 0x5, 0x2b3, &(0x7f0000000040)={0x1, 0x1}) sendfile$auto(0xffffffffffffffff, 0x3, 0x0, 0x7ffff000) sysfs$auto(0x2, 0x3b, 0x0) sendfile$auto(r0, r0, 0x0, 0x8) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x2a742, 0x0) 0s ago: executing program 0 (id=8983): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto_MEMGETBADBLOCK(0xffffffffffffffff, 0x40084d0b, &(0x7f0000000040)=0x3f80000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r1 = syz_clone3(&(0x7f0000000440)={0x40000000, &(0x7f00000004c0)=0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200), {0xf}, &(0x7f0000000280)=""/147, 0x93, &(0x7f0000000340)=""/152, &(0x7f0000000640)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x5}, 0x58) ioctl$auto_XFS_IOC_COMMIT_RANGE(0xffffffffffffffff, 0x40585883, &(0x7f0000000580)={r2, 0x0, 0x8, 0x4, 0x5, 0xffffffffffffffff, [0x3, 0x0, 0xb0ed, 0x7f, 0x4, 0x9ad]}) fcntl$auto(r0, 0xb, r1) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x5, 0x202000c, 0x5, 0x8000000000000011, 0xfffffffffffffffa, 0x7ffc) r3 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x60000080) unshare$auto(0x40000084) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xdd\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83\x16\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/221, 0x8fe8, 0x6) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/advisor_target_scan_time\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000010c0)=""/4096, 0x1000) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) madvise$auto(0x6, 0x4, 0x3) rseq$auto(0x0, 0x20, 0x0, 0xe) msync$auto(0x110c230000, 0x200001, 0x6) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x5ef40, 0x0) mq_timedsend$auto(r3, &(0x7f0000000000)='(.,\r^[\x00', 0x5, 0x2b3, &(0x7f0000000040)={0x1, 0x1}) ioctl$auto_MON_IOCQ_RING_SIZE(r3, 0x9205, 0x0) sendfile$auto(0xffffffffffffffff, 0x3, 0x0, 0x7ffff000) sysfs$auto(0x2, 0x3b, 0x0) sendfile$auto(r0, r0, 0x0, 0x8) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x2a742, 0x0) kernel console output (not intermixed with test programs): agmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1982.348558][T10516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1982.398910][ T5635] Bluetooth: hci4: command tx timeout [ 1982.623992][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1982.919793][T10516] hsr_slave_0: entered promiscuous mode [ 1982.926587][T10516] hsr_slave_1: entered promiscuous mode [ 1982.932805][T10516] debugfs: 'hsr0' already exists in 'hsr' [ 1982.940827][T10516] Cannot create hsr debugfs directory [ 1984.468286][ T5635] Bluetooth: hci4: command tx timeout [ 1984.532587][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1985.297283][T25018] hsr_slave_0: left promiscuous mode [ 1985.303185][T25018] hsr_slave_1: left promiscuous mode [ 1985.311347][T25018] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1985.319390][T25018] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1985.328430][T25018] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1985.337582][T25018] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1985.351849][T25018] veth1_macvtap: left promiscuous mode [ 1985.357419][T25018] veth0_macvtap: left promiscuous mode [ 1985.362951][T25018] veth1_vlan: left promiscuous mode [ 1985.369491][T25018] veth0_vlan: left promiscuous mode [ 1985.544336][T25018] team0 (unregistering): Port device team_slave_1 removed [ 1985.558680][T25018] team0 (unregistering): Port device team_slave_0 removed [ 1986.346080][T10516] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1986.373661][T10516] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1986.393675][T10516] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1986.432859][T10516] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1986.537271][ T5635] Bluetooth: hci4: command tx timeout [ 1986.691475][T10516] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1986.707505][T10516] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1987.182456][T10516] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1987.209175][T10516] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1988.135770][T10516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1988.175661][T10516] 8021q: adding VLAN 0 to HW filter on device team0 [ 1988.221230][T31704] bridge0: port 1(bridge_slave_0) entered blocking state [ 1988.228486][T31704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1988.290468][ T3284] bridge0: port 2(bridge_slave_1) entered blocking state [ 1988.297680][ T3284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1990.142160][T10516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1991.044605][T10516] veth0_vlan: entered promiscuous mode [ 1991.071053][T10516] veth1_vlan: entered promiscuous mode [ 1992.002709][T10516] veth0_macvtap: entered promiscuous mode [ 1992.255863][T10516] veth1_macvtap: entered promiscuous mode [ 1992.768188][T10516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1992.824286][T10516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1993.020258][T12911] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1993.044064][T12911] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1993.216225][T10810] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8210'. [ 1993.354846][T12911] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1993.382817][T12911] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1993.532857][T10818] FAULT_INJECTION: forcing a failure. [ 1993.532857][T10818] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1993.562363][T25018] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1993.582812][T10818] CPU: 0 UID: 0 PID: 10818 Comm: syz.2.8212 Tainted: G L syzkaller #0 PREEMPT(full) [ 1993.582853][T10818] Tainted: [L]=SOFTLOCKUP [ 1993.582864][T10818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1993.582881][T10818] Call Trace: [ 1993.582890][T10818] [ 1993.582900][T10818] dump_stack_lvl+0x100/0x190 [ 1993.582936][T10818] should_fail_ex.cold+0x5/0xa [ 1993.582971][T10818] _copy_from_user+0x2e/0xd0 [ 1993.583016][T10818] move_addr_to_kernel+0x65/0x170 [ 1993.583050][T10818] __sys_connect+0xb5/0x170 [ 1993.583085][T10818] ? __pfx___sys_connect+0x10/0x10 [ 1993.583119][T10818] ? __fget_files+0x21f/0x3d0 [ 1993.583158][T10818] ? __pfx_ksys_write+0x10/0x10 [ 1993.583193][T10818] __x64_sys_connect+0x72/0xb0 [ 1993.583227][T10818] ? lockdep_hardirqs_on+0x78/0x100 [ 1993.583272][T10818] do_syscall_64+0x115/0x840 [ 1993.583307][T10818] ? clear_bhb_loop+0x40/0x90 [ 1993.583342][T10818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1993.583371][T10818] RIP: 0033:0x7f6b5119e019 [ 1993.583393][T10818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1993.583419][T10818] RSP: 002b:00007f6b5209c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1993.583456][T10818] RAX: ffffffffffffffda RBX: 00007f6b51425fa0 RCX: 00007f6b5119e019 [ 1993.583476][T10818] RDX: 0000000000000054 RSI: 0000000000000000 RDI: 0000000000000003 [ 1993.583492][T10818] RBP: 00007f6b5209c090 R08: 0000000000000000 R09: 0000000000000000 [ 1993.583509][T10818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1993.583526][T10818] R13: 00007f6b51426038 R14: 00007f6b51425fa0 R15: 00007ffcf07ed398 [ 1993.583563][T10818] [ 1994.302462][T27780] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1994.314300][T27780] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1994.417359][T25018] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2005.144240][T11035] FAULT_INJECTION: forcing a failure. [ 2005.144240][T11035] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2005.194563][T11035] CPU: 1 UID: 0 PID: 11035 Comm: syz.2.8238 Tainted: G L syzkaller #0 PREEMPT(full) [ 2005.194607][T11035] Tainted: [L]=SOFTLOCKUP [ 2005.194618][T11035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2005.194635][T11035] Call Trace: [ 2005.194645][T11035] [ 2005.194664][T11035] dump_stack_lvl+0x100/0x190 [ 2005.194703][T11035] should_fail_ex.cold+0x5/0xa [ 2005.194735][T11035] _copy_to_user+0x32/0xd0 [ 2005.194782][T11035] keyctl_capabilities+0x5a/0x160 [ 2005.194820][T11035] __do_sys_keyctl+0x427/0x5a0 [ 2005.194854][T11035] do_syscall_64+0x115/0x840 [ 2005.194890][T11035] ? clear_bhb_loop+0x40/0x90 [ 2005.194923][T11035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2005.194950][T11035] RIP: 0033:0x7f6b5119e019 [ 2005.194973][T11035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2005.194999][T11035] RSP: 002b:00007f6b51ff7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 2005.195025][T11035] RAX: ffffffffffffffda RBX: 00007f6b51426450 RCX: 00007f6b5119e019 [ 2005.195044][T11035] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 000000000000001f [ 2005.195061][T11035] RBP: 00007f6b51ff7090 R08: 00000000000003ff R09: 0000000000000000 [ 2005.195079][T11035] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 2005.195095][T11035] R13: 00007f6b514264e8 R14: 00007f6b51426450 R15: 00007ffcf07ed398 [ 2005.195132][T11035] [ 2005.358779][T11036] FAULT_INJECTION: forcing a failure. [ 2005.358779][T11036] name failslab, interval 1, probability 0, space 0, times 0 [ 2005.382471][T11036] CPU: 1 UID: 0 PID: 11036 Comm: syz.1.8240 Tainted: G L syzkaller #0 PREEMPT(full) [ 2005.382515][T11036] Tainted: [L]=SOFTLOCKUP [ 2005.382526][T11036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2005.382545][T11036] Call Trace: [ 2005.382554][T11036] [ 2005.382565][T11036] dump_stack_lvl+0x100/0x190 [ 2005.382602][T11036] should_fail_ex.cold+0x5/0xa [ 2005.382645][T11036] should_failslab+0xc2/0x120 [ 2005.382686][T11036] __kmalloc_noprof+0xfc/0x820 [ 2005.382724][T11036] ? tomoyo_encode2+0xfb/0x3c0 [ 2005.382774][T11036] tomoyo_encode2+0xfb/0x3c0 [ 2005.382821][T11036] tomoyo_encode+0x29/0x50 [ 2005.382861][T11036] tomoyo_realpath_from_path+0x18c/0x690 [ 2005.382915][T11036] tomoyo_path_perm+0x276/0x460 [ 2005.382950][T11036] ? tomoyo_path_perm+0x262/0x460 [ 2005.382989][T11036] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 2005.383062][T11036] ? __pfx_ima_file_check+0x10/0x10 [ 2005.383098][T11036] ? hook_file_truncate+0xba/0x280 [ 2005.383143][T11036] security_file_truncate+0xb5/0x1e0 [ 2005.383186][T11036] path_openat+0x3584/0x4280 [ 2005.383234][T11036] ? __pfx_path_openat+0x10/0x10 [ 2005.383275][T11036] do_file_open+0x20e/0x430 [ 2005.383309][T11036] ? __pfx_do_file_open+0x10/0x10 [ 2005.383363][T11036] ? alloc_fd+0x471/0x7a0 [ 2005.383395][T11036] ? do_getname+0x191/0x390 [ 2005.383432][T11036] do_sys_openat2+0x10f/0x1e0 [ 2005.383473][T11036] ? __pfx_do_sys_openat2+0x10/0x10 [ 2005.383526][T11036] __x64_sys_openat+0x12d/0x210 [ 2005.383567][T11036] ? __pfx___x64_sys_openat+0x10/0x10 [ 2005.383620][T11036] do_syscall_64+0x115/0x840 [ 2005.383668][T11036] ? clear_bhb_loop+0x40/0x90 [ 2005.383705][T11036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2005.383735][T11036] RIP: 0033:0x7fba9b79e019 [ 2005.383759][T11036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2005.383787][T11036] RSP: 002b:00007fba9c5d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2005.383814][T11036] RAX: ffffffffffffffda RBX: 00007fba9ba25fa0 RCX: 00007fba9b79e019 [ 2005.383835][T11036] RDX: 0000000000080302 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 2005.383854][T11036] RBP: 00007fba9b83500c R08: 0000000000000000 R09: 0000000000000000 [ 2005.383872][T11036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2005.383890][T11036] R13: 00007fba9ba26038 R14: 00007fba9ba25fa0 R15: 00007fff4add7488 [ 2005.383930][T11036] [ 2005.383957][T11036] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2006.616664][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888057a58c00: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. [ 2015.810488][T11203] FAULT_INJECTION: forcing a failure. [ 2015.810488][T11203] name failslab, interval 1, probability 0, space 0, times 0 [ 2015.825847][T11203] CPU: 0 UID: 0 PID: 11203 Comm: syz.0.8264 Tainted: G L syzkaller #0 PREEMPT(full) [ 2015.825890][T11203] Tainted: [L]=SOFTLOCKUP [ 2015.825901][T11203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2015.825918][T11203] Call Trace: [ 2015.825929][T11203] [ 2015.825940][T11203] dump_stack_lvl+0x100/0x190 [ 2015.825981][T11203] should_fail_ex.cold+0x5/0xa [ 2015.826016][T11203] should_failslab+0xc2/0x120 [ 2015.826060][T11203] __kmalloc_noprof+0xfc/0x820 [ 2015.826098][T11203] ? tomoyo_encode2+0xfb/0x3c0 [ 2015.826151][T11203] tomoyo_encode2+0xfb/0x3c0 [ 2015.826200][T11203] tomoyo_encode+0x29/0x50 [ 2015.826243][T11203] tomoyo_realpath_from_path+0x18c/0x690 [ 2015.826298][T11203] tomoyo_path_perm+0x276/0x460 [ 2015.826336][T11203] ? tomoyo_path_perm+0x262/0x460 [ 2015.826377][T11203] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 2015.826460][T11203] ? __pfx_ima_file_check+0x10/0x10 [ 2015.826496][T11203] ? hook_file_truncate+0xba/0x280 [ 2015.826545][T11203] security_file_truncate+0xb5/0x1e0 [ 2015.826589][T11203] path_openat+0x3584/0x4280 [ 2015.826633][T11203] ? __pfx_path_openat+0x10/0x10 [ 2015.826674][T11203] do_file_open+0x20e/0x430 [ 2015.826706][T11203] ? __pfx_do_file_open+0x10/0x10 [ 2015.826763][T11203] ? alloc_fd+0x471/0x7a0 [ 2015.826797][T11203] ? do_getname+0x191/0x390 [ 2015.826835][T11203] do_sys_openat2+0x10f/0x1e0 [ 2015.826873][T11203] ? __pfx_do_sys_openat2+0x10/0x10 [ 2015.826924][T11203] __x64_sys_openat+0x12d/0x210 [ 2015.826966][T11203] ? __pfx___x64_sys_openat+0x10/0x10 [ 2015.827004][T11203] ? ksys_read+0x1ac/0x250 [ 2015.827046][T11203] do_syscall_64+0x115/0x840 [ 2015.827086][T11203] ? clear_bhb_loop+0x40/0x90 [ 2015.827123][T11203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2015.827154][T11203] RIP: 0033:0x7fcc2ed9e019 [ 2015.827179][T11203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2015.827206][T11203] RSP: 002b:00007fcc2fd27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2015.827235][T11203] RAX: ffffffffffffffda RBX: 00007fcc2f025fa0 RCX: 00007fcc2ed9e019 [ 2015.827255][T11203] RDX: 0000000000080302 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 2015.827275][T11203] RBP: 00007fcc2ee3500c R08: 0000000000000000 R09: 0000000000000000 [ 2015.827293][T11203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2015.827314][T11203] R13: 00007fcc2f026038 R14: 00007fcc2f025fa0 R15: 00007ffeae27d5b8 [ 2015.827355][T11203] [ 2015.827494][T11203] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2017.596246][T11242] FAULT_INJECTION: forcing a failure. [ 2017.596246][T11242] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2017.614947][T11242] CPU: 0 UID: 0 PID: 11242 Comm: syz.0.8267 Tainted: G L syzkaller #0 PREEMPT(full) [ 2017.614990][T11242] Tainted: [L]=SOFTLOCKUP [ 2017.615000][T11242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2017.615017][T11242] Call Trace: [ 2017.615026][T11242] [ 2017.615037][T11242] dump_stack_lvl+0x100/0x190 [ 2017.615073][T11242] should_fail_ex.cold+0x5/0xa [ 2017.615098][T11242] ? prepare_alloc_pages+0x16d/0x5f0 [ 2017.615141][T11242] should_fail_alloc_page+0xeb/0x140 [ 2017.615182][T11242] prepare_alloc_pages+0x1f0/0x5f0 [ 2017.615228][T11242] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 2017.615261][T11242] ? stack_trace_save+0x8e/0xc0 [ 2017.615299][T11242] ? __pfx_stack_trace_save+0x10/0x10 [ 2017.615336][T11242] ? stack_depot_save_flags+0x27/0x9d0 [ 2017.615392][T11242] ? __lock_acquire+0x49f/0x1a40 [ 2017.615435][T11242] ? tomoyo_path_number_perm+0x46d/0x580 [ 2017.615471][T11242] ? kasan_save_stack+0x3f/0x50 [ 2017.615501][T11242] ? kasan_save_stack+0x30/0x50 [ 2017.615529][T11242] ? kasan_save_track+0x14/0x30 [ 2017.615558][T11242] ? kasan_save_free_info+0x3b/0x70 [ 2017.615585][T11242] ? __kasan_slab_free+0x5f/0x80 [ 2017.615619][T11242] ? kfree+0x22b/0x6c0 [ 2017.615643][T11242] ? look_up_lock_class+0x55/0x120 [ 2017.615678][T11242] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2017.615719][T11242] ? __lock_acquire+0x49f/0x1a40 [ 2017.615760][T11242] ? register_lock_class+0x40/0x560 [ 2017.615808][T11242] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2017.615852][T11242] ? policy_nodemask+0xed/0x4f0 [ 2017.615895][T11242] alloc_pages_mpol+0x1fb/0x540 [ 2017.615934][T11242] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 2017.615970][T11242] ? do_raw_spin_lock+0x128/0x260 [ 2017.615997][T11242] ? find_held_lock+0x2b/0x80 [ 2017.616030][T11242] ___kmalloc_large_node+0xe5/0x120 [ 2017.616069][T11242] __kmalloc_large_noprof+0x1c/0x70 [ 2017.616109][T11242] ? get_task_mm+0xc7/0xf0 [ 2017.616138][T11242] vhost_dev_set_owner+0x2b6/0xa30 [ 2017.616185][T11242] vhost_net_ioctl+0xfa3/0x1910 [ 2017.616217][T11242] ? do_vfs_ioctl+0x226/0x13e0 [ 2017.616257][T11242] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 2017.616296][T11242] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 2017.616338][T11242] ? find_held_lock+0x2b/0x80 [ 2017.616378][T11242] ? __fget_files+0x215/0x3d0 [ 2017.616402][T11242] ? hook_file_ioctl_common+0x140/0x440 [ 2017.616447][T11242] ? __fget_files+0x21f/0x3d0 [ 2017.616480][T11242] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 2017.616517][T11242] __x64_sys_ioctl+0x18e/0x210 [ 2017.616561][T11242] do_syscall_64+0x115/0x840 [ 2017.616598][T11242] ? clear_bhb_loop+0x40/0x90 [ 2017.616633][T11242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2017.616661][T11242] RIP: 0033:0x7fcc2ed9e019 [ 2017.616684][T11242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2017.616710][T11242] RSP: 002b:00007fcc2fd06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2017.616736][T11242] RAX: ffffffffffffffda RBX: 00007fcc2f026090 RCX: 00007fcc2ed9e019 [ 2017.616755][T11242] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000003 [ 2017.616772][T11242] RBP: 00007fcc2fd06090 R08: 0000000000000000 R09: 0000000000000000 [ 2017.616790][T11242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2017.616807][T11242] R13: 00007fcc2f026128 R14: 00007fcc2f026090 R15: 00007ffeae27d5b8 [ 2017.616846][T11242] [ 2018.069776][T11245] FAULT_INJECTION: forcing a failure. [ 2018.069776][T11245] name failslab, interval 1, probability 0, space 0, times 0 [ 2018.124822][T11245] CPU: 0 UID: 0 PID: 11245 Comm: syz.3.8269 Tainted: G L syzkaller #0 PREEMPT(full) [ 2018.124868][T11245] Tainted: [L]=SOFTLOCKUP [ 2018.124879][T11245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2018.124897][T11245] Call Trace: [ 2018.124907][T11245] [ 2018.124918][T11245] dump_stack_lvl+0x100/0x190 [ 2018.124957][T11245] should_fail_ex.cold+0x5/0xa [ 2018.124993][T11245] should_failslab+0xc2/0x120 [ 2018.125035][T11245] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 2018.125077][T11245] ? shmem_alloc_inode+0x25/0x50 [ 2018.125121][T11245] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 2018.125158][T11245] shmem_alloc_inode+0x25/0x50 [ 2018.125191][T11245] alloc_inode+0x68/0x250 [ 2018.125225][T11245] new_inode+0x22/0x1c0 [ 2018.125262][T11245] shmem_get_inode+0x1e3/0xf70 [ 2018.125302][T11245] ? __pfx_shmem_get_inode+0x10/0x10 [ 2018.125354][T11245] ? make_vfsgid+0xf1/0x140 [ 2018.125481][T11245] shmem_mknod+0x217/0x480 [ 2018.125529][T11245] ? __pfx_shmem_mknod+0x10/0x10 [ 2018.125583][T11245] vfs_create+0x301/0x6c0 [ 2018.125629][T11245] filename_mknodat+0x2de/0x7f0 [ 2018.125667][T11245] ? __pfx_filename_mknodat+0x10/0x10 [ 2018.125700][T11245] ? strncpy_from_user+0x19d/0x2d0 [ 2018.125748][T11245] ? do_getname+0x191/0x390 [ 2018.125790][T11245] __x64_sys_mknod+0x8f/0xc0 [ 2018.125824][T11245] do_syscall_64+0x115/0x840 [ 2018.125864][T11245] ? clear_bhb_loop+0x40/0x90 [ 2018.125901][T11245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2018.125933][T11245] RIP: 0033:0x7fb9cc39e019 [ 2018.125957][T11245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2018.125987][T11245] RSP: 002b:00007fb9cd2d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 2018.126016][T11245] RAX: ffffffffffffffda RBX: 00007fb9cc626090 RCX: 00007fb9cc39e019 [ 2018.126037][T11245] RDX: 0000000000000002 RSI: 0000000000000008 RDI: 0000200000000040 [ 2018.126056][T11245] RBP: 00007fb9cc43500c R08: 0000000000000000 R09: 0000000000000000 [ 2018.126074][T11245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2018.126092][T11245] R13: 00007fb9cc626128 R14: 00007fb9cc626090 R15: 00007fff79de86d8 [ 2018.126132][T11245] [ 2030.978481][T11472] netlink: 338 bytes leftover after parsing attributes in process `syz.1.8301'. [ 2031.003399][T11472] netlink: 338 bytes leftover after parsing attributes in process `syz.1.8301'. [ 2031.030248][T11474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8302'. [ 2031.586289][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 2031.593546][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 2035.270087][T11539] FAULT_INJECTION: forcing a failure. [ 2035.270087][T11539] name failslab, interval 1, probability 0, space 0, times 0 [ 2035.283183][T11539] CPU: 1 UID: 0 PID: 11539 Comm: syz.3.8311 Tainted: G L syzkaller #0 PREEMPT(full) [ 2035.283230][T11539] Tainted: [L]=SOFTLOCKUP [ 2035.283242][T11539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2035.283261][T11539] Call Trace: [ 2035.283272][T11539] [ 2035.283283][T11539] dump_stack_lvl+0x100/0x190 [ 2035.283324][T11539] should_fail_ex.cold+0x5/0xa [ 2035.283359][T11539] should_failslab+0xc2/0x120 [ 2035.283404][T11539] __kmalloc_noprof+0xfc/0x820 [ 2035.283442][T11539] ? tomoyo_encode2+0xfb/0x3c0 [ 2035.283493][T11539] tomoyo_encode2+0xfb/0x3c0 [ 2035.283544][T11539] tomoyo_encode+0x29/0x50 [ 2035.283593][T11539] tomoyo_realpath_from_path+0x18c/0x690 [ 2035.283650][T11539] tomoyo_path_perm+0x276/0x460 [ 2035.283687][T11539] ? tomoyo_path_perm+0x262/0x460 [ 2035.283726][T11539] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 2035.283802][T11539] ? __pfx_ima_file_check+0x10/0x10 [ 2035.283839][T11539] ? hook_file_truncate+0xba/0x280 [ 2035.283887][T11539] security_file_truncate+0xb5/0x1e0 [ 2035.283931][T11539] path_openat+0x3584/0x4280 [ 2035.283980][T11539] ? __pfx_path_openat+0x10/0x10 [ 2035.284022][T11539] do_file_open+0x20e/0x430 [ 2035.284056][T11539] ? __pfx_do_file_open+0x10/0x10 [ 2035.284115][T11539] ? alloc_fd+0x471/0x7a0 [ 2035.284149][T11539] ? do_getname+0x191/0x390 [ 2035.284191][T11539] do_sys_openat2+0x10f/0x1e0 [ 2035.284231][T11539] ? __pfx_do_sys_openat2+0x10/0x10 [ 2035.284284][T11539] __x64_sys_openat+0x12d/0x210 [ 2035.284326][T11539] ? __pfx___x64_sys_openat+0x10/0x10 [ 2035.284383][T11539] do_syscall_64+0x115/0x840 [ 2035.284425][T11539] ? clear_bhb_loop+0x40/0x90 [ 2035.284462][T11539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2035.284493][T11539] RIP: 0033:0x7fb9cc39e019 [ 2035.284518][T11539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2035.284548][T11539] RSP: 002b:00007fb9cd2f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2035.284577][T11539] RAX: ffffffffffffffda RBX: 00007fb9cc625fa0 RCX: 00007fb9cc39e019 [ 2035.284603][T11539] RDX: 0000000000080302 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 2035.284622][T11539] RBP: 00007fb9cc43500c R08: 0000000000000000 R09: 0000000000000000 [ 2035.284641][T11539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2035.284659][T11539] R13: 00007fb9cc626038 R14: 00007fb9cc625fa0 R15: 00007fff79de86d8 [ 2035.284699][T11539] [ 2035.539236][T11539] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2037.610507][T11590] binder: 11569:11590 unknown command 1936094318 [ 2037.620109][T11590] binder: 11569:11590 ioctl c0306201 0 returned -22 [ 2039.056411][T11608] FAULT_INJECTION: forcing a failure. [ 2039.056411][T11608] name failslab, interval 1, probability 0, space 0, times 0 [ 2039.105110][T11608] CPU: 1 UID: 0 PID: 11608 Comm: syz.0.8322 Tainted: G L syzkaller #0 PREEMPT(full) [ 2039.105157][T11608] Tainted: [L]=SOFTLOCKUP [ 2039.105169][T11608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2039.105188][T11608] Call Trace: [ 2039.105198][T11608] [ 2039.105209][T11608] dump_stack_lvl+0x100/0x190 [ 2039.105248][T11608] should_fail_ex.cold+0x5/0xa [ 2039.105284][T11608] should_failslab+0xc2/0x120 [ 2039.105326][T11608] kmem_cache_alloc_noprof+0x91/0x6a0 [ 2039.105364][T11608] ? trace_kmem_cache_alloc+0xdd/0x100 [ 2039.105415][T11608] ? security_file_alloc+0x34/0x2c0 [ 2039.105469][T11608] security_file_alloc+0x34/0x2c0 [ 2039.105512][T11608] init_file+0x95/0x480 [ 2039.105548][T11608] alloc_empty_file+0x79/0x1c0 [ 2039.105587][T11608] alloc_file_pseudo+0x183/0x290 [ 2039.105628][T11608] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 2039.105677][T11608] __shmem_file_setup+0x205/0x460 [ 2039.105724][T11608] ? __pfx___shmem_file_setup+0x10/0x10 [ 2039.105773][T11608] ? vm_area_alloc+0x1f/0x160 [ 2039.105806][T11608] shmem_zero_setup+0x96/0x1b0 [ 2039.105843][T11608] __mmap_region+0x24ef/0x2db0 [ 2039.105882][T11608] ? __pfx___mmap_region+0x10/0x10 [ 2039.105920][T11608] ? __lock_acquire+0x49f/0x1a40 [ 2039.105989][T11608] ? __lock_acquire+0x49f/0x1a40 [ 2039.106051][T11608] ? hrtimer_start_range_ns_common+0x78e/0x18b0 [ 2039.106105][T11608] ? rcu_is_watching+0x12/0xc0 [ 2039.106141][T11608] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 2039.106174][T11608] ? lockdep_hardirqs_on+0x78/0x100 [ 2039.106270][T11608] mmap_region+0x35d/0x620 [ 2039.106305][T11608] ? rcu_is_watching+0x12/0xc0 [ 2039.106341][T11608] ? __pfx_mmap_region+0x10/0x10 [ 2039.106379][T11608] ? cap_mmap_addr+0x4b/0x120 [ 2039.106418][T11608] ? bpf_lsm_mmap_addr+0x9/0x30 [ 2039.106446][T11608] ? security_mmap_addr+0x71/0x1e0 [ 2039.106489][T11608] ? __get_unmapped_area+0x255/0x3e0 [ 2039.106537][T11608] do_mmap+0xc63/0x12f0 [ 2039.106585][T11608] ? __pfx_do_mmap+0x10/0x10 [ 2039.106626][T11608] ? __pfx_down_write_killable+0x10/0x10 [ 2039.106669][T11608] ? __pfx_futex_wait+0x10/0x10 [ 2039.106713][T11608] vm_mmap_pgoff+0x29e/0x470 [ 2039.106760][T11608] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 2039.106808][T11608] ? __pfx_do_futex+0x10/0x10 [ 2039.106848][T11608] ksys_mmap_pgoff+0xe4/0x610 [ 2039.106889][T11608] ? __x64_sys_futex+0x358/0x4d0 [ 2039.106922][T11608] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 2039.106963][T11608] ? xfd_validate_state+0x129/0x190 [ 2039.107006][T11608] __x64_sys_mmap+0x125/0x190 [ 2039.107046][T11608] do_syscall_64+0x115/0x840 [ 2039.107084][T11608] ? clear_bhb_loop+0x40/0x90 [ 2039.107120][T11608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2039.107151][T11608] RIP: 0033:0x7fcc2ed9e019 [ 2039.107176][T11608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2039.107204][T11608] RSP: 002b:00007fcc2fd06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2039.107233][T11608] RAX: ffffffffffffffda RBX: 00007fcc2f026090 RCX: 00007fcc2ed9e019 [ 2039.107255][T11608] RDX: 00004000000000df RSI: 0000000000020009 RDI: 0000000000000000 [ 2039.107274][T11608] RBP: 00007fcc2ee3500c R08: 0000000000000401 R09: 0000000000008000 [ 2039.107293][T11608] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 2039.107311][T11608] R13: 00007fcc2f026128 R14: 00007fcc2f026090 R15: 00007ffeae27d5b8 [ 2039.107352][T11608] [ 2039.629339][T11616] netlink: 'syz.3.8319': attribute type 10 has an invalid length. [ 2039.637304][T11616] netlink: 330 bytes leftover after parsing attributes in process `syz.3.8319'. [ 2042.770150][T11667] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 2042.841027][T11668] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 2042.927098][T11665] netlink: 346 bytes leftover after parsing attributes in process `syz.2.8329'. [ 2048.404118][T11761] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2048.443023][T11761] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2048.531435][T11761] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2048.538349][T11761] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2048.580563][T11761] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2048.594461][T11761] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2048.606571][T11761] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2048.614593][T11761] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2048.623991][T11761] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2048.630327][T11761] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 2048.660342][T11761] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 2049.268891][T31706] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2049.392872][T27557] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2049.421327][T27557] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2049.431325][T27557] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2049.444777][T27557] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2049.455027][T27557] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2049.528817][T31706] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2049.714736][T31706] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2049.888202][ T5635] Bluetooth: hci3: command 0x2016 tx timeout [ 2050.000601][T31706] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2050.524961][ T5635] Bluetooth: hci2: command 0x0406 tx timeout [ 2050.862629][T27557] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2050.884128][T27557] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2050.891959][T27557] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2050.903168][T27557] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2050.915011][T27557] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2051.003464][T31706] bridge_slave_1: left allmulticast mode [ 2051.019276][T31706] bridge_slave_1: left promiscuous mode [ 2051.031059][T31706] bridge0: port 2(bridge_slave_1) entered disabled state [ 2051.051467][T31706] bridge_slave_0: left allmulticast mode [ 2051.081509][T31706] bridge_slave_0: left promiscuous mode [ 2051.087483][T31706] bridge0: port 1(bridge_slave_0) entered disabled state [ 2051.451947][T31706] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2051.464636][T31706] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2051.478503][T31706] bond0 (unregistering): Released all slaves [ 2051.569172][ T5635] Bluetooth: hci0: command tx timeout [ 2051.962886][ T5635] Bluetooth: hci3: command 0x2016 tx timeout [ 2052.219326][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 2052.597143][ T5635] Bluetooth: hci2: command 0x0406 tx timeout [ 2052.882413][T11789] bridge0: port 1(bridge_slave_0) entered blocking state [ 2052.895973][T11789] bridge0: port 1(bridge_slave_0) entered disabled state [ 2052.903606][T11789] bridge_slave_0: entered allmulticast mode [ 2052.913343][T11789] bridge_slave_0: entered promiscuous mode [ 2052.991724][ T5635] Bluetooth: hci1: command tx timeout [ 2053.056622][T11789] bridge0: port 2(bridge_slave_1) entered blocking state [ 2053.069690][T11789] bridge0: port 2(bridge_slave_1) entered disabled state [ 2053.081025][T11789] bridge_slave_1: entered allmulticast mode [ 2053.095479][T11789] bridge_slave_1: entered promiscuous mode [ 2053.247083][T31706] hsr_slave_0: left promiscuous mode [ 2053.263604][T31706] hsr_slave_1: left promiscuous mode [ 2053.272992][T31706] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2053.281361][T31706] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2053.289444][T31706] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2053.298574][T31706] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2053.316115][T31706] veth1_macvtap: left promiscuous mode [ 2053.322248][T31706] veth0_macvtap: left promiscuous mode [ 2053.327860][T31706] veth1_vlan: left promiscuous mode [ 2053.333966][T31706] veth0_vlan: left promiscuous mode [ 2053.522421][T31706] team0 (unregistering): Port device team_slave_1 removed [ 2053.553888][T31706] team0 (unregistering): Port device team_slave_0 removed [ 2053.629675][ T5635] Bluetooth: hci0: command tx timeout [ 2053.664567][T11789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2053.695973][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 2053.731923][T11789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2053.808194][T11789] team0: Port device team_slave_0 added [ 2053.881484][T11789] team0: Port device team_slave_1 added [ 2053.966296][T11892] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8354'. [ 2053.980488][T11789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2053.987558][T11789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2054.013625][T11789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2054.058106][T11892] team0: Port device team_slave_0 removed [ 2054.072137][T11789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2054.082546][T11789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2054.108627][T11789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2054.279390][T11789] hsr_slave_0: entered promiscuous mode [ 2054.286750][T11789] hsr_slave_1: entered promiscuous mode [ 2054.293139][T11789] debugfs: 'hsr0' already exists in 'hsr' [ 2054.299648][T11789] Cannot create hsr debugfs directory [ 2054.451439][T11814] bridge0: port 1(bridge_slave_0) entered blocking state [ 2054.458942][T11814] bridge0: port 1(bridge_slave_0) entered disabled state [ 2054.475050][T11814] bridge_slave_0: entered allmulticast mode [ 2054.505119][T11814] bridge_slave_0: entered promiscuous mode [ 2054.575750][T11814] bridge0: port 2(bridge_slave_1) entered blocking state [ 2054.596404][T11814] bridge0: port 2(bridge_slave_1) entered disabled state [ 2054.617237][T11814] bridge_slave_1: entered allmulticast mode [ 2054.617323][ T29] audit: type=1807 audit(4294967952.150:78): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWÓ¦–Ó^¸´gq%ḦrêOŽ res=0 [ 2054.639994][T11913] ima: policy update failed [ 2054.640732][T11814] bridge_slave_1: entered promiscuous mode [ 2054.652216][ T29] audit: type=1802 audit(4294967952.171:79): pid=11913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.8356" res=0 errno=0 [ 2054.670966][ T5635] Bluetooth: hci2: command 0x0406 tx timeout [ 2054.677542][ T29] audit: type=1802 audit(4294967952.191:80): pid=11913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.8356" res=0 errno=0 [ 2054.818379][T31706] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2054.910768][T11814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2054.980915][T11814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2055.061813][ T5635] Bluetooth: hci1: command tx timeout [ 2055.085437][T31706] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2055.213004][T11814] team0: Port device team_slave_0 added [ 2055.219673][ T5287] 8021q: adding VLAN 0 to HW filter on device eth3 [ 2055.271434][T11814] team0: Port device team_slave_1 added [ 2055.302447][T31706] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2055.491642][T31706] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2055.512689][T11814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2055.520206][T11814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2055.546978][T11814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2055.562943][T11814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2055.570451][T11814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2055.599103][T11814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2055.710555][ T5635] Bluetooth: hci0: command tx timeout [ 2055.765786][T11814] hsr_slave_0: entered promiscuous mode [ 2055.773774][T11814] hsr_slave_1: entered promiscuous mode [ 2055.782300][T11814] debugfs: 'hsr0' already exists in 'hsr' [ 2055.788313][T11814] Cannot create hsr debugfs directory [ 2056.472431][T31706] bridge_slave_1: left allmulticast mode [ 2056.489896][T31706] bridge_slave_1: left promiscuous mode [ 2056.509036][T31706] bridge0: port 2(bridge_slave_1) entered disabled state [ 2056.537764][T31706] bridge_slave_0: left allmulticast mode [ 2056.550983][T31706] bridge_slave_0: left promiscuous mode [ 2056.567515][T31706] bridge0: port 1(bridge_slave_0) entered disabled state [ 2056.742538][ T5635] Bluetooth: hci2: command 0x0406 tx timeout [ 2057.094491][T31706] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2057.106567][T31706] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2057.117500][T31706] bond0 (unregistering): Released all slaves [ 2057.139560][ T5287] 8021q: adding VLAN 0 to HW filter on device eth4 [ 2057.142072][ T5635] Bluetooth: hci1: command tx timeout [ 2057.777152][ T5635] Bluetooth: hci0: command tx timeout [ 2057.953099][T31706] hsr_slave_0: left promiscuous mode [ 2057.960619][T31706] hsr_slave_1: left promiscuous mode [ 2057.966672][T31706] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2057.974067][T31706] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2057.982852][T31706] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2057.990410][T31706] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2058.002375][T31706] veth1_macvtap: left promiscuous mode [ 2058.008052][T31706] veth0_macvtap: left promiscuous mode [ 2058.013655][T31706] veth1_vlan: left promiscuous mode [ 2058.019234][T31706] veth0_vlan: left promiscuous mode [ 2058.217218][T31706] team0 (unregistering): Port device team_slave_1 removed [ 2058.236102][T31706] team0 (unregistering): Port device team_slave_0 removed [ 2058.544796][T11789] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2058.587018][T11789] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2058.610826][T11789] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2058.633804][T11789] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2058.652891][T11789] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2058.686034][T11789] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2058.810997][T11789] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2058.818009][ T5635] Bluetooth: hci2: command 0x0406 tx timeout [ 2058.835075][T11789] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2059.199827][ T5635] Bluetooth: hci1: command tx timeout [ 2060.256483][T11814] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2060.265958][T11814] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2060.277993][T11814] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2060.289312][T11814] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2060.297712][T11814] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2060.308964][T11814] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2060.322520][T11814] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2060.333105][T11814] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2060.411012][T11789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2060.466667][T11789] 8021q: adding VLAN 0 to HW filter on device team0 [ 2060.647470][T25018] bridge0: port 1(bridge_slave_0) entered blocking state [ 2060.654694][T25018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2060.871226][ T5635] Bluetooth: hci2: command 0x0406 tx timeout [ 2060.894116][T31704] bridge0: port 2(bridge_slave_1) entered blocking state [ 2060.901323][T31704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2061.898783][T11814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2061.995629][T11814] 8021q: adding VLAN 0 to HW filter on device team0 [ 2062.047638][T11070] bridge0: port 1(bridge_slave_0) entered blocking state [ 2062.054858][T11070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2062.120361][T31700] bridge0: port 2(bridge_slave_1) entered blocking state [ 2062.127572][T31700] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2063.425192][T11789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2063.709603][T11789] veth0_vlan: entered promiscuous mode [ 2063.759585][T11789] veth1_vlan: entered promiscuous mode [ 2063.854373][T11789] veth0_macvtap: entered promiscuous mode [ 2063.888124][T11789] veth1_macvtap: entered promiscuous mode [ 2063.938762][T11789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2063.982390][T11789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2064.054318][ T3353] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2064.212437][T11814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2064.597055][T31704] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2064.605820][ T3353] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2064.622822][T31704] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2065.189657][T31704] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2065.218715][T31704] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2065.283929][T11814] veth0_vlan: entered promiscuous mode [ 2065.358614][T25018] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2065.394221][T25018] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2065.499853][T11814] veth1_vlan: entered promiscuous mode [ 2066.204365][T11814] veth0_macvtap: entered promiscuous mode [ 2066.353974][T11814] veth1_macvtap: entered promiscuous mode [ 2067.016766][T11814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2067.272731][T11814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2067.560105][ T3353] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2067.775626][T12212] FAULT_INJECTION: forcing a failure. [ 2067.775626][T12212] name failslab, interval 1, probability 0, space 0, times 0 [ 2067.798085][T12212] CPU: 0 UID: 0 PID: 12212 Comm: syz.0.8374 Tainted: G L syzkaller #0 PREEMPT(full) [ 2067.798127][T12212] Tainted: [L]=SOFTLOCKUP [ 2067.798137][T12212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2067.798153][T12212] Call Trace: [ 2067.798163][T12212] [ 2067.798173][T12212] dump_stack_lvl+0x100/0x190 [ 2067.798210][T12212] should_fail_ex.cold+0x5/0xa [ 2067.798241][T12212] should_failslab+0xc2/0x120 [ 2067.798281][T12212] __kmalloc_noprof+0xfc/0x820 [ 2067.798315][T12212] ? __pfx_dynamic_dname+0x10/0x10 [ 2067.798356][T12212] ? tomoyo_encode2+0xfb/0x3c0 [ 2067.798404][T12212] tomoyo_encode2+0xfb/0x3c0 [ 2067.798451][T12212] tomoyo_encode+0x29/0x50 [ 2067.798492][T12212] tomoyo_realpath_from_path+0x18c/0x690 [ 2067.798545][T12212] tomoyo_path_number_perm+0x23c/0x580 [ 2067.798580][T12212] ? tomoyo_path_number_perm+0x22e/0x580 [ 2067.798618][T12212] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2067.798669][T12212] ? rcu_read_lock_any_held+0x6a/0xa0 [ 2067.798730][T12212] ? hook_file_ioctl_common+0x140/0x440 [ 2067.798786][T12212] security_file_ioctl+0xd3/0x230 [ 2067.798825][T12212] __x64_sys_ioctl+0xb7/0x210 [ 2067.798869][T12212] do_syscall_64+0x115/0x840 [ 2067.798913][T12212] ? clear_bhb_loop+0x40/0x90 [ 2067.798948][T12212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2067.798978][T12212] RIP: 0033:0x7fcc2ed9e019 [ 2067.799001][T12212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2067.799030][T12212] RSP: 002b:00007fcc2fd27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2067.799058][T12212] RAX: ffffffffffffffda RBX: 00007fcc2f025fa0 RCX: 00007fcc2ed9e019 [ 2067.799077][T12212] RDX: 0000000000000001 RSI: 000000004018aebd RDI: 0000000000000003 [ 2067.799095][T12212] RBP: 00007fcc2fd27090 R08: 0000000000000000 R09: 0000000000000000 [ 2067.799113][T12212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2067.799130][T12212] R13: 00007fcc2f026038 R14: 00007fcc2f025fa0 R15: 00007ffeae27d5b8 [ 2067.799170][T12212] [ 2067.799204][T12212] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2068.535539][T31706] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2069.101922][T11070] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2069.121673][T11070] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2069.122779][T31706] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2069.146527][T31706] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2069.513458][T31706] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2069.532189][T31706] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2074.060658][ T5635] Bluetooth: hci2: unknown advertising packet type: 0xea [ 2076.598038][T12343] ima: policy update failed [ 2076.632875][ T29] audit: type=1802 audit(4294967974.275:81): pid=12343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.8391" res=0 errno=0 [ 2076.841646][T12350] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8389'. [ 2077.164076][T27557] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2077.175287][T27557] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2077.191524][T27557] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2077.212948][T27557] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2077.220672][T27557] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2077.504970][T12351] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8389'. [ 2077.948248][T31706] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2078.106201][T31706] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2078.232618][T12373] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8394'. [ 2078.299736][T31706] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2078.654419][T31706] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2078.821359][T12378] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 2079.236986][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807b795400: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. [ 2079.262583][T27557] Bluetooth: hci4: command tx timeout [ 2080.480379][T31706] bridge_slave_1: left allmulticast mode [ 2080.486185][T31706] bridge_slave_1: left promiscuous mode [ 2080.492873][T31706] bridge0: port 2(bridge_slave_1) entered disabled state [ 2080.503295][T31706] bridge_slave_0: left allmulticast mode [ 2080.509026][T31706] bridge_slave_0: left promiscuous mode [ 2080.514889][T31706] bridge0: port 1(bridge_slave_0) entered disabled state [ 2080.732315][T31706] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2080.753335][T31706] bond0 (unregistering): Released all slaves [ 2080.785871][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 2081.325454][T27557] Bluetooth: hci4: command tx timeout [ 2081.372201][T12352] bridge0: port 1(bridge_slave_0) entered blocking state [ 2081.391050][T12352] bridge0: port 1(bridge_slave_0) entered disabled state [ 2081.401093][T12352] bridge_slave_0: entered allmulticast mode [ 2081.423618][T12352] bridge_slave_0: entered promiscuous mode [ 2081.461235][T12352] bridge0: port 2(bridge_slave_1) entered blocking state [ 2081.479237][T12352] bridge0: port 2(bridge_slave_1) entered disabled state [ 2081.493599][T12352] bridge_slave_1: entered allmulticast mode [ 2081.502717][T12352] bridge_slave_1: entered promiscuous mode [ 2081.604940][T12352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2081.622861][T12352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2081.763589][T12352] team0: Port device team_slave_0 added [ 2081.805872][T12352] team0: Port device team_slave_1 added [ 2081.957024][T12352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2081.983594][T12352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2082.010584][T12352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2082.104539][T12352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2082.115924][T12352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2082.158511][T12352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2082.644224][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 2082.951334][T12352] hsr_slave_0: entered promiscuous mode [ 2082.960208][T12352] hsr_slave_1: entered promiscuous mode [ 2082.966368][T12352] debugfs: 'hsr0' already exists in 'hsr' [ 2082.972145][T12352] Cannot create hsr debugfs directory [ 2083.393662][T27557] Bluetooth: hci4: command tx timeout [ 2084.002173][T12481] FAULT_INJECTION: forcing a failure. [ 2084.002173][T12481] name failslab, interval 1, probability 0, space 0, times 0 [ 2084.039152][T12481] CPU: 1 UID: 0 PID: 12481 Comm: syz.2.8403 Tainted: G L syzkaller #0 PREEMPT(full) [ 2084.039195][T12481] Tainted: [L]=SOFTLOCKUP [ 2084.039205][T12481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2084.039224][T12481] Call Trace: [ 2084.039233][T12481] [ 2084.039244][T12481] dump_stack_lvl+0x100/0x190 [ 2084.039282][T12481] should_fail_ex.cold+0x5/0xa [ 2084.039316][T12481] should_failslab+0xc2/0x120 [ 2084.039357][T12481] kmem_cache_alloc_noprof+0x91/0x6a0 [ 2084.039395][T12481] ? __kernfs_new_node+0xd2/0xa10 [ 2084.039432][T12481] __kernfs_new_node+0xd2/0xa10 [ 2084.039468][T12481] ? __pfx___kernfs_new_node+0x10/0x10 [ 2084.039508][T12481] ? find_held_lock+0x2b/0x80 [ 2084.039547][T12481] ? kernfs_root+0xee/0x2a0 [ 2084.039590][T12481] ? kernfs_root+0xee/0x2a0 [ 2084.039642][T12481] kernfs_new_node+0x117/0x150 [ 2084.039679][T12481] __kernfs_create_file+0x53/0x350 [ 2084.039730][T12481] sysfs_add_file_mode_ns+0x207/0x3c0 [ 2084.039781][T12481] internal_create_group+0x593/0xfb0 [ 2084.039837][T12481] ? __pfx_internal_create_group+0x10/0x10 [ 2084.039889][T12481] ? kernfs_create_link+0x1bd/0x240 [ 2084.039934][T12481] internal_create_groups+0x9d/0x150 [ 2084.039983][T12481] device_add+0xf60/0x1970 [ 2084.040018][T12481] ? __pfx_device_add+0x10/0x10 [ 2084.040047][T12481] ? lockdep_init_map_type+0x5c/0x250 [ 2084.040077][T12481] ? __init_waitqueue_head+0xca/0x150 [ 2084.040117][T12481] wakeup_source_device_create+0x243/0x2e0 [ 2084.040151][T12481] wakeup_source_sysfs_add+0x1c/0x90 [ 2084.040180][T12481] wakeup_source_register+0x154/0x3e0 [ 2084.040222][T12481] ep_create_wakeup_source+0x13b/0x2e0 [ 2084.040255][T12481] ? __pfx_ep_create_wakeup_source+0x10/0x10 [ 2084.040292][T12481] ? do_epoll_ctl_file+0x10d0/0x36e0 [ 2084.040324][T12481] ? do_epoll_ctl_file+0x10d0/0x36e0 [ 2084.040362][T12481] do_epoll_ctl_file+0x1e26/0x36e0 [ 2084.040408][T12481] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 2084.040449][T12481] ? __fget_files+0x215/0x3d0 [ 2084.040482][T12481] ? __fget_files+0x21f/0x3d0 [ 2084.040519][T12481] ? do_epoll_ctl+0xfd/0x1a0 [ 2084.040549][T12481] do_epoll_ctl+0xfd/0x1a0 [ 2084.040585][T12481] ? __pfx_do_epoll_ctl+0x10/0x10 [ 2084.040630][T12481] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 2084.040668][T12481] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 2084.040724][T12481] do_syscall_64+0x115/0x840 [ 2084.040764][T12481] ? clear_bhb_loop+0x40/0x90 [ 2084.040801][T12481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2084.040833][T12481] RIP: 0033:0x7f6b5119e019 [ 2084.040858][T12481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2084.040888][T12481] RSP: 002b:00007f6b5209c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 2084.040917][T12481] RAX: ffffffffffffffda RBX: 00007f6b51425fa0 RCX: 00007f6b5119e019 [ 2084.040938][T12481] RDX: 8000000000000000 RSI: 0000000000000001 RDI: 0000000000000007 [ 2084.040958][T12481] RBP: 00007f6b5123500c R08: 0000000000000000 R09: 0000000000000000 [ 2084.040977][T12481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2084.040996][T12481] R13: 00007f6b51426038 R14: 00007f6b51425fa0 R15: 00007ffcf07ed398 [ 2084.041036][T12481] [ 2084.567867][T31706] hsr_slave_0: left promiscuous mode [ 2084.574449][T31706] hsr_slave_1: left promiscuous mode [ 2084.582323][T31706] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2084.589942][T31706] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2084.603743][T31706] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2084.611168][T31706] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2084.629325][T31706] veth1_macvtap: left promiscuous mode [ 2084.634805][T31706] veth0_macvtap: left promiscuous mode [ 2084.640401][T31706] veth1_vlan: left promiscuous mode [ 2084.645632][T31706] veth0_vlan: left promiscuous mode [ 2084.889000][T31706] team0 (unregistering): Port device team_slave_1 removed [ 2084.904258][T31706] team0 (unregistering): Port device team_slave_0 removed [ 2085.463086][T27557] Bluetooth: hci4: command tx timeout [ 2087.316719][T12352] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2087.375801][T12352] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2087.514777][T12352] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2087.531760][T12352] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2087.735000][T12352] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2087.751386][T12352] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2087.769359][T12352] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2087.783939][T12352] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2090.646646][T27557] Bluetooth: hci2: unexpected event for opcode 0x7c89 [ 2091.124053][T12352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2091.490681][T12352] 8021q: adding VLAN 0 to HW filter on device team0 [ 2091.676699][T31700] bridge0: port 1(bridge_slave_0) entered blocking state [ 2091.683903][T31700] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2091.726016][T31704] bridge0: port 2(bridge_slave_1) entered blocking state [ 2091.733223][T31704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2092.708209][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 2092.715983][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 2093.903365][T12352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2094.851266][T12352] veth0_vlan: entered promiscuous mode [ 2094.871904][T12352] veth1_vlan: entered promiscuous mode [ 2095.571277][T12352] veth0_macvtap: entered promiscuous mode [ 2095.633623][T12352] veth1_macvtap: entered promiscuous mode [ 2096.317260][T12352] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2096.501090][T12352] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2096.766129][ T3353] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2096.815400][ T3353] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2096.876322][ T3353] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2096.896146][ T3353] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2096.918497][ T3353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2096.958588][ T3353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2097.068515][T25018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2097.103536][T25018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2097.260401][T12734] FAULT_INJECTION: forcing a failure. [ 2097.260401][T12734] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2097.296395][T12734] CPU: 0 UID: 0 PID: 12734 Comm: syz.3.8427 Tainted: G L syzkaller #0 PREEMPT(full) [ 2097.296446][T12734] Tainted: [L]=SOFTLOCKUP [ 2097.296458][T12734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2097.296476][T12734] Call Trace: [ 2097.296487][T12734] [ 2097.296498][T12734] dump_stack_lvl+0x100/0x190 [ 2097.296538][T12734] should_fail_ex.cold+0x5/0xa [ 2097.296572][T12734] get_futex_key+0x1d2/0x14f0 [ 2097.296607][T12734] ? __pfx_get_futex_key+0x10/0x10 [ 2097.296651][T12734] futex_wake+0xf4/0x5e0 [ 2097.296693][T12734] ? __pfx_futex_wake+0x10/0x10 [ 2097.296728][T12734] ? kasan_quarantine_put+0x104/0x240 [ 2097.296771][T12734] ? putname+0xb1/0x110 [ 2097.296801][T12734] ? kmem_cache_free+0x127/0x6b0 [ 2097.296845][T12734] do_futex+0x2b2/0x440 [ 2097.296879][T12734] ? __pfx_do_futex+0x10/0x10 [ 2097.296909][T12734] ? __pfx_do_sys_openat2+0x10/0x10 [ 2097.296959][T12734] __x64_sys_futex+0x34f/0x4d0 [ 2097.296994][T12734] ? __x64_sys_openat+0x12d/0x210 [ 2097.297035][T12734] ? __pfx___x64_sys_futex+0x10/0x10 [ 2097.297083][T12734] do_syscall_64+0x115/0x840 [ 2097.297123][T12734] ? clear_bhb_loop+0x40/0x90 [ 2097.297159][T12734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2097.297190][T12734] RIP: 0033:0x7efdd2d9e019 [ 2097.297215][T12734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2097.297241][T12734] RSP: 002b:00007efdd3d200e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2097.297269][T12734] RAX: ffffffffffffffda RBX: 00007efdd3025fa8 RCX: 00007efdd2d9e019 [ 2097.297289][T12734] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007efdd3025fac [ 2097.297308][T12734] RBP: 00007efdd3025fa0 R08: 0000000000000001 R09: 0000000000000000 [ 2097.297327][T12734] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 2097.297345][T12734] R13: 00007efdd3026038 R14: 00007ffc6ca12050 R15: 00007ffc6ca12138 [ 2097.297384][T12734] [ 2101.315130][T12825] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.8438: iget: checksum invalid [ 2101.332324][T12825] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 2101.355741][T12825] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.8438: iget: checksum invalid [ 2101.408295][T12825] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 2101.423521][T12825] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.8438: iget: checksum invalid [ 2101.445759][T12825] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 2101.456415][T12825] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.8438: iget: checksum invalid [ 2101.467935][T12825] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 2101.479148][T12825] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 2101.488911][T12825] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 2102.512569][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802cb23000: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. [ 2104.356496][T12872] overlayfs: missing 'lowerdir' [ 2106.839921][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880330cb800: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. [ 2109.437237][T12957] random: crng reseeded on system resumption [ 2109.968318][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88806982c000: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. [ 2110.989363][T12996] overlayfs: missing 'lowerdir' [ 2115.316528][T13075] FAULT_INJECTION: forcing a failure. [ 2115.316528][T13075] name failslab, interval 1, probability 0, space 0, times 0 [ 2115.374203][T13075] CPU: 1 UID: 0 PID: 13075 Comm: syz.0.8474 Tainted: G L syzkaller #0 PREEMPT(full) [ 2115.374247][T13075] Tainted: [L]=SOFTLOCKUP [ 2115.374257][T13075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2115.374275][T13075] Call Trace: [ 2115.374284][T13075] [ 2115.374296][T13075] dump_stack_lvl+0x100/0x190 [ 2115.374332][T13075] should_fail_ex.cold+0x5/0xa [ 2115.374365][T13075] should_failslab+0xc2/0x120 [ 2115.374404][T13075] kmem_cache_alloc_noprof+0x91/0x6a0 [ 2115.374440][T13075] ? __lock_acquire+0x49f/0x1a40 [ 2115.374484][T13075] ? radix_tree_node_alloc.constprop.0+0x66/0x340 [ 2115.374527][T13075] radix_tree_node_alloc.constprop.0+0x66/0x340 [ 2115.374567][T13075] idr_get_free+0x52e/0xa00 [ 2115.374615][T13075] idr_alloc_u32+0x1ac/0x320 [ 2115.374658][T13075] ? __pfx_idr_alloc_u32+0x10/0x10 [ 2115.374710][T13075] idr_alloc+0xc0/0x130 [ 2115.374748][T13075] ? __pfx_idr_alloc+0x10/0x10 [ 2115.374785][T13075] ? __might_fault+0xc5/0x140 [ 2115.374825][T13075] kvm_vm_ioctl_hv_eventfd+0x154/0x260 [ 2115.374875][T13075] kvm_arch_vm_ioctl+0xa19/0x18d0 [ 2115.374924][T13075] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 2115.374966][T13075] ? __lock_acquire+0x49f/0x1a40 [ 2115.375031][T13075] ? __lock_acquire+0x49f/0x1a40 [ 2115.375082][T13075] ? __lock_acquire+0x49f/0x1a40 [ 2115.375131][T13075] ? __lock_acquire+0x49f/0x1a40 [ 2115.375193][T13075] ? find_held_lock+0x2b/0x80 [ 2115.375229][T13075] ? is_bpf_text_address+0x8a/0x1a0 [ 2115.375268][T13075] ? is_bpf_text_address+0x8a/0x1a0 [ 2115.375307][T13075] ? bpf_ksym_find+0x124/0x1c0 [ 2115.375338][T13075] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2115.375378][T13075] ? is_bpf_text_address+0x94/0x1a0 [ 2115.375416][T13075] ? kernel_text_address+0x8d/0x100 [ 2115.375456][T13075] ? __pfx_widen_string+0x10/0x10 [ 2115.375484][T13075] ? __kernel_text_address+0xd/0x30 [ 2115.375522][T13075] ? unwind_get_return_address+0x59/0xa0 [ 2115.375564][T13075] ? arch_stack_walk+0xa6/0xf0 [ 2115.375614][T13075] ? tomoyo_path_number_perm+0x46d/0x580 [ 2115.375654][T13075] ? stack_trace_save+0x8e/0xc0 [ 2115.375691][T13075] ? __pfx_stack_trace_save+0x10/0x10 [ 2115.375731][T13075] ? stack_depot_save_flags+0x27/0x9d0 [ 2115.375775][T13075] ? __lock_acquire+0x49f/0x1a40 [ 2115.375818][T13075] ? tomoyo_path_number_perm+0x46d/0x580 [ 2115.375860][T13075] kvm_vm_ioctl+0x1560/0x4180 [ 2115.375897][T13075] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2115.375942][T13075] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 2115.376006][T13075] ? kasan_quarantine_put+0x104/0x240 [ 2115.376039][T13075] ? lockdep_hardirqs_on+0x78/0x100 [ 2115.376076][T13075] ? find_held_lock+0x2b/0x80 [ 2115.376106][T13075] ? tomoyo_path_number_perm+0x28f/0x580 [ 2115.376143][T13075] ? tomoyo_path_number_perm+0x28f/0x580 [ 2115.376192][T13075] ? tomoyo_path_number_perm+0x188/0x580 [ 2115.376231][T13075] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2115.376279][T13075] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2115.376321][T13075] ? do_vfs_ioctl+0x226/0x13e0 [ 2115.376361][T13075] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 2115.376413][T13075] ? hook_file_ioctl_common+0x140/0x440 [ 2115.376468][T13075] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 2115.376508][T13075] __x64_sys_ioctl+0x18e/0x210 [ 2115.376551][T13075] do_syscall_64+0x115/0x840 [ 2115.376587][T13075] ? clear_bhb_loop+0x40/0x90 [ 2115.376623][T13075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2115.376653][T13075] RIP: 0033:0x7f6ad739e019 [ 2115.376675][T13075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2115.376701][T13075] RSP: 002b:00007f6ad832a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2115.376728][T13075] RAX: ffffffffffffffda RBX: 00007f6ad7625fa0 RCX: 00007f6ad739e019 [ 2115.376748][T13075] RDX: 0000000000000001 RSI: 000000004018aebd RDI: 0000000000000003 [ 2115.376765][T13075] RBP: 00007f6ad832a090 R08: 0000000000000000 R09: 0000000000000000 [ 2115.376783][T13075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2115.376801][T13075] R13: 00007f6ad7626038 R14: 00007f6ad7625fa0 R15: 00007fff047212e8 [ 2115.376839][T13075] [ 2116.903857][T13070] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 2123.058134][T13209] FAULT_INJECTION: forcing a failure. [ 2123.058134][T13209] name failslab, interval 1, probability 0, space 0, times 0 [ 2123.100943][T13209] CPU: 1 UID: 0 PID: 13209 Comm: syz.1.8492 Tainted: G L syzkaller #0 PREEMPT(full) [ 2123.100991][T13209] Tainted: [L]=SOFTLOCKUP [ 2123.101002][T13209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2123.101019][T13209] Call Trace: [ 2123.101030][T13209] [ 2123.101041][T13209] dump_stack_lvl+0x100/0x190 [ 2123.101080][T13209] should_fail_ex.cold+0x5/0xa [ 2123.101115][T13209] should_failslab+0xc2/0x120 [ 2123.101155][T13209] kmem_cache_alloc_noprof+0x91/0x6a0 [ 2123.101195][T13209] ? dst_alloc+0x99/0x1a0 [ 2123.101239][T13209] dst_alloc+0x99/0x1a0 [ 2123.101280][T13209] rt_dst_alloc+0x35/0x3a0 [ 2123.101320][T13209] ip_route_output_key_hash_rcu+0x87a/0x2870 [ 2123.101376][T13209] ip_route_output_key_hash+0x118/0x2b0 [ 2123.101428][T13209] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 2123.101485][T13209] ? __call_rcu_common.constprop.0+0x3f0/0x9b0 [ 2123.101529][T13209] ? lockdep_hardirqs_on+0x78/0x100 [ 2123.101578][T13209] ip_route_output_flow+0x27/0x150 [ 2123.101628][T13209] __ip4_datagram_connect+0x8bf/0x1480 [ 2123.101686][T13209] ip4_datagram_connect+0x2e/0x50 [ 2123.101728][T13209] inet_dgram_connect+0x143/0x200 [ 2123.101770][T13209] ? __pfx_inet_dgram_connect+0x10/0x10 [ 2123.101809][T13209] __sys_connect_file+0x141/0x1a0 [ 2123.101853][T13209] __sys_connect+0x141/0x170 [ 2123.101891][T13209] ? __pfx___sys_connect+0x10/0x10 [ 2123.101958][T13209] __x64_sys_connect+0x72/0xb0 [ 2123.101995][T13209] ? lockdep_hardirqs_on+0x78/0x100 [ 2123.102033][T13209] do_syscall_64+0x115/0x840 [ 2123.102072][T13209] ? clear_bhb_loop+0x40/0x90 [ 2123.102109][T13209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2123.102141][T13209] RIP: 0033:0x7f0a1399e019 [ 2123.102166][T13209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2123.102196][T13209] RSP: 002b:00007f0a14841028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 2123.102226][T13209] RAX: ffffffffffffffda RBX: 00007f0a13c26090 RCX: 00007f0a1399e019 [ 2123.102247][T13209] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000006 [ 2123.102266][T13209] RBP: 00007f0a13a3500c R08: 0000000000000000 R09: 0000000000000000 [ 2123.102286][T13209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2123.102304][T13209] R13: 00007f0a13c26128 R14: 00007f0a13c26090 R15: 00007ffc229b5c78 [ 2123.102346][T13209] [ 2123.897347][T13218] FAULT_INJECTION: forcing a failure. [ 2123.897347][T13218] name failslab, interval 1, probability 0, space 0, times 0 [ 2123.936621][T13218] CPU: 1 UID: 0 PID: 13218 Comm: syz.1.8494 Tainted: G L syzkaller #0 PREEMPT(full) [ 2123.936663][T13218] Tainted: [L]=SOFTLOCKUP [ 2123.936674][T13218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2123.936691][T13218] Call Trace: [ 2123.936701][T13218] [ 2123.936712][T13218] dump_stack_lvl+0x100/0x190 [ 2123.936748][T13218] should_fail_ex.cold+0x5/0xa [ 2123.936780][T13218] should_failslab+0xc2/0x120 [ 2123.936818][T13218] kmem_cache_alloc_noprof+0x91/0x6a0 [ 2123.936852][T13218] ? __lock_acquire+0x49f/0x1a40 [ 2123.936892][T13218] ? radix_tree_node_alloc.constprop.0+0x66/0x340 [ 2123.936935][T13218] radix_tree_node_alloc.constprop.0+0x66/0x340 [ 2123.936974][T13218] idr_get_free+0x52e/0xa00 [ 2123.937021][T13218] idr_alloc_u32+0x1ac/0x320 [ 2123.937064][T13218] ? __pfx_idr_alloc_u32+0x10/0x10 [ 2123.937117][T13218] idr_alloc+0xc0/0x130 [ 2123.937154][T13218] ? __pfx_idr_alloc+0x10/0x10 [ 2123.937192][T13218] ? __might_fault+0xc5/0x140 [ 2123.937232][T13218] kvm_vm_ioctl_hv_eventfd+0x154/0x260 [ 2123.937282][T13218] kvm_arch_vm_ioctl+0xa19/0x18d0 [ 2123.937329][T13218] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 2123.937372][T13218] ? lock_acquire+0x1b9/0x370 [ 2123.937415][T13218] ? find_held_lock+0x2b/0x80 [ 2123.937448][T13218] ? clockevents_program_event+0x23e/0x820 [ 2123.937489][T13218] ? clockevents_program_event+0x23e/0x820 [ 2123.937529][T13218] ? ktime_get+0x9f/0x320 [ 2123.937570][T13218] ? ktime_get+0x1a4/0x320 [ 2123.937613][T13218] ? lapic_next_event+0x10/0x20 [ 2123.937647][T13218] ? clockevents_program_event+0x1ef/0x820 [ 2123.937689][T13218] ? __pfx_clockevents_program_event+0x10/0x10 [ 2123.937733][T13218] ? __lock_acquire+0x49f/0x1a40 [ 2123.937795][T13218] ? find_held_lock+0x2b/0x80 [ 2123.937828][T13218] ? is_bpf_text_address+0x8a/0x1a0 [ 2123.937868][T13218] ? is_bpf_text_address+0x8a/0x1a0 [ 2123.937907][T13218] ? bpf_ksym_find+0x124/0x1c0 [ 2123.937939][T13218] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2123.937981][T13218] ? is_bpf_text_address+0x94/0x1a0 [ 2123.938021][T13218] ? kernel_text_address+0x8d/0x100 [ 2123.938063][T13218] ? __kernel_text_address+0xd/0x30 [ 2123.938106][T13218] ? unwind_get_return_address+0x59/0xa0 [ 2123.938147][T13218] ? arch_stack_walk+0xa6/0xf0 [ 2123.938196][T13218] ? tomoyo_path_number_perm+0x46d/0x580 [ 2123.938235][T13218] ? stack_trace_save+0x8e/0xc0 [ 2123.938273][T13218] ? __pfx_stack_trace_save+0x10/0x10 [ 2123.938311][T13218] ? stack_depot_save_flags+0x27/0x9d0 [ 2123.938357][T13218] ? __lock_acquire+0x49f/0x1a40 [ 2123.938401][T13218] ? tomoyo_path_number_perm+0x46d/0x580 [ 2123.938444][T13218] kvm_vm_ioctl+0x1560/0x4180 [ 2123.938488][T13218] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2123.938533][T13218] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 2123.938598][T13218] ? kasan_quarantine_put+0x104/0x240 [ 2123.938632][T13218] ? lockdep_hardirqs_on+0x78/0x100 [ 2123.938670][T13218] ? find_held_lock+0x2b/0x80 [ 2123.938703][T13218] ? tomoyo_path_number_perm+0x28f/0x580 [ 2123.938740][T13218] ? tomoyo_path_number_perm+0x28f/0x580 [ 2123.938784][T13218] ? tomoyo_path_number_perm+0x188/0x580 [ 2123.938823][T13218] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2123.938874][T13218] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2123.938916][T13218] ? do_vfs_ioctl+0x226/0x13e0 [ 2123.938957][T13218] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 2123.939010][T13218] ? hook_file_ioctl_common+0x140/0x440 [ 2123.939064][T13218] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 2123.939103][T13218] __x64_sys_ioctl+0x18e/0x210 [ 2123.939146][T13218] do_syscall_64+0x115/0x840 [ 2123.939181][T13218] ? clear_bhb_loop+0x40/0x90 [ 2123.939216][T13218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2123.939244][T13218] RIP: 0033:0x7f0a1399e019 [ 2123.939267][T13218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2123.939293][T13218] RSP: 002b:00007f0a14862028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2123.939320][T13218] RAX: ffffffffffffffda RBX: 00007f0a13c25fa0 RCX: 00007f0a1399e019 [ 2123.939339][T13218] RDX: 0000000000000001 RSI: 000000004018aebd RDI: 0000000000000003 [ 2123.939357][T13218] RBP: 00007f0a14862090 R08: 0000000000000000 R09: 0000000000000000 [ 2123.939374][T13218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2123.939391][T13218] R13: 00007f0a13c26038 R14: 00007f0a13c25fa0 R15: 00007ffc229b5c78 [ 2123.939430][T13218] [ 2127.077613][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888022313400: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. [ 2130.532452][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888057a7cc00: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. [ 2130.817230][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888036d60c00: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. [ 2132.705310][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807fd7e000: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. [ 2137.848829][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888057c3ec00: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. [ 2138.646689][T13454] FAULT_INJECTION: forcing a failure. [ 2138.646689][T13454] name failslab, interval 1, probability 0, space 0, times 0 [ 2138.659712][T13454] CPU: 1 UID: 0 PID: 13454 Comm: syz.3.8528 Tainted: G L syzkaller #0 PREEMPT(full) [ 2138.659754][T13454] Tainted: [L]=SOFTLOCKUP [ 2138.659765][T13454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2138.659782][T13454] Call Trace: [ 2138.659792][T13454] [ 2138.659803][T13454] dump_stack_lvl+0x100/0x190 [ 2138.659842][T13454] should_fail_ex.cold+0x5/0xa [ 2138.659876][T13454] should_failslab+0xc2/0x120 [ 2138.659918][T13454] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 2138.659955][T13454] ? find_held_lock+0x2b/0x80 [ 2138.659990][T13454] ? alloc_inode+0x183/0x250 [ 2138.660035][T13454] alloc_inode+0x183/0x250 [ 2138.660072][T13454] path_from_stashed+0x25b/0x750 [ 2138.660113][T13454] open_namespace_file+0x8f/0x130 [ 2138.660146][T13454] ? __pfx_open_namespace_file+0x10/0x10 [ 2138.660188][T13454] vfs_open_tree+0x8ec/0xae0 [ 2138.660218][T13454] ? _raw_spin_unlock+0x28/0x50 [ 2138.660252][T13454] ? __pfx_vfs_open_tree+0x10/0x10 [ 2138.660292][T13454] __x64_sys_open_tree+0xa3/0x150 [ 2138.660327][T13454] do_syscall_64+0x115/0x840 [ 2138.660362][T13454] ? clear_bhb_loop+0x40/0x90 [ 2138.660395][T13454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2138.660432][T13454] RIP: 0033:0x7efdd2d9e019 [ 2138.660457][T13454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2138.660487][T13454] RSP: 002b:00007efdd3d20028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 2138.660514][T13454] RAX: ffffffffffffffda RBX: 00007efdd3025fa0 RCX: 00007efdd2d9e019 [ 2138.660533][T13454] RDX: 0000000000000002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 2138.660551][T13454] RBP: 00007efdd2e3500c R08: 0000000000000000 R09: 0000000000000000 [ 2138.660570][T13454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2138.660589][T13454] R13: 00007efdd3026038 R14: 00007efdd3025fa0 R15: 00007ffc6ca12138 [ 2138.660631][T13454] [ 2138.679710][T13454] FAULT_INJECTION: forcing a failure. [ 2138.679710][T13454] name failslab, interval 1, probability 0, space 0, times 0 [ 2138.886384][T13454] CPU: 0 UID: 0 PID: 13454 Comm: syz.3.8528 Tainted: G L syzkaller #0 PREEMPT(full) [ 2138.886449][T13454] Tainted: [L]=SOFTLOCKUP [ 2138.886461][T13454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2138.886480][T13454] Call Trace: [ 2138.886490][T13454] [ 2138.886501][T13454] dump_stack_lvl+0x100/0x190 [ 2138.886540][T13454] should_fail_ex.cold+0x5/0xa [ 2138.886575][T13454] should_failslab+0xc2/0x120 [ 2138.886617][T13454] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 2138.886654][T13454] ? find_held_lock+0x2b/0x80 [ 2138.886689][T13454] ? do_writev+0x214/0x340 [ 2138.886732][T13454] ? sock_alloc_inode+0x26/0x2c0 [ 2138.886763][T13454] ? __pfx_sock_alloc_inode+0x10/0x10 [ 2138.886795][T13454] sock_alloc_inode+0x26/0x2c0 [ 2138.886824][T13454] ? __pfx_sock_alloc_inode+0x10/0x10 [ 2138.886851][T13454] alloc_inode+0x68/0x250 [ 2138.886892][T13454] sock_alloc+0x44/0x280 [ 2138.886930][T13454] ? security_socket_create+0x7f/0x250 [ 2138.886968][T13454] __sock_create+0xc2/0x860 [ 2138.887006][T13454] __sys_socket+0x14d/0x260 [ 2138.887040][T13454] ? __pfx___sys_socket+0x10/0x10 [ 2138.887085][T13454] __x64_sys_socket+0x72/0xb0 [ 2138.887118][T13454] ? lockdep_hardirqs_on+0x78/0x100 [ 2138.887158][T13454] do_syscall_64+0x115/0x840 [ 2138.887195][T13454] ? clear_bhb_loop+0x40/0x90 [ 2138.887231][T13454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2138.887261][T13454] RIP: 0033:0x7efdd2d9e019 [ 2138.887286][T13454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2138.887313][T13454] RSP: 002b:00007efdd3d20028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2138.887340][T13454] RAX: ffffffffffffffda RBX: 00007efdd3025fa0 RCX: 00007efdd2d9e019 [ 2138.887360][T13454] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000015 [ 2138.887378][T13454] RBP: 00007efdd2e3500c R08: 0000000000000000 R09: 0000000000000000 [ 2138.887396][T13454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2138.887414][T13454] R13: 00007efdd3026038 R14: 00007efdd3025fa0 R15: 00007ffc6ca12138 [ 2138.887459][T13454] [ 2138.887474][T13454] socket: no more sockets [ 2140.244041][T13488] FAULT_INJECTION: forcing a failure. [ 2140.244041][T13488] name failslab, interval 1, probability 0, space 0, times 0 [ 2140.256912][T13488] CPU: 0 UID: 0 PID: 13488 Comm: syz.0.8534 Tainted: G L syzkaller #0 PREEMPT(full) [ 2140.256955][T13488] Tainted: [L]=SOFTLOCKUP [ 2140.256965][T13488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2140.256981][T13488] Call Trace: [ 2140.256991][T13488] [ 2140.257002][T13488] dump_stack_lvl+0x100/0x190 [ 2140.257039][T13488] should_fail_ex.cold+0x5/0xa [ 2140.257071][T13488] should_failslab+0xc2/0x120 [ 2140.257111][T13488] __kmalloc_noprof+0xfc/0x820 [ 2140.257147][T13488] ? tomoyo_encode2+0xfb/0x3c0 [ 2140.257195][T13488] tomoyo_encode2+0xfb/0x3c0 [ 2140.257242][T13488] tomoyo_encode+0x29/0x50 [ 2140.257282][T13488] tomoyo_realpath_from_path+0x18c/0x690 [ 2140.257334][T13488] tomoyo_check_open_permission+0x2af/0x3c0 [ 2140.257374][T13488] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 2140.257424][T13488] ? hook_file_open+0x24f/0x8f0 [ 2140.257488][T13488] ? lock_acquire+0x1b9/0x370 [ 2140.257544][T13488] tomoyo_file_open+0x6b/0x90 [ 2140.257576][T13488] security_file_open+0xb5/0x1e0 [ 2140.257617][T13488] do_dentry_open+0x588/0x14d0 [ 2140.257657][T13488] vfs_open+0x82/0x3f0 [ 2140.257697][T13488] path_openat+0x2873/0x4280 [ 2140.257743][T13488] ? __pfx_path_openat+0x10/0x10 [ 2140.257782][T13488] do_file_open+0x20e/0x430 [ 2140.257814][T13488] ? __pfx_do_file_open+0x10/0x10 [ 2140.257857][T13488] ? __pfx_kfree_link+0x10/0x10 [ 2140.257910][T13488] ? alloc_fd+0x471/0x7a0 [ 2140.257941][T13488] ? do_getname+0x191/0x390 [ 2140.257980][T13488] do_sys_openat2+0x10f/0x1e0 [ 2140.258017][T13488] ? __pfx_do_sys_openat2+0x10/0x10 [ 2140.258068][T13488] __x64_sys_openat+0x12d/0x210 [ 2140.258107][T13488] ? __pfx___x64_sys_openat+0x10/0x10 [ 2140.258161][T13488] do_syscall_64+0x115/0x840 [ 2140.258198][T13488] ? clear_bhb_loop+0x40/0x90 [ 2140.258233][T13488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2140.258262][T13488] RIP: 0033:0x7f6ad735e84e [ 2140.258284][T13488] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2140.258310][T13488] RSP: 002b:00007f6ad8308f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2140.258336][T13488] RAX: ffffffffffffffda RBX: 00007f6ad83096c0 RCX: 00007f6ad735e84e [ 2140.258355][T13488] RDX: 0000000000000002 RSI: 00007f6ad7434913 RDI: ffffffffffffff9c [ 2140.258374][T13488] RBP: 00007f6ad743500c R08: 0000000000000000 R09: 0000000000000000 [ 2140.258392][T13488] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000d [ 2140.258409][T13488] R13: 00007f6ad7626128 R14: 00007f6ad7626090 R15: 00007fff047212e8 [ 2140.258448][T13488] [ 2140.517903][T13488] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2140.531129][T13488] FAULT_INJECTION: forcing a failure. [ 2140.531129][T13488] name failslab, interval 1, probability 0, space 0, times 0 [ 2140.598011][T13488] CPU: 1 UID: 0 PID: 13488 Comm: syz.0.8534 Tainted: G L syzkaller #0 PREEMPT(full) [ 2140.598053][T13488] Tainted: [L]=SOFTLOCKUP [ 2140.598063][T13488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2140.598081][T13488] Call Trace: [ 2140.598090][T13488] [ 2140.598101][T13488] dump_stack_lvl+0x100/0x190 [ 2140.598138][T13488] should_fail_ex.cold+0x5/0xa [ 2140.598170][T13488] should_failslab+0xc2/0x120 [ 2140.598209][T13488] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 2140.598247][T13488] ? copy_process+0x69a/0x8030 [ 2140.598287][T13488] copy_process+0x69a/0x8030 [ 2140.598340][T13488] ? __pfx_copy_process+0x10/0x10 [ 2140.598380][T13488] ? __kasan_kmalloc+0xaa/0xb0 [ 2140.598417][T13488] ? lockdep_init_map_type+0x5c/0x250 [ 2140.598447][T13488] ? lockdep_init_map_type+0x5c/0x250 [ 2140.598476][T13488] ? __pfx_vhost_run_work_list+0x10/0x10 [ 2140.598511][T13488] ? __pfx_vhost_worker_killed+0x10/0x10 [ 2140.598541][T13488] vhost_task_create+0x1db/0x370 [ 2140.598583][T13488] ? __pfx_vhost_task_create+0x10/0x10 [ 2140.598634][T13488] ? __pfx_vhost_task_fn+0x10/0x10 [ 2140.598683][T13488] ? snprintf+0xc7/0x100 [ 2140.598723][T13488] vhost_task_worker_create+0x8d/0x260 [ 2140.598758][T13488] ? __pfx_vhost_task_worker_create+0x10/0x10 [ 2140.598791][T13488] ? lockdep_init_map_type+0x5c/0x250 [ 2140.598819][T13488] ? lockdep_init_map_type+0x5c/0x250 [ 2140.598852][T13488] vhost_worker_create+0x240/0x300 [ 2140.598882][T13488] ? __pfx_vhost_worker_create+0x10/0x10 [ 2140.598915][T13488] ? vhost_dev_set_owner+0x190/0xa30 [ 2140.598954][T13488] vhost_dev_set_owner+0x719/0xa30 [ 2140.598998][T13488] vhost_net_ioctl+0xfa3/0x1910 [ 2140.599034][T13488] ? do_vfs_ioctl+0x226/0x13e0 [ 2140.599074][T13488] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 2140.599113][T13488] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 2140.599155][T13488] ? find_held_lock+0x2b/0x80 [ 2140.599187][T13488] ? __fget_files+0x215/0x3d0 [ 2140.599211][T13488] ? hook_file_ioctl_common+0x140/0x440 [ 2140.599257][T13488] ? __fget_files+0x21f/0x3d0 [ 2140.599288][T13488] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 2140.599324][T13488] __x64_sys_ioctl+0x18e/0x210 [ 2140.599366][T13488] do_syscall_64+0x115/0x840 [ 2140.599409][T13488] ? clear_bhb_loop+0x40/0x90 [ 2140.599444][T13488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2140.599474][T13488] RIP: 0033:0x7f6ad739e019 [ 2140.599498][T13488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2140.599525][T13488] RSP: 002b:00007f6ad8309028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2140.599552][T13488] RAX: ffffffffffffffda RBX: 00007f6ad7626090 RCX: 00007f6ad739e019 [ 2140.599571][T13488] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000003 [ 2140.599589][T13488] RBP: 00007f6ad8309090 R08: 0000000000000000 R09: 0000000000000000 [ 2140.599606][T13488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2140.599624][T13488] R13: 00007f6ad7626128 R14: 00007f6ad7626090 R15: 00007fff047212e8 [ 2140.599663][T13488] [ 2144.401078][ T29] audit: type=1800 audit(4294968042.397:82): pid=13547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.8542" name="lu_gp_id" dev="configfs" ino=407266 res=0 errno=0 [ 2145.832392][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888068d31400: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. [ 2147.606503][T13601] FAULT_INJECTION: forcing a failure. [ 2147.606503][T13601] name failslab, interval 1, probability 0, space 0, times 0 [ 2147.629707][T13601] CPU: 1 UID: 0 PID: 13601 Comm: syz.0.8552 Tainted: G L syzkaller #0 PREEMPT(full) [ 2147.629751][T13601] Tainted: [L]=SOFTLOCKUP [ 2147.629762][T13601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2147.629780][T13601] Call Trace: [ 2147.629790][T13601] [ 2147.629801][T13601] dump_stack_lvl+0x100/0x190 [ 2147.629840][T13601] should_fail_ex.cold+0x5/0xa [ 2147.629875][T13601] should_failslab+0xc2/0x120 [ 2147.629914][T13601] __kmalloc_noprof+0xfc/0x820 [ 2147.629952][T13601] ? tomoyo_encode2+0xfb/0x3c0 [ 2147.630002][T13601] tomoyo_encode2+0xfb/0x3c0 [ 2147.630049][T13601] tomoyo_encode+0x29/0x50 [ 2147.630090][T13601] tomoyo_realpath_from_path+0x18c/0x690 [ 2147.630144][T13601] tomoyo_path_perm+0x276/0x460 [ 2147.630180][T13601] ? tomoyo_path_perm+0x262/0x460 [ 2147.630219][T13601] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 2147.630292][T13601] ? __pfx_ima_file_check+0x10/0x10 [ 2147.630331][T13601] ? hook_file_truncate+0xba/0x280 [ 2147.630390][T13601] security_file_truncate+0xb5/0x1e0 [ 2147.630436][T13601] path_openat+0x3584/0x4280 [ 2147.630484][T13601] ? __pfx_path_openat+0x10/0x10 [ 2147.630526][T13601] do_file_open+0x20e/0x430 [ 2147.630560][T13601] ? __pfx_do_file_open+0x10/0x10 [ 2147.630620][T13601] ? alloc_fd+0x471/0x7a0 [ 2147.630653][T13601] ? do_getname+0x191/0x390 [ 2147.630694][T13601] do_sys_openat2+0x10f/0x1e0 [ 2147.630735][T13601] ? __pfx_do_sys_openat2+0x10/0x10 [ 2147.630789][T13601] __x64_sys_openat+0x12d/0x210 [ 2147.630830][T13601] ? __pfx___x64_sys_openat+0x10/0x10 [ 2147.630886][T13601] do_syscall_64+0x115/0x840 [ 2147.630926][T13601] ? clear_bhb_loop+0x40/0x90 [ 2147.630962][T13601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2147.630993][T13601] RIP: 0033:0x7f6ad739e019 [ 2147.631018][T13601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2147.631047][T13601] RSP: 002b:00007f6ad832a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2147.631076][T13601] RAX: ffffffffffffffda RBX: 00007f6ad7625fa0 RCX: 00007f6ad739e019 [ 2147.631096][T13601] RDX: 0000000000080302 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 2147.631115][T13601] RBP: 00007f6ad743500c R08: 0000000000000000 R09: 0000000000000000 [ 2147.631134][T13601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2147.631152][T13601] R13: 00007f6ad7626038 R14: 00007f6ad7625fa0 R15: 00007fff047212e8 [ 2147.631195][T13601] [ 2147.631301][T13601] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2149.275261][T13633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8556'. [ 2150.493219][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807e8d5000: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. [ 2153.573895][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880579e7400: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. [ 2153.665771][T13713] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 2153.840883][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 2153.847277][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 2154.692373][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807ad37400: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. [ 2159.286970][T13835] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 2160.794553][T13856] HfR: entered promiscuous mode [ 2160.998799][T13867] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8589'. [ 2163.392840][T13913] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8594'. [ 2166.339613][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807c90b400: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. [ 2168.539381][T14010] FAULT_INJECTION: forcing a failure. [ 2168.539381][T14010] name failslab, interval 1, probability 0, space 0, times 0 [ 2168.561053][T14010] CPU: 1 UID: 0 PID: 14010 Comm: syz.0.8611 Tainted: G L syzkaller #0 PREEMPT(full) [ 2168.561097][T14010] Tainted: [L]=SOFTLOCKUP [ 2168.561108][T14010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2168.561125][T14010] Call Trace: [ 2168.561135][T14010] [ 2168.561146][T14010] dump_stack_lvl+0x100/0x190 [ 2168.561184][T14010] should_fail_ex.cold+0x5/0xa [ 2168.561218][T14010] should_failslab+0xc2/0x120 [ 2168.561259][T14010] __kmalloc_noprof+0xfc/0x820 [ 2168.561297][T14010] ? tomoyo_encode2+0xfb/0x3c0 [ 2168.561348][T14010] tomoyo_encode2+0xfb/0x3c0 [ 2168.561407][T14010] tomoyo_encode+0x29/0x50 [ 2168.561449][T14010] tomoyo_realpath_from_path+0x18c/0x690 [ 2168.561503][T14010] tomoyo_path_perm+0x276/0x460 [ 2168.561540][T14010] ? tomoyo_path_perm+0x262/0x460 [ 2168.561581][T14010] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 2168.561657][T14010] ? __pfx_ima_file_check+0x10/0x10 [ 2168.561695][T14010] ? hook_file_truncate+0xba/0x280 [ 2168.561743][T14010] security_file_truncate+0xb5/0x1e0 [ 2168.561788][T14010] path_openat+0x3584/0x4280 [ 2168.561835][T14010] ? __pfx_path_openat+0x10/0x10 [ 2168.561877][T14010] do_file_open+0x20e/0x430 [ 2168.561927][T14010] ? __pfx_do_file_open+0x10/0x10 [ 2168.561984][T14010] ? alloc_fd+0x471/0x7a0 [ 2168.562017][T14010] ? do_getname+0x191/0x390 [ 2168.562057][T14010] do_sys_openat2+0x10f/0x1e0 [ 2168.562097][T14010] ? __pfx_do_sys_openat2+0x10/0x10 [ 2168.562148][T14010] __x64_sys_openat+0x12d/0x210 [ 2168.562186][T14010] ? __pfx___x64_sys_openat+0x10/0x10 [ 2168.562241][T14010] do_syscall_64+0x115/0x840 [ 2168.562280][T14010] ? clear_bhb_loop+0x40/0x90 [ 2168.562317][T14010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2168.562347][T14010] RIP: 0033:0x7f6ad739e019 [ 2168.562372][T14010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2168.562399][T14010] RSP: 002b:00007f6ad832a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2168.562428][T14010] RAX: ffffffffffffffda RBX: 00007f6ad7625fa0 RCX: 00007f6ad739e019 [ 2168.562448][T14010] RDX: 0000000000080302 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 2168.562468][T14010] RBP: 00007f6ad743500c R08: 0000000000000000 R09: 0000000000000000 [ 2168.562486][T14010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2168.562504][T14010] R13: 00007f6ad7626038 R14: 00007f6ad7625fa0 R15: 00007fff047212e8 [ 2168.562545][T14010] [ 2168.562596][T14010] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2171.188385][T27557] Bluetooth: hci0: command 0x0406 tx timeout [ 2176.273331][T27557] Bluetooth: hci1: command 0x0406 tx timeout [ 2181.426036][T14239] sd 0:0:1:0: PR command failed: 1026 [ 2181.471737][T14239] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 2181.487531][T14239] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 2182.992364][T14263] FAULT_INJECTION: forcing a failure. [ 2182.992364][T14263] name failslab, interval 1, probability 0, space 0, times 0 [ 2183.025179][T14263] CPU: 1 UID: 0 PID: 14263 Comm: syz.3.8650 Tainted: G L syzkaller #0 PREEMPT(full) [ 2183.025231][T14263] Tainted: [L]=SOFTLOCKUP [ 2183.025242][T14263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2183.025260][T14263] Call Trace: [ 2183.025269][T14263] [ 2183.025281][T14263] dump_stack_lvl+0x100/0x190 [ 2183.025323][T14263] should_fail_ex.cold+0x5/0xa [ 2183.025365][T14263] should_failslab+0xc2/0x120 [ 2183.025408][T14263] kmem_cache_alloc_noprof+0x91/0x6a0 [ 2183.025443][T14263] ? __pfx_map_id_range_down+0x10/0x10 [ 2183.025485][T14263] ? security_inode_alloc+0x3b/0x2c0 [ 2183.025527][T14263] security_inode_alloc+0x3b/0x2c0 [ 2183.025563][T14263] inode_init_always_gfp+0xc77/0xfb0 [ 2183.025598][T14263] alloc_inode+0x8e/0x250 [ 2183.025637][T14263] sock_alloc+0x44/0x280 [ 2183.025680][T14263] ? security_socket_create+0x7f/0x250 [ 2183.025717][T14263] __sock_create+0xc2/0x860 [ 2183.025755][T14263] __sys_socketpair+0x1e4/0x5b0 [ 2183.025792][T14263] ? __pfx___sys_socketpair+0x10/0x10 [ 2183.025825][T14263] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 2183.025865][T14263] ? xfd_validate_state+0x129/0x190 [ 2183.025907][T14263] __x64_sys_socketpair+0x96/0x100 [ 2183.025942][T14263] ? lockdep_hardirqs_on+0x78/0x100 [ 2183.025981][T14263] do_syscall_64+0x115/0x840 [ 2183.026019][T14263] ? clear_bhb_loop+0x40/0x90 [ 2183.026055][T14263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2183.026085][T14263] RIP: 0033:0x7efdd2d9e019 [ 2183.026110][T14263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2183.026138][T14263] RSP: 002b:00007efdd3cff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 2183.026167][T14263] RAX: ffffffffffffffda RBX: 00007efdd3026090 RCX: 00007efdd2d9e019 [ 2183.026187][T14263] RDX: 8000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 2183.026206][T14263] RBP: 00007efdd2e3500c R08: 0000000000000000 R09: 0000000000000000 [ 2183.026224][T14263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2183.026242][T14263] R13: 00007efdd3026128 R14: 00007efdd3026090 R15: 00007ffc6ca12138 [ 2183.026281][T14263] [ 2183.260154][T14263] socket: no more sockets [ 2184.377347][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880660d2c00: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. [ 2185.975576][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807ffdec00: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. [ 2186.327785][T14305] FAULT_INJECTION: forcing a failure. [ 2186.327785][T14305] name failslab, interval 1, probability 0, space 0, times 0 [ 2186.340779][T14305] CPU: 1 UID: 0 PID: 14305 Comm: syz.1.8655 Tainted: G L syzkaller #0 PREEMPT(full) [ 2186.340825][T14305] Tainted: [L]=SOFTLOCKUP [ 2186.340836][T14305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2186.340853][T14305] Call Trace: [ 2186.340862][T14305] [ 2186.340873][T14305] dump_stack_lvl+0x100/0x190 [ 2186.340912][T14305] should_fail_ex.cold+0x5/0xa [ 2186.340945][T14305] should_failslab+0xc2/0x120 [ 2186.340985][T14305] __kmalloc_cache_noprof+0x91/0x6c0 [ 2186.341018][T14305] ? alloc_pipe_info+0x10e/0x590 [ 2186.341056][T14305] alloc_pipe_info+0x10e/0x590 [ 2186.341092][T14305] splice_direct_to_actor+0x78f/0xa30 [ 2186.341126][T14305] ? __pfx_direct_splice_actor+0x10/0x10 [ 2186.341160][T14305] ? __pfx_aa_file_perm+0x10/0x10 [ 2186.341207][T14305] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 2186.341248][T14305] do_splice_direct+0x174/0x240 [ 2186.341280][T14305] ? __pfx_do_splice_direct+0x10/0x10 [ 2186.341311][T14305] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 2186.341345][T14305] ? rw_verify_area+0xce/0x6d0 [ 2186.341388][T14305] do_sendfile+0xadc/0xe20 [ 2186.341437][T14305] ? __pfx_do_sendfile+0x10/0x10 [ 2186.341486][T14305] ? __x64_sys_futex+0x34f/0x4d0 [ 2186.341518][T14305] ? __x64_sys_futex+0x358/0x4d0 [ 2186.341552][T14305] __x64_sys_sendfile64+0x1d8/0x220 [ 2186.341588][T14305] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 2186.341631][T14305] do_syscall_64+0x115/0x840 [ 2186.341667][T14305] ? clear_bhb_loop+0x40/0x90 [ 2186.341712][T14305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2186.341742][T14305] RIP: 0033:0x7f0a1399e019 [ 2186.341766][T14305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2186.341793][T14305] RSP: 002b:00007f0a14862028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2186.341821][T14305] RAX: ffffffffffffffda RBX: 00007f0a13c25fa0 RCX: 00007f0a1399e019 [ 2186.341841][T14305] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 2186.341858][T14305] RBP: 00007f0a13a3500c R08: 0000000000000000 R09: 0000000000000000 [ 2186.341876][T14305] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 2186.341893][T14305] R13: 00007f0a13c26038 R14: 00007f0a13c25fa0 R15: 00007ffc229b5c78 [ 2186.341931][T14305] [ 2187.421821][T14316] overlayfs: missing 'lowerdir' [ 2188.116421][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888057a1a800: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. [ 2189.315583][T14361] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8665'. [ 2189.428582][T14357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8664'. [ 2201.057800][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88803442a000: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. [ 2201.738236][ T5635] Bluetooth: hci4: command 0x0406 tx timeout [ 2203.875802][T14620] overlayfs: missing 'lowerdir' [ 2214.967205][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 2214.973919][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 2233.033813][ T5635] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2233.048156][ T5635] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2233.058235][ T5635] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2233.067066][ T5635] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2233.077738][ T5635] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2233.917262][T31700] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2234.139240][T31700] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2234.318548][T31700] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2234.487437][T31700] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2235.164489][T27557] Bluetooth: hci3: command tx timeout [ 2235.206513][T31700] bridge_slave_1: left allmulticast mode [ 2235.225770][T31700] bridge_slave_1: left promiscuous mode [ 2235.231585][T31700] bridge0: port 2(bridge_slave_1) entered disabled state [ 2235.256227][T31700] bridge_slave_0: left allmulticast mode [ 2235.264626][T31700] bridge_slave_0: left promiscuous mode [ 2235.270419][T31700] bridge0: port 1(bridge_slave_0) entered disabled state [ 2235.510961][T31700] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2235.524949][T31700] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2235.543695][T31700] bond0 (unregistering): Released all slaves [ 2235.726446][T31700] HfR: left promiscuous mode [ 2236.481531][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 2236.831798][T15119] bridge0: port 1(bridge_slave_0) entered blocking state [ 2236.850835][T15119] bridge0: port 1(bridge_slave_0) entered disabled state [ 2236.860017][T15119] bridge_slave_0: entered allmulticast mode [ 2236.879047][T15119] bridge_slave_0: entered promiscuous mode [ 2236.958927][T15119] bridge0: port 2(bridge_slave_1) entered blocking state [ 2236.992731][T15119] bridge0: port 2(bridge_slave_1) entered disabled state [ 2237.014570][T15119] bridge_slave_1: entered allmulticast mode [ 2237.024319][T15119] bridge_slave_1: entered promiscuous mode [ 2237.114986][T15119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2237.144837][T15119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2237.233747][T27557] Bluetooth: hci3: command tx timeout [ 2237.379783][T15119] team0: Port device team_slave_0 added [ 2237.411332][T15119] team0: Port device team_slave_1 added [ 2237.585343][T15119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2237.594305][T15119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2237.628425][T15119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2237.647364][T15119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2237.655665][T15119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2237.683677][T15119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2237.697989][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 2237.901400][T15119] hsr_slave_0: entered promiscuous mode [ 2237.907764][T15119] hsr_slave_1: entered promiscuous mode [ 2237.914438][T15119] debugfs: 'hsr0' already exists in 'hsr' [ 2237.921212][T15119] Cannot create hsr debugfs directory [ 2238.415030][T31700] hsr_slave_0: left promiscuous mode [ 2238.454022][T31700] hsr_slave_1: left promiscuous mode [ 2238.489921][T31700] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2238.542491][T15256] FAULT_INJECTION: forcing a failure. [ 2238.542491][T15256] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2238.556091][T31700] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2238.571011][T31700] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2238.580642][T31700] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2238.596719][T15256] CPU: 0 UID: 0 PID: 15256 Comm: syz.1.8782 Tainted: G L syzkaller #0 PREEMPT(full) [ 2238.596761][T15256] Tainted: [L]=SOFTLOCKUP [ 2238.596771][T15256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2238.596788][T15256] Call Trace: [ 2238.596797][T15256] [ 2238.596807][T15256] dump_stack_lvl+0x100/0x190 [ 2238.596843][T15256] should_fail_ex.cold+0x5/0xa [ 2238.596876][T15256] _copy_from_user+0x2e/0xd0 [ 2238.596922][T15256] packet_setsockopt+0x1d41/0x2380 [ 2238.596969][T15256] ? __pfx_packet_setsockopt+0x10/0x10 [ 2238.597008][T15256] ? aa_sk_perm+0x309/0xaa0 [ 2238.597048][T15256] ? ksys_write+0x190/0x250 [ 2238.597083][T15256] ? find_held_lock+0x2b/0x80 [ 2238.597129][T15256] ? aa_sock_opt_perm+0xfe/0x1b0 [ 2238.597161][T15256] ? __pfx_packet_setsockopt+0x10/0x10 [ 2238.597203][T15256] do_sock_setsockopt+0xf3/0x1d0 [ 2238.597235][T15256] __sys_setsockopt+0x119/0x190 [ 2238.597282][T15256] __x64_sys_setsockopt+0xbd/0x160 [ 2238.597320][T15256] ? do_syscall_64+0x90/0x840 [ 2238.597357][T15256] ? lockdep_hardirqs_on+0x78/0x100 [ 2238.597394][T15256] do_syscall_64+0x115/0x840 [ 2238.597430][T15256] ? clear_bhb_loop+0x40/0x90 [ 2238.597463][T15256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2238.597492][T15256] RIP: 0033:0x7f0a1399e019 [ 2238.597514][T15256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2238.597540][T15256] RSP: 002b:00007f0a14862028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2238.597567][T15256] RAX: ffffffffffffffda RBX: 00007f0a13c25fa0 RCX: 00007f0a1399e019 [ 2238.597585][T15256] RDX: 000000000000000d RSI: 0000000000000107 RDI: 0000000000000003 [ 2238.597602][T15256] RBP: 00007f0a14862090 R08: 0000000000008000 R09: 0000000000000000 [ 2238.597619][T15256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2238.597635][T15256] R13: 00007f0a13c26038 R14: 00007f0a13c25fa0 R15: 00007ffc229b5c78 [ 2238.597672][T15256] [ 2238.966406][T31700] veth1_macvtap: left promiscuous mode [ 2238.971927][T31700] veth0_macvtap: left promiscuous mode [ 2238.977664][T31700] veth1_vlan: left promiscuous mode [ 2238.982944][T31700] veth0_vlan: left promiscuous mode [ 2239.304137][T27557] Bluetooth: hci3: command tx timeout [ 2239.534616][T31700] team0 (unregistering): Port device team_slave_1 removed [ 2239.731711][ T5287] 8021q: adding VLAN 0 to HW filter on device eth3 [ 2241.383058][T27557] Bluetooth: hci3: command tx timeout [ 2242.385614][T15329] bonding: no command found in bonding_masters - use +ifname or -ifname [ 2242.409234][T15323] bonding: no command found in bonding_masters - use +ifname or -ifname [ 2242.682675][T15119] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2242.702485][T15119] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2242.712874][T15119] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2242.723718][T15119] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2242.732614][T15119] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2242.750746][T15119] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2242.761364][T15119] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2242.799199][T15119] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2245.238992][T15119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2245.522869][T15119] 8021q: adding VLAN 0 to HW filter on device team0 [ 2245.816616][T27780] bridge0: port 1(bridge_slave_0) entered blocking state [ 2245.823818][T27780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2245.961515][T27780] bridge0: port 2(bridge_slave_1) entered blocking state [ 2245.968723][T27780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2248.371165][T15119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2248.441103][T15119] veth0_vlan: entered promiscuous mode [ 2248.487330][T15119] veth1_vlan: entered promiscuous mode [ 2248.546628][T15119] veth0_macvtap: entered promiscuous mode [ 2248.567473][T15119] veth1_macvtap: entered promiscuous mode [ 2248.611491][T15119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2248.643993][T15119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2248.883179][T12911] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2249.221823][T12911] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2249.351688][ T3284] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2249.361497][T31704] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2249.367985][ T3284] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2249.373007][T31704] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2249.634523][T31704] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2249.651038][T31704] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2249.993185][T15508] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8768'. [ 2250.086977][T15510] binder: 15507:15510 ioctl c0306201 200000000000 returned -14 [ 2257.014423][T15628] ecryptfs_parse_packet_length: Five-byte packet length not supported [ 2257.024406][T15628] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 2257.045715][T15633] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 2263.454669][T15743] FAULT_INJECTION: forcing a failure. [ 2263.454669][T15743] name failslab, interval 1, probability 0, space 0, times 0 [ 2263.468992][T15743] CPU: 1 UID: 0 PID: 15743 Comm: syz.1.8836 Tainted: G L syzkaller #0 PREEMPT(full) [ 2263.469036][T15743] Tainted: [L]=SOFTLOCKUP [ 2263.469047][T15743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2263.469066][T15743] Call Trace: [ 2263.469077][T15743] [ 2263.469088][T15743] dump_stack_lvl+0x100/0x190 [ 2263.469127][T15743] should_fail_ex.cold+0x5/0xa [ 2263.469163][T15743] should_failslab+0xc2/0x120 [ 2263.469206][T15743] __kmalloc_cache_noprof+0x91/0x6c0 [ 2263.469238][T15743] ? alloc_pipe_info+0x10e/0x590 [ 2263.469277][T15743] alloc_pipe_info+0x10e/0x590 [ 2263.469312][T15743] splice_direct_to_actor+0x78f/0xa30 [ 2263.469356][T15743] ? __pfx_direct_splice_actor+0x10/0x10 [ 2263.469390][T15743] ? __pfx_aa_file_perm+0x10/0x10 [ 2263.469443][T15743] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 2263.469488][T15743] do_splice_direct+0x174/0x240 [ 2263.469522][T15743] ? __pfx_do_splice_direct+0x10/0x10 [ 2263.469556][T15743] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 2263.469593][T15743] ? rw_verify_area+0xce/0x6d0 [ 2263.469640][T15743] do_sendfile+0xadc/0xe20 [ 2263.469693][T15743] ? __pfx_do_sendfile+0x10/0x10 [ 2263.469746][T15743] ? __x64_sys_futex+0x34f/0x4d0 [ 2263.469778][T15743] ? __x64_sys_futex+0x358/0x4d0 [ 2263.469815][T15743] __x64_sys_sendfile64+0x1d8/0x220 [ 2263.469851][T15743] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 2263.469897][T15743] do_syscall_64+0x115/0x840 [ 2263.469937][T15743] ? clear_bhb_loop+0x40/0x90 [ 2263.469973][T15743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2263.470003][T15743] RIP: 0033:0x7f0a1399e019 [ 2263.470028][T15743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2263.470057][T15743] RSP: 002b:00007f0a14862028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2263.470086][T15743] RAX: ffffffffffffffda RBX: 00007f0a13c25fa0 RCX: 00007f0a1399e019 [ 2263.470106][T15743] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 2263.470123][T15743] RBP: 00007f0a13a3500c R08: 0000000000000000 R09: 0000000000000000 [ 2263.470143][T15743] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 2263.470162][T15743] R13: 00007f0a13c26038 R14: 00007f0a13c25fa0 R15: 00007ffc229b5c78 [ 2263.470202][T15743] [ 2265.077877][T15779] vivid-007: ================= START STATUS ================= [ 2265.113188][T15779] vivid-007: Generate PTS: true [ 2265.125552][T15779] vivid-007: Generate SCR: true [ 2265.131262][T15779] tpg source WxH: 320x240 (Y'CbCr) [ 2265.137740][T15779] tpg field: 1 [ 2265.141624][T15779] tpg crop: (0,0)/320x240 [ 2265.146037][T15779] tpg compose: (0,0)/320x240 [ 2265.168761][T15779] tpg colorspace: 8 [ 2265.178049][T15779] tpg transfer function: 0/0 [ 2265.189456][T15779] tpg Y'CbCr encoding: 0/0 [ 2265.200365][T15779] tpg quantization: 0/0 [ 2265.205776][T15779] tpg RGB range: 0/2 [ 2265.209879][T15779] vivid-007: ================== END STATUS ================== [ 2269.228535][T15833] FAULT_INJECTION: forcing a failure. [ 2269.228535][T15833] name failslab, interval 1, probability 0, space 0, times 0 [ 2269.261649][T15833] CPU: 0 UID: 0 PID: 15833 Comm: syz.2.8848 Tainted: G L syzkaller #0 PREEMPT(full) [ 2269.261698][T15833] Tainted: [L]=SOFTLOCKUP [ 2269.261709][T15833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2269.261728][T15833] Call Trace: [ 2269.261738][T15833] [ 2269.261750][T15833] dump_stack_lvl+0x100/0x190 [ 2269.261790][T15833] should_fail_ex.cold+0x5/0xa [ 2269.261825][T15833] should_failslab+0xc2/0x120 [ 2269.261868][T15833] __kmalloc_noprof+0xfc/0x820 [ 2269.261907][T15833] ? tomoyo_encode2+0xfb/0x3c0 [ 2269.261958][T15833] tomoyo_encode2+0xfb/0x3c0 [ 2269.262008][T15833] tomoyo_encode+0x29/0x50 [ 2269.262053][T15833] tomoyo_realpath_from_path+0x18c/0x690 [ 2269.262108][T15833] tomoyo_path_perm+0x276/0x460 [ 2269.262147][T15833] ? tomoyo_path_perm+0x262/0x460 [ 2269.262186][T15833] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 2269.262264][T15833] ? __pfx_ima_file_check+0x10/0x10 [ 2269.262300][T15833] ? hook_file_truncate+0xba/0x280 [ 2269.262350][T15833] security_file_truncate+0xb5/0x1e0 [ 2269.262395][T15833] path_openat+0x3584/0x4280 [ 2269.262444][T15833] ? __pfx_path_openat+0x10/0x10 [ 2269.262486][T15833] do_file_open+0x20e/0x430 [ 2269.262527][T15833] ? __pfx_do_file_open+0x10/0x10 [ 2269.262591][T15833] ? alloc_fd+0x471/0x7a0 [ 2269.262624][T15833] ? do_getname+0x191/0x390 [ 2269.262664][T15833] do_sys_openat2+0x10f/0x1e0 [ 2269.262702][T15833] ? __pfx_do_sys_openat2+0x10/0x10 [ 2269.262756][T15833] __x64_sys_openat+0x12d/0x210 [ 2269.262796][T15833] ? __pfx___x64_sys_openat+0x10/0x10 [ 2269.262852][T15833] do_syscall_64+0x115/0x840 [ 2269.262893][T15833] ? clear_bhb_loop+0x40/0x90 [ 2269.262929][T15833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2269.262960][T15833] RIP: 0033:0x7f6e5fd9e019 [ 2269.262984][T15833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2269.263012][T15833] RSP: 002b:00007f6e60c9a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2269.263040][T15833] RAX: ffffffffffffffda RBX: 00007f6e60025fa0 RCX: 00007f6e5fd9e019 [ 2269.263060][T15833] RDX: 0000000000080302 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 2269.263079][T15833] RBP: 00007f6e5fe3500c R08: 0000000000000000 R09: 0000000000000000 [ 2269.263098][T15833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2269.263116][T15833] R13: 00007f6e60026038 R14: 00007f6e60025fa0 R15: 00007ffdbc5d1508 [ 2269.263157][T15833] [ 2269.263788][T15833] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2276.073958][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 2276.080441][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 2277.163071][T15979] zswap: compressor not available [ 2277.949387][T16009] FAULT_INJECTION: forcing a failure. [ 2277.949387][T16009] name failslab, interval 1, probability 0, space 0, times 0 [ 2277.987214][T16009] CPU: 1 UID: 0 PID: 16009 Comm: syz.0.8870 Tainted: G L syzkaller #0 PREEMPT(full) [ 2277.987263][T16009] Tainted: [L]=SOFTLOCKUP [ 2277.987273][T16009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2277.987292][T16009] Call Trace: [ 2277.987302][T16009] [ 2277.987314][T16009] dump_stack_lvl+0x100/0x190 [ 2277.987354][T16009] should_fail_ex.cold+0x5/0xa [ 2277.987390][T16009] should_failslab+0xc2/0x120 [ 2277.987434][T16009] __kmalloc_noprof+0xfc/0x820 [ 2277.987468][T16009] ? rcu_is_watching+0x12/0xc0 [ 2277.987506][T16009] ? vhost_dev_set_owner+0x190/0xa30 [ 2277.987551][T16009] vhost_dev_set_owner+0x190/0xa30 [ 2277.987596][T16009] vhost_net_ioctl+0xfa3/0x1910 [ 2277.987630][T16009] ? do_vfs_ioctl+0x226/0x13e0 [ 2277.987673][T16009] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 2277.987714][T16009] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 2277.987757][T16009] ? find_held_lock+0x2b/0x80 [ 2277.987793][T16009] ? __fget_files+0x215/0x3d0 [ 2277.987830][T16009] ? hook_file_ioctl_common+0x140/0x440 [ 2277.987881][T16009] ? __fget_files+0x21f/0x3d0 [ 2277.987914][T16009] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 2277.987954][T16009] __x64_sys_ioctl+0x18e/0x210 [ 2277.988000][T16009] do_syscall_64+0x115/0x840 [ 2277.988038][T16009] ? clear_bhb_loop+0x40/0x90 [ 2277.988074][T16009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2277.988104][T16009] RIP: 0033:0x7f6ad739e019 [ 2277.988127][T16009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2277.988154][T16009] RSP: 002b:00007f6ad8309028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2277.988182][T16009] RAX: ffffffffffffffda RBX: 00007f6ad7626090 RCX: 00007f6ad739e019 [ 2277.988203][T16009] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000006 [ 2277.988222][T16009] RBP: 00007f6ad743500c R08: 0000000000000000 R09: 0000000000000000 [ 2277.988240][T16009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2277.988258][T16009] R13: 00007f6ad7626128 R14: 00007f6ad7626090 R15: 00007fff047212e8 [ 2277.988298][T16009] [ 2287.610838][T16208] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 2290.649880][T16251] FAULT_INJECTION: forcing a failure. [ 2290.649880][T16251] name failslab, interval 1, probability 0, space 0, times 0 [ 2290.669247][T16251] CPU: 0 UID: 0 PID: 16251 Comm: syz.1.8903 Tainted: G L syzkaller #0 PREEMPT(full) [ 2290.669288][T16251] Tainted: [L]=SOFTLOCKUP [ 2290.669298][T16251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2290.669315][T16251] Call Trace: [ 2290.669324][T16251] [ 2290.669336][T16251] dump_stack_lvl+0x100/0x190 [ 2290.669372][T16251] should_fail_ex.cold+0x5/0xa [ 2290.669403][T16251] should_failslab+0xc2/0x120 [ 2290.669442][T16251] __kmalloc_noprof+0xfc/0x820 [ 2290.669486][T16251] ? tomoyo_encode2+0xfb/0x3c0 [ 2290.669534][T16251] tomoyo_encode2+0xfb/0x3c0 [ 2290.669579][T16251] tomoyo_encode+0x29/0x50 [ 2290.669617][T16251] tomoyo_realpath_from_path+0x18c/0x690 [ 2290.669667][T16251] tomoyo_path_perm+0x276/0x460 [ 2290.669704][T16251] ? tomoyo_path_perm+0x262/0x460 [ 2290.669743][T16251] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 2290.669815][T16251] ? __pfx_ima_file_check+0x10/0x10 [ 2290.669848][T16251] ? hook_file_truncate+0xba/0x280 [ 2290.669894][T16251] security_file_truncate+0xb5/0x1e0 [ 2290.669937][T16251] path_openat+0x3584/0x4280 [ 2290.669983][T16251] ? __pfx_path_openat+0x10/0x10 [ 2290.670024][T16251] do_file_open+0x20e/0x430 [ 2290.670056][T16251] ? __pfx_do_file_open+0x10/0x10 [ 2290.670111][T16251] ? alloc_fd+0x471/0x7a0 [ 2290.670143][T16251] ? do_getname+0x191/0x390 [ 2290.670182][T16251] do_sys_openat2+0x10f/0x1e0 [ 2290.670219][T16251] ? __pfx_do_sys_openat2+0x10/0x10 [ 2290.670272][T16251] __x64_sys_openat+0x12d/0x210 [ 2290.670310][T16251] ? __pfx___x64_sys_openat+0x10/0x10 [ 2290.670362][T16251] do_syscall_64+0x115/0x840 [ 2290.670398][T16251] ? clear_bhb_loop+0x40/0x90 [ 2290.670433][T16251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2290.670469][T16251] RIP: 0033:0x7f0a1399e019 [ 2290.670493][T16251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2290.670518][T16251] RSP: 002b:00007f0a14862028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2290.670545][T16251] RAX: ffffffffffffffda RBX: 00007f0a13c25fa0 RCX: 00007f0a1399e019 [ 2290.670564][T16251] RDX: 0000000000080302 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 2290.670582][T16251] RBP: 00007f0a13a3500c R08: 0000000000000000 R09: 0000000000000000 [ 2290.670599][T16251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2290.670616][T16251] R13: 00007f0a13c26038 R14: 00007f0a13c25fa0 R15: 00007ffc229b5c78 [ 2290.670655][T16251] [ 2290.670721][T16251] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2294.316261][T16310] FAULT_INJECTION: forcing a failure. [ 2294.316261][T16310] name failslab, interval 1, probability 0, space 0, times 0 [ 2294.356848][T16310] CPU: 0 UID: 0 PID: 16310 Comm: syz.1.8912 Tainted: G L syzkaller #0 PREEMPT(full) [ 2294.356893][T16310] Tainted: [L]=SOFTLOCKUP [ 2294.356905][T16310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2294.356922][T16310] Call Trace: [ 2294.356932][T16310] [ 2294.356943][T16310] dump_stack_lvl+0x100/0x190 [ 2294.356983][T16310] should_fail_ex.cold+0x5/0xa [ 2294.357017][T16310] should_failslab+0xc2/0x120 [ 2294.357058][T16310] __kmalloc_noprof+0xfc/0x820 [ 2294.357095][T16310] ? trace_kmem_cache_alloc+0xdd/0x100 [ 2294.357137][T16310] ? lsm_blob_alloc+0x68/0x90 [ 2294.357173][T16310] lsm_blob_alloc+0x68/0x90 [ 2294.357201][T16310] security_sk_alloc+0x2d/0x290 [ 2294.357237][T16310] sk_prot_alloc+0x1d1/0x2a0 [ 2294.357271][T16310] sk_alloc+0x36/0xe80 [ 2294.357311][T16310] inet_create+0x3a0/0x1060 [ 2294.357355][T16310] ? inet_create+0x94/0x1060 [ 2294.357401][T16310] __sock_create+0x339/0x860 [ 2294.357441][T16310] inet_ctl_sock_create+0x94/0x230 [ 2294.357480][T16310] ? __pfx_inet_ctl_sock_create+0x10/0x10 [ 2294.357519][T16310] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 2294.357548][T16310] ? lockdep_init_map_type+0x5c/0x250 [ 2294.357579][T16310] ? lockdep_init_map_type+0x5c/0x250 [ 2294.357609][T16310] ? __pfx_igmp_net_init+0x10/0x10 [ 2294.357652][T16310] igmp_net_init+0xd0/0x150 [ 2294.357694][T16310] ops_init+0x1e2/0x5f0 [ 2294.357751][T16310] setup_net+0x118/0x3a0 [ 2294.357796][T16310] ? __pfx_setup_net+0x10/0x10 [ 2294.357841][T16310] ? mutex_init_lockdep+0xf1/0x120 [ 2294.357878][T16310] copy_net_ns+0x46f/0x7c0 [ 2294.357909][T16310] create_new_namespaces+0x3ea/0xac0 [ 2294.357950][T16310] unshare_nsproxy_namespaces+0xf2/0x220 [ 2294.357985][T16310] ksys_unshare+0x438/0xab0 [ 2294.358025][T16310] ? __pfx_ksys_unshare+0x10/0x10 [ 2294.358077][T16310] __x64_sys_unshare+0x31/0x40 [ 2294.358113][T16310] do_syscall_64+0x115/0x840 [ 2294.358151][T16310] ? clear_bhb_loop+0x40/0x90 [ 2294.358188][T16310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2294.358216][T16310] RIP: 0033:0x7f0a1399e019 [ 2294.358240][T16310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2294.358270][T16310] RSP: 002b:00007f0a14862028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2294.358298][T16310] RAX: ffffffffffffffda RBX: 00007f0a13c25fa0 RCX: 00007f0a1399e019 [ 2294.358318][T16310] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 2294.358337][T16310] RBP: 00007f0a13a3500c R08: 0000000000000000 R09: 0000000000000000 [ 2294.358356][T16310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2294.358374][T16310] R13: 00007f0a13c26038 R14: 00007f0a13c25fa0 R15: 00007ffc229b5c78 [ 2294.358414][T16310] [ 2294.358614][T16310] Failed to initialize the IGMP autojoin socket (err -12) [ 2295.555473][T16332] FAULT_INJECTION: forcing a failure. [ 2295.555473][T16332] name failslab, interval 1, probability 0, space 0, times 0 [ 2295.580294][T16332] CPU: 0 UID: 0 PID: 16332 Comm: syz.2.8916 Tainted: G L syzkaller #0 PREEMPT(full) [ 2295.580341][T16332] Tainted: [L]=SOFTLOCKUP [ 2295.580352][T16332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2295.580371][T16332] Call Trace: [ 2295.580381][T16332] [ 2295.580392][T16332] dump_stack_lvl+0x100/0x190 [ 2295.580432][T16332] should_fail_ex.cold+0x5/0xa [ 2295.580467][T16332] should_failslab+0xc2/0x120 [ 2295.580510][T16332] __kmalloc_cache_noprof+0x91/0x6c0 [ 2295.580544][T16332] ? alloc_pipe_info+0x10e/0x590 [ 2295.580581][T16332] alloc_pipe_info+0x10e/0x590 [ 2295.580615][T16332] splice_direct_to_actor+0x78f/0xa30 [ 2295.580655][T16332] ? __pfx_direct_splice_actor+0x10/0x10 [ 2295.580689][T16332] ? __pfx_aa_file_perm+0x10/0x10 [ 2295.580738][T16332] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 2295.580781][T16332] do_splice_direct+0x174/0x240 [ 2295.580815][T16332] ? __pfx_do_splice_direct+0x10/0x10 [ 2295.580848][T16332] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 2295.580885][T16332] ? rw_verify_area+0xce/0x6d0 [ 2295.580931][T16332] do_sendfile+0xadc/0xe20 [ 2295.580983][T16332] ? __pfx_do_sendfile+0x10/0x10 [ 2295.581034][T16332] ? __x64_sys_futex+0x34f/0x4d0 [ 2295.581066][T16332] ? __x64_sys_futex+0x358/0x4d0 [ 2295.581103][T16332] __x64_sys_sendfile64+0x1d8/0x220 [ 2295.581147][T16332] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 2295.581193][T16332] do_syscall_64+0x115/0x840 [ 2295.581233][T16332] ? clear_bhb_loop+0x40/0x90 [ 2295.581268][T16332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2295.581299][T16332] RIP: 0033:0x7f6e5fd9e019 [ 2295.581323][T16332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2295.581351][T16332] RSP: 002b:00007f6e60c9a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2295.581380][T16332] RAX: ffffffffffffffda RBX: 00007f6e60025fa0 RCX: 00007f6e5fd9e019 [ 2295.581400][T16332] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 2295.581418][T16332] RBP: 00007f6e5fe3500c R08: 0000000000000000 R09: 0000000000000000 [ 2295.581436][T16332] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 2295.581454][T16332] R13: 00007f6e60026038 R14: 00007f6e60025fa0 R15: 00007ffdbc5d1508 [ 2295.581492][T16332] [ 2303.087748][T16423] FAULT_INJECTION: forcing a failure. [ 2303.087748][T16423] name failslab, interval 1, probability 0, space 0, times 0 [ 2303.117745][T16423] CPU: 0 UID: 0 PID: 16423 Comm: syz.1.8929 Tainted: G L syzkaller #0 PREEMPT(full) [ 2303.117790][T16423] Tainted: [L]=SOFTLOCKUP [ 2303.117801][T16423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2303.117818][T16423] Call Trace: [ 2303.117829][T16423] [ 2303.117840][T16423] dump_stack_lvl+0x100/0x190 [ 2303.117878][T16423] should_fail_ex.cold+0x5/0xa [ 2303.117912][T16423] should_failslab+0xc2/0x120 [ 2303.117954][T16423] __kmalloc_cache_noprof+0x91/0x6c0 [ 2303.117987][T16423] ? alloc_pipe_info+0x10e/0x590 [ 2303.118024][T16423] alloc_pipe_info+0x10e/0x590 [ 2303.118059][T16423] splice_direct_to_actor+0x78f/0xa30 [ 2303.118093][T16423] ? __pfx_direct_splice_actor+0x10/0x10 [ 2303.118125][T16423] ? __pfx_aa_file_perm+0x10/0x10 [ 2303.118174][T16423] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 2303.118217][T16423] do_splice_direct+0x174/0x240 [ 2303.118250][T16423] ? __pfx_do_splice_direct+0x10/0x10 [ 2303.118282][T16423] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 2303.118318][T16423] ? rw_verify_area+0xce/0x6d0 [ 2303.118364][T16423] do_sendfile+0xadc/0xe20 [ 2303.118416][T16423] ? __pfx_do_sendfile+0x10/0x10 [ 2303.118466][T16423] ? __x64_sys_futex+0x34f/0x4d0 [ 2303.118499][T16423] ? __x64_sys_futex+0x358/0x4d0 [ 2303.118535][T16423] __x64_sys_sendfile64+0x1d8/0x220 [ 2303.118570][T16423] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 2303.118627][T16423] do_syscall_64+0x115/0x840 [ 2303.118666][T16423] ? clear_bhb_loop+0x40/0x90 [ 2303.118703][T16423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2303.118733][T16423] RIP: 0033:0x7f0a1399e019 [ 2303.118756][T16423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2303.118784][T16423] RSP: 002b:00007f0a14862028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2303.118811][T16423] RAX: ffffffffffffffda RBX: 00007f0a13c25fa0 RCX: 00007f0a1399e019 [ 2303.118831][T16423] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 2303.118849][T16423] RBP: 00007f0a13a3500c R08: 0000000000000000 R09: 0000000000000000 [ 2303.118867][T16423] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 2303.118885][T16423] R13: 00007f0a13c26038 R14: 00007f0a13c25fa0 R15: 00007ffc229b5c78 [ 2303.118924][T16423] [ 2307.754979][T16474] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 2325.567205][T16819] BUG: unable to handle page fault for address: ffffc9001d524fe8 [ 2325.574968][T16819] #PF: supervisor write access in kernel mode [ 2325.581060][T16819] #PF: error_code(0x0002) - not-present page [ 2325.587049][T16819] PGD 13fe40067 P4D 13fe40067 PUD 1cae7067 PMD 3593a067 PTE 0 [ 2325.594564][T16819] Oops: Oops: 0002 [#1] SMP KASAN PTI [ 2325.599978][T16819] CPU: 1 UID: 0 PID: 16819 Comm: syz.0.8983 Tainted: G L syzkaller #0 PREEMPT(full) [ 2325.610939][T16819] Tainted: [L]=SOFTLOCKUP [ 2325.615267][T16819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2325.625332][T16819] RIP: 0010:write_comp_data+0x75/0x90 [ 2325.630732][T16819] Code: 00 8b bf fc 16 00 00 48 8b 30 48 c1 e7 03 4c 8d 1c b5 00 00 00 00 4a 8d 14 dd 28 00 00 00 48 39 d7 72 bd 48 83 c6 01 48 89 30 <4c> 89 44 10 e0 4c 89 4c 10 e8 4c 89 54 10 f0 4a 89 4c d8 20 c3 cc [ 2325.650354][T16819] RSP: 0018:ffffc9000e0b7e78 EFLAGS: 00050257 [ 2325.656435][T16819] RAX: ffffc9001d525000 RBX: 0000000000000000 RCX: ffffffff82458a75 [ 2325.664419][T16819] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000400000 [ 2325.672411][T16819] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000002 [ 2325.680398][T16819] R10: 0000000000000001 R11: fffffffffffffffc R12: 0000000000000020 [ 2325.688380][T16819] R13: 0000000000000000 R14: 00007ffffffff000 R15: 0000000000000001 [ 2325.696364][T16819] FS: 00007f6ad82856c0(0000) GS:ffff888123edf000(0000) knlGS:0000000000000000 [ 2325.705314][T16819] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2325.711912][T16819] CR2: ffffc9001d524fe8 CR3: 0000000052656000 CR4: 00000000003526f0 [ 2325.719903][T16819] Call Trace: [ 2325.723187][T16819] [ 2325.726136][T16819] rseq_register+0x115/0x350 [ 2325.730764][T16819] __x64_sys_rseq+0x1b8/0x2e0 [ 2325.735479][T16819] do_syscall_64+0x115/0x840 [ 2325.740122][T16819] ? clear_bhb_loop+0x40/0x90 [ 2325.744824][T16819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2325.750750][T16819] RIP: 0033:0x7f6ad739e019 [ 2325.755180][T16819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2325.774812][T16819] RSP: 002b:00007f6ad8285028 EFLAGS: 00000246 ORIG_RAX: 000000000000014e [ 2325.783244][T16819] RAX: ffffffffffffffda RBX: 00007f6ad7626450 RCX: 00007f6ad739e019 [ 2325.791233][T16819] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000000000000000 [ 2325.799217][T16819] RBP: 00007f6ad743500c R08: 0000000000000000 R09: 0000000000000000 [ 2325.807200][T16819] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000000 [ 2325.815183][T16819] R13: 00007f6ad76264e8 R14: 00007f6ad7626450 R15: 00007fff047212e8 [ 2325.823178][T16819] [ 2325.826212][T16819] Modules linked in: [ 2325.830132][T16819] CR2: ffffc9001d524fe8 [ 2325.834303][T16819] ---[ end trace 0000000000000000 ]--- [ 2325.839769][T16819] RIP: 0010:write_comp_data+0x75/0x90 [ 2325.845177][T16819] Code: 00 8b bf fc 16 00 00 48 8b 30 48 c1 e7 03 4c 8d 1c b5 00 00 00 00 4a 8d 14 dd 28 00 00 00 48 39 d7 72 bd 48 83 c6 01 48 89 30 <4c> 89 44 10 e0 4c 89 4c 10 e8 4c 89 54 10 f0 4a 89 4c d8 20 c3 cc [ 2325.864813][T16819] RSP: 0018:ffffc9000e0b7e78 EFLAGS: 00050257 [ 2325.870898][T16819] RAX: ffffc9001d525000 RBX: 0000000000000000 RCX: ffffffff82458a75 [ 2325.878940][T16819] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000400000 [ 2325.886923][T16819] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000002 [ 2325.894928][T16819] R10: 0000000000000001 R11: fffffffffffffffc R12: 0000000000000020 [ 2325.902914][T16819] R13: 0000000000000000 R14: 00007ffffffff000 R15: 0000000000000001 [ 2325.910897][T16819] FS: 00007f6ad82856c0(0000) GS:ffff888123edf000(0000) knlGS:0000000000000000 [ 2325.919858][T16819] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2325.926457][T16819] CR2: ffffc9001d524fe8 CR3: 0000000052656000 CR4: 00000000003526f0 [ 2325.934474][T16819] Kernel panic - not syncing: Fatal exception [ 2325.940790][T16819] Kernel Offset: disabled [ 2325.945117][T16819] Rebooting in 86400 seconds..