last executing test programs: 12.357790706s ago: executing program 2 (id=3523): mmap$auto(0x0, 0x4005, 0xb, 0x40eb2, 0x401, 0x300000000000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) pread64$auto(0xffffffffffffffff, 0x0, 0x4, 0x3a) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_REGISTER(0xffffffffffffffff, 0x0, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x40141, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000680), 0xffffffffffffffff) ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_UDF_GETVOLIDENT(0xffffffffffffffff, 0x80086c42, &(0x7f00000000c0)=&(0x7f0000000000)="3aa54bcdc6bcf75348bfb490cdf84f7b427a762452c2c14f807475f2b3f017a913d7b59ebb4eace5f53b2011fbc3c787c0f0b98f777f74da49582dcb97501b736cda85d6c07a79d5948376cc4a231ec08b11e92f04") close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2}, 0x6a) sendto$auto(r1, 0x0, 0x6fffff9, 0xfffffff8, &(0x7f0000000440)=@can, 0x36) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) r3 = socket(0x1d, 0x2, 0x7) r4 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(r3, &(0x7f00000000c0)=@can={0x1d, r5}, 0x6a) 12.217352932s ago: executing program 0 (id=3524): pread64$auto(0xffffffffffffffff, 0x0, 0x4, 0x3a) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/amidi2\x00', 0x8b0000, 0x0) unshare$auto(0x40000080) modify_ldt$auto(0x1, 0x0, 0x10) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x40000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x100, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) ioctl$auto_PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nbd0\x00', 0x24000, 0x0) ioctl$auto(r2, 0xab08, 0xffffffffffffffff) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) unshare$auto(0x40000080) io_setup$auto(0x2002, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) bind$auto(r0, &(0x7f0000000180)=@tipc=@name={0x1e, 0x2, 0x1, {{0x42, 0x4}, 0x2}}, 0x6) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/bus/usb/025/001\x00', 0x8000, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000001140), 0x9}, 0x7) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fcdbdf2504000000"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x1c800) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00n', @ANYRES16=r3, @ANYBLOB="010329bd7000fbdbdf250a000000060001004002000005000200000000000800020048535200"], 0x2c}, 0x1, 0x0, 0x0, 0x400c859}, 0x0) fchmod$auto(r4, 0x9) 10.19940216s ago: executing program 2 (id=3528): r0 = open(0x0, 0x0, 0x57e) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000004640), 0xffffffffffffffff) sendmsg$auto_IOAM6_CMD_ADD_NAMESPACE(r1, &(0x7f0000004740)={0x0, 0x0, &(0x7f0000004700)={&(0x7f0000004680)=ANY=[@ANYRES8=r0, @ANYRES16=r2, @ANYRESDEC=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000000) ioctl$auto_MEMGETBADBLOCK(0xffffffffffffffff, 0x40084d0b, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/card1/pcm1c/sub2/status\x00', 0x30001, 0x0) write$auto(0x3, 0x0, 0xfdef) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x381600, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r3 = io_uring_setup$auto(0x7, 0x0) ioctl$auto_RTC_AIE_OFF(r3, 0x7002, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x1, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) madvise$auto(0x6, 0x4, 0x3) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, 0x0, 0x48800, 0x0) mq_timedsend$auto(r3, &(0x7f0000000000)='(.,\r^[\x00', 0x5, 0x2b3, &(0x7f0000000040)={0x1, 0x1}) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/conf/veth1_vlan/regen_max_retry\x00', 0x202, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop6\x00', 0x40203, 0x0) sendfile$auto(r4, 0x3, 0x0, 0x7ffff800) clock_getres$auto(0x1ece, &(0x7f00000001c0)={0x40, 0x7656}) sysfs$auto(0x2, 0x3b, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x633, 0x2020009, 0xb, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = openat$auto_dma_buf_debug_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x181000, 0x0) pread64$auto(r5, 0x0, 0x7ff, 0x800) 9.896423255s ago: executing program 3 (id=3529): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) fcntl$auto_F_GET_RW_HINT(r0, 0x40b, 0x1) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) mmap$auto(0x6e9, 0x7, 0x40000000000000, 0x13, r0, 0x401) (async) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) add_key$auto_KEY_SPEC_REQUESTOR_KEYRING(&(0x7f0000000180)='\',$&&@$+\x00', &(0x7f00000001c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', &(0x7f0000000280)="c7cec9b0eddb8c8a8313ef67c46468a2465092b3235915ebe01302f57e2767731747e07f78ca02467c4b46b1d662a9901c5b98e8eb93eb01dcac7093df6a719119a4b5b16db273bb3c2ab1ab59bb25be22ea0a55f3babcbc7ba9644d0bd6fbb95dcb04a9001977e40e47aab85f2a638316ee66d9c9528802547dbdbf6ef13de6101fb10834438abc41358911fb91b01cc92f0ac9ee", 0x9, 0xfffffffffffffff8) r1 = setfsuid$auto(0xee00) (async) pidfd_send_signal$auto_PIDFD_SIGNAL_THREAD_GROUP(r0, 0x2, &(0x7f0000000040)={@_si_pad}, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000002b80), 0xffffffffffffffff) sendmsg$auto_SMC_PNETID_GET(r2, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010029067000fedbdf25010000100800010027242300"], 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x8040) r4 = setfsgid$auto(0xee01) keyctl$auto(0x1f, 0x1, 0x6, r4, 0x3ff) (async) setns(0xc9, 0x0) keyctl$auto_KEY_REQKEY_DEFL_NO_CHANGE(0x4, 0xffffffffffffffff, r1, r4, 0xff) r5 = pidfd_open$auto(0x1, 0xfffffffc) setns(r5, 0x60020000) 9.663997622s ago: executing program 0 (id=3530): socket(0x10, 0x2, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x3, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000100)=0xa) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), 0xffffffffffffffff) capset$auto(0x0, &(0x7f00000000c0)={0x7, 0x5, 0x8}) openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000100), 0xe077c8a035149f71, 0x0) sendmsg$auto_L2TP_CMD_SESSION_GET(r1, 0x0, 0x24000800) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x8201, 0x2, 0x18, 0xc, 0xe3, 0x4000000002, 0x3}, 0x6f4) write$auto(0xca, 0x0, 0x7e) r2 = openat$auto_ext4_dir_operations_ext4(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/bluetooth/hci1/hci1:201\x00', 0x228200, 0x0) ioctl$auto_EXT4_IOC_GETVERSION_OLD(r2, 0x80087601, &(0x7f0000000200)="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") r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv6/conf/macvlan1/disable_policy\x00', 0x1, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r3, &(0x7f00000004c0), 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 9.142113853s ago: executing program 3 (id=3532): pread64$auto(0xffffffffffffffff, 0x0, 0x4, 0x3a) unshare$auto(0x40000080) ioctl$auto(0xffffffffffffffff, 0x901064ae, 0x4) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002040)='/dev/binderfs/binder1\x00', 0x80000, 0x0) mmap$auto(0x10001, 0x420009, 0xdf, 0x800000000000cb1, r1, 0x3) r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) ioctl$auto(r2, 0xc018620c, 0x9) socket(0xa, 0x1, 0x84) r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/sem\x00', 0x0, 0x0) syncfs$auto(r3) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r4 = getsockopt$auto(0xffffffffffffffff, 0x84, 0xa, 0x0, &(0x7f0000000000)=0x7fde) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) pwrite64$auto(0xc8, &(0x7f0000000740)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rBBJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x99\x03\xf1`\x9f\x1e\x02\x00\x00\x00\x00\x00\x00\x00*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xb3\x9c2\xa2\xacyl\xb8\x00Y\xc8\'9S(\xf2\xc2\xf2\x9dP\b\x88J\xae8\xf9>\xb6\xed\xb5,\xc9\xaa\xd8\xc4\xba\x94\xe6jv\x12Bp+\xb8\xb0r/\x16\x19kw\xbc\xbb5-i\xf0\xb9\xac\x9f&6\x89g\x9bh\x83D\xb3\x9fxe\x13\xd1\xb9\xe4\x7f|a\xf2\xdd\xa0\xff\xff\x00\x00\x00\x00\x00\x00\xec\xf6~\xacV\xa2S)\xc2\xce\x9b{+\x9ct2>\x98D\t\xc5HP\xc4\xb7\x84\xda*\x82)\x01\xd1\f\x1e\xd4\x8d0K\xa8\x8e\xd6\xa1\xa7\xd8VP\xfd\x19\x1cd\x84\xe7\xc6#\x9c\xdd\x88\xf9\x128\x0e\xe2\n\xd3\xd33\x01\xda\x83]\xd6\xd5U\xb0^\xb7\x12\x91\x85\x86\xfd\x95\'f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3db) unshare$auto(0x40000080) unshare$auto(0x40000080) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027"], 0x2c}, 0x1, 0x0, 0x0, 0x4c881}, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000"], 0x1ac}}, 0x40000) recvmmsg$auto(r5, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x8, 0x0) 7.276259234s ago: executing program 0 (id=3534): capget$auto(0x0, 0xfffffffffffffffe) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) clone$auto(0x0, 0xedda, &(0x7f0000000380)=0x2b, &(0x7f00000003c0)=0xfffffff8, 0x8) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop1\x00', 0x4401, 0x0) bpf$auto(0x0, &(0x7f0000000140)=@query={@target_fd=r1, 0x2a54, 0xa, 0x1, 0x9, @prog_cnt=0x2, 0x0, 0x1, 0x40, 0x8, 0xe8}, 0x16) r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000180), r0) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) r3 = socket(0x2, 0x5, 0x0) openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, 0x0, 0x0, 0x0) listen$auto(0x3, 0x81) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x312) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x5, 0x7, 0x6, 0x1f2, 0x9, 0xe8, 0x400000000ff, 0xa, 0x4, 0xaab, 0x5, 0x7]}, 0x0, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="013ad7fac400f8dbdf250100000008000200", @ANYBLOB="0800010048665200080002"], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) pipe2$auto(0x0, 0x80) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nbd6\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r4, 0x0, 0x400000000006) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_DEL(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000009eab99bbafdb", @ANYRES16=r6, @ANYBLOB="010027bd7000fddbdf250200000008000a0000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x24001880) listen$auto(0x3, 0x81) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200040c4}, 0x440c5) unshare$auto(0x40000080) rseq$auto(&(0x7f00000002c0)={0xe, 0x403, 0x7, 0x80b, 0x10001, 0x2, "64af36e6e3d0e29fbded72028c098e1011ddaebcd3fb08fa9b82c513c7852e8c5b204054f2259f3db1b579379a73882f2f11f9ddad4ae3287b2c7b6ec9330206656b62a71bfc010e08e3e5a44e1fd6012268c1003f662a0d2f3a42e1ccba5557298d0dcd54dff02414e3fc7fed"}, 0x24, 0x0, 0x8000006) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/card0\x00', 0x8000, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') 7.181914079s ago: executing program 3 (id=3535): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x2, 0x0) write$auto_ftrace_subsystem_filter_fops_trace_events(r1, &(0x7f0000000180)="b953e6ca6360e45b4fd8ecccc52782d28ddb740407f4571929f3c0f5962cf000e2d2cac4c602", 0x26) socket(0x1d, 0x80003, 0x300) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$auto(0x3, 0x0, 0x13, 0xfffffff9, &(0x7f0000000440)=@xdp={0x2c, 0x5865, r2, 0x10}, 0x22) r3 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) sendmsg$auto_GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002d00080007000000000000000000", @ANYRES32, @ANYBLOB='\b\x00\b\x00'], 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00"], 0x1ac}, 0x1, 0x0, 0x0, 0x48040}, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0xfffffffe, &(0x7f0000000100)={&(0x7f0000000080), 0x180}, 0x2, &(0x7f0000000340), 0x7, 0xa505}, 0x800}, 0x7, 0x6) madvise$auto(0x6, 0x4, 0x3) mq_timedsend$auto(r3, &(0x7f0000000000)='(.,\r^[\x00', 0x5, 0x2b3, &(0x7f0000000040)={0x200, 0x100000001}) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe\x00', 0x1, 0x0) r4 = syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) sched_setscheduler$auto(r4, 0x2, &(0x7f0000000040)={0x7}) process_vm_readv$auto(r4, &(0x7f0000000400)={&(0x7f0000000380)="3e3e5934290361189135cacdc1739b6dfc315fb2af505300fbd58e55d84e01fa8470adcd9416dbc82b9eb828deae3197dc89007364a5f9b1131d52b225d1a0a46c468b275a33f46ddbe5d73f", 0x3}, 0x101, &(0x7f0000000500)={&(0x7f0000000540)="7faa4cf69d9dd66ee34936990224e400b5116b86e545e580d538267a6bb36968c205ddd2558b98341022701b31304bfc4db31f3a4f918fbaba865b5e1c8c299a3cad711aeb57f8dd48e9e3626040d504a096ea9ff975d0c97693", 0x7}, 0xc13, 0x6) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kfence/parameters/sample_interval\x00', 0x102, 0x0) write$auto(r5, &(0x7f0000000040)='7\x00\\\xa0x\x113\a\xc7\x91\x92@\xb2P', 0xf) sendmsg$auto_L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x71}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x3b, 0x0) 7.043693592s ago: executing program 1 (id=3536): pread64$auto(0xffffffffffffffff, 0x0, 0x4, 0x3a) setns(0xc9, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) open(&(0x7f0000001bc0)='./file0\x00', 0x4140, 0x0) readlink$auto(&(0x7f0000000200)='./file0\x00', 0x0, 0x6) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/audit\x00', 0x40802, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) read$auto(r0, 0x0, 0xb4d3) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x20000000) setitimer$auto(0x0, &(0x7f0000000080)={{0x8}, {0x80}}, &(0x7f00000000c0)={{0x0, 0x1}, {0xff, 0x6}}) r2 = openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x100, 0x0) close_range$auto(r2, r1, 0x2) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0xe0301, 0x0) r4 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) ioctl$auto(r3, 0x4b72, r4) 6.86543988s ago: executing program 1 (id=3537): openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cpu/0/msr\x00', 0xf82, 0x0) ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf8\xfe\n\xa7\xfeD\xca\xd9\xb3\xc1\xe4\xf5j\x94\x7f\x00\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xed\x013\x87l\xb9\x1e\x05\x90\xa2', 0x2) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) lseek$auto(r0, 0xffffff7f, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r1 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000f40)={'batadv0\x00'}) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000000), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x2, 0x1, 0x0) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) shutdown$auto(0x200000003, 0x2) recvmmsg$auto(0x3, 0x0, 0x10000, 0x9, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) write$auto(0x3, 0x0, 0xfdef) write$auto(0x3, 0x0, 0xfdef) r4 = open(&(0x7f0000000080)='./file0\x00', 0x200000, 0x174) r5 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x20, r5, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_UFID_FLAGS={0x8, 0xa, 0x200}]}, 0x20}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) r7 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) writev$auto(r7, &(0x7f00000003c0)={0x0, 0xf9}, 0x3) fcntl$getown(r6, 0x9) sendmsg$auto_OVS_FLOW_CMD_NEW(r4, 0x0, 0x40) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/001/001\x00', 0x802, 0x0) 6.088220636s ago: executing program 2 (id=3538): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x80d00, 0x0) fsconfig$auto_SHMEM_HUGE_ALWAYS(r0, 0x1, &(0x7f00000001c0)='/dev/bus/usb/010/001\x00', 0x0, 0x1) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) shmdt$auto(0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) bpf$auto(0x9, &(0x7f00000000c0)=@batch={0xffffffffffff3c77, 0x8000000037, 0x0, 0x5, 0x9, 0xffffffffffffffff, 0x6, 0x5852}, 0x1b) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x1e3a02, 0x0) mmap$auto(0x1, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) shmdt$auto(&(0x7f0000000040)='+}--\'\x00') ioctl$auto_TCFLSH2(r2, 0x5453, 0x0) write$auto(0x3, 0x0, 0xfffffdef) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone3(&(0x7f0000000180)={0xa7102000, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, &(0x7f0000000100)=[0x0], 0x1}, 0x58) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 5.475219586s ago: executing program 1 (id=3539): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x5, 0x10000, 0x1ff, 0x5, 0x7, 0xffffffffffffffff, 0x8, "2af051b26b658a20d8dc6b3662034b19", 0x0, 0xffffffffffffffff, 0x9, 0x6, 0x20007, 0x2}, 0x10) bpf$auto(0x2, 0x0, 0xb) bpf$auto(0x1, 0x0, 0xf) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/dummy0/carrier\x00', 0xc2061, 0x0) write$auto(r0, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xab\b\x00\x00\x00\x00\x00\x00\x00}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2oc!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x5, 0x10000, 0x1ff, 0x5, 0x7, 0xffffffffffffffff, 0x8, "2af051b26b658a20d8dc6b3662034b19", 0x0, 0xffffffffffffffff, 0x9, 0x6, 0x20007, 0x2}, 0x10) (async) bpf$auto(0x2, 0x0, 0xb) (async) bpf$auto(0x1, 0x0, 0xf) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/dummy0/carrier\x00', 0xc2061, 0x0) (async) write$auto(r0, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xab\b\x00\x00\x00\x00\x00\x00\x00}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2oc!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x5) (async) 5.221920777s ago: executing program 1 (id=3540): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/est_cpulist\x00', 0x2242, 0x0) sendfile$auto(r0, r0, 0x0, 0x200) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) getpeername$auto(0x3, 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0xffffffff80000001) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r2 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/attr/apparmor/current\x00', 0x0, 0x0) preadv$auto(r2, &(0x7f0000000640)={0x0, 0x8}, 0x6, 0x1000, 0x58) ioctl$auto_SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3, 0x0) clock_settime$auto(0xffffffff, &(0x7f0000000000)={0x7fffffff, 0x4}) setns(0xc9, 0x40000000) socket(0x8, 0x80000, 0x80000003) getpeername$auto(0x3, 0x0, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/dsp\x00', 0x801, 0x0) socket(0x8, 0x80000, 0x80000003) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r3 = openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000d00), 0x1, 0x0) pwrite64$auto(r3, &(0x7f0000000d40)='/proc/self/pagemap\x00', 0x4, 0x2) io_uring_enter$auto(0xffffffffffffffff, 0x9, 0x820e, 0x8000, 0x0, 0x18) close_range$auto(0x2, 0x8, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 5.213802937s ago: executing program 0 (id=3541): unshare$auto(0x40000080) r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) socket(0x18, 0x800, 0x0) socket(0xa, 0x2, 0x0) connect$auto(0x3, 0x0, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) readv$auto(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0xe) ioctl$auto_EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) unshare$auto(0x40000080) mmap$auto(0x2, 0x3fffff, 0x20000007, 0x11, 0xdd, 0xfffffffffffffffd) socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) msgctl$auto_IPC_STAT(0x5f, 0x2, 0x0) umount2$auto(0x0, 0x1) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) unshare$auto(0x81) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r2, &(0x7f0000000100)="c80d1b5d399b3963", 0x8) setns(0xc9, 0x0) ioctl$auto_MEMERASE64(0xffffffffffffffff, 0x40104d14, &(0x7f0000000080)={0x2, 0x42a}) 3.981554061s ago: executing program 3 (id=3542): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x4891c0, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x3) mmap$auto(0x0, 0x8, 0x45bd, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto_MEMGETBADBLOCK(0xffffffffffffffff, 0x40084d0b, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/neigh/ip6_vti0/mcast_resolicit\x00', 0x101202, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r2 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfded, 0x3) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) madvise$auto(0x6, 0x4, 0x3) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x48800, 0x0) mq_timedsend$auto(r2, &(0x7f0000000000)='(.,\r^[\x00', 0x5, 0x2b3, &(0x7f0000000040)={0x1, 0x1}) sendmsg$auto_NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYRES16=0x0, @ANYBLOB="1000030000000000000000150004000000000000000037b5327a1ef2a601ed5cfa97e39b6da4769e9814359b9b7178001f050bf4253905f80ad29fe5fb407731979ea8097b422b43fe78a37845"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/overcommit_ratio\x00', 0x202, 0x0) sendfile$auto(r3, 0x3, 0x0, 0x7ffff000) sysfs$auto(0x2, 0x3b, 0x0) unshare$auto(0x7) sendfile$auto(r1, r1, 0x0, 0x8) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) 2.919525834s ago: executing program 2 (id=3543): socket(0x10, 0x2, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x3, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000100)=0xa) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), 0xffffffffffffffff) capset$auto(0x0, &(0x7f00000000c0)={0x7, 0x5, 0x8}) openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000100), 0xe077c8a035149f71, 0x0) sendmsg$auto_L2TP_CMD_SESSION_GET(r1, 0x0, 0x24000800) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x8201, 0x2, 0x18, 0xc, 0xe3, 0x4000000002, 0x3}, 0x6f4) write$auto(0xca, 0x0, 0x7e) r2 = openat$auto_ext4_dir_operations_ext4(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/bluetooth/hci1/hci1:201\x00', 0x228200, 0x0) ioctl$auto_EXT4_IOC_GETVERSION_OLD(r2, 0x80087601, &(0x7f0000000200)="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") r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv6/conf/macvlan1/disable_policy\x00', 0x1, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r3, &(0x7f00000004c0), 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 2.322622783s ago: executing program 1 (id=3544): socket(0x10, 0x2, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x3, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000100)=0xa) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), 0xffffffffffffffff) capset$auto(0x0, &(0x7f00000000c0)={0x7, 0x5, 0x8}) openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000100), 0xe077c8a035149f71, 0x0) sendmsg$auto_L2TP_CMD_SESSION_GET(r1, 0x0, 0x24000800) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x8201, 0x2, 0x18, 0xc, 0xe3, 0x4000000002, 0x3}, 0x6f4) write$auto(0xca, &(0x7f00000000c0)='\x04>B\v\x04\x00\tO\xfdfz\xbf\xf1C\x8f\x89\xd0\xcee\xf2\xea\xea\xf4\xffo', 0x7e) r2 = openat$auto_ext4_dir_operations_ext4(0xffffffffffffff9c, 0x0, 0x228200, 0x0) ioctl$auto_EXT4_IOC_GETVERSION_OLD(r2, 0x80087601, &(0x7f0000000200)="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") r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv6/conf/macvlan1/disable_policy\x00', 0x1, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r3, &(0x7f00000004c0), 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 2.238314732s ago: executing program 0 (id=3545): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/sched_rt_period_us\x00', 0x101202, 0x0) r1 = syz_clone3(&(0x7f0000000440)={0x40000000, &(0x7f00000004c0), &(0x7f00000001c0), &(0x7f0000000200), {0x43}, &(0x7f0000000280)=""/147, 0x93, &(0x7f0000000340)=""/158, &(0x7f0000000640)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x5}, 0x58) fcntl$auto(r0, 0xb, r1) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0x8fea, 0x400000000018) socket(0x2000000000000021, 0x2, 0x10000000000002) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0) r2 = socket(0x1d, 0x2, 0x7) r3 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(r2, &(0x7f0000000000)=@can={0x1d, r4}, 0x6a) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_hcd.6/usb7/ep_00/bInterval\x00', 0x80080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000280)=""/228, 0xe4) socket(0x1d, 0x2, 0x7) r6 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) r7 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r7, &(0x7f0000000080)='7\x00\\\xa0\x04|3\x1ck\x00'/24, 0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x11, 0xffffffffffffffff, 0x800008000) sysfs$auto(0x2, 0x100000000000036, 0x0) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x7, 0xb, 0x11, 0xdd, 0x1) madvise$auto(0x6, 0x4, 0x3) 904.631781ms ago: executing program 3 (id=3546): openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/027/001\x00', 0x4a901, 0x0) fsconfig$auto_SHMEM_HUGE_DENY(0xffffffffffffffff, 0xfffffffc, &(0x7f0000000140)='G\xfdy\b', 0x0, 0xffffffffffffffff) r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r0, 0xffffffffffdffe00, &(0x7f0000000140)) unshare$auto(0x8000000) close_range$auto(0x2, 0x8, 0xf5ff) 184.111107ms ago: executing program 2 (id=3547): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/sched_rt_period_us\x00', 0x101202, 0x0) r1 = syz_clone3(&(0x7f0000000440)={0x40000000, &(0x7f00000004c0), &(0x7f00000001c0), &(0x7f0000000200), {0x43}, &(0x7f0000000280)=""/147, 0x93, &(0x7f0000000340)=""/158, &(0x7f0000000640)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x5}, 0x58) fcntl$auto(r0, 0xb, r1) pselect6$auto(0xa, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0x8fea, 0x400000000018) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) madvise$auto(0x6, 0x4, 0x3) rseq$auto(0x0, 0x20, 0x0, 0xe) msync$auto(0x110c230000, 0x200001, 0x6) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x4e940, 0x0) mq_timedsend$auto(r2, &(0x7f0000000000)='(.,\r^[\x00', 0x5, 0x2b3, &(0x7f0000000040)={0x1, 0x1}) ioctl$auto_MON_IOCQ_RING_SIZE(r2, 0x9205, 0x0) r3 = socket(0x18, 0x800, 0x1) r4 = socket(0x11, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'macsec0\x00', 0x0}) bpf$auto(0x5, &(0x7f0000000000)=@link_create={@prog_fd=r4, @target_ifindex=r5, 0x0, 0x3f, @tcx={@relative_fd, 0xdcc}}, 0x7) sendmmsg$auto(r4, &(0x7f0000000240)={{&(0x7f0000000000), 0x5ac, &(0x7f00000000c0)={&(0x7f0000000280), 0x47}, 0x1, &(0x7f00000002c0), 0x5, 0x3}, 0x4}, 0x2, 0x100) sysfs$auto(0x2, 0x3b, 0x0) (fail_nth: 1) 86.527592ms ago: executing program 0 (id=3548): mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x4891c0, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x3) mmap$auto(0x0, 0x8, 0x45bd, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto_MEMGETBADBLOCK(0xffffffffffffffff, 0x40084d0b, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfded, 0x3) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) madvise$auto(0x6, 0x4, 0x3) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x48800, 0x0) mq_timedsend$auto(r0, &(0x7f0000000000)='(.,\r^[\x00', 0x5, 0x2b3, &(0x7f0000000040)={0x1, 0x1}) sendmsg$auto_NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="1000030000000000000000150004000000000000000037b5327a1ef2a601ed5cfa97e39b6da4769e9814359b9b7178001f050bf4253905f80ad29fe5fb407731979ea8097b422b43fe78a37845"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/overcommit_ratio\x00', 0x202, 0x0) sendfile$auto(r1, 0x3, 0x0, 0x7ffff000) sysfs$auto(0x2, 0x3b, 0x0) unshare$auto(0x7) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) 76.832722ms ago: executing program 1 (id=3549): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/sched_rt_period_us\x00', 0x101202, 0x0) r1 = syz_clone3(&(0x7f0000000440)={0x40000000, &(0x7f00000004c0), &(0x7f00000001c0), &(0x7f0000000200), {0x43}, &(0x7f0000000280)=""/147, 0x93, &(0x7f0000000340)=""/158, &(0x7f0000000640)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x5}, 0x58) fcntl$auto(r0, 0xb, r1) pselect6$auto(0xa, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0x8fea, 0x400000000018) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) madvise$auto(0x6, 0x4, 0x3) rseq$auto(0x0, 0x20, 0x0, 0xe) msync$auto(0x110c230000, 0x200001, 0x6) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x4e940, 0x0) mq_timedsend$auto(r2, &(0x7f0000000000)='(.,\r^[\x00', 0x5, 0x2b3, &(0x7f0000000040)={0x1, 0x1}) ioctl$auto_MON_IOCQ_RING_SIZE(r2, 0x9205, 0x0) r3 = socket(0x18, 0x800, 0x1) r4 = socket(0x11, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'macsec0\x00', 0x0}) bpf$auto(0x5, &(0x7f0000000000)=@link_create={@prog_fd=r4, @target_ifindex=r5, 0x0, 0x3f, @tcx={@relative_fd, 0xdcc}}, 0x7) sendmmsg$auto(r4, &(0x7f0000000240)={{&(0x7f0000000000), 0x5ac, &(0x7f00000000c0)={&(0x7f0000000280), 0x47}, 0x1, &(0x7f00000002c0), 0x5, 0x3}, 0x4}, 0x2, 0x100) sysfs$auto(0x2, 0x3b, 0x0) 0s ago: executing program 3 (id=3550): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x4891c0, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x3) mmap$auto(0x0, 0x8, 0x45bd, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mtd0ro\x00', 0x80000, 0x0) ioctl$auto_MEMGETBADBLOCK(r1, 0x40084d0b, &(0x7f0000000040)=0xffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/sched_rt_period_us\x00', 0x101202, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfded, 0x3) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) madvise$auto(0x6, 0x4, 0x3) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0xc54748b24ee604b7, 0x0) mq_timedsend$auto(r2, &(0x7f0000000000)='(.,\r^[\x00', 0x5, 0x2b3, &(0x7f0000000040)={0x1, 0x1}) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/mpls/conf/veth1_to_team/input\x00', 0x202, 0x0) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000000)="b40c25fb561d", 0x6) socket(0x10, 0x2, 0x4) sysfs$auto(0x2, 0x3b, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/pci/rescan\x00', 0x20681, 0x0) ioctl$auto_UI_SET_PROPBIT(r2, 0x4004556e, &(0x7f00000001c0)=0x6) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000200)='5', 0x1) read$auto(r3, &(0x7f00000002c0)='/proc/sys/net/mpls/conf/veth1_to_team/input\x00', 0x6) kernel console output (not intermixed with test programs): 9186][T25683] ? __pfx_usbdev_open+0x10/0x10 [ 1274.349219][T25683] chrdev_open+0x234/0x6a0 [ 1274.349254][T25683] ? __pfx_apparmor_file_open+0x10/0x10 [ 1274.349306][T25683] ? __pfx_chrdev_open+0x10/0x10 [ 1274.349348][T25683] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1274.349450][T25683] do_dentry_open+0x6ab/0x14d0 [ 1274.349484][T25683] ? __pfx_chrdev_open+0x10/0x10 [ 1274.349529][T25683] vfs_open+0x82/0x3f0 [ 1274.349578][T25683] path_openat+0x2873/0x4280 [ 1274.349633][T25683] ? __pfx_path_openat+0x10/0x10 [ 1274.349679][T25683] do_file_open+0x20e/0x430 [ 1274.349716][T25683] ? __pfx_do_file_open+0x10/0x10 [ 1274.349778][T25683] ? alloc_fd+0x471/0x7a0 [ 1274.349816][T25683] ? do_getname+0x191/0x390 [ 1274.349864][T25683] do_sys_openat2+0x10f/0x1e0 [ 1274.349911][T25683] ? __pfx_do_sys_openat2+0x10/0x10 [ 1274.349963][T25683] ? __fget_files+0x21f/0x3d0 [ 1274.350005][T25683] __x64_sys_openat+0x12d/0x210 [ 1274.350062][T25683] ? __pfx___x64_sys_openat+0x10/0x10 [ 1274.350134][T25683] do_syscall_64+0x115/0x840 [ 1274.350182][T25683] ? clear_bhb_loop+0x40/0x90 [ 1274.350226][T25683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1274.350271][T25683] RIP: 0033:0x7fa2ec99e0d9 [ 1274.350298][T25683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1274.350332][T25683] RSP: 002b:00007fa2ed7f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1274.350365][T25683] RAX: ffffffffffffffda RBX: 00007fa2ecc26090 RCX: 00007fa2ec99e0d9 [ 1274.350388][T25683] RDX: 0000000000020882 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 1274.350410][T25683] RBP: 00007fa2eca35024 R08: 0000000000000000 R09: 0000000000000000 [ 1274.350431][T25683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1274.350451][T25683] R13: 00007fa2ecc26128 R14: 00007fa2ecc26090 R15: 00007ffeb52bcb88 [ 1274.350496][T25683] [ 1274.351244][T25683] hub 37-0:1.0: hub_ext_port_status failed (err = -12) [ 1275.008249][T25682] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1275.020839][T25682] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1275.027348][T25682] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1275.035197][T25682] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1275.335897][T25713] FAULT_INJECTION: forcing a failure. [ 1275.335897][T25713] name failslab, interval 1, probability 0, space 0, times 0 [ 1275.350859][T25713] CPU: 1 UID: 0 PID: 25713 Comm: syz.0.2719 Tainted: G L syzkaller #0 PREEMPT(full) [ 1275.350911][T25713] Tainted: [L]=SOFTLOCKUP [ 1275.350923][T25713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1275.350943][T25713] Call Trace: [ 1275.350953][T25713] [ 1275.350966][T25713] dump_stack_lvl+0x100/0x190 [ 1275.351010][T25713] should_fail_ex.cold+0x5/0xa [ 1275.351050][T25713] should_failslab+0xc2/0x120 [ 1275.351101][T25713] __kmalloc_cache_noprof+0x91/0x6c0 [ 1275.351137][T25713] ? __lock_acquire+0x49f/0x1a40 [ 1275.351193][T25713] ? resv_map_alloc+0x7e/0x400 [ 1275.351245][T25713] resv_map_alloc+0x7e/0x400 [ 1275.351292][T25713] hugetlbfs_get_inode+0x385/0x700 [ 1275.351457][T25713] ? do_raw_spin_lock+0x128/0x260 [ 1275.351501][T25713] hugetlb_file_setup+0x15b/0x5b0 [ 1275.351552][T25713] memfd_alloc_file+0xc2/0x610 [ 1275.351600][T25713] ? _raw_spin_unlock+0x28/0x50 [ 1275.351651][T25713] ? __pfx_memfd_alloc_file+0x10/0x10 [ 1275.351714][T25713] __do_sys_memfd_create+0x236/0x3d0 [ 1275.351768][T25713] do_syscall_64+0x115/0x840 [ 1275.351814][T25713] ? clear_bhb_loop+0x40/0x90 [ 1275.351858][T25713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1275.351894][T25713] RIP: 0033:0x7f54cbf9e0d9 [ 1275.351922][T25713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1275.351956][T25713] RSP: 002b:00007f54c8d89028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1275.351989][T25713] RAX: ffffffffffffffda RBX: 00007f54cc226630 RCX: 00007f54cbf9e0d9 [ 1275.352012][T25713] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000 [ 1275.352033][T25713] RBP: 00007f54cc035024 R08: 0000000000000000 R09: 0000000000000000 [ 1275.352055][T25713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1275.352076][T25713] R13: 00007f54cc2266c8 R14: 00007f54cc226630 R15: 00007ffedceaccf8 [ 1275.352119][T25713] [ 1275.846138][T20253] Bluetooth: hci1: unknown advertising packet type: 0xea [ 1276.286410][T20253] Bluetooth: hci1: command 0x0406 tx timeout [ 1277.088027][T25623] Bluetooth: hci2: command 0x0c1a tx timeout [ 1277.094358][T25623] Bluetooth: hci3: command 0x0406 tx timeout [ 1277.100435][T20253] Bluetooth: hci0: command 0x0c1a tx timeout [ 1277.393882][T25746] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2724'. [ 1280.867974][T25808] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1282.285953][T25839] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2738'. [ 1284.142314][T20253] Bluetooth: hci2: unknown advertising packet type: 0xea [ 1288.027082][T20253] Bluetooth: hci0: unknown advertising packet type: 0xea [ 1289.740415][T20253] Bluetooth: hci1: unknown advertising packet type: 0xea [ 1292.155481][T26013] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2767'. [ 1293.552189][T26021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2768'. [ 1294.011307][T20253] Bluetooth: hci0: unknown advertising packet type: 0xea [ 1294.595199][T26053] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2773'. [ 1294.673004][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1294.681934][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1297.433357][T26098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2781'. [ 1298.683759][T26102] FAULT_INJECTION: forcing a failure. [ 1298.683759][T26102] name failslab, interval 1, probability 0, space 0, times 0 [ 1298.712589][T26102] CPU: 0 UID: 0 PID: 26102 Comm: syz.1.2782 Tainted: G L syzkaller #0 PREEMPT(full) [ 1298.712645][T26102] Tainted: [L]=SOFTLOCKUP [ 1298.712657][T26102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1298.712679][T26102] Call Trace: [ 1298.712690][T26102] [ 1298.712702][T26102] dump_stack_lvl+0x100/0x190 [ 1298.712757][T26102] should_fail_ex.cold+0x5/0xa [ 1298.712798][T26102] should_failslab+0xc2/0x120 [ 1298.712851][T26102] __kmalloc_noprof+0xfc/0x820 [ 1298.712896][T26102] ? security_inode_alloc+0x3b/0x2c0 [ 1298.712954][T26102] ? sk_prot_alloc+0x10b/0x2a0 [ 1298.713003][T26102] sk_prot_alloc+0x10b/0x2a0 [ 1298.713043][T26102] sk_alloc+0x36/0xe80 [ 1298.713096][T26102] packet_create+0x127/0x8e0 [ 1298.713288][T26102] __sock_create+0x339/0x860 [ 1298.713337][T26102] __sys_socket+0x14d/0x260 [ 1298.713382][T26102] ? __pfx___sys_socket+0x10/0x10 [ 1298.713435][T26102] __x64_sys_socket+0x72/0xb0 [ 1298.713474][T26102] ? lockdep_hardirqs_on+0x78/0x100 [ 1298.713527][T26102] do_syscall_64+0x115/0x840 [ 1298.713576][T26102] ? clear_bhb_loop+0x40/0x90 [ 1298.713623][T26102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1298.713662][T26102] RIP: 0033:0x7fea7159e0d9 [ 1298.713693][T26102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1298.713727][T26102] RSP: 002b:00007fea724c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1298.713760][T26102] RAX: ffffffffffffffda RBX: 00007fea71825fa0 RCX: 00007fea7159e0d9 [ 1298.713784][T26102] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0200000000000011 [ 1298.713805][T26102] RBP: 00007fea71635024 R08: 0000000000000000 R09: 0000000000000000 [ 1298.713827][T26102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1298.713848][T26102] R13: 00007fea71826038 R14: 00007fea71825fa0 R15: 00007ffe51d59ab8 [ 1298.713893][T26102] [ 1299.077232][T20253] Bluetooth: hci3: unknown advertising packet type: 0xea [ 1301.833381][T26163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2792'. [ 1302.124692][T26163] FAULT_INJECTION: forcing a failure. [ 1302.124692][T26163] name failslab, interval 1, probability 0, space 0, times 0 [ 1302.141286][T26163] CPU: 1 UID: 0 PID: 26163 Comm: syz.3.2792 Tainted: G L syzkaller #0 PREEMPT(full) [ 1302.141354][T26163] Tainted: [L]=SOFTLOCKUP [ 1302.141366][T26163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1302.141387][T26163] Call Trace: [ 1302.141398][T26163] [ 1302.141412][T26163] dump_stack_lvl+0x100/0x190 [ 1302.141457][T26163] should_fail_ex.cold+0x5/0xa [ 1302.141496][T26163] should_failslab+0xc2/0x120 [ 1302.141549][T26163] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1302.141612][T26163] ? vm_area_alloc+0x1f/0x160 [ 1302.141697][T26163] vm_area_alloc+0x1f/0x160 [ 1302.141732][T26163] __mmap_region+0x1033/0x2db0 [ 1302.141778][T26163] ? __pfx___mmap_region+0x10/0x10 [ 1302.141812][T26163] ? __pfx___might_resched+0x10/0x10 [ 1302.141894][T26163] ? process_measurement+0x1f4/0x2350 [ 1302.141995][T26163] ? lockdep_hardirqs_on+0x78/0x100 [ 1302.142044][T26163] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 1302.142141][T26163] ? preempt_schedule_thunk+0x16/0x40 [ 1302.142207][T26163] mmap_region+0x35d/0x620 [ 1302.142249][T26163] ? rcu_is_watching+0x12/0xc0 [ 1302.142304][T26163] ? __pfx_mmap_region+0x10/0x10 [ 1302.142351][T26163] ? cap_mmap_addr+0x4b/0x120 [ 1302.142388][T26163] ? bpf_lsm_mmap_addr+0x9/0x30 [ 1302.142433][T26163] ? security_mmap_addr+0x71/0x1e0 [ 1302.142548][T26163] ? __get_unmapped_area+0x255/0x3e0 [ 1302.142598][T26163] do_mmap+0xc63/0x12f0 [ 1302.142647][T26163] ? __pfx_do_mmap+0x10/0x10 [ 1302.142689][T26163] ? __pfx_down_write_killable+0x10/0x10 [ 1302.142742][T26163] vm_mmap_pgoff+0x29e/0x470 [ 1302.142790][T26163] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1302.142842][T26163] ? __pfx_do_futex+0x10/0x10 [ 1302.142887][T26163] ksys_mmap_pgoff+0xe4/0x610 [ 1302.142932][T26163] ? __x64_sys_futex+0x358/0x4d0 [ 1302.142965][T26163] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1302.143006][T26163] ? xfd_validate_state+0x129/0x190 [ 1302.143048][T26163] __x64_sys_mmap+0x125/0x190 [ 1302.143089][T26163] do_syscall_64+0x115/0x840 [ 1302.143130][T26163] ? clear_bhb_loop+0x40/0x90 [ 1302.143167][T26163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1302.143199][T26163] RIP: 0033:0x7fa2ec99e0d9 [ 1302.143225][T26163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1302.143256][T26163] RSP: 002b:00007fa2ed819028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1302.143287][T26163] RAX: ffffffffffffffda RBX: 00007fa2ecc25fa0 RCX: 00007fa2ec99e0d9 [ 1302.143320][T26163] RDX: 00004000000000df RSI: 0000000008020009 RDI: 0000000000000000 [ 1302.143338][T26163] RBP: 00007fa2eca35024 R08: ffffffffffffffff R09: 0000000000008000 [ 1302.143357][T26163] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1302.143375][T26163] R13: 00007fa2ecc26038 R14: 00007fa2ecc25fa0 R15: 00007ffeb52bcb88 [ 1302.143414][T26163] [ 1304.008730][T26201] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2797'. [ 1307.456728][T26260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1307.485835][T26260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1307.521718][ T30] audit: type=1800 audit(1785961419.536:7): pid=26260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2808" name="dbroot" dev="configfs" ino=217165 res=0 errno=0 [ 1308.913890][T20253] Bluetooth: hci0: unknown advertising packet type: 0xea [ 1310.831336][T26310] can: request_module (can-proto-3) failed. [ 1315.739297][T26398] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2826'. [ 1317.356453][T26423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2832'. [ 1323.254606][T26546] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2850'. [ 1325.742103][T26593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2858'. [ 1326.539647][T26599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2859'. [ 1328.124316][T20253] Bluetooth: hci0: unknown advertising packet type: 0xea [ 1329.109432][T26656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2869'. [ 1329.845915][T26664] snd_virmidi snd_virmidi.0: control 61678:5:9:yª:20389 is already present [ 1330.927006][T26700] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2876'. [ 1332.811285][T26739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2882'. [ 1333.064827][T26750] FAULT_INJECTION: forcing a failure. [ 1333.064827][T26750] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1333.081835][T26747] FAULT_INJECTION: forcing a failure. [ 1333.081835][T26747] name failslab, interval 1, probability 0, space 0, times 0 [ 1333.185476][T26747] CPU: 1 UID: 0 PID: 26747 Comm: syz.2.2882 Tainted: G L syzkaller #0 PREEMPT(full) [ 1333.185517][T26747] Tainted: [L]=SOFTLOCKUP [ 1333.185525][T26747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1333.185540][T26747] Call Trace: [ 1333.185548][T26747] [ 1333.185557][T26747] dump_stack_lvl+0x100/0x190 [ 1333.185593][T26747] should_fail_ex.cold+0x5/0xa [ 1333.185621][T26747] should_failslab+0xc2/0x120 [ 1333.185659][T26747] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1333.185690][T26747] ? trace_kmem_cache_alloc+0xdd/0x100 [ 1333.185725][T26747] ? security_file_alloc+0x34/0x2c0 [ 1333.185766][T26747] security_file_alloc+0x34/0x2c0 [ 1333.185802][T26747] init_file+0x95/0x480 [ 1333.185833][T26747] alloc_empty_file+0x79/0x1c0 [ 1333.185865][T26747] alloc_file_pseudo+0x183/0x290 [ 1333.185921][T26747] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1333.185968][T26747] ? alloc_fd+0x471/0x7a0 [ 1333.185997][T26747] sock_alloc_file+0x50/0x210 [ 1333.186109][T26747] __sys_socket+0x1c0/0x260 [ 1333.186138][T26747] ? __pfx___sys_socket+0x10/0x10 [ 1333.186182][T26747] __x64_sys_socket+0x72/0xb0 [ 1333.186210][T26747] ? lockdep_hardirqs_on+0x78/0x100 [ 1333.186244][T26747] do_syscall_64+0x115/0x840 [ 1333.186276][T26747] ? clear_bhb_loop+0x40/0x90 [ 1333.186306][T26747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1333.186331][T26747] RIP: 0033:0x7fb2e279e0d9 [ 1333.186351][T26747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1333.186375][T26747] RSP: 002b:00007fb2e3651028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1333.186398][T26747] RAX: ffffffffffffffda RBX: 00007fb2e2a26180 RCX: 00007fb2e279e0d9 [ 1333.186415][T26747] RDX: 0000000000000073 RSI: 0000000000000002 RDI: 0000000000000002 [ 1333.186430][T26747] RBP: 00007fb2e2835024 R08: 0000000000000000 R09: 0000000000000000 [ 1333.186446][T26747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1333.186460][T26747] R13: 00007fb2e2a26218 R14: 00007fb2e2a26180 R15: 00007ffecea93718 [ 1333.186490][T26747] [ 1333.195672][T26750] CPU: 0 UID: 0 PID: 26750 Comm: syz.1.2889 Tainted: G L syzkaller #0 PREEMPT(full) [ 1333.195824][T26750] Tainted: [L]=SOFTLOCKUP [ 1333.195856][T26750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1333.195901][T26750] Call Trace: [ 1333.195932][T26750] [ 1333.195962][T26750] dump_stack_lvl+0x100/0x190 [ 1333.196068][T26750] should_fail_ex.cold+0x5/0xa [ 1333.196199][T26750] _copy_to_user+0x32/0xd0 [ 1333.196329][T26750] simple_read_from_buffer+0xcb/0x170 [ 1333.196499][T26750] proc_fail_nth_read+0x1af/0x230 [ 1333.196636][T26750] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1333.196796][T26750] ? rw_verify_area+0xce/0x6d0 [ 1333.196914][T26750] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1333.197052][T26750] vfs_read+0x1e4/0xb40 [ 1333.197138][T26750] ? __pfx_vfs_read+0x10/0x10 [ 1333.197211][T26750] ? __fget_files+0x215/0x3d0 [ 1333.197299][T26750] ? __fget_files+0x21f/0x3d0 [ 1333.197403][T26750] ksys_read+0x12a/0x250 [ 1333.197475][T26750] ? __pfx_ksys_read+0x10/0x10 [ 1333.197575][T26750] do_syscall_64+0x115/0x840 [ 1333.197697][T26750] ? clear_bhb_loop+0x40/0x90 [ 1333.197787][T26750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1333.197879][T26750] RIP: 0033:0x7fea7155e90e [ 1333.197943][T26750] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1333.198027][T26750] RSP: 002b:00007fea723fbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1333.198115][T26750] RAX: ffffffffffffffda RBX: 00007fea723fc6c0 RCX: 00007fea7155e90e [ 1333.198176][T26750] RDX: 000000000000000f RSI: 00007fea723fc0a0 RDI: 0000000000000002 [ 1333.198227][T26750] RBP: 00007fea723fc090 R08: 0000000000000000 R09: 0000000000000000 [ 1333.198279][T26750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1333.198322][T26750] R13: 00007fea718265d8 R14: 00007fea71826540 R15: 00007ffe51d59ab8 [ 1333.198428][T26750] [ 1339.007722][T20253] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 1341.068815][T20253] Bluetooth: hci1: command 0x0406 tx timeout [ 1341.297545][T26885] snd_virmidi snd_virmidi.0: control 61678:5:9:yª:20389 is already present [ 1341.453411][ T1030] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1341.671724][ T1030] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1341.968604][T25732] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1341.983211][T25732] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1341.992903][T25732] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1342.003351][T25732] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1342.017523][T25732] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1342.205480][ T1030] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1342.494894][ T1030] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1343.138090][T25623] Bluetooth: hci1: command 0x0406 tx timeout [ 1343.545239][ T1030] bridge_slave_1: left allmulticast mode [ 1343.561804][ T1030] bridge_slave_1: left promiscuous mode [ 1343.578350][ T1030] bridge0: port 2(bridge_slave_1) entered disabled state [ 1343.601711][ T1030] bridge_slave_0: left allmulticast mode [ 1343.617164][ T1030] bridge_slave_0: left promiscuous mode [ 1343.634943][ T1030] bridge0: port 1(bridge_slave_0) entered disabled state [ 1343.844633][T26936] mmap: syz.2.2910 (26936) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1343.868485][T26936] ERROR: Out of memory at tomoyo_memory_ok. [ 1344.096261][T20253] Bluetooth: hci0: command tx timeout [ 1344.229345][ T1030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1344.251297][ T1030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1344.278536][ T1030] bond0 (unregistering): Released all slaves [ 1344.387760][ T5290] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1344.490180][T26954] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2912'. [ 1344.911288][ T1030] hsr_slave_0: left promiscuous mode [ 1344.917650][ T1030] hsr_slave_1: left promiscuous mode [ 1344.927471][ T1030] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1344.936998][ T1030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1344.945850][ T1030] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1344.955472][ T1030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1344.993960][ T1030] veth1_macvtap: left promiscuous mode [ 1345.001985][ T1030] veth0_macvtap: left promiscuous mode [ 1345.007984][ T1030] veth1_vlan: left promiscuous mode [ 1345.014406][ T1030] veth0_vlan: left promiscuous mode [ 1345.458448][ T1030] team0 (unregistering): Port device team_slave_1 removed [ 1345.484509][ T1030] team0 (unregistering): Port device team_slave_0 removed [ 1346.162276][T20253] Bluetooth: hci0: command tx timeout [ 1346.409215][T20253] Bluetooth: hci2: unknown advertising packet type: 0xea [ 1346.935711][ T5290] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1347.207199][T26901] bridge0: port 1(bridge_slave_0) entered blocking state [ 1347.219858][T26901] bridge0: port 1(bridge_slave_0) entered disabled state [ 1347.229610][T26901] bridge_slave_0: entered allmulticast mode [ 1347.239176][T26901] bridge_slave_0: entered promiscuous mode [ 1347.252230][T26901] bridge0: port 2(bridge_slave_1) entered blocking state [ 1347.260715][T26901] bridge0: port 2(bridge_slave_1) entered disabled state [ 1347.268600][T26901] bridge_slave_1: entered allmulticast mode [ 1347.277369][T26901] bridge_slave_1: entered promiscuous mode [ 1347.344171][T26901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1347.430938][T26901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1347.784320][T26901] team0: Port device team_slave_0 added [ 1347.798857][T26901] team0: Port device team_slave_1 added [ 1348.231519][T20253] Bluetooth: hci0: command tx timeout [ 1348.268167][T26901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1348.278314][T26901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1348.305103][T26901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1348.548637][T26901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1348.555970][T26901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1348.584602][T26901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1348.625125][ T5290] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1348.862906][T26901] hsr_slave_0: entered promiscuous mode [ 1348.873785][T26901] hsr_slave_1: entered promiscuous mode [ 1348.884646][T26901] debugfs: 'hsr0' already exists in 'hsr' [ 1348.890886][T26901] Cannot create hsr debugfs directory [ 1350.311043][T20253] Bluetooth: hci0: command tx timeout [ 1351.798383][T26901] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1351.831888][T26901] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1351.855732][T26901] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1351.889165][T26901] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1351.918283][T26901] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1351.950765][T26901] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1351.973183][T26901] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1351.999920][T26901] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1352.279059][T26901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1352.319021][T26901] 8021q: adding VLAN 0 to HW filter on device team0 [ 1352.362871][ T1030] bridge0: port 1(bridge_slave_0) entered blocking state [ 1352.370201][ T1030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1352.530620][T14940] bridge0: port 2(bridge_slave_1) entered blocking state [ 1352.537842][T14940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1353.307479][T20253] Bluetooth: hci3: unknown advertising packet type: 0xea [ 1355.794189][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1355.808438][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1356.001654][T26901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1356.134443][T26901] veth0_vlan: entered promiscuous mode [ 1356.164745][T26901] veth1_vlan: entered promiscuous mode [ 1356.268059][T26901] veth0_macvtap: entered promiscuous mode [ 1356.305590][T26901] veth1_macvtap: entered promiscuous mode [ 1356.346156][T26901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1356.364123][T26901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1356.791286][T27233] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2936'. [ 1356.940744][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1356.956197][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1357.240192][T14940] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1357.254139][T14940] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1357.454320][ T48] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1357.523364][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1357.900380][T14940] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.433189][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1359.518844][T27290] ecryptfs_miscdev_write: Invalid packet size [0] [ 1360.464124][T27308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2947'. [ 1360.736710][T27319] FAULT_INJECTION: forcing a failure. [ 1360.736710][T27319] name failslab, interval 1, probability 0, space 0, times 0 [ 1360.797984][T27319] CPU: 0 UID: 0 PID: 27319 Comm: syz.0.2947 Tainted: G L syzkaller #0 PREEMPT(full) [ 1360.798035][T27319] Tainted: [L]=SOFTLOCKUP [ 1360.798048][T27319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1360.798068][T27319] Call Trace: [ 1360.798082][T27319] [ 1360.798095][T27319] dump_stack_lvl+0x100/0x190 [ 1360.798140][T27319] should_fail_ex.cold+0x5/0xa [ 1360.798177][T27319] should_failslab+0xc2/0x120 [ 1360.798228][T27319] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1360.798270][T27319] ? trace_kmem_cache_alloc+0xdd/0x100 [ 1360.798320][T27319] ? security_file_alloc+0x34/0x2c0 [ 1360.798379][T27319] security_file_alloc+0x34/0x2c0 [ 1360.798429][T27319] init_file+0x95/0x480 [ 1360.798483][T27319] alloc_empty_file+0x79/0x1c0 [ 1360.798533][T27319] alloc_file_pseudo+0x183/0x290 [ 1360.798590][T27319] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1360.798671][T27319] ? alloc_fd+0x471/0x7a0 [ 1360.798719][T27319] sock_alloc_file+0x50/0x210 [ 1360.798777][T27319] __sys_socket+0x1c0/0x260 [ 1360.798819][T27319] ? __pfx___sys_socket+0x10/0x10 [ 1360.798873][T27319] __x64_sys_socket+0x72/0xb0 [ 1360.798913][T27319] ? lockdep_hardirqs_on+0x78/0x100 [ 1360.798960][T27319] do_syscall_64+0x115/0x840 [ 1360.799006][T27319] ? clear_bhb_loop+0x40/0x90 [ 1360.799049][T27319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1360.799086][T27319] RIP: 0033:0x7f54cbf9e0d9 [ 1360.799116][T27319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1360.799150][T27319] RSP: 002b:00007f54ccdb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1360.799184][T27319] RAX: ffffffffffffffda RBX: 00007f54cc226180 RCX: 00007f54cbf9e0d9 [ 1360.799207][T27319] RDX: 0000000000000073 RSI: 0000000000000002 RDI: 0000000000000002 [ 1360.799228][T27319] RBP: 00007f54cc035024 R08: 0000000000000000 R09: 0000000000000000 [ 1360.799249][T27319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1360.799270][T27319] R13: 00007f54cc226218 R14: 00007f54cc226180 R15: 00007ffedceaccf8 [ 1360.799314][T27319] [ 1365.204315][T20253] Bluetooth: hci0: unknown advertising packet type: 0xea [ 1365.208415][T27405] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2959'. [ 1368.868221][T27479] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2973'. [ 1369.563515][T20253] Bluetooth: hci1: unknown advertising packet type: 0xea [ 1374.575037][T27592] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2990'. [ 1375.957423][T20253] Bluetooth: hci2: unknown advertising packet type: 0xea [ 1378.212427][T27659] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3002'. [ 1380.258047][T20253] Bluetooth: hci0: unknown advertising packet type: 0xea [ 1382.608084][T27739] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3014'. [ 1384.484417][T20253] Bluetooth: hci0: unknown advertising packet type: 0xea [ 1386.797893][T27826] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3027'. [ 1388.017853][T20253] Bluetooth: hci1: unknown advertising packet type: 0xea [ 1390.781676][T27900] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3040'. [ 1392.881727][T20253] Bluetooth: hci3: unknown advertising packet type: 0xea [ 1395.317729][T27987] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3053'. [ 1397.084845][T20253] Bluetooth: hci3: unknown advertising packet type: 0xea [ 1399.489331][T28059] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3065'. [ 1401.724890][T20253] Bluetooth: hci2: unknown advertising packet type: 0xea [ 1403.209048][T28141] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3078'. [ 1406.532420][T20253] Bluetooth: hci3: unknown advertising packet type: 0xea [ 1406.703935][T28210] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3089'. [ 1410.405405][T28280] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3100'. [ 1411.739669][T20253] Bluetooth: hci0: unknown advertising packet type: 0xea [ 1413.918840][T28344] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3111'. [ 1416.301084][T20253] Bluetooth: hci3: unknown advertising packet type: 0xea [ 1416.931224][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1416.944869][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1417.856115][T28406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3123'. [ 1418.378672][T28423] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3124'. [ 1420.644072][T20253] Bluetooth: hci1: unknown advertising packet type: 0xea [ 1422.314956][T28484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3135'. [ 1422.503222][T28490] FAULT_INJECTION: forcing a failure. [ 1422.503222][T28490] name failslab, interval 1, probability 0, space 0, times 0 [ 1422.535100][T28490] CPU: 0 UID: 0 PID: 28490 Comm: syz.1.3135 Tainted: G L syzkaller #0 PREEMPT(full) [ 1422.535154][T28490] Tainted: [L]=SOFTLOCKUP [ 1422.535166][T28490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1422.535186][T28490] Call Trace: [ 1422.535196][T28490] [ 1422.535209][T28490] dump_stack_lvl+0x100/0x190 [ 1422.535259][T28490] should_fail_ex.cold+0x5/0xa [ 1422.535299][T28490] should_failslab+0xc2/0x120 [ 1422.535351][T28490] __kmalloc_noprof+0xfc/0x820 [ 1422.535393][T28490] ? trace_kmem_cache_alloc+0xdd/0x100 [ 1422.535442][T28490] ? lsm_blob_alloc+0x68/0x90 [ 1422.535484][T28490] lsm_blob_alloc+0x68/0x90 [ 1422.535519][T28490] security_sk_alloc+0x2d/0x290 [ 1422.535561][T28490] sk_prot_alloc+0x1d1/0x2a0 [ 1422.535603][T28490] sk_alloc+0x36/0xe80 [ 1422.535655][T28490] inet_create+0x3a0/0x1060 [ 1422.535830][T28490] ? inet_create+0x94/0x1060 [ 1422.535886][T28490] __sock_create+0x339/0x860 [ 1422.535934][T28490] __sys_socket+0x14d/0x260 [ 1422.535985][T28490] ? __pfx___sys_socket+0x10/0x10 [ 1422.536043][T28490] __x64_sys_socket+0x72/0xb0 [ 1422.536084][T28490] ? lockdep_hardirqs_on+0x78/0x100 [ 1422.536136][T28490] do_syscall_64+0x115/0x840 [ 1422.536183][T28490] ? clear_bhb_loop+0x40/0x90 [ 1422.536228][T28490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1422.536265][T28490] RIP: 0033:0x7f1c3cb9e0d9 [ 1422.536296][T28490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1422.536330][T28490] RSP: 002b:00007f1c3adf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1422.536365][T28490] RAX: ffffffffffffffda RBX: 00007f1c3ce26090 RCX: 00007f1c3cb9e0d9 [ 1422.536388][T28490] RDX: 0000000000000073 RSI: 0000000000000002 RDI: 0000000000000002 [ 1422.536409][T28490] RBP: 00007f1c3cc35024 R08: 0000000000000000 R09: 0000000000000000 [ 1422.536431][T28490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1422.536452][T28490] R13: 00007f1c3ce26128 R14: 00007f1c3ce26090 R15: 00007ffd6f52d008 [ 1422.536499][T28490] [ 1423.427410][T28516] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3139'. [ 1425.265754][T20253] Bluetooth: hci2: unknown advertising packet type: 0xea [ 1426.598635][T28570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3148'. [ 1427.902070][T28586] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3152'. [ 1429.841118][T20253] Bluetooth: hci1: unknown advertising packet type: 0xea [ 1431.258870][T28655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3161'. [ 1432.210442][T28684] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3164'. [ 1434.388683][T20253] Bluetooth: hci0: unknown advertising packet type: 0xea [ 1436.255466][T28747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3175'. [ 1437.190643][T28775] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3179'. [ 1439.184185][T20253] Bluetooth: hci3: unknown advertising packet type: 0xea [ 1442.344883][T28874] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3193'. [ 1443.948919][T20253] Bluetooth: hci1: unknown advertising packet type: 0xea [ 1445.558842][T28921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3202'. [ 1447.375085][T28983] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3209'. [ 1448.865758][T28992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3214'. [ 1449.184476][T20253] Bluetooth: hci1: unknown advertising packet type: 0xea [ 1451.687316][T29055] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3221'. [ 1453.289871][T29064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3224'. [ 1454.308121][T20253] Bluetooth: hci1: unknown advertising packet type: 0xea [ 1456.339820][T29129] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3232'. [ 1457.547193][T29145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3237'. [ 1459.735951][T20253] Bluetooth: hci0: unknown advertising packet type: 0xea [ 1460.865411][T29198] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3243'. [ 1461.913349][T29216] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3244'. [ 1464.596405][T29261] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1464.825605][T20253] Bluetooth: hci0: command 0x0406 tx timeout [ 1466.621682][T29256] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1466.655988][T25623] Bluetooth: hci1: command 0x0406 tx timeout [ 1466.663812][T29256] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1466.700111][T29256] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1466.723700][T29256] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1466.744675][T29256] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1467.770852][T29297] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3256'. [ 1468.599788][T29320] FAULT_INJECTION: forcing a failure. [ 1468.599788][T29320] name failslab, interval 1, probability 0, space 0, times 0 [ 1468.616354][T29320] CPU: 1 UID: 0 PID: 29320 Comm: syz.0.3260 Tainted: G L syzkaller #0 PREEMPT(full) [ 1468.616413][T29320] Tainted: [L]=SOFTLOCKUP [ 1468.616423][T29320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1468.616442][T29320] Call Trace: [ 1468.616453][T29320] [ 1468.616466][T29320] dump_stack_lvl+0x100/0x190 [ 1468.616523][T29320] should_fail_ex.cold+0x5/0xa [ 1468.616560][T29320] should_failslab+0xc2/0x120 [ 1468.616607][T29320] __kmalloc_cache_noprof+0x91/0x6c0 [ 1468.616644][T29320] ? usb_control_msg+0xbc/0x4b0 [ 1468.616697][T29320] usb_control_msg+0xbc/0x4b0 [ 1468.616740][T29320] ? __pfx_usb_control_msg+0x10/0x10 [ 1468.616782][T29320] ? __lock_acquire+0x49f/0x1a40 [ 1468.616841][T29320] hub_ext_port_status+0x152/0x600 [ 1468.616893][T29320] hub_activate+0x6e5/0x1c40 [ 1468.616949][T29320] ? __pfx_hub_activate+0x10/0x10 [ 1468.616988][T29320] ? find_held_lock+0x2b/0x80 [ 1468.617028][T29320] ? psi_trigger_create_rtpoll_worker+0x90/0x140 [ 1468.617077][T29320] ? usbdev_ioctl+0x2280/0x3aa0 [ 1468.617112][T29320] ? usb_generic_driver_resume+0x70/0xa0 [ 1468.617153][T29320] ? hcd_bus_resume+0x37b/0x810 [ 1468.617193][T29320] hub_resume+0xb0/0x400 [ 1468.617239][T29320] ? __pfx_hub_resume+0x10/0x10 [ 1468.617282][T29320] ? __pfx_hcd_bus_resume+0x10/0x10 [ 1468.617326][T29320] usb_resume_interface.isra.0+0x2ce/0x3d0 [ 1468.617386][T29320] usb_resume_both+0x53a/0x7f0 [ 1468.617439][T29320] ? do_dentry_open+0x6ab/0x14d0 [ 1468.617473][T29320] ? __pfx_usb_resume_both+0x10/0x10 [ 1468.617537][T29320] ? __rpm_callback+0x272/0x620 [ 1468.617597][T29320] ? __pfx_usb_runtime_resume+0x10/0x10 [ 1468.617631][T29320] ? rcu_is_watching+0x12/0xc0 [ 1468.617681][T29320] ? __pfx_usb_runtime_resume+0x10/0x10 [ 1468.617717][T29320] __rpm_callback+0xc8/0x620 [ 1468.617767][T29320] ? ktime_get_mono_fast_ns+0x1c3/0x3f0 [ 1468.617821][T29320] ? __pfx_usb_runtime_resume+0x10/0x10 [ 1468.617854][T29320] rpm_callback+0x16a/0x1b0 [ 1468.617900][T29320] ? __pfx_usb_runtime_resume+0x10/0x10 [ 1468.617937][T29320] rpm_resume+0xd13/0x1320 [ 1468.617984][T29320] ? usbdev_open+0x201/0x870 [ 1468.618014][T29320] ? klist_put+0xcb/0x1d0 [ 1468.618076][T29320] ? __pfx_rpm_resume+0x10/0x10 [ 1468.618121][T29320] ? do_raw_spin_lock+0x128/0x260 [ 1468.618160][T29320] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1468.618202][T29320] ? _raw_spin_lock_irqsave+0x52/0x60 [ 1468.618250][T29320] __pm_runtime_resume+0xb6/0x170 [ 1468.618317][T29320] usb_autoresume_device+0x23/0xe0 [ 1468.618363][T29320] usbdev_open+0x228/0x870 [ 1468.618400][T29320] ? kobject_get_unless_zero+0x156/0x200 [ 1468.618456][T29320] ? __pfx_usbdev_open+0x10/0x10 [ 1468.618489][T29320] ? chrdev_open+0x10b/0x6a0 [ 1468.618534][T29320] ? chrdev_open+0x10b/0x6a0 [ 1468.618576][T29320] ? __pfx_usbdev_open+0x10/0x10 [ 1468.618611][T29320] chrdev_open+0x234/0x6a0 [ 1468.618644][T29320] ? __pfx_apparmor_file_open+0x10/0x10 [ 1468.618689][T29320] ? __pfx_chrdev_open+0x10/0x10 [ 1468.618728][T29320] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1468.618779][T29320] do_dentry_open+0x6ab/0x14d0 [ 1468.618816][T29320] ? __pfx_chrdev_open+0x10/0x10 [ 1468.618863][T29320] vfs_open+0x82/0x3f0 [ 1468.618913][T29320] path_openat+0x2873/0x4280 [ 1468.618969][T29320] ? __pfx_path_openat+0x10/0x10 [ 1468.619019][T29320] do_file_open+0x20e/0x430 [ 1468.619058][T29320] ? __pfx_do_file_open+0x10/0x10 [ 1468.619134][T29320] ? alloc_fd+0x471/0x7a0 [ 1468.619174][T29320] ? do_getname+0x191/0x390 [ 1468.619222][T29320] do_sys_openat2+0x10f/0x1e0 [ 1468.619269][T29320] ? __pfx_do_sys_openat2+0x10/0x10 [ 1468.619318][T29320] ? __fget_files+0x21f/0x3d0 [ 1468.619357][T29320] __x64_sys_openat+0x12d/0x210 [ 1468.619405][T29320] ? __pfx___x64_sys_openat+0x10/0x10 [ 1468.619470][T29320] do_syscall_64+0x115/0x840 [ 1468.619528][T29320] ? clear_bhb_loop+0x40/0x90 [ 1468.619573][T29320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1468.619608][T29320] RIP: 0033:0x7f54cbf9e0d9 [ 1468.619639][T29320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1468.619674][T29320] RSP: 002b:00007f54ccdd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1468.619708][T29320] RAX: ffffffffffffffda RBX: 00007f54cc226090 RCX: 00007f54cbf9e0d9 [ 1468.619732][T29320] RDX: 0000000000020882 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 1468.619754][T29320] RBP: 00007f54cc035024 R08: 0000000000000000 R09: 0000000000000000 [ 1468.619775][T29320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1468.619795][T29320] R13: 00007f54cc226128 R14: 00007f54cc226090 R15: 00007ffedceaccf8 [ 1468.619841][T29320] [ 1469.076826][T25623] Bluetooth: hci0: command 0x0406 tx timeout [ 1469.083638][T25623] Bluetooth: hci2: command 0x0c1a tx timeout [ 1469.087232][T20253] Bluetooth: hci3: command 0x0406 tx timeout [ 1469.097835][T29320] hub 37-0:1.0: hub_ext_port_status failed (err = -12) [ 1469.258088][T29319] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1469.264554][T29319] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1469.270974][T29319] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1469.277340][T29319] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1471.113757][T20253] Bluetooth: hci1: command 0x0406 tx timeout [ 1471.284815][T20253] Bluetooth: hci0: command 0x0406 tx timeout [ 1471.284866][T25732] Bluetooth: hci2: command 0x0c1a tx timeout [ 1471.293474][T20253] Bluetooth: hci3: command 0x0406 tx timeout [ 1472.220171][T29381] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3269'. [ 1472.451200][T29382] can: request_module (can-proto-3) failed. [ 1477.254723][T29449] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3281'. [ 1477.283726][T20253] Bluetooth: hci2: unknown advertising packet type: 0xea [ 1477.871967][T29480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3284'. [ 1477.962581][T29481] FAULT_INJECTION: forcing a failure. [ 1477.962581][T29481] name failslab, interval 1, probability 0, space 0, times 0 [ 1477.975669][T29481] CPU: 0 UID: 0 PID: 29481 Comm: syz.2.3284 Tainted: G L syzkaller #0 PREEMPT(full) [ 1477.975734][T29481] Tainted: [L]=SOFTLOCKUP [ 1477.975747][T29481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1477.975767][T29481] Call Trace: [ 1477.975779][T29481] [ 1477.975792][T29481] dump_stack_lvl+0x100/0x190 [ 1477.975839][T29481] should_fail_ex.cold+0x5/0xa [ 1477.975878][T29481] should_failslab+0xc2/0x120 [ 1477.975931][T29481] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 1477.975979][T29481] ? __d_alloc+0x35/0xa50 [ 1477.976025][T29481] __d_alloc+0x35/0xa50 [ 1477.976067][T29481] d_alloc_pseudo+0x1c/0xc0 [ 1477.976117][T29481] alloc_file_pseudo+0x118/0x290 [ 1477.976165][T29481] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1477.976236][T29481] __shmem_file_setup+0x205/0x460 [ 1477.976302][T29481] ? __pfx___shmem_file_setup+0x10/0x10 [ 1477.976361][T29481] ? vm_area_alloc+0x1f/0x160 [ 1477.976397][T29481] shmem_zero_setup+0x96/0x1b0 [ 1477.976442][T29481] __mmap_region+0x24ef/0x2db0 [ 1477.976489][T29481] ? __pfx___mmap_region+0x10/0x10 [ 1477.976535][T29481] ? __lock_acquire+0x49f/0x1a40 [ 1477.976620][T29481] ? __lock_acquire+0x49f/0x1a40 [ 1477.976697][T29481] ? hrtimer_start_range_ns_common+0x78e/0x18b0 [ 1477.976774][T29481] ? rcu_is_watching+0x12/0xc0 [ 1477.976817][T29481] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 1477.976857][T29481] ? lockdep_hardirqs_on+0x78/0x100 [ 1477.976975][T29481] mmap_region+0x35d/0x620 [ 1477.977015][T29481] ? rcu_is_watching+0x12/0xc0 [ 1477.977056][T29481] ? __pfx_mmap_region+0x10/0x10 [ 1477.977096][T29481] ? cap_mmap_addr+0x4b/0x120 [ 1477.977133][T29481] ? bpf_lsm_mmap_addr+0x9/0x30 [ 1477.977165][T29481] ? security_mmap_addr+0x71/0x1e0 [ 1477.977213][T29481] ? __get_unmapped_area+0x255/0x3e0 [ 1477.977267][T29481] do_mmap+0xc63/0x12f0 [ 1477.977323][T29481] ? __pfx_do_mmap+0x10/0x10 [ 1477.977390][T29481] ? __pfx_down_write_killable+0x10/0x10 [ 1477.977442][T29481] ? __pfx_futex_wait+0x10/0x10 [ 1477.977493][T29481] vm_mmap_pgoff+0x29e/0x470 [ 1477.977547][T29481] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1477.977600][T29481] ? __pfx_do_futex+0x10/0x10 [ 1477.977644][T29481] ksys_mmap_pgoff+0xe4/0x610 [ 1477.977696][T29481] ? __x64_sys_futex+0x358/0x4d0 [ 1477.977749][T29481] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1477.977800][T29481] ? xfd_validate_state+0x129/0x190 [ 1477.977852][T29481] __x64_sys_mmap+0x125/0x190 [ 1477.977901][T29481] do_syscall_64+0x115/0x840 [ 1477.977959][T29481] ? clear_bhb_loop+0x40/0x90 [ 1477.978010][T29481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1477.978054][T29481] RIP: 0033:0x7fb2e279e0d9 [ 1477.978085][T29481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1477.978118][T29481] RSP: 002b:00007fb2e3672028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1477.978153][T29481] RAX: ffffffffffffffda RBX: 00007fb2e2a26090 RCX: 00007fb2e279e0d9 [ 1477.978175][T29481] RDX: 00004000000000df RSI: 0000000008020009 RDI: 0000000000000000 [ 1477.978195][T29481] RBP: 00007fb2e2835024 R08: ffffffffffffffff R09: 0000000000008000 [ 1477.978217][T29481] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1477.978238][T29481] R13: 00007fb2e2a26128 R14: 00007fb2e2a26090 R15: 00007ffecea93718 [ 1477.978283][T29481] [ 1478.305728][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1478.313821][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1481.720391][T29545] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3293'. [ 1482.024608][T29558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3297'. [ 1482.153281][T20253] Bluetooth: hci3: unknown advertising packet type: 0xea [ 1485.996906][T29631] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3307'. [ 1486.499502][T29638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3309'. [ 1486.988892][T20253] Bluetooth: hci1: unknown advertising packet type: 0xea [ 1489.533817][T29711] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3320'. [ 1490.884019][T29718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3322'. [ 1491.404978][T20253] Bluetooth: hci0: unknown advertising packet type: 0xea [ 1494.855190][T29811] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3333'. [ 1495.954897][T20253] Bluetooth: hci1: unknown advertising packet type: 0xea [ 1498.751221][T29891] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3348'. [ 1499.990979][T20253] Bluetooth: hci3: unknown advertising packet type: 0xea [ 1503.569274][T29997] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3365'. [ 1504.152223][T20253] Bluetooth: hci1: unknown advertising packet type: 0xea [ 1505.683985][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1506.086691][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1506.282776][T25732] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1506.298621][T25732] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1506.307685][T25732] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1506.318841][T25732] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1506.328491][T25732] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1506.470952][T30040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3373'. [ 1506.495668][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1506.755479][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1507.310944][ T13] bridge_slave_1: left allmulticast mode [ 1507.333533][ T13] bridge_slave_1: left promiscuous mode [ 1507.357608][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1507.409704][ T13] bridge_slave_0: left allmulticast mode [ 1507.433607][ T13] bridge_slave_0: left promiscuous mode [ 1507.454535][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1507.997981][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1508.027324][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1508.057848][ T13] bond0 (unregistering): Released all slaves [ 1508.422224][T30087] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3377'. [ 1508.438578][T25732] Bluetooth: hci0: command tx timeout [ 1508.831385][ T5290] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1508.897092][ T13] hsr_slave_0: left promiscuous mode [ 1508.903436][ T13] hsr_slave_1: left promiscuous mode [ 1508.910608][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1508.920207][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1508.928931][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1508.936756][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1508.950819][ T13] veth1_macvtap: left promiscuous mode [ 1508.956539][ T13] veth0_macvtap: left promiscuous mode [ 1508.962191][ T13] veth1_vlan: left promiscuous mode [ 1508.967937][ T13] veth0_vlan: left promiscuous mode [ 1509.205213][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1509.225562][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1510.507685][T25732] Bluetooth: hci0: command tx timeout [ 1510.646285][T25732] Bluetooth: hci1: unknown advertising packet type: 0xea [ 1510.990629][T30036] bridge0: port 1(bridge_slave_0) entered blocking state [ 1511.006312][T30036] bridge0: port 1(bridge_slave_0) entered disabled state [ 1511.013872][T30036] bridge_slave_0: entered allmulticast mode [ 1511.036590][T30036] bridge_slave_0: entered promiscuous mode [ 1511.136868][ T5290] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1511.165401][T30036] bridge0: port 2(bridge_slave_1) entered blocking state [ 1511.182298][T30036] bridge0: port 2(bridge_slave_1) entered disabled state [ 1511.194395][T30036] bridge_slave_1: entered allmulticast mode [ 1511.202570][T30036] bridge_slave_1: entered promiscuous mode [ 1511.490392][T30036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1511.505027][T30036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1511.758720][T30036] team0: Port device team_slave_0 added [ 1511.810108][T30036] team0: Port device team_slave_1 added [ 1511.940246][T30036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1511.960213][T30036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1511.997539][T30036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1512.048611][T30036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1512.057550][T30036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1512.093548][T30036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1512.247089][T30036] hsr_slave_0: entered promiscuous mode [ 1512.266250][T30036] hsr_slave_1: entered promiscuous mode [ 1512.297147][T30036] debugfs: 'hsr0' already exists in 'hsr' [ 1512.322137][T30036] Cannot create hsr debugfs directory [ 1512.576948][T25732] Bluetooth: hci0: command tx timeout [ 1513.376820][ T48] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1513.432080][T30157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3383'. [ 1513.519213][ T5290] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1513.607945][T20253] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1513.625580][T20253] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1513.645723][T20253] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1513.659302][T20253] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1513.674584][T20253] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1513.804037][ T48] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1513.964944][ T48] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1514.123372][ T48] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1514.647731][T25732] Bluetooth: hci0: command tx timeout [ 1515.355802][ T48] bridge_slave_1: left allmulticast mode [ 1515.365856][ T48] bridge_slave_1: left promiscuous mode [ 1515.371902][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 1515.384621][ T48] bridge_slave_0: left allmulticast mode [ 1515.390586][ T48] bridge_slave_0: left promiscuous mode [ 1515.399162][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 1515.648960][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1515.661214][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1515.676190][ T48] bond0 (unregistering): Released all slaves [ 1515.762896][T25732] Bluetooth: hci3: command tx timeout [ 1516.460096][T30036] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1516.481800][T30036] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1516.521269][T30036] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1516.551130][T30036] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1516.688385][T30036] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1516.702118][T30036] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1516.715543][T30036] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1516.727919][T30036] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1516.839536][ T48] hsr_slave_0: left promiscuous mode [ 1516.852961][ T48] hsr_slave_1: left promiscuous mode [ 1516.867812][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1516.894900][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1516.912966][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1516.928185][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1516.961735][ T48] veth1_macvtap: left promiscuous mode [ 1516.973528][ T48] veth0_macvtap: left promiscuous mode [ 1516.992175][ T48] veth1_vlan: left promiscuous mode [ 1517.000091][ T48] veth0_vlan: left promiscuous mode [ 1517.596724][ T48] team0 (unregistering): Port device team_slave_1 removed [ 1517.625759][ T48] team0 (unregistering): Port device team_slave_0 removed [ 1517.801362][ T5290] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1517.837453][T25732] Bluetooth: hci3: command tx timeout [ 1518.502648][T30256] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3389'. [ 1518.827834][T30159] bridge0: port 1(bridge_slave_0) entered blocking state [ 1518.841086][T30159] bridge0: port 1(bridge_slave_0) entered disabled state [ 1518.850005][T30159] bridge_slave_0: entered allmulticast mode [ 1518.861628][T30159] bridge_slave_0: entered promiscuous mode [ 1519.210783][T30159] bridge0: port 2(bridge_slave_1) entered blocking state [ 1519.227649][T30159] bridge0: port 2(bridge_slave_1) entered disabled state [ 1519.238254][T30159] bridge_slave_1: entered allmulticast mode [ 1519.248096][T30159] bridge_slave_1: entered promiscuous mode [ 1519.341349][ T5290] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1519.433680][T30159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1519.529290][T30159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1519.693582][T30159] team0: Port device team_slave_0 added [ 1519.737186][T30159] team0: Port device team_slave_1 added [ 1519.868224][T30159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1519.894816][T30159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1519.899736][T25732] Bluetooth: hci3: command tx timeout [ 1519.931143][T30159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1519.964394][T30159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1519.980260][T30159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1520.015488][T30159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1520.043036][T30036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1520.173913][T30159] hsr_slave_0: entered promiscuous mode [ 1520.181133][T30159] hsr_slave_1: entered promiscuous mode [ 1520.188967][T30159] debugfs: 'hsr0' already exists in 'hsr' [ 1520.194887][T30159] Cannot create hsr debugfs directory [ 1520.379403][T30036] 8021q: adding VLAN 0 to HW filter on device team0 [ 1520.468395][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 1520.475796][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1520.551329][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 1520.558731][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1521.970265][T25732] Bluetooth: hci3: command tx timeout [ 1523.046914][T30345] futex_wake_op: syz.0.3394 tries to shift op by -2048; fix this program [ 1523.100704][T30345] futex_wake_op: syz.0.3394 tries to shift op by -2048; fix this program [ 1523.142779][T30345] 0x000000000001-0x000000020000 : "" [ 1523.273925][T30036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1523.414947][T30345] ftl_cs: FTL header corrupt! [ 1523.784456][T30159] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1523.814746][T30159] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1523.835752][T30159] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1523.850541][T30159] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1524.046883][T30159] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1524.065140][T30159] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1524.100963][T30159] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1524.120122][T30159] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1524.300484][T30036] veth0_vlan: entered promiscuous mode [ 1524.370604][T30036] veth1_vlan: entered promiscuous mode [ 1524.479739][T30036] veth0_macvtap: entered promiscuous mode [ 1524.509964][T30036] veth1_macvtap: entered promiscuous mode [ 1524.524393][T30159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1524.575529][T30036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1524.610255][T30159] 8021q: adding VLAN 0 to HW filter on device team0 [ 1524.632503][T30036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1524.734637][ T2952] bridge0: port 1(bridge_slave_0) entered blocking state [ 1524.741931][ T2952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1524.787513][T25732] Bluetooth: hci2: unknown advertising packet type: 0xea [ 1524.791452][T30391] FAULT_INJECTION: forcing a failure. [ 1524.791452][T30391] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1524.813481][T30391] CPU: 1 UID: 0 PID: 30391 Comm: syz.0.3396 Tainted: G L syzkaller #0 PREEMPT(full) [ 1524.813530][T30391] Tainted: [L]=SOFTLOCKUP [ 1524.813541][T30391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1524.813559][T30391] Call Trace: [ 1524.813568][T30391] [ 1524.813579][T30391] dump_stack_lvl+0x100/0x190 [ 1524.813622][T30391] should_fail_ex.cold+0x5/0xa [ 1524.813656][T30391] _copy_to_user+0x32/0xd0 [ 1524.813711][T30391] keyctl_capabilities+0x5a/0x160 [ 1524.813754][T30391] __do_sys_keyctl+0x427/0x5a0 [ 1524.813795][T30391] do_syscall_64+0x115/0x840 [ 1524.813839][T30391] ? clear_bhb_loop+0x40/0x90 [ 1524.813877][T30391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1524.813921][T30391] RIP: 0033:0x7f54cbf9e0d9 [ 1524.813945][T30391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1524.813975][T30391] RSP: 002b:00007f54ca1f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1524.814013][T30391] RAX: ffffffffffffffda RBX: 00007f54cc226360 RCX: 00007f54cbf9e0d9 [ 1524.814034][T30391] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 000000000000001f [ 1524.814052][T30391] RBP: 00007f54ca1f6090 R08: 00000000000003ff R09: 0000000000000000 [ 1524.814071][T30391] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 1524.814090][T30391] R13: 00007f54cc2263f8 R14: 00007f54cc226360 R15: 00007ffedceaccf8 [ 1524.814133][T30391] [ 1525.002650][T14940] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1525.056704][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1525.063986][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1525.072772][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1525.238016][T14940] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1525.260890][ T81] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1525.855484][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1525.882147][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1526.201916][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1526.211067][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1528.203538][T30471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3400'. [ 1528.970658][T30159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1529.300022][T30159] veth0_vlan: entered promiscuous mode [ 1529.396765][T30159] veth1_vlan: entered promiscuous mode [ 1530.547859][T30159] veth0_macvtap: entered promiscuous mode [ 1530.714367][T30159] veth1_macvtap: entered promiscuous mode [ 1531.092904][T30159] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1531.212888][T30159] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1531.570736][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1531.990242][ T76] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1532.003394][ T76] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1532.568273][T14940] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1532.588520][T14940] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1532.616295][ T81] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1532.695931][T14940] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1532.723626][T14940] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1535.841050][T25732] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 1539.163452][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1539.170608][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1539.373496][T30643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3425'. [ 1541.286150][T30693] FAULT_INJECTION: forcing a failure. [ 1541.286150][T30693] name failslab, interval 1, probability 0, space 0, times 0 [ 1541.304444][T30693] CPU: 1 UID: 0 PID: 30693 Comm: syz.2.3430 Tainted: G L syzkaller #0 PREEMPT(full) [ 1541.304518][T30693] Tainted: [L]=SOFTLOCKUP [ 1541.304535][T30693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1541.304556][T30693] Call Trace: [ 1541.304567][T30693] [ 1541.304587][T30693] dump_stack_lvl+0x100/0x190 [ 1541.304637][T30693] should_fail_ex.cold+0x5/0xa [ 1541.304682][T30693] should_failslab+0xc2/0x120 [ 1541.304735][T30693] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 1541.304782][T30693] ? kasan_save_track+0x14/0x30 [ 1541.304830][T30693] ? __d_alloc+0x35/0xa50 [ 1541.304886][T30693] __d_alloc+0x35/0xa50 [ 1541.304948][T30693] d_alloc_parallel+0x105/0x14b0 [ 1541.305018][T30693] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1541.305085][T30693] ? __pfx___might_resched+0x10/0x10 [ 1541.305146][T30693] ? find_held_lock+0x2b/0x80 [ 1541.305207][T30693] ? down_read+0x13b/0x4c0 [ 1541.305273][T30693] ? __pfx_down_read+0x10/0x10 [ 1541.305332][T30693] __lookup_slow+0x98/0x320 [ 1541.305393][T30693] lookup_slow+0x50/0x70 [ 1541.305442][T30693] link_path_walk+0x1377/0x1cc0 [ 1541.305515][T30693] path_openat+0x1c9/0x4280 [ 1541.305551][T30693] ? __kasan_slab_alloc+0x89/0x90 [ 1541.305598][T30693] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 1541.305641][T30693] ? do_getname+0x35/0x390 [ 1541.305684][T30693] ? __x64_sys_openat+0x12d/0x210 [ 1541.305744][T30693] ? __pfx_path_openat+0x10/0x10 [ 1541.305795][T30693] do_file_open+0x20e/0x430 [ 1541.305836][T30693] ? __pfx_do_file_open+0x10/0x10 [ 1541.305912][T30693] ? alloc_fd+0x471/0x7a0 [ 1541.305959][T30693] ? do_getname+0x191/0x390 [ 1541.306009][T30693] do_sys_openat2+0x10f/0x1e0 [ 1541.306059][T30693] ? __pfx_do_sys_openat2+0x10/0x10 [ 1541.306109][T30693] ? __x64_sys_close_range+0x2d9/0x5d0 [ 1541.306159][T30693] __x64_sys_openat+0x12d/0x210 [ 1541.306216][T30693] ? __pfx___x64_sys_openat+0x10/0x10 [ 1541.306277][T30693] ? ksys_write+0x1ac/0x250 [ 1541.306334][T30693] do_syscall_64+0x115/0x840 [ 1541.306414][T30693] ? clear_bhb_loop+0x40/0x90 [ 1541.306489][T30693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1541.306533][T30693] RIP: 0033:0x7fb2e279e0d9 [ 1541.306589][T30693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1541.306624][T30693] RSP: 002b:00007fb2e35ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1541.306658][T30693] RAX: ffffffffffffffda RBX: 00007fb2e2a26450 RCX: 00007fb2e279e0d9 [ 1541.306681][T30693] RDX: 0000000000181202 RSI: 00002000000010c0 RDI: ffffffffffffff9c [ 1541.306703][T30693] RBP: 00007fb2e2835024 R08: 0000000000000000 R09: 0000000000000000 [ 1541.306723][T30693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1541.306744][T30693] R13: 00007fb2e2a264e8 R14: 00007fb2e2a26450 R15: 00007ffecea93718 [ 1541.306790][T30693] [ 1542.599552][T30710] netlink: 'syz.0.3432': attribute type 2 has an invalid length. [ 1544.035613][T30739] FAULT_INJECTION: forcing a failure. [ 1544.035613][T30739] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1544.050383][T30739] CPU: 1 UID: 0 PID: 30739 Comm: syz.2.3438 Tainted: G L syzkaller #0 PREEMPT(full) [ 1544.050429][T30739] Tainted: [L]=SOFTLOCKUP [ 1544.050440][T30739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1544.050460][T30739] Call Trace: [ 1544.050469][T30739] [ 1544.050481][T30739] dump_stack_lvl+0x100/0x190 [ 1544.050522][T30739] should_fail_ex.cold+0x5/0xa [ 1544.050559][T30739] _copy_to_user+0x32/0xd0 [ 1544.050618][T30739] simple_read_from_buffer+0xcb/0x170 [ 1544.050678][T30739] proc_fail_nth_read+0x1af/0x230 [ 1544.050727][T30739] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1544.050777][T30739] ? rw_verify_area+0xce/0x6d0 [ 1544.050826][T30739] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1544.050873][T30739] vfs_read+0x1e4/0xb40 [ 1544.050911][T30739] ? __pfx_vfs_read+0x10/0x10 [ 1544.050940][T30739] ? __fget_files+0x215/0x3d0 [ 1544.050980][T30739] ? __fget_files+0x21f/0x3d0 [ 1544.051022][T30739] ksys_read+0x12a/0x250 [ 1544.051054][T30739] ? __pfx_ksys_read+0x10/0x10 [ 1544.051098][T30739] do_syscall_64+0x115/0x840 [ 1544.051143][T30739] ? clear_bhb_loop+0x40/0x90 [ 1544.051184][T30739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1544.051228][T30739] RIP: 0033:0x7fb2e275e90e [ 1544.051255][T30739] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1544.051286][T30739] RSP: 002b:00007fb2e3671fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1544.051318][T30739] RAX: ffffffffffffffda RBX: 00007fb2e36726c0 RCX: 00007fb2e275e90e [ 1544.051340][T30739] RDX: 000000000000000f RSI: 00007fb2e36720a0 RDI: 0000000000000005 [ 1544.051359][T30739] RBP: 00007fb2e3672090 R08: 0000000000000000 R09: 0000000000000000 [ 1544.051379][T30739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1544.051399][T30739] R13: 00007fb2e2a26128 R14: 00007fb2e2a26090 R15: 00007ffecea93718 [ 1544.051441][T30739] [ 1545.514491][T20253] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1545.529966][ T2952] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1545.531457][T20253] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1545.555700][T20253] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1545.575883][T20253] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1545.591506][T20253] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1546.181488][ T2952] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1546.474189][ T2952] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1546.728788][ T2952] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1547.675402][T25732] Bluetooth: hci2: command tx timeout [ 1548.051210][ T2952] bridge_slave_1: left allmulticast mode [ 1548.057468][ T2952] bridge_slave_1: left promiscuous mode [ 1548.064092][ T2952] bridge0: port 2(bridge_slave_1) entered disabled state [ 1548.080563][ T2952] bridge_slave_0: left allmulticast mode [ 1548.087173][ T2952] bridge_slave_0: left promiscuous mode [ 1548.093376][ T2952] bridge0: port 1(bridge_slave_0) entered disabled state [ 1548.334999][ T2952] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1548.350297][ T2952] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1548.361036][ T2952] bond0 (unregistering): Released all slaves [ 1548.979780][ T2952] hsr_slave_0: left promiscuous mode [ 1548.996985][ T2952] hsr_slave_1: left promiscuous mode [ 1549.005634][ T2952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1549.027387][ T2952] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1549.044592][ T2952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1549.060551][ T2952] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1549.092475][ T2952] veth1_macvtap: left promiscuous mode [ 1549.103624][ T2952] veth0_macvtap: left promiscuous mode [ 1549.117264][ T2952] veth1_vlan: left promiscuous mode [ 1549.129621][ T2952] veth0_vlan: left promiscuous mode [ 1549.720396][ T2952] team0 (unregistering): Port device team_slave_1 removed [ 1549.746975][T25732] Bluetooth: hci2: command tx timeout [ 1549.769986][ T2952] team0 (unregistering): Port device team_slave_0 removed [ 1549.985034][ T5290] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1550.830657][T30839] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1550.853702][T30839] snd_virmidi snd_virmidi.0: control 61678:5:9:yª:20389 is already present [ 1551.608478][T30769] bridge0: port 1(bridge_slave_0) entered blocking state [ 1551.616864][T30769] bridge0: port 1(bridge_slave_0) entered disabled state [ 1551.625652][T30769] bridge_slave_0: entered allmulticast mode [ 1551.633236][T30769] bridge_slave_0: entered promiscuous mode [ 1551.704877][ T5290] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1551.712363][T30769] bridge0: port 2(bridge_slave_1) entered blocking state [ 1551.719801][T30769] bridge0: port 2(bridge_slave_1) entered disabled state [ 1551.727467][T30769] bridge_slave_1: entered allmulticast mode [ 1551.747966][T30769] bridge_slave_1: entered promiscuous mode [ 1551.814637][T25732] Bluetooth: hci2: command tx timeout [ 1551.889234][T30769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1551.931888][T30769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1551.993853][T30769] team0: Port device team_slave_0 added [ 1552.013816][T30769] team0: Port device team_slave_1 added [ 1552.083244][T30769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1552.090521][T30769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1552.118349][T30769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1552.161653][T30769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1552.203252][T30769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1552.230131][T30769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1552.538210][T30769] hsr_slave_0: entered promiscuous mode [ 1552.562244][T30769] hsr_slave_1: entered promiscuous mode [ 1552.577973][T30769] debugfs: 'hsr0' already exists in 'hsr' [ 1552.587207][T30769] Cannot create hsr debugfs directory [ 1553.697071][ T5290] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1553.891933][T25732] Bluetooth: hci2: command tx timeout [ 1554.623320][T30910] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3456'. [ 1556.499768][T30769] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1556.524411][T30769] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1556.592008][T30769] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1556.624479][T30769] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1556.652068][T30769] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1556.690966][T30769] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1556.701075][T30769] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1556.720391][T30769] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1559.441140][T30769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1559.664891][T30769] 8021q: adding VLAN 0 to HW filter on device team0 [ 1559.732576][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 1559.739869][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1559.795991][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 1559.803301][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1560.547053][T25732] Bluetooth: hci3: unknown advertising packet type: 0xea [ 1562.047899][T30769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1563.384229][T30769] veth0_vlan: entered promiscuous mode [ 1563.670914][T30769] veth1_vlan: entered promiscuous mode [ 1564.588122][T30769] veth0_macvtap: entered promiscuous mode [ 1564.898863][T30769] veth1_macvtap: entered promiscuous mode [ 1565.037050][T30769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1565.090074][T30769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1565.223053][ T201] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1565.354813][T31155] FAULT_INJECTION: forcing a failure. [ 1565.354813][T31155] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1565.425879][T31155] CPU: 1 UID: 0 PID: 31155 Comm: syz.3.3479 Tainted: G L syzkaller #0 PREEMPT(full) [ 1565.425931][T31155] Tainted: [L]=SOFTLOCKUP [ 1565.425943][T31155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1565.425978][T31155] Call Trace: [ 1565.425988][T31155] [ 1565.426000][T31155] dump_stack_lvl+0x100/0x190 [ 1565.426044][T31155] should_fail_ex.cold+0x5/0xa [ 1565.426082][T31155] _copy_to_user+0x32/0xd0 [ 1565.426146][T31155] simple_read_from_buffer+0xcb/0x170 [ 1565.426205][T31155] proc_fail_nth_read+0x1af/0x230 [ 1565.426254][T31155] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1565.426304][T31155] ? rw_verify_area+0xce/0x6d0 [ 1565.426353][T31155] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1565.426399][T31155] vfs_read+0x1e4/0xb40 [ 1565.426437][T31155] ? __pfx_vfs_read+0x10/0x10 [ 1565.426466][T31155] ? __fget_files+0x215/0x3d0 [ 1565.426507][T31155] ? __fget_files+0x21f/0x3d0 [ 1565.426551][T31155] ksys_read+0x12a/0x250 [ 1565.426583][T31155] ? __pfx_ksys_read+0x10/0x10 [ 1565.426626][T31155] do_syscall_64+0x115/0x840 [ 1565.426671][T31155] ? clear_bhb_loop+0x40/0x90 [ 1565.426713][T31155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1565.426753][T31155] RIP: 0033:0x7f2c0e55e90e [ 1565.426779][T31155] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1565.426818][T31155] RSP: 002b:00007f2c0f44efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1565.426850][T31155] RAX: ffffffffffffffda RBX: 00007f2c0f44f6c0 RCX: 00007f2c0e55e90e [ 1565.426872][T31155] RDX: 000000000000000f RSI: 00007f2c0f44f0a0 RDI: 0000000000000002 [ 1565.426893][T31155] RBP: 00007f2c0f44f090 R08: 0000000000000000 R09: 0000000000000000 [ 1565.426913][T31155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1565.426933][T31155] R13: 00007f2c0e8264e8 R14: 00007f2c0e826450 R15: 00007ffcfc5ffd18 [ 1565.426976][T31155] [ 1566.089686][ T48] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1566.104010][ T48] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1566.519464][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1566.535949][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1566.725315][ T76] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1566.784535][T14940] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1566.802690][T14940] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1567.758808][T20253] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1567.771921][T20253] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1567.784328][T20253] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1567.794364][T20253] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1567.806266][T20253] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1568.177477][ T76] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1568.457623][ T76] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1568.693934][ T76] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1568.899847][ T76] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1569.545566][T25732] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1569.559947][T25732] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1569.576716][T25732] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1569.595383][T25732] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1569.604440][T25732] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1569.888340][T25732] Bluetooth: hci1: command tx timeout [ 1569.905645][ T76] bridge_slave_1: left allmulticast mode [ 1569.953857][ T76] bridge_slave_1: left promiscuous mode [ 1569.976818][ T76] bridge0: port 2(bridge_slave_1) entered disabled state [ 1569.993566][ T76] bridge_slave_0: left allmulticast mode [ 1570.012208][ T76] bridge_slave_0: left promiscuous mode [ 1570.024113][ T76] bridge0: port 1(bridge_slave_0) entered disabled state [ 1570.560544][ T76] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1570.580886][ T76] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1570.596042][ T76] bond0 (unregistering): Released all slaves [ 1570.763305][T31253] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1570.811108][T31250] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1571.319496][ T5290] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1571.388959][T31267] FAULT_INJECTION: forcing a failure. [ 1571.388959][T31267] name failslab, interval 1, probability 0, space 0, times 0 [ 1571.428718][T31267] CPU: 1 UID: 0 PID: 31267 Comm: syz.3.3491 Tainted: G L syzkaller #0 PREEMPT(full) [ 1571.428772][T31267] Tainted: [L]=SOFTLOCKUP [ 1571.428784][T31267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1571.428804][T31267] Call Trace: [ 1571.428814][T31267] [ 1571.428826][T31267] dump_stack_lvl+0x100/0x190 [ 1571.428871][T31267] should_fail_ex.cold+0x5/0xa [ 1571.428909][T31267] should_failslab+0xc2/0x120 [ 1571.428958][T31267] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1571.429003][T31267] ? __pfx_map_id_range_down+0x10/0x10 [ 1571.429040][T31267] ? security_inode_alloc+0x3b/0x2c0 [ 1571.429076][T31267] security_inode_alloc+0x3b/0x2c0 [ 1571.429107][T31267] inode_init_always_gfp+0xc77/0xfb0 [ 1571.429136][T31267] alloc_inode+0x8e/0x250 [ 1571.429171][T31267] sock_alloc+0x44/0x280 [ 1571.429210][T31267] ? security_socket_create+0x7f/0x250 [ 1571.429240][T31267] __sock_create+0xc2/0x860 [ 1571.429272][T31267] __sys_socket+0x14d/0x260 [ 1571.429302][T31267] ? __pfx___sys_socket+0x10/0x10 [ 1571.429339][T31267] __x64_sys_socket+0x72/0xb0 [ 1571.429371][T31267] ? lockdep_hardirqs_on+0x78/0x100 [ 1571.429404][T31267] do_syscall_64+0x115/0x840 [ 1571.429436][T31267] ? clear_bhb_loop+0x40/0x90 [ 1571.429466][T31267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1571.429491][T31267] RIP: 0033:0x7f2c0e59e0d9 [ 1571.429511][T31267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1571.429535][T31267] RSP: 002b:00007f2c0f4d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1571.429558][T31267] RAX: ffffffffffffffda RBX: 00007f2c0e826090 RCX: 00007f2c0e59e0d9 [ 1571.429574][T31267] RDX: 0000000000000073 RSI: 0000000000000002 RDI: 0000000000000002 [ 1571.429589][T31267] RBP: 00007f2c0e635024 R08: 0000000000000000 R09: 0000000000000000 [ 1571.429603][T31267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1571.429618][T31267] R13: 00007f2c0e826128 R14: 00007f2c0e826090 R15: 00007ffcfc5ffd18 [ 1571.429651][T31267] [ 1571.429712][T31267] socket: no more sockets [ 1571.643542][T25732] Bluetooth: hci2: command tx timeout [ 1571.890376][T31191] bridge0: port 1(bridge_slave_0) entered blocking state [ 1571.911831][T31191] bridge0: port 1(bridge_slave_0) entered disabled state [ 1571.924728][T31191] bridge_slave_0: entered allmulticast mode [ 1571.950529][T25732] Bluetooth: hci1: command tx timeout [ 1571.961609][T31191] bridge_slave_0: entered promiscuous mode [ 1572.093868][T31191] bridge0: port 2(bridge_slave_1) entered blocking state [ 1572.116599][T31191] bridge0: port 2(bridge_slave_1) entered disabled state [ 1572.130007][T31191] bridge_slave_1: entered allmulticast mode [ 1572.148828][T31191] bridge_slave_1: entered promiscuous mode [ 1572.233413][T31191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1572.400894][T31191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1572.603983][ T76] hsr_slave_0: left promiscuous mode [ 1572.628106][ T76] hsr_slave_1: left promiscuous mode [ 1572.652296][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1572.677911][T31290] FAULT_INJECTION: forcing a failure. [ 1572.677911][T31290] name failslab, interval 1, probability 0, space 0, times 0 [ 1572.700444][ T76] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1572.734715][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1572.742276][T31290] CPU: 1 UID: 0 PID: 31290 Comm: syz.3.3494 Tainted: G L syzkaller #0 PREEMPT(full) [ 1572.742313][T31290] Tainted: [L]=SOFTLOCKUP [ 1572.742321][T31290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1572.742335][T31290] Call Trace: [ 1572.742343][T31290] [ 1572.742352][T31290] dump_stack_lvl+0x100/0x190 [ 1572.742385][T31290] should_fail_ex.cold+0x5/0xa [ 1572.742412][T31290] should_failslab+0xc2/0x120 [ 1572.742446][T31290] __kmalloc_noprof+0xfc/0x820 [ 1572.742475][T31290] ? rcu_is_watching+0x12/0xc0 [ 1572.742504][T31290] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1572.742549][T31290] tomoyo_realpath_from_path+0xb6/0x690 [ 1572.742622][T31290] tomoyo_path_number_perm+0x23c/0x580 [ 1572.742654][T31290] ? tomoyo_path_number_perm+0x22e/0x580 [ 1572.742687][T31290] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1572.742747][T31290] ? find_held_lock+0x2b/0x80 [ 1572.742776][T31290] ? __fget_files+0x215/0x3d0 [ 1572.742797][T31290] ? hook_file_ioctl_common+0x140/0x440 [ 1572.742830][T31290] ? __fget_files+0x215/0x3d0 [ 1572.742856][T31290] ? __fget_files+0x21f/0x3d0 [ 1572.742883][T31290] security_file_ioctl+0xd3/0x230 [ 1572.742916][T31290] __x64_sys_ioctl+0xb7/0x210 [ 1572.742953][T31290] do_syscall_64+0x115/0x840 [ 1572.742985][T31290] ? clear_bhb_loop+0x40/0x90 [ 1572.743015][T31290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1572.743039][T31290] RIP: 0033:0x7f2c0e59e0d9 [ 1572.743059][T31290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1572.743085][T31290] RSP: 002b:00007f2c0f4d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1572.743108][T31290] RAX: ffffffffffffffda RBX: 00007f2c0e826090 RCX: 00007f2c0e59e0d9 [ 1572.743123][T31290] RDX: 0000000000000000 RSI: 00000000000007a8 RDI: 0000000000000005 [ 1572.743137][T31290] RBP: 00007f2c0f4d3090 R08: 0000000000000000 R09: 0000000000000000 [ 1572.743151][T31290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1572.743165][T31290] R13: 00007f2c0e826128 R14: 00007f2c0e826090 R15: 00007ffcfc5ffd18 [ 1572.743195][T31290] [ 1572.743205][T31290] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1572.773972][ T76] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1573.021949][ T76] veth1_macvtap: left promiscuous mode [ 1573.032590][ T76] veth0_macvtap: left promiscuous mode [ 1573.083613][ T76] veth1_vlan: left promiscuous mode [ 1573.091297][T31290] snd_virmidi snd_virmidi.0: control 61678:5:9:yª:20389 is already present [ 1573.107646][ T76] veth0_vlan: left promiscuous mode [ 1573.650036][ T76] team0 (unregistering): Port device team_slave_1 removed [ 1573.681158][ T76] team0 (unregistering): Port device team_slave_0 removed [ 1573.699102][T25732] Bluetooth: hci2: command tx timeout [ 1573.876104][ T5290] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1573.887671][T31191] team0: Port device team_slave_0 added [ 1573.951212][T31191] team0: Port device team_slave_1 added [ 1574.019678][T25732] Bluetooth: hci1: command tx timeout [ 1574.228353][T31191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1574.241014][T31191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1574.273778][T31305] FAULT_INJECTION: forcing a failure. [ 1574.273778][T31305] name failslab, interval 1, probability 0, space 0, times 0 [ 1574.289147][T31305] CPU: 0 UID: 0 PID: 31305 Comm: syz.3.3495 Tainted: G L syzkaller #0 PREEMPT(full) [ 1574.289199][T31305] Tainted: [L]=SOFTLOCKUP [ 1574.289212][T31305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1574.289231][T31305] Call Trace: [ 1574.289242][T31305] [ 1574.289256][T31305] dump_stack_lvl+0x100/0x190 [ 1574.289300][T31305] should_fail_ex.cold+0x5/0xa [ 1574.289340][T31305] should_failslab+0xc2/0x120 [ 1574.289391][T31305] __kmalloc_cache_noprof+0x91/0x6c0 [ 1574.289428][T31305] ? copy_ipcs+0x10d/0x7e0 [ 1574.289560][T31305] copy_ipcs+0x10d/0x7e0 [ 1574.289615][T31305] create_new_namespaces+0x20a/0xac0 [ 1574.289656][T31305] ? security_capable+0x80/0x260 [ 1574.289698][T31305] unshare_nsproxy_namespaces+0xf2/0x220 [ 1574.289741][T31305] ksys_unshare+0x438/0xab0 [ 1574.289789][T31305] ? __pfx_ksys_unshare+0x10/0x10 [ 1574.289849][T31305] __x64_sys_unshare+0x31/0x40 [ 1574.289894][T31305] do_syscall_64+0x115/0x840 [ 1574.289942][T31305] ? clear_bhb_loop+0x40/0x90 [ 1574.289985][T31305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1574.290021][T31305] RIP: 0033:0x7f2c0e59e0d9 [ 1574.290047][T31305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1574.290081][T31305] RSP: 002b:00007f2c0f4f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1574.290115][T31305] RAX: ffffffffffffffda RBX: 00007f2c0e825fa0 RCX: 00007f2c0e59e0d9 [ 1574.290136][T31305] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 1574.290162][T31305] RBP: 00007f2c0e635024 R08: 0000000000000000 R09: 0000000000000000 [ 1574.290176][T31305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1574.290191][T31305] R13: 00007f2c0e826038 R14: 00007f2c0e825fa0 R15: 00007ffcfc5ffd18 [ 1574.290257][T31305] [ 1574.293036][T31191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1574.540661][T31191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1574.558721][T31191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1574.587964][T31191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1574.875260][T31191] hsr_slave_0: entered promiscuous mode [ 1574.889514][T31191] hsr_slave_1: entered promiscuous mode [ 1575.117557][ T76] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1575.541819][ T76] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1575.627218][ T5290] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1575.663872][T31217] bridge0: port 1(bridge_slave_0) entered blocking state [ 1575.671266][T31217] bridge0: port 1(bridge_slave_0) entered disabled state [ 1575.678667][T31217] bridge_slave_0: entered allmulticast mode [ 1575.686131][T31217] bridge_slave_0: entered promiscuous mode [ 1575.694884][T31217] bridge0: port 2(bridge_slave_1) entered blocking state [ 1575.702195][T31217] bridge0: port 2(bridge_slave_1) entered disabled state [ 1575.712512][T31217] bridge_slave_1: entered allmulticast mode [ 1575.720803][T31217] bridge_slave_1: entered promiscuous mode [ 1575.752593][ T76] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1575.769380][T25732] Bluetooth: hci2: command tx timeout [ 1575.872074][T31217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1575.989566][ T76] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1576.083532][T31217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1576.094776][T25732] Bluetooth: hci1: command tx timeout [ 1576.485041][T31217] team0: Port device team_slave_0 added [ 1576.596442][T31217] team0: Port device team_slave_1 added [ 1577.119875][T31217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1577.127179][T31217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1577.165470][T31217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1577.235976][T31217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1577.244122][T31217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1577.274232][T31217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1577.774851][ T76] bridge_slave_1: left allmulticast mode [ 1577.791063][ T76] bridge_slave_1: left promiscuous mode [ 1577.800253][ T76] bridge0: port 2(bridge_slave_1) entered disabled state [ 1577.813583][ T76] bridge_slave_0: left allmulticast mode [ 1577.820828][ T76] bridge_slave_0: left promiscuous mode [ 1577.826755][ T76] bridge0: port 1(bridge_slave_0) entered disabled state [ 1577.839081][T25732] Bluetooth: hci2: command tx timeout [ 1578.025970][ T76] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1578.042081][ T76] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1578.054327][ T76] bond0 (unregistering): Released all slaves [ 1578.132691][T31217] hsr_slave_0: entered promiscuous mode [ 1578.140158][T31217] hsr_slave_1: entered promiscuous mode [ 1578.146850][T31217] debugfs: 'hsr0' already exists in 'hsr' [ 1578.153229][T31217] Cannot create hsr debugfs directory [ 1579.074408][ T76] hsr_slave_0: left promiscuous mode [ 1579.088086][ T76] hsr_slave_1: left promiscuous mode [ 1579.097182][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1579.105023][ T76] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1579.114804][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1579.122633][ T76] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1579.143502][ T76] veth1_macvtap: left promiscuous mode [ 1579.149083][ T76] veth0_macvtap: left promiscuous mode [ 1579.155376][ T76] veth1_vlan: left promiscuous mode [ 1579.160956][ T76] veth0_vlan: left promiscuous mode [ 1579.485505][ T76] team0 (unregistering): Port device team_slave_1 removed [ 1579.512786][ T76] team0 (unregistering): Port device team_slave_0 removed [ 1579.735928][T31191] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1579.749365][T31191] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1579.844248][T31191] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1579.854784][T31191] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1579.863604][T31191] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1579.876194][T31191] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1579.885035][T31191] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1579.897338][T31191] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1580.811064][T31419] FAULT_INJECTION: forcing a failure. [ 1580.811064][T31419] name failslab, interval 1, probability 0, space 0, times 0 [ 1580.825636][T31423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3502'. [ 1580.862964][T31419] CPU: 0 UID: 0 PID: 31419 Comm: syz.1.3501 Tainted: G L syzkaller #0 PREEMPT(full) [ 1580.863018][T31419] Tainted: [L]=SOFTLOCKUP [ 1580.863031][T31419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1580.863052][T31419] Call Trace: [ 1580.863064][T31419] [ 1580.863077][T31419] dump_stack_lvl+0x100/0x190 [ 1580.863125][T31419] should_fail_ex.cold+0x5/0xa [ 1580.863167][T31419] should_failslab+0xc2/0x120 [ 1580.863219][T31419] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 1580.863264][T31419] ? find_held_lock+0x2b/0x80 [ 1580.863310][T31419] ? __d_alloc+0x35/0xa50 [ 1580.863355][T31419] __d_alloc+0x35/0xa50 [ 1580.863399][T31419] d_alloc_pseudo+0x1c/0xc0 [ 1580.863449][T31419] alloc_file_pseudo+0x118/0x290 [ 1580.863498][T31419] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1580.863546][T31419] ? alloc_fd+0x471/0x7a0 [ 1580.863587][T31419] sock_alloc_file+0x50/0x210 [ 1580.863651][T31419] __sys_socket+0x1c0/0x260 [ 1580.863693][T31419] ? __pfx___sys_socket+0x10/0x10 [ 1580.863747][T31419] __x64_sys_socket+0x72/0xb0 [ 1580.863787][T31419] ? lockdep_hardirqs_on+0x78/0x100 [ 1580.863834][T31419] do_syscall_64+0x115/0x840 [ 1580.863889][T31419] ? clear_bhb_loop+0x40/0x90 [ 1580.863934][T31419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1580.863971][T31419] RIP: 0033:0x7f8bcd39e0d9 [ 1580.864002][T31419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1580.864037][T31419] RSP: 002b:00007f8bce22e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1580.864071][T31419] RAX: ffffffffffffffda RBX: 00007f8bcd626090 RCX: 00007f8bcd39e0d9 [ 1580.864095][T31419] RDX: 0000000000000073 RSI: 0000000000000002 RDI: 0000000000000002 [ 1580.864117][T31419] RBP: 00007f8bcd435024 R08: 0000000000000000 R09: 0000000000000000 [ 1580.864139][T31419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1580.864160][T31419] R13: 00007f8bcd626128 R14: 00007f8bcd626090 R15: 00007ffdc558f638 [ 1580.864203][T31419] [ 1581.134838][T31191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1581.155349][T31191] 8021q: adding VLAN 0 to HW filter on device team0 [ 1581.191896][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 1581.199178][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1581.210406][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 1581.217647][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1581.448205][T31431] FAULT_INJECTION: forcing a failure. [ 1581.448205][T31431] name failslab, interval 1, probability 0, space 0, times 0 [ 1581.467592][T31431] CPU: 1 UID: 0 PID: 31431 Comm: syz.1.3503 Tainted: G L syzkaller #0 PREEMPT(full) [ 1581.467644][T31431] Tainted: [L]=SOFTLOCKUP [ 1581.467656][T31431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1581.467675][T31431] Call Trace: [ 1581.467687][T31431] [ 1581.467699][T31431] dump_stack_lvl+0x100/0x190 [ 1581.467744][T31431] should_fail_ex.cold+0x5/0xa [ 1581.467783][T31431] should_failslab+0xc2/0x120 [ 1581.467833][T31431] __kmalloc_cache_node_noprof+0x94/0x6c0 [ 1581.467885][T31431] ? __get_vm_area_node+0x101/0x330 [ 1581.467942][T31431] __get_vm_area_node+0x101/0x330 [ 1581.467999][T31431] __vmalloc_node_range_noprof+0x228/0x1630 [ 1581.468056][T31431] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 1581.468108][T31431] ? stack_trace_save+0x8e/0xc0 [ 1581.468156][T31431] ? __pfx_stack_trace_save+0x10/0x10 [ 1581.468204][T31431] ? stack_depot_save_flags+0x27/0x9d0 [ 1581.468272][T31431] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 1581.468323][T31431] ? kasan_save_stack+0x3f/0x50 [ 1581.468366][T31431] ? kasan_save_stack+0x30/0x50 [ 1581.468412][T31431] ? do_seccomp+0x7ae/0x2740 [ 1581.468464][T31431] ? do_syscall_64+0x115/0x840 [ 1581.468512][T31431] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1581.468584][T31431] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 1581.468632][T31431] __vmalloc_node_noprof+0xad/0xf0 [ 1581.468685][T31431] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 1581.468739][T31431] __vmalloc_noprof+0xa3/0x120 [ 1581.468790][T31431] ? __pfx___vmalloc_noprof+0x10/0x10 [ 1581.468857][T31431] bpf_prog_alloc_no_stats+0x58/0x640 [ 1581.468912][T31431] bpf_prog_alloc+0x3b/0x200 [ 1581.468963][T31431] bpf_prog_create_from_user+0xb4/0x2f0 [ 1581.469133][T31431] ? __pfx_seccomp_check_filter+0x10/0x10 [ 1581.469174][T31431] do_seccomp+0x7f7/0x2740 [ 1581.469210][T31431] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1581.469267][T31431] ? __fget_files+0x21f/0x3d0 [ 1581.469303][T31431] ? __pfx_do_seccomp+0x10/0x10 [ 1581.469341][T31431] ? fput+0x79/0x100 [ 1581.469376][T31431] ? ksys_write+0x1ac/0x250 [ 1581.469401][T31431] ? __pfx_ksys_write+0x10/0x10 [ 1581.469435][T31431] do_syscall_64+0x115/0x840 [ 1581.469470][T31431] ? clear_bhb_loop+0x40/0x90 [ 1581.469503][T31431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1581.469531][T31431] RIP: 0033:0x7f8bcd39e0d9 [ 1581.469553][T31431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1581.469579][T31431] RSP: 002b:00007f8bce24f028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 1581.469605][T31431] RAX: ffffffffffffffda RBX: 00007f8bcd625fa0 RCX: 00007f8bcd39e0d9 [ 1581.469622][T31431] RDX: 0000200000000100 RSI: 0000000000000000 RDI: 0000000000000001 [ 1581.469638][T31431] RBP: 00007f8bce24f090 R08: 0000000000000000 R09: 0000000000000000 [ 1581.469654][T31431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1581.469669][T31431] R13: 00007f8bcd626038 R14: 00007f8bcd625fa0 R15: 00007ffdc558f638 [ 1581.469702][T31431] [ 1581.918220][T31431] syz.1.3503: vmalloc error: size 32768, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1581.934981][T31431] CPU: 1 UID: 0 PID: 31431 Comm: syz.1.3503 Tainted: G L syzkaller #0 PREEMPT(full) [ 1581.935027][T31431] Tainted: [L]=SOFTLOCKUP [ 1581.935038][T31431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1581.935057][T31431] Call Trace: [ 1581.935066][T31431] [ 1581.935077][T31431] dump_stack_lvl+0x100/0x190 [ 1581.935120][T31431] warn_alloc.cold+0x94/0xa8 [ 1581.935152][T31431] ? __pfx_warn_alloc+0x10/0x10 [ 1581.935188][T31431] ? __kasan_kmalloc+0x8a/0xb0 [ 1581.935246][T31431] ? __get_vm_area_node+0x208/0x330 [ 1581.935303][T31431] __vmalloc_node_range_noprof+0xccd/0x1630 [ 1581.935360][T31431] ? stack_trace_save+0x8e/0xc0 [ 1581.935417][T31431] ? __pfx_stack_trace_save+0x10/0x10 [ 1581.935465][T31431] ? stack_depot_save_flags+0x27/0x9d0 [ 1581.935523][T31431] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 1581.935575][T31431] ? kasan_save_stack+0x3f/0x50 [ 1581.935616][T31431] ? kasan_save_stack+0x30/0x50 [ 1581.935658][T31431] ? do_seccomp+0x7ae/0x2740 [ 1581.935692][T31431] ? do_syscall_64+0x115/0x840 [ 1581.935739][T31431] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1581.935810][T31431] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 1581.935869][T31431] __vmalloc_node_noprof+0xad/0xf0 [ 1581.935919][T31431] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 1581.935973][T31431] __vmalloc_noprof+0xa3/0x120 [ 1581.936022][T31431] ? __pfx___vmalloc_noprof+0x10/0x10 [ 1581.936085][T31431] bpf_prog_alloc_no_stats+0x58/0x640 [ 1581.936137][T31431] bpf_prog_alloc+0x3b/0x200 [ 1581.936182][T31431] bpf_prog_create_from_user+0xb4/0x2f0 [ 1581.936235][T31431] ? __pfx_seccomp_check_filter+0x10/0x10 [ 1581.936273][T31431] do_seccomp+0x7f7/0x2740 [ 1581.936307][T31431] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1581.936355][T31431] ? __fget_files+0x21f/0x3d0 [ 1581.936397][T31431] ? __pfx_do_seccomp+0x10/0x10 [ 1581.936435][T31431] ? fput+0x79/0x100 [ 1581.936473][T31431] ? ksys_write+0x1ac/0x250 [ 1581.936502][T31431] ? __pfx_ksys_write+0x10/0x10 [ 1581.936543][T31431] do_syscall_64+0x115/0x840 [ 1581.936586][T31431] ? clear_bhb_loop+0x40/0x90 [ 1581.936625][T31431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1581.936659][T31431] RIP: 0033:0x7f8bcd39e0d9 [ 1581.936685][T31431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1581.936715][T31431] RSP: 002b:00007f8bce24f028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 1581.936746][T31431] RAX: ffffffffffffffda RBX: 00007f8bcd625fa0 RCX: 00007f8bcd39e0d9 [ 1581.936767][T31431] RDX: 0000200000000100 RSI: 0000000000000000 RDI: 0000000000000001 [ 1581.936787][T31431] RBP: 00007f8bce24f090 R08: 0000000000000000 R09: 0000000000000000 [ 1581.936806][T31431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1581.936825][T31431] R13: 00007f8bcd626038 R14: 00007f8bcd625fa0 R15: 00007ffdc558f638 [ 1581.936865][T31431] [ 1581.997457][T31217] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1582.126670][T31431] Mem-Info: [ 1582.244783][T31431] active_anon:6459 inactive_anon:0 isolated_anon:0 [ 1582.244783][T31431] active_file:10853 inactive_file:49454 isolated_file:0 [ 1582.244783][T31431] unevictable:768 dirty:716 writeback:0 [ 1582.244783][T31431] slab_reclaimable:14007 slab_unreclaimable:95984 [ 1582.244783][T31431] mapped:30051 shmem:2502 pagetables:1089 [ 1582.244783][T31431] sec_pagetables:0 bounce:0 [ 1582.244783][T31431] kernel_misc_reclaimable:0 [ 1582.244783][T31431] free:1310697 free_pcp:11827 free_cma:0 [ 1582.317460][T31217] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1582.319252][T31431] Node 0 active_anon:24436kB inactive_anon:0kB active_file:43412kB inactive_file:197552kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120140kB dirty:2848kB writeback:0kB shmem:7072kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:10968kB pagetables:4204kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1582.369088][T31217] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1582.402398][T31431] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:264kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:64kB dirty:16kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1582.447066][T31217] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1582.461289][T31431] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1582.492569][T31217] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1582.509923][T31217] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1582.549610][T31431] lowmem_reserve[]: 0 2473 2473 2473 2473 [ 1582.556867][T31431] Node 0 DMA32 free:1291128kB boost:0kB min:34012kB low:42512kB high:51012kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21336kB inactive_anon:0kB active_file:43412kB inactive_file:197552kB unevictable:1536kB writepending:2848kB zspages:0kB present:3129332kB managed:2532392kB mlocked:0kB bounce:0kB free_pcp:45816kB local_pcp:20956kB free_cma:0kB [ 1582.562499][T31217] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1582.599756][T31431] lowmem_reserve[]: 0 0 0 0 0 [ 1582.604652][T31431] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1582.640053][T31217] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1582.671553][T31431] lowmem_reserve[]: 0 0 0 0 0 [ 1582.678987][T31431] Node 1 Normal free:3936300kB boost:0kB min:55880kB low:69848kB high:83816kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:264kB unevictable:1536kB writepending:16kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:6144kB local_pcp:6144kB free_cma:0kB [ 1582.742444][T31431] lowmem_reserve[]: 0 0 0 0 0 [ 1582.757580][T31431] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1582.798682][T31431] Node 0 DMA32: 1768*4kB (UME) 619*8kB (UME) 691*16kB (UME) 481*32kB (UME) 287*64kB (UME) 114*128kB (UME) 56*256kB (UME) 44*512kB (UME) 19*1024kB (UME) 2*2048kB (ME) 283*4096kB (UM) = 1291016kB [ 1582.830674][T31431] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1582.845137][T31431] Node 1 Normal: 5*4kB (U) 5*8kB (UM) 7*16kB (UM) 10*32kB (UM) 9*64kB (U) 8*128kB (UM) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 959*4096kB (UM) = 3936300kB [ 1582.869871][T31431] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1582.880945][T31431] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1582.890495][T31431] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1582.935187][T31431] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1582.961682][T31431] 61593 total pagecache pages [ 1582.967154][T31431] 1 pages in swap cache [ 1582.979518][T31431] Free swap = 124992kB [ 1582.989605][T31431] Total swap = 124996kB [ 1582.998650][T31431] 2097051 pages RAM [ 1583.006953][T31431] 0 pages HighMem/MovableOnly [ 1583.017029][T31431] 432242 pages reserved [ 1583.025370][T31431] 0 pages cma reserved [ 1583.186257][T31461] IPVS: length: 131 != 8 [ 1583.816376][T31191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1583.861489][T31217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1583.927202][T31217] 8021q: adding VLAN 0 to HW filter on device team0 [ 1583.979707][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 1583.987000][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1584.036714][T14940] bridge0: port 2(bridge_slave_1) entered blocking state [ 1584.044009][T14940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1584.159197][T31191] veth0_vlan: entered promiscuous mode [ 1584.226688][T31191] veth1_vlan: entered promiscuous mode [ 1585.396499][T31191] veth0_macvtap: entered promiscuous mode [ 1585.435853][T31191] veth1_macvtap: entered promiscuous mode [ 1586.095553][T31191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1586.232034][T31191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1586.745498][ T201] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1587.354911][T31217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1587.409661][ T2952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1587.417828][ T48] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1587.432571][ T2952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1587.806855][T14940] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1587.843165][ T2952] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1587.855359][T14940] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1587.871187][ T2952] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1589.009110][T31217] veth0_vlan: entered promiscuous mode [ 1589.067095][T31217] veth1_vlan: entered promiscuous mode [ 1589.294186][T31593] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1589.311301][T31217] veth0_macvtap: entered promiscuous mode [ 1589.328924][T31217] veth1_macvtap: entered promiscuous mode [ 1589.345302][T31593] FAULT_INJECTION: forcing a failure. [ 1589.345302][T31593] name failslab, interval 1, probability 0, space 0, times 0 [ 1589.387410][T31593] CPU: 0 UID: 5 PID: 31593 Comm: syz.2.3513 Tainted: G L syzkaller #0 PREEMPT(full) [ 1589.387462][T31593] Tainted: [L]=SOFTLOCKUP [ 1589.387473][T31593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1589.387492][T31593] Call Trace: [ 1589.387502][T31593] [ 1589.387513][T31593] dump_stack_lvl+0x100/0x190 [ 1589.387563][T31593] should_fail_ex.cold+0x5/0xa [ 1589.387598][T31593] should_failslab+0xc2/0x120 [ 1589.387643][T31593] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 1589.387692][T31593] ? kstrdup_const+0x63/0x80 [ 1589.387738][T31593] kstrdup+0x51/0xe0 [ 1589.387777][T31593] kstrdup_const+0x63/0x80 [ 1589.387814][T31593] alloc_vfsmnt+0xe5/0x710 [ 1589.387859][T31593] fc_mount+0x105/0x220 [ 1589.387905][T31593] trace_automount.cold+0x70/0x75 [ 1589.387968][T31593] __traverse_mounts+0x1b9/0x8a0 [ 1589.388014][T31593] step_into_slowpath+0xb7e/0xf90 [ 1589.388049][T31593] ? __d_lookup+0x25c/0x4a0 [ 1589.388083][T31593] ? __d_lookup+0x25c/0x4a0 [ 1589.388119][T31593] ? __pfx_step_into_slowpath+0x10/0x10 [ 1589.388154][T31593] ? __d_lookup+0x266/0x4a0 [ 1589.388190][T31593] ? lookup_fast+0x2da/0x600 [ 1589.388246][T31593] ? inode_permission+0x374/0x620 [ 1589.388294][T31593] link_path_walk+0xf28/0x1cc0 [ 1589.388350][T31593] path_openat+0x1c9/0x4280 [ 1589.388373][T31593] ? __kasan_slab_alloc+0x89/0x90 [ 1589.388404][T31593] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 1589.388433][T31593] ? do_getname+0x35/0x390 [ 1589.388461][T31593] ? __x64_sys_openat+0x12d/0x210 [ 1589.388503][T31593] ? __pfx_path_openat+0x10/0x10 [ 1589.388535][T31593] do_file_open+0x20e/0x430 [ 1589.388567][T31593] ? __pfx_do_file_open+0x10/0x10 [ 1589.388612][T31593] ? alloc_fd+0x471/0x7a0 [ 1589.388637][T31593] ? do_getname+0x191/0x390 [ 1589.388669][T31593] do_sys_openat2+0x10f/0x1e0 [ 1589.388701][T31593] ? __pfx_do_sys_openat2+0x10/0x10 [ 1589.388733][T31593] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1589.388768][T31593] ? __fget_files+0x21f/0x3d0 [ 1589.388794][T31593] __x64_sys_openat+0x12d/0x210 [ 1589.388827][T31593] ? __pfx___x64_sys_openat+0x10/0x10 [ 1589.388858][T31593] ? ksys_write+0x1ac/0x250 [ 1589.388889][T31593] do_syscall_64+0x115/0x840 [ 1589.388920][T31593] ? clear_bhb_loop+0x40/0x90 [ 1589.388948][T31593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1589.388972][T31593] RIP: 0033:0x7fa92239e0d9 [ 1589.388992][T31593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1589.389014][T31593] RSP: 002b:00007fa9205f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1589.389036][T31593] RAX: ffffffffffffffda RBX: 00007fa922625fa0 RCX: 00007fa92239e0d9 [ 1589.389052][T31593] RDX: 0000000000109000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1589.389069][T31593] RBP: 00007fa9205f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1589.389083][T31593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1589.389097][T31593] R13: 00007fa922626038 R14: 00007fa922625fa0 R15: 00007fff470b4048 [ 1589.389126][T31593] [ 1589.791968][T31217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1589.813502][T31217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1590.372602][T14940] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1590.386114][T14940] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1590.456318][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1590.478417][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1591.143622][T14940] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1591.152020][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1591.169267][T14940] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1591.697894][ T2952] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1592.541411][T31635] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3520'. [ 1592.554505][T31642] FAULT_INJECTION: forcing a failure. [ 1592.554505][T31642] name failslab, interval 1, probability 0, space 0, times 0 [ 1592.579010][T31642] CPU: 0 UID: 0 PID: 31642 Comm: syz.1.3522 Tainted: G L syzkaller #0 PREEMPT(full) [ 1592.579064][T31642] Tainted: [L]=SOFTLOCKUP [ 1592.579076][T31642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1592.579097][T31642] Call Trace: [ 1592.579109][T31642] [ 1592.579122][T31642] dump_stack_lvl+0x100/0x190 [ 1592.579168][T31642] should_fail_ex.cold+0x5/0xa [ 1592.579209][T31642] should_failslab+0xc2/0x120 [ 1592.579261][T31642] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1592.579309][T31642] ? __kernfs_new_node+0xd2/0xa10 [ 1592.579371][T31642] __kernfs_new_node+0xd2/0xa10 [ 1592.579414][T31642] ? __pfx___kernfs_new_node+0x10/0x10 [ 1592.579462][T31642] ? find_held_lock+0x2b/0x80 [ 1592.579507][T31642] ? kernfs_root+0xee/0x2a0 [ 1592.579561][T31642] ? kernfs_root+0xee/0x2a0 [ 1592.579626][T31642] kernfs_new_node+0x117/0x150 [ 1592.579670][T31642] __kernfs_create_file+0x53/0x350 [ 1592.579792][T31642] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1592.579857][T31642] internal_create_group+0x593/0xfb0 [ 1592.579928][T31642] ? __pfx_internal_create_group+0x10/0x10 [ 1592.579995][T31642] ? kernfs_create_link+0x1bd/0x240 [ 1592.580048][T31642] internal_create_groups+0x9d/0x150 [ 1592.580112][T31642] device_add+0xf60/0x1970 [ 1592.580200][T31642] ? __pfx_device_add+0x10/0x10 [ 1592.580235][T31642] ? lockdep_init_map_type+0x5c/0x250 [ 1592.580273][T31642] ? __init_waitqueue_head+0xca/0x150 [ 1592.580321][T31642] netdev_register_kobject+0x1a9/0x3d0 [ 1592.580405][T31642] register_netdevice+0x15b6/0x25a0 [ 1592.580506][T31642] ? __pfx_register_netdevice+0x10/0x10 [ 1592.580567][T31642] ? dev_addr_mod+0x14f/0x2c0 [ 1592.580612][T31642] __tun_chr_ioctl+0x1ded/0x47c0 [ 1592.580715][T31642] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1592.580777][T31642] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1592.580834][T31642] ? hook_file_ioctl_common+0x140/0x440 [ 1592.580896][T31642] ? __fget_files+0x21f/0x3d0 [ 1592.580937][T31642] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1592.580982][T31642] __x64_sys_ioctl+0x18e/0x210 [ 1592.581039][T31642] do_syscall_64+0x115/0x840 [ 1592.581088][T31642] ? clear_bhb_loop+0x40/0x90 [ 1592.581134][T31642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1592.581172][T31642] RIP: 0033:0x7f8bcd39e0d9 [ 1592.581201][T31642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1592.581235][T31642] RSP: 002b:00007f8bce24f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1592.581269][T31642] RAX: ffffffffffffffda RBX: 00007f8bcd625fa0 RCX: 00007f8bcd39e0d9 [ 1592.581292][T31642] RDX: 0000000000000038 RSI: 00000000400454ca RDI: 0000000000000005 [ 1592.581315][T31642] RBP: 00007f8bcd435024 R08: 0000000000000000 R09: 0000000000000000 [ 1592.581336][T31642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1592.581357][T31642] R13: 00007f8bcd626038 R14: 00007f8bcd625fa0 R15: 00007ffdc558f638 [ 1592.581403][T31642] [ 1594.519560][T31668] block nbd0: NBD_DISCONNECT [ 1594.562846][T31668] FAULT_INJECTION: forcing a failure. [ 1594.562846][T31668] name failslab, interval 1, probability 0, space 0, times 0 [ 1594.612226][T31668] CPU: 1 UID: 0 PID: 31668 Comm: syz.0.3524 Tainted: G L syzkaller #0 PREEMPT(full) [ 1594.612278][T31668] Tainted: [L]=SOFTLOCKUP [ 1594.612290][T31668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1594.612309][T31668] Call Trace: [ 1594.612320][T31668] [ 1594.612332][T31668] dump_stack_lvl+0x100/0x190 [ 1594.612378][T31668] should_fail_ex.cold+0x5/0xa [ 1594.612417][T31668] should_failslab+0xc2/0x120 [ 1594.612465][T31668] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 1594.612512][T31668] ? start_dirop+0x79/0xb0 [ 1594.612545][T31668] ? alloc_inode+0x68/0x250 [ 1594.612593][T31668] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 1594.612648][T31668] alloc_inode+0x68/0x250 [ 1594.612696][T31668] new_inode+0x22/0x1c0 [ 1594.612754][T31668] __debugfs_create_file+0x105/0x4f0 [ 1594.612818][T31668] debugfs_create_file_full+0x41/0x60 [ 1594.612879][T31668] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 1594.612923][T31668] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1594.612959][T31668] ? ida_alloc_range+0x70d/0x830 [ 1594.613041][T31668] ? kasan_save_track+0x14/0x30 [ 1594.613086][T31668] ? __kasan_kmalloc+0xaa/0xb0 [ 1594.613131][T31668] ? lockdep_init_map_type+0x5c/0x250 [ 1594.613173][T31668] preinit_net.part.0+0x252/0x920 [ 1594.613231][T31668] copy_net_ns+0x339/0x7c0 [ 1594.613270][T31668] create_new_namespaces+0x3ea/0xac0 [ 1594.613318][T31668] unshare_nsproxy_namespaces+0xf2/0x220 [ 1594.613362][T31668] ksys_unshare+0x438/0xab0 [ 1594.613409][T31668] ? __pfx_ksys_unshare+0x10/0x10 [ 1594.613470][T31668] __x64_sys_unshare+0x31/0x40 [ 1594.613515][T31668] do_syscall_64+0x115/0x840 [ 1594.613580][T31668] ? clear_bhb_loop+0x40/0x90 [ 1594.613625][T31668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1594.613660][T31668] RIP: 0033:0x7efc6a59e0d9 [ 1594.613688][T31668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1594.613721][T31668] RSP: 002b:00007efc683f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1594.613766][T31668] RAX: ffffffffffffffda RBX: 00007efc6a826270 RCX: 00007efc6a59e0d9 [ 1594.613789][T31668] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1594.613810][T31668] RBP: 00007efc6a635024 R08: 0000000000000000 R09: 0000000000000000 [ 1594.613831][T31668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1594.613852][T31668] R13: 00007efc6a826308 R14: 00007efc6a826270 R15: 00007ffd84be5ed8 [ 1594.613897][T31668] [ 1594.617286][T31668] debugfs: out of free dentries, can not create file 'net_refcnt@ffff888052748280' [ 1595.241257][T31676] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3524'. [ 1597.277056][T31720] binder: 31717:31720 ioctl c018620c 9 returned -14 [ 1599.592603][T31736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3534'. [ 1599.834472][T31736] HfR: entered promiscuous mode [ 1600.284161][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1600.290659][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1604.481797][T31844] FAULT_INJECTION: forcing a failure. [ 1604.481797][T31844] name failslab, interval 1, probability 0, space 0, times 0 [ 1604.538719][T31844] CPU: 1 UID: 0 PID: 31844 Comm: syz.0.3545 Tainted: G L syzkaller #0 PREEMPT(full) [ 1604.538772][T31844] Tainted: [L]=SOFTLOCKUP [ 1604.538784][T31844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1604.538804][T31844] Call Trace: [ 1604.538815][T31844] [ 1604.538827][T31844] dump_stack_lvl+0x100/0x190 [ 1604.538873][T31844] should_fail_ex.cold+0x5/0xa [ 1604.538913][T31844] should_failslab+0xc2/0x120 [ 1604.538962][T31844] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1604.539009][T31844] ? __pmd_alloc+0xbf/0x950 [ 1604.539068][T31844] __pmd_alloc+0xbf/0x950 [ 1604.539118][T31844] ? mt_find+0x687/0x8e0 [ 1604.539195][T31844] huge_pte_alloc+0x5ee/0x730 [ 1604.539247][T31844] hugetlb_fault+0x369/0x1410 [ 1604.539288][T31844] ? __pfx_hugetlb_fault+0x10/0x10 [ 1604.539341][T31844] ? find_vma+0xbf/0x140 [ 1604.539385][T31844] ? __pfx_find_vma+0x10/0x10 [ 1604.539436][T31844] handle_mm_fault+0x5ff/0xa30 [ 1604.539481][T31844] do_user_addr_fault+0x74c/0x12f0 [ 1604.539543][T31844] exc_page_fault+0x6f/0xd0 [ 1604.539591][T31844] asm_exc_page_fault+0x26/0x30 [ 1604.539623][T31844] RIP: 0010:rep_movs_alternative+0x11/0xa0 [ 1604.539662][T31844] Code: c3 cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 fd 9e 04 00 66 66 2e 0f [ 1604.539694][T31844] RSP: 0018:ffffc90004397e78 EFLAGS: 00050206 [ 1604.539721][T31844] RAX: 0000000000000070 RBX: 0000000000000006 RCX: 0000000000000006 [ 1604.539742][T31844] RDX: 0000000000000001 RSI: ffffffff8c16b600 RDI: 0000000000000000 [ 1604.539763][T31844] RBP: 0000000000000000 R08: 0000000000000000 R09: fffffbfff182d6c0 [ 1604.539784][T31844] R10: 0000000000000005 R11: 0000000000000000 R12: ffffffff8c16b600 [ 1604.539805][T31844] R13: 0000000000000006 R14: 00007ffffffff000 R15: 0000000000000000 [ 1604.539848][T31844] _copy_to_user+0xa4/0xd0 [ 1604.539909][T31844] fs_name+0x25e/0x4a0 [ 1604.539954][T31844] __x64_sys_sysfs+0xe6/0x120 [ 1604.539998][T31844] do_syscall_64+0x115/0x840 [ 1604.540044][T31844] ? clear_bhb_loop+0x40/0x90 [ 1604.540087][T31844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1604.540125][T31844] RIP: 0033:0x7efc6a59e0d9 [ 1604.540152][T31844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1604.540185][T31844] RSP: 002b:00007efc683f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000008b [ 1604.540216][T31844] RAX: ffffffffffffffda RBX: 00007efc6a826270 RCX: 00007efc6a59e0d9 [ 1604.540246][T31844] RDX: 0000000000000000 RSI: 0100000000000036 RDI: 0000000000000002 [ 1604.540267][T31844] RBP: 00007efc6a635024 R08: 0000000000000000 R09: 0000000000000000 [ 1604.540288][T31844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1604.540308][T31844] R13: 00007efc6a826308 R14: 00007efc6a826270 R15: 00007ffd84be5ed8 [ 1604.540353][T31844] [ 1604.891347][T25732] Bluetooth: hci0: unknown advertising packet type: 0xea [ 1606.450622][T31874] FAULT_INJECTION: forcing a failure. [ 1606.450622][T31874] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1606.472015][T31874] CPU: 0 UID: 0 PID: 31874 Comm: syz.2.3547 Tainted: G L syzkaller #0 PREEMPT(full) [ 1606.472061][T31874] Tainted: [L]=SOFTLOCKUP [ 1606.472071][T31874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1606.472088][T31874] Call Trace: [ 1606.472097][T31874] [ 1606.472106][T31874] dump_stack_lvl+0x100/0x190 [ 1606.472144][T31874] should_fail_ex.cold+0x5/0xa [ 1606.472186][T31874] _copy_to_user+0x32/0xd0 [ 1606.472239][T31874] fs_name+0x25e/0x4a0 [ 1606.472274][T31874] __x64_sys_sysfs+0xe6/0x120 [ 1606.472310][T31874] do_syscall_64+0x115/0x840 [ 1606.472347][T31874] ? clear_bhb_loop+0x40/0x90 [ 1606.472381][T31874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1606.472410][T31874] RIP: 0033:0x7fa92239e0d9 [ 1606.472432][T31874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1606.472474][T31874] RSP: 002b:00007fa920572028 EFLAGS: 00000246 ORIG_RAX: 000000000000008b [ 1606.472501][T31874] RAX: ffffffffffffffda RBX: 00007fa922626360 RCX: 00007fa92239e0d9 [ 1606.472519][T31874] RDX: 0000000000000000 RSI: 000000000000003b RDI: 0000000000000002 [ 1606.472535][T31874] RBP: 00007fa920572090 R08: 0000000000000000 R09: 0000000000000000 [ 1606.472552][T31874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1606.472568][T31874] R13: 00007fa9226263f8 R14: 00007fa922626360 R15: 00007fff470b4048 [ 1606.472603][T31874] [ 1606.752851][T31879] BUG: unable to handle page fault for address: ffffc900159f3fe8 [ 1606.760654][T31879] #PF: supervisor write access in kernel mode [ 1606.766774][T31879] #PF: error_code(0x0002) - not-present page [ 1606.772821][T31879] PGD 13fe40067 P4D 13fe40067 PUD 1cae7067 PMD 5fd9f067 PTE 0 [ 1606.780418][T31879] Oops: Oops: 0002 [#1] SMP KASAN PTI [ 1606.785870][T31879] CPU: 0 UID: 0 PID: 31879 Comm: syz.1.3549 Tainted: G L syzkaller #0 PREEMPT(full) [ 1606.796871][T31879] Tainted: [L]=SOFTLOCKUP [ 1606.801240][T31879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1606.811345][T31879] RIP: 0010:write_comp_data+0x75/0x90 [ 1606.816779][T31879] Code: 00 8b bf fc 16 00 00 48 8b 30 48 c1 e7 03 4c 8d 1c b5 00 00 00 00 4a 8d 14 dd 28 00 00 00 48 39 d7 72 bd 48 83 c6 01 48 89 30 <4c> 89 44 10 e0 4c 89 4c 10 e8 4c 89 54 10 f0 4a 89 4c d8 20 c3 cc [ 1606.836513][T31879] RSP: 0018:ffffc900044c7e78 EFLAGS: 00050257 [ 1606.842627][T31879] RAX: ffffc900159f4000 RBX: 0000000000000000 RCX: ffffffff82458db5 [ 1606.850632][T31879] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000400000 [ 1606.858641][T31879] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000002 [ 1606.866651][T31879] R10: 0000000000000001 R11: fffffffffffffffc R12: 0000000000000020 [ 1606.874674][T31879] R13: 0000000000000000 R14: 00007ffffffff000 R15: 0000000000000001 [ 1606.882702][T31879] FS: 00007f8bce1aa6c0(0000) GS:ffff888123ddf000(0000) knlGS:0000000000000000 [ 1606.891678][T31879] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1606.898301][T31879] CR2: ffffc900159f3fe8 CR3: 000000002772a000 CR4: 00000000003526f0 [ 1606.906312][T31879] Call Trace: [ 1606.909626][T31879] [ 1606.912589][T31879] rseq_register+0x115/0x350 [ 1606.917274][T31879] __x64_sys_rseq+0x1b8/0x2e0 [ 1606.921990][T31879] do_syscall_64+0x115/0x840 [ 1606.926630][T31879] ? clear_bhb_loop+0x40/0x90 [ 1606.931357][T31879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1606.937284][T31879] RIP: 0033:0x7f8bcd39e0d9 [ 1606.941727][T31879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1606.961382][T31879] RSP: 002b:00007f8bce1aa028 EFLAGS: 00000246 ORIG_RAX: 000000000000014e [ 1606.969861][T31879] RAX: ffffffffffffffda RBX: 00007f8bcd626450 RCX: 00007f8bcd39e0d9 [ 1606.977871][T31879] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000000000000000 [ 1606.985884][T31879] RBP: 00007f8bcd435024 R08: 0000000000000000 R09: 0000000000000000 [ 1606.993908][T31879] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000000 [ 1607.002007][T31879] R13: 00007f8bcd6264e8 R14: 00007f8bcd626450 R15: 00007ffdc558f638 [ 1607.010039][T31879] [ 1607.013116][T31879] Modules linked in: [ 1607.017051][T31879] CR2: ffffc900159f3fe8 [ 1607.021278][T31879] ---[ end trace 0000000000000000 ]--- [ 1607.026773][T31879] RIP: 0010:write_comp_data+0x75/0x90 [ 1607.032207][T31879] Code: 00 8b bf fc 16 00 00 48 8b 30 48 c1 e7 03 4c 8d 1c b5 00 00 00 00 4a 8d 14 dd 28 00 00 00 48 39 d7 72 bd 48 83 c6 01 48 89 30 <4c> 89 44 10 e0 4c 89 4c 10 e8 4c 89 54 10 f0 4a 89 4c d8 20 c3 cc [ 1607.051856][T31879] RSP: 0018:ffffc900044c7e78 EFLAGS: 00050257 [ 1607.057961][T31879] RAX: ffffc900159f4000 RBX: 0000000000000000 RCX: ffffffff82458db5 [ 1607.065968][T31879] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000400000 [ 1607.073970][T31879] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000002 [ 1607.081975][T31879] R10: 0000000000000001 R11: fffffffffffffffc R12: 0000000000000020 [ 1607.089983][T31879] R13: 0000000000000000 R14: 00007ffffffff000 R15: 0000000000000001 [ 1607.097986][T31879] FS: 00007f8bce1aa6c0(0000) GS:ffff888123ddf000(0000) knlGS:0000000000000000 [ 1607.106953][T31879] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1607.113601][T31879] CR2: ffffc900159f3fe8 CR3: 000000002772a000 CR4: 00000000003526f0 [ 1607.121646][T31879] Kernel panic - not syncing: Fatal exception [ 1607.128368][T31879] Kernel Offset: disabled [ 1607.132708][T31879] Rebooting in 86400 seconds..