last executing test programs: 14.118150235s ago: executing program 3 (id=474): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x82000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) mmap$auto(0x0, 0x400008, 0x1000df, 0x9b72, 0x2, 0x8000) socket(0xa, 0x2, 0x3a) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) madvise$auto(0x110c230000, 0x1, 0x9) socket(0x2, 0xa, 0xe57a) ioctl$auto(0x3, 0x9, 0xfffffffffffff4e0) write$auto(0x3, 0x0, 0x7fffffff) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) r1 = socket(0x2b, 0x1, 0x1) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r1, 0x0, 0x20000001) unshare$auto(0x40000080) socket(0xa, 0x1, 0x100) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) socket(0x2, 0x5, 0x0) 13.113539666s ago: executing program 0 (id=478): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) ioctl$auto(0xffffffffffffffff, 0x64c8, 0x1e2) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) get_mempolicy$auto(0x0, 0x0, 0x3, 0x1ff, 0x3) r1 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x1a6b75d63882a712, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r1, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_TIOCVHANGUP2(0xffffffffffffffff, 0x5437, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0xe9, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xf90000, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 12.178311047s ago: executing program 0 (id=481): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) ioctl$auto(0xffffffffffffffff, 0x64c8, 0x1e2) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) get_mempolicy$auto(0x0, 0x0, 0x3, 0x1ff, 0x3) r1 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x1a6b75d63882a712, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r1, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_TIOCVHANGUP2(0xffffffffffffffff, 0x5437, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) openat$auto_bm_status_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) mmap$auto(0x0, 0xe9, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xf90000, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 10.918715456s ago: executing program 0 (id=483): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_UBI_IOCDET(0xffffffffffffffff, 0x40046f41, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r1 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/sctp/rto_beta_exp_divisor\x00', 0xa0081, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r2, 0x0, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/pcmC1D0p\x00', 0x4000, 0x0) readv$auto(r1, &(0x7f0000000680)={0x0, 0x40200}, 0x3) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) ppoll$auto(&(0x7f0000000000)={r0, 0x40}, 0x2, 0x0, 0x0, 0x8) ioctl$auto_SNDCTL_DSP_SYNC(r0, 0x5001, 0xfffffffffffffffc) modify_ldt$auto(0x1, 0x0, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) r3 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r3, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{W\xed>\xe7l\xcb\x90\\/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x400) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) getpid() prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/net\x00') mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) write$auto(0x3, 0x0, 0xffd8) 9.336654197s ago: executing program 0 (id=488): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) r0 = socket(0x2b, 0x1, 0x1) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r0, 0x0, 0x20000001) madvise$auto(0x0, 0xffffffffffff0004, 0x19) kill$auto(0x0, 0x21) madvise$auto(0x0, 0x200007, 0x8) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_MPP(r0, 0x0, 0x880) munmap$auto(0x8000, 0xffffffff) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0x400000eb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x10000000000048, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) io_uring_enter$auto(r1, 0x8001, 0x80, 0xf, &(0x7f0000000040)="6f6fdfc624482b6feebecf0c6f9b95dfda4c61249e97790decc0a3b8885108e61e06e4de584eb953737116e751be9b06447d68ceb2fbe4cab38f1f351737e8a1acfa09e4ad456d9b26a7f85a39540a7cb4f7adedabc87237db4dc316f7f529c11804c2db4dbf598c1ea68248f57e56", 0x5) read$auto(r1, 0x0, 0xb4d3) 9.012582821s ago: executing program 2 (id=489): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match\x00', 0x20080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000280)=""/175, 0xaf) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0xa0942, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x3, 0x6, 0x0, 0x200000000000001, 0x368e, 0x2, {0x100000000, 0x4}, 0xff, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x8000000c, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) r3 = socket(0x15, 0x5, 0x0) ustat$auto(0x801, 0x0) sendmsg$auto(r3, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x23, 0x0) r4 = socket(0x11, 0xa, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200) listmount$auto(&(0x7f0000000040)={0x200, @inferred=r0, 0x7f, 0x81, 0x400}, &(0x7f0000000140)=0x10000, 0xf, 0x5) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) write$auto(r5, &(0x7f0000000300)='*o\xd3\xa49\xaf\xa9\xe4\xe17\x12\xb3Z\x17I\x82\xdc\xbeiw\xc1\xd1\x8d\x9b\r\x9aR\xe7\x9f\xd8\xab\x16`f\nT\xaa\xfap \xe6\xdaV\xdeD\x8dR5\xd2\xe58\n\xff\x19+\xeb\xb3+\xf6\xc6\a\x00\x00\x00\xf1A\xa5\x95\x1fk\x1f\xff\x99gP\x9e\x88\x97]\x93\xf4\xdd<\xe7p\x0e\xd4C\xdc\x84\v\xafz\xfd\x81\xa3\xb2\xbb\xa4\xd9\xf2P\xa8\xe9\x8f\x13\xa7\x98\x85\xf8\v\aB\xfc\xfa\x14E\xb8y\x884<\xa7\xffyb\x8a\b\xbb\x1b\x13W\xe3\xf7\xd8\x83\xc9\xd7\x8c', 0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x1c, r7, 0x301, 0x70b52c, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x17}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r6) 9.011773805s ago: executing program 3 (id=490): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC2\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0x6) unshare$auto(0x40000080) ioctl$auto_USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000240)={0x88, 0x9, 0x0}) unshare$auto(0x9) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x29, 0x1, 0x2) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x11, 0x3, 0x9) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x5, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0xfb, 0x2000c, 0x4000000000df, 0xeb1, r2, 0x8000) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r3, 0x0, 0xfff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/loop15/queue/discard_granularity\x00', 0x18380, 0x0) unshare$auto(0x40000080) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video17\x00', 0x80800, 0x0) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video23\x00', 0x0, 0x0) read$auto_v4l2_fops_v4l2_dev(r4, &(0x7f0000000000)=""/194, 0xc2) select$auto(0x5, &(0x7f0000000080)={[0x400020000008, 0xfffffffffffffffc, 0xb, 0x6, 0x6c0, 0x3, 0x3, 0x1ffe000, 0x5, 0x2, 0x9, 0x4, 0xa657, 0x202, 0xd3, 0x1]}, 0x0, 0x0, 0x0) ioctl$auto_TCFLSH2(0xffffffffffffffff, 0x540b, &(0x7f0000000140)="181ecff6d65ff321d095a776216661fdba3cee5a776c2dfc4a45e730a9df0a45e9f3eae21340ffbd639751250ebb9c6b6c1ec022596c8542ba41316d9b143dea2cf13c3b3fcd2e2c947ad5394f56c581488fd092a87664f7842bcc00c51950b69ca2d9ead673cd822bc905e80ee4a85182ed8bc817a674bc4e44e9321c924b7a") 9.011152977s ago: executing program 1 (id=497): openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) mmap$auto(0x7, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) write$auto_force_wakeup_fops_hci_vhci(0xffffffffffffffff, &(0x7f0000000080)="305b0a8f34915766fca3fb72133618de834c1d0cbb0bcd7ff19baad4ec1b020bc78d852189f51aafd33a851c1e6de42e41b662cd9d878702c7", 0x39) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x60800, 0x0) write$auto(0xc8, 0x0, 0x4040f6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fcdbdf25040000000400100008000cf1edfba1d1e45aea61b8f7020700000002681af944a5465101930e1f4b991ef2f10f485ddf80e07251de39066555baed365ef3"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) rseq$auto(&(0x7f0000000000)={0xe, 0x400, 0x0, 0x20006, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) brk$auto(0xffffffffffffff66) fanotify_init$auto(0x65, 0x2) r4 = fsopen$auto(0x0, 0x1) kcmp$auto(0x1, 0x1, 0x0, 0x100000004, 0x100000001) fspick$auto(0xffffffffffffffff, 0x0, 0x3) r5 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000200), 0x100000, 0x0) close_range$auto(r5, r4, 0x0) sendmsg$auto_WG_CMD_SET_DEVICE(r3, 0x0, 0x4000010) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000840)={{@raw=0x8, 0x7, 0xba28, 0x0, "708c58271a7985a7f5ed0dd58af8d149fc53d81fd4a7553c2ff48b48a8a57689adcc1ca6d2cbfa93b50590c9", @raw=0xd}, 0x0, @bytes=@data="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", "fa491e08108961dd5708680f1134935851612a52d629535f54f3832490fc4e7f79daef312b3df3307044713a4801d409aefe3f932f78fc311771094e769c0095f94ee6d74f2517f34a0bbbf502bf3392ac4d93bde5f733ba936c0890312cf035bc44117db9b683eedc5e02a703fc82750d8d6ebac0c3019ef8e6c1eecea33a59"}) getpid() 7.319366373s ago: executing program 2 (id=491): name_to_handle_at$auto(0x1010, 0x0, 0x0, 0x0, 0x202) getsockopt$auto_SO_PRIORITY(0xffffffffffffffff, 0x5, 0xc, &(0x7f0000000080)='\"\x81=\x00\xfdhhZ\xa0\x16\xda`\x00\x00\x00\x00\x00\x00\x00\xe0\x18\x98\x99\x00\x00\xbf\x04\xd7', 0x0) r0 = socket(0x15, 0x5, 0x0) fchmodat$auto(0xffffffffffffffff, 0x0, 0x111f) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) sysfs$auto(0x2, 0x2, 0x0) unshare$auto(0x40000080) mbind$auto(0x8000, 0x7f, 0x2, &(0x7f0000000280)=0x20000000000000fb, 0x3, 0x1) r1 = getpgid(0x0) rt_tgsigqueueinfo$auto(0xffffffffffffffff, r1, 0x8, 0x0) syz_clone3(0x0, 0x0) sendmsg$auto(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) mmap$auto(0x6, 0x0, 0xdf, 0xeb1, 0x3fd, 0x8000) r2 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101600, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_UI_GET_VERSION(r2, 0x8004552d, 0x0) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, 0x0, 0x582, 0x0) ioctl$auto_FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0xffffffffffffffff) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/devices/virtual/block/zram0/queue/io_poll\x00', 0xa001, 0x0) r4 = openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace_clock\x00', 0xc0002, 0x0) writev$auto(r4, 0x0, 0x5) write$auto(r3, 0x0, 0x7f) read$auto(0xffffffffffffffff, 0x0, 0x9) 6.290910703s ago: executing program 1 (id=492): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) ioctl$auto(0xffffffffffffffff, 0x64c8, 0x1e2) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) get_mempolicy$auto(0x0, 0x0, 0x3, 0x1ff, 0x3) r1 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x1a6b75d63882a712, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r1, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_TIOCVHANGUP2(0xffffffffffffffff, 0x5437, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) openat$auto_bm_status_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) mmap$auto(0x0, 0xe9, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xf90000, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 5.848299082s ago: executing program 3 (id=493): openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40040, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x14, 0xfffffffffffffffa, 0x6) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0x20200, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd2/queue/io_timeout\x00', 0x129882, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) ioctl$auto_RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000000)={0x1, 0x6, {0x8005, 0x3, 0x2, 0x7, 0x2, 0x73, 0xfffffffd, 0x10003}}) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0xfff, 0x4800c000, 0x800c000}, 0x4) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) timerfd_create$auto(0x9, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000080)='/proc/kpageflags\x00', 0x2, 0x0) readv$auto(0x3, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D1p\x00', 0x501900, 0x0) open(0x0, 0x200000, 0x181) msync$auto(0x1ffff000, 0x1800000ff010000, 0x400000004) socket(0x28, 0x800, 0x7ff) mlockall$auto(0x10006) 5.302271265s ago: executing program 2 (id=494): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) ioctl$auto(0xffffffffffffffff, 0x64c8, 0x1e2) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) get_mempolicy$auto(0x0, 0x0, 0x3, 0x1ff, 0x3) r1 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x1a6b75d63882a712, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r1, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_TIOCVHANGUP2(0xffffffffffffffff, 0x5437, 0x0) openat$auto_bm_status_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0xe9, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xf90000, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 4.875385495s ago: executing program 3 (id=495): mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) unshare$auto(0x40000080) r0 = open(0x0, 0x22240, 0x154) fcntl$auto(r0, 0x400, 0x1) execve$auto(0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x200, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20681, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) writev$auto(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x4}, 0x9) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0xfffffffffffffffe, 0x3, 0x400000000a, 0xebc, 0xffffffffffffffff, 0xfffffffffffffffa) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) msgget$auto(0x9, 0x0) 4.770887095s ago: executing program 0 (id=496): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) connect$auto(0xffffffffffffffff, &(0x7f0000000140)=@qipcrtr={0x2a, 0x1, 0x3fff}, 0x57) socket(0x18, 0xa, 0x1) connect$auto(0x3, 0x0, 0x55) sendmmsg$auto(0x3, 0x0, 0x3, 0x6) mmap$auto(0x0, 0x4, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) setsockopt$auto_SO_TIMESTAMPING_NEW(0xffffffffffffffff, 0x7ff, 0x41, &(0x7f0000000080)='/dev/sequencer\x00', 0x9) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x48140, 0x0) ioctl$auto_TIOCSWINSZ2(r2, 0x5414, &(0x7f0000000040)) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) keyctl$auto(0x8, 0xfffffffffffffffd, 0xffffffffffffffff, 0x5092, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) unshare$auto(0x40000080) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) swapon$auto(&(0x7f0000000040)='K\xe7', 0x8000004) 4.632826513s ago: executing program 1 (id=498): mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) unshare$auto(0x40000080) r0 = open(0x0, 0x22240, 0x154) fcntl$auto(r0, 0x400, 0x1) execve$auto(0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x200, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x5, 0x0, 0x200056f) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) writev$auto(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x4}, 0x9) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0xfffffffffffffffe, 0x3, 0x400000000a, 0xebc, 0xffffffffffffffff, 0xfffffffffffffffa) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) msgget$auto(0x9, 0x0) 3.39191575s ago: executing program 0 (id=499): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x82000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) mmap$auto(0x0, 0x400008, 0x1000df, 0x9b72, 0x2, 0x8000) socket(0xa, 0x2, 0x3a) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) madvise$auto(0x110c230000, 0x1, 0x9) socket(0x2, 0xa, 0xe57a) ioctl$auto(0x3, 0x9, 0xfffffffffffff4e0) write$auto(0x3, 0x0, 0x7fffffff) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) r1 = socket(0x2b, 0x1, 0x1) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r1, 0x0, 0x20000001) unshare$auto(0x40000080) socket(0xa, 0x1, 0x100) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) socket(0x2, 0x5, 0x0) 3.331973875s ago: executing program 2 (id=500): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyu3\x00', 0x1, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, &(0x7f0000000080)="f5c94556d7b994ee4c7d6b964e87cfce41d8b86d8574badcc9a0191d85605665e0fa950b247f4667f57ca338d45bd2f88e5dd3dfe6600774e6503521259e0c7c3ddd5099d8b948915c1d3f49efad80b766") mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000200), 0xffffffffffffffff) ioctl$auto_TIOCSTI2(r1, 0x5412, &(0x7f0000000240)="e25a43a65c6cca6c9411c2746b41e9359a2d8bb15d8a3e5581af2300e0e4d52dab848a5e99dd3fb47ef1848ca5105bfd0c8db60ef1fef0e9bebc947cd9f6f1ca5ee8ebf43d91905392610ada852e3312f6cb3e874aa0eb47f59245386744ef1087c9dd1ca2d1f1cd3c844c1199b1dbaccbc09f1638f2f27352ee732b3daa6560b50e0a797394f17d0530dd316d542e58") sendmsg$auto_ETHTOOL_MSG_EEE_GET(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x400c850) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x580f, 0xffb, 0x8000000008011, 0x3, 0x0) madvise$auto(0x0, 0x2003f0, 0x15) getresgid$auto(0x0, &(0x7f0000000a40)=0x2, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xe0002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(r4, 0x1, 0x10, &(0x7f0000000040)='\x00\x15\x8d\xca`\xbcgY\xd2w\xf6\xaedN\xfb\xc2_\xf54\xb4z\n*\xaaL\'\xab>q\x9e\xdd`\x84_\r\xc2\x17\xb1\xaf\xd2\f\xfd[Iy\xbb*$\xec\xca\x8b\xde\xdcV@\x04+\x00'/82, 0xba) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) r5 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r5, 0x0, 0xb4d3) write$auto(r0, 0x0, 0x7ff) write$auto(0x3, 0x0, 0xffd8) syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000001a40), r0) 3.161392288s ago: executing program 1 (id=501): openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) mmap$auto(0x7, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) write$auto_force_wakeup_fops_hci_vhci(0xffffffffffffffff, &(0x7f0000000080)="305b0a8f34915766fca3fb72133618de834c1d0cbb0bcd7ff19baad4ec1b020bc78d852189f51aafd33a851c1e6de42e41b662cd9d878702c7", 0x39) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x60800, 0x0) write$auto(0xc8, 0x0, 0x4040f6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fcdbdf25040000000400100008000cf1edfba1d1e45aea61b8f7020700000002681af944a5465101930e1f4b991ef2f10f485ddf80e07251de39066555baed365ef3"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) rseq$auto(&(0x7f0000000000)={0xe, 0x400, 0x0, 0x20006, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) brk$auto(0xffffffffffffff66) fanotify_init$auto(0x65, 0x2) r4 = fsopen$auto(0x0, 0x1) kcmp$auto(0x1, 0x1, 0x0, 0x100000004, 0x100000001) fspick$auto(0xffffffffffffffff, 0x0, 0x3) r5 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000200), 0x100000, 0x0) close_range$auto(r5, r4, 0x0) sendmsg$auto_WG_CMD_SET_DEVICE(r3, 0x0, 0x4000010) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000840)={{@raw=0x8, 0x7, 0xba28, 0x0, "708c58271a7985a7f5ed0dd58af8d149fc53d81fd4a7553c2ff48b48a8a57689adcc1ca6d2cbfa93b50590c9", @raw=0xd}, 0x0, @bytes=@data="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", "fa491e08108961dd5708680f1134935851612a52d629535f54f3832490fc4e7f79daef312b3df3307044713a4801d409aefe3f932f78fc311771094e769c0095f94ee6d74f2517f34a0bbbf502bf3392ac4d93bde5f733ba936c0890312cf035bc44117db9b683eedc5e02a703fc82750d8d6ebac0c3019ef8e6c1eecea33a59"}) getpid() 2.522457534s ago: executing program 3 (id=502): mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) unshare$auto(0x40000080) r0 = open(0x0, 0x22240, 0x154) fcntl$auto(r0, 0x400, 0x1) execve$auto(0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x200, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x5, 0x0, 0x200056f) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20681, 0x0) writev$auto(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x4}, 0x9) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0xfffffffffffffffe, 0x3, 0x400000000a, 0xebc, 0xffffffffffffffff, 0xfffffffffffffffa) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) msgget$auto(0x9, 0x0) 1.454717697s ago: executing program 1 (id=503): move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$auto_VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) r1 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) ppoll$auto(&(0x7f0000000000)={r1, 0x81, 0x9}, 0x9, 0x0, 0x0, 0x8) socketpair$auto(0xf, 0x7fff, 0x4, &(0x7f0000000180)=0x8) mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000) r2 = openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/enable\x00', 0x40, 0x0) readv$auto(r2, &(0x7f0000000100)={&(0x7f0000000140), 0x6}, 0x1) mmap$auto(0x0, 0x20006, 0x4000000000de, 0x10010, 0xffffffffffffffff, 0x8001) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.7/usb8/power/autosuspend\x00', 0xa0302, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000040), 0xffffffffffffffff) write$auto(0x3, 0x0, 0xfdef) fcntl$auto(0xffffffffffffffff, 0x8, 0x1) fcntl$getown(0xffffffffffffffff, 0x9) read$auto(0x4, 0x0, 0xfdef) msgctl$auto_IPC_SET(0x5, 0x1, &(0x7f0000000080)={{0x7, 0xee01, 0xee00, 0x6, 0x7, 0xa, 0x8}, 0x0, 0x0, 0x5, 0x1, 0x0, 0x297, 0x8, 0xad2a, 0x82, 0x2}) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0x101500, 0x0) ioctl$auto_BLKIOMIN(0xffffffffffffffff, 0x1278, 0x0) 1.454591148s ago: executing program 3 (id=504): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r0 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000180)='/proc/softirqs\x00', 0x400, 0x0) kill$auto(0x0, 0x12) preadv$auto(r0, &(0x7f0000009180)={&(0x7f0000008180), 0x7}, 0x26, 0x80, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) clone$auto(0x20003b46, 0x100000000000005, 0x0, 0x0, 0x2) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/input/event0\x00', 0x40000, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0xfffffffffffffffe, 0x200006, 0x6, 0x40eb1, 0x602, 0xcf05) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) madvise$auto(0x0, 0x20499d, 0x9) mmap$auto(0x0, 0xffffffffffffffff, 0xffb, 0x8000000008011, r1, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) ioctl$auto(r1, 0x541d, 0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x2, 0x2) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 1.397352831s ago: executing program 2 (id=505): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x28102, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0x20000000000000d4, 0x1, 0x6, 0x0, 0x7, 0x368a, 0x2, {0x100000000, 0x10000}, 0x5, 0x8, 0xfffffffffffffffd, 0x1007fff, 0x0, 0x8, 0x81, 0xdfffffffffff628e, 0x6, 0xdeb1, 0x808}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3db) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$auto(r1, 0x5453, r1) getrandom$auto(0x0, 0x8, 0x7) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/i8042/serio0/force_release\x00', 0xc2082, 0x0) write$auto(r2, &(0x7f00000004c0)='N\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x7ff) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, &(0x7f00000007c0)=""/153, 0x99) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) setsockopt$auto(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x56b) mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x2, 0xc) r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10004010) 88.381541ms ago: executing program 2 (id=506): mmap$auto(0x3, 0x8001, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x880080, 0x0) bpf$auto(0x40000e, &(0x7f00000002c0)=@bpf_attr_4={0x2, r0, 0x1, r0}, 0x5) read$auto_kernfs_file_fops_kernfs_internal(r0, 0x0, 0x0) open(0x0, 0x222ac2, 0x5d745cb200ae4d73) preadv$auto(0x3, &(0x7f0000000040)={0x0, 0x8000000}, 0x3, 0xf8, 0x10) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/oom_adj\x00', 0x4000, 0x0) read$auto(r1, 0x0, 0x1f40) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/loop12/queue/nr_requests\x00', 0x80302, 0x0) mmap$auto(0x0, 0x4, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8002008000) read$auto(r2, 0x0, 0xf30) write$auto(0x3, 0x0, 0xffd8) writev$auto(0xffffffffffffffff, 0x0, 0x3) r3 = gettid() r4 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/7u\x00', 0x28000, 0x0) read$auto_mon_fops_text_t_mon_text(r4, 0x0, 0x0) kill$auto(r3, 0x11) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) open(0x0, 0x22240, 0x2) socket(0x6, 0x5, 0x4) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) 0s ago: executing program 1 (id=507): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) connect$auto(0xffffffffffffffff, &(0x7f0000000140)=@qipcrtr={0x2a, 0x1, 0x3fff}, 0x57) socket(0x18, 0xa, 0x1) connect$auto(0x3, 0x0, 0x55) sendmmsg$auto(0x3, 0x0, 0x3, 0x6) mmap$auto(0x0, 0x4, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) setsockopt$auto_SO_TIMESTAMPING_NEW(0xffffffffffffffff, 0x7ff, 0x41, &(0x7f0000000080)='/dev/sequencer\x00', 0x9) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x48140, 0x0) ioctl$auto_TIOCSWINSZ2(r2, 0x5414, &(0x7f0000000040)) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) keyctl$auto(0x8, 0xfffffffffffffffd, 0xffffffffffffffff, 0x5092, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) unshare$auto(0x40000080) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) swapon$auto(&(0x7f0000000040)='K\xe7', 0x8000004) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.116' (ED25519) to the list of known hosts. [ 92.719472][ T5816] cgroup: Unknown subsys name 'net' [ 92.877947][ T5816] cgroup: Unknown subsys name 'cpuset' [ 92.887617][ T5816] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 94.708218][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 96.932973][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.943762][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.951397][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.959215][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.967579][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.975522][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.012944][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.022205][ T891] cfg80211: failed to load regulatory.db [ 97.033232][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.041981][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.049990][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.118482][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.127064][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.134863][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.143054][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.151387][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.195463][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.205123][ T5831] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.212813][ T5831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.221177][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.229258][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.651170][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 97.793828][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 97.885085][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 97.921804][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.929426][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.937361][ T5825] bridge_slave_0: entered allmulticast mode [ 97.945354][ T5825] bridge_slave_0: entered promiscuous mode [ 97.987968][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.995604][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.003197][ T5825] bridge_slave_1: entered allmulticast mode [ 98.012182][ T5825] bridge_slave_1: entered promiscuous mode [ 98.096992][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 98.134094][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.174125][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.199602][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.206861][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.215202][ T5830] bridge_slave_0: entered allmulticast mode [ 98.222650][ T5830] bridge_slave_0: entered promiscuous mode [ 98.273808][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.281061][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.289541][ T5830] bridge_slave_1: entered allmulticast mode [ 98.297162][ T5830] bridge_slave_1: entered promiscuous mode [ 98.374904][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.387461][ T5825] team0: Port device team_slave_0 added [ 98.396477][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.404514][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.411812][ T5835] bridge_slave_0: entered allmulticast mode [ 98.420533][ T5835] bridge_slave_0: entered promiscuous mode [ 98.438339][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.449582][ T5825] team0: Port device team_slave_1 added [ 98.469990][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.477400][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.484911][ T5835] bridge_slave_1: entered allmulticast mode [ 98.492593][ T5835] bridge_slave_1: entered promiscuous mode [ 98.585525][ T5830] team0: Port device team_slave_0 added [ 98.592303][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.599745][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.626861][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.671355][ T5830] team0: Port device team_slave_1 added [ 98.692391][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.700155][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.726242][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.748115][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.757426][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.764974][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.772319][ T5838] bridge_slave_0: entered allmulticast mode [ 98.779947][ T5838] bridge_slave_0: entered promiscuous mode [ 98.803450][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.810433][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.837129][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.850536][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.858063][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.884965][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.900008][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.924826][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.932504][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.940111][ T5838] bridge_slave_1: entered allmulticast mode [ 98.947557][ T5838] bridge_slave_1: entered promiscuous mode [ 99.030596][ T5835] team0: Port device team_slave_0 added [ 99.039658][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.045450][ T5831] Bluetooth: hci0: command tx timeout [ 99.056871][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.089236][ T5825] hsr_slave_0: entered promiscuous mode [ 99.096188][ T5825] hsr_slave_1: entered promiscuous mode [ 99.107785][ T5835] team0: Port device team_slave_1 added [ 99.123517][ T5831] Bluetooth: hci1: command tx timeout [ 99.209092][ T5830] hsr_slave_0: entered promiscuous mode [ 99.213270][ T5831] Bluetooth: hci2: command tx timeout [ 99.219755][ T5830] hsr_slave_1: entered promiscuous mode [ 99.226490][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.235354][ T5830] Cannot create hsr debugfs directory [ 99.255997][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.262979][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.289410][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.293386][ T5831] Bluetooth: hci3: command tx timeout [ 99.305941][ T5838] team0: Port device team_slave_0 added [ 99.335749][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.342719][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.369803][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.384885][ T5838] team0: Port device team_slave_1 added [ 99.485433][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.492433][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.519094][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.531646][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.538972][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.566254][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.695647][ T5838] hsr_slave_0: entered promiscuous mode [ 99.702070][ T5838] hsr_slave_1: entered promiscuous mode [ 99.709293][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.716976][ T5838] Cannot create hsr debugfs directory [ 99.735802][ T5835] hsr_slave_0: entered promiscuous mode [ 99.742330][ T5835] hsr_slave_1: entered promiscuous mode [ 99.748711][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.756434][ T5835] Cannot create hsr debugfs directory [ 100.180150][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 100.201132][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 100.222869][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 100.235176][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 100.289876][ T5825] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.305556][ T5825] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.316795][ T5825] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.337507][ T5825] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.449559][ T5838] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 100.461635][ T5838] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 100.489531][ T5838] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 100.521686][ T5838] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 100.606071][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 100.634182][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 100.647409][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 100.659314][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 100.697822][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.787918][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.826050][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.833399][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.850888][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.858090][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.897762][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.940535][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.973140][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.980324][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.012990][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.020199][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.078883][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.120883][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.128916][ T5831] Bluetooth: hci0: command tx timeout [ 101.197152][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.206975][ T5831] Bluetooth: hci1: command tx timeout [ 101.225133][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.232314][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.285923][ T5831] Bluetooth: hci2: command tx timeout [ 101.295228][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.302429][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.363441][ T5831] Bluetooth: hci3: command tx timeout [ 101.432897][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.467375][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.474636][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.548304][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.555552][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.736683][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.802951][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.931895][ T5830] veth0_vlan: entered promiscuous mode [ 101.997838][ T5825] veth0_vlan: entered promiscuous mode [ 102.015625][ T5830] veth1_vlan: entered promiscuous mode [ 102.076131][ T5825] veth1_vlan: entered promiscuous mode [ 102.122253][ T5830] veth0_macvtap: entered promiscuous mode [ 102.194476][ T5830] veth1_macvtap: entered promiscuous mode [ 102.241214][ T5825] veth0_macvtap: entered promiscuous mode [ 102.260106][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.273031][ T5825] veth1_macvtap: entered promiscuous mode [ 102.294649][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.320613][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.347478][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.362736][ T5830] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.373538][ T5830] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.382404][ T5830] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.391926][ T5830] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.434994][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.451875][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.467219][ T5835] veth0_vlan: entered promiscuous mode [ 102.487130][ T5825] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.497558][ T5825] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.506529][ T5825] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.515432][ T5825] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.582807][ T5835] veth1_vlan: entered promiscuous mode [ 102.679628][ T5838] veth0_vlan: entered promiscuous mode [ 102.688995][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.700316][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.739143][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.748716][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.760938][ T5838] veth1_vlan: entered promiscuous mode [ 102.800034][ T5835] veth0_macvtap: entered promiscuous mode [ 102.832811][ T5835] veth1_macvtap: entered promiscuous mode [ 102.839047][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.851210][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.889396][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.898723][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.909309][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.932386][ T5838] veth0_macvtap: entered promiscuous mode [ 102.956218][ T5838] veth1_macvtap: entered promiscuous mode [ 102.995699][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.011627][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 103.038794][ T5835] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.053803][ T5835] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.062573][ T5835] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.078970][ T5835] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.169193][ T5893] Zero length message leads to an empty skb [ 103.187862][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.205963][ T5831] Bluetooth: hci0: command tx timeout [ 103.222870][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.283861][ T5831] Bluetooth: hci1: command tx timeout [ 103.332738][ T5838] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.362895][ T5838] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.373602][ T5831] Bluetooth: hci2: command tx timeout [ 103.384681][ T5838] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.419057][ T5838] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.430916][ T5899] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 103.454114][ T5831] Bluetooth: hci3: command tx timeout [ 103.656039][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.673344][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.779600][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.787966][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.878807][ T5907] process 'syz.0.5' launched './file0' with NULL argv: empty string added [ 104.000797][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.023792][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.081308][ T3466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.131094][ T3466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.262165][ T5911] FAULT_INJECTION: forcing a failure. [ 104.262165][ T5911] name failslab, interval 1, probability 0, space 0, times 1 [ 104.321913][ T5911] CPU: 0 UID: 0 PID: 5911 Comm: syz.2.6 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 104.321963][ T5911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 104.321994][ T5911] Call Trace: [ 104.322005][ T5911] [ 104.322022][ T5911] dump_stack_lvl+0x16c/0x1f0 [ 104.322092][ T5911] should_fail_ex+0x512/0x640 [ 104.322141][ T5911] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 104.322191][ T5911] should_failslab+0xc2/0x120 [ 104.322233][ T5911] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 104.322276][ T5911] ? kmem_cache_flags+0x66/0x170 [ 104.322306][ T5911] ? kstrdup_const+0x63/0x80 [ 104.322356][ T5911] kstrdup+0x53/0x100 [ 104.322399][ T5911] kstrdup_const+0x63/0x80 [ 104.322443][ T5911] __kmem_cache_create_args+0x18f/0x390 [ 104.322488][ T5911] copy_pid_ns+0xaa8/0xce0 [ 104.322545][ T5911] ? __pfx_copy_pid_ns+0x10/0x10 [ 104.322603][ T5911] ? copy_mnt_ns+0xac/0xac0 [ 104.322639][ T5911] ? trace_cap_capable+0x18d/0x200 [ 104.322674][ T5911] ? copy_ipcs+0xb6/0x610 [ 104.322716][ T5911] create_new_namespaces+0x2aa/0xad0 [ 104.322765][ T5911] copy_namespaces+0x468/0x560 [ 104.322806][ T5911] copy_process+0x29ff/0x91a0 [ 104.322847][ T5911] ? find_held_lock+0x2b/0x80 [ 104.322882][ T5911] ? schedule+0x2d7/0x3a0 [ 104.322952][ T5911] ? __pfx_copy_process+0x10/0x10 [ 104.323002][ T5911] ? __pfx___futex_wait+0x10/0x10 [ 104.323056][ T5911] ? __pfx_futex_wake_mark+0x10/0x10 [ 104.323113][ T5911] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 104.323166][ T5911] kernel_clone+0xfc/0x960 [ 104.323208][ T5911] ? __pfx_kernel_clone+0x10/0x10 [ 104.323273][ T5911] __do_sys_clone+0xce/0x120 [ 104.323313][ T5911] ? __pfx___do_sys_clone+0x10/0x10 [ 104.323375][ T5911] ? rcu_is_watching+0x12/0xc0 [ 104.323417][ T5911] do_syscall_64+0xcd/0x230 [ 104.323467][ T5911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.323498][ T5911] RIP: 0033:0x7fc86098e969 [ 104.323522][ T5911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.323552][ T5911] RSP: 002b:00007fc8618bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 104.323581][ T5911] RAX: ffffffffffffffda RBX: 00007fc860bb5fa0 RCX: 00007fc86098e969 [ 104.323602][ T5911] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000020003b46 [ 104.323621][ T5911] RBP: 00007fc860a10ab1 R08: 0000000000000002 R09: 0000000000000000 [ 104.323640][ T5911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.323657][ T5911] R13: 0000000000000000 R14: 00007fc860bb5fa0 R15: 00007ffc5ebe1408 [ 104.323697][ T5911] [ 104.649095][ T5911] __kmem_cache_create_args(pid_3) failed with error -12 [ 104.658948][ T5911] CPU: 1 UID: 0 PID: 5911 Comm: syz.2.6 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 104.658999][ T5911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 104.659019][ T5911] Call Trace: [ 104.659030][ T5911] [ 104.659042][ T5911] dump_stack_lvl+0x16c/0x1f0 [ 104.659101][ T5911] __kmem_cache_create_args+0x125/0x390 [ 104.659146][ T5911] copy_pid_ns+0xaa8/0xce0 [ 104.659210][ T5911] ? __pfx_copy_pid_ns+0x10/0x10 [ 104.659269][ T5911] ? copy_mnt_ns+0xac/0xac0 [ 104.659307][ T5911] ? trace_cap_capable+0x18d/0x200 [ 104.659343][ T5911] ? copy_ipcs+0xb6/0x610 [ 104.659387][ T5911] create_new_namespaces+0x2aa/0xad0 [ 104.659437][ T5911] copy_namespaces+0x468/0x560 [ 104.659478][ T5911] copy_process+0x29ff/0x91a0 [ 104.659520][ T5911] ? find_held_lock+0x2b/0x80 [ 104.659554][ T5911] ? schedule+0x2d7/0x3a0 [ 104.659623][ T5911] ? __pfx_copy_process+0x10/0x10 [ 104.659663][ T5911] ? __pfx___futex_wait+0x10/0x10 [ 104.659718][ T5911] ? __pfx_futex_wake_mark+0x10/0x10 [ 104.659774][ T5911] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 104.659832][ T5911] kernel_clone+0xfc/0x960 [ 104.659880][ T5911] ? __pfx_kernel_clone+0x10/0x10 [ 104.659954][ T5911] __do_sys_clone+0xce/0x120 [ 104.659997][ T5911] ? __pfx___do_sys_clone+0x10/0x10 [ 104.660065][ T5911] ? rcu_is_watching+0x12/0xc0 [ 104.660110][ T5911] do_syscall_64+0xcd/0x230 [ 104.660165][ T5911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.660205][ T5911] RIP: 0033:0x7fc86098e969 [ 104.660231][ T5911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.660265][ T5911] RSP: 002b:00007fc8618bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 104.660296][ T5911] RAX: ffffffffffffffda RBX: 00007fc860bb5fa0 RCX: 00007fc86098e969 [ 104.660318][ T5911] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000020003b46 [ 104.660338][ T5911] RBP: 00007fc860a10ab1 R08: 0000000000000002 R09: 0000000000000000 [ 104.660357][ T5911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.660377][ T5911] R13: 0000000000000000 R14: 00007fc860bb5fa0 R15: 00007ffc5ebe1408 [ 104.660420][ T5911] [ 105.283629][ T5831] Bluetooth: hci0: command tx timeout [ 105.363831][ T5831] Bluetooth: hci1: command tx timeout [ 105.453954][ T5831] Bluetooth: hci2: command tx timeout [ 105.523454][ T5831] Bluetooth: hci3: command tx timeout [ 105.598499][ T5933] can: request_module (can-proto-3) failed. [ 105.844118][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.851702][ T5916] FAULT_INJECTION: forcing a failure. [ 105.851702][ T5916] name failslab, interval 1, probability 0, space 0, times 0 [ 105.933302][ T5916] CPU: 0 UID: 0 PID: 5916 Comm: syz.1.2 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 105.933348][ T5916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 105.933367][ T5916] Call Trace: [ 105.933378][ T5916] [ 105.933390][ T5916] dump_stack_lvl+0x16c/0x1f0 [ 105.933442][ T5916] should_fail_ex+0x512/0x640 [ 105.933491][ T5916] ? __kmalloc_node_noprof+0xc5/0x500 [ 105.933534][ T5916] should_failslab+0xc2/0x120 [ 105.933576][ T5916] __kmalloc_node_noprof+0xd8/0x500 [ 105.933612][ T5916] ? rcu_is_watching+0x12/0xc0 [ 105.933642][ T5916] ? obj_cgroup_charge+0x365/0x640 [ 105.933681][ T5916] ? alloc_slab_obj_exts+0x41/0xa0 [ 105.933719][ T5916] alloc_slab_obj_exts+0x41/0xa0 [ 105.933748][ T5916] __memcg_slab_post_alloc_hook+0x27b/0x940 [ 105.933799][ T5916] ? kasan_save_track+0x14/0x30 [ 105.933838][ T5916] kmem_cache_alloc_lru_noprof+0x30f/0x3b0 [ 105.933897][ T5916] ? hugetlbfs_alloc_inode+0x8c/0x1d0 [ 105.933949][ T5916] hugetlbfs_alloc_inode+0x8c/0x1d0 [ 105.934002][ T5916] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 105.934042][ T5916] alloc_inode+0x64/0x240 [ 105.934100][ T5916] new_inode+0x22/0x1c0 [ 105.934157][ T5916] hugetlbfs_get_inode+0x354/0x730 [ 105.934206][ T5916] hugetlb_file_setup+0x15b/0x620 [ 105.934256][ T5916] ksys_mmap_pgoff+0x189/0x5c0 [ 105.934308][ T5916] ? rcu_is_watching+0x12/0xc0 [ 105.934345][ T5916] __x64_sys_mmap+0x125/0x190 [ 105.934383][ T5916] do_syscall_64+0xcd/0x230 [ 105.934441][ T5916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.934474][ T5916] RIP: 0033:0x7fb4c318e969 [ 105.934500][ T5916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.934533][ T5916] RSP: 002b:00007fb4c3ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 105.934564][ T5916] RAX: ffffffffffffffda RBX: 00007fb4c33b5fa0 RCX: 00007fb4c318e969 [ 105.934585][ T5916] RDX: 0000000000000002 RSI: 0000000000a00006 RDI: 0000000000000000 [ 105.934605][ T5916] RBP: 00007fb4c3210ab1 R08: 0000000000000602 R09: 0000300000000000 [ 105.934626][ T5916] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 105.934646][ T5916] R13: 0000000000000000 R14: 00007fb4c33b5fa0 R15: 00007ffcc01f73c8 [ 105.934689][ T5916] [ 106.443521][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.707191][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.167730][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 108.202688][ T5938] vhci_hcd: invalid port number 242 [ 108.230987][ T5938] vhci_hcd: default hub control req: f2ff vffff i00f2 l65535 [ 108.244064][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 108.365123][ T5982] capability: warning: `' uses 32-bit capabilities (legacy support in use) [ 110.423477][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.433587][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.577212][ T30] audit: type=1800 audit(6042340653.548:2): pid=6033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.20" name="file0" dev="tmpfs" ino=38 res=0 errno=0 [ 111.323303][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.332137][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.347580][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 114.815623][ T6077] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 114.902085][ T6088] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input5 [ 116.068370][ T6121] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 117.555983][ T6138] ubi0: attaching mtd0 [ 117.940236][ T6138] ubi0: scanning is finished [ 117.980528][ T6138] ubi0: empty MTD device detected [ 118.007182][ T6138] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 118.613602][ T6138] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 120.101967][ T6158] FAULT_INJECTION: forcing a failure. [ 120.101967][ T6158] name failslab, interval 1, probability 0, space 0, times 0 [ 120.127518][ T6158] CPU: 1 UID: 0 PID: 6158 Comm: syz.3.34 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 120.127561][ T6158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 120.127580][ T6158] Call Trace: [ 120.127590][ T6158] [ 120.127602][ T6158] dump_stack_lvl+0x16c/0x1f0 [ 120.127656][ T6158] should_fail_ex+0x512/0x640 [ 120.127710][ T6158] should_failslab+0xc2/0x120 [ 120.127752][ T6158] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 120.127791][ T6158] ? __alloc_skb+0x2b2/0x380 [ 120.127837][ T6158] __alloc_skb+0x2b2/0x380 [ 120.127885][ T6158] ? __pfx___alloc_skb+0x10/0x10 [ 120.127942][ T6158] _sctp_make_chunk+0x51/0x270 [ 120.127992][ T6158] sctp_make_control+0x2f/0x2d0 [ 120.128041][ T6158] sctp_make_shutdown+0xb6/0x1d0 [ 120.128091][ T6158] ? __pfx_sctp_make_shutdown+0x10/0x10 [ 120.128144][ T6158] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 120.128205][ T6158] sctp_sf_do_9_2_start_shutdown+0x27/0x490 [ 120.128249][ T6158] sctp_sf_do_9_2_prm_shutdown+0x11c/0x150 [ 120.128292][ T6158] ? __pfx_sctp_pname+0x10/0x10 [ 120.128337][ T6158] sctp_do_sm+0x181/0x5c80 [ 120.128381][ T6158] ? __kernel_text_address+0xd/0x40 [ 120.128409][ T6158] ? unwind_get_return_address+0x59/0xa0 [ 120.128445][ T6158] ? arch_stack_walk+0xa6/0x100 [ 120.128501][ T6158] ? __pfx_sctp_do_sm+0x10/0x10 [ 120.128544][ T6158] ? register_lock_class+0x41/0x4c0 [ 120.128633][ T6158] ? mark_held_locks+0x49/0x80 [ 120.128675][ T6158] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 120.128721][ T6158] ? lockdep_hardirqs_on+0x7c/0x110 [ 120.128768][ T6158] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 120.128819][ T6158] sctp_primitive_SHUTDOWN+0x9f/0xd0 [ 120.128875][ T6158] sctp_close+0x3ff/0x940 [ 120.128916][ T6158] ? __pfx_sctp_close+0x10/0x10 [ 120.128948][ T6158] ? __pfx___might_resched+0x10/0x10 [ 120.128994][ T6158] ? ip_mc_drop_socket+0x1f/0x280 [ 120.129033][ T6158] ? down_write+0x14d/0x200 [ 120.129068][ T6158] inet_release+0x13c/0x280 [ 120.129120][ T6158] inet6_release+0x4f/0x70 [ 120.129153][ T6158] __sock_release+0xb3/0x270 [ 120.129198][ T6158] ? __pfx_sock_close+0x10/0x10 [ 120.129238][ T6158] sock_close+0x1c/0x30 [ 120.129277][ T6158] __fput+0x3ff/0xb70 [ 120.129320][ T6158] ? _raw_spin_unlock_irq+0x23/0x50 [ 120.129368][ T6158] task_work_run+0x14d/0x240 [ 120.129422][ T6158] ? __pfx_task_work_run+0x10/0x10 [ 120.129474][ T6158] ? __pfx___do_sys_close_range+0x10/0x10 [ 120.129505][ T6158] ? rcu_is_watching+0x12/0xc0 [ 120.129545][ T6158] syscall_exit_to_user_mode+0x27b/0x2a0 [ 120.129598][ T6158] do_syscall_64+0xda/0x230 [ 120.129651][ T6158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.129685][ T6158] RIP: 0033:0x7fd6ccd8e969 [ 120.129710][ T6158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.129749][ T6158] RSP: 002b:00007fd6cdc7b038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 120.129779][ T6158] RAX: 0000000000000000 RBX: 00007fd6ccfb6240 RCX: 00007fd6ccd8e969 [ 120.129798][ T6158] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 120.129816][ T6158] RBP: 00007fd6cce10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 120.129836][ T6158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.129860][ T6158] R13: 0000000000000000 R14: 00007fd6ccfb6240 R15: 00007ffed99081e8 [ 120.129902][ T6158] [ 121.447026][ T6169] netlink: 'syz.2.37': attribute type 1 has an invalid length. [ 121.483881][ T6169] netlink: 33 bytes leftover after parsing attributes in process `syz.2.37'. [ 123.254906][ T6184] syz.2.41 (6184) used greatest stack depth: 19912 bytes left [ 123.729871][ T6201] syz.3.42 uses obsolete (PF_INET,SOCK_PACKET) [ 124.753423][ T5831] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 125.350764][ T6225] netlink: 28 bytes leftover after parsing attributes in process `syz.3.48'. [ 125.378591][ T6225] bridge_slave_1: left allmulticast mode [ 125.384477][ T6225] bridge_slave_1: left promiscuous mode [ 125.391292][ T6225] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.455224][ T6225] bridge_slave_0: left allmulticast mode [ 125.460974][ T6225] bridge_slave_0: left promiscuous mode [ 125.483515][ T6225] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.357012][ T6231] netlink: 342 bytes leftover after parsing attributes in process `syz.1.49'. [ 126.439937][ T6234] FAULT_INJECTION: forcing a failure. [ 126.439937][ T6234] name failslab, interval 1, probability 0, space 0, times 0 [ 126.493204][ T6234] CPU: 1 UID: 0 PID: 6234 Comm: syz.3.50 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 126.493250][ T6234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 126.493270][ T6234] Call Trace: [ 126.493281][ T6234] [ 126.493293][ T6234] dump_stack_lvl+0x16c/0x1f0 [ 126.493350][ T6234] should_fail_ex+0x512/0x640 [ 126.493409][ T6234] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 126.493446][ T6234] should_failslab+0xc2/0x120 [ 126.493488][ T6234] __kmalloc_cache_noprof+0x6a/0x3e0 [ 126.493523][ T6234] ? smc_stats_init+0x4e/0x160 [ 126.493572][ T6234] ? __pfx_smc_net_stat_init+0x10/0x10 [ 126.493607][ T6234] smc_stats_init+0x4e/0x160 [ 126.493651][ T6234] ? smc_net_init+0x39/0x50 [ 126.493683][ T6234] ops_init+0x1e2/0x5f0 [ 126.493730][ T6234] setup_net+0x21e/0x850 [ 126.493777][ T6234] ? __pfx_setup_net+0x10/0x10 [ 126.493815][ T6234] ? lockdep_init_map_type+0x5c/0x280 [ 126.493861][ T6234] ? __pfx_down_read_killable+0x10/0x10 [ 126.493899][ T6234] ? debug_mutex_init+0x37/0x70 [ 126.493935][ T6234] copy_net_ns+0x2a6/0x5f0 [ 126.493987][ T6234] create_new_namespaces+0x3ea/0xad0 [ 126.494035][ T6234] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 126.494078][ T6234] ksys_unshare+0x45b/0xa40 [ 126.494124][ T6234] ? __pfx_ksys_unshare+0x10/0x10 [ 126.494186][ T6234] ? xfd_validate_state+0x5d/0x180 [ 126.494221][ T6234] ? rcu_is_watching+0x12/0xc0 [ 126.494264][ T6234] __x64_sys_unshare+0x31/0x40 [ 126.494311][ T6234] do_syscall_64+0xcd/0x230 [ 126.494376][ T6234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.494410][ T6234] RIP: 0033:0x7fd6ccd8e969 [ 126.494437][ T6234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.494469][ T6234] RSP: 002b:00007fd6cdcde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 126.494501][ T6234] RAX: ffffffffffffffda RBX: 00007fd6ccfb5fa0 RCX: 00007fd6ccd8e969 [ 126.494523][ T6234] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 126.494543][ T6234] RBP: 00007fd6cce10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 126.494562][ T6234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.494581][ T6234] R13: 0000000000000000 R14: 00007fd6ccfb5fa0 R15: 00007ffed99081e8 [ 126.494623][ T6234] [ 126.826100][ T6245] random: crng reseeded on system resumption [ 127.133387][ T6242] mmap: syz.0.51 (6242) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 127.982102][ T6251] vivid-007: ================= START STATUS ================= [ 127.990507][ T6251] vivid-007: Generate PTS: true [ 128.013346][ T6251] vivid-007: Generate SCR: true [ 128.025472][ T6251] tpg source WxH: 640x360 (Y'CbCr) [ 128.030634][ T6251] tpg field: 1 [ 128.035616][ T6251] tpg crop: (0,0)/640x360 [ 128.040016][ T6251] tpg compose: (0,0)/640x360 [ 128.068581][ T6251] tpg colorspace: 8 [ 128.075607][ T6251] tpg transfer function: 0/0 [ 128.081874][ T6251] tpg Y'CbCr encoding: 0/0 [ 128.088677][ T6251] tpg quantization: 0/0 [ 128.092882][ T6251] tpg RGB range: 0/2 [ 128.103228][ T6251] vivid-007: ================== END STATUS ================== [ 128.510923][ T6261] netlink: 28 bytes leftover after parsing attributes in process `syz.0.55'. [ 128.615874][ T6261] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 128.626245][ T6245] netlink: 346 bytes leftover after parsing attributes in process `syz.2.52'. [ 130.108844][ T6272] FAULT_INJECTION: forcing a failure. [ 130.108844][ T6272] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 130.188804][ T6272] CPU: 0 UID: 0 PID: 6272 Comm: syz.2.58 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 130.188854][ T6272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 130.188874][ T6272] Call Trace: [ 130.188885][ T6272] [ 130.188898][ T6272] dump_stack_lvl+0x16c/0x1f0 [ 130.188955][ T6272] should_fail_ex+0x512/0x640 [ 130.189013][ T6272] should_fail_alloc_page+0xe7/0x130 [ 130.189061][ T6272] prepare_alloc_pages+0x3c2/0x610 [ 130.189115][ T6272] ? __lock_acquire+0x5ca/0x1ba0 [ 130.189165][ T6272] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 130.189223][ T6272] ? __lock_acquire+0x5ca/0x1ba0 [ 130.189273][ T6272] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 130.189359][ T6272] ? filemap_get_entry+0x1a7/0x3b0 [ 130.189411][ T6272] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 130.189473][ T6272] ? policy_nodemask+0xea/0x4e0 [ 130.189520][ T6272] alloc_pages_mpol+0x1fb/0x550 [ 130.189561][ T6272] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 130.189600][ T6272] ? _raw_spin_unlock+0x28/0x50 [ 130.189639][ T6272] ? swap_entry_swapped+0x122/0x190 [ 130.189678][ T6272] ? __pfx_swap_entry_swapped+0x10/0x10 [ 130.189722][ T6272] folio_alloc_mpol_noprof+0x36/0x2f0 [ 130.189770][ T6272] __read_swap_cache_async+0x3b6/0x5a0 [ 130.189808][ T6272] ? __pfx___read_swap_cache_async+0x10/0x10 [ 130.189842][ T6272] ? swp_swap_info+0xce/0x130 [ 130.189882][ T6272] ? __pfx_swp_swap_info+0x10/0x10 [ 130.189933][ T6272] swap_cluster_readahead+0x3eb/0x710 [ 130.189974][ T6272] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 130.190032][ T6272] ? get_vma_policy+0x242/0x3c0 [ 130.190077][ T6272] swapin_readahead+0x13a/0xd60 [ 130.190122][ T6272] ? __pfx_swapin_readahead+0x10/0x10 [ 130.190152][ T6272] ? __filemap_get_folio+0x333/0xc10 [ 130.190206][ T6272] ? swap_cache_get_folio+0x1df/0x450 [ 130.190239][ T6272] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 130.190267][ T6272] ? __pfx_get_swap_device+0x10/0x10 [ 130.190306][ T6272] ? do_swap_page+0x127/0x6030 [ 130.190364][ T6272] do_swap_page+0x67e/0x6030 [ 130.190411][ T6272] ? futex_unqueue+0xba/0x140 [ 130.190461][ T6272] ? __pfx_do_swap_page+0x10/0x10 [ 130.190513][ T6272] ? __pfx_default_wake_function+0x10/0x10 [ 130.190547][ T6272] ? ___pte_offset_map+0x1bc/0x540 [ 130.190599][ T6272] __handle_mm_fault+0x1056/0x2a40 [ 130.190644][ T6272] ? __pfx___handle_mm_fault+0x10/0x10 [ 130.190674][ T6272] ? lock_vma_under_rcu+0x47d/0x970 [ 130.190720][ T6272] ? lock_vma_under_rcu+0x47d/0x970 [ 130.190798][ T6272] handle_mm_fault+0x3fe/0xad0 [ 130.190837][ T6272] do_user_addr_fault+0x60c/0x1370 [ 130.190881][ T6272] exc_page_fault+0x5c/0xc0 [ 130.190925][ T6272] asm_exc_page_fault+0x26/0x30 [ 130.190955][ T6272] RIP: 0033:0x7fc86094380f [ 130.190979][ T6272] Code: c7 00 00 00 00 00 48 c7 40 08 00 00 00 00 c3 66 66 2e 0f 1f 84 00 00 00 00 00 90 81 ce 00 00 ad fb 48 89 f8 66 0f ef c0 89 37 <8b> 3d d7 4e da 00 31 f6 48 c7 40 68 00 00 00 00 85 ff 0f 11 40 08 [ 130.191010][ T6272] RSP: 002b:00007fc8618bed18 EFLAGS: 00010286 [ 130.191035][ T6272] RAX: 00007fc8618bed30 RBX: 00007fc8618befa0 RCX: 0000000000000000 [ 130.191054][ T6272] RDX: 00000000ffffffff RSI: 00000000fbad8000 RDI: 00007fc8618bed30 [ 130.191074][ T6272] RBP: 00007fc8618bee20 R08: 0000000000000000 R09: 0000000000000000 [ 130.191091][ T6272] R10: 0000000000000000 R11: 0000000000000000 R12: 00007fc860a107b4 [ 130.191109][ T6272] R13: 00007fc8618beeb0 R14: 0000000000000000 R15: 00007fc8618bed30 [ 130.191149][ T6272] [ 131.760423][ T6288] netlink: 28 bytes leftover after parsing attributes in process `syz.3.60'. [ 131.789295][ T6288] veth0_macvtap: left promiscuous mode [ 131.796596][ T6288] macvtap0: entered promiscuous mode [ 131.801937][ T6288] macvtap0: entered allmulticast mode [ 136.738175][ T6357] FAULT_INJECTION: forcing a failure. [ 136.738175][ T6357] name failslab, interval 1, probability 0, space 0, times 0 [ 136.751033][ T6357] CPU: 1 UID: 0 PID: 6357 Comm: syz.3.73 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 136.751075][ T6357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 136.751094][ T6357] Call Trace: [ 136.751104][ T6357] [ 136.751116][ T6357] dump_stack_lvl+0x16c/0x1f0 [ 136.751171][ T6357] should_fail_ex+0x512/0x640 [ 136.751219][ T6357] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 136.751262][ T6357] should_failslab+0xc2/0x120 [ 136.751304][ T6357] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 136.751344][ T6357] ? getname_flags.part.0+0x4c/0x550 [ 136.751394][ T6357] getname_flags.part.0+0x4c/0x550 [ 136.751445][ T6357] getname_flags+0x93/0xf0 [ 136.751498][ T6357] do_sys_openat2+0xb8/0x1d0 [ 136.751551][ T6357] ? __pfx_do_sys_openat2+0x10/0x10 [ 136.751614][ T6357] __x64_sys_openat+0x174/0x210 [ 136.751661][ T6357] ? __pfx___x64_sys_openat+0x10/0x10 [ 136.751711][ T6357] ? do_user_addr_fault+0x843/0x1370 [ 136.751755][ T6357] do_syscall_64+0xcd/0x230 [ 136.751820][ T6357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.751850][ T6357] RIP: 0033:0x7fd6ccd8d2d0 [ 136.751873][ T6357] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 136.751902][ T6357] RSP: 002b:00007fd6cdcddf10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 136.751930][ T6357] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fd6ccd8d2d0 [ 136.751949][ T6357] RDX: 0000000000000002 RSI: 00007fd6cdcddfa0 RDI: 00000000ffffff9c [ 136.751967][ T6357] RBP: 00007fd6cdcddfa0 R08: 0000000000000000 R09: 0000000000000000 [ 136.751984][ T6357] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 136.752002][ T6357] R13: 0000000000000000 R14: 00007fd6ccfb5fa0 R15: 00007ffed99081e8 [ 136.752040][ T6357] [ 136.932543][ C1] vkms_vblank_simulate: vblank timer overrun [ 137.567041][ T6370] netlink: 28 bytes leftover after parsing attributes in process `syz.2.72'. [ 137.624929][ T6370] veth0_macvtap: left promiscuous mode [ 137.637119][ T6370] macvtap0: entered promiscuous mode [ 137.687302][ T6370] macvtap0: entered allmulticast mode [ 137.940276][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.946990][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.154647][ T6390] can: request_module (can-proto-3) failed. [ 141.884870][ T6420] vhci_hcd: invalid port number 242 [ 141.895791][ T6420] vhci_hcd: default hub control req: f2ff vffff i00f2 l65535 [ 144.410937][ T6451] netlink: 28 bytes leftover after parsing attributes in process `syz.0.88'. [ 144.421877][ T6451] bridge_slave_1: left allmulticast mode [ 144.430720][ T6451] bridge_slave_1: left promiscuous mode [ 144.455293][ T6451] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.516395][ T6451] bridge_slave_0: left allmulticast mode [ 144.522179][ T6451] bridge_slave_0: left promiscuous mode [ 144.538129][ T6451] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.481694][ T6462] can: request_module (can-proto-3) failed. [ 149.857176][ T6507] vivid-007: ================= START STATUS ================= [ 149.886228][ T6507] vivid-007: Generate PTS: true [ 149.933652][ T6507] vivid-007: Generate SCR: true [ 149.940029][ T6507] tpg source WxH: 640x360 (Y'CbCr) [ 149.963543][ T6507] tpg field: 1 [ 149.967846][ T6507] tpg crop: (0,0)/640x360 [ 149.972244][ T6507] tpg compose: (0,0)/640x360 [ 149.985976][ T6507] tpg colorspace: 8 [ 150.056550][ T6507] tpg transfer function: 0/0 [ 150.061604][ T6507] tpg Y'CbCr encoding: 0/0 [ 150.069787][ T6507] tpg quantization: 0/0 [ 150.079400][ T6507] tpg RGB range: 0/2 [ 150.097828][ T6507] vivid-007: ================== END STATUS ================== [ 150.246546][ T6503] FAULT_INJECTION: forcing a failure. [ 150.246546][ T6503] name failslab, interval 1, probability 0, space 0, times 0 [ 150.299097][ T6503] CPU: 0 UID: 0 PID: 6503 Comm: syz.0.97 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 150.299144][ T6503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 150.299162][ T6503] Call Trace: [ 150.299172][ T6503] [ 150.299185][ T6503] dump_stack_lvl+0x16c/0x1f0 [ 150.299241][ T6503] should_fail_ex+0x512/0x640 [ 150.299297][ T6503] should_failslab+0xc2/0x120 [ 150.299340][ T6503] __kmalloc_cache_noprof+0x6a/0x3e0 [ 150.299376][ T6503] ? __hw_addr_add_ex+0x3c9/0x7c0 [ 150.299434][ T6503] __hw_addr_add_ex+0x3c9/0x7c0 [ 150.299492][ T6503] ? __pfx___hw_addr_add_ex+0x10/0x10 [ 150.299541][ T6503] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 150.299604][ T6503] ? __pfx_loopback_setup+0x10/0x10 [ 150.299646][ T6503] dev_addr_init+0x161/0x250 [ 150.299680][ T6503] ? __pfx_dev_addr_init+0x10/0x10 [ 150.299727][ T6503] alloc_netdev_mqs+0x3d2/0x1570 [ 150.299800][ T6503] ? __pfx_loopback_net_init+0x10/0x10 [ 150.299859][ T6503] loopback_net_init+0x38/0x170 [ 150.299909][ T6503] ? __pfx_loopback_net_init+0x10/0x10 [ 150.299952][ T6503] ops_init+0x1e2/0x5f0 [ 150.299999][ T6503] setup_net+0x21e/0x850 [ 150.300047][ T6503] ? __pfx_setup_net+0x10/0x10 [ 150.300087][ T6503] ? lockdep_init_map_type+0x5c/0x280 [ 150.300132][ T6503] ? __pfx_down_read_killable+0x10/0x10 [ 150.300171][ T6503] ? debug_mutex_init+0x37/0x70 [ 150.300208][ T6503] copy_net_ns+0x2a6/0x5f0 [ 150.300260][ T6503] create_new_namespaces+0x3ea/0xad0 [ 150.300313][ T6503] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 150.300356][ T6503] ksys_unshare+0x45b/0xa40 [ 150.300402][ T6503] ? __pfx_ksys_unshare+0x10/0x10 [ 150.300445][ T6503] ? xfd_validate_state+0x5d/0x180 [ 150.300479][ T6503] ? rcu_is_watching+0x12/0xc0 [ 150.300529][ T6503] __x64_sys_unshare+0x31/0x40 [ 150.300590][ T6503] do_syscall_64+0xcd/0x230 [ 150.300644][ T6503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.300677][ T6503] RIP: 0033:0x7f807df8e969 [ 150.300702][ T6503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.300734][ T6503] RSP: 002b:00007f807ed3d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 150.300770][ T6503] RAX: ffffffffffffffda RBX: 00007f807e1b5fa0 RCX: 00007f807df8e969 [ 150.300791][ T6503] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 150.300810][ T6503] RBP: 00007f807e010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 150.300829][ T6503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.300848][ T6503] R13: 0000000000000000 R14: 00007f807e1b5fa0 R15: 00007ffe139e4c18 [ 150.300891][ T6503] [ 151.572509][ T6523] can: request_module (can-proto-3) failed. [ 153.502361][ T6560] vivid-007: ================= START STATUS ================= [ 153.510202][ T6560] vivid-007: Generate PTS: true [ 153.515317][ T6560] vivid-007: Generate SCR: true [ 153.520234][ T6560] tpg source WxH: 640x360 (Y'CbCr) [ 153.533216][ T6560] tpg field: 1 [ 153.536769][ T6560] tpg crop: (0,0)/640x360 [ 153.541142][ T6560] tpg compose: (0,0)/640x360 [ 153.551143][ T6560] tpg colorspace: 8 [ 153.622860][ T6560] tpg transfer function: 0/0 [ 153.633408][ T6560] tpg Y'CbCr encoding: 0/0 [ 153.652142][ T6560] tpg quantization: 0/0 [ 153.691127][ T6560] tpg RGB range: 0/2 [ 153.712960][ T6560] vivid-007: ================== END STATUS ================== [ 164.690749][ T6708] netlink: 28 bytes leftover after parsing attributes in process `syz.1.142'. [ 164.711253][ T6708] bridge_slave_1: left allmulticast mode [ 164.724514][ T6708] bridge_slave_1: left promiscuous mode [ 164.730412][ T6708] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.817872][ T6708] bridge_slave_0: left allmulticast mode [ 164.829634][ T6708] bridge_slave_0: left promiscuous mode [ 164.863466][ T6708] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.024529][ T5829] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 174.827863][ T6817] netlink: 342 bytes leftover after parsing attributes in process `syz.2.164'. [ 175.593894][ T6821] FAULT_INJECTION: forcing a failure. [ 175.593894][ T6821] name failslab, interval 1, probability 0, space 0, times 0 [ 175.645845][ T6821] CPU: 1 UID: 0 PID: 6821 Comm: syz.2.164 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 175.645902][ T6821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 175.645920][ T6821] Call Trace: [ 175.645931][ T6821] [ 175.645942][ T6821] dump_stack_lvl+0x16c/0x1f0 [ 175.645995][ T6821] should_fail_ex+0x512/0x640 [ 175.646041][ T6821] ? fs_reclaim_acquire+0xae/0x150 [ 175.646091][ T6821] ? tomoyo_encode2+0x100/0x3e0 [ 175.646135][ T6821] should_failslab+0xc2/0x120 [ 175.646174][ T6821] __kmalloc_noprof+0xd2/0x510 [ 175.646208][ T6821] ? d_absolute_path+0x136/0x1a0 [ 175.646253][ T6821] tomoyo_encode2+0x100/0x3e0 [ 175.646305][ T6821] tomoyo_encode+0x29/0x50 [ 175.646346][ T6821] tomoyo_realpath_from_path+0x18f/0x6e0 [ 175.646400][ T6821] tomoyo_check_open_permission+0x2ab/0x3c0 [ 175.646439][ T6821] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 175.646514][ T6821] ? do_raw_spin_lock+0x12c/0x2b0 [ 175.646571][ T6821] tomoyo_file_open+0x6b/0x90 [ 175.646608][ T6821] security_file_open+0x84/0x1e0 [ 175.646653][ T6821] do_dentry_open+0x596/0x1c10 [ 175.646701][ T6821] vfs_open+0x82/0x3f0 [ 175.646752][ T6821] path_openat+0x1e5e/0x2d40 [ 175.646798][ T6821] ? __pfx_path_openat+0x10/0x10 [ 175.646839][ T6821] do_filp_open+0x20b/0x470 [ 175.646878][ T6821] ? __pfx_do_filp_open+0x10/0x10 [ 175.646953][ T6821] ? alloc_fd+0x471/0x7d0 [ 175.646992][ T6821] do_sys_openat2+0x11b/0x1d0 [ 175.647033][ T6821] ? __pfx_do_sys_openat2+0x10/0x10 [ 175.647091][ T6821] __x64_sys_openat+0x174/0x210 [ 175.647135][ T6821] ? __pfx___x64_sys_openat+0x10/0x10 [ 175.647180][ T6821] ? rcu_is_watching+0x12/0xc0 [ 175.647220][ T6821] do_syscall_64+0xcd/0x230 [ 175.647269][ T6821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.647298][ T6821] RIP: 0033:0x7fc86098e969 [ 175.647321][ T6821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.647349][ T6821] RSP: 002b:00007fc86189e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 175.647374][ T6821] RAX: ffffffffffffffda RBX: 00007fc860bb6080 RCX: 00007fc86098e969 [ 175.647393][ T6821] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 175.647411][ T6821] RBP: 00007fc860a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 175.647429][ T6821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.647445][ T6821] R13: 0000000000000000 R14: 00007fc860bb6080 R15: 00007ffc5ebe1408 [ 175.647480][ T6821] [ 175.647543][ T6821] ERROR: Out of memory at tomoyo_realpath_from_path. [ 177.275754][ T6850] FAULT_INJECTION: forcing a failure. [ 177.275754][ T6850] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 177.314628][ T6850] CPU: 1 UID: 0 PID: 6850 Comm: syz.0.169 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 177.314674][ T6850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 177.314693][ T6850] Call Trace: [ 177.314703][ T6850] [ 177.314715][ T6850] dump_stack_lvl+0x16c/0x1f0 [ 177.314772][ T6850] should_fail_ex+0x512/0x640 [ 177.314829][ T6850] _copy_to_user+0x32/0xd0 [ 177.314863][ T6850] cec_ioctl+0x663/0x2970 [ 177.314916][ T6850] ? __pfx_cec_ioctl+0x10/0x10 [ 177.314961][ T6850] ? do_raw_spin_unlock+0x104/0x230 [ 177.315016][ T6850] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 177.315059][ T6850] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 177.315108][ T6850] ? do_vfs_ioctl+0x512/0x1990 [ 177.315157][ T6850] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 177.315234][ T6850] ? find_held_lock+0x2b/0x80 [ 177.315266][ T6850] ? hook_file_ioctl_common+0x145/0x410 [ 177.315326][ T6850] ? __pfx_cec_ioctl+0x10/0x10 [ 177.315373][ T6850] __x64_sys_ioctl+0x193/0x200 [ 177.315424][ T6850] do_syscall_64+0xcd/0x230 [ 177.315489][ T6850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.315524][ T6850] RIP: 0033:0x7f807df8e969 [ 177.315550][ T6850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.315583][ T6850] RSP: 002b:00007f807bdf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 177.315613][ T6850] RAX: ffffffffffffffda RBX: 00007f807e1b6160 RCX: 00007f807df8e969 [ 177.315635][ T6850] RDX: 00002000000000c0 RSI: 00000000c05c6104 RDI: 0000000000000005 [ 177.315655][ T6850] RBP: 00007f807e010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 177.315675][ T6850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.315695][ T6850] R13: 0000000000000000 R14: 00007f807e1b6160 R15: 00007ffe139e4c18 [ 177.315738][ T6850] [ 179.158275][ T6880] netlink: 342 bytes leftover after parsing attributes in process `syz.0.175'. [ 179.740041][ T6883] FAULT_INJECTION: forcing a failure. [ 179.740041][ T6883] name failslab, interval 1, probability 0, space 0, times 0 [ 179.788501][ T6883] CPU: 1 UID: 0 PID: 6883 Comm: syz.0.175 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 179.788548][ T6883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 179.788566][ T6883] Call Trace: [ 179.788576][ T6883] [ 179.788588][ T6883] dump_stack_lvl+0x16c/0x1f0 [ 179.788652][ T6883] should_fail_ex+0x512/0x640 [ 179.788701][ T6883] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 179.788737][ T6883] should_failslab+0xc2/0x120 [ 179.788780][ T6883] __kmalloc_cache_noprof+0x6a/0x3e0 [ 179.788815][ T6883] ? snd_seq_oss_open+0x55/0xa20 [ 179.788872][ T6883] snd_seq_oss_open+0x55/0xa20 [ 179.788930][ T6883] odev_open+0x6f/0x90 [ 179.788972][ T6883] ? __pfx_odev_open+0x10/0x10 [ 179.789017][ T6883] soundcore_open+0x409/0x580 [ 179.789065][ T6883] ? __pfx_soundcore_open+0x10/0x10 [ 179.789109][ T6883] chrdev_open+0x231/0x6a0 [ 179.789145][ T6883] ? __pfx_apparmor_file_open+0x10/0x10 [ 179.789192][ T6883] ? __pfx_chrdev_open+0x10/0x10 [ 179.789235][ T6883] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 179.789296][ T6883] do_dentry_open+0x741/0x1c10 [ 179.789334][ T6883] ? __pfx_chrdev_open+0x10/0x10 [ 179.789380][ T6883] vfs_open+0x82/0x3f0 [ 179.789432][ T6883] path_openat+0x1e5e/0x2d40 [ 179.789484][ T6883] ? __pfx_path_openat+0x10/0x10 [ 179.789531][ T6883] do_filp_open+0x20b/0x470 [ 179.789566][ T6883] ? __pfx_do_filp_open+0x10/0x10 [ 179.789641][ T6883] ? alloc_fd+0x471/0x7d0 [ 179.789684][ T6883] do_sys_openat2+0x11b/0x1d0 [ 179.789732][ T6883] ? __pfx_do_sys_openat2+0x10/0x10 [ 179.789798][ T6883] __x64_sys_openat+0x174/0x210 [ 179.789846][ T6883] ? __pfx___x64_sys_openat+0x10/0x10 [ 179.789897][ T6883] ? rcu_is_watching+0x12/0xc0 [ 179.789941][ T6883] do_syscall_64+0xcd/0x230 [ 179.789996][ T6883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.790030][ T6883] RIP: 0033:0x7f807df8e969 [ 179.790056][ T6883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.790088][ T6883] RSP: 002b:00007f807ed1c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 179.790119][ T6883] RAX: ffffffffffffffda RBX: 00007f807e1b6080 RCX: 00007f807df8e969 [ 179.790141][ T6883] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 179.790162][ T6883] RBP: 00007f807e010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 179.790183][ T6883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.790202][ T6883] R13: 0000000000000000 R14: 00007f807e1b6080 R15: 00007ffe139e4c18 [ 179.790246][ T6883] [ 181.831158][ T6907] can: request_module (can-proto-3) failed. [ 181.900690][ T6911] netlink: 28 bytes leftover after parsing attributes in process `syz.2.181'. [ 181.923972][ T6911] vcan0: entered promiscuous mode [ 192.157143][ T7057] random: crng reseeded on system resumption [ 192.936713][ T7071] can: request_module (can-proto-3) failed. [ 195.108931][ T7075] netlink: 346 bytes leftover after parsing attributes in process `syz.3.206'. [ 196.420875][ T5831] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 197.678754][ T7133] netlink: 28 bytes leftover after parsing attributes in process `syz.3.214'. [ 198.218141][ T7133] bond0: (slave bond_slave_1): Releasing backup interface [ 198.767619][ T7153] can: request_module (can-proto-3) failed. [ 199.378091][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.384583][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.826035][ T7185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.222'. [ 201.863720][ T7185] netlink: 354 bytes leftover after parsing attributes in process `syz.2.222'. [ 213.023877][ T7331] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 213.148468][ T5831] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 213.156979][ T5831] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 215.370140][ T3466] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.630125][ T3466] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.816086][ T3466] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.970649][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 215.986311][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 216.000163][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 216.010403][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 216.020548][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 216.039688][ T3466] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.966032][ T3466] bridge_slave_1: left allmulticast mode [ 216.992672][ T3466] bridge_slave_1: left promiscuous mode [ 217.000656][ T3466] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.041929][ T3466] bridge_slave_0: left allmulticast mode [ 217.050784][ T3466] bridge_slave_0: left promiscuous mode [ 217.057757][ T3466] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.083155][ T5829] Bluetooth: hci1: command tx timeout [ 218.489697][ T3466] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.506753][ T3466] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.531782][ T3466] bond0 (unregistering): Released all slaves [ 219.199159][ T7362] chnl_net:caif_netlink_parms(): no params data found [ 219.461316][ T7419] vivid-007: ================= START STATUS ================= [ 219.469490][ T7419] vivid-007: Generate PTS: true [ 219.476691][ T7419] vivid-007: Generate SCR: true [ 219.493298][ T7419] tpg source WxH: 640x360 (Y'CbCr) [ 219.506303][ T7419] tpg field: 1 [ 219.511523][ T7419] tpg crop: (0,0)/640x360 [ 219.521667][ T7419] tpg compose: (0,0)/640x360 [ 219.526805][ T7419] tpg colorspace: 8 [ 219.536582][ T7419] tpg transfer function: 0/0 [ 219.541907][ T7419] tpg Y'CbCr encoding: 0/0 [ 219.552060][ T7419] tpg quantization: 0/0 [ 219.556478][ T7419] tpg RGB range: 0/2 [ 219.562186][ T7419] vivid-007: ================== END STATUS ================== [ 219.832674][ T3466] hsr_slave_0: left promiscuous mode [ 219.904378][ T3466] hsr_slave_1: left promiscuous mode [ 219.919568][ T3466] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.943313][ T3466] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.010794][ T3466] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.019124][ T3466] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.104035][ T3466] veth1_macvtap: left promiscuous mode [ 220.114316][ T3466] veth1_vlan: left promiscuous mode [ 220.119701][ T3466] veth0_vlan: left promiscuous mode [ 220.173135][ T55] Bluetooth: hci1: command tx timeout [ 221.659952][ T7442] netlink: 'syz.1.263': attribute type 1 has an invalid length. [ 221.925589][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 221.931776][ T55] Bluetooth: hci3: command 0x0406 tx timeout [ 221.936062][ T5139] Bluetooth: hci0: command 0x0406 tx timeout [ 221.980779][ T3466] team0 (unregistering): Port device team_slave_1 removed [ 222.035725][ T3466] team0 (unregistering): Port device team_slave_0 removed [ 222.257701][ T5832] Bluetooth: hci1: command tx timeout [ 222.725087][ T7362] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.732389][ T7362] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.767394][ T7362] bridge_slave_0: entered allmulticast mode [ 222.785954][ T7362] bridge_slave_0: entered promiscuous mode [ 222.808130][ T7362] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.825972][ T7362] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.841916][ T7362] bridge_slave_1: entered allmulticast mode [ 222.860549][ T7362] bridge_slave_1: entered promiscuous mode [ 223.038782][ T7362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.083638][ T7362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.231138][ T7456] FAULT_INJECTION: forcing a failure. [ 223.231138][ T7456] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 223.244709][ T7456] CPU: 1 UID: 0 PID: 7456 Comm: syz.1.266 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 223.244754][ T7456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 223.244773][ T7456] Call Trace: [ 223.244785][ T7456] [ 223.244802][ T7456] dump_stack_lvl+0x16c/0x1f0 [ 223.244861][ T7456] should_fail_ex+0x512/0x640 [ 223.244917][ T7456] _copy_to_user+0x32/0xd0 [ 223.244951][ T7456] cec_ioctl+0x663/0x2970 [ 223.245003][ T7456] ? __pfx_cec_ioctl+0x10/0x10 [ 223.245053][ T7456] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 223.245099][ T7456] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 223.245150][ T7456] ? do_vfs_ioctl+0x512/0x1990 [ 223.245199][ T7456] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 223.245285][ T7456] ? find_held_lock+0x2b/0x80 [ 223.245318][ T7456] ? hook_file_ioctl_common+0x145/0x410 [ 223.245379][ T7456] ? __pfx_cec_ioctl+0x10/0x10 [ 223.245427][ T7456] __x64_sys_ioctl+0x193/0x200 [ 223.245478][ T7456] do_syscall_64+0xcd/0x230 [ 223.245534][ T7456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.245568][ T7456] RIP: 0033:0x7fb4c318e969 [ 223.245594][ T7456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.245627][ T7456] RSP: 002b:00007fb4c3ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 223.245658][ T7456] RAX: ffffffffffffffda RBX: 00007fb4c33b5fa0 RCX: 00007fb4c318e969 [ 223.245680][ T7456] RDX: 0000000000000000 RSI: 00000000c05c6104 RDI: 0000000000000005 [ 223.245700][ T7456] RBP: 00007fb4c3210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 223.245720][ T7456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.245740][ T7456] R13: 0000000000000000 R14: 00007fb4c33b5fa0 R15: 00007ffcc01f73c8 [ 223.245782][ T7456] [ 223.832387][ T7362] team0: Port device team_slave_0 added [ 223.880815][ T7362] team0: Port device team_slave_1 added [ 224.012512][ T5832] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 224.081429][ T7362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.141059][ T7362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.273134][ T7362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.323263][ T5831] Bluetooth: hci1: command tx timeout [ 224.414423][ T7362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.430333][ T7362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.497473][ T7362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.740046][ T7362] hsr_slave_0: entered promiscuous mode [ 224.759478][ T7362] hsr_slave_1: entered promiscuous mode [ 224.779711][ T7362] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 224.803500][ T7362] Cannot create hsr debugfs directory [ 224.920241][ T7478] kafs: addr_prefs: Invalid Command [ 227.372920][ T7362] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 227.567705][ T7362] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 227.663482][ T7362] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 227.776397][ T7362] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 229.371393][ T7362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.417100][ T7362] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.602772][ T3466] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.610656][ T3466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.628607][ T7551] kexec: Could not allocate control_code_buffer [ 229.837370][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.844689][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.535255][ T7362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.067867][ T7362] veth0_vlan: entered promiscuous mode [ 232.111617][ T7362] veth1_vlan: entered promiscuous mode [ 232.242612][ T7362] veth0_macvtap: entered promiscuous mode [ 232.396622][ T7362] veth1_macvtap: entered promiscuous mode [ 232.651406][ T7362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.769174][ T7362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.811527][ T7362] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.834080][ T7362] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.842957][ T7362] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.864438][ T7362] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.391254][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.412063][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.654916][ T6075] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.678763][ T6075] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.271905][ T7661] syz.2.290 (7661): attempted to duplicate a private mapping with mremap. This is not supported. [ 236.415499][ T7662] netlink: zone id is out of range [ 236.423059][ T7662] netlink: zone id is out of range [ 236.488154][ T7662] netlink: zone id is out of range [ 236.493601][ T7662] netlink: zone id is out of range [ 236.498755][ T7662] netlink: zone id is out of range [ 236.523098][ T7662] netlink: zone id is out of range [ 236.568809][ T7662] netlink: zone id is out of range [ 236.589133][ T7662] netlink: zone id is out of range [ 236.645182][ T7662] netlink: zone id is out of range [ 236.650381][ T7662] netlink: zone id is out of range [ 237.417603][ T63] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.021380][ T63] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.415585][ T63] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.772507][ T7711] ubi0: attaching mtd0 [ 238.799544][ T63] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.806133][ T7711] ubi0: scanning is finished [ 238.860871][ T7711] ubi0: empty MTD device detected [ 239.111159][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 239.120891][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 239.145825][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 239.189933][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 239.201165][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 239.413346][ T7711] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 239.513245][ T7711] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 239.520539][ T7711] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 239.541433][ T7711] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 239.553132][ T7711] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 239.570624][ T7711] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 239.581599][ T7711] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1461461604 [ 239.592394][ T7711] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 239.608519][ T7721] ubi0: background thread "ubi_bgt0d" started, PID 7721 [ 241.211185][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.232415][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.248535][ T63] bond0 (unregistering): Released all slaves [ 241.283605][ T5832] Bluetooth: hci0: command tx timeout [ 241.792807][ T63] hsr_slave_0: left promiscuous mode [ 241.811379][ T63] hsr_slave_1: left promiscuous mode [ 241.821578][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.829205][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.837882][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.845550][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.874417][ T63] veth1_macvtap: left promiscuous mode [ 241.880141][ T63] veth0_macvtap: left promiscuous mode [ 241.886579][ T63] veth1_vlan: left promiscuous mode [ 241.892058][ T63] veth0_vlan: left promiscuous mode [ 242.762624][ T63] team0 (unregistering): Port device team_slave_1 removed [ 242.800760][ T63] team0 (unregistering): Port device team_slave_0 removed [ 243.313641][ T7716] chnl_net:caif_netlink_parms(): no params data found [ 243.364390][ T5832] Bluetooth: hci0: command tx timeout [ 243.902298][ T7716] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.933196][ T7716] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.944474][ T7716] bridge_slave_0: entered allmulticast mode [ 243.962912][ T7716] bridge_slave_0: entered promiscuous mode [ 244.163285][ T7716] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.163429][ T7716] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.163640][ T7716] bridge_slave_1: entered allmulticast mode [ 244.168329][ T7716] bridge_slave_1: entered promiscuous mode [ 244.419706][ T7716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.475302][ T7716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.702195][ T7716] team0: Port device team_slave_0 added [ 244.730892][ T7716] team0: Port device team_slave_1 added [ 244.940749][ T7796] FAULT_INJECTION: forcing a failure. [ 244.940749][ T7796] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 244.995460][ T7796] CPU: 0 UID: 0 PID: 7796 Comm: syz.3.302 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 244.995519][ T7796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 244.995554][ T7796] Call Trace: [ 244.995566][ T7796] [ 244.995579][ T7796] dump_stack_lvl+0x16c/0x1f0 [ 244.995663][ T7796] should_fail_ex+0x512/0x640 [ 244.995745][ T7796] should_fail_alloc_page+0xe7/0x130 [ 244.995799][ T7796] prepare_alloc_pages+0x3c2/0x610 [ 244.995860][ T7796] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 244.995914][ T7796] ? __lock_acquire+0xaa4/0x1ba0 [ 244.995966][ T7796] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 244.996013][ T7796] ? __mutex_trylock_common+0xe9/0x250 [ 244.996067][ T7796] ? __pfx___might_resched+0x10/0x10 [ 244.996108][ T7796] ? rcu_is_watching+0x12/0xc0 [ 244.996140][ T7796] ? find_held_lock+0x2b/0x80 [ 244.996174][ T7796] ? tracing_check_open_get_tr.part.0+0xad/0x130 [ 244.996223][ T7796] ? __seq_open_private+0x22/0xd0 [ 244.996269][ T7796] __alloc_pages_noprof+0xb/0x1b0 [ 244.996308][ T7796] ___kmalloc_large_node+0x82/0x1e0 [ 244.996365][ T7796] __kmalloc_large_node_noprof+0x1c/0x70 [ 244.996423][ T7796] __kmalloc_noprof.cold+0xc/0x61 [ 244.996468][ T7796] ? apparmor_file_open+0x1a1/0x9c0 [ 244.996522][ T7796] __seq_open_private+0x22/0xd0 [ 244.996572][ T7796] tracing_open+0x25f/0xf90 [ 244.996604][ T7796] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 244.996673][ T7796] do_dentry_open+0x741/0x1c10 [ 244.996711][ T7796] ? __pfx_tracing_open+0x10/0x10 [ 244.996752][ T7796] vfs_open+0x82/0x3f0 [ 244.996802][ T7796] path_openat+0x1e5e/0x2d40 [ 244.996852][ T7796] ? __pfx_path_openat+0x10/0x10 [ 244.996897][ T7796] do_filp_open+0x20b/0x470 [ 244.996931][ T7796] ? __pfx_do_filp_open+0x10/0x10 [ 244.997015][ T7796] ? alloc_fd+0x471/0x7d0 [ 244.997073][ T7796] do_sys_openat2+0x11b/0x1d0 [ 244.997117][ T7796] ? __pfx_do_sys_openat2+0x10/0x10 [ 244.997179][ T7796] __x64_sys_openat+0x174/0x210 [ 244.997226][ T7796] ? __pfx___x64_sys_openat+0x10/0x10 [ 244.997276][ T7796] ? rcu_is_watching+0x12/0xc0 [ 244.997329][ T7796] do_syscall_64+0xcd/0x230 [ 244.997397][ T7796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.997430][ T7796] RIP: 0033:0x7fd6ccd8e969 [ 244.997456][ T7796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.997487][ T7796] RSP: 002b:00007fd6cdcde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 244.997519][ T7796] RAX: ffffffffffffffda RBX: 00007fd6ccfb5fa0 RCX: 00007fd6ccd8e969 [ 244.997541][ T7796] RDX: 0000000000101000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 244.997562][ T7796] RBP: 00007fd6cce10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 244.997581][ T7796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 244.997601][ T7796] R13: 0000000000000000 R14: 00007fd6ccfb5fa0 R15: 00007ffed99081e8 [ 244.997648][ T7796] [ 245.447277][ T5832] Bluetooth: hci0: command tx timeout [ 245.472583][ T7780] kexec: Could not allocate control_code_buffer [ 245.714983][ T7716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.722001][ T7716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.752507][ T7716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.769634][ T7716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.778771][ T7716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.806149][ T7716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.712599][ T7716] hsr_slave_0: entered promiscuous mode [ 246.792269][ T7716] hsr_slave_1: entered promiscuous mode [ 247.533074][ T5832] Bluetooth: hci0: command tx timeout [ 249.097543][ T7716] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 249.217133][ T7716] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 249.252908][ T7716] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 249.304276][ T7716] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 249.782310][ T7716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.823560][ T7716] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.860403][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.867675][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.987447][ T7855] netlink: 'syz.2.309': attribute type 1 has an invalid length. [ 249.990790][ T6075] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.002355][ T6075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.497222][ T7865] FAULT_INJECTION: forcing a failure. [ 250.497222][ T7865] name failslab, interval 1, probability 0, space 0, times 0 [ 250.646080][ T7865] CPU: 0 UID: 0 PID: 7865 Comm: syz.1.310 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 250.646127][ T7865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 250.646146][ T7865] Call Trace: [ 250.646156][ T7865] [ 250.646168][ T7865] dump_stack_lvl+0x16c/0x1f0 [ 250.646223][ T7865] should_fail_ex+0x512/0x640 [ 250.646278][ T7865] should_failslab+0xc2/0x120 [ 250.646321][ T7865] __kmalloc_cache_noprof+0x6a/0x3e0 [ 250.646353][ T7865] ? __pfx___might_resched+0x10/0x10 [ 250.646393][ T7865] ? cfcnfg_create+0x5e/0x500 [ 250.646442][ T7865] ? __pfx_caif_init_net+0x10/0x10 [ 250.646485][ T7865] cfcnfg_create+0x5e/0x500 [ 250.646535][ T7865] ? debug_mutex_init+0x37/0x70 [ 250.646567][ T7865] ? __pfx_caif_init_net+0x10/0x10 [ 250.646608][ T7865] caif_init_net+0x7d/0xe0 [ 250.646650][ T7865] ops_init+0x1e2/0x5f0 [ 250.646794][ T7865] setup_net+0x21e/0x850 [ 250.646949][ T7865] ? __pfx_setup_net+0x10/0x10 [ 250.646999][ T7865] ? lockdep_init_map_type+0x5c/0x280 [ 250.647180][ T7865] ? __pfx_down_read_killable+0x10/0x10 [ 250.647226][ T7865] ? debug_mutex_init+0x37/0x70 [ 250.647333][ T7865] copy_net_ns+0x2a6/0x5f0 [ 250.647386][ T7865] create_new_namespaces+0x3ea/0xad0 [ 250.647437][ T7865] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 250.647483][ T7865] ksys_unshare+0x45b/0xa40 [ 250.647534][ T7865] ? __pfx_ksys_unshare+0x10/0x10 [ 250.647581][ T7865] ? xfd_validate_state+0x5d/0x180 [ 250.647617][ T7865] ? rcu_is_watching+0x12/0xc0 [ 250.647657][ T7865] __x64_sys_unshare+0x31/0x40 [ 250.647701][ T7865] do_syscall_64+0xcd/0x230 [ 250.647754][ T7865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.647785][ T7865] RIP: 0033:0x7fb4c318e969 [ 250.647810][ T7865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.647843][ T7865] RSP: 002b:00007fb4c3ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 250.647873][ T7865] RAX: ffffffffffffffda RBX: 00007fb4c33b5fa0 RCX: 00007fb4c318e969 [ 250.647895][ T7865] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 250.647927][ T7865] RBP: 00007fb4c3210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 250.647948][ T7865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.647981][ T7865] R13: 0000000000000000 R14: 00007fb4c33b5fa0 R15: 00007ffcc01f73c8 [ 250.648023][ T7865] [ 251.732247][ T7716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.847782][ T7716] veth0_vlan: entered promiscuous mode [ 251.862718][ T7716] veth1_vlan: entered promiscuous mode [ 251.902032][ T7716] veth0_macvtap: entered promiscuous mode [ 251.966715][ T7716] veth1_macvtap: entered promiscuous mode [ 252.026415][ T7716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.041861][ T7716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.053361][ T7716] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.067125][ T7716] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.076377][ T7716] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.103829][ T7716] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.658371][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.706404][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.017318][ T3466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.083207][ T3466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.723650][ T5832] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 254.731083][ T5832] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 257.580724][ T7979] kexec: Could not allocate control_code_buffer [ 258.110980][ T7998] netlink: 330 bytes leftover after parsing attributes in process `syz.2.323'. [ 259.234212][ T8012] netlink: 'syz.3.326': attribute type 1 has an invalid length. [ 260.822982][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.829472][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.442057][ T8089] netlink: 'syz.0.338': attribute type 1 has an invalid length. [ 264.120277][ T8099] Invalid ELF header magic: != ELF syzkaller syzkaller login: [ 274.008268][ T8196] FAULT_INJECTION: forcing a failure. [ 274.008268][ T8196] name failslab, interval 1, probability 0, space 0, times 0 [ 274.102120][ T8196] CPU: 0 UID: 0 PID: 8196 Comm: syz.3.356 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 274.102168][ T8196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 274.102188][ T8196] Call Trace: [ 274.102199][ T8196] [ 274.102211][ T8196] dump_stack_lvl+0x16c/0x1f0 [ 274.102269][ T8196] should_fail_ex+0x512/0x640 [ 274.102320][ T8196] ? __kmalloc_noprof+0xbf/0x510 [ 274.102361][ T8196] ? __register_sysctl_table+0xb3/0x1900 [ 274.102408][ T8196] should_failslab+0xc2/0x120 [ 274.102452][ T8196] __kmalloc_noprof+0xd2/0x510 [ 274.102502][ T8196] __register_sysctl_table+0xb3/0x1900 [ 274.102544][ T8196] ? is_module_address+0x5f/0xf0 [ 274.102598][ T8196] ? __pfx___register_sysctl_table+0x10/0x10 [ 274.102637][ T8196] ? is_module_address+0x69/0xf0 [ 274.102682][ T8196] ? register_net_sysctl_sz+0x228/0x3e0 [ 274.102718][ T8196] ? __asan_memcpy+0x3c/0x60 [ 274.102755][ T8196] ipv6_frags_init_net+0x217/0x350 [ 274.102794][ T8196] ? __pfx_ipv6_frags_init_net+0x10/0x10 [ 274.102829][ T8196] ops_init+0x1e2/0x5f0 [ 274.102877][ T8196] setup_net+0x21e/0x850 [ 274.102927][ T8196] ? __pfx_setup_net+0x10/0x10 [ 274.102971][ T8196] ? lockdep_init_map_type+0x5c/0x280 [ 274.103023][ T8196] ? __pfx_down_read_killable+0x10/0x10 [ 274.103062][ T8196] ? debug_mutex_init+0x37/0x70 [ 274.103099][ T8196] copy_net_ns+0x2a6/0x5f0 [ 274.103152][ T8196] create_new_namespaces+0x3ea/0xad0 [ 274.103202][ T8196] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 274.103247][ T8196] ksys_unshare+0x45b/0xa40 [ 274.103296][ T8196] ? __pfx_ksys_unshare+0x10/0x10 [ 274.103340][ T8196] ? xfd_validate_state+0x5d/0x180 [ 274.103376][ T8196] ? rcu_is_watching+0x12/0xc0 [ 274.103427][ T8196] __x64_sys_unshare+0x31/0x40 [ 274.103473][ T8196] do_syscall_64+0xcd/0x230 [ 274.103530][ T8196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.103563][ T8196] RIP: 0033:0x7fd6ccd8e969 [ 274.103590][ T8196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.103621][ T8196] RSP: 002b:00007fd6cdcde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 274.103652][ T8196] RAX: ffffffffffffffda RBX: 00007fd6ccfb5fa0 RCX: 00007fd6ccd8e969 [ 274.103673][ T8196] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 274.103693][ T8196] RBP: 00007fd6cce10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 274.103714][ T8196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 274.103734][ T8196] R13: 0000000000000000 R14: 00007fd6ccfb5fa0 R15: 00007ffed99081e8 [ 274.103777][ T8196] [ 275.695276][ T8209] FAULT_INJECTION: forcing a failure. [ 275.695276][ T8209] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 275.708821][ T8209] CPU: 1 UID: 0 PID: 8209 Comm: syz.1.359 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 275.708865][ T8209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 275.708884][ T8209] Call Trace: [ 275.708894][ T8209] [ 275.708906][ T8209] dump_stack_lvl+0x16c/0x1f0 [ 275.708961][ T8209] should_fail_ex+0x512/0x640 [ 275.709018][ T8209] _copy_from_iter+0x2a4/0x15b0 [ 275.709083][ T8209] ? __alloc_skb+0x200/0x380 [ 275.709127][ T8209] ? __pfx__copy_from_iter+0x10/0x10 [ 275.709179][ T8209] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 275.709215][ T8209] ? __lock_acquire+0xaa4/0x1ba0 [ 275.709261][ T8209] netlink_sendmsg+0x829/0xdd0 [ 275.709304][ T8209] ? __pfx_netlink_sendmsg+0x10/0x10 [ 275.709355][ T8209] ____sys_sendmsg+0xa95/0xc70 [ 275.709399][ T8209] ? copy_msghdr_from_user+0x10a/0x160 [ 275.709431][ T8209] ? __pfx_____sys_sendmsg+0x10/0x10 [ 275.709489][ T8209] ___sys_sendmsg+0x134/0x1d0 [ 275.709524][ T8209] ? __pfx____sys_sendmsg+0x10/0x10 [ 275.709598][ T8209] __sys_sendmsg+0x16d/0x220 [ 275.709632][ T8209] ? __pfx___sys_sendmsg+0x10/0x10 [ 275.709664][ T8209] ? __x64_sys_futex+0x1e0/0x4c0 [ 275.709703][ T8209] ? rcu_is_watching+0x12/0xc0 [ 275.709738][ T8209] do_syscall_64+0xcd/0x230 [ 275.709783][ T8209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.709811][ T8209] RIP: 0033:0x7fb4c318e969 [ 275.709833][ T8209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.709859][ T8209] RSP: 002b:00007fb4c3ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 275.709885][ T8209] RAX: ffffffffffffffda RBX: 00007fb4c33b5fa0 RCX: 00007fb4c318e969 [ 275.709903][ T8209] RDX: 0000000004048000 RSI: 0000200000004240 RDI: 0000000000000003 [ 275.709920][ T8209] RBP: 00007fb4c3210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 275.709936][ T8209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.709952][ T8209] R13: 0000000000000000 R14: 00007fb4c33b5fa0 R15: 00007ffcc01f73c8 [ 275.709986][ T8209] [ 276.344680][ T8223] .SR: entered promiscuous mode [ 276.443168][ T8224] Invalid ELF header magic: != ELF [ 276.617233][ T8230] FAULT_INJECTION: forcing a failure. [ 276.617233][ T8230] name failslab, interval 1, probability 0, space 0, times 0 [ 276.741208][ T8230] CPU: 0 UID: 0 PID: 8230 Comm: syz.0.362 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 276.741255][ T8230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 276.741276][ T8230] Call Trace: [ 276.741286][ T8230] [ 276.741299][ T8230] dump_stack_lvl+0x16c/0x1f0 [ 276.741356][ T8230] should_fail_ex+0x512/0x640 [ 276.741422][ T8230] ? fs_reclaim_acquire+0xae/0x150 [ 276.741479][ T8230] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 276.741529][ T8230] should_failslab+0xc2/0x120 [ 276.741571][ T8230] __kmalloc_noprof+0xd2/0x510 [ 276.741619][ T8230] tomoyo_realpath_from_path+0xc2/0x6e0 [ 276.741682][ T8230] tomoyo_check_open_permission+0x2ab/0x3c0 [ 276.741727][ T8230] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 276.741814][ T8230] ? do_raw_spin_lock+0x12c/0x2b0 [ 276.741878][ T8230] tomoyo_file_open+0x6b/0x90 [ 276.741912][ T8230] security_file_open+0x84/0x1e0 [ 276.741960][ T8230] do_dentry_open+0x596/0x1c10 [ 276.742010][ T8230] vfs_open+0x82/0x3f0 [ 276.742060][ T8230] path_openat+0x1e5e/0x2d40 [ 276.742110][ T8230] ? __pfx_path_openat+0x10/0x10 [ 276.742155][ T8230] do_filp_open+0x20b/0x470 [ 276.742197][ T8230] ? __pfx_do_filp_open+0x10/0x10 [ 276.742263][ T8230] ? alloc_fd+0x471/0x7d0 [ 276.742306][ T8230] do_sys_openat2+0x11b/0x1d0 [ 276.742353][ T8230] ? __pfx_do_sys_openat2+0x10/0x10 [ 276.742416][ T8230] __x64_sys_openat+0x174/0x210 [ 276.742464][ T8230] ? __pfx___x64_sys_openat+0x10/0x10 [ 276.742530][ T8230] do_syscall_64+0xcd/0x230 [ 276.742587][ T8230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.742621][ T8230] RIP: 0033:0x7fdd8798e969 [ 276.742647][ T8230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.742679][ T8230] RSP: 002b:00007fdd888b5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 276.742709][ T8230] RAX: ffffffffffffffda RBX: 00007fdd87bb6080 RCX: 00007fdd8798e969 [ 276.742730][ T8230] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 276.742751][ T8230] RBP: 00007fdd87a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 276.742771][ T8230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 276.742790][ T8230] R13: 0000000000000000 R14: 00007fdd87bb6080 R15: 00007ffd9298caf8 [ 276.742834][ T8230] [ 276.742846][ T8230] ERROR: Out of memory at tomoyo_realpath_from_path. [ 277.466547][ T8224] could not allocate digest TFM handle [ 277.472440][ T8223] could not allocate digest TFM handle [ 278.593154][ T30] audit: type=1800 audit(6042340821.558:3): pid=8248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.365" name="dbroot" dev="configfs" ino=16813 res=0 errno=0 [ 278.638870][ T8248] FAULT_INJECTION: forcing a failure. [ 278.638870][ T8248] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 278.695419][ T8248] CPU: 1 UID: 0 PID: 8248 Comm: syz.3.365 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 278.695467][ T8248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 278.695485][ T8248] Call Trace: [ 278.695496][ T8248] [ 278.695509][ T8248] dump_stack_lvl+0x16c/0x1f0 [ 278.695564][ T8248] should_fail_ex+0x512/0x640 [ 278.695623][ T8248] should_fail_alloc_page+0xe7/0x130 [ 278.695667][ T8248] prepare_alloc_pages+0x3c2/0x610 [ 278.695720][ T8248] ? rcu_is_watching+0x12/0xc0 [ 278.695757][ T8248] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 278.695822][ T8248] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 278.695873][ T8248] ? do_raw_spin_lock+0x12c/0x2b0 [ 278.695926][ T8248] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 278.695979][ T8248] ? find_held_lock+0x2b/0x80 [ 278.696025][ T8248] ? __lock_acquire+0xaa4/0x1ba0 [ 278.696070][ T8248] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 278.696121][ T8248] ? policy_nodemask+0xea/0x4e0 [ 278.696168][ T8248] alloc_pages_mpol+0x1fb/0x550 [ 278.696211][ T8248] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 278.696267][ T8248] folio_alloc_mpol_noprof+0x36/0x2f0 [ 278.696319][ T8248] shmem_alloc_folio+0x135/0x160 [ 278.696353][ T8248] shmem_alloc_and_add_folio+0x499/0xc20 [ 278.696404][ T8248] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 278.696450][ T8248] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 278.696500][ T8248] shmem_get_folio_gfp+0x687/0x1530 [ 278.696552][ T8248] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 278.696596][ T8248] ? __pfx_timestamp_truncate+0x10/0x10 [ 278.696639][ T8248] shmem_fault+0x1fe/0xa30 [ 278.696682][ T8248] ? __pfx_shmem_fault+0x10/0x10 [ 278.696730][ T8248] ? __pfx___up_read+0x10/0x10 [ 278.696791][ T8248] ? __pfx_filemap_map_pages+0x10/0x10 [ 278.696834][ T8248] __do_fault+0x10d/0x490 [ 278.696883][ T8248] ? __pfx_filemap_map_pages+0x10/0x10 [ 278.696924][ T8248] do_pte_missing+0x1a6/0x3fb0 [ 278.696962][ T8248] ? __handle_mm_fault+0x1010/0x2a40 [ 278.697004][ T8248] __handle_mm_fault+0x103d/0x2a40 [ 278.697052][ T8248] ? __pfx___handle_mm_fault+0x10/0x10 [ 278.697084][ T8248] ? __pte_offset_map_lock+0x155/0x2f0 [ 278.697131][ T8248] ? find_held_lock+0x2b/0x80 [ 278.697161][ T8248] ? find_held_lock+0x2b/0x80 [ 278.697219][ T8248] handle_mm_fault+0x3fe/0xad0 [ 278.697261][ T8248] __get_user_pages+0x771/0x36f0 [ 278.697320][ T8248] ? __pfx___get_user_pages+0x10/0x10 [ 278.697358][ T8248] ? __pfx_down_read_killable+0x10/0x10 [ 278.697382][ T8248] ? __lock_acquire+0xaa4/0x1ba0 [ 278.697421][ T8248] faultin_page_range+0x249/0x980 [ 278.697451][ T8248] madvise_do_behavior+0x233/0x3b0 [ 278.697487][ T8248] ? __pfx_madvise_do_behavior+0x10/0x10 [ 278.697539][ T8248] do_madvise+0x10b/0x170 [ 278.697574][ T8248] __x64_sys_madvise+0xa9/0x110 [ 278.697607][ T8248] ? lockdep_hardirqs_on+0x7c/0x110 [ 278.697641][ T8248] do_syscall_64+0xcd/0x230 [ 278.697679][ T8248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.697703][ T8248] RIP: 0033:0x7fd6ccd8e969 [ 278.697721][ T8248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.697743][ T8248] RSP: 002b:00007fd6cdcde038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 278.697765][ T8248] RAX: ffffffffffffffda RBX: 00007fd6ccfb5fa0 RCX: 00007fd6ccd8e969 [ 278.697780][ T8248] RDX: 0000000000000017 RSI: 00000000002003f0 RDI: 0000000000000000 [ 278.697793][ T8248] RBP: 00007fd6cce10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 278.697807][ T8248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.697821][ T8248] R13: 0000000000000000 R14: 00007fd6ccfb5fa0 R15: 00007ffed99081e8 [ 278.697856][ T8248] [ 279.490410][ T8260] FAULT_INJECTION: forcing a failure. [ 279.490410][ T8260] name failslab, interval 1, probability 0, space 0, times 0 [ 279.604243][ T8260] CPU: 0 UID: 0 PID: 8260 Comm: syz.0.366 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 279.604296][ T8260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 279.604316][ T8260] Call Trace: [ 279.604327][ T8260] [ 279.604340][ T8260] dump_stack_lvl+0x16c/0x1f0 [ 279.604398][ T8260] should_fail_ex+0x512/0x640 [ 279.604447][ T8260] ? __kmalloc_noprof+0xbf/0x510 [ 279.604488][ T8260] ? ops_init+0x77/0x5f0 [ 279.604526][ T8260] should_failslab+0xc2/0x120 [ 279.604568][ T8260] __kmalloc_noprof+0xd2/0x510 [ 279.604615][ T8260] ops_init+0x77/0x5f0 [ 279.604663][ T8260] setup_net+0x21e/0x850 [ 279.604710][ T8260] ? __pfx_setup_net+0x10/0x10 [ 279.604750][ T8260] ? lockdep_init_map_type+0x5c/0x280 [ 279.604797][ T8260] ? __pfx_down_read_killable+0x10/0x10 [ 279.604836][ T8260] ? debug_mutex_init+0x37/0x70 [ 279.604873][ T8260] copy_net_ns+0x2a6/0x5f0 [ 279.604924][ T8260] create_new_namespaces+0x3ea/0xad0 [ 279.604973][ T8260] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 279.605022][ T8260] ksys_unshare+0x45b/0xa40 [ 279.605070][ T8260] ? __pfx_ksys_unshare+0x10/0x10 [ 279.605114][ T8260] ? xfd_validate_state+0x5d/0x180 [ 279.605148][ T8260] ? rcu_is_watching+0x12/0xc0 [ 279.605190][ T8260] __x64_sys_unshare+0x31/0x40 [ 279.605235][ T8260] do_syscall_64+0xcd/0x230 [ 279.605289][ T8260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.605323][ T8260] RIP: 0033:0x7fdd8798e969 [ 279.605350][ T8260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.605382][ T8260] RSP: 002b:00007fdd888d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 279.605414][ T8260] RAX: ffffffffffffffda RBX: 00007fdd87bb5fa0 RCX: 00007fdd8798e969 [ 279.605436][ T8260] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 279.605455][ T8260] RBP: 00007fdd87a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 279.605475][ T8260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 279.605494][ T8260] R13: 0000000000000000 R14: 00007fdd87bb5fa0 R15: 00007ffd9298caf8 [ 279.605537][ T8260] [ 280.359604][ T8269] netlink: 330 bytes leftover after parsing attributes in process `syz.3.367'. [ 280.370329][ T8269] ›: renamed from hsr0 (while UP) [ 286.897409][ T8335] FAULT_INJECTION: forcing a failure. [ 286.897409][ T8335] name failslab, interval 1, probability 0, space 0, times 0 [ 286.933925][ T8335] CPU: 0 UID: 0 PID: 8335 Comm: syz.2.379 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 286.933972][ T8335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 286.933991][ T8335] Call Trace: [ 286.934000][ T8335] [ 286.934012][ T8335] dump_stack_lvl+0x16c/0x1f0 [ 286.934069][ T8335] should_fail_ex+0x512/0x640 [ 286.934117][ T8335] ? __kmalloc_noprof+0xbf/0x510 [ 286.934159][ T8335] ? __register_sysctl_table+0xea2/0x1900 [ 286.934230][ T8335] should_failslab+0xc2/0x120 [ 286.934270][ T8335] __kmalloc_noprof+0xd2/0x510 [ 286.934305][ T8335] ? __register_sysctl_table+0xe8e/0x1900 [ 286.934355][ T8335] __register_sysctl_table+0xea2/0x1900 [ 286.934404][ T8335] ? __pfx___register_sysctl_table+0x10/0x10 [ 286.934442][ T8335] ? is_module_address+0x69/0xf0 [ 286.934486][ T8335] ? register_net_sysctl_sz+0x228/0x3e0 [ 286.934520][ T8335] ? __asan_memcpy+0x3c/0x60 [ 286.934552][ T8335] ? __pfx_mpls_net_init+0x10/0x10 [ 286.934601][ T8335] mpls_net_init+0x180/0x230 [ 286.934649][ T8335] ops_init+0x1e2/0x5f0 [ 286.934698][ T8335] setup_net+0x21e/0x850 [ 286.934745][ T8335] ? __pfx_setup_net+0x10/0x10 [ 286.934785][ T8335] ? lockdep_init_map_type+0x5c/0x280 [ 286.934830][ T8335] ? __pfx_down_read_killable+0x10/0x10 [ 286.934868][ T8335] ? debug_mutex_init+0x37/0x70 [ 286.934903][ T8335] copy_net_ns+0x2a6/0x5f0 [ 286.934954][ T8335] create_new_namespaces+0x3ea/0xad0 [ 286.935002][ T8335] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 286.935044][ T8335] ksys_unshare+0x45b/0xa40 [ 286.935091][ T8335] ? __pfx_ksys_unshare+0x10/0x10 [ 286.935134][ T8335] ? xfd_validate_state+0x5d/0x180 [ 286.935175][ T8335] ? rcu_is_watching+0x12/0xc0 [ 286.935216][ T8335] __x64_sys_unshare+0x31/0x40 [ 286.935262][ T8335] do_syscall_64+0xcd/0x230 [ 286.935334][ T8335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.935366][ T8335] RIP: 0033:0x7f61e8d8e969 [ 286.935392][ T8335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.935425][ T8335] RSP: 002b:00007f61e9ca9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 286.935457][ T8335] RAX: ffffffffffffffda RBX: 00007f61e8fb5fa0 RCX: 00007f61e8d8e969 [ 286.935479][ T8335] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 286.935498][ T8335] RBP: 00007f61e8e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 286.935518][ T8335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.935538][ T8335] R13: 0000000000000000 R14: 00007f61e8fb5fa0 R15: 00007ffd3f8f9848 [ 286.935582][ T8335] [ 286.935595][ T8335] sysctl could not get directory: /net/mpls -12 [ 288.155481][ T8333] net_ratelimit: 72 callbacks suppressed [ 288.155506][ T8333] netlink: zone id is out of range [ 288.177202][ T8333] netlink: zone id is out of range [ 288.182389][ T8333] netlink: zone id is out of range [ 288.203125][ T8333] netlink: zone id is out of range [ 288.213433][ T8333] netlink: zone id is out of range [ 288.218604][ T8333] netlink: zone id is out of range [ 288.269318][ T8333] netlink: zone id is out of range [ 288.278935][ T8333] netlink: zone id is out of range [ 288.297830][ T8333] netlink: zone id is out of range [ 288.383347][ T8333] netlink: zone id is out of range [ 288.689116][ T8349] netlink: 330 bytes leftover after parsing attributes in process `syz.1.381'. [ 288.698209][ T8349] ›: renamed from hsr0 (while UP) [ 294.504546][ T5831] Bluetooth: hci3: unexpected subevent 0x01 length: 122 > 18 [ 297.035722][ T8451] netlink: 330 bytes leftover after parsing attributes in process `syz.0.394'. [ 297.138051][ T8451] ›: renamed from hsr0 (while UP) [ 305.302096][ T8605] FAULT_INJECTION: forcing a failure. [ 305.302096][ T8605] name failslab, interval 1, probability 0, space 0, times 0 [ 305.394235][ T8605] CPU: 0 UID: 0 PID: 8605 Comm: syz.1.420 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 305.394279][ T8605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 305.394298][ T8605] Call Trace: [ 305.394308][ T8605] [ 305.394319][ T8605] dump_stack_lvl+0x16c/0x1f0 [ 305.394372][ T8605] should_fail_ex+0x512/0x640 [ 305.394419][ T8605] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 305.394455][ T8605] should_failslab+0xc2/0x120 [ 305.394494][ T8605] __kmalloc_cache_noprof+0x6a/0x3e0 [ 305.394526][ T8605] ? alloc_info_private+0xc4/0x1b0 [ 305.394597][ T8605] alloc_info_private+0xc4/0x1b0 [ 305.394647][ T8605] snd_info_text_entry_open+0xae/0x2a0 [ 305.394698][ T8605] ? __pfx_snd_info_text_entry_open+0x10/0x10 [ 305.394747][ T8605] ? trace_kmem_cache_alloc+0x28/0xc0 [ 305.394793][ T8605] ? __pfx_apparmor_file_open+0x10/0x10 [ 305.394839][ T8605] ? proc_reg_open+0x21d/0x610 [ 305.394873][ T8605] ? __pfx_snd_info_text_entry_open+0x10/0x10 [ 305.394936][ T8605] proc_reg_open+0x286/0x610 [ 305.394970][ T8605] do_dentry_open+0x741/0x1c10 [ 305.395004][ T8605] ? __pfx_proc_reg_open+0x10/0x10 [ 305.395043][ T8605] vfs_open+0x82/0x3f0 [ 305.395095][ T8605] path_openat+0x1e5e/0x2d40 [ 305.395142][ T8605] ? __pfx_path_openat+0x10/0x10 [ 305.395184][ T8605] do_filp_open+0x20b/0x470 [ 305.395216][ T8605] ? __pfx_do_filp_open+0x10/0x10 [ 305.395278][ T8605] ? alloc_fd+0x471/0x7d0 [ 305.395317][ T8605] do_sys_openat2+0x11b/0x1d0 [ 305.395361][ T8605] ? __pfx_do_sys_openat2+0x10/0x10 [ 305.395420][ T8605] __x64_sys_openat+0x174/0x210 [ 305.395465][ T8605] ? __pfx___x64_sys_openat+0x10/0x10 [ 305.395509][ T8605] ? rcu_is_watching+0x12/0xc0 [ 305.395551][ T8605] do_syscall_64+0xcd/0x230 [ 305.395602][ T8605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.395632][ T8605] RIP: 0033:0x7fb4c318e969 [ 305.395656][ T8605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.395685][ T8605] RSP: 002b:00007fb4c3fd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 305.395718][ T8605] RAX: ffffffffffffffda RBX: 00007fb4c33b6080 RCX: 00007fb4c318e969 [ 305.395757][ T8605] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 305.395777][ T8605] RBP: 00007fb4c3210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 305.395815][ T8605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 305.395835][ T8605] R13: 0000000000000000 R14: 00007fb4c33b6080 R15: 00007ffcc01f73c8 [ 305.395880][ T8605] [ 310.329965][ T8682] ACPI: Can not change Invalid GPE/Fixed Event status [ 311.802305][ T8700] FAULT_INJECTION: forcing a failure. [ 311.802305][ T8700] name failslab, interval 1, probability 0, space 0, times 0 [ 311.828231][ T8700] CPU: 0 UID: 0 PID: 8700 Comm: syz.3.431 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 311.828278][ T8700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 311.828298][ T8700] Call Trace: [ 311.828309][ T8700] [ 311.828320][ T8700] dump_stack_lvl+0x16c/0x1f0 [ 311.828376][ T8700] should_fail_ex+0x512/0x640 [ 311.828422][ T8700] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 311.828459][ T8700] should_failslab+0xc2/0x120 [ 311.828500][ T8700] __kmalloc_cache_noprof+0x6a/0x3e0 [ 311.828537][ T8700] ? kasan_save_track+0x14/0x30 [ 311.828572][ T8700] ? snd_info_text_entry_open+0xfb/0x2a0 [ 311.828628][ T8700] snd_info_text_entry_open+0xfb/0x2a0 [ 311.828678][ T8700] ? __pfx_snd_info_text_entry_open+0x10/0x10 [ 311.828725][ T8700] ? trace_kmem_cache_alloc+0x28/0xc0 [ 311.828770][ T8700] ? __pfx_apparmor_file_open+0x10/0x10 [ 311.828814][ T8700] ? proc_reg_open+0x21d/0x610 [ 311.828847][ T8700] ? __pfx_snd_info_text_entry_open+0x10/0x10 [ 311.828898][ T8700] proc_reg_open+0x286/0x610 [ 311.828933][ T8700] do_dentry_open+0x741/0x1c10 [ 311.828968][ T8700] ? __pfx_proc_reg_open+0x10/0x10 [ 311.829009][ T8700] vfs_open+0x82/0x3f0 [ 311.829056][ T8700] path_openat+0x1e5e/0x2d40 [ 311.829106][ T8700] ? __pfx_path_openat+0x10/0x10 [ 311.829150][ T8700] do_filp_open+0x20b/0x470 [ 311.829183][ T8700] ? __pfx_do_filp_open+0x10/0x10 [ 311.829247][ T8700] ? alloc_fd+0x471/0x7d0 [ 311.829289][ T8700] do_sys_openat2+0x11b/0x1d0 [ 311.829333][ T8700] ? __pfx_do_sys_openat2+0x10/0x10 [ 311.829396][ T8700] __x64_sys_openat+0x174/0x210 [ 311.829443][ T8700] ? __pfx___x64_sys_openat+0x10/0x10 [ 311.829492][ T8700] ? rcu_is_watching+0x12/0xc0 [ 311.829541][ T8700] do_syscall_64+0xcd/0x230 [ 311.829595][ T8700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.829628][ T8700] RIP: 0033:0x7fd6ccd8e969 [ 311.829653][ T8700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.829684][ T8700] RSP: 002b:00007fd6cdcbd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 311.829714][ T8700] RAX: ffffffffffffffda RBX: 00007fd6ccfb6080 RCX: 00007fd6ccd8e969 [ 311.829735][ T8700] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 311.829755][ T8700] RBP: 00007fd6cce10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 311.829774][ T8700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 311.829793][ T8700] R13: 0000000000000000 R14: 00007fd6ccfb6080 R15: 00007ffed99081e8 [ 311.829836][ T8700] [ 315.902810][ T8759] ACPI: Can not change Invalid GPE/Fixed Event status [ 317.170029][ T8767] Invalid ELF header magic: != ELF [ 318.556772][ T8793] Invalid ELF header magic: != ELF [ 319.563739][ T8792] could not allocate digest TFM handle [ 319.572966][ T8793] could not allocate digest TFM handle [ 321.765039][ T8841] sctp: Changing rto_alpha or rto_beta may lead to suboptimal rtt/srtt estimations! [ 322.273762][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.273867][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.645497][ T8863] .SR: entered promiscuous mode [ 323.719435][ T8863] Invalid ELF header magic: != ELF [ 324.894664][ T8863] could not allocate digest TFM handle [ 324.928570][ T8865] could not allocate digest TFM handle [ 330.582434][ T8946] .SR: entered promiscuous mode [ 330.606863][ T8945] ima: policy update failed [ 330.617359][ T8945] netlink: 25 bytes leftover after parsing attributes in process `syz.3.472'. [ 330.629067][ T30] audit: type=1802 audit(6042340873.578:4): pid=8945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.472" res=0 errno=0 [ 330.771224][ T8946] Invalid ELF header magic: != ELF [ 331.441487][ T8949] could not allocate digest TFM handle [ 331.447921][ T8946] could not allocate digest TFM handle [ 339.688858][ T5831] Bluetooth: hci1: command 0x0406 tx timeout [ 340.215469][ T9076] FAULT_INJECTION: forcing a failure. [ 340.215469][ T9076] name failslab, interval 1, probability 0, space 0, times 0 [ 340.270667][ T9076] CPU: 0 UID: 0 PID: 9076 Comm: syz.0.496 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 340.270712][ T9076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 340.270731][ T9076] Call Trace: [ 340.270741][ T9076] [ 340.270753][ T9076] dump_stack_lvl+0x16c/0x1f0 [ 340.270825][ T9076] should_fail_ex+0x512/0x640 [ 340.270881][ T9076] should_failslab+0xc2/0x120 [ 340.270923][ T9076] __kmalloc_cache_noprof+0x6a/0x3e0 [ 340.270958][ T9076] ? cfctrl_create+0x9a/0x320 [ 340.271014][ T9076] cfctrl_create+0x9a/0x320 [ 340.271063][ T9076] ? __pfx_cfctrl_create+0x10/0x10 [ 340.271116][ T9076] ? __raw_spin_lock_init+0x3a/0x110 [ 340.271172][ T9076] cfcnfg_create+0xb2/0x500 [ 340.271219][ T9076] ? debug_mutex_init+0x37/0x70 [ 340.271251][ T9076] ? __pfx_caif_init_net+0x10/0x10 [ 340.271295][ T9076] caif_init_net+0x7d/0xe0 [ 340.271342][ T9076] ops_init+0x1e2/0x5f0 [ 340.271401][ T9076] setup_net+0x21e/0x850 [ 340.271450][ T9076] ? __pfx_setup_net+0x10/0x10 [ 340.271492][ T9076] ? lockdep_init_map_type+0x5c/0x280 [ 340.271539][ T9076] ? __pfx_down_read_killable+0x10/0x10 [ 340.271578][ T9076] ? debug_mutex_init+0x37/0x70 [ 340.271616][ T9076] copy_net_ns+0x2a6/0x5f0 [ 340.271670][ T9076] create_new_namespaces+0x3ea/0xad0 [ 340.271719][ T9076] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 340.271763][ T9076] ksys_unshare+0x45b/0xa40 [ 340.271811][ T9076] ? __pfx_ksys_unshare+0x10/0x10 [ 340.271855][ T9076] ? xfd_validate_state+0x5d/0x180 [ 340.271889][ T9076] ? rcu_is_watching+0x12/0xc0 [ 340.271932][ T9076] __x64_sys_unshare+0x31/0x40 [ 340.271978][ T9076] do_syscall_64+0xcd/0x230 [ 340.272045][ T9076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.272077][ T9076] RIP: 0033:0x7fdd8798e969 [ 340.272102][ T9076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 340.272133][ T9076] RSP: 002b:00007fdd888d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 340.272181][ T9076] RAX: ffffffffffffffda RBX: 00007fdd87bb5fa0 RCX: 00007fdd8798e969 [ 340.272204][ T9076] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 340.272223][ T9076] RBP: 00007fdd87a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 340.272243][ T9076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 340.272262][ T9076] R13: 0000000000000000 R14: 00007fdd87bb5fa0 R15: 00007ffd9298caf8 [ 340.272306][ T9076] [ 344.561033][ T9132] netlink: 93 bytes leftover after parsing attributes in process `syz.2.505'. [ 345.024575][ T9145] FAULT_INJECTION: forcing a failure. [ 345.024575][ T9145] name failslab, interval 1, probability 0, space 0, times 0 [ 345.038472][ T9145] CPU: 1 UID: 0 PID: 9145 Comm: syz.1.507 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 345.038544][ T9145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 345.038575][ T9145] Call Trace: [ 345.038592][ T9145] [ 345.038610][ T9145] dump_stack_lvl+0x16c/0x1f0 [ 345.038662][ T9145] should_fail_ex+0x512/0x640 [ 345.038706][ T9145] ? __kmalloc_noprof+0xbf/0x510 [ 345.038744][ T9145] ? ops_init+0x77/0x5f0 [ 345.038839][ T9145] should_failslab+0xc2/0x120 [ 345.038880][ T9145] __kmalloc_noprof+0xd2/0x510 [ 345.038914][ T9145] ? __asan_memcpy+0x3c/0x60 [ 345.038952][ T9145] ops_init+0x77/0x5f0 [ 345.038998][ T9145] setup_net+0x21e/0x850 [ 345.039048][ T9145] ? __pfx_setup_net+0x10/0x10 [ 345.039106][ T9145] ? lockdep_init_map_type+0x5c/0x280 [ 345.039153][ T9145] ? __pfx_down_read_killable+0x10/0x10 [ 345.039193][ T9145] ? debug_mutex_init+0x37/0x70 [ 345.039230][ T9145] copy_net_ns+0x2a6/0x5f0 [ 345.039282][ T9145] create_new_namespaces+0x3ea/0xad0 [ 345.039330][ T9145] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 345.039373][ T9145] ksys_unshare+0x45b/0xa40 [ 345.039420][ T9145] ? __pfx_ksys_unshare+0x10/0x10 [ 345.039464][ T9145] ? xfd_validate_state+0x5d/0x180 [ 345.039499][ T9145] ? rcu_is_watching+0x12/0xc0 [ 345.039541][ T9145] __x64_sys_unshare+0x31/0x40 [ 345.039586][ T9145] do_syscall_64+0xcd/0x230 [ 345.039641][ T9145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.039674][ T9145] RIP: 0033:0x7fb4c318e969 [ 345.039701][ T9145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.039733][ T9145] RSP: 002b:00007fb4c3ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 345.039771][ T9145] RAX: ffffffffffffffda RBX: 00007fb4c33b5fa0 RCX: 00007fb4c318e969 [ 345.039792][ T9145] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 345.039811][ T9145] RBP: 00007fb4c3210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 345.039831][ T9145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 345.039850][ T9145] R13: 0000000000000000 R14: 00007fb4c33b5fa0 R15: 00007ffcc01f73c8 [ 345.039894][ T9145] [ 345.043506][ T9143] [ 345.260279][ T9143] ====================================================== [ 345.267307][ T9143] WARNING: possible circular locking dependency detected [ 345.274330][ T9143] 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 Not tainted [ 345.281453][ T9143] ------------------------------------------------------ [ 345.288482][ T9143] syz.2.506/9143 is trying to acquire lock: [ 345.294383][ T9143] ffff888025ee05d8 (&q->elevator_lock){+.+.}-{4:4}, at: queue_requests_store+0x1c7/0x310 [ 345.304262][ T9143] [ 345.304262][ T9143] but task is already holding lock: [ 345.311631][ T9143] ffff888025ee00a8 (&q->q_usage_counter(io)#29){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 345.322909][ T9143] [ 345.322909][ T9143] which lock already depends on the new lock. [ 345.322909][ T9143] [ 345.333317][ T9143] [ 345.333317][ T9143] the existing dependency chain (in reverse order) is: [ 345.342347][ T9143] [ 345.342347][ T9143] -> #2 (&q->q_usage_counter(io)#29){++++}-{0:0}: [ 345.350993][ T9143] blk_alloc_queue+0x619/0x760 [ 345.356309][ T9143] blk_mq_alloc_queue+0x179/0x290 [ 345.361901][ T9143] __blk_mq_alloc_disk+0x29/0x120 [ 345.367476][ T9143] loop_add+0x496/0xb70 [ 345.372177][ T9143] loop_init+0x164/0x270 [ 345.376968][ T9143] do_one_initcall+0x120/0x6e0 [ 345.382284][ T9143] kernel_init_freeable+0x5c2/0x900 [ 345.388030][ T9143] kernel_init+0x1c/0x2b0 [ 345.392897][ T9143] ret_from_fork+0x48/0x80 [ 345.397854][ T9143] ret_from_fork_asm+0x1a/0x30 [ 345.403186][ T9143] [ 345.403186][ T9143] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 345.410445][ T9143] fs_reclaim_acquire+0x102/0x150 [ 345.416028][ T9143] kmem_cache_alloc_noprof+0x53/0x3b0 [ 345.421945][ T9143] __kernfs_new_node+0xd2/0x8a0 [ 345.427332][ T9143] kernfs_new_node+0x13c/0x1e0 [ 345.432636][ T9143] kernfs_create_dir_ns+0x4c/0x1a0 [ 345.438287][ T9143] sysfs_create_dir_ns+0x13a/0x2b0 [ 345.443958][ T9143] kobject_add_internal+0x2c4/0x9b0 [ 345.449703][ T9143] kobject_add+0x16e/0x240 [ 345.454674][ T9143] elv_register_queue+0xd3/0x2a0 [ 345.460159][ T9143] blk_register_queue+0x3c4/0x560 [ 345.465726][ T9143] add_disk_fwnode+0x911/0x13a0 [ 345.471129][ T9143] nbd_dev_add+0x78e/0xbb0 [ 345.476125][ T9143] nbd_init+0x181/0x320 [ 345.480833][ T9143] do_one_initcall+0x120/0x6e0 [ 345.486147][ T9143] kernel_init_freeable+0x5c2/0x900 [ 345.491925][ T9143] kernel_init+0x1c/0x2b0 [ 345.497067][ T9143] ret_from_fork+0x48/0x80 [ 345.502019][ T9143] ret_from_fork_asm+0x1a/0x30 [ 345.507333][ T9143] [ 345.507333][ T9143] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 345.515182][ T9143] __lock_acquire+0x1173/0x1ba0 [ 345.520580][ T9143] lock_acquire+0x179/0x350 [ 345.525628][ T9143] __mutex_lock+0x199/0xb90 [ 345.530681][ T9143] queue_requests_store+0x1c7/0x310 [ 345.536430][ T9143] queue_attr_store+0x270/0x310 [ 345.541820][ T9143] sysfs_kf_write+0xef/0x150 [ 345.546960][ T9143] kernfs_fop_write_iter+0x354/0x510 [ 345.552801][ T9143] vfs_write+0x5bd/0x1180 [ 345.557668][ T9143] ksys_write+0x12a/0x240 [ 345.562537][ T9143] do_syscall_64+0xcd/0x230 [ 345.567592][ T9143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.574034][ T9143] [ 345.574034][ T9143] other info that might help us debug this: [ 345.574034][ T9143] [ 345.584266][ T9143] Chain exists of: [ 345.584266][ T9143] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#29 [ 345.584266][ T9143] [ 345.598034][ T9143] Possible unsafe locking scenario: [ 345.598034][ T9143] [ 345.605492][ T9143] CPU0 CPU1 [ 345.610879][ T9143] ---- ---- [ 345.616256][ T9143] lock(&q->q_usage_counter(io)#29); [ 345.621660][ T9143] lock(fs_reclaim); [ 345.628187][ T9143] lock(&q->q_usage_counter(io)#29); [ 345.636111][ T9143] lock(&q->elevator_lock); [ 345.640724][ T9143] [ 345.640724][ T9143] *** DEADLOCK *** [ 345.640724][ T9143] [ 345.648878][ T9143] 6 locks held by syz.2.506/9143: [ 345.653919][ T9143] #0: ffff88803396b5f8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 345.663024][ T9143] #1: ffff8880302d6420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x240 [ 345.672057][ T9143] #2: ffff888030b93488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 345.681868][ T9143] #3: ffff888025e9a1e8 (kn->active#99){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 345.691943][ T9143] #4: ffff888025ee00a8 (&q->q_usage_counter(io)#29){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 345.703679][ T9143] #5: ffff888025ee00e0 (&q->q_usage_counter(queue)#20){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 345.715661][ T9143] [ 345.715661][ T9143] stack backtrace: [ 345.721557][ T9143] CPU: 0 UID: 0 PID: 9143 Comm: syz.2.506 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 345.721588][ T9143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 345.721602][ T9143] Call Trace: [ 345.721609][ T9143] [ 345.721618][ T9143] dump_stack_lvl+0x116/0x1f0 [ 345.721658][ T9143] print_circular_bug+0x275/0x350 [ 345.721690][ T9143] check_noncircular+0x14c/0x170 [ 345.721742][ T9143] __lock_acquire+0x1173/0x1ba0 [ 345.721782][ T9143] lock_acquire+0x179/0x350 [ 345.721814][ T9143] ? queue_requests_store+0x1c7/0x310 [ 345.721842][ T9143] ? __pfx___might_resched+0x10/0x10 [ 345.721871][ T9143] ? do_raw_spin_lock+0x12c/0x2b0 [ 345.721911][ T9143] __mutex_lock+0x199/0xb90 [ 345.721950][ T9143] ? queue_requests_store+0x1c7/0x310 [ 345.721985][ T9143] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 345.722020][ T9143] ? queue_requests_store+0x1c7/0x310 [ 345.722045][ T9143] ? lockdep_hardirqs_on+0x7c/0x110 [ 345.722083][ T9143] ? __pfx___mutex_lock+0x10/0x10 [ 345.722125][ T9143] ? __pfx_autoremove_wake_function+0x10/0x10 [ 345.722162][ T9143] ? queue_requests_store+0x1c7/0x310 [ 345.722187][ T9143] queue_requests_store+0x1c7/0x310 [ 345.722214][ T9143] ? __pfx_queue_requests_store+0x10/0x10 [ 345.722242][ T9143] ? __mutex_trylock_common+0xe9/0x250 [ 345.722278][ T9143] ? __pfx_queue_requests_store+0x10/0x10 [ 345.722304][ T9143] queue_attr_store+0x270/0x310 [ 345.722330][ T9143] ? __pfx_queue_attr_store+0x10/0x10 [ 345.722362][ T9143] ? find_held_lock+0x2b/0x80 [ 345.722385][ T9143] ? sysfs_file_kobj+0xe4/0x290 [ 345.722425][ T9143] ? __pfx_queue_attr_store+0x10/0x10 [ 345.722448][ T9143] sysfs_kf_write+0xef/0x150 [ 345.722486][ T9143] kernfs_fop_write_iter+0x354/0x510 [ 345.722519][ T9143] ? __pfx_sysfs_kf_write+0x10/0x10 [ 345.722558][ T9143] vfs_write+0x5bd/0x1180 [ 345.722583][ T9143] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 345.722618][ T9143] ? __pfx___mutex_lock+0x10/0x10 [ 345.722657][ T9143] ? __pfx_vfs_write+0x10/0x10 [ 345.722691][ T9143] ksys_write+0x12a/0x240 [ 345.722717][ T9143] ? __pfx_ksys_write+0x10/0x10 [ 345.722741][ T9143] ? rcu_is_watching+0x12/0xc0 [ 345.722768][ T9143] do_syscall_64+0xcd/0x230 [ 345.722809][ T9143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.722835][ T9143] RIP: 0033:0x7f61e8d8e969 [ 345.722854][ T9143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.722879][ T9143] RSP: 002b:00007f61e9ca9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 345.722902][ T9143] RAX: ffffffffffffffda RBX: 00007f61e8fb5fa0 RCX: 00007f61e8d8e969 [ 345.722918][ T9143] RDX: 000000000000ffd8 RSI: 0000000000000000 RDI: 0000000000000003 [ 345.722933][ T9143] RBP: 00007f61e8e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 345.722948][ T9143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 345.722969][ T9143] R13: 0000000000000000 R14: 00007f61e8fb5fa0 R15: 00007ffd3f8f9848 [ 345.723007][ T9143] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 347.252048][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.359879][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.574506][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.661084][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.795106][ T13] bridge_slave_1: left allmulticast mode [ 347.800828][ T13] bridge_slave_1: left promiscuous mode [ 347.808413][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.817393][ T13] bridge_slave_0: left allmulticast mode [ 347.823849][ T13] bridge_slave_0: left promiscuous mode [ 347.829589][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.981635][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 347.992827][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.002460][ T13] bond0 (unregistering): Released all slaves [ 348.135977][ T13] .SR: left promiscuous mode [ 348.322962][ T13] hsr_slave_0: left promiscuous mode [ 348.330297][ T13] hsr_slave_1: left promiscuous mode [ 348.336423][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.347313][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.355342][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.363637][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.376517][ T13] veth1_macvtap: left promiscuous mode [ 348.382033][ T13] veth0_macvtap: left promiscuous mode [ 348.387745][ T13] veth1_vlan: left promiscuous mode [ 348.393367][ T13] veth0_vlan: left promiscuous mode [ 348.529620][ T13] team0 (unregistering): Port device team_slave_1 removed [ 348.542844][ T13] team0 (unregistering): Port device team_slave_0 removed [ 348.970343][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.018035][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.096098][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.130725][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.275071][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.321239][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.385899][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.439380][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.536890][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.611158][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.651713][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.712022][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.818504][ T13] bridge_slave_1: left allmulticast mode [ 349.829557][ T13] bridge_slave_1: left promiscuous mode [ 349.836517][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.845549][ T13] bridge_slave_0: left allmulticast mode [ 349.851241][ T13] bridge_slave_0: left promiscuous mode [ 349.857756][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.100386][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.111261][ T13] bond0 (unregistering): Released all slaves [ 350.125331][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.135251][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.145238][ T13] bond0 (unregistering): Released all slaves [ 350.158954][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.171067][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.181796][ T13] bond0 (unregistering): Released all slaves [ 350.334448][ T13] .SR: left promiscuous mode [ 350.365168][ T13] .SR: left promiscuous mode [ 350.888265][ T13] hsr_slave_0: left promiscuous mode [ 350.894814][ T13] hsr_slave_1: left promiscuous mode [ 350.900669][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.913117][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.920921][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.929897][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.940859][ T13] hsr_slave_0: left promiscuous mode [ 350.947883][ T13] hsr_slave_1: left promiscuous mode [ 350.953834][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.961232][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.969057][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.977111][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.987676][ T13] hsr_slave_0: left promiscuous mode [ 350.993973][ T13] hsr_slave_1: left promiscuous mode [ 350.999688][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 351.007150][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.014952][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.022434][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.038618][ T13] veth1_macvtap: left promiscuous mode [ 351.044461][ T13] veth1_vlan: left promiscuous mode [ 351.049725][ T13] veth0_vlan: left promiscuous mode [ 351.056101][ T13] veth1_macvtap: left promiscuous mode [ 351.061609][ T13] veth0_macvtap: left promiscuous mode [ 351.067350][ T13] veth1_vlan: left promiscuous mode [ 351.072632][ T13] veth0_vlan: left promiscuous mode [ 351.079425][ T13] veth1_macvtap: left promiscuous mode [ 351.085744][ T13] veth0_macvtap: left promiscuous mode [ 351.091343][ T13] veth1_vlan: left promiscuous mode [ 351.096706][ T13] veth0_vlan: left promiscuous mode [ 351.342175][ T13] team0 (unregistering): Port device team_slave_1 removed [ 351.365758][ T13] team0 (unregistering): Port device team_slave_0 removed [ 351.556940][ T13] team0 (unregistering): Port device team_slave_1 removed [ 351.581085][ T13] team0 (unregistering): Port device team_slave_0 removed [ 351.769983][ T13] team0 (unregistering): Port device team_slave_1 removed [ 351.794214][ T13] team0 (unregistering): Port device team_slave_0 removed