last executing test programs: 2m12.976030667s ago: executing program 1 (id=620): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x34, r1, 0x1, 0x2070bd26, 0x25dfdbfd, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, '\x00\x00\a\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0xffffffffffffffff}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c855}, 0x4880) 2m12.674820179s ago: executing program 1 (id=613): mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) (async) socket(0xa, 0x801, 0x84) (async) r0 = socket(0x2, 0x801, 0x100) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1\x00', 0x0}) (async) r2 = openat$auto_minstrel_ht_stat_csv_fops_rc80211_minstrel_ht_debugfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/ieee80211/phy3/netdev:wlan0/stations/08:02:11:00:00:01/rc_stats_csv\x00', 0x200, 0x0) (async, rerun: 32) r3 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/block/nbd0/zone_wplugs\x00', 0x60000, 0x0) (rerun: 32) pread64$auto(r3, 0x0, 0xf42d, 0x100) read$auto_minstrel_ht_stat_csv_fops_rc80211_minstrel_ht_debugfs(r2, &(0x7f00000001c0)=""/40, 0x28) (async, rerun: 32) sendmsg$auto_IOAM6_CMD_NS_SET_SCHEMA(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x40054) (async, rerun: 32) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_5={@target_ifindex=r1, r0, 0x9f, 0x0, 0x1, @relative_fd, 0x5}, 0x96) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/serio/drivers/rainshadow-cec/bind_mode\x00', 0x183080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000001180)=""/187, 0xbb) 2m12.442394768s ago: executing program 1 (id=617): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pipe$auto(0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) socket(0x1d, 0x2, 0x6) socket(0x2, 0x2, 0x1) io_uring_setup$auto(0x6, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/013/001\x00', 0xa101, 0x0) io_uring_setup$auto(0x2, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/extfrag/unusable_index\x00', 0x1, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) socketpair$auto(0x4, 0x1, 0x20000, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) 2m11.104368301s ago: executing program 1 (id=627): mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xffffffffffffffff, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x840000000002, 0x3, 0xff) connect$auto(0x3, &(0x7f0000000040), 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0xe803) 2m10.918785865s ago: executing program 1 (id=629): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f00000000c0), 0xffffffff}, 0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/pci0000:00/0000:00:01.0/broken_parity_status\x00', 0xa001, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-subdev0\x00', 0x0, 0x0) ioctl$auto(0x3, 0xc0585605, 0x38) 2m10.606973578s ago: executing program 1 (id=632): r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) mmap$auto(0x0, 0x20009, 0x4000000000e1, 0x16, 0x401, 0x8000) socket(0xa, 0x3, 0x8) socket(0x2b, 0x1, 0x11) r1 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001400c7d2a2e1917949643de42b"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) socket(0x2b, 0x1, 0x0) recvmmsg$auto(0x5, &(0x7f0000000580)={{0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x80000001}, 0x4}, 0x3, 0x6, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) unshare$auto(0x40000080) r3 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r3, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{W\xed>\xe7l\xcb\x90\\/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x400) write$auto(0xca, &(0x7f0000000040)='\x04>\x01\r\a\x00\xf6OL\xc8\xbe\x94\xf2\xa2\x00\x00', 0x2d9) write$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000000680)="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", 0x658) ioctl$auto(r0, 0x400454ca, 0x38) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000140), r4) sendmsg$auto_OVS_VPORT_CMD_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000fe00f7240400000004e931800f0003006e65746465766a48"], 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x40) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0xca, 0x0, 0x1ff) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000340), 0x108800, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x2, 0x2) 1m58.476779483s ago: executing program 0 (id=667): socket(0x23, 0x80805, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) ioctl$auto_TIOCGDEV2(r0, 0x5410, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = io_uring_setup$auto(0x6, 0x0) r3 = socket(0xa, 0x2, 0x0) r4 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), r3) r5 = getpgid$auto(0x0) r6 = semctl$auto_SEM_INFO(0x80000000, 0x8, 0x13, 0x8) shmctl$auto(0x0, 0x1c1b, &(0x7f0000000580)={{0x1, 0x0, 0xffffffffffffffff, 0x80, 0x0, 0x67, 0x9f20}, 0x34c, 0xfffffffffffffffe, 0xb82, 0x1, @inferred=r5, @raw, 0x7, 0x0, &(0x7f0000000400)="2874c7d759e4fd4d3c1bf8b433e198a44440076bbb6b6aa7cab701dc3de3f2140be93eeed72428f76cd1e63f4f188e9048e14b549df38de7ccb767b1338cea4e4dd166d24c77fbd67e90c4e6b7f03b7078ef9d079c3c52a96f5d56f50c50e4c34f298ca909559de29e3e7c7998a8a0d98bb54fb1f3b025da9f46326435142e09019ee323102aa70764565283d5433cde", &(0x7f00000004c0)="16b6a3c0531da56ec2e1e15ccee9a13470e189cf3b2229d21b55928fcc730748e05e21439f2d5465ccc4ce20b9c322c658081966713a6cace28ddaadf5ef33e8d251ea73be486e49daa1297de984ae0813cf0d345eebcdcbb3749ac10b0b4b914e070b0ec40ff54f3840e0912effcc90ceca6b31e314b28ada2f981d94f60c0e6b8f725138f317cba6e8c2057a3914fb237afd8a0209b313f354ef2034644447e8fa25a7357106f0f981bbf86c12333e2d706c7580d91dc3396191"}) sendmsg$auto_IPVS_CMD_SET_CONFIG(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000002ec0)={0x6a8, r4, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x5a3, 0x3, 0x0, 0x1, [@generic="0ae556ea96b6aac20a2df353bb08ecd46a7f933d1b2db8ce9af498e5ff3a90bfe88cc0b1e2e58b0f02ef589c88720e1e867e4da84e9bd27e4e7c2e138ed9b259006d0495ac1d03abe76afce408df49a9a4d2c79e8416718b6ea62d96bfe4d485b5898da01e69d213069313429fe114911f46d2480f", @nested={0x1d1, 0x43, 0x0, 0x1, [@typed={0x8, 0x119, 0x0, 0x0, @pid}, @nested={0x4, 0x5e}, @generic="1b6180a9a251a5f7309b5b6b8af06ed32ba9a6c9b4845494259b2eee6bf6aceccc80f3c1ac1e002fbb719b8a15e2fe551c7c038ef05802e35f6c3566675751865ee538b9e57ac3c3ac0668a4b3929be439d1ef4cdd24c7415036f9d02f18333fe5fccf1ccb5a61d1e047fa29c9119ab9bbea68f91fc936910e843c7c568c765383c07ce45c309fbf64924e2567db900905537a8003e022f7a044", @typed={0x12, 0x14b, 0x0, 0x0, @str='/dev/snapshot\x00'}, @nested={0xc0, 0xfd, 0x0, 0x1, [@nested={0x6b, 0x0, 0x0, 0x1, [@nested={0x4, 0x39}, @generic="83a2f64b2517d78d4b35f682fae06df8c9d8d1304d20edb9ffc00f9557120beba65b931867ac72bcb92b294db856579f1e06941dde93d341c9fe2779ed11c2ced86e1667ac48ccbf396a1a878790b7921a8c9c11", @generic="06bdb8fce0f60102142169949adf32"]}, @typed={0xc, 0xca, 0x0, 0x0, @u64=0x4}, @typed={0x8, 0xb3, 0x0, 0x0, @ipv4=@empty}, @typed={0x8, 0x8f, 0x0, 0x0, @pid=r6}, @nested={0x4, 0xeb}, @generic="fb968e251cf8c2dbe1cb0c0704b40ef90bd599aa0e4b64ef03cae3466a3ddd9766e1c5b8698a5a767847a21cfcf9c070"]}, @generic="627d93aa42f40ad39e72806204876c62645d32e22db38cf26b22937449b0acd596f82d21bbab5d200dbe014bca9443d8ef194821a06d9151f0027a098a56ce0fe0fb799d8437668b53f1752dcb19744e1fc8cd"]}, @nested={0x5e, 0x57, 0x0, 0x1, [@typed={0x14, 0xcf, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x14, 0xa3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @nested={0x4, 0x53}, @generic="0baa9962d832bfc7a1598f73f290676159d5d963f0ef3f3694e8c4769e09a76a5681c9ac27bac98715719137d62e"]}, @generic="5b4616330f58eec7166fdb5686acea5e1073d07a6eb7b91e3eb3ad97fb23c2aa1e37e9c9253c0115d7c961fed3edb90a3043132ec20bdf79be7ae10344c3f520acf5783d0eb3c0e11c56c454f6919da28e35da492fd3bd376918d0d1db7541fe3db6ce2b222834198cbee80a7b8b144af6a3fea938b06a01046b00b17c01cfd123", @generic="0a8c25de9c6f31e39a6bcfad2f409551b2465a4c1003d3a46dc8740e9d4e1794644249f256fb7ba7b4475e04825ebcdadeb3d0824157cddbcb471d53880652048b58569b6e4c33ce64cb48ab36673752d6980118e2b398045597a158fb9fcc22e5ba4cdb205e8980f4ca5620bc9270655998e15fd4623e70d35bb1c3c2d4386f44f98217d65dc1b99d0995bb4e2f", @generic="1eecf67e42a1d61f4e23ea7292fa8f0b334f8861a5905219476eac17430e2a6298df7834dd39fea33d5140246b3c8cede37cc5d84006fce1b686f9aa64fbd490f5bdb6e8810fecef991664c54e804cd59dc1e3ce75bb3e4f7e12a5b3c9a7022868b3de8ec536b30525e4728d360702f8d5b0e5ddfdaefc630b8e9dcec51b6492186a79401903db258e75a34ca1c0f85639b3bdb06d35b5d220556679c0e28bdd", @generic="894e299d6260a47e11406008a472f6a9725b9fef7c39d86f448a815b8fe227", @typed={0x72, 0xee, 0x0, 0x0, @binary="a895dddcadc160208257bf40bf2dd02bcebaff5bda07255f20bd9238a484ed5d79d9850255acbc7518279602ea8428341fa8c6557a677f047fe9584ab750fa00ef97975da7f3df5c56ee63409e4e3c955b2edd3e81eb38ed886dad4bd5ba59ee95fb8b7109f14f7ce5f6c79bf854"}, @typed={0x8, 0xae, 0x0, 0x0, @pid=r5}, @generic="81b8b1fc1c32599be89ba74119c806ea27f3aa5e9c5679a312270e7e81db4890806dea78fbeef252fe7f1b53f45998db15af37e140c0980a2d7fbcd426c4d79699daf726d795c9ee038fbb00977b0cb662122831dd9d93cd3f297d8ba7f0c40aa0be2f15b6a064c90ed84f6e5fbe01f3bf592c3a924602291753fa87cf056ef96dc23104d826ebf0cb14701dd5813e112b131f931c47eb04b4122e7add7159a42977ab9a220fea98b80f73fb"]}, @IPVS_CMD_ATTR_DEST={0xe8, 0x2, 0x0, 0x1, [@nested={0xb0, 0x92, 0x0, 0x1, [@generic="d4ad4d603c22496113937a8eaa783c1c540b4fee3e91dd97e7e7c707d5c6824da6f81cd4ccfaa1e0192047d92a084580d8d3dcec9e0e1f05aaec27e0061c3bc62f4e2956b774100f323c35da387294d9002cdfc7442311ac9be9543f563477c79fa349fab57e1367f10dbcd33bf486e3e1c04b1bec3231ac4c345e364b8096f1b0b51235e4aa6a8610394439291a753b17c79af7e4bdc46ab8d125d52252171da528cd26fdd0be3f74ecc8f5"]}, @generic="532c16efa56127ece7fbd51bcfa70b735c7ec1c7afce1a7429cd7567f897de394a1b1e2de669ac1e3c1470ddc986a2e6e4bb6e49"]}]}, 0x6a8}}, 0x4c0a4) r7 = prctl$auto_PR_GET_FPEXC(0xb, 0x8, 0x0, 0x56, 0xc) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mknod$auto(&(0x7f0000000000)='*-\x00', 0x5, 0x8) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x40400, 0x48) fchmodat2$auto(r8, &(0x7f0000000340)='*-\x00', 0xd800, 0x100) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/oom_adj\x00', 0x2040, 0x0) r9 = setfsuid$auto(0xee01) r10 = clone3$auto(&(0x7f0000000040)={0xfffffffffffeffff, 0x5, 0x1ff, 0x0, 0x82, 0xdd, 0x6, 0x2, 0xfffffffffffff9da, 0x0, 0x49402010}, 0x3) r11 = semctl$auto_GETZCNT(0x5, 0x3, 0xf, 0x1ce64e27) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f00000000c0)={0x2b8, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x2a2, 0x2, 0x0, 0x1, [@nested={0x13d, 0xd6, 0x0, 0x1, [@generic="e25e3408f9245ebbfc91987f68d9d328f3224d9f6ea9fddec92b84b3cbf07c4b9da4cf566844b79e8ba937e21650038423d2a28eb2aff647c4e74897ef89d69b901b8b435ad71afe7adc1507f44c44a8e238bd8a4e079136b670d5ccab041e1fdcf9aba4d05d081831a1a0ebafc4b194390db1488f6e51e42fda6a5033e8f327db0b1a781714", @typed={0x6, 0xe3, 0x0, 0x0, @str='W\x00'}, @typed={0xf, 0x8b, 0x0, 0x0, @str='/dev/ttyS1\x00'}, @typed={0x8, 0xa1, 0x0, 0x0, @fd=r7}, @nested={0x4, 0x66}, @generic="88107075d0e009c63b8981411b5268a71838fc2529a748ff8c519a97afae9c622d1e5e8dc3dda624a71f7f2f47669be90aa9b54412d18248c84a4ffc2994137552a40adafeb4fc722e94418e37f60533119b6e1b7d3ca3d42f459ca45dba5f6e5e5dba746c1fb566f1a4aca2130a07f2d793d0e88455a5789968e98d31fe58296d042e4ae140acbe6872b36c1d6ecb"]}, @nested={0xbe, 0x10d, 0x0, 0x1, [@typed={0x8, 0x36, 0x0, 0x0, @uid=r9}, @typed={0x14, 0x31, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @typed={0x14, 0xb0, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x2c}}, @generic="0b6fb668330f19d85d48c7ba2c93e0d73a3e7d5ff126d673ce3584dc15cab3eb571fb363d12907d47b4147d9a146051ae905fd49c0f37041167973e9b2c963f997c24b2834f26ced2f4a3239715f993a5c899a7976f23fce505828b6874b1aae754e8725f5d21e294153", @nested={0x4, 0x108}, @typed={0x8, 0x14a, 0x0, 0x0, @pid=r10}, @nested={0x4, 0x3b}, @typed={0x8, 0xf6, 0x0, 0x0, @pid=r11}, @typed={0x8, 0x67, 0x0, 0x0, @pid=0xffffffffffffffff}]}, @generic="f7d7f089060c9a9a5ffd447dd0f4ddc4190beaed748e70ba9d8fe3c0531de8a74a36b3dd79291004a3ec67936d3092a8c62230abef052996dd5f831b38a59e898698589aacd7a203be340efed5b2f02a9cbc6cca375aba4694242b08e718d62a7cce7a09dd3e3546451b0c7dfd97ac045996bbb6da363af09cc678d30ce9d6f9396d64cd3472015c1ff1cdc31ddce1acde38", @typed={0xc, 0xc7, 0x0, 0x0, @u64}]}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x880}, 0x40010) 1m58.031157769s ago: executing program 0 (id=670): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/kernel/auto_msgmni\x00', 0x101000, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) statmount$auto(0x0, 0x0, 0x1fe, 0xd) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x80) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r1 = socket(0x29, 0x2, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r2, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) r3 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto_EVIOCGMASK(r3, 0x80104592, &(0x7f0000000000)={0x1ffc, 0x8, 0xfffffffffffffffe}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'veth1_vlan\x00', 0x0}) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d40), r5) sendmsg$auto_ETHTOOL_MSG_PHC_VCLOCKS_GET(r5, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x20, r7, 0x27, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_PHC_VCLOCKS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}}, 0x20040040) ioctl$auto(r1, 0x89f0, 0x24) r8 = open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) ioctl$auto_TIOCSETD2(r8, 0x5423, &(0x7f0000000280)="8de4b69816aa562612985eb5a6925876a01e1805f7a3e356d12b0ecf162ec27bcbf29ba96841f904bc6409147fa0cc277e41083645a86080a5355a7c4b534aa24b771e6bd968492300d574ad7e9d0ad1799fbc3c7b0d4cc3e6e33bed26518ae2232f74a036357f01e185f1336221cf25c96f430683e0a03906e5713bde5371ab59c7") mount$auto(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='hfs\x00', 0x9, 0x0) 1m56.222634684s ago: executing program 0 (id=675): close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000004680)='/sys/kernel/debug/tracing/dynamic_events\x00', 0x502, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) ioctl$auto_XFS_IOC_ALLOCSP64(0xffffffffffffffff, 0x40305824, &(0x7f0000000040)={0x7b3, 0x7ff, 0x6, 0x9, 0xe35, 0xffffffffffffffff}) capget$auto(&(0x7f0000000080)={0xdcd9}, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x9, 0x1, 0x401bf, 0x7352, 0x3f, 0x7ffe, 0x1, 0x7, 0x2, 0x4, 0x9, 0x3, 0x0, 0x8, 0x3000, 0x9, 0x6, 0x10002, 0x80, 0x5a6e, 0x0, 0x7, 0x1ffc, 0x203, 0x400, 0x84, [0xffffffffffffffff, 0x70bd, 0x4, 0xff, 0x4, 0x26, 0xfffffffffffffffd, 0xa, 0x1000000070624ce7, 0x0, 0xa, 0x947, 0x3, 0x1, 0x0, 0xffffffffffffffff, 0x16128f2c, 0x5, 0x200000000000, 0x0, 0xffffffffefffffff, 0x3, 0x0, 0x7, 0x2, 0x4, 0x400000000005b7, 0xc, 0x4000000002, 0x8, 0x4, 0x6, 0x6, 0x890, 0x800000000000a, 0x3, 0x1000, 0xa38, 0x0, 0x4, 0xfffffffffffffffc, 0x2, 0x4000000000, 0x8, 0x0, 0x100000]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x80805, 0x0) rt_sigaction$auto(0x36, 0x0, 0x0, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) rt_sigaction$auto(0x7, 0x0, 0x0, 0x8) getsockopt$auto_SO_KEEPALIVE(0xffffffffffffffff, 0x2, 0x9, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r0 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000000) connect$auto(r0, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(0x3, 0x10000000084, 0x25, 0x0, 0x90) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r1 = socket(0x10, 0x2, 0x0) ioctl$auto_RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000000)={0x3, 0x3, {0x5, 0x4, 0x9, 0x7, 0x1, 0x3a50, 0xfffffffd, 0xffff, 0xfd}}) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x101, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) mmap$auto(0x100000000000, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x181440, 0x0) 1m55.493110726s ago: executing program 32 (id=632): r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) mmap$auto(0x0, 0x20009, 0x4000000000e1, 0x16, 0x401, 0x8000) socket(0xa, 0x3, 0x8) socket(0x2b, 0x1, 0x11) r1 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001400c7d2a2e1917949643de42b"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) socket(0x2b, 0x1, 0x0) recvmmsg$auto(0x5, &(0x7f0000000580)={{0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x80000001}, 0x4}, 0x3, 0x6, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) unshare$auto(0x40000080) r3 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r3, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{W\xed>\xe7l\xcb\x90\\/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x400) write$auto(0xca, &(0x7f0000000040)='\x04>\x01\r\a\x00\xf6OL\xc8\xbe\x94\xf2\xa2\x00\x00', 0x2d9) write$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000000680)="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", 0x658) ioctl$auto(r0, 0x400454ca, 0x38) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000140), r4) sendmsg$auto_OVS_VPORT_CMD_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000fe00f7240400000004e931800f0003006e65746465766a48"], 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x40) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0xca, 0x0, 0x1ff) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000340), 0x108800, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x2, 0x2) 1m55.402090378s ago: executing program 0 (id=679): mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) sendmsg$auto_MACSEC_CMD_ADD_RXSA(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x2cb8}, 0x1, 0x0, 0x0, 0x40}, 0x2404c084) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) r0 = socket(0xa, 0x3, 0xff) connect$auto(r0, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1m55.205690406s ago: executing program 0 (id=680): mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) sendmsg$auto_MACSEC_CMD_ADD_RXSA(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x2cb8}, 0x1, 0x0, 0x0, 0x40}, 0x2404c084) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) r0 = socket(0xa, 0x3, 0xff) connect$auto(r0, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (fail_nth: 1) 1m54.744282516s ago: executing program 0 (id=681): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0xf, 0x80805, 0x400) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = pipe2$auto(0x0, 0x80) mmap$auto(0x0, 0x2000c, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NETDEV_CMD_DEV_GET(r0, &(0x7f0000000040)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x404c000}, 0x8081) io_uring_setup$auto(0x6, 0x0) clone$auto(0x400000000000007, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) io_uring_register$auto(r1, 0x0, &(0x7f0000000000), 0x80000000) io_uring_register$auto(0x2, 0x9, 0x0, 0x0) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) readahead$auto(r1, 0x8, 0x5) ioctl$auto(0x3, 0x400454ca, 0x38) mmap$auto(0x0, 0x9, 0x2, 0x40eb2, 0x401, 0x300000000000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) setrlimit$auto(0x8, 0x0) mlockall$auto(0x7) read$auto(0xffffffffffffffff, 0x0, 0x20) write$auto(0x3, 0x0, 0x81) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/pcrypt/pencrypt/serial_cpumask\x00', 0xa001, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x202, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 1m39.480016495s ago: executing program 33 (id=681): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0xf, 0x80805, 0x400) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = pipe2$auto(0x0, 0x80) mmap$auto(0x0, 0x2000c, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NETDEV_CMD_DEV_GET(r0, &(0x7f0000000040)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x404c000}, 0x8081) io_uring_setup$auto(0x6, 0x0) clone$auto(0x400000000000007, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) io_uring_register$auto(r1, 0x0, &(0x7f0000000000), 0x80000000) io_uring_register$auto(0x2, 0x9, 0x0, 0x0) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) readahead$auto(r1, 0x8, 0x5) ioctl$auto(0x3, 0x400454ca, 0x38) mmap$auto(0x0, 0x9, 0x2, 0x40eb2, 0x401, 0x300000000000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) setrlimit$auto(0x8, 0x0) mlockall$auto(0x7) read$auto(0xffffffffffffffff, 0x0, 0x20) write$auto(0x3, 0x0, 0x81) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/pcrypt/pencrypt/serial_cpumask\x00', 0xa001, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x202, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 16.081461597s ago: executing program 5 (id=1024): openat$auto_generic(0xffffffffffffff9c, &(0x7f0000001500)='/proc/kpagecgroup\x00', 0x101000, 0x0) read$auto(0x3, 0x0, 0x80) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0x47b, 0x400, 0x9}]}) 15.773279107s ago: executing program 5 (id=1025): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async, rerun: 32) bpf$auto(0x0, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xffff, 0xfffff0b6, 0x5, 0xff, 0xac1, 0x2, 0x36242398, 0xfffff5b2, 0x3bb, 0x7, 0xffff, 0x800, 0x81, 0x68198}, 0x6f3) (async, rerun: 32) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) (async, rerun: 64) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async, rerun: 64) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/block/ram0/queue/nomerges\x00', 0xe3102, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) open(0x0, 0x22040, 0x75) r1 = socket(0x10, 0x2, 0x4) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="0100"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) (async, rerun: 32) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) (async, rerun: 32) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async, rerun: 32) recvfrom$auto(r0, &(0x7f0000000300)="90dfd96ab0239b16851aed4614bf9acc3cb950167b0a8fc84f05ee970d5fee78bf8492c8f1bc15d5969e378ebdc1ca0e0a5b963a87eec92c9fe7713fff294b12b050a02bf38a310936f796c76a45a738eb13e1c07c79e0fc6d5404e7135987d333cd357a13ad549e577934467c0a3264827901945b0f792a3eee5864f7668cc6f0968131431d37bcdc68e23888ca97a8d0741c530ccb6909936dc549bc103de554688aee91f8c103bddbf2aaca7747723489d5e5cfceb1ea7fd3e052bdefb00e88fa44043028b5a2ae1a50f22f6d683ade2445c5decbecfba3138cc1284881423ba8888b564349e6b1508211264750816bb866838626b944", 0x400000000, 0x10001, &(0x7f0000000000)=@vsock={0x28, 0x0, 0xffffffff, @hyper}, &(0x7f0000000040)=0x2) (rerun: 32) 14.292207008s ago: executing program 5 (id=1029): bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x8, 0xc, 0xe3, 0x400000000a, 0x3}, 0x6f6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.6/usb7/power/wakeup_active_count\x00') prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x28102, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) madvise$auto(0x0, 0x2000000080000001, 0x3) prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0xdaa0, 0x1, 0x8}, 0x9, 0x0) landlock_restrict_self$auto(r0, 0x0) capget$auto(0x0, 0xfffffffffffffffe) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x408, 0x7, 0x1ff, 0x7, 0x42, 0x4909b6f8, 0x1ffdf, 0x7, 0x200003, 0x2, 0xa121, 0x3, 0x6, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x80, 0x100000000, 0x0, 0x7, 0x2100, 0x200, 0x0, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x6, 0x2000, 0x0, 0x6, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x0, 0x5, 0xfffffffffffffffe, 0xffffffffffffbfff, 0xfffffffffffffffd, 0x1, 0x0, 0xffffffffffffffff, 0x4, 0xfffffffffffffffe, 0x2000000000000000, 0x0, 0x0, 0x400000000005b8, 0xc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x88e, 0x8000000000008, 0xfffffffffffffffc, 0x9, 0xa38, 0x0, 0x3, 0xfffffffffffffffa, 0x8, 0x4000000000, 0x7]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 8.038330896s ago: executing program 5 (id=1051): r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$auto_UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000180)={0x44, 0x6, {0x7, 0x81, 0x8, {0xf8a1, 0x4}, {0xfff, 0x6}, @ramp={0xff, 0x6, {0x7, 0x0, 0x7, 0x6}}}, {0xd, 0xc4, 0x6, {0x40, 0x1bba}, {0x3, 0xff80}, @condition=[{0x3, 0xb, 0x200, 0x6, 0x80, 0x1000}, {0x1000, 0x8, 0x28f, 0x8, 0x7, 0xff80}]}}) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="a02c0000", @ANYRES16, @ANYBLOB="010026bd7020f8dbdf250100000008000200", @ANYBLOB="08000100486652000a0002"], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_DEL(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1], 0x38}, 0x1, 0x0, 0x0, 0x7daaab7119aa4f13}, 0x22000000) 7.095596075s ago: executing program 5 (id=1052): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x3c9802, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0x17b, 0x400, 0x9}]}) 6.468783385s ago: executing program 2 (id=1056): mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xffffffffffffffff, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x840000000002, 0x3, 0xff) r0 = socket(0x11, 0x80003, 0x300) futex$auto(0x0, 0x6, 0x6, 0x0, 0x0, 0x9) setsockopt$auto(r0, 0x107, 0x12, 0x0, 0x4) connect$auto(0x3, &(0x7f0000000040), 0x55) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x13) 6.314554897s ago: executing program 3 (id=1057): r0 = getpid() r1 = prctl$auto_PR_SME_SET_VL(0x3f, 0x7fff, r0, 0x8000, 0xd) mmap$auto(0x4, 0x4, 0x4000000000df, 0x40eb2, r1, 0x300000000000) (async, rerun: 64) process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={0x0, 0xf}, 0x6, 0x0) (async, rerun: 64) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 6.10858884s ago: executing program 2 (id=1059): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x848000000015, 0x805, 0x0) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x6b) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d80)=ANY=[@ANYBLOB="05000000", @ANYRES16=0x0, @ANYBLOB="010025bd7000ffdbdf25150000000500120010000000080027000c000000380b2b80330b248004008080ba89ebda4be9067b59c90d50dab4ba175b1b13d15e19ee0f5bf6c6d2095efcc719c8e137b7ec6062c6c768e512acd0f1208ee2be2b891868abd1934bd95a54945e649a2afd1272f72e8fffb57e3ba1c8fb306ce2ba95180cf54dcca46ab950e626ff31022afd57f1306ee00962cb60c30a9946d642a00256ed0006ec8364307874f7c763c6e9af0222943721fb4fa5b1cecfe3a908b1fd515dad1e0ca0998fa55ca4bbf9412855250567f1b98186d8597ab6fb715cef224b510a7ccc4cae047b6d4ab94775e1158d87be4806455bbd76baaa3a656ed5f316b17a5a27a6ec9904006d80460a8e80b634a4b1ce57b5a586e945eb157cc566d02bed93630b901c93d3fde23606aa3e80e4d0644fef266741cf5f2879924594cd388ed548e2dea74f9d72af19edad4a810af64d79eaa131b2afaca3f428fd83499d9c7a99dfd9a24cbd9bf5b0f0446521fcf1f416f83791795dc86d63c7a05e38c547e208be35b17fb8aa1fa57ea4ac59aac09a5bfb9f08a6d02e58d5040324f4241a9eb63d5a1e48cff0ed3e97c4af9506ca950ce9d115d242277c614a27a77df014ced1df35f069b42113bc6bf5427f9c1ba6924ec8bafc11ba6d9303461e92e3c3e1b4d5b2954d259654ee2bab0385e3b106c4a93525200ce6e3f1e9f6d4b87b61583abced950ff97dade7ebde309c78d4f1ddbff5cb5c3fd141cbb4e56a97183f705019716cf6d6f300c9677b6f14b2b8d708b675b5c4f2357d9c22dd6bba1195ba295a5f713ac28f043cc671fc7b43fb9b40bf17766c79d698dd68d0e385e926971a18a3c3687c3c8202b806432be62b3030a2c9e31da55a6cd98165f7439f9a09508b8c4b9c5ea32aaf1f7c4246ea8700aaccaf476d9cd5e3b2340d17f13ba40c8fdaf4aa4c4b8763fd86d35bda9aab03e3a252d7e4aea01cdad1fad040b29a9e92ee1fd8c010c30b4cc69917cee531e42efa59c735fe8159a292f57fa7a4600e6833032846d87a515d9803770eb4db6712bce7b51fc2f0eff8a292023a8c7c1544c6e53012f9fe13aa8caf795caccfa4ff2321116a86938e2b782e7a57fe5cbff8df11b0bc86d691a7a8df0cc9486c4898e8bafd0b374798ecdba9af994890465f435d5e6408dd9ddd96df1673098864522e964b565d69882198a999ee41c980dafdf3538400c81ad57dc970a72b75d75850913452021a4dfe885342c4e5c33dbcd801b10866908de67b13c5dc4fb51dce74dae4c4c27413c00b50c8e18d1dcfe28974fee5df4cefd05f7e8e21e8881ef7300ca75af8ef7c8cfa0a1cf8771444e3bd449f957fa4500c1f371ccc31a7b196ca809935887d26d3ed24d2dc16c83aa263abd880df1d27d8463e4f29673fbb0a073caaf975314f5660bdf89c285291a46ddb2f8410b02e86bc522808052288fe16dbb7733976605ed2342c69717ba18334138bc68c994ffa20bbad1672a4ee0dc19a0ec177f36995edc671ef8d29211e4b7d0723a18c36c398df2e924a4f55ef95687e6a4aebcf86d36a9791d561c2203fc4a545d30a5173ffc84612c333a73fd0c84f92554294cfbbe86088e79bc6f1c9bc880b4502e4b47af767f47dbccbf4318ec6a33ee42cafc3e6ced6720adf772de614a754c7b0d93208cb0bdd285e8ff9ffe078bb782a57a14204784880a3379af47423967bf134933d350324a845e7aca06245efec7dd272177bbb663bf83c23161cf7d8b32d45502f6bbc6416720652aa197556c3cf5be55e2f8ace74ce95feb288f681d92ed529bb9892472c3633f744bfde252c8b00808d92daa2a3b4771eee9cc83745c326f8ea02119b55a99bddfc498948e53ce2efa0635276810d2211e9e0e63bc850029865d525cbf43cde05009dca149084d9569a1abb0e5f941bd5c67a77685e965b354dc744617960e642512f2cd86236c9a1791f446e822b86518185d668e7e93daec7b1a9f53034aeabc7c7bf52deefbf5e2a90b085c41c0f528ff2cf81dbc1c28ed95ad75fd65c0e0d793d7111dce84883cbf60cd55e025b824d84e141d54da72111ea2fed1fd8f3c9cf47763ee47a7988d5021ac661641ee95ea9c9d57dd2f8e537f3cb71830a6c1608dadf6beb7339961811f8da34f8fb7b5190f9c146942fda73801812ed6bffa1a60c80e5fd6528e045b40fa78c10f37797d93f827539aa389d59c48254397ff7b72325465d18b04acac619d9d5f80d46b57d28a76fbe83203ecacb91328b145ebbe356178a1eb1c09101fe785c98aab93485ae7b4217412b7ea31fdd965eaaf78d3ab4eec8bc689062b738c002fd94f9cd18bbc5285c57854f9092e85d90ec205f43fcc9d27cd6041fb73ed3164e7f2cb3ea694b89a1879f8cbcdbffdab4b277d0fa3dba5061952d266b2f3821f79cd2b3bf107c6250e711c9ddba407c9ed323d2dfda23d5a4088f8199d1cbb311a1b051da8d792299f471f0ca7fd7925695acaf01e7ad022d96dfb30e66d551fb37522baf2ea71cc5a6416124ee2138c3f2fb5cca4b71eb9d3571deebc898b62406f416caa3fcd732f9661548d8b7ec74bc94d9dcc92b0048abc2b358c0007a905c9513affbd873a368e0b5872a2f4cdc4bb8602ad3ec77cba3e150c8993f5fc88ac7e6b2642f4660486d5823482aae8f90ee7913abdb064398cebe5946c2920d7d99935571f9b1eeb4529373538e699dda91425660a1010a4cf7e9a10713f57fa1d601467ec51ad5153bd94582320ff55380ca7efefacf62f822b948cb3b93f68978f248639c51ac97e3f56bcca9990839ee01df9773b22cf261310d4b3c6b03ef54a9a848c10d1252d0412a8f01ff61bd6978112d6b69e2f71e02a04f43f3a1a8259f7e83c26fc5bc703a8b6d3d325f08b08f9dc10b8f654871386ef94d2493463f7f3d0b20bf93be475b0ed9e870aaedd63b8d08877651bace68300e3a1b0a5d1a3da2b246fef82de3b57eca440ae7a7656ff31ae74cad3a80f1ae615f2747589d4859ec1981a6a5176168db86ab5f6930d4679762956e408d2268cad53aa10727c8b8952114b17c352782dc9afc120535bcb99bcf1161397f19ac4d288677e48f0e6bfdcf5f852a8bc1b432399f0ade5db9585e09e4cc96a63dd7bddecbbaae880678f94111108d76c5d825629a3eee16b2a6362c59ba3cf99a2e2bcfa62d010706bca5c0d009b141f1c3f6a9cc58234f97a5721a3ee31772877ffda5507f8e7053e15cb60df08184dbdd9f2af7a618781fdd39d32404f3e2dc6ac48f35ce31bc70a019235b7776114ef2ae75ebf7b7191e5a61e1c5c82340e12dd98cf9125a3fb1c8062a206ac2aa98e708a190b1b70d1c2450b47394d8e1f21c541b3f4139d2159e9a37acf2ee9ba5e0cf99221a43b46793cad7b7b71784032a0092abb25380fa77646f948ed456d6fa1fb749f736e10491e39569c073308ee782562a59a719e4b8910f737a41ee0644db9905d22f44bae257749b03667b535af492012ad1c50f1d88a46a2c3aeeca86026c6e5ca8289bb153ff85aade4bd00b9bb87017d7816c24a0e71b0d0dcf6dedbc956c81bf445d665da7cb1c009be2f8d7eb286e2e2595166b8df0541ff0b80ab20d9ba30058ef52dc2c1905133bcca7193320811e0bc083798b80bce7e84ea9135d976fbc339b0814cb4f4dd9a71f9a2f1a78da4c60c1671b6ef41798646a702fd9eeb67bd250df336f0c1889c54be82bfc4238d6568ca0e7bf7a3005126d605a867b47f2c96fd6a92a9cf463270a9e2df32c6959c2f272b48a6b76fe7393dc12713c99888e0d03ffdac04f5d3c87e5343bc1a6127484b6d7e18e97a329ae582b8c3dd1be170cff9fdebcadfb339c67a303e15d6f779da6fbd91b401ac8e32fe1a0f16b5aa52ca7801d12aaba5c57945b3d0e768370e031d268b101df06ceaca597ca754d933b08f3b248548d267cbb16430c5110cdaf5b36bc2cf6a7c24f143277f606cbe77ef320505986fa5dc876e87ec74a2c06d0e893ed3da67cd814f209b3720e98d1b2f6afd245bcb682167978b98b9976c2ef41c8e4d5018fca6b1643fc"], 0xb5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48880) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) sendmsg$auto_ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x1a000, 0x40080}, 0x0) 5.865272559s ago: executing program 4 (id=1060): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom$auto(r0, 0x0, 0xe, 0x5, 0x0, 0x0) (async) ioprio_set$auto(0x6, 0x0, 0x8) statmount$auto(0x0, &(0x7f0000000180)={0x1, 0x1, 0x1000009, 0x3, 0x22, 0x940, 0x9ffde, 0x5, 0x6, 0x3ff, 0x9, 0x400005, 0xfff, 0x4, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x6, 0xffffffff, 0x0, 0x4000003, 0x80, 0x0, [0x3, 0x5, 0x200000000, 0x3ff, 0x0, 0x500, 0xfffffffffffffffd, 0x8, 0x3, 0x0, 0xc72, 0x7ffffffffffffffd, 0x0, 0x1, 0x0, 0x0, 0x40000000004, 0x5, 0x1000000800, 0x0, 0x0, 0x0, 0x9, 0x10000040000000, 0xcea, 0x0, 0xfffffffffffffffc, 0x800000, 0xfffffffffffffffa, 0x4, 0xffffffffffffffff, 0x2, 0x4001, 0xfffffffffffffffd, 0x0, 0xb548, 0x8, 0x0, 0xfffffffffffffff9, 0x0, 0x6c1a, 0x1, 0x0, 0x9f, 0x0, 0x3]}, 0x200, 0x81) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb4, r0, 0x8000) r1 = socketpair$auto(0x1a, 0x10000001, 0x9, 0x0) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) r4 = socket(0xa, 0x1, 0x84) r5 = getsockopt$auto(r4, 0x84, 0x6c, 0x0, 0x0) (async) r6 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D1p\x00', 0x80, 0x0) mmap$auto(0x800000, 0x9, 0x100000001, 0x8000000008011, r6, 0x82000000) (async) capget$auto(0x0, 0xfffffffffffffffe) (async) unshare$auto(0x40000080) (async) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x202, 0x0) (async) r7 = socket(0x1e, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000180)=@in={0x1e}, 0x68) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xf, 0x3, 0x2) socket(0xf, 0x3, 0x10000000000002) capset$auto(&(0x7f00000003c0)={0x2, 0xffffffffffffffff}, &(0x7f0000000400)={0x2, 0x5}) sendmsg$auto_NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000002800)={&(0x7f0000000140), 0xc, &(0x7f00000027c0)={&(0x7f0000000540)=ANY=[@ANYRES16=r7, @ANYRES16, @ANYBLOB="00082dbd7000fcdbdf25670000000c0058000100000000000000ab00b9800800e600ac1414bb70b24d57f3b1599ff1ff6e16ccdda4292d9c558a36d1eed7ac78132ee36f8af8fe6ef41ab1f37efc2033956b327a5e33ffb158f5f88a9be8f6dfb349536d3d1d61993d4ebeade70223535f045faa2bbcb4b5c8805b471e47c62d6d547a872d7f43677dea28bae4bd51282d5041fb921d0dd0efacf60980f55f2449a53abfd69af3bd79c51104e98ad66c1eae0c3f357f3f9a3994c3299b57348b17407b5103005821458008001f00", @ANYRES32=r1, @ANYBLOB="08001b00", @ANYRES32=r8, @ANYRES32=r8, @ANYRESOCT=r5, @ANYRESDEC, @ANYRES32=r8, @ANYRES16], 0x3618}, 0x1, 0x0, 0x0, 0x4000080}, 0x5) socket(0x10, 0x3, 0x6) (async) socket(0xa, 0x1, 0xf) (async) bind$auto(0x3, &(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x24, 0x8}, 0x68) (async) close_range$auto(0x2, 0x8, 0x0) (async) getsockopt$auto_SO_INCOMING_CPU(r7, 0xc3, 0x31, &(0x7f0000000440)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/4rigger >\x93/\xa3\xbd\xf4\xc8[U\n~\x15zb\xa4\x91vI\x1f\xe98\xaf\x81R9W\x15\xfeM\xd7\xfc\xa4\xee\x1d\x06\xe7\fg\xf9\xf7(%\xbe\x90\x1dr\xac\xb7W/m\x10\xb9\xb2\xc2!V\xd1|\xe0\xe2\xa5}H\x8d\x92\xf6 )\x98\xfe_v(\xa6\v\xca\xb7`\x14\xae\xbb\xbf\xc3\x06\xab\x16O\xaaLd\x0fxm\v_~i#(\x0f\xf3\x8c\x87\x8c\xc6,]Z\xda\x16\xca\xf4^L\x81t\x94\xa9\xc3\x0e\xc5\xc8\'\xe0\xd4\xf0\xfbc\x96;\x1fV\f\xd7\xef\xb3\x038\x11\x94\xd5\x818ce8,B\xacC\xfa\xda\x8cz\x15$\x17M\x9f\x05', &(0x7f0000000100)=0x9) (async) close_range$auto(0x2, 0xa, 0x0) 5.308307644s ago: executing program 3 (id=1061): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) capget$auto(&(0x7f0000000000)={0x19980330}, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000002500), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x2c, r3, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) r4 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_DEL(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fedbdf2502"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000500)={'gretap0\x00', 0x0}) socket(0xa, 0x23af690fef30229, 0x9) sendmsg$auto_BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x140080e4) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, [0x3, 0x2, 0xffffffffffffffff, 0x2, 0x0, 0x402000, 0x0, 0xe, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x6, 0x0, 0x8, 0x20000, 0x8, 0x10000000000, 0xfbffffffffffffff, 0x400000000004, 0x2f, 0x0, 0x0, 0x1006, 0x400000000005b5, 0xffff, 0x0, 0x100, 0x0, 0x6, 0x2, 0x88e, 0x40, 0xfffffffffffffffc, 0x8, 0xa38, 0x4, 0x4000003, 0xfffffffffffffffc, 0x2, 0x8, 0x10000000007, 0xc567]}, 0x1fa, 0xd) r8 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x2802, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r8, 0x2, &(0x7f0000000380)="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") sendmsg$auto_OVS_DP_CMD_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x70bd29, 0x25dfdbfc, {}, [@OVS_DP_ATTR_IFINDEX={0x8, 0x9, r7}]}, 0x1c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4000c000}, 0x4000024) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 4.567106402s ago: executing program 2 (id=1062): openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x101, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x1ffffffff000, 0x15) 4.392145634s ago: executing program 5 (id=1063): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) mmap$auto(0xfffffffffffffffe, 0x580f, 0x112f4a03, 0x8000000008011, 0x3, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x40, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x5, 0x4000000000df, 0x40eb1, 0x401, 0x9) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8002, 0x0) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r1, 0x0, 0xb4d3) write$auto(r0, 0x0, 0x7ff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r4, &(0x7f0000000140)={0x0, 0xfeff, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd7020f8dbdf25010000000800070004000000080001004866520008000200", @ANYRES32=0x9, @ANYBLOB="d89946fa5197f41821afadb8a2ec0ab75202fd7b9e5b44a7c0f1e60c4808bd2872202c2485aeb001bcab76db103398cbeae4bc592105ed7d6024c651917c27256ed828296155df57015a0470e08a4c95025f6a7a1221a9979790f35c2fb2a5afb410e0ae51e5cb26c7aff6d8ba87509b6da7fb2bb911a67d4f2e15e1eaa3a387f60f5297695075c301e814ff920638dd6f3bb5ae200b97e62d4c943c802c40564efb29b70cf4f12e4ea593c96acc671e4a184a61bb4f31e5308fd32fc99f791ba692fc00"/208], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) write$auto(0x3, 0x0, 0x70) 4.254118914s ago: executing program 3 (id=1064): mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) sendmsg$auto_MACSEC_CMD_ADD_RXSA(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x2cb8}, 0x1, 0x0, 0x0, 0x40}, 0x2404c084) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) r0 = socket(0xa, 0x3, 0xff) connect$auto(r0, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 4.245573649s ago: executing program 2 (id=1065): sendmsg$auto_IOAM6_CMD_ADD_NAMESPACE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x2008010) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7020f8dbdf250100000008000200", @ANYRES32=0x4, @ANYBLOB="080001004866520008000200", @ANYRES32=0x9, @ANYBLOB="88d8d4a648ec5fb7e27d548aeb3d567ca848f57d9cc1a74264ec8208ce86340510108e89a49905836bbad5e9cc22875c2c99330e2566084a57797c621fbb5ab4e2f28adf627b76bf85fc3011f2ec763e76555a4557b3b5182eb87d6a5822d9f95dc977547c05cfc9b700866141af4390476bf5d79b4d69b50e4ce8dc0f435e16bd0c8fd8b6dadbf2118f200ad7e85a50f74da0fdae5c11dd5dde0602e661f8fc96b9f52655eb6c0ed9e81b514981d02ece4e726d5259a299a7c28c5439d38c992427cb1ca3eddafbc8f1a38ccae47e22518af574216111302ce66e670e329e7afb0248"], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000003040), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003200)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="5da929bd7000fcdbdf25020000000400020008000480000000000800010005000000484507cf3c451b65ed53b7922ea41aeaf6856a760d39b5341e03ea476803b4b4c5ff2d93b7baccf0b8976dbc8cd8c7467308fbeefc0135a65de62e91281a53a2bfa8f002d924cdf18b7f7ea925e4c65d1266a86e695b4eb0cc61cc0de00f55a2521f619ccdbea0a58fe598642ffd43155d934b11192df6975c4c5d3c2d2ac8a4401039a2f351510c58e3278b1a4f151c643bb50421fa5fa370bd4d4d13b8de06190c85de84158a7ebf262e702ca1df3706424eb6e452371a344c33e1065141fedc5e380ea77fb86a4a22ea724286dfc83b8caf553d2acd68a3bb417b2472c793a7848ca92ae2bf8ff311aa5b"], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x40) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/cifs/smbd_receive_credit_max\x00', 0x88400, 0x0) getrandom$auto(&(0x7f0000000080)='&\'+}.\'%\xe8%\x00', 0x42, 0x1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, 0x0, 0x1, 0x0) mlockall$auto(0x3) remap_file_pages$auto(0x7, 0x400, 0x6, 0x3ff, 0x4) mmap$auto(0x0, 0x2, 0xdf, 0xeb1, 0x401, 0x8000) r4 = socket(0x2, 0x2, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x1003, 0x2000a, 0x4000000000df, 0xffffffffffffc734, r4, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/pids.events.local\x00', 0x103042, 0x0) r5 = openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, 0x0, 0x4c2801, 0x0) lsm_set_self_attr$auto(0x3, 0xfffffffffffffffc, 0x1f, 0x8000000000000000) syz_genetlink_get_family_id$auto_batadv(&(0x7f00000002c0), 0xffffffffffffffff) pipe$auto(&(0x7f00000000c0)=r5) 4.061782681s ago: executing program 3 (id=1066): r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000500)='/dev/sequencer\x00', 0x80102, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) rseq$auto(&(0x7f0000000080)={0x9, 0x8, 0x0, 0x7, 0xffffffff, 0x2}, 0x7ffd, 0xfffffff4, 0x8) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) open(0x0, 0xeb0b01, 0x1cc) ioprio_set$auto(0x2, 0x800000000, 0x8) r2 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) write$auto(r2, &(0x7f0000000140)='\x00', 0x5) rt_sigtimedwait$auto(0x0, 0x0, 0x0, 0x8) write$auto(0x3, 0x0, 0x100082) r3 = open(0x0, 0x161342, 0x100) mmap$auto(0x0, 0xc, 0xbc5, 0x13, 0x3, 0x8000) writev$auto(0x1, 0x0, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r3, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/usb_storage/parameters/delay_use\x00', 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_register$auto(r4, 0x0, &(0x7f0000000040), 0x5) io_uring_register$auto(0x2, 0x9, 0x0, 0x0) getsockname$auto(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0xaea) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) wait4$auto(r1, 0x0, 0x2, 0x0) ioctl$auto_SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000540)="159772c3315a2656706243d971cace22c0997e90bdd386a7b187069f2ec941a7bfc766cd1d9827356d5a7f235b5036e4") 3.972406423s ago: executing program 4 (id=1067): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pipe$auto(0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) socket(0x1d, 0x2, 0x6) socket(0x2, 0x2, 0x1) io_uring_setup$auto(0x6, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/013/001\x00', 0xa101, 0x0) io_uring_setup$auto(0x2, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/extfrag/unusable_index\x00', 0x1, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) socketpair$auto(0x4, 0x1, 0x20000, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) 3.106235852s ago: executing program 4 (id=1068): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x200, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000000)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) r0 = socket(0x2b, 0x1, 0x1) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r0, 0x0, 0x20000001) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/irq/14/smp_affinity\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000040)=""/141, 0x8d) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0xffffffc6, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x20040814}, 0x20008815) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/firmware/acpi/hotplug/pci_root/enabled\x00', 0x183941, 0x0) write$auto(r2, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\xd6\x84\xef\xf5\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xed\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\x05\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd?\x13\xe2\xad\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH', 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$auto_NL80211_CMD_GET_MPP(r0, 0x0, 0x880) munmap$auto(0x8000, 0xffffffff) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/bond0/bonding/primary_reselect\x00', 0x1e2142, 0x0) sendfile$auto(r3, r3, 0x0, 0x7fff) sendmmsg$auto(r2, &(0x7f00000000c0)={{0x0, 0x3, 0x0, 0x20a3, &(0x7f00000002c0)="bcfdfd71f46d0d9bdb06c4837f6392975c3dce07fe23702dd7346a3e7774e8881be6660ef6514d314dc7c2a7b07582635940668ee4020f9bb4b577322dbddb1dcc92fbad285a54e448c0423f71bef721ac0eacdf0e2184faac074151ca1655bf5e8814d73eeff0e81d76aad5aced3625f066f3eeb4e7d741b11edc7af44162", 0x8000, 0x2}, 0x5}, 0x4, 0x102) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x100, 0x0, 0x101, 0x3}, 0x7}, 0xb, 0x0) setsockopt$auto(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x2) bind$auto(0xffffffffffffffff, 0x0, 0x5) getrandom$auto(0x0, 0x6000000, 0x3) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) write$auto(0xffffffffffffffff, &(0x7f0000000280)='/dev/nullb0\x00', 0xa070) 1.270209356s ago: executing program 3 (id=1069): mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) sendmsg$auto_MACSEC_CMD_ADD_RXSA(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x2cb8}, 0x1, 0x0, 0x0, 0x40}, 0x2404c084) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) r0 = socket(0xa, 0x3, 0xff) connect$auto(r0, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (fail_nth: 3) 554.783204ms ago: executing program 4 (id=1070): mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) sendmsg$auto_MACSEC_CMD_ADD_RXSA(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x2cb8}, 0x1, 0x0, 0x0, 0x40}, 0x2404c084) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) close_range$auto(0x2, 0xa, 0x0) r0 = socketcall$auto_SYS_SENDMSG(0x10, &(0x7f0000000100)=0x71) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) sendmmsg$auto(r2, &(0x7f0000000000)={{0x0, 0x6, 0x0, 0x106, 0x0, 0x1, 0x3}, 0x57177fc5}, 0x9, 0x0) r3 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r3, @new_prog_fd=0x4, 0x4, @old_map_fd=r2}, 0xa3) sendmsg$auto_NL80211_CMD_ADD_TX_TS(r0, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x5b4, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0x28, 0xe8, "6ae1b0ee825754c4508bcdb2e676f054997514b82dcb10159306370cea1966bb369b6f3f"}, @NL80211_ATTR_KEY={0x48f, 0x50, 0x0, 0x1, [@generic="a008e788df5ec4b520a9398a8bc2ca81d8a60a5e03eceed2d665ec35e44854046dcf62bc50dee6b1fd42ec8ded1a5010b422ab84a8f13c269605d431173ba749e00ea8a400527a45a3bb1d5636b5eac950f64670aabe47b836ffd14d74c641d11babd95809272f29ef9833578f24e5c010811ca5da23b7ad7e02a678e74dcbd1d98d685f372649f5b13af17a436a3085e425705e88f349452807d3e3d5961c91da2cb20e6b976122b61c690a5cf7d8516b0b1906452b224f9982d2f70a27a2c1efdd566e44469e29ddc59a74a8006c292d2e27e801bc1e741234da8e2379c20e92264326f3eb4df2eb17fb", @nested={0x29f, 0xdf, 0x0, 0x1, [@typed={0x6, 0x116, 0x0, 0x0, @str=':\x00'}, @nested={0x4, 0x9}, @typed={0x14, 0x4c, 0x0, 0x0, @ipv6=@loopback}, @generic="a706c3b4da0a2cbbd3c67de8c74d8058e492a98da699a0323f93eeb945c6f1dfeff5b1ceff49850891413ab94ebf5177a0e990fc63e7bf69b44056e9d37c61cd872df4d55a7c9b840f3f6891cee628d216d230ce13e647b667c1573dde33292b57362b220ffbe97389c6f4b1eb358a266644bbc371a019ce68926510aa9a9d5809c8c7672983c09fe18c8b89dd818cf7b242644efab9651cfed5a06e038493377b136cbb476f20c8", @typed={0x8, 0xa7, 0x0, 0x0, @fd=r3}, @generic="732bef535a9c5a58b0193e3d662f067b9044f50a33e76f0003e2b75abf6154209efdc85a87d5492fb1f9e373ac0e2c2b49af62ae33780667cff55dcef29c3b9b3eca87c23af9aace79ba4d3f431b5a", @generic="84bd7b89e757b9e6028b0efd655399dba1b8e12487be64223cb7d4dd32c552297c0e26166a9cef83e8eb02606754e78ab02dfb462e15634964441ad3672478234c9adfb5a7499ee3f06119383f01263e766c77f3ce5318db87c1fbbc2ee9d1344425a6aa4e0f3662eb49bd2a27f3c7d4bb2ebcec9bc26651c44c2aee02b22538643b895f9d", @generic="bf18a532f4689cd9771fc4342d67ada1f421146f6a34187eff6b3e68050708cf663c1145983ae373f961878d07548e4e6dd2db9db4a2d637331a6d5f810cd7900139455ebd9d8d868a39d27877939512a5c8285c9c01ba4971c0f2244e89d6dd35a64cdfdb0911d5514912ee6180911725bf96fd3ed53714be425b108e9f5fc2809fda35e3b8aed5e3b74dba7b3b12e42f3da587636b6d6f66d1be70a1197c2b65bfae63ecbd217b57e16968e73a806b3c45ce67c56913ddd2aea35b1de32f54c736269eed796ca83b1372cd033d806fdc2dfa22645746650e47593b080d32565a9a095e4a928556b5811ace591e7719b0b4a1f9c78b1a"]}, @typed={0x14, 0x48, 0x0, 0x0, @ipv6=@remote}, @nested={0xeb, 0xe2, 0x0, 0x1, [@typed={0x2c, 0xb3, 0x0, 0x0, @str='/sys/kernel/debug/o2net/sock_containers\x00'}, @generic="44ec0c36b0f665a82739bba0d61cd1ecb699d274a888a6a702f47256fdc594e85b8d592ee3a070c80019c9659e13e49c277ba485c70f2d2255df0a47c593f03f85c90236b05ef15731d4fd0d759e673f5b84d27e551bef6307655179e53fbbd97bef40a93c4cb201266719dfb6693eb89effe7cee0b174fda4e0169ebdbb7f1eca3fee9ef9a7016936caeea6089f5212609f11cdda8f366d842a8a5970cfb730dd3a2fe10a0304349b9f0d", @typed={0x8, 0x70, 0x0, 0x0, @u32=0x5}, @nested={0x4, 0x106}, @nested={0x4, 0x14d}]}]}, @NL80211_ATTR_PID={0x8, 0x52, r1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xbf}, @NL80211_ATTR_MAC_MASK={0xce, 0xd7, "a48d74cae8fc28a90f6dfad9dd70899e8c472e4d3f4037d120115129011f6c4d27eff2cb63c1613306e8c96599c79aed4ddf65eee65334d7ff57fc9b9c4f7b6330b15ef2c02be6aca7b7483195c5a92d3ba229022012dc5c3f20d67a2fac079a74a43f752c419233a6de71a0e4766f579d1366137da736a59795181790ff625c68ecdf803acd09474ecade5edf23ea3441d47860c241cfb9d745468c7d3efa87deb28e16505191c393674b3afb624bdbf6bc12f492752f4807ecf0a9e3a00bbfce3d79baf161ce569dd0"}]}, 0x5b4}, 0x1, 0x0, 0x0, 0x2004c800}, 0x8800) socket(0xa, 0x2, 0x0) openat$auto_sc_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) r4 = socket(0xa, 0x3, 0xff) connect$auto(r4, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 364.612526ms ago: executing program 2 (id=1071): close_range$auto(0x2, 0xa, 0x0) (async) r0 = socket(0xa, 0x2, 0x88) gettid() socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r2, r1, 0x4, 0x1ff, r0, @relative_id=0x13, 0xe600}, 0xf) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) (async) socket(0x1d, 0x2, 0x7) (async) socket(0xa, 0x1, 0x0) (async) r4 = socket(0x23, 0x80805, 0x0) sendmmsg$auto(r4, &(0x7f0000000180)={{&(0x7f0000000ac0), 0x0, &(0x7f0000000100)={&(0x7f0000001ac0), 0x7ff}, 0x4, &(0x7f0000000140)="24b7cd739e", 0x9, 0x3}, 0x7fffffff}, 0x7f, 0x3) shutdown$auto(r3, 0x3ff) 363.655496ms ago: executing program 3 (id=1072): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) capget$auto(&(0x7f0000000000)={0x19980330}, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000002500), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x2c, r3, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) r4 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_DEL(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fedbdf2502"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000500)={'gretap0\x00', 0x0}) socket(0xa, 0x23af690fef30229, 0x9) sendmsg$auto_BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x140080e4) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, [0x3, 0x2, 0xffffffffffffffff, 0x2, 0x0, 0x402000, 0x0, 0xe, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x6, 0x0, 0x8, 0x20000, 0x8, 0x10000000000, 0xfbffffffffffffff, 0x400000000004, 0x2f, 0x0, 0x0, 0x1006, 0x400000000005b5, 0xffff, 0x0, 0x100, 0x0, 0x6, 0x2, 0x88e, 0x40, 0xfffffffffffffffc, 0x8, 0xa38, 0x4, 0x4000003, 0xfffffffffffffffc, 0x2, 0x8, 0x10000000007, 0xc567]}, 0x1fa, 0xd) r8 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x2802, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r8, 0x2, &(0x7f0000000380)="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") sendmsg$auto_OVS_DP_CMD_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x70bd29, 0x25dfdbfc, {}, [@OVS_DP_ATTR_IFINDEX={0x8, 0x9, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000c000}, 0x4000024) madvise$auto(0x0, 0xffffffffffff0001, 0x15) write$auto(0x3, 0x0, 0x100082) 282.973754ms ago: executing program 4 (id=1073): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$auto(r0, 0x8004b706, 0x1) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x169780, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/hid/drivers/cypress/new_id\x00', 0xa001, 0x0) write$auto(r2, &(0x7f0000000080)='0[.[\x00', 0x1) ioctl$auto_SG_GET_RESERVED_SIZE(r1, 0x40101286, 0x0) close_range$auto(r0, r1, 0x7) mmap$auto(0x0, 0x3ba5, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mincore$auto(0x1000, 0x8001, 0x0) fcntl$auto(0x8000000000000001, 0x26, 0x8) mmap$auto(0x6, 0x2020009, 0x10000008000000a, 0xeb2, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x9, 0x0) fcntl$auto(0x8000000000000001, 0x26, 0x8) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) fcntl$auto(0x8000000000000001, 0x5, 0x8) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000100)='/proc/kpageflags\x00', 0x707043, 0x0) read$auto(0x3, 0x0, 0x80) 1.714724ms ago: executing program 2 (id=1074): socket(0x2, 0x801, 0x100) r0 = socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x26}}, 0x54) shutdown$auto(r0, 0x0) connect$auto(0x3, &(0x7f00000000c0), 0x55) 0s ago: executing program 4 (id=1075): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SET_TUNSRC(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x28}, 0x1, 0x7000000, 0x0, 0x814}, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.94' (ED25519) to the list of known hosts. [ 95.442576][ T5829] cgroup: Unknown subsys name 'net' [ 95.617974][ T5829] cgroup: Unknown subsys name 'cpuset' [ 95.627234][ T5829] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 97.792622][ T5829] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 98.307016][ T9] cfg80211: failed to load regulatory.db [ 100.109334][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 100.118768][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 100.128072][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 100.138271][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 100.146394][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 100.157743][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 100.163977][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 100.166018][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 100.194282][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 100.205749][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 100.214443][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 100.224626][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 100.234466][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 100.241020][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 100.254393][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 100.262676][ T5853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 100.274231][ T5853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 100.281864][ T5153] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 100.282630][ T5853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 100.290534][ T5153] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 100.901934][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 101.014617][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 101.144140][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 101.192682][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 101.321357][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.330026][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.341028][ T5841] bridge_slave_0: entered allmulticast mode [ 101.350609][ T5841] bridge_slave_0: entered promiscuous mode [ 101.360507][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.367791][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.375506][ T5841] bridge_slave_1: entered allmulticast mode [ 101.383333][ T5841] bridge_slave_1: entered promiscuous mode [ 101.491715][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.500599][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.510207][ T5839] bridge_slave_0: entered allmulticast mode [ 101.518328][ T5839] bridge_slave_0: entered promiscuous mode [ 101.567282][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.580972][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.588708][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.597171][ T5839] bridge_slave_1: entered allmulticast mode [ 101.605101][ T5839] bridge_slave_1: entered promiscuous mode [ 101.628330][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.636421][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.644734][ T5846] bridge_slave_0: entered allmulticast mode [ 101.652627][ T5846] bridge_slave_0: entered promiscuous mode [ 101.663659][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.719091][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.727033][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.734486][ T5840] bridge_slave_0: entered allmulticast mode [ 101.742024][ T5840] bridge_slave_0: entered promiscuous mode [ 101.750450][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.758402][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.766484][ T5846] bridge_slave_1: entered allmulticast mode [ 101.774186][ T5846] bridge_slave_1: entered promiscuous mode [ 101.799281][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.814285][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.821989][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.830197][ T5840] bridge_slave_1: entered allmulticast mode [ 101.839253][ T5840] bridge_slave_1: entered promiscuous mode [ 101.864110][ T5841] team0: Port device team_slave_0 added [ 101.875600][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.916051][ T5841] team0: Port device team_slave_1 added [ 101.927571][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.001842][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.015778][ T5839] team0: Port device team_slave_0 added [ 102.041051][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.069870][ T5839] team0: Port device team_slave_1 added [ 102.096197][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.120385][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.128287][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.156687][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.200869][ T5846] team0: Port device team_slave_0 added [ 102.222792][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.231244][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.258713][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.281178][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.288663][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.317126][ T56] Bluetooth: hci1: command tx timeout [ 102.317383][ T56] Bluetooth: hci0: command tx timeout [ 102.323469][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.344362][ T5846] team0: Port device team_slave_1 added [ 102.355112][ T5840] team0: Port device team_slave_0 added [ 102.373388][ T56] Bluetooth: hci2: command tx timeout [ 102.383243][ T56] Bluetooth: hci3: command tx timeout [ 102.387058][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.396446][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.423561][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.452634][ T5840] team0: Port device team_slave_1 added [ 102.530505][ T5841] hsr_slave_0: entered promiscuous mode [ 102.537869][ T5841] hsr_slave_1: entered promiscuous mode [ 102.549282][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.556950][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.589182][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.606008][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.614496][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.642697][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.655749][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.663011][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.689759][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.740645][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.748359][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.776306][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.840884][ T5839] hsr_slave_0: entered promiscuous mode [ 102.848609][ T5839] hsr_slave_1: entered promiscuous mode [ 102.858486][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.866893][ T5839] Cannot create hsr debugfs directory [ 102.983679][ T5840] hsr_slave_0: entered promiscuous mode [ 102.990881][ T5840] hsr_slave_1: entered promiscuous mode [ 102.998629][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.007021][ T5840] Cannot create hsr debugfs directory [ 103.029599][ T5846] hsr_slave_0: entered promiscuous mode [ 103.037121][ T5846] hsr_slave_1: entered promiscuous mode [ 103.043767][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.051527][ T5846] Cannot create hsr debugfs directory [ 103.504873][ T5841] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 103.536938][ T5841] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 103.550433][ T5841] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 103.564039][ T5841] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 103.649220][ T5839] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.668760][ T5839] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.688448][ T5839] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.699500][ T5839] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.825572][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 103.839872][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 103.871180][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 103.883758][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 104.016675][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 104.028768][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 104.045491][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 104.058491][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 104.140256][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.170793][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.247121][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.266847][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.274286][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.302425][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.319134][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.327104][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.338892][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.346917][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.373356][ T5849] Bluetooth: hci1: command tx timeout [ 104.381811][ T56] Bluetooth: hci0: command tx timeout [ 104.426253][ T83] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.434777][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.454061][ T56] Bluetooth: hci3: command tx timeout [ 104.460167][ T5849] Bluetooth: hci2: command tx timeout [ 104.466325][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.550687][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.569148][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.587567][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.595197][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.650850][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.658484][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.717923][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.782396][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.789843][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.858850][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.866845][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.117212][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.321256][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.341943][ T5841] veth0_vlan: entered promiscuous mode [ 105.387107][ T5841] veth1_vlan: entered promiscuous mode [ 105.487742][ T5839] veth0_vlan: entered promiscuous mode [ 105.509948][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.551641][ T5839] veth1_vlan: entered promiscuous mode [ 105.566696][ T5841] veth0_macvtap: entered promiscuous mode [ 105.584102][ T5841] veth1_macvtap: entered promiscuous mode [ 105.652467][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.679399][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.689887][ T5839] veth0_macvtap: entered promiscuous mode [ 105.712178][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.746124][ T5839] veth1_macvtap: entered promiscuous mode [ 105.770669][ T5841] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.781897][ T5841] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.795516][ T5841] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.805272][ T5841] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.836272][ T5840] veth0_vlan: entered promiscuous mode [ 105.859594][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.871620][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.885661][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.910936][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.922155][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.935286][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.955199][ T5840] veth1_vlan: entered promiscuous mode [ 105.971694][ T5839] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.981298][ T5839] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.990877][ T5839] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.000144][ T5839] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.106033][ T5846] veth0_vlan: entered promiscuous mode [ 106.176016][ T5846] veth1_vlan: entered promiscuous mode [ 106.207484][ T5840] veth0_macvtap: entered promiscuous mode [ 106.220795][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.231091][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.277783][ T5840] veth1_macvtap: entered promiscuous mode [ 106.311978][ T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.331819][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.410206][ T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.419442][ T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.420203][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.436225][ T5846] veth0_macvtap: entered promiscuous mode [ 106.442587][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.454662][ T5849] Bluetooth: hci0: command tx timeout [ 106.460654][ T56] Bluetooth: hci1: command tx timeout [ 106.492107][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.508750][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.520536][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.533296][ T56] Bluetooth: hci2: command tx timeout [ 106.537604][ T5849] Bluetooth: hci3: command tx timeout [ 106.539847][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.558821][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.585800][ T5846] veth1_macvtap: entered promiscuous mode [ 106.615309][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.640135][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.651313][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.664004][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.677262][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.717011][ T5839] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 106.739411][ T5840] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.756291][ T5840] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.766879][ T5840] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.776732][ T5840] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.819805][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.850976][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.890037][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.915647][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.926608][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.939968][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.950246][ T5905] capability: warning: `syz.0.1' uses 32-bit capabilities (legacy support in use) [ 106.956420][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.035700][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.056145][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.068109][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.103040][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.123649][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.136729][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.159939][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.187023][ T5909] netlink: 'syz.3.5': attribute type 2 has an invalid length. [ 107.189093][ T5905] HfR: entered promiscuous mode [ 107.198518][ T5909] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5'. [ 107.225136][ T5846] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.244120][ T5846] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.256270][ T5846] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.265771][ T5846] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.479189][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.523149][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.670108][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.698473][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.779846][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.804765][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.933830][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.942332][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.490875][ T5918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 108.534816][ T5849] Bluetooth: hci1: command tx timeout [ 108.534828][ T56] Bluetooth: hci0: command tx timeout [ 108.616498][ T5849] Bluetooth: hci3: command tx timeout [ 108.617013][ T56] Bluetooth: hci2: command tx timeout [ 108.635947][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.785969][ T5925] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 109.539405][ T5939] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10'. [ 110.068167][ T5939] team0: Port device team_slave_0 removed [ 110.483670][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 111.393330][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.403205][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 111.412487][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 112.060498][ T5965] HfR: entered promiscuous mode [ 112.941288][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 113.193125][ T5976] netlink: 330 bytes leftover after parsing attributes in process `syz.0.16'. [ 113.285526][ T5976] Zero length message leads to an empty skb [ 113.297564][ T5958] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 114.765601][ T6004] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 117.835576][ T6048] netlink: 222 bytes leftover after parsing attributes in process `syz.2.26'. [ 118.034569][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 118.127663][ T6048] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.150336][ T6054] Invalid ELF header magic: != ELF [ 118.755611][ T6062] HfR: entered promiscuous mode [ 118.809990][ T6066] mmap: syz.2.30 (6066) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 118.880333][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 118.890543][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 119.421121][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 120.587863][ T6079] netlink: 16 bytes leftover after parsing attributes in process `syz.1.31'. [ 125.538765][ T6142] netlink: 16 bytes leftover after parsing attributes in process `syz.3.46'. [ 126.698559][ T6175] HfR: entered promiscuous mode [ 127.876430][ T6190] netlink: 16 bytes leftover after parsing attributes in process `syz.0.56'. [ 127.961093][ T6182] netlink: 16 bytes leftover after parsing attributes in process `syz.0.56'. [ 128.021813][ T6189] openvswitch: HfR: Dropping previously announced user features [ 130.447130][ T6221] openvswitch: HfR: Dropping previously announced user features [ 134.637228][ T6295] netlink: 28 bytes leftover after parsing attributes in process `syz.1.67'. [ 134.817874][ T6295] team0: Port device team_slave_0 removed [ 135.879704][ T6314] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 137.027399][ T6325] openvswitch: HfR: Dropping previously announced user features [ 139.266362][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.273827][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.313672][ T6362] netlink: 306 bytes leftover after parsing attributes in process `syz.2.84'. [ 140.422752][ T6387] openvswitch: HfR: Dropping previously announced user features [ 141.677158][ T6424] openvswitch: HfR: Dropping previously announced user features [ 142.904121][ T6451] openvswitch: HfR: Dropping previously announced user features [ 144.087848][ T6484] netlink: 334 bytes leftover after parsing attributes in process `syz.1.124'. [ 144.130772][ T6484] bridge0: port 3(vlan1) entered blocking state [ 144.155284][ T6484] bridge0: port 3(vlan1) entered disabled state [ 144.162686][ T6484] vlan1: entered allmulticast mode [ 144.169845][ T6484] veth0_vlan: entered allmulticast mode [ 144.179650][ T6484] vlan1: entered promiscuous mode [ 144.187699][ T6484] bridge0: port 3(vlan1) entered blocking state [ 144.194397][ T6484] bridge0: port 3(vlan1) entered forwarding state [ 146.700536][ T6524] Â: entered promiscuous mode [ 147.737442][ T6544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.142'. [ 148.415333][ T6554] openvswitch: HfR: Dropping previously announced user features [ 149.746136][ T6582] : Can't lookup blockdev [ 150.493479][ T6590] Invalid ELF header magic: != ELF [ 152.813527][ T6630] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 153.373962][ T6641] openvswitch: HfR: Dropping previously announced user features [ 155.393047][ T6678] ima: policy update failed [ 155.425056][ T30] audit: type=1802 audit(6039015437.086:2): pid=6678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.182" res=0 errno=0 [ 155.438337][ T6678] ima: policy update failed [ 155.522021][ T30] audit: type=1802 audit(6039015437.176:3): pid=6678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.182" res=0 errno=0 [ 155.879947][ T6688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.185'. [ 158.507199][ T6712] netlink: 'syz.3.191': attribute type 2 has an invalid length. [ 158.553038][ T6712] netlink: 12 bytes leftover after parsing attributes in process `syz.3.191'. [ 159.176418][ T6728] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input5 [ 160.026834][ T6751] openvswitch: HfR: Dropping previously announced user features [ 164.698336][ T6800] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input6 [ 164.953155][ T6804] openvswitch: HfR: Dropping previously announced user features [ 165.708374][ T6821] ptrace attach of "./syz-executor exec"[5846] was attempted by "./syz-executor exec"[6821] [ 166.217950][ T6830] openvswitch: HfR: Dropping previously announced user features [ 168.716453][ T6851] netlink: 32 bytes leftover after parsing attributes in process `syz.3.226'. [ 171.629722][ T6885] ptrace attach of "./syz-executor exec"[5841] was attempted by "./syz-executor exec"[6885] [ 173.612673][ T6908] openvswitch: HfR: Dropping previously announced user features [ 173.995637][ T6920] ptrace attach of "./syz-executor exec"[5840] was attempted by "./syz-executor exec"[6920] [ 175.764956][ T6952] usb usb38: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 175.800827][ T6952] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 176.100136][ T6961] syz.2.259 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 178.061860][ T6984] tc_dump_action: action bad kind [ 178.315367][ T6989] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 178.349990][ T6989] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 181.480681][ T7045] program syz.1.281 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 182.079999][ T7052] openvswitch: HfR: Dropping previously announced user features [ 182.905975][ T7059] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input7 [ 187.732147][ T7126] Invalid ELF header magic: != ELF [ 192.543654][ T7229] openvswitch: HfR: Dropping previously announced user features [ 200.709892][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.717224][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.958590][ T7367] FAULT_INJECTION: forcing a failure. [ 201.958590][ T7367] name failslab, interval 1, probability 0, space 0, times 1 [ 202.003545][ T7367] CPU: 0 UID: 0 PID: 7367 Comm: syz.2.368 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 202.003590][ T7367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 202.003607][ T7367] Call Trace: [ 202.003630][ T7367] [ 202.003642][ T7367] dump_stack_lvl+0x16c/0x1f0 [ 202.003691][ T7367] should_fail_ex+0x512/0x640 [ 202.003732][ T7367] should_failslab+0xc2/0x120 [ 202.003756][ T7367] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 202.003785][ T7367] ? skb_clone+0x190/0x3f0 [ 202.003814][ T7367] skb_clone+0x190/0x3f0 [ 202.003837][ T7367] netlink_deliver_tap+0xabd/0xd30 [ 202.003866][ T7367] netlink_unicast+0x5df/0x7f0 [ 202.003892][ T7367] ? __pfx_netlink_unicast+0x10/0x10 [ 202.003920][ T7367] netlink_sendmsg+0x8d1/0xdd0 [ 202.003958][ T7367] ? __pfx_netlink_sendmsg+0x10/0x10 [ 202.003993][ T7367] __sys_sendto+0x495/0x510 [ 202.004016][ T7367] ? __pfx___sys_sendto+0x10/0x10 [ 202.004044][ T7367] ? count_memcg_events_mm.constprop.0+0x138/0x340 [ 202.004080][ T7367] __x64_sys_sendto+0xe0/0x1c0 [ 202.004101][ T7367] ? do_syscall_64+0x91/0x260 [ 202.004126][ T7367] ? lockdep_hardirqs_on+0x7c/0x110 [ 202.004150][ T7367] do_syscall_64+0xcd/0x260 [ 202.004177][ T7367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.004194][ T7367] RIP: 0033:0x7f6d9838effc [ 202.004210][ T7367] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 202.004226][ T7367] RSP: 002b:00007f6d9921eec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 202.004243][ T7367] RAX: ffffffffffffffda RBX: 00007f6d9921efc0 RCX: 00007f6d9838effc [ 202.004253][ T7367] RDX: 0000000000000028 RSI: 00007f6d9921f010 RDI: 0000000000000008 [ 202.004263][ T7367] RBP: 0000000000000000 R08: 00007f6d9921ef14 R09: 000000000000000c [ 202.004272][ T7367] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 202.004281][ T7367] R13: 00007f6d9921ef68 R14: 00007f6d9921f010 R15: 0000000000000000 [ 202.004301][ T7367] [ 203.660719][ T7395] syz.3.377 uses obsolete (PF_INET,SOCK_PACKET) [ 203.767582][ T7397] netlink: 20 bytes leftover after parsing attributes in process `syz.2.378'. [ 204.964655][ T7422] FAULT_INJECTION: forcing a failure. [ 204.964655][ T7422] name failslab, interval 1, probability 0, space 0, times 0 [ 205.024515][ T7422] CPU: 0 UID: 0 PID: 7422 Comm: syz.2.383 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 205.024557][ T7422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 205.024575][ T7422] Call Trace: [ 205.024585][ T7422] [ 205.024597][ T7422] dump_stack_lvl+0x16c/0x1f0 [ 205.024642][ T7422] should_fail_ex+0x512/0x640 [ 205.024676][ T7422] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 205.024724][ T7422] should_failslab+0xc2/0x120 [ 205.024752][ T7422] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 205.024797][ T7422] ? mas_alloc_nodes+0x18b/0x8b0 [ 205.024838][ T7422] mas_alloc_nodes+0x18b/0x8b0 [ 205.024882][ T7422] mas_node_count_gfp+0x105/0x130 [ 205.024918][ T7422] mas_preallocate+0x53e/0xcd0 [ 205.024974][ T7422] ? __pfx_mas_preallocate+0x10/0x10 [ 205.025013][ T7422] ? vm_area_alloc+0x1f/0x160 [ 205.025056][ T7422] ? lockdep_init_map_type+0x5c/0x280 [ 205.025092][ T7422] __mmap_region+0x139b/0x27c0 [ 205.025151][ T7422] ? __pfx___mmap_region+0x10/0x10 [ 205.025193][ T7422] ? kernel_text_address+0x8d/0x100 [ 205.025256][ T7422] ? stack_depot_save_flags+0x28/0xa50 [ 205.025354][ T7422] ? trace_cap_capable+0x18d/0x200 [ 205.025387][ T7422] ? cap_capable+0xb3/0x250 [ 205.025422][ T7422] mmap_region+0x1ab/0x3f0 [ 205.025476][ T7422] do_mmap+0xd8e/0x11b0 [ 205.025520][ T7422] ? __pfx_do_mmap+0x10/0x10 [ 205.025557][ T7422] ? __pfx_down_write_killable+0x10/0x10 [ 205.025610][ T7422] vm_mmap_pgoff+0x281/0x450 [ 205.025647][ T7422] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 205.025676][ T7422] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 205.025710][ T7422] ? hugetlbfs_get_inode+0x31f/0x730 [ 205.025757][ T7422] ksys_mmap_pgoff+0x1c8/0x5c0 [ 205.025790][ T7422] ? rcu_is_watching+0x12/0xc0 [ 205.025830][ T7422] __x64_sys_mmap+0x125/0x190 [ 205.025869][ T7422] do_syscall_64+0xcd/0x260 [ 205.025908][ T7422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.025937][ T7422] RIP: 0033:0x7f6d9838d169 [ 205.025961][ T7422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.025988][ T7422] RSP: 002b:00007f6d99220038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 205.026015][ T7422] RAX: ffffffffffffffda RBX: 00007f6d985a5fa0 RCX: 00007f6d9838d169 [ 205.026034][ T7422] RDX: 00004000000000e3 RSI: 0000000000200004 RDI: 0000000000000000 [ 205.026050][ T7422] RBP: 00007f6d9840e2a0 R08: 000000000000000d R09: 0000300000009000 [ 205.026067][ T7422] R10: 0000000000040eb2 R11: 0000000000000246 R12: 0000000000000000 [ 205.026082][ T7422] R13: 0000000000000000 R14: 00007f6d985a5fa0 R15: 00007ffdbb2eb418 [ 205.026119][ T7422] [ 206.513314][ T7454] Â: entered promiscuous mode [ 208.107008][ T7491] netlink: 20 bytes leftover after parsing attributes in process `syz.1.404'. [ 210.009818][ T7525] openvswitch: HfR: Dropping previously announced user features [ 212.698243][ T7562] : Can't lookup blockdev [ 216.613762][ T7613] openvswitch: HfR: Dropping previously announced user features [ 216.719112][ T7619] FAULT_INJECTION: forcing a failure. [ 216.719112][ T7619] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 216.733441][ T7619] CPU: 1 UID: 0 PID: 7619 Comm: syz.0.438 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 216.733481][ T7619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 216.733500][ T7619] Call Trace: [ 216.733510][ T7619] [ 216.733523][ T7619] dump_stack_lvl+0x16c/0x1f0 [ 216.733570][ T7619] should_fail_ex+0x512/0x640 [ 216.733612][ T7619] _copy_from_iter+0x2a4/0x15b0 [ 216.733649][ T7619] ? __alloc_skb+0x200/0x380 [ 216.733689][ T7619] ? __pfx__copy_from_iter+0x10/0x10 [ 216.733744][ T7619] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 216.733802][ T7619] netlink_sendmsg+0x829/0xdd0 [ 216.733855][ T7619] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.733913][ T7619] __sys_sendto+0x495/0x510 [ 216.733949][ T7619] ? __pfx___sys_sendto+0x10/0x10 [ 216.733991][ T7619] ? count_memcg_events_mm.constprop.0+0x138/0x340 [ 216.734052][ T7619] __x64_sys_sendto+0xe0/0x1c0 [ 216.734083][ T7619] ? do_syscall_64+0x91/0x260 [ 216.734123][ T7619] ? lockdep_hardirqs_on+0x7c/0x110 [ 216.734160][ T7619] do_syscall_64+0xcd/0x260 [ 216.734203][ T7619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.734233][ T7619] RIP: 0033:0x7f2a65f8effc [ 216.734258][ T7619] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 216.734284][ T7619] RSP: 002b:00007f2a66df4ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 216.734312][ T7619] RAX: ffffffffffffffda RBX: 00007f2a66df4fc0 RCX: 00007f2a65f8effc [ 216.734330][ T7619] RDX: 0000000000000028 RSI: 00007f2a66df5010 RDI: 0000000000000008 [ 216.734347][ T7619] RBP: 0000000000000000 R08: 00007f2a66df4f14 R09: 000000000000000c [ 216.734363][ T7619] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 216.734379][ T7619] R13: 00007f2a66df4f68 R14: 00007f2a66df5010 R15: 0000000000000000 [ 216.734415][ T7619] [ 221.884142][ T7672] FAULT_INJECTION: forcing a failure. [ 221.884142][ T7672] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.932991][ T7672] CPU: 1 UID: 0 PID: 7672 Comm: syz.3.450 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 221.933039][ T7672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 221.933059][ T7672] Call Trace: [ 221.933069][ T7672] [ 221.933081][ T7672] dump_stack_lvl+0x16c/0x1f0 [ 221.933127][ T7672] should_fail_ex+0x512/0x640 [ 221.933163][ T7672] _copy_from_iter+0x2a4/0x15b0 [ 221.933205][ T7672] ? __alloc_skb+0x200/0x380 [ 221.933241][ T7672] ? __pfx__copy_from_iter+0x10/0x10 [ 221.933276][ T7672] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 221.933324][ T7672] netlink_sendmsg+0x829/0xdd0 [ 221.933363][ T7672] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.933413][ T7672] __sys_sendto+0x495/0x510 [ 221.933444][ T7672] ? __pfx___sys_sendto+0x10/0x10 [ 221.933488][ T7672] ? count_memcg_events_mm.constprop.0+0x138/0x340 [ 221.933544][ T7672] __x64_sys_sendto+0xe0/0x1c0 [ 221.933574][ T7672] ? do_syscall_64+0x91/0x260 [ 221.933607][ T7672] ? lockdep_hardirqs_on+0x7c/0x110 [ 221.933639][ T7672] do_syscall_64+0xcd/0x260 [ 221.933676][ T7672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.933705][ T7672] RIP: 0033:0x7f7c8d38effc [ 221.933726][ T7672] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 221.933750][ T7672] RSP: 002b:00007f7c8e170ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 221.933777][ T7672] RAX: ffffffffffffffda RBX: 00007f7c8e170fc0 RCX: 00007f7c8d38effc [ 221.933795][ T7672] RDX: 0000000000000028 RSI: 00007f7c8e171010 RDI: 0000000000000008 [ 221.933810][ T7672] RBP: 0000000000000000 R08: 00007f7c8e170f14 R09: 000000000000000c [ 221.933824][ T7672] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 221.933837][ T7672] R13: 00007f7c8e170f68 R14: 00007f7c8e171010 R15: 0000000000000000 [ 221.933868][ T7672] [ 222.416955][ T7675] openvswitch: HfR: Dropping previously announced user features [ 223.256405][ T5842] Bluetooth: hci0: command 0x0406 tx timeout [ 223.263138][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 223.269415][ T5842] Bluetooth: hci3: command 0x0406 tx timeout [ 223.276593][ T5850] Bluetooth: hci1: command 0x0406 tx timeout [ 223.803759][ T7692] openvswitch: HfR: Dropping previously announced user features [ 225.079230][ T7711] FAULT_INJECTION: forcing a failure. [ 225.079230][ T7711] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.086325][ T7712] openvswitch: HfR: Dropping previously announced user features [ 225.123044][ T7711] CPU: 1 UID: 0 PID: 7711 Comm: syz.2.460 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 225.123083][ T7711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 225.123097][ T7711] Call Trace: [ 225.123105][ T7711] [ 225.123114][ T7711] dump_stack_lvl+0x16c/0x1f0 [ 225.123154][ T7711] should_fail_ex+0x512/0x640 [ 225.123189][ T7711] _copy_to_user+0x32/0xd0 [ 225.123224][ T7711] simple_read_from_buffer+0xcb/0x170 [ 225.123259][ T7711] proc_fail_nth_read+0x197/0x270 [ 225.123297][ T7711] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 225.123333][ T7711] ? rw_verify_area+0xcf/0x680 [ 225.123364][ T7711] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 225.123400][ T7711] vfs_read+0x1de/0xc70 [ 225.123441][ T7711] ? __pfx___mutex_lock+0x10/0x10 [ 225.123480][ T7711] ? __pfx_vfs_read+0x10/0x10 [ 225.123526][ T7711] ? __fget_files+0x20e/0x3c0 [ 225.123584][ T7711] ksys_read+0x12a/0x240 [ 225.123630][ T7711] ? __pfx_ksys_read+0x10/0x10 [ 225.123662][ T7711] ? rcu_is_watching+0x12/0xc0 [ 225.123704][ T7711] do_syscall_64+0xcd/0x260 [ 225.123740][ T7711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.123765][ T7711] RIP: 0033:0x7f6d9838bb7c [ 225.123786][ T7711] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 225.123810][ T7711] RSP: 002b:00007f6d99220030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 225.123835][ T7711] RAX: ffffffffffffffda RBX: 00007f6d985a5fa0 RCX: 00007f6d9838bb7c [ 225.123850][ T7711] RDX: 000000000000000f RSI: 00007f6d992200a0 RDI: 0000000000000004 [ 225.123864][ T7711] RBP: 00007f6d99220090 R08: 0000000000000000 R09: 0000000000000000 [ 225.123878][ T7711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.123892][ T7711] R13: 0000000000000000 R14: 00007f6d985a5fa0 R15: 00007ffdbb2eb418 [ 225.123924][ T7711] [ 226.213399][ T7723] netlink: 20 bytes leftover after parsing attributes in process `syz.3.462'. [ 227.850025][ T7744] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 227.860093][ T7749] openvswitch: HfR: Dropping previously announced user features [ 227.889613][ T7749] netlink: 12 bytes leftover after parsing attributes in process `syz.3.473'. [ 227.900342][ T7749] HfR: left promiscuous mode [ 228.451542][ T7756] openvswitch: HfR: Dropping previously announced user features [ 229.091843][ T7770] HfR: entered promiscuous mode [ 229.138246][ T7770] netlink: 12 bytes leftover after parsing attributes in process `syz.3.479'. [ 229.168622][ T7770] HfR: left promiscuous mode [ 229.676077][ T7765] netlink: 20 bytes leftover after parsing attributes in process `syz.0.477'. [ 230.097913][ T7781] netlink: 32 bytes leftover after parsing attributes in process `syz.0.482'. [ 231.130631][ T7802] openvswitch: HfR: Dropping previously announced user features [ 231.398339][ T7805] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 231.425412][ T7805] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 231.490071][ T7805] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 231.513163][ T7805] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 231.535285][ T7805] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 231.541928][ T7805] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 231.623444][ T7805] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 231.643203][ T7805] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 233.147204][ T7811] netlink: 20 bytes leftover after parsing attributes in process `syz.2.491'. [ 233.174835][ T7834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.497'. [ 233.413427][ T5853] Bluetooth: hci0: command 0x0406 tx timeout [ 233.572958][ T5853] Bluetooth: hci2: command 0x0406 tx timeout [ 233.579578][ T5853] Bluetooth: hci1: command 0x0406 tx timeout [ 233.653439][ T5853] Bluetooth: hci3: command 0x0406 tx timeout [ 233.766209][ T7839] usb usb38: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 233.804893][ T7839] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 234.151803][ T7853] openvswitch: HfR: Dropping previously announced user features [ 234.829694][ T7872] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 234.850954][ T7872] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 235.492950][ T5853] Bluetooth: hci0: command 0x0406 tx timeout [ 235.652961][ T5853] Bluetooth: hci2: command 0x0406 tx timeout [ 235.652970][ T5153] Bluetooth: hci1: command 0x0406 tx timeout [ 235.747737][ T5853] Bluetooth: hci3: command 0x0406 tx timeout [ 238.407819][ T7923] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 240.590209][ T7961] netlink: 12 bytes leftover after parsing attributes in process `syz.1.527'. [ 240.733431][ T7958] openvswitch: HfR: Dropping previously announced user features [ 240.816014][ T7961] HfR: left promiscuous mode [ 241.326247][ T7966] HfR: entered promiscuous mode [ 243.687209][ T7996] Invalid logical block size (8) [ 244.618968][ T8016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.537'. [ 244.724751][ T8018] netlink: 222 bytes leftover after parsing attributes in process `syz.1.538'. [ 244.917150][ T8018] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.749334][ T8056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.549'. [ 247.235054][ T8067] openvswitch: HfR: Dropping previously announced user features [ 248.428789][ T8093] FAULT_INJECTION: forcing a failure. [ 248.428789][ T8093] name fail_futex, interval 1, probability 0, space 0, times 1 [ 248.447357][ T8093] CPU: 0 UID: 0 PID: 8093 Comm: syz.0.559 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 248.447402][ T8093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 248.447420][ T8093] Call Trace: [ 248.447431][ T8093] [ 248.447443][ T8093] dump_stack_lvl+0x16c/0x1f0 [ 248.447496][ T8093] should_fail_ex+0x512/0x640 [ 248.447535][ T8093] get_futex_key+0x49e/0x1000 [ 248.447576][ T8093] ? stack_depot_save_flags+0x28/0xa50 [ 248.447613][ T8093] ? stack_trace_save+0x8e/0xc0 [ 248.447651][ T8093] ? __pfx_get_futex_key+0x10/0x10 [ 248.447690][ T8093] ? kasan_save_stack+0x42/0x60 [ 248.447729][ T8093] ? kasan_save_stack+0x33/0x60 [ 248.447769][ T8093] ? kasan_save_track+0x14/0x30 [ 248.447809][ T8093] ? __kasan_slab_alloc+0x89/0x90 [ 248.447854][ T8093] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 248.447895][ T8093] ? security_file_alloc+0x34/0x2b0 [ 248.447930][ T8093] ? init_file+0x93/0x4c0 [ 248.447955][ T8093] ? alloc_empty_file+0x73/0x1e0 [ 248.447990][ T8093] futex_wait_setup+0x78/0x290 [ 248.448028][ T8093] __futex_wait+0x266/0x3c0 [ 248.448058][ T8093] ? __pfx___futex_wait+0x10/0x10 [ 248.448094][ T8093] ? __pfx_futex_wake_mark+0x10/0x10 [ 248.448140][ T8093] futex_wait+0xe8/0x380 [ 248.448168][ T8093] ? __pfx_futex_wait+0x10/0x10 [ 248.448204][ T8093] ? percpu_counter_add_batch+0xb8/0x1f0 [ 248.448231][ T8093] ? errseq_sample+0x53/0x70 [ 248.448278][ T8093] ? file_init_path+0x4fe/0x760 [ 248.448310][ T8093] do_futex+0x229/0x350 [ 248.448345][ T8093] ? __pfx_do_futex+0x10/0x10 [ 248.448380][ T8093] ? fd_install+0x225/0x750 [ 248.448423][ T8093] __x64_sys_futex+0x1e0/0x4c0 [ 248.448463][ T8093] ? __sys_socket+0xac/0x260 [ 248.448490][ T8093] ? __pfx___x64_sys_futex+0x10/0x10 [ 248.448528][ T8093] ? rcu_is_watching+0x12/0xc0 [ 248.448579][ T8093] do_syscall_64+0xcd/0x260 [ 248.448628][ T8093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.448659][ T8093] RIP: 0033:0x7f2a65f8d169 [ 248.448684][ T8093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.448708][ T8093] RSP: 002b:00007f2a66df60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 248.448737][ T8093] RAX: ffffffffffffffda RBX: 00007f2a661a5fa8 RCX: 00007f2a65f8d169 [ 248.448755][ T8093] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2a661a5fa8 [ 248.448772][ T8093] RBP: 00007f2a661a5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 248.448787][ T8093] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2a661a5fac [ 248.448803][ T8093] R13: 0000000000000000 R14: 00007ffd330b4380 R15: 00007ffd330b4468 [ 248.448844][ T8093] [ 249.126122][ T8103] openvswitch: HfR: Dropping previously announced user features [ 250.027316][ T8126] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 250.960104][ T8141] openvswitch: HfR: Dropping previously announced user features [ 252.122496][ T8169] delete_channel: no stack [ 253.453105][ T5853] Bluetooth: hci2: unexpected subevent 0x01 length: 4 < 18 [ 253.563721][ T30] audit: type=1800 audit(4294967314.931:4): pid=8206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.591" name="dbroot" dev="configfs" ino=20341 res=0 errno=0 [ 253.792982][ T8198] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 253.836459][ T8198] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 253.863340][ T8198] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 253.870363][ T8198] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 254.380483][ T8210] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 255.333125][ T5853] Bluetooth: hci0: command 0x0406 tx timeout [ 255.893094][ T5853] Bluetooth: hci3: command 0x0406 tx timeout [ 255.899373][ T5853] Bluetooth: hci2: command 0x0406 tx timeout [ 255.907416][ T5153] Bluetooth: hci1: command 0x0406 tx timeout [ 257.552722][ T8255] openvswitch: HfR: Dropping previously announced user features [ 258.615445][ T8271] netlink: 222 bytes leftover after parsing attributes in process `syz.0.599'. [ 258.648432][ T8271] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.140988][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 262.147926][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.171061][ T8342] netlink: 222 bytes leftover after parsing attributes in process `syz.3.612'. [ 262.266334][ T8342] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.454162][ T8371] openvswitch: Â: Dropping previously announced user features [ 263.534964][ T8374] openvswitch: HfR: Dropping previously announced user features [ 263.778379][ T8381] nbd: nbd7 already in use [ 264.708045][ T5853] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 264.708116][ T5853] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 264.723895][ T5853] Bluetooth: hci1: adv larger than maximum supported [ 264.723949][ T5853] Bluetooth: hci1: adv larger than maximum supported [ 264.731286][ T5853] Bluetooth: hci1: adv larger than maximum supported [ 265.213959][ T8408] input: f¬ as /devices/virtual/input/input10 [ 267.874531][ T8435] : Can't lookup blockdev [ 270.221100][ T8450] Invalid logical block size (8) [ 272.691992][ T8514] Invalid logical block size (8) [ 273.234248][ T8520] FAULT_INJECTION: forcing a failure. [ 273.234248][ T8520] name failslab, interval 1, probability 0, space 0, times 0 [ 273.302913][ T8520] CPU: 0 UID: 0 PID: 8520 Comm: syz.3.656 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 273.302961][ T8520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 273.302977][ T8520] Call Trace: [ 273.302987][ T8520] [ 273.302997][ T8520] dump_stack_lvl+0x16c/0x1f0 [ 273.303039][ T8520] should_fail_ex+0x512/0x640 [ 273.303068][ T8520] ? fs_reclaim_acquire+0xae/0x150 [ 273.303101][ T8520] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 273.303147][ T8520] should_failslab+0xc2/0x120 [ 273.303174][ T8520] __kmalloc_noprof+0xd2/0x510 [ 273.303224][ T8520] tomoyo_realpath_from_path+0xc2/0x6e0 [ 273.303266][ T8520] ? tomoyo_profile+0x47/0x60 [ 273.303311][ T8520] tomoyo_path_number_perm+0x245/0x580 [ 273.303341][ T8520] ? tomoyo_path_number_perm+0x237/0x580 [ 273.303376][ T8520] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 273.303410][ T8520] ? find_held_lock+0x2b/0x80 [ 273.303489][ T8520] ? find_held_lock+0x2b/0x80 [ 273.303520][ T8520] ? hook_file_ioctl_common+0x145/0x410 [ 273.303560][ T8520] ? __fget_files+0x20e/0x3c0 [ 273.303605][ T8520] security_file_ioctl+0x9b/0x240 [ 273.303638][ T8520] __x64_sys_ioctl+0xb7/0x200 [ 273.303674][ T8520] do_syscall_64+0xcd/0x260 [ 273.303715][ T8520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.303742][ T8520] RIP: 0033:0x7f7c8d38d169 [ 273.303763][ T8520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.303788][ T8520] RSP: 002b:00007f7c8e172038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 273.303815][ T8520] RAX: ffffffffffffffda RBX: 00007f7c8d5a5fa0 RCX: 00007f7c8d38d169 [ 273.303832][ T8520] RDX: 0000200000000040 RSI: 00000000c008ae88 RDI: 0000000000000004 [ 273.303847][ T8520] RBP: 00007f7c8e172090 R08: 0000000000000000 R09: 0000000000000000 [ 273.303863][ T8520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.303877][ T8520] R13: 0000000000000000 R14: 00007f7c8d5a5fa0 R15: 00007ffcb60733b8 [ 273.303913][ T8520] [ 273.303960][ T8520] ERROR: Out of memory at tomoyo_realpath_from_path. [ 274.148617][ T8532] netlink: 16 bytes leftover after parsing attributes in process `syz.0.660'. [ 275.180932][ T8522] kexec: Could not allocate control_code_buffer [ 275.460868][ T8557] netlink: 28 bytes leftover after parsing attributes in process `syz.3.665'. [ 275.471368][ T8557] ipvlan1: entered allmulticast mode [ 275.503043][ T8557] veth0_vlan: entered allmulticast mode [ 275.564159][ T8560] FAULT_INJECTION: forcing a failure. [ 275.564159][ T8560] name failslab, interval 1, probability 0, space 0, times 0 [ 275.648886][ T8560] CPU: 1 UID: 0 PID: 8560 Comm: syz.2.664 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 275.648932][ T8560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 275.648951][ T8560] Call Trace: [ 275.648962][ T8560] [ 275.648974][ T8560] dump_stack_lvl+0x16c/0x1f0 [ 275.649027][ T8560] should_fail_ex+0x512/0x640 [ 275.649059][ T8560] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 275.649123][ T8560] should_failslab+0xc2/0x120 [ 275.649152][ T8560] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 275.649200][ T8560] ? shmem_alloc_inode+0x25/0x50 [ 275.649242][ T8560] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 275.649274][ T8560] shmem_alloc_inode+0x25/0x50 [ 275.649307][ T8560] alloc_inode+0x61/0x240 [ 275.649343][ T8560] new_inode+0x22/0x1c0 [ 275.649374][ T8560] ? trace_cap_capable+0x18d/0x200 [ 275.649405][ T8560] shmem_get_inode+0x19a/0xfb0 [ 275.649443][ T8560] ? __vm_enough_memory+0x184/0x3f0 [ 275.649481][ T8560] __shmem_file_setup+0x16f/0x300 [ 275.649525][ T8560] shmem_zero_setup+0x93/0x1a0 [ 275.649555][ T8560] __mmap_region+0x2036/0x27c0 [ 275.649604][ T8560] ? __pfx___mmap_region+0x10/0x10 [ 275.649646][ T8560] ? trace_sched_exit_tp+0xde/0x130 [ 275.649718][ T8560] ? __pfx___schedule+0x10/0x10 [ 275.649801][ T8560] ? trace_cap_capable+0x18d/0x200 [ 275.649861][ T8560] ? cap_capable+0xb3/0x250 [ 275.649897][ T8560] mmap_region+0x1ab/0x3f0 [ 275.649951][ T8560] do_mmap+0xd8e/0x11b0 [ 275.649997][ T8560] ? __pfx_do_mmap+0x10/0x10 [ 275.650034][ T8560] ? __pfx_down_write_killable+0x10/0x10 [ 275.650099][ T8560] vm_mmap_pgoff+0x281/0x450 [ 275.650141][ T8560] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 275.650174][ T8560] ? find_held_lock+0x2b/0x80 [ 275.650215][ T8560] ? __x64_sys_futex+0x1e0/0x4c0 [ 275.650254][ T8560] ? __x64_sys_futex+0x1e9/0x4c0 [ 275.650300][ T8560] ksys_mmap_pgoff+0x7d/0x5c0 [ 275.650333][ T8560] ? rcu_is_watching+0x12/0xc0 [ 275.650373][ T8560] __x64_sys_mmap+0x125/0x190 [ 275.650412][ T8560] do_syscall_64+0xcd/0x260 [ 275.650457][ T8560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.650486][ T8560] RIP: 0033:0x7f6d9838d169 [ 275.650510][ T8560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.650537][ T8560] RSP: 002b:00007f6d991ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 275.650564][ T8560] RAX: ffffffffffffffda RBX: 00007f6d985a6080 RCX: 00007f6d9838d169 [ 275.650583][ T8560] RDX: 00000000000000e2 RSI: 0000000000020009 RDI: 0000000000000000 [ 275.650600][ T8560] RBP: 00007f6d9840e2a0 R08: 0000000000000403 R09: 0000000000008000 [ 275.650618][ T8560] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 275.650634][ T8560] R13: 0000000000000000 R14: 00007f6d985a6080 R15: 00007ffdbb2eb418 [ 275.650673][ T8560] [ 276.731814][ T8574] delete_channel: no stack [ 276.947863][ T8579] openvswitch: HfR: Dropping previously announced user features [ 277.039934][ T8579] netlink: 12 bytes leftover after parsing attributes in process `syz.3.672'. [ 277.065808][ T8579] HfR: left promiscuous mode [ 277.728187][ T8583] : Can't lookup blockdev [ 278.774595][ T8596] input: f¬ as /devices/virtual/input/input13 [ 278.855491][ T8598] netlink: 28 bytes leftover after parsing attributes in process `syz.0.675'. [ 278.881917][ T8598] veth0_macvtap: left promiscuous mode [ 278.946130][ T8598] macvtap0: entered promiscuous mode [ 278.952472][ T8598] macvtap0: entered allmulticast mode [ 279.516351][ T8610] FAULT_INJECTION: forcing a failure. [ 279.516351][ T8610] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 279.579421][ T8610] CPU: 1 UID: 0 PID: 8610 Comm: syz.0.680 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 279.579463][ T8610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 279.579479][ T8610] Call Trace: [ 279.579488][ T8610] [ 279.579498][ T8610] dump_stack_lvl+0x16c/0x1f0 [ 279.579545][ T8610] should_fail_ex+0x512/0x640 [ 279.579583][ T8610] _copy_from_user+0x2e/0xd0 [ 279.579619][ T8610] copy_msghdr_from_user+0x98/0x160 [ 279.579657][ T8610] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 279.579699][ T8610] ? __pfx__kstrtoull+0x10/0x10 [ 279.579748][ T8610] ___sys_sendmsg+0xfe/0x1d0 [ 279.579794][ T8610] ? __pfx____sys_sendmsg+0x10/0x10 [ 279.579847][ T8610] ? find_held_lock+0x2b/0x80 [ 279.579907][ T8610] __sys_sendmmsg+0x200/0x420 [ 279.579946][ T8610] ? __pfx___sys_sendmmsg+0x10/0x10 [ 279.579994][ T8610] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 279.580047][ T8610] ? fput+0x70/0xf0 [ 279.580074][ T8610] ? ksys_write+0x1b9/0x240 [ 279.580109][ T8610] ? __pfx_ksys_write+0x10/0x10 [ 279.580142][ T8610] ? rcu_is_watching+0x12/0xc0 [ 279.580181][ T8610] __x64_sys_sendmmsg+0x9c/0x100 [ 279.580215][ T8610] ? lockdep_hardirqs_on+0x7c/0x110 [ 279.580251][ T8610] do_syscall_64+0xcd/0x260 [ 279.580292][ T8610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.580318][ T8610] RIP: 0033:0x7f2a65f8d169 [ 279.580340][ T8610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.580365][ T8610] RSP: 002b:00007f2a66df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 279.580392][ T8610] RAX: ffffffffffffffda RBX: 00007f2a661a5fa0 RCX: 00007f2a65f8d169 [ 279.580410][ T8610] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 279.580426][ T8610] RBP: 00007f2a66df6090 R08: 0000000000000000 R09: 0000000000000000 [ 279.580447][ T8610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.580463][ T8610] R13: 0000000000000000 R14: 00007f2a661a5fa0 R15: 00007ffd330b4468 [ 279.580499][ T8610] [ 280.273900][ T5153] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 280.285177][ T5153] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 280.310941][ T5153] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 280.334047][ T5153] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 280.342670][ T5153] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 280.741035][ T8624] netlink: 20 bytes leftover after parsing attributes in process `syz.2.682'. [ 281.627577][ T8619] chnl_net:caif_netlink_parms(): no params data found [ 282.383099][ T5853] Bluetooth: hci4: command tx timeout [ 282.469339][ T8619] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.493053][ T8619] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.501283][ T8619] bridge_slave_0: entered allmulticast mode [ 282.525186][ T8619] bridge_slave_0: entered promiscuous mode [ 282.555297][ T8619] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.572947][ T8619] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.601100][ T8619] bridge_slave_1: entered allmulticast mode [ 282.631507][ T8619] bridge_slave_1: entered promiscuous mode [ 282.898126][ T8619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.932435][ T8619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.296167][ T8619] team0: Port device team_slave_0 added [ 283.321944][ T8619] team0: Port device team_slave_1 added [ 283.673513][ T8638] : Can't lookup blockdev [ 283.720863][ T8619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.738476][ T8619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.813154][ T8619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.855368][ T8619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.874595][ T8619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.946904][ T8619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.261704][ T8619] hsr_slave_0: entered promiscuous mode [ 284.274577][ T8619] hsr_slave_1: entered promiscuous mode [ 284.284617][ T8619] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 284.303068][ T8619] Cannot create hsr debugfs directory [ 284.452973][ T5853] Bluetooth: hci4: command tx timeout [ 284.937556][ T8619] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 284.983212][ T8619] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 285.019811][ T8619] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 285.093177][ T8619] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 285.332693][ T8653] HfR: entered promiscuous mode [ 285.700232][ T8619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.789174][ T8619] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.840637][ T8658] openvswitch: HfR: Dropping previously announced user features [ 285.859763][ T8192] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.867326][ T8192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.949207][ T8192] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.957280][ T8192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.533309][ T5853] Bluetooth: hci4: command tx timeout [ 286.759576][ T8619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.594419][ T8683] FAULT_INJECTION: forcing a failure. [ 287.594419][ T8683] name failslab, interval 1, probability 0, space 0, times 0 [ 287.608797][ T8683] CPU: 0 UID: 0 PID: 8683 Comm: syz.3.695 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 287.608840][ T8683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 287.608858][ T8683] Call Trace: [ 287.608868][ T8683] [ 287.608879][ T8683] dump_stack_lvl+0x16c/0x1f0 [ 287.608938][ T8683] should_fail_ex+0x512/0x640 [ 287.608973][ T8683] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 287.609019][ T8683] should_failslab+0xc2/0x120 [ 287.609043][ T8683] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 287.609076][ T8683] ? vma_merge_new_range+0x3f8/0xc10 [ 287.609109][ T8683] ? vm_area_alloc+0x1f/0x160 [ 287.609149][ T8683] vm_area_alloc+0x1f/0x160 [ 287.609183][ T8683] __mmap_region+0xfd0/0x27c0 [ 287.609217][ T8683] ? finish_task_switch.isra.0+0x221/0xc10 [ 287.609251][ T8683] ? __pfx___mmap_region+0x10/0x10 [ 287.609285][ T8683] ? trace_sched_exit_tp+0xde/0x130 [ 287.609343][ T8683] ? __pfx___schedule+0x10/0x10 [ 287.609409][ T8683] ? trace_cap_capable+0x18d/0x200 [ 287.609435][ T8683] ? cap_capable+0xb3/0x250 [ 287.609468][ T8683] mmap_region+0x1ab/0x3f0 [ 287.609511][ T8683] do_mmap+0xd8e/0x11b0 [ 287.609548][ T8683] ? __pfx_do_mmap+0x10/0x10 [ 287.609580][ T8683] ? __pfx_down_write_killable+0x10/0x10 [ 287.609628][ T8683] vm_mmap_pgoff+0x281/0x450 [ 287.609693][ T8683] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 287.609726][ T8683] ? find_held_lock+0x2b/0x80 [ 287.609769][ T8683] ? __x64_sys_futex+0x1e0/0x4c0 [ 287.609804][ T8683] ? __x64_sys_futex+0x1e9/0x4c0 [ 287.609848][ T8683] ksys_mmap_pgoff+0x7d/0x5c0 [ 287.609879][ T8683] ? rcu_is_watching+0x12/0xc0 [ 287.609925][ T8683] __x64_sys_mmap+0x125/0x190 [ 287.609958][ T8683] do_syscall_64+0xcd/0x260 [ 287.610001][ T8683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.610027][ T8683] RIP: 0033:0x7f7c8d38d169 [ 287.610050][ T8683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.610073][ T8683] RSP: 002b:00007f7c8e151038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 287.610098][ T8683] RAX: ffffffffffffffda RBX: 00007f7c8d5a6080 RCX: 00007f7c8d38d169 [ 287.610114][ T8683] RDX: 00000000000000e2 RSI: 0000000000020009 RDI: 0000000000000000 [ 287.610129][ T8683] RBP: 00007f7c8d40e2a0 R08: 0000000000000403 R09: 0000000000008000 [ 287.610143][ T8683] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 287.610158][ T8683] R13: 0000000000000000 R14: 00007f7c8d5a6080 R15: 00007ffcb60733b8 [ 287.610193][ T8683] [ 288.412464][ T8619] veth0_vlan: entered promiscuous mode [ 288.613299][ T5853] Bluetooth: hci4: command tx timeout [ 288.746052][ T8619] veth1_vlan: entered promiscuous mode [ 289.473864][ T83] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.595607][ T8700] openvswitch: HfR: Dropping previously announced user features [ 289.655900][ T83] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.720149][ T8619] veth0_macvtap: entered promiscuous mode [ 289.809183][ T83] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.856642][ T8619] veth1_macvtap: entered promiscuous mode [ 289.969722][ T83] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.021673][ T8619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.039767][ T8619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.050735][ T8619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.069779][ T8619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.081074][ T8619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.102261][ T8619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.117226][ T8619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.128878][ T8619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.150616][ T8619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.201793][ T8619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.220998][ T8619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.231940][ T8619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.248407][ T8619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.260169][ T8619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.277106][ T8619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.288749][ T8619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.310183][ T8619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.325482][ T8619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.370113][ T8619] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.387617][ T8619] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.398885][ T8619] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.415660][ T8619] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.765666][ T83] vlan1: left allmulticast mode [ 290.782308][ T83] veth0_vlan: left allmulticast mode [ 290.805756][ T83] vlan1: left promiscuous mode [ 290.816815][ T83] bridge0: port 3(vlan1) entered disabled state [ 290.829466][ T83] bridge_slave_1: left allmulticast mode [ 290.841860][ T83] bridge_slave_1: left promiscuous mode [ 290.863913][ T83] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.895787][ T83] bridge_slave_0: left allmulticast mode [ 290.902140][ T83] bridge_slave_0: left promiscuous mode [ 290.925152][ T83] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.882965][ T83] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.899543][ T83] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.919416][ T83] bond0 (unregistering): Released all slaves [ 292.122013][ T8188] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.158408][ T8188] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.360005][ T8188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.380934][ T8188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.939459][ T8713] netlink: 32 bytes leftover after parsing attributes in process `syz.4.677'. [ 293.315890][ T83] hsr_slave_0: left promiscuous mode [ 293.373121][ T83] hsr_slave_1: left promiscuous mode [ 293.388026][ T83] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.416945][ T83] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.458830][ T83] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.494230][ T83] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.556219][ T83] veth1_macvtap: left promiscuous mode [ 293.562705][ T83] veth0_macvtap: left promiscuous mode [ 293.588745][ T83] veth1_vlan: left promiscuous mode [ 293.613852][ T83] veth0_vlan: left promiscuous mode [ 294.828146][ T83] team0 (unregistering): Port device team_slave_1 removed [ 296.125306][ T5153] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 296.137244][ T5153] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 296.153549][ T5153] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 296.189306][ T5153] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 296.199548][ T5153] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 296.604338][ T8745] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 296.627460][ T8745] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 297.240490][ T8742] chnl_net:caif_netlink_parms(): no params data found [ 297.544131][ T8768] openvswitch: HfR: Dropping previously announced user features [ 297.853718][ T8781] netlink: 8 bytes leftover after parsing attributes in process `syz.4.713'. [ 297.895295][ T8742] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.923094][ T8742] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.963116][ T8742] bridge_slave_0: entered allmulticast mode [ 297.980611][ T8742] bridge_slave_0: entered promiscuous mode [ 298.129652][ T8742] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.143083][ T8742] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.156378][ T8742] bridge_slave_1: entered allmulticast mode [ 298.165648][ T8742] bridge_slave_1: entered promiscuous mode [ 298.294616][ T5853] Bluetooth: hci1: command tx timeout [ 298.516244][ T8742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.537307][ T8742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.711171][ T8742] team0: Port device team_slave_0 added [ 298.764633][ T8742] team0: Port device team_slave_1 added [ 298.982049][ T8742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.013093][ T8742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.114039][ T8742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.180560][ T8742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.203016][ T8742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.283092][ T8742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.750835][ T8742] hsr_slave_0: entered promiscuous mode [ 299.791706][ T8742] hsr_slave_1: entered promiscuous mode [ 299.828700][ T8742] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 299.867922][ T8742] Cannot create hsr debugfs directory [ 300.373768][ T5853] Bluetooth: hci1: command tx timeout [ 301.727414][ T8742] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 301.785590][ T8742] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 301.965243][ T8742] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 302.103384][ T8742] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 302.464939][ T5853] Bluetooth: hci1: command tx timeout [ 302.517218][ T8742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.549038][ T8742] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.621518][ T8192] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.628958][ T8192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.745988][ T8192] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.753377][ T8192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.915799][ T8866] HfR: entered promiscuous mode [ 303.011679][ T8868] netlink: 338 bytes leftover after parsing attributes in process `syz.3.725'. [ 303.055165][ T8863] netlink: 338 bytes leftover after parsing attributes in process `syz.3.725'. [ 303.788634][ T8742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.534640][ T5853] Bluetooth: hci1: command tx timeout [ 304.542033][ T8897] netlink: 146 bytes leftover after parsing attributes in process `syz.2.729'. [ 304.953609][ T8742] veth0_vlan: entered promiscuous mode [ 305.064695][ T8742] veth1_vlan: entered promiscuous mode [ 305.464911][ T8742] veth0_macvtap: entered promiscuous mode [ 305.520940][ T8742] veth1_macvtap: entered promiscuous mode [ 305.666503][ T8742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.771251][ T8742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.844184][ T8742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.898755][ T8742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.933470][ T8742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.969113][ T8742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.004526][ T8742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.032978][ T8742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.178007][ T8742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.242379][ T8742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.278905][ T8742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.332959][ T8742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.350165][ T8742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.380018][ T8742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.403729][ T8742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.431712][ T8742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.471830][ T8742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.490888][ T8742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.539607][ T8742] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.572955][ T8742] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.592941][ T8742] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.602213][ T8742] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.900052][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.940523][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.044762][ T8192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.083631][ T8192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.864112][ T8979] openvswitch: HfR: Dropping previously announced user features [ 310.222185][ T30] audit: type=1800 audit(4294967334.640:5): pid=8966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.739" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 311.403753][ T9000] netlink: 198 bytes leftover after parsing attributes in process `syz.3.744'. [ 313.758687][ T9047] HfR: entered promiscuous mode [ 317.820131][ T9111] openvswitch: HfR: Dropping previously announced user features [ 318.229299][ T9122] Invalid ELF header magic: != ELF [ 318.283891][ T9121] Invalid ELF header magic: != ELF [ 318.482161][ T9118] netlink: 4 bytes leftover after parsing attributes in process `syz.3.764'. [ 318.811767][ T9140] openvswitch: HfR: Dropping previously announced user features [ 321.993132][ T9205] openvswitch: HfR: Dropping previously announced user features [ 323.445673][ T9237] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 323.581380][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.589416][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.495309][ T9275] openvswitch: HfR: Dropping previously announced user features [ 325.292117][ T9291] netlink: 350 bytes leftover after parsing attributes in process `syz.4.796'. [ 326.834212][ T9309] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 326.845426][ T9309] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 326.890678][ T9311] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 3000000000 [ 327.528755][ T9330] Invalid ELF header magic: != ELF [ 328.869057][ T9366] openvswitch: HfR: Dropping previously announced user features [ 329.090244][ T9373] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 329.174518][ T9373] FAULT_INJECTION: forcing a failure. [ 329.174518][ T9373] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 329.217922][ T9373] CPU: 0 UID: 0 PID: 9373 Comm: syz.4.812 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 329.217968][ T9373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 329.217986][ T9373] Call Trace: [ 329.217998][ T9373] [ 329.218009][ T9373] dump_stack_lvl+0x16c/0x1f0 [ 329.218054][ T9373] should_fail_ex+0x512/0x640 [ 329.218094][ T9373] should_fail_alloc_page+0xe7/0x130 [ 329.218125][ T9373] prepare_alloc_pages+0x3c2/0x610 [ 329.218163][ T9373] ? rcu_is_watching+0x12/0xc0 [ 329.218205][ T9373] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 329.218249][ T9373] ? arch_stack_walk+0xa6/0x100 [ 329.218326][ T9373] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 329.218372][ T9373] ? __pfx_stack_trace_save+0x10/0x10 [ 329.218421][ T9373] ? check_path.constprop.0+0x24/0x50 [ 329.218474][ T9373] ? add_lock_to_list+0x9d/0x130 [ 329.218522][ T9373] ? __lock_acquire+0xaa4/0x1ba0 [ 329.218547][ T9373] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 329.218585][ T9373] ? policy_nodemask+0xea/0x4e0 [ 329.218636][ T9373] alloc_pages_mpol+0x1fb/0x550 [ 329.218665][ T9373] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 329.218690][ T9373] ? __page_table_check_ptes_set+0x1ae/0x420 [ 329.218737][ T9373] ? find_held_lock+0x2b/0x80 [ 329.218781][ T9373] alloc_pages_noprof+0x131/0x390 [ 329.218809][ T9373] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 329.218848][ T9373] get_free_pages_noprof+0xc/0x40 [ 329.218876][ T9373] kasan_populate_vmalloc_pte+0x2d/0x160 [ 329.218918][ T9373] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 329.218964][ T9373] __apply_to_page_range+0x5f9/0xd30 [ 329.219004][ T9373] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 329.219049][ T9373] ? __pfx___apply_to_page_range+0x10/0x10 [ 329.219085][ T9373] ? alloc_vmap_area+0x872/0x2970 [ 329.219126][ T9373] alloc_vmap_area+0x919/0x2970 [ 329.219177][ T9373] ? __pfx_alloc_vmap_area+0x10/0x10 [ 329.219222][ T9373] __get_vm_area_node+0x1a7/0x300 [ 329.219264][ T9373] vmap+0x159/0x350 [ 329.219309][ T9373] ? relay_open_buf.part.0+0x445/0xb90 [ 329.219355][ T9373] ? __pfx_vmap+0x10/0x10 [ 329.219384][ T9373] ? trace_kmalloc+0x2b/0xd0 [ 329.219415][ T9373] ? relay_open_buf.part.0+0x194/0xb90 [ 329.219463][ T9373] relay_open_buf.part.0+0x445/0xb90 [ 329.219521][ T9373] relay_open+0x653/0xad0 [ 329.219565][ T9373] ? debugfs_create_file_full+0x41/0x60 [ 329.219610][ T9373] do_blk_trace_setup+0x503/0xb50 [ 329.219656][ T9373] blk_trace_setup+0xed/0x1b0 [ 329.219694][ T9373] ? __pfx_blk_trace_setup+0x10/0x10 [ 329.219730][ T9373] ? __pfx_snprintf+0x10/0x10 [ 329.219791][ T9373] blk_trace_ioctl+0x146/0x280 [ 329.219830][ T9373] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 329.219875][ T9373] ? find_held_lock+0x2b/0x80 [ 329.219910][ T9373] ? hook_file_ioctl_common+0x145/0x410 [ 329.219948][ T9373] blkdev_ioctl+0x108/0x6d0 [ 329.219995][ T9373] ? __pfx_blkdev_ioctl+0x10/0x10 [ 329.220044][ T9373] ? __pfx_blkdev_ioctl+0x10/0x10 [ 329.220088][ T9373] __x64_sys_ioctl+0x190/0x200 [ 329.220121][ T9373] do_syscall_64+0xcd/0x260 [ 329.220164][ T9373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.220193][ T9373] RIP: 0033:0x7f690a18d169 [ 329.220217][ T9373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.220244][ T9373] RSP: 002b:00007f690b070038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 329.220269][ T9373] RAX: ffffffffffffffda RBX: 00007f690a3a5fa0 RCX: 00007f690a18d169 [ 329.220286][ T9373] RDX: 0000200000000180 RSI: 00000000c0481273 RDI: 0000000000000006 [ 329.220315][ T9373] RBP: 00007f690a20e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 329.220331][ T9373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 329.220349][ T9373] R13: 0000000000000000 R14: 00007f690a3a5fa0 R15: 00007ffcff598138 [ 329.220388][ T9373] [ 332.400715][ T9437] process 'syz.4.823' launched ':,' with NULL argv: empty string added [ 332.417284][ T9430] Invalid ELF header magic: != ELF [ 332.463639][ T9437] FAULT_INJECTION: forcing a failure. [ 332.463639][ T9437] name failslab, interval 1, probability 0, space 0, times 0 [ 332.477210][ T9437] CPU: 0 UID: 0 PID: 9437 Comm: syz.4.823 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 332.477250][ T9437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 332.477267][ T9437] Call Trace: [ 332.477277][ T9437] [ 332.477290][ T9437] dump_stack_lvl+0x16c/0x1f0 [ 332.477337][ T9437] should_fail_ex+0x512/0x640 [ 332.477374][ T9437] ? fs_reclaim_acquire+0xae/0x150 [ 332.477412][ T9437] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 332.477450][ T9437] should_failslab+0xc2/0x120 [ 332.477480][ T9437] __kmalloc_noprof+0xd2/0x510 [ 332.477522][ T9437] ? kmem_cache_free+0x2d4/0x4d0 [ 332.477566][ T9437] tomoyo_realpath_from_path+0xc2/0x6e0 [ 332.477615][ T9437] tomoyo_realpath_nofollow+0xdb/0xf0 [ 332.477655][ T9437] ? __pfx_tomoyo_realpath_nofollow+0x10/0x10 [ 332.477694][ T9437] ? tomoyo_domain+0xbb/0x150 [ 332.477740][ T9437] ? tomoyo_init_request_info+0x101/0x370 [ 332.477776][ T9437] tomoyo_find_next_domain+0x2a8/0x20b0 [ 332.477808][ T9437] ? __pfx___kernel_read+0x10/0x10 [ 332.477855][ T9437] ? __pfx_tomoyo_find_next_domain+0x10/0x10 [ 332.477901][ T9437] tomoyo_bprm_check_security+0x12e/0x1d0 [ 332.477943][ T9437] ? tomoyo_bprm_check_security+0x120/0x1d0 [ 332.478001][ T9437] security_bprm_check+0x1b9/0x1e0 [ 332.478031][ T9437] bprm_execve+0x810/0x1650 [ 332.478072][ T9437] ? __pfx_bprm_execve+0x10/0x10 [ 332.478099][ T9437] ? __asan_memcpy+0x3c/0x60 [ 332.478135][ T9437] ? copy_string_kernel+0x404/0x4a0 [ 332.478176][ T9437] do_execveat_common.isra.0+0x4a5/0x610 [ 332.478218][ T9437] __x64_sys_execve+0x8e/0xb0 [ 332.478251][ T9437] do_syscall_64+0xcd/0x260 [ 332.478295][ T9437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.478323][ T9437] RIP: 0033:0x7f690a18d169 [ 332.478348][ T9437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.478373][ T9437] RSP: 002b:00007f690b070038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 332.478401][ T9437] RAX: ffffffffffffffda RBX: 00007f690a3a5fa0 RCX: 00007f690a18d169 [ 332.478418][ T9437] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 332.478433][ T9437] RBP: 00007f690a20e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 332.478449][ T9437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 332.478465][ T9437] R13: 0000000000000000 R14: 00007f690a3a5fa0 R15: 00007ffcff598138 [ 332.478503][ T9437] [ 332.478514][ T9437] ERROR: Out of memory at tomoyo_realpath_from_path. [ 332.499091][ T9436] Â: entered promiscuous mode [ 333.458683][ T9462] openvswitch: HfR: Dropping previously announced user features [ 337.184641][ T9511] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 337.259730][ T9511] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 337.267345][ T9511] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 337.293246][ T9511] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 337.382312][ T9511] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 337.616308][ T9511] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 337.694601][ T9511] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 337.795885][ T9511] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 338.373421][ T5853] Bluetooth: hci2: command 0x0406 tx timeout [ 338.488065][ T9559] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 338.531906][ T9564] openvswitch: HfR: Dropping previously announced user features [ 339.163643][ T9575] : Can't lookup blockdev [ 339.385062][ T5853] Bluetooth: hci4: command 0x0c1a tx timeout [ 339.391315][ T5853] Bluetooth: hci3: command 0x0406 tx timeout [ 339.662870][ T5153] Bluetooth: hci1: command 0x0c1a tx timeout [ 341.413840][ T5153] Bluetooth: hci4: command 0x0c1a tx timeout [ 341.733015][ T5153] Bluetooth: hci1: command 0x0c1a tx timeout [ 342.346836][ T9615] FAULT_INJECTION: forcing a failure. [ 342.346836][ T9615] name failslab, interval 1, probability 0, space 0, times 0 [ 342.370944][ T9615] CPU: 1 UID: 0 PID: 9615 Comm: syz.3.858 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 342.370981][ T9615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 342.370995][ T9615] Call Trace: [ 342.371004][ T9615] [ 342.371014][ T9615] dump_stack_lvl+0x16c/0x1f0 [ 342.371056][ T9615] should_fail_ex+0x512/0x640 [ 342.371082][ T9615] ? fs_reclaim_acquire+0xae/0x150 [ 342.371113][ T9615] ? tomoyo_encode2+0x100/0x3e0 [ 342.371143][ T9615] should_failslab+0xc2/0x120 [ 342.371167][ T9615] __kmalloc_noprof+0xd2/0x510 [ 342.371211][ T9615] tomoyo_encode2+0x100/0x3e0 [ 342.371248][ T9615] tomoyo_encode+0x29/0x50 [ 342.371278][ T9615] tomoyo_realpath_from_path+0x18f/0x6e0 [ 342.371316][ T9615] ? tomoyo_profile+0x47/0x60 [ 342.371359][ T9615] tomoyo_path_number_perm+0x245/0x580 [ 342.371386][ T9615] ? tomoyo_path_number_perm+0x237/0x580 [ 342.371416][ T9615] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 342.371445][ T9615] ? find_held_lock+0x2b/0x80 [ 342.371507][ T9615] ? find_held_lock+0x2b/0x80 [ 342.371535][ T9615] ? hook_file_ioctl_common+0x145/0x410 [ 342.371572][ T9615] ? __fget_files+0x20e/0x3c0 [ 342.371626][ T9615] security_file_ioctl+0x9b/0x240 [ 342.371660][ T9615] __x64_sys_ioctl+0xb7/0x200 [ 342.371693][ T9615] do_syscall_64+0xcd/0x260 [ 342.371730][ T9615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.371755][ T9615] RIP: 0033:0x7f7c8d38d169 [ 342.371777][ T9615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.371801][ T9615] RSP: 002b:00007f7c8e172038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 342.371827][ T9615] RAX: ffffffffffffffda RBX: 00007f7c8d5a5fa0 RCX: 00007f7c8d38d169 [ 342.371852][ T9615] RDX: 0000200000000040 RSI: 00000000c008ae88 RDI: 0000000000000004 [ 342.371868][ T9615] RBP: 00007f7c8e172090 R08: 0000000000000000 R09: 0000000000000000 [ 342.371881][ T9615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.371895][ T9615] R13: 0000000000000000 R14: 00007f7c8d5a5fa0 R15: 00007ffcb60733b8 [ 342.371931][ T9615] [ 342.371958][ T9615] ERROR: Out of memory at tomoyo_realpath_from_path. [ 342.694622][ T9620] netlink: 28 bytes leftover after parsing attributes in process `syz.5.860'. [ 342.706607][ T9622] netlink: 28 bytes leftover after parsing attributes in process `syz.5.860'. [ 342.803786][ T9624] netlink: 8 bytes leftover after parsing attributes in process `syz.2.861'. [ 342.850674][ T9620] mac80211_hwsim hwsim18 wlan1: entered allmulticast mode [ 343.492963][ T5153] Bluetooth: hci4: command 0x0c1a tx timeout [ 343.704260][ T9627] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 343.710795][ T9627] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 343.718177][ T9643] openvswitch: HfR: Dropping previously announced user features [ 343.723400][ T9627] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 343.775567][ T9627] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 344.801575][ T9664] openvswitch: HfR: Dropping previously announced user features [ 344.841448][ T9664] netlink: 12 bytes leftover after parsing attributes in process `syz.3.872'. [ 344.864366][ T9664] HfR: left promiscuous mode [ 345.012857][ T5153] Bluetooth: hci2: command 0x0406 tx timeout [ 345.738264][ T5153] Bluetooth: hci4: command 0x0c1a tx timeout [ 345.738338][ T5853] Bluetooth: hci3: command 0x0406 tx timeout [ 345.818016][ T5853] Bluetooth: hci1: command 0x0c1a tx timeout [ 345.878700][ T9658] kexec: Could not allocate control_code_buffer [ 346.328033][ T9692] openvswitch: HfR: Dropping previously announced user features [ 346.355784][ T9695] FAULT_INJECTION: forcing a failure. [ 346.355784][ T9695] name failslab, interval 1, probability 0, space 0, times 0 [ 346.411720][ T9695] CPU: 1 UID: 0 PID: 9695 Comm: syz.5.880 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 346.411763][ T9695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 346.411780][ T9695] Call Trace: [ 346.411788][ T9695] [ 346.411799][ T9695] dump_stack_lvl+0x16c/0x1f0 [ 346.411846][ T9695] should_fail_ex+0x512/0x640 [ 346.411884][ T9695] should_failslab+0xc2/0x120 [ 346.411911][ T9695] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 346.411954][ T9695] ? dst_alloc+0x99/0x1a0 [ 346.411989][ T9695] ? __pfx_ip6_dst_gc+0x10/0x10 [ 346.412014][ T9695] dst_alloc+0x99/0x1a0 [ 346.412061][ T9695] ip6_rt_cache_alloc+0x1f6/0x8c0 [ 346.412104][ T9695] ? __pfx_ip6_rt_cache_alloc+0x10/0x10 [ 346.412153][ T9695] ip6_pol_route+0xd7b/0x1230 [ 346.412196][ T9695] ? __pfx_ip6_pol_route+0x10/0x10 [ 346.412250][ T9695] ? find_held_lock+0x2b/0x80 [ 346.412294][ T9695] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 346.412325][ T9695] fib6_rule_lookup+0x24c/0x720 [ 346.412364][ T9695] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 346.412398][ T9695] ? __kernel_text_address+0xd/0x40 [ 346.412426][ T9695] ? unwind_get_return_address+0x59/0xa0 [ 346.412475][ T9695] ? __lock_acquire+0x5ca/0x1ba0 [ 346.412507][ T9695] ip6_route_output_flags+0x1d0/0x640 [ 346.412544][ T9695] ip6_dst_lookup_tail.constprop.0+0x115a/0x2140 [ 346.412589][ T9695] ? find_held_lock+0x2b/0x80 [ 346.412627][ T9695] ? __pfx_ip6_dst_lookup_tail.constprop.0+0x10/0x10 [ 346.412673][ T9695] ? __lock_acquire+0x5ca/0x1ba0 [ 346.412712][ T9695] ip6_dst_lookup_flow+0x99/0x1d0 [ 346.412746][ T9695] ? __pfx_ip6_dst_lookup_flow+0x10/0x10 [ 346.412776][ T9695] ? find_held_lock+0x2b/0x80 [ 346.412808][ T9695] ? rawv6_sendmsg+0xc33/0x4890 [ 346.412849][ T9695] rawv6_sendmsg+0xf68/0x4890 [ 346.412879][ T9695] ? up_write+0x1b2/0x520 [ 346.412923][ T9695] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 346.412953][ T9695] ? __lock_acquire+0x5ca/0x1ba0 [ 346.412985][ T9695] ? __lock_acquire+0x5ca/0x1ba0 [ 346.413029][ T9695] ? __pfx___might_resched+0x10/0x10 [ 346.413093][ T9695] ? __pfx_aa_sk_perm+0x10/0x10 [ 346.413120][ T9695] ? __import_iovec+0x1c8/0x660 [ 346.413150][ T9695] ? __might_fault+0xe3/0x190 [ 346.413183][ T9695] ? __might_fault+0x13b/0x190 [ 346.413218][ T9695] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 346.413252][ T9695] ? inet_sendmsg+0x119/0x140 [ 346.413274][ T9695] inet_sendmsg+0x119/0x140 [ 346.413301][ T9695] ____sys_sendmsg+0x973/0xc70 [ 346.413339][ T9695] ? copy_msghdr_from_user+0x10a/0x160 [ 346.413370][ T9695] ? __pfx_____sys_sendmsg+0x10/0x10 [ 346.413418][ T9695] ? __pfx__kstrtoull+0x10/0x10 [ 346.413463][ T9695] ___sys_sendmsg+0x134/0x1d0 [ 346.413500][ T9695] ? __pfx____sys_sendmsg+0x10/0x10 [ 346.413552][ T9695] ? find_held_lock+0x2b/0x80 [ 346.413614][ T9695] __sys_sendmmsg+0x200/0x420 [ 346.413655][ T9695] ? __pfx___sys_sendmmsg+0x10/0x10 [ 346.413702][ T9695] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 346.413760][ T9695] ? fput+0x70/0xf0 [ 346.413787][ T9695] ? ksys_write+0x1b9/0x240 [ 346.413822][ T9695] ? __pfx_ksys_write+0x10/0x10 [ 346.413852][ T9695] ? rcu_is_watching+0x12/0xc0 [ 346.413888][ T9695] __x64_sys_sendmmsg+0x9c/0x100 [ 346.413918][ T9695] ? lockdep_hardirqs_on+0x7c/0x110 [ 346.413947][ T9695] do_syscall_64+0xcd/0x260 [ 346.413982][ T9695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.414008][ T9695] RIP: 0033:0x7fd6c918d169 [ 346.414040][ T9695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.414063][ T9695] RSP: 002b:00007fd6c9f07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 346.414089][ T9695] RAX: ffffffffffffffda RBX: 00007fd6c93a5fa0 RCX: 00007fd6c918d169 [ 346.414106][ T9695] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 346.414120][ T9695] RBP: 00007fd6c9f07090 R08: 0000000000000000 R09: 0000000000000000 [ 346.414136][ T9695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.414151][ T9695] R13: 0000000000000000 R14: 00007fd6c93a5fa0 R15: 00007ffece919478 [ 346.414188][ T9695] [ 346.839326][ C1] vkms_vblank_simulate: vblank timer overrun [ 347.012511][ T9702] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 347.101146][ T9702] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 347.240608][ T9704] netlink: 338 bytes leftover after parsing attributes in process `syz.5.884'. [ 347.506075][ T9707] openvswitch: HfR: Dropping previously announced user features [ 347.550038][ T9707] netlink: 12 bytes leftover after parsing attributes in process `syz.4.885'. [ 347.570949][ T9707] HfR: left promiscuous mode [ 349.768302][ T9749] openvswitch: HfR: Dropping previously announced user features [ 350.061127][ T9753] openvswitch: HfR: Dropping previously announced user features [ 352.030776][ T9784] usb usb38: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 352.127852][ T9784] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 352.703490][ T9795] netlink: 32 bytes leftover after parsing attributes in process `syz.4.910'. [ 353.584633][ T9804] ubi0: attaching mtd0 [ 353.589723][ T9804] ubi0 error: ubi_attach_mtd_dev: bad VID header (4198269) or data offsets (4198333) [ 354.103175][ T9812] openvswitch: HfR: Dropping previously announced user features [ 355.010052][ T9821] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 355.050049][ T9821] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 357.526663][ T9835] netlink: 'syz.2.921': attribute type 64 has an invalid length. [ 357.544223][ T9835] netlink: 74 bytes leftover after parsing attributes in process `syz.2.921'. [ 357.939782][ T9866] HfR: entered promiscuous mode [ 359.690047][ T9896] sd 0:0:1:0: PR command failed: 1026 [ 359.765894][ T9896] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 359.877083][ T9896] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 359.912914][ T9896] sd 0:0:1:0: PR command failed: 1026 [ 359.940562][ T9896] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 359.965732][ T9896] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 360.001635][ T9896] sd 0:0:1:0: PR command failed: 1026 [ 360.038387][ T9896] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 360.144251][ T9896] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 360.187946][ T9896] sd 0:0:1:0: PR command failed: 1026 [ 360.227151][ T9896] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 360.254674][ T9896] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 360.276661][ T9896] sd 0:0:1:0: PR command failed: 1026 [ 360.325964][ T9896] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 360.404093][ T9896] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 360.548592][ T9917] netlink: 20 bytes leftover after parsing attributes in process `syz.4.938'. [ 360.675589][ T9895] kexec: Could not allocate control_code_buffer [ 361.751590][ T9942] openvswitch: HfR: Dropping previously announced user features [ 364.325266][ T9997] openvswitch: HfR: Dropping previously announced user features [ 364.418098][ T9998] netlink: 28 bytes leftover after parsing attributes in process `syz.3.957'. [ 364.476554][ T9998] netlink: 28 bytes leftover after parsing attributes in process `syz.3.957'. [ 364.524962][ T9998] netlink: 28 bytes leftover after parsing attributes in process `syz.3.957'. [ 364.580747][ T9998] netlink: 28 bytes leftover after parsing attributes in process `syz.3.957'. [ 364.638224][ T9998] netlink: 28 bytes leftover after parsing attributes in process `syz.3.957'. [ 364.682057][ T9998] netlink: 28 bytes leftover after parsing attributes in process `syz.3.957'. [ 364.746453][ T9998] netlink: 28 bytes leftover after parsing attributes in process `syz.3.957'. [ 364.856083][T10013] openvswitch: HfR: Dropping previously announced user features [ 365.091466][ T30] audit: type=1800 audit(4294967389.510:6): pid=10021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.964" name="members" dev="configfs" ino=29922 res=0 errno=0 [ 367.486281][ T30] audit: type=1800 audit(4294967391.890:7): pid=10067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.974" name="discovery_nqn" dev="configfs" ino=30797 res=0 errno=0 [ 367.622392][T10070] openvswitch: HfR: Dropping previously announced user features [ 370.660190][T10133] FAULT_INJECTION: forcing a failure. [ 370.660190][T10133] name failslab, interval 1, probability 0, space 0, times 0 [ 370.738137][T10133] CPU: 1 UID: 0 PID: 10133 Comm: syz.5.994 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 370.738177][T10133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 370.738193][T10133] Call Trace: [ 370.738202][T10133] [ 370.738213][T10133] dump_stack_lvl+0x16c/0x1f0 [ 370.738259][T10133] should_fail_ex+0x512/0x640 [ 370.738290][T10133] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 370.738334][T10133] should_failslab+0xc2/0x120 [ 370.738361][T10133] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 370.738401][T10133] ? getname_flags.part.0+0x48/0x540 [ 370.738438][T10133] getname_flags.part.0+0x48/0x540 [ 370.738472][T10133] getname_flags+0x93/0xf0 [ 370.738508][T10133] do_sys_openat2+0xb8/0x1d0 [ 370.738543][T10133] ? __pfx_do_sys_openat2+0x10/0x10 [ 370.738576][T10133] ? __fget_files+0x20e/0x3c0 [ 370.738623][T10133] __x64_sys_openat+0x174/0x210 [ 370.738653][T10133] ? __pfx___x64_sys_openat+0x10/0x10 [ 370.738721][T10133] ? ksys_write+0x1b9/0x240 [ 370.738771][T10133] do_syscall_64+0xcd/0x260 [ 370.738812][T10133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.738839][T10133] RIP: 0033:0x7fd6c918d169 [ 370.738861][T10133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.738885][T10133] RSP: 002b:00007fd6c9f07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 370.738911][T10133] RAX: ffffffffffffffda RBX: 00007fd6c93a5fa0 RCX: 00007fd6c918d169 [ 370.738929][T10133] RDX: 80a994ba1a1a6d73 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 370.738946][T10133] RBP: 00007fd6c9f07090 R08: 0000000000000000 R09: 0000000000000000 [ 370.738960][T10133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.738975][T10133] R13: 0000000000000001 R14: 00007fd6c93a5fa0 R15: 00007ffece919478 [ 370.739010][T10133] [ 371.601668][ T5853] Bluetooth: hci1: unexpected event 0x1d length: 6 > 5 [ 373.213656][T10176] can: request_module (can-proto-0) failed. [ 373.528325][T10184] openvswitch: HfR: Dropping previously announced user features [ 376.100173][T10206] can0: slcan on ttyS2. [ 376.265593][T10209] MTRR 1 not used [ 376.280166][T10217] can0 (unregistered): slcan off ttyS2. [ 377.558069][T10235] Â: entered promiscuous mode [ 379.027368][T10295] HfR: entered promiscuous mode [ 379.259495][T10284] cgroup: fork rejected by pids controller in /syz5 [ 383.014658][T10366] Invalid ELF header magic: != ELF [ 383.678292][T10385] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 383.678292][T10385] The task syz.3.1039 (10385) triggered the difference, watch for misbehavior. [ 384.532094][T10405] openvswitch: HfR: Dropping previously announced user features [ 385.022334][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 385.030547][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.487014][T10417] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1047'. [ 385.917424][T10422] FAULT_INJECTION: forcing a failure. [ 385.917424][T10422] name failslab, interval 1, probability 0, space 0, times 0 [ 385.962888][T10422] CPU: 1 UID: 0 PID: 10422 Comm: syz.3.1049 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 385.962930][T10422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 385.962947][T10422] Call Trace: [ 385.962956][T10422] [ 385.962967][T10422] dump_stack_lvl+0x16c/0x1f0 [ 385.963014][T10422] should_fail_ex+0x512/0x640 [ 385.963044][T10422] ? fs_reclaim_acquire+0xae/0x150 [ 385.963078][T10422] ? tomoyo_encode2+0x100/0x3e0 [ 385.963108][T10422] should_failslab+0xc2/0x120 [ 385.963132][T10422] __kmalloc_noprof+0xd2/0x510 [ 385.963176][T10422] tomoyo_encode2+0x100/0x3e0 [ 385.963242][T10422] tomoyo_encode+0x29/0x50 [ 385.963269][T10422] tomoyo_realpath_from_path+0x18f/0x6e0 [ 385.963301][T10422] ? tomoyo_profile+0x47/0x60 [ 385.963345][T10422] tomoyo_path_number_perm+0x245/0x580 [ 385.963372][T10422] ? tomoyo_path_number_perm+0x237/0x580 [ 385.963406][T10422] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 385.963442][T10422] ? find_held_lock+0x2b/0x80 [ 385.963524][T10422] ? find_held_lock+0x2b/0x80 [ 385.963556][T10422] ? hook_file_ioctl_common+0x145/0x410 [ 385.963594][T10422] ? __fget_files+0x20e/0x3c0 [ 385.963639][T10422] security_file_ioctl+0x9b/0x240 [ 385.963675][T10422] __x64_sys_ioctl+0xb7/0x200 [ 385.963710][T10422] do_syscall_64+0xcd/0x260 [ 385.963753][T10422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.963779][T10422] RIP: 0033:0x7f7c8d38d169 [ 385.963802][T10422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.963828][T10422] RSP: 002b:00007f7c8e172038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 385.963855][T10422] RAX: ffffffffffffffda RBX: 00007f7c8d5a5fa0 RCX: 00007f7c8d38d169 [ 385.963873][T10422] RDX: 0000200000000040 RSI: 00000000c008ae88 RDI: 0000000000000004 [ 385.963889][T10422] RBP: 00007f7c8e172090 R08: 0000000000000000 R09: 0000000000000000 [ 385.963905][T10422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.963920][T10422] R13: 0000000000000000 R14: 00007f7c8d5a5fa0 R15: 00007ffcb60733b8 [ 385.963957][T10422] [ 385.965825][T10422] ERROR: Out of memory at tomoyo_realpath_from_path. [ 386.383852][T10417] bond0: (slave bond_slave_0): Releasing backup interface [ 387.450018][T10434] netlink: 'syz.5.1051': attribute type 2 has an invalid length. [ 387.461594][T10434] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1051'. [ 387.731100][T10436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.750464][T10436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.357732][T10471] openvswitch: HfR: Dropping previously announced user features [ 389.382105][T10471] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1061'. [ 389.401967][T10471] HfR: left promiscuous mode [ 390.436260][T10482] openvswitch: HfR: Dropping previously announced user features [ 392.713955][T10485] syz.3.1066 (10485) used greatest stack depth: 20232 bytes left [ 393.475693][T10511] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 393.495415][T10478] FAULT_INJECTION: forcing a failure. [ 393.495415][T10478] name failslab, interval 1, probability 0, space 0, times 0 [ 393.512859][T10478] CPU: 1 UID: 0 PID: 10478 Comm: syz.5.1063 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 393.512901][T10478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 393.512919][T10478] Call Trace: [ 393.512929][T10478] [ 393.512940][T10478] dump_stack_lvl+0x16c/0x1f0 [ 393.512988][T10478] should_fail_ex+0x512/0x640 [ 393.513022][T10478] ? __kvmalloc_node_noprof+0x122/0x600 [ 393.513070][T10478] should_failslab+0xc2/0x120 [ 393.513097][T10478] __kvmalloc_node_noprof+0x135/0x600 [ 393.513137][T10478] ? lockdep_init_map_type+0x5c/0x280 [ 393.513164][T10478] ? alloc_netdev_mqs+0xcf8/0x1570 [ 393.513211][T10478] ? alloc_netdev_mqs+0xcf8/0x1570 [ 393.513247][T10478] alloc_netdev_mqs+0xcf8/0x1570 [ 393.513297][T10478] internal_dev_create+0x8a/0x520 [ 393.513358][T10478] ovs_vport_add+0x144/0x4d0 [ 393.513405][T10478] new_vport+0x16/0x1d0 [ 393.513441][T10478] ovs_dp_cmd_new+0x6ba/0xe60 [ 393.513490][T10478] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 393.513537][T10478] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 393.513579][T10478] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 393.513631][T10478] genl_family_rcv_msg_doit+0x206/0x2f0 [ 393.513681][T10478] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 393.513728][T10478] ? trace_cap_capable+0x18d/0x200 [ 393.513767][T10478] ? bpf_lsm_capable+0x9/0x10 [ 393.513806][T10478] ? security_capable+0x7e/0x260 [ 393.513835][T10478] ? ns_capable+0xd7/0x110 [ 393.513877][T10478] genl_rcv_msg+0x55c/0x800 [ 393.513909][T10478] ? __pfx_genl_rcv_msg+0x10/0x10 [ 393.513934][T10478] ? __pfx___dev_queue_xmit+0x10/0x10 [ 393.513965][T10478] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 393.514005][T10478] ? __lock_acquire+0xaa4/0x1ba0 [ 393.514039][T10478] netlink_rcv_skb+0x16a/0x440 [ 393.514081][T10478] ? __pfx_genl_rcv_msg+0x10/0x10 [ 393.514108][T10478] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 393.514171][T10478] ? __pfx_down_read+0x10/0x10 [ 393.514217][T10478] ? netlink_deliver_tap+0x1ae/0xd30 [ 393.514262][T10478] genl_rcv+0x28/0x40 [ 393.514302][T10478] netlink_unicast+0x53a/0x7f0 [ 393.514383][T10478] ? __pfx_netlink_unicast+0x10/0x10 [ 393.514423][T10478] ? __lock_acquire+0xaa4/0x1ba0 [ 393.514463][T10478] netlink_sendmsg+0x8d1/0xdd0 [ 393.514515][T10478] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.514575][T10478] ____sys_sendmsg+0xa95/0xc70 [ 393.514626][T10478] ? copy_msghdr_from_user+0x10a/0x160 [ 393.514664][T10478] ? __pfx_____sys_sendmsg+0x10/0x10 [ 393.514717][T10478] ? try_to_wake_up+0xa2f/0x1680 [ 393.514762][T10478] ___sys_sendmsg+0x134/0x1d0 [ 393.514801][T10478] ? __pfx____sys_sendmsg+0x10/0x10 [ 393.514890][T10478] __sys_sendmsg+0x16d/0x220 [ 393.514924][T10478] ? __pfx___sys_sendmsg+0x10/0x10 [ 393.514951][T10478] ? __x64_sys_futex+0x1e0/0x4c0 [ 393.514993][T10478] ? rcu_is_watching+0x12/0xc0 [ 393.515032][T10478] do_syscall_64+0xcd/0x260 [ 393.515071][T10478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.515098][T10478] RIP: 0033:0x7fd6c918d169 [ 393.515124][T10478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 393.515151][T10478] RSP: 002b:00007fd6c9f07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 393.515181][T10478] RAX: ffffffffffffffda RBX: 00007fd6c93a5fa0 RCX: 00007fd6c918d169 [ 393.515199][T10478] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000005 [ 393.515216][T10478] RBP: 00007fd6c920e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 393.515233][T10478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 393.515249][T10478] R13: 0000000000000000 R14: 00007fd6c93a5fa0 R15: 00007ffece919478 [ 393.515288][T10478] [ 394.552985][T10523] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1072'. [ 394.694152][ T3174] [ 394.697378][ T3174] ====================================================== [ 394.704615][ T3174] WARNING: possible circular locking dependency detected [ 394.711752][ T3174] 6.15.0-rc1-syzkaller #0 Not tainted [ 394.717369][ T3174] ------------------------------------------------------ [ 394.724646][ T3174] kworker/1:2/3174 is trying to acquire lock: [ 394.731020][ T3174] ffffffff9012d9a8 (rtnl_mutex){+.+.}-{4:4}, at: smc_vlan_by_tcpsk+0x251/0x620 [ 394.740358][ T3174] [ 394.740358][ T3174] but task is already holding lock: [ 394.747953][ T3174] ffff8880798a1958 (sk_lock-AF_INET){+.+.}-{0:0}, at: smc_connect_work+0x53a/0xae0 [ 394.758746][ T3174] [ 394.758746][ T3174] which lock already depends on the new lock. [ 394.758746][ T3174] [ 394.770022][ T3174] [ 394.770022][ T3174] the existing dependency chain (in reverse order) is: [ 394.779173][ T3174] [ 394.779173][ T3174] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 394.786893][ T3174] lock_sock_nested+0x41/0xf0 [ 394.792391][ T3174] sockopt_lock_sock+0x54/0x70 [ 394.797838][ T3174] do_ip_setsockopt+0xfe/0x3240 [ 394.803570][ T3174] ip_setsockopt+0x59/0xf0 [ 394.809014][ T3174] raw_setsockopt+0xb7/0x2a0 [ 394.814205][ T3174] do_sock_setsockopt+0x221/0x470 [ 394.820166][ T3174] __sys_setsockopt+0x1a0/0x230 [ 394.826029][ T3174] __x64_sys_setsockopt+0xbd/0x160 [ 394.832001][ T3174] do_syscall_64+0xcd/0x260 [ 394.837363][ T3174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.843997][ T3174] [ 394.843997][ T3174] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 394.851350][ T3174] __lock_acquire+0x1173/0x1ba0 [ 394.856926][ T3174] lock_acquire+0x179/0x350 [ 394.862308][ T3174] __mutex_lock+0x199/0xb90 [ 394.867558][ T3174] smc_vlan_by_tcpsk+0x251/0x620 [ 394.873541][ T3174] __smc_connect+0x44b/0x4880 [ 394.879116][ T3174] smc_connect_work+0x54c/0xae0 [ 394.885248][ T3174] process_one_work+0x9cc/0x1b70 [ 394.891241][ T3174] worker_thread+0x6c8/0xf10 [ 394.896409][ T3174] kthread+0x3c2/0x780 [ 394.901401][ T3174] ret_from_fork+0x45/0x80 [ 394.907573][ T3174] ret_from_fork_asm+0x1a/0x30 [ 394.913392][ T3174] [ 394.913392][ T3174] other info that might help us debug this: [ 394.913392][ T3174] [ 394.925708][ T3174] Possible unsafe locking scenario: [ 394.925708][ T3174] [ 394.934481][ T3174] CPU0 CPU1 [ 394.940319][ T3174] ---- ---- [ 394.945903][ T3174] lock(sk_lock-AF_INET); [ 394.951310][ T3174] lock(rtnl_mutex); [ 394.959100][ T3174] lock(sk_lock-AF_INET); [ 394.967570][ T3174] lock(rtnl_mutex); [ 394.972280][ T3174] [ 394.972280][ T3174] *** DEADLOCK *** [ 394.972280][ T3174] [ 394.981337][ T3174] 3 locks held by kworker/1:2/3174: [ 394.987174][ T3174] #0: ffff8880313fd148 ((wq_completion)smc_hs_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 394.998175][ T3174] #1: ffffc9000bccfd18 ((work_completion)(&smc->connect_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 395.010290][ T3174] #2: ffff8880798a1958 (sk_lock-AF_INET){+.+.}-{0:0}, at: smc_connect_work+0x53a/0xae0 [ 395.020626][ T3174] [ 395.020626][ T3174] stack backtrace: [ 395.026829][ T3174] CPU: 1 UID: 0 PID: 3174 Comm: kworker/1:2 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 395.026857][ T3174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 395.026871][ T3174] Workqueue: smc_hs_wq smc_connect_work [ 395.026900][ T3174] Call Trace: [ 395.026912][ T3174] [ 395.026921][ T3174] dump_stack_lvl+0x116/0x1f0 [ 395.026951][ T3174] print_circular_bug+0x275/0x350 [ 395.026984][ T3174] check_noncircular+0x14c/0x170 [ 395.027016][ T3174] __lock_acquire+0x1173/0x1ba0 [ 395.027038][ T3174] lock_acquire+0x179/0x350 [ 395.027056][ T3174] ? smc_vlan_by_tcpsk+0x251/0x620 [ 395.027081][ T3174] ? __pfx___might_resched+0x10/0x10 [ 395.027108][ T3174] ? kasan_save_stack+0x42/0x60 [ 395.027222][ T3174] ? kasan_save_stack+0x33/0x60 [ 395.027249][ T3174] ? kasan_save_track+0x14/0x30 [ 395.027277][ T3174] __mutex_lock+0x199/0xb90 [ 395.027306][ T3174] ? smc_vlan_by_tcpsk+0x251/0x620 [ 395.027331][ T3174] ? smc_vlan_by_tcpsk+0x251/0x620 [ 395.027355][ T3174] ? __pfx___mutex_lock+0x10/0x10 [ 395.027386][ T3174] ? find_held_lock+0x2b/0x80 [ 395.027412][ T3174] ? smc_vlan_by_tcpsk+0x251/0x620 [ 395.027434][ T3174] ? rtnl_lock+0x9/0x20 [ 395.027452][ T3174] smc_vlan_by_tcpsk+0x251/0x620 [ 395.027476][ T3174] ? __pfx_smc_vlan_by_tcpsk+0x10/0x10 [ 395.027503][ T3174] __smc_connect+0x44b/0x4880 [ 395.027529][ T3174] ? __pfx___smc_connect+0x10/0x10 [ 395.027551][ T3174] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 395.027575][ T3174] ? __local_bh_enable_ip+0xa4/0x120 [ 395.027605][ T3174] smc_connect_work+0x54c/0xae0 [ 395.027627][ T3174] ? __pfx_smc_connect_work+0x10/0x10 [ 395.027650][ T3174] ? rcu_is_watching+0x12/0xc0 [ 395.027677][ T3174] process_one_work+0x9cc/0x1b70 [ 395.027705][ T3174] ? __pfx_process_one_work+0x10/0x10 [ 395.027731][ T3174] ? assign_work+0x1a0/0x250 [ 395.027753][ T3174] worker_thread+0x6c8/0xf10 [ 395.027778][ T3174] ? __kthread_parkme+0x19e/0x250 [ 395.027808][ T3174] ? __pfx_worker_thread+0x10/0x10 [ 395.027830][ T3174] kthread+0x3c2/0x780 [ 395.027850][ T3174] ? __pfx_kthread+0x10/0x10 [ 395.027868][ T3174] ? __pfx_kthread+0x10/0x10 [ 395.027886][ T3174] ? __pfx_kthread+0x10/0x10 [ 395.027904][ T3174] ? __pfx_kthread+0x10/0x10 [ 395.027922][ T3174] ? rcu_is_watching+0x12/0xc0 [ 395.027945][ T3174] ? __pfx_kthread+0x10/0x10 [ 395.027964][ T3174] ret_from_fork+0x45/0x80 [ 395.027985][ T3174] ? __pfx_kthread+0x10/0x10 [ 395.028004][ T3174] ret_from_fork_asm+0x1a/0x30 [ 395.028059][ T3174] [ 395.327012][T10517] HfR: entered promiscuous mode [ 395.440733][T10523] HfR: left promiscuous mode [ 399.863509][T10320] syz.5.1025 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 399.985574][T10320] CPU: 0 UID: 0 PID: 10320 Comm: syz.5.1025 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 399.985619][T10320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 399.985635][T10320] Call Trace: [ 399.985643][T10320] [ 399.985653][T10320] dump_stack_lvl+0x16c/0x1f0 [ 399.985697][T10320] dump_header+0x101/0x930 [ 399.985725][T10320] oom_kill_process+0x270/0xa60 [ 399.985750][T10320] ? mem_cgroup_out_of_memory+0x8c/0x270 [ 399.985785][T10320] out_of_memory+0x350/0x1700 [ 399.985814][T10320] ? __pfx_out_of_memory+0x10/0x10 [ 399.985844][T10320] mem_cgroup_out_of_memory+0x205/0x270 [ 399.985877][T10320] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 399.985913][T10320] ? do_raw_spin_unlock+0x172/0x230 [ 399.985947][T10320] try_charge_memcg+0x8ca/0xfa0 [ 399.985973][T10320] ? __pfx_try_charge_memcg+0x10/0x10 [ 399.986001][T10320] ? rcu_is_watching+0x12/0xc0 [ 399.986033][T10320] ? rcu_is_watching+0x12/0xc0 [ 399.986067][T10320] charge_memcg+0x8a/0x230 [ 399.986090][T10320] __mem_cgroup_charge+0x2b/0x1e0 [ 399.986119][T10320] shmem_alloc_and_add_folio+0x514/0xc20 [ 399.986163][T10320] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 399.986205][T10320] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 399.986258][T10320] shmem_get_folio_gfp+0x687/0x1530 [ 399.986302][T10320] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 399.986341][T10320] ? rcu_is_watching+0x12/0xc0 [ 399.986373][T10320] ? timestamp_truncate+0x21e/0x2d0 [ 399.986417][T10320] shmem_write_begin+0x160/0x300 [ 399.986460][T10320] ? __pfx_shmem_write_begin+0x10/0x10 [ 399.986500][T10320] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 399.986539][T10320] generic_perform_write+0x3cd/0x930 [ 399.986586][T10320] ? __pfx_generic_perform_write+0x10/0x10 [ 399.986627][T10320] ? generic_update_time+0xcf/0xf0 [ 399.986653][T10320] ? mnt_put_write_access_file+0x45/0xf0 [ 399.986694][T10320] shmem_file_write_iter+0x10e/0x140 [ 399.986724][T10320] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 399.986753][T10320] __kernel_write_iter+0x317/0xa90 [ 399.986791][T10320] ? __pfx___kernel_write_iter+0x10/0x10 [ 399.986827][T10320] ? __up_read+0x1f8/0x750 [ 399.986857][T10320] ? lock_release+0x201/0x2f0 [ 399.986879][T10320] ? copy_mc_enhanced_fast_string+0x6/0xf [ 399.986911][T10320] dump_user_range+0x418/0xb30 [ 399.986951][T10320] ? __pfx_dump_user_range+0x10/0x10 [ 399.986987][T10320] ? elf_coredump_extra_notes_write+0xbd/0x430 [ 399.987021][T10320] ? __pfx_writenote+0x10/0x10 [ 399.987059][T10320] elf_core_dump+0x288a/0x3a90 [ 399.987104][T10320] ? __pfx_elf_core_dump+0x10/0x10 [ 399.987142][T10320] ? check_preempt_wakeup_fair+0x509/0x880 [ 399.987178][T10320] ? find_held_lock+0x2b/0x80 [ 399.987210][T10320] ? 0xffffffffff600000 [ 399.987230][T10320] ? rcu_is_watching+0x12/0xc0 [ 399.987272][T10320] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 399.987306][T10320] ? lockdep_hardirqs_on+0x7c/0x110 [ 399.987362][T10320] ? do_coredump+0x3183/0x4480 [ 399.987394][T10320] do_coredump+0x3183/0x4480 [ 399.987432][T10320] ? __pfx_do_coredump+0x10/0x10 [ 399.987466][T10320] ? stack_trace_save+0x8e/0xc0 [ 399.987501][T10320] ? __pfx_stack_trace_save+0x10/0x10 [ 399.987534][T10320] ? stack_depot_save_flags+0x28/0xa50 [ 399.987567][T10320] ? __lock_acquire+0xaa4/0x1ba0 [ 399.987594][T10320] ? __kasan_slab_free+0x51/0x70 [ 399.987632][T10320] ? kmem_cache_free+0x2d4/0x4d0 [ 399.987669][T10320] ? __sigqueue_free+0xba/0x2a0 [ 399.987692][T10320] ? get_signal+0xcba/0x26d0 [ 399.987723][T10320] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 399.987780][T10320] ? proc_coredump_connector+0x2d1/0x4f0 [ 399.987816][T10320] ? __pfx_proc_coredump_connector+0x10/0x10 [ 399.987852][T10320] ? rcu_is_watching+0x12/0xc0 [ 399.987886][T10320] get_signal+0x22e3/0x26d0 [ 399.987926][T10320] ? __pfx_get_signal+0x10/0x10 [ 399.987992][T10320] arch_do_signal_or_restart+0x8f/0x7d0 [ 399.988032][T10320] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 399.988075][T10320] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 399.988104][T10320] ? do_error_trap+0x214/0x240 [ 399.988147][T10320] irqentry_exit_to_user_mode+0x13f/0x280 [ 399.988186][T10320] asm_exc_invalid_op+0x1a/0x20 [ 399.988212][T10320] RIP: 0033:0xa [ 399.988228][T10320] Code: Unable to access opcode bytes at 0xffffffffffffffe0. [ 399.988249][T10320] RSP: 002b:000000000000000a EFLAGS: 00010206 [ 399.988274][T10320] RAX: 0000000000000000 RBX: 00007fd6c93a5fa0 RCX: 00007fd6c918d169 [ 399.988291][T10320] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000020003b46 [ 399.988307][T10320] RBP: 00007fd6c920e2a0 R08: 0000000000000002 R09: 0000000000000000 [ 399.988323][T10320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 399.988338][T10320] R13: 0000000000000000 R14: 00007fd6c93a5fa0 R15: 00007ffece919478 [ 399.988362][T10320] [ 400.543046][T10320] memory: usage 307200kB, limit 307200kB, failcnt 17049 [ 400.551543][T10320] memory+swap: usage 432196kB, limit 9007199254740988kB, failcnt 0 [ 400.560795][T10320] kmem: usage 6932kB, limit 9007199254740988kB, failcnt 0 [ 400.568939][T10320] Memory cgroup stats for /syz5: [ 400.569105][T10320] cache 307474432 [ 400.580009][T10320] rss 0 [ 400.584539][T10320] rss_huge 0 [ 400.588710][T10320] shmem 307449856 [ 400.592662][T10320] mapped_file 0 [ 400.596851][T10320] dirty 0 [ 400.600267][T10320] writeback 0 [ 400.603756][T10320] workingset_refault_anon 1028 [ 400.609419][T10320] workingset_refault_file 2136 [ 400.614440][T10320] swap 127995904 [ 400.618206][T10320] swapcached 0 [ 400.621607][T10320] pgpgin 241069 [ 400.625322][T10320] pgpgout 166513 [ 400.629489][T10320] pgfault 87615 [ 400.633548][T10320] pgmajfault 298 [ 400.637838][T10320] inactive_anon 126509056 [ 400.643180][T10320] active_anon 180940800 [ 400.647612][T10320] inactive_file 24576 [ 400.651847][T10320] active_file 0 [ 400.658665][T10320] unevictable 0 [ 400.663354][T10320] hierarchical_memory_limit 314572800 [ 400.669340][T10320] hierarchical_memsw_limit 9223372036854771712 [ 400.678614][T10320] total_cache 307474432 [ 400.683132][T10320] total_rss 0 [ 400.687904][T10320] total_rss_huge 0 [ 400.696220][T10320] total_shmem 307449856 [ 400.700996][T10320] total_mapped_file 0 [ 400.707688][T10320] total_dirty 0 [ 400.711479][T10320] total_writeback 0 [ 400.717736][T10320] total_workingset_refault_anon 1028 [ 400.723715][T10320] total_workingset_refault_file 2136 [ 400.729329][T10320] total_swap 127995904 [ 400.739375][T10320] total_swapcached 0 [ 400.744456][T10320] total_pgpgin 241069 [ 400.749026][T10320] total_pgpgout 166513 [ 400.754185][T10320] total_pgfault 87615 [ 400.758787][T10320] total_pgmajfault 298 [ 400.763395][T10320] total_inactive_anon 126509056 [ 400.768456][T10320] total_active_anon 180940800 [ 400.773620][T10320] total_inactive_file 24576 [ 400.778622][T10320] total_active_file 0 [ 400.782899][T10320] total_unevictable 0 [ 400.787738][T10320] anon_cost 0 [ 400.791345][T10320] file_cost 0 [ 400.795274][T10320] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1025,pid=10322,uid=0 [ 400.811905][T10320] Memory cgroup out of memory: Killed process 10322 (syz.5.1025) total-vm:98460kB, anon-rss:1032kB, file-rss:25924kB, shmem-rss:0kB, UID:0 pgtables:172kB oom_score_adj:1000 [ 400.924501][T10291] syz.5.1025 (10291) used greatest stack depth: 19568 bytes left [ 401.780531][T10301] syz.5.1025 (10301) used greatest stack depth: 18808 bytes left [ 401.887455][T10310] syz.5.1025 (10310) used greatest stack depth: 18248 bytes left