last executing test programs: 1m5.222140699s ago: executing program 2 (id=2406): r0 = socket$nl_generic(0x10, 0x3, 0x10) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x13, 0x940, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x6, 0x2, 0x7, 0xb0, 0x9, 0x40000000005, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x43, [0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x1fe, 0x81) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000002", @ANYRES16=r0, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000010) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) read$auto(r0, &(0x7f0000000100)='nl80211\x00', 0xbe62) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000000000600010000000a0005000000000000000000b3fc010000000000000000000a0001000000000000000000060006000500000008000200", @ANYRES32=0x0, @ANYBLOB="080004000301"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) socket(0x2, 0x3, 0x6) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x2000000) close_range$auto(0x2, 0x8, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) r2 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48001, 0x0) write$auto(r2, &(0x7f0000000500)='0\"\xfb]$|\xcb1j\xeb0B|d\x1e\x99\xb9\xfd\xd3\x89O\x9f\xac+\xf6\xd7/\xc9\xe9x\xd4\xf3\xc8\xf5\x7fW\xf1\x10:\x1e\xbf\\t\x89_\xa5\x9f\xfc\x147\xa9\xd3\xa6\x96\xd3^\xb8\xb4gq%H\xcc\x88r\xeaO\x8e\x10\t\xc7 \b\x04\x87\x98\x16`\xa3S\xd46\x10Wf\xc9<7\xcf\xc9\xf1\b\x9b\x8c\x9fu;\xc48(u\xf9Bx\n\xafW%/bBT\xa9\a\xed\xd2H4\x96\xa3U\xca\xf1\xef\x14dU\x15\x16\xa7\xdd\x01\x0e\xda\xc8\xd3\x00\xc5\b\x1a\xb0mN\x01\xb1\xc8C.U\xd1\x02\'\x9a\'\xf1;\xedJ\xf6@\xac\a\xf5\xf5|\x1ex\xb7@=\xad\xe7\xff\xd6\xc1\xcf\x11\x0f\x99+v\x873\xc4\x17]\xb3l\x93gt\xff\t\xb2A\x0f\x91\x02\xca&\x91n\xc1\x9e\xcb\x1b\xec\x972\xa9\x00\xc8!\xe8$*fd\x7f5\x86\xef_\x89\xd4\xd3\xa6asQPr\xddF\xb6J\x18\x98 \x0eJj&?\xc9-#\b\xeay\x06)\xa3>\x86\xb8', 0x4000002) mmap$auto(0x0, 0x82020009, 0x5, 0x18, r2, 0x8005) r3 = socket(0x2, 0x3, 0xa) ioctl$auto(0x3, 0x89e0, 0x3) pidfd_open$auto(0x1, 0x0) setsockopt$auto_SO_TIMESTAMPING_OLD(r3, 0x800, 0x25, &(0x7f0000000080)='\'%\x00', 0x4) socket(0x21, 0x5, 0x10000b) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/platform/dummy_hcd.7/usb8/power/wakeup_expire_count\x00', 0xa0440, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000080)=""/64, 0x40) 1m1.410547224s ago: executing program 2 (id=2413): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000002f80), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_NEWPDP(r0, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000000000)={0x2c, r1, 0x5, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_LINK={0x8, 0x1, 0x5}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c000}, 0x80) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='v#\xd5\xaf>=\x14\xe6%\xf7\x8a\x8d\x9a\xae\x1a\xd6\xa8\xb8\x1d\xf5(\xb0\x1f\xbd\xcbV\n\"\xe3V\xfeP\xceN\xb2\xc32\xaf\xcc\x80\xfa\xf0\xd4\xd9|\xfe\x03y\xd16\x17\x99R\xca\xe5\xf4\xb4T\xfcv\xfc\xe6\x9cv\a\x00\xc2a\x16\xd1\x8a\x80\x90\x87\xa5s\x10\xed\x93\xd4\x15=\xc0\x1f\x0e\xb0\x18v}\x03!\xf0I\xe3}\x90\x9b\x92[\xfe2<7\xd3\x81\x9a~\xcd\r\x19\x9e\x10(5\xfd\x8b\x82\xd4\xc85\xc3\x93t\t\xd0\x9d\xca^n\xf3\xcb>\x1bO\xcej\xe0\xef\xf2\xd7\xc2}\x18\xd9`AO\x95<\x9aH\vu\xae\xd4\xea\x12\xb8\xd1\n\x01\x83r\x85\xbf*\x18\xa7 S:R\x14\x89Z3\x94\x8bP)\x00', 0x40140, 0x16d) r2 = open(&(0x7f0000000000)='./file0\x00', 0x44243, 0xe1d2b27bdc14aabc) flock$auto(r2, 0x5) read$auto_proc_timers_operations_base(r2, &(0x7f0000000280)=""/119, 0x77) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x22, 0x6, 0x0) recvmmsg$auto(0x3, 0x0, 0x6, 0x7bd6, 0x0) rename$auto(&(0x7f0000000180)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', &(0x7f0000000300)='v#\xd5\xaf>=\x14\xe6%\xf7\x8a\x8d\x9a\xae\x1a\xd6\xa8\xb8\x1d\xf5(\xb0\x1f\xbd\xcbV\n\"\xe3V\xfeP\xceN\xb2\xc32\xaf\xcc\x80\xfa\xf0\xd4\xd9|\xfe\x03y\xd16\x17\x99R\xca\xe5\xf4\xb4T\xfcv\xfc\xe6\x9cv\a\x00\xc2a\x16\xd1\x8a\x80\x90\x87\xa5s\x10\xed\x93\xd4\x15=\xc0\x1f\x0e\xb0\x18v}\x03!\xf0I\xe3}\x90\x9b\x92[\xfe2<7\xd3\x81\x9a~\xcd\r\x19\x9e\x10(5\xfd\x8b\x82\xd4\xc85\xc3\x93t\t\xd0\x9d\xca^n\xf3\xcb>\x1bO\xcej\xe0\xef\xf2\xd7\xc2}\x18\xd9`AO\x95<\x9aH\vu\xae\xd4\xea\x12\xb8\xd1\n\x01\x83r\x85\xbf*\x18\xa7 S:R\x14\x89Z3\x94\x8bP)') rename$auto(&(0x7f00000003c0)='v#\xd5\xaf>=\x14\xe6%\xf7\x8a\x8d\x9a\xae\x1a\xd6\xa8\xb8\x1d\xf5(\xb0\x1f\xbd\xcbV\n\"\xe3V\xfeP\xceN\xb2\xc32\xaf\xcc\x80\xfa\xf0\xd4\xd9|\xfe\x03y\xd16\x17\x99R\xca\xe5\xf4\xb4T\xfcv\xfc\xe6\x9cv\a\x00\xc2a\x16\xd1\x8a\x80\x90\x87\xa5s\x10\xed\x93\xd4\x15=\xc0\x1f\x0e\xb0\x18v}\x03!\xf0I\xe3}\x90\x9b\x92[\xfe2<7\xd3\x81\x9a~\xcd\r\x19\x9e\x10(5\xfd\x8b\x82\xd4\xc85\xc3\x93t\t\xd0\x9d\xca^n\xf3\xcb>\x1bO\xcej\xe0\xef\xf2\xd7\xc2}\x18\xd9`AO\x95<\x9aH\vu\xae\xd4\xea\x12\xb8\xd1\n\x01\x83r\x85\xbf*\x18\xa7 S:R\x14\x89Z3\x94\x8bP)', &(0x7f0000000000)=':-.\x00') 1m0.832313013s ago: executing program 2 (id=2416): openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/gid_map\x00', 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xa, 0x9b72, 0x2, 0x28000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f0000000100)="e0a533fed5c2f8d24b9fca8e0a845622ed48818685ea2aa2cdc7df68ec25a09a98d8438fa6793b4dc79d031392d933b4d788a44e2621ca854c185c77103f7dd76ddad610d15c493d6362e0ccf524af1c2b549e3eb07975ccd35a15559ed226421e6ba96cef9c3c0ebdd0eef803cce0a0513a956cdbd598153ee6d364f714ca2d0bf9f8e68e2902470521cb4ef88cdbea2f37adadfb9911f80695461e6d85603420331a304d7df7b234881c30be9f8e2986cc3db6e31300effd6ecef3dc70718f6e56b84e558d8843e7") io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffff7ffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) setpriority$auto(0x4000000001, 0x100000001, 0x6) r1 = socket(0x2a, 0x2, 0x1) connect$auto(r1, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0x4001}, 0x55) write$auto(0x3, 0x0, 0x3f00) mmap$auto(0x2000000, 0x400008, 0xdf, 0x9b72, 0x100000000002, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/pcm0p/oss\x00', 0x480, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) mmap$auto(0x58c5, 0x8, 0x6, 0xffffffffffffff74, r1, 0x18eddba1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_TIOCSWINSZ2(0xffffffffffffffff, 0x5414, 0x0) mbind$auto(0x0, 0x100000004, 0x4, 0x0, 0x20000000000006, 0x2) 58.726593024s ago: executing program 2 (id=2421): openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40040, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmsg$auto_NFC_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000826bd7000fddbdf250100000005020a0005"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x10004081) r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) ioctl$auto_SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000180)) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) 58.194404634s ago: executing program 2 (id=2423): openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/gid_map\x00', 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xa, 0x9b72, 0x2, 0x28000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f0000000100)="e0a533fed5c2f8d24b9fca8e0a845622ed48818685ea2aa2cdc7df68ec25a09a98d8438fa6793b4dc79d031392d933b4d788a44e2621ca854c185c77103f7dd76ddad610d15c493d6362e0ccf524af1c2b549e3eb07975ccd35a15559ed226421e6ba96cef9c3c0ebdd0eef803cce0a0513a956cdbd598153ee6d364f714ca2d0bf9f8e68e2902470521cb4ef88cdbea2f37adadfb9911f80695461e6d85603420331a304d7df7b234881c30be9f8e2986cc3db6e31300effd6ecef3dc70718f6e56b84e558d8843e7") io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffff7ffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) setpriority$auto(0x4000000001, 0x100000001, 0x6) r1 = socket(0x2a, 0x2, 0x1) connect$auto(r1, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0x4001}, 0x55) write$auto(0x3, 0x0, 0x3f00) mmap$auto(0x2000000, 0x400008, 0xdf, 0x9b72, 0x100000000002, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/pcm0p/oss\x00', 0x480, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) mmap$auto(0x58c5, 0x8, 0x6, 0xffffffffffffff74, r1, 0x18eddba1) 56.973359565s ago: executing program 2 (id=2427): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) socket(0x2, 0x1, 0x106) sysfs$auto(0x2, 0x100000000000007, 0x0) r2 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) ioctl$auto_UI_DEV_SETUP(r2, 0x405c5503, 0x0) ioctl$auto_UI_DEV_CREATE(r2, 0x5501, 0x0) 48.328543833s ago: executing program 3 (id=2456): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) sysfs$auto(0x2, 0x100000000000007, 0x0) r2 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) ioctl$auto_UI_DEV_CREATE(r2, 0x5501, 0x0) 47.912665408s ago: executing program 3 (id=2458): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x3, 0x4000006) socket(0xf, 0x3, 0x2) socket(0x2, 0xa, 0xe57a) socket(0x2b, 0x1, 0x1) setsockopt$auto(0x6, 0x6, 0xe, 0x0, 0x5) socket(0x10, 0x2, 0xc) sendmsg$auto_OVS_VPORT_CMD_NEW(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x8100) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, 0x0, 0x40) close_range$auto(0x2, 0x8, 0x0) getuid() socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/system/cpu/vulnerabilities/meltdown\x00', 0x40400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000b00)=""/4077, 0xffd0) r1 = socket(0x28, 0x1, 0x20000) adjtimex$auto(&(0x7f00000004c0)={0x8, 0x0, 0xfffffffffffffffc, 0x1, 0xc, 0xf1e, 0x400006, 0x0, 0xa89e, 0x3690, 0x2, {0xfefffffc, 0x10000}, 0xa81e, 0x6, 0xf060, 0x8, 0x0, 0x80000080000004, 0x84, 0x6, 0xffff, 0xdeb0, 0x2}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101080, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) ioctl$auto_SNDRV_PCM_IOCTL_XRUN2(0xffffffffffffffff, 0x4148, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{&(0x7f0000000100)="ef9315b0c2daa4b585aab6551d", 0x0, &(0x7f0000000180)={&(0x7f0000000140)="571c5ee44eb8f0"}, 0xbaf, &(0x7f00000001c0)="135705ab221f0d06945596b6a0e9f67a919b8ad392b96f6189fbad9182aa1a3db154c3942cce26336a7eecc1c55146e53c1f8027ce85b0e22e446b5aa1", 0xb, 0x2}, 0xfffffff9}, 0x5, 0x401) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_allowed_congestion_control\x00', 0x0, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(r3, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) connect$auto(0x3, &(0x7f0000000080)=@phonet={0x23, 0x5, 0x0, 0x8}, 0x0) recvmmsg$auto(r3, 0x0, 0x7fd, 0x7, 0x0) 47.099942232s ago: executing program 3 (id=2460): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x2, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/adsp1\x00', 0x80502, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000001c0)) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) 45.546481066s ago: executing program 3 (id=2462): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto(0xffffffffffffffff, 0x40046207, 0x9) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, 0x0, 0x880) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) select$auto(0x3, 0x0, 0x0, 0x0, 0x0) syslog$auto(0x2, 0x0, 0xcf) close_range$auto(0x2, 0x8, 0x0) shmget$auto(0x400, 0x10563, 0x568c12f2) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) syz_clone(0x25342080, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0xc76, 0x8000) shmdt$auto(&(0x7f0000000000)=':-h!/-^@(\']@%]/\x00') clone$auto(0x1002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r0 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/netfilter/nfnetlink_queue\x00', 0x101000, 0x0) socket(0x10, 0x2, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, 0xffffffffffffffff) ioctl$auto_KVM_CREATE_VM(r1, 0x8040ae9f, 0x0) setregid$auto(0x0, 0x0) write$auto(r0, 0x0, 0xc3) 42.313182388s ago: executing program 3 (id=2469): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x2, 0x40009, 0x700000, 0x9b72, 0x7, 0x28000) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/kallsyms\x00', 0x20100, 0x0) pread64$auto(r0, 0x0, 0x8, 0x8000) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) sysfs$auto(0x2, 0xf, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mknod$auto(&(0x7f00000003c0)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5', 0x20e9, 0x103) open(&(0x7f0000000000)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5\x00', 0x8000, 0x50) lseek$auto(0x3, 0x7ffffffffffffffd, 0x0) r1 = socket(0xa, 0x2, 0x88) setsockopt$auto(r1, 0x0, 0x6, 0xfffffffffffffffe, 0x5) sysfs$auto(0x8, 0xc4, 0xfffffffffffff9f9) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) ioctl$auto(r2, 0x2271, 0x38) r3 = open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) open_by_handle_at$auto(r3, &(0x7f0000001280)={0x8, 0x2, "0200000000000000"}, 0x6) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000) userfaultfd$auto(0x1) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) socket(0xa, 0x801, 0x84) socket(0xa, 0x3, 0x73) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) 41.954619443s ago: executing program 3 (id=2470): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x1a, 0x4078b1bda105b871, 0x200) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) write$auto(r1, 0x0, 0x1ff) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3}, 0x55) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r2 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000100)='/proc/kpageflags\x00', 0x2, 0x0) read$auto(0x3, 0x0, 0x80) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r0) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)={0x1d4, r3, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_CNTDWN_OFFS_PRESP={0xcb, 0xbb, "d449757cc99b5fd25d93e42d26efc47bbb1fc1de805c6558594971ed3753ea9671c7d382922a00ca88319717285ba24a71e996b70a21e73398ae1f29f439f7e61e9ae7916e463d9c9e7ef4cdc10c7218f2a5c77070cc665ca72601a510aeb741f6afe67182e66fbd8f8ff8b6759a2c92f4c51caea00d561bbcce7e765da849990c980833068c37733049362224a023d63a7523b1c0b041e251f2cd2338c28acdb147be715bfd4377352c5e4f4d08cbc986f0392e127955ad1b186c12029e547ba742610dab1180"}, @NL80211_ATTR_FILS_NONCES={0xf3, 0xf3, "da2409be1fd13d7881123cea2f2b91867c93c27673fe6601df90306b884e29aca54a03410bae26a940ce6d5ec1bd3edf999e26129e81c44584d0abacbbfcc315cfb4437f9f45c7548a0e1e5c217398cfa02c070e1df66f442097dba10fa0402ab3d9fd820beb3a806c6e744e8882b6a4a5e398bdbe5ff6a9ee24e464870a72cfc973cd6ddbfac0899784ff9bfe4d2053af482532509414cedd408384ead29f092a89900a36551a9e2aca04b545da0e261a0bbcce94e7d40f7ad7793b39d25e718a05fb88bd364dbd3ecfa6cccf2e2fbf1357814e17d58ade0af44748cb53ea03633dfa2309787a28d7ec1dd57f7e10"}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x40080) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) close_range$auto(r0, r0, 0x3) r5 = ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0x4020ae46, 0x38) clone$auto(0x20000000000021, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x3a45) ioctl$auto_SG_EMULATED_HOST2(r2, 0x2203, &(0x7f0000000140)="a6de7e4a337c2667913184f034cdeaae4b8595e1edf7e24e54eed810ee99afebec4a32e9c0b9a4fd10fb04d3f2bc03f4a4b8272cb156c6e8a5ab7e16d0488975e313aabe6528df39074f0a9fb8cbfb52d8c172be8ac4e0b3a27a3c439361d7ae669f3b7548b657cf3c7c8612ec9a2367fed943748400511e8d7c87f6734c7560f2e402fd31ee5b52a6d439d687bd5fd8f8283dc2fe5fce2b85ed3cb31a5def4d5e6c731c2843ab9e6319dad8c840a5342ca7e494f7b64a166fa470903ca022b760d9ca23207d03dffa2d5db2eeb19d458937436f599ee4f99defb65e77dc60672c4a4305667a601ddf2b7a70565731bbb77beed95d4a") r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000000), r6) ioctl$auto_FS_IOC_GETFLAGS2(r5, 0x80086601, &(0x7f0000000040)=0x4) 26.384726286s ago: executing program 32 (id=2470): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x1a, 0x4078b1bda105b871, 0x200) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) write$auto(r1, 0x0, 0x1ff) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3}, 0x55) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r2 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000100)='/proc/kpageflags\x00', 0x2, 0x0) read$auto(0x3, 0x0, 0x80) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r0) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)={0x1d4, r3, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_CNTDWN_OFFS_PRESP={0xcb, 0xbb, "d449757cc99b5fd25d93e42d26efc47bbb1fc1de805c6558594971ed3753ea9671c7d382922a00ca88319717285ba24a71e996b70a21e73398ae1f29f439f7e61e9ae7916e463d9c9e7ef4cdc10c7218f2a5c77070cc665ca72601a510aeb741f6afe67182e66fbd8f8ff8b6759a2c92f4c51caea00d561bbcce7e765da849990c980833068c37733049362224a023d63a7523b1c0b041e251f2cd2338c28acdb147be715bfd4377352c5e4f4d08cbc986f0392e127955ad1b186c12029e547ba742610dab1180"}, @NL80211_ATTR_FILS_NONCES={0xf3, 0xf3, "da2409be1fd13d7881123cea2f2b91867c93c27673fe6601df90306b884e29aca54a03410bae26a940ce6d5ec1bd3edf999e26129e81c44584d0abacbbfcc315cfb4437f9f45c7548a0e1e5c217398cfa02c070e1df66f442097dba10fa0402ab3d9fd820beb3a806c6e744e8882b6a4a5e398bdbe5ff6a9ee24e464870a72cfc973cd6ddbfac0899784ff9bfe4d2053af482532509414cedd408384ead29f092a89900a36551a9e2aca04b545da0e261a0bbcce94e7d40f7ad7793b39d25e718a05fb88bd364dbd3ecfa6cccf2e2fbf1357814e17d58ade0af44748cb53ea03633dfa2309787a28d7ec1dd57f7e10"}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x40080) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) close_range$auto(r0, r0, 0x3) r5 = ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0x4020ae46, 0x38) clone$auto(0x20000000000021, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x3a45) ioctl$auto_SG_EMULATED_HOST2(r2, 0x2203, &(0x7f0000000140)="a6de7e4a337c2667913184f034cdeaae4b8595e1edf7e24e54eed810ee99afebec4a32e9c0b9a4fd10fb04d3f2bc03f4a4b8272cb156c6e8a5ab7e16d0488975e313aabe6528df39074f0a9fb8cbfb52d8c172be8ac4e0b3a27a3c439361d7ae669f3b7548b657cf3c7c8612ec9a2367fed943748400511e8d7c87f6734c7560f2e402fd31ee5b52a6d439d687bd5fd8f8283dc2fe5fce2b85ed3cb31a5def4d5e6c731c2843ab9e6319dad8c840a5342ca7e494f7b64a166fa470903ca022b760d9ca23207d03dffa2d5db2eeb19d458937436f599ee4f99defb65e77dc60672c4a4305667a601ddf2b7a70565731bbb77beed95d4a") r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000000), r6) ioctl$auto_FS_IOC_GETFLAGS2(r5, 0x80086601, &(0x7f0000000040)=0x4) 4.848402509s ago: executing program 1 (id=2576): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv6/neigh/bond_slave_1/proxy_qlen\x00', 0x40001, 0x0) mmap$auto(0x9, 0x20007, 0xffffffffffff7fff, 0xeb5, 0xfffffffffffffffd, 0x40000007ffe) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r0, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0x1a000}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r1 = io_uring_setup$auto(0xa, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/conf/macvlan1/shared_media\x00', 0x50b780, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/nr12/address\x00', 0x101800, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) eventfd$auto(0x8e) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x22a40, 0x0) socket(0x2, 0x801, 0x100) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vkms/drm/card1/card1-Virtual-1/status\x00', 0x20b42, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000001c0)=""/31, 0x1f) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000340), 0x7111}, 0x8) r3 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0) pread64$auto(r3, 0x0, 0x59, 0x7) ioctl$auto_RNDZAPENTCNT2(r1, 0x5204, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2140, 0x0) unshare$auto(0x40000080) 3.7368428s ago: executing program 1 (id=2578): r0 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) setregid$auto(0x0, 0x0) write$auto(r0, 0x0, 0xc3) 3.576082065s ago: executing program 1 (id=2579): mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000) r0 = socket(0x15, 0x5, 0x0) getsockopt$auto_SO_TXTIME(r0, 0x77, 0x3d, &(0x7f0000000000)='+@$$--.C\\\x00', &(0x7f0000000040)=0xd3c) write$auto(0x800000000000c8, 0x0, 0x1a) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) shutdown$auto(0x200000003, 0x2) set_mempolicy$auto(0x8003, &(0x7f0000000280)=0x200000007b, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) finit_module$auto(r1, &(0x7f0000000080)='/dev/tap63\x00', 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r2 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000100), 0x20400, 0x0) ioctl$auto_TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000140)=0xbc) r3 = epoll_create$auto(0x3e) socket(0xa, 0x2, 0x3a) ioctl$auto_SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1, 0x0) epoll_ctl$auto(r3, 0x1, r1, 0x0) renameat2$auto(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x4000) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PVERSION(r3, 0x80045700, 0x0) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) setsockopt$auto(0x400000000000003, 0x29, 0x22, 0xffffffffffffffff, 0x3) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) mmap$auto(0x0, 0xfffffffffffffffe, 0xdf, 0xeb1, 0x401, 0x7ffc) bpf$auto(0x1239, &(0x7f0000000780)=@bpf_attr_11={0x41, 0x6, 0x3ff, 0x6, 0x8, 0x9199, 0x9}, 0xa6) 2.735946396s ago: executing program 0 (id=2581): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv6/neigh/bond_slave_1/proxy_qlen\x00', 0x40001, 0x0) mmap$auto(0x9, 0x20007, 0xffffffffffff7fff, 0xeb5, 0xfffffffffffffffd, 0x40000007ffe) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r0, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0x1a000}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r1 = io_uring_setup$auto(0xa, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/conf/macvlan1/shared_media\x00', 0x50b780, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/nr12/address\x00', 0x101800, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) eventfd$auto(0x8e) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x22a40, 0x0) socket(0x2, 0x801, 0x100) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vkms/drm/card1/card1-Virtual-1/status\x00', 0x20b42, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000001c0)=""/31, 0x1f) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000340), 0x7111}, 0x8) r3 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0) pread64$auto(r3, 0x0, 0x59, 0x7) ioctl$auto_RNDZAPENTCNT2(r1, 0x5204, 0x0) socketpair$auto(0x1a, 0x80000004, 0xfffffffd, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2140, 0x0) unshare$auto(0x40000080) 2.503907951s ago: executing program 1 (id=2583): socket(0x10, 0x2, 0xc) sendmsg$auto_OVS_VPORT_CMD_NEW(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x8100) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2b, 0x1, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0x1, 0xd4, 0x7fffffff, 0x6, 0x0, 0xa89e, 0x3690, 0x2, {0xfffffffc, 0x10000}, 0xa81e, 0x6, 0xffffffffffffffff, 0x1008000, 0x0, 0x80000080000004, 0x84, 0xffffffffffff6291, 0xffff, 0xdeb1, 0x806}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101080, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) ioctl$auto_SNDRV_PCM_IOCTL_XRUN2(0xffffffffffffffff, 0x4148, 0x0) ioctl$auto_BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f00000005c0)={@raw=0x80, 0x6, 0x7a3d, @unused, @subvolid=0x2a}) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) membarrier$auto(0x4, 0x8000000000000000, 0xffffffff) mmap$auto(0x270b, 0x6, 0x6, 0x19, r0, 0x7f) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvmmsg$auto(0x3, 0x0, 0x10000, 0x1c, 0x0) r2 = openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/gid_map\x00', 0x40, 0x0) io_uring_register$auto_IORING_REGISTER_ZCRX_IFQ(r2, 0x20, &(0x7f0000000100)="d5d8195fdfa34f02370349bc6e23636e85f2e0dc36d593b160f6436aeed3b3582e9e9c7027b3ac66152046089062c51e2d5462c55618a7875ef81532d2f615c580dd0960ea78f99d9b6a4e073ff63500ce49a2a39b8a1876a0e17af668cd1d8a3517993dd8788be27ad6e8f73191ba46f2670957e44943dc035abd0e37482e0a9a5177d833f1c744e242975f795db4c43652d95f51780a8b686379156a7a6f029d4e54c5acf5d2764ca6fa31432345485d2a373ca5461e26bda144ce535696a3dfb7eafc6f80245a57b86dd4fed34f", 0x2) 1.636314791s ago: executing program 1 (id=2584): mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x9, 0x800, 0x6) r0 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) r1 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) write$auto(r0, 0x0, 0x9) r2 = socketcall$auto_SYS_ACCEPT4(0x12, &(0x7f0000000000)=0x4) close_range$auto(r2, r1, 0x3) 1.578512547s ago: executing program 0 (id=2585): socket(0x10, 0x2, 0xc) mmap$auto(0x3, 0x3, 0x3, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x99156f6407b25944, 0x5, 0x40000000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/rose15/power/runtime_suspended_time\x00', 0x100, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r2 = socket(0x62e54216f70b3977, 0xa, 0x84) r3 = getsockopt$auto(r2, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@xdp={0x2c, 0xa, 0x0, 0x42d}, 0x6b) connect$auto(0xffffffffffffffff, &(0x7f0000000080)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x18}, 0x8}, 0x4) setsockopt$auto(0x3, 0x10000000084, 0x1, 0x0, 0x14) read$auto(r1, 0x0, 0x6) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) getsockopt$auto_SO_ERROR(r3, 0x9a6, 0x4, &(0x7f0000000140)='\x00', &(0x7f0000000180)=0x6) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x23, 0x800, 0x0) write$auto(0x3, 0x0, 0xfdef) ioctl$auto(0x3, 0x89ed, 0xfffffffffffff4e0) mlockall$auto(0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) socket(0x2b, 0x1, 0x1) setsockopt$auto(0x3, 0x11e, 0x1, 0x0, 0x9) clone$auto(0x21002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) writev$auto(r0, 0x0, 0x10000) r4 = socket(0x2b, 0x1, 0x1) mmap$auto(0xfffffffffffffffa, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) getsockopt$auto(r4, 0x6, 0x12, 0xfffffffffffffffc, 0x0) 1.248953979s ago: executing program 0 (id=2586): r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x15, 0x5, 0x0) r2 = pipe$auto(0x0) r3 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f00000001c0), r1) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="020027bd7000fbdbdf250500000011c16512228f23cb091de628cfdc3c34c3f992d2304c1831e19ecbe32c1b05235c85167b8550e3d16309f3dcf4b370b1d996f5442c36d771cdfb7400"/86], 0x5c}, 0x1, 0x0, 0x0, 0x4800}, 0x4c090) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, 0x2, 0x0, 0x3, 0x10000009) write$auto(0x6, 0x0, 0x100000001) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) open_by_handle_at$auto(r1, &(0x7f0000000340)={0xa6, 0x10002, "fc0ace00065147fe1afc7b7ef50b0c131a65f9e3a450d3c171765e60409befa34f7c88193f034ddc0fd81409d49dd842a4fd82c5a84da602011a048c68ff374298c73d61d47cb63c8973166677f1a39b66304da4407a075eda052c9973490bf28443446f26b930a0470bb38b64517f3f108d5a3ff550f694a04327560c40ac31b00358d7d8e7011f0cef9a6a67ed6aa837528900"/166}, 0x8001) ioctl$auto(0x3, 0x80000541b, 0x38) mmap$auto(0x6ca87a03, 0xfffffffffffffffe, 0x4000000000df, 0x40eb1, 0xffffffffffffffff, 0x9) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x1, 0xffffffff) setsockopt$auto(0x3, 0x6, 0x2a, 0x0, 0x4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0xffffffffffffffff, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x80a43, 0x0) ioctl$auto_KVM_CHECK_EXTENSION(r4, 0xae03, 0xe9) r5 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) madvise$auto(0x3, 0x9, 0x8) write$auto_seq_oss_f_ops_seq_oss(r5, &(0x7f0000000680)="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", 0x658) ioctl$auto(r0, 0x400454ca, 0x38) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) 899.799872ms ago: executing program 0 (id=2587): r0 = socket(0x10, 0x2, 0xc) keyctl$auto_KEYCTL_WATCH_KEY(0x20, 0x1, r0, 0x2, 0xb) sendmsg$auto_OVS_VPORT_CMD_NEW(0xffffffffffffffff, 0x0, 0x8100) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2b, 0x1, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0x1, 0xd4, 0x7fffffff, 0x6, 0x0, 0xa89e, 0x3690, 0x2, {0xfffffffc, 0x3b9ac9ff}, 0xa81e, 0x6, 0xffffffffffffffff, 0x1008000, 0x0, 0x80000080000004, 0x84, 0xffffffffffff6291, 0xffff, 0xdeb1, 0x806}) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101080, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/mm/transparent_hugepage/khugepaged/alloc_sleep_millisecs\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) ioctl$auto_SNDRV_PCM_IOCTL_XRUN2(0xffffffffffffffff, 0x4148, 0x0) r4 = socket(0x2, 0x2, 0x1) r5 = bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x1f, r4, 0x10000}, 0x10) mmap$auto(0x0, 0x2009, 0xffffffff, 0x8000200008011, r5, 0x8000) read$auto_ptdump_curusr_fops_(r5, &(0x7f00000005c0)=""/94, 0x5e) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r1) r6 = getsid$auto(0x0) r7 = setfsuid$auto(0xee00) r8 = setfsuid$auto(0xee01) setresuid$auto(r7, r8, r7) shmctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000280)={{0x0, r8, 0xee00, 0x4, 0x9, 0x5, 0xb}, 0x6, 0x6, 0x4, 0x81, @inferred=r6, @inferred=r6, 0x200, 0x0, &(0x7f00000001c0)="0f42ba8a357bc19f43e300c6f53e59675a8cce7d28b6ac4019a8e48298fae4d82faba370233e84f0", &(0x7f0000000200)="ccd964ed42a57de793011f4334d114b7841a58373d0e9de80c5430c6185f2ada3982af8065d5a04751293c82f097fe0647fb3ed2dc50cda66f37edf4afbac19ec50b"}) shmctl$auto_SHM_INFO(0x8, 0xe, &(0x7f0000000440)={{0x8, r7, 0xee00, 0x4, 0x8, 0x0, 0xa3}, 0x9, 0x5, 0x4, 0x8, @inferred=r6, @inferred=r6, 0x0, 0x0, &(0x7f0000000300)="250c72efecc19a5c27d7810b66fd3ca47eec716e19e257671fe4446c6045219a28419eb5642734b6a4b25cec8c9a4d3e4fe83f869248326f7d657feb7e88bba4bdf8280c0ab121e6bad80cd829b266b1e5bec772cdde3ed98b58cf0fa8d83b14b9f22e073f0268425af9deaf4c3c225d3a23d368de2b30ef92f71b19e67126cc16de258cec29476c1a85ea692fe99f173a86a7e6cca5737608320ef3d8afe387f56c9c59d53c71d6af3e0263320af7e90545d1fe418308876a8a3c65793e8fb30f278e57aa862be3e5c8529ddba6b5fdf9c9e032a52a4349921c1cf502", &(0x7f00000009c0)="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"}) keyctl$auto_KEY_REQKEY_DEFL_PROCESS_KEYRING(0x5, 0x2, r9, r11, 0xfffffffffffffffe) sendmsg$auto_NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000180)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000001d40)=ANY=[@ANYBLOB="d4030000", @ANYRES32=r2, @ANYBLOB="00012bbd7000fbdbdf256500000010006e800c002b8008002e00020000002702a6800800fc80040026806200d9009401a573091dd9a8b82288ded2ad5eab14fb5228719af54753013ffe77ca1270e093b2a6c6ba739b8b866b662f755c3d5e7b8ce6c4362c2a6053ff9176582853e78732786e3d105b14b1df591fc4d6b34ff0c665f5e1aa5beea06f5466b4000008000700", @ANYRES32=r6, @ANYRES8, @ANYRES16=r10, @ANYRESHEX=r1], 0x3d4}}, 0x8c1) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) 485.857846ms ago: executing program 1 (id=2588): mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x500, 0x0) mmap$auto(0x1f88, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getsockopt$auto_SO_PASSSEC(r0, 0x6, 0x22, &(0x7f0000000000)='$)(\x00', &(0x7f0000000040)=0xfffffff8) r1 = pidfd_open$auto(0x0, 0x5) openat2$auto(r1, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={0xf4, 0x8, 0x1ff}, 0xff) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlockall$auto(0x7) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) mmap$auto(0x0, 0x2020009, 0x1c, 0xeb1, 0xfffffffffffffffa, 0x0) 179.592697ms ago: executing program 0 (id=2589): r0 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) setregid$auto(0x0, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/ip_vs_stats_percpu\x00', 0x100, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000040)=""/99, 0x63) write$auto(r0, 0x0, 0xc3) 0s ago: executing program 0 (id=2590): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) pivot_root$auto(&(0x7f0000000300)='.\x00\xaf\xeb)\xae$\xfc\x00\xf8\x05AC\x9f\xbbR\xec\xc6c\x85\xc8\xa7\xe84sF\xe3U\x94\x99\x8fR\xd0\x98\f\xa5\xb1S\x7f\xc3\xa5\xc0\x97\x10qa\r\x02\xd2\xc8\xd2\x8e\xc7\x80\x11\x06#\xf5\x18|\xdc\x81Ai\xb6\x96iaR\xdbA\x04\x10\x99\xe6\xdb\xae`G\x1d9`T\xd8\xc6\xea\xf7\x96\xb5\xe9\x164e\xb1 S\x8f\x12_\x15y\x91F\xc89\xb1\xd24?\x89.,Z\xba,\"v\xde\xc4\xe0\x84\xca|\"\x96V\xd5P\xe4\xb9\xea\x88\x15\xacs\xc6\x83\xd6\x81\xd7\x11\x88\x9c\xdd\x8a\x0e\xea\x19|\x7f\xe3A8x\xce\xc1!q\xbbi\\\xd8\xa9\xe0\xed\x9e\x19\xc0IC9^\xfcJG\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000280)='.\x00') statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xfffffffd, 0x401bf, 0x73d2, 0x3c, 0x65f, 0x1ffde, 0x3, 0x3, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb2, 0x80000000009, 0x6, 0x10003, 0xb, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000]}, 0x1fe, 0x10) madvise$auto(0x1000000000005, 0x8, 0xfffffffd) r0 = socket(0xa, 0x2, 0x0) setsockopt$auto(r0, 0x8000000c, 0x84, 0x0, 0x56b) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = socket(0x15, 0x5, 0x0) r2 = openat$auto__dev_ioctl_fops_dev_ioctl(0xffffffffffffff9c, &(0x7f0000001440), 0x101000, 0x0) ioctl$auto__dev_ioctl_fops_dev_ioctl(r2, 0x19300, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) r3 = socketpair$auto(0x1ff, 0x5, 0x8000000000000000, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop1/queue/max_hw_sectors_kb\x00', 0x2000, 0x0) preadv2$auto(r4, &(0x7f0000000300)={&(0x7f0000000180), 0x27d6}, 0x7, 0x1, 0x14, 0x3) recvmmsg$auto(0x3, 0x0, 0x10000, 0x9, 0x0) getsockopt$auto_SO_NETNS_COOKIE(r1, 0x4, 0x47, &(0x7f00000000c0)='/proc/asound/card1/pcm1p/sub1/xrun_injection\x00', &(0x7f0000000140)=0x10) sendmsg$auto(r1, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) listen$auto(r5, 0x21ff) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/pcm1p/sub1/xrun_injection\x00', 0x0, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) r7 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtdblock0\x00', 0x14f642, 0x0) shutdown$auto(0x200000003, 0x2) ioprio_set$auto(0xffffff81, 0x0, 0x5) r8 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/mixer1\x00', 0x400, 0x0) mmap$auto(0x80000001, 0x2000a, 0x10000000000df, 0x13, r8, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="c90036b547a531936f60d64ebbe924da2e5e97d18da258f267593afc3f82627a8e7b32", @ANYRES16=r7, @ANYRES64=r6, @ANYRES8=r3, @ANYBLOB="e31e4adbd4c8379f61c82499fc535aead8421475f533205998c1c1b16111427b7643d7327ecd66c53b52579ce5d95e82b6865879c803d3c94a70c3dc8d4d", @ANYRESHEX=r6, @ANYBLOB="0abfc615538c017deca5d4c29ee1f200dbd588e604ee12ff8d9398c8231f1e6fc6ee75efbf1f487a866f72ff4270d99a0e76f5ed6deee67235efd58554db4a416e3819f9ed16315e3329a6578a693c18e858b398fc5d98c4aecefd30829aaf81dfe9bf79006f5969a81dad65752b1b510e551434a2a01e1b5c805be266704567067b5861d4543641e53014fa290150c9b00ad2ca900d9b7595cdbd8b618b240f914d4f2f10212df58d2e0901fe6acc379028bc80fce0d2cd4a4de0ba473cb6e71d16c2137b2693f0"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) mprotect$auto(0x42f, 0x8, 0xb217) kernel console output (not intermixed with test programs): BIOS Google 02/12/2025 [ 897.422862][T14957] Call Trace: [ 897.422873][T14957] [ 897.422887][T14957] dump_stack_lvl+0x16c/0x1f0 [ 897.422945][T14957] should_fail_ex+0x512/0x640 [ 897.422990][T14957] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 897.423038][T14957] should_failslab+0xc2/0x120 [ 897.423084][T14957] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 897.423128][T14957] ? __kernfs_new_node+0xd2/0x8a0 [ 897.423170][T14957] __kernfs_new_node+0xd2/0x8a0 [ 897.423209][T14957] ? __pfx___kernfs_new_node+0x10/0x10 [ 897.423255][T14957] ? find_held_lock+0x2b/0x80 [ 897.423293][T14957] ? kernfs_root+0xee/0x2a0 [ 897.423336][T14957] kernfs_new_node+0x13c/0x1e0 [ 897.423385][T14957] __kernfs_create_file+0x53/0x350 [ 897.423439][T14957] sysfs_add_file_mode_ns+0x207/0x3c0 [ 897.423506][T14957] sysfs_merge_group+0x1aa/0x340 [ 897.423544][T14957] ? __pfx_sysfs_merge_group+0x10/0x10 [ 897.423588][T14957] ? __pfx_dev_add_physical_location+0x10/0x10 [ 897.423646][T14957] ? bus_to_subsys+0x12d/0x160 [ 897.423702][T14957] dpm_sysfs_add+0x237/0x280 [ 897.423738][T14957] device_add+0x9a6/0x1a70 [ 897.423781][T14957] ? __pfx_device_add+0x10/0x10 [ 897.423815][T14957] ? __pfx___mutex_lock+0x10/0x10 [ 897.423869][T14957] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 897.423930][T14957] input_register_device+0x7e8/0x1130 [ 897.423992][T14957] uinput_ioctl_handler.isra.0+0x1357/0x1df0 [ 897.424041][T14957] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 897.424096][T14957] ? find_held_lock+0x2b/0x80 [ 897.424153][T14957] ? __pfx_uinput_ioctl+0x10/0x10 [ 897.424196][T14957] __x64_sys_ioctl+0x190/0x200 [ 897.424251][T14957] do_syscall_64+0xcd/0x230 [ 897.424305][T14957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.424340][T14957] RIP: 0033:0x7fe77d18e169 [ 897.424367][T14957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 897.424401][T14957] RSP: 002b:00007fe77df82038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 897.424434][T14957] RAX: ffffffffffffffda RBX: 00007fe77d3b5fa0 RCX: 00007fe77d18e169 [ 897.424457][T14957] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000008 [ 897.424478][T14957] RBP: 00007fe77d210a68 R08: 0000000000000000 R09: 0000000000000000 [ 897.424499][T14957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 897.424519][T14957] R13: 0000000000000000 R14: 00007fe77d3b5fa0 R15: 00007ffd2747e7f8 [ 897.424563][T14957] [ 897.754103][T14944] ima: policy update failed [ 897.831213][ T30] audit: type=1802 audit(6039901720.385:144): pid=14944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.2115" res=0 errno=0 [ 898.034053][T14961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2118'. [ 898.080277][T14961] openvswitch: .SR: Dropping previously announced user features [ 898.615271][T14975] FAULT_INJECTION: forcing a failure. [ 898.615271][T14975] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 898.645598][T14975] CPU: 1 UID: 0 PID: 14975 Comm: syz.1.2122 Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0 PREEMPT(full) [ 898.645648][T14975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 898.645668][T14975] Call Trace: [ 898.645678][T14975] [ 898.645691][T14975] dump_stack_lvl+0x16c/0x1f0 [ 898.645743][T14975] should_fail_ex+0x512/0x640 [ 898.645788][T14975] _copy_from_user+0x2e/0xd0 [ 898.645831][T14975] __sys_bpf+0x21d/0x4d80 [ 898.645886][T14975] ? __pfx___sys_bpf+0x10/0x10 [ 898.645935][T14975] ? ksys_write+0x190/0x240 [ 898.645973][T14975] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 898.646043][T14975] ? fput+0x70/0xf0 [ 898.646082][T14975] ? ksys_write+0x1b9/0x240 [ 898.646114][T14975] ? __pfx_ksys_write+0x10/0x10 [ 898.646152][T14975] __x64_sys_bpf+0x78/0xc0 [ 898.646202][T14975] ? lockdep_hardirqs_on+0x7c/0x110 [ 898.646246][T14975] do_syscall_64+0xcd/0x230 [ 898.646298][T14975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.646331][T14975] RIP: 0033:0x7fe77d18e169 [ 898.646356][T14975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 898.646397][T14975] RSP: 002b:00007fe77df82038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 898.646427][T14975] RAX: ffffffffffffffda RBX: 00007fe77d3b5fa0 RCX: 00007fe77d18e169 [ 898.646448][T14975] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000020 [ 898.646468][T14975] RBP: 00007fe77df82090 R08: 0000000000000000 R09: 0000000000000000 [ 898.646486][T14975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 898.646504][T14975] R13: 0000000000000001 R14: 00007fe77d3b5fa0 R15: 00007ffd2747e7f8 [ 898.646544][T14975] [ 898.818515][ C1] vkms_vblank_simulate: vblank timer overrun [ 899.473299][T14994] FAULT_INJECTION: forcing a failure. [ 899.473299][T14994] name failslab, interval 1, probability 0, space 0, times 0 [ 899.570238][T14994] CPU: 1 UID: 0 PID: 14994 Comm: syz.3.2127 Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0 PREEMPT(full) [ 899.570308][T14994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 899.570328][T14994] Call Trace: [ 899.570340][T14994] [ 899.570352][T14994] dump_stack_lvl+0x16c/0x1f0 [ 899.570405][T14994] should_fail_ex+0x512/0x640 [ 899.570453][T14994] should_failslab+0xc2/0x120 [ 899.570497][T14994] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 899.570540][T14994] ? __inet_bhash2_update_saddr+0x1cf/0x1a40 [ 899.570582][T14994] ? ip_route_output_key_hash+0x16b/0x2e0 [ 899.570622][T14994] __inet_bhash2_update_saddr+0x1cf/0x1a40 [ 899.570672][T14994] ? __call_rcu_common.constprop.0+0x3e5/0x9f0 [ 899.570742][T14994] tcp_v4_connect+0x14d5/0x1ba0 [ 899.570811][T14994] ? __pfx_tcp_v4_connect+0x10/0x10 [ 899.570862][T14994] ? __lock_acquire+0xaa4/0x1ba0 [ 899.570918][T14994] __inet_stream_connect+0x3c5/0x1020 [ 899.570960][T14994] ? __pfx___inet_stream_connect+0x10/0x10 [ 899.570994][T14994] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 899.571058][T14994] ? __local_bh_enable_ip+0xa4/0x120 [ 899.571105][T14994] inet_stream_connect+0x57/0xa0 [ 899.571140][T14994] kernel_connect+0x104/0x180 [ 899.571192][T14994] ? __pfx_kernel_connect+0x10/0x10 [ 899.571267][T14994] ? __local_bh_enable_ip+0xa4/0x120 [ 899.571314][T14994] smc_connect+0x4c7/0x760 [ 899.571359][T14994] ? __pfx_smc_connect+0x10/0x10 [ 899.571396][T14994] __sys_connect_file+0x13e/0x1a0 [ 899.571440][T14994] __sys_connect+0x14d/0x170 [ 899.571478][T14994] ? __pfx___sys_connect+0x10/0x10 [ 899.571533][T14994] ? __pfx_ksys_write+0x10/0x10 [ 899.571566][T14994] ? rcu_is_watching+0x12/0xc0 [ 899.571608][T14994] __x64_sys_connect+0x72/0xb0 [ 899.571644][T14994] ? lockdep_hardirqs_on+0x7c/0x110 [ 899.571691][T14994] do_syscall_64+0xcd/0x230 [ 899.571743][T14994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 899.571776][T14994] RIP: 0033:0x7f83a638e169 [ 899.571802][T14994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 899.571834][T14994] RSP: 002b:00007f83a7214038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 899.571864][T14994] RAX: ffffffffffffffda RBX: 00007f83a65b6080 RCX: 00007f83a638e169 [ 899.571886][T14994] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000003 [ 899.571907][T14994] RBP: 00007f83a7214090 R08: 0000000000000000 R09: 0000000000000000 [ 899.571927][T14994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 899.571946][T14994] R13: 0000000000000000 R14: 00007f83a65b6080 R15: 00007ffc87551b08 [ 899.571989][T14994] [ 899.836589][ C1] vkms_vblank_simulate: vblank timer overrun [ 900.247555][T15003] netlink: 322 bytes leftover after parsing attributes in process `syz.0.2128'. [ 900.334188][ T30] audit: type=1807 audit(6039901722.945:145): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWñ:¿\t‰_¥Ÿü7©Ó¦–Ó^¸´gq%ḦrêOŽ res=0 [ 900.419542][ T30] audit: type=1802 audit(6039901722.945:146): pid=15004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.2128" res=0 errno=0 [ 900.778980][T15012] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2133'. [ 900.789053][T15012] netlink: 354 bytes leftover after parsing attributes in process `syz.1.2133'. [ 900.900984][T14997] ima: policy update failed [ 900.911251][ T30] audit: type=1802 audit(6039901723.525:147): pid=14997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.2128" res=0 errno=0 [ 901.219366][T15021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2132'. [ 901.364208][T15021] openvswitch: .SR: Dropping previously announced user features [ 903.545313][T15047] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2140'. [ 904.093589][T15061] netlink: 322 bytes leftover after parsing attributes in process `syz.2.2144'. [ 904.180264][ T30] audit: type=1807 audit(6039901726.805:148): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWñ:¿\t‰_¥Ÿü7©Ó¦–Ó^¸´gq%ḦrêOŽ res=0 [ 904.200580][T15063] FAULT_INJECTION: forcing a failure. [ 904.200580][T15063] name failslab, interval 1, probability 0, space 0, times 0 [ 904.248537][ T30] audit: type=1802 audit(6039901726.805:149): pid=15061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.2144" res=0 errno=0 [ 904.279795][T15063] CPU: 1 UID: 0 PID: 15063 Comm: syz.1.2142 Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0 PREEMPT(full) [ 904.279841][T15063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 904.279867][T15063] Call Trace: [ 904.279878][T15063] [ 904.279891][T15063] dump_stack_lvl+0x16c/0x1f0 [ 904.279941][T15063] should_fail_ex+0x512/0x640 [ 904.279977][T15063] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 904.280018][T15063] should_failslab+0xc2/0x120 [ 904.280060][T15063] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 904.280107][T15063] ? skb_clone+0x190/0x3f0 [ 904.280157][T15063] skb_clone+0x190/0x3f0 [ 904.280198][T15063] netlink_broadcast_filtered+0xb19/0xf10 [ 904.280254][T15063] ? sprintf+0xcc/0x100 [ 904.280292][T15063] ? __pfx_netlink_broadcast_filtered+0x10/0x10 [ 904.280344][T15063] ? netlink_has_listeners+0x20f/0x430 [ 904.280388][T15063] netlink_broadcast+0x39/0x50 [ 904.280431][T15063] kobject_uevent_env+0xc6a/0x1870 [ 904.280470][T15063] ? bus_to_subsys+0x12d/0x160 [ 904.280513][T15063] device_add+0x10dd/0x1a70 [ 904.280550][T15063] ? __pfx_device_add+0x10/0x10 [ 904.280579][T15063] ? __pfx___mutex_lock+0x10/0x10 [ 904.280625][T15063] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 904.280678][T15063] input_register_device+0x7e8/0x1130 [ 904.280731][T15063] uinput_ioctl_handler.isra.0+0x1357/0x1df0 [ 904.280773][T15063] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 904.280826][T15063] ? find_held_lock+0x2b/0x80 [ 904.280906][T15063] ? __pfx_uinput_ioctl+0x10/0x10 [ 904.280944][T15063] __x64_sys_ioctl+0x190/0x200 [ 904.280994][T15063] do_syscall_64+0xcd/0x230 [ 904.281043][T15063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.281075][T15063] RIP: 0033:0x7fe77d18e169 [ 904.281099][T15063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 904.281133][T15063] RSP: 002b:00007fe77df82038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 904.281162][T15063] RAX: ffffffffffffffda RBX: 00007fe77d3b5fa0 RCX: 00007fe77d18e169 [ 904.281182][T15063] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 904.281201][T15063] RBP: 00007fe77d210a68 R08: 0000000000000000 R09: 0000000000000000 [ 904.281220][T15063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 904.281239][T15063] R13: 0000000000000000 R14: 00007fe77d3b5fa0 R15: 00007ffd2747e7f8 [ 904.281278][T15063] [ 904.525500][ C1] vkms_vblank_simulate: vblank timer overrun [ 904.621127][T15063] input: isc as /devices/virtual/input/input108 [ 904.819432][T15056] ima: policy update failed [ 904.824304][ T30] audit: type=1802 audit(6039901727.445:150): pid=15056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.2144" res=0 errno=0 [ 905.073380][T15065] input: isc as /devices/virtual/input/input109 [ 907.568234][T15102] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2155'. [ 907.680862][T15103] netlink: 322 bytes leftover after parsing attributes in process `syz.0.2155'. [ 907.725004][ T30] audit: type=1807 audit(6039901730.345:151): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWñ:¿\t‰_¥Ÿü7©Ó¦–Ó^¸´gq%ḦrêOŽ res=0 [ 907.772304][ T30] audit: type=1802 audit(6039901730.345:152): pid=15103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.2155" res=0 errno=0 [ 907.826201][T15105] input: isc as /devices/virtual/input/input111 [ 907.861671][T15107] input: isc as /devices/virtual/input/input112 [ 908.360927][T15101] ima: policy update failed [ 908.371066][ T30] audit: type=1802 audit(6039901730.985:153): pid=15101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.2155" res=0 errno=0 [ 908.428128][T15123] block nbd8: NBD_DISCONNECT [ 910.630729][T15148] input: isc as /devices/virtual/input/input114 [ 910.660335][T15149] input: isc as /devices/virtual/input/input115 [ 910.705873][T15149] FAULT_INJECTION: forcing a failure. [ 910.705873][T15149] name failslab, interval 1, probability 0, space 0, times 0 [ 910.758131][T15149] CPU: 1 UID: 0 PID: 15149 Comm: syz.2.2169 Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0 PREEMPT(full) [ 910.758183][T15149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 910.758206][T15149] Call Trace: [ 910.758217][T15149] [ 910.758231][T15149] dump_stack_lvl+0x16c/0x1f0 [ 910.758301][T15149] should_fail_ex+0x512/0x640 [ 910.758342][T15149] ? __kmalloc_noprof+0xbf/0x510 [ 910.758388][T15149] ? kobj_map+0x81/0x470 [ 910.758414][T15149] should_failslab+0xc2/0x120 [ 910.758459][T15149] __kmalloc_noprof+0xd2/0x510 [ 910.758499][T15149] ? __pfx___debug_object_init+0x10/0x10 [ 910.758562][T15149] kobj_map+0x81/0x470 [ 910.758591][T15149] ? __pfx_exact_match+0x10/0x10 [ 910.758628][T15149] ? __pfx_exact_lock+0x10/0x10 [ 910.758674][T15149] cdev_add+0xa7/0x1a0 [ 910.758710][T15149] cdev_device_add+0xa6/0x1e0 [ 910.758750][T15149] evdev_connect+0x3a4/0x4c0 [ 910.758785][T15149] input_attach_handler.isra.0+0x181/0x260 [ 910.758840][T15149] input_register_device+0xa84/0x1130 [ 910.758897][T15149] uinput_ioctl_handler.isra.0+0x1357/0x1df0 [ 910.758945][T15149] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 910.758999][T15149] ? find_held_lock+0x2b/0x80 [ 910.759057][T15149] ? __pfx_uinput_ioctl+0x10/0x10 [ 910.759097][T15149] __x64_sys_ioctl+0x190/0x200 [ 910.759153][T15149] do_syscall_64+0xcd/0x230 [ 910.759206][T15149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.759241][T15149] RIP: 0033:0x7fb5ca98e169 [ 910.759281][T15149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 910.759316][T15149] RSP: 002b:00007fb5cb742038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 910.759349][T15149] RAX: ffffffffffffffda RBX: 00007fb5cabb5fa0 RCX: 00007fb5ca98e169 [ 910.759373][T15149] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 910.759395][T15149] RBP: 00007fb5caa10a68 R08: 0000000000000000 R09: 0000000000000000 [ 910.759416][T15149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 910.759435][T15149] R13: 0000000000000000 R14: 00007fb5cabb5fa0 R15: 00007ffdffc544e8 [ 910.759478][T15149] [ 910.972861][ C1] vkms_vblank_simulate: vblank timer overrun [ 911.086381][T15149] input: failed to attach handler evdev to device input115, error: -12 [ 911.363169][T15159] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2173'. [ 911.491649][T15164] netlink: 322 bytes leftover after parsing attributes in process `syz.0.2173'. [ 911.638488][ T30] audit: type=1807 audit(6039901734.235:154): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWñ:¿\t‰_¥Ÿü7©Ó¦–Ó^¸´gq%ḦrêOŽ res=0 [ 911.668913][ T30] audit: type=1802 audit(6039901734.235:155): pid=15164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.2173" res=0 errno=0 [ 912.175997][T15158] ima: policy update failed [ 912.188795][ T30] audit: type=1802 audit(6039901734.805:156): pid=15158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.2173" res=0 errno=0 [ 913.986924][T15191] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 914.013024][ C1] vkms_vblank_simulate: vblank timer overrun [ 914.111593][T15191] CIFS mount error: No usable UNC path provided in device string! [ 914.111593][T15191] [ 914.216997][T15191] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 914.339574][T15200] input: isc as /devices/virtual/input/input117 [ 915.033981][T15203] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2182'. [ 915.128402][T15203] bridge0: port 2(bridge_slave_1) entered disabled state [ 915.180240][T15203] bridge_slave_1 (unregistering): left allmulticast mode [ 915.196187][T15203] bridge_slave_1 (unregistering): left promiscuous mode [ 915.214575][T15203] bridge0: port 2(bridge_slave_1) entered disabled state [ 916.091697][T15219] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2185'. [ 916.154171][T15220] input: isc as /devices/virtual/input/input118 [ 916.193669][T15221] netlink: 322 bytes leftover after parsing attributes in process `syz.3.2185'. [ 916.193979][T15220] FAULT_INJECTION: forcing a failure. [ 916.193979][T15220] name failslab, interval 1, probability 0, space 0, times 0 [ 916.259626][T15220] CPU: 0 UID: 0 PID: 15220 Comm: syz.0.2186 Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0 PREEMPT(full) [ 916.259674][T15220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 916.259694][T15220] Call Trace: [ 916.259706][T15220] [ 916.259719][T15220] dump_stack_lvl+0x16c/0x1f0 [ 916.259774][T15220] should_fail_ex+0x512/0x640 [ 916.259823][T15220] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 916.259863][T15220] should_failslab+0xc2/0x120 [ 916.259910][T15220] __kmalloc_cache_noprof+0x6a/0x3e0 [ 916.259947][T15220] ? evdev_connect+0x82/0x4c0 [ 916.259985][T15220] evdev_connect+0x82/0x4c0 [ 916.260021][T15220] input_attach_handler.isra.0+0x181/0x260 [ 916.260083][T15220] input_register_device+0xa84/0x1130 [ 916.260144][T15220] uinput_ioctl_handler.isra.0+0x1357/0x1df0 [ 916.260193][T15220] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 916.260250][T15220] ? find_held_lock+0x2b/0x80 [ 916.260308][T15220] ? __pfx_uinput_ioctl+0x10/0x10 [ 916.260351][T15220] __x64_sys_ioctl+0x190/0x200 [ 916.260404][T15220] do_syscall_64+0xcd/0x230 [ 916.260458][T15220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.260491][T15220] RIP: 0033:0x7f273738e169 [ 916.260517][T15220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 916.260550][T15220] RSP: 002b:00007f273814a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 916.260581][T15220] RAX: ffffffffffffffda RBX: 00007f27375b5fa0 RCX: 00007f273738e169 [ 916.260604][T15220] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 916.260624][T15220] RBP: 00007f2737410a68 R08: 0000000000000000 R09: 0000000000000000 [ 916.260645][T15220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 916.260665][T15220] R13: 0000000000000000 R14: 00007f27375b5fa0 R15: 00007ffe20288a28 [ 916.260707][T15220] [ 916.260723][T15220] input: failed to attach handler evdev to device input118, error: -12 [ 916.464664][ T30] audit: type=1807 audit(6039901738.875:157): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWñ:¿\t‰_¥Ÿü7©Ó¦–Ó^¸´gq%ḦrêOŽ res=0 [ 916.482030][ T30] audit: type=1802 audit(6039901738.875:158): pid=15221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.2185" res=0 errno=0 [ 916.901947][T15217] ima: policy update failed [ 916.932329][ T30] audit: type=1802 audit(6039901739.545:159): pid=15217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.2185" res=0 errno=0 [ 918.453429][T15246] CIFS mount error: No usable UNC path provided in device string! [ 918.453429][T15246] [ 918.463825][T15246] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 919.832172][T15273] input: isc as /devices/virtual/input/input120 [ 919.938646][T15273] FAULT_INJECTION: forcing a failure. [ 919.938646][T15273] name failslab, interval 1, probability 0, space 0, times 0 [ 920.066646][T15273] CPU: 0 UID: 0 PID: 15273 Comm: syz.0.2199 Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0 PREEMPT(full) [ 920.066682][T15273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 920.066697][T15273] Call Trace: [ 920.066704][T15273] [ 920.066717][T15273] dump_stack_lvl+0x16c/0x1f0 [ 920.066773][T15273] should_fail_ex+0x512/0x640 [ 920.066814][T15273] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 920.066856][T15273] should_failslab+0xc2/0x120 [ 920.066892][T15273] __kmalloc_cache_noprof+0x6a/0x3e0 [ 920.066918][T15273] ? evdev_connect+0x82/0x4c0 [ 920.066945][T15273] evdev_connect+0x82/0x4c0 [ 920.066969][T15273] input_attach_handler.isra.0+0x181/0x260 [ 920.067011][T15273] input_register_device+0xa84/0x1130 [ 920.067052][T15273] uinput_ioctl_handler.isra.0+0x1357/0x1df0 [ 920.067088][T15273] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 920.067125][T15273] ? find_held_lock+0x2b/0x80 [ 920.067165][T15273] ? __pfx_uinput_ioctl+0x10/0x10 [ 920.067194][T15273] __x64_sys_ioctl+0x190/0x200 [ 920.067231][T15273] do_syscall_64+0xcd/0x230 [ 920.067269][T15273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.067294][T15273] RIP: 0033:0x7f273738e169 [ 920.067312][T15273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 920.067336][T15273] RSP: 002b:00007f273814a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 920.067358][T15273] RAX: ffffffffffffffda RBX: 00007f27375b5fa0 RCX: 00007f273738e169 [ 920.067374][T15273] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 920.067388][T15273] RBP: 00007f2737410a68 R08: 0000000000000000 R09: 0000000000000000 [ 920.067403][T15273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 920.067417][T15273] R13: 0000000000000000 R14: 00007f27375b5fa0 R15: 00007ffe20288a28 [ 920.067447][T15273] [ 920.259595][T15273] input: failed to attach handler evdev to device input120, error: -12 [ 920.557618][T15279] netlink: 322 bytes leftover after parsing attributes in process `syz.0.2200'. [ 920.670259][ T30] audit: type=1807 audit(6039901743.285:160): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWñ:¿\t‰_¥Ÿü7©Ó¦–Ó^¸´gq%ḦrêOŽ res=0 [ 920.700314][ T30] audit: type=1802 audit(6039901743.285:161): pid=15280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.2200" res=0 errno=0 [ 921.299664][T15277] ima: policy update failed [ 921.309564][ T30] audit: type=1802 audit(6039901743.925:162): pid=15277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.2200" res=0 errno=0 [ 922.249343][T15287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2202'. [ 922.423543][T15287] openvswitch: .SR: Dropping previously announced user features [ 924.331852][T15309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2208'. [ 924.411984][T15314] block nbd8: NBD_DISCONNECT [ 924.441081][T15315] netlink: 322 bytes leftover after parsing attributes in process `syz.3.2210'. [ 924.495330][ T30] audit: type=1807 audit(6039901747.115:163): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWñ:¿\t‰_¥Ÿü7©Ó¦–Ó^¸´gq%ḦrêOŽ res=0 [ 924.580665][ T30] audit: type=1802 audit(6039901747.115:164): pid=15317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.2210" res=0 errno=0 [ 925.209735][T15312] ima: policy update failed [ 925.216999][ T30] audit: type=1802 audit(6039901747.835:165): pid=15312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.2210" res=0 errno=0 [ 926.533413][T15332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2214'. [ 926.559543][T15332] openvswitch: .SR: Dropping previously announced user features [ 928.269772][T15364] netlink: 322 bytes leftover after parsing attributes in process `syz.2.2222'. [ 928.361647][ T30] audit: type=1807 audit(6039901750.985:166): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWñ:¿\t‰_¥Ÿü7©Ó¦–Ó^¸´gq%ḦrêOŽ res=0 [ 928.401120][ T30] audit: type=1802 audit(6039901751.005:167): pid=15366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.2222" res=0 errno=0 [ 928.959517][T15357] ima: policy update failed [ 928.975697][ T30] audit: type=1802 audit(6039901751.585:168): pid=15357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.2222" res=0 errno=0 [ 929.704418][T15377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2226'. [ 930.062712][T15377] openvswitch: .SR: Dropping previously announced user features [ 930.076492][T15382] input: isc as /devices/virtual/input/input123 [ 930.725291][T15390] FAULT_INJECTION: forcing a failure. [ 930.725291][T15390] name failslab, interval 1, probability 0, space 0, times 0 [ 930.826149][T15390] CPU: 0 UID: 0 PID: 15390 Comm: syz.2.2230 Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0 PREEMPT(full) [ 930.826197][T15390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 930.826217][T15390] Call Trace: [ 930.826227][T15390] [ 930.826241][T15390] dump_stack_lvl+0x16c/0x1f0 [ 930.826294][T15390] should_fail_ex+0x512/0x640 [ 930.826334][T15390] ? fs_reclaim_acquire+0xae/0x150 [ 930.826389][T15390] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 930.826437][T15390] should_failslab+0xc2/0x120 [ 930.826479][T15390] __kmalloc_noprof+0xd2/0x510 [ 930.826530][T15390] tomoyo_realpath_from_path+0xc2/0x6e0 [ 930.826602][T15390] tomoyo_check_open_permission+0x2ab/0x3c0 [ 930.826648][T15390] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 930.826688][T15390] ? __lock_acquire+0xaa4/0x1ba0 [ 930.826776][T15390] ? find_held_lock+0x2b/0x80 [ 930.826822][T15390] tomoyo_file_open+0x6b/0x90 [ 930.826856][T15390] security_file_open+0x84/0x1e0 [ 930.826902][T15390] do_dentry_open+0x596/0x1c10 [ 930.826954][T15390] vfs_open+0x82/0x3f0 [ 930.827009][T15390] path_openat+0x1e5e/0x2d40 [ 930.827061][T15390] ? __pfx_path_openat+0x10/0x10 [ 930.827098][T15390] ? stack_trace_save+0x8e/0xc0 [ 930.827134][T15390] ? __pfx_stack_trace_save+0x10/0x10 [ 930.827177][T15390] do_filp_open+0x20b/0x470 [ 930.827213][T15390] ? __pfx_do_filp_open+0x10/0x10 [ 930.827246][T15390] ? kasan_save_stack+0x42/0x60 [ 930.827281][T15390] ? kasan_save_stack+0x33/0x60 [ 930.827367][T15390] file_open_name+0x2a3/0x450 [ 930.827417][T15390] ? __pfx_file_open_name+0x10/0x10 [ 930.827481][T15390] acct_on+0x77/0x870 [ 930.827528][T15390] __x64_sys_acct+0xaf/0x230 [ 930.827571][T15390] ? lockdep_hardirqs_on+0x7c/0x110 [ 930.827625][T15390] do_syscall_64+0xcd/0x230 [ 930.827676][T15390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.827710][T15390] RIP: 0033:0x7fb5ca98e169 [ 930.827736][T15390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 930.827769][T15390] RSP: 002b:00007fb5cb742038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 930.827800][T15390] RAX: ffffffffffffffda RBX: 00007fb5cabb5fa0 RCX: 00007fb5ca98e169 [ 930.827820][T15390] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000280 [ 930.827839][T15390] RBP: 00007fb5cb742090 R08: 0000000000000000 R09: 0000000000000000 [ 930.827860][T15390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 930.827879][T15390] R13: 0000000000000001 R14: 00007fb5cabb5fa0 R15: 00007ffdffc544e8 [ 930.827922][T15390] [ 930.848564][T15390] ERROR: Out of memory at tomoyo_realpath_from_path. [ 931.594901][T15403] netlink: 322 bytes leftover after parsing attributes in process `syz.2.2233'. [ 931.672680][ T30] audit: type=1807 audit(6039901754.285:169): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWñ:¿\t‰_¥Ÿü7©Ó¦–Ó^¸´gq%ḦrêOŽ res=0 [ 931.733671][ T30] audit: type=1802 audit(6039901754.285:170): pid=15406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.2233" res=0 errno=0 [ 932.360640][T15401] ima: policy update failed [ 932.365382][ T30] audit: type=1802 audit(6039901754.985:171): pid=15401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.2233" res=0 errno=0 [ 932.801316][T15426] input: isc as /devices/virtual/input/input125 [ 934.650960][T15455] netlink: 322 bytes leftover after parsing attributes in process `syz.1.2248'. [ 934.708597][ T30] audit: type=1807 audit(6039901757.325:172): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWñ:¿\t‰_¥Ÿü7©Ó¦–Ó^¸´gq%ḦrêOŽ res=0 [ 934.744088][ T30] audit: type=1802 audit(6039901757.325:173): pid=15456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.2248" res=0 errno=0 [ 935.354032][T15452] ima: policy update failed [ 935.399158][ T30] audit: type=1802 audit(6039901758.005:174): pid=15452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.2248" res=0 errno=0 [ 936.786080][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.792826][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.971216][T15486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2255'. [ 938.153779][T15486] openvswitch: .SR: Dropping previously announced user features [ 939.602887][T15508] netlink: 322 bytes leftover after parsing attributes in process `syz.0.2260'. [ 939.673489][ T30] audit: type=1807 audit(6039901762.295:175): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWñ:¿\t‰_¥Ÿü7©Ó¦–Ó^¸´gq%ḦrêOŽ res=0 [ 939.711792][ T30] audit: type=1802 audit(6039901762.295:176): pid=15510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.2260" res=0 errno=0 [ 940.337437][T15504] ima: policy update failed [ 940.376407][ T30] audit: type=1802 audit(6039901762.975:177): pid=15504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.2260" res=0 errno=0 [ 942.308924][T15540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2267'. [ 942.470791][T15540] openvswitch: .SR: Dropping previously announced user features [ 942.919807][T15551] input: isc as /devices/virtual/input/input127 [ 943.316029][T15559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2272'. [ 943.382626][T15557] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2271'. [ 943.415541][T15558] input: isc as /devices/virtual/input/input128 [ 943.565417][T15559] openvswitch: .SR: Dropping previously announced user features [ 943.789438][T15564] netlink: 330 bytes leftover after parsing attributes in process `syz.0.2271'. [ 943.864425][ T30] audit: type=1807 audit(6039901766.485:178): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWñ:¿\t‰_¥Ÿü7©Ó¦–Ó^¸´gq%ḦrêOŽ res=0 [ 943.918490][ T30] audit: type=1802 audit(6039901766.485:179): pid=15566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.2271" res=0 errno=0 [ 944.070645][T15555] ima: policy update failed [ 944.070837][ T30] audit: type=1802 audit(6039901766.695:180): pid=15555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.2271" res=0 errno=0 [ 944.829928][T15579] FAULT_INJECTION: forcing a failure. [ 944.829928][T15579] name failslab, interval 1, probability 0, space 0, times 0 [ 944.885354][T15579] CPU: 0 UID: 0 PID: 15579 Comm: syz.0.2277 Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0 PREEMPT(full) [ 944.885398][T15579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 944.885417][T15579] Call Trace: [ 944.885427][T15579] [ 944.885438][T15579] dump_stack_lvl+0x16c/0x1f0 [ 944.885491][T15579] should_fail_ex+0x512/0x640 [ 944.885528][T15579] ? __kmalloc_noprof+0xbf/0x510 [ 944.885568][T15579] ? kernfs_fop_write_iter+0x237/0x510 [ 944.885611][T15579] should_failslab+0xc2/0x120 [ 944.885653][T15579] __kmalloc_noprof+0xd2/0x510 [ 944.885702][T15579] kernfs_fop_write_iter+0x237/0x510 [ 944.885754][T15579] vfs_write+0x5ba/0x1180 [ 944.885790][T15579] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 944.885839][T15579] ? __pfx_vfs_write+0x10/0x10 [ 944.885870][T15579] ? find_held_lock+0x2b/0x80 [ 944.885929][T15579] __x64_sys_pwrite64+0x1f4/0x250 [ 944.885966][T15579] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 944.886000][T15579] ? rcu_is_watching+0x12/0xc0 [ 944.886045][T15579] do_syscall_64+0xcd/0x230 [ 944.886095][T15579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.886127][T15579] RIP: 0033:0x7f273738e169 [ 944.886152][T15579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 944.886182][T15579] RSP: 002b:00007f273814a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 944.886213][T15579] RAX: ffffffffffffffda RBX: 00007f27375b5fa0 RCX: 00007f273738e169 [ 944.886234][T15579] RDX: 0000000000000004 RSI: 0000200000000280 RDI: 0000000000000003 [ 944.886259][T15579] RBP: 00007f273814a090 R08: 0000000000000000 R09: 0000000000000000 [ 944.886280][T15579] R10: 0000000000088000 R11: 0000000000000246 R12: 0000000000000001 [ 944.886299][T15579] R13: 0000000000000000 R14: 00007f27375b5fa0 R15: 00007ffe20288a28 [ 944.886347][T15579] [ 945.739002][T15595] input: isc as /devices/virtual/input/input130 [ 946.079067][T15600] input: isc as /devices/virtual/input/input131 [ 946.647397][T15604] random: crng reseeded on system resumption [ 947.792610][T15610] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2285'. [ 947.883843][T15614] netlink: 330 bytes leftover after parsing attributes in process `syz.2.2285'. [ 947.926837][ T30] audit: type=1807 audit(6039901770.545:181): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWñ:¿\t‰_¥Ÿü7©Ó¦–Ó^¸´gq%ḦrêOŽ res=0 [ 948.070673][ T30] audit: type=1802 audit(6039901770.565:182): pid=15614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.2285" res=0 errno=0 [ 948.608023][T15609] ima: policy update failed [ 948.618517][ T30] audit: type=1802 audit(6039901771.225:183): pid=15609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.2285" res=0 errno=0 [ 949.480256][T15641] input: isc as /devices/virtual/input/input132 [ 950.059241][T15649] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2297'. [ 950.219397][T15648] FAULT_INJECTION: forcing a failure. [ 950.219397][T15648] name failslab, interval 1, probability 0, space 0, times 0 [ 950.339823][T15649] netlink: 330 bytes leftover after parsing attributes in process `syz.0.2297'. [ 950.391377][T15648] CPU: 1 UID: 0 PID: 15648 Comm: syz.1.2293 Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0 PREEMPT(full) [ 950.391430][T15648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 950.391452][T15648] Call Trace: [ 950.391464][T15648] [ 950.391478][T15648] dump_stack_lvl+0x16c/0x1f0 [ 950.391534][T15648] should_fail_ex+0x512/0x640 [ 950.391576][T15648] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 950.391618][T15648] should_failslab+0xc2/0x120 [ 950.391666][T15648] __kmalloc_cache_noprof+0x6a/0x3e0 [ 950.391701][T15648] ? ww_mutex_lock+0x37/0x160 [ 950.391752][T15648] ? vkms_plane_duplicate_state+0x45/0x130 [ 950.391799][T15648] ? modeset_lock+0x114/0x6e0 [ 950.391860][T15648] vkms_plane_duplicate_state+0x45/0x130 [ 950.391907][T15648] drm_atomic_get_plane_state+0x20b/0x590 [ 950.391950][T15648] drm_client_modeset_commit_atomic+0x237/0x7e0 [ 950.392003][T15648] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 950.392089][T15648] drm_client_modeset_commit_locked+0x14d/0x580 [ 950.392134][T15648] drm_client_modeset_commit+0x4f/0x80 [ 950.392172][T15648] __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200 [ 950.392230][T15648] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 950.392276][T15648] drm_fbdev_client_restore+0x2c/0x40 [ 950.392319][T15648] drm_client_dev_restore+0x1f3/0x2a0 [ 950.392363][T15648] drm_release+0x2c4/0x360 [ 950.392398][T15648] ? __pfx_drm_release+0x10/0x10 [ 950.392428][T15648] __fput+0x3ff/0xb70 [ 950.392484][T15648] task_work_run+0x14d/0x240 [ 950.392522][T15648] ? __pfx_task_work_run+0x10/0x10 [ 950.392556][T15648] ? __pfx___do_sys_close_range+0x10/0x10 [ 950.392592][T15648] ? rcu_is_watching+0x12/0xc0 [ 950.392637][T15648] syscall_exit_to_user_mode+0x27b/0x2a0 [ 950.392691][T15648] do_syscall_64+0xda/0x230 [ 950.392746][T15648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.392781][T15648] RIP: 0033:0x7fe77d18e169 [ 950.392809][T15648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 950.392848][T15648] RSP: 002b:00007fe77df40038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 950.392881][T15648] RAX: 0000000000000000 RBX: 00007fe77d3b6160 RCX: 00007fe77d18e169 [ 950.392902][T15648] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 950.392923][T15648] RBP: 00007fe77d210a68 R08: 0000000000000000 R09: 0000000000000000 [ 950.392944][T15648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 950.392965][T15648] R13: 0000000000000000 R14: 00007fe77d3b6160 R15: 00007ffd2747e7f8 [ 950.393012][T15648] [ 950.651945][ C1] vkms_vblank_simulate: vblank timer overrun [ 950.708525][ T30] audit: type=1807 audit(6039901773.315:184): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWñ:¿\t‰_¥Ÿü7©Ó¦–Ó^¸´gq%ḦrêOŽ res=0 [ 950.748790][ T30] audit: type=1802 audit(6039901773.315:185): pid=15649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.2297" res=0 errno=0 [ 950.837256][T15647] ima: policy update failed [ 950.968125][ T30] audit: type=1802 audit(6039901773.475:186): pid=15647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.2297" res=0 errno=0 [ 952.470847][T15677] input: isc as /devices/virtual/input/input135 [ 952.849385][T15683] FAULT_INJECTION: forcing a failure. [ 952.849385][T15683] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 952.968824][T15683] CPU: 1 UID: 0 PID: 15683 Comm: syz.1.2307 Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0 PREEMPT(full) [ 952.968871][T15683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 952.968890][T15683] Call Trace: [ 952.968901][T15683] [ 952.968914][T15683] dump_stack_lvl+0x16c/0x1f0 [ 952.968968][T15683] should_fail_ex+0x512/0x640 [ 952.969015][T15683] _copy_to_user+0x32/0xd0 [ 952.969061][T15683] simple_read_from_buffer+0xcb/0x170 [ 952.969118][T15683] proc_fail_nth_read+0x197/0x270 [ 952.969170][T15683] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 952.969223][T15683] ? rw_verify_area+0xcf/0x680 [ 952.969274][T15683] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 952.969325][T15683] vfs_read+0x1de/0xc70 [ 952.969365][T15683] ? __pfx___mutex_lock+0x10/0x10 [ 952.969413][T15683] ? __pfx_vfs_read+0x10/0x10 [ 952.969459][T15683] ? __fget_files+0x20e/0x3c0 [ 952.969503][T15683] ksys_read+0x12a/0x240 [ 952.969537][T15683] ? __pfx_ksys_read+0x10/0x10 [ 952.969592][T15683] ? rcu_is_watching+0x12/0xc0 [ 952.969645][T15683] do_syscall_64+0xcd/0x230 [ 952.969699][T15683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.969733][T15683] RIP: 0033:0x7fe77d18cb7c [ 952.969759][T15683] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 952.969791][T15683] RSP: 002b:00007fe77df82030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 952.969820][T15683] RAX: ffffffffffffffda RBX: 00007fe77d3b5fa0 RCX: 00007fe77d18cb7c [ 952.969842][T15683] RDX: 000000000000000f RSI: 00007fe77df820a0 RDI: 0000000000000003 [ 952.969862][T15683] RBP: 00007fe77df82090 R08: 0000000000000000 R09: 0000000000000000 [ 952.969884][T15683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 952.969903][T15683] R13: 0000000000000001 R14: 00007fe77d3b5fa0 R15: 00007ffd2747e7f8 [ 952.969946][T15683] [ 953.165112][ C1] vkms_vblank_simulate: vblank timer overrun [ 953.833482][T15679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2305'. [ 954.054798][T15679] openvswitch: .SR: Dropping previously announced user features [ 955.639270][T15713] input: isc as /devices/virtual/input/input138 [ 957.089166][T15731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2321'. [ 957.175168][T15731] openvswitch: .SR: Dropping previously announced user features [ 958.598816][T15754] input: isc as /devices/virtual/input/input139 [ 960.224759][ T5854] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 960.242652][ T5854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 960.288986][ T5854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 960.310983][ T5854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 960.320528][ T5854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 960.730573][T15777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2334'. [ 960.747548][T15777] openvswitch: .SR: Dropping previously announced user features [ 961.313775][T15782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2335'. [ 961.444282][T15782] openvswitch: .SR: Dropping previously announced user features [ 961.862237][ T53] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.967065][T15770] chnl_net:caif_netlink_parms(): no params data found [ 962.071668][ T53] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.284400][ T53] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.379029][ T5852] Bluetooth: hci0: command tx timeout [ 962.693469][ T53] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.069101][T15770] bridge0: port 1(bridge_slave_0) entered blocking state [ 963.076339][T15770] bridge0: port 1(bridge_slave_0) entered disabled state [ 963.086216][T15799] block nbd8: NBD_DISCONNECT [ 963.095468][T15770] bridge_slave_0: entered allmulticast mode [ 963.110625][T15770] bridge_slave_0: entered promiscuous mode [ 963.198568][T15770] bridge0: port 2(bridge_slave_1) entered blocking state [ 963.216108][T15770] bridge0: port 2(bridge_slave_1) entered disabled state [ 963.236450][T15770] bridge_slave_1: entered allmulticast mode [ 963.257656][T15770] bridge_slave_1: entered promiscuous mode [ 963.953742][T15770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 964.069459][T15770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 964.376092][ T53] bridge_slave_1: left allmulticast mode [ 964.388511][ T53] bridge_slave_1: left promiscuous mode [ 964.395610][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 964.458625][ T5852] Bluetooth: hci0: command tx timeout [ 964.611714][ T53] bridge_slave_0: left allmulticast mode [ 964.646581][ T53] bridge_slave_0: left promiscuous mode [ 964.692827][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 964.921523][T15819] input: isc as /devices/virtual/input/input140 [ 965.251639][T15826] input: isc as /devices/virtual/input/input141 [ 965.258305][T15826] FAULT_INJECTION: forcing a failure. [ 965.258305][T15826] name failslab, interval 1, probability 0, space 0, times 0 [ 965.276583][T15826] CPU: 1 UID: 0 PID: 15826 Comm: syz.1.2346 Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0 PREEMPT(full) [ 965.276635][T15826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 965.276657][T15826] Call Trace: [ 965.276668][T15826] [ 965.276682][T15826] dump_stack_lvl+0x16c/0x1f0 [ 965.276738][T15826] should_fail_ex+0x512/0x640 [ 965.276780][T15826] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 965.276829][T15826] should_failslab+0xc2/0x120 [ 965.276875][T15826] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 965.276919][T15826] ? __kernfs_new_node+0xd2/0x8a0 [ 965.276962][T15826] __kernfs_new_node+0xd2/0x8a0 [ 965.276998][T15826] ? kernfs_add_one+0x37d/0x840 [ 965.277037][T15826] ? __pfx___kernfs_new_node+0x10/0x10 [ 965.277083][T15826] ? find_held_lock+0x2b/0x80 [ 965.277122][T15826] ? kernfs_root+0xee/0x2a0 [ 965.277165][T15826] kernfs_new_node+0x13c/0x1e0 [ 965.277214][T15826] __kernfs_create_file+0x53/0x350 [ 965.277268][T15826] sysfs_add_file_mode_ns+0x207/0x3c0 [ 965.277336][T15826] sysfs_create_file_ns+0x13d/0x1d0 [ 965.277393][T15826] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 965.277447][T15826] ? down_read+0x13d/0x480 [ 965.277478][T15826] ? __pfx___up_read+0x10/0x10 [ 965.277532][T15826] ? acpi_device_notify+0x351/0x480 [ 965.277609][T15826] device_create_file+0xf2/0x1e0 [ 965.277656][T15826] device_add+0x2bf/0x1a70 [ 965.277698][T15826] ? __pfx_device_add+0x10/0x10 [ 965.277735][T15826] ? __pfx_exact_lock+0x10/0x10 [ 965.277781][T15826] ? kobject_get+0xbb/0x150 [ 965.277838][T15826] cdev_device_add+0xc2/0x1e0 [ 965.277881][T15826] evdev_connect+0x3a4/0x4c0 [ 965.277919][T15826] input_attach_handler.isra.0+0x181/0x260 [ 965.277980][T15826] input_register_device+0xa84/0x1130 [ 965.278044][T15826] uinput_ioctl_handler.isra.0+0x1357/0x1df0 [ 965.278095][T15826] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 965.278150][T15826] ? find_held_lock+0x2b/0x80 [ 965.278206][T15826] ? __pfx_uinput_ioctl+0x10/0x10 [ 965.278250][T15826] __x64_sys_ioctl+0x190/0x200 [ 965.278304][T15826] do_syscall_64+0xcd/0x230 [ 965.278357][T15826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 965.278390][T15826] RIP: 0033:0x7fe77d18e169 [ 965.278415][T15826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 965.278449][T15826] RSP: 002b:00007fe77df82038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 965.278479][T15826] RAX: ffffffffffffffda RBX: 00007fe77d3b5fa0 RCX: 00007fe77d18e169 [ 965.278502][T15826] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 965.278523][T15826] RBP: 00007fe77d210a68 R08: 0000000000000000 R09: 0000000000000000 [ 965.278544][T15826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 965.278577][T15826] R13: 0000000000000000 R14: 00007fe77d3b5fa0 R15: 00007ffd2747e7f8 [ 965.278623][T15826] [ 965.629934][T15826] input: failed to attach handler evdev to device input141, error: -12 [ 966.123550][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 966.156254][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 966.168298][ T53] bond0 (unregistering): Released all slaves [ 966.204272][T15770] team0: Port device team_slave_0 added [ 966.307334][T15770] team0: Port device team_slave_1 added [ 966.343143][ T53] .SR: left promiscuous mode [ 966.538671][ T5852] Bluetooth: hci0: command tx timeout [ 966.971077][T15770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 966.978100][T15770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 967.417179][T15770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 967.431696][T15770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 967.439770][T15770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 967.466078][T15770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 967.592170][T15843] input: isc as /devices/virtual/input/input142 [ 967.609161][T15843] FAULT_INJECTION: forcing a failure. [ 967.609161][T15843] name failslab, interval 1, probability 0, space 0, times 0 [ 967.635060][T15843] CPU: 1 UID: 0 PID: 15843 Comm: syz.1.2352 Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0 PREEMPT(full) [ 967.635110][T15843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 967.635132][T15843] Call Trace: [ 967.635144][T15843] [ 967.635157][T15843] dump_stack_lvl+0x16c/0x1f0 [ 967.635213][T15843] should_fail_ex+0x512/0x640 [ 967.635253][T15843] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 967.635301][T15843] should_failslab+0xc2/0x120 [ 967.635347][T15843] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 967.635386][T15843] ? __asan_memcpy+0x3c/0x60 [ 967.635420][T15843] ? __kernfs_new_node+0xd2/0x8a0 [ 967.635462][T15843] __kernfs_new_node+0xd2/0x8a0 [ 967.635502][T15843] ? __pfx___kernfs_new_node+0x10/0x10 [ 967.635558][T15843] ? find_held_lock+0x2b/0x80 [ 967.635597][T15843] ? kernfs_root+0xee/0x2a0 [ 967.635641][T15843] kernfs_new_node+0x13c/0x1e0 [ 967.635683][T15843] ? kasan_save_stack+0x42/0x60 [ 967.635727][T15843] kernfs_create_dir_ns+0x4c/0x1a0 [ 967.635775][T15843] sysfs_create_dir_ns+0x13a/0x2b0 [ 967.635810][T15843] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 967.635841][T15843] ? find_held_lock+0x2b/0x80 [ 967.635884][T15843] ? do_raw_spin_unlock+0x172/0x230 [ 967.635921][T15843] kobject_add_internal+0x2c4/0x9b0 [ 967.635985][T15843] kobject_add+0x16e/0x240 [ 967.636017][T15843] ? __pfx_kobject_add+0x10/0x10 [ 967.636051][T15843] ? do_raw_spin_unlock+0x172/0x230 [ 967.636085][T15843] ? kobject_put+0xab/0x5a0 [ 967.636150][T15843] device_add+0x288/0x1a70 [ 967.636193][T15843] ? __pfx_device_add+0x10/0x10 [ 967.636231][T15843] ? __pfx_exact_lock+0x10/0x10 [ 967.636276][T15843] ? kobject_get+0xbb/0x150 [ 967.636331][T15843] cdev_device_add+0xc2/0x1e0 [ 967.636374][T15843] evdev_connect+0x3a4/0x4c0 [ 967.636411][T15843] input_attach_handler.isra.0+0x181/0x260 [ 967.636471][T15843] input_register_device+0xa84/0x1130 [ 967.636540][T15843] uinput_ioctl_handler.isra.0+0x1357/0x1df0 [ 967.636592][T15843] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 967.636648][T15843] ? find_held_lock+0x2b/0x80 [ 967.636707][T15843] ? __pfx_uinput_ioctl+0x10/0x10 [ 967.636750][T15843] __x64_sys_ioctl+0x190/0x200 [ 967.636805][T15843] do_syscall_64+0xcd/0x230 [ 967.636859][T15843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.636894][T15843] RIP: 0033:0x7fe77d18e169 [ 967.636923][T15843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 967.636957][T15843] RSP: 002b:00007fe77df82038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 967.636988][T15843] RAX: ffffffffffffffda RBX: 00007fe77d3b5fa0 RCX: 00007fe77d18e169 [ 967.637011][T15843] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 967.637032][T15843] RBP: 00007fe77d210a68 R08: 0000000000000000 R09: 0000000000000000 [ 967.637053][T15843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 967.637073][T15843] R13: 0000000000000000 R14: 00007fe77d3b5fa0 R15: 00007ffd2747e7f8 [ 967.637118][T15843] [ 967.637158][T15843] kobject: kobject_add_internal failed for event4 (error: -12 parent: input142) [ 967.965029][T15843] input: failed to attach handler evdev to device input142, error: -12 [ 968.099512][T15770] hsr_slave_0: entered promiscuous mode [ 968.108019][T15770] hsr_slave_1: entered promiscuous mode [ 968.121880][T15770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 968.134562][T15770] Cannot create hsr debugfs directory [ 968.334655][T15853] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2355'. [ 968.446672][T15853] netlink: 330 bytes leftover after parsing attributes in process `syz.1.2355'. [ 968.501239][ T30] audit: type=1807 audit(6039901791.125:187): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWñ:¿\t‰_¥Ÿü7©Ó¦–Ó^¸´gq%ḦrêOŽ res=0 [ 968.530304][ T53] hsr_slave_0: left promiscuous mode [ 968.545894][ T53] hsr_slave_1: left promiscuous mode [ 968.551514][ T30] audit: type=1802 audit(6039901791.125:188): pid=15856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.2355" res=0 errno=0 [ 968.572842][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 968.581926][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 968.595617][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 968.605332][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 968.628494][ T5852] Bluetooth: hci0: command tx timeout [ 968.663742][ T53] veth1_macvtap: left promiscuous mode [ 968.674919][ T53] veth0_macvtap: left promiscuous mode [ 968.682707][ T53] veth1_vlan: left promiscuous mode [ 968.691202][ T53] veth0_vlan: left promiscuous mode [ 969.164488][T15852] ima: policy update failed [ 969.173384][ T30] audit: type=1802 audit(6039901791.795:189): pid=15852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.2355" res=0 errno=0 [ 969.433503][ T53] team0 (unregistering): Port device team_slave_1 removed [ 969.497267][ T53] team0 (unregistering): Port device team_slave_0 removed [ 971.207724][T15869] input: isc as /devices/virtual/input/input143 [ 971.216416][T15869] FAULT_INJECTION: forcing a failure. [ 971.216416][T15869] name failslab, interval 1, probability 0, space 0, times 0 [ 971.244794][T15869] CPU: 0 UID: 0 PID: 15869 Comm: syz.3.2359 Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0 PREEMPT(full) [ 971.244846][T15869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 971.244868][T15869] Call Trace: [ 971.244880][T15869] [ 971.244894][T15869] dump_stack_lvl+0x16c/0x1f0 [ 971.244952][T15869] should_fail_ex+0x512/0x640 [ 971.245004][T15869] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 971.245053][T15869] should_failslab+0xc2/0x120 [ 971.245101][T15869] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 971.245145][T15869] ? __kernfs_new_node+0xd2/0x8a0 [ 971.245186][T15869] __kernfs_new_node+0xd2/0x8a0 [ 971.245224][T15869] ? __pfx___kernfs_new_node+0x10/0x10 [ 971.245268][T15869] ? find_held_lock+0x2b/0x80 [ 971.245304][T15869] ? kernfs_root+0xee/0x2a0 [ 971.245347][T15869] kernfs_new_node+0x13c/0x1e0 [ 971.245394][T15869] kernfs_create_link+0xcc/0x240 [ 971.245445][T15869] sysfs_do_create_link_sd+0x90/0x140 [ 971.245482][T15869] sysfs_create_link+0x61/0xc0 [ 971.245515][T15869] device_add+0x62c/0x1a70 [ 971.245555][T15869] ? __pfx_device_add+0x10/0x10 [ 971.245597][T15869] ? __pfx_exact_lock+0x10/0x10 [ 971.245642][T15869] ? kobject_get+0xbb/0x150 [ 971.245701][T15869] cdev_device_add+0xc2/0x1e0 [ 971.245742][T15869] evdev_connect+0x3a4/0x4c0 [ 971.245777][T15869] input_attach_handler.isra.0+0x181/0x260 [ 971.245836][T15869] input_register_device+0xa84/0x1130 [ 971.245893][T15869] uinput_ioctl_handler.isra.0+0x1357/0x1df0 [ 971.245943][T15869] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 971.246003][T15869] ? find_held_lock+0x2b/0x80 [ 971.246062][T15869] ? __pfx_uinput_ioctl+0x10/0x10 [ 971.246106][T15869] __x64_sys_ioctl+0x190/0x200 [ 971.246159][T15869] do_syscall_64+0xcd/0x230 [ 971.246213][T15869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.246248][T15869] RIP: 0033:0x7f83a638e169 [ 971.246276][T15869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 971.246310][T15869] RSP: 002b:00007f83a7235038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 971.246342][T15869] RAX: ffffffffffffffda RBX: 00007f83a65b5fa0 RCX: 00007f83a638e169 [ 971.246365][T15869] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 971.246386][T15869] RBP: 00007f83a6410a68 R08: 0000000000000000 R09: 0000000000000000 [ 971.246406][T15869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 971.246426][T15869] R13: 0000000000000000 R14: 00007f83a65b5fa0 R15: 00007ffc87551b08 [ 971.246467][T15869] [ 971.589053][T15869] input: failed to attach handler evdev to device input143, error: -12 [ 972.176941][T15770] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 972.245856][T15770] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 972.306707][T15770] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 972.402394][T15770] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 972.491226][T15876] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2362'. [ 972.532447][T15876] openvswitch: .SR: Dropping previously announced user features [ 972.631008][T15885] netlink: 322 bytes leftover after parsing attributes in process `syz.2.2364'. [ 972.666720][ T30] audit: type=1807 audit(6039901795.285:190): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWñ:¿\t‰_¥Ÿü7©Ó¦–Ó^¸´gq%ḦrêOŽ res=0 [ 972.720319][ T30] audit: type=1802 audit(6039901795.285:191): pid=15885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.2364" res=0 errno=0 [ 972.982491][T15770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 973.073850][T15770] 8021q: adding VLAN 0 to HW filter on device team0 [ 973.076221][T15888] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2365'. [ 973.195233][T11861] bridge0: port 1(bridge_slave_0) entered blocking state [ 973.202606][T11861] bridge0: port 1(bridge_slave_0) entered forwarding state [ 973.249371][T15889] netlink: 330 bytes leftover after parsing attributes in process `syz.3.2365'. [ 973.277443][ T6370] bridge0: port 2(bridge_slave_1) entered blocking state [ 973.284709][ T6370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 973.377376][T15882] ima: policy update failed [ 973.420904][ T30] audit: type=1802 audit(6039901796.005:192): pid=15882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.2364" res=0 errno=0 [ 973.969584][T15770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 974.060586][T15906] input: isc as /devices/virtual/input/input145 [ 974.083860][T15906] FAULT_INJECTION: forcing a failure. [ 974.083860][T15906] name failslab, interval 1, probability 0, space 0, times 0 [ 974.112115][T15770] veth0_vlan: entered promiscuous mode [ 974.112475][T15906] CPU: 1 UID: 0 PID: 15906 Comm: syz.2.2369 Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0 PREEMPT(full) [ 974.112525][T15906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 974.112549][T15906] Call Trace: [ 974.112562][T15906] [ 974.112575][T15906] dump_stack_lvl+0x16c/0x1f0 [ 974.112634][T15906] should_fail_ex+0x512/0x640 [ 974.112676][T15906] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 974.112728][T15906] should_failslab+0xc2/0x120 [ 974.112785][T15906] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 974.112832][T15906] ? __kernfs_new_node+0xd2/0x8a0 [ 974.112877][T15906] __kernfs_new_node+0xd2/0x8a0 [ 974.112916][T15906] ? kernfs_add_one+0x37d/0x840 [ 974.112959][T15906] ? __pfx___kernfs_new_node+0x10/0x10 [ 974.113007][T15906] ? find_held_lock+0x2b/0x80 [ 974.113045][T15906] ? kernfs_root+0xee/0x2a0 [ 974.113090][T15906] kernfs_new_node+0x13c/0x1e0 [ 974.113141][T15906] __kernfs_create_file+0x53/0x350 [ 974.113197][T15906] sysfs_add_file_mode_ns+0x207/0x3c0 [ 974.113267][T15906] sysfs_create_file_ns+0x13d/0x1d0 [ 974.113327][T15906] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 974.113382][T15906] ? down_read+0x13d/0x480 [ 974.113415][T15906] ? __pfx___up_read+0x10/0x10 [ 974.113473][T15906] ? acpi_device_notify+0x351/0x480 [ 974.113540][T15906] device_create_file+0xf2/0x1e0 [ 974.113589][T15906] device_add+0x2bf/0x1a70 [ 974.113633][T15906] ? __pfx_device_add+0x10/0x10 [ 974.113672][T15906] ? __pfx_exact_lock+0x10/0x10 [ 974.113722][T15906] ? kobject_get+0xbb/0x150 [ 974.113791][T15906] cdev_device_add+0xc2/0x1e0 [ 974.113837][T15906] evdev_connect+0x3a4/0x4c0 [ 974.113876][T15906] input_attach_handler.isra.0+0x181/0x260 [ 974.113940][T15906] input_register_device+0xa84/0x1130 [ 974.114004][T15906] uinput_ioctl_handler.isra.0+0x1357/0x1df0 [ 974.114056][T15906] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 974.114113][T15906] ? find_held_lock+0x2b/0x80 [ 974.114172][T15906] ? __pfx_uinput_ioctl+0x10/0x10 [ 974.114217][T15906] __x64_sys_ioctl+0x190/0x200 [ 974.114274][T15906] do_syscall_64+0xcd/0x230 [ 974.114329][T15906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.114366][T15906] RIP: 0033:0x7fb5ca98e169 [ 974.114396][T15906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 974.114431][T15906] RSP: 002b:00007fb5cb742038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 974.114464][T15906] RAX: ffffffffffffffda RBX: 00007fb5cabb5fa0 RCX: 00007fb5ca98e169 [ 974.114489][T15906] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 974.114512][T15906] RBP: 00007fb5caa10a68 R08: 0000000000000000 R09: 0000000000000000 [ 974.114536][T15906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 974.114557][T15906] R13: 0000000000000000 R14: 00007fb5cabb5fa0 R15: 00007ffdffc544e8 [ 974.114603][T15906] [ 974.400814][T15906] input: failed to attach handler evdev to device input145, error: -12 [ 974.474306][T15770] veth1_vlan: entered promiscuous mode [ 974.603310][T15770] veth0_macvtap: entered promiscuous mode [ 974.622832][T15770] veth1_macvtap: entered promiscuous mode [ 974.691117][T15770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 974.716542][T15770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.738151][T15770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 974.764232][T15770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.796335][T15770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 974.819502][T15770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.841537][T15770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 974.896137][T15770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 974.927156][T15770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.941955][T15770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 975.190235][T15923] netlink: 322 bytes leftover after parsing attributes in process `syz.2.2374'. [ 975.318539][ T30] audit: type=1807 audit(6039901797.885:193): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWñ:¿\t‰_¥Ÿü7©Ó¦–Ó^¸´gq%ḦrêOŽ res=0 [ 975.355690][ T30] audit: type=1802 audit(6039901797.885:194): pid=15924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.2374" res=0 errno=0 [ 975.608283][T15770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.618426][T15770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 975.629664][T15770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.641330][T15770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 975.671535][T15770] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.698434][T15770] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.707322][T15770] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.728459][T15770] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.930131][T15920] ima: policy update failed [ 975.934902][ T30] audit: type=1802 audit(6039901798.555:195): pid=15920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.2374" res=0 errno=0 [ 975.996745][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 976.048510][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 976.672505][T15939] nvme_fcloop: unknown parameter or missing value '^/]' [ 976.695191][ T6370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 976.773710][ T6370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 977.188285][T15952] FAULT_INJECTION: forcing a failure. [ 977.188285][T15952] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 977.218553][T15952] CPU: 0 UID: 0 PID: 15952 Comm: syz.0.2329 Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0 PREEMPT(full) [ 977.218600][T15952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 977.218620][T15952] Call Trace: [ 977.218630][T15952] [ 977.218642][T15952] dump_stack_lvl+0x16c/0x1f0 [ 977.218695][T15952] should_fail_ex+0x512/0x640 [ 977.218740][T15952] _copy_from_user+0x2e/0xd0 [ 977.218784][T15952] copy_msghdr_from_user+0x98/0x160 [ 977.218830][T15952] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 977.218895][T15952] ___sys_sendmsg+0xfe/0x1d0 [ 977.218941][T15952] ? __pfx____sys_sendmsg+0x10/0x10 [ 977.219035][T15952] __sys_sendmsg+0x16d/0x220 [ 977.219081][T15952] ? __pfx___sys_sendmsg+0x10/0x10 [ 977.219138][T15952] ? rcu_is_watching+0x12/0xc0 [ 977.219184][T15952] do_syscall_64+0xcd/0x230 [ 977.219235][T15952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 977.219268][T15952] RIP: 0033:0x7f7fc8d8e169 [ 977.219294][T15952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 977.219326][T15952] RSP: 002b:00007f7fc6bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 977.219356][T15952] RAX: ffffffffffffffda RBX: 00007f7fc8fb5fa0 RCX: 00007f7fc8d8e169 [ 977.219378][T15952] RDX: 0000000000000040 RSI: 00002000000007c0 RDI: 0000000000000003 [ 977.219398][T15952] RBP: 00007f7fc6bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 977.219418][T15952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 977.219438][T15952] R13: 0000000000000000 R14: 00007f7fc8fb5fa0 R15: 00007ffc46bc8f88 [ 977.219480][T15952] [ 977.896548][T15961] netlink: 322 bytes leftover after parsing attributes in process `syz.0.2384'. [ 977.955023][ T30] audit: type=1807 audit(6039901800.575:196): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWñ:¿\t‰_¥Ÿü7©Ó¦–Ó^¸´gq%ḦrêOŽ res=0 [ 978.010093][ T30] audit: type=1802 audit(6039901800.575:197): pid=15962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.2384" res=0 errno=0 [ 978.119998][T15966] cougar: G6 mapped to space [ 978.541283][ T5854] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 978.551188][ T5854] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 978.560582][ T5854] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 978.573627][ T5854] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 978.583238][ T5854] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 978.636222][T15959] ima: policy update failed [ 978.657997][ T30] audit: type=1802 audit(6039901801.275:198): pid=15959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.2384" res=0 errno=0 [ 979.142435][ T6370] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.472801][ T6370] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.636027][ T6370] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.637893][T15985] input: isc as /devices/virtual/input/input147 [ 979.737122][T15987] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2391'. [ 979.860606][ T6370] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.665520][T15972] chnl_net:caif_netlink_parms(): no params data found [ 980.698599][ T5854] Bluetooth: hci4: command tx timeout [ 980.879039][ T6370] bridge_slave_1: left allmulticast mode [ 980.884767][ T6370] bridge_slave_1: left promiscuous mode [ 980.919025][ T6370] bridge0: port 2(bridge_slave_1) entered disabled state [ 980.948256][ T6370] bridge_slave_0: left allmulticast mode [ 980.976958][ T6370] bridge_slave_0: left promiscuous mode [ 980.986454][ T6370] bridge0: port 1(bridge_slave_0) entered disabled state [ 981.504312][T16010] netlink: 322 bytes leftover after parsing attributes in process `syz.2.2397'. [ 981.565762][ T30] audit: type=1807 audit(6039901804.185:199): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWñ:¿\t‰_¥Ÿü7©Ó¦–Ó^¸´gq%ḦrêOŽ res=0 [ 981.618596][ T30] audit: type=1802 audit(6039901804.185:200): pid=16011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.2397" res=0 errno=0 [ 981.973548][ T6370] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 982.003747][ T6370] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 982.022232][ T6370] bond0 (unregistering): Released all slaves [ 982.219089][T16008] ima: policy update failed [ 982.248775][ T30] audit: type=1802 audit(6039901804.865:201): pid=16008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.2397" res=0 errno=0 [ 982.528699][T16016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2398'. [ 982.600418][T15972] bridge0: port 1(bridge_slave_0) entered blocking state [ 982.607685][T15972] bridge0: port 1(bridge_slave_0) entered disabled state [ 982.766308][T15972] bridge_slave_0: entered allmulticast mode [ 982.779218][ T5854] Bluetooth: hci4: command tx timeout [ 982.786935][T15972] bridge_slave_0: entered promiscuous mode [ 982.795259][ T6370] .SR: left promiscuous mode [ 982.833218][T16027] nvme_fcloop: unknown parameter or missing value '^/]' [ 982.843666][T15972] bridge0: port 2(bridge_slave_1) entered blocking state [ 982.852970][T15972] bridge0: port 2(bridge_slave_1) entered disabled state [ 982.861470][T15972] bridge_slave_1: entered allmulticast mode [ 982.869903][T15972] bridge_slave_1: entered promiscuous mode [ 982.983536][T15972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 983.092253][T16016] .SR: entered promiscuous mode [ 983.100518][T15972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 983.208301][T16030] input: isc as /devices/virtual/input/input148 [ 983.471494][T15972] team0: Port device team_slave_0 added [ 983.501940][T15972] team0: Port device team_slave_1 added [ 983.844884][T15972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 983.878644][T15972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 983.954220][T15972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 983.987154][T15972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 984.028379][T15972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 984.118561][T15972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 984.266663][ T6370] hsr_slave_0: left promiscuous mode [ 984.286797][ T6370] hsr_slave_1: left promiscuous mode [ 984.305724][ T6370] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 984.332846][ T6370] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 984.368929][ T6370] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 984.376410][ T6370] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 984.608529][ T6370] veth1_macvtap: left promiscuous mode [ 984.614180][ T6370] veth0_macvtap: left promiscuous mode [ 984.629033][ T6370] veth1_vlan: left promiscuous mode [ 984.635555][ T6370] veth0_vlan: left promiscuous mode [ 984.854566][T16050] netlink: 322 bytes leftover after parsing attributes in process `syz.2.2406'. [ 984.864576][ T5854] Bluetooth: hci4: command tx timeout [ 984.952395][ T30] audit: type=1807 audit(6039901807.575:202): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWñ:¿\t‰_¥Ÿü7©Ó¦–Ó^¸´gq%ḦrêOŽ res=0 [ 985.008583][ T30] audit: type=1802 audit(6039901807.575:203): pid=16054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.2406" res=0 errno=0 [ 985.590652][T16047] ima: policy update failed [ 985.601358][ T30] audit: type=1802 audit(6039901808.215:204): pid=16047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.2406" res=0 errno=0 [ 985.919795][T16062] FAULT_INJECTION: forcing a failure. [ 985.919795][T16062] name failslab, interval 1, probability 0, space 0, times 0 [ 985.952574][T16062] CPU: 1 UID: 0 PID: 16062 Comm: syz.3.2410 Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0 PREEMPT(full) [ 985.952629][T16062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 985.952651][T16062] Call Trace: [ 985.952663][T16062] [ 985.952676][T16062] dump_stack_lvl+0x16c/0x1f0 [ 985.952733][T16062] should_fail_ex+0x512/0x640 [ 985.952774][T16062] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 985.952835][T16062] should_failslab+0xc2/0x120 [ 985.952882][T16062] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 985.952925][T16062] ? __kernfs_new_node+0xd2/0x8a0 [ 985.952966][T16062] __kernfs_new_node+0xd2/0x8a0 [ 985.953005][T16062] ? __pfx___kernfs_new_node+0x10/0x10 [ 985.953051][T16062] ? find_held_lock+0x2b/0x80 [ 985.953088][T16062] ? kernfs_root+0xee/0x2a0 [ 985.953131][T16062] kernfs_new_node+0x13c/0x1e0 [ 985.953180][T16062] __kernfs_create_file+0x53/0x350 [ 985.953235][T16062] sysfs_add_file_mode_ns+0x207/0x3c0 [ 985.953301][T16062] internal_create_group+0x578/0xf30 [ 985.953349][T16062] ? __pfx_internal_create_group+0x10/0x10 [ 985.953393][T16062] ? kernfs_create_link+0x1bd/0x240 [ 985.953449][T16062] internal_create_groups+0x9d/0x150 [ 985.953491][T16062] device_add+0x731/0x1a70 [ 985.953534][T16062] ? __pfx_device_add+0x10/0x10 [ 985.953568][T16062] ? __pfx___mutex_lock+0x10/0x10 [ 985.953623][T16062] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 985.953681][T16062] input_register_device+0x7e8/0x1130 [ 985.953744][T16062] uinput_ioctl_handler.isra.0+0x1357/0x1df0 [ 985.953812][T16062] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 985.953867][T16062] ? find_held_lock+0x2b/0x80 [ 985.953924][T16062] ? __pfx_uinput_ioctl+0x10/0x10 [ 985.953967][T16062] __x64_sys_ioctl+0x190/0x200 [ 985.954021][T16062] do_syscall_64+0xcd/0x230 [ 985.954075][T16062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 985.954109][T16062] RIP: 0033:0x7f83a638e169 [ 985.954137][T16062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 985.954171][T16062] RSP: 002b:00007f83a7235038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 985.954204][T16062] RAX: ffffffffffffffda RBX: 00007f83a65b5fa0 RCX: 00007f83a638e169 [ 985.954226][T16062] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 985.954248][T16062] RBP: 00007f83a6410a68 R08: 0000000000000000 R09: 0000000000000000 [ 985.954268][T16062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 985.954289][T16062] R13: 0000000000000000 R14: 00007f83a65b5fa0 R15: 00007ffc87551b08 [ 985.954333][T16062] [ 986.211169][ C1] vkms_vblank_simulate: vblank timer overrun [ 986.511332][T16065] FAULT_INJECTION: forcing a failure. [ 986.511332][T16065] name failslab, interval 1, probability 0, space 0, times 0 [ 986.634521][T16065] CPU: 1 UID: 0 PID: 16065 Comm: syz.3.2411 Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0 PREEMPT(full) [ 986.634570][T16065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 986.634590][T16065] Call Trace: [ 986.634601][T16065] [ 986.634615][T16065] dump_stack_lvl+0x16c/0x1f0 [ 986.634677][T16065] should_fail_ex+0x512/0x640 [ 986.634716][T16065] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 986.634762][T16065] should_failslab+0xc2/0x120 [ 986.634807][T16065] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 986.634850][T16065] ? __alloc_skb+0x2b2/0x380 [ 986.634898][T16065] __alloc_skb+0x2b2/0x380 [ 986.634945][T16065] ? __pfx___alloc_skb+0x10/0x10 [ 986.634991][T16065] ? tcp_chrono_stop+0x95/0x420 [ 986.635037][T16065] tcp_stream_alloc_skb+0x34/0x570 [ 986.635074][T16065] tcp_connect+0xe75/0x5480 [ 986.635134][T16065] ? __pfx_tcp_connect+0x10/0x10 [ 986.635171][T16065] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 986.635243][T16065] tcp_v4_connect+0x1517/0x1ba0 [ 986.635312][T16065] ? __pfx_tcp_v4_connect+0x10/0x10 [ 986.635364][T16065] ? __lock_acquire+0xaa4/0x1ba0 [ 986.635419][T16065] __inet_stream_connect+0x3c5/0x1020 [ 986.635461][T16065] ? __pfx___inet_stream_connect+0x10/0x10 [ 986.635493][T16065] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 986.635557][T16065] ? __local_bh_enable_ip+0xa4/0x120 [ 986.635604][T16065] inet_stream_connect+0x57/0xa0 [ 986.635652][T16065] kernel_connect+0x104/0x180 [ 986.635704][T16065] ? __pfx_kernel_connect+0x10/0x10 [ 986.635775][T16065] ? __local_bh_enable_ip+0xa4/0x120 [ 986.635823][T16065] smc_connect+0x4c7/0x760 [ 986.635867][T16065] ? __pfx_smc_connect+0x10/0x10 [ 986.635904][T16065] __sys_connect_file+0x13e/0x1a0 [ 986.635946][T16065] __sys_connect+0x14d/0x170 [ 986.635983][T16065] ? __pfx___sys_connect+0x10/0x10 [ 986.636036][T16065] ? __pfx_ksys_write+0x10/0x10 [ 986.636071][T16065] ? rcu_is_watching+0x12/0xc0 [ 986.636113][T16065] __x64_sys_connect+0x72/0xb0 [ 986.636149][T16065] ? lockdep_hardirqs_on+0x7c/0x110 [ 986.636194][T16065] do_syscall_64+0xcd/0x230 [ 986.636247][T16065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.636281][T16065] RIP: 0033:0x7f83a638e169 [ 986.636308][T16065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 986.636341][T16065] RSP: 002b:00007f83a7214038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 986.636372][T16065] RAX: ffffffffffffffda RBX: 00007f83a65b6080 RCX: 00007f83a638e169 [ 986.636394][T16065] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000003 [ 986.636414][T16065] RBP: 00007f83a7214090 R08: 0000000000000000 R09: 0000000000000000 [ 986.636434][T16065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 986.636453][T16065] R13: 0000000000000000 R14: 00007f83a65b6080 R15: 00007ffc87551b08 [ 986.636495][T16065] [ 986.918810][ C1] vkms_vblank_simulate: vblank timer overrun [ 987.207291][ T5854] Bluetooth: hci4: command tx timeout [ 987.307884][ T6370] team0 (unregistering): Port device team_slave_1 removed [ 987.421445][ T6370] team0 (unregistering): Port device team_slave_0 removed [ 988.576792][T15972] hsr_slave_0: entered promiscuous mode [ 988.634208][T15972] hsr_slave_1: entered promiscuous mode [ 989.013221][T16077] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2415'. [ 989.090734][T16080] netlink: 354 bytes leftover after parsing attributes in process `syz.0.2415'. [ 990.219966][T15972] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 990.274695][T15972] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 990.411262][T15972] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 990.589544][T15972] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 991.008631][T15972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 991.069920][T15972] 8021q: adding VLAN 0 to HW filter on device team0 [ 991.082552][T16097] netlink: 322 bytes leftover after parsing attributes in process `syz.3.2420'. [ 991.114966][ T6370] bridge0: port 1(bridge_slave_0) entered blocking state [ 991.122348][ T6370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 991.142304][ T30] audit: type=1807 audit(6039901813.755:205): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWñ:¿\t‰_¥Ÿü7©Ó¦–Ó^¸´gq%ḦrêOŽ res=0 [ 991.177617][T11861] bridge0: port 2(bridge_slave_1) entered blocking state [ 991.178186][ T30] audit: type=1802 audit(6039901813.755:206): pid=16098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.2420" res=0 errno=0 [ 991.184845][T11861] bridge0: port 2(bridge_slave_1) entered forwarding state [ 991.804660][T16095] ima: policy update failed [ 991.819209][ T30] audit: type=1802 audit(6039901814.435:207): pid=16095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.2420" res=0 errno=0 [ 991.867701][T15972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 992.046495][T15972] veth0_vlan: entered promiscuous mode [ 992.073901][T16110] [U]  [ 992.077145][T16110] [U] [ 992.079914][T16110] [U] [ 992.082673][T16110] [U] [ 992.083466][T15972] veth1_vlan: entered promiscuous mode [ 992.123139][T16110] [U] [ 992.125949][T16110] [U] [ 992.128718][T16110] [U] [ 992.131489][T16110] [U] [ 992.190193][T16110] [U] [ 992.193009][T16110] [U] [ 992.195775][T16110] [U] [ 992.197860][T15972] veth0_macvtap: entered promiscuous mode [ 992.198514][T16110] [U] [ 992.235108][T15972] veth1_macvtap: entered promiscuous mode [ 992.243113][T16110] [U] [ 992.245914][T16110] [U] [ 992.248672][T16110] [U] [ 992.251418][T16110] [U] [ 992.282672][T16110] [U] [ 992.285485][T16110] [U] [ 992.288240][T16110] [U] [ 992.290978][T16110] [U] [ 992.336971][T15972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 992.339338][T16114] [U] [ 992.381369][T15972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.400884][T15972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 992.421828][T15972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.448418][T15972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 992.478582][T15972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.514212][T15972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 992.557118][T15972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 992.589383][T15972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.620492][T15972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 992.669570][T15972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.699304][T15972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 992.738475][T15972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.755040][T15972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 992.782461][T15972] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.832210][T15972] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.852717][T15972] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.879079][T15972] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.148624][T16125] nvme_fcloop: unknown parameter or missing value '^/]' [ 993.350108][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 993.358122][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 993.392533][T16127] input: isc as /devices/virtual/input/input150 [ 993.433407][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 993.447697][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 993.488767][T16127] FAULT_INJECTION: forcing a failure. [ 993.488767][T16127] name failslab, interval 1, probability 0, space 0, times 0 [ 993.591117][T16127] CPU: 0 UID: 0 PID: 16127 Comm: syz.2.2427 Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0 PREEMPT(full) [ 993.591171][T16127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 993.591193][T16127] Call Trace: [ 993.591205][T16127] [ 993.591219][T16127] dump_stack_lvl+0x16c/0x1f0 [ 993.591274][T16127] should_fail_ex+0x512/0x640 [ 993.591315][T16127] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 993.591370][T16127] should_failslab+0xc2/0x120 [ 993.591416][T16127] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 993.591460][T16127] ? __kernfs_new_node+0xd2/0x8a0 [ 993.591500][T16127] __kernfs_new_node+0xd2/0x8a0 [ 993.591538][T16127] ? kernfs_add_one+0x14e/0x840 [ 993.591576][T16127] ? __pfx___kernfs_new_node+0x10/0x10 [ 993.591622][T16127] ? find_held_lock+0x2b/0x80 [ 993.591659][T16127] ? kernfs_root+0xee/0x2a0 [ 993.591702][T16127] kernfs_new_node+0x13c/0x1e0 [ 993.591750][T16127] kernfs_create_link+0xcc/0x240 [ 993.591803][T16127] sysfs_do_create_link_sd+0x90/0x140 [ 993.591840][T16127] sysfs_create_link+0x61/0xc0 [ 993.591872][T16127] device_add+0x50a/0x1a70 [ 993.591915][T16127] ? __pfx_device_add+0x10/0x10 [ 993.591951][T16127] ? __pfx_exact_lock+0x10/0x10 [ 993.591996][T16127] ? kobject_get+0xbb/0x150 [ 993.592050][T16127] cdev_device_add+0xc2/0x1e0 [ 993.592092][T16127] evdev_connect+0x3a4/0x4c0 [ 993.592129][T16127] input_attach_handler.isra.0+0x181/0x260 [ 993.592189][T16127] input_register_device+0xa84/0x1130 [ 993.592252][T16127] uinput_ioctl_handler.isra.0+0x1357/0x1df0 [ 993.592301][T16127] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 993.592362][T16127] ? find_held_lock+0x2b/0x80 [ 993.592418][T16127] ? __pfx_uinput_ioctl+0x10/0x10 [ 993.592462][T16127] __x64_sys_ioctl+0x190/0x200 [ 993.592514][T16127] do_syscall_64+0xcd/0x230 [ 993.592566][T16127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 993.592600][T16127] RIP: 0033:0x7fb5ca98e169 [ 993.592627][T16127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 993.592660][T16127] RSP: 002b:00007fb5cb742038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 993.592690][T16127] RAX: ffffffffffffffda RBX: 00007fb5cabb5fa0 RCX: 00007fb5ca98e169 [ 993.592713][T16127] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 993.592733][T16127] RBP: 00007fb5caa10a68 R08: 0000000000000000 R09: 0000000000000000 [ 993.592754][T16127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 993.592775][T16127] R13: 0000000000000000 R14: 00007fb5cabb5fa0 R15: 00007ffdffc544e8 [ 993.592816][T16127] [ 993.978878][T16127] input: failed to attach handler evdev to device input150, error: -12 [ 995.634966][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 995.688926][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 995.697817][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 995.707678][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 995.719910][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 997.508087][T16149] chnl_net:caif_netlink_parms(): no params data found [ 997.818615][ T5852] Bluetooth: hci2: command tx timeout [ 998.228291][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.238417][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.372520][T16149] bridge0: port 1(bridge_slave_0) entered blocking state [ 998.380049][T16184] input: isc as /devices/virtual/input/input154 [ 998.411948][T16149] bridge0: port 1(bridge_slave_0) entered disabled state [ 998.433085][T16149] bridge_slave_0: entered allmulticast mode [ 998.452235][T16149] bridge_slave_0: entered promiscuous mode [ 998.622088][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.691845][T16149] bridge0: port 2(bridge_slave_1) entered blocking state [ 998.718554][T16149] bridge0: port 2(bridge_slave_1) entered disabled state [ 998.725904][T16149] bridge_slave_1: entered allmulticast mode [ 998.764021][T16149] bridge_slave_1: entered promiscuous mode [ 998.918766][T16195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2449'. [ 999.294539][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.450760][T16149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 999.589339][T16149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 999.915908][ T5852] Bluetooth: hci2: command tx timeout [ 1000.060315][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.355685][T16149] team0: Port device team_slave_0 added [ 1000.504677][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.595479][T16149] team0: Port device team_slave_1 added [ 1000.959551][T16149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1000.968548][T16149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1001.038508][T16149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1001.084263][T16149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1001.111383][T16149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1001.168503][T16149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1001.412745][T16219] input: isc as /devices/virtual/input/input156 [ 1001.661773][ T13] bridge_slave_0: left allmulticast mode [ 1001.672145][ T13] bridge_slave_0: left promiscuous mode [ 1001.703515][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1001.978668][ T5852] Bluetooth: hci2: command tx timeout [ 1003.582263][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1003.609502][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1003.664230][ T13] bond0 (unregistering): Released all slaves [ 1003.744725][T16149] hsr_slave_0: entered promiscuous mode [ 1003.781752][T16149] hsr_slave_1: entered promiscuous mode [ 1003.788919][T16149] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1003.798300][T16149] Cannot create hsr debugfs directory [ 1003.949992][ T13] .SR: left promiscuous mode [ 1004.060927][ T5852] Bluetooth: hci2: command tx timeout [ 1004.564169][T16244] input: isc as /devices/virtual/input/input158 [ 1005.850200][T16255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2466'. [ 1005.868438][T16255] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1006.174167][ T13] hsr_slave_0: left promiscuous mode [ 1006.241454][ T13] hsr_slave_1: left promiscuous mode [ 1006.248152][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1006.296103][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1006.342791][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1006.368703][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1006.477063][ T30] audit: type=1800 audit(6039901829.095:208): pid=16242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2462" name="SYSV00000400" dev="tmpfs" ino=0 res=0 errno=0 [ 1007.664109][T16273] capability: warning: `syz.3.2469' uses 32-bit capabilities (legacy support in use) [ 1009.829246][ T13] veth1_macvtap: left promiscuous mode [ 1009.835306][ T13] veth0_macvtap: left promiscuous mode [ 1011.193610][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1011.353268][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1013.672279][T16295] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2476'. [ 1014.002794][T16300] rnbd_client L202: map_device: Unknown parameter or missing value '(' [ 1014.262691][T16302] input: isc as /devices/virtual/input/input160 [ 1014.594711][T16309] FAULT_INJECTION: forcing a failure. [ 1014.594711][T16309] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1014.608216][T16309] CPU: 0 UID: 0 PID: 16309 Comm: syz.0.2482 Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0 PREEMPT(full) [ 1014.608267][T16309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1014.608286][T16309] Call Trace: [ 1014.608297][T16309] [ 1014.608313][T16309] dump_stack_lvl+0x16c/0x1f0 [ 1014.608365][T16309] should_fail_ex+0x512/0x640 [ 1014.608410][T16309] _copy_from_iter+0x2a4/0x15b0 [ 1014.608461][T16309] ? __pfx__copy_from_iter+0x10/0x10 [ 1014.608505][T16309] ? rcu_is_watching+0x12/0xc0 [ 1014.608540][T16309] ? trace_kmalloc+0x2b/0xd0 [ 1014.608586][T16309] ? __kmalloc_noprof+0x242/0x510 [ 1014.608634][T16309] kernfs_fop_write_iter+0x19a/0x510 [ 1014.608687][T16309] vfs_write+0x5ba/0x1180 [ 1014.608723][T16309] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1014.608774][T16309] ? __pfx_vfs_write+0x10/0x10 [ 1014.608805][T16309] ? find_held_lock+0x2b/0x80 [ 1014.608867][T16309] __x64_sys_pwrite64+0x1f4/0x250 [ 1014.608906][T16309] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 1014.608942][T16309] ? rcu_is_watching+0x12/0xc0 [ 1014.608987][T16309] do_syscall_64+0xcd/0x230 [ 1014.609039][T16309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.609073][T16309] RIP: 0033:0x7f7fc8d8e169 [ 1014.609100][T16309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1014.609131][T16309] RSP: 002b:00007f7fc6bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1014.609162][T16309] RAX: ffffffffffffffda RBX: 00007f7fc8fb5fa0 RCX: 00007f7fc8d8e169 [ 1014.609184][T16309] RDX: 0000000000000004 RSI: 0000200000000280 RDI: 0000000000000003 [ 1014.609203][T16309] RBP: 00007f7fc6bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1014.609223][T16309] R10: 0000000000088000 R11: 0000000000000246 R12: 0000000000000001 [ 1014.609252][T16309] R13: 0000000000000000 R14: 00007f7fc8fb5fa0 R15: 00007ffc46bc8f88 [ 1014.609295][T16309] [ 1014.880532][T16311] FAULT_INJECTION: forcing a failure. [ 1014.880532][T16311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1014.937471][T16311] CPU: 1 UID: 0 PID: 16311 Comm: syz.1.2483 Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0 PREEMPT(full) [ 1014.937519][T16311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1014.937538][T16311] Call Trace: [ 1014.937549][T16311] [ 1014.937562][T16311] dump_stack_lvl+0x16c/0x1f0 [ 1014.937617][T16311] should_fail_ex+0x512/0x640 [ 1014.937664][T16311] _copy_from_user+0x2e/0xd0 [ 1014.937709][T16311] do_pages_stat+0x239/0x800 [ 1014.937769][T16311] ? __pfx_do_pages_stat+0x10/0x10 [ 1014.937850][T16311] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1014.937895][T16311] ? lockdep_hardirqs_on+0x7c/0x110 [ 1014.937941][T16311] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1014.937991][T16311] kernel_move_pages+0xfd5/0x13a0 [ 1014.938056][T16311] ? __pfx_kernel_move_pages+0x10/0x10 [ 1014.938108][T16311] ? __fget_files+0x20e/0x3c0 [ 1014.938149][T16311] ? fput+0x70/0xf0 [ 1014.938190][T16311] ? ksys_write+0x1b9/0x240 [ 1014.938223][T16311] ? __pfx_ksys_write+0x10/0x10 [ 1014.938256][T16311] ? rcu_is_watching+0x12/0xc0 [ 1014.938311][T16311] __x64_sys_move_pages+0xe0/0x1c0 [ 1014.938358][T16311] ? do_syscall_64+0x91/0x230 [ 1014.938407][T16311] ? lockdep_hardirqs_on+0x7c/0x110 [ 1014.938453][T16311] do_syscall_64+0xcd/0x230 [ 1014.938505][T16311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.938538][T16311] RIP: 0033:0x7f2e2f38e169 [ 1014.938564][T16311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1014.938596][T16311] RSP: 002b:00007f2e301cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 1014.938625][T16311] RAX: ffffffffffffffda RBX: 00007f2e2f5b5fa0 RCX: 00007f2e2f38e169 [ 1014.938645][T16311] RDX: 0000000000000000 RSI: 0000000000000f54 RDI: 0000000000000000 [ 1014.938664][T16311] RBP: 00007f2e301cc090 R08: 0000000000000000 R09: 8000000000000000 [ 1014.938683][T16311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1014.938702][T16311] R13: 0000000000000000 R14: 00007f2e2f5b5fa0 R15: 00007fff21ef4be8 [ 1014.938743][T16311] [ 1016.302816][T16331] input: isc as /devices/virtual/input/input161 [ 1016.958740][T16339] rnbd_client L202: map_device: Unknown parameter or missing value '(' [ 1018.175472][T16357] input: isc as /devices/virtual/input/input162 [ 1018.835520][T16364] netlink: 338 bytes leftover after parsing attributes in process `syz.0.2499'. [ 1020.316754][T16385] input: isc as /devices/virtual/input/input163 [ 1022.020444][T16409] FAULT_INJECTION: forcing a failure. [ 1022.020444][T16409] name failslab, interval 1, probability 0, space 0, times 0 [ 1022.074433][T16409] CPU: 1 UID: 0 PID: 16409 Comm: syz.0.2512 Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0 PREEMPT(full) [ 1022.074483][T16409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1022.074503][T16409] Call Trace: [ 1022.074514][T16409] [ 1022.074527][T16409] dump_stack_lvl+0x16c/0x1f0 [ 1022.074581][T16409] should_fail_ex+0x512/0x640 [ 1022.074627][T16409] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1022.074667][T16409] should_failslab+0xc2/0x120 [ 1022.074712][T16409] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1022.074749][T16409] ? vgem_open+0x43/0xe0 [ 1022.074791][T16409] vgem_open+0x43/0xe0 [ 1022.074826][T16409] ? __pfx_vgem_open+0x10/0x10 [ 1022.074860][T16409] drm_file_alloc+0x57a/0x9a0 [ 1022.074898][T16409] drm_open_helper+0x204/0x550 [ 1022.074935][T16409] drm_open+0x1a0/0x3e0 [ 1022.074966][T16409] ? __pfx_drm_open+0x10/0x10 [ 1022.074996][T16409] drm_stub_open+0x20c/0x380 [ 1022.075028][T16409] ? __pfx_drm_stub_open+0x10/0x10 [ 1022.075058][T16409] chrdev_open+0x231/0x6a0 [ 1022.075097][T16409] ? __pfx_apparmor_file_open+0x10/0x10 [ 1022.075141][T16409] ? __pfx_chrdev_open+0x10/0x10 [ 1022.075183][T16409] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 1022.075245][T16409] do_dentry_open+0x741/0x1c10 [ 1022.075285][T16409] ? __pfx_chrdev_open+0x10/0x10 [ 1022.075332][T16409] vfs_open+0x82/0x3f0 [ 1022.075385][T16409] path_openat+0x1e5e/0x2d40 [ 1022.075436][T16409] ? __pfx_path_openat+0x10/0x10 [ 1022.075483][T16409] do_filp_open+0x20b/0x470 [ 1022.075520][T16409] ? __pfx_do_filp_open+0x10/0x10 [ 1022.075586][T16409] ? alloc_fd+0x471/0x7d0 [ 1022.075635][T16409] do_sys_openat2+0x11b/0x1d0 [ 1022.075684][T16409] ? __pfx_do_sys_openat2+0x10/0x10 [ 1022.075736][T16409] ? __fget_files+0x20e/0x3c0 [ 1022.075776][T16409] __x64_sys_openat+0x174/0x210 [ 1022.075825][T16409] ? __pfx___x64_sys_openat+0x10/0x10 [ 1022.075873][T16409] ? ksys_write+0x1b9/0x240 [ 1022.075923][T16409] do_syscall_64+0xcd/0x230 [ 1022.075976][T16409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1022.076011][T16409] RIP: 0033:0x7f7fc8d8e169 [ 1022.076037][T16409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1022.076069][T16409] RSP: 002b:00007f7fc6bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1022.076101][T16409] RAX: ffffffffffffffda RBX: 00007f7fc8fb5fa0 RCX: 00007f7fc8d8e169 [ 1022.076122][T16409] RDX: 0000000000000040 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1022.076142][T16409] RBP: 00007f7fc6bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1022.076162][T16409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1022.076182][T16409] R13: 0000000000000001 R14: 00007f7fc8fb5fa0 R15: 00007ffc46bc8f88 [ 1022.076223][T16409] [ 1022.346695][ C1] vkms_vblank_simulate: vblank timer overrun [ 1022.788694][T16419] input: isc as /devices/virtual/input/input164 [ 1024.850027][T16434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2520'. [ 1024.989737][ T5854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1024.999546][ T5854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1025.008189][ T5854] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1025.019075][ T5854] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1025.030558][ T5854] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1025.109339][T16434] .SR: entered promiscuous mode [ 1025.439897][T16442] input: isc as /devices/virtual/input/input165 [ 1025.927769][T16435] chnl_net:caif_netlink_parms(): no params data found [ 1025.956837][T16452] hub 8-0:1.0: USB hub found [ 1025.966661][T16452] hub 8-0:1.0: 1 port detected [ 1026.171028][T16435] bridge0: port 1(bridge_slave_0) entered blocking state [ 1026.191917][T16435] bridge0: port 1(bridge_slave_0) entered disabled state [ 1026.226432][T16435] bridge_slave_0: entered allmulticast mode [ 1026.237339][T16435] bridge_slave_0: entered promiscuous mode [ 1026.272165][T16435] bridge0: port 2(bridge_slave_1) entered blocking state [ 1026.280043][T16435] bridge0: port 2(bridge_slave_1) entered disabled state [ 1026.287456][T16435] bridge_slave_1: entered allmulticast mode [ 1026.296407][T16435] bridge_slave_1: entered promiscuous mode [ 1026.399794][T16435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1026.434508][T16435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1026.566203][T16435] team0: Port device team_slave_0 added [ 1026.638361][T16435] team0: Port device team_slave_1 added [ 1026.639770][T16463] netlink: zone id is out of range [ 1026.904656][T16435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1026.953796][T16435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1027.009067][T16435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1027.023416][T16435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1027.030764][T16435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1027.057852][T16435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1027.098721][ T5852] Bluetooth: hci3: command tx timeout [ 1027.257916][T16435] hsr_slave_0: entered promiscuous mode [ 1027.297911][T16435] hsr_slave_1: entered promiscuous mode [ 1027.342470][T16435] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1027.377964][T16435] Cannot create hsr debugfs directory [ 1027.949326][T16477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2532'. [ 1028.519551][T16477] openvswitch: .SR: Dropping previously announced user features [ 1029.178795][ T5852] Bluetooth: hci3: command tx timeout [ 1030.763484][T16509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2541'. [ 1030.879109][T16509] openvswitch: .SR: Dropping previously announced user features [ 1031.258692][ T5852] Bluetooth: hci3: command tx timeout [ 1032.398837][T16529] input: isc as /devices/virtual/input/input166 [ 1033.030280][T16536] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1033.036546][T16536] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1033.060148][T16536] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1033.082667][T16536] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1033.102621][T16536] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1033.116350][T16536] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1033.152880][T16536] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1033.180148][T16536] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1033.186334][T16536] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1033.234294][T16536] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1033.252525][T16536] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1033.259030][T16536] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1033.278462][T16536] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1033.515048][T16541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2551'. [ 1033.666830][T16541] openvswitch: .SR: Dropping previously announced user features [ 1034.426050][T16553] input: isc as /devices/virtual/input/input167 [ 1034.560437][T16555] input: isc as /devices/virtual/input/input168 [ 1034.567421][T16555] FAULT_INJECTION: forcing a failure. [ 1034.567421][T16555] name failslab, interval 1, probability 0, space 0, times 0 [ 1034.587202][T16555] CPU: 0 UID: 0 PID: 16555 Comm: syz.0.2556 Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0 PREEMPT(full) [ 1034.587253][T16555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1034.587275][T16555] Call Trace: [ 1034.587287][T16555] [ 1034.587301][T16555] dump_stack_lvl+0x16c/0x1f0 [ 1034.587359][T16555] should_fail_ex+0x512/0x640 [ 1034.587400][T16555] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1034.587447][T16555] should_failslab+0xc2/0x120 [ 1034.587495][T16555] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1034.587539][T16555] ? __kernfs_new_node+0xd2/0x8a0 [ 1034.587584][T16555] __kernfs_new_node+0xd2/0x8a0 [ 1034.587623][T16555] ? __pfx___kernfs_new_node+0x10/0x10 [ 1034.587670][T16555] ? find_held_lock+0x2b/0x80 [ 1034.587709][T16555] ? kernfs_root+0xee/0x2a0 [ 1034.587760][T16555] kernfs_new_node+0x13c/0x1e0 [ 1034.587809][T16555] __kernfs_create_file+0x53/0x350 [ 1034.587865][T16555] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1034.587933][T16555] sysfs_merge_group+0x1aa/0x340 [ 1034.587973][T16555] ? __pfx_sysfs_merge_group+0x10/0x10 [ 1034.588016][T16555] ? __pfx_dev_add_physical_location+0x10/0x10 [ 1034.588074][T16555] ? bus_to_subsys+0x12d/0x160 [ 1034.588123][T16555] dpm_sysfs_add+0x237/0x280 [ 1034.588159][T16555] device_add+0x9a6/0x1a70 [ 1034.588201][T16555] ? __pfx_device_add+0x10/0x10 [ 1034.588238][T16555] ? __pfx_exact_lock+0x10/0x10 [ 1034.588284][T16555] ? kobject_get+0xbb/0x150 [ 1034.588336][T16555] cdev_device_add+0xc2/0x1e0 [ 1034.588377][T16555] evdev_connect+0x3a4/0x4c0 [ 1034.588413][T16555] input_attach_handler.isra.0+0x181/0x260 [ 1034.588475][T16555] input_register_device+0xa84/0x1130 [ 1034.588538][T16555] uinput_ioctl_handler.isra.0+0x1357/0x1df0 [ 1034.588588][T16555] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 1034.588642][T16555] ? find_held_lock+0x2b/0x80 [ 1034.588700][T16555] ? __pfx_uinput_ioctl+0x10/0x10 [ 1034.588753][T16555] __x64_sys_ioctl+0x190/0x200 [ 1034.588808][T16555] do_syscall_64+0xcd/0x230 [ 1034.588862][T16555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1034.588896][T16555] RIP: 0033:0x7f7fc8d8e169 [ 1034.588923][T16555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1034.588956][T16555] RSP: 002b:00007f7fc6bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1034.588987][T16555] RAX: ffffffffffffffda RBX: 00007f7fc8fb5fa0 RCX: 00007f7fc8d8e169 [ 1034.589010][T16555] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000002 [ 1034.589030][T16555] RBP: 00007f7fc8e10a68 R08: 0000000000000000 R09: 0000000000000000 [ 1034.589050][T16555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1034.589070][T16555] R13: 0000000000000000 R14: 00007f7fc8fb5fa0 R15: 00007ffc46bc8f88 [ 1034.589114][T16555] [ 1034.882128][T16555] input: failed to attach handler evdev to device input168, error: -12 [ 1034.948817][ T5852] Bluetooth: hci1: command 0x0406 tx timeout [ 1035.024450][T16557] input: isc as /devices/virtual/input/input169 [ 1035.031428][T16557] FAULT_INJECTION: forcing a failure. [ 1035.031428][T16557] name failslab, interval 1, probability 0, space 0, times 0 [ 1035.049237][T16557] CPU: 1 UID: 0 PID: 16557 Comm: syz.0.2557 Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0 PREEMPT(full) [ 1035.049284][T16557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1035.049306][T16557] Call Trace: [ 1035.049318][T16557] [ 1035.049331][T16557] dump_stack_lvl+0x16c/0x1f0 [ 1035.049385][T16557] should_fail_ex+0x512/0x640 [ 1035.049424][T16557] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1035.049472][T16557] should_failslab+0xc2/0x120 [ 1035.049525][T16557] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1035.049568][T16557] ? __kernfs_new_node+0xd2/0x8a0 [ 1035.049609][T16557] __kernfs_new_node+0xd2/0x8a0 [ 1035.049652][T16557] ? __pfx___kernfs_new_node+0x10/0x10 [ 1035.049698][T16557] ? find_held_lock+0x2b/0x80 [ 1035.049736][T16557] ? kernfs_root+0xee/0x2a0 [ 1035.049779][T16557] kernfs_new_node+0x13c/0x1e0 [ 1035.049828][T16557] __kernfs_create_file+0x53/0x350 [ 1035.049883][T16557] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1035.049948][T16557] sysfs_merge_group+0x1aa/0x340 [ 1035.049986][T16557] ? __pfx_sysfs_merge_group+0x10/0x10 [ 1035.050029][T16557] ? __pfx_dev_add_physical_location+0x10/0x10 [ 1035.050086][T16557] ? bus_to_subsys+0x12d/0x160 [ 1035.050133][T16557] dpm_sysfs_add+0x237/0x280 [ 1035.050169][T16557] device_add+0x9a6/0x1a70 [ 1035.050210][T16557] ? __pfx_device_add+0x10/0x10 [ 1035.050247][T16557] ? __pfx_exact_lock+0x10/0x10 [ 1035.050292][T16557] ? kobject_get+0xbb/0x150 [ 1035.050348][T16557] cdev_device_add+0xc2/0x1e0 [ 1035.050390][T16557] evdev_connect+0x3a4/0x4c0 [ 1035.050427][T16557] input_attach_handler.isra.0+0x181/0x260 [ 1035.050488][T16557] input_register_device+0xa84/0x1130 [ 1035.050557][T16557] uinput_ioctl_handler.isra.0+0x1357/0x1df0 [ 1035.050607][T16557] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 1035.050662][T16557] ? find_held_lock+0x2b/0x80 [ 1035.050718][T16557] ? __pfx_uinput_ioctl+0x10/0x10 [ 1035.050767][T16557] __x64_sys_ioctl+0x190/0x200 [ 1035.050819][T16557] do_syscall_64+0xcd/0x230 [ 1035.050872][T16557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.050906][T16557] RIP: 0033:0x7f7fc8d8e169 [ 1035.050933][T16557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1035.050966][T16557] RSP: 002b:00007f7fc6bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1035.050997][T16557] RAX: ffffffffffffffda RBX: 00007f7fc8fb5fa0 RCX: 00007f7fc8d8e169 [ 1035.051021][T16557] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000002 [ 1035.051043][T16557] RBP: 00007f7fc8e10a68 R08: 0000000000000000 R09: 0000000000000000 [ 1035.051064][T16557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1035.051085][T16557] R13: 0000000000000000 R14: 00007f7fc8fb5fa0 R15: 00007ffc46bc8f88 [ 1035.051129][T16557] [ 1035.052816][T16557] input: failed to attach handler evdev to device input169, error: -12 [ 1035.258560][ T5852] Bluetooth: hci0: command 0x0c1a tx timeout [ 1035.287388][ T5854] Bluetooth: hci4: command 0x0c1a tx timeout [ 1035.294224][ T5852] Bluetooth: hci3: command 0x0c1a tx timeout [ 1035.303054][ T5854] Bluetooth: hci2: command 0x0c1a tx timeout [ 1035.720025][T16569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2560'. [ 1035.790263][T16569] openvswitch: .SR: Dropping previously announced user features [ 1036.175085][T16574] input: isc as /devices/virtual/input/input170 [ 1037.341839][T16558] Bluetooth: hci3: command 0x0c1a tx timeout [ 1037.341869][T11454] Bluetooth: hci4: command 0x0c1a tx timeout [ 1037.347908][T16558] Bluetooth: hci0: command 0x0c1a tx timeout [ 1037.422257][T16558] Bluetooth: hci2: command 0x0c1a tx timeout [ 1038.142526][T16594] input: isc as /devices/virtual/input/input171 [ 1038.476520][T16597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2570'. [ 1038.491122][T16597] openvswitch: .SR: Dropping previously announced user features [ 1039.418460][T16558] Bluetooth: hci0: command 0x0c1a tx timeout [ 1039.418548][T11454] Bluetooth: hci4: command 0x0c1a tx timeout [ 1039.418558][ T5854] Bluetooth: hci3: command 0x0c1a tx timeout [ 1039.498504][T11454] Bluetooth: hci2: command 0x0c1a tx timeout [ 1040.039946][T16601] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1040.062168][T16601] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1040.082180][T16601] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1040.100652][T16601] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1040.106866][T16601] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1041.578679][T11454] Bluetooth: hci1: command 0x0406 tx timeout [ 1042.058538][T11454] Bluetooth: hci0: command 0x0c1a tx timeout [ 1042.138663][T16558] Bluetooth: hci2: command 0x0c1a tx timeout [ 1042.142230][ T5854] Bluetooth: hci4: command 0x0c1a tx timeout [ 1042.144747][T11454] Bluetooth: hci3: command 0x0c1a tx timeout [ 1046.252753][T16634] input: isc as /devices/virtual/input/input172 [ 1055.982649][ T5854] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1055.996615][ T5854] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1056.007386][ T5854] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1056.027041][ T5854] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1056.035464][ T5854] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1056.317179][T16681] chnl_net:caif_netlink_parms(): no params data found [ 1056.491327][T16681] bridge0: port 1(bridge_slave_0) entered blocking state [ 1056.498916][T16681] bridge0: port 1(bridge_slave_0) entered disabled state [ 1056.506484][T16681] bridge_slave_0: entered allmulticast mode [ 1056.515649][T16681] bridge_slave_0: entered promiscuous mode [ 1056.525754][T16681] bridge0: port 2(bridge_slave_1) entered blocking state [ 1056.533277][T16681] bridge0: port 2(bridge_slave_1) entered disabled state [ 1056.541922][T16681] bridge_slave_1: entered allmulticast mode [ 1056.550929][T16681] bridge_slave_1: entered promiscuous mode [ 1056.601508][T16681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1056.615172][T16681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1056.690730][T16681] team0: Port device team_slave_0 added [ 1056.705013][T16681] team0: Port device team_slave_1 added [ 1056.771217][T16681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1056.778239][T16681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1056.813781][T16681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1056.828263][T16681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1056.841572][T16681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1056.879052][T16681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1056.977571][T16681] hsr_slave_0: entered promiscuous mode [ 1056.985776][T16681] hsr_slave_1: entered promiscuous mode [ 1056.996796][T16681] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1057.004864][T16681] Cannot create hsr debugfs directory [ 1058.068598][T11454] Bluetooth: hci5: command tx timeout [ 1059.667107][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.675323][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1060.138556][T11454] Bluetooth: hci5: command tx timeout [ 1062.233191][T11454] Bluetooth: hci5: command tx timeout [ 1064.299856][T11454] Bluetooth: hci5: command tx timeout [ 1084.426686][ T5854] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1084.440109][ T5854] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1084.448873][ T5854] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1084.458246][ T5854] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1084.466365][ T5854] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1084.847204][T16690] chnl_net:caif_netlink_parms(): no params data found [ 1085.059784][T16690] bridge0: port 1(bridge_slave_0) entered blocking state [ 1085.067065][T16690] bridge0: port 1(bridge_slave_0) entered disabled state [ 1085.075038][T16690] bridge_slave_0: entered allmulticast mode [ 1085.083644][T16690] bridge_slave_0: entered promiscuous mode [ 1085.092955][T16690] bridge0: port 2(bridge_slave_1) entered blocking state [ 1085.101960][T16690] bridge0: port 2(bridge_slave_1) entered disabled state [ 1085.109682][T16690] bridge_slave_1: entered allmulticast mode [ 1085.117744][T16690] bridge_slave_1: entered promiscuous mode [ 1085.195476][T16690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1085.211346][T16690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1085.286031][T16690] team0: Port device team_slave_0 added [ 1085.296979][T16690] team0: Port device team_slave_1 added [ 1085.358638][T16690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1085.365741][T16690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1085.397348][T16690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1085.411253][T16690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1085.418873][T16690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1085.446193][T16690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1085.511495][T16690] hsr_slave_0: entered promiscuous mode [ 1085.519233][T16690] hsr_slave_1: entered promiscuous mode [ 1085.525692][T16690] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1085.534440][T16690] Cannot create hsr debugfs directory [ 1086.548947][T11454] Bluetooth: hci6: command tx timeout [ 1088.618834][T11454] Bluetooth: hci6: command tx timeout [ 1090.698456][T11454] Bluetooth: hci6: command tx timeout [ 1092.790483][T11454] Bluetooth: hci6: command tx timeout [ 1115.985946][ T5854] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1115.995149][ T5854] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1116.003238][ T5854] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1116.015796][ T5854] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1116.024551][ T5854] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1116.323473][T16700] chnl_net:caif_netlink_parms(): no params data found [ 1116.526789][T16700] bridge0: port 1(bridge_slave_0) entered blocking state [ 1116.535903][T16700] bridge0: port 1(bridge_slave_0) entered disabled state [ 1116.549397][T16700] bridge_slave_0: entered allmulticast mode [ 1116.567159][T16700] bridge_slave_0: entered promiscuous mode [ 1116.576513][T16700] bridge0: port 2(bridge_slave_1) entered blocking state [ 1116.588652][T16700] bridge0: port 2(bridge_slave_1) entered disabled state [ 1116.596014][T16700] bridge_slave_1: entered allmulticast mode [ 1116.604454][T16700] bridge_slave_1: entered promiscuous mode [ 1116.658218][T16700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1116.680875][T16700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1116.766503][T16700] team0: Port device team_slave_0 added [ 1116.787388][T16700] team0: Port device team_slave_1 added [ 1116.848213][T16700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1116.855660][T16700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1116.883613][T16700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1116.897632][T16700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1116.905013][T16700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1116.932111][T16700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1117.000328][T16700] hsr_slave_0: entered promiscuous mode [ 1117.007156][T16700] hsr_slave_1: entered promiscuous mode [ 1117.014155][T16700] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1117.028684][T16700] Cannot create hsr debugfs directory [ 1118.058656][ T5854] Bluetooth: hci7: command tx timeout [ 1120.139223][ T5854] Bluetooth: hci7: command tx timeout [ 1121.104613][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.117545][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1122.218447][ T5854] Bluetooth: hci7: command tx timeout [ 1124.310228][ T5854] Bluetooth: hci7: command tx timeout [ 1144.586066][T11454] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1144.600138][T11454] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1144.608854][T11454] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1144.618244][T11454] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1144.630659][T11454] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1145.057482][T16709] chnl_net:caif_netlink_parms(): no params data found [ 1145.241272][T16709] bridge0: port 1(bridge_slave_0) entered blocking state [ 1145.254671][T16709] bridge0: port 1(bridge_slave_0) entered disabled state [ 1145.266830][T16709] bridge_slave_0: entered allmulticast mode [ 1145.283335][T16709] bridge_slave_0: entered promiscuous mode [ 1145.298165][T16709] bridge0: port 2(bridge_slave_1) entered blocking state [ 1145.306184][T16709] bridge0: port 2(bridge_slave_1) entered disabled state [ 1145.313718][T16709] bridge_slave_1: entered allmulticast mode [ 1145.323116][T16709] bridge_slave_1: entered promiscuous mode [ 1145.372301][T16709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1145.385738][T16709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1145.470540][T16709] team0: Port device team_slave_0 added [ 1145.487569][T16709] team0: Port device team_slave_1 added [ 1145.533999][T16709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1145.542856][T16709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1145.572117][T16709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1145.585914][T16709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1145.593740][T16709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1145.628916][T16709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1145.756078][T16709] hsr_slave_0: entered promiscuous mode [ 1145.772530][T16709] hsr_slave_1: entered promiscuous mode [ 1145.784801][T16709] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1145.795132][T16709] Cannot create hsr debugfs directory [ 1146.698919][ T5854] Bluetooth: hci8: command tx timeout [ 1148.778591][ T5854] Bluetooth: hci8: command tx timeout [ 1150.858450][ T5854] Bluetooth: hci8: command tx timeout [ 1152.938636][ T5854] Bluetooth: hci8: command tx timeout [ 1156.298626][ T31] INFO: task syz-executor:16149 blocked for more than 143 seconds. [ 1156.306607][ T31] Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0 [ 1156.322764][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1156.337964][ T31] task:syz-executor state:D stack:23976 pid:16149 tgid:16149 ppid:1 task_flags:0x480140 flags:0x00004006 [ 1156.359905][ T31] Call Trace: [ 1156.363244][ T31] [ 1156.366983][ T31] __schedule+0x116f/0x5de0 [ 1156.377138][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 1156.386569][ T31] ? __pfx___schedule+0x10/0x10 [ 1156.395298][ T31] ? find_held_lock+0x2b/0x80 [ 1156.405760][ T31] ? schedule+0x2d7/0x3a0 [ 1156.413981][ T31] schedule+0xe7/0x3a0 [ 1156.418143][ T31] schedule_timeout+0x257/0x290 [ 1156.427678][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1156.436922][ T31] ? mark_held_locks+0x49/0x80 [ 1156.449011][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1156.454315][ T31] __wait_for_common+0x2fc/0x4e0 [ 1156.469432][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1156.474901][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 1156.487819][ T31] remove_one+0x312/0x420 [ 1156.492910][ T31] ? __pfx_remove_one+0x10/0x10 [ 1156.497840][ T31] simple_recursive_removal+0x4e2/0x8e0 [ 1156.508827][ T31] ? __pfx_remove_one+0x10/0x10 [ 1156.513781][ T31] debugfs_remove+0x5d/0x80 [ 1156.525487][ T31] nsim_dev_health_exit+0x3b/0xe0 [ 1156.531470][ T31] nsim_dev_reload_destroy+0x144/0x4d0 [ 1156.559012][ T31] nsim_drv_remove+0x52/0x1d0 [ 1156.563816][ T31] ? __pfx_nsim_bus_remove+0x10/0x10 [ 1156.579428][ T31] device_remove+0xc8/0x170 [ 1156.584048][ T31] device_release_driver_internal+0x44b/0x620 [ 1156.598203][ T31] bus_remove_device+0x22f/0x420 [ 1156.603542][ T31] device_del+0x396/0x9f0 [ 1156.617235][ T31] ? __pfx_device_del+0x10/0x10 [ 1156.624888][ T31] device_unregister+0x1d/0xc0 [ 1156.637868][ T31] del_device_store+0x355/0x4a0 [ 1156.643140][ T31] ? __pfx_del_device_store+0x10/0x10 [ 1156.656561][ T31] ? find_held_lock+0x2b/0x80 [ 1156.693127][ T31] ? sysfs_file_kobj+0xe4/0x290 [ 1156.698102][ T31] ? __pfx_del_device_store+0x10/0x10 [ 1156.739333][ T31] bus_attr_store+0x71/0xb0 [ 1156.743950][ T31] ? __pfx_bus_attr_store+0x10/0x10 [ 1156.771798][ T31] sysfs_kf_write+0xef/0x150 [ 1156.777258][ T31] kernfs_fop_write_iter+0x351/0x510 [ 1156.799892][ T31] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1156.805213][ T31] vfs_write+0x5ba/0x1180 [ 1156.821564][ T31] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1156.827488][ T31] ? __pfx_vfs_write+0x10/0x10 [ 1156.838781][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1156.844097][ T31] ksys_write+0x12a/0x240 [ 1156.856549][ T31] ? __pfx_ksys_write+0x10/0x10 [ 1156.861890][ T31] do_syscall_64+0xcd/0x230 [ 1156.866481][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.880915][ T31] RIP: 0033:0x7f63aa18cc1f [ 1156.885419][ T31] RSP: 002b:00007ffd705964a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1156.901963][ T31] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f63aa18cc1f [ 1156.916483][ T31] RDX: 0000000000000001 RSI: 00007ffd705964f0 RDI: 0000000000000005 [ 1156.928592][ T31] RBP: 00007f63aa211cc5 R08: 0000000000000000 R09: 00007ffd705962f7 [ 1156.936635][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1156.955486][ T31] R13: 00007ffd705964f0 R14: 00007f63aaee4620 R15: 0000000000000003 [ 1156.964907][ T31] [ 1156.968068][ T31] INFO: task syz.3.2470:16275 blocked for more than 144 seconds. [ 1156.983974][ T31] Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0 [ 1156.996762][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1157.010954][ T31] task:syz.3.2470 state:D stack:27064 pid:16275 tgid:16274 ppid:5837 task_flags:0x400140 flags:0x00000004 [ 1157.037542][ T31] Call Trace: [ 1157.042207][ T31] [ 1157.045198][ T31] __schedule+0x116f/0x5de0 [ 1157.056860][ T31] ? save_trace+0x4e/0x380 [ 1157.062691][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 1157.067722][ T31] ? __pfx___schedule+0x10/0x10 [ 1157.078447][ T31] ? find_held_lock+0x2b/0x80 [ 1157.086417][ T31] ? schedule+0x2d7/0x3a0 [ 1157.096360][ T31] schedule+0xe7/0x3a0 [ 1157.108443][ T31] schedule_preempt_disabled+0x13/0x30 [ 1157.113994][ T31] __mutex_lock+0x6c7/0xb90 [ 1157.127796][ T31] ? netlink_has_listeners+0x219/0x430 [ 1157.133978][ T31] ? devlink_health_report+0x3ba/0x9c0 [ 1157.148806][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1157.153956][ T31] ? devlink_health_report+0x3ba/0x9c0 [ 1157.167775][ T31] devlink_health_report+0x3ba/0x9c0 [ 1157.173544][ T31] ? __pfx_devlink_health_report+0x10/0x10 [ 1157.191296][ T31] ? _copy_from_user+0x59/0xd0 [ 1157.196164][ T31] nsim_dev_health_break_write+0x166/0x210 [ 1157.206865][ T31] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 1157.220797][ T31] full_proxy_write+0x13c/0x200 [ 1157.225747][ T31] vfs_write+0x25c/0x1180 [ 1157.237600][ T31] ? __pfx_full_proxy_write+0x10/0x10 [ 1157.245117][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1157.257788][ T31] ? __pfx_vfs_write+0x10/0x10 [ 1157.267180][ T31] ? __fget_files+0x20e/0x3c0 [ 1157.278199][ T31] ksys_write+0x12a/0x240 [ 1157.282655][ T31] ? __pfx_ksys_write+0x10/0x10 [ 1157.297164][ T31] ? rcu_is_watching+0x12/0xc0 [ 1157.302417][ T31] do_syscall_64+0xcd/0x230 [ 1157.307020][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1157.318758][ T31] RIP: 0033:0x7f83a638e169 [ 1157.327226][ T31] RSP: 002b:00007f83a7235038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1157.348195][ T31] RAX: ffffffffffffffda RBX: 00007f83a65b5fa0 RCX: 00007f83a638e169 [ 1157.356837][ T31] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000004 [ 1157.374792][ T31] RBP: 00007f83a6410a68 R08: 0000000000000000 R09: 0000000000000000 [ 1157.385602][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1157.402574][ T31] R13: 0000000000000000 R14: 00007f83a65b5fa0 R15: 00007ffc87551b08 [ 1157.414458][ T31] [ 1157.417636][ T31] [ 1157.417636][ T31] Showing all locks held in the system: [ 1157.445161][ T31] 1 lock held by khungtaskd/31: [ 1157.451553][ T31] #0: ffffffff8e3c1440 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1157.462056][ T31] 3 locks held by kworker/1:3/979: [ 1157.467224][ T31] #0: ffff88801b480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1157.479630][ T31] #1: ffffc90003a4fd18 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1157.491153][ T31] #2: ffffffff8e3cc978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 1157.523390][ T31] 3 locks held by udevd/5212: [ 1157.529892][ T31] 2 locks held by getty/5596: [ 1157.534627][ T31] #0: ffff888036e720a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1157.548293][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 1157.584979][ T31] 1 lock held by syz-executor/15770: [ 1157.599159][ T31] #0: ffffffff9012e668 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 1157.618314][ T31] 1 lock held by syz-executor/15972: [ 1157.623678][ T31] 7 locks held by syz-executor/16149: [ 1157.638828][ T31] #0: ffff88802d92e420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x240 [ 1157.648043][ T31] #1: ffff88807f362488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 1157.666076][ T31] #2: ffff8880279bac38 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 1157.695675][ T31] #3: ffffffff8f6c8b28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 1157.712425][ T31] #4: ffff88806498b0e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xa4/0x620 [ 1157.728126][ T31] #5: ffff88806498c250 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_drv_remove+0x4a/0x1d0 [ 1157.749539][ T31] #6: ffff888063ce9ac0 (&sb->s_type->i_mutex_key#3){++++}-{4:4}, at: simple_recursive_removal+0x2f5/0x8e0 [ 1157.767295][ T31] 3 locks held by syz.3.2470/16275: [ 1157.774591][ T31] #0: ffff88802a863978 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 1157.793898][ T31] #1: ffff88801eea2420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x240 [ 1157.815114][ T31] #2: ffff88806498c250 (&devlink->lock_key#3){+.+.}-{4:4}, at: devlink_health_report+0x3ba/0x9c0 [ 1157.829523][ T31] 4 locks held by syz-executor/16435: [ 1157.836343][ T31] #0: ffff88802d92e420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x240 [ 1157.852444][ T31] #1: ffff88803259c488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 1157.866244][ T31] #2: ffff8880279bac38 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 1157.897280][ T31] #3: ffffffff8f6c8b28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 1157.910081][ T31] 4 locks held by syz-executor/16681: [ 1157.915654][ T31] #0: ffff88802d92e420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x240 [ 1157.934182][ T31] #1: ffff888021f4a888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 1157.947558][ T31] #2: ffff8880279bac38 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 1157.964200][ T31] #3: ffffffff8f6c8b28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 1157.984465][ T31] 4 locks held by syz-executor/16690: [ 1157.992105][ T31] #0: ffff88802d92e420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x240 [ 1158.008390][ T31] #1: ffff888036273088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 1158.026842][ T31] #2: ffff8880279bac38 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 1158.040321][ T31] #3: ffffffff8f6c8b28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 1158.058447][ T31] 4 locks held by syz-executor/16700: [ 1158.063891][ T31] #0: ffff88802d92e420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x240 [ 1158.081492][ T31] #1: ffff888031e5c888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 1158.096879][ T31] #2: ffff8880279bac38 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 1158.111197][ T31] #3: ffffffff8f6c8b28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 1158.127262][ T31] 4 locks held by syz-executor/16709: [ 1158.137393][ T31] #0: ffff88802d92e420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x240 [ 1158.159395][ T31] #1: ffff888036180888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 1158.175531][ T31] #2: ffff8880279bac38 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 1158.186067][ T31] #3: ffffffff8f6c8b28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 1158.204111][ T31] [ 1158.206495][ T31] ============================================= [ 1158.206495][ T31] [ 1158.227005][ T31] NMI backtrace for cpu 0 [ 1158.227033][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0 PREEMPT(full) [ 1158.227093][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1158.227113][ T31] Call Trace: [ 1158.227123][ T31] [ 1158.227136][ T31] dump_stack_lvl+0x116/0x1f0 [ 1158.227188][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1158.227222][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1158.227269][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1158.227303][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1158.227346][ T31] watchdog+0xf70/0x12c0 [ 1158.227401][ T31] ? __pfx_watchdog+0x10/0x10 [ 1158.227445][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1158.227493][ T31] ? __kthread_parkme+0x19e/0x250 [ 1158.227539][ T31] ? __pfx_watchdog+0x10/0x10 [ 1158.227584][ T31] kthread+0x3c2/0x780 [ 1158.227634][ T31] ? __pfx_kthread+0x10/0x10 [ 1158.227682][ T31] ? __pfx_kthread+0x10/0x10 [ 1158.227735][ T31] ? __pfx_kthread+0x10/0x10 [ 1158.227783][ T31] ? __pfx_kthread+0x10/0x10 [ 1158.227830][ T31] ? rcu_is_watching+0x12/0xc0 [ 1158.227865][ T31] ? __pfx_kthread+0x10/0x10 [ 1158.227916][ T31] ret_from_fork+0x45/0x80 [ 1158.227946][ T31] ? __pfx_kthread+0x10/0x10 [ 1158.227997][ T31] ret_from_fork_asm+0x1a/0x30 [ 1158.228065][ T31] [ 1158.228077][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1158.372965][ C1] NMI backtrace for cpu 1 [ 1158.372986][ C1] CPU: 1 UID: 0 PID: 11851 Comm: kworker/u8:13 Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0 PREEMPT(full) [ 1158.373019][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1158.373036][ C1] Workqueue: bat_events batadv_nc_worker [ 1158.373073][ C1] RIP: 0010:hlock_class+0x13/0x70 [ 1158.373103][ C1] Code: 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f b7 47 20 66 25 ff 1f 0f b7 c0 48 0f a3 05 bd b5 15 14 <73> 15 48 8d 04 80 48 8d 04 80 48 8d 04 c5 60 ef ac 95 c3 cc cc cc [ 1158.373128][ C1] RSP: 0018:ffffc90003a7f9e0 EFLAGS: 00000003 [ 1158.373147][ C1] RAX: 0000000000000737 RBX: 0000000000000005 RCX: 0000000000000000 [ 1158.373164][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff88807d6d8af0 [ 1158.373180][ C1] RBP: ffff88807d6d8af0 R08: 0000000000000000 R09: 0000000000000001 [ 1158.373196][ C1] R10: 0000000000000000 R11: ffffffff8e3c1440 R12: 0000000000000000 [ 1158.373212][ C1] R13: 0000000000000001 R14: ffff88807d6d8000 R15: 0000000000000000 [ 1158.373229][ C1] FS: 0000000000000000(0000) GS:ffff888124abd000(0000) knlGS:0000000000000000 [ 1158.373254][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1158.373271][ C1] CR2: 0000556ae1a02680 CR3: 0000000033218000 CR4: 00000000003526f0 [ 1158.373288][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1158.373303][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1158.373318][ C1] Call Trace: [ 1158.373326][ C1] [ 1158.373334][ C1] __lock_acquire+0x2b6/0x1ba0 [ 1158.373371][ C1] ? __lock_acquire+0xaa4/0x1ba0 [ 1158.373409][ C1] lock_acquire+0x179/0x350 [ 1158.373443][ C1] ? batadv_nc_worker+0x159/0x1030 [ 1158.373476][ C1] ? batadv_nc_worker+0x895/0x1030 [ 1158.373509][ C1] batadv_nc_worker+0x16a/0x1030 [ 1158.373540][ C1] ? batadv_nc_worker+0x159/0x1030 [ 1158.373572][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1158.373609][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 1158.373645][ C1] ? rcu_is_watching+0x12/0xc0 [ 1158.373674][ C1] process_one_work+0x9cc/0x1b70 [ 1158.373709][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 1158.373742][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1158.373770][ C1] ? assign_work+0x1a0/0x250 [ 1158.373810][ C1] worker_thread+0x6c8/0xf10 [ 1158.373841][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1158.373865][ C1] kthread+0x3c2/0x780 [ 1158.373903][ C1] ? __pfx_kthread+0x10/0x10 [ 1158.373939][ C1] ? __pfx_kthread+0x10/0x10 [ 1158.373977][ C1] ? __pfx_kthread+0x10/0x10 [ 1158.374014][ C1] ? __pfx_kthread+0x10/0x10 [ 1158.374051][ C1] ? rcu_is_watching+0x12/0xc0 [ 1158.374076][ C1] ? __pfx_kthread+0x10/0x10 [ 1158.374114][ C1] ret_from_fork+0x45/0x80 [ 1158.374138][ C1] ? __pfx_kthread+0x10/0x10 [ 1158.374176][ C1] ret_from_fork_asm+0x1a/0x30 [ 1158.374223][ C1] [ 1158.672665][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1158.679594][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0 PREEMPT(full) [ 1158.691469][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1158.701570][ T31] Call Trace: [ 1158.704889][ T31] [ 1158.707856][ T31] dump_stack_lvl+0x3d/0x1f0 [ 1158.712515][ T31] panic+0x71c/0x800 [ 1158.716479][ T31] ? __pfx_panic+0x10/0x10 [ 1158.720963][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1158.726393][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1158.732419][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1158.737843][ T31] ? watchdog+0xdda/0x12c0 [ 1158.742320][ T31] ? watchdog+0xdcd/0x12c0 [ 1158.746803][ T31] watchdog+0xdeb/0x12c0 [ 1158.751114][ T31] ? __pfx_watchdog+0x10/0x10 [ 1158.755860][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1158.761127][ T31] ? __kthread_parkme+0x19e/0x250 [ 1158.766210][ T31] ? __pfx_watchdog+0x10/0x10 [ 1158.770948][ T31] kthread+0x3c2/0x780 [ 1158.775084][ T31] ? __pfx_kthread+0x10/0x10 [ 1158.779736][ T31] ? __pfx_kthread+0x10/0x10 [ 1158.784386][ T31] ? __pfx_kthread+0x10/0x10 [ 1158.789040][ T31] ? __pfx_kthread+0x10/0x10 [ 1158.793701][ T31] ? rcu_is_watching+0x12/0xc0 [ 1158.798516][ T31] ? __pfx_kthread+0x10/0x10 [ 1158.803170][ T31] ret_from_fork+0x45/0x80 [ 1158.807646][ T31] ? __pfx_kthread+0x10/0x10 [ 1158.812304][ T31] ret_from_fork_asm+0x1a/0x30 [ 1158.817164][ T31] [ 1158.825467][ T31] Kernel Offset: disabled [ 1158.829823][ T31] Rebooting in 86400 seconds..