last executing test programs: 3.885269595s ago: executing program 0 (id=1361): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0) brk$auto(0x8) read$auto_evm_xattr_ops_evm_secfs(r1, &(0x7f00000000c0)=""/137, 0x89) r2 = socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) socket(0x2, 0x2, 0x0) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="b8000000", @ANYRES16=0x0, @ANYBLOB="000226173000fbdbdf250500000004000e009d000200cae50fadb933421d508abe8b18d63f7cc0b224c6a9b07f9f5feb69d4ed23eb3d5c49fb8ea02680b232f7267afd405946fd30c291cc138c508363be0f6ca47273a083e48ca741baf205b9251a311208c560c1a955284a95598f4ef1ec463282f523da56a7c2280511126670e58f4d17b852fa401ee372d26ba79019b34b35f29b0501303f08cb9b7d12d3da5a1e3f325ace19f0541975471c560000000f1995785c3bf552cc537dfb6fd80d72bce49b0dd9f29f197cd36c9569cae1065e9432b79bfe5cd68166c1f3a35237e40ba45a7c8bff998afd580100667ad1673960058bd690ec77fbea8afa71fb5d30260afa39678ca683457a36f8c1f16da543543ac39244d38ef0d8309260b620fed25d3f9d03b6d4e5697a84dfb941ff02e8bf6a9f60c1be5a0abf78b11e31e66aadad5c4b69fa0034aa868043393e57793eac67d41e514fb035d8c2bec9fcf55ebc88e8a61f62c6be63"], 0xb8}, 0x1, 0x0, 0x0, 0x40004}, 0x80) setsockopt$auto(0x4, 0x0, 0x480, 0xfffffffffffffffe, 0x0) connect$auto(0x3, &(0x7f0000000040)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x400}, 0x55) ioctl$auto_BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, &(0x7f0000000440)=0x8) r3 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000300), 0x10201, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="5e0027b4839f3015398d3b", @ANYRES32, @ANYRES32, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0\x00'}) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0xa, 0x2, 0x0) r4 = socket(0x18, 0xa, 0x1) connect$auto(r4, &(0x7f0000000000)=@in={0x2, 0x100}, 0x26) sendmsg$auto_NL802154_CMD_SET_ACKREQ_DEFAULT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4894}, 0x40000) ioctl$auto_USB_RAW_IOCTL_EP0_WRITE(r3, 0x40085503, &(0x7f0000000340)={0xff7f, 0x80, 0xd, "c5fbe7b523c2de7deb361305eb139bbb44a108d703dbcb8e0bb00e1ccccf82fc920f432a2a5ba87dafd6eb5f230da642afd5090be1ebb3da40834ef4ecd21716def3c6c50bbc5eee4eca46be048df2b7e08f08b95d8de7258e5679d6d5a98a54b4e48ba04bd387a5d4d49e4abe569c8d783d0d2466c91a9976e454dc17ab6321a3d12198d9578c8129a433a51066af2c89d72deca759021c8429d2b206cb0ce3f091a90ef642d30998afcae356f62726fcc9397c280939a3f0bffba9a5df8a58883315e5b3dba18fd87944c39e71930697881961ea7b1325eab0ff93878b57b421333c2d2c32953a4cc7edcf7ef6b5b7e6a7a579fb"}) syz_genetlink_get_family_id$auto_ila(&(0x7f0000000080), r0) 3.648427822s ago: executing program 0 (id=1362): r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mtd0\x00', 0x80000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) r3 = semctl$auto(0xb61, 0xfffffffe, 0xd, 0x706) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x51c, r2, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_KEY={0x17f, 0x2, 0x0, 0x1, [@generic="1c8d737a84c068456d34fabb3803aab7ef26e00a19d1873b2d1c0c84044d5c1cfc8f603e55e915822646ccf5969fcf6ef2350a6fade2ff7fe6f8117b5b7462dacb4eccbb830fcf71e1a626ac87978e1caed98d8782455f05dfba772569f19df0ba50dc0a6f5a0c43c6b5f45cdc0a97dee5346aaff0d329ed369eb96f3faf61f8fb0479693561d8c1608b81756638efd4cec9437fd48686f8727f2f66", @generic="2a9d75078452c7fb0d5c8edb59481f5a241120a3c7dac992a0898253f3a180d0a7141bfc54d41fe5af46ff1c351ee0cc85c6fbfce5d79dca6b89071ecdf3fb00abf8727928e732961f2ce9e6bf814fd75a41b5d7a14f16b14659645870dc71aaaacad49fb3743b7a43b7ea4b540108f03b943ca33a3e7b8a2689e60767427fa91ae6f014b53a6b8f14f83e7b86c8e8bcceed30b2fa", @typed={0x4, 0x38}, @typed={0x8, 0x66, 0x0, 0x0, @fd=r0}, @generic="25987a3a9aa72fe1101bbb25051803d0be8b9941d95c3a79ecc7c91ef14006fbb180883e10652ee6621dfa2212d6e37ee5e6d20a39150b2f2dbe904fe3a0"]}, @OVS_PACKET_ATTR_KEY={0x37f, 0x2, 0x0, 0x1, [@generic="8102bc475def6bb965a5d70d2ff3c2f0946c98ac1afe89aace6fae6ffc6707172d503bffd5898ee07521f3a7b7da7a97a6c27848fb021780bfe4d9f991d5b29d375a2c94109ce571347040915cc53d51f8e0ff40a73ad3b89a3fcf6ed67e0724e6a74553becd688bb2725f8a9942e1e96df2d4412a97107484be4dbee549e8ea12de0ad6171757563df24f67e8b4e26d318c676623ceee8d8b93e499f209e79c66d3efb33e0704df5b98e6497138f7003433a1eb9da814c1f9d6a64bd312b6a85ea34aa213b4b45bc3e601c0a8cea1ea1a14c572152cf80ee99013d46ef669bf7e3924e6", @typed={0x8, 0x69, 0x0, 0x0, @u32=0x1}, @generic="e1522cc8e551f03226878ba2206a1b326cf95eaab36a89732ddd6b1990d8f6377cf33caa05ddedea6be859850989676adb931a287bf235b25c63f337e819e509f33ed1484ae1dd56", @generic="56237144007b81b521bc9b5a1c5627046f4a0062dadf6545bbf63904dcf5a3f83d7629dd1d42570a623addcb655a616c05016964de7030657b04ff141c95d48beec27c5646936549a3a4fc05e5651e09f2ab8f9c12133c2edabdbaf0f0d2af612c8c135e95481774bd2903c6dbf0a71eb5ab49f5f4dfa62e72492ca3d59167dca5dd4bb57247c7363550e902be5e0aa9669486374f58ee9a3e70274a8ed5092c9abedf580540ae48552028ccac72f08766f6f3d44a339cb28f630f4ac5d1e8fa5fc4522d1443bc9cb1c8497a7ece5c91919847acfd7092", @nested={0x170, 0x133, 0x0, 0x1, [@typed={0x8, 0x116, 0x0, 0x0, @pid=r3}, @typed={0xcd, 0x6, 0x0, 0x0, @binary="8aa28b00d729c0b7a7f0ce94440a1dc9262cc7cc891090ea902867c710c7b9d13745d27c87b2a805d7f3f3bfe5515922bcda8eb33c960436be7e6dc65249229c35d1b7829c783586bc2b828347ac6e6c197f2e42cb90616d344d324de356442c0082ce00d64e630869175d7f91188efce26f84befe59b1e708e2c6e7cb8683f33632eba870e9b43dab9d8ea695e1e9a559dc2cfb06959400e1ae4793cc422cef1232b449d8c3761a34fbd82a8f3498d9d44841c5061b9b4b62fb41d53c9242fc9c5c30272c00dc34ac"}, @typed={0x56, 0x129, 0x0, 0x0, @binary="be9955c2ea07f1cc92aa5ad5a4e6e291d409be7c6bb2b627a9aecbe3898915c06e567043d21bb4a10af543b51d701164c8d2c2397e7b39c1181853fdcf696cf1b999aede6dc1d1ee0ffbb61198af260e1919"}, @generic="43ab06e9a13570bf9ac2eae1e631912d9b3a00126e798a93ba757abffaef7b7406bef65227df860cc236e8960ae7c903a2a770f674d23a09", @nested={0x4, 0x5}]}]}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x51c}, 0x1, 0x0, 0x0, 0x4004040}, 0x8850) r4 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x40080, 0x0) pread64$auto(r4, 0x0, 0xec5d, 0x7f) 3.130658993s ago: executing program 2 (id=1366): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@HWSIM_ATTR_REG_CUSTOM_REG={0x8, 0xc, 0x1}]}, 0x1c}, 0x1, 0x300000000000000, 0x0, 0x4081}, 0x8000) 3.052627049s ago: executing program 0 (id=1367): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x82, 0x0) socket(0x11, 0x2, 0x352) ioctl$auto_SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000040)="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") 2.985710667s ago: executing program 3 (id=1369): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) r1 = open_by_handle_at$auto(r0, &(0x7f0000000040)={0x1, 0x2, '\v'}, 0x2) (async, rerun: 32) r2 = socket(0x10, 0x2, 0x14) (async, rerun: 32) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/firmware/acpi/interrupts/ff_slp_btn\x00', 0x8522, 0x0) r3 = socket(0x18, 0x5, 0x2) r4 = socket(0x1d, 0x2, 0x7) (async, rerun: 64) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000040)=ANY=[@ANYRES16, @ANYBLOB="010027bd7000ffdbdf25100000000c00018008000100", @ANYRES32, @ANYBLOB="080006"], 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x0) (async, rerun: 64) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) (async) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x103880, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) shmctl$auto_SHM_STAT_ANY(0x40, 0xf, &(0x7f00000010c0)={{0x4, 0xee01, 0xee01, 0x1ff, 0x3, 0x80000001, 0x12ea}, 0xf1, 0x2, 0x6, 0x400, @raw=0x1, @raw, 0xf, 0x0, &(0x7f0000000080)="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", &(0x7f0000001080)="ea381635ec07a09b4e"}) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r7 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video58\x00', 0x0, 0x0) (async) r8 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f00000008c0), r2) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex, 0xffffffffffffffff, 0x4, 0x1ff, 0xffffffffffffffff, @relative_id=0x13, 0xe600}, 0xf) sendmsg$auto_NCSI_CMD_PKG_INFO(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001740)={&(0x7f0000001140)={0x5c8, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@NCSI_ATTR_DATA={0x59b, 0x5, "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"}, @NCSI_ATTR_CHANNEL_ID={0x8, 0x4, 0x5}, @NCSI_ATTR_IFINDEX={0x8}, @NCSI_ATTR_PACKAGE_MASK={0x8, 0x7, 0x7}]}, 0x5c8}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE_EXT(r6, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, r8, 0x400, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}}, 0x20010000) (async) ioctl$auto(r7, 0xc040563d, r6) (async) r9 = setfsuid$auto(0xee00) (async) r10 = syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000a00), r3) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_RADIO(r6, &(0x7f0000002e80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002e40)={&(0x7f0000001e00)={0x1040, r10, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@MAC802154_HWSIM_ATTR_RADIO_EDGE={0x102b, 0x2, 0x0, 0x1, [@generic="18064b70ccd740bfff9fd453990c63d94aaeb5f780eddca42e00eb9b3c83dbb49b5fb046a33c2d", @generic="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"]}]}, 0x1040}, 0x1, 0x0, 0x0, 0x804}, 0x4040010) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000a40)={'veth1_to_bridge\x00'}) r11 = setfsuid$auto(0xee01) setresuid$auto(r9, r11, r9) (async, rerun: 32) ioctl$auto(r5, 0x5607, 0x1) (rerun: 32) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r4], 0x1ac}}, 0x20008041) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0xd}, 0x2}, 0x3, 0x0) 2.717094541s ago: executing program 0 (id=1371): r0 = socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) connect$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x4003, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) sendmmsg$auto(r0, 0x0, 0x6, 0x47ffff78) (async) mmap$auto(0x0, 0x3, 0x3, 0x40eb1, 0x401, 0x300000000000) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/platform/vhci_hcd.12/usb33/ep_00/power/autosuspend_delay_ms\x00', 0x674081, 0x0) mmap$auto(0x0, 0x3, 0x1000000000001, 0x8000000008011, 0x3, 0x0) (async) socket(0x2c, 0x2, 0x38) (async) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async, rerun: 64) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (rerun: 64) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) (async) socket(0xa, 0x80000, 0xff) (async) connect$auto(0xffffffffffffffff, &(0x7f00000018c0)=@generic={0xa}, 0x155) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/firmware/acpi/tables/FACS\x00', 0x80000, 0x0) sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x13c, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r1}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0xd39}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2}, @NL80211_ATTR_PREV_BSSID={0x40, 0x4f, "6d7c6d0792d242232743e01dcc4ed82b17c2272268abcd5d69c4680fca3e65681a16689c15813e1e2ed84de7935fe65c8f1e5dc171b9d92a35cbe5d2"}, @NL80211_ATTR_STA_WME={0x3c, 0x81, 0x0, 0x1, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x7}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x98}, @NL80211_STA_WME_MAX_SP={0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x3}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x76}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x72, 0x75, 0x0, 0x1, [@typed={0x8, 0x24, 0x0, 0x0, @fd=r0}, @generic="1b60e446edcb9a3b856ff7944e42533aa42a826f94b99fed04b26227b86ce91b44b646e3aaadde17ef8606c22057531ef7c50c2e6f16b45cdf559254e0b35843cb964e5839a17cba0475cf8dc4b3e5196620a59ff34c4f908cef0bda5bd830452046a85af702"]}, @NL80211_ATTR_FILS_KEK={0x18, 0xf2, "76df3a99fc26ce318d53a700a2f112417923e72f"}]}, 0x13c}, 0x1, 0x0, 0x0, 0x40}, 0x1) (async) read$auto(r0, 0x0, 0x20) (async) ioctl$auto_AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000200)=0x579b) write$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000001680), 0x0) madvise$auto(0x5, 0x7, 0x100000000) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYBLOB="040006"], 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) (async, rerun: 32) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r2) (async, rerun: 32) r3 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000005c0), r2) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="f51b26bd7000fedbdfe3792501000000c063a69d75b7110cd346aeb69462cddb2bcbd29d83a9dc005ef20a37831b11f1d28be543e963b5dbc7c33474a43ae651a50b7d43f780551e115d3bdf5e32d25141598ccfe767883200a114549c893216157a1a42f89554bd6b1042997fe4ccde6f0dfaf4002de1205e20cf5e92ee756323284a8ae074721021b03f2f1764feff9bd281ecccdc1b5145a97dd558124ad9dc64b4edaef71feb2cebc56416ba1bc58cf65378c1562f9384bb0e0e8ae46f0a20e74c292c8ec5a1b5843213313116fbbc3652328f4b2fc019169b4055f2c319d24d146825cd424c0984a4a1550c"], 0x14}, 0x1, 0x0, 0x0, 0x20008090}, 0x4000) mmap$auto(0x0, 0x400008, 0xb, 0x9b72, 0x2, 0x8000) (async) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0) 2.688339628s ago: executing program 2 (id=1372): mmap$auto(0x0, 0x7, 0x7, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x840042, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900), 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/ptp/ptp0/max_vclocks\x00', 0x103841, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy1/net/wpan1/queues/tx-0/byte_queue_limits/stall_cnt\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) write$auto(0x3, 0x0, 0xfdef) 2.442814431s ago: executing program 2 (id=1373): r0 = ioctl$auto_TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$auto_EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x4, 0x7, 0x5, 0x2, "d87ea04bb86ff8440e7f8feb1efd8c2147fb21683d181f0b2349689263c30046"}) ioctl$auto_EVIOCGID(r0, 0x80084502, &(0x7f0000000040)={0x0, 0x0, 0x7, 0xb1e}) poll$auto(&(0x7f0000000080)={r0, 0xffff, 0xff}, 0x4, 0x8) ioctl$auto_SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2, &(0x7f00000000c0)="f9035b1f42f5a719689baae964c4a1de80fab6b6537d696b8e8252d4050ed703fcabd877a871a00b9824ba4585b61637503d45cf34b1c1a7e57c6bab206cfdb86aace19a7556022592423b4c75cd") r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000180), r1) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x13c, r2, 0x8, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x4}, @NL802154_ATTR_SEC_DEVICE={0x11f, 0x2e, 0x0, 0x1, [@generic="8f8d8d4c344152228ace8501091acf339110b2c53d85584625e00fa9598e3c81f385a7cf3d0f33e97553fdef81547ee699dd8ed4c0bb608440d6bc717bc8870a1c1d9210cd39511d3dd76624da595c82bc88618cf43b58e0fc93406a92602d0d414402a41cedc8796c5cd9c9ad5477aceeaa01c9a1a0fcc149d766284622a8f96bdb18", @nested={0x97, 0x5a, 0x0, 0x1, [@generic="8727c9425c7245424e51552c24d36f0356b758084e1fb81f953afd8cd41ef34dd01d56c2a3b98e97e16ca6214c2f7c17e622ed7077cd7ad3d43d002c06795cf5b3be0df03157fa3f12f46798e1d7161e6081471c52edd96ffa85979d7746b921049fa46096f063a1619e5cbc8f40a10451ee865aafbc972b585e2a1f15db79fbc7ab849bf182afaa41a5709a1898a7d0d86c3a"]}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x80}, 0x4000051) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000003c0), r1) sendmsg$auto_NL80211_CMD_SET_STATION(r1, &(0x7f0000000b80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000400)={0x73c, r3, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_TIMED_OUT={0x4}, @NL80211_ATTR_FRAME={0x716, 0x33, "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"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x4}, @NL80211_ATTR_DISABLE_HE={0x4}]}, 0x73c}, 0x1, 0x0, 0x0, 0x400c800}, 0x20000044) setsockopt$auto_SO_DETACH_FILTER(r1, 0x4, 0x1b, &(0x7f0000000bc0)='nl802154\x00', 0x8001) poll$auto(&(0x7f0000000c00)={r0, 0x0, 0x6}, 0x2, 0x3) r5 = socket(0x22, 0x4, 0x2d3a) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000c40)='/dev/ram5\x00', 0x0, 0x0) sendmsg$auto_NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x44, r3, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x13}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x400}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'vlan0\x00'}, @NL80211_ATTR_FILS_ERP_USERNAME={0xb, 0xf9, "acc073a5376936"}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x80) getsockopt$auto_SO_GET_FILTER(r0, 0x6, 0x1a, &(0x7f0000000dc0)='\xf1.@%]+/]}#*\x00', &(0x7f0000000e00)) openat$auto_tracing_saved_cmdlines_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/kernel/debug/tracing/saved_cmdlines_size\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000ec0), r5) sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x18, r6, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_PRIVACY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8814}, 0x48000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000fc0)='/dev/audio1\x00', 0x40800, 0x0) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001000), r4) r7 = ioctl$auto_SW_SYNC_IOC_INC(r4, 0x40045701, &(0x7f0000001040)=0x6) ioctl$auto_SOUND_MIXER_READ_RECMASK2(r7, 0x80044dfd, &(0x7f0000001080)="9fa22969c1526d74095f863167c383c2c3009aad76d6a68ab464201d0b626d402434d3fd7292ec72680860ccabe536df054a6c9f1b681fbeb1b8d50121649b0e58e27776f5439c76efb40cc3f7eb77c7487cbcac80200f0764f8ea16201ad10340bf5fb54361d4") sendmsg$auto_ETHTOOL_MSG_RSS_GET(r4, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x20000200}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x24, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_RSS_CONTEXT={0x8, 0x2, 0x3}, @ETHTOOL_A_RSS_START_CONTEXT={0x8, 0x7, 0x7ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sendmsg$auto_NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x34, r2, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_CCA_MODE={0x8}, @NL802154_ATTR_CCA_ED_LEVEL={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x47}, @NL802154_ATTR_BEACON_INTERVAL={0x5}]}, 0x34}}, 0x40885) ioctl$auto_VHOST_GET_BACKEND_FEATURES(r1, 0x8008af26, &(0x7f0000001300)=0x8) r8 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001380), r7) r9 = wait4$auto(0x0, &(0x7f00000013c0)=0x80000001, 0x26823de9, &(0x7f0000001400)={{0xb, 0x8}, {0x10001, 0x8}, 0x3, 0x5, 0x5, 0x1, 0x5, 0x80, 0x0, 0x400, 0x8000, 0x3, 0x400, 0x0, 0x2}) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000001600)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000015c0)={&(0x7f00000014c0)={0xe8, r8, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_SUPPORTED_COMMANDS={0x82, 0x19, 0x0, 0x1, [@generic="cd4cf1e27d50046f98d3d874ff30a21041d86767f2ccabacb90ade2a9792417b702eac63f2f1241a43eba689412b147c0973647c846ff41bed5a48b3dc1ebf199c6007859636cdbd4cd0b47ff3ef2e854f1568fdf69c2b4ac9a83727b210deca8d7756a9e698f2e7789c0f576b6fbcfe3ab2", @typed={0xc, 0xbb, 0x0, 0x0, @u64=0x4019}]}, @NL802154_ATTR_SUPPORTED_CHANNEL={0x8, 0x16, 0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xffff}, @NL802154_ATTR_SEC_DEVKEY={0x14, 0x2f, 0x0, 0x1, [@typed={0x8, 0x70, 0x0, 0x0, @u32=0x3}, @typed={0x8, 0xb8, 0x0, 0x0, @pid=r9}]}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xfc}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x5}, @NL802154_ATTR_WPAN_PHY_NAME={0xd, 0x2, 'nl802154\x00'}]}, 0xe8}, 0x1, 0x0, 0x0, 0x90}, 0x4048004) capset$auto(&(0x7f0000001640)={0x7, r9}, &(0x7f0000001680)={0xdd6, 0xb800, 0x3}) waitid$auto(0x5, 0xffffffffffffffff, &(0x7f0000001780)={@siginfo_0_0={0x4, 0x80, 0x5, @_sigchld={r10, 0x0, 0x2000000, 0xd02, 0x9}}}, 0x1ff, &(0x7f0000001800)={{0x7fffffffffffffff, 0xd61}, {0x3}, 0xbe4, 0x40, 0x6, 0x70, 0x5, 0x9, 0x3, 0x268f, 0x8, 0x2f7a, 0x7f, 0x44434af1, 0x7a, 0x3}) 2.075992939s ago: executing program 2 (id=1375): mmap$auto(0x0, 0x400008, 0xfffffffffffffff9, 0x200000000009b72, 0x2, 0x7ffe) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x40080, 0x0) r0 = fanotify_init$auto(0x5, 0x0) creat$auto(&(0x7f0000000000)='./file0\x00', 0x3ff) fanotify_mark$auto(r0, 0x205, 0xa, 0x4, 0x0) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000140), r0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)={0x234, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_MRU={0x6, 0x9, 0x3}, @OVS_PACKET_ATTR_HASH={0xc}, @OVS_PACKET_ATTR_ACTIONS={0x209, 0x3, 0x0, 0x1, [@generic="04262e63c95a57963ed85c4b95b8f16fd6d059c067e198ab9d51f59dbe521aba88670a4c450c9deaa9be209296b9fc1a0df99fe1e2ec4877c2b6bc3ddbb9369e114b0a0cb92722036f37f3db693c2aec22788897ad345d59df151578d3775401a5e9a1877f41a21659268478eb87cafb49ac26de4be5152956fbbf4fc34344cece56bcd631b58e129fe31b9f673d5234b86699cc68066c59163c890e2e673cb5bd1316bcb9e08c8126bf5a304845630c5ded8a191a47a3870970de44ed2710dab685d018230c55dea4929043", @generic="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", @generic="4b799bbcaa3d95293efaaaaa5e69d59fe6f28801a9baed8ab4d8ea534be5ae87f8ca783dedbc25949b968ed4f43e3043ebd3c1a8749d59c36d76"]}]}, 0x234}, 0x1, 0x0, 0x0, 0x20008000}, 0x1) unshare$auto(0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x149041, 0x0) mmap$auto(0x0, 0x2020009, 0x40000003, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) ioctl$auto(r2, 0x4b52, r2) 1.82884376s ago: executing program 2 (id=1376): r0 = socket(0x11, 0x80003, 0x300) mmap$auto(0xffffffffffffffff, 0x20009, 0x200009, 0x40000000000eb1, r0, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x9, 0x8, 0x800000003, 0xeb1, 0xfffffffffffffffa, 0x4000000) socket(0xa, 0x1, 0x84) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x4, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000e00)={0x300, r2, 0x403, 0x9, 0x25dfdbf8, {}, [@HWSIM_ATTR_ADDR_RECEIVER={0xa, 0x1, "196f88149b0c"}, @HWSIM_ATTR_PMSR_RESULT={0x2e0, 0x1c, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0x13c, 0x5, 0x0, 0x1, [{0x138, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_RESP={0x1c, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x2}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x400}]}, @NL80211_PMSR_PEER_ATTR_RESP={0x8, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_FINAL={0x4}]}, @NL80211_PMSR_PEER_ATTR_RESP={0x4}, @NL80211_PMSR_PEER_ATTR_ADDR={0xb9, 0x1, "e63994046b8b47b704c35c537bbecfb53f849b9779fdd1fd4f1f9e11619f20f57a1515e08ecd2ab46115feda673b960e6cc9ff7a23209b57822c059916f2355661d38b19100f8a3358df914be85190c04e8477aba26957f3405980a0509f4707baf90990b0578b2e79bb2c7845284fc67f2a8b55b327102880e9f389c790fc2e74c149c47ca4a3d3c7476fd73f45c047bbe53a3513604a2b6531ae547ab5498fd9abe3eb65cd0f37470930506979a6bea61d699571"}, @NL80211_PMSR_PEER_ATTR_RESP={0x50, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RTT_AVG={0xc, 0xd, 0x4a}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6, 0x2, 0x7}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_DURATION={0x5, 0x7, 0xb2}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0x9a3}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_AVG={0xc, 0xd, 0xfa}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_AVG={0xc, 0x10, 0x90}]}]}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x19c, 0x5, 0x0, 0x1, [{0x198, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xc7, 0x1, "9990b702f23f24ba6ff120a0fcb58e8e4cdb357701b42c5a189f95624636da21f7c1977d387eecf746455dbe5c50c6d3c0f7a219f8dfbeeb4d624c326beb3dc306a2beb4bcf55f2b899d35e399164630481c5a7f6bcbc3175a64f63fc77e4add69a13bfabc84bce647bb920a7c5b8c40f5e4317479cc6e550db4d37cddd1204e2d66b3193e55f81d81c0c36299ad10ce265c3bb072f888352f3bbf7ddece5860b14a10b21b2a2d19bcadb441f71dc27ca6a3a7409d6111c9251a9584f551bc5b199270"}, @NL80211_PMSR_PEER_ATTR_ADDR={0xb0, 0x1, "3f54ceec65115c5e9e6c60506343bd933a129395500551f52d9dfab26cb7f0526ce7ef240750960efbb0c51dd5fbb9b03cdd83cf85cff74ba26668afc65bd98bf9aac7fc85e259f3cac4a5bd46c2b70a405e0b42dc62484b790bedba04d4b2975c9bc2980affe2133967cca09e878505e2b64cb1c6cacae08e5a689df91b8b076c0e77070a178227fdf597e8258bf5191c0e9c156fcd856d8277da5ce06f45b79b216c4740eeedee6037df4e"}, @NL80211_PMSR_PEER_ATTR_ADDR={0x1c, 0x1, "315eb081c7a24bfd0484115721f36a73d903689a7b2c3023"}]}]}, @NL80211_PMSR_ATTR_PEERS={0x4}]}]}, 0x300}, 0x1, 0x0, 0x0, 0x80}, 0x20048880) r3 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0) write$auto(r3, 0x0, 0x101) ioctl$auto_SG_GET_NUM_WAITING(r3, 0x227d, 0x0) r4 = socket(0x10, 0x3, 0xc) setsockopt$auto(r4, 0x104000000000010e, 0x1, 0x0, 0x0) socket(0x18, 0x3, 0x2) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) 1.816807411s ago: executing program 1 (id=1377): openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mtd0\x00', 0x80000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bpf$auto_BPF_LINK_GET_NEXT_ID(0x1f, &(0x7f00000002c0)=@enable_stats={0x7f}, 0xa6) r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x40080, 0x0) pread64$auto(r0, 0x0, 0xec5d, 0x7f) 1.730007634s ago: executing program 3 (id=1378): mmap$auto(0x0, 0x400008, 0xfffffffffffffff9, 0x200000000009b72, 0x2, 0x7ffe) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x40080, 0x0) fanotify_init$auto(0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x40000003, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) ioctl$auto(r0, 0x4b52, r0) 1.436292799s ago: executing program 3 (id=1379): ioctl$auto_VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000000)=0xffffffffffffffff) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_REMOVE_LINK_STA(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, r1, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_DISABLE_EHT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8014}, 0x8000) r2 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_DUMP_UEID(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xac, r2, 0x200, 0x70bd2b, 0x25dfdbfd, {}, "f96db5f0b574eb8ff05b2bd570edb2254da26331edbdbbcd41a2ded41dd6f1c1f53d4b7941ae6622a0729022ee9b848e9d193f0c027d3badf33a574d769e4cd1233071df67e1456e3ed90e75f57fb715d2d745c991b50b5ab27a9189ca397ef6495a78aa36e6125ec6b1771931ba39b135b2d69cdf7ed5da8c63eef4e698bdcdd874eb0eea8c72f92bf50d238a16652e81ad765601071a44"}, 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x40010) bpf$auto_BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000340)=@raw_tracepoint={0x7, 0xffffffffffffffff, 0x0, 0x7}, 0xff) fallocate$auto(r0, 0x53517cfd, 0x7, 0x0) sendmsg$auto_NL80211_CMD_DEL_PMKSA(r3, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xd4, r1, 0x200, 0x70bd2b, 0x1, {}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x5}, @NL80211_ATTR_SCAN_FREQUENCIES={0x77, 0x2c, 0x0, 0x1, [@typed={0x4, 0x138}, @typed={0xc, 0xd, 0x0, 0x0, @u64=0x3ff}, @nested={0x8, 0x2b, 0x0, 0x1, [@nested={0x4, 0x148}]}, @typed={0x14, 0x135, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @typed={0x8, 0x78, 0x0, 0x0, @u32=0x9}, @generic="5bc653677a84da116dd54ab49beef709ad1b6687bc926bb6066e6482b3aca6673f337a103ff3f24807c8b8783d926f3e233dc5d04782f43d746ad4745339de"]}, @NL80211_ATTR_MBSSID_CONFIG={0x3c, 0x132, 0x0, 0x1, [@NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5}, @NL80211_MBSSID_CONFIG_ATTR_MAX_INTERFACES={0x5, 0x1, 0x5}, @NL80211_MBSSID_CONFIG_ATTR_MAX_INTERFACES={0x5, 0x1, 0x1}, @NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0x1}, @NL80211_MBSSID_CONFIG_ATTR_MAX_INTERFACES={0x5, 0x1, 0x8}, @NL80211_MBSSID_CONFIG_ATTR_MAX_INTERFACES={0x5}, @NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY={0x5, 0x2, 0x8}]}, @NL80211_ATTR_MLO_LINK_DISABLED={0x4}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40080010}, 0x0) r4 = prctl$auto_PR_SET_MM_BRK(0x9, 0x7, 0xffffffffffffffff, 0x4, 0x0) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(r4, &(0x7f00000017c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001780)={&(0x7f0000000600)={0x1150, r2, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@SMC_NLA_EID_TABLE_UNSPEC={0x1004, 0x0, "1201bbaeff6e34509c819cefc9969b0692e5018681dfc341de5cc240aff37a647cd3531baca15b9174cb691ff1c772f2b6dadf62fb39e48a681f5ea00bee89c09d6b33b7a056bed43231b7882a9ed5611a8decd67e0d88853472aa5ed9a0fd42cf487b99d5b8565a11bc7333bdc44c1f8a20f13c973068a1bf59ebd4733d9bea7c2091df073b058c687860cf7619c440c09000f7053b80c76f2de64a6f04c9831866ea6ec35716a94f6c20c49527cb31348bc7b0ea87d9c2f564672ae5fc547d8d7d77635849873ff7055a2169a922e95358ec60178518289fb4a4e1709a19607ec8f9cc2dcf2126963da733dd8ceae7ca256edc9884c4dd0a3c90e5a4adc94808803429223bfec9338013bee473ceacf7f538af5d74b29b2869e2984d7c735f0d5ca87695a5f204303b973b72b7cd6aa1634d6a7386f4fce7b0e6dc30279b56bef529b800ff6a69c468578eb7225cc7d7742d97436696af998901e16e3f7c4777111f706de97bf89550d3fb740c2f14da1cb27a15920e4bd26fb8fd5a373a7998c97bb890ffaaec7bd1c6c01e27d889e286cdac468ff798f71e7fce34f8cc71e627cf3471157a73bab835af02e8425bf2578a2833939e989d8ce08a99097b0410125d46a17215777417a2f2ee349af63992f84e7af0ca67e1faa3fffb9a7f2677513231d3bb6a2faabba2fb349cb27930a8f29a5906d61dd400eac9ab270d535afead11c368e87a718420c256249a71b8ce0cf61c11ed9482b30878204b6831e642a8b49b6ae358777bcfd1d28adf02348a495fe4621d385b80f6cf6e514579cc7a77db5d9525e468f0150838d9d9af77d1d767c69de368de75eeb6d817466fc892232c0677b633303678cb7809450f2d7997a150312a5a55579082efee71ace72e385f1b702383173c8faac4cd29f053782b77f17489120cda71d1afa8e876f5153e6e0204632ac9afa6a96d095ae6ffd3fe4d42fa9bafe565160e4f002a11a36ef160e089edb05511bf9e4fe6290525024ef4760a14d4d05fec152f8a1f1717ca71ff8a7f7c33df42c91a18bfda3fb67848386d5383d95c900512fffe1fcbdf1b16b5f170af2589f4c480f1765942df22ae97989c2addded9ae05bfaaa128ef2f31653fa351e599ddd571224334bc8ad2a3bf39b393820c1c5c406cebea5dca2d56762f0688b47602b4d45b58380f9f3a560f6022722f21f9d6b9b60221e230abfbf9a3c46717e9f233d329a7c43e64014180a1b813de9d12cec547eb69526bd5ef2d4743355b95ec93033abd5813103598ace60f6d0a33fd19bfd16023e7e67d312c775bdd4e7b646929f40c6fbfeb23ad82d499b3fdb3cb9015e8e951d1f71f436b37bdf230ffb9618a1b7f14052e56e806f2efd5c0200d0e19d6895fc1cfa1badef421f790a697200a3d0813029ee477b78e811874525e10fd13e531c16786acba4de7c63d91913f08fb425912236a434a4990084db16a7e5e896c7b6a543c68500aae149ff581cb9d3a5aa1dbbae77eab550a0a32df3ddcd00ca169ab0ebd04767aa3e23d3eaf1890dc1e651b06bcc7b07d05235db461cc5ffb69ac930d4c4c1a78499ce4b441bb2cdd5173dab03da2170b9159e9cbf16b541e92d9aa810db6ddea84118b5a6ce3a14f27ee9ddcb435d48f647c90db8bbb01547f36248d8711f6410bf4d5fb48065298ab109bb9bde5f7ca5ac4bcc4691b42403a7b38510e4fb3fa8acce4332b96081e2ef87e4a8fc0949d61184788903b50798c2bfb3367b603761572edfdafb7d3e6ff79b339fb18ab537e34036a1868d0b3257f0917dc527abcf2abe123f9087d076dcb309465d4eeb5e897aca3a8a08f082653fd8014ca24d436415d5e7109cd44b372a06ca331df5a1e82e4ffe297fb275a71b8a52ce7082bd23eea75a957f590e7e01f2357f571cafd7d3fcd44c2178efcea44361d72b9202d2aad5178e1bdd655ac8bb6bce4e5b7a2267bbd62477bd77f79630ae1a2e2bb5c76f2c6a0638d97534e637d24ccef917d071ea8b6ac508d3a84b9cb322b65db1819f2939060175a8d8ed55fe4977118b43b15ced101bd54ba8d4047b4b789bb3272adaff83d44e90478e03a938ff06c0d6969f601f1ddf48780635439bc08d7d2bdad331c94760dd19f3c31cb139c13e420a5ea166f89330ae660316a28900731cdaf68d3425cdc22e56a2cc45e261370f05facb40ef166593ec250d8d10baca81997650432bb0e1c2b8254681abc13a9f7616b6d8bdf56a37441412681250151ae297b1fecd4043b5c0f9c1ce3768a4346904985a76adac1a848a6d0114259913b0fd10d4cbe5ae80f0daf7967bb49287bdc17d0d76b2951bf01c71f0dee93cb421cfd89ff81d5785a344b888cf8edc58f552fa371702f01fe5c21829b479374bb45cec046896ef2558b7692e3a86afe75cd535ff05b8106219c21abfe0fbab598ef568afedf0ec8953d7deacbc21b141c3d9f1a4c5cd7c2aff9edf07079757d98c3d6daa34004e3255d18890e4c6d53639939ef1de9f544f62dc342c254a707ba1beef169073443a6a01d1662f2ebccee911983158397585b36797c7858b1df54238a43bc2c1f5fd88852116c6e6dc5efa227a155ab483a185fe90a6c91d28696f410234072ded057ae3c5ad2d4a435551941e4f09ffa834474ecef96a06935246a895103afd8a6f23dad7abfc72bf03ddfb7719d55e4aee68f21799d3bf28a86da4d209e1b1e9cf22ca4f9fe680d15af41fe948426db463000603291b7ca2caf04ff87990157102022b316f4654511b3888990d8d58659378ba8e84c03d595abc746341dc6b02d91d7580690b5b2e13156519d05d55e882b9f1f20cd861e9107e3de03a8e4af25262d1ebae002f77c9b4079832a307b899cf09043eee9648646f72999067776841a55115bb4da09e31d89ecefaebec2c283ee54d4a01e255d799d8956c8fe88103895ca086de4661a494b257b20b1b4a0c22cc20e1944402a7223bebb17627de876492bfca78075f22c810b7fac737dc530881964ebda0571e4beed8341ccc2dfee71394b16aa115994d11e98436908166942157e856c6f4587a3e4ea2cac7110303af83c35b1e5e9ecf147d900f4bf93dd3452251fffbabc3f2b60eb6989613856cd1d44a91bfb11bcf989a6f274c20058c7f3c5594df681208496d64f32bd9566e60510a4952b5072c3971d9f4717702e59f666f42380f4fe2edf511fda4eb9bc7627ac18ba4cade737864f74d7e5ae8247b0b9027476b2c26900c00d9922d015128373eb59e8da53995619f5887e97203b000f6b6f90a1d27313ebcfbd86570001d82096bb33419a19b8d6b39fc1370926853b82e262ffdd2026c8bc2594dafedab5d15b8797a4c3ac13dca40da773153a8ced514f88300d1a727487e1b623654e9f7c57d6a6f302fd410206d8251d1668edb1a4c78a667d1f14dbc562c9e09fbb5382ecf3315ee8af44399575e78a6f194565ce07377bdefd15874bdec516421a8f25fac3340fd68010508b630da6ac43bdb4e413511f7c464a8c55ca1ab53d0541b38c853e3460d8f6342b34e0a325885fa24b9620b22ac0e43538bee30a9cd352f5ce02393036fcc26478fb217eb91ca9b964e3e6fcb2e6be2050cbe706d1365da41f4785293b4cfad99594f2595bbdfbcf76c1ee94a299ce74dfa6b50f6e794291c51e51c1f7241119c02d46b2f71f21a5a6b54d3a24791d60bb62c5e76528e1663d7a5ffd4057a451f838af31ca8e1ea3bac00dde9bed461a541b91c1c9269640c75a32a5b9fa0921324aa33a11b9223f9a7c3320918c5409018ee85eb2e0715a960ae1d3b1a29b358d79028b0c62ca6dc62d1ea482a66b5c9c135d5dd49b16ede544fa63fdea7cc1fac8a4f69f5b7e7aff003419cdc304511d4d43fb17e58ed35ef56de6f19ade8df65de083f85383c71ffccac6d744c223e09d4410de1ec5955430800da47199e42af851c03eeff971f488bf785c96e82cedda33784cd66053d45ff4a3f53b8cb19413cb3fcdc5fbb7f216c9a6aed222490b5329594060cd9f65a212615739b66ebbf716e46965df36b446134fefd77531f40ee602291fcb3a60f3633472abc89138a111472e15e1e3dab32d21674117b1ea1b08c4434e020afda29a6178f2063ca2d2b3b2fdc93601b057fc0419cce5d9deb9a2a43ceadab9fbcdbece39496307a9c2c6f284381bf43df80abff4d86a585b22540166c23325f55dd1e15195821069438672986188683c6e74077d6f5e04a3b1eb0a443ed7d650a5f437160fc50b29436b5a640597339be85bea050676a3f0bf3e803e4cd570ba505bb2761c7e5898c827b42a2483939c8bac5e0ab9f9e4c3ef0f93dbcd14f335299795f96ce7738ffb80e0bb098a4566257f71e940c8e27baec909450f78883c314b297fa4074d7debf74fe29f03193685553d213b6fef2c9e02b2b7bc5aad39ee76494cb23bed2c158da01fd2d82f1d47ef151b30cb195c1fa8e37e8cba012b60dc696d611aac45dd7464823f1d79cbeb373dfb4666e6e257e2212b3f5bfb1f0119f3292be5a606246c99c35e90806f4808e24757aa1f6a6ea92c1a669e596e9cf54a16982963900b531f8f8465eee5023c6ccf97afd72bfa0450982ea150c36f132d028791914f47ecfdc4677e725383c685c46b19c69912a11e3ad5602d3d7cbc0d8ca13b031df34b4ae209b99b9dd9f5dd59e1781b6bf525fc4f411169d897efa948877bf4ac67e6aeef594814f469436558fdbd05c1d3f698c64adde83bd40c700bc8cdbf405c32c15cc9d6988407f8226e41c7e8eac2fcd56da8345749b693faafba1f9ae77e5f40a1b02e4f35f866d3e034de29c75f8eda768026ad8e12ebe551a8e1602d285f75a87a43ad17f4078a3b8fab25ff6f37b4c550de821cde4c8e77b2b521def93c4b870b760f41325008cb9e5cdab5ed2795b88f98f074d27c7a8e10e8e2c07bb6d842fc49790c9bbe5d8b2d4a147e99d0966d928e63918064b45ed6d451a9dead0119ce3051a8bf742dfae8606f4bf1eb29e79e21793f115100cf2772c2896004265656c99e26473cb0e6f6fa972571f4b20c162eaff96ebb4673dcf1e25ef267be5dd8a94ed74c9e6d19a78b1ea598712aedc73098bae8a15a751d08e7482c2d5b9e5d7d78d197be1276826bbe7f7edc710d313991e9e0ba6e3fed9a5fb0127627faf13bd1e3f6149db3a89ee38af6123a0eb6a46379cd8d5f3fc8a86e24484049e300c68cd30e83d5251a8a5d0ff732a48520027fde621d862f42dd2911f6bf1a54c9691408721b6dcae6a1e2bfe0abf308e1b9affdb87b9cbb068b88ef428e476790beb63863e898ab5a2a4501685e3464fdfd74d9e9042cbfa5da90f2f2fd52d58a0c5a4ec8bd5ffbc4bcb6a98c00d94075ca5053c1b39d58e08e6794b78aae87771e90c247f499577947dd31338d1f8cf5af383b1b9153490f598aa279908437720514b135da8ade23b31cdd634200ecff286cbdeb7aa1f5aa39da65929535916b39831b806d65c58ee4a2f9ea4a6830ff8bbbf58da54ab3b28689b1cbc9bf7ac7ccd66adebd134fb8080555d50ec6680b5b1468d3a05d242e9c4b4a70a5019456ca98cdbc33e65dfdcd69421be00694c0e90161df7e8f9df2d9cab941b88e6d5cb88787d6858cc8f62ac7eb0dcc2cc28921b3ca9b6cca28ea8188601e214da43630efa8648c5cd1992f53e87d1c04c78d3d4dc923493a408dba576e61de07afa8aa1568e17440bc6acbda0029a7c3a3b40d28389b573511b0e59bafe6d887e4b6"}, @SMC_NLA_EID_TABLE_ENTRY={0x5, 0x1, '\x00'}, @SMC_NLA_EID_TABLE_ENTRY={0x4}, @SMC_NLA_EID_TABLE_UNSPEC={0x67, 0x0, "3ec182a93f5b0758e80bcf1cd56fbcd4f9791d809424d824720ffe16c6d5979516e93960b2755dfb8a645ccf1c51d02b31187489551a84cc50bb7dd3b2e578946d803c8d38516e03fe10a1bffa9db102313e8b41ad4aacfaa57dd6d6a976c545252431"}, @SMC_NLA_EID_TABLE_UNSPEC={0xc1, 0x0, "936b9e115932600740b905af4d42e3bc9a92c9c4ef84806e16a90365e516966f767f631139ba981ff1f51209b1594996b2c6c0a6eea1674144c5796256dbda6234c61efe5b05a9df381f72c6cd0b7f735930044899aabd36c4cb247a08539b28c700058e1a105b4df86e54caeac94ea0066327b12889788667a3839994dcd1bf44fc8c0cc9169b5309211bb292a57c5bdae0689e6682c4fe408584c73caa86e302b4d3fcd7a1f74bd66cdcd3845d6fb71d70cc1a4a49a5d92638c25b24"}]}, 0x1150}, 0x1, 0x0, 0x0, 0x20000}, 0x8040) r5 = getpid() syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000001800), r4) mount$auto(&(0x7f0000001840)='vxcan1\x00', &(0x7f0000001880)='./file0\x00', &(0x7f00000018c0)='nl80211\x00', 0x0, &(0x7f0000001900)="1e9c976f32d8cd9484889b9b38ec258b29b449dbbd28fa20b00354a45d78c93abd806bc67e171edaa935643e8ab2d479f12cfd02470b05eed4dc37e808df00e0d8a77eefcc2e483e6aa4a89892622412562d8e8d7d58802555947d8168acb0e8289dd27912c4d84a3d5c4e0f11177b2474ed87cee16666f11c21c9f1e34a6f7b2e5bc1ef8f7cf0dadd96612d95a40a07") ioctl$auto_FS_IOC_UNRESVSP64(r4, 0x4030582b, 0x4) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001a00), r3) sendmsg$auto_NL80211_CMD_LEAVE_OCB(r4, &(0x7f0000001ac0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x24, r6, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_TIMED_OUT={0x4}, @NL80211_ATTR_PMKID={0x4}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x24004811) msgctl$auto_IPC_RMID(0x7, 0x0, &(0x7f0000001b80)={{0xb, 0x0, 0xee01, 0x7, 0x401, 0x4}, &(0x7f0000001b00)=0x6, &(0x7f0000001b40), 0x0, 0x9, 0xffffffffffffffff, 0x0, 0xff, 0x0, 0x8, 0x1, @inferred=r5, @raw=0x69ad}) r9 = setfsuid$auto(r7) shmctl$auto_IPC_SET(0x3, 0x1, &(0x7f0000001d00)={{0x2, r9, r8, 0x800, 0x7, 0x6, 0x6}, 0xc, 0x100000000, 0xffffffffffffffff, 0x8001, @inferred=r5, @inferred=r5, 0xb, 0x0, &(0x7f0000001c40)="d63e7e241b13639b44d2a5b4c8572d1fe8eb5466d468260a60298917a6a54b492c00ad01d4ecb8228b3b65805de1372a0df99bfcad1907d4f46d64e50e64478bdf", &(0x7f0000001cc0)="31563208932e4ee32ea8aae93390b29b26c5bf8e2d43ca4d75"}) sendmsg$auto_NL802154_CMD_GET_SEC_DEVKEY(r4, &(0x7f0000003080)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003040)={&(0x7f0000001d80)={0x1290, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x127a, 0x2e, 0x0, 0x1, [@typed={0x8, 0x109, 0x0, 0x0, @uid=r10}, @generic="c643b440f9815850a95ad2098f8e095a928c79813a29f266058678873274abf190ea5c7d980603c74639400efa9c3a240abc378317a58bb4b14776a00af023dfdb0a557ca816aa3c61cce6716f7177317b4c64dce7d91280cb530f0876886a82c33871c7b8f060a64bc1574bddb654", @typed={0x4, 0x82}, @nested={0x108, 0x73, 0x0, 0x1, [@typed={0xe6, 0xc0, 0x0, 0x0, @binary="86df367f7f82dcc3bd78d4e87db08f2d9ae45637a3846f79eaf9da2202976617b1648db5aaaff404892d3b5d3be638edadd7af30bfcdfaa884e721cbb5a85c9689473d384a3dc971be703075f3139879a6fa371f1f33dbc6b415eb2b24bbe73e9fa371d1517be66d323c3f5e73eb8c94e133b4627b25d88b009da8dae645ee51b6668b2398bcd6fade7b0c6f5b609b6c1adc2a2e952109897830b2d86bccbf7c4ddabdc062d05a85a81d8c0e59f75b067f78d26b63308971a5b8f45412f100c43a9619bccbd00aeb28d781539579e92b5d2c0eb95f861075f351baf3218f54c22750"}, @typed={0x9, 0x73, 0x0, 0x0, @str='!):@\x00'}, @nested={0x4, 0x21}, @typed={0xc, 0xdc, 0x0, 0x0, @u64=0x1000}]}, @typed={0x8, 0xc3, 0x0, 0x0, @fd=r0}, @generic="61d17585c41aadcc50c396f39837e93166c9f22c6f8b5302c6b5767449babc2eac57b511625fbe03c5268cdc6e04bbbe338a4c6cfbfa6663bab7d56d964d8b21fb946d7d5cd7e1fab59cdb6cdc4e61a2a742f32413469c538a53434623f83b7a3c5d439968593669c7f53203898f6d6e8794fa644a36d8ada40dc554901f3db450c87542eaa9f72d44386099a6fad7e6f42076eb60176f8a7d4b5ab54d285a9583a98ae3248243bdeaa58ff38878777b7ac94225963a465312ad31eb264d20283eaae64fe50f3ca331415ea77b5f53", @nested={0x101c, 0x144, 0x0, 0x1, [@generic="48cd7e74fc7737bf3a979817d14f1e8ea976b6b4a996d57b5b2c5448aee62bbe938d6803d3f3cdfee23310c1431b2815f63711b5846bcb4411eba012edcb2a09490ac457f333cc6660ddb3521133394635f8500d78350395d566a190faa359fcc9114be8efb599558ce3d212accaf06f6184619ad7b95d58cf53b54985b9aae65ba86785d348c372f89c81a9cfe391c39e810f94b6ababb1505732e10031a1e71566de4f43835ab2b9b54b88d57c1f765f413bfd517af3ae3c61ce7e8b2ae1a7b4867132fb758ece06bcdab2ced516a0e3168b4807d6a1f204eb7e919c20e8193ab0fd12f1a72d53350fe512882010d2100246acf53eb44d03ddabeb8fb5769ca58f31ec040b12e49eecff7046a77731c118d76a9dd3f98a55b381c375fe5dd8ed30872ba8fa50c99cea81176fff9a7fdddde64a083ccb2146b84ca9354ef6b8ebcad77dff9ac6c000fa1d237d8d974f7113cbdbc2ccfcf38d007d87253b00c824d7211b8fe388b861b391c482466f2e746d3ef3f3974cf0aef9821dafcca0f289b81b026a388ad3dd946e6215d57c40d9f3e050b63912b69f6827d5ac96990737e83cccc3630261c2b2b7f1e4c5582dc3836b990e760ea61fb4b0b2eb9033f4e3f58fc61f4c0e612c9838b07940c6bc1390d4d3d5a2b882f31902760559295ae6060ec6c34333e58c6d44b5fa64161a1cc4406b81793b27b77f46bebf2c2dd627a02184604506298fed87a218d3eed6364b8908d3f92b89d0fe046efac4f2d1e70f4132ff207d846e7936c5815fa4edcc76a8fea622c493ee3224c76a81accb6a042a077246e6b2702bc7884c668f5560662a2b9b8f26c2c0ac062e80f283df1cf087c753f98b378b26184fd744c9a93edb8ccab1645fe3e5b6fb40abae0402bbdd7012e7c0952e24bfbac538d7e2972a9a6ea06d357d9bbe7ea65b2e3fdec64b9e4ad384829f739352ba3908e5ddcf0088f5b501c6f8d8c76342b1953ec1223f0e6c5a4ea8cc9a8af2c75c7cdcff9579458f66807ca5deb4e1e1be69232622647b16a81c9915b01e74c3d25a961cc7dcf69ac4726ff4833dbe4f45e69b4b2b81fa1383eedb2bf5dd03081b3adfa38c17629e72ff54f4428b5e6b12cdf97aa25ca77e857e61c83246aab0d2441164d5e773584808a1138170ed0ad3e56978df9dc9889aa5d475f9a2d444ade77b54bdcdb1b120462694ea8f1b17573ec20334e491532f37ad74c4aebf1d4dd5f82445f8f45a259b4d84e0ea0ce98d4d351db7dac60735c4022dfbcd66cd6a3f452de2dfa228784fb3e1dce67068f0142e90cd6201176d3a34f67d96dba124e9c58e50d916790d9f81762d7411d9e07408ad01a621a48499897f5a8b5928c5f7046c368f7d025ff29a987b940c0f76291dcf894e9547fa9f0a4f83732244f793e563001544cccce12e4fb41846496f68f39d54af18c25e2774d0b735f4b0340a3ec90eafec9421fafc824ba98db5f4ac6ed48681a729bdbf0eb520dbc40ee45394b68e33317b532736e4bb4c4920b62b6e6b4bdcf63a1b8b3b879fefb4a20537fb8495a3de340913e1fb2d78e89204d915527c5eef3512664c5024d717be2f2a2c993a806e9a2628623744c3b32e1811c8ca0b5439265a4518d1f25a21d16bedf222e92d82c4ae5888951c2ef22e38eceb1198e70aa99abf36655208aef9b557a384f0348c2cb3fd61f6b62a9d0922166ca5ab4061decd062bb802538d61b0243db2ecdc33ec55e9f86c64108699d373fb062813ff90ea2087c9bc3a4fd2484e0cb5f923bd35b52f1ca60e011a7e723672acae9e6018504f81a2e206d37f515545c29edda5cec4241f4c981b77a54573cc61081d1b47e2cac6970c3d70ea32d0ab044dcc110da93a64ed6a02bc8277087ab61a0a49d997ec3ce7032f0f1b7a4c4835474177baac8a80bec45e3ffa89a08226058fb66123e43fd6d8308104cde47ca26adefc6235675a8fdc8243298b29a5cff6e2fff31887f0957def74857329769eb27fac812ffb589a41e064f4b6d466d1c0b2b51c6a82cd8138f0739f15b441a9df49982aefc15320f56d1f0537785bd8688287bc63617125a57647eadf1b3bb19da09b87791a8a0ca30e3d1bafe641f58cb2e468b05716f33acbdef1d919a1dee6ca3b78df9d0264b02da240e677dfd917fb3b2b70ea269a3ceaa33e6738c5c286c5186db8d1c6ae16f4e0b3f35a034769c0812a674da47ad7f2433c9c49df02f086207b397d62412c194ce6144f9f3552e2140bacb389e7608c47b4165d6b7acb5fd616bbc63bf1ff49797e846ee99de56004d5e2215b37f4b80e7305c86990d6f223d85b20668a8066e575b03cb803241107ba21431d7b6ba091287c20df3402285d531b4f6cabe1c70f2ab1e194c27aa8b9c80d6a83f88af683692bb259fb749ee7bf304b7dfafa218278792b06bd07ce7faa913c1277f70c2c4e3064119559d61cade4c698b6e858a45ffca8e54706d6c7f5cc92ec7d66c4dfa808a1082a220f7792c039ed32222cf917ddc42a39c5f074d6371503546c5f2657978afbd00ea428ee28d1e1dcc5d9f3c655d3dd7103e7a3e573e38ac802a45591d7310cf0249cacd6135fba088a5e8c17b0984f0716f0160a9bc0471f7c7bec9535200499581018ca3bc95997e97a0ab9ea880a1a192c7726653c681ef8d2c8cbd4ca31887a8a2ec8fa026ef4526c5d54e6d12972aef13906a222b873c7f05017455c4006d0351eb1f48630877d27230930f7d6fa3e4c01f43f58366fdbf0e28a76fa17db03f16366538d294756c9f10c0aadd95f8b2bff0aa36f22552b7b26505cf5cd709b0430b411ebcceffa3b36b777d533087758ca3535d55c16a55dde1788724697c6b258f6f1252d2e5dcab9967d6f72c8ddd82ce1148ebb252395cc0fcb1e6e09835d1b64988b35f8c28b655ecff263635295608c4f9af786520cc4d3e190857b119e6e1d00fdf02dd63fbf0477192698a308055d2e2952f4d4694f6530527636d25268f6a79d25f74c1ebcd30c14fa1b95943b88b4616396818db972f2b04b90df31992ff82beb7f12d886bc25d7119b48fbb595169e7c46e696a9fa9dc6d41af8ce6c72830563e48c14d76466e59193e9e441cb657d6e9014c4db3a679c71a2591462bdba7b4936b9556f66f86097fc3c08c74587aec41eff653df6d5733eaf51af035b2b0af9a2bb10f0d78c14f9f182a3be52f82e6737908c63b2d8570a3630d4abe685a1813dddb58790f91d34c13f807b6661741eb724e034e449d76be666c5975c2d9289b547a50d453ad2dc75d80308aca0ab032d05eed995c3e188bc3a6f434553e851e0dff76cc07bc6d88b52d9933bafec7b56f2b6e8c8a57f4449a71a9ac5961c5c7521cd802d2a5b8b3c264629a00babf191577376535d07e408bfbd83635a953e296f75530e45d0224e7883170d1382f3ee23676a5ded32c83538f4d2c8f4d0a607a473ad5993edceeb0a0fd80833cb25df6079a90c856b7feaa301ae7d94bf15580b1f7ec6c371b78acfd03bc8f9239a4109822044302ae811876ad0c148f5a2178a5db924c8fee6eda18bb5a67de37ec1930c273634cd1ac927a055b2d828b6e55fb39594aaae51488331c9eb3ebb115d2ec040fd8a10f938b2a3e6cef48bbb748115ed3e922236f71166d03bcb50e7b4316df66a3b0843787908b719986d9bfe693ba6516bf7e9ff1505a5781aaffff73dbe0ef532c25d9e3eaacf8561dd1ad821ac4d653818482221d3fcaf5352427f0aeddc4c4c98650f9941aac22c41a3b41cbcd24646c06b369e2049d2fe521c91353449359fca4b34ede6a0170b03b0ca2de26ce17714cb6b3e3d5101f247c57b70f3d9deac0a23a03e720580a558c272fe1c4cb5217f87147ede8a63def85597e5c49171770e0297bc680033f3e5a2ac1a8f3e461c42c5300d3cffe75fc43c89ad335856ea9c19debb0dfd39ace1c70ad56a718e1cc56004ae686cba3046b9caaa3bedfd301b51aa5ce5ee846788f2cab29e26385d210d35407ae86e7cb9a9bbd9bf0cc2b2d1d288a615c2fb46c5f3a3c42244827f34fac51b375ab048ffa42b8accee7ea9752d19d4c1eb2a1a9beddcacc44e081267839d1fb91131f97f953fb85591963ca3ffafe7b9302941dd0889251832171e280e3d12a1ee4b6e2f6fa9a2f6519528ce7ca5a6e1659dbb4f32fb88a2f4c5fb77569d0d802250048659a38016ab1161bb5d7285d802e81d4ebce648f121033937464ae66813102b97ea19e57570a9bc058747d10142e5f91d22c50d39d3d741995d7a1ad47614b6e7d3c61484ed2c78e477fd24df05f4b706cce0fd5b8deb44b98823ed94163104d2c128847e77f6fa9cb004055de50179469fc5e92902b06fe8a6207b97ade8a702cafb4cd2e257634533949f113b31641fd0331992e3d4c198be73135cbc3fdec48686b0ec5978509afe216670ea33d9fee504df1f61982dfabdb14b9dac2ae52cf81c9decc1d8180ca03640058705bcb5f31655a69423b9739a1116b7f5fb7a299139f71c836d2061a08745cabb86b8092dd8e44948bd8c11ce92ab4b5a804cba4670b99797278759169448dd05832d1f5f7b4fce7ce32aaadd7f468187563b60cec7d3253d6d9c9e47e08c912a3f52cf4b06d6b7bcb66a283c26671bd4403715ae58f9566f72a28cce4a60bbec821767b201a980666441434fb63a76e0f73b7c813dd4d63939f56759c696f214bb8ac744c044d034987581b02fe290c0c4facfde848a7b9a79bf717f63897bcba1ce4aaee58a8b18fe99287540d19ff89bf6a0a97e6771e9ce70da777a8110956821a6cf5bf0217b763eb09ead8ad22b1b7a93c98f3fcd1d92b47ea41a963a2114b3d7f6abbac3251ffa2541e1b0297404be6571cdd5616847f58bfb4126d8b23bc06dcd565c3b9e02a21a27bcbfa07a04865d35b8a5d2c7f132ba2ba2539775741c3a97f335089faa8e0af7354d590eff03c25e18d1e064b8862959c53976abc83443e9f4e0063d5c95abdc59827adc996ec178eefd274de485e7cde207cdb890906a1137faed1b6ae9f82adbcb830bf008710b33175492c8209eb6d48e3d5ffe45f862ca2ef5da73713cb1402ea903405374e12a35b579f19efdc882312475bae11c94ebbe5d52dc131ceb9a37ff908189a210c36977b791e311269a1fd693b0a2c280a6d9f45c2d87f9fd640e97429a3ae2ce53da68187612efb4a40a70d4a5621958b2b9417d8c7a5a9e20b14423c9167dd3437d9d1a89642ebae1f3ec5ad8248f998a60b9352ae0b4fe0e9de318910047f37d43b5b4ee9ca13c8d2daad454026c6114d8066af4ebf06b774000c15ba0155634e0f7e1b7b62f40383bd55fcab4f7d9b4be66041d2c213a707d2e7225f1c57ce01063735dbe353222243d0195a39c9a5c3745e5d9f65479792e614d054bd6dbcbce9215a2c4ff8c72b8d006380f67ec5a019337bc73fe1efd5616949a5e14bf36ef6c627712b81c3ed159e855109f7bb7e2f16be319db23309e0565adcf90748e422dcff469e2674c552381a7e93ba3b944d0dcf8d432c7601100cdcf2d2300557d132d5295e1bf93572353cd627fa213230f018ef7c21e9734cb35ce74409ee22e54bb3dfdfabe289c7de6f113c5625dcf969cb4b1da6e8b81ec875178cd0d00fb4987a604572e7f1f324c3937cfa3e49fbf2bf39f3a4ec76058c54fe7cbfca1e1f5981f73900b01b16214743397c011f80616dcddf810f061afda1e3025c4af1526adfaa8276361482f6a3392be1cd91caf651678e5f1f2c3", @typed={0x8, 0x6b, 0x0, 0x0, @u32=0x10}, @nested={0x4, 0x113}, @nested={0x4, 0x9f}, @typed={0x8, 0x14a, 0x0, 0x0, @ipv4=@local}]}]}]}, 0x1290}}, 0x84) msgctl$auto_IPC_SET(0x1853f66, 0x1, &(0x7f0000003140)={{0x1, r10, r11, 0x7, 0xffffff4c, 0x7, 0x3f81}, &(0x7f00000030c0)=0x5, &(0x7f0000003100)=0x7, 0xfffffffffffffffb, 0x8, 0x1ff, 0x7, 0xfffffffffffffffc, 0x10, 0x5, 0x7fff, @inferred=r12, @raw=0x5}) msgctl$auto_IPC_STAT(0x5, 0x2, &(0x7f0000003240)={{0x10001, r13, r11, 0xb97d, 0x2f8, 0x9, 0x1}, &(0x7f00000031c0)=0x7, &(0x7f0000003200)=0xba, 0x2040000000000, 0x5, 0x1, 0x3, 0x3, 0x2, 0x7ff, 0x3, @inferred=r12, @raw=0x6}) sendmsg$auto_NL80211_CMD_START_AP(r0, &(0x7f0000003400)={&(0x7f00000032c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000033c0)={&(0x7f0000003300)={0x84, r6, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x6d, 0x7d, 0x0, 0x1, [@nested={0x8, 0x143, 0x0, 0x1, [@nested={0x4, 0x7d}]}, @generic="6d320a5d2787c6dd9badcf9957ab85f34725b17446bdfb8cca3481197ab0f1e255225755a860976d8a0f7599b1c135ea19aad4e8ab37ddcd9db17ffcb18d38858f2fe4c94d144ef2f922ab0df15f961461692f2f06be1a468c4d462d00", @nested={0x4, 0x4f}]}]}, 0x84}}, 0x40000) ioctl$auto_XFS_IOC_SWAPEXT(r3, 0xc0c0586d, &(0x7f0000003480)={0x29, @raw=0x1, @raw=0x4, 0x2, 0x5, '\x00', {0x8, 0x7, 0x79, r13, r14, 0x4, 0x3, 0x8, {0x4, 0x6}, {0xffffffffffffff87, 0x3}, {0x1, 0x7}, 0x2, 0x200, 0x8001, 0x8, 0x5, 0x2, 0x0, 0x20, 0x80, 0x1, '\x00', 0x6, 0x4, 0x9, 0x7e99}}) sendmsg$auto_TIPC_NL_SOCK_GET(r3, &(0x7f0000003800)={&(0x7f0000003440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003540)={0x248, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x234, 0x5, 0x0, 0x1, [@typed={0x8, 0x13c, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0xb, 0xc6, 0x0, 0x0, @str='vxcan1\x00'}, @generic="8570ef1aba90aa3346c768c7036c1f48d3d51e42356d48f015c4f5dd9cef3c10708f62b39dc4960380053d35ad19ee54d33cd3e0949272c48bd59c0479dabe0dfc604cfbe8a62f26020a64a5f2886a4a3ea13a7cc8fcd435dbbba0264c0138dbee39eb176f366fcf14cb23c9622d6ff4044b2d34eddc1af3eba436ae1787b8e3d7", @nested={0x10, 0x15c, 0x0, 0x1, [@typed={0x8, 0x7b, 0x0, 0x0, @uid=r15}, @nested={0x4, 0x8e}]}, @typed={0x8, 0x8c, 0x0, 0x0, @pid}, @generic="906124683996cde462e306d0a5cc8082dc33e5f7dbe55127f42b8a43313743a8cd0f16500a01ec6a321f19de461a1a19e6da0695f9213a572e6f3c611865a66882df27a6ca14fe2d4f1201ef71a3d31fb89c8d470c4c2147934047beeab1f77b1a515096b45355dc3647339b", @typed={0x14, 0xfe, 0x0, 0x0, @str='SMC_GEN_NETLINK\x00'}, @generic="a87e2e82230ae6f3563b3caf77ca22ff6bb4b00b73e806fe8d9c9450a2ec80ef14bd20d72021a756b254065ade740b45c5fa2d7757802993b3aba9297bdca3a78436b0b54852a273277f2996156820cbfa9cd40fbf89c1e870ddeef129c62f1dec79657f90498f04a7eeed15ba0585b6281c9d6f82fe42af34761610927a9857f28f6d76463b1a3eb96bf75fe87d615da9a1d2b4cbed34927b66640b0edb799a71310722cbbb79e49ab8b660df36b11d67da0c779d05e9929a59222443eb0ca2833118a8d076ea362b634af7013eb2a8a05ece6191e283359d1e26cc123b06008fada1d874413afd61862cebf598c87e34fe294625f7ff", @typed={0x4, 0x147}, @nested={0x8, 0xa3, 0x0, 0x1, [@nested={0x4, 0x146}]}]}]}, 0x248}, 0x1, 0x0, 0x0, 0x800}, 0x4) getsockopt$auto_SO_RCVPRIORITY(r0, 0x1, 0x52, &(0x7f0000003840)='SMC_GEN_NETLINK\x00', &(0x7f0000003880)=0x8) close_range$auto(r3, r3, 0x0) socket(0x2c, 0xa, 0x80000001) set_mempolicy_home_node$auto(0x7ff, 0xc64, 0x2, 0x1) sendmsg$auto_NL80211_CMD_VENDOR(r4, &(0x7f0000003a00)={&(0x7f00000038c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003940)={0x74, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x39, 0xcd, "666df0ffbc8f2c62e383d6b92fbe533b2458118da0e76419c656ebbc6faa4309c5c608f85fc6e619a4efcc9892bde33474a57cbdc6"}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x2}, @NL80211_ATTR_TDLS_EXTERNAL_SETUP={0x4}, @NL80211_ATTR_KEY_SEQ={0xb, 0xa, "14ec5d5a2e5064"}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000014}, 0x40010) 1.28372103s ago: executing program 0 (id=1380): mmap$auto(0x0, 0x4, 0x9c07, 0x9b72, 0xffffffffffffffff, 0x8000) mincore$auto(0x1000, 0xfffffffffffffffe, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) stat$auto(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80480, 0x0) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ioctl$auto_PPPIOCSMAXCID(r0, 0x40047451, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) linkat$auto(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000040)='&&\x00', 0x1400) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x28102, 0x0) close_range$auto(0x0, 0x5, 0x0) 1.189207092s ago: executing program 1 (id=1381): mmap$auto(0x0, 0x7, 0x7, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x840042, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900), 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/ptp/ptp0/max_vclocks\x00', 0x103841, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy1/net/wpan1/queues/tx-0/byte_queue_limits/stall_cnt\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) write$auto(0x3, 0x0, 0xfdef) 1.152886723s ago: executing program 3 (id=1382): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ioctl$auto_PPPIOCSMRRU(r0, 0x4004743b, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mremap$auto(0x200000000000, 0x7, 0x3fd6, 0x3, 0x200000) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) munlock$auto(0x10000000000ffff, 0xffffffdffffffffe) mlockall$auto(0x7) r1 = fanotify_init$auto(0x5, 0x2000000000002) r2 = open(&(0x7f0000000000)='.\x00', 0xc00, 0x409) fanotify_mark$auto(r1, 0x9, 0x9, r2, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) 943.498074ms ago: executing program 1 (id=1383): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/mac80211_hwsim/hwsim13\x00', 0x159000, 0x0) ioctl$auto_XFS_IOC_DIOINFO(r2, 0x800c581e, &(0x7f0000000100)={0xbc0, 0x2, 0x8000}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010029bd7000fbdbdf255d33000008000300", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x20040810}, 0x20000084) 851.372ms ago: executing program 0 (id=1384): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x5) ioctl$auto(r1, 0x4004af07, r0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020019, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) move_pages$auto(0x1, 0x20008, 0x0, 0x0, 0x0, 0x8000000000000000) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) r3 = socket(0xa, 0x801, 0x84) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/set_event\x00', 0x60000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) mseal$auto(0xfffffffffffff118, 0x7dda, 0x0) mseal$auto(0x0, 0x7dda, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r2) sendmsg$auto_NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r4, 0x200, 0x70bd26, 0x1, {}, [@NL80211_ATTR_KEY_DATA={0x1d, 0x7, "69ce9ee2c79f54cd1c448861f00d19cc5d157c675e16eab517"}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000) getsockopt$auto(r3, 0x84, 0x6d, 0x0, &(0x7f0000000280)=0x1000c0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2, 0x0) shmctl$auto(0x800, 0x2, 0x0) 661.473084ms ago: executing program 1 (id=1385): mmap$auto(0x0, 0x400008, 0xfffffffffffffff9, 0x200000000009b72, 0x2, 0x7ffe) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x40080, 0x0) r0 = fanotify_init$auto(0x5, 0x0) creat$auto(&(0x7f0000000000)='./file0\x00', 0x3ff) fanotify_mark$auto(r0, 0x205, 0xa, 0x4, 0x0) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000140), r0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)={0x234, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_MRU={0x6, 0x9, 0x3}, @OVS_PACKET_ATTR_HASH={0xc}, @OVS_PACKET_ATTR_ACTIONS={0x209, 0x3, 0x0, 0x1, [@generic="04262e63c95a57963ed85c4b95b8f16fd6d059c067e198ab9d51f59dbe521aba88670a4c450c9deaa9be209296b9fc1a0df99fe1e2ec4877c2b6bc3ddbb9369e114b0a0cb92722036f37f3db693c2aec22788897ad345d59df151578d3775401a5e9a1877f41a21659268478eb87cafb49ac26de4be5152956fbbf4fc34344cece56bcd631b58e129fe31b9f673d5234b86699cc68066c59163c890e2e673cb5bd1316bcb9e08c8126bf5a304845630c5ded8a191a47a3870970de44ed2710dab685d018230c55dea4929043", @generic="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", @generic="4b799bbcaa3d95293efaaaaa5e69d59fe6f28801a9baed8ab4d8ea534be5ae87f8ca783dedbc25949b968ed4f43e3043ebd3c1a8749d59c36d76"]}]}, 0x234}, 0x1, 0x0, 0x0, 0x20008000}, 0x1) unshare$auto(0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x149041, 0x0) mmap$auto(0x0, 0x2020009, 0x40000003, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) ioctl$auto(r2, 0x4b52, r2) 486.565682ms ago: executing program 1 (id=1386): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x1e, 0x3, 0x40000101) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x60980, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto(0x3, 0xae41, r1) mbind$auto(0xf000, 0x8000000000000001, 0x100000000, 0x0, 0x6, 0x2) 402.99441ms ago: executing program 3 (id=1387): mmap$auto(0x0, 0x400008, 0xfffffffffffffff9, 0x200000000009b72, 0x2, 0x7ffe) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x40080, 0x0) fanotify_init$auto(0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x40000003, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) ioctl$auto(r0, 0x4b52, r0) 189.449724ms ago: executing program 2 (id=1388): mkdir$auto(&(0x7f0000000140)='./file0\x00', 0xfffd) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9) mkdir$auto(&(0x7f0000000000)='./file0/file0\x00', 0x54c) r0 = socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmsg$auto(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000200)={[0xb, 0xffffffffffffff49, 0x5, 0x1823, 0x800000000004, 0x1, 0x5, 0xe3, 0x10, 0x4, 0x2dde, 0x8, 0x5, 0xab, 0x7fa4, 0x1]}, &(0x7f0000000040)={0x0, 0x7}) rename$auto(&(0x7f0000000480)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') 145.303502ms ago: executing program 3 (id=1389): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/net/gretap0/uevent\x00', 0x2262, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r0, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x3e, 0x1, 0xffffffffffffffff, 0x322, 0x20000002d4e00000) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/mm/hugepages/hugepages-1048576kB/demote_size\x00', 0x102, 0x0) write$auto(r1, 0x0, 0xfffffdeb) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x0, 0x21, 0x0, 0x28) mremap$auto(0x110c230000, 0x0, 0x2000101, 0x3, 0xf000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb9, 0xf, 0x7, 0x400004, 0xffffffffffffffff, 0x7, "00000000000000e3ffffffffffffff00", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/members\x00', 0x0, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r2, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) write$auto(r0, &(0x7f0000000140)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\xfc\xb2\x00\x00\x00\x00y\x113!\x05\xa7\xd6M\xce\xd6\'\xdf@\x9f\xf5 \x8b_hw\x8em\xd0\b\xe7~1\xf5\xf8\x93*jH\x85H\x05\xae\xdf\xf0\x15A\xdb$\'\x87', 0x81) 0s ago: executing program 1 (id=1390): openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r0 = socket(0x11, 0x80003, 0x300) sendfile$auto(0x1, r0, 0x0, 0x8fb5) dup2$auto(0x0, 0x3) ioctl$auto(0x3, 0x5760, 0x10000000000402) writev$auto(r0, &(0x7f0000000100)={0x0, 0x5}, 0x3) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) timer_create$auto(0x3, 0x0, 0x0) syz_clone(0xd83a4380, 0x0, 0x3a, 0x0, 0x0, 0x0) acct$auto(0x0) mmap$auto(0x0, 0x20009, 0x4000000000db, 0xeb1, 0x400, 0x8000) socket(0xf, 0x1, 0x4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk\x00', 0x100, 0x0) keyctl$auto(0x5, 0xfffffffb, 0x0, 0xee00, 0x7) clone$auto(0x1, 0x3, 0xffffffffffffffff, 0x0, 0x80) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mkdir$auto(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x8cd) rmdir$auto(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00') socket(0x1e, 0x2, 0x0) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/pagemap\x00', 0x60002, 0x0) read$auto(r1, 0x0, 0x39b8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/inode-nr\x00', 0x2, 0x0) sendfile$auto(r2, r2, 0x0, 0x7fffe000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x182b02, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/security/tomoyo/manager\x00', 0x82a02, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/firmware/acpi/hotplug/force_remove\x00', 0x2062, 0x0) kernel console output (not intermixed with test programs): T7083] netlink: 'syz.3.241': attribute type 11 has an invalid length. [ 166.715313][ T7114] netlink: 330 bytes leftover after parsing attributes in process `syz.2.250'. [ 167.471539][ T7132] ima: policy update failed [ 167.477268][ T29] audit: type=1802 audit(1775495586.867:5): pid=7132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.255" res=0 errno=0 [ 169.533165][ T7146] kexec: Could not allocate control_code_buffer [ 171.156658][ T7199] FAULT_INJECTION: forcing a failure. [ 171.156658][ T7199] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 171.220967][ T7199] CPU: 0 UID: 0 PID: 7199 Comm: syz.3.268 Tainted: G L syzkaller #0 PREEMPT(full) [ 171.221033][ T7199] Tainted: [L]=SOFTLOCKUP [ 171.221044][ T7199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 171.221062][ T7199] Call Trace: [ 171.221072][ T7199] [ 171.221084][ T7199] dump_stack_lvl+0x100/0x190 [ 171.221139][ T7199] should_fail_ex.cold+0x5/0xa [ 171.221179][ T7199] _copy_from_user+0x2e/0xd0 [ 171.221222][ T7199] copy_msghdr_from_user+0x9f/0x4f0 [ 171.221268][ T7199] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 171.221337][ T7199] ? rcu_is_watching+0x12/0xc0 [ 171.221389][ T7199] ? ___sys_sendmsg+0x19d/0x1e0 [ 171.221428][ T7199] ? kfree+0x2ec/0x6b0 [ 171.221480][ T7199] ___sys_sendmsg+0x106/0x1e0 [ 171.221525][ T7199] ? __pfx____sys_sendmsg+0x10/0x10 [ 171.221614][ T7199] ? __pfx___might_resched+0x10/0x10 [ 171.221673][ T7199] __sys_sendmmsg+0x205/0x430 [ 171.221710][ T7199] ? __pfx___sys_sendmmsg+0x10/0x10 [ 171.221754][ T7199] ? __pfx_do_futex+0x10/0x10 [ 171.221818][ T7199] ? xfd_validate_state+0x129/0x190 [ 171.221876][ T7199] __x64_sys_sendmmsg+0x9c/0x100 [ 171.221909][ T7199] ? lockdep_hardirqs_on+0x78/0x100 [ 171.221943][ T7199] do_syscall_64+0x106/0xf80 [ 171.221976][ T7199] ? clear_bhb_loop+0x40/0x90 [ 171.222020][ T7199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.222053][ T7199] RIP: 0033:0x7f478799c819 [ 171.222079][ T7199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.222108][ T7199] RSP: 002b:00007f4785b93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 171.222137][ T7199] RAX: ffffffffffffffda RBX: 00007f4787c16360 RCX: 00007f478799c819 [ 171.222158][ T7199] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 171.222176][ T7199] RBP: 00007f4787a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 171.222195][ T7199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.222214][ T7199] R13: 00007f4787c163f8 R14: 00007f4787c16360 R15: 00007ffeca112868 [ 171.222256][ T7199] [ 172.071209][ T7215] FAULT_INJECTION: forcing a failure. [ 172.071209][ T7215] name failslab, interval 1, probability 0, space 0, times 0 [ 172.116578][ T7215] CPU: 1 UID: 0 PID: 7215 Comm: syz.3.271 Tainted: G L syzkaller #0 PREEMPT(full) [ 172.116631][ T7215] Tainted: [L]=SOFTLOCKUP [ 172.116642][ T7215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 172.116661][ T7215] Call Trace: [ 172.116672][ T7215] [ 172.116684][ T7215] dump_stack_lvl+0x100/0x190 [ 172.116746][ T7215] should_fail_ex.cold+0x5/0xa [ 172.116789][ T7215] should_failslab+0xc2/0x120 [ 172.116829][ T7215] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 172.116884][ T7215] ? alloc_empty_file+0x55/0x1c0 [ 172.116930][ T7215] ? __pfx_stack_trace_save+0x10/0x10 [ 172.116973][ T7215] alloc_empty_file+0x55/0x1c0 [ 172.117020][ T7215] path_openat+0xe8/0x31a0 [ 172.117056][ T7215] ? kasan_save_stack+0x3f/0x50 [ 172.117087][ T7215] ? kasan_save_stack+0x30/0x50 [ 172.117117][ T7215] ? kasan_save_track+0x14/0x30 [ 172.117147][ T7215] ? __kasan_slab_alloc+0x89/0x90 [ 172.117181][ T7215] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 172.117234][ T7215] ? do_getname+0x35/0x390 [ 172.117277][ T7215] ? do_sys_openat2+0xc5/0x1e0 [ 172.117324][ T7215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.117366][ T7215] ? __pfx_path_openat+0x10/0x10 [ 172.117420][ T7215] do_file_open+0x20e/0x430 [ 172.117461][ T7215] ? __pfx_do_file_open+0x10/0x10 [ 172.117538][ T7215] ? alloc_fd+0x476/0x790 [ 172.117580][ T7215] ? do_getname+0x191/0x390 [ 172.117630][ T7215] do_sys_openat2+0x10d/0x1e0 [ 172.117679][ T7215] ? __pfx_do_sys_openat2+0x10/0x10 [ 172.117743][ T7215] __x64_sys_openat+0x12d/0x210 [ 172.117793][ T7215] ? __pfx___x64_sys_openat+0x10/0x10 [ 172.117858][ T7215] do_syscall_64+0x106/0xf80 [ 172.117894][ T7215] ? clear_bhb_loop+0x40/0x90 [ 172.117936][ T7215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.117971][ T7215] RIP: 0033:0x7f478799c819 [ 172.117999][ T7215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.118031][ T7215] RSP: 002b:00007f4788774028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 172.118063][ T7215] RAX: ffffffffffffffda RBX: 00007f4787c15fa0 RCX: 00007f478799c819 [ 172.118086][ T7215] RDX: 0000000000038000 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 172.118107][ T7215] RBP: 00007f4787a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 172.118127][ T7215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.118146][ T7215] R13: 00007f4787c16038 R14: 00007f4787c15fa0 R15: 00007ffeca112868 [ 172.118189][ T7215] [ 174.441494][ T7259] netlink: 28 bytes leftover after parsing attributes in process `syz.2.275'. [ 178.160014][ T7324] FAULT_INJECTION: forcing a failure. [ 178.160014][ T7324] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.292231][ T7324] CPU: 1 UID: 0 PID: 7324 Comm: syz.1.298 Tainted: G L syzkaller #0 PREEMPT(full) [ 178.292280][ T7324] Tainted: [L]=SOFTLOCKUP [ 178.292291][ T7324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 178.292317][ T7324] Call Trace: [ 178.292328][ T7324] [ 178.292343][ T7324] dump_stack_lvl+0x100/0x190 [ 178.292399][ T7324] should_fail_ex.cold+0x5/0xa [ 178.292437][ T7324] _copy_from_user+0x2e/0xd0 [ 178.292481][ T7324] __do_sys_adjtimex+0x94/0x140 [ 178.292519][ T7324] ? __pfx___do_sys_adjtimex+0x10/0x10 [ 178.292558][ T7324] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 178.292626][ T7324] ? __pfx_ksys_write+0x10/0x10 [ 178.292661][ T7324] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 178.292706][ T7324] ? syscall_user_dispatch+0x76/0x130 [ 178.292761][ T7324] do_syscall_64+0x106/0xf80 [ 178.292793][ T7324] ? clear_bhb_loop+0x40/0x90 [ 178.292833][ T7324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.292874][ T7324] RIP: 0033:0x7f8142b9c819 [ 178.292900][ T7324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.292931][ T7324] RSP: 002b:00007f81439d8028 EFLAGS: 00000246 ORIG_RAX: 000000000000009f [ 178.292960][ T7324] RAX: ffffffffffffffda RBX: 00007f8142e16090 RCX: 00007f8142b9c819 [ 178.292980][ T7324] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 178.292998][ T7324] RBP: 00007f81439d8090 R08: 0000000000000000 R09: 0000000000000000 [ 178.293017][ T7324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.293036][ T7324] R13: 00007f8142e16128 R14: 00007f8142e16090 R15: 00007ffc92158f68 [ 178.293078][ T7324] [ 179.325922][ T7354] futex_wake_op: syz.1.306 tries to shift op by -2048; fix this program [ 182.274393][ T7364] [drm:drm_crtc_add_crc_entry] *ERROR* Overflow of CRC buffer, userspace reads too slow. [ 185.155336][ T7434] futex_wake_op: syz.2.319 tries to shift op by -2048; fix this program [ 185.328472][ T7434] futex_wake_op: syz.2.319 tries to shift op by -2048; fix this program [ 185.834993][ T7445] block2mtd: illegal erase size [ 187.203485][ T7468] netlink: 'syz.0.327': attribute type 11 has an invalid length. [ 187.234472][ T7468] netlink: 'syz.0.327': attribute type 11 has an invalid length. [ 187.275586][ T7468] netlink: 'syz.0.327': attribute type 11 has an invalid length. [ 190.141989][ T7526] input: f as /devices/virtual/input/input7 [ 190.535740][ T7526] zram: Removed device: zram0 [ 190.645395][ T7532] FAULT_INJECTION: forcing a failure. [ 190.645395][ T7532] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.707925][ T7532] CPU: 0 UID: 0 PID: 7532 Comm: syz.3.342 Tainted: G L syzkaller #0 PREEMPT(full) [ 190.707961][ T7532] Tainted: [L]=SOFTLOCKUP [ 190.707968][ T7532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 190.707982][ T7532] Call Trace: [ 190.707989][ T7532] [ 190.707998][ T7532] dump_stack_lvl+0x100/0x190 [ 190.708037][ T7532] should_fail_ex.cold+0x5/0xa [ 190.708065][ T7532] _copy_from_user+0x2e/0xd0 [ 190.708103][ T7532] copy_msghdr_from_user+0x9f/0x4f0 [ 190.708136][ T7532] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 190.708173][ T7532] ? __pfx__kstrtoull+0x10/0x10 [ 190.708218][ T7532] ___sys_sendmsg+0x106/0x1e0 [ 190.708250][ T7532] ? __pfx____sys_sendmsg+0x10/0x10 [ 190.708294][ T7532] ? find_held_lock+0x2b/0x80 [ 190.708335][ T7532] __sys_sendmmsg+0x205/0x430 [ 190.708361][ T7532] ? __pfx___sys_sendmmsg+0x10/0x10 [ 190.708407][ T7532] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 190.708445][ T7532] ? fput+0x79/0x100 [ 190.708473][ T7532] ? ksys_write+0x1ac/0x250 [ 190.708495][ T7532] ? __pfx_ksys_write+0x10/0x10 [ 190.708523][ T7532] __x64_sys_sendmmsg+0x9c/0x100 [ 190.708545][ T7532] ? lockdep_hardirqs_on+0x78/0x100 [ 190.708569][ T7532] do_syscall_64+0x106/0xf80 [ 190.708592][ T7532] ? clear_bhb_loop+0x40/0x90 [ 190.708620][ T7532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.708643][ T7532] RIP: 0033:0x7f478799c819 [ 190.708662][ T7532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.708683][ T7532] RSP: 002b:00007f4788774028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 190.708705][ T7532] RAX: ffffffffffffffda RBX: 00007f4787c15fa0 RCX: 00007f478799c819 [ 190.708720][ T7532] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 190.708733][ T7532] RBP: 00007f4788774090 R08: 0000000000000000 R09: 0000000000000000 [ 190.708746][ T7532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.708759][ T7532] R13: 00007f4787c16038 R14: 00007f4787c15fa0 R15: 00007ffeca112868 [ 190.708788][ T7532] [ 191.590090][ T7405] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 192.266696][ T7405] bt_warn_ratelimited: 55 callbacks suppressed [ 192.266715][ T7405] Bluetooth: hci2: unexpected event 0x3e length: 508 > 260 [ 192.273570][ T7405] Bluetooth: hci2: unexpected subevent 0x02 length: 507 > 260 [ 192.289092][ T7405] Bluetooth: hci2: Dropping invalid advertising data [ 192.296581][ T7405] Bluetooth: hci2: unknown advertising packet type: 0xe9 [ 192.296604][ T7405] Bluetooth: hci2: unknown advertising packet type: 0x07 [ 192.306067][ T7405] Bluetooth: hci2: Dropping invalid advertising data [ 192.320204][ T7405] Bluetooth: hci2: Malformed LE Event: 0x02 [ 194.227820][ T7570] process 'syz.0.351' launched ':,' with NULL argv: empty string added [ 194.459500][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.466072][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.093658][ T7578] FAULT_INJECTION: forcing a failure. [ 195.093658][ T7578] name failslab, interval 1, probability 0, space 0, times 0 [ 195.110543][ T7578] CPU: 1 UID: 0 PID: 7578 Comm: syz.2.353 Tainted: G L syzkaller #0 PREEMPT(full) [ 195.110591][ T7578] Tainted: [L]=SOFTLOCKUP [ 195.110602][ T7578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 195.110619][ T7578] Call Trace: [ 195.110629][ T7578] [ 195.110640][ T7578] dump_stack_lvl+0x100/0x190 [ 195.110696][ T7578] should_fail_ex.cold+0x5/0xa [ 195.110734][ T7578] should_failslab+0xc2/0x120 [ 195.110772][ T7578] __kmalloc_cache_noprof+0x7a/0x6f0 [ 195.110817][ T7578] ? sctp_datamsg_from_user+0x8e/0x1360 [ 195.110886][ T7578] sctp_datamsg_from_user+0x8e/0x1360 [ 195.110945][ T7578] ? mark_held_locks+0x40/0x70 [ 195.110996][ T7578] sctp_sendmsg_to_asoc+0xb1c/0x1c50 [ 195.111053][ T7578] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 195.111091][ T7578] ? do_raw_spin_lock+0x128/0x260 [ 195.111143][ T7578] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 195.111194][ T7578] ? __pfx_autoremove_wake_function+0x10/0x10 [ 195.111242][ T7578] ? sctp_sendmsg_check_sflags+0x176/0x360 [ 195.111282][ T7578] sctp_sendmsg+0x1185/0x22b0 [ 195.111337][ T7578] ? __pfx_sctp_sendmsg+0x10/0x10 [ 195.111379][ T7578] ? __lock_acquire+0x4a5/0x2630 [ 195.111428][ T7578] ? aa_sk_perm+0x309/0xaa0 [ 195.111477][ T7578] ? __pfx_aa_sk_perm+0x10/0x10 [ 195.111523][ T7578] ? __import_iovec+0x1d2/0x640 [ 195.111577][ T7578] ? __pfx_sctp_sendmsg+0x10/0x10 [ 195.111623][ T7578] inet_sendmsg+0x11c/0x140 [ 195.111669][ T7578] ____sys_sendmsg+0x98d/0xb70 [ 195.111709][ T7578] ? __pfx_inet_sendmsg+0x10/0x10 [ 195.111754][ T7578] ? __pfx_____sys_sendmsg+0x10/0x10 [ 195.111803][ T7578] ? __pfx__kstrtoull+0x10/0x10 [ 195.111869][ T7578] ___sys_sendmsg+0x190/0x1e0 [ 195.111916][ T7578] ? __pfx____sys_sendmsg+0x10/0x10 [ 195.111981][ T7578] ? find_held_lock+0x2b/0x80 [ 195.112040][ T7578] __sys_sendmmsg+0x205/0x430 [ 195.112079][ T7578] ? __pfx___sys_sendmmsg+0x10/0x10 [ 195.112125][ T7578] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 195.112181][ T7578] ? fput+0x79/0x100 [ 195.112222][ T7578] ? ksys_write+0x1ac/0x250 [ 195.112253][ T7578] ? __pfx_ksys_write+0x10/0x10 [ 195.112292][ T7578] __x64_sys_sendmmsg+0x9c/0x100 [ 195.112325][ T7578] ? lockdep_hardirqs_on+0x78/0x100 [ 195.112359][ T7578] do_syscall_64+0x106/0xf80 [ 195.112392][ T7578] ? clear_bhb_loop+0x40/0x90 [ 195.112433][ T7578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.112467][ T7578] RIP: 0033:0x7fbe9df9c819 [ 195.112493][ T7578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.112522][ T7578] RSP: 002b:00007fbe9ed81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 195.112552][ T7578] RAX: ffffffffffffffda RBX: 00007fbe9e215fa0 RCX: 00007fbe9df9c819 [ 195.112573][ T7578] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 195.112592][ T7578] RBP: 00007fbe9ed81090 R08: 0000000000000000 R09: 0000000000000000 [ 195.112610][ T7578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.112629][ T7578] R13: 00007fbe9e216038 R14: 00007fbe9e215fa0 R15: 00007ffeff9a3a48 [ 195.112672][ T7578] [ 195.717661][ T7580] vhci_hcd vhci_hcd.2: invalid port number 194 [ 195.751820][ T7580] vhci_hcd vhci_hcd.2: invalid port number 194 [ 195.789645][ T7580] kAFS: No cell specified [ 195.828837][ T7584] FAULT_INJECTION: forcing a failure. [ 195.828837][ T7584] name failslab, interval 1, probability 0, space 0, times 0 [ 195.880864][ T7584] CPU: 0 UID: 0 PID: 7584 Comm: syz.1.354 Tainted: G L syzkaller #0 PREEMPT(full) [ 195.880918][ T7584] Tainted: [L]=SOFTLOCKUP [ 195.880929][ T7584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 195.880948][ T7584] Call Trace: [ 195.880959][ T7584] [ 195.880971][ T7584] dump_stack_lvl+0x100/0x190 [ 195.881036][ T7584] should_fail_ex.cold+0x5/0xa [ 195.881079][ T7584] should_failslab+0xc2/0x120 [ 195.881116][ T7584] __kmalloc_cache_noprof+0x7a/0x6f0 [ 195.881163][ T7584] ? resv_map_alloc+0x46/0x400 [ 195.881203][ T7584] resv_map_alloc+0x46/0x400 [ 195.881238][ T7584] hugetlbfs_get_inode+0x2fe/0x750 [ 195.881284][ T7584] hugetlb_file_setup+0x15b/0x5b0 [ 195.881333][ T7584] ksys_mmap_pgoff+0x232/0x650 [ 195.881373][ T7584] ? __x64_sys_futex+0x358/0x4d0 [ 195.881421][ T7584] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 195.881460][ T7584] ? xfd_validate_state+0x129/0x190 [ 195.881519][ T7584] __x64_sys_mmap+0x125/0x190 [ 195.881576][ T7584] do_syscall_64+0x106/0xf80 [ 195.881611][ T7584] ? clear_bhb_loop+0x40/0x90 [ 195.881653][ T7584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.881689][ T7584] RIP: 0033:0x7f8142b9c819 [ 195.881716][ T7584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.881747][ T7584] RSP: 002b:00007f81439f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 195.881780][ T7584] RAX: ffffffffffffffda RBX: 00007f8142e15fa0 RCX: 00007f8142b9c819 [ 195.881801][ T7584] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 195.881821][ T7584] RBP: 00007f8142c32c91 R08: 0000000000000401 R09: 0000300000000000 [ 195.881841][ T7584] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 195.881861][ T7584] R13: 00007f8142e16038 R14: 00007f8142e15fa0 R15: 00007ffc92158f68 [ 195.881905][ T7584] [ 196.413245][ T7587] netlink: 334 bytes leftover after parsing attributes in process `syz.0.357'. [ 196.964972][ T7598] bridge0: port 3(syz_tun) entered blocking state [ 197.022197][ T7598] bridge0: port 3(syz_tun) entered disabled state [ 197.056151][ T7598] syz_tun: entered allmulticast mode [ 197.081738][ T7598] syz_tun: entered promiscuous mode [ 197.088128][ T7598] bridge0: port 3(syz_tun) entered blocking state [ 197.094781][ T7598] bridge0: port 3(syz_tun) entered forwarding state [ 197.711896][ T7613] FAULT_INJECTION: forcing a failure. [ 197.711896][ T7613] name failslab, interval 1, probability 0, space 0, times 0 [ 197.726968][ T7613] CPU: 0 UID: 0 PID: 7613 Comm: syz.0.364 Tainted: G L syzkaller #0 PREEMPT(full) [ 197.727018][ T7613] Tainted: [L]=SOFTLOCKUP [ 197.727029][ T7613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 197.727046][ T7613] Call Trace: [ 197.727056][ T7613] [ 197.727067][ T7613] dump_stack_lvl+0x100/0x190 [ 197.727123][ T7613] should_fail_ex.cold+0x5/0xa [ 197.727162][ T7613] should_failslab+0xc2/0x120 [ 197.727199][ T7613] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 197.727253][ T7613] ? __alloc_skb+0x140/0x710 [ 197.727312][ T7613] __alloc_skb+0x140/0x710 [ 197.727360][ T7613] ? __alloc_skb+0x5b7/0x710 [ 197.727411][ T7613] ? __pfx___alloc_skb+0x10/0x10 [ 197.727475][ T7613] _sctp_make_chunk+0x51/0x270 [ 197.727531][ T7613] sctp_make_datafrag_empty+0x14e/0x230 [ 197.727588][ T7613] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 197.727657][ T7613] sctp_datamsg_from_user+0x5ea/0x1360 [ 197.727728][ T7613] sctp_sendmsg_to_asoc+0xb1c/0x1c50 [ 197.727785][ T7613] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 197.727823][ T7613] ? do_raw_spin_lock+0x128/0x260 [ 197.727884][ T7613] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 197.727935][ T7613] ? __pfx_autoremove_wake_function+0x10/0x10 [ 197.727986][ T7613] ? sctp_sendmsg_check_sflags+0x176/0x360 [ 197.728027][ T7613] sctp_sendmsg+0x1185/0x22b0 [ 197.728082][ T7613] ? __pfx_sctp_sendmsg+0x10/0x10 [ 197.728124][ T7613] ? __lock_acquire+0x4a5/0x2630 [ 197.728181][ T7613] ? aa_sk_perm+0x309/0xaa0 [ 197.728229][ T7613] ? __pfx_aa_sk_perm+0x10/0x10 [ 197.728275][ T7613] ? __import_iovec+0x1d2/0x640 [ 197.728324][ T7613] ? __pfx_sctp_sendmsg+0x10/0x10 [ 197.728370][ T7613] inet_sendmsg+0x11c/0x140 [ 197.728416][ T7613] ____sys_sendmsg+0x98d/0xb70 [ 197.728456][ T7613] ? __pfx_inet_sendmsg+0x10/0x10 [ 197.728501][ T7613] ? __pfx_____sys_sendmsg+0x10/0x10 [ 197.728550][ T7613] ? __pfx__kstrtoull+0x10/0x10 [ 197.728611][ T7613] ___sys_sendmsg+0x190/0x1e0 [ 197.728658][ T7613] ? __pfx____sys_sendmsg+0x10/0x10 [ 197.728722][ T7613] ? find_held_lock+0x2b/0x80 [ 197.728782][ T7613] __sys_sendmmsg+0x205/0x430 [ 197.728820][ T7613] ? __pfx___sys_sendmmsg+0x10/0x10 [ 197.728874][ T7613] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 197.728930][ T7613] ? fput+0x79/0x100 [ 197.728970][ T7613] ? ksys_write+0x1ac/0x250 [ 197.729002][ T7613] ? __pfx_ksys_write+0x10/0x10 [ 197.729042][ T7613] __x64_sys_sendmmsg+0x9c/0x100 [ 197.729075][ T7613] ? lockdep_hardirqs_on+0x78/0x100 [ 197.729109][ T7613] do_syscall_64+0x106/0xf80 [ 197.729141][ T7613] ? clear_bhb_loop+0x40/0x90 [ 197.729182][ T7613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.729216][ T7613] RIP: 0033:0x7f84e2d9c819 [ 197.729242][ T7613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.729271][ T7613] RSP: 002b:00007f84e3bc4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 197.729301][ T7613] RAX: ffffffffffffffda RBX: 00007f84e3015fa0 RCX: 00007f84e2d9c819 [ 197.729321][ T7613] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 197.729340][ T7613] RBP: 00007f84e3bc4090 R08: 0000000000000000 R09: 0000000000000000 [ 197.729359][ T7613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.729377][ T7613] R13: 00007f84e3016038 R14: 00007f84e3015fa0 R15: 00007ffd71ac94c8 [ 197.729421][ T7613] [ 198.402375][ T7621] zswap: compressor not available [ 199.967289][ T7405] Bluetooth: hci1: Malformed HCI Event [ 200.059769][ T7643] bond0: invalid ARP target specified [ 200.118208][ T7643] netlink: 28 bytes leftover after parsing attributes in process `syz.0.370'. [ 200.137351][ T7643] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.155545][ T7643] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.191662][ T7643] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.199344][ T7643] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.945820][ T7713] smpboot: CPU 1 is now offline [ 202.983760][ T7722] FAULT_INJECTION: forcing a failure. [ 202.983760][ T7722] name failslab, interval 1, probability 0, space 0, times 0 [ 203.309656][ T7722] CPU: 0 UID: 0 PID: 7722 Comm: syz.0.390 Tainted: G L syzkaller #0 PREEMPT(full) [ 203.309692][ T7722] Tainted: [L]=SOFTLOCKUP [ 203.309700][ T7722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 203.309714][ T7722] Call Trace: [ 203.309721][ T7722] [ 203.309729][ T7722] dump_stack_lvl+0x100/0x190 [ 203.309768][ T7722] should_fail_ex.cold+0x5/0xa [ 203.309796][ T7722] ? lsm_blob_alloc+0x68/0x90 [ 203.309830][ T7722] should_failslab+0xc2/0x120 [ 203.309856][ T7722] __kmalloc_noprof+0xe0/0x850 [ 203.309892][ T7722] ? trace_kmalloc+0x101/0x130 [ 203.309922][ T7722] lsm_blob_alloc+0x68/0x90 [ 203.309958][ T7722] security_sk_alloc+0x2d/0x290 [ 203.309992][ T7722] sk_prot_alloc+0x12a/0x2a0 [ 203.310028][ T7722] sk_alloc+0x36/0xe80 [ 203.310077][ T7722] __netlink_create+0x5e/0x2c0 [ 203.310109][ T7722] ? __wake_up+0x3f/0x60 [ 203.310155][ T7722] netlink_create+0x293/0x610 [ 203.310192][ T7722] ? __pfx_genl_bind+0x10/0x10 [ 203.310222][ T7722] ? __pfx_genl_unbind+0x10/0x10 [ 203.310247][ T7722] ? __pfx_genl_release+0x10/0x10 [ 203.310277][ T7722] __sock_create+0x339/0x860 [ 203.310311][ T7722] __sys_socket+0x14d/0x260 [ 203.310341][ T7722] ? exc_page_fault+0x6f/0xd0 [ 203.310367][ T7722] ? __pfx___sys_socket+0x10/0x10 [ 203.310401][ T7722] ? do_user_addr_fault+0x8d6/0x12f0 [ 203.310427][ T7722] __x64_sys_socket+0x72/0xb0 [ 203.310457][ T7722] ? lockdep_hardirqs_on+0x78/0x100 [ 203.310487][ T7722] do_syscall_64+0x106/0xf80 [ 203.310510][ T7722] ? clear_bhb_loop+0x40/0x90 [ 203.310538][ T7722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.310561][ T7722] RIP: 0033:0x7f84e2d9e087 [ 203.310591][ T7722] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.310612][ T7722] RSP: 002b:00007f84e3b80f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 203.310633][ T7722] RAX: ffffffffffffffda RBX: 00007f84e3016180 RCX: 00007f84e2d9e087 [ 203.310647][ T7722] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 203.310660][ T7722] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 203.310673][ T7722] R10: 0000200000000040 R11: 0000000000000286 R12: 0000000000000000 [ 203.310686][ T7722] R13: 00007f84e3016218 R14: 00007f84e3016180 R15: 00007ffd71ac94c8 [ 203.310714][ T7722] [ 204.159075][ T7734] can: request_module (can-proto-5) failed. [ 205.526743][ T7773] FAULT_INJECTION: forcing a failure. [ 205.526743][ T7773] name failslab, interval 1, probability 0, space 0, times 0 [ 205.662719][ T7773] CPU: 0 UID: 0 PID: 7773 Comm: syz.1.398 Tainted: G L syzkaller #0 PREEMPT(full) [ 205.662757][ T7773] Tainted: [L]=SOFTLOCKUP [ 205.662765][ T7773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 205.662778][ T7773] Call Trace: [ 205.662786][ T7773] [ 205.662795][ T7773] dump_stack_lvl+0x100/0x190 [ 205.662838][ T7773] should_fail_ex.cold+0x5/0xa [ 205.662867][ T7773] should_failslab+0xc2/0x120 [ 205.662894][ T7773] __kmalloc_cache_noprof+0x7a/0x6f0 [ 205.662927][ T7773] ? vidtv_psi_nit_table_init+0x5b/0x5f0 [ 205.662974][ T7773] vidtv_psi_nit_table_init+0x5b/0x5f0 [ 205.663012][ T7773] ? kasan_save_track+0x14/0x30 [ 205.663037][ T7773] vidtv_channel_si_init+0xcd0/0x18d0 [ 205.663071][ T7773] vidtv_mux_init+0x526/0xbf0 [ 205.663106][ T7773] vidtv_start_feed+0x33e/0x4c0 [ 205.663138][ T7773] ? __pfx_vidtv_start_feed+0x10/0x10 [ 205.663172][ T7773] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 205.663211][ T7773] ? mark_held_locks+0x40/0x70 [ 205.663248][ T7773] ? __pfx_vidtv_start_feed+0x10/0x10 [ 205.663280][ T7773] dmx_ts_feed_start_filtering+0xf6/0x220 [ 205.663319][ T7773] dvb_dmxdev_start_feed+0x273/0x3f0 [ 205.663352][ T7773] dvb_dmxdev_filter_start+0x1b6/0xdd0 [ 205.663386][ T7773] ? dvb_dmxdev_add_pid+0x2a1/0x380 [ 205.663420][ T7773] dvb_demux_do_ioctl+0xe64/0x1200 [ 205.663453][ T7773] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 205.663490][ T7773] dvb_usercopy+0x167/0x340 [ 205.663515][ T7773] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 205.663548][ T7773] ? __pfx_dvb_usercopy+0x10/0x10 [ 205.663587][ T7773] ? __fget_files+0x21f/0x3d0 [ 205.663617][ T7773] dvb_demux_ioctl+0x29/0x40 [ 205.663643][ T7773] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 205.663671][ T7773] __x64_sys_ioctl+0x18e/0x210 [ 205.663711][ T7773] do_syscall_64+0x106/0xf80 [ 205.663735][ T7773] ? clear_bhb_loop+0x40/0x90 [ 205.663764][ T7773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.663789][ T7773] RIP: 0033:0x7f8142b9c819 [ 205.663808][ T7773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.663831][ T7773] RSP: 002b:00007f81439d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 205.663853][ T7773] RAX: ffffffffffffffda RBX: 00007f8142e16090 RCX: 00007f8142b9c819 [ 205.663869][ T7773] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000002 [ 205.663883][ T7773] RBP: 00007f8142c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 205.663897][ T7773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.663910][ T7773] R13: 00007f8142e16128 R14: 00007f8142e16090 R15: 00007ffc92158f68 [ 205.663941][ T7773] [ 206.201688][ T7769] zswap: compressor not available [ 207.492830][ T7796] netlink: 4 bytes leftover after parsing attributes in process `syz.1.404'. [ 210.529594][ T7838] ubi0: detaching mtd0 [ 210.614857][ T7838] ubi0: mtd0 is detached [ 212.342482][ T7873] nfs4: Unknown parameter 'ECH];^YىZL`~^g ' [ 212.727470][ T7878] bond0: invalid ARP target specified [ 215.910905][ T7935] nbd: must specify at least one socket [ 216.028699][ T7938] netlink: 326 bytes leftover after parsing attributes in process `syz.1.434'. [ 217.593491][ T7970] netlink: 25 bytes leftover after parsing attributes in process `syz.3.443'. [ 217.668472][ T7966] sd 0:0:1:0: PR command failed: 1026 [ 217.695271][ T7966] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 217.749377][ T7966] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 218.460138][ T7978] zswap: compressor not available [ 218.739584][ T7405] Bluetooth: hci3: unexpected event 0x07 length: 435 > 255 [ 219.446566][ T8004] netlink: 'syz.2.453': attribute type 11 has an invalid length. [ 219.551242][ T8004] netlink: 'syz.2.453': attribute type 11 has an invalid length. [ 219.583825][ T8004] netlink: 'syz.2.453': attribute type 11 has an invalid length. [ 219.609465][ T8004] netlink: 'syz.2.453': attribute type 11 has an invalid length. [ 221.090864][ T7405] Bluetooth: hci1: unexpected event 0x01 length: 435 > 1 [ 222.202136][ T8044] Invalid ELF header magic: != ELF [ 223.412694][ T8070] input:  as /devices/virtual/input/input8 [ 223.644104][ T8072] netlink: 16 bytes leftover after parsing attributes in process `syz.0.465'. [ 223.949857][ T8083] netlink: 'syz.3.466': attribute type 11 has an invalid length. [ 224.059566][ T8083] netlink: 'syz.3.466': attribute type 11 has an invalid length. [ 224.337757][ T8083] netlink: 'syz.3.466': attribute type 11 has an invalid length. [ 224.501173][ T8083] netlink: 'syz.3.466': attribute type 11 has an invalid length. [ 224.801105][ T8110] netlink: 334 bytes leftover after parsing attributes in process `syz.0.468'. [ 224.929092][ T8080] FAULT_INJECTION: forcing a failure. [ 224.929092][ T8080] name failslab, interval 1, probability 0, space 0, times 0 [ 225.240478][ T8080] CPU: 0 UID: 0 PID: 8080 Comm: syz.1.467 Tainted: G L syzkaller #0 PREEMPT(full) [ 225.240516][ T8080] Tainted: [L]=SOFTLOCKUP [ 225.240524][ T8080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 225.240539][ T8080] Call Trace: [ 225.240547][ T8080] [ 225.240555][ T8080] dump_stack_lvl+0x100/0x190 [ 225.240597][ T8080] should_fail_ex.cold+0x5/0xa [ 225.240626][ T8080] should_failslab+0xc2/0x120 [ 225.240653][ T8080] __kmalloc_cache_noprof+0x7a/0x6f0 [ 225.240687][ T8080] ? landlock_init_hierarchy_log+0xa9/0x820 [ 225.240730][ T8080] landlock_init_hierarchy_log+0xa9/0x820 [ 225.240774][ T8080] landlock_merge_ruleset+0x67b/0x830 [ 225.240803][ T8080] ? prepare_creds+0x5ee/0x950 [ 225.240844][ T8080] __do_sys_landlock_restrict_self+0x2a6/0x9e0 [ 225.240884][ T8080] do_syscall_64+0x106/0xf80 [ 225.240909][ T8080] ? clear_bhb_loop+0x40/0x90 [ 225.240939][ T8080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.240964][ T8080] RIP: 0033:0x7f8142b9c819 [ 225.240983][ T8080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.241006][ T8080] RSP: 002b:00007f81439f9028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 225.241028][ T8080] RAX: ffffffffffffffda RBX: 00007f8142e15fa0 RCX: 00007f8142b9c819 [ 225.241044][ T8080] RDX: 0000000000000000 RSI: 000000000000000b RDI: 0000000000000009 [ 225.241057][ T8080] RBP: 00007f8142c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 225.241071][ T8080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.241085][ T8080] R13: 00007f8142e16038 R14: 00007f8142e15fa0 R15: 00007ffc92158f68 [ 225.241115][ T8080] [ 225.938366][ T8120] netlink: 28 bytes leftover after parsing attributes in process `syz.2.471'. [ 226.013350][ T8121] FAULT_INJECTION: forcing a failure. [ 226.013350][ T8121] name failslab, interval 1, probability 0, space 0, times 0 [ 226.030767][ T8121] CPU: 0 UID: 0 PID: 8121 Comm: syz.2.471 Tainted: G L syzkaller #0 PREEMPT(full) [ 226.030803][ T8121] Tainted: [L]=SOFTLOCKUP [ 226.030811][ T8121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 226.030825][ T8121] Call Trace: [ 226.030840][ T8121] [ 226.030849][ T8121] dump_stack_lvl+0x100/0x190 [ 226.030890][ T8121] should_fail_ex.cold+0x5/0xa [ 226.030919][ T8121] should_failslab+0xc2/0x120 [ 226.030946][ T8121] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 226.030984][ T8121] ? security_file_alloc+0x34/0x2c0 [ 226.031016][ T8121] ? trace_kmem_cache_alloc+0xf3/0x120 [ 226.031048][ T8121] security_file_alloc+0x34/0x2c0 [ 226.031082][ T8121] init_file+0x95/0x480 [ 226.031112][ T8121] alloc_empty_file+0x73/0x1c0 [ 226.031145][ T8121] dentry_open+0x46/0xd0 [ 226.031177][ T8121] pidfs_alloc_file+0x18f/0x290 [ 226.031200][ T8121] ? __pfx_pidfs_alloc_file+0x10/0x10 [ 226.031232][ T8121] pidfd_prepare+0x123/0x200 [ 226.031263][ T8121] __x64_sys_pidfd_open+0x105/0x1a0 [ 226.031299][ T8121] ? __pfx___x64_sys_pidfd_open+0x10/0x10 [ 226.031342][ T8121] do_syscall_64+0x106/0xf80 [ 226.031367][ T8121] ? clear_bhb_loop+0x40/0x90 [ 226.031396][ T8121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.031420][ T8121] RIP: 0033:0x7fbe9df9c819 [ 226.031439][ T8121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.031462][ T8121] RSP: 002b:00007fbe9c1f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b2 [ 226.031483][ T8121] RAX: ffffffffffffffda RBX: 00007fbe9e216090 RCX: 00007fbe9df9c819 [ 226.031499][ T8121] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 226.031513][ T8121] RBP: 00007fbe9e032c91 R08: 0000000000000000 R09: 0000000000000000 [ 226.031527][ T8121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.031542][ T8121] R13: 00007fbe9e216128 R14: 00007fbe9e216090 R15: 00007ffeff9a3a48 [ 226.031572][ T8121] [ 226.988561][ T8120] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.032785][ T8120] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.167022][ T8120] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.240673][ T8120] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.127693][ T8138] Unable to find swap-space signature [ 229.071237][ T8150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.478'. [ 230.342211][ T8154] syz.1.478 (8154) used greatest stack depth: 19672 bytes left [ 230.962265][ T8189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.487'. [ 231.405426][ T8187] futex_wake_op: syz.1.485 tries to shift op by -2048; fix this program [ 233.975655][ T8220] FAULT_INJECTION: forcing a failure. [ 233.975655][ T8220] name failslab, interval 1, probability 0, space 0, times 0 [ 234.080502][ T8220] CPU: 0 UID: 0 PID: 8220 Comm: syz.3.494 Tainted: G L syzkaller #0 PREEMPT(full) [ 234.080541][ T8220] Tainted: [L]=SOFTLOCKUP [ 234.080549][ T8220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 234.080563][ T8220] Call Trace: [ 234.080571][ T8220] [ 234.080579][ T8220] dump_stack_lvl+0x100/0x190 [ 234.080621][ T8220] should_fail_ex.cold+0x5/0xa [ 234.080650][ T8220] should_failslab+0xc2/0x120 [ 234.080677][ T8220] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 234.080717][ T8220] ? shmem_alloc_inode+0x25/0x50 [ 234.080748][ T8220] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 234.080779][ T8220] shmem_alloc_inode+0x25/0x50 [ 234.080807][ T8220] alloc_inode+0x68/0x250 [ 234.080841][ T8220] new_inode+0x22/0x1c0 [ 234.080872][ T8220] ? trace_kmem_cache_alloc+0xf3/0x120 [ 234.080902][ T8220] shmem_get_inode+0x212/0x1040 [ 234.080939][ T8220] ? __pfx_shmem_get_inode+0x10/0x10 [ 234.080972][ T8220] ? rcu_is_watching+0x12/0xc0 [ 234.081009][ T8220] ? percpu_counter_add_batch+0xb9/0x230 [ 234.081049][ T8220] __shmem_file_setup+0x3ac/0x490 [ 234.081085][ T8220] ? __pfx___shmem_file_setup+0x10/0x10 [ 234.081124][ T8220] ? vm_area_alloc+0x1f/0x160 [ 234.081162][ T8220] shmem_zero_setup+0x96/0x1b0 [ 234.081187][ T8220] __mmap_region+0x2198/0x29e0 [ 234.081239][ T8220] ? __pfx___mmap_region+0x10/0x10 [ 234.081283][ T8220] ? set_next_entity+0x11e/0x9c0 [ 234.081325][ T8220] ? __lock_acquire+0x4a5/0x2630 [ 234.081356][ T8220] ? update_cfs_rq_load_avg+0x51/0x550 [ 234.081395][ T8220] ? find_held_lock+0x2b/0x80 [ 234.081418][ T8220] ? finish_task_switch.isra.0+0x200/0xb80 [ 234.081445][ T8220] ? finish_task_switch.isra.0+0x200/0xb80 [ 234.081483][ T8220] ? trace_sched_exit_tp+0x13a/0x180 [ 234.081513][ T8220] ? __schedule+0x1000/0x6120 [ 234.081588][ T8220] ? rcu_is_watching+0x12/0xc0 [ 234.081626][ T8220] ? cap_capable+0x107/0x460 [ 234.081655][ T8220] mmap_region+0x180/0x3e0 [ 234.081699][ T8220] do_mmap+0xc63/0x12f0 [ 234.081732][ T8220] ? __pfx_do_mmap+0x10/0x10 [ 234.081760][ T8220] ? __pfx_down_write_killable+0x10/0x10 [ 234.081796][ T8220] vm_mmap_pgoff+0x29e/0x470 [ 234.081830][ T8220] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 234.081860][ T8220] ? do_futex+0x192/0x350 [ 234.081893][ T8220] ? __pfx_do_futex+0x10/0x10 [ 234.081931][ T8220] ksys_mmap_pgoff+0xe1/0x650 [ 234.081958][ T8220] ? __x64_sys_futex+0x34f/0x4d0 [ 234.081989][ T8220] ? __x64_sys_futex+0x358/0x4d0 [ 234.082022][ T8220] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 234.082050][ T8220] ? xfd_validate_state+0x129/0x190 [ 234.082091][ T8220] __x64_sys_mmap+0x125/0x190 [ 234.082131][ T8220] do_syscall_64+0x106/0xf80 [ 234.082155][ T8220] ? clear_bhb_loop+0x40/0x90 [ 234.082184][ T8220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.082208][ T8220] RIP: 0033:0x7f478799c819 [ 234.082233][ T8220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.082256][ T8220] RSP: 002b:00007f4788774028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 234.082279][ T8220] RAX: ffffffffffffffda RBX: 00007f4787c15fa0 RCX: 00007f478799c819 [ 234.082295][ T8220] RDX: 00004000000000df RSI: 0000000000000101 RDI: 0000000000000000 [ 234.082309][ T8220] RBP: 00007f4787a32c91 R08: 0000000200000401 R09: 0000000000008000 [ 234.082324][ T8220] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 234.082338][ T8220] R13: 00007f4787c16038 R14: 00007f4787c15fa0 R15: 00007ffeca112868 [ 234.082368][ T8220] [ 236.066394][ T7405] Bluetooth: hci3: unexpected event 0x33 length: 124 > 10 [ 241.782569][ T8345] can: request_module (can-proto-3) failed. [ 244.921540][ T8418] syz.0.527 uses obsolete (PF_INET,SOCK_PACKET) [ 247.857154][ T8461] netlink: 326 bytes leftover after parsing attributes in process `syz.3.534'. [ 248.327281][ T8469] netlink: 'syz.3.537': attribute type 11 has an invalid length. [ 248.360049][ T8469] netlink: 'syz.3.537': attribute type 11 has an invalid length. [ 248.401202][ T8469] netlink: 'syz.3.537': attribute type 11 has an invalid length. [ 248.440101][ T8469] netlink: 'syz.3.537': attribute type 11 has an invalid length. [ 249.803177][ C0] vcan0: j1939_tp_rxtimer: 0xffff888035a5ac00: rx timeout, send abort [ 249.813168][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888035a5ac00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 250.478121][ T8507] random: crng reseeded on system resumption [ 251.099065][ C0] vcan0: j1939_tp_rxtimer: 0xffff888035a59c00: rx timeout, send abort [ 251.107644][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888035a59c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 252.576293][ T29] audit: type=1800 audit(1775495671.967:6): pid=8539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.549" name="dbroot" dev="configfs" ino=23351 res=0 errno=0 [ 253.066605][ T8551] netlink: 'syz.3.551': attribute type 11 has an invalid length. [ 253.116620][ T8551] netlink: 'syz.3.551': attribute type 11 has an invalid length. [ 253.176800][ T8551] netlink: 'syz.3.551': attribute type 11 has an invalid length. [ 253.256906][ T8551] netlink: 'syz.3.551': attribute type 11 has an invalid length. [ 255.050539][ T8594] zswap: compressor not available [ 255.896469][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.908207][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.846163][ T8644] random: crng reseeded on system resumption [ 259.064279][ T8655] warning: `syz.0.571' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 259.147289][ T8661] block loop4: the capability attribute has been deprecated. [ 260.165146][ T8686] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 262.043682][ T8736] zswap: compressor not available [ 265.968328][ T8798] ubi0: attaching mtd0 [ 265.986710][ T8798] FAULT_INJECTION: forcing a failure. [ 265.986710][ T8798] name failslab, interval 1, probability 0, space 0, times 0 [ 266.055360][ T8798] CPU: 0 UID: 0 PID: 8798 Comm: syz.2.597 Tainted: G L syzkaller #0 PREEMPT(full) [ 266.055398][ T8798] Tainted: [L]=SOFTLOCKUP [ 266.055406][ T8798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 266.055423][ T8798] Call Trace: [ 266.055430][ T8798] [ 266.055439][ T8798] dump_stack_lvl+0x100/0x190 [ 266.055481][ T8798] should_fail_ex.cold+0x5/0xa [ 266.055511][ T8798] should_failslab+0xc2/0x120 [ 266.055538][ T8798] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 266.055577][ T8798] ? add_to_list+0xcb/0x600 [ 266.055601][ T8798] ? kernel_fpu_end+0x5f/0x80 [ 266.055623][ T8798] ? __local_bh_enable_ip+0x9e/0x120 [ 266.055655][ T8798] add_to_list+0xcb/0x600 [ 266.055681][ T8798] ubi_attach+0x3036/0x4d30 [ 266.055717][ T8798] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 266.055750][ T8798] ? ubi_msg+0x114/0x159 [ 266.055787][ T8798] ? __pfx_ubi_msg+0x10/0x10 [ 266.055828][ T8798] ? __pfx_ubi_attach+0x10/0x10 [ 266.055852][ T8798] ? lockdep_init_map_type+0x5c/0x250 [ 266.055889][ T8798] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 266.055919][ T8798] ? __vmalloc_node_noprof+0xad/0xf0 [ 266.055952][ T8798] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 266.055988][ T8798] ubi_attach_mtd_dev+0x139f/0x32a0 [ 266.056029][ T8798] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 266.056056][ T8798] ? __pfx_get_mtd_device+0x10/0x10 [ 266.056099][ T8798] ctrl_cdev_ioctl+0x36a/0x400 [ 266.056127][ T8798] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 266.056163][ T8798] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 266.056201][ T8798] __x64_sys_ioctl+0x18e/0x210 [ 266.056325][ T8798] do_syscall_64+0x106/0xf80 [ 266.056353][ T8798] ? clear_bhb_loop+0x40/0x90 [ 266.056387][ T8798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.056412][ T8798] RIP: 0033:0x7fbe9df9c819 [ 266.056435][ T8798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.056457][ T8798] RSP: 002b:00007fbe9c1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 266.056487][ T8798] RAX: ffffffffffffffda RBX: 00007fbe9e216090 RCX: 00007fbe9df9c819 [ 266.056503][ T8798] RDX: 0000000000000000 RSI: 0000000040186f40 RDI: 0000000000000008 [ 266.056517][ T8798] RBP: 00007fbe9e032c91 R08: 0000000000000000 R09: 0000000000000000 [ 266.056531][ T8798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 266.056545][ T8798] R13: 00007fbe9e216128 R14: 00007fbe9e216090 R15: 00007ffeff9a3a48 [ 266.056576][ T8798] [ 267.016026][ T8798] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -12 [ 267.190470][ T8816] kAFS: unparsable volume name [ 267.248722][ T8818] kAFS: unparsable volume name [ 267.957573][ T8827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.603'. [ 268.546243][ T8843] netlink: 186 bytes leftover after parsing attributes in process `syz.2.607'. [ 268.693904][ T8848] [U] ^\ [ 268.786822][ T8844] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input13 [ 269.396729][ T8844] input: failed to attach handler evdev to device input13, error: -4 [ 269.787599][ T8865] random: crng reseeded on system resumption [ 270.079733][ T8849] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input14 [ 270.896060][ T8880] Invalid ELF header magic: != ELF [ 271.394011][ T8889] syz.1.617 (8889): attempted to duplicate a private mapping with mremap. This is not supported. [ 271.873452][ T8879] kAFS: unparsable volume name [ 271.904456][ T8892] vhci_hcd vhci_hcd.2: invalid port number 135 [ 272.134912][ T8892] vhci_hcd vhci_hcd.2: invalid port number 135 [ 272.317049][ T8903] FAULT_INJECTION: forcing a failure. [ 272.317049][ T8903] name failslab, interval 1, probability 0, space 0, times 0 [ 272.330814][ T8902] hub 1-0:1.0: USB hub found [ 272.366716][ T8902] hub 1-0:1.0: 1 port detected [ 272.409730][ T8903] CPU: 0 UID: 0 PID: 8903 Comm: syz.2.620 Tainted: G L syzkaller #0 PREEMPT(full) [ 272.409780][ T8903] Tainted: [L]=SOFTLOCKUP [ 272.409789][ T8903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 272.409802][ T8903] Call Trace: [ 272.409810][ T8903] [ 272.409818][ T8903] dump_stack_lvl+0x100/0x190 [ 272.409860][ T8903] should_fail_ex.cold+0x5/0xa [ 272.409889][ T8903] should_failslab+0xc2/0x120 [ 272.409916][ T8903] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 272.409955][ T8903] ? alloc_empty_file+0x55/0x1c0 [ 272.409986][ T8903] ? __pfx_stack_trace_save+0x10/0x10 [ 272.410015][ T8903] alloc_empty_file+0x55/0x1c0 [ 272.410048][ T8903] path_openat+0xe8/0x31a0 [ 272.410072][ T8903] ? kasan_save_stack+0x3f/0x50 [ 272.410093][ T8903] ? kasan_save_stack+0x30/0x50 [ 272.410113][ T8903] ? kasan_save_track+0x14/0x30 [ 272.410134][ T8903] ? __kasan_slab_alloc+0x89/0x90 [ 272.410157][ T8903] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 272.410194][ T8903] ? do_getname+0x35/0x390 [ 272.410224][ T8903] ? do_sys_openat2+0xc5/0x1e0 [ 272.410257][ T8903] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.410285][ T8903] ? __pfx_path_openat+0x10/0x10 [ 272.410322][ T8903] do_file_open+0x20e/0x430 [ 272.410354][ T8903] ? __pfx_do_file_open+0x10/0x10 [ 272.410401][ T8903] ? alloc_fd+0x476/0x790 [ 272.410429][ T8903] ? do_getname+0x191/0x390 [ 272.410463][ T8903] do_sys_openat2+0x10d/0x1e0 [ 272.410497][ T8903] ? __pfx_do_sys_openat2+0x10/0x10 [ 272.410541][ T8903] __x64_sys_openat+0x12d/0x210 [ 272.410576][ T8903] ? __pfx___x64_sys_openat+0x10/0x10 [ 272.410621][ T8903] do_syscall_64+0x106/0xf80 [ 272.410645][ T8903] ? clear_bhb_loop+0x40/0x90 [ 272.410674][ T8903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.410698][ T8903] RIP: 0033:0x7fbe9df9c819 [ 272.410717][ T8903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.410740][ T8903] RSP: 002b:00007fbe9ed81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 272.410769][ T8903] RAX: ffffffffffffffda RBX: 00007fbe9e215fa0 RCX: 00007fbe9df9c819 [ 272.410785][ T8903] RDX: 000000000000003f RSI: 0000200000000000 RDI: ffffffffffffff9c [ 272.410800][ T8903] RBP: 00007fbe9e032c91 R08: 0000000000000000 R09: 0000000000000000 [ 272.410815][ T8903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 272.410829][ T8903] R13: 00007fbe9e216038 R14: 00007fbe9e215fa0 R15: 00007ffeff9a3a48 [ 272.410859][ T8903] [ 276.144095][ T8984] FAULT_INJECTION: forcing a failure. [ 276.144095][ T8984] name failslab, interval 1, probability 0, space 0, times 0 [ 276.245088][ T8984] CPU: 0 UID: 0 PID: 8984 Comm: syz.2.640 Tainted: G L syzkaller #0 PREEMPT(full) [ 276.245129][ T8984] Tainted: [L]=SOFTLOCKUP [ 276.245137][ T8984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 276.245150][ T8984] Call Trace: [ 276.245158][ T8984] [ 276.245166][ T8984] dump_stack_lvl+0x100/0x190 [ 276.245206][ T8984] should_fail_ex.cold+0x5/0xa [ 276.245234][ T8984] should_failslab+0xc2/0x120 [ 276.245261][ T8984] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 276.245299][ T8984] ? sock_alloc_inode+0x25/0x1c0 [ 276.245329][ T8984] ? __pfx_sock_alloc_inode+0x10/0x10 [ 276.245357][ T8984] sock_alloc_inode+0x25/0x1c0 [ 276.245383][ T8984] alloc_inode+0x68/0x250 [ 276.245416][ T8984] sock_alloc+0x44/0x280 [ 276.245438][ T8984] ? security_socket_create+0x7f/0x250 [ 276.245465][ T8984] __sock_create+0xc2/0x860 [ 276.245500][ T8984] udp_sock_create6+0xc7/0x6a0 [ 276.245525][ T8984] ? __pfx_udp_sock_create6+0x10/0x10 [ 276.245559][ T8984] ? crng_make_state+0x477/0x6c0 [ 276.245585][ T8984] ? lockdep_hardirqs_on+0x78/0x100 [ 276.245609][ T8984] ? crng_make_state+0x2b0/0x6c0 [ 276.245639][ T8984] rxrpc_open_socket+0x206/0x6b0 [ 276.245670][ T8984] ? __pfx_rxrpc_open_socket+0x10/0x10 [ 276.245715][ T8984] ? rcu_is_watching+0x12/0xc0 [ 276.245757][ T8984] rxrpc_lookup_local+0xac7/0x1220 [ 276.245793][ T8984] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 276.245829][ T8984] ? __local_bh_enable_ip+0x9e/0x120 [ 276.245859][ T8984] rxrpc_sendmsg+0x34a/0x680 [ 276.245897][ T8984] sock_write_iter+0x524/0x5a0 [ 276.245924][ T8984] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 276.245956][ T8984] ? __pfx_sock_write_iter+0x10/0x10 [ 276.245996][ T8984] ? bpf_lsm_file_permission+0x9/0x10 [ 276.246017][ T8984] ? security_file_permission+0x76/0x210 [ 276.246050][ T8984] ? rw_verify_area+0xce/0x6d0 [ 276.246087][ T8984] vfs_write+0x6ac/0x1070 [ 276.246110][ T8984] ? __pfx_sock_write_iter+0x10/0x10 [ 276.246141][ T8984] ? __pfx_vfs_write+0x10/0x10 [ 276.246161][ T8984] ? find_held_lock+0x2b/0x80 [ 276.246202][ T8984] ksys_write+0x1f8/0x250 [ 276.246224][ T8984] ? __pfx_ksys_write+0x10/0x10 [ 276.246255][ T8984] do_syscall_64+0x106/0xf80 [ 276.246278][ T8984] ? clear_bhb_loop+0x40/0x90 [ 276.246306][ T8984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.246329][ T8984] RIP: 0033:0x7fbe9df9c819 [ 276.246347][ T8984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.246368][ T8984] RSP: 002b:00007fbe9ed81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 276.246390][ T8984] RAX: ffffffffffffffda RBX: 00007fbe9e215fa0 RCX: 00007fbe9df9c819 [ 276.246404][ T8984] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000003 [ 276.246417][ T8984] RBP: 00007fbe9e032c91 R08: 0000000000000000 R09: 0000000000000000 [ 276.246430][ T8984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 276.246443][ T8984] R13: 00007fbe9e216038 R14: 00007fbe9e215fa0 R15: 00007ffeff9a3a48 [ 276.246473][ T8984] [ 276.246484][ T8984] socket: no more sockets [ 276.650532][ T8988] ima: policy update failed [ 276.721484][ T29] audit: type=1802 audit(1775496723.050:7): pid=8988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.641" res=0 errno=0 [ 277.157913][ T8996] netlink: 350 bytes leftover after parsing attributes in process `syz.1.643'. [ 277.397319][ T9001] netlink: 338 bytes leftover after parsing attributes in process `syz.3.644'. [ 277.847451][ T29] audit: type=1800 audit(1775496724.240:8): pid=9017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.648" name="lu_gp_id" dev="configfs" ino=25553 res=0 errno=0 [ 278.368039][ T9023] ovs_: entered promiscuous mode [ 278.399927][ T9024] vivid-007: ================= START STATUS ================= [ 278.441813][ T9027] netlink: 584 bytes leftover after parsing attributes in process `syz.1.650'. [ 278.475131][ T9024] vivid-007: Generate PTS: true [ 278.475190][ T9024] vivid-007: Generate SCR: true [ 278.475217][ T9024] tpg source WxH: 320x240 (Y'CbCr) [ 278.475243][ T9024] tpg field: 1 [ 278.475252][ T9024] tpg crop: (0,0)/320x240 [ 278.475267][ T9024] tpg compose: (0,0)/320x240 [ 278.475282][ T9024] tpg colorspace: 8 [ 278.475291][ T9024] tpg transfer function: 0/0 [ 278.475302][ T9024] tpg Y'CbCr encoding: 0/0 [ 278.475313][ T9024] tpg quantization: 0/0 [ 278.475324][ T9024] tpg RGB range: 0/2 [ 278.475335][ T9024] vivid-007: ================== END STATUS ================== [ 279.262741][ T9048] mmap: syz.1.655 (9048) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 279.681431][ T9045] FAULT_INJECTION: forcing a failure. [ 279.681431][ T9045] name failslab, interval 1, probability 0, space 0, times 0 [ 279.892917][ T9045] CPU: 0 UID: 0 PID: 9045 Comm: syz.3.653 Tainted: G L syzkaller #0 PREEMPT(full) [ 279.892953][ T9045] Tainted: [L]=SOFTLOCKUP [ 279.892961][ T9045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 279.892974][ T9045] Call Trace: [ 279.892981][ T9045] [ 279.892990][ T9045] dump_stack_lvl+0x100/0x190 [ 279.893029][ T9045] should_fail_ex.cold+0x5/0xa [ 279.893057][ T9045] should_failslab+0xc2/0x120 [ 279.893083][ T9045] __kvmalloc_node_noprof+0xfa/0xa00 [ 279.893105][ T9045] ? io_alloc_cache_init+0x38/0x170 [ 279.893131][ T9045] ? lockdep_init_map_type+0x5c/0x250 [ 279.893168][ T9045] io_alloc_cache_init+0x38/0x170 [ 279.893195][ T9045] io_uring_setup.cold+0x3cd/0x1d79 [ 279.893231][ T9045] ? ksys_write+0x190/0x250 [ 279.893255][ T9045] ? __pfx_io_uring_setup+0x10/0x10 [ 279.893292][ T9045] ? do_futex+0x192/0x350 [ 279.893330][ T9045] ? __pfx_do_futex+0x10/0x10 [ 279.893374][ T9045] ? xfd_validate_state+0x129/0x190 [ 279.893416][ T9045] __x64_sys_io_uring_setup+0xc2/0x170 [ 279.893453][ T9045] do_syscall_64+0x106/0xf80 [ 279.893477][ T9045] ? clear_bhb_loop+0x40/0x90 [ 279.893505][ T9045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.893528][ T9045] RIP: 0033:0x7f478799c819 [ 279.893546][ T9045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.893568][ T9045] RSP: 002b:00007f4785bf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 279.893589][ T9045] RAX: ffffffffffffffda RBX: 00007f4787c16090 RCX: 00007f478799c819 [ 279.893604][ T9045] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 279.893617][ T9045] RBP: 00007f4787a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 279.893630][ T9045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 279.893643][ T9045] R13: 00007f4787c16128 R14: 00007f4787c16090 R15: 00007ffeca112868 [ 279.893672][ T9045] [ 280.825502][ T9064] FAULT_INJECTION: forcing a failure. [ 280.825502][ T9064] name failslab, interval 1, probability 0, space 0, times 0 [ 280.870020][ T9064] CPU: 0 UID: 0 PID: 9064 Comm: syz.2.658 Tainted: G L syzkaller #0 PREEMPT(full) [ 280.870059][ T9064] Tainted: [L]=SOFTLOCKUP [ 280.870067][ T9064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 280.870081][ T9064] Call Trace: [ 280.870088][ T9064] [ 280.870097][ T9064] dump_stack_lvl+0x100/0x190 [ 280.870139][ T9064] should_fail_ex.cold+0x5/0xa [ 280.870168][ T9064] should_failslab+0xc2/0x120 [ 280.870195][ T9064] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 280.870243][ T9064] ? __pmd_alloc+0xbf/0x950 [ 280.870279][ T9064] __pmd_alloc+0xbf/0x950 [ 280.870306][ T9064] ? __pud_alloc+0x4fb/0x690 [ 280.870341][ T9064] __handle_mm_fault+0xa9e/0x2b60 [ 280.870381][ T9064] ? mt_find+0x45e/0x8e0 [ 280.870410][ T9064] ? __pfx___handle_mm_fault+0x10/0x10 [ 280.870443][ T9064] ? __pfx_mt_find+0x10/0x10 [ 280.870493][ T9064] handle_mm_fault+0x36d/0xa20 [ 280.870533][ T9064] __get_user_pages+0xf9c/0x34d0 [ 280.870573][ T9064] ? __pfx___get_user_pages+0x10/0x10 [ 280.870611][ T9064] get_user_pages_remote+0x3d2/0xb10 [ 280.870646][ T9064] ? __pfx_get_user_pages_remote+0x10/0x10 [ 280.870687][ T9064] get_arg_page+0xf4/0x310 [ 280.870723][ T9064] ? __pfx_get_arg_page+0x10/0x10 [ 280.870768][ T9064] copy_string_kernel+0x17d/0x500 [ 280.870807][ T9064] ? alloc_bprm+0x420/0x710 [ 280.870847][ T9064] do_execveat_common.isra.0+0x2e6/0x580 [ 280.870898][ T9064] __x64_sys_execve+0x93/0xd0 [ 280.870939][ T9064] do_syscall_64+0x106/0xf80 [ 280.870963][ T9064] ? clear_bhb_loop+0x40/0x90 [ 280.870992][ T9064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.871016][ T9064] RIP: 0033:0x7fbe9df9c819 [ 280.871035][ T9064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.871058][ T9064] RSP: 002b:00007fbe9c1f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 280.871080][ T9064] RAX: ffffffffffffffda RBX: 00007fbe9e216090 RCX: 00007fbe9df9c819 [ 280.871096][ T9064] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 280.871110][ T9064] RBP: 00007fbe9e032c91 R08: 0000000000000000 R09: 0000000000000000 [ 280.871124][ T9064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.871138][ T9064] R13: 00007fbe9e216128 R14: 00007fbe9e216090 R15: 00007ffeff9a3a48 [ 280.871168][ T9064] [ 281.501665][ T9076] netlink: 88 bytes leftover after parsing attributes in process `syz.3.660'. [ 281.998669][ T9092] netlink: 342 bytes leftover after parsing attributes in process `syz.0.664'. [ 282.163118][ T9093] netlink: 342 bytes leftover after parsing attributes in process `syz.0.664'. [ 282.431075][ T9099] FAULT_INJECTION: forcing a failure. [ 282.431075][ T9099] name failslab, interval 1, probability 0, space 0, times 0 [ 282.777918][ T9099] CPU: 0 UID: 0 PID: 9099 Comm: syz.3.663 Tainted: G L syzkaller #0 PREEMPT(full) [ 282.777955][ T9099] Tainted: [L]=SOFTLOCKUP [ 282.777963][ T9099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 282.777976][ T9099] Call Trace: [ 282.777984][ T9099] [ 282.777993][ T9099] dump_stack_lvl+0x100/0x190 [ 282.778034][ T9099] should_fail_ex.cold+0x5/0xa [ 282.778073][ T9099] should_failslab+0xc2/0x120 [ 282.778105][ T9099] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 282.778143][ T9099] ? hugetlbfs_alloc_inode+0x8c/0x1d0 [ 282.778175][ T9099] hugetlbfs_alloc_inode+0x8c/0x1d0 [ 282.778200][ T9099] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 282.778226][ T9099] alloc_inode+0x68/0x250 [ 282.778260][ T9099] new_inode+0x22/0x1c0 [ 282.778296][ T9099] hugetlbfs_get_inode+0x313/0x750 [ 282.778327][ T9099] hugetlb_file_setup+0x3cc/0x5b0 [ 282.778357][ T9099] newseg+0xabb/0xed0 [ 282.778394][ T9099] ? __pfx_newseg+0x10/0x10 [ 282.778425][ T9099] ? down_write+0x146/0x1f0 [ 282.778453][ T9099] ? ksys_write+0x190/0x250 [ 282.778475][ T9099] ? ksys_write+0x190/0x250 [ 282.778501][ T9099] ipcget+0xee/0xf50 [ 282.778533][ T9099] ? do_futex+0x192/0x350 [ 282.778564][ T9099] ? __pfx_do_futex+0x10/0x10 [ 282.778600][ T9099] ? __pfx_ipcget+0x10/0x10 [ 282.778633][ T9099] ? __x64_sys_futex+0x34f/0x4d0 [ 282.778663][ T9099] ? __x64_sys_futex+0x358/0x4d0 [ 282.778698][ T9099] __x64_sys_shmget+0x13b/0x1b0 [ 282.778732][ T9099] ? __pfx___x64_sys_shmget+0x10/0x10 [ 282.778773][ T9099] do_syscall_64+0x106/0xf80 [ 282.778796][ T9099] ? clear_bhb_loop+0x40/0x90 [ 282.778825][ T9099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.778848][ T9099] RIP: 0033:0x7f478799c819 [ 282.778866][ T9099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.778888][ T9099] RSP: 002b:00007f4785bb4028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 282.778909][ T9099] RAX: ffffffffffffffda RBX: 00007f4787c16270 RCX: 00007f478799c819 [ 282.778924][ T9099] RDX: 0000000079e56dc9 RSI: 0000000000000003 RDI: 0000000100000000 [ 282.778942][ T9099] RBP: 00007f4787a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 282.778956][ T9099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 282.778969][ T9099] R13: 00007f4787c16308 R14: 00007f4787c16270 R15: 00007ffeca112868 [ 282.778999][ T9099] [ 285.221167][ T9149] sd 0:0:1:0: PR command failed: 1026 [ 285.298797][ T9149] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 285.369210][ T9149] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 287.344835][ T9204] openvswitch: netlink: IP tunnel dst address not specified [ 289.545791][ T9236] bond0: no command found in slaves file - use +ifname or -ifname [ 289.917240][ T9243] netlink: 24 bytes leftover after parsing attributes in process `syz.0.694'. [ 290.455403][ T9240] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 290.569719][ T9240] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 290.648133][ T9240] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 290.753300][ T9240] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 290.773408][ T9258] netlink: 130 bytes leftover after parsing attributes in process `syz.1.692'. [ 291.768764][ T9279] netlink: 'syz.1.697': attribute type 11 has an invalid length. [ 291.795551][ T9279] netlink: 'syz.1.697': attribute type 11 has an invalid length. [ 291.861697][ T9279] netlink: 'syz.1.697': attribute type 11 has an invalid length. [ 291.896357][ T9279] netlink: 'syz.1.697': attribute type 11 has an invalid length. [ 292.050527][ T7405] Bluetooth: hci1: command 0x0c1a tx timeout [ 292.610528][ T7405] Bluetooth: hci2: command 0x0c1a tx timeout [ 292.692567][ T7405] Bluetooth: hci0: command 0x0c1a tx timeout [ 292.770598][ T7405] Bluetooth: hci3: command 0x0c1a tx timeout [ 293.256721][ T9308] FAULT_INJECTION: forcing a failure. [ 293.256721][ T9308] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 293.314846][ T9308] CPU: 0 UID: 0 PID: 9308 Comm: syz.1.706 Tainted: G L syzkaller #0 PREEMPT(full) [ 293.314885][ T9308] Tainted: [L]=SOFTLOCKUP [ 293.314893][ T9308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 293.314906][ T9308] Call Trace: [ 293.314914][ T9308] [ 293.314922][ T9308] dump_stack_lvl+0x100/0x190 [ 293.314964][ T9308] should_fail_ex.cold+0x5/0xa [ 293.314988][ T9308] ? prepare_alloc_pages+0x16d/0x5f0 [ 293.315021][ T9308] should_fail_alloc_page+0xeb/0x140 [ 293.315050][ T9308] prepare_alloc_pages+0x1f0/0x5f0 [ 293.315085][ T9308] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 293.315127][ T9308] ? __pfx_css_rstat_updated+0x10/0x10 [ 293.315166][ T9308] ? find_held_lock+0x2b/0x80 [ 293.315189][ T9308] ? rcu_read_unlock+0x17/0x60 [ 293.315218][ T9308] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 293.315257][ T9308] ? page_counter_charge+0x1d2/0x240 [ 293.315292][ T9308] ? rcu_is_watching+0x12/0xc0 [ 293.315330][ T9308] ? trace_mm_page_alloc+0x17a/0x1d0 [ 293.315369][ T9308] ? stack_trace_save+0x8e/0xc0 [ 293.315393][ T9308] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 293.315420][ T9308] ? policy_nodemask+0xed/0x4f0 [ 293.315449][ T9308] alloc_pages_mpol+0x1fb/0x550 [ 293.315477][ T9308] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 293.315502][ T9308] ? __x64_sys_modify_ldt+0xb1/0x170 [ 293.315527][ T9308] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.315560][ T9308] alloc_pages_noprof+0x136/0x390 [ 293.315589][ T9308] __pud_alloc+0x3b/0x690 [ 293.315621][ T9308] walk_to_pmd+0x357/0x4c0 [ 293.315654][ T9308] get_locked_pte+0x25/0xc0 [ 293.315695][ T9308] map_ldt_struct+0x3c1/0xa70 [ 293.315728][ T9308] ? __pfx_map_ldt_struct+0x10/0x10 [ 293.315753][ T9308] ? alloc_pages_noprof+0x238/0x390 [ 293.315786][ T9308] write_ldt+0x6d3/0xd40 [ 293.315816][ T9308] ? __pfx_write_ldt+0x10/0x10 [ 293.315842][ T9308] ? xfd_validate_state+0x129/0x190 [ 293.315886][ T9308] __x64_sys_modify_ldt+0xb1/0x170 [ 293.315913][ T9308] do_syscall_64+0x106/0xf80 [ 293.315938][ T9308] ? clear_bhb_loop+0x40/0x90 [ 293.315967][ T9308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.315992][ T9308] RIP: 0033:0x7f8142b9c819 [ 293.316012][ T9308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.316036][ T9308] RSP: 002b:00007f81439f9028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 293.316058][ T9308] RAX: ffffffffffffffda RBX: 00007f8142e15fa0 RCX: 00007f8142b9c819 [ 293.316074][ T9308] RDX: 0000000000000010 RSI: 00002000000001c0 RDI: 0000000000000001 [ 293.316089][ T9308] RBP: 00007f8142c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 293.316104][ T9308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 293.316118][ T9308] R13: 00007f8142e16038 R14: 00007f8142e15fa0 R15: 00007ffc92158f68 [ 293.316148][ T9308] [ 294.073791][ T29] audit: type=1800 audit(1775496740.300:9): pid=9308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.706" name="trace_marker" dev="tracefs" ino=1827 res=0 errno=0 [ 294.850525][ T7405] Bluetooth: hci1: command 0x0c1a tx timeout [ 294.880425][ T9298] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 295.139978][ T9298] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 295.150719][ T9298] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 295.190177][ T9298] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 296.037697][ T9341] netlink: 'syz.3.714': attribute type 11 has an invalid length. [ 296.122552][ T9341] netlink: 'syz.3.714': attribute type 11 has an invalid length. [ 296.240601][ T9341] netlink: 'syz.3.714': attribute type 11 has an invalid length. [ 296.353751][ T9341] netlink: 'syz.3.714': attribute type 11 has an invalid length. [ 297.014605][ T7405] Bluetooth: hci2: command 0x0c1a tx timeout [ 297.175943][ T7405] Bluetooth: hci3: command 0x0c1a tx timeout [ 297.182841][ T7405] Bluetooth: hci0: command 0x0c1a tx timeout [ 297.637077][ T9354] FAULT_INJECTION: forcing a failure. [ 297.637077][ T9354] name failslab, interval 1, probability 0, space 0, times 0 [ 297.745739][ T9354] CPU: 0 UID: 0 PID: 9354 Comm: syz.2.717 Tainted: G L syzkaller #0 PREEMPT(full) [ 297.745777][ T9354] Tainted: [L]=SOFTLOCKUP [ 297.745786][ T9354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 297.745800][ T9354] Call Trace: [ 297.745808][ T9354] [ 297.745816][ T9354] dump_stack_lvl+0x100/0x190 [ 297.745859][ T9354] should_fail_ex.cold+0x5/0xa [ 297.745888][ T9354] ? tomoyo_realpath_from_path+0xb6/0x690 [ 297.745925][ T9354] should_failslab+0xc2/0x120 [ 297.745952][ T9354] __kmalloc_noprof+0xe0/0x850 [ 297.745998][ T9354] tomoyo_realpath_from_path+0xb6/0x690 [ 297.746041][ T9354] tomoyo_check_open_permission+0x2af/0x3c0 [ 297.746074][ T9354] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 297.746142][ T9354] ? lock_acquire+0x1cf/0x380 [ 297.746175][ T9354] ? find_held_lock+0x2b/0x80 [ 297.746206][ T9354] tomoyo_file_open+0x6b/0x90 [ 297.746230][ T9354] security_file_open+0xb5/0x1e0 [ 297.746268][ T9354] do_dentry_open+0x5aa/0x1660 [ 297.746303][ T9354] vfs_open+0x82/0x3f0 [ 297.746339][ T9354] path_openat+0x208c/0x31a0 [ 297.746375][ T9354] ? __pfx_path_openat+0x10/0x10 [ 297.746413][ T9354] do_file_open+0x20e/0x430 [ 297.746442][ T9354] ? __pfx_do_file_open+0x10/0x10 [ 297.746479][ T9354] ? __pfx_kfree_link+0x10/0x10 [ 297.746524][ T9354] ? alloc_fd+0x476/0x790 [ 297.746552][ T9354] ? do_getname+0x191/0x390 [ 297.746587][ T9354] do_sys_openat2+0x10d/0x1e0 [ 297.746621][ T9354] ? __pfx_do_sys_openat2+0x10/0x10 [ 297.746666][ T9354] __x64_sys_openat+0x12d/0x210 [ 297.746701][ T9354] ? __pfx___x64_sys_openat+0x10/0x10 [ 297.746747][ T9354] do_syscall_64+0x106/0xf80 [ 297.746772][ T9354] ? clear_bhb_loop+0x40/0x90 [ 297.746801][ T9354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.746826][ T9354] RIP: 0033:0x7fbe9df9c819 [ 297.746845][ T9354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 297.746869][ T9354] RSP: 002b:00007fbe9ed81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 297.746893][ T9354] RAX: ffffffffffffffda RBX: 00007fbe9e215fa0 RCX: 00007fbe9df9c819 [ 297.746908][ T9354] RDX: 0000000000000802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 297.746924][ T9354] RBP: 00007fbe9e032c91 R08: 0000000000000000 R09: 0000000000000000 [ 297.746938][ T9354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 297.746952][ T9354] R13: 00007fbe9e216038 R14: 00007fbe9e215fa0 R15: 00007ffeff9a3a48 [ 297.746983][ T9354] [ 298.309920][ T9370] zswap: compressor not available [ 299.174106][ T9354] ERROR: Out of memory at tomoyo_realpath_from_path. [ 299.860498][ T9412] netlink: 16 bytes leftover after parsing attributes in process `syz.1.729'. [ 300.475651][ T9427] zswap: compressor not available [ 300.640249][ T9439] netlink: 342 bytes leftover after parsing attributes in process `syz.0.735'. [ 301.180400][ T9448] zswap: compressor not available [ 301.831967][ T9470] FAULT_INJECTION: forcing a failure. [ 301.831967][ T9470] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 301.970088][ T9470] CPU: 0 UID: 0 PID: 9470 Comm: syz.3.747 Tainted: G L syzkaller #0 PREEMPT(full) [ 301.970125][ T9470] Tainted: [L]=SOFTLOCKUP [ 301.970133][ T9470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 301.970147][ T9470] Call Trace: [ 301.970154][ T9470] [ 301.970162][ T9470] dump_stack_lvl+0x100/0x190 [ 301.970202][ T9470] should_fail_ex.cold+0x5/0xa [ 301.970230][ T9470] _copy_from_user+0x2e/0xd0 [ 301.970262][ T9470] get_timespec64+0x8b/0x1b0 [ 301.970289][ T9470] ? __pfx_get_timespec64+0x10/0x10 [ 301.970314][ T9470] ? ktime_get+0x200/0x300 [ 301.970346][ T9470] __x64_sys_futex+0x21a/0x4d0 [ 301.970382][ T9470] ? __pfx___x64_sys_futex+0x10/0x10 [ 301.970425][ T9470] do_syscall_64+0x106/0xf80 [ 301.970449][ T9470] ? clear_bhb_loop+0x40/0x90 [ 301.970477][ T9470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.970501][ T9470] RIP: 0033:0x7f478799c819 [ 301.970520][ T9470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.970543][ T9470] RSP: 002b:00007ffeca1129c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 301.970565][ T9470] RAX: ffffffffffffffda RBX: 0000000000049aee RCX: 00007f478799c819 [ 301.970580][ T9470] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4787c15fac [ 301.970594][ T9470] RBP: 0000000000000032 R08: 0000000000000000 R09: 0000000000000000 [ 301.970607][ T9470] R10: 00007ffeca112ad0 R11: 0000000000000246 R12: 00007ffeca112af0 [ 301.970622][ T9470] R13: 00007f4787c15fac R14: 0000000000049b20 R15: 00007ffeca112ad0 [ 301.970651][ T9470] [ 303.515391][ T9363] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 303.515425][ T9363] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 303.532362][ T9363] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 303.532407][ T9363] Bluetooth: hci3: Unknown advertising packet type: 0x77 [ 303.541730][ T9363] Bluetooth: hci3: Unknown advertising packet type: 0x34 [ 303.551760][ T9363] Bluetooth: hci3: Malformed LE Event: 0x0d [ 303.616724][ T9506] openvswitch: netlink: Key 20 has unexpected len 515 expected 4 [ 303.831546][ T9512] ima: policy update failed [ 303.858085][ T29] audit: type=1802 audit(1775500846.289:10): pid=9512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.756" res=0 errno=0 [ 304.482375][ T9531] netlink: 'syz.0.760': attribute type 11 has an invalid length. [ 304.512208][ T9531] netlink: 'syz.0.760': attribute type 11 has an invalid length. [ 304.531980][ T9531] netlink: 'syz.0.760': attribute type 11 has an invalid length. [ 304.550021][ T9531] netlink: 'syz.0.760': attribute type 11 has an invalid length. [ 304.598514][ T9536] netlink: 8 bytes leftover after parsing attributes in process `syz.3.761'. [ 307.627681][ T9601] netlink: 'syz.2.775': attribute type 11 has an invalid length. [ 307.685984][ T9601] netlink: 'syz.2.775': attribute type 11 has an invalid length. [ 307.693749][ T9601] netlink: 'syz.2.775': attribute type 11 has an invalid length. [ 307.781501][ T9601] netlink: 'syz.2.775': attribute type 11 has an invalid length. [ 309.395957][ T9634] netlink: 'syz.3.783': attribute type 11 has an invalid length. [ 309.424677][ T9634] netlink: 'syz.3.783': attribute type 11 has an invalid length. [ 309.466343][ T9634] netlink: 'syz.3.783': attribute type 11 has an invalid length. [ 309.524206][ T9634] netlink: 'syz.3.783': attribute type 11 has an invalid length. [ 311.297390][ T9658] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 311.305040][ T9658] vhci_hcd vhci_hcd.1: SetHubDepth req not supported for USB 2.0 roothub [ 312.430146][ T9681] Invalid ELF header magic: != ELF [ 312.862117][ T9690] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 313.414733][ T9686] zram: Added device: zram0 [ 314.684460][ T9363] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 316.770665][ T9742] nbd: illegal input index 37139 [ 316.821306][ T9742] netlink: 28 bytes leftover after parsing attributes in process `syz.3.802'. [ 316.985054][ T9745] zram0: detected capacity change from 0 to 16 [ 317.232528][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.242760][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.380847][ T9752] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 317.521309][ T9753] smpboot: CPU 1 is now offline [ 317.740512][ T9756] FAULT_INJECTION: forcing a failure. [ 317.740512][ T9756] name failslab, interval 1, probability 0, space 0, times 0 [ 317.929367][ T9756] CPU: 0 UID: 0 PID: 9756 Comm: syz.1.804 Tainted: G L syzkaller #0 PREEMPT(full) [ 317.929405][ T9756] Tainted: [L]=SOFTLOCKUP [ 317.929413][ T9756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 317.929427][ T9756] Call Trace: [ 317.929435][ T9756] [ 317.929444][ T9756] dump_stack_lvl+0x100/0x190 [ 317.929486][ T9756] should_fail_ex.cold+0x5/0xa [ 317.929515][ T9756] should_failslab+0xc2/0x120 [ 317.929542][ T9756] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 317.929581][ T9756] ? create_new_namespaces+0x30/0xac0 [ 317.929609][ T9756] ? rcu_is_watching+0x12/0xc0 [ 317.929651][ T9756] create_new_namespaces+0x30/0xac0 [ 317.929677][ T9756] ? bpf_lsm_capable+0x9/0x10 [ 317.929704][ T9756] ? security_capable+0x80/0x260 [ 317.929732][ T9756] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 317.929762][ T9756] ksys_unshare+0x473/0xad0 [ 317.929796][ T9756] ? __pfx_ksys_unshare+0x10/0x10 [ 317.929849][ T9756] __x64_sys_unshare+0x31/0x40 [ 317.929881][ T9756] do_syscall_64+0x106/0xf80 [ 317.929906][ T9756] ? clear_bhb_loop+0x40/0x90 [ 317.929935][ T9756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.929961][ T9756] RIP: 0033:0x7f8142b9c819 [ 317.929981][ T9756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.930004][ T9756] RSP: 002b:00007f81439d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 317.930027][ T9756] RAX: ffffffffffffffda RBX: 00007f8142e16090 RCX: 00007f8142b9c819 [ 317.930043][ T9756] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 317.930057][ T9756] RBP: 00007f8142c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 317.930073][ T9756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.930088][ T9756] R13: 00007f8142e16128 R14: 00007f8142e16090 R15: 00007ffc92158f68 [ 317.930118][ T9756] [ 320.516377][ T9808] netlink: 'syz.0.816': attribute type 11 has an invalid length. [ 320.612250][ T9808] netlink: 'syz.0.816': attribute type 11 has an invalid length. [ 320.784180][ T9808] netlink: 'syz.0.816': attribute type 11 has an invalid length. [ 320.984016][ T9808] netlink: 'syz.0.816': attribute type 11 has an invalid length. [ 323.078795][ T9849] zswap: compressor not available [ 323.942946][ T9881] [U] ^\ [ 325.556416][ T9906] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 326.040441][ T9363] Bluetooth: hci3: unexpected event 0x03 length: 123 > 11 [ 326.416100][ T9914] zswap: compressor not available [ 328.908886][ T9962] netlink: 'syz.3.845': attribute type 11 has an invalid length. [ 328.946272][ T9962] netlink: 'syz.3.845': attribute type 11 has an invalid length. [ 328.993922][ T9962] netlink: 'syz.3.845': attribute type 11 has an invalid length. [ 329.037246][ T9962] netlink: 'syz.3.845': attribute type 11 has an invalid length. [ 330.618348][ T9996] netlink: 342 bytes leftover after parsing attributes in process `syz.1.850'. [ 331.188386][T10002] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 333.447820][ T29] audit: type=1804 audit(4294968371.017:11): pid=10032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.860" name="/newroot/207/file0" dev="tmpfs" ino=1097 res=1 errno=0 [ 333.561596][T10038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.863'. [ 333.744137][T10045] netlink: 4 bytes leftover after parsing attributes in process `syz.3.863'. [ 333.846325][T10038] netlink: 354 bytes leftover after parsing attributes in process `syz.3.863'. [ 334.072835][T10057] netlink: 146 bytes leftover after parsing attributes in process `syz.2.865'. [ 334.667754][T10066] FAULT_INJECTION: forcing a failure. [ 334.667754][T10066] name failslab, interval 1, probability 0, space 0, times 0 [ 334.816397][T10066] CPU: 0 UID: 0 PID: 10066 Comm: syz.0.867 Tainted: G L syzkaller #0 PREEMPT(full) [ 334.816435][T10066] Tainted: [L]=SOFTLOCKUP [ 334.816443][T10066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 334.816456][T10066] Call Trace: [ 334.816463][T10066] [ 334.816472][T10066] dump_stack_lvl+0x100/0x190 [ 334.816513][T10066] should_fail_ex.cold+0x5/0xa [ 334.816540][T10066] should_failslab+0xc2/0x120 [ 334.816567][T10066] __kmalloc_cache_noprof+0x7a/0x6f0 [ 334.816600][T10066] ? pagemap_read+0x225/0x830 [ 334.816630][T10066] ? bpf_lsm_capable+0x9/0x10 [ 334.816655][T10066] ? security_capable+0x80/0x260 [ 334.816682][T10066] pagemap_read+0x225/0x830 [ 334.816727][T10066] ? __pfx_pagemap_read+0x10/0x10 [ 334.816764][T10066] ? rw_verify_area+0xce/0x6d0 [ 334.816801][T10066] ? __pfx_pagemap_read+0x10/0x10 [ 334.816830][T10066] vfs_readv+0x5d8/0x8d0 [ 334.816866][T10066] ? rcu_is_watching+0x12/0xc0 [ 334.816909][T10066] ? __pfx_vfs_readv+0x10/0x10 [ 334.816943][T10066] ? fdget_pos+0x2aa/0x380 [ 334.816970][T10066] ? find_held_lock+0x2b/0x80 [ 334.817010][T10066] ? __fget_files+0x21f/0x3d0 [ 334.817040][T10066] ? do_readv+0x13e/0x340 [ 334.817073][T10066] do_readv+0x13e/0x340 [ 334.817109][T10066] ? __pfx_do_readv+0x10/0x10 [ 334.817153][T10066] do_syscall_64+0x106/0xf80 [ 334.817178][T10066] ? clear_bhb_loop+0x40/0x90 [ 334.817206][T10066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.817230][T10066] RIP: 0033:0x7f84e2d9c819 [ 334.817248][T10066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.817271][T10066] RSP: 002b:00007f84e3ba3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 334.817293][T10066] RAX: ffffffffffffffda RBX: 00007f84e3016090 RCX: 00007f84e2d9c819 [ 334.817308][T10066] RDX: 0000000000000006 RSI: 0000200000000400 RDI: 0000000000000003 [ 334.817322][T10066] RBP: 00007f84e3ba3090 R08: 0000000000000000 R09: 0000000000000000 [ 334.817336][T10066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.817350][T10066] R13: 00007f84e3016128 R14: 00007f84e3016090 R15: 00007ffd71ac94c8 [ 334.817379][T10066] [ 335.917611][T10084] netlink: 334 bytes leftover after parsing attributes in process `syz.1.872'. [ 336.096229][T10088] Process accounting resumed [ 337.089299][T10106] zswap: compressor not available [ 337.693822][T10127] netlink: 310 bytes leftover after parsing attributes in process `syz.0.881'. [ 337.848483][T10132] netlink: 'syz.1.882': attribute type 11 has an invalid length. [ 337.945776][T10132] netlink: 'syz.1.882': attribute type 11 has an invalid length. [ 338.031052][T10132] netlink: 'syz.1.882': attribute type 11 has an invalid length. [ 338.083213][T10134] FAULT_INJECTION: forcing a failure. [ 338.083213][T10134] name failslab, interval 1, probability 0, space 0, times 0 [ 338.230401][T10134] CPU: 0 UID: 0 PID: 10134 Comm: syz.2.883 Tainted: G L syzkaller #0 PREEMPT(full) [ 338.230441][T10134] Tainted: [L]=SOFTLOCKUP [ 338.230449][T10134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 338.230481][T10134] Call Trace: [ 338.230489][T10134] [ 338.230498][T10134] dump_stack_lvl+0x100/0x190 [ 338.230546][T10134] should_fail_ex.cold+0x5/0xa [ 338.230576][T10134] ? lsm_blob_alloc+0x68/0x90 [ 338.230613][T10134] should_failslab+0xc2/0x120 [ 338.230641][T10134] __kmalloc_noprof+0xe0/0x850 [ 338.230680][T10134] ? down_write_nested+0x14f/0x200 [ 338.230721][T10134] lsm_blob_alloc+0x68/0x90 [ 338.230760][T10134] security_sb_alloc+0x25/0x240 [ 338.230785][T10134] alloc_super+0x24c/0xd20 [ 338.230828][T10134] ? __pfx_mqueue_fill_super+0x10/0x10 [ 338.230850][T10134] sget_fc+0x117/0xc70 [ 338.230888][T10134] ? __pfx_set_anon_super_fc+0x10/0x10 [ 338.230926][T10134] ? __pfx_mqueue_fill_super+0x10/0x10 [ 338.230948][T10134] get_tree_nodev+0x28/0x190 [ 338.230972][T10134] mqueue_get_tree+0xf1/0x130 [ 338.231012][T10134] vfs_get_tree+0x92/0x320 [ 338.231048][T10134] fc_mount_longterm+0x1a/0x270 [ 338.231091][T10134] mq_init_ns+0x482/0x820 [ 338.231120][T10134] copy_ipcs+0x3dd/0x7e0 [ 338.231150][T10134] create_new_namespaces+0x20a/0xac0 [ 338.231176][T10134] ? security_capable+0x80/0x260 [ 338.231204][T10134] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 338.231234][T10134] ksys_unshare+0x473/0xad0 [ 338.231267][T10134] ? __pfx_ksys_unshare+0x10/0x10 [ 338.231310][T10134] __x64_sys_unshare+0x31/0x40 [ 338.231340][T10134] do_syscall_64+0x106/0xf80 [ 338.231365][T10134] ? clear_bhb_loop+0x40/0x90 [ 338.231394][T10134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.231419][T10134] RIP: 0033:0x7fbe9df9c819 [ 338.231439][T10134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.231464][T10134] RSP: 002b:00007fbe9c1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 338.231486][T10134] RAX: ffffffffffffffda RBX: 00007fbe9e216090 RCX: 00007fbe9df9c819 [ 338.231502][T10134] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c000000 [ 338.231516][T10134] RBP: 00007fbe9e032c91 R08: 0000000000000000 R09: 0000000000000000 [ 338.231531][T10134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 338.231551][T10134] R13: 00007fbe9e216128 R14: 00007fbe9e216090 R15: 00007ffeff9a3a48 [ 338.231582][T10134] [ 338.942206][T10148] capability: warning: `syz.2.885' uses 32-bit capabilities (legacy support in use) [ 338.986357][T10148] netlink: 146 bytes leftover after parsing attributes in process `syz.2.885'. [ 339.606899][T10158] FAULT_INJECTION: forcing a failure. [ 339.606899][T10158] name fail_futex, interval 1, probability 0, space 0, times 0 [ 339.713893][T10158] CPU: 0 UID: 0 PID: 10158 Comm: syz.2.888 Tainted: G L syzkaller #0 PREEMPT(full) [ 339.713932][T10158] Tainted: [L]=SOFTLOCKUP [ 339.713941][T10158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 339.713956][T10158] Call Trace: [ 339.713963][T10158] [ 339.713973][T10158] dump_stack_lvl+0x100/0x190 [ 339.714015][T10158] should_fail_ex.cold+0x5/0xa [ 339.714043][T10158] get_futex_key+0x1d2/0x1620 [ 339.714078][T10158] ? __pfx_get_futex_key+0x10/0x10 [ 339.714108][T10158] ? find_held_lock+0x2b/0x80 [ 339.714132][T10158] ? futex_wake+0x456/0x530 [ 339.714176][T10158] futex_wake+0xea/0x530 [ 339.714217][T10158] ? __pfx_futex_wake+0x10/0x10 [ 339.714252][T10158] ? kfree+0x1f6/0x6b0 [ 339.714290][T10158] ? sctp_setsockopt+0x168/0xb370 [ 339.714328][T10158] do_futex+0x32b/0x350 [ 339.714360][T10158] ? __pfx_do_futex+0x10/0x10 [ 339.714392][T10158] ? do_sock_setsockopt+0x101/0x1d0 [ 339.714429][T10158] ? rcu_is_watching+0x12/0xc0 [ 339.714467][T10158] ? do_sock_setsockopt+0x101/0x1d0 [ 339.714494][T10158] ? kfree+0x2ec/0x6b0 [ 339.714529][T10158] __x64_sys_futex+0x34f/0x4d0 [ 339.714567][T10158] ? __pfx___x64_sys_futex+0x10/0x10 [ 339.714612][T10158] do_syscall_64+0x106/0xf80 [ 339.714637][T10158] ? clear_bhb_loop+0x40/0x90 [ 339.714666][T10158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.714691][T10158] RIP: 0033:0x7fbe9df9c819 [ 339.714711][T10158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.714734][T10158] RSP: 002b:00007fbe9ed810e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 339.714757][T10158] RAX: ffffffffffffffda RBX: 00007fbe9e215fa8 RCX: 00007fbe9df9c819 [ 339.714773][T10158] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fbe9e215fac [ 339.714787][T10158] RBP: 00007fbe9e215fa0 R08: 0000000000000000 R09: 0000000000000000 [ 339.714802][T10158] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 339.714816][T10158] R13: 00007fbe9e216038 R14: 00007ffeff9a3960 R15: 00007ffeff9a3a48 [ 339.714846][T10158] [ 340.449724][T10162] futex_wake_op: syz.1.889 tries to shift op by -2048; fix this program [ 340.845823][T10161] zram: Added device: zram1 [ 342.073475][T10171] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(31) [ 342.826821][T10191] netlink: 'syz.3.897': attribute type 11 has an invalid length. [ 342.861684][T10191] netlink: 'syz.3.897': attribute type 11 has an invalid length. [ 342.906263][T10191] netlink: 'syz.3.897': attribute type 11 has an invalid length. [ 343.687118][T10201] zswap: compressor not available [ 347.255306][T10282] netlink: 62 bytes leftover after parsing attributes in process `syz.0.915'. [ 351.306701][T10357] FAULT_INJECTION: forcing a failure. [ 351.306701][T10357] name failslab, interval 1, probability 0, space 0, times 0 [ 351.420349][T10357] CPU: 0 UID: 0 PID: 10357 Comm: syz.2.936 Tainted: G L syzkaller #0 PREEMPT(full) [ 351.420389][T10357] Tainted: [L]=SOFTLOCKUP [ 351.420397][T10357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 351.420412][T10357] Call Trace: [ 351.420420][T10357] [ 351.420429][T10357] dump_stack_lvl+0x100/0x190 [ 351.420472][T10357] should_fail_ex.cold+0x5/0xa [ 351.420501][T10357] should_failslab+0xc2/0x120 [ 351.420528][T10357] __kmalloc_cache_noprof+0x7a/0x6f0 [ 351.420562][T10357] ? allocate_file_region_entries+0x1a0/0x620 [ 351.420609][T10357] allocate_file_region_entries+0x1a0/0x620 [ 351.420662][T10357] ? __pfx_allocate_file_region_entries+0x10/0x10 [ 351.420712][T10357] region_chg+0x85/0x140 [ 351.420751][T10357] __vma_reservation_common+0x376/0x720 [ 351.420794][T10357] ? __pfx___vma_reservation_common+0x10/0x10 [ 351.420836][T10357] ? __pfx___might_resched+0x10/0x10 [ 351.420880][T10357] hugetlb_no_page+0xb2b/0x1970 [ 351.420921][T10357] hugetlb_fault+0x5df/0x1450 [ 351.420957][T10357] ? __pfx_hugetlb_fault+0x10/0x10 [ 351.421001][T10357] ? find_vma+0xbf/0x140 [ 351.421025][T10357] ? __pfx_find_vma+0x10/0x10 [ 351.421053][T10357] handle_mm_fault+0x5f1/0xa20 [ 351.421093][T10357] do_user_addr_fault+0x74c/0x12f0 [ 351.421126][T10357] exc_page_fault+0x6f/0xd0 [ 351.421152][T10357] asm_exc_page_fault+0x26/0x30 [ 351.421176][T10357] RIP: 0010:__put_user_4+0xd/0x20 [ 351.421201][T10357] Code: 66 89 01 31 c9 0f 01 ca e9 c0 d0 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 97 d0 03 00 0f 1f 80 00 00 00 00 90 90 90 [ 351.421226][T10357] RSP: 0018:ffffc90003837e58 EFLAGS: 00050202 [ 351.421246][T10357] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000007 [ 351.421260][T10357] RDX: 0000000000000000 RSI: ffffffff82563481 RDI: ffff888033b305dc [ 351.421276][T10357] RBP: 0000000000000002 R08: 0000000000000001 R09: 00000000000001cb [ 351.421290][T10357] R10: 0000000000000200 R11: 0000000000000000 R12: 1ffff92000706fce [ 351.421305][T10357] R13: 0000000000000007 R14: 0000000000000000 R15: dffffc0000000000 [ 351.421329][T10357] ? __might_fault+0x111/0x140 [ 351.421370][T10357] __do_sys_prctl+0xd67/0x2330 [ 351.421409][T10357] ? __pfx___do_sys_prctl+0x10/0x10 [ 351.421455][T10357] do_syscall_64+0x106/0xf80 [ 351.421479][T10357] ? clear_bhb_loop+0x40/0x90 [ 351.421508][T10357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.421533][T10357] RIP: 0033:0x7fbe9df9c819 [ 351.421552][T10357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 351.421575][T10357] RSP: 002b:00007fbe9ed81028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 351.421597][T10357] RAX: ffffffffffffffda RBX: 00007fbe9e215fa0 RCX: 00007fbe9df9c819 [ 351.421612][T10357] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000002 [ 351.421626][T10357] RBP: 00007fbe9e032c91 R08: 0000000000000001 R09: 0000000000000000 [ 351.421641][T10357] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 351.421660][T10357] R13: 00007fbe9e216038 R14: 00007fbe9e215fa0 R15: 00007ffeff9a3a48 [ 351.421691][T10357] [ 352.723079][T10376] netlink: 28 bytes leftover after parsing attributes in process `syz.3.938'. [ 354.082968][T10393] futex_wake_op: syz.2.944 tries to shift op by -2048; fix this program [ 354.152853][T10393] futex_wake_op: syz.2.944 tries to shift op by -2048; fix this program [ 355.260510][T10412] zswap: compressor not available [ 355.657107][T10427] FAULT_INJECTION: forcing a failure. [ 355.657107][T10427] name failslab, interval 1, probability 0, space 0, times 0 [ 355.704102][T10427] CPU: 0 UID: 0 PID: 10427 Comm: syz.3.950 Tainted: G L syzkaller #0 PREEMPT(full) [ 355.704143][T10427] Tainted: [L]=SOFTLOCKUP [ 355.704152][T10427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 355.704166][T10427] Call Trace: [ 355.704174][T10427] [ 355.704184][T10427] dump_stack_lvl+0x100/0x190 [ 355.704226][T10427] should_fail_ex.cold+0x5/0xa [ 355.704255][T10427] should_failslab+0xc2/0x120 [ 355.704282][T10427] __kvmalloc_node_noprof+0xfa/0xa00 [ 355.704305][T10427] ? sbitmap_init_node+0x1cc/0x720 [ 355.704352][T10427] sbitmap_init_node+0x1cc/0x720 [ 355.704403][T10427] sbitmap_queue_init_node+0x40/0x4a0 [ 355.704431][T10427] blk_mq_init_tags+0x184/0x300 [ 355.704463][T10427] blk_mq_alloc_map_and_rqs+0x218/0xeb0 [ 355.704492][T10427] ? blk_mq_update_queue_map+0x227/0x3a0 [ 355.704525][T10427] blk_mq_alloc_tag_set+0x848/0x1330 [ 355.704560][T10427] loop_add+0x3b7/0xb60 [ 355.704597][T10427] ? __pfx_loop_add+0x10/0x10 [ 355.704658][T10427] loop_control_ioctl+0xae/0x620 [ 355.704698][T10427] ? __pfx_loop_control_ioctl+0x10/0x10 [ 355.704737][T10427] ? xfd_validate_state+0x129/0x190 [ 355.704774][T10427] ? __pfx_loop_control_ioctl+0x10/0x10 [ 355.704815][T10427] __x64_sys_ioctl+0x18e/0x210 [ 355.704854][T10427] do_syscall_64+0x106/0xf80 [ 355.704879][T10427] ? clear_bhb_loop+0x40/0x90 [ 355.704908][T10427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.704933][T10427] RIP: 0033:0x7f478799c819 [ 355.704954][T10427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.704978][T10427] RSP: 002b:00007f4788774028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 355.705001][T10427] RAX: ffffffffffffffda RBX: 00007f4787c15fa0 RCX: 00007f478799c819 [ 355.705017][T10427] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000002 [ 355.705032][T10427] RBP: 00007f4787a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 355.705047][T10427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 355.705061][T10427] R13: 00007f4787c16038 R14: 00007f4787c15fa0 R15: 00007ffeca112868 [ 355.705091][T10427] [ 356.091455][T10427] blk-mq: reduced tag depth (128 -> 64) [ 357.858416][ T9363] Bluetooth: hci3: Unexpected cc 0x7c89 with no status [ 359.103844][T10477] zswap: compressor not available [ 359.839164][T10497] bridge0: port 3(bond0) entered blocking state [ 359.859435][T10497] bridge0: port 3(bond0) entered disabled state [ 359.882435][T10497] bond0: entered allmulticast mode [ 359.897778][T10497] bond_slave_0: entered allmulticast mode [ 359.932299][T10497] bond_slave_1: entered allmulticast mode [ 359.949169][T10497] bond0: entered promiscuous mode [ 359.961942][T10497] bond_slave_0: entered promiscuous mode [ 359.978277][T10497] bond_slave_1: entered promiscuous mode [ 359.988776][T10497] bridge0: port 3(bond0) entered blocking state [ 359.995276][T10497] bridge0: port 3(bond0) entered forwarding state [ 360.324114][T10507] netlink: 'syz.1.968': attribute type 11 has an invalid length. [ 360.356224][T10507] netlink: 'syz.1.968': attribute type 11 has an invalid length. [ 360.395680][T10507] netlink: 'syz.1.968': attribute type 11 has an invalid length. [ 362.154613][T10527] zswap: compressor not available [ 363.421301][T10561] QAT: Invalid ioctl 35077 [ 363.808595][T10557] netlink: 'syz.1.980': attribute type 1 has an invalid length. [ 364.517723][T10542] nfs: Unknown parameter 'm?LH>「^eko}* ' [ 364.586063][T10588] Invalid ELF header magic: != ELF [ 365.047809][T10591] zswap: compressor not available [ 365.285818][T10601] netlink: 32 bytes leftover after parsing attributes in process `syz.1.986'. [ 365.956536][ T9363] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 366.646235][T10614] Process accounting paused [ 367.476550][T10655] FAULT_INJECTION: forcing a failure. [ 367.476550][T10655] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 367.546258][T10655] CPU: 0 UID: 0 PID: 10655 Comm: syz.3.997 Tainted: G L syzkaller #0 PREEMPT(full) [ 367.546303][T10655] Tainted: [L]=SOFTLOCKUP [ 367.546312][T10655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 367.546328][T10655] Call Trace: [ 367.546337][T10655] [ 367.546347][T10655] dump_stack_lvl+0x100/0x190 [ 367.546394][T10655] should_fail_ex.cold+0x5/0xa [ 367.546422][T10655] ? prepare_alloc_pages+0x16d/0x5f0 [ 367.546457][T10655] should_fail_alloc_page+0xeb/0x140 [ 367.546490][T10655] prepare_alloc_pages+0x1f0/0x5f0 [ 367.546529][T10655] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 367.546576][T10655] ? __pfx_stack_trace_save+0x10/0x10 [ 367.546606][T10655] ? stack_depot_save_flags+0x27/0x9d0 [ 367.546651][T10655] ? kasan_save_stack+0x3f/0x50 [ 367.546675][T10655] ? kasan_save_stack+0x30/0x50 [ 367.546699][T10655] ? kasan_save_track+0x14/0x30 [ 367.546733][T10655] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 367.546784][T10655] ? __pfx_css_rstat_updated+0x10/0x10 [ 367.546826][T10655] ? lock_acquire+0x1cf/0x380 [ 367.546892][T10655] ? find_held_lock+0x2b/0x80 [ 367.546918][T10655] ? page_table_check_set+0x49a/0xa10 [ 367.546945][T10655] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 367.546975][T10655] ? policy_nodemask+0xed/0x4f0 [ 367.547008][T10655] alloc_pages_mpol+0x1fb/0x550 [ 367.547039][T10655] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 367.547079][T10655] folio_alloc_mpol_noprof+0x36/0x340 [ 367.547117][T10655] vma_alloc_folio_noprof+0xed/0x1d0 [ 367.547153][T10655] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 367.547199][T10655] do_anonymous_page+0xb3a/0x1fb0 [ 367.547249][T10655] __handle_mm_fault+0x1d48/0x2b60 [ 367.547297][T10655] ? __pfx___handle_mm_fault+0x10/0x10 [ 367.547339][T10655] ? pte_offset_map_lock+0x174/0x320 [ 367.547369][T10655] ? find_held_lock+0x2b/0x80 [ 367.547406][T10655] ? follow_page_pte+0x5b3/0x1400 [ 367.547445][T10655] handle_mm_fault+0x36d/0xa20 [ 367.547490][T10655] __get_user_pages+0xf9c/0x34d0 [ 367.547535][T10655] ? __pfx___get_user_pages+0x10/0x10 [ 367.547577][T10655] populate_vma_page_range+0x267/0x3f0 [ 367.547614][T10655] ? __pfx_populate_vma_page_range+0x10/0x10 [ 367.547654][T10655] ? __pfx_find_vma_intersection+0x10/0x10 [ 367.547687][T10655] ? do_mmap+0x93f/0x12f0 [ 367.547722][T10655] __mm_populate+0x107/0x3a0 [ 367.547757][T10655] ? __pfx___mm_populate+0x10/0x10 [ 367.547794][T10655] ? up_write+0x290/0x4f0 [ 367.547838][T10655] vm_mmap_pgoff+0x37f/0x470 [ 367.547875][T10655] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 367.547909][T10655] ? do_futex+0x192/0x350 [ 367.547947][T10655] ? __pfx_do_futex+0x10/0x10 [ 367.547989][T10655] ksys_mmap_pgoff+0xe1/0x650 [ 367.548020][T10655] ? __x64_sys_futex+0x34f/0x4d0 [ 367.548055][T10655] ? __x64_sys_futex+0x358/0x4d0 [ 367.548093][T10655] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 367.548145][T10655] ? xfd_validate_state+0x129/0x190 [ 367.548192][T10655] __x64_sys_mmap+0x125/0x190 [ 367.548237][T10655] do_syscall_64+0x106/0xf80 [ 367.548264][T10655] ? clear_bhb_loop+0x40/0x90 [ 367.548319][T10655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.548348][T10655] RIP: 0033:0x7f478799c819 [ 367.548371][T10655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 367.548398][T10655] RSP: 002b:00007f4788774028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 367.548423][T10655] RAX: ffffffffffffffda RBX: 00007f4787c15fa0 RCX: 00007f478799c819 [ 367.548441][T10655] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000800000 [ 367.548458][T10655] RBP: 00007f4787a32c91 R08: ffffffffffffffff R09: 0000000000008000 [ 367.548475][T10655] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 367.548492][T10655] R13: 00007f4787c16038 R14: 00007f4787c15fa0 R15: 00007ffeca112868 [ 367.548527][T10655] [ 368.518189][T10667] netlink: 'syz.1.1001': attribute type 2 has an invalid length. [ 368.546565][T10667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1001'. [ 368.727215][T10673] netlink: 'syz.1.1002': attribute type 11 has an invalid length. [ 368.760906][T10673] netlink: 'syz.1.1002': attribute type 11 has an invalid length. [ 368.782198][T10673] netlink: 'syz.1.1002': attribute type 11 has an invalid length. [ 368.819498][T10673] netlink: 'syz.1.1002': attribute type 11 has an invalid length. [ 369.267428][T10679] netlink: 'syz.0.1003': attribute type 11 has an invalid length. [ 369.347385][T10679] netlink: 'syz.0.1003': attribute type 11 has an invalid length. [ 369.389641][T10679] netlink: 'syz.0.1003': attribute type 11 has an invalid length. [ 369.486904][T10679] netlink: 'syz.0.1003': attribute type 11 has an invalid length. [ 370.449886][T10696] binder: 10687:10696 ioctl 400c620e 0 returned -22 [ 370.655231][T10691] zswap: compressor 000 not available [ 371.573928][T10708] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1010'. [ 371.805916][T10708] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 371.883726][T10708] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 371.923356][T10708] bond0 (unregistering): Released all slaves [ 372.532861][T10731] netlink: 354 bytes leftover after parsing attributes in process `syz.2.1015'. [ 373.536062][ T9363] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 374.442480][ T29] audit: type=1806 audit(4294968412.210:12): xattr="." res=0 [ 374.473191][T10778] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1027'. [ 374.753430][T10786] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 375.586429][ T7362] Bluetooth: hci0: command 0x0c1a tx timeout [ 377.657856][ T9363] Bluetooth: hci0: command 0x0c1a tx timeout [ 378.384119][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.390680][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.030023][T10890] zswap: compressor not available [ 381.577806][T10933] ima: policy update failed [ 381.582502][ T29] audit: type=1802 audit(4294968419.383:13): pid=10933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.1059" res=0 errno=0 [ 382.342725][ T29] audit: type=1800 audit(4294968420.137:14): pid=10974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1065" name="sr0" dev="devtmpfs" ino=2862 res=0 errno=0 [ 384.188066][T11009] netlink: 'syz.2.1071': attribute type 11 has an invalid length. [ 384.268784][T11009] netlink: 'syz.2.1071': attribute type 11 has an invalid length. [ 384.363010][T11009] netlink: 'syz.2.1071': attribute type 11 has an invalid length. [ 384.460332][T11009] netlink: 'syz.2.1071': attribute type 11 has an invalid length. [ 385.889404][T11033] input:  as /devices/virtual/input/input18 [ 386.019597][T11041] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1076'. [ 388.642146][T11079] netlink: 'syz.2.1087': attribute type 11 has an invalid length. [ 388.671717][T11079] netlink: 'syz.2.1087': attribute type 11 has an invalid length. [ 388.706944][T11079] netlink: 'syz.2.1087': attribute type 11 has an invalid length. [ 388.736007][T11079] netlink: 'syz.2.1087': attribute type 11 has an invalid length. [ 389.499822][T11089] FAULT_INJECTION: forcing a failure. [ 389.499822][T11089] name failslab, interval 1, probability 0, space 0, times 0 [ 389.551046][T11089] CPU: 0 UID: 0 PID: 11089 Comm: syz.1.1090 Tainted: G L syzkaller #0 PREEMPT(full) [ 389.551086][T11089] Tainted: [L]=SOFTLOCKUP [ 389.551094][T11089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 389.551109][T11089] Call Trace: [ 389.551117][T11089] [ 389.551127][T11089] dump_stack_lvl+0x100/0x190 [ 389.551184][T11089] should_fail_ex.cold+0x5/0xa [ 389.551214][T11089] should_failslab+0xc2/0x120 [ 389.551241][T11089] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 389.551267][T11089] ? kstrdup_const+0x63/0x80 [ 389.551297][T11089] kstrdup+0x51/0xe0 [ 389.551321][T11089] kstrdup_const+0x63/0x80 [ 389.551344][T11089] kvasprintf_const+0x10f/0x1a0 [ 389.551379][T11089] kobject_set_name_vargs+0x5a/0x140 [ 389.551413][T11089] dev_set_name+0xc7/0x100 [ 389.551451][T11089] ? __pfx_dev_set_name+0x10/0x10 [ 389.551504][T11089] __add_disk+0x414/0xe40 [ 389.551531][T11089] ? find_held_lock+0x2b/0x80 [ 389.551558][T11089] add_disk_fwnode+0x3d4/0x5c0 [ 389.551589][T11089] zram_add+0x4d2/0x610 [ 389.551625][T11089] ? __pfx_zram_add+0x10/0x10 [ 389.551681][T11089] ? find_held_lock+0x2b/0x80 [ 389.551704][T11089] ? sysfs_file_kobj+0xe4/0x290 [ 389.551740][T11089] ? __pfx_hot_add_show+0x10/0x10 [ 389.551777][T11089] hot_add_show+0x21/0x80 [ 389.551813][T11089] class_attr_show+0x72/0xa0 [ 389.551846][T11089] ? __pfx_class_attr_show+0x10/0x10 [ 389.551877][T11089] sysfs_kf_seq_show+0x217/0x3a0 [ 389.551916][T11089] seq_read_iter+0x32f/0x1270 [ 389.551968][T11089] kernfs_fop_read_iter+0x46c/0x610 [ 389.551998][T11089] ? rw_verify_area+0xce/0x6d0 [ 389.552039][T11089] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 389.552086][T11089] vfs_read+0x825/0xb30 [ 389.552113][T11089] ? __pfx_vfs_read+0x10/0x10 [ 389.552162][T11089] ksys_read+0x12a/0x250 [ 389.552186][T11089] ? __pfx_ksys_read+0x10/0x10 [ 389.552218][T11089] do_syscall_64+0x106/0xf80 [ 389.552243][T11089] ? clear_bhb_loop+0x40/0x90 [ 389.552273][T11089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.552298][T11089] RIP: 0033:0x7f8142b9c819 [ 389.552317][T11089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.552341][T11089] RSP: 002b:00007f81439f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 389.552365][T11089] RAX: ffffffffffffffda RBX: 00007f8142e15fa0 RCX: 00007f8142b9c819 [ 389.552381][T11089] RDX: 0000000000001000 RSI: 0000200000000ec0 RDI: 0000000000000006 [ 389.552396][T11089] RBP: 00007f8142c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 389.552414][T11089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 389.552431][T11089] R13: 00007f8142e16038 R14: 00007f8142e15fa0 R15: 00007ffc92158f68 [ 389.552464][T11089] [ 393.234072][T11145] netlink: 'syz.2.1104': attribute type 11 has an invalid length. [ 393.278006][T11145] netlink: 'syz.2.1104': attribute type 11 has an invalid length. [ 393.317556][T11145] netlink: 'syz.2.1104': attribute type 11 has an invalid length. [ 393.377729][T11145] netlink: 'syz.2.1104': attribute type 11 has an invalid length. [ 393.582120][T11147] mkiss: ax0: crc mode is auto. [ 396.398837][T11197] netlink: 'syz.1.1119': attribute type 11 has an invalid length. [ 396.398869][T11197] netlink: 'syz.1.1119': attribute type 11 has an invalid length. [ 396.398885][T11197] netlink: 'syz.1.1119': attribute type 11 has an invalid length. [ 396.398900][T11197] netlink: 'syz.1.1119': attribute type 11 has an invalid length. [ 397.294528][T11210] Process accounting resumed [ 397.978878][T11212] FAULT_INJECTION: forcing a failure. [ 397.978878][T11212] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 398.092456][T11212] CPU: 0 UID: 0 PID: 11212 Comm: syz.2.1122 Tainted: G L syzkaller #0 PREEMPT(full) [ 398.092496][T11212] Tainted: [L]=SOFTLOCKUP [ 398.092504][T11212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 398.092519][T11212] Call Trace: [ 398.092527][T11212] [ 398.092536][T11212] dump_stack_lvl+0x100/0x190 [ 398.092578][T11212] should_fail_ex.cold+0x5/0xa [ 398.092602][T11212] ? prepare_alloc_pages+0x16d/0x5f0 [ 398.092634][T11212] should_fail_alloc_page+0xeb/0x140 [ 398.092670][T11212] prepare_alloc_pages+0x1f0/0x5f0 [ 398.092706][T11212] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 398.092747][T11212] ? stack_depot_save_flags+0x479/0x9d0 [ 398.092784][T11212] ? rcu_is_watching+0x12/0xc0 [ 398.092823][T11212] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 398.092864][T11212] ? lockdep_hardirqs_on+0x78/0x100 [ 398.092889][T11212] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 398.092929][T11212] ? stack_depot_save_flags+0x479/0x9d0 [ 398.092966][T11212] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 398.093006][T11212] ? kasan_save_stack+0x3f/0x50 [ 398.093027][T11212] ? kasan_save_track+0x14/0x30 [ 398.093049][T11212] ? kmem_cache_alloc_node_noprof+0x25a/0x6f0 [ 398.093088][T11212] ? alloc_vmap_area+0x640/0x2bd0 [ 398.093113][T11212] ? __get_vm_area_node+0x1ca/0x330 [ 398.093140][T11212] ? get_vm_area_caller+0x71/0xa0 [ 398.093167][T11212] ? vmap+0x131/0x2f0 [ 398.093200][T11212] ? ringbuf_map_alloc+0x3a1/0x8b0 [ 398.093230][T11212] ? map_create+0x84e/0x2ba0 [ 398.093253][T11212] ? __sys_bpf+0x2091/0x4b90 [ 398.093279][T11212] ? __x64_sys_bpf+0x7b/0xc0 [ 398.093318][T11212] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 398.093345][T11212] ? policy_nodemask+0xed/0x4f0 [ 398.093374][T11212] alloc_pages_mpol+0x1fb/0x550 [ 398.093402][T11212] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 398.093437][T11212] alloc_pages_noprof+0x136/0x390 [ 398.093466][T11212] get_free_pages_noprof+0x10/0xb0 [ 398.093495][T11212] __kasan_populate_vmalloc+0xa0/0x210 [ 398.093541][T11212] alloc_vmap_area+0x95d/0x2bd0 [ 398.093580][T11212] ? __pfx_alloc_vmap_area+0x10/0x10 [ 398.093614][T11212] __get_vm_area_node+0x1ca/0x330 [ 398.093652][T11212] ? ringbuf_map_alloc+0x3a1/0x8b0 [ 398.093683][T11212] get_vm_area_caller+0x71/0xa0 [ 398.093712][T11212] ? ringbuf_map_alloc+0x3a1/0x8b0 [ 398.093743][T11212] vmap+0x131/0x2f0 [ 398.093771][T11212] ? __pfx_vmap+0x10/0x10 [ 398.093807][T11212] ringbuf_map_alloc+0x3a1/0x8b0 [ 398.093844][T11212] ? __pfx_ringbuf_map_mem_usage+0x10/0x10 [ 398.093874][T11212] map_create+0x84e/0x2ba0 [ 398.093896][T11212] ? futex_unqueue+0x13d/0x2c0 [ 398.093929][T11212] ? __futex_wait+0x256/0x300 [ 398.093973][T11212] ? __pfx_map_create+0x10/0x10 [ 398.093997][T11212] ? __might_fault+0xc5/0x140 [ 398.094032][T11212] ? __might_fault+0xc5/0x140 [ 398.094079][T11212] __sys_bpf+0x2091/0x4b90 [ 398.094112][T11212] ? __pfx___sys_bpf+0x10/0x10 [ 398.094140][T11212] ? __pfx_futex_wait+0x10/0x10 [ 398.094192][T11212] ? errseq_sample+0x51/0x70 [ 398.094222][T11212] ? file_init_path+0x48e/0x670 [ 398.094258][T11212] ? do_futex+0x192/0x350 [ 398.094304][T11212] ? __sys_socket+0xac/0x260 [ 398.094337][T11212] ? xfd_validate_state+0x129/0x190 [ 398.094380][T11212] __x64_sys_bpf+0x7b/0xc0 [ 398.094410][T11212] ? lockdep_hardirqs_on+0x78/0x100 [ 398.094434][T11212] do_syscall_64+0x106/0xf80 [ 398.094459][T11212] ? clear_bhb_loop+0x40/0x90 [ 398.094496][T11212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.094521][T11212] RIP: 0033:0x7fbe9df9c819 [ 398.094541][T11212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.094565][T11212] RSP: 002b:00007fbe9ed81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 398.094588][T11212] RAX: ffffffffffffffda RBX: 00007fbe9e215fa0 RCX: 00007fbe9df9c819 [ 398.094604][T11212] RDX: 0000000000000010 RSI: 00002000000000c0 RDI: 0000000000000000 [ 398.094618][T11212] RBP: 00007fbe9e032c91 R08: 0000000000000000 R09: 0000000000000000 [ 398.094633][T11212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 398.094652][T11212] R13: 00007fbe9e216038 R14: 00007fbe9e215fa0 R15: 00007ffeff9a3a48 [ 398.094683][T11212] [ 399.661012][T11217] FAULT_INJECTION: forcing a failure. [ 399.661012][T11217] name failslab, interval 1, probability 0, space 0, times 0 [ 399.717251][T11217] CPU: 0 UID: 0 PID: 11217 Comm: syz.0.1124 Tainted: G L syzkaller #0 PREEMPT(full) [ 399.717290][T11217] Tainted: [L]=SOFTLOCKUP [ 399.717299][T11217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 399.717314][T11217] Call Trace: [ 399.717321][T11217] [ 399.717330][T11217] dump_stack_lvl+0x100/0x190 [ 399.717372][T11217] should_fail_ex.cold+0x5/0xa [ 399.717401][T11217] should_failslab+0xc2/0x120 [ 399.717429][T11217] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 399.717468][T11217] ? __proc_create+0x2cb/0x8c0 [ 399.717503][T11217] __proc_create+0x2cb/0x8c0 [ 399.717529][T11217] ? __pfx___proc_create+0x10/0x10 [ 399.717551][T11217] ? do_raw_spin_lock+0x128/0x260 [ 399.717600][T11217] proc_create_reg+0x75/0x170 [ 399.717628][T11217] proc_create_net_data+0x8e/0x1c0 [ 399.717655][T11217] ? __pfx_proc_create_net_data+0x10/0x10 [ 399.717682][T11217] ? __pfx___netlink_kernel_create+0x10/0x10 [ 399.717715][T11217] fib_proc_init+0x5e/0x1d0 [ 399.717740][T11217] fib_net_init+0x2af/0x3f0 [ 399.717763][T11217] ? is_module_address+0x69/0xf0 [ 399.717795][T11217] ? __pfx_fib_net_init+0x10/0x10 [ 399.717821][T11217] ? timer_init_key+0x150/0x340 [ 399.717848][T11217] ? __pfx_nl_fib_input+0x10/0x10 [ 399.717876][T11217] ? devinet_init_net+0x56c/0x8d0 [ 399.717907][T11217] ? __pfx_fib_net_init+0x10/0x10 [ 399.717930][T11217] ops_init+0x1e2/0x5f0 [ 399.717959][T11217] setup_net+0x118/0x3a0 [ 399.717984][T11217] ? __pfx_setup_net+0x10/0x10 [ 399.718007][T11217] ? lockdep_init_map_type+0x5c/0x250 [ 399.718041][T11217] ? mutex_init_lockep+0x110/0x150 [ 399.718080][T11217] copy_net_ns+0x46f/0x7c0 [ 399.718110][T11217] create_new_namespaces+0x3ea/0xac0 [ 399.718144][T11217] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 399.718174][T11217] ksys_unshare+0x473/0xad0 [ 399.718208][T11217] ? __pfx_ksys_unshare+0x10/0x10 [ 399.718251][T11217] __x64_sys_unshare+0x31/0x40 [ 399.718282][T11217] do_syscall_64+0x106/0xf80 [ 399.718307][T11217] ? clear_bhb_loop+0x40/0x90 [ 399.718336][T11217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.718361][T11217] RIP: 0033:0x7f84e2d9c819 [ 399.718381][T11217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.718405][T11217] RSP: 002b:00007f84e3bc4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 399.718428][T11217] RAX: ffffffffffffffda RBX: 00007f84e3015fa0 RCX: 00007f84e2d9c819 [ 399.718443][T11217] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 399.718458][T11217] RBP: 00007f84e2e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 399.718472][T11217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 399.718487][T11217] R13: 00007f84e3016038 R14: 00007f84e3015fa0 R15: 00007ffd71ac94c8 [ 399.718525][T11217] [ 400.549906][T11242] netlink: 'syz.0.1131': attribute type 11 has an invalid length. [ 400.567697][T11242] netlink: 'syz.0.1131': attribute type 11 has an invalid length. [ 400.575560][T11242] netlink: 'syz.0.1131': attribute type 11 has an invalid length. [ 400.617393][T11242] netlink: 'syz.0.1131': attribute type 11 has an invalid length. [ 400.644424][T11245] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 402.013161][T11266] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1135'. [ 402.268338][T11272] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1137'. [ 402.857322][T11279] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1139'. [ 403.684124][ T7362] block nbd0: Receive control failed (result -32) [ 404.419995][T11312] block nbd0: shutting down sockets [ 405.923152][T11344] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 408.311032][T11368] kafs: addr_prefs: Invalid Command [ 410.855342][ T29] audit: type=1804 audit(4294968448.791:15): pid=11408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1168" name="/newroot/292/file0" dev="tmpfs" ino=1550 res=1 errno=0 [ 411.105265][ T29] audit: type=1804 audit(4294968449.042:16): pid=11403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1168" name="/newroot/292/file0" dev="tmpfs" ino=1550 res=1 errno=0 [ 411.147732][T11422] netlink: 'syz.1.1171': attribute type 11 has an invalid length. [ 411.259597][T11422] netlink: 'syz.1.1171': attribute type 11 has an invalid length. [ 411.418103][T11422] netlink: 'syz.1.1171': attribute type 11 has an invalid length. [ 411.497833][T11422] netlink: 'syz.1.1171': attribute type 11 has an invalid length. [ 413.787412][T11449] netlink: 62 bytes leftover after parsing attributes in process `syz.3.1177'. [ 415.134922][T11472] zswap: compressor not available [ 416.164959][T11489] Kernel: The 'panic_print' parameter is now deprecated. Please use 'panic_sys_info' and 'panic_console_replay' instead. [ 416.616702][T11494] can: request_module (can-proto-0) failed. [ 417.944581][T11519] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 419.501897][T11550] tipc: Started in network mode [ 419.561216][T11550] tipc: Node identity ee00, cluster identity 4711 [ 419.585967][T11546] zswap: compressor not available [ 419.615930][T11550] tipc: Node number set to 60928 [ 420.106560][T11570] Invalid ELF header magic: != ELF [ 425.549863][T11646] zswap: compressor not available [ 428.137600][T11680] FAULT_INJECTION: forcing a failure. [ 428.137600][T11680] name failslab, interval 1, probability 0, space 0, times 0 [ 428.184237][T11680] CPU: 0 UID: 0 PID: 11680 Comm: syz.0.1225 Tainted: G L syzkaller #0 PREEMPT(full) [ 428.184277][T11680] Tainted: [L]=SOFTLOCKUP [ 428.184285][T11680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 428.184300][T11680] Call Trace: [ 428.184307][T11680] [ 428.184316][T11680] dump_stack_lvl+0x100/0x190 [ 428.184359][T11680] should_fail_ex.cold+0x5/0xa [ 428.184388][T11680] ? memcg_list_lru_alloc+0x4ec/0x740 [ 428.184427][T11680] should_failslab+0xc2/0x120 [ 428.184454][T11680] __kmalloc_noprof+0xe0/0x850 [ 428.184493][T11680] ? ipcget+0xee/0xf50 [ 428.184531][T11680] memcg_list_lru_alloc+0x4ec/0x740 [ 428.184578][T11680] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 428.184617][T11680] ? rcu_read_unlock+0x17/0x60 [ 428.184673][T11680] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 428.184715][T11680] __memcg_slab_post_alloc_hook+0x130/0x990 [ 428.184757][T11680] ? kasan_save_track+0x14/0x30 [ 428.184783][T11680] kmem_cache_alloc_lru_noprof+0x592/0x6e0 [ 428.184822][T11680] ? hugetlbfs_alloc_inode+0x8c/0x1d0 [ 428.184856][T11680] hugetlbfs_alloc_inode+0x8c/0x1d0 [ 428.184882][T11680] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 428.184910][T11680] alloc_inode+0x68/0x250 [ 428.184944][T11680] new_inode+0x22/0x1c0 [ 428.184980][T11680] hugetlbfs_get_inode+0x313/0x750 [ 428.185011][T11680] hugetlb_file_setup+0x3cc/0x5b0 [ 428.185044][T11680] newseg+0xabb/0xed0 [ 428.185082][T11680] ? __pfx_newseg+0x10/0x10 [ 428.185115][T11680] ? down_write+0x146/0x1f0 [ 428.185145][T11680] ? ksys_write+0x190/0x250 [ 428.185168][T11680] ? ksys_write+0x190/0x250 [ 428.185195][T11680] ipcget+0xee/0xf50 [ 428.185229][T11680] ? do_futex+0x192/0x350 [ 428.185262][T11680] ? __pfx_do_futex+0x10/0x10 [ 428.185299][T11680] ? __pfx_ipcget+0x10/0x10 [ 428.185335][T11680] ? __x64_sys_futex+0x34f/0x4d0 [ 428.185366][T11680] ? __x64_sys_futex+0x358/0x4d0 [ 428.185404][T11680] __x64_sys_shmget+0x13b/0x1b0 [ 428.185439][T11680] ? __pfx___x64_sys_shmget+0x10/0x10 [ 428.185483][T11680] do_syscall_64+0x106/0xf80 [ 428.185507][T11680] ? clear_bhb_loop+0x40/0x90 [ 428.185536][T11680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.185561][T11680] RIP: 0033:0x7f84e2d9c819 [ 428.185581][T11680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.185605][T11680] RSP: 002b:00007f84e3bc4028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 428.185628][T11680] RAX: ffffffffffffffda RBX: 00007f84e3015fa0 RCX: 00007f84e2d9c819 [ 428.185644][T11680] RDX: 0000000079e56dc9 RSI: 0000000000000003 RDI: 0000000100000000 [ 428.185658][T11680] RBP: 00007f84e2e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 428.185673][T11680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 428.185687][T11680] R13: 00007f84e3016038 R14: 00007f84e3015fa0 R15: 00007ffd71ac94c8 [ 428.185718][T11680] [ 430.706578][T11682] Process accounting paused [ 430.909410][T11717] netlink: 186 bytes leftover after parsing attributes in process `syz.0.1234'. [ 432.807447][T11747] can: request_module (can-proto-0) failed. [ 433.717652][T11770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1246'. [ 433.966172][T11773] vmstat_refresh: nr_hugetlb -11264 [ 436.328828][ T29] audit: type=1800 audit(4294967301.380:17): pid=11811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1255" name="sr0" dev="devtmpfs" ino=2862 res=0 errno=0 [ 437.557954][T11835] zswap: compressor not available [ 437.598504][T11841] netlink: 'syz.1.1258': attribute type 11 has an invalid length. [ 437.627125][T11841] netlink: 'syz.1.1258': attribute type 11 has an invalid length. [ 437.665102][T11841] netlink: 'syz.1.1258': attribute type 11 has an invalid length. [ 437.718569][T11841] netlink: 'syz.1.1258': attribute type 11 has an invalid length. [ 437.854970][T11837] zswap: compressor 0 not available [ 438.049582][T11849] bridge_slave_1: left allmulticast mode [ 438.088697][T11849] bridge_slave_1: left promiscuous mode [ 438.111274][T11849] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.080712][T11868] [U] ^H [ 439.279388][T11876] QAT: Device 5 not found [ 439.383795][T11879] FAULT_INJECTION: forcing a failure. [ 439.383795][T11879] name failslab, interval 1, probability 0, space 0, times 0 [ 439.484519][T11879] CPU: 0 UID: 0 PID: 11879 Comm: syz.0.1274 Tainted: G L syzkaller #0 PREEMPT(full) [ 439.484558][T11879] Tainted: [L]=SOFTLOCKUP [ 439.484567][T11879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 439.484582][T11879] Call Trace: [ 439.484590][T11879] [ 439.484599][T11879] dump_stack_lvl+0x100/0x190 [ 439.484640][T11879] should_fail_ex.cold+0x5/0xa [ 439.484669][T11879] should_failslab+0xc2/0x120 [ 439.484697][T11879] __kmalloc_cache_noprof+0x7a/0x6f0 [ 439.484731][T11879] ? madvise_collapse+0x1b5/0xbe0 [ 439.484769][T11879] madvise_collapse+0x1b5/0xbe0 [ 439.484806][T11879] ? find_held_lock+0x2b/0x80 [ 439.484830][T11879] ? finish_task_switch.isra.0+0x200/0xb80 [ 439.484857][T11879] ? __pfx_madvise_collapse+0x10/0x10 [ 439.484890][T11879] ? rcu_is_cpu_rrupt_from_idle+0x251/0x270 [ 439.484944][T11879] madvise_vma_behavior+0x1987/0x3050 [ 439.484979][T11879] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 439.485016][T11879] ? mas_prev_setup.constprop.0+0xb6/0x9c0 [ 439.485048][T11879] ? mas_prev+0x9b/0xf0 [ 439.485074][T11879] ? __pfx_mas_prev+0x10/0x10 [ 439.485126][T11879] ? find_vma_prev+0xd8/0x150 [ 439.485153][T11879] ? futex_unqueue+0x133/0x2c0 [ 439.485184][T11879] ? __pfx_find_vma_prev+0x10/0x10 [ 439.485220][T11879] ? __futex_wait+0x256/0x300 [ 439.485264][T11879] madvise_walk_vmas+0x2fe/0xa90 [ 439.485300][T11879] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 439.485339][T11879] madvise_do_behavior+0x1ea/0x510 [ 439.485372][T11879] ? __pfx_madvise_do_behavior+0x10/0x10 [ 439.485404][T11879] ? down_read+0x13b/0x460 [ 439.485446][T11879] do_madvise+0x195/0x240 [ 439.485476][T11879] ? __pfx_do_madvise+0x10/0x10 [ 439.485506][T11879] ? do_futex+0x192/0x350 [ 439.485565][T11879] __x64_sys_madvise+0xa9/0x110 [ 439.485595][T11879] ? lockdep_hardirqs_on+0x78/0x100 [ 439.485619][T11879] do_syscall_64+0x106/0xf80 [ 439.485644][T11879] ? clear_bhb_loop+0x40/0x90 [ 439.485673][T11879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.485697][T11879] RIP: 0033:0x7f84e2d9c819 [ 439.485717][T11879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 439.485741][T11879] RSP: 002b:00007f84e3bc4028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 439.485764][T11879] RAX: ffffffffffffffda RBX: 00007f84e3015fa0 RCX: 00007f84e2d9c819 [ 439.485780][T11879] RDX: 0000000000000019 RSI: ffffffffffff0005 RDI: 0000000000000000 [ 439.485794][T11879] RBP: 00007f84e2e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 439.485809][T11879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 439.485823][T11879] R13: 00007f84e3016038 R14: 00007f84e3015fa0 R15: 00007ffd71ac94c8 [ 439.485855][T11879] [ 440.157790][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.167628][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.384636][T11888] netlink: 202 bytes leftover after parsing attributes in process `syz.1.1277'. [ 440.612976][T11894] QAT: Stopping all acceleration devices. [ 440.891016][T11902] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input20 [ 441.341593][T11909] input: jJǸ-9%vJ86 as /devices/virtual/input/input21 [ 441.784402][T11916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1284'. [ 442.652801][T11922] futex_wake_op: syz.3.1286 tries to shift op by -2048; fix this program [ 442.708497][T11922] futex_wake_op: syz.3.1286 tries to shift op by -2048; fix this program [ 444.123667][T11935] sysfs_service_op_show: Client not running :-5: [ 444.301725][ T7362] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 445.215671][T11943] netlink: 'syz.2.1290': attribute type 3 has an invalid length. [ 446.104103][T11974] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1298'. [ 447.155365][T11994] delete_channel: no stack [ 449.405250][T12029] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1311'. [ 449.568244][T12034] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1312'. [ 450.612204][T12044] ======================================================= [ 450.612204][T12044] WARNING: The mand mount option has been deprecated and [ 450.612204][T12044] and is ignored by this kernel. Remove the mand [ 450.612204][T12044] option from the mount to silence this warning. [ 450.612204][T12044] ======================================================= [ 450.688803][ T7362] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 451.030291][T12051] binder: 12043:12051 ioctl 541b 0 returned -22 [ 451.758036][T12055] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1316'. [ 452.237828][T12055] bond0: entered promiscuous mode [ 452.242911][T12055] bond_slave_0: entered promiscuous mode [ 452.374118][T12055] bond_slave_1: entered promiscuous mode [ 454.305907][T12066] zswap: compressor not available [ 454.664046][T12080] netlink: 'syz.3.1324': attribute type 1 has an invalid length. [ 454.945371][T12089] scsi_dev_info_list_add_str: bad dev info string '' '' '' [ 458.435676][T12135] usb usb3: usbfs: process 12135 (syz.3.1340) did not claim interface 0 before use [ 460.675569][T12152] sctp: [Deprecated]: syz.0.1343 (pid 12152) Use of struct sctp_assoc_value in delayed_ack socket option. [ 460.675569][T12152] Use struct sctp_sack_info instead [ 460.989206][T12172] Process accounting resumed [ 461.075372][T12181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1350'. [ 461.928657][T12178] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1350'. [ 462.688120][T12200] netlink: 'syz.1.1353': attribute type 11 has an invalid length. [ 462.915459][T12200] netlink: 'syz.1.1353': attribute type 11 has an invalid length. [ 463.277060][T12200] netlink: 'syz.1.1353': attribute type 11 has an invalid length. [ 463.427945][ T29] audit: type=1800 audit(4294967328.607:18): pid=12204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1354" name="dbroot" dev="configfs" ino=42642 res=0 errno=0 [ 463.451594][T12200] netlink: 'syz.1.1353': attribute type 11 has an invalid length. [ 467.784666][T12282] netlink: 'syz.2.1376': attribute type 11 has an invalid length. [ 467.842529][T12282] netlink: 'syz.2.1376': attribute type 11 has an invalid length. [ 467.923524][T12282] netlink: 'syz.2.1376': attribute type 11 has an invalid length. [ 468.001796][T12282] netlink: 'syz.2.1376': attribute type 11 has an invalid length. [ 468.603062][T12301] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1383'. [ 469.890872][T12323] [ 469.893271][T12323] ====================================================== [ 469.900303][T12323] WARNING: possible circular locking dependency detected [ 469.907428][T12323] syzkaller #0 Tainted: G L [ 469.913430][T12323] ------------------------------------------------------ [ 469.920461][T12323] syz.1.1390/12323 is trying to acquire lock: [ 469.926534][T12323] ffffffff8e84a7c8 (cgroup_mutex){+.+.}-{4:4}, at: cgroup_kn_lock_live+0x116/0x520 [ 469.935904][T12323] [ 469.935904][T12323] but task is already holding lock: [ 469.943288][T12323] ffff888059c1d5c0 (&type->i_mutex_dir_key#7){++++}-{4:4}, at: vfs_rmdir+0xed/0x8a0 [ 469.952738][T12323] [ 469.952738][T12323] which lock already depends on the new lock. [ 469.952738][T12323] [ 469.963150][T12323] [ 469.963150][T12323] the existing dependency chain (in reverse order) is: [ 469.972170][T12323] [ 469.972170][T12323] -> #3 (&type->i_mutex_dir_key#7){++++}-{4:4}: [ 469.981012][T12323] down_read+0x99/0x460 [ 469.985732][T12323] lookup_slow+0x42/0x70 [ 469.990708][T12323] path_lookupat+0x5e8/0xc40 [ 469.995886][T12323] filename_lookup+0x202/0x590 [ 470.001380][T12323] kern_path+0x37/0x50 [ 470.006001][T12323] lookup_bdev+0xd8/0x280 [ 470.010978][T12323] bdev_file_open_by_path+0x82/0x330 [ 470.016815][T12323] block2mtd_setup2.isra.0+0x2ee/0xc70 [ 470.022834][T12323] block2mtd_setup+0xbd/0xd0 [ 470.027977][T12323] param_attr_store+0x199/0x300 [ 470.033362][T12323] module_attr_store+0x58/0x80 [ 470.038676][T12323] sysfs_kf_write+0xf2/0x150 [ 470.043814][T12323] kernfs_fop_write_iter+0x3e0/0x5f0 [ 470.049655][T12323] vfs_write+0x6ac/0x1070 [ 470.054529][T12323] ksys_write+0x12a/0x250 [ 470.059406][T12323] do_syscall_64+0x106/0xf80 [ 470.064642][T12323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.071102][T12323] [ 470.071102][T12323] -> #2 (param_lock){+.+.}-{4:4}: [ 470.078435][T12323] __mutex_lock+0x1a2/0x1b90 [ 470.083608][T12323] ieee80211_init_rate_ctrl_alg+0x1df/0x3b0 [ 470.090058][T12323] ieee80211_register_hw+0x2950/0x4140 [ 470.096078][T12323] mac80211_hwsim_new_radio+0x2847/0x57d0 [ 470.102341][T12323] init_mac80211_hwsim+0x6db/0x7f0 [ 470.108051][T12323] do_one_initcall+0x11d/0x760 [ 470.113364][T12323] kernel_init_freeable+0x6e5/0x7a0 [ 470.119126][T12323] kernel_init+0x1f/0x1e0 [ 470.124004][T12323] ret_from_fork+0x754/0xd80 [ 470.129160][T12323] ret_from_fork_asm+0x1a/0x30 [ 470.134504][T12323] [ 470.134504][T12323] -> #1 (rtnl_mutex){+.+.}-{4:4}: [ 470.141822][T12323] __mutex_lock+0x1a2/0x1b90 [ 470.147007][T12323] cgrp_css_online+0xa1/0x1f0 [ 470.152408][T12323] online_css+0xb2/0x350 [ 470.157202][T12323] cgroup_apply_control_enable+0x8bd/0xbd0 [ 470.163559][T12323] cgroup_mkdir+0x57f/0x1330 [ 470.168685][T12323] kernfs_iop_mkdir+0x111/0x190 [ 470.174160][T12323] vfs_mkdir+0x361/0x850 [ 470.178956][T12323] filename_mkdirat+0x48b/0x5e0 [ 470.184353][T12323] __x64_sys_mkdirat+0x89/0xc0 [ 470.189744][T12323] do_syscall_64+0x106/0xf80 [ 470.194961][T12323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.201396][T12323] [ 470.201396][T12323] -> #0 (cgroup_mutex){+.+.}-{4:4}: [ 470.208803][T12323] __lock_acquire+0x14b8/0x2630 [ 470.214216][T12323] lock_acquire+0x1cf/0x380 [ 470.219269][T12323] __mutex_lock+0x1a2/0x1b90 [ 470.224414][T12323] cgroup_kn_lock_live+0x116/0x520 [ 470.230124][T12323] cgroup_rmdir+0x22/0x300 [ 470.235073][T12323] kernfs_iop_rmdir+0x106/0x170 [ 470.240480][T12323] vfs_rmdir+0x328/0x8a0 [ 470.245276][T12323] filename_rmdir+0x31a/0x5c0 [ 470.250501][T12323] __x64_sys_rmdir+0x46/0x70 [ 470.255630][T12323] do_syscall_64+0x106/0xf80 [ 470.260764][T12323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.267218][T12323] [ 470.267218][T12323] other info that might help us debug this: [ 470.267218][T12323] [ 470.277469][T12323] Chain exists of: [ 470.277469][T12323] cgroup_mutex --> param_lock --> &type->i_mutex_dir_key#7 [ 470.277469][T12323] [ 470.290630][T12323] Possible unsafe locking scenario: [ 470.290630][T12323] [ 470.298180][T12323] CPU0 CPU1 [ 470.303558][T12323] ---- ---- [ 470.308957][T12323] lock(&type->i_mutex_dir_key#7); [ 470.314291][T12323] lock(param_lock); [ 470.320818][T12323] lock(&type->i_mutex_dir_key#7); [ 470.328576][T12323] lock(cgroup_mutex); [ 470.332864][T12323] [ 470.332864][T12323] *** DEADLOCK *** [ 470.332864][T12323] [ 470.341184][T12323] 3 locks held by syz.1.1390/12323: [ 470.346387][T12323] #0: ffff88807fec2420 (sb_writers#10){.+.+}-{0:0}, at: filename_rmdir+0x1ff/0x5c0 [ 470.355853][T12323] #1: ffff88805cae8148 (&type->i_mutex_dir_key#7/1){+.+.}-{4:4}, at: filename_rmdir+0x258/0x5c0 [ 470.366475][T12323] #2: ffff888059c1d5c0 (&type->i_mutex_dir_key#7){++++}-{4:4}, at: vfs_rmdir+0xed/0x8a0 [ 470.376352][T12323] [ 470.376352][T12323] stack backtrace: [ 470.382248][T12323] CPU: 0 UID: 0 PID: 12323 Comm: syz.1.1390 Tainted: G L syzkaller #0 PREEMPT(full) [ 470.382282][T12323] Tainted: [L]=SOFTLOCKUP [ 470.382290][T12323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 470.382304][T12323] Call Trace: [ 470.382314][T12323] [ 470.382323][T12323] dump_stack_lvl+0x100/0x190 [ 470.382360][T12323] print_circular_bug.cold+0x178/0x1c7 [ 470.382398][T12323] check_noncircular+0x146/0x160 [ 470.382431][T12323] __lock_acquire+0x14b8/0x2630 [ 470.382468][T12323] lock_acquire+0x1cf/0x380 [ 470.382497][T12323] ? cgroup_kn_lock_live+0x116/0x520 [ 470.382535][T12323] ? __pfx___might_resched+0x10/0x10 [ 470.382574][T12323] __mutex_lock+0x1a2/0x1b90 [ 470.382599][T12323] ? cgroup_kn_lock_live+0x116/0x520 [ 470.382636][T12323] ? cgroup_kn_lock_live+0x116/0x520 [ 470.382673][T12323] ? __lock_acquire+0x4a5/0x2630 [ 470.382703][T12323] ? __pfx___mutex_lock+0x10/0x10 [ 470.382729][T12323] ? __lock_acquire+0x4a5/0x2630 [ 470.382761][T12323] ? find_held_lock+0x2b/0x80 [ 470.382782][T12323] ? cgroup_kn_lock_live+0x290/0x520 [ 470.382818][T12323] ? cgroup_kn_lock_live+0x290/0x520 [ 470.382856][T12323] ? cgroup_kn_lock_live+0x116/0x520 [ 470.382891][T12323] cgroup_kn_lock_live+0x116/0x520 [ 470.382927][T12323] ? kernfs_root+0xee/0x2a0 [ 470.382963][T12323] cgroup_rmdir+0x22/0x300 [ 470.382991][T12323] kernfs_iop_rmdir+0x106/0x170 [ 470.383012][T12323] ? security_inode_rmdir+0xe2/0x280 [ 470.383040][T12323] vfs_rmdir+0x328/0x8a0 [ 470.383074][T12323] filename_rmdir+0x31a/0x5c0 [ 470.383102][T12323] ? __pfx_filename_rmdir+0x10/0x10 [ 470.383135][T12323] ? do_getname+0x191/0x390 [ 470.383166][T12323] __x64_sys_rmdir+0x46/0x70 [ 470.383192][T12323] do_syscall_64+0x106/0xf80 [ 470.383216][T12323] ? clear_bhb_loop+0x40/0x90 [ 470.383243][T12323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.383268][T12323] RIP: 0033:0x7f8142b9c819 [ 470.383288][T12323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 470.383311][T12323] RSP: 002b:00007f81439b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 470.383332][T12323] RAX: ffffffffffffffda RBX: 00007f8142e16180 RCX: 00007f8142b9c819 [ 470.383348][T12323] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 470.383361][T12323] RBP: 00007f8142c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 470.383376][T12323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 470.383390][T12323] R13: 00007f8142e16218 R14: 00007f8142e16180 R15: 00007ffc92158f68 [ 470.383412][T12323] [ 470.726189][ T29] audit: type=1800 audit(4294967335.861:19): pid=12320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1389" name="members" dev="configfs" ino=43528 res=0 errno=0