last executing test programs: 4m17.586784733s ago: executing program 2 (id=388): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000780)='/proc/self/net/rpc/auth.rpcsec.init/channel\x00', 0x441, 0x0) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r0, 0x10f, 0x81, 0x0, 0x14) close_range$auto(0x2, 0xa, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) r1 = pipe$auto(0x0) dup2$auto(0x5, 0x4) write$auto(0x6, 0x0, 0x100000001) splice$auto(0x4, 0x0, r1, 0x0, 0x80000001, 0x9) read$auto(0x4, 0x0, 0xfdef) 4m16.493932343s ago: executing program 2 (id=392): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) setrlimit$auto(0x8, 0x0) mlock$auto(0xfbe8, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @empty}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0xc00009}, 0x5, 0x20000000) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000000), r0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x40, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x2, 0x2a6) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_tracing_total_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/buffer_total_size_kb\x00', 0x2, 0x0) ioctl$auto(r1, 0x4b4c, 0x38) clone3$auto(0x0, 0x294) sendmsg$auto_SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x40004) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000003b80)='/dev/snd/pcmC0D0c\x00', 0x8100, 0x0) mmap$auto(0x0, 0x9, 0x4, 0x8012, 0x3, 0x81000000) madvise$auto(0x7, 0x2, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) setgroups$auto(0xe32, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) r2 = socket(0x1e, 0x2, 0x0) getsockname$auto(r2, &(0x7f0000000000), 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) socket(0x1e, 0x805, 0x0) 4m14.734130293s ago: executing program 2 (id=395): socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) sendmsg$auto_MACSEC_CMD_ADD_RXSC(0xffffffffffffffff, 0x0, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6gre0\x00'}) sendmsg$auto_OVS_DP_CMD_NEW(r2, 0x0, 0x2000000) 4m14.505015974s ago: executing program 2 (id=397): ioperm$auto(0xc5, 0x4, 0x2) futex_waitv$auto(0x0, 0x200bf50, 0x0, 0x0, 0x62c0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) r0 = socket(0x2, 0x3, 0xa) getsockopt$auto(r0, 0x0, 0x26, 0x0, 0x0) mmap$auto(0x3, 0x20009, 0x4000000000df, 0x10, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x3d, 0x0) r1 = fsopen$auto(0x0, 0x1) close_range$auto(0x0, 0xfffff004, 0x2) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x3, 0x6) mq_open$auto(0x0, 0x56a, 0x29, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x40000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000e80)=""/215, 0xd7) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'dummy0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r4, 0xffffffffffffffff, 0x0, 0x1ff, 0xffffffffffffffff, @relative_fd, 0xe600}, 0xf) socket(0xa, 0x806, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) write$auto(r1, 0x0, 0x4) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) 4m13.51641448s ago: executing program 2 (id=405): socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) sendmsg$auto_MACSEC_CMD_ADD_RXSC(0xffffffffffffffff, 0x0, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6gre0\x00'}) sendmsg$auto_OVS_DP_CMD_NEW(r2, 0x0, 0x2000000) 4m13.42555734s ago: executing program 2 (id=406): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0x81) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x0, 0x7fffffffffffffff, &(0x7f0000000040)=0x0, 0x0, 0x0, 0x2) r0 = socket(0x2, 0x1, 0x0) setsockopt$auto(r0, 0x6, 0x12, 0x0, 0x40) recvfrom$auto(0x4, 0x0, 0x1, 0x3ffffd, 0x0, 0x0) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x2, 0x1, 0x0) socket(0x1e, 0x1, 0x0) socket(0x10, 0x2, 0x0) memfd_create$auto(0x0, 0x4) mmap$auto(0x8000000, 0x8, 0x1000000016, 0x12, 0x3, 0x180000000) fallocate$auto(0x3, 0x3, 0xe, 0x8000008ec5) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x1c1041, 0x0) fcntl$auto(0x3, 0x4, 0xa553) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_GET_RADIO(r2, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="cf5728bd7000ffdbdf2506002045"], 0x14}, 0x1, 0x0, 0x0, 0x884}, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) listen$auto(0x3, 0x8d) setxattrat$auto(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x4c) r4 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe\x00', 0x440000, 0x0) open_by_handle_at$auto(r4, &(0x7f00000000c0)={0x64, 0x60000, "863acb50db9b78c09c3e49a9c2f21179bac42a899076d2a678e721b7a1dcf29fb1b5331c4e1c2cb7b9ba1a40262d2cd9c348139666c88c5da0d6bed8ba237ff9fea2346ee86031945a865784f1226d2c49ee128397bd830f1680efb3f86af3189570e848"}, 0xa2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f00000005c0)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HWSIM_ATTR_REG_HINT_ALPHA2={0x6, 0xb, ',)'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000060}, 0x0) 3m57.816819152s ago: executing program 32 (id=406): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0x81) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x0, 0x7fffffffffffffff, &(0x7f0000000040)=0x0, 0x0, 0x0, 0x2) r0 = socket(0x2, 0x1, 0x0) setsockopt$auto(r0, 0x6, 0x12, 0x0, 0x40) recvfrom$auto(0x4, 0x0, 0x1, 0x3ffffd, 0x0, 0x0) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x2, 0x1, 0x0) socket(0x1e, 0x1, 0x0) socket(0x10, 0x2, 0x0) memfd_create$auto(0x0, 0x4) mmap$auto(0x8000000, 0x8, 0x1000000016, 0x12, 0x3, 0x180000000) fallocate$auto(0x3, 0x3, 0xe, 0x8000008ec5) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x1c1041, 0x0) fcntl$auto(0x3, 0x4, 0xa553) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_GET_RADIO(r2, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="cf5728bd7000ffdbdf2506002045"], 0x14}, 0x1, 0x0, 0x0, 0x884}, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) listen$auto(0x3, 0x8d) setxattrat$auto(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x4c) r4 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe\x00', 0x440000, 0x0) open_by_handle_at$auto(r4, &(0x7f00000000c0)={0x64, 0x60000, "863acb50db9b78c09c3e49a9c2f21179bac42a899076d2a678e721b7a1dcf29fb1b5331c4e1c2cb7b9ba1a40262d2cd9c348139666c88c5da0d6bed8ba237ff9fea2346ee86031945a865784f1226d2c49ee128397bd830f1680efb3f86af3189570e848"}, 0xa2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f00000005c0)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HWSIM_ATTR_REG_HINT_ALPHA2={0x6, 0xb, ',)'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000060}, 0x0) 21.038480068s ago: executing program 4 (id=2310): mmap$auto(0x0, 0x2, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8002) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r0 = memfd_create$auto(0x0, 0xe) mmap$auto(0x0, 0x40000b, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) memfd_create$auto(0x0, 0x12) mkdir$auto(0x0, 0x9) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r1, 0x541c, r2) fcntl$auto(0xff80000000000000, 0x409, 0x13) fallocate$auto(r0, 0x3, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) socket(0x10, 0x2, 0x0) r3 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtd0ro\x00', 0x412000, 0x0) read$auto(r3, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x5, 0x20000000) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) mprotect$auto(0x1ffff000, 0x8000000000000002, 0x5) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x2002, 0x0) open(&(0x7f0000000000)='./file0\x00', 0xaf44529eb48ad963, 0x17c) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x121102, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 20.439197018s ago: executing program 0 (id=2316): madvise$auto(0x110c230000, 0x1, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x21, 0x2, 0x2) socket(0x1d, 0x2, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4000) socket(0x23, 0x2, 0x0) openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r0 = socket(0x2c, 0x2, 0x4) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(0x8000000000000001, 0x5, 0x8) read$auto(0xffffffffffffffff, 0x0, 0x8) readv$auto(0x3, 0x0, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000300)={0x14, r2, 0xf25, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4044054) mmap$auto(0x1000, 0x1, 0x7ff, 0x19, 0xffffffffffffffff, 0x1) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0xe983, 0xdf, 0x16, 0x401, 0x7ffc) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0xb, 0x4, 0x16, 0x940, 0x1ffe0, 0x3, 0x6, 0x2, 0x2, 0x25, 0xfff, 0x7, 0x4, 0x9, 0x5, 0x20000003, 0x5, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, [0x0, 0x2, 0x0, 0x400000000, 0x0, 0x0, 0x3, 0x0, 0x1000000000000, 0x0, 0x40000000003, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10000, 0xbf]}, 0x1fe, 0xfffffb26) ioctl$auto(0x3, 0x8008743f, 0x1) r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r0) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET2(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r3, 0x100, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008091}, 0x90) socket(0x2c, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 20.283740647s ago: executing program 4 (id=2318): r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sync_file_range$auto(r0, 0x0, 0x1, 0x7) sendfile$auto(0x1, 0x0, 0x0, 0xc01) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x40201, 0x0) ioctl$auto_UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000040)={0x6, 0xfffffff8, {0x8005, 0x7, 0x2000, {0xd, 0x100}, {0x78c, 0x100}, @rumble={0x6, 0x597}}, {0x2, 0x800, 0x1000, {0x40, 0xb}, {0x2, 0x2628}, @ramp={0x5, 0x1, {0x6, 0x7, 0x6, 0x6}}}}) 20.063985356s ago: executing program 0 (id=2321): openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000180), 0x28400, 0x0) readv$auto(0x3, &(0x7f0000000040)={&(0x7f0000000000), 0x36a}, 0x6) (fail_nth: 4) 20.041404461s ago: executing program 1 (id=2322): close_range$auto(0x2, 0xa, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000c40)='\x00\b\xbf(\xba\xd3\xf4\xba', 0x5) socket(0x26, 0x2, 0x6b3) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) bind$auto(0x3, 0x0, 0x6a) madvise$auto(0x2, 0x17, 0x8) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) socket(0x2, 0x1, 0x84) openat$auto_fops_init_pkru_pkeys(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) process_vm_readv$auto(0x0, &(0x7f0000000080)={0x0, 0xfff}, 0x4800000001, &(0x7f0000000040)={&(0x7f0000000000), 0x200000004}, 0x59, 0x0) setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0x8) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0xc7}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0xa, 0x1, 0x0) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x60401, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0) 19.64108347s ago: executing program 0 (id=2323): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) socket(0x10, 0x2, 0x0) memfd_create$auto(0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x6, 0x400100) socket(0x2a, 0x2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x6, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0xa, 0x3, 0x3a) eventfd$auto(0x3) r1 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r1, @new_prog_fd=0x4, 0x4, @old_map_fd=r0}, 0xa3) 19.609347629s ago: executing program 4 (id=2331): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) socket(0x10, 0x2, 0x0) memfd_create$auto(0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x6, 0x400100) socket(0x2a, 0x2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x6, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x9, 0x0) socket(0x6, 0x802, 0x2) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0xa, 0x3, 0x3a) eventfd$auto(0x3) r1 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r1, @new_prog_fd=0x4, 0x4, @old_map_fd=r0}, 0xa3) 19.608481216s ago: executing program 0 (id=2324): close_range$auto(0x2, 0xa, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000c40)='\x00\b\xbf(\xba\xd3\xf4\xba', 0x5) socket(0x26, 0x2, 0x6b3) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) bind$auto(0x3, 0x0, 0x6a) madvise$auto(0x2, 0x17, 0x8) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) socket(0x2, 0x1, 0x84) openat$auto_fops_init_pkru_pkeys(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) getpid() setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0x8) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0xc7}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0xa, 0x1, 0x0) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x60401, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x4601, 0x0) 19.535640904s ago: executing program 1 (id=2325): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/btrfs/features/supported_sectorsizes\x00', 0x100, 0x0) sysfs$auto(0x2, 0x10040000000046, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0x4048aec9, r0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) r3 = getpid() syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/user\x00') ioctl$auto(0x3, 0xc008ae67, 0x38) close_range$auto(0x2, 0x8, 0x0) timerfd_create$auto(0x9, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000040), 0x40040, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) read$auto(0x3, 0x0, 0x80) 19.074145123s ago: executing program 3 (id=2326): rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) r0 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(0xffffffffffffffff, 0x0, 0x4000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) keyctl$auto(0x15, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r0) sendmsg$auto_HWSIM_CMD_GET_RADIO(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@HWSIM_ATTR_IFTYPE_SUPPORT={0x8, 0x17, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000081) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) 19.073548116s ago: executing program 0 (id=2335): close_range$auto(0x2, 0xa, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000c40)='\x00\b\xbf(\xba\xd3\xf4\xba', 0x5) socket(0x26, 0x2, 0x6b3) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) bind$auto(0x3, 0x0, 0x6a) madvise$auto(0x2, 0x17, 0x8) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) socket(0x2, 0x1, 0x84) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000080)={0x0, 0xfff}, 0x4800000001, &(0x7f0000000040)={&(0x7f0000000000), 0x200000004}, 0x59, 0x0) setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0x8) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0xc7}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0xa, 0x1, 0x0) r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x60401, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x4601, 0x0) 19.066985248s ago: executing program 4 (id=2336): r0 = socket$nl_generic(0x10, 0x3, 0x10) lsm_set_self_attr$auto(0x3, 0xfffffffffffffffc, 0x1f, 0x8000000000000000) syz_genetlink_get_family_id$auto_batadv(&(0x7f00000002c0), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000040), r0) sendmsg$auto_HANDSHAKE_CMD_ACCEPT(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRES16=r1, @ANYBLOB="010028bd7000ffdb5f25020000000800020001000000080002000700000008000200ff010000080002000000010008000200080000000800020003000000080002000400000008000200"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon1\x00', 0x4ad03, 0x0) r4 = openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/error_log\x00', 0x101001, 0x0) write$auto_tracing_err_log_fops_trace(r4, &(0x7f0000000080)="b8", 0x1) ioctl$auto_MON_IOCG_STATS(r3, 0x80089203, &(0x7f0000000080)={0xafa, 0x7}) r5 = socket(0x11, 0x80003, 0x300) sysfs$auto(0x2, 0x2, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="e4000000", @ANYRES16=0x0, @ANYBLOB="00012abd7000fddbdf2504000400ce0001005e00fdd3f5c349c0cb79e70090a5d487c075fc245103518228bafa4f68916b3d85c53fc403e12136b26bad8c318da9982209124f84d0a5aec0da705a1c4c7d430d9b0cc017dc2081302b1a4807fec558f35aa0a03354c9c8611c4e01309d31e77b1bae31f9c096c2c0fbfdff2627f08b54dbfe4c4bbd507f353e09ccad6506f2d4429c7944b76eb315bfa34d579efbbb362ad6561966c88af2066f255e8bb7b24b6ed3a18b263ed7e09c31bf9f862242a73eea840730e480056355bfdbd49e395e042a5876c1590c8ac50000"], 0xe4}, 0x1, 0x0, 0x0, 0x24004004}, 0x20000045) setsockopt$auto(r5, 0x107, 0x8, 0x0, 0x6) read$auto(0x3, 0x0, 0x7) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="1100"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x22, 0x940, 0x1ffde, 0x3, 0x6, 0x8000003, 0x9, 0x5, 0x0, 0x4, 0xb0, 0x7, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, [0x0, 0x0, 0x0, 0x243efbdf, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9, 0x20000000, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff, 0x6, 0xfffffffffffffffe, 0xe6e]}, 0x7, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) socket(0xa, 0x2, 0x3a) mmap$auto(0x4000000000, 0x2020009, 0x3, 0x7fffffffffffffff, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x9, 0x5, 0x3) setxattr$auto(0x0, 0x0, 0x0, 0x7a1, 0x3) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r6 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r6, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x401}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x804008) 18.879246796s ago: executing program 1 (id=2327): mmap$auto(0x0, 0x2, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8002) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r0 = memfd_create$auto(0x0, 0xe) mmap$auto(0x0, 0x40000b, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) memfd_create$auto(0x0, 0x12) mkdir$auto(0x0, 0x9) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r1, 0x541c, r2) fcntl$auto(0xff80000000000000, 0x409, 0x13) fallocate$auto(r0, 0x3, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) socket(0x10, 0x2, 0x0) r3 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtd0ro\x00', 0x412000, 0x0) read$auto(r3, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x5, 0x20000000) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) mprotect$auto(0x1ffff000, 0x8000000000000002, 0x5) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x2002, 0x0) open(&(0x7f0000000000)='./file0\x00', 0xaf44529eb48ad963, 0x17c) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x121102, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 18.878693621s ago: executing program 0 (id=2328): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) r1 = getsockopt$auto(0x6, 0x84, 0x66, 0x0, &(0x7f00000000c0)=0x10000) r2 = syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f0000000080), r1) sendmsg$auto_NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x108, r2, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAG={0x5, 0x3, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0xda, 0xc, 0x0, 0x1, [@typed={0x22, 0xb5, 0x0, 0x0, @str='/sys/kernel/debug/usb/devices\x00'}, @typed={0xc, 0x54, 0x0, 0x0, @u64=0x6}, @generic="d006b3b07b629f8a9e58960262bf173b1f55b80939d1eb07fc32f8b9a5ec11fba31de31fd9f83d7107092d07580bc70d903cfef27ae1068f61c0d9aab4965bc84bd17bde5c7bbd15d34cef8dcc9d2768836e82af9f2a7b2dfe6fc86b27727e27a865cd6fb3af0bf5ae25984e52742f5312778e76d01a72191b5c8a34c9255bb6ff108b561359ea3048abd97a9d6c06ac8489ed0d451be9bea5b369d29e30", @typed={0x8, 0xcb, 0x0, 0x0, @fd=r1}]}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x40}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x108}, 0x1, 0x0, 0x0, 0x4}, 0x20008800) openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000180), 0x28400, 0x0) readv$auto(0x3, &(0x7f0000000040)={&(0x7f0000000000), 0x36a}, 0x6) 18.409601128s ago: executing program 3 (id=2330): madvise$auto(0x110c230000, 0x1, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x21, 0x2, 0x2) socket(0x1d, 0x2, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4000) socket(0x23, 0x2, 0x0) openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r0 = socket(0x2c, 0x2, 0x4) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(0x8000000000000001, 0x5, 0x8) read$auto(0xffffffffffffffff, 0x0, 0x8) readv$auto(0x3, 0x0, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000300)={0x14, r2, 0xf25, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4044054) mmap$auto(0x1000, 0x1, 0x7ff, 0x19, 0xffffffffffffffff, 0x1) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0xe983, 0xdf, 0x16, 0x401, 0x7ffc) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0xb, 0x4, 0x16, 0x940, 0x1ffe0, 0x3, 0x6, 0x2, 0x2, 0x25, 0xfff, 0x7, 0x4, 0x9, 0x5, 0x20000003, 0x5, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, [0x0, 0x2, 0x0, 0x400000000, 0x0, 0x0, 0x3, 0x0, 0x1000000000000, 0x0, 0x40000000003, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10000, 0xbf]}, 0x1fe, 0xfffffb26) ioctl$auto(0x3, 0x8008743f, 0x1) r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r0) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET2(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r3, 0x100, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008091}, 0x90) socket(0x2c, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 18.383394449s ago: executing program 1 (id=2332): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x8, 0xc, 0xe3, 0x400000000a, 0x3}, 0x6f4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.6/usb7/power/wakeup_active_count\x00') r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x8}) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80, 0x0) mmap$auto(0xc, 0x200006, 0x1, 0x11, 0x602, 0x4) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto_nsim_udp_tunnels_info_reset_fops_udp_tunnels(r0, &(0x7f0000000380)="8f85fae536edcca3f39f03aef3d45257d646cfbd34b3ccaa6b7752f9cb66a86f5422a8287fa60eb6caefee00c437de2f6209ac81b0191d40bbb9b618c6c7913dda97351421fa54ec8e1970a8f1e4ad94aea37105fa6f0144982e7e21fa0d5b8f8085e95449618d0066cd3d137241dc73fb8bb682209b121a7637dfe9f3899d92e20a18d36832c19ea9bc7a933ea14bc397ef05dea49c577658740dccc019ef18092c43c65da2438ba8a7cdb6be3360c01a7eebe7645822b831ac14887655bfdab8e6782e0e187896810602337bf45f7b4b34881474476442c26c67c8705631a86716f9ea1ad880f86216916777af3473782f95c40ca794e3addfbe1871caf3c435246ca94dfa8b24e58dba8271ae4ba8eaa1e566de5f6c5727508c3e803a00d4abd53f10a35dafef8447762ea87c9b96bafcc199670861725ac462533502014a0ee781f63f0ded4a261355ee0d47201a8e2acf8337ffe86c9402b2f0b0ab2c61c0616d2abfeba60d1641ef5607eecf79a110aa71ca7cec3d21f2918c52b22f756af516501e12e300e186bd077a37dcf447edaa6e6cf122e2c61c3f204b4b3147e94eff431e32dfebfb810f48d19ea031af5775097ecbc2a9e7a85de3cd07c79d4b1540d9fc310f6e95e0b157e36f4d455cf9bc8e30d3d42200cf31965c6bd65b3e6489e1c6e26cb39a526a1275a9e612a075907000d7f82e0f32a9f71b72561af958fa717db5c783091e25de23bcc291e809b339101e04dba36a9334b01dd8a364c0260f13b616535ed595781d32e530922e15b222d0db31f4208ec633672ffba109c3e1a5db8b295d5577aaa1797d875108c097ace2cfb671fbb428f4e51aaf9f890f057003a3dc0b98b0a5c5020303a78f1ea1dd8c961184683ababcaf5d249c4a392918d932b62c10f256c431e2917e1777c66a3b529eba989e83cf0b74b68c7d02cc69c0deb0fb36c43004f8e0dfeb5b53fab21f76771a7aa209552d2d21b698acbe6a0ccc287624bcd024aa7bc229029761750f4c86a574caa4e081012f5075cd25c1f2727ede7a637038a82e6d4b43432d7d1d58c428a71f2b2b64c2f03ee43cee134463a0d6dde9682b7c337098e5405fca9f6df92f1ea79c33e3967b776037c15289b485e2a69e0f29109923d7ecd49a5677f9d8c0c59e05cf4eda4d468b19308aa3c93e478688057568daa82b36cdd0883abf39091c6de874943eb2abbdb10e923806b5442b7d25d73f8d055085f0ee65dd5bcb2d98d630dfc5d6afd8e7a0c2fe8c7c1a58fb97e337584517205ee4a0327a4b8d7b8f632858c57bf178ff0db7d3588679b10f87accbef2503e05c013acc512d73b2ad2674dc315aa141588513e5582d8cb809d0aaf725a6cf31600a773b5649ee1b08b10e82531fe6b83f53b67358102e0c627b44dcbc75491dfbe43917e3d5389a1e9baebb69f018bc4b8761605c09544638f0f1c9cc967148b3eebbbad5ed4a4934c0b770f21a7f86d9bf3d91d90e02dae1758b0b8028f37434ef679527abb555133cfa7aff6cd78860ce9b7cc32b932b2ad713aeb6607bc2d7fc1a0882d1d870f17ea378cc82d40026a84b8550bdc8582efa91a5372526bb5ff7c22c9614aa1fd7602e43afe3f2c6769404a57b31b9a0c211f363c4f569deee99c293dabe703be7c1cb4a6653e620e43f8a7cbea3a9e2f33905a2d64cccf93997ba99a30ff77466387b91e59ec58df062723e6f2d390b6353eb76df34023060f9639f7b6ab1f5f2c48d5a554943196b8a22506d0d76fe0e5e753f64e59dfd2f05bdf1c5f7cac6abe64b4f517302c720c74dfaf594d06e5e4e9fa79b49db7310453a81d7d424cfe941451ef6ed4d09f57259c786fd646e0504e561ecb443811e3a344cdd60b377a486550c0db079694159b15a07a58a30b88375a2a86db71bcb8e4bb8d587543b4b56037871a79f5ffec50f5f6b23a7b6595aa920ab3c1bba408572ebf34aece700ca2e743bb29d87f320494be11cf650bde6893eddd3badf9a11eb7c9f54f17e3ec8e0423d123bf5f71e24655c1806f6c3ed3733250e7e1ceeb4c8c43bf7adc650dcae99e089f88aab4729f2a0585323f28b0fbb1febef4b7edfc750993a5bd1e29433b14d8f0cead123f8f01b96c3ac8dd5fbe59f6c6aa1fd0bbc9d9cfa89066236b73abb565d9d0be6d915783fa8d94d57b13a7555535ec85a939e2769477e95d22ad1023c8a34f9232b93ae648c2e9f93396ac5c51fae136caeb01174196c1f14863981d26d82d5d4ae8c5d0b6c16f3e862128156ce744d7b71942f3f3fa8cb673fde92c12903a22defa8c22acd8c2c3d1fcf0fe2ef534eba7fe54db56cdb7710cb9b3a2bc3f4797d174cf9f524ce5c8bd6af9d2f27d2765bb670f79671098db76188aab45c1bad358daea7337f1c56527697a2b8d412f11226a7373589f874676603b5fa0ea5c5393a19810450dbc1e181e5bf064557816e74bf064b772a8420cfbf9e11b166df8285428153da1de2d5f7f8a6b66dfb8493b6d2af8bd1ab6e58206238868d4ee187887a4046dd7d4067d88e87884f9735c6807d2470b30f12c9e997d93ae244c03a9903cc6074abd281490a05046dea2e5dc2a7fd60597ef22ced8eb408df8a3836bd1bbe877327cb9454eb1f1fd09d8892c5748427d217fd3e38b485841dee3c9a75662900ae9df66b0fdb276e353948ddaec67ce6f9b6cd715b16bc5debe4c6a78106e3b12372df5c72b7507dace12faecaf4acad6dc954b297e3601798692c27b5bd1681c7298d035a0af561d027aaf9ee6335fc6fcb7259cae83e4218d3d8017191cadeebe2531e871240d0b54f2a37252d636eeb50a6f056bd985d8d3978cbb955dbfd9b35110d5eac9258f14c77cbff259772d219e5c317350ae2ab6519a8f913ebb5829498a58b4670b7a37c03a94bc372ee0c2d59ee01b9177f12fadf5eb920d57793a59b21840882c8866124878a333d2832563f0532969a12ef3e0e264ddd3dc00de754ee118dfa1eaadc96f5d35916478dd55e82cf10417cbcdc8362a73eb32d01206fae78ae09d9e2e649cf399dd0707f4370213c1118b2a22e5d74705d2a0915984a07dc21dcdc0bff517457927bfc1e42876696f38abd0081b5dd3b270019c360b2b7c4193a2e8be6e49dbce4fd55299291cde1edcb1f64725599a2b08d03889b089228daca2d96668d57e6be4636ba62f31ebac13d03c52fcc41841e23873d47db7d9ff4ecbf2f03942e3bb1ec4d0729ed73960861ef749e810579a658178f286b5c5abaeddef59d773f4f304874aef7fbffa840407f5c68b63dc2cdc8c2c9ce0fdbd3c1bf5dd79368531ec06b4da217c56ae1221a342f65e4aaca0c861846142c37fdd84d070d73d2c4f9fc690f6b7b3f75504a13886d8b641e6f14a0f3c5ce3d371056989014f2a204dfccae673c13e9594651e8ec1da321e2d206fe441b51c5b92c4116869dd18b1f1b6dbd848808c53795902abb6644350e90151aee23e9d7db52b5135a5a89147b51bf4ed330c09fea6b499d571dc7805a04e5e4acf320fea0a8095c0058ad50035f1e9786ba560d64a8e537b5125c0d0e5ec9706aa89abf66d60a3feae4f4dd963630cb905091fa7360ff0b85285b2b4aeb5132b376942c477d8c6a31171e987068afa3c7e20181364499fd05b2cd9ee9d01a0f345701158311e911f6ce87a0db6b263cb41370be65996b1e4c964f5e22a9fabd0783b4252417737b0b80a630e3cf627f59312bd7446c07baf96d261ccbd8e4b2eca40421cbbbc102b7047035b0e2e202ac211fbc3ef028d6ab8bf3505c25b544410cd7346e62c91a6e4d422bac15102e309b5b56f750c75405c4abf7d9fd592eca6bdcf6d7c58fafd598fc3a0868a75da8c3826ca6ec9332d037deecbcb904ec50f3a06f17987522803d6697baf8d45663ef63423ab1c0bcff2fb621c0618a27ac1e045de98585c142b463d165a1d9c58fac2f01565a60c8406c9ad118be374a8ff10349be8c9a2d976b0df9e82ee9a75c4607610e3548abcea46cb83a21f5b22c63ea94aa100ec6936b3f2584a81750c9974a20d0444eecd6259ac924f98eae79fbefed5e59852b4e502b7d9ad39547c4317027bb2c7963efaa02acaa8a27790e819d8832fe5ae6af96e4666cfb215860e4a003ca0cfc405f1fbaaef87daba5cc7b30fa9000af86ad3ff3476e1c9003e759d24216907cfd49d432ecf6b89c287544c79354cf9ece61799770f1d667689946ab514721d9181c60fd1ba91d089b227601b97dfd842446c2dae3cb89676c2963ddf9b569816140235e496ac1f61972b5b41d6f7cc84659d0bbd53d2e1e0eb0b5e43cf37ab0402887ea71617abbc7e978840b530b6dbb23ca801523d80d0a7a5090edb5072af24b5eec68fdcd13959b7d44a80a189149047cf4701758b97c6d83704f3c8f47c4d9f0794e834e1981f96457b1f6da8438d1ca02310055c51eff0bf6624e5d640b53aa7b7569ec0648be595db8a54796aa7a0e427214592def5c1003d3cdcbfc60987d35ce36860a55b062fa2314b31df20fe6bf95191eba5fb83c399593fc1efc1cfd9e15f069d998869c7ff65a890b887df00515bc5837f55aa01c0c005c8a973b88956248d589540c9e67760d0824901d8d96adfe8c1fb5bc42323fa9a5d42faf3a12360881cda97800984b5b7f84f0ae834e0a5f7bf027b4ce0cac6e36d1ce0b04c894d3965ce97a8cabbb01832985d925c1f2d908d8638b6be52bf8e73d3df202b63dcf28c55dfe1bbfa8862a2aaa2fb1f6a660d1247785ffc07e5acad49078ba9eb5d1a280669b71e159d4c1518a793cc2def05c14a82e2965ad0b57a3c5a56b9c1bef379f55100254b4efe98bfb7661a363a45294638ec6bb6cededf3654fe6c67c930a0c595246a4ade3dc928fccd8a2ba774dd6d4edfb82ca68639ff417a9b0e48fa8cc335ba82a98ef19276d4c477a38e985b09ec9f6c43a23d3edfb33809caf9fe3d14677f7294e0a5b423a2e20ee015e692ee938aca13182094983b0d73c8e2ba931eb30ec3cc33f582b826fa28181529984b5034b43aedbd87dcdc5e06f44c3fba3656c7c61607c0d053247a274b96b3bfff62f25def3dddb9b46e6d6406b0fe2a3fbda8c2462297c0b84ffcde582c63694eec0db157511088b6acd8efb616857ea962c3a1c30fb22112d613390dbe3f0b0301b7faed4d48502791263ae2459ab23fd21b235b9b87813c68f2581c0f4fc411aa5a0ef09bc19dbd65a63c9a131b7e72fe1d26ec5847f36f7e24356ded54c8779dcc296e13c2ba16b804526250890cfd03944ac79a4ec9c71be1adbb03955c6cb3e510b78f554257b18c8bde325f0cd6ef727ae6982b97e670975f2b109cdd32d567acbf71a07bbdbb863ef258869bede4c32d0b6e49ffb5869706d56ade508ea286a82d0bf5e54487f0db871ea2c310a5182429d38e761fbbecaf62c9cfaf1fe06888862bc06a441bbdd05bc8ef48f0c94969bebfc016bb8d37c843ff72f97603d0cccce08fdacbabe1203ed0393e00dee592771f596f83aed1b995adc587e9f6538e68b66ccf01c3229c8647240d92abdc63ab057fd0adb9fd356882c310faf6906de2da0f6b506c9456250e8b95a3f3565487633e6c30b88510a2a73562f6c2ea251c8905810afb280f9288056b222ebbe1c6ba28eb61aa8422316821c38fdf99ff1b7d048b141dd5b36cbe7d8aad6cd9305fb6181509bddbb2c6135ba535c34b2949c57761fcd4dd0f286bc15272574fa28afd3ac9787b35a1d66735f3dabd9cefd38198493130219", 0x1000) open(&(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x20) sendfile$auto(0x6, 0x3, 0x0, 0xc01) r1 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x42, 0x3, 0x1ffdf, 0x7, 0x200003, 0x209b, 0xa121, 0x3, 0x6, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x280, 0x100000000, 0x0, 0x7, 0x2100, 0x220, 0x0, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x0, 0x2000, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffbff5, 0xfffffffffffffff9, 0x1, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2000000000000000, 0x0, 0x0, 0x400000000005b4, 0xc, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x891, 0x7, 0xfffffffffffffffc, 0x9, 0xa38, 0x0, 0x3, 0x4, 0x8, 0x4000000000, 0x7]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) shmat$auto(0x0, &(0x7f0000000000)='(\x00', 0x10000) 18.180274948s ago: executing program 4 (id=2333): openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000180), 0x28400, 0x0) readv$auto(0x3, &(0x7f0000000040)={&(0x7f0000000000), 0x36a}, 0x6) 18.166960426s ago: executing program 3 (id=2334): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) socket(0x10, 0x2, 0x0) memfd_create$auto(0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x6, 0x400100) socket(0x2a, 0x2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x6, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0xa, 0x3, 0x3a) eventfd$auto(0x3) r1 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r1, @new_prog_fd=0x4, 0x4, @old_map_fd=r0}, 0xa3) 18.082898776s ago: executing program 3 (id=2337): madvise$auto(0x0, 0x7fffffffffffffff, 0xb) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = fsopen$auto(0x0, 0x1) getrandom$auto(0x0, 0x6000000, 0x3) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) ioctl$auto(0x3, 0x400c4d05, r1) clone$auto(0x21002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) socket(0x2, 0x1, 0x7f) read$auto_tomoyo_self_operations_securityfs_if(r0, 0x0, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYRES64=r2], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x4008000) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x20040811) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="19"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000000)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x1}, 0x2, 0x0) write$auto(0x3, 0x0, 0xfffffdeb) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r1, 0x800008000) sysfs$auto(0x2, 0x8, 0x4e) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x5, 0x3, 0x2}, 0x8000, 0x0, 0x6) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/system/node/node0/hugepages/hugepages-1048576kB/demote_size\x00', 0x123902, 0x0) write$auto(r3, &(0x7f00000001c0)='0g\xfb]$|\xcb1j\xeb0B|d\x1e\xec\x99\xb9\xfd\xd3\x89O\x9f\xac+\xf6\xd7/\xc9\xe9x\xd4\xf3\xc8\xf5\x7fW\xd3\xa6\x96\xd3^\xb8\xb4gq%H\xcc\x88r\xeaO\x8e\x10\t\xc7 P\xcf\xa7H\b\x04\x87\x98\x16`\xa3S\xd46\x10Wf\xc9<7\xcf\xc9\xf1\b\x9b\x8c\x9fu;\xc48(u\xf9Bx\n\xafW%/bBT\xa9\a\xed\xd2H4\x96\xa3U\xca\xf1\xef\x14dU\x15\x16\xa7\xdd\x01\x0e\xda\xc8\xd3\x00\xc5\b\x1a\xb0mN\x01\xb1\xc8B.U\xd1\x02\'\x9a\'\xf1;\xedJ\xf6@\xac\a\xf5\xf5 |\x1ex\xb7@=\xad\xe7\xff\xd6\xc1\xcf\x11\x0f\x99+v\x873\xc4\x17]\x17!]ct\xff\t\xb2A\x0f\x91\x02\xca&\x910x0}) sendmsg$auto_OVS_DP_CMD_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f0000000140)={0x40, r3, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@OVS_DP_ATTR_IFINDEX={0x8, 0x9, r4}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x6}, @OVS_DP_ATTR_NAME={0x11, 0x1, 'ovs_\x12\x00\x00\x00\x00\a\x00\x00\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x2000000) 15.931321472s ago: executing program 3 (id=2341): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) socket(0x10, 0x2, 0x0) memfd_create$auto(0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x6, 0x400100) socket(0x2a, 0x2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x6, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0xa, 0x3, 0x3a) eventfd$auto(0x3) r1 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r1, @new_prog_fd=0x4, 0x4, @old_map_fd=r0}, 0xa3) 15.666863939s ago: executing program 3 (id=2342): sendmsg$auto_TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="ffdbdf25059c9300"], 0x14}, 0x1, 0x0, 0x0, 0x4008841}, 0x884) r0 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) lseek$auto(r0, 0x1000, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r2) sendmsg$auto_NL80211_CMD_GET_SCAN(r2, &(0x7f0000003100)={0x0, 0x0, &(0x7f00000030c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendmsg$auto_NL80211_CMD_GET_MPATH(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r3, 0x101, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_FILS_KEK={0x15, 0xf2, "e45088094cc3ef2cc2a494a78ff1160fda"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040001}, 0x200488c1) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x106) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000002c0)=""/192, 0xc0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r4 = socket(0xa, 0x1, 0x84) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) ppoll$auto(&(0x7f00000002c0)={r4, 0x1, 0xd75}, 0x2, 0x0, 0x0, 0x8) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/zram0/mem_used_max\x00', 0xa081, 0x0) write$auto(r5, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) setsockopt$auto(0x400000000000003, 0x29, 0x2a, 0xffffffffffffffff, 0x3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r1, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4004804) 2.037852914s ago: executing program 33 (id=2339): mmap$auto(0x2, 0x400008, 0xe1, 0x9b71, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) write$auto(0x3, 0x0, 0xfffffdef) socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x0, 0x9, 0x9) socket$nl_generic(0x10, 0x3, 0x10) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) madvise$auto(0x108000, 0x7, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000003c0)=""/4096, 0x1000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x204180, 0x0) madvise$auto(0x0, 0xffffffffffff0004, 0x19) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) ioctl$auto_SNDCTL_DSP_RESET(r0, 0x5000, 0x0) madvise$auto(0x5, 0x2, 0x0) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r1 = io_uring_setup$auto(0x1, 0x0) r2 = socket(0x1d, 0x80003, 0x300) sendmsg$auto_NFC_CMD_LLC_GET_PARAMS(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000c020}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_VENDOR_DATA={0x38, 0x1f, "82f3b946c57374276fd6b6252acea03f09ecf9a0cf502df0c3ddf44d099d186394789d4aade763841bc30efc0fda0b57f2c987e2"}, @NFC_ATTR_DEVICE_NAME={0x5, 0x2, '{'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40014) setsockopt$auto(r2, 0x107, 0x1, 0x0, 0x8004) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) 1.021744833s ago: executing program 34 (id=2340): socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) sendmsg$auto_MACSEC_CMD_ADD_RXSC(0xffffffffffffffff, 0x0, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) sendmsg$auto_OVS_DP_CMD_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f0000000140)={0x40, r3, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@OVS_DP_ATTR_IFINDEX={0x8, 0x9, r4}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x6}, @OVS_DP_ATTR_NAME={0x11, 0x1, 'ovs_\x12\x00\x00\x00\x00\a\x00\x00\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x2000000) 0s ago: executing program 35 (id=2342): sendmsg$auto_TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="ffdbdf25059c9300"], 0x14}, 0x1, 0x0, 0x0, 0x4008841}, 0x884) r0 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) lseek$auto(r0, 0x1000, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r2) sendmsg$auto_NL80211_CMD_GET_SCAN(r2, &(0x7f0000003100)={0x0, 0x0, &(0x7f00000030c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendmsg$auto_NL80211_CMD_GET_MPATH(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r3, 0x101, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_FILS_KEK={0x15, 0xf2, "e45088094cc3ef2cc2a494a78ff1160fda"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040001}, 0x200488c1) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x106) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000002c0)=""/192, 0xc0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r4 = socket(0xa, 0x1, 0x84) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) ppoll$auto(&(0x7f00000002c0)={r4, 0x1, 0xd75}, 0x2, 0x0, 0x0, 0x8) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/zram0/mem_used_max\x00', 0xa081, 0x0) write$auto(r5, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) setsockopt$auto(0x400000000000003, 0x29, 0x2a, 0xffffffffffffffff, 0x3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r1, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4004804) kernel console output (not intermixed with test programs): 267] RSP: 002b:00007f1993967038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 288.124354][T11267] RAX: ffffffffffffffda RBX: 00007f1992da5fa0 RCX: 00007f1992b8cd29 [ 288.124371][T11267] RDX: 000000000000c202 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 288.124387][T11267] RBP: 00007f1992c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 288.124403][T11267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 288.124417][T11267] R13: 0000000000000000 R14: 00007f1992da5fa0 R15: 00007ffc1646ee88 [ 288.124440][T11267] [ 288.611511][T11273] netlink: 'syz.3.1337': attribute type 1 has an invalid length. [ 288.694079][T11282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1338'. [ 288.806423][T11282] nbd: socks must be embedded in a SOCK_ITEM attr [ 288.822109][T11282] block nbd0: shutting down sockets [ 289.275072][T11312] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1347'. [ 289.409884][T11322] openvswitch: ovs_: Dropping previously announced user features [ 289.754878][ T5841] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 289.870820][T11356] openvswitch: ovs_: Dropping previously announced user features [ 289.980073][T11363] block nbd0: not configured, cannot reconfigure [ 290.631462][T11400] openvswitch: ovs_: Dropping previously announced user features [ 290.884121][T11403] openvswitch: netlink: Duplicate or invalid key (type 0). [ 291.329803][T11435] FAULT_INJECTION: forcing a failure. [ 291.329803][T11435] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 291.347043][T11435] CPU: 0 UID: 0 PID: 11435 Comm: syz.3.1385 Not tainted 6.13.0-syzkaller-04541-gdf60eac9efe8 #0 [ 291.347074][T11435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 291.347087][T11435] Call Trace: [ 291.347094][T11435] [ 291.347101][T11435] dump_stack_lvl+0x16c/0x1f0 [ 291.347138][T11435] should_fail_ex+0x497/0x5b0 [ 291.347169][T11435] _copy_from_user+0x2e/0xd0 [ 291.347191][T11435] core_sys_select+0x34f/0xa10 [ 291.347219][T11435] ? get_pid_task+0x35/0x250 [ 291.347254][T11435] ? __pfx_core_sys_select+0x10/0x10 [ 291.347278][T11435] ? rcu_is_watching+0x12/0xc0 [ 291.347305][T11435] ? __pfx_lock_release+0x10/0x10 [ 291.347337][T11435] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 291.347372][T11435] kern_select+0x15e/0x1e0 [ 291.347398][T11435] ? __pfx_kern_select+0x10/0x10 [ 291.347427][T11435] ? __pfx_ksys_write+0x10/0x10 [ 291.347457][T11435] __x64_sys_select+0xbd/0x160 [ 291.347484][T11435] ? trace_irq_enable.constprop.0+0xea/0x140 [ 291.347511][T11435] do_syscall_64+0xcd/0x250 [ 291.347535][T11435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.347560][T11435] RIP: 0033:0x7f1992b8cd29 [ 291.347577][T11435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.347596][T11435] RSP: 002b:00007f1993967038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 291.347617][T11435] RAX: ffffffffffffffda RBX: 00007f1992da5fa0 RCX: 00007f1992b8cd29 [ 291.347631][T11435] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 291.347644][T11435] RBP: 00007f1993967090 R08: 0000000000000000 R09: 0000000000000000 [ 291.347657][T11435] R10: 00000000200002c0 R11: 0000000000000246 R12: 0000000000000001 [ 291.347671][T11435] R13: 0000000000000000 R14: 00007f1992da5fa0 R15: 00007ffc1646ee88 [ 291.347692][T11435] [ 291.686456][T11441] openvswitch: ovs_: Dropping previously announced user features [ 291.736160][T11444] svc: failed to register nfsdv3 RPC service (errno 111). [ 291.751675][T11444] svc: failed to register nfsaclv3 RPC service (errno 111). [ 291.814609][T11445] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1387'. [ 291.871503][T11448] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1387'. [ 291.927119][T11445] hsr_slave_0 (unregistering): left promiscuous mode [ 292.095862][T11466] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1393'. [ 292.141375][T11443] svc: failed to register nfsdv3 RPC service (errno 111). [ 292.151396][T11443] svc: failed to register nfsaclv3 RPC service (errno 111). [ 292.807931][T11498] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1404'. [ 293.064236][T11510] netlink: 338 bytes leftover after parsing attributes in process `syz.4.1407'. [ 293.078100][T11512] netlink: 338 bytes leftover after parsing attributes in process `syz.4.1407'. [ 293.280247][T11515] FAULT_INJECTION: forcing a failure. [ 293.280247][T11515] name failslab, interval 1, probability 0, space 0, times 0 [ 293.280285][T11515] CPU: 0 UID: 0 PID: 11515 Comm: syz.4.1408 Not tainted 6.13.0-syzkaller-04541-gdf60eac9efe8 #0 [ 293.280315][T11515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 293.280340][T11515] Call Trace: [ 293.280346][T11515] [ 293.280356][T11515] dump_stack_lvl+0x16c/0x1f0 [ 293.280399][T11515] should_fail_ex+0x497/0x5b0 [ 293.280433][T11515] ? fs_reclaim_acquire+0xae/0x150 [ 293.280465][T11515] should_failslab+0xc2/0x120 [ 293.280490][T11515] __kmalloc_cache_noprof+0x68/0x420 [ 293.280522][T11515] ? rcu_is_watching+0x12/0xc0 [ 293.280557][T11515] ? lock_release+0x4e2/0x6f0 [ 293.280582][T11515] vc_allocate+0x16d/0x880 [ 293.280608][T11515] ? __pfx_vc_allocate+0x10/0x10 [ 293.280632][T11515] ? lock_acquire+0x2f/0xb0 [ 293.280655][T11515] ? con_install+0x9a/0x600 [ 293.280680][T11515] con_install+0xa2/0x600 [ 293.280704][T11515] ? __pfx_con_install+0x10/0x10 [ 293.280730][T11515] ? __pfx_con_install+0x10/0x10 [ 293.280754][T11515] tty_init_dev.part.0+0x99/0x660 [ 293.280782][T11515] tty_open+0xac1/0xf80 [ 293.280806][T11515] ? chrdev_open+0x10e/0x6a0 [ 293.280839][T11515] ? __pfx_tty_open+0x10/0x10 [ 293.280864][T11515] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 293.280893][T11515] ? lock_acquire+0x2f/0xb0 [ 293.280915][T11515] ? chrdev_open+0x80/0x6a0 [ 293.280948][T11515] ? __pfx_tty_open+0x10/0x10 [ 293.280972][T11515] chrdev_open+0x237/0x6a0 [ 293.281004][T11515] ? __pfx_apparmor_file_open+0x10/0x10 [ 293.281033][T11515] ? __pfx_chrdev_open+0x10/0x10 [ 293.281069][T11515] do_dentry_open+0xf59/0x1ea0 [ 293.281099][T11515] ? __pfx_chrdev_open+0x10/0x10 [ 293.281132][T11515] ? inode_permission+0xdd/0x5f0 [ 293.281157][T11515] vfs_open+0x82/0x3f0 [ 293.281178][T11515] ? may_open+0x1f2/0x400 [ 293.281204][T11515] path_openat+0x1e81/0x2d70 [ 293.281239][T11515] ? __pfx_path_openat+0x10/0x10 [ 293.281271][T11515] do_filp_open+0x20c/0x470 [ 293.281300][T11515] ? __pfx_do_filp_open+0x10/0x10 [ 293.281350][T11515] ? alloc_fd+0x41f/0x760 [ 293.281385][T11515] do_sys_openat2+0x17a/0x1e0 [ 293.281410][T11515] ? __pfx_do_sys_openat2+0x10/0x10 [ 293.281439][T11515] __x64_sys_openat+0x175/0x210 [ 293.281464][T11515] ? __pfx___x64_sys_openat+0x10/0x10 [ 293.281490][T11515] ? rcu_is_watching+0x12/0xc0 [ 293.281521][T11515] ? rcu_is_watching+0x12/0xc0 [ 293.281552][T11515] do_syscall_64+0xcd/0x250 [ 293.281577][T11515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.281604][T11515] RIP: 0033:0x7fac95f8cd29 [ 293.281622][T11515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.281645][T11515] RSP: 002b:00007fac96d51038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 293.281669][T11515] RAX: ffffffffffffffda RBX: 00007fac961a5fa0 RCX: 00007fac95f8cd29 [ 293.281685][T11515] RDX: 0000000000121802 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 293.281700][T11515] RBP: 00007fac9600e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 293.281715][T11515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 293.281728][T11515] R13: 0000000000000000 R14: 00007fac961a5fa0 R15: 00007ffc03057ad8 [ 293.281750][T11515] [ 294.652947][T11571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1424'. [ 294.700663][T11575] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1426'. [ 295.526153][T11607] openvswitch: ovs_: Dropping previously announced user features [ 295.635681][T11614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1440'. [ 296.198308][T11630] syz.0.1444: vmalloc error: size 4503599627371522, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 296.226560][T11630] CPU: 0 UID: 0 PID: 11630 Comm: syz.0.1444 Not tainted 6.13.0-syzkaller-04541-gdf60eac9efe8 #0 [ 296.226596][T11630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 296.226611][T11630] Call Trace: [ 296.226618][T11630] [ 296.226627][T11630] dump_stack_lvl+0x16c/0x1f0 [ 296.226672][T11630] warn_alloc+0x24d/0x3a0 [ 296.226708][T11630] ? __pfx_warn_alloc+0x10/0x10 [ 296.226752][T11630] __vmalloc_node_range_noprof+0x10df/0x1530 [ 296.226797][T11630] ? rcu_is_watching+0x12/0xc0 [ 296.226831][T11630] ? trace_contention_end+0xee/0x140 [ 296.226862][T11630] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 296.226885][T11630] ? dvb_demux_do_ioctl+0x496/0x1340 [ 296.226909][T11630] ? __pfx___mutex_lock+0x10/0x10 [ 296.226934][T11630] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 296.226972][T11630] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 296.227000][T11630] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 296.227023][T11630] vmalloc_noprof+0x6b/0x90 [ 296.227054][T11630] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 296.227077][T11630] dvb_demux_do_ioctl+0x54d/0x1340 [ 296.227104][T11630] dvb_usercopy+0x165/0x320 [ 296.227136][T11630] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 296.227159][T11630] ? __pfx_dvb_usercopy+0x10/0x10 [ 296.227190][T11630] ? __pfx_lock_release+0x10/0x10 [ 296.227219][T11630] ? __fget_files+0x206/0x3a0 [ 296.227253][T11630] dvb_demux_ioctl+0x29/0x40 [ 296.227285][T11630] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 296.227318][T11630] __x64_sys_ioctl+0x190/0x200 [ 296.227345][T11630] do_syscall_64+0xcd/0x250 [ 296.227370][T11630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.227396][T11630] RIP: 0033:0x7fca3c98cd29 [ 296.227414][T11630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.227437][T11630] RSP: 002b:00007fca3d746038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 296.227460][T11630] RAX: ffffffffffffffda RBX: 00007fca3cba5fa0 RCX: 00007fca3c98cd29 [ 296.227476][T11630] RDX: 0010000000000402 RSI: 0000000000006f2d RDI: 0000000000000003 [ 296.227492][T11630] RBP: 00007fca3ca0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 296.227507][T11630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.227521][T11630] R13: 0000000000000000 R14: 00007fca3cba5fa0 R15: 00007fff7689ab38 [ 296.227543][T11630] [ 296.227552][T11630] Mem-Info: [ 296.513410][T11630] active_anon:51899 inactive_anon:0 isolated_anon:0 [ 296.513410][T11630] active_file:10421 inactive_file:49539 isolated_file:0 [ 296.513410][T11630] unevictable:768 dirty:854 writeback:0 [ 296.513410][T11630] slab_reclaimable:11112 slab_unreclaimable:98011 [ 296.513410][T11630] mapped:33743 shmem:25715 pagetables:1051 [ 296.513410][T11630] sec_pagetables:0 bounce:0 [ 296.513410][T11630] kernel_misc_reclaimable:0 [ 296.513410][T11630] free:1266867 free_pcp:16002 free_cma:0 [ 296.584545][T11630] Node 0 active_anon:207596kB inactive_anon:0kB active_file:41684kB inactive_file:198080kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:137772kB dirty:3412kB writeback:0kB shmem:105324kB shmem_thp:2048kB shmem_pmdmapped:2048kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12148kB pagetables:4304kB sec_pagetables:0kB all_unreclaimable? no [ 296.629357][T11630] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 296.721638][T11630] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 296.786923][T11630] lowmem_reserve[]: 0 2489 2489 0 0 [ 296.800284][T11630] Node 0 DMA32 free:1190904kB boost:0kB min:34408kB low:43008kB high:51608kB reserved_highatomic:0KB active_anon:225156kB inactive_anon:0kB active_file:41684kB inactive_file:199176kB unevictable:1536kB writepending:4812kB present:3129332kB managed:2549216kB mlocked:0kB bounce:0kB free_pcp:2648kB local_pcp:1660kB free_cma:0kB [ 296.889379][T11630] lowmem_reserve[]: 0 0 0 0 0 [ 296.903872][T11630] Node 0 Normal free:4kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:304kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 297.014900][T11630] lowmem_reserve[]: 0 0 0 0 0 [ 297.030223][T11630] Node 1 Normal free:3849600kB boost:0kB min:55488kB low:69360kB high:83232kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:53512kB local_pcp:22284kB free_cma:0kB [ 297.080722][T11630] lowmem_reserve[]: 0 0 0 0 0 [ 297.088424][T11630] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 297.162532][T11630] Node 0 DMA32: 2*4kB (UE) 0*8kB 1*16kB (E) 19*32kB (UM) 3*64kB (UM) 264*128kB (UME) 200*256kB (UM) 148*512kB (UM) 108*1024kB (UM) 4*2048kB (UME) 216*4096kB (ME) = 1165112kB [ 297.200985][T11630] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 297.270777][T11630] Node 1 Normal: 2514*4kB (UME) 125*8kB (UME) 77*16kB (UME) 220*32kB (UME) 142*64kB (UME) 75*128kB (UME) 47*256kB (UM) 19*512kB (UME) 11*1024kB (M) 17*2048kB (UME) 914*4096kB (M) = 3849600kB [ 297.543289][T11630] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 297.555105][T11630] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 297.566631][T11630] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 297.619579][T11630] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 297.687644][T11630] 99975 total pagecache pages [ 297.705699][T11630] 30 pages in swap cache [ 297.715806][T11630] Free swap = 124268kB [ 297.725913][T11630] Total swap = 124996kB [ 297.736018][T11630] 2097051 pages RAM [ 297.760625][T11630] 0 pages HighMem/MovableOnly [ 297.766266][T11630] 428025 pages reserved [ 297.791360][T11630] 0 pages cma reserved [ 298.198112][T11690] openvswitch: ovs_: Dropping previously announced user features [ 298.512191][T11701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1466'. [ 299.012450][T11720] openvswitch: ovs_: Dropping previously announced user features [ 299.222033][T11743] cifs: Unknown parameter 'mtPÿU'KçþŠ£Ìÿo»åÏËŠëNQ“¹' [ 299.847835][T11772] openvswitch: ovs_: Dropping previously announced user features [ 300.034843][T11778] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1490'. [ 300.612486][T11812] erspan0: entered allmulticast mode [ 301.070924][ T7678] erspan0 (unregistering): left allmulticast mode [ 301.749832][T11851] Invalid ELF header magic: != ELF [ 302.470431][T11882] openvswitch: ovs_: Dropping previously announced user features [ 303.539680][T11941] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1535'. [ 304.232277][T11959] FAULT_INJECTION: forcing a failure. [ 304.232277][T11959] name failslab, interval 1, probability 0, space 0, times 0 [ 304.248161][T11959] CPU: 0 UID: 0 PID: 11959 Comm: syz.4.1539 Not tainted 6.13.0-syzkaller-04541-gdf60eac9efe8 #0 [ 304.248192][T11959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 304.248205][T11959] Call Trace: [ 304.248221][T11959] [ 304.248235][T11959] dump_stack_lvl+0x16c/0x1f0 [ 304.248273][T11959] should_fail_ex+0x497/0x5b0 [ 304.248305][T11959] ? fs_reclaim_acquire+0xae/0x150 [ 304.248334][T11959] should_failslab+0xc2/0x120 [ 304.248356][T11959] __kmalloc_noprof+0xce/0x4f0 [ 304.248388][T11959] ? tomoyo_realpath_from_path+0xbf/0x710 [ 304.248421][T11959] tomoyo_realpath_from_path+0xbf/0x710 [ 304.248453][T11959] ? tomoyo_path_number_perm+0x235/0x5b0 [ 304.248482][T11959] tomoyo_path_number_perm+0x248/0x5b0 [ 304.248508][T11959] ? tomoyo_path_number_perm+0x235/0x5b0 [ 304.248534][T11959] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 304.248562][T11959] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 304.248590][T11959] ? preempt_count_add+0x76/0x150 [ 304.248621][T11959] ? fd_install+0x242/0x750 [ 304.248656][T11959] security_file_ioctl+0x9b/0x240 [ 304.248684][T11959] __x64_sys_ioctl+0xb7/0x200 [ 304.248710][T11959] do_syscall_64+0xcd/0x250 [ 304.248733][T11959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.248759][T11959] RIP: 0033:0x7fac95f8cd29 [ 304.248776][T11959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.248798][T11959] RSP: 002b:00007fac96d51038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 304.248819][T11959] RAX: ffffffffffffffda RBX: 00007fac961a5fa0 RCX: 00007fac95f8cd29 [ 304.248835][T11959] RDX: 0000000000000000 RSI: 000000000000541c RDI: 0000000000000001 [ 304.248848][T11959] RBP: 00007fac96d51090 R08: 0000000000000000 R09: 0000000000000000 [ 304.248862][T11959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.248876][T11959] R13: 0000000000000000 R14: 00007fac961a5fa0 R15: 00007ffc03057ad8 [ 304.248897][T11959] [ 304.248916][T11959] ERROR: Out of memory at tomoyo_realpath_from_path. [ 304.340603][T11968] [U] [ 304.495492][T11968] [U] [ 304.498703][T11968] [U] [ 304.501917][T11968] [U] [ 304.505206][ C1] vkms_vblank_simulate: vblank timer overrun [ 304.516593][T11968] [U] [ 304.519840][T11968] [U] [ 304.523064][T11968] [U] [ 304.526289][T11968] [U] [ 304.568705][T11968] [U] [ 304.571960][T11968] [U] [ 304.575190][T11968] [U] [ 304.578423][T11968] [U] [ 304.611998][T11968] [U] [ 304.612036][T11968] [U] [ 304.612068][T11968] [U] [ 304.612101][T11968] [U] [ 304.627978][T11968] [U] [ 304.628016][T11968] [U] [ 304.628051][T11968] [U] [ 304.628085][T11968] [U] [ 304.628121][T11968] [U] [ 304.628153][T11968] [U] [ 304.628184][T11968] [U] [ 304.628217][T11968] [U] [ 304.628252][T11968] [U] [ 304.628287][T11968] [U] [ 304.628318][T11968] [U] [ 304.628350][T11968] [U] [ 304.628388][T11968] [U] [ 304.628423][T11968] [U] [ 304.628458][T11968] [U] [ 304.628493][T11968] [U] [ 304.628532][T11968] [U] [ 304.628564][T11968] [U] [ 304.628599][T11968] [U] [ 304.628632][T11968] [U] [ 304.628672][T11968] [U] [ 304.628705][T11968] [U] [ 304.628737][T11968] [U] [ 304.628770][T11968] [U] [ 304.628808][T11968] [U] [ 304.628839][T11968] [U] [ 304.628870][T11968] [U] [ 304.628910][T11968] [U] [ 304.628948][T11968] [U] [ 304.628979][T11968] [U] [ 304.629011][T11968] [U] [ 304.629042][T11968] [U] [ 304.629082][T11968] [U] [ 304.629117][T11968] [U] [ 304.629149][T11968] [U] [ 304.629181][T11968] [U] [ 304.629219][T11968] [U] [ 304.629250][T11968] [U] [ 304.629281][T11968] [U] [ 304.629312][T11968] [U] [ 304.629347][T11968] [U] [ 304.629379][T11968] [U] [ 304.629413][T11968] [U] [ 304.629444][T11968] [U] [ 304.629481][T11968] [U] [ 304.629516][T11968] [U] [ 304.629551][T11968] [U] [ 304.629587][T11968] [U] [ 304.629685][T11968] [U] [ 304.629717][T11968] [U] [ 304.629752][T11968] [U] [ 304.629788][T11968] [U] [ 304.629825][T11968] [U] [ 304.629856][T11968] [U] [ 304.629895][T11968] [U] [ 304.629929][T11968] [U] [ 304.629967][T11968] [U] [ 304.629998][T11968] [U] [ 304.630029][T11968] [U] [ 304.630061][T11968] [U] [ 304.630096][T11968] [U] [ 304.630129][T11968] [U] [ 304.630160][T11968] [U] [ 304.630191][T11968] [U] [ 304.630230][T11968] [U] [ 304.630261][T11968] [U] [ 304.630292][T11968] [U] [ 304.630323][T11968] [U] [ 304.630358][T11968] [U] [ 304.630388][T11968] [U] [ 304.630420][T11968] [U] [ 304.630450][T11968] [U] [ 304.630854][T11968] [U] [ 304.630897][T11968] [U] [ 304.630929][T11968] [U] [ 304.630960][T11968] [U] [ 304.631137][T11968] [U] [ 304.631169][T11968] [U] [ 304.631201][T11968] [U] [ 304.631232][T11968] [U] [ 304.631271][T11968] [U] [ 304.631303][T11968] [U] [ 304.631335][T11968] [U] [ 304.631366][T11968] [U] [ 304.631529][T11968] [U] [ 304.631561][T11968] [U] [ 304.631592][T11968] [U] [ 304.631623][T11968] [U] [ 304.631748][T11968] [U] [ 304.631783][T11968] [U] [ 304.631815][T11968] [U] [ 304.631847][T11968] [U] [ 304.631884][T11968] [U] [ 304.631924][T11968] [U] [ 304.631955][T11968] [U] [ 304.631989][T11968] [U] [ 304.632026][T11968] [U] [ 304.632057][T11968] [U] [ 304.632090][T11968] [U] [ 304.632122][T11968] [U] [ 304.648088][T11968] [U] [ 304.648123][T11968] [U] [ 304.648155][T11968] [U] [ 304.648187][T11968] [U] [ 304.773569][T11978] FAULT_INJECTION: forcing a failure. [ 304.773569][T11978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 305.106448][T11978] CPU: 1 UID: 0 PID: 11978 Comm: syz.0.1544 Not tainted 6.13.0-syzkaller-04541-gdf60eac9efe8 #0 [ 305.106476][T11978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 305.106489][T11978] Call Trace: [ 305.106495][T11978] [ 305.106503][T11978] dump_stack_lvl+0x16c/0x1f0 [ 305.106541][T11978] should_fail_ex+0x497/0x5b0 [ 305.106576][T11978] _copy_to_iter+0x4a5/0x1400 [ 305.106602][T11978] ? __pfx__copy_to_iter+0x10/0x10 [ 305.106629][T11978] ? __virt_addr_valid+0x1a4/0x590 [ 305.106659][T11978] ? __virt_addr_valid+0x5e/0x590 [ 305.106687][T11978] ? __phys_addr_symbol+0x30/0x80 [ 305.106715][T11978] ? __check_object_size+0x488/0x710 [ 305.106739][T11978] seq_read_iter+0xd00/0x12b0 [ 305.106770][T11978] seq_read+0x39f/0x4e0 [ 305.106795][T11978] ? __pfx_seq_read+0x10/0x10 [ 305.106818][T11978] ? __pfx_lock_release+0x10/0x10 [ 305.106844][T11978] ? lock_acquire+0x2f/0xb0 [ 305.106870][T11978] ? apparmor_file_permission+0x251/0x400 [ 305.106907][T11978] ? __pfx_seq_read+0x10/0x10 [ 305.106932][T11978] proc_reg_read+0x23d/0x330 [ 305.106960][T11978] ? __pfx_proc_reg_read+0x10/0x10 [ 305.106990][T11978] vfs_read+0x1df/0xbe0 [ 305.107017][T11978] ? __fget_files+0x1fc/0x3a0 [ 305.107046][T11978] ? __pfx___mutex_lock+0x10/0x10 [ 305.107067][T11978] ? __pfx_vfs_read+0x10/0x10 [ 305.107098][T11978] ? __fget_files+0x206/0x3a0 [ 305.107129][T11978] ksys_read+0x12b/0x250 [ 305.107155][T11978] ? __pfx_ksys_read+0x10/0x10 [ 305.107183][T11978] ? rcu_is_watching+0x12/0xc0 [ 305.107212][T11978] ? rcu_is_watching+0x12/0xc0 [ 305.107242][T11978] do_syscall_64+0xcd/0x250 [ 305.107266][T11978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.107291][T11978] RIP: 0033:0x7fca3c98cd29 [ 305.107308][T11978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.107329][T11978] RSP: 002b:00007fca3d746038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 305.107350][T11978] RAX: ffffffffffffffda RBX: 00007fca3cba5fa0 RCX: 00007fca3c98cd29 [ 305.107366][T11978] RDX: 0000000000000083 RSI: 0000000000000000 RDI: 0000000000000003 [ 305.107379][T11978] RBP: 00007fca3d746090 R08: 0000000000000000 R09: 0000000000000000 [ 305.107392][T11978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.107405][T11978] R13: 0000000000000000 R14: 00007fca3cba5fa0 R15: 00007fff7689ab38 [ 305.107425][T11978] [ 305.232408][T11987] openvswitch: ovs_: Dropping previously announced user features [ 305.276076][T11987] FAULT_INJECTION: forcing a failure. [ 305.276076][T11987] name failslab, interval 1, probability 0, space 0, times 0 [ 305.517875][T11987] CPU: 0 UID: 0 PID: 11987 Comm: syz.0.1546 Not tainted 6.13.0-syzkaller-04541-gdf60eac9efe8 #0 [ 305.517900][T11987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 305.517911][T11987] Call Trace: [ 305.517916][T11987] [ 305.517923][T11987] dump_stack_lvl+0x116/0x1f0 [ 305.517956][T11987] should_fail_ex+0x497/0x5b0 [ 305.517985][T11987] should_failslab+0xc2/0x120 [ 305.518002][T11987] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 305.518029][T11987] ? __send_signal_locked+0x159/0x11a0 [ 305.518047][T11987] ? sig_get_ucounts+0x1c0/0x5b0 [ 305.518073][T11987] __send_signal_locked+0x159/0x11a0 [ 305.518092][T11987] do_notify_parent+0xe0e/0x1020 [ 305.518116][T11987] ? __pfx_do_notify_parent+0x10/0x10 [ 305.518133][T11987] ? rcu_is_watching+0x12/0xc0 [ 305.518156][T11987] ? lock_release+0x4e2/0x6f0 [ 305.518174][T11987] ? release_task+0xd24/0x1b00 [ 305.518198][T11987] ? __pfx_lock_release+0x10/0x10 [ 305.518217][T11987] ? __change_pid+0x3ba/0x5a0 [ 305.518243][T11987] release_task+0x1583/0x1b00 [ 305.518268][T11987] ? do_exit+0x15c3/0x2d70 [ 305.518291][T11987] ? __pfx_release_task+0x10/0x10 [ 305.518314][T11987] ? lock_acquire+0x2f/0xb0 [ 305.518332][T11987] ? rcu_is_watching+0x12/0xc0 [ 305.518355][T11987] do_exit+0x16ca/0x2d70 [ 305.518379][T11987] ? rcu_is_watching+0x12/0xc0 [ 305.518401][T11987] ? get_signal+0x8f7/0x2610 [ 305.518421][T11987] ? __pfx_do_exit+0x10/0x10 [ 305.518447][T11987] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 305.518471][T11987] do_group_exit+0xd3/0x2a0 [ 305.518496][T11987] get_signal+0x2576/0x2610 [ 305.518520][T11987] ? __pfx_get_signal+0x10/0x10 [ 305.518540][T11987] ? __pfx_do_futex+0x10/0x10 [ 305.518567][T11987] arch_do_signal_or_restart+0x90/0x7e0 [ 305.518594][T11987] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 305.518622][T11987] ? rcu_is_watching+0x12/0xc0 [ 305.518645][T11987] syscall_exit_to_user_mode+0x150/0x2a0 [ 305.518664][T11987] do_syscall_64+0xda/0x250 [ 305.518682][T11987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.518702][T11987] RIP: 0033:0x7fca3c98cd29 [ 305.518716][T11987] Code: Unable to access opcode bytes at 0x7fca3c98ccff. [ 305.518724][T11987] RSP: 002b:00007fca3d7460e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 305.518740][T11987] RAX: fffffffffffffe00 RBX: 00007fca3cba5fa8 RCX: 00007fca3c98cd29 [ 305.518752][T11987] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fca3cba5fa8 [ 305.518763][T11987] RBP: 00007fca3cba5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 305.518773][T11987] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fca3cba5fac [ 305.518783][T11987] R13: 0000000000000000 R14: 00007fff7689aa50 R15: 00007fff7689ab38 [ 305.518799][T11987] [ 305.830269][T11973] tty tty49: ldisc open failed (-12), clearing slot 48 [ 305.950574][T11994] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 306.066736][T11998] FAULT_INJECTION: forcing a failure. [ 306.066736][T11998] name failslab, interval 1, probability 0, space 0, times 0 [ 306.082820][T11998] CPU: 0 UID: 0 PID: 11998 Comm: syz.1.1551 Not tainted 6.13.0-syzkaller-04541-gdf60eac9efe8 #0 [ 306.082848][T11998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 306.082861][T11998] Call Trace: [ 306.082868][T11998] [ 306.082875][T11998] dump_stack_lvl+0x16c/0x1f0 [ 306.082913][T11998] should_fail_ex+0x497/0x5b0 [ 306.082943][T11998] ? fs_reclaim_acquire+0xae/0x150 [ 306.082971][T11998] should_failslab+0xc2/0x120 [ 306.082993][T11998] __kmalloc_noprof+0xce/0x4f0 [ 306.083023][T11998] ? d_absolute_path+0x137/0x1b0 [ 306.083043][T11998] ? tomoyo_encode2+0x100/0x3e0 [ 306.083074][T11998] tomoyo_encode2+0x100/0x3e0 [ 306.083103][T11998] tomoyo_realpath_from_path+0x1a7/0x710 [ 306.083137][T11998] tomoyo_path_number_perm+0x248/0x5b0 [ 306.083161][T11998] ? tomoyo_path_number_perm+0x235/0x5b0 [ 306.083188][T11998] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 306.083215][T11998] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 306.083242][T11998] ? preempt_count_add+0x76/0x150 [ 306.083272][T11998] ? fd_install+0x242/0x750 [ 306.083306][T11998] security_file_ioctl+0x9b/0x240 [ 306.083334][T11998] __x64_sys_ioctl+0xb7/0x200 [ 306.083359][T11998] do_syscall_64+0xcd/0x250 [ 306.083381][T11998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.083406][T11998] RIP: 0033:0x7f7ce2b8cd29 [ 306.083423][T11998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.083443][T11998] RSP: 002b:00007f7ce09f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 306.083465][T11998] RAX: ffffffffffffffda RBX: 00007f7ce2da5fa0 RCX: 00007f7ce2b8cd29 [ 306.083480][T11998] RDX: 0000000000000000 RSI: 000000000000541c RDI: 0000000000000001 [ 306.083493][T11998] RBP: 00007f7ce09f6090 R08: 0000000000000000 R09: 0000000000000000 [ 306.083507][T11998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.083520][T11998] R13: 0000000000000000 R14: 00007f7ce2da5fa0 R15: 00007ffc19c64a18 [ 306.083539][T11998] [ 306.083552][T11998] ERROR: Out of memory at tomoyo_realpath_from_path. [ 306.356947][T12000] RDS: rds_bind could not find a transport for ::ffff:172.20.20.49, load rds_tcp or rds_rdma? [ 306.548452][T12021] openvswitch: ovs_: Dropping previously announced user features [ 307.321956][T12046] FAULT_INJECTION: forcing a failure. [ 307.321956][T12046] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 307.329573][T12050] openvswitch: ovs_: Dropping previously announced user features [ 307.348076][T12046] CPU: 0 UID: 0 PID: 12046 Comm: syz.3.1566 Not tainted 6.13.0-syzkaller-04541-gdf60eac9efe8 #0 [ 307.348104][T12046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 307.348117][T12046] Call Trace: [ 307.348124][T12046] [ 307.348132][T12046] dump_stack_lvl+0x16c/0x1f0 [ 307.348170][T12046] should_fail_ex+0x497/0x5b0 [ 307.348205][T12046] _copy_from_user+0x2e/0xd0 [ 307.348227][T12046] set_selection_user+0x84/0xf0 [ 307.348259][T12046] ? __pfx_set_selection_user+0x10/0x10 [ 307.348290][T12046] ? __cgroup_bpf_run_filter_getsockopt+0x840/0xe20 [ 307.348324][T12046] ? security_capable+0x7e/0x260 [ 307.348348][T12046] tioclinux+0x38f/0x5f0 [ 307.348371][T12046] vt_ioctl+0x1fc2/0x2fd0 [ 307.348401][T12046] ? __pfx_vt_ioctl+0x10/0x10 [ 307.348428][T12046] ? kfree+0x14f/0x4b0 [ 307.348455][T12046] ? tomoyo_path_number_perm+0x46d/0x5b0 [ 307.348485][T12046] ? tomoyo_path_number_perm+0x190/0x5b0 [ 307.348512][T12046] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 307.348538][T12046] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 307.348565][T12046] ? do_vfs_ioctl+0x513/0x1950 [ 307.348590][T12046] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 307.348615][T12046] ? tty_jobctrl_ioctl+0x152/0xe00 [ 307.348647][T12046] ? __pfx_vt_ioctl+0x10/0x10 [ 307.348676][T12046] tty_ioctl+0x651/0x1640 [ 307.348698][T12046] ? __pfx_tty_ioctl+0x10/0x10 [ 307.348725][T12046] ? fd_install+0x242/0x750 [ 307.348758][T12046] ? __pfx_tty_ioctl+0x10/0x10 [ 307.348781][T12046] __x64_sys_ioctl+0x190/0x200 [ 307.348806][T12046] do_syscall_64+0xcd/0x250 [ 307.348829][T12046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.348864][T12046] RIP: 0033:0x7f1992b8cd29 [ 307.348881][T12046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.348901][T12046] RSP: 002b:00007f1993967038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 307.348921][T12046] RAX: ffffffffffffffda RBX: 00007f1992da5fa0 RCX: 00007f1992b8cd29 [ 307.348937][T12046] RDX: 0000000000000000 RSI: 000000000000541c RDI: 0000000000000001 [ 307.348950][T12046] RBP: 00007f1993967090 R08: 0000000000000000 R09: 0000000000000000 [ 307.348963][T12046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.348976][T12046] R13: 0000000000000000 R14: 00007f1992da5fa0 R15: 00007ffc1646ee88 [ 307.348997][T12046] [ 308.006398][T12072] [U] [ 308.009676][T12072] [U] [ 308.012917][T12072] [U] [ 308.016154][T12072] [U] [ 308.019391][T12072] [U] [ 308.030420][T12072] [U] [ 308.033676][T12072] [U] [ 308.036917][T12072] [U] [ 308.040154][T12072] [U] [ 308.054788][T12072] [U] [ 308.054831][T12072] [U] [ 308.054871][T12072] [U] [ 308.054908][T12072] [U] [ 308.054951][T12072] [U] [ 308.054990][T12072] [U] [ 308.055029][T12072] [U] [ 308.055069][T12072] [U] [ 308.055117][T12072] [U] [ 308.055156][T12072] [U] [ 308.055195][T12072] [U] [ 308.055234][T12072] [U] [ 308.055271][T12072] [U] [ 308.055304][T12072] [U] [ 308.055339][T12072] [U] [ 308.055373][T12072] [U] [ 308.055427][T12072] [U] [ 308.055462][T12072] [U] [ 308.055496][T12072] [U] [ 308.055530][T12072] [U] [ 308.055582][T12072] [U] [ 308.055621][T12072] [U] [ 308.055659][T12072] [U] [ 308.055695][T12072] [U] [ 308.055746][T12072] [U] [ 308.055781][T12072] [U] [ 308.055816][T12072] [U] [ 308.055850][T12072] [U] [ 308.055890][T12072] [U] [ 308.055925][T12072] [U] [ 308.055959][T12072] [U] [ 308.055993][T12072] [U] [ 308.056041][T12072] [U] [ 308.056076][T12072] [U] [ 308.056111][T12072] [U] [ 308.056148][T12072] [U] [ 308.056190][T12072] [U] [ 308.056226][T12072] [U] [ 308.056262][T12072] [U] [ 308.056294][T12072] [U] [ 308.056341][T12072] [U] [ 308.056376][T12072] [U] [ 308.056416][T12072] [U] [ 308.056453][T12072] [U] [ 308.056572][T12072] [U] [ 308.056611][T12072] [U] [ 308.056648][T12072] [U] [ 308.056689][T12072] [U] [ 308.057413][T12072] [U] [ 308.057459][T12072] [U] [ 308.057492][T12072] [U] [ 308.057526][T12072] [U] [ 308.057604][T12072] [U] [ 308.057637][T12072] [U] [ 308.057669][T12072] [U] [ 308.057704][T12072] [U] [ 308.057751][T12072] [U] [ 308.057786][T12072] [U] [ 308.057818][T12072] [U] [ 308.057851][T12072] [U] [ 308.057891][T12072] [U] [ 308.057927][T12072] [U] [ 308.057962][T12072] [U] [ 308.057999][T12072] [U] [ 308.058048][T12072] [U] [ 308.058083][T12072] [U] [ 308.058118][T12072] [U] [ 308.058154][T12072] [U] [ 308.058196][T12072] [U] [ 308.058231][T12072] [U] [ 308.058265][T12072] [U] [ 308.058300][T12072] [U] [ 308.058349][T12072] [U] [ 308.058387][T12072] [U] [ 308.058422][T12072] [U] [ 308.058456][T12072] [U] [ 308.058496][T12072] [U] [ 308.058539][T12072] [U] [ 308.058583][T12072] [U] [ 308.058619][T12072] [U] [ 308.058808][T12072] [U] [ 308.058846][T12072] [U] [ 308.058883][T12072] [U] [ 308.058917][T12072] [U] [ 308.058956][T12072] [U] [ 308.058989][T12072] [U] [ 308.059020][T12072] [U] [ 308.059053][T12072] [U] [ 308.059096][T12072] [U] [ 308.059132][T12072] [U] [ 308.059173][T12072] [U] [ 308.059202][T12072] [U] [ 308.059237][T12072] [U] [ 308.059271][T12072] [U] [ 308.059302][T12072] [U] [ 308.059341][T12072] [U] [ 308.059798][T12072] [U] [ 308.059837][T12072] [U] [ 308.059873][T12072] [U] [ 308.059908][T12072] [U] [ 308.059948][T12072] [U] [ 308.059983][T12072] [U] [ 308.060020][T12072] [U] [ 308.060055][T12072] [U] [ 308.060131][T12072] [U] [ 308.060168][T12072] [U] [ 308.060204][T12072] [U] [ 308.060241][T12072] [U] [ 308.060282][T12072] [U] [ 308.060317][T12072] [U] [ 308.060352][T12072] [U] [ 308.060387][T12072] [U] [ 308.122676][T12072] [U] [ 308.456840][T12072] [U] [ 308.460047][T12072] [U] [ 308.463230][T12072] [U] [ 308.663388][T12084] netlink: 1204 bytes leftover after parsing attributes in process `syz.4.1578'. [ 308.696914][T12087] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1578'. [ 308.713900][T12086] openvswitch: ovs_: Dropping previously announced user features [ 308.855629][T12090] selection: kmalloc() failed [ 309.821889][T12124] openvswitch: ovs_: Dropping previously announced user features [ 309.976457][T12133] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1594'. [ 309.987480][T12128] FAULT_INJECTION: forcing a failure. [ 309.987480][T12128] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 309.995462][T12133] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 310.029308][T12128] CPU: 0 UID: 0 PID: 12128 Comm: syz.0.1592 Not tainted 6.13.0-syzkaller-04541-gdf60eac9efe8 #0 [ 310.029345][T12128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 310.029358][T12128] Call Trace: [ 310.029365][T12128] [ 310.029372][T12128] dump_stack_lvl+0x16c/0x1f0 [ 310.029411][T12128] should_fail_ex+0x497/0x5b0 [ 310.029452][T12128] _copy_to_user+0x32/0xd0 [ 310.029475][T12128] simple_read_from_buffer+0xd0/0x160 [ 310.029503][T12128] proc_fail_nth_read+0x198/0x270 [ 310.029527][T12128] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 310.029557][T12128] ? bpf_lsm_file_permission+0x9/0x10 [ 310.029580][T12128] ? security_file_permission+0x71/0x210 [ 310.029610][T12128] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 310.029633][T12128] vfs_read+0x1df/0xbe0 [ 310.029662][T12128] ? __pfx_tty_ioctl+0x10/0x10 [ 310.029685][T12128] ? __pfx_vfs_read+0x10/0x10 [ 310.029715][T12128] ? fd_install+0x242/0x750 [ 310.029747][T12128] ksys_read+0x12b/0x250 [ 310.029774][T12128] ? __pfx_ksys_read+0x10/0x10 [ 310.029802][T12128] ? rcu_is_watching+0x12/0xc0 [ 310.029832][T12128] ? rcu_is_watching+0x12/0xc0 [ 310.029862][T12128] do_syscall_64+0xcd/0x250 [ 310.029884][T12128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.029910][T12128] RIP: 0033:0x7fca3c98b73c [ 310.029927][T12128] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 310.029947][T12128] RSP: 002b:00007fca3d746030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 310.029969][T12128] RAX: ffffffffffffffda RBX: 00007fca3cba5fa0 RCX: 00007fca3c98b73c [ 310.029984][T12128] RDX: 000000000000000f RSI: 00007fca3d7460a0 RDI: 0000000000000004 [ 310.029998][T12128] RBP: 00007fca3d746090 R08: 0000000000000000 R09: 0000000000000000 [ 310.030012][T12128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.030025][T12128] R13: 0000000000000000 R14: 00007fca3cba5fa0 R15: 00007fff7689ab38 [ 310.030047][T12128] [ 310.318570][T12135] random: crng reseeded on system resumption [ 310.329104][T12135] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 310.339647][T12135] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 310.349822][T12135] PM: hibernation: Marking nosave pages: [mem 0xbfffd000-0xffffffff] [ 310.423240][T12135] PM: hibernation: Basic memory bitmaps created [ 310.434448][T12134] PM: hibernation: Basic memory bitmaps freed [ 310.733626][T12160] openvswitch: ovs_: Dropping previously announced user features [ 311.642212][T12194] openvswitch: ovs_: Dropping previously announced user features [ 311.929665][T12207] kAFS: bad VL server IP address [ 312.171260][T12216] ieee80211 phy20: Selected rate control algorithm 'minstrel_ht' [ 312.185291][T12216] FAULT_INJECTION: forcing a failure. [ 312.185291][T12216] name failslab, interval 1, probability 0, space 0, times 0 [ 312.229911][T12216] CPU: 0 UID: 0 PID: 12216 Comm: syz.3.1617 Not tainted 6.13.0-syzkaller-04541-gdf60eac9efe8 #0 [ 312.229946][T12216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 312.229959][T12216] Call Trace: [ 312.229966][T12216] [ 312.229974][T12216] dump_stack_lvl+0x16c/0x1f0 [ 312.230011][T12216] should_fail_ex+0x497/0x5b0 [ 312.230043][T12216] ? fs_reclaim_acquire+0xae/0x150 [ 312.230078][T12216] should_failslab+0xc2/0x120 [ 312.230099][T12216] __kmalloc_node_track_caller_noprof+0xcf/0x520 [ 312.230133][T12216] ? kstrdup_const+0x63/0x80 [ 312.230161][T12216] kstrdup+0x42/0xb0 [ 312.230186][T12216] kstrdup_const+0x63/0x80 [ 312.230210][T12216] __kernfs_new_node+0x9c/0x890 [ 312.230237][T12216] ? lock_release+0x4e2/0x6f0 [ 312.230259][T12216] ? __pfx___kernfs_new_node+0x10/0x10 [ 312.230285][T12216] ? __pfx_lock_release+0x10/0x10 [ 312.230307][T12216] ? kernfs_add_one+0x39d/0x520 [ 312.230336][T12216] ? down_write+0x14e/0x200 [ 312.230359][T12216] ? rcu_is_watching+0x12/0xc0 [ 312.230388][T12216] ? lock_release+0x4e2/0x6f0 [ 312.230412][T12216] kernfs_new_node+0x186/0x240 [ 312.230443][T12216] kernfs_create_link+0xcc/0x240 [ 312.230465][T12216] sysfs_do_create_link_sd+0x90/0x140 [ 312.230490][T12216] sysfs_create_link+0x61/0xc0 [ 312.230514][T12216] device_add+0x62e/0x1a70 [ 312.230539][T12216] ? __pfx_device_add+0x10/0x10 [ 312.230558][T12216] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 312.230585][T12216] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 312.230612][T12216] wiphy_register+0x1c7a/0x2860 [ 312.230640][T12216] ? netdev_run_todo+0x8fc/0x13d0 [ 312.230667][T12216] ? __pfx_wiphy_register+0x10/0x10 [ 312.230698][T12216] ieee80211_register_hw+0x23ff/0x3ff0 [ 312.230730][T12216] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 312.230757][T12216] ? net_generic+0xea/0x2a0 [ 312.230778][T12216] ? lockdep_init_map_type+0x16d/0x7d0 [ 312.230800][T12216] ? net_generic+0x30/0x2a0 [ 312.230818][T12216] ? rcu_is_watching+0x12/0xc0 [ 312.230844][T12216] ? trace_hrtimer_init+0x1a6/0x230 [ 312.230868][T12216] ? __hrtimer_init+0x106/0x2c0 [ 312.230892][T12216] mac80211_hwsim_new_radio+0x2c47/0x56c0 [ 312.230917][T12216] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.230956][T12216] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 312.230984][T12216] hwsim_new_radio_nl+0xb42/0x12b0 [ 312.231009][T12216] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 312.231036][T12216] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 312.231058][T12216] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 312.231091][T12216] genl_family_rcv_msg_doit+0x202/0x2f0 [ 312.231113][T12216] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 312.231136][T12216] ? genl_get_cmd+0x195/0x580 [ 312.231170][T12216] ? bpf_lsm_capable+0x9/0x10 [ 312.231195][T12216] ? security_capable+0x7e/0x260 [ 312.231218][T12216] ? ns_capable+0xd7/0x110 [ 312.231243][T12216] genl_rcv_msg+0x565/0x800 [ 312.231266][T12216] ? __pfx_genl_rcv_msg+0x10/0x10 [ 312.231285][T12216] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 312.231314][T12216] netlink_rcv_skb+0x165/0x410 [ 312.231344][T12216] ? __pfx_genl_rcv_msg+0x10/0x10 [ 312.231366][T12216] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 312.231401][T12216] ? down_read+0xc9/0x330 [ 312.231424][T12216] ? __pfx_down_read+0x10/0x10 [ 312.231446][T12216] ? netlink_deliver_tap+0x1ae/0xca0 [ 312.231477][T12216] genl_rcv+0x28/0x40 [ 312.231506][T12216] netlink_unicast+0x53c/0x7f0 [ 312.231538][T12216] ? __pfx_netlink_unicast+0x10/0x10 [ 312.231568][T12216] ? __phys_addr_symbol+0x30/0x80 [ 312.231596][T12216] ? __check_object_size+0x488/0x710 [ 312.231624][T12216] netlink_sendmsg+0x8b8/0xd70 [ 312.231657][T12216] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.231692][T12216] ____sys_sendmsg+0x9ae/0xb40 [ 312.231722][T12216] ? copy_msghdr_from_user+0x10b/0x160 [ 312.231746][T12216] ? __pfx_____sys_sendmsg+0x10/0x10 [ 312.231773][T12216] ? preempt_schedule_thunk+0x1a/0x30 [ 312.231799][T12216] ? try_to_wake_up+0x953/0x1490 [ 312.231822][T12216] ? lock_release+0x4e2/0x6f0 [ 312.231846][T12216] ___sys_sendmsg+0x135/0x1e0 [ 312.231869][T12216] ? __pfx____sys_sendmsg+0x10/0x10 [ 312.231892][T12216] ? wake_up_q+0x9e/0x140 [ 312.231918][T12216] ? __pfx_lock_release+0x10/0x10 [ 312.231940][T12216] ? trace_lock_acquire+0x14e/0x1f0 [ 312.231976][T12216] ? __fget_files+0x206/0x3a0 [ 312.232009][T12216] __sys_sendmsg+0x16e/0x220 [ 312.232032][T12216] ? __pfx___sys_sendmsg+0x10/0x10 [ 312.232054][T12216] ? __x64_sys_futex+0x1e1/0x4c0 [ 312.232098][T12216] ? rcu_is_watching+0x12/0xc0 [ 312.232126][T12216] ? rcu_is_watching+0x12/0xc0 [ 312.232156][T12216] do_syscall_64+0xcd/0x250 [ 312.232179][T12216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.232205][T12216] RIP: 0033:0x7f1992b8cd29 [ 312.232222][T12216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.232244][T12216] RSP: 002b:00007f1993946038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 312.232265][T12216] RAX: ffffffffffffffda RBX: 00007f1992da6080 RCX: 00007f1992b8cd29 [ 312.232281][T12216] RDX: 00000000040000c0 RSI: 0000000020000300 RDI: 0000000000000008 [ 312.232295][T12216] RBP: 00007f1992c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 312.232308][T12216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 312.232321][T12216] R13: 0000000000000000 R14: 00007f1992da6080 R15: 00007ffc1646ee88 [ 312.232342][T12216] [ 313.319048][T12240] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1625'. [ 313.342578][T12235] mtrr: base(0x95c64521000) is not aligned on a size(0xd5c053bc000) boundary [ 313.387623][T12241] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1625'. [ 313.478415][T12240] veth1_macvtap: left promiscuous mode [ 313.726476][T12246] Process accounting resumed [ 314.185722][T12270] openvswitch: ovs_: Dropping previously announced user features [ 315.044687][T12286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1636'. [ 315.069177][T12288] ERROR: Out of memory at tomoyo_memory_ok. [ 316.080011][T12309] openvswitch: ovs_: Dropping previously announced user features [ 316.427489][T12313] netlink: 334 bytes leftover after parsing attributes in process `syz.4.1643'. [ 316.830568][T12307] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 317.569021][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.576737][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.629524][T12344] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1652'. [ 318.019676][T12378] netlink: 'syz.1.1658': attribute type 11 has an invalid length. [ 318.034784][T12378] netlink: 'syz.1.1658': attribute type 11 has an invalid length. [ 318.044191][T12378] netlink: 'syz.1.1658': attribute type 11 has an invalid length. [ 318.072737][T12378] netlink: 'syz.1.1658': attribute type 11 has an invalid length. [ 318.094695][T12378] netlink: 'syz.1.1658': attribute type 11 has an invalid length. [ 318.104386][T12378] netlink: 'syz.1.1658': attribute type 11 has an invalid length. [ 318.124689][T12378] netlink: 'syz.1.1658': attribute type 11 has an invalid length. [ 318.134456][T12378] netlink: 'syz.1.1658': attribute type 11 has an invalid length. [ 318.154642][T12378] netlink: 'syz.1.1658': attribute type 11 has an invalid length. [ 318.171860][T12378] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1658'. [ 318.193988][T12378] netlink: 336 bytes leftover after parsing attributes in process `syz.1.1658'. [ 318.214644][T12378] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1658'. [ 318.234639][T12378] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1658'. [ 318.245935][T12375] netlink: 'syz.1.1658': attribute type 11 has an invalid length. [ 318.255725][T12375] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1658'. [ 318.296903][T12375] netlink: 336 bytes leftover after parsing attributes in process `syz.1.1658'. [ 318.324665][T12375] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1658'. [ 319.257878][T12412] openvswitch: ovs_: Dropping previously announced user features [ 320.476408][T12457] ERROR: Out of memory at tomoyo_memory_ok. [ 320.493565][T12469] openvswitch: ovs_: Dropping previously announced user features [ 320.996846][T12464] [U] ×co [ 321.000416][T12464] [U] &JÝi¶DC¶æhŠ+ZÙß&iæùÍ#e2²×cÁÛþã÷‡ü‡ÍV [ 321.007795][T12464] [U] ’;G±Ëòä [ 321.320240][T12510] __nla_validate_parse: 1 callbacks suppressed [ 321.320262][T12510] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1683'. [ 321.389805][T12510] bond0: (slave bond_slave_1): Releasing backup interface [ 323.098691][ T29] audit: type=1800 audit(4294968465.878:8): pid=12538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1690" name="trace_pipe" dev="tracefs" ino=1224 res=0 errno=0 [ 323.123008][ C0] vkms_vblank_simulate: vblank timer overrun [ 323.287447][T12550] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1693'. [ 323.319292][T12550] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1693'. [ 323.398222][T12550] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1693'. [ 324.195381][T12579] netlink: 266 bytes leftover after parsing attributes in process `syz.3.1702'. [ 324.231045][T12579] IPv6: NLM_F_CREATE should be specified when creating new route [ 325.506026][T12617] openvswitch: ovs_: Dropping previously announced user features [ 328.273591][T12664] openvswitch: ovs_: Dropping previously announced user features [ 328.870087][T12675] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(3) [ 329.708028][T12705] openvswitch: ovs_: Dropping previously announced user features [ 330.207565][T12722] nbd: couldn't find device at index 33904 [ 330.218011][T12722] cifs: Unknown parameter '#‹Ê‘˜’æCŠ Ë€HË/R{Ñ<' [ 331.042740][ T29] audit: type=1800 audit(4294968473.818:9): pid=12772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1754" name="features" dev="configfs" ino=41140 res=0 errno=0 [ 331.067051][ C0] vkms_vblank_simulate: vblank timer overrun [ 331.174373][T12780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1756'. [ 332.173435][T12837] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1767'. [ 333.295854][T12839] delete_channel: no stack [ 333.470008][T12867] openvswitch: ovs_: Dropping previously announced user features [ 333.957616][T12886] openvswitch: ovs_: Dropping previously announced user features [ 334.750592][T12902] base_sock_release(ffff888052979200) sk=ffff888058336000 [ 335.968997][T12943] ERROR: Out of memory at tomoyo_memory_ok. [ 336.067749][T12945] netlink: 226 bytes leftover after parsing attributes in process `syz.3.1803'. [ 336.079771][T12945] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1803'. [ 336.097240][T12945] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 336.836201][ T27] ERROR: Out of memory at tomoyo_memory_ok. [ 337.196229][T12976] ERROR: Out of memory at tomoyo_memory_ok. [ 337.291792][T12979] openvswitch: ovs_: Dropping previously announced user features [ 337.450750][T12983] sctp: Changing rto_alpha or rto_beta may lead to suboptimal rtt/srtt estimations! [ 337.769783][T12986] ERROR: Out of memory at tomoyo_memory_ok. [ 338.458100][T13007] openvswitch: ovs_: Dropping previously announced user features [ 339.334781][T13027] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 339.365761][T13028] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 339.417295][T13031] netlink: 338 bytes leftover after parsing attributes in process `syz.4.1833'. [ 339.524657][T13027] netlink: 338 bytes leftover after parsing attributes in process `syz.4.1833'. [ 339.648407][T13044] openvswitch: ovs_: Dropping previously announced user features [ 339.832813][T13053] netlink: 'syz.4.1838': attribute type 16 has an invalid length. [ 339.886226][T13053] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1838'. [ 341.390413][T13040] delete_channel: no stack [ 343.736317][T13130] openvswitch: ovs_: Dropping previously announced user features [ 343.800551][T13125] Process accounting paused [ 345.142801][T13131] delete_channel: no stack [ 346.237436][T13190] openvswitch: netlink: Flow key attr not present in new flow. [ 346.799941][T13195] mmap: syz.1.1876 (13195): VmData 37597184 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 348.399379][T13220] openvswitch: ovs_: Dropping previously announced user features [ 350.027686][T13272] warning: `syz.4.1894' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 350.379672][T13290] openvswitch: ovs_: Dropping previously announced user features [ 350.784164][T13297] vivid-013: ================= START STATUS ================= [ 350.797182][T13297] vivid-013: Generate PTS: true [ 350.803056][T13297] vivid-013: Generate SCR: true [ 350.811146][T13297] tpg source WxH: 640x360 (Y'CbCr) [ 350.817534][T13297] tpg field: 1 [ 350.822414][T13297] tpg crop: 640x360@0x0 [ 350.846812][T13297] tpg compose: 640x360@0x0 [ 350.874642][T13297] tpg colorspace: 8 [ 350.905547][T13297] tpg transfer function: 0/0 [ 350.944754][T13297] tpg Y'CbCr encoding: 0/0 [ 350.995608][T13297] tpg quantization: 0/0 [ 351.001136][T13297] tpg RGB range: 0/2 [ 351.014735][T13297] vivid-013: ================== END STATUS ================== [ 351.053978][T13320] ieee80211 phy21: Selected rate control algorithm 'minstrel_ht' [ 351.549715][T13333] program syz.3.1911 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 351.583899][T13336] openvswitch: ovs_: Dropping previously announced user features [ 352.939352][T13373] FAULT_INJECTION: forcing a failure. [ 352.939352][T13373] name failslab, interval 1, probability 0, space 0, times 0 [ 352.954809][T13373] CPU: 0 UID: 0 PID: 13373 Comm: syz.0.1928 Not tainted 6.13.0-syzkaller-04541-gdf60eac9efe8 #0 [ 352.954842][T13373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 352.954858][T13373] Call Trace: [ 352.954865][T13373] [ 352.954873][T13373] dump_stack_lvl+0x16c/0x1f0 [ 352.954917][T13373] should_fail_ex+0x497/0x5b0 [ 352.954951][T13373] ? fs_reclaim_acquire+0xae/0x150 [ 352.954983][T13373] should_failslab+0xc2/0x120 [ 352.955006][T13373] __kmalloc_cache_noprof+0x68/0x420 [ 352.955041][T13373] kernfs_fop_open+0xa88/0xdb0 [ 352.955089][T13373] do_dentry_open+0xf59/0x1ea0 [ 352.955122][T13373] ? __pfx_kernfs_fop_open+0x10/0x10 [ 352.955157][T13373] ? inode_permission+0xdd/0x5f0 [ 352.955183][T13373] vfs_open+0x82/0x3f0 [ 352.955204][T13373] ? may_open+0x1f2/0x400 [ 352.955229][T13373] path_openat+0x1e81/0x2d70 [ 352.955265][T13373] ? __pfx_path_openat+0x10/0x10 [ 352.955299][T13373] do_filp_open+0x20c/0x470 [ 352.955329][T13373] ? __pfx_do_filp_open+0x10/0x10 [ 352.955370][T13373] ? alloc_fd+0x41f/0x760 [ 352.955403][T13373] do_sys_openat2+0x17a/0x1e0 [ 352.955426][T13373] ? __pfx_do_sys_openat2+0x10/0x10 [ 352.955455][T13373] __x64_sys_openat+0x175/0x210 [ 352.955479][T13373] ? __pfx___x64_sys_openat+0x10/0x10 [ 352.955506][T13373] ? rcu_is_watching+0x12/0xc0 [ 352.955537][T13373] ? rcu_is_watching+0x12/0xc0 [ 352.955568][T13373] do_syscall_64+0xcd/0x250 [ 352.955592][T13373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.955620][T13373] RIP: 0033:0x7fca3c98cd29 [ 352.955637][T13373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 352.955660][T13373] RSP: 002b:00007fca3d746038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 352.955683][T13373] RAX: ffffffffffffffda RBX: 00007fca3cba5fa0 RCX: 00007fca3c98cd29 [ 352.955699][T13373] RDX: 0000000000008082 RSI: 0000000020000340 RDI: ffffffffffffff9c [ 352.955714][T13373] RBP: 00007fca3ca0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 352.955728][T13373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 352.955742][T13373] R13: 0000000000000000 R14: 00007fca3cba5fa0 R15: 00007fff7689ab38 [ 352.955764][T13373] [ 353.468082][T13379] openvswitch: ovs_: Dropping previously announced user features [ 353.522912][T13330] lo: entered allmulticast mode [ 353.676261][T13308] caif:caif_disconnect_client(): nothing to disconnect [ 353.684794][T13329] lo: left allmulticast mode [ 353.943093][T13392] openvswitch: ovs_: Dropping previously announced user features [ 354.119305][T13397] netlink: del zone limit has 8 unknown bytes [ 354.836353][T13422] openvswitch: ovs_: Dropping previously announced user features [ 355.863686][T13446] program syz.1.1942 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 356.139981][T13459] openvswitch: ovs_: Dropping previously announced user features [ 356.356386][T13427] lo: entered allmulticast mode [ 356.648360][T13426] lo: left allmulticast mode [ 356.844730][T13484] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 357.443517][T13507] openvswitch: ovs_: Dropping previously announced user features [ 357.944115][T13522] base_sock_release(ffff888052b68c00) sk=ffff888060896000 [ 358.358685][T13541] ERROR: Out of memory at tomoyo_memory_ok. [ 358.926410][T13551] openvswitch: ovs_: Dropping previously announced user features [ 360.162016][T13581] FAULT_INJECTION: forcing a failure. [ 360.162016][T13581] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 360.182296][T13581] CPU: 1 UID: 0 PID: 13581 Comm: syz.3.1977 Not tainted 6.13.0-syzkaller-04541-gdf60eac9efe8 #0 [ 360.182331][T13581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 360.182344][T13581] Call Trace: [ 360.182351][T13581] [ 360.182359][T13581] dump_stack_lvl+0x16c/0x1f0 [ 360.182399][T13581] should_fail_ex+0x497/0x5b0 [ 360.182434][T13581] _copy_from_user+0x2e/0xd0 [ 360.182457][T13581] generic_map_update_batch+0x391/0x5f0 [ 360.182486][T13581] ? __pfx_generic_map_update_batch+0x10/0x10 [ 360.182511][T13581] ? __might_fault+0xe3/0x190 [ 360.182535][T13581] ? lock_acquire+0x2f/0xb0 [ 360.182557][T13581] ? __might_fault+0xe3/0x190 [ 360.182579][T13581] ? __pfx_generic_map_update_batch+0x10/0x10 [ 360.182604][T13581] bpf_map_do_batch+0x576/0x640 [ 360.182637][T13581] __sys_bpf+0x1c9f/0x57a0 [ 360.182659][T13581] ? lock_acquire+0x2f/0xb0 [ 360.182680][T13581] ? ksys_write+0x12b/0x250 [ 360.182708][T13581] ? __pfx___sys_bpf+0x10/0x10 [ 360.182731][T13581] ? vfs_write+0x306/0x1150 [ 360.182761][T13581] ? __pfx_vfs_write+0x10/0x10 [ 360.182788][T13581] ? do_sys_openat2+0xb1/0x1e0 [ 360.182816][T13581] ? ksys_write+0x1ba/0x250 [ 360.182843][T13581] ? __pfx_ksys_write+0x10/0x10 [ 360.182869][T13581] __x64_sys_bpf+0x78/0xc0 [ 360.182891][T13581] do_syscall_64+0xcd/0x250 [ 360.182911][T13581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.182935][T13581] RIP: 0033:0x7f1992b8cd29 [ 360.182951][T13581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.182973][T13581] RSP: 002b:00007f1993967038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 360.182995][T13581] RAX: ffffffffffffffda RBX: 00007f1992da5fa0 RCX: 00007f1992b8cd29 [ 360.183011][T13581] RDX: 0000000000000092 RSI: 0000000020000380 RDI: 000000000000001a [ 360.183025][T13581] RBP: 00007f1993967090 R08: 0000000000000000 R09: 0000000000000000 [ 360.183039][T13581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.183052][T13581] R13: 0000000000000000 R14: 00007f1992da5fa0 R15: 00007ffc1646ee88 [ 360.183073][T13581] [ 360.973751][T13603] FAULT_INJECTION: forcing a failure. [ 360.973751][T13603] name failslab, interval 1, probability 0, space 0, times 0 [ 360.999689][T13603] CPU: 0 UID: 0 PID: 13603 Comm: syz.3.1983 Not tainted 6.13.0-syzkaller-04541-gdf60eac9efe8 #0 [ 360.999728][T13603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 360.999742][T13603] Call Trace: [ 360.999748][T13603] [ 360.999757][T13603] dump_stack_lvl+0x16c/0x1f0 [ 360.999802][T13603] should_fail_ex+0x497/0x5b0 [ 360.999836][T13603] ? fs_reclaim_acquire+0xae/0x150 [ 360.999868][T13603] should_failslab+0xc2/0x120 [ 360.999892][T13603] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 360.999927][T13603] ? security_file_alloc+0x34/0x2b0 [ 360.999959][T13603] security_file_alloc+0x34/0x2b0 [ 361.000000][T13603] init_file+0x93/0x480 [ 361.000023][T13603] alloc_empty_file+0x91/0x1e0 [ 361.000047][T13603] path_openat+0xe1/0x2d70 [ 361.000078][T13603] ? __x64_sys_openat+0x175/0x210 [ 361.000100][T13603] ? do_syscall_64+0xcd/0x250 [ 361.000123][T13603] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.000154][T13603] ? __pfx_path_openat+0x10/0x10 [ 361.000188][T13603] do_filp_open+0x20c/0x470 [ 361.000218][T13603] ? __pfx_do_filp_open+0x10/0x10 [ 361.000258][T13603] ? alloc_fd+0x41f/0x760 [ 361.000291][T13603] do_sys_openat2+0x17a/0x1e0 [ 361.000313][T13603] ? __pfx_do_sys_openat2+0x10/0x10 [ 361.000341][T13603] __x64_sys_openat+0x175/0x210 [ 361.000365][T13603] ? __pfx___x64_sys_openat+0x10/0x10 [ 361.000391][T13603] ? rcu_is_watching+0x12/0xc0 [ 361.000421][T13603] ? rcu_is_watching+0x12/0xc0 [ 361.000452][T13603] do_syscall_64+0xcd/0x250 [ 361.000476][T13603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.000502][T13603] RIP: 0033:0x7f1992b8cd29 [ 361.000521][T13603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.000543][T13603] RSP: 002b:00007f1993967038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 361.000567][T13603] RAX: ffffffffffffffda RBX: 00007f1992da5fa0 RCX: 00007f1992b8cd29 [ 361.000583][T13603] RDX: 0000000000008082 RSI: 0000000020000340 RDI: ffffffffffffff9c [ 361.000599][T13603] RBP: 00007f1992c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 361.000614][T13603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 361.000629][T13603] R13: 0000000000000000 R14: 00007f1992da5fa0 R15: 00007ffc1646ee88 [ 361.000651][T13603] [ 361.273643][ C0] vkms_vblank_simulate: vblank timer overrun [ 361.895956][T13628] openvswitch: ovs_: Dropping previously announced user features [ 362.073570][T13635] lo: entered allmulticast mode [ 362.132560][T13635] lo: left allmulticast mode [ 363.516758][T13674] FAULT_INJECTION: forcing a failure. [ 363.516758][T13674] name fail_futex, interval 1, probability 0, space 0, times 1 [ 363.533298][T13674] CPU: 1 UID: 0 PID: 13674 Comm: syz.3.2003 Not tainted 6.13.0-syzkaller-04541-gdf60eac9efe8 #0 [ 363.533329][T13674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 363.533343][T13674] Call Trace: [ 363.533350][T13674] [ 363.533358][T13674] dump_stack_lvl+0x16c/0x1f0 [ 363.533408][T13674] should_fail_ex+0x497/0x5b0 [ 363.533444][T13674] ? stack_trace_save+0x95/0xd0 [ 363.533478][T13674] get_futex_key+0x4a3/0x1000 [ 363.533509][T13674] ? __pfx_get_futex_key+0x10/0x10 [ 363.533540][T13674] ? kasan_save_stack+0x42/0x60 [ 363.533571][T13674] ? kasan_save_stack+0x33/0x60 [ 363.533603][T13674] ? kasan_save_track+0x14/0x30 [ 363.533634][T13674] ? __kasan_slab_alloc+0x89/0x90 [ 363.533667][T13674] ? kmem_cache_alloc_noprof+0x1c8/0x3b0 [ 363.533700][T13674] ? security_file_alloc+0x34/0x2b0 [ 363.533745][T13674] ? init_file+0x93/0x480 [ 363.533767][T13674] ? alloc_empty_file+0x91/0x1e0 [ 363.533790][T13674] ? alloc_file_pseudo+0x13d/0x200 [ 363.533813][T13674] ? sock_alloc_file+0x50/0x1d0 [ 363.533841][T13674] futex_wait_setup+0x78/0x290 [ 363.533870][T13674] __futex_wait+0x267/0x3c0 [ 363.533895][T13674] ? __pfx___futex_wait+0x10/0x10 [ 363.533923][T13674] ? __pfx_futex_wake_mark+0x10/0x10 [ 363.533954][T13674] futex_wait+0xe9/0x380 [ 363.533978][T13674] ? __pfx_futex_wait+0x10/0x10 [ 363.534007][T13674] ? file_init_path+0x501/0x770 [ 363.534029][T13674] ? rcu_is_watching+0x12/0xc0 [ 363.534061][T13674] do_futex+0x22b/0x350 [ 363.534094][T13674] ? __pfx_do_futex+0x10/0x10 [ 363.534126][T13674] ? lock_acquire+0x2f/0xb0 [ 363.534149][T13674] ? fd_install+0xba/0x750 [ 363.534180][T13674] __x64_sys_futex+0x1e1/0x4c0 [ 363.534214][T13674] ? __sys_socket+0xad/0x260 [ 363.534245][T13674] ? __pfx___x64_sys_futex+0x10/0x10 [ 363.534279][T13674] ? rcu_is_watching+0x12/0xc0 [ 363.534309][T13674] ? rcu_is_watching+0x12/0xc0 [ 363.534339][T13674] ? rcu_is_watching+0x12/0xc0 [ 363.534371][T13674] do_syscall_64+0xcd/0x250 [ 363.534396][T13674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.534422][T13674] RIP: 0033:0x7f1992b8cd29 [ 363.534441][T13674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.534464][T13674] RSP: 002b:00007f19939670e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 363.534486][T13674] RAX: ffffffffffffffda RBX: 00007f1992da5fa8 RCX: 00007f1992b8cd29 [ 363.534503][T13674] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1992da5fa8 [ 363.534518][T13674] RBP: 00007f1992da5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 363.534530][T13674] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1992da5fac [ 363.534542][T13674] R13: 0000000000000000 R14: 00007ffc1646eda0 R15: 00007ffc1646ee88 [ 363.534561][T13674] [ 363.573154][T13666] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 363.875355][T13687] ieee80211 phy22: Selected rate control algorithm 'minstrel_ht' [ 363.876744][T13666] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 363.892103][T13666] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 363.912436][T13686] ieee80211 phy23: Selected rate control algorithm 'minstrel_ht' [ 363.913168][T13666] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 364.012796][T13695] openvswitch: ovs_: Dropping previously announced user features [ 364.032936][T13693] FAULT_INJECTION: forcing a failure. [ 364.032936][T13693] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 364.069992][T13693] CPU: 1 UID: 0 PID: 13693 Comm: syz.1.2008 Not tainted 6.13.0-syzkaller-04541-gdf60eac9efe8 #0 [ 364.070024][T13693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 364.070037][T13693] Call Trace: [ 364.070043][T13693] [ 364.070051][T13693] dump_stack_lvl+0x16c/0x1f0 [ 364.070090][T13693] should_fail_ex+0x497/0x5b0 [ 364.070125][T13693] _copy_from_user+0x2e/0xd0 [ 364.070147][T13693] generic_map_update_batch+0x391/0x5f0 [ 364.070177][T13693] ? __pfx_generic_map_update_batch+0x10/0x10 [ 364.070201][T13693] ? __might_fault+0xe3/0x190 [ 364.070225][T13693] ? lock_acquire+0x2f/0xb0 [ 364.070247][T13693] ? __might_fault+0xe3/0x190 [ 364.070271][T13693] ? __pfx_generic_map_update_batch+0x10/0x10 [ 364.070296][T13693] bpf_map_do_batch+0x576/0x640 [ 364.070330][T13693] __sys_bpf+0x1c9f/0x57a0 [ 364.070352][T13693] ? lock_acquire+0x2f/0xb0 [ 364.070374][T13693] ? ksys_write+0x12b/0x250 [ 364.070403][T13693] ? __pfx___sys_bpf+0x10/0x10 [ 364.070426][T13693] ? vfs_write+0x306/0x1150 [ 364.070455][T13693] ? __pfx_vfs_write+0x10/0x10 [ 364.070483][T13693] ? do_sys_openat2+0xb1/0x1e0 [ 364.070513][T13693] ? ksys_write+0x1ba/0x250 [ 364.070539][T13693] ? __pfx_ksys_write+0x10/0x10 [ 364.070569][T13693] __x64_sys_bpf+0x78/0xc0 [ 364.070594][T13693] do_syscall_64+0xcd/0x250 [ 364.070617][T13693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.070642][T13693] RIP: 0033:0x7f7ce2b8cd29 [ 364.070658][T13693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 364.070678][T13693] RSP: 002b:00007f7ce09f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 364.070699][T13693] RAX: ffffffffffffffda RBX: 00007f7ce2da5fa0 RCX: 00007f7ce2b8cd29 [ 364.070714][T13693] RDX: 0000000000000092 RSI: 0000000020000380 RDI: 000000000000001a [ 364.070728][T13693] RBP: 00007f7ce09f6090 R08: 0000000000000000 R09: 0000000000000000 [ 364.070740][T13693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 364.070753][T13693] R13: 0000000000000000 R14: 00007f7ce2da5fa0 R15: 00007ffc19c64a18 [ 364.070773][T13693] [ 364.801405][T13735] openvswitch: ovs_: Dropping previously announced user features [ 365.485411][ T5841] Bluetooth: hci0: command 0x0406 tx timeout [ 365.708453][T13776] openvswitch: ovs_: Dropping previously announced user features [ 365.799280][T13785] ERROR: Out of memory at tomoyo_memory_ok. [ 365.826669][T13784] netlink: 334 bytes leftover after parsing attributes in process `syz.4.2034'. [ 365.964762][ T5841] Bluetooth: hci4: command 0x0c1a tx timeout [ 365.972091][ T5841] Bluetooth: hci3: command 0x0406 tx timeout [ 365.980671][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 366.212746][T13798] ERROR: Out of memory at tomoyo_memory_ok. [ 366.669528][T13821] openvswitch: ovs_: Dropping previously announced user features [ 366.809109][T13828] openvswitch: ovs_: Dropping previously announced user features [ 367.139260][T13832] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2047'. [ 367.183414][T13842] [U] ßñŸnÊB¿}S¥eI‡Æc|Ⅎßó‚e É3D/tQVÀKè‹äZ.hJK©èœ‰Q—7ÏFÍ°õ¡n‹^}®‡ñâ¸×©iÈÌxœq [ 367.195612][T13842] [U] ’;G±Ëòä [ 367.420050][T13856] FAULT_INJECTION: forcing a failure. [ 367.420050][T13856] name failslab, interval 1, probability 0, space 0, times 0 [ 367.429456][T13854] FAULT_INJECTION: forcing a failure. [ 367.429456][T13854] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 367.452418][T13856] CPU: 1 UID: 0 PID: 13856 Comm: syz.0.2055 Not tainted 6.13.0-syzkaller-04541-gdf60eac9efe8 #0 [ 367.452451][T13856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 367.452464][T13856] Call Trace: [ 367.452471][T13856] [ 367.452480][T13856] dump_stack_lvl+0x16c/0x1f0 [ 367.452521][T13856] should_fail_ex+0x497/0x5b0 [ 367.452555][T13856] ? fs_reclaim_acquire+0xae/0x150 [ 367.452584][T13856] should_failslab+0xc2/0x120 [ 367.452606][T13856] __kmalloc_cache_noprof+0x68/0x420 [ 367.452639][T13856] tty_open+0x140/0xf80 [ 367.452662][T13856] ? lock_release+0x4e2/0x6f0 [ 367.452685][T13856] ? chrdev_open+0x10e/0x6a0 [ 367.452719][T13856] ? __pfx_tty_open+0x10/0x10 [ 367.452743][T13856] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 367.452772][T13856] ? lock_acquire+0x2f/0xb0 [ 367.452794][T13856] ? chrdev_open+0x80/0x6a0 [ 367.452826][T13856] ? __pfx_tty_open+0x10/0x10 [ 367.452849][T13856] chrdev_open+0x237/0x6a0 [ 367.452879][T13856] ? __pfx_apparmor_file_open+0x10/0x10 [ 367.452906][T13856] ? __pfx_chrdev_open+0x10/0x10 [ 367.452942][T13856] do_dentry_open+0xf59/0x1ea0 [ 367.452972][T13856] ? __pfx_chrdev_open+0x10/0x10 [ 367.453003][T13856] ? inode_permission+0xdd/0x5f0 [ 367.453028][T13856] vfs_open+0x82/0x3f0 [ 367.453048][T13856] ? may_open+0x1f2/0x400 [ 367.453072][T13856] path_openat+0x1e81/0x2d70 [ 367.453107][T13856] ? __pfx_path_openat+0x10/0x10 [ 367.453141][T13856] do_filp_open+0x20c/0x470 [ 367.453171][T13856] ? __pfx_do_filp_open+0x10/0x10 [ 367.453211][T13856] ? alloc_fd+0x41f/0x760 [ 367.453242][T13856] do_sys_openat2+0x17a/0x1e0 [ 367.453264][T13856] ? __pfx_do_sys_openat2+0x10/0x10 [ 367.453300][T13856] __x64_sys_openat+0x175/0x210 [ 367.453325][T13856] ? __pfx___x64_sys_openat+0x10/0x10 [ 367.453352][T13856] ? rcu_is_watching+0x12/0xc0 [ 367.453383][T13856] ? rcu_is_watching+0x12/0xc0 [ 367.453414][T13856] do_syscall_64+0xcd/0x250 [ 367.453438][T13856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.453463][T13856] RIP: 0033:0x7fca3c98cd29 [ 367.453480][T13856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.453502][T13856] RSP: 002b:00007fca3d746038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 367.453524][T13856] RAX: ffffffffffffffda RBX: 00007fca3cba5fa0 RCX: 00007fca3c98cd29 [ 367.453539][T13856] RDX: 0000000000121802 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 367.453553][T13856] RBP: 00007fca3ca0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 367.453567][T13856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 367.453581][T13856] R13: 0000000000000000 R14: 00007fca3cba5fa0 R15: 00007fff7689ab38 [ 367.453602][T13856] [ 367.456114][T13854] CPU: 0 UID: 0 PID: 13854 Comm: syz.1.2054 Not tainted 6.13.0-syzkaller-04541-gdf60eac9efe8 #0 [ 367.456143][T13854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 367.456156][T13854] Call Trace: [ 367.456162][T13854] [ 367.456169][T13854] dump_stack_lvl+0x16c/0x1f0 [ 367.456206][T13854] should_fail_ex+0x497/0x5b0 [ 367.456241][T13854] _copy_from_user+0x2e/0xd0 [ 367.456268][T13854] generic_map_update_batch+0x391/0x5f0 [ 367.456297][T13854] ? __pfx_generic_map_update_batch+0x10/0x10 [ 367.456345][T13854] ? __might_fault+0xe3/0x190 [ 367.456369][T13854] ? lock_acquire+0x2f/0xb0 [ 367.456391][T13854] ? __might_fault+0xe3/0x190 [ 367.456413][T13854] ? __pfx_generic_map_update_batch+0x10/0x10 [ 367.456437][T13854] bpf_map_do_batch+0x576/0x640 [ 367.456470][T13854] __sys_bpf+0x1c9f/0x57a0 [ 367.456492][T13854] ? lock_acquire+0x2f/0xb0 [ 367.456513][T13854] ? ksys_write+0x12b/0x250 [ 367.456550][T13854] ? __pfx___sys_bpf+0x10/0x10 [ 367.456573][T13854] ? vfs_write+0x306/0x1150 [ 367.456601][T13854] ? __pfx_vfs_write+0x10/0x10 [ 367.456628][T13854] ? do_sys_openat2+0xb1/0x1e0 [ 367.456656][T13854] ? ksys_write+0x1ba/0x250 [ 367.456683][T13854] ? __pfx_ksys_write+0x10/0x10 [ 367.456712][T13854] __x64_sys_bpf+0x78/0xc0 [ 367.456736][T13854] do_syscall_64+0xcd/0x250 [ 367.456759][T13854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.456784][T13854] RIP: 0033:0x7f7ce2b8cd29 [ 367.456800][T13854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.456821][T13854] RSP: 002b:00007f7ce09f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 367.456842][T13854] RAX: ffffffffffffffda RBX: 00007f7ce2da5fa0 RCX: 00007f7ce2b8cd29 [ 367.456857][T13854] RDX: 0000000000000092 RSI: 0000000020000380 RDI: 000000000000001a [ 367.456871][T13854] RBP: 00007f7ce09f6090 R08: 0000000000000000 R09: 0000000000000000 [ 367.456883][T13854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.456896][T13854] R13: 0000000000000000 R14: 00007f7ce2da5fa0 R15: 00007ffc19c64a18 [ 367.456916][T13854] [ 368.241898][T13871] openvswitch: ovs_: Dropping previously announced user features [ 368.302306][T13873] openvswitch: ovs_: Dropping previously announced user features [ 368.415975][T13883] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2064'. [ 368.586767][T13890] netlink: 334 bytes leftover after parsing attributes in process `syz.1.2067'. [ 368.665061][T13877] openvswitch: netlink: Duplicate or invalid key (type 0). [ 368.747791][T13895] FAULT_INJECTION: forcing a failure. [ 368.747791][T13895] name failslab, interval 1, probability 0, space 0, times 0 [ 368.763359][T13895] CPU: 1 UID: 0 PID: 13895 Comm: syz.1.2069 Not tainted 6.13.0-syzkaller-04541-gdf60eac9efe8 #0 [ 368.763391][T13895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 368.763406][T13895] Call Trace: [ 368.763412][T13895] [ 368.763420][T13895] dump_stack_lvl+0x16c/0x1f0 [ 368.763463][T13895] should_fail_ex+0x497/0x5b0 [ 368.763497][T13895] ? fs_reclaim_acquire+0xae/0x150 [ 368.763528][T13895] should_failslab+0xc2/0x120 [ 368.763550][T13895] __kmalloc_noprof+0xce/0x4f0 [ 368.763582][T13895] ? __pfx_d_absolute_path+0x10/0x10 [ 368.763604][T13895] ? tomoyo_encode2+0x100/0x3e0 [ 368.763636][T13895] tomoyo_encode2+0x100/0x3e0 [ 368.763664][T13895] ? rcu_is_watching+0x12/0xc0 [ 368.763696][T13895] tomoyo_realpath_from_path+0x1a7/0x710 [ 368.763732][T13895] tomoyo_check_open_permission+0x2ad/0x3c0 [ 368.763760][T13895] ? init_file+0x93/0x480 [ 368.763781][T13895] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 368.763810][T13895] ? do_sys_openat2+0x17a/0x1e0 [ 368.763837][T13895] ? trace_lock_acquire+0x14e/0x1f0 [ 368.763869][T13895] ? nd_jump_root+0x3d5/0x580 [ 368.763903][T13895] ? __pfx_hook_file_open+0x10/0x10 [ 368.763931][T13895] ? lock_acquire+0x2f/0xb0 [ 368.763955][T13895] tomoyo_file_open+0x6b/0x90 [ 368.763978][T13895] security_file_open+0x84/0x1e0 [ 368.764009][T13895] do_dentry_open+0x57e/0x1ea0 [ 368.764040][T13895] ? inode_permission+0xdd/0x5f0 [ 368.764066][T13895] vfs_open+0x82/0x3f0 [ 368.764087][T13895] ? may_open+0x1f2/0x400 [ 368.764111][T13895] path_openat+0x1e81/0x2d70 [ 368.764147][T13895] ? __pfx_path_openat+0x10/0x10 [ 368.764193][T13895] do_filp_open+0x20c/0x470 [ 368.764225][T13895] ? __pfx_do_filp_open+0x10/0x10 [ 368.764268][T13895] ? alloc_fd+0x41f/0x760 [ 368.764301][T13895] do_sys_openat2+0x17a/0x1e0 [ 368.764324][T13895] ? __pfx_do_sys_openat2+0x10/0x10 [ 368.764352][T13895] __x64_sys_openat+0x175/0x210 [ 368.764375][T13895] ? __pfx___x64_sys_openat+0x10/0x10 [ 368.764401][T13895] ? rcu_is_watching+0x12/0xc0 [ 368.764431][T13895] ? rcu_is_watching+0x12/0xc0 [ 368.764462][T13895] do_syscall_64+0xcd/0x250 [ 368.764487][T13895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.764514][T13895] RIP: 0033:0x7f7ce2b8cd29 [ 368.764535][T13895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 368.764558][T13895] RSP: 002b:00007f7ce09f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 368.764579][T13895] RAX: ffffffffffffffda RBX: 00007f7ce2da5fa0 RCX: 00007f7ce2b8cd29 [ 368.764595][T13895] RDX: 0000000000121802 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 368.764610][T13895] RBP: 00007f7ce2c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 368.764623][T13895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 368.764637][T13895] R13: 0000000000000000 R14: 00007f7ce2da5fa0 R15: 00007ffc19c64a18 [ 368.764657][T13895] [ 368.841712][T13888] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2065'. [ 368.842908][ C1] vkms_vblank_simulate: vblank timer overrun [ 368.847825][T13895] ERROR: Out of memory at tomoyo_realpath_from_path. [ 369.095556][T13910] ptrace attach of "./syz-executor exec"[5832] was attempted by "./syz-executor exec"[13910] [ 369.328343][T13917] openvswitch: ovs_: Dropping previously announced user features [ 369.436441][T13922] netlink: 'syz.4.2076': attribute type 1 has an invalid length. [ 369.508895][T13926] netlink: 334 bytes leftover after parsing attributes in process `syz.4.2078'. [ 369.640347][T13933] netlink: 146 bytes leftover after parsing attributes in process `syz.4.2080'. [ 369.732493][T13938] Invalid ELF header magic: != ELF [ 369.932740][T13947] ERROR: Out of memory at tomoyo_memory_ok. [ 370.852256][T13964] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2086'. [ 370.873623][T13960] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2084'. [ 372.028001][T13992] FAULT_INJECTION: forcing a failure. [ 372.028001][T13992] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 372.090693][T13992] CPU: 1 UID: 0 PID: 13992 Comm: syz.3.2094 Not tainted 6.13.0-syzkaller-04541-gdf60eac9efe8 #0 [ 372.090727][T13992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 372.090740][T13992] Call Trace: [ 372.090746][T13992] [ 372.090766][T13992] dump_stack_lvl+0x16c/0x1f0 [ 372.090804][T13992] should_fail_ex+0x497/0x5b0 [ 372.090837][T13992] _copy_to_user+0x32/0xd0 [ 372.090860][T13992] simple_read_from_buffer+0xd0/0x160 [ 372.090887][T13992] proc_fail_nth_read+0x198/0x270 [ 372.090910][T13992] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 372.090933][T13992] ? bpf_lsm_file_permission+0x9/0x10 [ 372.090955][T13992] ? security_file_permission+0x71/0x210 [ 372.090986][T13992] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 372.091009][T13992] vfs_read+0x1df/0xbe0 [ 372.091036][T13992] ? __fget_files+0x1fc/0x3a0 [ 372.091065][T13992] ? __pfx___mutex_lock+0x10/0x10 [ 372.091087][T13992] ? __pfx_vfs_read+0x10/0x10 [ 372.091117][T13992] ? __fget_files+0x206/0x3a0 [ 372.091150][T13992] ksys_read+0x12b/0x250 [ 372.091177][T13992] ? __pfx_ksys_read+0x10/0x10 [ 372.091204][T13992] ? rcu_is_watching+0x12/0xc0 [ 372.091234][T13992] ? rcu_is_watching+0x12/0xc0 [ 372.091264][T13992] do_syscall_64+0xcd/0x250 [ 372.091287][T13992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.091313][T13992] RIP: 0033:0x7f1992b8b73c [ 372.091330][T13992] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 372.091351][T13992] RSP: 002b:00007f1993967030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 372.091372][T13992] RAX: ffffffffffffffda RBX: 00007f1992da5fa0 RCX: 00007f1992b8b73c [ 372.091387][T13992] RDX: 000000000000000f RSI: 00007f19939670a0 RDI: 0000000000000003 [ 372.091401][T13992] RBP: 00007f1993967090 R08: 0000000000000000 R09: 0000000000000000 [ 372.091414][T13992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.091427][T13992] R13: 0000000000000001 R14: 00007f1992da5fa0 R15: 00007ffc1646ee88 [ 372.091448][T13992] [ 372.334224][ C1] vkms_vblank_simulate: vblank timer overrun [ 372.606010][T13998] openvswitch: ovs_: Dropping previously announced user features [ 372.655747][T13996] ieee80211 phy24: Selected rate control algorithm 'minstrel_ht' [ 372.868070][T14011] openvswitch: ovs_: Dropping previously announced user features [ 373.096119][ T29] audit: type=1804 audit(4294968515.878:10): pid=14024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2105" name="/newroot/sys/kernel/tracing/options/blk_cgname" dev="tracefs" ino=1285 res=1 errno=0 [ 373.448705][T14036] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2109'. [ 373.517419][T14039] openvswitch: ovs_: Dropping previously announced user features [ 373.750345][T14047] openvswitch: ovs_: Dropping previously announced user features [ 374.002264][T14055] openvswitch: netlink: nsh attribute has 14 unknown bytes. [ 374.103421][T14056] base_sock_release(ffff88805298c800) sk=ffff8880355ef000 [ 374.620572][T14076] Process accounting resumed [ 375.031827][T14095] openvswitch: ovs_: Dropping previously announced user features [ 375.698695][T14125] ieee80211 phy25: Selected rate control algorithm 'minstrel_ht' [ 375.812952][T14128] sg_write: data in/out 2059/169 bytes for SCSI command 0x57-- guessing data in; [ 375.812952][T14128] program syz.4.2134 not setting count and/or reply_len properly [ 376.079917][T14140] openvswitch: ovs_: Dropping previously announced user features [ 376.172637][T14135] ieee80211 phy26: Selected rate control algorithm 'minstrel_ht' [ 376.211388][T14143] netlink: 330 bytes leftover after parsing attributes in process `syz.3.2140'. [ 376.871372][T14176] openvswitch: ovs_: Dropping previously announced user features [ 377.010289][T14172] ieee80211 phy27: Selected rate control algorithm 'minstrel_ht' [ 377.811656][T14214] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2161'. [ 377.837048][T14214] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 377.857835][T14214] bond0 (unregistering): Released all slaves [ 378.120647][T14222] openvswitch: ovs_: Dropping previously announced user features [ 378.472855][T14228] ieee80211 phy28: Selected rate control algorithm 'minstrel_ht' [ 379.014971][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.022761][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.114392][T14265] openvswitch: ovs_: Dropping previously announced user features [ 382.808913][T14344] openvswitch: ovs_: Dropping previously announced user features [ 383.912906][T14358] FAULT_INJECTION: forcing a failure. [ 383.912906][T14358] name failslab, interval 1, probability 0, space 0, times 0 [ 383.929397][T14358] CPU: 0 UID: 0 PID: 14358 Comm: syz.3.2205 Not tainted 6.13.0-syzkaller-04541-gdf60eac9efe8 #0 [ 383.929432][T14358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 383.929446][T14358] Call Trace: [ 383.929453][T14358] [ 383.929462][T14358] dump_stack_lvl+0x16c/0x1f0 [ 383.929504][T14358] should_fail_ex+0x497/0x5b0 [ 383.929540][T14358] ? fs_reclaim_acquire+0xae/0x150 [ 383.929573][T14358] should_failslab+0xc2/0x120 [ 383.929596][T14358] __kmalloc_noprof+0xce/0x4f0 [ 383.929642][T14358] ? __register_sysctl_table+0xb4/0x18c0 [ 383.929680][T14358] __register_sysctl_table+0xb4/0x18c0 [ 383.929715][T14358] ? rcu_is_watching+0x12/0xc0 [ 383.929747][T14358] ? __pfx___register_sysctl_table+0x10/0x10 [ 383.929780][T14358] ? is_module_address+0x2a/0x50 [ 383.929804][T14358] ? register_net_sysctl_sz+0x228/0x3e0 [ 383.929831][T14358] sysctl_core_net_init+0xe2/0x270 [ 383.929864][T14358] ? __pfx_sysctl_core_net_init+0x10/0x10 [ 383.929896][T14358] ops_init+0x1df/0x5f0 [ 383.929921][T14358] setup_net+0x21f/0x860 [ 383.929947][T14358] ? __pfx_setup_net+0x10/0x10 [ 383.929971][T14358] ? down_read_killable+0xcc/0x380 [ 383.929996][T14358] ? __pfx_down_read_killable+0x10/0x10 [ 383.930023][T14358] ? debug_mutex_init+0x37/0x70 [ 383.930056][T14358] copy_net_ns+0x2b4/0x6c0 [ 383.930084][T14358] create_new_namespaces+0x3ea/0xad0 [ 383.930116][T14358] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 383.930147][T14358] ksys_unshare+0x45d/0xa40 [ 383.930178][T14358] ? __pfx_ksys_unshare+0x10/0x10 [ 383.930207][T14358] ? xfd_validate_state+0x5d/0x180 [ 383.930233][T14358] ? rcu_is_watching+0x12/0xc0 [ 383.930264][T14358] __x64_sys_unshare+0x31/0x40 [ 383.930295][T14358] do_syscall_64+0xcd/0x250 [ 383.930319][T14358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.930346][T14358] RIP: 0033:0x7f1992b8cd29 [ 383.930365][T14358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.930387][T14358] RSP: 002b:00007f1993967038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 383.930409][T14358] RAX: ffffffffffffffda RBX: 00007f1992da5fa0 RCX: 00007f1992b8cd29 [ 383.930426][T14358] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 383.930439][T14358] RBP: 00007f1992c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 383.930454][T14358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 383.930468][T14358] R13: 0000000000000000 R14: 00007f1992da5fa0 R15: 00007ffc1646ee88 [ 383.930489][T14358] [ 384.511352][T14374] openvswitch: ovs_: Dropping previously announced user features [ 384.541532][T14362] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 384.551304][T14362] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 384.571388][T14362] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 384.581495][T14362] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 384.735663][T14381] FAULT_INJECTION: forcing a failure. [ 384.735663][T14381] name failslab, interval 1, probability 0, space 0, times 0 [ 384.822666][T14381] CPU: 1 UID: 0 PID: 14381 Comm: syz.0.2215 Not tainted 6.13.0-syzkaller-04541-gdf60eac9efe8 #0 [ 384.822699][T14381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 384.822711][T14381] Call Trace: [ 384.822718][T14381] [ 384.822725][T14381] dump_stack_lvl+0x16c/0x1f0 [ 384.822772][T14381] should_fail_ex+0x497/0x5b0 [ 384.822805][T14381] ? fs_reclaim_acquire+0xae/0x150 [ 384.822834][T14381] should_failslab+0xc2/0x120 [ 384.822856][T14381] __kmalloc_noprof+0xce/0x4f0 [ 384.822887][T14381] ? tomoyo_realpath_from_path+0xbf/0x710 [ 384.822919][T14381] tomoyo_realpath_from_path+0xbf/0x710 [ 384.822948][T14381] ? tomoyo_path_number_perm+0x235/0x5b0 [ 384.822975][T14381] tomoyo_path_number_perm+0x248/0x5b0 [ 384.823000][T14381] ? tomoyo_path_number_perm+0x235/0x5b0 [ 384.823027][T14381] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 384.823054][T14381] ? rcu_is_watching+0x12/0xc0 [ 384.823087][T14381] ? preempt_count_add+0x76/0x150 [ 384.823116][T14381] ? __pfx_lock_release+0x10/0x10 [ 384.823139][T14381] ? trace_lock_acquire+0x14e/0x1f0 [ 384.823175][T14381] ? __fget_files+0x40/0x3a0 [ 384.823204][T14381] ? lock_acquire+0x2f/0xb0 [ 384.823226][T14381] ? __fget_files+0x40/0x3a0 [ 384.823256][T14381] ? __fget_files+0x206/0x3a0 [ 384.823286][T14381] security_file_ioctl+0x9b/0x240 [ 384.823315][T14381] __x64_sys_ioctl+0xb7/0x200 [ 384.823341][T14381] do_syscall_64+0xcd/0x250 [ 384.823365][T14381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.823391][T14381] RIP: 0033:0x7fca3c98cd29 [ 384.823408][T14381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.823429][T14381] RSP: 002b:00007fca3d746038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 384.823450][T14381] RAX: ffffffffffffffda RBX: 00007fca3cba5fa0 RCX: 00007fca3c98cd29 [ 384.823466][T14381] RDX: 0000000020000040 RSI: 00000000406855c9 RDI: 0000000000000003 [ 384.823479][T14381] RBP: 00007fca3d746090 R08: 0000000000000000 R09: 0000000000000000 [ 384.823493][T14381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.823506][T14381] R13: 0000000000000000 R14: 00007fca3cba5fa0 R15: 00007fff7689ab38 [ 384.823525][T14381] [ 384.823554][T14381] ERROR: Out of memory at tomoyo_realpath_from_path. [ 386.375385][ T54] Bluetooth: hci0: command 0x0406 tx timeout [ 386.604851][ T54] Bluetooth: hci4: command 0x0c1a tx timeout [ 386.605222][ T5841] Bluetooth: hci3: command 0x0406 tx timeout [ 386.612087][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 386.885108][T14441] FAULT_INJECTION: forcing a failure. [ 386.885108][T14441] name failslab, interval 1, probability 0, space 0, times 0 [ 386.918548][T14441] CPU: 0 UID: 0 PID: 14441 Comm: syz.4.2232 Not tainted 6.13.0-syzkaller-04541-gdf60eac9efe8 #0 [ 386.918581][T14441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 386.918593][T14441] Call Trace: [ 386.918600][T14441] [ 386.918608][T14441] dump_stack_lvl+0x16c/0x1f0 [ 386.918647][T14441] should_fail_ex+0x497/0x5b0 [ 386.918679][T14441] ? fs_reclaim_acquire+0xae/0x150 [ 386.918707][T14441] should_failslab+0xc2/0x120 [ 386.918729][T14441] __kmalloc_noprof+0xce/0x4f0 [ 386.918760][T14441] ? d_absolute_path+0x137/0x1b0 [ 386.918781][T14441] ? tomoyo_encode2+0x100/0x3e0 [ 386.918812][T14441] tomoyo_encode2+0x100/0x3e0 [ 386.918841][T14441] tomoyo_realpath_from_path+0x1a7/0x710 [ 386.918875][T14441] tomoyo_path_number_perm+0x248/0x5b0 [ 386.918901][T14441] ? tomoyo_path_number_perm+0x235/0x5b0 [ 386.918928][T14441] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 386.918955][T14441] ? rcu_is_watching+0x12/0xc0 [ 386.918987][T14441] ? preempt_count_add+0x76/0x150 [ 386.919015][T14441] ? __pfx_lock_release+0x10/0x10 [ 386.919037][T14441] ? trace_lock_acquire+0x14e/0x1f0 [ 386.919085][T14441] ? __fget_files+0x40/0x3a0 [ 386.919112][T14441] ? lock_acquire+0x2f/0xb0 [ 386.919132][T14441] ? __fget_files+0x40/0x3a0 [ 386.919160][T14441] ? __fget_files+0x206/0x3a0 [ 386.919190][T14441] security_file_ioctl+0x9b/0x240 [ 386.919218][T14441] __x64_sys_ioctl+0xb7/0x200 [ 386.919243][T14441] do_syscall_64+0xcd/0x250 [ 386.919266][T14441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.919290][T14441] RIP: 0033:0x7fac95f8cd29 [ 386.919308][T14441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 386.919328][T14441] RSP: 002b:00007fac96d51038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 386.919350][T14441] RAX: ffffffffffffffda RBX: 00007fac961a5fa0 RCX: 00007fac95f8cd29 [ 386.919363][T14441] RDX: 0000000020000040 RSI: 00000000406855c9 RDI: 0000000000000003 [ 386.919377][T14441] RBP: 00007fac96d51090 R08: 0000000000000000 R09: 0000000000000000 [ 386.919390][T14441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.919404][T14441] R13: 0000000000000000 R14: 00007fac961a5fa0 R15: 00007ffc03057ad8 [ 386.919424][T14441] [ 386.919439][T14441] ERROR: Out of memory at tomoyo_realpath_from_path. [ 388.493053][T14482] vhci_hcd: default hub control req: 7479 v7366 i0000 l0 [ 388.558756][T14486] FAULT_INJECTION: forcing a failure. [ 388.558756][T14486] name failslab, interval 1, probability 0, space 0, times 0 [ 388.584419][T14486] CPU: 0 UID: 0 PID: 14486 Comm: syz.4.2248 Not tainted 6.13.0-syzkaller-04541-gdf60eac9efe8 #0 [ 388.584451][T14486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 388.584466][T14486] Call Trace: [ 388.584472][T14486] [ 388.584480][T14486] dump_stack_lvl+0x16c/0x1f0 [ 388.584522][T14486] should_fail_ex+0x497/0x5b0 [ 388.584553][T14486] ? fs_reclaim_acquire+0xae/0x150 [ 388.584580][T14486] should_failslab+0xc2/0x120 [ 388.584602][T14486] __kmalloc_cache_noprof+0x68/0x420 [ 388.584630][T14486] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 388.584654][T14486] input_allocate_device+0x44/0x350 [ 388.584682][T14486] uinput_ioctl_handler.isra.0+0x897/0x1d70 [ 388.584705][T14486] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 388.584726][T14486] ? __pfx_lock_release+0x10/0x10 [ 388.584746][T14486] ? trace_lock_acquire+0x14e/0x1f0 [ 388.584774][T14486] ? __fget_files+0x40/0x3a0 [ 388.584801][T14486] ? __fget_files+0x206/0x3a0 [ 388.584829][T14486] ? __pfx_uinput_ioctl+0x10/0x10 [ 388.584849][T14486] __x64_sys_ioctl+0x190/0x200 [ 388.584872][T14486] do_syscall_64+0xcd/0x250 [ 388.584893][T14486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.584916][T14486] RIP: 0033:0x7fac95f8cd29 [ 388.584931][T14486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.584952][T14486] RSP: 002b:00007fac96d51038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 388.584974][T14486] RAX: ffffffffffffffda RBX: 00007fac961a5fa0 RCX: 00007fac95f8cd29 [ 388.584987][T14486] RDX: 0000000020000040 RSI: 00000000406855c9 RDI: 0000000000000003 [ 388.584999][T14486] RBP: 00007fac96d51090 R08: 0000000000000000 R09: 0000000000000000 [ 388.585011][T14486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.585023][T14486] R13: 0000000000000000 R14: 00007fac961a5fa0 R15: 00007ffc03057ad8 [ 388.585043][T14486] [ 389.574318][T14512] FAULT_INJECTION: forcing a failure. [ 389.574318][T14512] name failslab, interval 1, probability 0, space 0, times 0 [ 389.621633][T14512] CPU: 0 UID: 0 PID: 14512 Comm: syz.3.2257 Not tainted 6.13.0-syzkaller-04541-gdf60eac9efe8 #0 [ 389.621667][T14512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 389.621681][T14512] Call Trace: [ 389.621687][T14512] [ 389.621694][T14512] dump_stack_lvl+0x16c/0x1f0 [ 389.621731][T14512] should_fail_ex+0x497/0x5b0 [ 389.621763][T14512] ? fs_reclaim_acquire+0xae/0x150 [ 389.621790][T14512] should_failslab+0xc2/0x120 [ 389.621810][T14512] __kmalloc_node_track_caller_noprof+0xcf/0x520 [ 389.621844][T14512] ? snd_timer_instance_new+0x65/0x2e0 [ 389.621877][T14512] kstrdup+0x42/0xb0 [ 389.621902][T14512] snd_timer_instance_new+0x65/0x2e0 [ 389.621931][T14512] snd_seq_timer_open+0x1cd/0x5c0 [ 389.621956][T14512] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 389.621980][T14512] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 389.622009][T14512] ? trace_irq_enable.constprop.0+0xea/0x140 [ 389.622034][T14512] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 389.622066][T14512] queue_use+0xe3/0x250 [ 389.622096][T14512] snd_seq_queue_alloc+0x2e5/0x550 [ 389.622119][T14512] snd_seq_ioctl_create_queue+0xa9/0x310 [ 389.622147][T14512] snd_seq_kernel_client_ctl+0x107/0x1c0 [ 389.622176][T14512] alloc_seq_queue+0xc2/0x160 [ 389.622203][T14512] ? __pfx_alloc_seq_queue+0x10/0x10 [ 389.622243][T14512] ? lock_acquire+0x2f/0xb0 [ 389.622264][T14512] ? snd_seq_oss_midi_setup+0x1a/0x70 [ 389.622286][T14512] ? rcu_is_watching+0x12/0xc0 [ 389.622314][T14512] ? trace_irq_enable.constprop.0+0xea/0x140 [ 389.622339][T14512] snd_seq_oss_open+0x38c/0xa20 [ 389.622369][T14512] odev_open+0x6f/0x90 [ 389.622394][T14512] ? __pfx_odev_open+0x10/0x10 [ 389.622419][T14512] soundcore_open+0x409/0x580 [ 389.622447][T14512] ? __pfx_soundcore_open+0x10/0x10 [ 389.622473][T14512] chrdev_open+0x237/0x6a0 [ 389.622503][T14512] ? __pfx_apparmor_file_open+0x10/0x10 [ 389.622529][T14512] ? __pfx_chrdev_open+0x10/0x10 [ 389.622563][T14512] do_dentry_open+0xf59/0x1ea0 [ 389.622591][T14512] ? __pfx_chrdev_open+0x10/0x10 [ 389.622620][T14512] ? inode_permission+0xdd/0x5f0 [ 389.622643][T14512] vfs_open+0x82/0x3f0 [ 389.622662][T14512] ? may_open+0x1f2/0x400 [ 389.622684][T14512] path_openat+0x1e81/0x2d70 [ 389.622713][T14512] ? __pfx_path_openat+0x10/0x10 [ 389.622742][T14512] do_filp_open+0x20c/0x470 [ 389.622769][T14512] ? __pfx_do_filp_open+0x10/0x10 [ 389.622802][T14512] ? alloc_fd+0x41f/0x760 [ 389.622829][T14512] do_sys_openat2+0x17a/0x1e0 [ 389.622848][T14512] ? __pfx_do_sys_openat2+0x10/0x10 [ 389.622868][T14512] ? __pfx___might_resched+0x10/0x10 [ 389.622895][T14512] __x64_sys_openat+0x175/0x210 [ 389.622913][T14512] ? __pfx___x64_sys_openat+0x10/0x10 [ 389.622935][T14512] ? rcu_is_watching+0x12/0xc0 [ 389.622962][T14512] ? rcu_is_watching+0x12/0xc0 [ 389.622989][T14512] do_syscall_64+0xcd/0x250 [ 389.623008][T14512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.623031][T14512] RIP: 0033:0x7f1992b8cd29 [ 389.623047][T14512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 389.623066][T14512] RSP: 002b:00007f1993967038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 389.623087][T14512] RAX: ffffffffffffffda RBX: 00007f1992da5fa0 RCX: 00007f1992b8cd29 [ 389.623101][T14512] RDX: 0000000000000002 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 389.623114][T14512] RBP: 00007f1992c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 389.623125][T14512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 389.623137][T14512] R13: 0000000000000000 R14: 00007f1992da5fa0 R15: 00007ffc1646ee88 [ 389.623155][T14512] [ 390.368076][T14527] FAULT_INJECTION: forcing a failure. [ 390.368076][T14527] name failslab, interval 1, probability 0, space 0, times 0 [ 390.425247][T14527] CPU: 1 UID: 0 PID: 14527 Comm: syz.3.2259 Not tainted 6.13.0-syzkaller-04541-gdf60eac9efe8 #0 [ 390.425281][T14527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 390.425295][T14527] Call Trace: [ 390.425302][T14527] [ 390.425310][T14527] dump_stack_lvl+0x16c/0x1f0 [ 390.425347][T14527] should_fail_ex+0x497/0x5b0 [ 390.425378][T14527] ? fs_reclaim_acquire+0xae/0x150 [ 390.425406][T14527] should_failslab+0xc2/0x120 [ 390.425428][T14527] __kmalloc_cache_noprof+0x68/0x420 [ 390.425460][T14527] input_allocate_device+0xc5/0x350 [ 390.425488][T14527] uinput_ioctl_handler.isra.0+0x897/0x1d70 [ 390.425513][T14527] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 390.425536][T14527] ? __pfx_lock_release+0x10/0x10 [ 390.425558][T14527] ? trace_lock_acquire+0x14e/0x1f0 [ 390.425587][T14527] ? __fget_files+0x40/0x3a0 [ 390.425618][T14527] ? __fget_files+0x206/0x3a0 [ 390.425646][T14527] ? __pfx_uinput_ioctl+0x10/0x10 [ 390.425666][T14527] __x64_sys_ioctl+0x190/0x200 [ 390.425691][T14527] do_syscall_64+0xcd/0x250 [ 390.425714][T14527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.425739][T14527] RIP: 0033:0x7f1992b8cd29 [ 390.425755][T14527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.425776][T14527] RSP: 002b:00007f1993967038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 390.425798][T14527] RAX: ffffffffffffffda RBX: 00007f1992da5fa0 RCX: 00007f1992b8cd29 [ 390.425813][T14527] RDX: 0000000020000040 RSI: 00000000406855c9 RDI: 0000000000000003 [ 390.425826][T14527] RBP: 00007f1993967090 R08: 0000000000000000 R09: 0000000000000000 [ 390.425839][T14527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.425851][T14527] R13: 0000000000000000 R14: 00007f1992da5fa0 R15: 00007ffc1646ee88 [ 390.425871][T14527] [ 390.849612][T14535] openvswitch: ovs_: Dropping previously announced user features [ 391.290568][T14554] FAULT_INJECTION: forcing a failure. [ 391.290568][T14554] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 391.315382][T14554] CPU: 1 UID: 0 PID: 14554 Comm: syz.3.2268 Not tainted 6.13.0-syzkaller-04541-gdf60eac9efe8 #0 [ 391.315416][T14554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 391.315430][T14554] Call Trace: [ 391.315436][T14554] [ 391.315444][T14554] dump_stack_lvl+0x16c/0x1f0 [ 391.315482][T14554] should_fail_ex+0x497/0x5b0 [ 391.315515][T14554] ? fs_reclaim_acquire+0xae/0x150 [ 391.315544][T14554] should_fail_alloc_page+0xe7/0x130 [ 391.315568][T14554] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 391.315601][T14554] __alloc_pages_noprof+0x18e/0x2470 [ 391.315632][T14554] ? up_write+0x1b2/0x520 [ 391.315656][T14554] ? process_measurement+0x1e8/0x2370 [ 391.315690][T14554] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 391.315723][T14554] ? __pfx_process_measurement+0x10/0x10 [ 391.315753][T14554] ? tomoyo_check_open_permission+0x20f/0x3c0 [ 391.315786][T14554] ? rcu_is_watching+0x12/0xc0 [ 391.315814][T14554] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 391.315841][T14554] ? policy_nodemask+0xea/0x4e0 [ 391.315863][T14554] alloc_pages_mpol_noprof+0x2c8/0x620 [ 391.315889][T14554] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 391.315913][T14554] ? __mutex_trylock_common+0xea/0x250 [ 391.315938][T14554] ? __pfx___mutex_trylock_common+0x10/0x10 [ 391.315962][T14554] ? usb_device_read+0x1ec/0x330 [ 391.315996][T14554] get_free_pages_noprof+0xc/0x40 [ 391.316020][T14554] usb_device_dump+0xcf/0x2460 [ 391.316050][T14554] ? __mutex_lock+0x1cc/0xb10 [ 391.316077][T14554] ? idr_get_next_ul+0x197/0x2e0 [ 391.316109][T14554] ? usb_device_read+0x1ec/0x330 [ 391.316137][T14554] ? __pfx___mutex_lock+0x10/0x10 [ 391.316155][T14554] ? aa_file_perm+0x142/0xfe0 [ 391.316185][T14554] ? idr_get_next+0xed/0x150 [ 391.316214][T14554] ? __pfx_lock_release+0x10/0x10 [ 391.316237][T14554] usb_device_read+0x22b/0x330 [ 391.316265][T14554] ? kstrtouint+0xde/0x130 [ 391.316290][T14554] ? __pfx_usb_device_read+0x10/0x10 [ 391.316321][T14554] ? __debugfs_file_get+0x43d/0x5d0 [ 391.316346][T14554] ? __pfx___debugfs_file_get+0x10/0x10 [ 391.316372][T14554] ? apparmor_file_permission+0x251/0x400 [ 391.316398][T14554] full_proxy_read+0xfd/0x1b0 [ 391.316422][T14554] ? __pfx_full_proxy_read+0x10/0x10 [ 391.316447][T14554] vfs_readv+0x6bf/0x890 [ 391.316472][T14554] ? fdget_pos+0x267/0x390 [ 391.316504][T14554] ? __pfx_vfs_readv+0x10/0x10 [ 391.316529][T14554] ? __mutex_lock+0x1cc/0xb10 [ 391.316550][T14554] ? rcu_is_watching+0x12/0xc0 [ 391.316580][T14554] ? __pfx___mutex_lock+0x10/0x10 [ 391.316601][T14554] ? trace_lock_acquire+0x14e/0x1f0 [ 391.316634][T14554] ? __fget_files+0x206/0x3a0 [ 391.316663][T14554] ? do_readv+0x133/0x340 [ 391.316685][T14554] do_readv+0x133/0x340 [ 391.316709][T14554] ? __pfx_do_readv+0x10/0x10 [ 391.316734][T14554] ? rcu_is_watching+0x12/0xc0 [ 391.316761][T14554] ? rcu_is_watching+0x12/0xc0 [ 391.316790][T14554] do_syscall_64+0xcd/0x250 [ 391.316812][T14554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.316835][T14554] RIP: 0033:0x7f1992b8cd29 [ 391.316851][T14554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.316871][T14554] RSP: 002b:00007f1993967038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 391.316892][T14554] RAX: ffffffffffffffda RBX: 00007f1992da5fa0 RCX: 00007f1992b8cd29 [ 391.316908][T14554] RDX: 0000000000000006 RSI: 0000000020000040 RDI: 0000000000000003 [ 391.316922][T14554] RBP: 00007f1993967090 R08: 0000000000000000 R09: 0000000000000000 [ 391.316935][T14554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.316948][T14554] R13: 0000000000000000 R14: 00007f1992da5fa0 R15: 00007ffc1646ee88 [ 391.316968][T14554] [ 391.753336][ C1] vkms_vblank_simulate: vblank timer overrun [ 392.099102][T14567] openvswitch: ovs_: Dropping previously announced user features [ 392.401172][T14582] kAFS: bad VL server IP address [ 392.704501][T14590] caif:caif_disconnect_client(): nothing to disconnect [ 392.833604][T14596] FAULT_INJECTION: forcing a failure. [ 392.833604][T14596] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 392.866327][T14596] CPU: 1 UID: 0 PID: 14596 Comm: syz.4.2280 Not tainted 6.13.0-syzkaller-04541-gdf60eac9efe8 #0 [ 392.866356][T14596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 392.866369][T14596] Call Trace: [ 392.866375][T14596] [ 392.866383][T14596] dump_stack_lvl+0x16c/0x1f0 [ 392.866421][T14596] should_fail_ex+0x497/0x5b0 [ 392.866456][T14596] _copy_to_user+0x32/0xd0 [ 392.866479][T14596] usb_device_dump+0x1ae2/0x2460 [ 392.866521][T14596] usb_device_read+0x22b/0x330 [ 392.866549][T14596] ? kstrtouint+0xde/0x130 [ 392.866575][T14596] ? __pfx_usb_device_read+0x10/0x10 [ 392.866614][T14596] ? __debugfs_file_get+0x43d/0x5d0 [ 392.866639][T14596] ? __pfx___debugfs_file_get+0x10/0x10 [ 392.866666][T14596] ? apparmor_file_permission+0x251/0x400 [ 392.866694][T14596] full_proxy_read+0xfd/0x1b0 [ 392.866718][T14596] ? __pfx_full_proxy_read+0x10/0x10 [ 392.866743][T14596] vfs_readv+0x6bf/0x890 [ 392.866769][T14596] ? fdget_pos+0x267/0x390 [ 392.866801][T14596] ? __pfx_vfs_readv+0x10/0x10 [ 392.866825][T14596] ? __mutex_lock+0x1cc/0xb10 [ 392.866847][T14596] ? rcu_is_watching+0x12/0xc0 [ 392.866878][T14596] ? __pfx___mutex_lock+0x10/0x10 [ 392.866898][T14596] ? trace_lock_acquire+0x14e/0x1f0 [ 392.866935][T14596] ? __fget_files+0x206/0x3a0 [ 392.866966][T14596] ? do_readv+0x133/0x340 [ 392.866990][T14596] do_readv+0x133/0x340 [ 392.867016][T14596] ? __pfx_do_readv+0x10/0x10 [ 392.867041][T14596] ? rcu_is_watching+0x12/0xc0 [ 392.867070][T14596] ? rcu_is_watching+0x12/0xc0 [ 392.867099][T14596] do_syscall_64+0xcd/0x250 [ 392.867122][T14596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.867149][T14596] RIP: 0033:0x7fac95f8cd29 [ 392.867166][T14596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.867188][T14596] RSP: 002b:00007fac96d51038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 392.867210][T14596] RAX: ffffffffffffffda RBX: 00007fac961a5fa0 RCX: 00007fac95f8cd29 [ 392.867225][T14596] RDX: 0000000000000006 RSI: 0000000020000040 RDI: 0000000000000003 [ 392.867238][T14596] RBP: 00007fac96d51090 R08: 0000000000000000 R09: 0000000000000000 [ 392.867251][T14596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 392.867264][T14596] R13: 0000000000000000 R14: 00007fac961a5fa0 R15: 00007ffc03057ad8 [ 392.867284][T14596] [ 393.152844][ C1] vkms_vblank_simulate: vblank timer overrun [ 393.219981][T14593] ERROR: Out of memory at tomoyo_memory_ok. [ 393.552284][T14613] openvswitch: ovs_: Dropping previously announced user features [ 393.881579][T14623] caif:caif_disconnect_client(): nothing to disconnect [ 393.966998][T14625] ERROR: Out of memory at tomoyo_memory_ok. [ 394.501336][T14642] openvswitch: ovs_: Dropping previously announced user features [ 394.772363][T14651] FAULT_INJECTION: forcing a failure. [ 394.772363][T14651] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 394.804797][T14651] CPU: 1 UID: 0 PID: 14651 Comm: syz.1.2296 Not tainted 6.13.0-syzkaller-04541-gdf60eac9efe8 #0 [ 394.804830][T14651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 394.804844][T14651] Call Trace: [ 394.804850][T14651] [ 394.804858][T14651] dump_stack_lvl+0x16c/0x1f0 [ 394.804898][T14651] should_fail_ex+0x497/0x5b0 [ 394.804931][T14651] ? fs_reclaim_acquire+0xae/0x150 [ 394.804960][T14651] should_fail_alloc_page+0xe7/0x130 [ 394.804984][T14651] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 394.805012][T14651] ? __kernel_text_address+0xd/0x40 [ 394.805039][T14651] __alloc_pages_noprof+0x18e/0x2470 [ 394.805074][T14651] ? rcu_is_watching+0x12/0xc0 [ 394.805103][T14651] ? lock_release+0x4e2/0x6f0 [ 394.805125][T14651] ? debug_check_no_obj_freed+0x327/0x600 [ 394.805153][T14651] ? __pfx_lock_release+0x10/0x10 [ 394.805176][T14651] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 394.805210][T14651] ? rcu_is_watching+0x12/0xc0 [ 394.805237][T14651] ? trace_irq_enable.constprop.0+0xea/0x140 [ 394.805265][T14651] ? debug_check_no_obj_freed+0x327/0x600 [ 394.805291][T14651] ? rcu_is_watching+0x12/0xc0 [ 394.805321][T14651] ? rcu_is_watching+0x12/0xc0 [ 394.805348][T14651] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 394.805375][T14651] ? policy_nodemask+0xea/0x4e0 [ 394.805403][T14651] alloc_pages_mpol_noprof+0x2c8/0x620 [ 394.805430][T14651] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 394.805455][T14651] ? __mutex_trylock_common+0xea/0x250 [ 394.805480][T14651] ? __pfx___mutex_trylock_common+0x10/0x10 [ 394.805505][T14651] ? usb_device_read+0x1ec/0x330 [ 394.805537][T14651] get_free_pages_noprof+0xc/0x40 [ 394.805562][T14651] usb_device_dump+0xcf/0x2460 [ 394.805591][T14651] ? __mutex_lock+0x1cc/0xb10 [ 394.805612][T14651] ? idr_get_next_ul+0x197/0x2e0 [ 394.805644][T14651] ? usb_device_read+0x1ec/0x330 [ 394.805673][T14651] ? __pfx___mutex_lock+0x10/0x10 [ 394.805697][T14651] ? idr_get_next+0xed/0x150 [ 394.805731][T14651] usb_device_read+0x22b/0x330 [ 394.805762][T14651] ? __pfx_usb_device_read+0x10/0x10 [ 394.805793][T14651] ? __debugfs_file_get+0x43d/0x5d0 [ 394.805819][T14651] ? __pfx___debugfs_file_get+0x10/0x10 [ 394.805846][T14651] ? apparmor_file_permission+0x251/0x400 [ 394.805874][T14651] full_proxy_read+0xfd/0x1b0 [ 394.805898][T14651] ? __pfx_full_proxy_read+0x10/0x10 [ 394.805923][T14651] vfs_readv+0x6bf/0x890 [ 394.805948][T14651] ? fdget_pos+0x267/0x390 [ 394.805980][T14651] ? __pfx_vfs_readv+0x10/0x10 [ 394.806005][T14651] ? __mutex_lock+0x1cc/0xb10 [ 394.806026][T14651] ? rcu_is_watching+0x12/0xc0 [ 394.806055][T14651] ? __pfx___mutex_lock+0x10/0x10 [ 394.806076][T14651] ? trace_lock_acquire+0x14e/0x1f0 [ 394.806111][T14651] ? __fget_files+0x206/0x3a0 [ 394.806142][T14651] ? do_readv+0x133/0x340 [ 394.806166][T14651] do_readv+0x133/0x340 [ 394.806191][T14651] ? __pfx_do_readv+0x10/0x10 [ 394.806216][T14651] ? rcu_is_watching+0x12/0xc0 [ 394.806243][T14651] ? rcu_is_watching+0x12/0xc0 [ 394.806273][T14651] do_syscall_64+0xcd/0x250 [ 394.806296][T14651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.806322][T14651] RIP: 0033:0x7f7ce2b8cd29 [ 394.806338][T14651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 394.806359][T14651] RSP: 002b:00007f7ce09f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 394.806380][T14651] RAX: ffffffffffffffda RBX: 00007f7ce2da5fa0 RCX: 00007f7ce2b8cd29 [ 394.806403][T14651] RDX: 0000000000000006 RSI: 0000000020000040 RDI: 0000000000000003 [ 394.806416][T14651] RBP: 00007f7ce09f6090 R08: 0000000000000000 R09: 0000000000000000 [ 394.806429][T14651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.806442][T14651] R13: 0000000000000000 R14: 00007f7ce2da5fa0 R15: 00007ffc19c64a18 [ 394.806462][T14651] [ 394.839940][T14649] HSR: entered promiscuous mode [ 394.904762][T14653] kAFS: bad VL server IP address [ 395.099701][T14660] caif:caif_disconnect_client(): nothing to disconnect [ 395.516799][T14669] ERROR: Out of memory at tomoyo_memory_ok. [ 395.678422][T14677] openvswitch: ovs_: Dropping previously announced user features [ 395.992158][T14692] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2313'. [ 396.745149][T14719] FAULT_INJECTION: forcing a failure. [ 396.745149][T14719] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 396.780611][T14719] CPU: 0 UID: 0 PID: 14719 Comm: syz.0.2321 Not tainted 6.13.0-syzkaller-04541-gdf60eac9efe8 #0 [ 396.780640][T14719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 396.780652][T14719] Call Trace: [ 396.780658][T14719] [ 396.780666][T14719] dump_stack_lvl+0x16c/0x1f0 [ 396.780702][T14719] should_fail_ex+0x497/0x5b0 [ 396.780733][T14719] _copy_to_user+0x32/0xd0 [ 396.780754][T14719] usb_device_dump+0x1ae2/0x2460 [ 396.780789][T14719] usb_device_read+0x22b/0x330 [ 396.780817][T14719] ? __pfx_usb_device_read+0x10/0x10 [ 396.780845][T14719] ? __debugfs_file_get+0x43d/0x5d0 [ 396.780870][T14719] ? __pfx___debugfs_file_get+0x10/0x10 [ 396.780894][T14719] ? apparmor_file_permission+0x251/0x400 [ 396.780922][T14719] full_proxy_read+0xfd/0x1b0 [ 396.780946][T14719] ? __pfx_full_proxy_read+0x10/0x10 [ 396.780972][T14719] vfs_readv+0x6bf/0x890 [ 396.780998][T14719] ? fdget_pos+0x267/0x390 [ 396.781030][T14719] ? __pfx_vfs_readv+0x10/0x10 [ 396.781055][T14719] ? __mutex_lock+0x1cc/0xb10 [ 396.781077][T14719] ? rcu_is_watching+0x12/0xc0 [ 396.781108][T14719] ? __pfx___mutex_lock+0x10/0x10 [ 396.781129][T14719] ? trace_lock_acquire+0x14e/0x1f0 [ 396.781165][T14719] ? __fget_files+0x206/0x3a0 [ 396.781197][T14719] ? do_readv+0x133/0x340 [ 396.781229][T14719] do_readv+0x133/0x340 [ 396.781255][T14719] ? __pfx_do_readv+0x10/0x10 [ 396.781280][T14719] ? rcu_is_watching+0x12/0xc0 [ 396.781308][T14719] ? rcu_is_watching+0x12/0xc0 [ 396.781338][T14719] do_syscall_64+0xcd/0x250 [ 396.781361][T14719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.781386][T14719] RIP: 0033:0x7fca3c98cd29 [ 396.781404][T14719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.781425][T14719] RSP: 002b:00007fca3d746038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 396.781447][T14719] RAX: ffffffffffffffda RBX: 00007fca3cba5fa0 RCX: 00007fca3c98cd29 [ 396.781463][T14719] RDX: 0000000000000006 RSI: 0000000020000040 RDI: 0000000000000003 [ 396.781476][T14719] RBP: 00007fca3d746090 R08: 0000000000000000 R09: 0000000000000000 [ 396.781490][T14719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.781502][T14719] R13: 0000000000000000 R14: 00007fca3cba5fa0 R15: 00007fff7689ab38 [ 396.781523][T14719] [ 397.805301][T14739] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2336'. [ 397.855227][T14739] bond0: (slave bond_slave_1): Releasing backup interface [ 398.287211][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 398.295903][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 398.304792][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 398.325797][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 398.340108][ T5842] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 398.351954][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 398.418314][T14752] Invalid ELF header magic: != ELF [ 398.523825][T14749] chnl_net:caif_netlink_parms(): no params data found [ 398.710014][T14749] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.735726][T14749] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.745491][T14749] bridge_slave_0: entered allmulticast mode [ 398.753354][T14749] bridge_slave_0: entered promiscuous mode [ 398.768482][T13356] bridge_slave_1: left allmulticast mode [ 398.776508][T14760] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2332'. [ 398.805229][T13356] bridge_slave_1: left promiscuous mode [ 398.816563][T13356] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.834278][T13356] bridge_slave_0: left allmulticast mode [ 398.863937][T13356] bridge_slave_0: left promiscuous mode [ 398.874148][T13356] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.922746][T14749] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.942587][T14749] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.962548][T14749] bridge_slave_1: entered allmulticast mode [ 398.970907][T14749] bridge_slave_1: entered promiscuous mode [ 399.030636][T14767] mtrr: base(0x99a23473000) is not aligned on a size(0xf87ff173000) boundary [ 399.199183][T14749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.218535][T14749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.305949][T13356] ovs_: left promiscuous mode [ 399.312882][T14749] team0: Port device team_slave_0 added [ 399.331087][T14749] team0: Port device team_slave_1 added [ 399.387022][T14749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.424640][T14749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.520565][T14749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.590850][T14749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.614479][T14749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.665123][T14749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.444604][ T5842] Bluetooth: hci2: command tx timeout [ 402.524682][ T5842] Bluetooth: hci2: command tx timeout [ 404.604706][ T5842] Bluetooth: hci2: command tx timeout [ 406.684721][ T5842] Bluetooth: hci2: command tx timeout [ 414.722310][ T7789] Process accounting paused [ 414.818155][ T5841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 414.827773][ T5841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 414.836490][ T5841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 414.845719][ T5841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 414.854627][ T5841] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 414.863211][ T5841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 415.828271][ T5841] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 415.837122][ T5841] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 415.845877][ T5841] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 415.855080][ T5841] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 415.863884][ T5841] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 415.872778][ T5841] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 416.885943][ T5841] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 416.894834][ T5841] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 416.903591][ T5841] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 416.914329][ T5841] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 416.923240][ T5841] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 416.924659][ T54] Bluetooth: hci5: command tx timeout [ 416.933555][ T5841] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 417.884687][ T5842] Bluetooth: hci6: command tx timeout [ 419.004656][ T5842] Bluetooth: hci7: command tx timeout [ 419.005100][ T5841] Bluetooth: hci5: command tx timeout [ 419.965087][ T5841] Bluetooth: hci6: command tx timeout [ 421.084732][ T5841] Bluetooth: hci7: command tx timeout [ 421.084770][ T5842] Bluetooth: hci5: command tx timeout [ 422.044696][ T5842] Bluetooth: hci6: command tx timeout [ 423.164726][ T5842] Bluetooth: hci5: command tx timeout [ 423.166165][ T5841] Bluetooth: hci7: command tx timeout [ 424.124801][ T5841] Bluetooth: hci6: command tx timeout [ 425.244663][ T5841] Bluetooth: hci7: command tx timeout [ 440.445933][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.453606][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 458.352658][ T5842] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 458.361312][ T5842] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 458.369895][ T5842] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 458.379014][ T5842] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 458.387873][ T5842] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 458.396599][ T5842] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 460.444722][ T5841] Bluetooth: hci8: command tx timeout [ 462.524742][ T5841] Bluetooth: hci8: command tx timeout [ 464.604641][ T5841] Bluetooth: hci8: command tx timeout [ 466.695127][ T5841] Bluetooth: hci8: command tx timeout [ 474.873788][ T5842] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 474.883630][ T5842] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 474.892325][ T5842] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 474.901412][ T5842] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 474.910648][ T5842] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 474.919343][ T5842] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 475.887768][ T5841] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 475.897351][ T5841] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 475.906091][ T5841] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 475.915302][ T5841] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 475.924256][ T5841] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 475.933130][ T5841] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 477.004732][ T5842] Bluetooth: hci9: command tx timeout [ 477.366607][ T5841] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 477.375506][ T5841] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 477.384229][ T5841] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 477.393378][ T5841] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 477.402323][ T5841] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 477.411396][ T5841] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 477.964633][ T5842] Bluetooth: hci10: command tx timeout [ 479.084639][ T5842] Bluetooth: hci9: command tx timeout [ 479.484626][ T5842] Bluetooth: hci11: command tx timeout [ 480.044664][ T5842] Bluetooth: hci10: command tx timeout [ 481.164640][ T5842] Bluetooth: hci9: command tx timeout [ 481.564630][ T5842] Bluetooth: hci11: command tx timeout [ 482.124666][ T5842] Bluetooth: hci10: command tx timeout [ 483.244597][ T5842] Bluetooth: hci9: command tx timeout [ 483.644653][ T5842] Bluetooth: hci11: command tx timeout [ 484.204666][ T5842] Bluetooth: hci10: command tx timeout [ 485.724650][ T5842] Bluetooth: hci11: command tx timeout [ 501.885885][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.893516][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 518.424076][ T5841] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 518.432895][ T5841] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 518.441730][ T5841] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 518.451069][ T5841] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 518.460345][ T5841] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 518.469151][ T5841] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 520.524639][ T5841] Bluetooth: hci12: command tx timeout [ 522.604671][ T5842] Bluetooth: hci12: command tx timeout [ 524.444643][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 524.684668][ T5841] Bluetooth: hci12: command tx timeout [ 526.764683][ T5841] Bluetooth: hci12: command tx timeout [ 534.941373][ T5842] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 534.950165][ T5842] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 534.959390][ T5842] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 534.968569][ T5842] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 534.977574][ T5842] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 534.986289][ T5842] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 535.961500][ T5841] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 535.970358][ T5841] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 535.979134][ T5841] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 535.988772][ T5841] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 535.997812][ T5841] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 536.006689][ T5841] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 537.004727][ T5841] Bluetooth: hci13: command tx timeout [ 537.432500][ T5842] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 537.441380][ T5842] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 537.450126][ T5842] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 537.459316][ T5842] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 537.468191][ T5842] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 537.477411][ T5842] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 538.044639][T14859] Bluetooth: hci14: command tx timeout [ 539.084605][T14859] Bluetooth: hci13: command tx timeout [ 539.564664][T14859] Bluetooth: hci15: command tx timeout [ 539.804777][T14859] Bluetooth: hci7: command 0x0406 tx timeout [ 539.805450][T14858] Bluetooth: hci5: command 0x0406 tx timeout [ 539.812318][T14859] Bluetooth: hci6: command 0x0406 tx timeout [ 540.124606][ T54] Bluetooth: hci14: command tx timeout [ 541.164653][ T54] Bluetooth: hci13: command tx timeout [ 541.644706][ T54] Bluetooth: hci15: command tx timeout [ 542.204724][ T54] Bluetooth: hci14: command tx timeout [ 543.244638][ T54] Bluetooth: hci13: command tx timeout [ 543.724637][ T54] Bluetooth: hci15: command tx timeout [ 544.284631][ T54] Bluetooth: hci14: command tx timeout [ 545.804656][ T54] Bluetooth: hci15: command tx timeout [ 555.004581][ T30] INFO: task kworker/0:0:8 blocked for more than 143 seconds. [ 555.014190][ T30] Not tainted 6.13.0-syzkaller-04541-gdf60eac9efe8 #0 [ 555.023022][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 555.033447][ T30] task:kworker/0:0 state:D stack:26720 pid:8 tgid:8 ppid:2 flags:0x00004000 [ 555.045718][ T30] Workqueue: events ovs_dp_masks_rebalance SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 555.052859][ T30] Call Trace: [ 555.056972][ T30] [ 555.062270][ T30] __schedule+0x1142/0x5b60 [ 555.067738][ T30] ? __pfx_lock_release+0x10/0x10 [ 555.073788][ T30] ? debug_object_activate+0x149/0x4a0 [ 555.080373][ T30] ? rcu_is_watching+0x12/0xc0 [ 555.086142][ T30] ? __pfx___schedule+0x10/0x10 [ 555.092387][ T30] ? lock_release+0x4e2/0x6f0 [ 555.098041][ T30] ? schedule+0x298/0x350 [ 555.103245][ T30] ? __pfx_lock_release+0x10/0x10 [ 555.110317][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 555.117420][ T30] ? rcu_is_watching+0x12/0xc0 [ 555.123162][ T30] ? trace_irq_enable.constprop.0+0xea/0x140 [ 555.130462][ T30] schedule+0xe7/0x350 [ 555.136054][ T30] schedule_preempt_disabled+0x13/0x30 [ 555.142653][ T30] __mutex_lock+0x6bd/0xb10 [ 555.148169][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 555.156459][ T30] ? ovs_dp_masks_rebalance+0x24/0xf0 [ 555.162926][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 555.169528][ T30] ? rcu_is_watching+0x12/0xc0 [ 555.176292][ T30] ? rcu_is_watching+0x12/0xc0 [ 555.182025][ T30] ? trace_lock_acquire+0x14e/0x1f0 [ 555.188395][ T30] ? ovs_dp_masks_rebalance+0x24/0xf0 [ 555.195844][ T30] ovs_dp_masks_rebalance+0x24/0xf0 [ 555.202208][ T30] process_one_work+0x958/0x1b30 [ 555.208255][ T30] ? __pfx_process_one_work+0x10/0x10 [ 555.216543][ T30] ? rcu_is_watching+0x12/0xc0 [ 555.222304][ T30] ? assign_work+0x1a0/0x250 [ 555.228338][ T30] worker_thread+0x6c8/0xf00 [ 555.233869][ T30] ? __pfx_worker_thread+0x10/0x10 [ 555.241496][ T30] kthread+0x3af/0x750 [ 555.246972][ T30] ? __pfx_kthread+0x10/0x10 [ 555.252834][ T30] ? lock_acquire+0x2f/0xb0 [ 555.258403][ T30] ? __pfx_kthread+0x10/0x10 [ 555.263920][ T30] ret_from_fork+0x45/0x80 [ 555.269402][ T30] ? __pfx_kthread+0x10/0x10 [ 555.275042][ T30] ret_from_fork_asm+0x1a/0x30 [ 555.280785][ T30] [ 555.284664][ T30] INFO: task kworker/0:1:9 blocked for more than 143 seconds. [ 555.293613][ T30] Not tainted 6.13.0-syzkaller-04541-gdf60eac9efe8 #0 [ 555.302564][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 555.313979][ T30] task:kworker/0:1 state:D stack:25168 pid:9 tgid:9 ppid:2 flags:0x00004000 [ 555.326701][ T30] Workqueue: events reg_todo [ 555.332235][ T30] Call Trace: [ 555.336473][ T30] [ 555.340020][ T30] __schedule+0x1142/0x5b60 [ 555.345873][ T30] ? trace_sched_wakeup+0xe8/0x140 [ 555.352017][ T30] ? do_raw_spin_unlock+0x172/0x230 [ 555.386220][ T30] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 555.393236][ T30] ? rcu_is_watching+0x12/0xc0 [ 555.399725][ T30] ? __pfx___schedule+0x10/0x10 [ 555.405761][ T30] ? lock_release+0x4e2/0x6f0 [ 555.411377][ T30] ? schedule+0x298/0x350 [ 555.417111][ T30] ? __pfx_lock_release+0x10/0x10 [ 555.423178][ T30] ? rcu_is_watching+0x12/0xc0 [ 555.428956][ T30] ? trace_irq_enable.constprop.0+0xea/0x140 [ 555.436155][ T30] schedule+0xe7/0x350 [ 555.441019][ T30] schedule_preempt_disabled+0x13/0x30 [ 555.447622][ T30] __mutex_lock+0x6bd/0xb10 [ 555.453024][ T30] ? __pfx_lock_release+0x10/0x10 [ 555.459254][ T30] ? reg_process_self_managed_hints+0x95/0x1f0 [ 555.466695][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 555.472732][ T30] ? lock_release+0x4e2/0x6f0 [ 555.478369][ T30] ? do_raw_spin_lock+0x12d/0x2c0 [ 555.484410][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 555.491126][ T30] ? reg_process_self_managed_hints+0x95/0x1f0 [ 555.498543][ T30] reg_process_self_managed_hints+0x95/0x1f0 [ 555.505737][ T30] reg_todo+0x684/0x910 [ 555.510702][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 555.517153][ T30] ? process_one_work+0x8bb/0x1b30 [ 555.523705][ T30] ? lock_acquire+0x2f/0xb0 [ 555.529145][ T30] ? process_one_work+0x8bb/0x1b30 [ 555.535305][ T30] process_one_work+0x958/0x1b30 [ 555.541227][ T30] ? __pfx_crda_timeout_work+0x10/0x10 [ 555.547806][ T30] ? __pfx_process_one_work+0x10/0x10 [ 555.554265][ T30] ? rcu_is_watching+0x12/0xc0 [ 555.560310][ T30] ? assign_work+0x1a0/0x250 [ 555.565946][ T30] worker_thread+0x6c8/0xf00 [ 555.571482][ T30] ? __pfx_worker_thread+0x10/0x10 [ 555.577651][ T30] kthread+0x3af/0x750 [ 555.582523][ T30] ? __pfx_kthread+0x10/0x10 [ 555.588043][ T30] ? lock_acquire+0x2f/0xb0 [ 555.593441][ T30] ? __pfx_kthread+0x10/0x10 [ 555.598982][ T30] ret_from_fork+0x45/0x80 [ 555.604286][ T30] ? __pfx_kthread+0x10/0x10 [ 555.609821][ T30] ret_from_fork_asm+0x1a/0x30 [ 555.615568][ T30] [ 555.619189][ T30] INFO: task kworker/1:0:25 blocked for more than 143 seconds. [ 555.628792][ T30] Not tainted 6.13.0-syzkaller-04541-gdf60eac9efe8 #0 [ 555.637562][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 555.648106][ T30] task:kworker/1:0 state:D stack:25248 pid:25 tgid:25 ppid:2 flags:0x00004000 [ 555.660499][ T30] Workqueue: events ovs_dp_masks_rebalance [ 555.667670][ T30] Call Trace: [ 555.671594][ T30] [ 555.675133][ T30] __schedule+0x1142/0x5b60 [ 555.680607][ T30] ? rcu_is_watching+0x12/0xc0 [ 555.686343][ T30] ? rcu_is_watching+0x12/0xc0 [ 555.692070][ T30] ? __pfx___schedule+0x10/0x10 [ 555.697909][ T30] ? lock_release+0x4e2/0x6f0 [ 555.703524][ T30] ? schedule+0x298/0x350 [ 555.708738][ T30] ? __pfx_lock_release+0x10/0x10 [ 555.714806][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 555.721251][ T30] ? rcu_is_watching+0x12/0xc0 [ 555.727679][ T30] ? trace_irq_enable.constprop.0+0xea/0x140 [ 555.734894][ T30] schedule+0xe7/0x350 [ 555.739786][ T30] schedule_preempt_disabled+0x13/0x30 [ 555.746374][ T30] __mutex_lock+0x6bd/0xb10 [ 555.751879][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 555.758359][ T30] ? ovs_dp_masks_rebalance+0x24/0xf0 [ 555.764998][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 555.771025][ T30] ? rcu_is_watching+0x12/0xc0 [ 555.776766][ T30] ? rcu_is_watching+0x12/0xc0 [ 555.783108][ T30] ? trace_lock_acquire+0x14e/0x1f0 [ 555.789361][ T30] ? ovs_dp_masks_rebalance+0x24/0xf0 [ 555.795837][ T30] ovs_dp_masks_rebalance+0x24/0xf0 [ 555.802076][ T30] process_one_work+0x958/0x1b30 [ 555.808012][ T30] ? __pfx_process_one_work+0x10/0x10 [ 555.814540][ T30] ? rcu_is_watching+0x12/0xc0 [ 555.820257][ T30] ? assign_work+0x1a0/0x250 [ 555.826312][ T30] worker_thread+0x6c8/0xf00 [ 555.831835][ T30] ? __pfx_worker_thread+0x10/0x10 [ 555.838195][ T30] kthread+0x3af/0x750 [ 555.843183][ T30] ? __pfx_kthread+0x10/0x10 [ 555.848708][ T30] ? lock_acquire+0x2f/0xb0 [ 555.854107][ T30] ? __pfx_kthread+0x10/0x10 [ 555.859639][ T30] ret_from_fork+0x45/0x80 [ 555.864959][ T30] ? __pfx_kthread+0x10/0x10 [ 555.870651][ T30] ret_from_fork_asm+0x1a/0x30 [ 555.876415][ T30] [ 555.880045][ T30] INFO: task kworker/1:1:46 blocked for more than 144 seconds. [ 555.889131][ T30] Not tainted 6.13.0-syzkaller-04541-gdf60eac9efe8 #0 [ 555.897901][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 555.908336][ T30] task:kworker/1:1 state:D stack:26304 pid:46 tgid:46 ppid:2 flags:0x00004000 [ 555.920580][ T30] Workqueue: events ovs_dp_masks_rebalance [ 555.928104][ T30] Call Trace: [ 555.932046][ T30] [ 555.935580][ T30] __schedule+0x1142/0x5b60 [ 555.940984][ T30] ? trace_sched_wakeup+0xe8/0x140 [ 555.947136][ T30] ? do_raw_spin_unlock+0x172/0x230 [ 555.953369][ T30] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 555.960356][ T30] ? rcu_is_watching+0x12/0xc0 [ 555.966091][ T30] ? __pfx___schedule+0x10/0x10 [ 555.972050][ T30] ? lock_release+0x4e2/0x6f0 [ 555.977698][ T30] ? schedule+0x298/0x350 [ 555.982903][ T30] ? __pfx_lock_release+0x10/0x10 [ 555.988966][ T30] ? rcu_is_watching+0x12/0xc0 [ 555.994701][ T30] ? trace_irq_enable.constprop.0+0xea/0x140 [ 556.001871][ T30] schedule+0xe7/0x350 [ 556.006784][ T30] schedule_preempt_disabled+0x13/0x30 [ 556.013544][ T30] __mutex_lock+0x6bd/0xb10 [ 556.018971][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 556.025442][ T30] ? ovs_dp_masks_rebalance+0x24/0xf0 [ 556.032325][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 556.038504][ T30] ? rcu_is_watching+0x12/0xc0 [ 556.044228][ T30] ? rcu_is_watching+0x12/0xc0 [ 556.049957][ T30] ? trace_lock_acquire+0x14e/0x1f0 [ 556.056214][ T30] ? ovs_dp_masks_rebalance+0x24/0xf0 [ 556.062654][ T30] ovs_dp_masks_rebalance+0x24/0xf0 [ 556.068914][ T30] process_one_work+0x958/0x1b30 [ 556.075071][ T30] ? __pfx_process_one_work+0x10/0x10 [ 556.081517][ T30] ? rcu_is_watching+0x12/0xc0 [ 556.087279][ T30] ? assign_work+0x1a0/0x250 [ 556.092799][ T30] worker_thread+0x6c8/0xf00 [ 556.098332][ T30] ? __pfx_worker_thread+0x10/0x10 [ 556.104507][ T30] kthread+0x3af/0x750 [ 556.109522][ T30] ? __pfx_kthread+0x10/0x10 [ 556.115055][ T30] ? lock_acquire+0x2f/0xb0 [ 556.120467][ T30] ? __pfx_kthread+0x10/0x10 [ 556.126029][ T30] ret_from_fork+0x45/0x80 [ 556.131324][ T30] ? __pfx_kthread+0x10/0x10 [ 556.137344][ T30] ret_from_fork_asm+0x1a/0x30 [ 556.143076][ T30] [ 556.146753][ T30] INFO: task kworker/0:2:938 blocked for more than 144 seconds. [ 556.156488][ T30] Not tainted 6.13.0-syzkaller-04541-gdf60eac9efe8 #0 [ 556.165231][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 556.175787][ T30] task:kworker/0:2 state:D stack:25648 pid:938 tgid:938 ppid:2 flags:0x00004000 [ 556.188070][ T30] Workqueue: events ovs_dp_masks_rebalance [ 556.195072][ T30] Call Trace: [ 556.198994][ T30] [ 556.202798][ T30] __schedule+0x1142/0x5b60 [ 556.208260][ T30] ? trace_sched_wakeup+0xe8/0x140 [ 556.214393][ T30] ? do_raw_spin_unlock+0x172/0x230 [ 556.220663][ T30] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 556.227665][ T30] ? rcu_is_watching+0x12/0xc0 [ 556.233367][ T30] ? __pfx___schedule+0x10/0x10 [ 556.239856][ T30] ? lock_release+0x4e2/0x6f0 [ 556.245511][ T30] ? schedule+0x298/0x350 [ 556.250712][ T30] ? __pfx_lock_release+0x10/0x10 [ 556.256771][ T30] ? rcu_is_watching+0x12/0xc0 [ 556.262512][ T30] ? trace_irq_enable.constprop.0+0xea/0x140 [ 556.269839][ T30] schedule+0xe7/0x350 [ 556.274761][ T30] schedule_preempt_disabled+0x13/0x30 [ 556.281560][ T30] __mutex_lock+0x6bd/0xb10 [ 556.287101][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 556.293547][ T30] ? ovs_dp_masks_rebalance+0x24/0xf0 [ 556.300009][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 556.306055][ T30] ? rcu_is_watching+0x12/0xc0 [ 556.311751][ T30] ? rcu_is_watching+0x12/0xc0 [ 556.317557][ T30] ? trace_lock_acquire+0x14e/0x1f0 [ 556.323805][ T30] ? ovs_dp_masks_rebalance+0x24/0xf0 [ 556.330314][ T30] ovs_dp_masks_rebalance+0x24/0xf0 [ 556.337040][ T30] process_one_work+0x958/0x1b30 [ 556.342971][ T30] ? __pfx_psi_avgs_work+0x10/0x10 [ 556.349122][ T30] ? __pfx_process_one_work+0x10/0x10 [ 556.355617][ T30] ? rcu_is_watching+0x12/0xc0 [ 556.361325][ T30] ? assign_work+0x1a0/0x250 [ 556.366905][ T30] worker_thread+0x6c8/0xf00 [ 556.372426][ T30] ? __kthread_parkme+0x148/0x220 [ 556.378700][ T30] ? __pfx_worker_thread+0x10/0x10 [ 556.384866][ T30] kthread+0x3af/0x750 [ 556.389759][ T30] ? __pfx_kthread+0x10/0x10 [ 556.395306][ T30] ? lock_acquire+0x2f/0xb0 [ 556.400715][ T30] ? __pfx_kthread+0x10/0x10 [ 556.406249][ T30] ret_from_fork+0x45/0x80 [ 556.411565][ T30] ? __pfx_kthread+0x10/0x10 [ 556.417087][ T30] ret_from_fork_asm+0x1a/0x30 [ 556.422814][ T30] [ 556.426473][ T30] INFO: task kworker/u8:6:1336 blocked for more than 144 seconds. [ 556.435843][ T30] Not tainted 6.13.0-syzkaller-04541-gdf60eac9efe8 #0 [ 556.445327][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 556.455766][ T30] task:kworker/u8:6 state:D stack:24688 pid:1336 tgid:1336 ppid:2 flags:0x00004000 [ 556.468042][ T30] Workqueue: events_unbound linkwatch_event [ 556.475150][ T30] Call Trace: [ 556.479073][ T30] [ 556.482720][ T30] __schedule+0x1142/0x5b60 [ 556.488164][ T30] ? sta_get_last_rx_stats+0x1bc/0x230 [ 556.494760][ T30] ? rcu_is_watching+0x12/0xc0 [ 556.500480][ T30] ? __pfx___schedule+0x10/0x10 [ 556.506329][ T30] ? lock_release+0x4e2/0x6f0 [ 556.511950][ T30] ? schedule+0x298/0x350 [ 556.517183][ T30] ? __pfx_lock_release+0x10/0x10 [ 556.523213][ T30] ? __mutex_trylock_common+0x78/0x250 [ 556.529982][ T30] ? schedule+0x1fd/0x350 [ 556.535228][ T30] ? lock_acquire+0x2f/0xb0 [ 556.540657][ T30] ? schedule+0x1fd/0x350 [ 556.546439][ T30] schedule+0xe7/0x350 [ 556.551336][ T30] schedule_preempt_disabled+0x13/0x30 [ 556.557902][ T30] __mutex_lock+0x6bd/0xb10 [ 556.563317][ T30] ? __pfx_event_filter_pid_sched_wakeup_probe_post+0x10/0x10 [ 556.572284][ T30] ? linkwatch_event+0x51/0xc0 [ 556.578031][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 556.584216][ T30] ? do_raw_spin_unlock+0x172/0x230 [ 556.590496][ T30] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 556.597492][ T30] ? lock_release+0x4e2/0x6f0 [ 556.603081][ T30] ? process_one_work+0x7b5/0x1b30 [ 556.609562][ T30] ? linkwatch_event+0x51/0xc0 [ 556.615599][ T30] ? rtnl_lock+0x9/0x20 [ 556.620592][ T30] linkwatch_event+0x51/0xc0 [ 556.626167][ T30] ? __pfx_linkwatch_event+0x10/0x10 [ 556.632525][ T30] ? rcu_is_watching+0x12/0xc0 [ 556.638376][ T30] process_one_work+0x958/0x1b30 [ 556.644538][ T30] ? __pfx_process_one_work+0x10/0x10 [ 556.650988][ T30] ? rcu_is_watching+0x12/0xc0 [ 556.656856][ T30] ? assign_work+0x1a0/0x250 [ 556.662376][ T30] worker_thread+0x6c8/0xf00 [ 556.667930][ T30] ? __kthread_parkme+0x148/0x220 [ 556.673957][ T30] ? __pfx_worker_thread+0x10/0x10 [ 556.680149][ T30] kthread+0x3af/0x750 [ 556.685137][ T30] ? __pfx_kthread+0x10/0x10 [ 556.690642][ T30] ? lock_acquire+0x2f/0xb0 [ 556.696149][ T30] ? __pfx_kthread+0x10/0x10 [ 556.701654][ T30] ret_from_fork+0x45/0x80 [ 556.706986][ T30] ? __pfx_kthread+0x10/0x10 [ 556.712482][ T30] ret_from_fork_asm+0x1a/0x30 [ 556.718266][ T30] [ 556.722461][ T30] INFO: task dhcpcd:5501 blocked for more than 145 seconds. [ 556.731514][ T30] Not tainted 6.13.0-syzkaller-04541-gdf60eac9efe8 #0 [ 556.740298][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 556.750764][ T30] task:dhcpcd state:D stack:25760 pid:5501 tgid:5501 ppid:1 flags:0x00000002 [ 556.763086][ T30] Call Trace: [ 556.767220][ T30] [ 556.770737][ T30] __schedule+0x1142/0x5b60 [ 556.776230][ T30] ? kfree+0x14f/0x4b0 [ 556.781120][ T30] ? tomoyo_path_number_perm+0x46d/0x5b0 [ 556.787946][ T30] ? security_file_ioctl+0x9b/0x240 [ 556.794188][ T30] ? __x64_sys_ioctl+0xb7/0x200 [ 556.800051][ T30] ? do_syscall_64+0xcd/0x250 [ 556.805698][ T30] ? __pfx___schedule+0x10/0x10 [ 556.811499][ T30] ? lock_release+0x4e2/0x6f0 [ 556.817146][ T30] ? schedule+0x298/0x350 [ 556.822341][ T30] ? __pfx_lock_release+0x10/0x10 [ 556.828383][ T30] ? __mutex_trylock_common+0x78/0x250 [ 556.835008][ T30] ? schedule+0x1fd/0x350 [ 556.840203][ T30] ? lock_acquire+0x2f/0xb0 [ 556.845719][ T30] ? schedule+0x1fd/0x350 [ 556.850924][ T30] schedule+0xe7/0x350 [ 556.855882][ T30] schedule_preempt_disabled+0x13/0x30 [ 556.862444][ T30] __mutex_lock+0x6bd/0xb10 [ 556.867956][ T30] ? lock_release+0x4e2/0x6f0 [ 556.873581][ T30] ? rcu_is_watching+0x12/0xc0 [ 556.879463][ T30] ? vlan_ioctl_handler+0xcf/0xa80 [ 556.885655][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 556.891693][ T30] ? trace_lock_acquire+0x14e/0x1f0 [ 556.898030][ T30] ? __might_fault+0xe3/0x190 [ 556.903644][ T30] ? __might_fault+0xe3/0x190 [ 556.909317][ T30] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 556.916074][ T30] ? vlan_ioctl_handler+0xcf/0xa80 [ 556.922211][ T30] vlan_ioctl_handler+0xcf/0xa80 [ 556.928177][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 556.934202][ T30] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 556.940908][ T30] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 556.947598][ T30] sock_ioctl+0x4be/0x6c0 [ 556.952782][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 556.958677][ T30] ? do_readv+0x297/0x340 [ 556.963877][ T30] ? do_readv+0x242/0x340 [ 556.969104][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 556.975027][ T30] __x64_sys_ioctl+0x190/0x200 [ 556.980854][ T30] do_syscall_64+0xcd/0x250 [ 556.986434][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.993512][ T30] RIP: 0033:0x7f55761bfd49 [ 556.998857][ T30] RSP: 002b:00007fff4004eb38 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 557.009017][ T30] RAX: ffffffffffffffda RBX: 000055724ed84550 RCX: 00007f55761bfd49 [ 557.018655][ T30] RDX: 00007fff4004eb40 RSI: 0000000000008982 RDI: 0000000000000011 [ 557.028254][ T30] RBP: 0000000000000002 R08: 0000000000000008 R09: 0000000000000000 [ 557.038008][ T30] R10: 00007fff4005f1c0 R11: 0000000000000246 R12: 00007fff4004eb40 [ 557.047605][ T30] R13: 00007fff4004ec00 R14: 000055724ed84550 R15: 000055724ef3d670 [ 557.057335][ T30] [ 557.061000][ T30] INFO: task kworker/u8:42:13356 blocked for more than 145 seconds. [ 557.070618][ T30] Not tainted 6.13.0-syzkaller-04541-gdf60eac9efe8 #0 [ 557.079402][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 557.089862][ T30] task:kworker/u8:42 state:D stack:25848 pid:13356 tgid:13356 ppid:2 flags:0x00004000 [ 557.102189][ T30] Workqueue: netns cleanup_net [ 557.107935][ T30] Call Trace: [ 557.111866][ T30] [ 557.115437][ T30] __schedule+0x1142/0x5b60 [ 557.120842][ T30] ? finish_task_switch.isra.0+0x217/0xcc0 [ 557.127836][ T30] ? __switch_to+0x749/0x1190 [ 557.133449][ T30] ? rcu_is_watching+0x12/0xc0 [ 557.139213][ T30] ? synchronize_rcu_expedited+0x426/0x450 [ 557.146268][ T30] ? __pfx___schedule+0x10/0x10 [ 557.152093][ T30] ? lock_release+0x4e2/0x6f0 [ 557.157774][ T30] ? schedule+0x298/0x350 [ 557.162984][ T30] ? __pfx_lock_release+0x10/0x10 [ 557.169051][ T30] ? __mutex_trylock_common+0x78/0x250 [ 557.175663][ T30] ? schedule+0x1fd/0x350 [ 557.180884][ T30] ? lock_acquire+0x2f/0xb0 [ 557.186395][ T30] ? schedule+0x1fd/0x350 [ 557.191596][ T30] schedule+0xe7/0x350 [ 557.196574][ T30] schedule_preempt_disabled+0x13/0x30 [ 557.203135][ T30] __mutex_lock+0x6bd/0xb10 [ 557.208666][ T30] ? unregister_netdevice_many_notify+0x1bab/0x21a0 [ 557.216611][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 557.222632][ T30] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 557.230065][ T30] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 557.236455][ T30] ? __pfx___might_resched+0x10/0x10 [ 557.242778][ T30] ? unregister_netdevice_many_notify+0x1bab/0x21a0 [ 557.250909][ T30] ? rtnl_lock+0x9/0x20 [ 557.255933][ T30] unregister_netdevice_many_notify+0x1bab/0x21a0 [ 557.263619][ T30] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 557.271773][ T30] ? rcu_is_watching+0x12/0xc0 [ 557.277516][ T30] ? lock_release+0x4e2/0x6f0 [ 557.283121][ T30] ? kernfs_remove_by_name_ns+0xc4/0x130 [ 557.289915][ T30] ? __pfx_lock_release+0x10/0x10 [ 557.296009][ T30] ? trace_irq_enable.constprop.0+0xea/0x140 [ 557.303210][ T30] unregister_netdevice_queue+0x307/0x3f0 [ 557.310169][ T30] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 557.317769][ T30] _cfg80211_unregister_wdev+0x64b/0x830 [ 557.324551][ T30] ieee80211_remove_interfaces+0x34f/0x720 [ 557.331523][ T30] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 557.339150][ T30] ieee80211_unregister_hw+0x55/0x3a0 [ 557.345618][ T30] mac80211_hwsim_del_radio+0x268/0x370 [ 557.352261][ T30] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 557.359604][ T30] ? rcu_is_watching+0x12/0xc0 [ 557.365377][ T30] ? trace_irq_enable.constprop.0+0xea/0x140 [ 557.372546][ T30] hwsim_exit_net+0x33f/0x6d0 [ 557.378189][ T30] ? __pfx_hwsim_exit_net+0x10/0x10 [ 557.384421][ T30] ? ip_vs_sync_net_cleanup+0x72/0xb0 [ 557.390937][ T30] ? __ip_vs_dev_cleanup_batch+0xb1/0x290 [ 557.397842][ T30] ? __pfx_hwsim_exit_net+0x10/0x10 [ 557.404074][ T30] ops_exit_list+0xb0/0x180 [ 557.409606][ T30] cleanup_net+0x5c6/0xbf0 [ 557.414999][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 557.420930][ T30] ? __schedule+0x114a/0x5b60 [ 557.426685][ T30] ? lock_acquire+0x2f/0xb0 [ 557.432083][ T30] ? process_one_work+0x8bb/0x1b30 [ 557.438261][ T30] process_one_work+0x958/0x1b30 [ 557.444180][ T30] ? __pfx_process_one_work+0x10/0x10 [ 557.450656][ T30] ? rcu_is_watching+0x12/0xc0 [ 557.456456][ T30] ? assign_work+0x1a0/0x250 [ 557.461955][ T30] worker_thread+0x6c8/0xf00 [ 557.467504][ T30] ? __kthread_parkme+0x148/0x220 [ 557.473539][ T30] ? __pfx_worker_thread+0x10/0x10 [ 557.479698][ T30] kthread+0x3af/0x750 [ 557.484635][ T30] ? __pfx_kthread+0x10/0x10 [ 557.490135][ T30] ? lock_acquire+0x2f/0xb0 [ 557.495568][ T30] ? rcu_is_watching+0x12/0xc0 [ 557.501288][ T30] ? __pfx_kthread+0x10/0x10 [ 557.506815][ T30] ret_from_fork+0x45/0x80 [ 557.512104][ T30] ? __pfx_kthread+0x10/0x10 [ 557.517632][ T30] ret_from_fork_asm+0x1a/0x30 [ 557.523358][ T30] [ 557.527061][ T30] INFO: task syz-executor:14749 blocked for more than 145 seconds. [ 557.536616][ T30] Not tainted 6.13.0-syzkaller-04541-gdf60eac9efe8 #0 [ 557.545373][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 557.555814][ T30] task:syz-executor state:D stack:25088 pid:14749 tgid:14749 ppid:1 flags:0x00004004 [ 557.569357][ T30] Call Trace: [ 557.573341][ T30] [ 557.576991][ T30] __schedule+0x1142/0x5b60 [ 557.582405][ T30] ? __pfx_veth_validate+0x10/0x10 [ 557.588559][ T30] ? rtnl_get_peer_net+0x1e7/0x3d0 [ 557.594791][ T30] ? __pfx___schedule+0x10/0x10 [ 557.600616][ T30] ? lock_release+0x4e2/0x6f0 [ 557.606267][ T30] ? schedule+0x298/0x350 [ 557.611625][ T30] ? __pfx_lock_release+0x10/0x10 [ 557.617712][ T30] ? __mutex_trylock_common+0x78/0x250 [ 557.624256][ T30] ? schedule+0x1fd/0x350 [ 557.629476][ T30] ? lock_acquire+0x2f/0xb0 [ 557.634909][ T30] ? schedule+0x1fd/0x350 [ 557.640085][ T30] schedule+0xe7/0x350 [ 557.644990][ T30] schedule_preempt_disabled+0x13/0x30 [ 557.651544][ T30] __mutex_lock+0x6bd/0xb10 [ 557.656966][ T30] ? __pfx_aa_get_newest_label+0x10/0x10 [ 557.663726][ T30] ? rtnl_newlink+0x5e4/0x1d70 [ 557.670047][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 557.676134][ T30] ? ns_capable+0xd7/0x110 [ 557.681457][ T30] ? rtnl_newlink+0x5e4/0x1d70 [ 557.687205][ T30] rtnl_newlink+0x5e4/0x1d70 [ 557.692714][ T30] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 557.700147][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 557.706185][ T30] ? kernel_text_address+0x8d/0x100 [ 557.712546][ T30] ? unwind_get_return_address+0x59/0xa0 [ 557.719339][ T30] ? arch_stack_walk+0xa7/0x100 [ 557.725210][ T30] ? aa_get_newest_label+0x376/0x680 [ 557.731541][ T30] ? stack_trace_save+0x95/0xd0 [ 557.737410][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 557.743858][ T30] ? rcu_is_watching+0x12/0xc0 [ 557.749602][ T30] ? lock_release+0x4e2/0x6f0 [ 557.755233][ T30] ? rtnetlink_rcv_msg+0x93a/0xea0 [ 557.761356][ T30] ? __pfx_lock_release+0x10/0x10 [ 557.767442][ T30] ? trace_lock_acquire+0x14e/0x1f0 [ 557.774128][ T30] ? bpf_lsm_capable+0x9/0x10 [ 557.779778][ T30] ? security_capable+0x7e/0x260 [ 557.785739][ T30] ? rtnetlink_rcv_msg+0x205/0xea0 [ 557.791874][ T30] ? lock_acquire+0x2f/0xb0 [ 557.797281][ T30] ? rtnetlink_rcv_msg+0x205/0xea0 [ 557.803408][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 557.809517][ T30] rtnetlink_rcv_msg+0x95b/0xea0 [ 557.815764][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 557.822528][ T30] ? rcu_is_watching+0x12/0xc0 [ 557.828278][ T30] netlink_rcv_skb+0x165/0x410 [ 557.834018][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 557.840588][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 557.846950][ T30] ? lock_release+0x4e2/0x6f0 [ 557.852541][ T30] ? netlink_deliver_tap+0x1ae/0xca0 [ 557.858905][ T30] netlink_unicast+0x53c/0x7f0 [ 557.864672][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 557.871025][ T30] ? __phys_addr_symbol+0x30/0x80 [ 557.877497][ T30] ? __check_object_size+0x488/0x710 [ 557.883858][ T30] netlink_sendmsg+0x8b8/0xd70 [ 557.889765][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 557.896183][ T30] __sys_sendto+0x488/0x4f0 [ 557.901575][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 557.907719][ T30] ? xfd_validate_state+0x5d/0x180 [ 557.913854][ T30] ? rcu_is_watching+0x12/0xc0 [ 557.919613][ T30] __x64_sys_sendto+0xe0/0x1c0 [ 557.925457][ T30] ? trace_irq_enable.constprop.0+0xea/0x140 [ 557.932644][ T30] do_syscall_64+0xcd/0x250 [ 557.938141][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.945355][ T30] RIP: 0033:0x7f92fe18ebbc [ 557.950656][ T30] RSP: 002b:00007fff919e4930 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 557.960859][ T30] RAX: ffffffffffffffda RBX: 00007f92feed4620 RCX: 00007f92fe18ebbc [ 557.970494][ T30] RDX: 0000000000000064 RSI: 00007f92feed4670 RDI: 0000000000000003 [ 557.980191][ T30] RBP: 0000000000000000 R08: 00007fff919e4984 R09: 000000000000000c [ 557.989824][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 557.999409][ T30] R13: 0000000000000000 R14: 00007f92feed4670 R15: 0000000000000000 [ 558.009005][ T30] [ 558.012618][ T30] INFO: task syz.4.2339:14791 blocked for more than 146 seconds. [ 558.021932][ T30] Not tainted 6.13.0-syzkaller-04541-gdf60eac9efe8 #0 [ 558.030683][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 558.041265][ T30] task:syz.4.2339 state:D stack:23856 pid:14791 tgid:14788 ppid:7789 flags:0x00024004 [ 558.053524][ T30] Call Trace: [ 558.057573][ T30] [ 558.061090][ T30] __schedule+0x1142/0x5b60 [ 558.066570][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 558.073031][ T30] ? find_entry.isra.0+0x201/0x2b0 [ 558.079286][ T30] ? kasan_save_stack+0x33/0x60 [ 558.085322][ T30] ? __pfx___schedule+0x10/0x10 [ 558.091129][ T30] ? lock_release+0x4e2/0x6f0 [ 558.096762][ T30] ? schedule+0x298/0x350 [ 558.101957][ T30] ? __pfx_lock_release+0x10/0x10 [ 558.108035][ T30] ? __mutex_trylock_common+0x78/0x250 [ 558.114615][ T30] ? schedule+0x1fd/0x350 [ 558.119833][ T30] ? lock_acquire+0x2f/0xb0 [ 558.125354][ T30] ? schedule+0x1fd/0x350 [ 558.130581][ T30] schedule+0xe7/0x350 [ 558.135515][ T30] schedule_preempt_disabled+0x13/0x30 [ 558.142076][ T30] __mutex_lock+0x6bd/0xb10 [ 558.147507][ T30] ? register_nexthop_notifier+0x1b/0x70 [ 558.154265][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 558.160320][ T30] ? net_generic+0xea/0x2a0 [ 558.165752][ T30] ? trace_lock_acquire+0x14e/0x1f0 [ 558.171977][ T30] ? lockdep_init_map_type+0x16d/0x7d0 [ 558.178531][ T30] ? net_generic+0x30/0x2a0 [ 558.183936][ T30] ? __pfx_vxlan_init_net+0x10/0x10 [ 558.190267][ T30] ? register_nexthop_notifier+0x1b/0x70 [ 558.197173][ T30] ? rtnl_lock+0x9/0x20 [ 558.202144][ T30] register_nexthop_notifier+0x1b/0x70 [ 558.208967][ T30] ops_init+0x1df/0x5f0 [ 558.213970][ T30] setup_net+0x21f/0x860 [ 558.219270][ T30] ? __pfx_setup_net+0x10/0x10 [ 558.225457][ T30] ? down_read_killable+0xcc/0x380 [ 558.231601][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 558.238303][ T30] ? debug_mutex_init+0x37/0x70 [ 558.244120][ T30] copy_net_ns+0x2b4/0x6c0 [ 558.249492][ T30] create_new_namespaces+0x3ea/0xad0 [ 558.256703][ T30] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 558.263445][ T30] ksys_unshare+0x45d/0xa40 [ 558.268878][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 558.274955][ T30] ? xfd_validate_state+0x5d/0x180 [ 558.281083][ T30] ? rcu_is_watching+0x12/0xc0 [ 558.286926][ T30] __x64_sys_unshare+0x31/0x40 [ 558.292643][ T30] do_syscall_64+0xcd/0x250 [ 558.298167][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.305346][ T30] RIP: 0033:0x7fac95f8cd29 [ 558.310641][ T30] RSP: 002b:00007fac96d51038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 558.320812][ T30] RAX: ffffffffffffffda RBX: 00007fac961a5fa0 RCX: 00007fac95f8cd29 [ 558.330445][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 558.340059][ T30] RBP: 00007fac9600e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 558.349662][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 558.359282][ T30] R13: 0000000000000000 R14: 00007fac961a5fa0 R15: 00007ffc03057ad8 [ 558.368899][ T30] [ 558.372497][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 558.383355][ T30] INFO: task syz.1.2340:14797 blocked for more than 146 seconds. [ 558.392684][ T30] Not tainted 6.13.0-syzkaller-04541-gdf60eac9efe8 #0 [ 558.401444][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 558.411938][ T30] task:syz.1.2340 state:D stack:27312 pid:14797 tgid:14796 ppid:5829 flags:0x00000004 [ 558.424265][ T30] Call Trace: [ 558.428220][ T30] [ 558.431716][ T30] __schedule+0x1142/0x5b60 [ 558.437138][ T30] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 558.443689][ T30] ? alloc_netdev_mqs+0xee7/0x13e0 [ 558.449905][ T30] ? internal_dev_create+0x8a/0x520 [ 558.456158][ T30] ? ovs_vport_add+0x144/0x4e0 [ 558.461856][ T30] ? new_vport+0x16/0x1d0 [ 558.467083][ T30] ? genl_rcv_msg+0x565/0x800 [ 558.472688][ T30] ? netlink_rcv_skb+0x165/0x410 [ 558.478645][ T30] ? ____sys_sendmsg+0x9ae/0xb40 [ 558.484608][ T30] ? ___sys_sendmsg+0x135/0x1e0 [ 558.490459][ T30] ? __sys_sendmsg+0x16e/0x220 [ 558.496260][ T30] ? __pfx___schedule+0x10/0x10 [ 558.502090][ T30] ? lock_release+0x4e2/0x6f0 [ 558.507745][ T30] ? schedule+0x298/0x350 [ 558.512942][ T30] ? __pfx_lock_release+0x10/0x10 [ 558.519064][ T30] ? __mutex_trylock_common+0x78/0x250 [ 558.525726][ T30] ? schedule+0x1fd/0x350 [ 558.530915][ T30] ? lock_acquire+0x2f/0xb0 [ 558.536334][ T30] ? schedule+0x1fd/0x350 [ 558.541534][ T30] schedule+0xe7/0x350 [ 558.546445][ T30] schedule_preempt_disabled+0x13/0x30 [ 558.552994][ T30] __mutex_lock+0x6bd/0xb10 [ 558.558430][ T30] ? internal_dev_create+0x2b0/0x520 [ 558.564813][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 558.570833][ T30] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 558.577416][ T30] ? read_word_at_a_time+0xe/0x20 [ 558.583443][ T30] ? alloc_netdev_mqs+0x1038/0x13e0 [ 558.589726][ T30] ? internal_dev_create+0x2b0/0x520 [ 558.596083][ T30] internal_dev_create+0x2b0/0x520 [ 558.602190][ T30] ovs_vport_add+0x144/0x4e0 [ 558.608102][ T30] new_vport+0x16/0x1d0 [ 558.613165][ T30] ovs_dp_cmd_new+0x6b0/0xe50 [ 558.619112][ T30] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 558.625613][ T30] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 558.634752][ T30] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 558.643604][ T30] genl_family_rcv_msg_doit+0x202/0x2f0 [ 558.650598][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 558.657938][ T30] ? genl_get_cmd+0x195/0x580 [ 558.663564][ T30] ? bpf_lsm_capable+0x9/0x10 [ 558.669208][ T30] ? security_capable+0x7e/0x260 [ 558.675160][ T30] ? ns_capable+0xd7/0x110 [ 558.680452][ T30] genl_rcv_msg+0x565/0x800 [ 558.685997][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 558.692033][ T30] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 558.698398][ T30] netlink_rcv_skb+0x165/0x410 [ 558.704119][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 558.710185][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 558.716578][ T30] ? down_read+0xc9/0x330 [ 558.721751][ T30] ? __pfx_down_read+0x10/0x10 [ 558.727526][ T30] ? netlink_deliver_tap+0x1ae/0xca0 [ 558.733880][ T30] genl_rcv+0x28/0x40 [ 558.738722][ T30] netlink_unicast+0x53c/0x7f0 [ 558.744632][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 558.751021][ T30] ? __phys_addr_symbol+0x30/0x80 [ 558.757107][ T30] ? __check_object_size+0x488/0x710 [ 558.763471][ T30] netlink_sendmsg+0x8b8/0xd70 [ 558.769297][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 558.775799][ T30] ____sys_sendmsg+0x9ae/0xb40 [ 558.781496][ T30] ? copy_msghdr_from_user+0x10b/0x160 [ 558.788097][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 558.794499][ T30] ? try_to_wake_up+0x158/0x1490 [ 558.800441][ T30] ___sys_sendmsg+0x135/0x1e0 [ 558.806099][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 558.812330][ T30] ? __pfx_lock_release+0x10/0x10 [ 558.818369][ T30] ? trace_lock_acquire+0x14e/0x1f0 [ 558.824664][ T30] ? __fget_files+0x206/0x3a0 [ 558.830309][ T30] __sys_sendmsg+0x16e/0x220 [ 558.835858][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 558.841981][ T30] ? __x64_sys_futex+0x1e1/0x4c0 [ 558.848051][ T30] ? rcu_is_watching+0x12/0xc0 [ 558.853770][ T30] ? rcu_is_watching+0x12/0xc0 [ 558.859630][ T30] do_syscall_64+0xcd/0x250 [ 558.865069][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.872114][ T30] RIP: 0033:0x7f7ce2b8cd29 [ 558.877436][ T30] RSP: 002b:00007f7ce09f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 558.887584][ T30] RAX: ffffffffffffffda RBX: 00007f7ce2da5fa0 RCX: 00007f7ce2b8cd29 [ 558.897259][ T30] RDX: 0000000002000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 558.906871][ T30] RBP: 00007f7ce2c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 558.916463][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 558.926064][ T30] R13: 0000000000000000 R14: 00007f7ce2da5fa0 R15: 00007ffc19c64a18 [ 558.935651][ T30] [ 558.939267][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 558.950124][ T30] INFO: task kworker/0:3:14800 blocked for more than 147 seconds. [ 558.959545][ T30] Not tainted 6.13.0-syzkaller-04541-gdf60eac9efe8 #0 [ 558.968433][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 558.978858][ T30] task:kworker/0:3 state:D stack:28824 pid:14800 tgid:14800 ppid:2 flags:0x00004000 [ 558.991135][ T30] Workqueue: events ovs_dp_masks_rebalance [ 558.998156][ T30] Call Trace: [ 559.002073][ T30] [ 559.005641][ T30] __schedule+0x1142/0x5b60 [ 559.011056][ T30] ? __pfx_lock_release+0x10/0x10 [ 559.017163][ T30] ? debug_object_activate+0x149/0x4a0 [ 559.023724][ T30] ? rcu_is_watching+0x12/0xc0 [ 559.029488][ T30] ? __pfx___schedule+0x10/0x10 [ 559.035380][ T30] ? lock_release+0x4e2/0x6f0 [ 559.041150][ T30] ? schedule+0x298/0x350 [ 559.046449][ T30] ? __pfx_lock_release+0x10/0x10 [ 559.052895][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 559.059376][ T30] ? rcu_is_watching+0x12/0xc0 [ 559.065152][ T30] ? trace_irq_enable.constprop.0+0xea/0x140 [ 559.072308][ T30] schedule+0xe7/0x350 [ 559.077338][ T30] schedule_preempt_disabled+0x13/0x30 [ 559.083922][ T30] __mutex_lock+0x6bd/0xb10 [ 559.089398][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 559.095893][ T30] ? ovs_dp_masks_rebalance+0x24/0xf0 [ 559.102332][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 559.108397][ T30] ? rcu_is_watching+0x12/0xc0 [ 559.114127][ T30] ? rcu_is_watching+0x12/0xc0 [ 559.119882][ T30] ? trace_lock_acquire+0x14e/0x1f0 [ 559.126188][ T30] ? ovs_dp_masks_rebalance+0x24/0xf0 [ 559.132617][ T30] ovs_dp_masks_rebalance+0x24/0xf0 [ 559.138925][ T30] process_one_work+0x958/0x1b30 [ 559.144925][ T30] ? __pfx_defense_work_handler+0x10/0x10 [ 559.151795][ T30] ? __pfx_process_one_work+0x10/0x10 [ 559.158304][ T30] ? rcu_is_watching+0x12/0xc0 [ 559.164075][ T30] ? assign_work+0x1a0/0x250 [ 559.169653][ T30] worker_thread+0x6c8/0xf00 [ 559.175187][ T30] ? __kthread_parkme+0x148/0x220 [ 559.181199][ T30] ? __pfx_worker_thread+0x10/0x10 [ 559.187474][ T30] kthread+0x3af/0x750 [ 559.192378][ T30] ? __pfx_kthread+0x10/0x10 [ 559.197900][ T30] ? lock_acquire+0x2f/0xb0 [ 559.203298][ T30] ? rcu_is_watching+0x12/0xc0 [ 559.209085][ T30] ? __pfx_kthread+0x10/0x10 [ 559.214622][ T30] ret_from_fork+0x45/0x80 [ 559.219911][ T30] ? __pfx_kthread+0x10/0x10 [ 559.225459][ T30] ret_from_fork_asm+0x1a/0x30 [ 559.231191][ T30] [ 559.234841][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 559.245736][ T30] INFO: task syz.3.2342:14804 blocked for more than 147 seconds. [ 559.255051][ T30] Not tainted 6.13.0-syzkaller-04541-gdf60eac9efe8 #0 [ 559.263783][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 559.274228][ T30] task:syz.3.2342 state:D stack:27384 pid:14804 tgid:14803 ppid:5837 flags:0x00000004 [ 559.286823][ T30] Call Trace: [ 559.290763][ T30] [ 559.294278][ T30] __schedule+0x1142/0x5b60 [ 559.299865][ T30] ? __pfx___schedule+0x10/0x10 [ 559.305789][ T30] ? lock_release+0x4e2/0x6f0 [ 559.311409][ T30] ? schedule+0x298/0x350 [ 559.316633][ T30] ? __pfx_lock_release+0x10/0x10 [ 559.322660][ T30] ? __mutex_trylock_common+0x78/0x250 [ 559.329362][ T30] ? schedule+0x1fd/0x350 [ 559.334608][ T30] ? lock_acquire+0x2f/0xb0 [ 559.340007][ T30] ? schedule+0x1fd/0x350 [ 559.345249][ T30] schedule+0xe7/0x350 [ 559.350138][ T30] schedule_preempt_disabled+0x13/0x30 [ 559.356722][ T30] __mutex_lock+0x6bd/0xb10 [ 559.362132][ T30] ? nl80211_prepare_wdev_dump+0x14c/0x740 [ 559.369139][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 559.375201][ T30] ? __nla_parse+0x40/0x60 [ 559.380498][ T30] ? nl80211_prepare_wdev_dump+0x14c/0x740 [ 559.387501][ T30] nl80211_prepare_wdev_dump+0x14c/0x740 [ 559.394273][ T30] nl80211_dump_scan+0x116/0x550 [ 559.400212][ T30] ? __build_skb_around+0x278/0x3b0 [ 559.406569][ T30] ? __pfx_nl80211_dump_scan+0x10/0x10 [ 559.413116][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.420438][ T30] genl_dumpit+0x122/0x230 [ 559.425799][ T30] netlink_dump+0x53c/0xd00 [ 559.431215][ T30] ? __pfx_netlink_dump+0x10/0x10 [ 559.437328][ T30] ? kasan_save_track+0x14/0x30 [ 559.443162][ T30] ? __kasan_kmalloc+0xaa/0xb0 [ 559.448955][ T30] ? genl_start+0x67d/0x960 [ 559.454358][ T30] __netlink_dump_start+0x6d9/0x980 [ 559.460638][ T30] genl_family_rcv_msg_dumpit+0x1e1/0x2e0 [ 559.467563][ T30] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 559.475107][ T30] ? genl_op_from_small+0x25/0x440 [ 559.481250][ T30] ? __pfx_genl_get_cmd+0x10/0x10 [ 559.487478][ T30] ? __pfx_genl_start+0x10/0x10 [ 559.493328][ T30] ? __pfx_genl_dumpit+0x10/0x10 [ 559.499276][ T30] ? __pfx_genl_done+0x10/0x10 [ 559.505052][ T30] ? __dev_queue_xmit+0x89b/0x43e0 [ 559.511206][ T30] ? __radix_tree_lookup+0x21f/0x2c0 [ 559.517733][ T30] genl_rcv_msg+0x470/0x800 [ 559.523139][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 559.529203][ T30] ? __pfx_nl80211_dump_scan+0x10/0x10 [ 559.535785][ T30] netlink_rcv_skb+0x165/0x410 [ 559.541482][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 559.547560][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 559.553929][ T30] ? down_read+0xc9/0x330 [ 559.559168][ T30] ? __pfx_down_read+0x10/0x10 [ 559.564926][ T30] ? netlink_deliver_tap+0x1ae/0xca0 [ 559.571250][ T30] genl_rcv+0x28/0x40 [ 559.576071][ T30] netlink_unicast+0x53c/0x7f0 [ 559.581790][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 559.588290][ T30] ? __phys_addr_symbol+0x30/0x80 [ 559.594314][ T30] ? __check_object_size+0x488/0x710 [ 559.600679][ T30] netlink_sendmsg+0x8b8/0xd70 [ 559.606452][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 559.612794][ T30] ____sys_sendmsg+0x9ae/0xb40 [ 559.618546][ T30] ? copy_msghdr_from_user+0x10b/0x160 [ 559.625193][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 559.631520][ T30] ? try_to_wake_up+0x158/0x1490 [ 559.637511][ T30] ___sys_sendmsg+0x135/0x1e0 [ 559.643135][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 559.649662][ T30] ? __pfx_lock_release+0x10/0x10 [ 559.656351][ T30] ? trace_lock_acquire+0x14e/0x1f0 [ 559.662606][ T30] ? __fget_files+0x206/0x3a0 [ 559.668267][ T30] __sys_sendmsg+0x16e/0x220 [ 559.673773][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 559.679968][ T30] ? __x64_sys_futex+0x1e1/0x4c0 [ 559.685935][ T30] ? rcu_is_watching+0x12/0xc0 [ 559.691653][ T30] ? rcu_is_watching+0x12/0xc0 [ 559.697423][ T30] do_syscall_64+0xcd/0x250 [ 559.702824][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.710005][ T30] RIP: 0033:0x7f1992b8cd29 [ 559.715339][ T30] RSP: 002b:00007f1993967038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 559.726123][ T30] RAX: ffffffffffffffda RBX: 00007f1992da5fa0 RCX: 00007f1992b8cd29 [ 559.735715][ T30] RDX: 0000000000000080 RSI: 0000000020003100 RDI: 0000000000000006 [ 559.745295][ T30] RBP: 00007f1992c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 559.754885][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 559.764686][ T30] R13: 0000000000000000 R14: 00007f1992da5fa0 R15: 00007ffc1646ee88 [ 559.774263][ T30] [ 559.777898][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 559.788730][ T30] INFO: task syz.3.2342:14805 blocked for more than 148 seconds. [ 559.798002][ T30] Not tainted 6.13.0-syzkaller-04541-gdf60eac9efe8 #0 [ 559.806799][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 559.819094][ T30] task:syz.3.2342 state:D stack:28224 pid:14805 tgid:14803 ppid:5837 flags:0x00000004 [ 559.831374][ T30] Call Trace: [ 559.835333][ T30] [ 559.838839][ T30] __schedule+0x1142/0x5b60 [ 559.844223][ T30] ? lock_release+0x4e2/0x6f0 [ 559.849890][ T30] ? rcu_is_watching+0x12/0xc0 [ 559.855630][ T30] ? sched_balance_newidle+0x809/0x11a0 [ 559.862423][ T30] ? __pfx___schedule+0x10/0x10 [ 559.868288][ T30] ? lock_release+0x4e2/0x6f0 [ 559.873898][ T30] ? schedule+0x298/0x350 [ 559.879105][ T30] ? __pfx_lock_release+0x10/0x10 [ 559.885171][ T30] ? __mutex_trylock_common+0x78/0x250 [ 559.891723][ T30] ? schedule+0x1fd/0x350 [ 559.896928][ T30] ? lock_acquire+0x2f/0xb0 [ 559.902325][ T30] ? schedule+0x1fd/0x350 [ 559.907537][ T30] schedule+0xe7/0x350 [ 559.912436][ T30] schedule_preempt_disabled+0x13/0x30 [ 559.919010][ T30] __mutex_lock+0x6bd/0xb10 [ 559.925032][ T30] ? trace_pid_list_is_set+0x4c/0x150 [ 559.931501][ T30] ? __pfx_lock_release+0x10/0x10 [ 559.937640][ T30] ? do_ipv6_setsockopt+0x1f4d/0x4660 [ 559.944103][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 559.950179][ T30] ? rcu_is_watching+0x12/0xc0 [ 559.955922][ T30] ? finish_task_switch.isra.0+0x2e8/0xcc0 [ 559.963049][ T30] ? __switch_to+0x749/0x1190 [ 559.968699][ T30] ? do_ipv6_setsockopt+0x1f4d/0x4660 [ 559.975178][ T30] ? rtnl_lock+0x9/0x20 [ 559.980162][ T30] do_ipv6_setsockopt+0x1f4d/0x4660 [ 559.986462][ T30] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 559.993113][ T30] ? lock_release+0x4e2/0x6f0 [ 559.998767][ T30] ? schedule+0x298/0x350 [ 560.003964][ T30] ? __pfx_lock_release+0x10/0x10 [ 560.010046][ T30] ? plist_check_prev_next+0x12a/0x1a0 [ 560.016614][ T30] ? schedule+0x1fd/0x350 [ 560.021813][ T30] ? lock_acquire+0x2f/0xb0 [ 560.027801][ T30] ? schedule+0x1fd/0x350 [ 560.033011][ T30] ? aa_label_sk_perm+0x19d/0x5a0 [ 560.039053][ T30] ? futex_wait_queue+0x41/0x1f0 [ 560.045011][ T30] ? schedule+0xf1/0x350 [ 560.050110][ T30] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 560.056564][ T30] ? futex_unqueue+0xba/0x140 [ 560.062180][ T30] ? __futex_wait+0x324/0x3c0 [ 560.068072][ T30] ? __pfx___futex_wait+0x10/0x10 [ 560.074110][ T30] ? try_to_wake_up+0x158/0x1490 [ 560.080084][ T30] ? ipv6_setsockopt+0xcb/0x170 [ 560.085915][ T30] ipv6_setsockopt+0xcb/0x170 [ 560.091528][ T30] sctp_setsockopt+0x16a/0xb880 [ 560.097372][ T30] ? __pfx_sctp_setsockopt+0x10/0x10 [ 560.103714][ T30] ? __pfx_aa_sk_perm+0x10/0x10 [ 560.109551][ T30] ? sock_common_setsockopt+0x2e/0xf0 [ 560.116129][ T30] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 560.123191][ T30] do_sock_setsockopt+0x222/0x480 [ 560.129887][ T30] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 560.136583][ T30] ? __fget_files+0x40/0x3a0 [ 560.142091][ T30] ? lock_acquire+0x2f/0xb0 [ 560.147547][ T30] __sys_setsockopt+0x1a0/0x230 [ 560.153373][ T30] __x64_sys_setsockopt+0xbd/0x160 [ 560.159524][ T30] ? trace_irq_enable.constprop.0+0xea/0x140 [ 560.166717][ T30] do_syscall_64+0xcd/0x250 [ 560.172243][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.179400][ T30] RIP: 0033:0x7f1992b8cd29 [ 560.184721][ T30] RSP: 002b:00007f1993946038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 560.194857][ T30] RAX: ffffffffffffffda RBX: 00007f1992da6080 RCX: 00007f1992b8cd29 [ 560.204429][ T30] RDX: 000000000000002a RSI: 0000000000000029 RDI: 0400000000000003 [ 560.214068][ T30] RBP: 00007f1992c0e2a0 R08: 0000000000000003 R09: 0000000000000000 [ 560.223677][ T30] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 560.233709][ T30] R13: 0000000000000000 R14: 00007f1992da6080 R15: 00007ffc1646ee88 [ 560.243333][ T30] [ 560.246979][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 560.257808][ T30] INFO: task kworker/0:6:14809 blocked for more than 148 seconds. [ 560.267184][ T30] Not tainted 6.13.0-syzkaller-04541-gdf60eac9efe8 #0 [ 560.276146][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 560.286724][ T30] task:kworker/0:6 state:D stack:28800 pid:14809 tgid:14809 ppid:2 flags:0x00004000 [ 560.299080][ T30] Workqueue: events ovs_dp_masks_rebalance [ 560.306112][ T30] Call Trace: [ 560.310039][ T30] [ 560.313536][ T30] __schedule+0x1142/0x5b60 [ 560.318972][ T30] ? lock_acquire+0x2f/0xb0 [ 560.324384][ T30] ? try_to_wake_up+0xb6/0x1490 [ 560.330794][ T30] ? do_raw_spin_unlock+0x172/0x230 [ 560.337073][ T30] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 560.344032][ T30] ? rcu_is_watching+0x12/0xc0 [ 560.349765][ T30] ? __pfx___schedule+0x10/0x10 [ 560.355658][ T30] ? lock_release+0x4e2/0x6f0 [ 560.361265][ T30] ? schedule+0x298/0x350 [ 560.366535][ T30] ? __pfx_lock_release+0x10/0x10 [ 560.372732][ T30] ? rcu_is_watching+0x12/0xc0 [ 560.378525][ T30] ? trace_irq_enable.constprop.0+0xea/0x140 [ 560.385744][ T30] schedule+0xe7/0x350 [ 560.390647][ T30] schedule_preempt_disabled+0x13/0x30 [ 560.397235][ T30] __mutex_lock+0x6bd/0xb10 [ 560.402647][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 560.409117][ T30] ? ovs_dp_masks_rebalance+0x24/0xf0 [ 560.415579][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 560.421584][ T30] ? rcu_is_watching+0x12/0xc0 [ 560.427334][ T30] ? rcu_is_watching+0x12/0xc0 [ 560.433505][ T30] ? trace_lock_acquire+0x14e/0x1f0 [ 560.439801][ T30] ? ovs_dp_masks_rebalance+0x24/0xf0 [ 560.446337][ T30] ovs_dp_masks_rebalance+0x24/0xf0 [ 560.452598][ T30] process_one_work+0x958/0x1b30 [ 560.458574][ T30] ? __pfx_wg_packet_encrypt_worker+0x10/0x10 [ 560.465888][ T30] ? __pfx_process_one_work+0x10/0x10 [ 560.472312][ T30] ? rcu_is_watching+0x12/0xc0 [ 560.478261][ T30] ? assign_work+0x1a0/0x250 [ 560.483798][ T30] worker_thread+0x6c8/0xf00 [ 560.489338][ T30] ? __kthread_parkme+0x148/0x220 [ 560.495403][ T30] ? __pfx_worker_thread+0x10/0x10 [ 560.501534][ T30] kthread+0x3af/0x750 [ 560.506436][ T30] ? __pfx_kthread+0x10/0x10 [ 560.511939][ T30] ? lock_acquire+0x2f/0xb0 [ 560.517365][ T30] ? rcu_is_watching+0x12/0xc0 [ 560.523101][ T30] ? __pfx_kthread+0x10/0x10 [ 560.528619][ T30] ret_from_fork+0x45/0x80 [ 560.533915][ T30] ? __pfx_kthread+0x10/0x10 [ 560.539929][ T30] ret_from_fork_asm+0x1a/0x30 [ 560.545733][ T30] [ 560.549346][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 560.560198][ T30] INFO: lockdep is turned off. [ 560.565950][ T30] NMI backtrace for cpu 0 [ 560.565963][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-04541-gdf60eac9efe8 #0 [ 560.565987][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 560.565995][ T30] Call Trace: [ 560.566000][ T30] [ 560.566005][ T30] dump_stack_lvl+0x116/0x1f0 [ 560.566031][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 560.566050][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 560.566065][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 560.566084][ T30] watchdog+0xf14/0x1240 [ 560.566100][ T30] ? __pfx_watchdog+0x10/0x10 [ 560.566115][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 560.566136][ T30] ? __kthread_parkme+0x148/0x220 [ 560.566154][ T30] ? __pfx_watchdog+0x10/0x10 [ 560.566169][ T30] kthread+0x3af/0x750 [ 560.566180][ T30] ? __pfx_kthread+0x10/0x10 [ 560.566193][ T30] ? __pfx_kthread+0x10/0x10 [ 560.566205][ T30] ret_from_fork+0x45/0x80 [ 560.566218][ T30] ? __pfx_kthread+0x10/0x10 [ 560.566230][ T30] ret_from_fork_asm+0x1a/0x30 [ 560.566253][ T30] [ 560.566258][ T30] Sending NMI from CPU 0 to CPUs 1: [ 560.700160][ C1] NMI backtrace for cpu 1 [ 560.700174][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.13.0-syzkaller-04541-gdf60eac9efe8 #0 [ 560.700206][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 560.700220][ C1] RIP: 0010:enqueue_task_fair+0x40b/0x1120 [ 560.700250][ C1] Code: 00 48 89 fa 48 c1 ea 03 42 0f b6 14 32 84 d2 74 09 80 fa 03 0f 8e 01 0b 00 00 45 8b 8f e0 01 00 00 45 85 c9 0f 84 68 fe ff ff <48> 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 4d 85 e4 [ 560.700272][ C1] RSP: 0018:ffffc90000a18de8 EFLAGS: 00000046 [ 560.700290][ C1] RAX: ffff8880b873ecc0 RBX: 0000000000000000 RCX: ffff8880b873ecc0 [ 560.700305][ C1] RDX: 1ffff110170e7da0 RSI: 0000000000000008 RDI: ffff88801d6e0000 [ 560.700320][ C1] RBP: ffff8880b873ed00 R08: 0000000000000001 R09: ffffed1003adc000 [ 560.700335][ C1] R10: ffff88801d6e0007 R11: ffffc90000a18ff8 R12: 000000000016e360 [ 560.700350][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff8880b873ed80 [ 560.700364][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 560.700385][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 560.700399][ C1] CR2: 00007f7d530d7d60 CR3: 000000000df80000 CR4: 00000000003526f0 [ 560.700413][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 560.700426][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 560.700440][ C1] Call Trace: [ 560.700447][ C1] [ 560.700455][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 560.700486][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 560.700508][ C1] ? nmi_handle+0x1ac/0x5d0 [ 560.700532][ C1] ? enqueue_task_fair+0x40b/0x1120 [ 560.700555][ C1] ? default_do_nmi+0x6a/0x160 [ 560.700583][ C1] ? exc_nmi+0x170/0x1e0 [ 560.700609][ C1] ? end_repeat_nmi+0xf/0x53 [ 560.700638][ C1] ? enqueue_task_fair+0x40b/0x1120 [ 560.700661][ C1] ? enqueue_task_fair+0x40b/0x1120 [ 560.700684][ C1] ? enqueue_task_fair+0x40b/0x1120 [ 560.700706][ C1] [ 560.700713][ C1] [ 560.700721][ C1] ? rcu_is_watching+0x12/0xc0 [ 560.700752][ C1] enqueue_task+0x75/0x470 [ 560.700789][ C1] ttwu_do_activate+0x183/0x9c0 [ 560.700814][ C1] sched_ttwu_pending+0x247/0x560 [ 560.700838][ C1] ? sched_clock+0x38/0x60 [ 560.700857][ C1] ? __pfx_sched_ttwu_pending+0x10/0x10 [ 560.700881][ C1] ? tick_irq_enter+0x16b/0x240 [ 560.700913][ C1] ? __pfx_sched_ttwu_pending+0x10/0x10 [ 560.700936][ C1] ? rcu_is_watching+0x12/0xc0 [ 560.700967][ C1] __flush_smp_call_function_queue+0x4cf/0x8c0 [ 560.700998][ C1] __sysvec_call_function_single+0x8c/0x410 [ 560.701032][ C1] sysvec_call_function_single+0x9f/0xc0 [ 560.701065][ C1] [ 560.701072][ C1] [ 560.701079][ C1] asm_sysvec_call_function_single+0x1a/0x20 [ 560.701106][ C1] RIP: 0010:acpi_safe_halt+0x1a/0x20 [ 560.701132][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 65 48 8b 05 b8 da de 74 48 8b 00 a8 08 75 0c 66 90 0f 00 2d 28 dd b8 00 fb f4 c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 560.701153][ C1] RSP: 0018:ffffc900001a7d58 EFLAGS: 00000246 [ 560.701169][ C1] RAX: 0000000000004000 RBX: 0000000000000001 RCX: ffffffff8b24e279 [ 560.701190][ C1] RDX: 0000000000000001 RSI: ffff888020a8d800 RDI: ffff888020a8d864 [ 560.701205][ C1] RBP: ffff888020a8d864 R08: 0000000000000000 R09: ffffed10170e6f7d [ 560.701220][ C1] R10: ffff8880b8737beb R11: 0000000000000000 R12: ffff888020fc0000 [ 560.701234][ C1] R13: ffffffff8ee23360 R14: 0000000000000001 R15: 0000000000000000 [ 560.701251][ C1] ? ct_kernel_exit+0x139/0x190 [ 560.701274][ C1] acpi_idle_enter+0xc5/0x160 [ 560.701299][ C1] cpuidle_enter_state+0xaa/0x4f0 [ 560.701323][ C1] ? __pfx_tsc_verify_tsc_adjust+0x10/0x10 [ 560.701347][ C1] cpuidle_enter+0x4e/0xa0 [ 560.701374][ C1] do_idle+0x310/0x3f0 [ 560.701395][ C1] ? __pfx_do_idle+0x10/0x10 [ 560.701419][ C1] cpu_startup_entry+0x4f/0x60 [ 560.701441][ C1] start_secondary+0x222/0x2b0 [ 560.701474][ C1] ? __pfx_start_secondary+0x10/0x10 [ 560.701510][ C1] common_startup_64+0x13e/0x148 [ 560.701542][ C1] [ 560.702288][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 561.185225][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-04541-gdf60eac9efe8 #0 [ 561.197386][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 561.209442][ T30] Call Trace: [ 561.213361][ T30] [ 561.216876][ T30] dump_stack_lvl+0x3d/0x1f0 [ 561.222388][ T30] panic+0x71d/0x800 [ 561.227054][ T30] ? __pfx_panic+0x10/0x10 [ 561.232342][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 561.238768][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 561.245939][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 561.252366][ T30] ? watchdog+0xd7e/0x1240 [ 561.257649][ T30] ? watchdog+0xd71/0x1240 [ 561.262945][ T30] watchdog+0xd8f/0x1240 [ 561.268024][ T30] ? __pfx_watchdog+0x10/0x10 [ 561.273622][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 561.279854][ T30] ? __kthread_parkme+0x148/0x220 [ 561.285875][ T30] ? __pfx_watchdog+0x10/0x10 [ 561.291473][ T30] kthread+0x3af/0x750 [ 561.296340][ T30] ? __pfx_kthread+0x10/0x10 [ 561.301832][ T30] ? __pfx_kthread+0x10/0x10 [ 561.307321][ T30] ret_from_fork+0x45/0x80 [ 561.312606][ T30] ? __pfx_kthread+0x10/0x10 [ 561.318092][ T30] ret_from_fork_asm+0x1a/0x30 [ 561.323802][ T30] [ 561.327665][ T30] Kernel Offset: disabled [ 561.332827][ T30] Rebooting in 86400 seconds..