last executing test programs: 14m43.029549005s ago: executing program 1 (id=1041): bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, 0xffffffffffffffff, 0x200, 0xc, 0x2203, 0x5, 0xffffffffffffffff, 0x0, 0x5}, 0x4f4) r2 = bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={r0, 0x4, 0x0, 0x2, 0x8, 0xc, 0x66b, 0x4, 0x1}, 0x6f4) r6 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x20342, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x15, 0x3, 0x0) ioctl$auto_SNDCTL_DSP_RESET(r6, 0x5000, 0x0) (async) ioctl$auto_SNDCTL_DSP_RESET(r6, 0x5000, 0x0) r7 = bpf$auto(0xfefffffd, 0x0, 0xa59) connect$auto(0x3, 0x0, 0x50) (async) connect$auto(0x3, 0x0, 0x50) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r8) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r2, @ANYRESHEX=r9, @ANYRESOCT=r7, @ANYRES64=r8, @ANYRES32=r4, @ANYRES8], 0x2e20}, 0x1, 0x0, 0x0, 0x8010}, 0x2004c084) (async) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r2, @ANYRESHEX=r9, @ANYRESOCT=r7, @ANYRES64=r8, @ANYRES32=r4, @ANYRES8], 0x2e20}, 0x1, 0x0, 0x0, 0x8010}, 0x2004c084) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004811}, 0x800) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x35, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) io_uring_setup$auto(0x59, 0x0) (async) r10 = io_uring_setup$auto(0x59, 0x0) io_uring_enter$auto(r10, 0x9, 0x820e, 0x6, 0x0, 0x18) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) prctl$auto(0xffff, 0x9, r3, 0x6, 0x2000000002) mmap$auto(0x0, 0x2, 0x3, 0x12, 0x7, 0x7a9) (async) mmap$auto(0x0, 0x2, 0x3, 0x12, 0x7, 0x7a9) futex$auto(0x0, 0x85, 0xc5d8, 0x0, 0x0, 0x80800005) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r1, 0x5001, 0xfffffffffffffffc) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$auto(0x3, 0x6f2d, r6) r11 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/block/nbd3/queue/max_sectors_kb\x00', 0x183841, 0x0) write$auto(r11, &(0x7f00000003c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xadR\\\xcc\x8b\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y', 0x4) (async) write$auto(r11, &(0x7f00000003c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xadR\\\xcc\x8b\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y', 0x4) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0) sendfile$auto(r5, 0xffffffffffffffff, 0x0, 0x7ffffffe) (async) sendfile$auto(r5, 0xffffffffffffffff, 0x0, 0x7ffffffe) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0xa40, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0xa40, 0x0) 14m42.723534885s ago: executing program 1 (id=1042): r0 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) read$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(r0, 0x0, 0x17) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffff2d, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto_PR_GET_TID_ADDRESS(0x28, 0x2, 0x0, 0x0, 0x40) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/auto_online_blocks\x00', 0x2, 0x0) read$auto(0x3, 0x0, 0x80) write$auto(0x3, 0x0, 0xfdef) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, &(0x7f0000000140)={0x0, 0x55}, 0x6, 0x2, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dri/card1\x00', 0xa0802, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000000c0), 0x1040000, 0x0) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) (async) read$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(r0, 0x0, 0x17) (async) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffff2d, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) prctl$auto_PR_GET_TID_ADDRESS(0x28, 0x2, 0x0, 0x0, 0x40) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x10, 0x2, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/auto_online_blocks\x00', 0x2, 0x0) (async) read$auto(0x3, 0x0, 0x80) (async) write$auto(0x3, 0x0, 0xfdef) (async) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) (async) process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, &(0x7f0000000140)={0x0, 0x55}, 0x6, 0x2, 0x0) (async) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dri/card1\x00', 0xa0802, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000000c0), 0x1040000, 0x0) (async) 14m41.013588464s ago: executing program 1 (id=1050): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.7/usb8/power/wakeup_total_time_ms\x00', 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) socket(0x11, 0x2, 0x6) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/006/001\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000000c0), 0x222680, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) socketpair$auto(0x4004, 0x8, 0x7, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) sendmsg$auto_NL80211_CMD_SET_KEY(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)={0x544, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_STA_PLINK_STATE={0x5}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xf8}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x20}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, 0x401}, @NL80211_ATTR_UNSOL_BCAST_PROBE_RESP={0x504, 0x127, 0x0, 0x1, [@NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x1}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x10}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x190e000}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0xfffffff9}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x4e0, 0x2, "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"}]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}]}, 0x544}, 0x1, 0x0, 0x0, 0xc004}, 0x20008000) ioctl$auto_TIOCSTI2(r1, 0x5412, 0x0) 14m40.736790481s ago: executing program 1 (id=1051): mkdir$auto(&(0x7f00000000c0)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00', &(0x7f0000000080)='nfsd\x00', 0x7, 0x0) mmap$auto(0x0, 0xf, 0x3, 0xeb1, 0xffffffffffffffff, 0x10000000008000) r0 = open(&(0x7f0000000200)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06\x00', 0x0, 0x6f) getdents64$auto(r0, 0x0, 0x18) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4c855}, 0x4880) r1 = bpf$auto(0x11, &(0x7f0000000000)=@batch={0xfffffffffffffffb, 0x44, 0x2, 0x9, 0x1, 0xffffffffffffffff, 0xa, 0x6}, 0xcf) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0xfffffffd, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r3 = socket(0x29, 0x2, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200"], 0x1ac}}, 0x40000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/platform/i8042/serio1/id/extra\x00', 0x80040, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000040)=""/215, 0xd7) recvmmsg$auto(r4, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) r6 = setfsuid$auto(0xee00) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000000000000000) r7 = clone$auto(0x5, 0x8001, &(0x7f00000001c0), &(0x7f0000000200)=0x6, 0x5) sendmsg$auto_NL80211_CMD_ADD_NAN_FUNCTION(r2, &(0x7f0000000d40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r7, @ANYRESDEC=r1, @ANYRESDEC=r3], 0xa58}, 0x1, 0x0, 0x0, 0x1}, 0x20000894) r8 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram8\x00', 0x81, 0x0) r9 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0x101080, 0x0) ioctl$auto(r9, 0x2, 0x9) ioctl$auto_PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000f80)={0x8, 0x5, 0x800, 0x2, 0x4, 0x3, 0x2c, 0x7, 0xffff, 0x1ff, 0xfffffffffffffffd, 0xc9d2}) ioctl$auto_BLKDISCARD(r8, 0x1277, 0x0) r10 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r11 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000d80), r3) sendmsg$auto_NL80211_CMD_UPDATE_FT_IES(r10, &(0x7f0000000f40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x800004}, 0xc, &(0x7f0000000f00)={&(0x7f0000001000)={0x1fc, r11, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_TDLS_SUPPORT={0x4}, @NL80211_ATTR_ASSOC_MLD_EXT_CAPA_OPS={0x6, 0x151, 0xfffc}, @NL80211_ATTR_AUTH_DATA={0xfc, 0x9c, "0518e9e2186d81d5e2e95e72e93e63548a62128fa7cb4613766560b88f43d110522eb8f9583535fb74298e637c7a07119a02427876a8afb5e81df3f70d18586a88dd2ab9d8f784664a24d7ea4899340f349ccc0fac23f903df60e8a5eb8318640ae4788afdeda36b256a286ccad8ba07757ba94c30586768b6addd4cc7daed6f93b4213775e600a28e3b739d88740ca9868c2319eef153b9833d882ddc50e0c596096a5880a0a527ef9fecf185d9be8a8bba8957d0d6d1ea832730603942b9856d42941c2b7cdcf135ee02de48c260bfff58ac874f58914967f76ece9b898d943eb7a6ceba25b139ee12f407ed077eb17b99a09d825fa485"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, 0xf0d}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xcc, 0x75, 0x0, 0x1, [@typed={0x29, 0x48, 0x0, 0x0, @binary="ce130dcd5ae4a28d3f9b5b9fa7ba389f957aa47317f94cf79c6c770b58f447809ad1616d48"}, @nested={0xc, 0xe8, 0x0, 0x1, [@typed={0x8, 0x138, 0x0, 0x0, @uid=r6}]}, @nested={0x8f, 0xf9, 0x0, 0x1, [@generic="0096f02ac5a51be4806139b7f9f48c28e7bf8b42f0bfd6541b83bb69ab47cb140e86a6eec0e9b424df9da1e78c90fb9d3a7e08818fa342cd48abfab231a1971a153215d87ce81b251a51e236634fdace013de81cdae4a7bb56cf540ccf1b60420f2d629b5e7bc1a78b0d867ef183324b9e53f6020d6724f4b1f47e730a285d467458ab8e8deb4442a80809"]}]}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0x80000001}, @NL80211_ATTR_BSSID={0x4}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x11}, 0x24000010) r12 = setfsuid$auto(0xee01) setresuid$auto(r6, r12, r6) 14m39.731138034s ago: executing program 1 (id=1055): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x161342, 0x130) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) (async) fallocate$auto(0x8000000000000003, 0x0, 0x8000000d, 0x2cbd5d) (async) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) (async, rerun: 64) pread64$auto(r0, &(0x7f0000000000)=')\x00', 0x8, 0x8) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, r1) (async) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r1, 0x0, 0x40000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000080), r2) (async, rerun: 32) syz_genetlink_get_family_id$auto_cifs(&(0x7f0000000700), r1) (rerun: 32) ioctl$auto_BLKTRACESETUP32(0xffffffffffffffff, 0xc0401273, &(0x7f0000000200)={"31e6ab74dc10bd4021e429e869018611815dffff2b4f4265d1263e2076464a94", 0x3f9, 0x3c, 0x5, 0x16000000, 0x6}) (async, rerun: 64) ioctl$auto_XFS_IOC_FREESP(0xffffffffffffffff, 0x4030580b, &(0x7f0000000780)={0x4bde, 0x4, 0x692, 0xa, 0x6}) (async, rerun: 64) sendmsg$auto_MAC802154_HWSIM_CMD_DEL_EDGE(r0, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="30030000", @ANYRES16=r3, @ANYBLOB="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"], 0x330}, 0x1, 0x0, 0x0, 0x8005}, 0x24804) (async) io_uring_setup$auto(0x401, 0x0) (async) r4 = socket(0x11, 0x80003, 0x300) setsockopt$auto_SO_RCVPRIORITY(r4, 0x1, 0x52, &(0x7f0000000000)='/dev/kvm\x00', 0x5) (async, rerun: 64) r5 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000500), r1) (rerun: 64) sendmsg$auto_OVS_VPORT_CMD_NEW(r4, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0xb4837a35521c00e4}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xbc, r5, 0x202, 0x70bd29, 0x25dfdbfb, {}, [@OVS_VPORT_ATTR_UPCALL_STATS={0xc, 0xa, 0x0, 0x1, [@nested={0x8, 0x9, 0x0, 0x1, [@nested={0x4, 0xa9}]}]}, @OVS_VPORT_ATTR_TYPE={0x8}, @OVS_VPORT_ATTR_UPCALL_PID={0x89, 0x5, "9cc24e83d9ed8827724b7eed4d298a4aad17b90222b99f4e3870cbac6ee2fd8c990df65f6553e7a6a68a16f8c6c7b7a42553ff6a636847f6d6db067b18694fa423372e82b225e5a89156d6ddfe310aded58abfea469401320d37cd8655941dc06cbfa92322b061c3c10afb715536b495cbea6e84af01c8d32c2010f40873db99e112c40dc6"}, @OVS_VPORT_ATTR_NAME={0x5, 0x3, '\x00'}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000680)='/sys/devices/platform/vivid.0/video4linux/swradio5/power/control\x00', 0x4101, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000018c0)='/proc/thread-self/net/rxrpc/bundles\x00', 0x100, 0x0) pread64$auto(r6, 0x0, 0xf429, 0x100) (async) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, 0x0, 0x4) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101c40, 0x0) setreuid$auto(0x4, 0x8) (async) ioctl$auto(r7, 0x5602, 0xffffffffffffffff) (async) socket(0x10, 0x2, 0x6) (async) readv$auto(0x3, 0x0, 0x1) 14m38.845674434s ago: executing program 1 (id=1059): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) write$auto(r0, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) r1 = setfsuid$auto(0xee00) r2 = setfsuid$auto(0xee01) setresuid$auto(r1, r2, r1) lsm_get_self_attr$auto(0x6, &(0x7f0000000100)={0x80000001, 0x9, 0x1, 0xec, "a7d20feab6e7dbc2f04ba945455e74d14720ffb9f467c8a1ee801b577bd408038ceb3b394a88957b3da7b634603d1a21299c871ff80db5e4f7290678735bd29ea60b8d9af7b3b2c88cf86edc0922c68b289d22b5272163515919f065d69d09667b0a426494fbb502bad63d172e33ed0c14844a7b4f15608177a1cd7c109f597a1581e8fb7db3a4ccefd5929081b46d29477457a35b69307103a575381f0f2a6d29008256b4df01fae121c54a4e71a742fec38fcfa7e1d30c26adde4fecc4f45b522ebaeaa0e10dc797837d8f6431e260f2f7663d37da88504d9e0c5d491dde4bfe15cb1b6f35b2a82f94e8c0"}, 0x0, 0x3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x9a6, 0xe000) connect$auto(0x3, &(0x7f0000000080)=@xdp={0x2c, 0x4, 0x0, 0xc}, 0x54) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x242, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD64(0xffffffffffffffff, 0x400454a4, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) socket(0x1, 0x3, 0x9000) setsockopt$auto(0x400000000000003, 0x0, 0x44, 0x0, 0x567) unshare$auto(0x40000080) acct$auto(&(0x7f0000000040)='/dev/video1\x00') prctl$auto(0x23, 0x3ffffffffffffffd, 0x2009, 0x0, 0x0) mmap$auto(0x4, 0x2020009, 0x39, 0x6913, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x61, 0x100001000000003, 0x9b72, 0x2, 0xfffffffffffffcff) close_range$auto(0x2, 0x8, 0x3f00) io_uring_setup$auto(0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x106) 14m38.083269699s ago: executing program 32 (id=1059): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) write$auto(r0, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) r1 = setfsuid$auto(0xee00) r2 = setfsuid$auto(0xee01) setresuid$auto(r1, r2, r1) lsm_get_self_attr$auto(0x6, &(0x7f0000000100)={0x80000001, 0x9, 0x1, 0xec, "a7d20feab6e7dbc2f04ba945455e74d14720ffb9f467c8a1ee801b577bd408038ceb3b394a88957b3da7b634603d1a21299c871ff80db5e4f7290678735bd29ea60b8d9af7b3b2c88cf86edc0922c68b289d22b5272163515919f065d69d09667b0a426494fbb502bad63d172e33ed0c14844a7b4f15608177a1cd7c109f597a1581e8fb7db3a4ccefd5929081b46d29477457a35b69307103a575381f0f2a6d29008256b4df01fae121c54a4e71a742fec38fcfa7e1d30c26adde4fecc4f45b522ebaeaa0e10dc797837d8f6431e260f2f7663d37da88504d9e0c5d491dde4bfe15cb1b6f35b2a82f94e8c0"}, 0x0, 0x3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x9a6, 0xe000) connect$auto(0x3, &(0x7f0000000080)=@xdp={0x2c, 0x4, 0x0, 0xc}, 0x54) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x242, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD64(0xffffffffffffffff, 0x400454a4, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) socket(0x1, 0x3, 0x9000) setsockopt$auto(0x400000000000003, 0x0, 0x44, 0x0, 0x567) unshare$auto(0x40000080) acct$auto(&(0x7f0000000040)='/dev/video1\x00') prctl$auto(0x23, 0x3ffffffffffffffd, 0x2009, 0x0, 0x0) mmap$auto(0x4, 0x2020009, 0x39, 0x6913, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x61, 0x100001000000003, 0x9b72, 0x2, 0xfffffffffffffcff) close_range$auto(0x2, 0x8, 0x3f00) io_uring_setup$auto(0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x106) 9.584877131s ago: executing program 2 (id=3858): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f00000000c0), 0x141401, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) (async, rerun: 32) socket(0x2a, 0x80002, 0x73) (rerun: 32) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) (async) ioctl$auto(0x3, 0x404c534a, 0x38) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r0) (async) sendmsg$auto_NL802154_CMD_SET_PAN_ID(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000011c0)=ANY=[], 0x1058}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) socket(0x2, 0x1, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/mac80211_hwsim/hwsim0/net/wlan0/queues/tx-0/tx_maxrate\x00', 0x181b00, 0x0) (async) fanotify_init$auto(0x5, 0x2000000000002) (async) socket(0xa, 0x3, 0x5) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/raw6\x00', 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x10, 0x2, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'macvlan0\x00'}) (async) r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000ec0), r1) sendmsg$auto_NETDEV_CMD_QUEUE_GET2(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f00)={0x14, r2, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) (async, rerun: 64) r3 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (rerun: 64) close_range$auto(r3, r3, 0x0) (async) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video38\x00', 0x2140, 0x0) ioctl$auto(r4, 0xc0585611, r4) (async) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) 8.881737153s ago: executing program 0 (id=3861): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x5, 0x3, 0x17, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0x203, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) ioprio_set$auto(0x2, 0x800000000, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x34, r3, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x80) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000d00), 0x48900, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01009b64c23ef155546b0104000008000900", @ANYBLOB="080005000600000008000200", @ANYRES32=0x0, @ANYBLOB="0c00010069"], 0x8d}, 0x1, 0x0, 0x0, 0x10}, 0x2000000) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r4, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) 8.678891773s ago: executing program 2 (id=3863): openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video3\x00', 0x2aa01, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) remap_file_pages$auto(0x6a27, 0x7ffffffff000, 0x0, 0x3, 0x4) statmount$auto(0x0, 0x0, 0x3, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_CABLE_TEST_TDR_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000800) 8.331324769s ago: executing program 0 (id=3864): unshare$auto(0x40000080) r0 = socket(0x11, 0x3, 0x9) r1 = bpf$auto(0x5, &(0x7f0000001180)=@link_update={r0, @new_prog_fd=r0, 0xf, @old_map_fd}, 0x80000007) sendmmsg$auto(r0, &(0x7f0000000100)={{&(0x7f0000000000), 0x5aa, &(0x7f00000000c0)={&(0x7f0000000040)='f', 0x49}, 0x1, &(0x7f0000000200), 0x5, 0x3}, 0x4}, 0x2, 0x100) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(0x0, 0x8000, 0x0, 0x6) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2048000}, 0x40000) kexec_load$auto(0x70, 0x2, &(0x7f0000000080)={@buf=0x0, 0x0, 0x8000, 0x403000}, 0x4) syz_genetlink_get_family_id$auto_smbd_genl(0x0, 0xffffffffffffffff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r3, 0x4, 0x7ff) ptrace$auto(0xb4, r3, 0x1, 0x8f) ioctl$auto_BLKTRACESETUP2(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={"bc2c0836f3db289c4a77b673bd24fb324eb2db1f6482267857f41b6d0754256e", 0x6, 0x81, 0x40, 0x8, 0x7fffffff, 0xffffffffffffffff}) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2200008}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c0050000", @ANYRES16=r2, @ANYBLOB="010228bd7000fedbdf2501000000a905018008007500", @ANYRES32=r3, @ANYBLOB, @ANYRES32=r4, @ANYBLOB="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"], 0x5c0}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) prctl$auto(0x3, 0x5, r3, 0x7, 0x0) listen$auto(0x3, 0x81) ioctl$auto_BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000180)={@inferred=r1, "7721170cc4811e3f5f811d86ed26dbf632f77dfbcf85655fa696ff8ad1dd92d8bad19426a800c895c4d764269e81361c718f2b3f2012d59e7c9f72d8915ec0e3375a0c8653558b5ead32830fafa09bd4afcc6f602b0c6887351e85200a598d02e056bb525dd6f4bf1aeaf5384e94b853fbafb5b8c72e0570ba629f4bc039679411d6d41faab6c3bb5023033a6857b304cd147b983754afa92928a177f6703670b361f52d9a91f55a911374d324195d9370a94c1b816d9b8febe7a2c6238e20a033fa5bec7d5d1db38c0b01bb3e2aa8bfb9bce6c5ed84865a58142a0a73f03c88d1c0346144e915710bf1bbb2676ea47e5b8221bf6d33beb74bc1a8208e4dc960919f941f4d8bcb5de635108a7151ceef07e5e5b16b89d576baa82e512c459003da1219b0cd340ecb5bef599b25ed9a0d9bf13b8417b397ee0a2f93a7a02afc8abd727f99f44904d59b544f25e2614c00e43a48a59013e6908702e35d958dfdfd380ad0ed8f6c7df35545c872c5d183f5bb93821ec94afdc776a2555caa1573e65b9d770f106ad5ad897bf377c27521c214799d2cb24dd2ee884aaf8aeae15c5a93b41d41f714f96111fb5d3231675a8038787207c0f062334af89da13041c9d606fbf96f80b761b5cd28f3980efb0eb348f11770c09b8f2a69fd3186ec7f0577ba9618709de012c46539ece35ea4139b940f0c322ae800669dbdc1b2a6c8403dd14f7fdf707dc0f117b023d43857a0142aed6412ce757e60b0f64d15e88e7a057f228bf42fc770ef01c7395422c9c58ab839a7d038186d81b468d898675bb2ec3886589970d6c219b68bae680aebda1a9a005bb64a66fc1087e16f5e9dd92ac422fc460c26ae524511a489d084708430f4b605a073f5cc238a54cf995057aa3dc750b92b1e91dfc29edbc9f4dee032e47587dc9721e509514cfc5385d68359591d2000f0813eab7f210c5a5e2b85b50b260215494e609c2e80971c678bbe6a3ad7f3cad0deb4b07d1e4031eb36e895c485bcb4c19d85281b186d73b4d2758f208a1c11c2278456e04d6c3799de9f83d38b362e4fc44d8a3bed07b0e2539514c6fc893da7c32042927a1191e5cb045bb1e71e6a004d0b0cacd9b976476258f8d40e85dae26fec290b6bb2b18b3f904d34c166e77978b521c9032bd1ad445f51964bec9becba4e8978736f1a3f060bd90e6e5945c6cd2f8e0dda5fac3cb6d34c6cb92e20a94215c4e345986be0b06cc831aa08aeb195fb250dee40f6b61515735f420e66d3d581c02712e3eff587ea65452f02d4d1deb57feaf132826a1fdb6bef56f421d1e126bba4a59b2136e623833e9365c5900467ce33820469efec2983ee15f7f0a4b6cb53f1744809e2390fb425cd5911941adb7b271f749ddb01a9cff162fdccc42c7232b1970ce5352af438a39a2848c40ff973df2afdf7227a3af91687a9772663beae9b374a39e14aad154d3f6f91fd9826548d8b17b2c12795da62ace08deab8aec1dad4cc528542710c40c526f69b7dff1692089c399e0b450707cad9d6855a8b7a8702ef0e305157fae5a5571fc5d4bbb526353522c0074748aa5ded39b5438e20a5befe33e49457e876591e41ee1ec07575da93ae536f2a71475436fcdd7906eb26d42794197fdba02b98eade9eeb4203748feb7c565039d69dcb889c45a8a0ce36769f9b8d56f9f506f0b2aa6b37de36438515fabe0f11e7a63ada71ec3f57addfd70cd4ee5f715977a41a98639982efde4644e1593ae34d7b7687843026fa9e1a02e9697cbc338d44783e95eeaa35c47eaeea91bbb9834d56c49a18ca02bb7994eb855c22a8304520199cf2c58600ed2e3253b2c49fb4e8ec400a406fb248a372cebc02e9aabc5a601e60a22b70e0c9d947488124fbd291975dd7e81d20d4df64ff4035173e8e19923df9289bd2e4c6678eb3d262c6661ef76fe3ffe3e5164d2f38c61aedc562f930c8c8ee86c1503af95f3446953d8c2bf7fc3400b0da47cbe1278b1feee3bc5f32ad3baf75929bd0ee52a6d5d978d071eb1833d699ed75ba76e4aa2a83622a4845f7114e697436aea99522dc5161a266af35105bed81fbc17cdcf1f6aa2bd84391aee98b07e864649b1fcdc2ea04d3d09b860aed6de55aaa02c1363968439f287c7e4b5863e6a6e4904d855388572823e4399a10771465da6a1acf2177de3cc2e1bb892b1d31d0eefc985574484b2b1e5b180941a891daf161773c35ecd454dab646529e5a4b2e70c3e76b98049279adbc5deb25ce9da29260e52c7eab1933752cbfa69bf81793b30a61f662b05238a5a03bb51f8c598180feb2c8941c10dbb35d6701e197093aa4d846ea8842839fc4a51056b2a635832a0fc5b1ba89074acdf11df2cf7db0f0dad47d612a2a34ebc4290c84c10a000c23d3de60d7263173b6174337f8aa54a29cf0ab066b31cbabd5a53330c791f894dc6ca8c80770a94918c0cd76fe7aadf7719c0f8a4465d59c1f97c8abc6050ed38b39c3b4e641c5a4ff688664a9d9b0e8ce3aed3e8d8aa21a3cf4041a900004b5dc5a30e813a9824c2e1396e40547554ba85f7f148e3089c6e3fdbb2d756a74dfafc6086d43d4baa4a3c376b16dda2b80b837a558956fd021d0503dcb82c454ea4972ac50e7543720be26fbf3d9cf036121404b77e8372f668939c6d8709db491279e8fbd180ae19858be3d2e7ba68d46b0b351658d34d1f8c8f468a77094dfadad729549d432feddffe306b3812287fe5d725746d6b55b99e12bc80610ef518f55d914b37968b84d7d0223351f94efc774b286b0c39d8d4f6a25fb421bdec1a1d1d4b7c6f43094c4db9d6e21b788e2328d3ba1ef5e44fdd44015f4ce27d9c279d898272f79282134cfcdd3772059a1dec2dddf988d5f12378f179c5dfd974f6b5eb3e417c1efb5ea60330553840536b25f717c0c3a744be9fb6323f1d1864317c7845175bfb909cc5892e646345dcfd97acf93ca5848a78a4029ce641f5234d5827a6ddec1d90ef99e4e9b962e696a397a96f800d93e7d5a04f7c00b6aed34decc3c106ceec774f14745c3f2f5a26da38dc0f30406643600f371c87ed70c817ea727ef87526188abae0f460602bcc24f7094dd2d4d66acac995dce2b811fc5195f429fd6f2efe9d1c5a0d163ff2783059ab6d07763cba05eeeb9b742c178156fc5267a1acdd37941add226dcd92418657a18bf3f0877d05969ecf420c8ec0c0d4253ec5b78668ecbc55e08c44cd7c99c4d56fa5259ae13e55edb5294822166c4b2a03eb7bfbed2c84fd34f94075139eb5b0ab94f498d9a8a909364cce57c99131f073a847de3be64a9c9da226c7f7db4b3d70f95da95562863203dac4c43315a123e837a0c1eeca6f3c78d783dcf3a030f70b8fb6964f44beda3692c96321e4793aa7f0ba95b8bab6d9bdbc653bf38dd3e4b509e9d788d57ee0372395d6a811d69952d37d8c008d9c369223559028c39b64c8085f6228259fcecdac9cb57a60cc21de4c58285876bd39450a7fa8581e75aabb9870d2156730b8c794201b3b8aaa32a74e9824563f91c2be832e94fbfc622168c074f9ecc423516799770b9d1c6d7106293720754cf3c6f9f75434feb697f9a9ac211d3ff70f68d6518b49e671e76620973ba12fc90e78110712871e8da77385101544d0e3cee4a156a73c9f30bc013d1ad80de517628feb41c55c7af274ec0f699c87bb8ff7a9e9801fb2ef9564ddb0689bdfcc926f637985e06ed22f337f2d611d91e557cbe8f248b0f8c3a99b6f3877aea1e4f547ef3f6ee31cde57eb910b6ba80f544870f918cad4c97d600628fc01058a644e5ead449a7972c43fcecfd60857f804b490292cd42878ed80fb4242b425f051c20a798820833369020a3bb1dbe04ffdf8b6294a0ba952f634d236a17a84e82129eb8ce7f6ee56f57466b972e7a4db845576ae4aabf3e6acd66ee129ede68d8497a517c1c7b533309425ab53daffa1fb4ee2d0b9b209408684bab1e708cb2faa5c511c8f1644037a301d547d96d3f5a70ea4a9fc4d2ea3ee1ae01f1531ed5cd8ebc0e1526ee8f8c2f6e237f52d9245037bb621c1f7c0961d4f27a3a1c6fff57467d5d8262e4d9c5ca47ac482d6037d0e2280148cb1a7f6cb2d49475a996d0abe7a44f0e242cdd487896a47043d10785a9e0e8e3c0db6acbe00485f394349d3e5aee50e9b4f82cca4c8ad771249ba5aecfa806288196ebc886553a70776da36c273e10900a0b11c291e77f6c1f95a653500ac311c4193b527d24ca22c7c71a8fab4d263e5af37ace0da1987308b520dbd901a12b08dcd9668cc0db98cf073a569108c18d1a03c2cba484b36e979401eb3146672b46e8d3fa3fcc5f3f7bc034818a87827eb396a615efc2f665a57ead086db0528a0bf318f8e2462b49305bb2a2538d1632d1ad21a90504c58df9a2bca110c4d288ac97a86152077e8513c5e17920742b019162ccf5ca548c14fd2d43ffc83d0bc39b178240e441a9b6bbe7733361c9a912baf48c6846290de677fde3dfe8d5ee647998f5d15438a9751dc3b059fbd1df9cff15a31af22fc57c8d5daf563dd48ce8eaaf2726219965defae2976ed4c6df9e8687840dbcbe481181518cf9e8e6ce341b1a984b5c48db07e70ab4f6a8cffeb9fff6e720d0363581dc47bc5f16badeb3eca68a51ce6f305984605b65c1c4d6ebd29f081c6279bd3c1e4f87869f939a8fcfa2919ada58a9dfb0f6991d0bd9dee934791e641ae3877cfd7fbf140ced1b233948c50a63122c0d0ef400c0a6267ed1f9f0626f3f4dde5ac37d13f7fabe72c0f11018ef10f316636b627a061c6141ef0400cab1a3adbcbc350de495674d7fc622266b35407672fda0af28e8c4d905fd27db4e2542b9888323fa41e41dac696ee5a4336d16481b60044ccb729bf7ea15530824244077b7fc4f4214e7145eedfe190977770c6c6ae1ec8cb5f5d39b57efcdc475f16dcde1933f31b37997d60eabb906f436e25034f1a851fc739e37f4f260f96210e100b81fd9ee8f5dd690b2be956ac1c824562acab57a85174d67a393ac1871d6dba6e055f4290f2a0dc7ec5881bd688f729dea35a9c2bbaec4af23a59ae16423825ac5c974574aea28cfeaa3036fcc9c88e5054e43170e6a61332b7516b316d2abfc8635c32fd0dac1485187add256ef301ae6ad61fed4a400bb4c8cc4b4dbbd74c362aef76d4dac4d838c88d7d7fa0a7d02ec377c6a8e6f1de9cc325cc93c5bf736dc187c4eb89598166411f040d4306c6e03b8dfd69d957134de3a1c064d3872dbd51402c1eedb376e7f97acfb6a772bbefdcac130bb345b3f607f61e6fe42cc9981670f2f8b7d33df5ef2064f04593316839d7ab265154340e9c8a0456e3a60ef37abee8b30e5498d9c6e8b56cab6488b76d6e389488b2eb52db2d43884b3f7e9d3b72865d0c3ebd9508e43d33e92704185db378c98e4f1ec6673df05cb244ebaae6b8636bca49493e43fbf322dc16c5e62add3294df2b92689e99aea8f9cd3be67e2960076252540e7171ca105e541dc550b961e94919e97332426b6efb968ed5705fde88473389a4b1c2e564eb6161da212a4918b58852c6dc102f63b15ed057eeab73c7e9b5c380c057a22d39f6e2444eb0d7c0e5ebb17e85d0152b0137e4bc8c636f2cd9753e3f5d04a34f65e2c883e41777dc80a3d785e839777ad0d24e87b32d8a6c62281db0683a5cd1b3eb83e9622173718505639dc86ce54754713bb9aa798bc9683c1acaece6dd3b384827b4f3cf7bafeccdc34a2ef76b07a0a2eff87c5"}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x4, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x100000000000038, 0x0) fsopen$auto(0x0, 0x1) 8.300580288s ago: executing program 2 (id=3865): set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) move_pages$auto(0x0, 0x1001, 0x0, 0x0, 0x0, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x300, 0x0) socket(0xa, 0x5, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop13\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000040)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) timer_create$auto(0x0, 0x0, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, 0x0, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) io_uring_register$auto(0x2, 0x11, &(0x7f0000000180), 0x83) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x4, 0x4000000000e3, 0x40eb1, 0x401, 0x300000000000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/vivid.0/video4linux/video42/power/control\x00', 0xc2902, 0x0) read$auto(r3, 0x0, 0x20) close_range$auto(0x2, 0xa, 0x0) socket(0x2, 0x1, 0x106) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/kvm/parameters/nx_huge_pages\x00', 0x80302, 0x0) write$auto(0x3, 0x0, 0xffd8) mbind$auto(0x8000, 0xfa9d, 0x2, &(0x7f0000000280)=0x20000000000000fb, 0x3, 0x1) socket(0x15, 0x5, 0x0) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d80)=ANY=[@ANYBLOB="05000000", @ANYRES16=0x0, @ANYBLOB="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"], 0xb5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48880) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 5.819726426s ago: executing program 0 (id=3869): r0 = socket(0x2d, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb4, r0, 0x8000) ioctl$auto(0x3, 0x89e0, 0x91) ioctl$auto(0x3, 0x89e2, 0x91) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) write$auto(0xffffffffffffffff, 0x0, 0x40) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x1, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r1, r1, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x9, 0x0) landlock_restrict_self$auto(r1, 0x1) bind$auto(0x3, 0x0, 0x6e) openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/tracing/trace_marker\x00', 0x43, 0x0) syz_clone(0x1846200, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$auto(0x3, 0x89e0, 0x91) 5.277282589s ago: executing program 2 (id=3872): getpid() gettid() mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4081}, 0x4084) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), 0xffffffffffffffff) socket(0x11, 0x3, 0x9) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video23\x00', 0x80000, 0x0) bpf$auto_BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000200)=@test={r0, 0x3, 0x8, 0xb9, 0x10000, 0x9, 0x4, 0x0, 0x5, 0x4d, 0x2, 0x8, 0xa0f, 0x4, 0xbb}, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) madvise$auto(0x0, 0x20499d, 0x9) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) socket(0x29, 0x2, 0x0) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, 0x0, 0x101041, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) io_uring_setup$auto(0x59, &(0x7f0000000000)={0x3, 0x3ff, 0x2, 0x1, 0x2, 0xa, 0xffffffffffffffff, [], {0x8, 0x1, 0x1, 0x22b, 0x8000100, 0x581, 0x104, 0x1000006, 0xffffffffffffffff}, {0xf9ab, 0x1, 0x52, 0x8, 0x3, 0x3d, 0x8, 0x7, 0x100000000}}) r1 = open(&(0x7f0000000080)='./bus\x00', 0x64040, 0xc0) fcntl$auto(r1, 0x0, 0xa8) madvise$auto(0x52d, 0x4, 0x8001) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x28000) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) ioctl$auto(r2, 0x40104d04, r2) read$auto_proc_pid_smaps_operations_internal(r1, &(0x7f00000002c0)=""/190, 0xbe) write$auto(0x3, 0x0, 0x8) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x4d}) 4.628406085s ago: executing program 0 (id=3875): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) ioctl$auto(r0, 0x40104d0e, 0xe) sendfile$auto(0xffffffffffffffff, r0, &(0x7f0000000000)=0x2, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, 0x0, 0x3, 0xd) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) sync_file_range$auto(0x3fe0000000000, 0x7, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r1, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000080)={0x2c, r2, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_CABLE_TEST_TDR_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000800) 4.54142331s ago: executing program 3 (id=3876): mmap$auto(0x0, 0x3, 0xb, 0x3132, 0x4008df3, 0x0) r0 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy0/aql_pending\x00', 0x28080, 0x0) readv$auto(r0, &(0x7f0000000100)={&(0x7f0000000280), 0x1}, 0x4) timer_create$auto_CLOCK_TAI(0xb, 0x0, &(0x7f0000000200)=0xfb) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_UPD_RXSC(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003800)={0x14, r2, 0x201, 0x70bd2a, 0x25dfdbfe}, 0x14}}, 0x48010) mmap$auto(0x0, 0x3, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) timer_settime$auto(0x0, 0xffff8000, &(0x7f00000000c0)={{}, {0x2000009}}, 0x0) timer_gettime$auto(0x0, 0x0) shmctl$auto_SHM_LOCK(0x7ff, 0xb, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) ioctl$auto(r4, 0xc040564a, r3) r5 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x101102, 0x0) write$auto_proc_pid_attr_operations_base(r5, 0x0, 0x0) io_uring_setup$auto(0x6, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r6 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r6, 0x107, 0x14, 0x0, 0x4) r7 = socket(0x2, 0x5, 0x0) getsockopt$auto_SO_LOCK_FILTER(r7, 0x0, 0x2c, 0x0, &(0x7f0000000100)=0x8) sendmmsg$auto(r6, &(0x7f0000000400)={{&(0x7f0000000000), 0x225aa, &(0x7f0000000100)={0x0, 0x4b}, 0x1, 0x0, 0x5, 0x1060}, 0x5}, 0x2, 0x100) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x2c, r9, 0x1, 0x70bd25, 0x25dfdbf9, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$auto_L2TP_CMD_NOOP(r6, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, r9, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0xb5}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x7}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0\x00'}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x14}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xffffffffffffffff}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x3}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004001) 4.178284667s ago: executing program 4 (id=3878): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r0) sendmsg$auto_NL802154_CMD_SET_PAN_ID(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000011c0)=ANY=[], 0x1058}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) (async) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x805, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r2}, @NL80211_ATTR_OBSS_COLOR_BITMAP={0xc, 0x12e, 0x1000}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) (async) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x805, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r2}, @NL80211_ATTR_OBSS_COLOR_BITMAP={0xc, 0x12e, 0x1000}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) sendmsg$auto_NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="810b25bd7080fbdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) (async) sendmsg$auto_NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="810b25bd7080fbdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) recvmmsg$auto(r0, &(0x7f0000000180)={{0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x6}, 0x803}, 0x10a, 0x6, 0x0) (async) recvmmsg$auto(r0, &(0x7f0000000180)={{0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x6}, 0x803}, 0x10a, 0x6, 0x0) r3 = openat$auto_fops_x16_ro_(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/ieee80211/phy0/netdev:wlan0/dormant_links\x00', 0x8040, 0x0) io_uring_register$auto_IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000280)="b4dc694efa1149efce5bd03c592600a75e6cc91e39f5aebeed", 0x8) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) r4 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto(r4, 0x80004507, 0x10000000000402) madvise$auto(0x8000, 0x37cc, 0xc) (async) madvise$auto(0x8000, 0x37cc, 0xc) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) 3.955266688s ago: executing program 3 (id=3879): r0 = socket(0x2a, 0x2, 0xffffffff) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x8}, 0x1) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x4a083, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r1, 0xfffffffffffff000, 0x864b) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/devices/platform/vivid.0/cec28/power/runtime_suspended_time\x00', 0x22040, 0x0) symlink$auto(0x0, 0x0) socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r1) sendmsg$auto_NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000001140)={0xfb0, r2, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_UNSOL_BCAST_PROBE_RESP={0xf90, 0x127, 0x0, 0x1, [@NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x7fc, 0x2, "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"}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x6}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x4}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x766, 0x2, "d2ba76c2df20c2e7ec65c1f662f93b074bc7776edf5dcdfab1ab5425a8dfd365fe8ca55ec01f5508ae1665db4bf07bff4195fd247add31d02bc6c063cf6ee4809f88aac8ae0925169d93f2cf7dc5d6d00de24331ebc9c36a87cc8ec3a92cc00528688f1d3673e1084c86d66aaf1c3437380a596ab0648c802c5074bb6cabbd1a42f156cd06b2bc0540ff5b56fd1679042c819c8bf00506add179a1656e9aec7d268df5a03c87457278af90dac740067db8baea9f9ccb2a7ae3213fde1d25e53b5a36aed3dbc31d543b895fa27c8e5184de52ce9fa2f0424c8cb85c5776a780e712230caa4efbbea31664c55e79579995561879a2573e01053d880249aedc7c9b1620478939d266c276c9c9e8a0795b439abc8bfe75fac971fced5ee4d270d68a5b1418a4f9a9ca851aba75cfa4402193e6dd8e5f26e6658d38e4eb46331bc32306918e079719c83409ea0b3da52c72c978e2b58027734dadba2208aea42537afb90ea61f7465468203ac84189250ed5c4b1d5e1aac1466424f09ecdd056e25e98e52054203dee228d62d521b865c3a2f23c5d9ac23a0b3c990407832a18ac7d9aeb559f4bc37a83835752201d7db6c970e23cc90ec229649fa733ca3344537c9c7005eb70646bf441e39e2ace8e59809484d160ab77da90a82ffae4fe263d0caffed06eb83e8de4d4810d458d2bc8431a3b80a2cb827f69e704d6ded84fe51ce84183150061be2dc35a5cde65959781aa7e383fc7e77fa530d5c05d990137b85ef4ba7ddc38e2fbf74767a088cc49fc503173e16003c906a8813e9bff63205115a060288534258ca8cb3986f755e834444c363a1064effbdf3656846d78bec4483efa594a0ea5b3a137c196ba7e02c8376317d857d4160f72e58d22df865b6ebe8f17c1e3a011d1558b5e538ce806d667f8b767f1f35af0dee969121896adcd9b7ce8d87b649b6505d830ff6f7785ad5bcf2e644bd7fa13005c439cb2e98e095009e410204cd2ae2cfd0deecc0697c6fd3206b0e1b92c7ec9493f54e58a600dafb9f1a1dbc7383e90add56ab655c68fc4c9b79f7f08a96afc7ea7542f3bf3aaabf985947b4fe9a6e4d0027352e8a7b0a886eb8ce1b3095c5fe7483ea0b3f94d25056b65fbf9bcc35dd6dfe8168e29759d7bdeb4acd05dabc77d0cef1af0cabb1e910c28c11bfdfa6cf4e7163178fc75c2ad3a859c7554896528ffc464bf2f999648b4d9d736c107587bc4d09bf33ce87010fee1a8e6a5b57277260ebdb7e6a88978ed5772e47c77bb2a427766d1af89cc97750a2059f8e56f943fc185391a474f80e920e98e869b8f8f9d4364efc3355bc6c4eb5fa03f771726531b41b2f2713e462125aaa0402a5dc89ddcb1c1bf42cb25fb9ed176b107aecbcaee35ae5530bc2d8636fedfebb9d1ae6ae7bab92d524a0d44b3ebd6f3d142a830ff8352d3517b1a690352e99c3cc25e9eb4c1e605648ce8c2845694b4794e28aa45c7a6653430ae725be15da75b4ffe0216cd0a449dd1f67606ddd69a64e358bbce0e538ad9647dea96e32ab5222cc4b29a1ad333e4e6af33d7ab4085d50f33c3cf561685e4b755c24af75aa317e3b207556a0c30ca17ce887cc146ec01ed18c96dd1c3bb9bed3a8ecb1a9be2ad0cea27aecb07a436e9fd6a5d6b3bfb2508e9c641da8722b53a2cb00a4e55d691b0992b37277d6d6e8385baf985c98a55c1d6040acc23b41b7456101ef9f553d0aee8bd1d99448b29d4462e88f9c0bfb30fdafb6d531d207dd1d2f7ef3ee3580692fd1f47c63c84cd297385883a49c0baa34ab0838e5886c8df22d5b028874c09a973a7907709003f20a98eb4eb5d0c9c8905eb41ae5fef557e70f8f2d13932e1765c07765c6f7d6276475f64151dcc60948f42f7912d07e447c39841ce16053b02c8b37223c4e34f932c1d59af8c95a1a0d428e1c60e8defde7c33bf1784f76ab511b716a80dd72e7ba2d2a3fe00a6f30f3be0a819534955df833474768e1a39e8bcf0efebfb394907bbef3b9b7837aa1a09d9429f95b2c2c7e6162b7959366819e00ff7bad70cf56274b25c7f92ef3bcaa05d8fe6571703a7486f923056c0d2c196a6900e091c242c6337c8f5afbad657c4e77ac58ffd04a2c1ad917d66486aed4252624ef296ed0546ed283927c8c7aac2cea480e083d44e12947f06c0d5504a408e2563519de28fa41e256057fe53200c9ee943797a3e8551cf29552b775a6516d2ad136d92ba7b6a0fca798230e1ad314a3d14b19029800c7e4e33f0c7ae1eff670da0be7f51f18c877428c1f757d333c846d4f7266e69fc2f70334bb968003f98eac7cb730ad891008a43dc0e35935f577ecd0d3207dcedfeb3f1a55bf6e10142adb25de12b5c558a125b10e2fd92948b0f4366c49dc6e252d26640aa647ecc93e425d37aa9620bcdc17bff2e359bddaf661e40bbc44b24bfb9a712bac2edd205c79c27212ed22fc520e91c68bdfb9af48853b994f96ebb3e5254d84cb7c08f63b27279b6e6f20d1f08dd688b4154a3943cf961b7d119c5413b7e1fc98950c609e621fe4f075a090c2a388126a7265e4b5a59276d02489fb3082ac438ad3bed1a282dce934e84a3dab8fa04ee8735608435ba33db648d73493eadc198c3eecc891079a97ec99d1584b88804bb6ae8cf82f56637775e84c74"}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x8}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x9}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x9}]}, @NL80211_ATTR_COLOR_CHANGE_COUNT={0x5, 0x12f, 0x9}]}, 0xfb0}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) write$auto(0x3, 0x0, 0xffd8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/zram0/disksize\x00', 0x2202, 0x0) write$auto(r4, &(0x7f00000001c0)='7K\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x3dec) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x3, 0x0) fsopen$auto(0x0, 0x1) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000e80)={0x1c, r5, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@HWSIM_ATTR_RADIO_NAME={0x5, 0x11, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000084}, 0x10) r6 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r6, 0x10, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x20008000) msgctl$auto_IPC_INFO(0x3, 0x3, &(0x7f0000000340)={{0x8, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffe01, 0x0, 0x4, 0xfffa}, &(0x7f00000002c0)=0x6, &(0x7f0000000300)=0x7, 0x644cd4cb, 0x2, 0x7, 0x3, 0x5, 0x6, 0xcea4, 0x6, @inferred=0xffffffffffffffff, @raw=0xfffffffd}) sendmsg$auto_NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000880)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)={0x3d0, r6, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x3a9, 0x2f, 0x0, 0x1, [@generic="f656649fc24a042e613170cdf1242f50fe70fb09c234cd62221d0f74e2a30b1ebd0e2e9b113102ea96bde140829b4bfc2398a966c04d530ed9ecbd35a40437fb6ff2676fd7e1318f92e66de9d5d9c9fe7421c9d02596fb8499b01397c386f25460ae4ff3c7676119d5c2cc0716f74167b52e28f0bf3e414216b329dc36eb7e4052f063c4c7ed19da264c", @generic="2c6240179105fdd8f6aae34c22aebb3412c6ecedf41d76ee034634c702c84785f484e0b943b96916e091d608c575f48d90e99bd8bef4e568ae9c46f6d3b9bef92d046a8e8781182d7c26f09d09b2894684fe47b8f268a724608c2925bc9ca87458f4c8df328eb01bd98b50d17e0e08a3ad90f21041d1b710edac84edab26e0dfdd261cbd8643cabfbb", @typed={0x8, 0xe3, 0x0, 0x0, @uid=r7}, @typed={0x8, 0xa3, 0x0, 0x0, @fd=r4}, @nested={0xe4, 0x116, 0x0, 0x1, [@nested={0x4, 0x11f}, @generic="4b16d4026115870addb321e84779743ea24d8c97c58b38db5827f8ffce90e51619543096a797c58d9df358fe7e691d38370f09035be683f08c14d04d29f9cc64e68ec73ddf926298c8f4129c0806c1f97f55479eddcd37eec5aed73e87801179946234fc299633f5254215f9df00908ca8fd082f4b568def7d6760e0164c86f0d0717653e2a0d6ed26b38fa5a55bb8352db63545f16ce7158887323a684e594a85fab9b433b667e78b3761d46c1e9fad9504716d92f85c409b7c5ff3b739c68faa6186491032abd47c271cebed60c097a89c5d179732b7eec640e529"]}, @generic="b19a8f5e6b7c9f0901a114e80ed179841faae2a6d3731a61ae7d50b125eb7e906b69bd93ed7d31a1434f21400df42e3c7a99c94f2e62312a96fa7173dcb45534528a70bb351c277ad6b334e057d1040d71a785abddfa54a0bca08372eefdf17bc872193b7859f8518ac4dbb9e3673ca482ada68e2fa98f9cadd195350b2b8806d660cc5af3288ccf6061840b7f583186cadb2189225c1ae2dfbd6d38f4586bda8bb94a25e2ddc1fc766983c3dc780012432d63d04c5adad2da6f848382d5f3b4f9ff05acc362a8671d42", @nested={0x4, 0x39}, @generic="86b76e5ad362fcb3efdafb622077a22c0893080cacfba3f01ec8aa0b05bda2ba3e99971f684ecb7ffa7e580db134b80f53978dc173943c333414c786cdff937c35a3c004144b06e50437ab92f1ce964cf8e238efc761e050c1833729dce8ea9fd8bd78b7ead6fcca1f288388da71f2c46828e8859d1f9f19fa68c18f0930cb39cfb1f92da1ba28af19dff17cdccbd97584073b504069791d1f555666736b3cdf528e952f7e10a6e4c22d990c5db084f54a0a73ae79149e9ceb04354c5084cf2ef26a2298ac621d7272e717c05073e05d"]}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x80000000}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffe6}]}, 0x3d0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000085) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/set_event\x00', 0x101000, 0x0) sendmsg$auto_HWSIM_CMD_GET_RADIO(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r5, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@HWSIM_ATTR_RADIO_ID={0x8, 0xa, 0x36}, @HWSIM_ATTR_DESTROY_RADIO_ON_CLOSE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20000880) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 3.773647491s ago: executing program 0 (id=3880): connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0xffffffffffffffff, 0x40104d01, 0xffffffffffffffff) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(r0, 0x0, 0x9a6, 0x7000000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000002dc0)='/dev/adsp1\x00', 0x2401, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) write$auto(r1, &(0x7f0000000100)='/dev/audio1\x00\xf6\x89\t\xb6t\xae\x12Q\x15E O\xd8\x8d/\xd9\x13\v_\xbcTd\xe0DS\xef?f\xf1ou\xa4W&^\x80\xb2}\x96K\x16*\xa0\x10[8\xa3\x86\x9a3\xc1\xf7\x89x; 4\x8d,U\xa2\xd8\xd5\xfd\xf8\xd8\xb0\xe0W\xad\xe7\x05l*\xc5Z\x8d\xc88}n\x81\tK\x00\x12\xae\xff\xe5\xf1\xb5w\x81$\xd4\xca\xbe&\x195\xc1\xda>\x8c\x89P\xa1\xdb\xb4g9E\xc8\x92\xf6m\x1c\x9b\xebAzeI\xcb\x16f\xc0@\x978x\xbe\x15\'\xc6d}\xc2\xd3\x9f\xc5F8\x15f\x90\xa2\x84', 0x6051) 3.721700342s ago: executing program 4 (id=3881): unshare$auto(0x40000080) r0 = openat$auto_nsim_nexthop_bucket_activity_fops_fib(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/fib/nexthop_bucket_activity\x00', 0x1, 0x0) r1 = open(0x0, 0x80a40, 0x9e) read$auto(r1, 0x0, 0x8004000000) write$auto(r0, 0x0, 0x6) close_range$auto(0x2, 0x8, 0x0) shmctl$auto_SHM_INFO(0x1, 0xe, 0x0) newfstatat$auto(r1, 0x0, 0x0, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) pread64$auto(0xffffffffffffffff, 0x0, 0x1, 0x401) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r2, 0x0, 0x20) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) r3 = openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x242e40, 0x0) mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0x2, 0x8000) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS0\x00', 0x1, 0x0) ioctl$auto(r4, 0x540a, 0x0) unshare$auto(0x40000080) open(&(0x7f00000000c0)='./file0\x00', 0x4020c0, 0x140) r5 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy1/statistics/dot11RTSSuccessCount\x00', 0x800, 0x0) read$auto_debugfs_full_proxy_file_operations_internal(r5, 0x0, 0x0) semctl$auto(0x201, 0x2, 0x13, 0x1) setsockopt$auto(0x3, 0x10000000084, 0x11, 0x0, 0x8) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0xa, 0x5, 0x20000084) getsockopt$auto_SO_PEERCRED(r3, 0x9, 0x11, &(0x7f0000000100)='\\\x00', &(0x7f0000000140)=0x2) init_module$auto(0x0, 0xffff9, 0x0) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x27) close_range$auto(0x0, 0xfffff004, 0x2) 3.411244002s ago: executing program 3 (id=3882): socket(0x29, 0x2, 0x0) socket(0x10, 0x2, 0x0) socket(0x10, 0x2, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) ioctl$auto_tracing_buffers_fops_trace(0xffffffffffffffff, 0x80, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) sendfile$auto(r0, r0, 0x0, 0x2) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000040), 0xa600, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000080), 0x218202, 0x0) r1 = memfd_secret$auto(0xb) ioctl$auto_SNAPSHOT_FREE(r1, 0x3314, 0x0) 2.907450961s ago: executing program 3 (id=3883): socket(0x2, 0x3, 0xa) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socketpair$auto(0x1e, 0x2, 0x8000000000000000, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/ksm/merge_across_nodes\x00', 0x80202, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) write$auto(0xffffffffffffffff, &(0x7f0000000100)='nl80211\x00', 0x10) socket(0xf, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r1) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x805, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) socket(0x1d, 0x3, 0x1) getpeername$auto(0x3, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x20401, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)=""/47, 0x2f) close_range$auto(0x2, 0x8, 0x0) mkdir$auto(&(0x7f0000000040)='./cgroup.net/\f\x00\x00\x00\x00', 0xa3) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/\f\x00', &(0x7f0000000080)={0x2e8503, 0x154, 0x3b}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) 2.291967659s ago: executing program 3 (id=3884): mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x25, 0x1, 0x3) clone$auto(0x20003346, 0x2, 0x0, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_flow(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0xffff, 0x4, 0x8000000000000000, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0xffffffffffffffff, r0, 0xfffffffd) pipe$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/zram0/mem_used_max\x00', 0xa081, 0x0) write$auto(0x3, 0x0, 0xdfd5) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto(r2, 0x5401, r1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x88502, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto(r3, 0x0, 0x20) 1.985153183s ago: executing program 2 (id=3885): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) mq_timedsend$auto(r0, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0xffff, 0x8fa, &(0x7f0000000100)={0x3, 0x4}) socket(0x10, 0x2, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) r1 = epoll_create$auto(0x4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000080)={0x0, 0x100fff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000400), 0x40000000001243}, 0xa, 0x0) sendmsg$auto_NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80200002}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={0x584, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x9}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xda5}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, 0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x4e22}, @NL80211_ATTR_MLO_LINKS={0x4b8, 0x138, 0x0, 0x1, [{0x420, 0x0, 0x0, 0x1, [@NL80211_ATTR_BEACON_HEAD={0x419, 0xe, "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"}]}, {0x88, 0x0, 0x0, 0x1, [@NL80211_ATTR_PID={0x8, 0x52, r3}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x9}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x7}, @NL80211_ATTR_TIMEOUT_REASON={0x8, 0xf8, 0xc0}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_CENTER_FREQ1_OFFSET={0x8, 0x123, 0xd858}, @NL80211_ATTR_QOS_MAP={0x58, 0xc7, "0688f8164b87528df78aaffe0964bf0d8cbc0a4df8f84421cdd3678871400d3b5a5638cdd7ffc41ecf9e744adc1195977e275483729d9dcbe0b7cb83181e774ed9b5b58c554002db88e0bddf55a7f38908261a43"}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x4}]}]}, @NL80211_ATTR_REG_ALPHA2={0x90, 0x21, "1415796c1028a37c9955b5378ffec8084f9a73578a04d2a0569a583cbf25f8919b94f91aee2fe4d1c61e986a72c4930d63e13b187a497d0ba623f87787885fbc3b5579dbffd597a859e01146fa37fd611b3d99b50f827c32c1af6d35681982333f9ec4e188afa1f368ca27c1c6af09a45d7ea6f0d5d2ee5887cdd1f295625404dd56b9ca14a20c89a563f5e5"}]}, 0x584}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0xd42, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0xe07, 0x8000000000000001, 0x80000001, 0x7, 0x6d3f, 0x9, 0x8, 0x4]}, 0x0) fcntl$auto(0xff80000000000000, 0x4, 0xfffffffffffffffc) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000440)={[0x10000000001ff, 0x4, 0xd, 0xffffffffffffffff, 0x3, 0x10, 0x2, 0x2, 0x4, 0x62, 0x80000026, 0x7, 0x6d3e, 0x8, 0xd, 0x40000000001]}, 0x0) 1.648650855s ago: executing program 3 (id=3886): unshare$auto(0x40000080) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) socket(0x2, 0x1, 0x106) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/kvm/parameters/nx_huge_pages\x00', 0x80302, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) write$auto(r0, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00', 0xb) futex$auto(&(0x7f0000000140)=0x3, 0x7, 0x80, &(0x7f00000004c0)={0x1000, 0x2}, &(0x7f0000000500)=0x1, 0x3) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f00000000c0)={0x9, 0x0}) write$auto(r2, 0x0, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000080), r3) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/swradio11\x00', 0x80002, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x902, 0x0) mmap$auto(0x7fffffffe000, 0x81, 0xffffffffffffa3a6, 0x8011, 0x3, 0x8000) r5 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) mq_timedsend$auto(0xffffffffffffffff, 0x0, 0x2, 0x6, 0x0) ioctl$auto_SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000200)="538b2f525e17429845091e0af7da403c56eaa6f80b80de3866dbf18d049307def4e2becf58bc80eccb7cf4264c2051d48b9e9366e07e691f93161a7afbaedd1e5653be34b2ba4594cb045fb918676c92bf2f0e59566c5f5cac2cd65d9f26a74c18737b1e66395f4a71bbb60ed6d9ebec9220c0efff4c2be998cf1b3b0aefedb898978058171f2dc17cd27cf0ad91d248b57d07b5c926969969829452c20c152fef25ed370010764dad0b89939f95ce4434bb959e23f94fa8684353") r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x34, r5, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_UFID_FLAGS={0x8, 0xa, 0x10}, @OVS_FLOW_ATTR_KEY={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0xf, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40010}, 0x448c0) sendmsg$auto_SMC_PNETID_ADD(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="185e", @ANYRES16=r4, @ANYBLOB="010029bd7000fcdbdf25020000000b00010064756d6d793000000b00020064756d6d79300000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44c0) 1.551677226s ago: executing program 4 (id=3887): unshare$auto(0x40000080) mmap$auto(0x4000000000000, 0xe75, 0x4000000000df, 0x3ff, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0xc0781, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/bridge0/hop_limit\x00', 0x199001, 0x0) write$auto(0x3, 0x0, 0x0) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) io_uring_setup$auto(0x401, 0x0) bind$auto(0x3, 0x0, 0x6a) connect$auto(0x3, 0x0, 0x54) getsockopt$auto(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) shutdown$auto(0x200000003, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0) write$auto_proc_mem_operations_base(r0, 0x0, 0x0) 747.056342ms ago: executing program 4 (id=3888): mmap$auto(0x0, 0x1, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x2, 0xffffffffffffffff, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x2b, 0x1, 0x0) (async) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) (async) r0 = open(&(0x7f0000000000)='./file0\x00', 0x101800, 0x100) read$auto_nsim_dev_trap_fa_cookie_fops_dev(r0, 0x0, 0x0) (async) listen$auto(0x3, 0x81) (async) setsockopt$auto(0x3, 0x0, 0x17, 0x0, 0x28) 600.682332ms ago: executing program 2 (id=3889): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000200)='/dev/input/event0\x00', 0x60000, 0x0) mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x7, 0x0) readv$auto(0x3, &(0x7f0000001100)={0x0, 0xffff}, 0x1) 477.515303ms ago: executing program 0 (id=3890): sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x40) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) close_range$auto(0x2, 0xffffffffffffffff, 0x1) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0xfffffffd, &(0x7f0000000200)={0x0, 0x1}, 0x9, 0x0, 0x4, 0x7}, 0xed7138c}, 0xfffffffd, 0x0) socketpair$auto(0x7, 0x1, 0x29b0, 0x0) r0 = open(0x0, 0x74041, 0x25) (async, rerun: 64) r1 = socket(0x2, 0x80802, 0x0) (async, rerun: 64) connect$auto(0x3, 0x0, 0x55) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0xe000) (async, rerun: 64) open(&(0x7f0000000140)='./file0\x00', 0x22040, 0x18d) (async, rerun: 64) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x80) socket(0x28, 0x5, 0x0) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x40, 0x0) (async) write$auto(0xffffffffffffffff, &(0x7f00000002c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1d\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"P\x8a\xbbY8@Z5`\xa2\x9aSVd\x1d\xac\xe8\x90e\x9d\x03tm\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7.\xbe\x01\x98\xd7l\x00\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfa\xf0\xd9\xc0K\x8b\xa3c\x00'/160, 0xa9) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_pnetid(0x0, r2) (async, rerun: 32) sendmsg$auto_SMC_PNETID_DEL(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000d40)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x24044095}, 0x9928d70f60798d1b) (async, rerun: 32) mmap$auto(0x4, 0x400007, 0xe0, 0x8000000000000012, r0, 0x8000) read$auto_fops_x64_ro_(r0, &(0x7f0000000380)=""/84, 0x54) ptrace$auto(0x3, 0x0, 0x0, 0x100000200005) unshare$auto(0x40000080) (async) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x4c2080, 0x0) mmap$auto(0x0, 0x6, 0x4000000000dc, 0x20014, r3, 0x20005) (async) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/run_estimation\x00', 0x0, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(r4, 0x0, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(r1, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram7\x00', 0x147602, 0x0) r5 = socket(0x2, 0x80002, 0x73) sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES8=r5, @ANYRESOCT=r2], 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000010) (async, rerun: 64) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64) 346.000196ms ago: executing program 4 (id=3891): fstatfs$auto(0xffffffffffffffff, &(0x7f0000000140)={0x8001, 0x100000000000, 0x1, 0x9, 0x59, 0x2, 0x75, {[0x9]}, 0x0, 0x7ff, 0x68a6, [0x7, 0x8, 0x5, 0x4]}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000080), 0x1e1500, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_DATAGRAM_RECEIVE(r1, 0x7ac, 0x0) 0s ago: executing program 4 (id=3892): mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0x20000001002}, 0x1, &(0x7f0000000040)={0x0, 0xffffffff}, 0x4, 0xfffffffffffffffc) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x100000000, 0x66) mincore$auto(0x1000, 0x8001, 0x0) madvise$auto(0x2000, 0x20499d, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x40fffffffe, 0x66) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) (async) getpid() (async) process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0x20000001002}, 0x1, &(0x7f0000000040)={0x0, 0xffffffff}, 0x4, 0xfffffffffffffffc) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x100000000, 0x66) (async) mincore$auto(0x1000, 0x8001, 0x0) (async) madvise$auto(0x2000, 0x20499d, 0x9) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x40fffffffe, 0x66) (async) kernel console output (not intermixed with test programs): ] __x64_sys_sendmmsg+0x9c/0x100 [ 917.029193][T18068] ? lockdep_hardirqs_on+0x78/0x100 [ 917.029228][T18068] do_syscall_64+0x106/0xf80 [ 917.029262][T18068] ? clear_bhb_loop+0x40/0x90 [ 917.029291][T18068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.029315][T18068] RIP: 0033:0x7fed11d9c799 [ 917.029335][T18068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 917.029360][T18068] RSP: 002b:00007fed12c2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 917.029383][T18068] RAX: ffffffffffffffda RBX: 00007fed12015fa0 RCX: 00007fed11d9c799 [ 917.029399][T18068] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 917.029414][T18068] RBP: 00007fed12c2a090 R08: 0000000000000000 R09: 0000000000000000 [ 917.029430][T18068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 917.029444][T18068] R13: 00007fed12016038 R14: 00007fed12015fa0 R15: 00007ffff0cfb448 [ 917.029475][T18068] [ 917.280928][T18064] Invalid ELF header magic: != ELF [ 917.582602][ T9846] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 917.594773][ T9846] Bluetooth: hci2: Injecting HCI hardware error event [ 917.606167][ T9846] Bluetooth: hci2: hardware error 0x00 [ 917.800066][T18075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2580'. [ 919.238415][ T8371] Bluetooth: hci2: unexpected event 0x0f length: 866 > 4 [ 919.660748][ T9846] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 926.487402][T18231] FAULT_INJECTION: forcing a failure. [ 926.487402][T18231] name failslab, interval 1, probability 0, space 0, times 0 [ 926.567809][T18231] CPU: 0 UID: 0 PID: 18231 Comm: syz.4.2619 Tainted: G U L syzkaller #0 PREEMPT(full) [ 926.567849][T18231] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 926.567860][T18231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 926.567875][T18231] Call Trace: [ 926.567883][T18231] [ 926.567893][T18231] dump_stack_lvl+0x100/0x190 [ 926.567937][T18231] should_fail_ex.cold+0x5/0xa [ 926.567965][T18231] should_failslab+0xc2/0x120 [ 926.567991][T18231] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 926.568027][T18231] ? skb_clone+0x190/0x400 [ 926.568068][T18231] skb_clone+0x190/0x400 [ 926.568103][T18231] netlink_deliver_tap+0xaed/0xcc0 [ 926.568144][T18231] netlink_unicast+0x650/0x870 [ 926.568187][T18231] ? __pfx_netlink_unicast+0x10/0x10 [ 926.568235][T18231] netlink_sendmsg+0x8b0/0xda0 [ 926.568278][T18231] ? __pfx_netlink_sendmsg+0x10/0x10 [ 926.568315][T18231] ? __import_iovec+0x1d2/0x640 [ 926.568347][T18231] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 926.568392][T18231] ____sys_sendmsg+0x9e1/0xb70 [ 926.568423][T18231] ? __pfx_netlink_sendmsg+0x10/0x10 [ 926.568464][T18231] ? __pfx_____sys_sendmsg+0x10/0x10 [ 926.568494][T18231] ? __pfx__kstrtoull+0x10/0x10 [ 926.568535][T18231] ___sys_sendmsg+0x190/0x1e0 [ 926.568563][T18231] ? __pfx____sys_sendmsg+0x10/0x10 [ 926.568603][T18231] ? find_held_lock+0x2b/0x80 [ 926.568645][T18231] __sys_sendmmsg+0x205/0x430 [ 926.568683][T18231] ? __pfx___sys_sendmmsg+0x10/0x10 [ 926.568728][T18231] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 926.568778][T18231] ? fput+0x79/0x100 [ 926.568806][T18231] ? ksys_write+0x1ac/0x250 [ 926.568827][T18231] ? __pfx_ksys_write+0x10/0x10 [ 926.568854][T18231] __x64_sys_sendmmsg+0x9c/0x100 [ 926.568889][T18231] ? lockdep_hardirqs_on+0x78/0x100 [ 926.568924][T18231] do_syscall_64+0x106/0xf80 [ 926.568958][T18231] ? clear_bhb_loop+0x40/0x90 [ 926.568987][T18231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.569013][T18231] RIP: 0033:0x7fbaff99c799 [ 926.569033][T18231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 926.569057][T18231] RSP: 002b:00007fbb007ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 926.569080][T18231] RAX: ffffffffffffffda RBX: 00007fbaffc15fa0 RCX: 00007fbaff99c799 [ 926.569097][T18231] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 926.569111][T18231] RBP: 00007fbb007ee090 R08: 0000000000000000 R09: 0000000000000000 [ 926.569126][T18231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 926.569141][T18231] R13: 00007fbaffc16038 R14: 00007fbaffc15fa0 R15: 00007ffe896a62c8 [ 926.569171][T18231] [ 928.119832][T18269] netlink: 'syz.3.2627': attribute type 1 has an invalid length. [ 928.538464][T18274] snd_virmidi snd_virmidi.0: control 61678:131081:3:y>o[k<:1597170177 is already present [ 928.887148][T18286] ovs_: entered promiscuous mode [ 929.024937][ T30] audit: type=1800 audit(4294970686.115:29): pid=18289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2631" name="features" dev="configfs" ino=86539 res=0 errno=0 [ 929.456312][T18299] FAULT_INJECTION: forcing a failure. [ 929.456312][T18299] name failslab, interval 1, probability 0, space 0, times 0 [ 929.641316][T18299] CPU: 0 UID: 0 PID: 18299 Comm: syz.0.2633 Tainted: G U L syzkaller #0 PREEMPT(full) [ 929.641357][T18299] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 929.641366][T18299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 929.641381][T18299] Call Trace: [ 929.641389][T18299] [ 929.641399][T18299] dump_stack_lvl+0x100/0x190 [ 929.641440][T18299] should_fail_ex.cold+0x5/0xa [ 929.641467][T18299] should_failslab+0xc2/0x120 [ 929.641494][T18299] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 929.641530][T18299] ? skb_clone+0x190/0x400 [ 929.641572][T18299] skb_clone+0x190/0x400 [ 929.641608][T18299] netlink_deliver_tap+0xaed/0xcc0 [ 929.641650][T18299] netlink_unicast+0x650/0x870 [ 929.641721][T18299] ? __pfx_netlink_unicast+0x10/0x10 [ 929.641770][T18299] netlink_sendmsg+0x8b0/0xda0 [ 929.641811][T18299] ? __pfx_netlink_sendmsg+0x10/0x10 [ 929.641847][T18299] ? __import_iovec+0x1d2/0x640 [ 929.641880][T18299] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 929.641925][T18299] ____sys_sendmsg+0x9e1/0xb70 [ 929.641949][T18299] ? __pfx_netlink_sendmsg+0x10/0x10 [ 929.642007][T18299] ? __pfx_____sys_sendmsg+0x10/0x10 [ 929.642038][T18299] ? __pfx__kstrtoull+0x10/0x10 [ 929.642079][T18299] ___sys_sendmsg+0x190/0x1e0 [ 929.642108][T18299] ? __pfx____sys_sendmsg+0x10/0x10 [ 929.642149][T18299] ? find_held_lock+0x2b/0x80 [ 929.642191][T18299] __sys_sendmmsg+0x205/0x430 [ 929.642230][T18299] ? __pfx___sys_sendmmsg+0x10/0x10 [ 929.642275][T18299] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 929.642326][T18299] ? fput+0x79/0x100 [ 929.642358][T18299] ? ksys_write+0x1ac/0x250 [ 929.642380][T18299] ? __pfx_ksys_write+0x10/0x10 [ 929.642407][T18299] __x64_sys_sendmmsg+0x9c/0x100 [ 929.642441][T18299] ? lockdep_hardirqs_on+0x78/0x100 [ 929.642476][T18299] do_syscall_64+0x106/0xf80 [ 929.642510][T18299] ? clear_bhb_loop+0x40/0x90 [ 929.642540][T18299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.642565][T18299] RIP: 0033:0x7f45ec19c799 [ 929.642584][T18299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 929.642608][T18299] RSP: 002b:00007f45ed052028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 929.642631][T18299] RAX: ffffffffffffffda RBX: 00007f45ec415fa0 RCX: 00007f45ec19c799 [ 929.642647][T18299] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 929.642668][T18299] RBP: 00007f45ed052090 R08: 0000000000000000 R09: 0000000000000000 [ 929.642683][T18299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 929.642702][T18299] R13: 00007f45ec416038 R14: 00007f45ec415fa0 R15: 00007ffe5e6a5158 [ 929.642735][T18299] [ 931.788752][T18322] vivid-007: ================= START STATUS ================= [ 931.835409][T18322] vivid-007: Generate PTS: true [ 931.885849][T18322] vivid-007: Generate SCR: true [ 931.916666][T18322] tpg source WxH: 320x240 (Y'CbCr) [ 931.921908][T18322] tpg field: 1 [ 931.970243][ T30] audit: type=1800 audit(4294970689.053:30): pid=18324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2639" name="trace_marker" dev="tracefs" ino=783 res=0 errno=0 [ 931.997948][T18322] tpg crop: (0,0)/320x240 [ 932.002367][T18322] tpg compose: (0,0)/320x240 [ 932.084934][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.095484][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.157743][T18322] tpg colorspace: 8 [ 932.175091][T18322] tpg transfer function: 0/0 [ 932.266859][T18322] tpg Y'CbCr encoding: 0/0 [ 932.271338][T18322] tpg quantization: 0/0 [ 932.404615][T18322] tpg RGB range: 0/2 [ 932.486850][T18322] vivid-007: ================== END STATUS ================== [ 933.377770][T18353] FAULT_INJECTION: forcing a failure. [ 933.377770][T18353] name failslab, interval 1, probability 0, space 0, times 0 [ 933.391078][T18353] CPU: 0 UID: 0 PID: 18353 Comm: syz.4.2646 Tainted: G U L syzkaller #0 PREEMPT(full) [ 933.391117][T18353] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 933.391127][T18353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 933.391142][T18353] Call Trace: [ 933.391151][T18353] [ 933.391161][T18353] dump_stack_lvl+0x100/0x190 [ 933.391203][T18353] should_fail_ex.cold+0x5/0xa [ 933.391230][T18353] should_failslab+0xc2/0x120 [ 933.391256][T18353] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 933.391294][T18353] ? skb_clone+0x190/0x400 [ 933.391334][T18353] skb_clone+0x190/0x400 [ 933.391370][T18353] dev_queue_xmit_nit+0x255/0xa60 [ 933.391415][T18353] dev_hard_start_xmit+0x2f5/0x7d0 [ 933.391449][T18353] __dev_queue_xmit+0x32c1/0x4800 [ 933.391488][T18353] ? __pfx___dev_queue_xmit+0x10/0x10 [ 933.391532][T18353] ? rcu_is_watching+0x12/0xc0 [ 933.391570][T18353] ? __asan_memcpy+0x3c/0x60 [ 933.391606][T18353] ? __asan_memcpy+0x3c/0x60 [ 933.391639][T18353] ? __skb_clone+0x570/0x760 [ 933.391675][T18353] netlink_deliver_tap+0xa4d/0xcc0 [ 933.391717][T18353] netlink_unicast+0x650/0x870 [ 933.391759][T18353] ? __pfx_netlink_unicast+0x10/0x10 [ 933.391807][T18353] netlink_sendmsg+0x8b0/0xda0 [ 933.391849][T18353] ? __pfx_netlink_sendmsg+0x10/0x10 [ 933.391892][T18353] ? __import_iovec+0x1d2/0x640 [ 933.391924][T18353] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 933.391968][T18353] ____sys_sendmsg+0x9e1/0xb70 [ 933.391992][T18353] ? __pfx_netlink_sendmsg+0x10/0x10 [ 933.392032][T18353] ? __pfx_____sys_sendmsg+0x10/0x10 [ 933.392062][T18353] ? __pfx__kstrtoull+0x10/0x10 [ 933.392102][T18353] ___sys_sendmsg+0x190/0x1e0 [ 933.392131][T18353] ? __pfx____sys_sendmsg+0x10/0x10 [ 933.392171][T18353] ? find_held_lock+0x2b/0x80 [ 933.392212][T18353] __sys_sendmmsg+0x205/0x430 [ 933.392250][T18353] ? __pfx___sys_sendmmsg+0x10/0x10 [ 933.392294][T18353] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 933.392344][T18353] ? fput+0x79/0x100 [ 933.392372][T18353] ? ksys_write+0x1ac/0x250 [ 933.392394][T18353] ? __pfx_ksys_write+0x10/0x10 [ 933.392421][T18353] __x64_sys_sendmmsg+0x9c/0x100 [ 933.392455][T18353] ? lockdep_hardirqs_on+0x78/0x100 [ 933.392490][T18353] do_syscall_64+0x106/0xf80 [ 933.392523][T18353] ? clear_bhb_loop+0x40/0x90 [ 933.392553][T18353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.392578][T18353] RIP: 0033:0x7fbaff99c799 [ 933.392598][T18353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 933.392622][T18353] RSP: 002b:00007fbb007ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 933.392645][T18353] RAX: ffffffffffffffda RBX: 00007fbaffc15fa0 RCX: 00007fbaff99c799 [ 933.392662][T18353] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 933.392676][T18353] RBP: 00007fbb007ee090 R08: 0000000000000000 R09: 0000000000000000 [ 933.392691][T18353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 933.392705][T18353] R13: 00007fbaffc16038 R14: 00007fbaffc15fa0 R15: 00007ffe896a62c8 [ 933.392736][T18353] [ 934.839835][ T9846] Bluetooth: hci3: unexpected event 0x0f length: 866 > 4 [ 934.840326][ T9846] Bluetooth: hci3: unexpected event for opcode 0x0010 [ 935.830921][T18386] program syz.4.2654 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 936.233666][T18397] FAULT_INJECTION: forcing a failure. [ 936.233666][T18397] name failslab, interval 1, probability 0, space 0, times 0 [ 936.313560][T18397] CPU: 0 UID: 0 PID: 18397 Comm: syz.3.2658 Tainted: G U L syzkaller #0 PREEMPT(full) [ 936.313602][T18397] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 936.313612][T18397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 936.313626][T18397] Call Trace: [ 936.313634][T18397] [ 936.313643][T18397] dump_stack_lvl+0x100/0x190 [ 936.313685][T18397] should_fail_ex.cold+0x5/0xa [ 936.313713][T18397] should_failslab+0xc2/0x120 [ 936.313738][T18397] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 936.313777][T18397] ? __alloc_skb+0x140/0x710 [ 936.313815][T18397] __alloc_skb+0x140/0x710 [ 936.313846][T18397] ? __alloc_skb+0x5b7/0x710 [ 936.313876][T18397] ? __pfx___alloc_skb+0x10/0x10 [ 936.313909][T18397] ? __pfx___might_resched+0x10/0x10 [ 936.313945][T18397] ? __lock_acquire+0x4a5/0x2630 [ 936.313979][T18397] netlink_alloc_large_skb+0x69/0x150 [ 936.314020][T18397] netlink_sendmsg+0x680/0xda0 [ 936.314061][T18397] ? __pfx_netlink_sendmsg+0x10/0x10 [ 936.314098][T18397] ? __import_iovec+0x1d2/0x640 [ 936.314130][T18397] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 936.314173][T18397] ____sys_sendmsg+0x9e1/0xb70 [ 936.314197][T18397] ? __pfx_netlink_sendmsg+0x10/0x10 [ 936.314237][T18397] ? __pfx_____sys_sendmsg+0x10/0x10 [ 936.314265][T18397] ? rcu_is_watching+0x12/0xc0 [ 936.314301][T18397] ? ___sys_sendmsg+0x19d/0x1e0 [ 936.314326][T18397] ? kfree+0x2ec/0x6b0 [ 936.314361][T18397] ___sys_sendmsg+0x190/0x1e0 [ 936.314393][T18397] ? __pfx____sys_sendmsg+0x10/0x10 [ 936.314451][T18397] ? __pfx___might_resched+0x10/0x10 [ 936.314492][T18397] __sys_sendmmsg+0x205/0x430 [ 936.314531][T18397] ? __pfx___sys_sendmmsg+0x10/0x10 [ 936.314575][T18397] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 936.314626][T18397] ? fput+0x79/0x100 [ 936.314653][T18397] ? ksys_write+0x1ac/0x250 [ 936.314675][T18397] ? __pfx_ksys_write+0x10/0x10 [ 936.314702][T18397] __x64_sys_sendmmsg+0x9c/0x100 [ 936.314737][T18397] ? lockdep_hardirqs_on+0x78/0x100 [ 936.314772][T18397] do_syscall_64+0x106/0xf80 [ 936.314805][T18397] ? clear_bhb_loop+0x40/0x90 [ 936.314834][T18397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.314859][T18397] RIP: 0033:0x7fed11d9c799 [ 936.314878][T18397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 936.314901][T18397] RSP: 002b:00007fed12c2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 936.314924][T18397] RAX: ffffffffffffffda RBX: 00007fed12015fa0 RCX: 00007fed11d9c799 [ 936.314940][T18397] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 936.314955][T18397] RBP: 00007fed12c2a090 R08: 0000000000000000 R09: 0000000000000000 [ 936.314970][T18397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 936.314985][T18397] R13: 00007fed12016038 R14: 00007fed12015fa0 R15: 00007ffff0cfb448 [ 936.315015][T18397] [ 937.970239][T18417] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2664'. [ 938.258995][T18426] nfs: Unknown parameter 'ީiʟby7J ؀V{ [ 938.258995][T18426] \9-*;#rRcFGL֍*' [ 938.870466][ T9846] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 938.881114][ T9846] Bluetooth: hci3: Injecting HCI hardware error event [ 938.892195][ T8371] Bluetooth: hci3: hardware error 0x00 [ 939.944025][T18434] program syz.2.2666 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 940.113817][T18445] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2668'. [ 940.747089][T18455] FAULT_INJECTION: forcing a failure. [ 940.747089][T18455] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 940.829758][T18455] CPU: 0 UID: 0 PID: 18455 Comm: syz.4.2671 Tainted: G U L syzkaller #0 PREEMPT(full) [ 940.829798][T18455] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 940.829807][T18455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 940.829822][T18455] Call Trace: [ 940.829830][T18455] [ 940.829839][T18455] dump_stack_lvl+0x100/0x190 [ 940.829880][T18455] should_fail_ex.cold+0x5/0xa [ 940.829909][T18455] _copy_from_iter+0x1f4/0x1690 [ 940.829941][T18455] ? __asan_memset+0x23/0x50 [ 940.829977][T18455] ? __pfx__copy_from_iter+0x10/0x10 [ 940.830005][T18455] ? __pfx___alloc_skb+0x10/0x10 [ 940.830039][T18455] ? __pfx___might_resched+0x10/0x10 [ 940.830085][T18455] ? __lock_acquire+0x4a5/0x2630 [ 940.830123][T18455] netlink_sendmsg+0x808/0xda0 [ 940.830168][T18455] ? __pfx_netlink_sendmsg+0x10/0x10 [ 940.830206][T18455] ? __import_iovec+0x1d2/0x640 [ 940.830237][T18455] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 940.830281][T18455] ____sys_sendmsg+0x9e1/0xb70 [ 940.830304][T18455] ? __pfx_netlink_sendmsg+0x10/0x10 [ 940.830347][T18455] ? __pfx_____sys_sendmsg+0x10/0x10 [ 940.830376][T18455] ? rcu_is_watching+0x12/0xc0 [ 940.830412][T18455] ? ___sys_sendmsg+0x19d/0x1e0 [ 940.830436][T18455] ? kfree+0x2ec/0x6b0 [ 940.830471][T18455] ___sys_sendmsg+0x190/0x1e0 [ 940.830499][T18455] ? __pfx____sys_sendmsg+0x10/0x10 [ 940.830551][T18455] ? __pfx___might_resched+0x10/0x10 [ 940.830592][T18455] __sys_sendmmsg+0x205/0x430 [ 940.830630][T18455] ? __pfx___sys_sendmmsg+0x10/0x10 [ 940.830674][T18455] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 940.830725][T18455] ? fput+0x79/0x100 [ 940.830753][T18455] ? ksys_write+0x1ac/0x250 [ 940.830775][T18455] ? __pfx_ksys_write+0x10/0x10 [ 940.830802][T18455] __x64_sys_sendmmsg+0x9c/0x100 [ 940.830837][T18455] ? lockdep_hardirqs_on+0x78/0x100 [ 940.830875][T18455] do_syscall_64+0x106/0xf80 [ 940.830909][T18455] ? clear_bhb_loop+0x40/0x90 [ 940.830938][T18455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.830963][T18455] RIP: 0033:0x7fbaff99c799 [ 940.830982][T18455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 940.831006][T18455] RSP: 002b:00007fbb007ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 940.831029][T18455] RAX: ffffffffffffffda RBX: 00007fbaffc15fa0 RCX: 00007fbaff99c799 [ 940.831135][T18455] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 940.831160][T18455] RBP: 00007fbb007ee090 R08: 0000000000000000 R09: 0000000000000000 [ 940.831179][T18455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 940.831194][T18455] R13: 00007fbaffc16038 R14: 00007fbaffc15fa0 R15: 00007ffe896a62c8 [ 940.831238][T18455] [ 941.552928][ T8371] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 941.807243][T18472] kAFS: Invalid Command on /proc/fs/afs/cells file [ 942.532125][T18483] FAULT_INJECTION: forcing a failure. [ 942.532125][T18483] name fail_futex, interval 1, probability 0, space 0, times 0 [ 942.685333][T18483] CPU: 0 UID: 0 PID: 18483 Comm: syz.2.2677 Tainted: G U L syzkaller #0 PREEMPT(full) [ 942.685376][T18483] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 942.685387][T18483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 942.685403][T18483] Call Trace: [ 942.685411][T18483] [ 942.685421][T18483] dump_stack_lvl+0x100/0x190 [ 942.685464][T18483] should_fail_ex.cold+0x5/0xa [ 942.685493][T18483] get_futex_key+0x1d2/0x1620 [ 942.685527][T18483] ? __pfx_get_futex_key+0x10/0x10 [ 942.685557][T18483] ? find_held_lock+0x2b/0x80 [ 942.685580][T18483] ? futex_wake+0x456/0x530 [ 942.685626][T18483] futex_wake+0xea/0x530 [ 942.685666][T18483] ? __pfx_futex_wake+0x10/0x10 [ 942.685718][T18483] do_futex+0x32b/0x350 [ 942.685751][T18483] ? __pfx_do_futex+0x10/0x10 [ 942.685782][T18483] ? __fget_files+0x215/0x3d0 [ 942.685820][T18483] __x64_sys_futex+0x34f/0x4d0 [ 942.685858][T18483] ? __pfx___x64_sys_futex+0x10/0x10 [ 942.685900][T18483] ? __sys_setsockopt+0x139/0x190 [ 942.685946][T18483] do_syscall_64+0x106/0xf80 [ 942.685984][T18483] ? clear_bhb_loop+0x40/0x90 [ 942.686016][T18483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.686042][T18483] RIP: 0033:0x7fb91299c799 [ 942.686062][T18483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 942.686088][T18483] RSP: 002b:00007fb9137a00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 942.686113][T18483] RAX: ffffffffffffffda RBX: 00007fb912c16188 RCX: 00007fb91299c799 [ 942.686130][T18483] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb912c1618c [ 942.686146][T18483] RBP: 00007fb912c16180 R08: 0000000000000000 R09: 0000000000000000 [ 942.686162][T18483] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 942.686179][T18483] R13: 00007fb912c16218 R14: 00007ffe0e341380 R15: 00007ffe0e341468 [ 942.686211][T18483] [ 944.567210][T18512] input input158: cannot allocate more than FF_MAX_EFFECTS effects [ 944.839466][T18512] random: crng reseeded on system resumption [ 945.308688][T18538] FAULT_INJECTION: forcing a failure. [ 945.308688][T18538] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 945.404994][T18538] CPU: 0 UID: 0 PID: 18538 Comm: syz.0.2692 Tainted: G U L syzkaller #0 PREEMPT(full) [ 945.405035][T18538] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 945.405044][T18538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 945.405059][T18538] Call Trace: [ 945.405068][T18538] [ 945.405077][T18538] dump_stack_lvl+0x100/0x190 [ 945.405118][T18538] should_fail_ex.cold+0x5/0xa [ 945.405147][T18538] _copy_from_iter+0x1f4/0x1690 [ 945.405181][T18538] ? __asan_memset+0x23/0x50 [ 945.405216][T18538] ? __pfx__copy_from_iter+0x10/0x10 [ 945.405245][T18538] ? __pfx___alloc_skb+0x10/0x10 [ 945.405279][T18538] ? __pfx___might_resched+0x10/0x10 [ 945.405315][T18538] ? __lock_acquire+0x4a5/0x2630 [ 945.405364][T18538] netlink_sendmsg+0x808/0xda0 [ 945.405407][T18538] ? __pfx_netlink_sendmsg+0x10/0x10 [ 945.405443][T18538] ? __import_iovec+0x1d2/0x640 [ 945.405474][T18538] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 945.405517][T18538] ____sys_sendmsg+0x9e1/0xb70 [ 945.405541][T18538] ? __pfx_netlink_sendmsg+0x10/0x10 [ 945.405582][T18538] ? __pfx_____sys_sendmsg+0x10/0x10 [ 945.405611][T18538] ? rcu_is_watching+0x12/0xc0 [ 945.405648][T18538] ? ___sys_sendmsg+0x19d/0x1e0 [ 945.405672][T18538] ? kfree+0x2ec/0x6b0 [ 945.405709][T18538] ___sys_sendmsg+0x190/0x1e0 [ 945.405738][T18538] ? __pfx____sys_sendmsg+0x10/0x10 [ 945.405790][T18538] ? __pfx___might_resched+0x10/0x10 [ 945.405832][T18538] __sys_sendmmsg+0x205/0x430 [ 945.405871][T18538] ? __pfx___sys_sendmmsg+0x10/0x10 [ 945.405916][T18538] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 945.405967][T18538] ? fput+0x79/0x100 [ 945.405995][T18538] ? ksys_write+0x1ac/0x250 [ 945.406017][T18538] ? __pfx_ksys_write+0x10/0x10 [ 945.406044][T18538] __x64_sys_sendmmsg+0x9c/0x100 [ 945.406079][T18538] ? lockdep_hardirqs_on+0x78/0x100 [ 945.406116][T18538] do_syscall_64+0x106/0xf80 [ 945.406150][T18538] ? clear_bhb_loop+0x40/0x90 [ 945.406180][T18538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.406205][T18538] RIP: 0033:0x7f45ec19c799 [ 945.406224][T18538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 945.406247][T18538] RSP: 002b:00007f45ed052028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 945.406270][T18538] RAX: ffffffffffffffda RBX: 00007f45ec415fa0 RCX: 00007f45ec19c799 [ 945.406285][T18538] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 945.406300][T18538] RBP: 00007f45ed052090 R08: 0000000000000000 R09: 0000000000000000 [ 945.406314][T18538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 945.406334][T18538] R13: 00007f45ec416038 R14: 00007f45ec415fa0 R15: 00007ffe5e6a5158 [ 945.406365][T18538] [ 946.267544][ T30] audit: type=1800 audit(4294970703.266:31): pid=18544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2694" name="lu_gp_id" dev="configfs" ino=87733 res=0 errno=0 [ 946.827013][T18554] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2696'. [ 947.287782][T18564] futex_wake_op: syz.4.2693 tries to shift op by -2048; fix this program [ 947.350557][T18564] futex_wake_op: syz.4.2693 tries to shift op by -2048; fix this program [ 947.417868][T18565] 0x000000000001-0x000000020000 : "" [ 947.533209][T18565] ftl_cs: FTL header corrupt! [ 949.560138][T18606] FAULT_INJECTION: forcing a failure. [ 949.560138][T18606] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 949.626094][T18606] CPU: 0 UID: 0 PID: 18606 Comm: syz.4.2704 Tainted: G U L syzkaller #0 PREEMPT(full) [ 949.626136][T18606] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 949.626145][T18606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 949.626161][T18606] Call Trace: [ 949.626169][T18606] [ 949.626178][T18606] dump_stack_lvl+0x100/0x190 [ 949.626220][T18606] should_fail_ex.cold+0x5/0xa [ 949.626248][T18606] _copy_from_iter+0x1f4/0x1690 [ 949.626281][T18606] ? __asan_memset+0x23/0x50 [ 949.626317][T18606] ? __pfx__copy_from_iter+0x10/0x10 [ 949.626345][T18606] ? __pfx___alloc_skb+0x10/0x10 [ 949.626379][T18606] ? __pfx___might_resched+0x10/0x10 [ 949.626423][T18606] ? __lock_acquire+0x4a5/0x2630 [ 949.626462][T18606] netlink_sendmsg+0x808/0xda0 [ 949.626505][T18606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 949.626541][T18606] ? __import_iovec+0x1d2/0x640 [ 949.626572][T18606] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 949.626616][T18606] ____sys_sendmsg+0x9e1/0xb70 [ 949.626639][T18606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 949.626679][T18606] ? __pfx_____sys_sendmsg+0x10/0x10 [ 949.626708][T18606] ? rcu_is_watching+0x12/0xc0 [ 949.626745][T18606] ? ___sys_sendmsg+0x19d/0x1e0 [ 949.626769][T18606] ? kfree+0x2ec/0x6b0 [ 949.626805][T18606] ___sys_sendmsg+0x190/0x1e0 [ 949.626834][T18606] ? __pfx____sys_sendmsg+0x10/0x10 [ 949.626887][T18606] ? __pfx___might_resched+0x10/0x10 [ 949.626927][T18606] __sys_sendmmsg+0x205/0x430 [ 949.626966][T18606] ? __pfx___sys_sendmmsg+0x10/0x10 [ 949.627010][T18606] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 949.627059][T18606] ? fput+0x79/0x100 [ 949.627086][T18606] ? ksys_write+0x1ac/0x250 [ 949.627108][T18606] ? __pfx_ksys_write+0x10/0x10 [ 949.627135][T18606] __x64_sys_sendmmsg+0x9c/0x100 [ 949.627169][T18606] ? lockdep_hardirqs_on+0x78/0x100 [ 949.627203][T18606] do_syscall_64+0x106/0xf80 [ 949.627237][T18606] ? clear_bhb_loop+0x40/0x90 [ 949.627266][T18606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.627291][T18606] RIP: 0033:0x7fbaff99c799 [ 949.627309][T18606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 949.627333][T18606] RSP: 002b:00007fbb007ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 949.627355][T18606] RAX: ffffffffffffffda RBX: 00007fbaffc15fa0 RCX: 00007fbaff99c799 [ 949.627371][T18606] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 949.627386][T18606] RBP: 00007fbb007ee090 R08: 0000000000000000 R09: 0000000000000000 [ 949.627407][T18606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 949.627421][T18606] R13: 00007fbaffc16038 R14: 00007fbaffc15fa0 R15: 00007ffe896a62c8 [ 949.627451][T18606] [ 951.393036][T18644] netlink: 'syz.4.2713': attribute type 10 has an invalid length. [ 951.432161][T18644] netlink: 330 bytes leftover after parsing attributes in process `syz.4.2713'. [ 952.505688][T18660] FAULT_INJECTION: forcing a failure. [ 952.505688][T18660] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 952.630582][T18660] CPU: 0 UID: 0 PID: 18660 Comm: syz.3.2717 Tainted: G U L syzkaller #0 PREEMPT(full) [ 952.630623][T18660] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 952.630633][T18660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 952.630648][T18660] Call Trace: [ 952.630656][T18660] [ 952.630665][T18660] dump_stack_lvl+0x100/0x190 [ 952.630707][T18660] should_fail_ex.cold+0x5/0xa [ 952.630735][T18660] _copy_from_user+0x2e/0xd0 [ 952.630765][T18660] copy_msghdr_from_user+0x9f/0x4f0 [ 952.630795][T18660] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 952.630827][T18660] ? rcu_is_watching+0x12/0xc0 [ 952.630863][T18660] ? ___sys_sendmsg+0x19d/0x1e0 [ 952.630887][T18660] ? kfree+0x2ec/0x6b0 [ 952.630922][T18660] ___sys_sendmsg+0x106/0x1e0 [ 952.630951][T18660] ? __pfx____sys_sendmsg+0x10/0x10 [ 952.631003][T18660] ? __pfx___might_resched+0x10/0x10 [ 952.631045][T18660] __sys_sendmmsg+0x205/0x430 [ 952.631084][T18660] ? __pfx___sys_sendmmsg+0x10/0x10 [ 952.631128][T18660] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 952.631186][T18660] ? fput+0x79/0x100 [ 952.631214][T18660] ? ksys_write+0x1ac/0x250 [ 952.631236][T18660] ? __pfx_ksys_write+0x10/0x10 [ 952.631264][T18660] __x64_sys_sendmmsg+0x9c/0x100 [ 952.631298][T18660] ? lockdep_hardirqs_on+0x78/0x100 [ 952.631334][T18660] do_syscall_64+0x106/0xf80 [ 952.631368][T18660] ? clear_bhb_loop+0x40/0x90 [ 952.631397][T18660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.631422][T18660] RIP: 0033:0x7fed11d9c799 [ 952.631441][T18660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 952.631464][T18660] RSP: 002b:00007fed12c2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 952.631486][T18660] RAX: ffffffffffffffda RBX: 00007fed12015fa0 RCX: 00007fed11d9c799 [ 952.631502][T18660] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 952.631517][T18660] RBP: 00007fed12c2a090 R08: 0000000000000000 R09: 0000000000000000 [ 952.631532][T18660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 952.631547][T18660] R13: 00007fed12016038 R14: 00007fed12015fa0 R15: 00007ffff0cfb448 [ 952.631577][T18660] [ 953.230036][T18670] ptrace attach of "./syz-executor exec"[17186] was attempted by "./syz-executor exec"[18670] [ 954.886974][T18716] FAULT_INJECTION: forcing a failure. [ 954.886974][T18716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 954.979235][T18716] CPU: 0 UID: 0 PID: 18716 Comm: syz.0.2730 Tainted: G U L syzkaller #0 PREEMPT(full) [ 954.979275][T18716] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 954.979285][T18716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 954.979300][T18716] Call Trace: [ 954.979308][T18716] [ 954.979317][T18716] dump_stack_lvl+0x100/0x190 [ 954.979358][T18716] should_fail_ex.cold+0x5/0xa [ 954.979386][T18716] _copy_to_user+0x32/0xd0 [ 954.979418][T18716] simple_read_from_buffer+0xcb/0x170 [ 954.979458][T18716] proc_fail_nth_read+0x1af/0x230 [ 954.979491][T18716] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 954.979522][T18716] ? rw_verify_area+0xce/0x6d0 [ 954.979557][T18716] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 954.979586][T18716] vfs_read+0x1e4/0xb30 [ 954.979642][T18716] ? __pfx_vfs_read+0x10/0x10 [ 954.979679][T18716] ? __fget_files+0x215/0x3d0 [ 954.979708][T18716] ? __fget_files+0x21f/0x3d0 [ 954.979737][T18716] ksys_read+0x12a/0x250 [ 954.979759][T18716] ? __pfx_ksys_read+0x10/0x10 [ 954.979789][T18716] do_syscall_64+0x106/0xf80 [ 954.979824][T18716] ? clear_bhb_loop+0x40/0x90 [ 954.979854][T18716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.979879][T18716] RIP: 0033:0x7f45ec15cfce [ 954.979898][T18716] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 954.979922][T18716] RSP: 002b:00007f45ed051fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 954.979951][T18716] RAX: ffffffffffffffda RBX: 00007f45ed0526c0 RCX: 00007f45ec15cfce [ 954.979968][T18716] RDX: 000000000000000f RSI: 00007f45ed0520a0 RDI: 0000000000000006 [ 954.979982][T18716] RBP: 00007f45ed052090 R08: 0000000000000000 R09: 0000000000000000 [ 954.979997][T18716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 954.980011][T18716] R13: 00007f45ec416038 R14: 00007f45ec415fa0 R15: 00007ffe5e6a5158 [ 954.980042][T18716] [ 956.695103][T18754] hub 1-0:1.0: USB hub found [ 956.887884][T18754] hub 1-0:1.0: 1 port detected [ 957.925660][T18780] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2744'. [ 958.147122][T18783] mkiss: ax0: crc mode is auto. [ 958.221109][ T30] audit: type=1326 audit(4294971738.302:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18784 comm="syz.0.2746" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f45ec19c799 code=0x0 [ 961.071960][T18819] netlink: 266 bytes leftover after parsing attributes in process `syz.4.2753'. [ 961.126101][T18819] IPv6: NLM_F_CREATE should be specified when creating new route [ 962.071390][T18842] nfs: Bad value for 'source' [ 962.111695][ T30] audit: type=1800 audit(4294971742.181:33): pid=18843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2759" name="dbroot" dev="configfs" ino=89543 res=0 errno=0 [ 963.591675][T18858] FAULT_INJECTION: forcing a failure. [ 963.591675][T18858] name failslab, interval 1, probability 0, space 0, times 0 [ 963.743932][T18858] CPU: 0 UID: 0 PID: 18858 Comm: syz.2.2764 Tainted: G U L syzkaller #0 PREEMPT(full) [ 963.743974][T18858] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 963.743983][T18858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 963.743998][T18858] Call Trace: [ 963.744006][T18858] [ 963.744015][T18858] dump_stack_lvl+0x100/0x190 [ 963.744056][T18858] should_fail_ex.cold+0x5/0xa [ 963.744083][T18858] should_failslab+0xc2/0x120 [ 963.744108][T18858] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 963.744146][T18858] ? sock_alloc_inode+0x25/0x1c0 [ 963.744173][T18858] ? __pfx_sock_alloc_inode+0x10/0x10 [ 963.744198][T18858] sock_alloc_inode+0x25/0x1c0 [ 963.744220][T18858] alloc_inode+0x68/0x250 [ 963.744252][T18858] sock_alloc+0x44/0x280 [ 963.744288][T18858] ? security_socket_create+0x7f/0x250 [ 963.744329][T18858] __sock_create+0xc2/0x860 [ 963.744360][T18858] __sys_socket+0x14d/0x260 [ 963.744387][T18858] ? __pfx___sys_socket+0x10/0x10 [ 963.744428][T18858] __x64_sys_socket+0x72/0xb0 [ 963.744454][T18858] ? lockdep_hardirqs_on+0x78/0x100 [ 963.744490][T18858] do_syscall_64+0x106/0xf80 [ 963.744524][T18858] ? clear_bhb_loop+0x40/0x90 [ 963.744553][T18858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.744578][T18858] RIP: 0033:0x7fb91299c799 [ 963.744598][T18858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 963.744621][T18858] RSP: 002b:00007fb9137e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 963.744644][T18858] RAX: ffffffffffffffda RBX: 00007fb912c15fa0 RCX: 00007fb91299c799 [ 963.744660][T18858] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 963.744674][T18858] RBP: 00007fb912a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 963.744688][T18858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 963.744703][T18858] R13: 00007fb912c16038 R14: 00007fb912c15fa0 R15: 00007ffe0e341468 [ 963.744733][T18858] [ 963.744744][T18858] socket: no more sockets [ 964.003697][T18864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2765'. [ 965.674589][T18897] netlink: 186 bytes leftover after parsing attributes in process `syz.2.2771'. [ 967.345782][T18923] sysfs_service_op_show: Client not running :-5: [ 968.956283][T18954] random: crng reseeded on system resumption [ 969.183813][T18959] Invalid ELF header magic: != ELF [ 969.818546][T18972] netlink: 330 bytes leftover after parsing attributes in process `syz.2.2789'. [ 972.548758][T18997] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2794'. [ 973.567061][T19017] netlink: 186 bytes leftover after parsing attributes in process `syz.4.2798'. [ 975.540496][T19046] FAULT_INJECTION: forcing a failure. [ 975.540496][T19046] name failslab, interval 1, probability 0, space 0, times 0 [ 975.746003][T19046] CPU: 0 UID: 0 PID: 19046 Comm: syz.3.2805 Tainted: G U L syzkaller #0 PREEMPT(full) [ 975.746048][T19046] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 975.746057][T19046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 975.746073][T19046] Call Trace: [ 975.746083][T19046] [ 975.746093][T19046] dump_stack_lvl+0x100/0x190 [ 975.746137][T19046] should_fail_ex.cold+0x5/0xa [ 975.746166][T19046] ? process_preds+0x4c2/0x1d90 [ 975.746204][T19046] should_failslab+0xc2/0x120 [ 975.746231][T19046] __kmalloc_noprof+0xe0/0x850 [ 975.746285][T19046] process_preds+0x4c2/0x1d90 [ 975.746331][T19046] ? create_filter_start.constprop.0+0x134/0x310 [ 975.746375][T19046] create_filter+0x140/0x210 [ 975.746416][T19046] ? __pfx_create_filter+0x10/0x10 [ 975.746459][T19046] ? find_held_lock+0x2b/0x80 [ 975.746487][T19046] apply_event_filter+0x220/0x500 [ 975.746529][T19046] ? __pfx_apply_event_filter+0x10/0x10 [ 975.746578][T19046] event_filter_write+0x16d/0x290 [ 975.746610][T19046] vfs_write+0x2aa/0x1070 [ 975.746635][T19046] ? __pfx_event_filter_write+0x10/0x10 [ 975.746668][T19046] ? __pfx_vfs_write+0x10/0x10 [ 975.746691][T19046] ? __fget_files+0x215/0x3d0 [ 975.746722][T19046] ? __fget_files+0x21f/0x3d0 [ 975.746754][T19046] ksys_write+0x12a/0x250 [ 975.746777][T19046] ? __pfx_ksys_write+0x10/0x10 [ 975.746809][T19046] do_syscall_64+0x106/0xf80 [ 975.746847][T19046] ? clear_bhb_loop+0x40/0x90 [ 975.746878][T19046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.746905][T19046] RIP: 0033:0x7fed11d9c799 [ 975.746925][T19046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 975.746951][T19046] RSP: 002b:00007fed12c09028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 975.746975][T19046] RAX: ffffffffffffffda RBX: 00007fed12016090 RCX: 00007fed11d9c799 [ 975.746992][T19046] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 975.747008][T19046] RBP: 00007fed11e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 975.747026][T19046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 975.747042][T19046] R13: 00007fed12016128 R14: 00007fed12016090 R15: 00007ffff0cfb448 [ 975.747074][T19046] [ 975.979089][T19046] FAULT_INJECTION: forcing a failure. [ 975.979089][T19046] name fail_futex, interval 1, probability 0, space 0, times 0 [ 975.994231][T19046] CPU: 0 UID: 0 PID: 19046 Comm: syz.3.2805 Tainted: G U L syzkaller #0 PREEMPT(full) [ 975.994283][T19046] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 975.994294][T19046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 975.994310][T19046] Call Trace: [ 975.994319][T19046] [ 975.994329][T19046] dump_stack_lvl+0x100/0x190 [ 975.994372][T19046] should_fail_ex.cold+0x5/0xa [ 975.994402][T19046] get_futex_key+0x1d2/0x1620 [ 975.994439][T19046] ? __pfx_get_futex_key+0x10/0x10 [ 975.994470][T19046] ? event_filter_write+0x184/0x290 [ 975.994501][T19046] ? kasan_quarantine_put+0x104/0x240 [ 975.994546][T19046] futex_wake+0xea/0x530 [ 975.994581][T19046] ? event_filter_write+0x184/0x290 [ 975.994610][T19046] ? kfree+0x1f6/0x6b0 [ 975.994641][T19046] ? find_held_lock+0x2b/0x80 [ 975.994666][T19046] ? __pfx_futex_wake+0x10/0x10 [ 975.994708][T19046] ? ksys_write+0x190/0x250 [ 975.994731][T19046] ? ksys_write+0x190/0x250 [ 975.994759][T19046] do_futex+0x32b/0x350 [ 975.994792][T19046] ? __pfx_do_futex+0x10/0x10 [ 975.994833][T19046] __x64_sys_futex+0x34f/0x4d0 [ 975.994871][T19046] ? __pfx___x64_sys_futex+0x10/0x10 [ 975.994915][T19046] do_syscall_64+0x106/0xf80 [ 975.994953][T19046] ? clear_bhb_loop+0x40/0x90 [ 975.994984][T19046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.995010][T19046] RIP: 0033:0x7fed11d9c799 [ 975.995031][T19046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 975.995056][T19046] RSP: 002b:00007fed12c090e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 975.995080][T19046] RAX: ffffffffffffffda RBX: 00007fed12016098 RCX: 00007fed11d9c799 [ 975.995098][T19046] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fed1201609c [ 975.995114][T19046] RBP: 00007fed12016090 R08: 0000000000000000 R09: 0000000000000000 [ 975.995130][T19046] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 975.995146][T19046] R13: 00007fed12016128 R14: 00007ffff0cfb360 R15: 00007ffff0cfb448 [ 975.995178][T19046] [ 976.331961][T19050] ======================================================= [ 976.331961][T19050] WARNING: The mand mount option has been deprecated and [ 976.331961][T19050] and is ignored by this kernel. Remove the mand [ 976.331961][T19050] option from the mount to silence this warning. [ 976.331961][T19050] ======================================================= [ 976.648778][T19055] netlink: 'syz.4.2807': attribute type 2 has an invalid length. [ 977.545212][T19081] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input176 [ 977.896905][T19091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2816'. [ 977.956698][T19086] bridge0: port 3(team0) entered blocking state [ 978.080215][T19086] bridge0: port 3(team0) entered disabled state [ 978.150401][T19086] team0: entered allmulticast mode [ 978.325916][T19086] team_slave_0: entered allmulticast mode [ 978.430976][T19086] team_slave_1: entered allmulticast mode [ 978.506752][T19086] team0: entered promiscuous mode [ 978.701265][T19086] team_slave_0: entered promiscuous mode [ 978.790304][T19086] team_slave_1: entered promiscuous mode [ 978.852348][T19086] bridge0: port 3(team0) entered blocking state [ 978.858772][T19086] bridge0: port 3(team0) entered forwarding state [ 986.095106][T19247] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input178 [ 986.875708][T19264] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 987.043385][T19264] CIFS mount error: No usable UNC path provided in device string! [ 987.043385][T19264] [ 987.132268][T19264] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 987.638504][T19279] futex_wake_op: syz.0.2858 tries to shift op by -2048; fix this program [ 989.104246][T19301] zswap: compressor not available [ 989.798492][ T30] audit: type=1800 audit(4294971769.866:34): pid=19331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2869" name="dbroot" dev="configfs" ino=92212 res=0 errno=0 [ 990.019747][T19339] FAULT_INJECTION: forcing a failure. [ 990.019747][T19339] name failslab, interval 1, probability 0, space 0, times 0 [ 990.138778][T19339] CPU: 0 UID: 0 PID: 19339 Comm: syz.3.2870 Tainted: G U L syzkaller #0 PREEMPT(full) [ 990.138823][T19339] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 990.138833][T19339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 990.138851][T19339] Call Trace: [ 990.138859][T19339] [ 990.138870][T19339] dump_stack_lvl+0x100/0x190 [ 990.138914][T19339] should_fail_ex.cold+0x5/0xa [ 990.138943][T19339] should_failslab+0xc2/0x120 [ 990.138971][T19339] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 990.139014][T19339] ? kstrdup_const+0x63/0x80 [ 990.139043][T19339] kstrdup+0x51/0xe0 [ 990.139085][T19339] kstrdup_const+0x63/0x80 [ 990.139107][T19339] alloc_vfsmnt+0xe5/0x6a0 [ 990.139138][T19339] ? __pfx___might_resched+0x10/0x10 [ 990.139186][T19339] clone_mnt+0x4b/0x930 [ 990.139226][T19339] copy_tree+0xfc/0xbf0 [ 990.139250][T19339] ? __pfx_down_write+0x10/0x10 [ 990.139281][T19339] copy_mnt_ns+0x2bd/0xc30 [ 990.139311][T19339] ? create_new_namespaces+0x30/0xac0 [ 990.139338][T19339] ? rcu_is_watching+0x12/0xc0 [ 990.139382][T19339] create_new_namespaces+0xd3/0xac0 [ 990.139408][T19339] ? bpf_lsm_capable+0x9/0x10 [ 990.139434][T19339] ? security_capable+0x80/0x260 [ 990.139479][T19339] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 990.139509][T19339] ksys_unshare+0x473/0xad0 [ 990.139544][T19339] ? __pfx_ksys_unshare+0x10/0x10 [ 990.139587][T19339] __x64_sys_unshare+0x31/0x40 [ 990.139619][T19339] do_syscall_64+0x106/0xf80 [ 990.139655][T19339] ? clear_bhb_loop+0x40/0x90 [ 990.139687][T19339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.139713][T19339] RIP: 0033:0x7fed11d9c799 [ 990.139738][T19339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 990.139766][T19339] RSP: 002b:00007fed12c2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 990.139792][T19339] RAX: ffffffffffffffda RBX: 00007fed12015fa0 RCX: 00007fed11d9c799 [ 990.139811][T19339] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 990.139827][T19339] RBP: 00007fed11e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 990.139843][T19339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 990.139858][T19339] R13: 00007fed12016038 R14: 00007fed12015fa0 R15: 00007ffff0cfb448 [ 990.139890][T19339] [ 990.669630][T19340] netlink: 'syz.3.2870': attribute type 5 has an invalid length. [ 990.736736][T19340] netlink: 314 bytes leftover after parsing attributes in process `syz.3.2870'. [ 993.538886][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.545306][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.258613][T19421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2886'. [ 995.193042][T19443] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2892'. [ 995.403808][T19443] veth1_macvtap: entered allmulticast mode [ 997.557285][T19490] FAULT_INJECTION: forcing a failure. [ 997.557285][T19490] name fail_futex, interval 1, probability 0, space 0, times 0 [ 997.570469][T19490] CPU: 0 UID: 0 PID: 19490 Comm: syz.4.2901 Tainted: G U L syzkaller #0 PREEMPT(full) [ 997.570516][T19490] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 997.570527][T19490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 997.570543][T19490] Call Trace: [ 997.570552][T19490] [ 997.570561][T19490] dump_stack_lvl+0x100/0x190 [ 997.570604][T19490] should_fail_ex.cold+0x5/0xa [ 997.570634][T19490] should_fail_futex+0x4c/0x60 [ 997.570664][T19490] futex_lock_pi_atomic+0x12d/0xaf0 [ 997.570709][T19490] futex_lock_pi+0x246/0x7b0 [ 997.570751][T19490] ? __pfx_futex_lock_pi+0x10/0x10 [ 997.570788][T19490] ? preempt_schedule_common+0x42/0xc0 [ 997.570826][T19490] ? preempt_schedule_thunk+0x16/0x30 [ 997.570870][T19490] ? __pfx_try_to_wake_up+0x10/0x10 [ 997.570904][T19490] ? futex_private_hash_put+0x107/0x1c0 [ 997.570939][T19490] ? __pfx_futex_wake_mark+0x10/0x10 [ 997.570987][T19490] ? ksys_write+0x190/0x250 [ 997.571010][T19490] ? ksys_write+0x190/0x250 [ 997.571038][T19490] do_futex+0x18a/0x350 [ 997.571072][T19490] ? __pfx_do_futex+0x10/0x10 [ 997.571113][T19490] __x64_sys_futex+0x34f/0x4d0 [ 997.571151][T19490] ? __pfx___x64_sys_futex+0x10/0x10 [ 997.571196][T19490] do_syscall_64+0x106/0xf80 [ 997.571232][T19490] ? clear_bhb_loop+0x40/0x90 [ 997.571263][T19490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 997.571289][T19490] RIP: 0033:0x7fbaff99c799 [ 997.571310][T19490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 997.571334][T19490] RSP: 002b:00007fbb007ac028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 997.571358][T19490] RAX: ffffffffffffffda RBX: 00007fbaffc16180 RCX: 00007fbaff99c799 [ 997.571375][T19490] RDX: 0000000000000001 RSI: 0000000000000006 RDI: 0000000000000000 [ 997.571391][T19490] RBP: 00007fbaffa32c99 R08: 0000000000000000 R09: 00000000fffffffa [ 997.571407][T19490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 997.571422][T19490] R13: 00007fbaffc16218 R14: 00007fbaffc16180 R15: 00007ffe896a62c8 [ 997.571454][T19490] [ 997.814375][T19486] zswap: compressor not available [ 997.897411][T19494] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2902'. [ 998.256907][T19503] [U] [ 998.259669][T19503] [U] [ 998.262384][T19503] [U] [ 998.265101][T19503] [U] [ 998.386143][T19503] [U] [ 998.388992][T19503] [U] [ 998.391706][T19503] [U] [ 998.394422][T19503] [U] [ 998.483695][T19503] [U] [ 998.996659][T19530] netlink: 186 bytes leftover after parsing attributes in process `syz.0.2908'. [ 1000.275438][ T30] audit: type=1800 audit(4294971780.336:35): pid=19545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2912" name="version" dev="configfs" ino=93626 res=0 errno=0 [ 1001.485146][T19563] vhci_hcd vhci_hcd.2: invalid port number 255 [ 1002.298284][T19592] random: crng reseeded on system resumption [ 1002.431092][T19588] hub 1-0:1.0: USB hub found [ 1002.485356][T19588] hub 1-0:1.0: 1 port detected [ 1003.412290][T19604] mkiss: ax0: crc mode is auto. [ 1008.627451][T19710] FAULT_INJECTION: forcing a failure. [ 1008.627451][T19710] name failslab, interval 1, probability 0, space 0, times 0 [ 1008.677883][T19710] CPU: 0 UID: 0 PID: 19710 Comm: syz.2.2949 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1008.677928][T19710] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1008.677938][T19710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1008.677954][T19710] Call Trace: [ 1008.677963][T19710] [ 1008.677973][T19710] dump_stack_lvl+0x100/0x190 [ 1008.678016][T19710] should_fail_ex.cold+0x5/0xa [ 1008.678046][T19710] should_failslab+0xc2/0x120 [ 1008.678074][T19710] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1008.678114][T19710] ? __kernfs_new_node+0xd2/0x960 [ 1008.678156][T19710] __kernfs_new_node+0xd2/0x960 [ 1008.678197][T19710] ? __pfx___kernfs_new_node+0x10/0x10 [ 1008.678248][T19710] ? find_held_lock+0x2b/0x80 [ 1008.678273][T19710] ? kernfs_root+0xee/0x2a0 [ 1008.678307][T19710] ? kernfs_root+0xee/0x2a0 [ 1008.678350][T19710] kernfs_new_node+0x11b/0x1a0 [ 1008.678397][T19710] __kernfs_create_file+0x53/0x350 [ 1008.678430][T19710] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1008.678472][T19710] internal_create_group+0x593/0xf40 [ 1008.678518][T19710] ? __pfx_internal_create_group+0x10/0x10 [ 1008.678562][T19710] ? kernfs_create_link+0x1bd/0x240 [ 1008.678596][T19710] internal_create_groups+0x9d/0x150 [ 1008.678637][T19710] device_add+0x71a/0x1950 [ 1008.678671][T19710] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1008.678715][T19710] ? __pfx_device_add+0x10/0x10 [ 1008.678745][T19710] ? lockdep_init_map_type+0x5c/0x250 [ 1008.678781][T19710] ? __init_waitqueue_head+0xca/0x150 [ 1008.678826][T19710] netdev_register_kobject+0x1a9/0x3d0 [ 1008.678877][T19710] register_netdevice+0x12e0/0x2210 [ 1008.678924][T19710] ? __pfx_register_netdevice+0x10/0x10 [ 1008.678972][T19710] __tun_chr_ioctl+0x1ded/0x47c0 [ 1008.679078][T19710] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1008.679121][T19710] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1008.679151][T19710] ? hook_file_ioctl_common+0x146/0x410 [ 1008.679189][T19710] ? __fget_files+0x21f/0x3d0 [ 1008.679222][T19710] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1008.679250][T19710] __x64_sys_ioctl+0x18e/0x210 [ 1008.679290][T19710] do_syscall_64+0x106/0xf80 [ 1008.679327][T19710] ? clear_bhb_loop+0x40/0x90 [ 1008.679359][T19710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1008.679386][T19710] RIP: 0033:0x7fb91299c799 [ 1008.679407][T19710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1008.679433][T19710] RSP: 002b:00007fb9137e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1008.679457][T19710] RAX: ffffffffffffffda RBX: 00007fb912c15fa0 RCX: 00007fb91299c799 [ 1008.679475][T19710] RDX: 0000000000000038 RSI: 00000000400454ca RDI: 0000000000000003 [ 1008.679491][T19710] RBP: 00007fb912a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1008.679507][T19710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1008.679523][T19710] R13: 00007fb912c16038 R14: 00007fb912c15fa0 R15: 00007ffe0e341468 [ 1008.679555][T19710] [ 1009.859938][ T30] audit: type=1804 audit(4294971789.866:36): pid=19718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2950" name="file0" dev="tmpfs" ino=2445 res=1 errno=0 [ 1012.936051][T19743] netlink: 122 bytes leftover after parsing attributes in process `syz.4.2958'. [ 1013.431471][ T30] audit: type=1800 audit(4294971793.496:37): pid=19749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2960" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 1013.572251][T19754] ima: policy update failed [ 1013.600851][ T30] audit: type=1802 audit(4294971793.666:38): pid=19754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.2962" res=0 errno=0 [ 1014.961016][T19770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2965'. [ 1016.197271][T19792] FAULT_INJECTION: forcing a failure. [ 1016.197271][T19792] name failslab, interval 1, probability 0, space 0, times 0 [ 1016.261979][T19792] CPU: 0 UID: 0 PID: 19792 Comm: syz.3.2970 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1016.262023][T19792] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1016.262034][T19792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1016.262050][T19792] Call Trace: [ 1016.262058][T19792] [ 1016.262068][T19792] dump_stack_lvl+0x100/0x190 [ 1016.262110][T19792] should_fail_ex.cold+0x5/0xa [ 1016.262140][T19792] should_failslab+0xc2/0x120 [ 1016.262167][T19792] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1016.262205][T19792] ? __anon_vma_prepare+0xae/0x5e0 [ 1016.262248][T19792] __anon_vma_prepare+0xae/0x5e0 [ 1016.262283][T19792] ? do_raw_spin_lock+0x128/0x260 [ 1016.262325][T19792] __vmf_anon_prepare+0x11f/0x250 [ 1016.262357][T19792] do_huge_pmd_anonymous_page+0x15c/0x1c40 [ 1016.262400][T19792] ? __pmd_alloc+0x3fb/0x950 [ 1016.262432][T19792] __handle_mm_fault+0x1e9e/0x2b60 [ 1016.262471][T19792] ? mt_find+0x45e/0x8e0 [ 1016.262514][T19792] ? __pfx___handle_mm_fault+0x10/0x10 [ 1016.262548][T19792] ? __pfx_mt_find+0x10/0x10 [ 1016.262610][T19792] handle_mm_fault+0x36d/0xa20 [ 1016.262651][T19792] __get_user_pages+0xf9c/0x34d0 [ 1016.262691][T19792] ? __pfx___get_user_pages+0x10/0x10 [ 1016.262730][T19792] populate_vma_page_range+0x267/0x3f0 [ 1016.262763][T19792] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1016.262794][T19792] ? __pfx_find_vma_intersection+0x10/0x10 [ 1016.262823][T19792] ? do_mmap+0x93f/0x12f0 [ 1016.262907][T19792] __mm_populate+0x107/0x3a0 [ 1016.262941][T19792] ? __pfx___mm_populate+0x10/0x10 [ 1016.262974][T19792] ? up_write+0x290/0x4f0 [ 1016.263017][T19792] vm_mmap_pgoff+0x37f/0x470 [ 1016.263050][T19792] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1016.263080][T19792] ? do_futex+0x192/0x350 [ 1016.263114][T19792] ? __pfx_do_futex+0x10/0x10 [ 1016.263153][T19792] ksys_mmap_pgoff+0xe1/0x650 [ 1016.263180][T19792] ? __x64_sys_futex+0x34f/0x4d0 [ 1016.263212][T19792] ? __x64_sys_futex+0x358/0x4d0 [ 1016.263246][T19792] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1016.263274][T19792] ? xfd_validate_state+0x129/0x190 [ 1016.263318][T19792] __x64_sys_mmap+0x125/0x190 [ 1016.263359][T19792] do_syscall_64+0x106/0xf80 [ 1016.263568][T19792] ? clear_bhb_loop+0x40/0x90 [ 1016.263606][T19792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.263634][T19792] RIP: 0033:0x7fed11d9c799 [ 1016.263656][T19792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1016.263681][T19792] RSP: 002b:00007fed12c2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1016.263705][T19792] RAX: ffffffffffffffda RBX: 00007fed12015fa0 RCX: 00007fed11d9c799 [ 1016.263722][T19792] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 1016.263739][T19792] RBP: 00007fed11e32c99 R08: 0000000000000002 R09: 0000000000008000 [ 1016.263755][T19792] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1016.263771][T19792] R13: 00007fed12016038 R14: 00007fed12015fa0 R15: 00007ffff0cfb448 [ 1016.263804][T19792] [ 1018.424208][T19806] random: crng reseeded on system resumption [ 1019.410458][T19835] futex_wake_op: syz.0.2979 tries to shift op by -2048; fix this program [ 1019.682077][T19841] misc userio: No port type given on /dev/userio [ 1019.708708][T19835] futex_wake_op: syz.0.2979 tries to shift op by -2048; fix this program [ 1019.744656][T19843] scsi_dev_info_list_add_str: bad dev info string '' '' '' [ 1022.700668][T19892] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2995'. [ 1022.847694][T19899] block2mtd: error: cannot open device /sys/modu [ 1023.024881][T19901] cougar: G6 mapped to F18 [ 1023.098637][T19900] block2mtd: error: cannot open device nev/ram7 [ 1023.360698][T19914] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2998'. [ 1028.112793][T19986] bond0: option slaves: interface - does not exist! [ 1028.699060][T19999] netlink: 2468 bytes leftover after parsing attributes in process `syz.2.3016'. [ 1030.890196][T20041] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1030.897496][T20041] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1031.335389][T20037] bond0: option slaves: interface - does not exist! [ 1031.665422][ T30] audit: type=1800 audit(4294971811.716:39): pid=20053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3030" name="members" dev="configfs" ino=96700 res=0 errno=0 [ 1032.137705][T20065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3034'. [ 1032.662094][T20077] netlink: 330 bytes leftover after parsing attributes in process `syz.4.3035'. [ 1037.506911][T20111] bond0: option slaves: interface - does not exist! [ 1038.103240][T20120] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3043'. [ 1039.756021][T20151] bond0: option slaves: interface - does not exist! [ 1042.482464][T20201] nfs: Unknown parameter 'nl802154' [ 1043.120870][ T30] audit: type=1800 audit(4294971823.186:40): pid=20211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3060" name="discovery_nqn" dev="configfs" ino=97641 res=0 errno=0 [ 1043.174713][T20211] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3060'. [ 1043.221458][T20211] netlink: 25 bytes leftover after parsing attributes in process `syz.3.3060'. [ 1046.839592][T20260] FAULT_INJECTION: forcing a failure. [ 1046.839592][T20260] name failslab, interval 1, probability 0, space 0, times 0 [ 1046.915679][T20260] CPU: 0 UID: 0 PID: 20260 Comm: syz.3.3074 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1046.915728][T20260] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1046.915738][T20260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1046.915754][T20260] Call Trace: [ 1046.915763][T20260] [ 1046.915773][T20260] dump_stack_lvl+0x100/0x190 [ 1046.915819][T20260] should_fail_ex.cold+0x5/0xa [ 1046.915850][T20260] ? sk_prot_alloc+0x10b/0x2a0 [ 1046.915876][T20260] should_failslab+0xc2/0x120 [ 1046.915904][T20260] __kmalloc_noprof+0xe0/0x850 [ 1046.915943][T20260] ? security_inode_alloc+0xcf/0x2c0 [ 1046.915976][T20260] sk_prot_alloc+0x10b/0x2a0 [ 1046.916004][T20260] sk_alloc+0x36/0xe80 [ 1046.916039][T20260] __netlink_create+0x5e/0x2c0 [ 1046.916077][T20260] __netlink_kernel_create+0xed/0x750 [ 1046.916119][T20260] ? __pfx___netlink_kernel_create+0x10/0x10 [ 1046.916168][T20260] fib_net_init+0x26d/0x3f0 [ 1046.916207][T20260] ? is_module_address+0x69/0xf0 [ 1046.916241][T20260] ? __pfx_fib_net_init+0x10/0x10 [ 1046.916279][T20260] ? timer_init_key+0x150/0x340 [ 1046.916306][T20260] ? __pfx_nl_fib_input+0x10/0x10 [ 1046.916348][T20260] ? devinet_init_net+0x56c/0x8d0 [ 1046.916395][T20260] ? __pfx_fib_net_init+0x10/0x10 [ 1046.916433][T20260] ops_init+0x1e2/0x5f0 [ 1046.916483][T20260] setup_net+0x118/0x3a0 [ 1046.916523][T20260] ? __pfx_setup_net+0x10/0x10 [ 1046.916560][T20260] ? lockdep_init_map_type+0x5c/0x250 [ 1046.916596][T20260] ? mutex_init_lockep+0x110/0x150 [ 1046.916636][T20260] copy_net_ns+0x46f/0x7c0 [ 1046.916663][T20260] create_new_namespaces+0x3ea/0xac0 [ 1046.916697][T20260] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1046.916728][T20260] ksys_unshare+0x473/0xad0 [ 1046.916762][T20260] ? __pfx_ksys_unshare+0x10/0x10 [ 1046.916806][T20260] __x64_sys_unshare+0x31/0x40 [ 1046.916838][T20260] do_syscall_64+0x106/0xf80 [ 1046.916876][T20260] ? clear_bhb_loop+0x40/0x90 [ 1046.916908][T20260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.916933][T20260] RIP: 0033:0x7fed11d9c799 [ 1046.916954][T20260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1046.916979][T20260] RSP: 002b:00007fed12c2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1046.917003][T20260] RAX: ffffffffffffffda RBX: 00007fed12015fa0 RCX: 00007fed11d9c799 [ 1046.917020][T20260] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1046.917036][T20260] RBP: 00007fed11e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1046.917051][T20260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1046.917067][T20260] R13: 00007fed12016038 R14: 00007fed12015fa0 R15: 00007ffff0cfb448 [ 1046.917098][T20260] [ 1048.700125][T20282] FAULT_INJECTION: forcing a failure. [ 1048.700125][T20282] name failslab, interval 1, probability 0, space 0, times 0 [ 1048.725120][T20283] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3078'. [ 1048.783193][T20283] netlink: 'syz.4.3078': attribute type 21 has an invalid length. [ 1048.865480][T20283] netlink: 334 bytes leftover after parsing attributes in process `syz.4.3078'. [ 1048.903672][T20282] CPU: 0 UID: 0 PID: 20282 Comm: syz.0.3076 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1048.903716][T20282] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1048.903726][T20282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1048.903742][T20282] Call Trace: [ 1048.903751][T20282] [ 1048.903761][T20282] dump_stack_lvl+0x100/0x190 [ 1048.903804][T20282] should_fail_ex.cold+0x5/0xa [ 1048.903834][T20282] should_failslab+0xc2/0x120 [ 1048.903861][T20282] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1048.903900][T20282] ? __kernfs_new_node+0xd2/0x960 [ 1048.903955][T20282] __kernfs_new_node+0xd2/0x960 [ 1048.903996][T20282] ? __pfx___kernfs_new_node+0x10/0x10 [ 1048.904041][T20282] ? find_held_lock+0x2b/0x80 [ 1048.904064][T20282] ? kernfs_root+0xee/0x2a0 [ 1048.904099][T20282] ? kernfs_root+0xee/0x2a0 [ 1048.904142][T20282] kernfs_new_node+0x11b/0x1a0 [ 1048.904187][T20282] __kernfs_create_file+0x53/0x350 [ 1048.904221][T20282] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1048.904262][T20282] internal_create_group+0x593/0xf40 [ 1048.904307][T20282] ? __pfx_internal_create_group+0x10/0x10 [ 1048.904350][T20282] ? kernfs_create_link+0x1bd/0x240 [ 1048.904384][T20282] internal_create_groups+0x9d/0x150 [ 1048.904425][T20282] device_add+0x77a/0x1950 [ 1048.904465][T20282] ? __pfx_device_add+0x10/0x10 [ 1048.904493][T20282] ? __pfx___might_resched+0x10/0x10 [ 1048.904530][T20282] ? lockdep_hardirqs_on+0x78/0x100 [ 1048.904578][T20282] __add_disk+0x518/0xe40 [ 1048.904685][T20282] add_disk_fwnode+0x118/0x5c0 [ 1048.904714][T20282] loop_add+0x90b/0xb60 [ 1048.904752][T20282] ? __pfx_loop_add+0x10/0x10 [ 1048.904805][T20282] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1048.904853][T20282] loop_control_ioctl+0xae/0x620 [ 1048.904891][T20282] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1048.904927][T20282] ? xfd_validate_state+0x129/0x190 [ 1048.904974][T20282] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1048.905014][T20282] __x64_sys_ioctl+0x18e/0x210 [ 1048.905054][T20282] do_syscall_64+0x106/0xf80 [ 1048.905091][T20282] ? clear_bhb_loop+0x40/0x90 [ 1048.905123][T20282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1048.905149][T20282] RIP: 0033:0x7f45ec19c799 [ 1048.905170][T20282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1048.905196][T20282] RSP: 002b:00007f45ed052028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1048.905221][T20282] RAX: ffffffffffffffda RBX: 00007f45ec415fa0 RCX: 00007f45ec19c799 [ 1048.905238][T20282] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000002 [ 1048.905254][T20282] RBP: 00007f45ec232c99 R08: 0000000000000000 R09: 0000000000000000 [ 1048.905269][T20282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1048.905285][T20282] R13: 00007f45ec416038 R14: 00007f45ec415fa0 R15: 00007ffe5e6a5158 [ 1048.905317][T20282] [ 1051.987113][T20320] sp0: Synchronizing with TNC [ 1054.764474][T20360] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1054.771137][T20360] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1054.980289][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.988095][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.174532][T20378] bond0: no command found in slaves file - use +ifname or -ifname [ 1056.811734][T20382] futex_wake_op: syz.2.3099 tries to shift op by -2048; fix this program [ 1056.912578][T20382] MTRR 1 not used [ 1058.631862][T20400] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1058.638509][T20400] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1060.236638][T20405] bond0: option slaves: interface - does not exist! [ 1061.386877][T20433] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3112'. [ 1062.225435][T20449] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1062.231987][T20449] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1064.524187][T20462] bond0: option slaves: interface - does not exist! [ 1070.835938][T20565] bond0: no command found in slaves file - use +ifname or -ifname [ 1073.922295][T20625] bond0: option slaves: interface - does not exist! [ 1077.980155][T20672] bond0: option slaves: interface - does not exist! [ 1083.800605][T20740] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1083.807179][T20740] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1083.831683][T20742] [U]  [ 1086.976088][T20790] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1086.982594][T20790] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1090.968384][T20824] Invalid ELF header magic: != ELF [ 1093.896211][T20851] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1093.902962][T20851] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1094.336994][T20856] snd_virmidi snd_virmidi.0: control 61678:131081:3:y>o[k<:1597170177 is already present [ 1097.509845][T20901] bond0: option slaves: interface - does not exist! [ 1097.642726][T20909] FAULT_INJECTION: forcing a failure. [ 1097.642726][T20909] name failslab, interval 1, probability 0, space 0, times 0 [ 1097.793256][T20909] CPU: 0 UID: 0 PID: 20909 Comm: syz.3.3222 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1097.793300][T20909] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1097.793310][T20909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1097.793326][T20909] Call Trace: [ 1097.793336][T20909] [ 1097.793345][T20909] dump_stack_lvl+0x100/0x190 [ 1097.793388][T20909] should_fail_ex.cold+0x5/0xa [ 1097.793418][T20909] should_failslab+0xc2/0x120 [ 1097.793445][T20909] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1097.793485][T20909] ? alloc_empty_file+0x55/0x1c0 [ 1097.793522][T20909] alloc_empty_file+0x55/0x1c0 [ 1097.793555][T20909] alloc_file_pseudo+0x13a/0x230 [ 1097.793589][T20909] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1097.793623][T20909] ? alloc_fd+0x476/0x790 [ 1097.793654][T20909] sock_alloc_file+0x50/0x210 [ 1097.793695][T20909] __sys_socket+0x1c0/0x260 [ 1097.793724][T20909] ? __pfx___sys_socket+0x10/0x10 [ 1097.793782][T20909] __x64_sys_socket+0x72/0xb0 [ 1097.793811][T20909] ? lockdep_hardirqs_on+0x78/0x100 [ 1097.793849][T20909] do_syscall_64+0x106/0xf80 [ 1097.793886][T20909] ? clear_bhb_loop+0x40/0x90 [ 1097.793918][T20909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1097.793944][T20909] RIP: 0033:0x7fed11d9c799 [ 1097.793972][T20909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1097.793998][T20909] RSP: 002b:00007fed12c2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1097.794023][T20909] RAX: ffffffffffffffda RBX: 00007fed12015fa0 RCX: 00007fed11d9c799 [ 1097.794040][T20909] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 1097.794055][T20909] RBP: 00007fed11e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1097.794071][T20909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1097.794086][T20909] R13: 00007fed12016038 R14: 00007fed12015fa0 R15: 00007ffff0cfb448 [ 1097.794118][T20909] [ 1098.859032][T20918] bond0: option slaves: interface - does not exist! [ 1100.234066][T20929] Invalid ELF header magic: != ELF [ 1103.586509][T20966] bond0: option slaves: interface - does not exist! [ 1103.700768][T20974] vivid-007: ================= START STATUS ================= [ 1103.791245][T20974] vivid-007: Generate PTS: true [ 1103.888564][T20974] vivid-007: Generate SCR: true [ 1104.001038][T20974] tpg source WxH: 320x240 (Y'CbCr) [ 1104.138324][T20974] tpg field: 1 [ 1104.163695][T20974] tpg crop: (0,0)/320x240 [ 1104.272593][T20974] tpg compose: (0,0)/320x240 [ 1104.349784][T20974] tpg colorspace: 8 [ 1104.443911][T20974] tpg transfer function: 0/0 [ 1104.516351][T20974] tpg Y'CbCr encoding: 0/0 [ 1104.592547][T20974] tpg quantization: 0/0 [ 1104.643896][T20974] tpg RGB range: 0/2 [ 1104.730925][T20974] vivid-007: ================== END STATUS ================== [ 1107.484610][T21021] FAULT_INJECTION: forcing a failure. [ 1107.484610][T21021] name failslab, interval 1, probability 0, space 0, times 0 [ 1107.565894][T21021] CPU: 0 UID: 0 PID: 21021 Comm: syz.2.3249 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1107.565939][T21021] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1107.565950][T21021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1107.565966][T21021] Call Trace: [ 1107.565975][T21021] [ 1107.565984][T21021] dump_stack_lvl+0x100/0x190 [ 1107.566030][T21021] should_fail_ex.cold+0x5/0xa [ 1107.566059][T21021] should_failslab+0xc2/0x120 [ 1107.566086][T21021] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1107.566126][T21021] ? alloc_empty_file+0x55/0x1c0 [ 1107.566164][T21021] alloc_empty_file+0x55/0x1c0 [ 1107.566197][T21021] alloc_file_pseudo+0x13a/0x230 [ 1107.566231][T21021] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1107.566265][T21021] ? alloc_fd+0x476/0x790 [ 1107.566294][T21021] sock_alloc_file+0x50/0x210 [ 1107.566335][T21021] __sys_socket+0x1c0/0x260 [ 1107.566364][T21021] ? __pfx___sys_socket+0x10/0x10 [ 1107.566401][T21021] __x64_sys_socket+0x72/0xb0 [ 1107.566430][T21021] ? lockdep_hardirqs_on+0x78/0x100 [ 1107.566478][T21021] do_syscall_64+0x106/0xf80 [ 1107.566514][T21021] ? clear_bhb_loop+0x40/0x90 [ 1107.566546][T21021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.566572][T21021] RIP: 0033:0x7fb91299c799 [ 1107.566593][T21021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1107.566618][T21021] RSP: 002b:00007fb9137e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1107.566644][T21021] RAX: ffffffffffffffda RBX: 00007fb912c15fa0 RCX: 00007fb91299c799 [ 1107.566661][T21021] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 1107.566676][T21021] RBP: 00007fb912a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1107.566692][T21021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1107.566707][T21021] R13: 00007fb912c16038 R14: 00007fb912c15fa0 R15: 00007ffe0e341468 [ 1107.566738][T21021] [ 1108.341292][T21019] Invalid ELF header magic: != ELF [ 1112.303078][T21046] bond0: option slaves: interface - does not exist! [ 1113.360199][T21062] bond0: option slaves: interface - does not exist! [ 1113.672853][T21082] vivid-007: ================= START STATUS ================= [ 1113.712533][T21082] vivid-007: Generate PTS: true [ 1113.746604][T21082] vivid-007: Generate SCR: true [ 1113.764855][T21082] tpg source WxH: 320x240 (Y'CbCr) [ 1113.792195][T21082] tpg field: 1 [ 1113.808994][T21082] tpg crop: (0,0)/320x240 [ 1113.835503][T21082] tpg compose: (0,0)/320x240 [ 1113.855036][T21082] tpg colorspace: 8 [ 1113.875251][T21082] tpg transfer function: 0/0 [ 1113.916209][T21082] tpg Y'CbCr encoding: 0/0 [ 1113.953409][T21082] tpg quantization: 0/0 [ 1113.994814][T21082] tpg RGB range: 0/2 [ 1114.068702][T21082] vivid-007: ================== END STATUS ================== [ 1115.559856][T21116] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1115.566397][T21116] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1116.417118][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.423494][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.441043][T21132] bond0: no command found in slaves file - use +ifname or -ifname [ 1119.054881][T21167] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1119.061463][T21167] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1119.414906][T21172] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3282'. [ 1119.809439][T21181] netlink: 342 bytes leftover after parsing attributes in process `syz.3.3286'. [ 1122.678686][T21209] bond0: option slaves: interface - does not exist! [ 1123.828786][T21233] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3300'. [ 1123.902724][T21233] netlink: 302 bytes leftover after parsing attributes in process `syz.4.3300'. [ 1124.060660][T21210] program syz.3.3292 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1124.302194][T21238] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1124.308815][T21238] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1124.574995][T21242] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3302'. [ 1127.045919][T21267] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3310'. [ 1127.233325][T21258] bond0: option slaves: interface - does not exist! [ 1127.417841][T21275] futex_wake_op: syz.4.3311 tries to shift op by -2048; fix this program [ 1127.458021][T21276] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1127.464559][T21276] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1128.109360][T21291] veth1_to_batadv: entered promiscuous mode [ 1128.263611][T21291] FAULT_INJECTION: forcing a failure. [ 1128.263611][T21291] name failslab, interval 1, probability 0, space 0, times 0 [ 1128.366556][T21291] CPU: 0 UID: 0 PID: 21291 Comm: syz.3.3316 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1128.366600][T21291] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1128.366610][T21291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1128.366626][T21291] Call Trace: [ 1128.366635][T21291] [ 1128.366645][T21291] dump_stack_lvl+0x100/0x190 [ 1128.366689][T21291] should_fail_ex.cold+0x5/0xa [ 1128.366719][T21291] should_failslab+0xc2/0x120 [ 1128.366746][T21291] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1128.366794][T21291] ? __proc_create+0x2cb/0x8c0 [ 1128.366841][T21291] __proc_create+0x2cb/0x8c0 [ 1128.366883][T21291] ? __pfx___proc_create+0x10/0x10 [ 1128.366936][T21291] proc_create_reg+0x75/0x170 [ 1128.366962][T21291] ? __pfx_snmp6_dev_seq_show+0x10/0x10 [ 1128.367068][T21291] proc_create_single_data+0x86/0x130 [ 1128.367096][T21291] ? __pfx_proc_create_single_data+0x10/0x10 [ 1128.367133][T21291] snmp6_register_dev+0xe5/0x180 [ 1128.367157][T21291] ipv6_add_dev+0x6dc/0x1520 [ 1128.367200][T21291] addrconf_notify+0x563/0x19c0 [ 1128.367227][T21291] ? ip6mr_device_event+0x1bc/0x230 [ 1128.367280][T21291] notifier_call_chain+0x99/0x420 [ 1128.367321][T21291] call_netdevice_notifiers_info+0xbe/0x110 [ 1128.367351][T21291] register_netdevice+0x16e6/0x2210 [ 1128.367396][T21291] ? __pfx_register_netdevice+0x10/0x10 [ 1128.367443][T21291] ? __pfx_loopback_net_init+0x10/0x10 [ 1128.367473][T21291] register_netdev+0x34/0x50 [ 1128.367511][T21291] loopback_net_init+0x7a/0x170 [ 1128.367539][T21291] ? __pfx_loopback_net_init+0x10/0x10 [ 1128.367565][T21291] ops_init+0x1e2/0x5f0 [ 1128.367610][T21291] setup_net+0x118/0x3a0 [ 1128.367649][T21291] ? __pfx_setup_net+0x10/0x10 [ 1128.367686][T21291] ? lockdep_init_map_type+0x5c/0x250 [ 1128.367722][T21291] ? mutex_init_lockep+0x110/0x150 [ 1128.367761][T21291] copy_net_ns+0x46f/0x7c0 [ 1128.367795][T21291] create_new_namespaces+0x3ea/0xac0 [ 1128.367829][T21291] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1128.367860][T21291] ksys_unshare+0x473/0xad0 [ 1128.367895][T21291] ? __pfx_ksys_unshare+0x10/0x10 [ 1128.367939][T21291] __x64_sys_unshare+0x31/0x40 [ 1128.367971][T21291] do_syscall_64+0x106/0xf80 [ 1128.368008][T21291] ? clear_bhb_loop+0x40/0x90 [ 1128.368039][T21291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1128.368066][T21291] RIP: 0033:0x7fed11d9c799 [ 1128.368088][T21291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1128.368114][T21291] RSP: 002b:00007fed12c2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1128.368138][T21291] RAX: ffffffffffffffda RBX: 00007fed12015fa0 RCX: 00007fed11d9c799 [ 1128.368156][T21291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1128.368172][T21291] RBP: 00007fed11e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1128.368187][T21291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1128.368202][T21291] R13: 00007fed12016038 R14: 00007fed12015fa0 R15: 00007ffff0cfb448 [ 1128.368235][T21291] [ 1129.570566][T21290] veth1_to_batadv: left promiscuous mode [ 1131.345894][T21318] bond0: option slaves: interface - does not exist! [ 1131.906532][T21329] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1131.913065][T21329] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1135.231296][T21359] input input180: cannot allocate more than FF_MAX_EFFECTS effects [ 1135.283727][T21359] random: crng reseeded on system resumption [ 1135.494797][T21356] program syz.0.3326 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1137.616762][T21385] bond0: option slaves: interface - does not exist! [ 1138.546689][T21402] netlink: 'syz.3.3340': attribute type 10 has an invalid length. [ 1138.616429][T21402] netlink: 330 bytes leftover after parsing attributes in process `syz.3.3340'. [ 1139.120310][T21407] Invalid ELF header magic: != ELF [ 1139.796010][T21411] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 1141.467476][T21435] bond0: option slaves: interface - does not exist! [ 1142.027812][T21446] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1142.034331][T21446] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1143.492283][T21471] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3357'. [ 1144.274924][T21476] bond0: option slaves: interface - does not exist! [ 1144.758631][T21499] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1144.765263][T21499] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1146.491789][T21526] nfs: Bad value for 'source' [ 1147.435278][T21529] bond0: option slaves: interface - does not exist! [ 1153.310762][T21629] bond0: no command found in slaves file - use +ifname or -ifname [ 1154.862409][T21667] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1154.868918][T21667] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1156.283605][T21690] netlink: 186 bytes leftover after parsing attributes in process `syz.0.3415'. [ 1156.398054][T21693] nfs: Bad value for 'source' [ 1157.691429][ T9846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1157.704158][ T9846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1157.712745][ T9846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1157.720703][ T9846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1157.729093][ T9846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1159.783580][ T9846] Bluetooth: hci0: command tx timeout [ 1159.865650][T21732] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1159.872203][T21732] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1160.099177][T21703] chnl_net:caif_netlink_parms(): no params data found [ 1160.639180][T12267] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1161.007456][T12267] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1161.265371][T12267] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1161.482705][T12267] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1161.606926][T21703] bridge0: port 1(bridge_slave_0) entered blocking state [ 1161.653362][T21703] bridge0: port 1(bridge_slave_0) entered disabled state [ 1161.709516][T21703] bridge_slave_0: entered allmulticast mode [ 1161.760028][T21703] bridge_slave_0: entered promiscuous mode [ 1161.808115][T21703] bridge0: port 2(bridge_slave_1) entered blocking state [ 1161.842912][T21757] FAULT_INJECTION: forcing a failure. [ 1161.842912][T21757] name failslab, interval 1, probability 0, space 0, times 0 [ 1161.861517][ T9846] Bluetooth: hci0: command tx timeout [ 1161.873354][T21703] bridge0: port 2(bridge_slave_1) entered disabled state [ 1161.895596][T21758] netlink: 186 bytes leftover after parsing attributes in process `syz.2.3430'. [ 1161.912123][T21703] bridge_slave_1: entered allmulticast mode [ 1161.947250][T21703] bridge_slave_1: entered promiscuous mode [ 1162.021546][T21757] CPU: 0 UID: 0 PID: 21757 Comm: syz.0.3437 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1162.021593][T21757] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1162.021604][T21757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1162.021620][T21757] Call Trace: [ 1162.021629][T21757] [ 1162.021638][T21757] dump_stack_lvl+0x100/0x190 [ 1162.021683][T21757] should_fail_ex.cold+0x5/0xa [ 1162.021712][T21757] ? process_preds+0x4c2/0x1d90 [ 1162.021750][T21757] should_failslab+0xc2/0x120 [ 1162.021778][T21757] __kmalloc_noprof+0xe0/0x850 [ 1162.021823][T21757] process_preds+0x4c2/0x1d90 [ 1162.021869][T21757] ? create_filter_start.constprop.0+0x134/0x310 [ 1162.021914][T21757] create_filter+0x140/0x210 [ 1162.021954][T21757] ? __pfx_create_filter+0x10/0x10 [ 1162.021996][T21757] ? find_held_lock+0x2b/0x80 [ 1162.022026][T21757] apply_event_filter+0x220/0x500 [ 1162.022067][T21757] ? __pfx_apply_event_filter+0x10/0x10 [ 1162.022117][T21757] event_filter_write+0x16d/0x290 [ 1162.022149][T21757] vfs_write+0x2aa/0x1070 [ 1162.022173][T21757] ? __pfx_event_filter_write+0x10/0x10 [ 1162.022213][T21757] ? __pfx_vfs_write+0x10/0x10 [ 1162.022236][T21757] ? __fget_files+0x215/0x3d0 [ 1162.022267][T21757] ? __fget_files+0x21f/0x3d0 [ 1162.022299][T21757] ksys_write+0x12a/0x250 [ 1162.022322][T21757] ? __pfx_ksys_write+0x10/0x10 [ 1162.022355][T21757] do_syscall_64+0x106/0xf80 [ 1162.022393][T21757] ? clear_bhb_loop+0x40/0x90 [ 1162.022424][T21757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1162.022451][T21757] RIP: 0033:0x7f45ec19c799 [ 1162.022471][T21757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1162.022497][T21757] RSP: 002b:00007f45ed031028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1162.022521][T21757] RAX: ffffffffffffffda RBX: 00007f45ec416090 RCX: 00007f45ec19c799 [ 1162.022539][T21757] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 1162.022554][T21757] RBP: 00007f45ec232c99 R08: 0000000000000000 R09: 0000000000000000 [ 1162.022569][T21757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1162.022585][T21757] R13: 00007f45ec416128 R14: 00007f45ec416090 R15: 00007ffe5e6a5158 [ 1162.022617][T21757] [ 1162.670090][T21757] FAULT_INJECTION: forcing a failure. [ 1162.670090][T21757] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1162.714215][T21757] CPU: 0 UID: 0 PID: 21757 Comm: syz.0.3437 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1162.714256][T21757] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1162.714266][T21757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1162.714281][T21757] Call Trace: [ 1162.714289][T21757] [ 1162.714298][T21757] dump_stack_lvl+0x100/0x190 [ 1162.714339][T21757] should_fail_ex.cold+0x5/0xa [ 1162.714363][T21757] ? rcu_is_watching+0x12/0xc0 [ 1162.714404][T21757] get_futex_key+0x107c/0x1620 [ 1162.714437][T21757] ? __pfx_get_futex_key+0x10/0x10 [ 1162.714465][T21757] ? lock_acquire+0x1cf/0x380 [ 1162.714510][T21757] futex_wake+0xea/0x530 [ 1162.714548][T21757] ? __pfx_futex_wake+0x10/0x10 [ 1162.714584][T21757] ? exit_mm_release+0x19/0x30 [ 1162.714623][T21757] do_futex+0x32b/0x350 [ 1162.714655][T21757] ? __pfx_do_futex+0x10/0x10 [ 1162.714685][T21757] ? __might_fault+0xc5/0x140 [ 1162.714727][T21757] mm_release+0x24a/0x2f0 [ 1162.714753][T21757] do_exit+0x704/0x2b60 [ 1162.714789][T21757] ? __pfx_do_exit+0x10/0x10 [ 1162.714820][T21757] ? do_raw_spin_lock+0x128/0x260 [ 1162.714855][T21757] ? find_held_lock+0x2b/0x80 [ 1162.714878][T21757] ? get_signal+0x7e0/0x21e0 [ 1162.714906][T21757] do_group_exit+0xd5/0x2a0 [ 1162.714941][T21757] get_signal+0x1ec7/0x21e0 [ 1162.714984][T21757] ? __pfx_get_signal+0x10/0x10 [ 1162.715011][T21757] ? do_futex+0x192/0x350 [ 1162.715044][T21757] arch_do_signal_or_restart+0x91/0x770 [ 1162.715075][T21757] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 1162.715115][T21757] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1162.715153][T21757] ? __pfx___x64_sys_futex+0x10/0x10 [ 1162.715192][T21757] exit_to_user_mode_loop+0x86/0x4a0 [ 1162.715227][T21757] do_syscall_64+0x668/0xf80 [ 1162.715262][T21757] ? clear_bhb_loop+0x40/0x90 [ 1162.715292][T21757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1162.715317][T21757] RIP: 0033:0x7f45ec19c799 [ 1162.715337][T21757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1162.715360][T21757] RSP: 002b:00007f45ed0310e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1162.715383][T21757] RAX: fffffffffffffe00 RBX: 00007f45ec416098 RCX: 00007f45ec19c799 [ 1162.715399][T21757] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f45ec416098 [ 1162.715414][T21757] RBP: 00007f45ec416090 R08: 0000000000000000 R09: 0000000000000000 [ 1162.715428][T21757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1162.715462][T21757] R13: 00007f45ec416128 R14: 00007ffe5e6a5070 R15: 00007ffe5e6a5158 [ 1162.715492][T21757] [ 1163.572549][T21703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1163.613992][T21703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1163.823033][T21703] team0: Port device team_slave_0 added [ 1163.935270][T21703] team0: Port device team_slave_1 added [ 1163.941752][ T9846] Bluetooth: hci0: command tx timeout [ 1164.329636][T21703] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1164.357484][T21703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1164.456468][T21703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1164.501232][T12267] bridge_slave_1: left allmulticast mode [ 1164.512930][T21769] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1164.526360][T21769] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1164.536657][T12267] bridge_slave_1: left promiscuous mode [ 1164.564081][T21769] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1164.570257][T12267] bridge0: port 2(bridge_slave_1) entered disabled state [ 1164.599933][T12267] bridge_slave_0: left allmulticast mode [ 1164.619145][T12267] bridge_slave_0: left promiscuous mode [ 1164.649386][T12267] bridge0: port 1(bridge_slave_0) entered disabled state [ 1165.461175][T12267] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1165.497308][T12267] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1165.519305][T12267] bond0 (unregistering): Released all slaves [ 1165.670802][T21703] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1165.728700][T21703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1165.831892][T21703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1165.882622][T12267] i: left promiscuous mode [ 1165.940388][T12267] ovs_: left promiscuous mode [ 1166.114115][T12267] tipc: Left network mode [ 1166.169439][T21703] hsr_slave_0: entered promiscuous mode [ 1166.206588][T21703] hsr_slave_1: entered promiscuous mode [ 1166.242976][T21703] debugfs: 'hsr0' already exists in 'hsr' [ 1166.285593][T21703] Cannot create hsr debugfs directory [ 1166.581839][ T9846] Bluetooth: hci0: command 0x0c1a tx timeout [ 1168.475435][T12267] hsr_slave_0: left promiscuous mode [ 1168.519032][T12267] hsr_slave_1: left promiscuous mode [ 1168.585265][T12267] veth0_macvtap: left promiscuous mode [ 1168.609394][T12267] veth1_vlan: left promiscuous mode [ 1168.639825][T12267] veth0_vlan: left promiscuous mode [ 1168.661513][ T9846] Bluetooth: hci0: command 0x0c1a tx timeout [ 1169.348151][T12267] team0 (unregistering): Port device team_slave_1 removed [ 1169.398534][T12267] team0 (unregistering): Port device team_slave_0 removed [ 1170.494626][T21703] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1170.635543][T21703] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1170.703007][T21703] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1170.741785][ T9846] Bluetooth: hci0: command 0x0c1a tx timeout [ 1170.800455][T21703] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1172.306952][T21703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1172.666595][T21703] 8021q: adding VLAN 0 to HW filter on device team0 [ 1172.783586][T19371] bridge0: port 1(bridge_slave_0) entered blocking state [ 1172.790740][T19371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1172.851234][T21849] futex_wake_op: syz.2.3453 tries to shift op by -2048; fix this program [ 1172.942767][T19371] bridge0: port 2(bridge_slave_1) entered blocking state [ 1172.949974][T19371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1174.349823][T21703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1174.616312][T21869] bond0: option slaves: interface - does not exist! [ 1175.675787][T21703] veth0_vlan: entered promiscuous mode [ 1175.738386][T21703] veth1_vlan: entered promiscuous mode [ 1176.084203][T21703] veth0_macvtap: entered promiscuous mode [ 1176.149637][T21703] veth1_macvtap: entered promiscuous mode [ 1176.249213][T21703] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1176.343607][T21703] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1176.419781][T21874] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1176.452291][T21874] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1176.500998][T21905] mkiss: ax0: crc mode is auto. [ 1176.542807][T21874] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1176.578857][T21874] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1176.916151][T12261] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1176.954235][T12261] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1177.074406][T21876] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1177.116733][T21876] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1177.870189][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.881594][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.985108][T21926] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1178.453313][T21929] netlink: 122 bytes leftover after parsing attributes in process `syz.3.3466'. [ 1178.802860][T21932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3467'. [ 1183.786718][T22009] bond0: option slaves: interface - does not exist! [ 1183.987684][T22017] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3489'. [ 1184.074435][T22017] can0: slcan on pty129. [ 1184.182660][T22016] can0 (unregistered): slcan off pty129. [ 1186.603794][T22055] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1186.610372][T22055] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1187.299544][T22066] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3502'. [ 1187.406831][T22069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3503'. [ 1187.469449][T22058] bond0: option slaves: interface - does not exist! [ 1187.879917][T22077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3504'. [ 1188.016914][T22077] HfR: entered promiscuous mode [ 1188.319817][T22088] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 1189.613397][T22112] FAULT_INJECTION: forcing a failure. [ 1189.613397][T22112] name failslab, interval 1, probability 0, space 0, times 0 [ 1189.710540][T22112] CPU: 0 UID: 0 PID: 22112 Comm: syz.4.3513 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1189.710583][T22112] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1189.710594][T22112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1189.710610][T22112] Call Trace: [ 1189.710619][T22112] [ 1189.710629][T22112] dump_stack_lvl+0x100/0x190 [ 1189.710675][T22112] should_fail_ex.cold+0x5/0xa [ 1189.710705][T22112] should_failslab+0xc2/0x120 [ 1189.710732][T22112] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 1189.710775][T22112] ? x509_cert_parse+0x2b6/0x910 [ 1189.710815][T22112] kmemdup_noprof+0x29/0x60 [ 1189.710857][T22112] x509_cert_parse+0x2b6/0x910 [ 1189.710889][T22112] ? kasan_save_stack+0x3f/0x50 [ 1189.710928][T22112] ? kasan_save_stack+0x30/0x50 [ 1189.710973][T22112] ? kasan_save_track+0x14/0x30 [ 1189.711015][T22112] pkcs7_extract_cert+0xa4/0x380 [ 1189.711058][T22112] asn1_ber_decoder+0x12b3/0x2170 [ 1189.711108][T22112] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 1189.711164][T22112] pkcs7_parse_message+0x289/0x870 [ 1189.711207][T22112] verify_pkcs7_signature+0x30/0xa0 [ 1189.711253][T22112] valid_regdb+0x211/0x590 [ 1189.711295][T22112] ? __pfx___nla_validate_parse+0x10/0x10 [ 1189.711336][T22112] ? __pfx_valid_regdb+0x10/0x10 [ 1189.711373][T22112] ? rcu_is_watching+0x12/0xc0 [ 1189.711419][T22112] reg_reload_regdb+0x11a/0x460 [ 1189.711445][T22112] ? __pfx_reg_reload_regdb+0x10/0x10 [ 1189.711472][T22112] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1189.711504][T22112] ? nl80211_pre_doit+0x19a/0xae0 [ 1189.711539][T22112] genl_family_rcv_msg_doit+0x214/0x300 [ 1189.711576][T22112] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1189.711603][T22112] ? genl_get_cmd+0x3ef/0x720 [ 1189.711635][T22112] ? bpf_lsm_capable+0x9/0x10 [ 1189.711662][T22112] ? security_capable+0x80/0x260 [ 1189.711709][T22112] genl_rcv_msg+0x560/0x800 [ 1189.711739][T22112] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1189.711765][T22112] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1189.711796][T22112] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 1189.711837][T22112] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1189.711879][T22112] netlink_rcv_skb+0x159/0x420 [ 1189.711920][T22112] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1189.711948][T22112] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1189.712006][T22112] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1189.712048][T22112] genl_rcv+0x28/0x40 [ 1189.712071][T22112] netlink_unicast+0x5aa/0x870 [ 1189.712116][T22112] ? __pfx_netlink_unicast+0x10/0x10 [ 1189.712156][T22112] ? __pfx_netlink_broadcast_filtered+0x10/0x10 [ 1189.712206][T22112] netlink_sendmsg+0x8b0/0xda0 [ 1189.712251][T22112] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1189.712290][T22112] ? __import_iovec+0x1d2/0x640 [ 1189.712323][T22112] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1189.712369][T22112] ____sys_sendmsg+0x9e1/0xb70 [ 1189.712394][T22112] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1189.712437][T22112] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1189.712470][T22112] ? __pfx_futex_wake_mark+0x10/0x10 [ 1189.712515][T22112] ___sys_sendmsg+0x190/0x1e0 [ 1189.712545][T22112] ? __pfx____sys_sendmsg+0x10/0x10 [ 1189.712609][T22112] __sys_sendmsg+0x170/0x220 [ 1189.712649][T22112] ? __pfx___sys_sendmsg+0x10/0x10 [ 1189.712686][T22112] ? __x64_sys_futex+0x34f/0x4d0 [ 1189.712736][T22112] do_syscall_64+0x106/0xf80 [ 1189.712774][T22112] ? clear_bhb_loop+0x40/0x90 [ 1189.712805][T22112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1189.712832][T22112] RIP: 0033:0x7f3676d9c799 [ 1189.712854][T22112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1189.712887][T22112] RSP: 002b:00007f3677cba028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1189.712912][T22112] RAX: ffffffffffffffda RBX: 00007f3677015fa0 RCX: 00007f3676d9c799 [ 1189.712930][T22112] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000005 [ 1189.712947][T22112] RBP: 00007f3676e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1189.712968][T22112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1189.712984][T22112] R13: 00007f3677016038 R14: 00007f3677015fa0 R15: 00007ffd28a91968 [ 1189.713016][T22112] [ 1190.169393][T22121] bond0: option slaves: interface - does not exist! [ 1190.194405][T22128] Invalid ELF header magic: != ELF [ 1191.802338][T22136] random: crng reseeded on system resumption [ 1199.459902][T22255] NFSD: Failed to start, no listeners configured. [ 1199.591517][T22253] bond0: no command found in slaves file - use +ifname or -ifname [ 1201.185400][T22279] Unable to find swap-space signature [ 1203.441380][ T30] audit: type=1800 audit(4294973006.489:41): pid=22302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3561" name="file0" dev="tmpfs" ino=1458 res=0 errno=0 [ 1205.309237][T22329] bond0: option slaves: interface - does not exist! [ 1207.956880][T22373] NFSD: Failed to start, no listeners configured. [ 1216.658969][T22489] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1218.666592][ T9846] Bluetooth: hci0: command 0x0c1a tx timeout [ 1218.807214][T22527] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1218.813850][T22527] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1219.157726][T22533] FAULT_INJECTION: forcing a failure. [ 1219.157726][T22533] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1219.232382][T22533] CPU: 0 UID: 0 PID: 22533 Comm: syz.2.3620 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1219.232423][T22533] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1219.232432][T22533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1219.232447][T22533] Call Trace: [ 1219.232455][T22533] [ 1219.232464][T22533] dump_stack_lvl+0x100/0x190 [ 1219.232506][T22533] should_fail_ex.cold+0x5/0xa [ 1219.232534][T22533] _copy_from_user+0x2e/0xd0 [ 1219.232564][T22533] copy_msghdr_from_user+0x9f/0x4f0 [ 1219.232593][T22533] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1219.232626][T22533] ? __pfx__kstrtoull+0x10/0x10 [ 1219.232666][T22533] ___sys_sendmsg+0x106/0x1e0 [ 1219.232694][T22533] ? __pfx____sys_sendmsg+0x10/0x10 [ 1219.232734][T22533] ? find_held_lock+0x2b/0x80 [ 1219.232775][T22533] __sys_sendmmsg+0x205/0x430 [ 1219.232814][T22533] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1219.232858][T22533] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1219.232913][T22533] ? fput+0x79/0x100 [ 1219.232942][T22533] ? ksys_write+0x1ac/0x250 [ 1219.232964][T22533] ? __pfx_ksys_write+0x10/0x10 [ 1219.232992][T22533] __x64_sys_sendmmsg+0x9c/0x100 [ 1219.233026][T22533] ? lockdep_hardirqs_on+0x78/0x100 [ 1219.233062][T22533] do_syscall_64+0x106/0xf80 [ 1219.233096][T22533] ? clear_bhb_loop+0x40/0x90 [ 1219.233126][T22533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1219.233151][T22533] RIP: 0033:0x7fb91299c799 [ 1219.233170][T22533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1219.233194][T22533] RSP: 002b:00007fb9137e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1219.233217][T22533] RAX: ffffffffffffffda RBX: 00007fb912c15fa0 RCX: 00007fb91299c799 [ 1219.233234][T22533] RDX: 0000000000000002 RSI: 0000200000000400 RDI: 0000000000000004 [ 1219.233249][T22533] RBP: 00007fb9137e2090 R08: 0000000000000000 R09: 0000000000000000 [ 1219.233264][T22533] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001 [ 1219.233279][T22533] R13: 00007fb912c16038 R14: 00007fb912c15fa0 R15: 00007ffe0e341468 [ 1219.233310][T22533] [ 1221.940067][T22547] bond0: option slaves: interface - does not exist! [ 1225.131467][T22614] FAULT_INJECTION: forcing a failure. [ 1225.131467][T22614] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1225.201568][T22614] CPU: 0 UID: 0 PID: 22614 Comm: syz.3.3640 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1225.201610][T22614] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1225.201621][T22614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1225.201637][T22614] Call Trace: [ 1225.201646][T22614] [ 1225.201656][T22614] dump_stack_lvl+0x100/0x190 [ 1225.201699][T22614] should_fail_ex.cold+0x5/0xa [ 1225.201729][T22614] _copy_from_user+0x2e/0xd0 [ 1225.201767][T22614] ____sys_sendmsg+0x1d1/0xb70 [ 1225.201797][T22614] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1225.201827][T22614] ? __pfx__kstrtoull+0x10/0x10 [ 1225.201869][T22614] ___sys_sendmsg+0x190/0x1e0 [ 1225.201898][T22614] ? __pfx____sys_sendmsg+0x10/0x10 [ 1225.201948][T22614] ? find_held_lock+0x2b/0x80 [ 1225.202067][T22614] __sys_sendmmsg+0x205/0x430 [ 1225.202126][T22614] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1225.202172][T22614] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1225.202227][T22614] ? fput+0x79/0x100 [ 1225.202256][T22614] ? ksys_write+0x1ac/0x250 [ 1225.202277][T22614] ? __pfx_ksys_write+0x10/0x10 [ 1225.202304][T22614] __x64_sys_sendmmsg+0x9c/0x100 [ 1225.202339][T22614] ? lockdep_hardirqs_on+0x78/0x100 [ 1225.202374][T22614] do_syscall_64+0x106/0xf80 [ 1225.202408][T22614] ? clear_bhb_loop+0x40/0x90 [ 1225.202438][T22614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1225.202463][T22614] RIP: 0033:0x7fed11d9c799 [ 1225.202485][T22614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1225.202510][T22614] RSP: 002b:00007fed12c2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1225.202533][T22614] RAX: ffffffffffffffda RBX: 00007fed12015fa0 RCX: 00007fed11d9c799 [ 1225.202550][T22614] RDX: 0000000000000002 RSI: 0000200000000400 RDI: 0000000000000004 [ 1225.202565][T22614] RBP: 00007fed12c2a090 R08: 0000000000000000 R09: 0000000000000000 [ 1225.202580][T22614] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001 [ 1225.202594][T22614] R13: 00007fed12016038 R14: 00007fed12015fa0 R15: 00007ffff0cfb448 [ 1225.202625][T22614] [ 1225.735249][T22604] bond0: option slaves: interface - does not exist! [ 1225.957182][ T30] audit: type=1800 audit(4294973028.959:42): pid=22623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3642" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 1229.935075][ T30] audit: type=1800 audit(4294973032.989:43): pid=22676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3652" name="dbroot" dev="configfs" ino=113504 res=0 errno=0 [ 1230.105572][T22678] netlink: 1003 bytes leftover after parsing attributes in process `syz.0.3654'. [ 1230.144136][T22678] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3654'. [ 1230.505520][T22677] bond0: option slaves: interface - does not exist! [ 1231.027799][T22690] program syz.2.3656 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1231.177339][T22690] ima: policy update failed [ 1231.201658][ T30] audit: type=1802 audit(4294973034.259:44): pid=22690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.3656" res=0 errno=0 [ 1236.128570][T22780] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1236.135201][T22780] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1236.545557][T22789] netlink: 74 bytes leftover after parsing attributes in process `syz.3.3684'. [ 1237.310070][T22804] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1237.316705][T22804] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1238.570705][T22825] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1238.965270][T22830] kAFS: Invalid Command on /proc/fs/afs/cells file [ 1239.312007][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.319226][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.555556][T22846] nvme_fabrics: missing parameter 'transport=%s' [ 1240.580093][T22846] nvme_fabrics: missing parameter 'nqn=%s' [ 1242.604124][T22870] FAULT_INJECTION: forcing a failure. [ 1242.604124][T22870] name failslab, interval 1, probability 0, space 0, times 0 [ 1242.651190][T22870] CPU: 0 UID: 0 PID: 22870 Comm: syz.2.3704 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1242.651239][T22870] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1242.651249][T22870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1242.651268][T22870] Call Trace: [ 1242.651277][T22870] [ 1242.651287][T22870] dump_stack_lvl+0x100/0x190 [ 1242.651331][T22870] should_fail_ex.cold+0x5/0xa [ 1242.651360][T22870] ? sk_prot_alloc+0x10b/0x2a0 [ 1242.651384][T22870] should_failslab+0xc2/0x120 [ 1242.651411][T22870] __kmalloc_noprof+0xe0/0x850 [ 1242.651449][T22870] ? security_inode_alloc+0xcf/0x2c0 [ 1242.651481][T22870] sk_prot_alloc+0x10b/0x2a0 [ 1242.651509][T22870] sk_alloc+0x36/0xe80 [ 1242.651543][T22870] __netlink_create+0x5e/0x2c0 [ 1242.651580][T22870] __netlink_kernel_create+0xed/0x750 [ 1242.651629][T22870] ? __pfx___netlink_kernel_create+0x10/0x10 [ 1242.651678][T22870] fib_net_init+0x26d/0x3f0 [ 1242.651717][T22870] ? is_module_address+0x69/0xf0 [ 1242.651750][T22870] ? __pfx_fib_net_init+0x10/0x10 [ 1242.651789][T22870] ? timer_init_key+0x150/0x340 [ 1242.651815][T22870] ? __pfx_nl_fib_input+0x10/0x10 [ 1242.651857][T22870] ? devinet_init_net+0x56c/0x8d0 [ 1242.651902][T22870] ? __pfx_fib_net_init+0x10/0x10 [ 1242.651940][T22870] ops_init+0x1e2/0x5f0 [ 1242.651981][T22870] setup_net+0x118/0x3a0 [ 1242.652020][T22870] ? __pfx_setup_net+0x10/0x10 [ 1242.652057][T22870] ? lockdep_init_map_type+0x5c/0x250 [ 1242.652092][T22870] ? mutex_init_lockep+0x110/0x150 [ 1242.652132][T22870] copy_net_ns+0x46f/0x7c0 [ 1242.652158][T22870] create_new_namespaces+0x3ea/0xac0 [ 1242.652193][T22870] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1242.652224][T22870] ksys_unshare+0x473/0xad0 [ 1242.652259][T22870] ? __pfx_ksys_unshare+0x10/0x10 [ 1242.652302][T22870] __x64_sys_unshare+0x31/0x40 [ 1242.652334][T22870] do_syscall_64+0x106/0xf80 [ 1242.652371][T22870] ? clear_bhb_loop+0x40/0x90 [ 1242.652402][T22870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1242.652429][T22870] RIP: 0033:0x7fb91299c799 [ 1242.652449][T22870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1242.652475][T22870] RSP: 002b:00007fb9137e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1242.652500][T22870] RAX: ffffffffffffffda RBX: 00007fb912c15fa0 RCX: 00007fb91299c799 [ 1242.652517][T22870] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1242.652533][T22870] RBP: 00007fb912a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1242.652549][T22870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1242.652565][T22870] R13: 00007fb912c16038 R14: 00007fb912c15fa0 R15: 00007ffe0e341468 [ 1242.652598][T22870] [ 1244.162467][T22876] bond0: option slaves: interface - does not exist! [ 1244.686482][T22884] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1244.693005][T22884] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1245.088000][ T30] audit: type=1800 audit(4294973048.139:45): pid=22892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3712" name="features" dev="configfs" ino=114512 res=0 errno=0 [ 1245.529314][T22889] zswap: compressor not available [ 1246.076974][T22907] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3713'. [ 1248.541734][T22960] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1248.612721][T22960] random: crng reseeded on system resumption [ 1248.720505][T22955] FAULT_INJECTION: forcing a failure. [ 1248.720505][T22955] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1248.826699][T22962] hub 1-0:1.0: USB hub found [ 1248.869551][T22962] hub 1-0:1.0: 1 port detected [ 1248.921476][T22955] CPU: 0 UID: 0 PID: 22955 Comm: syz.2.3724 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1248.921519][T22955] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1248.921528][T22955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1248.921544][T22955] Call Trace: [ 1248.921556][T22955] [ 1248.921565][T22955] dump_stack_lvl+0x100/0x190 [ 1248.921608][T22955] should_fail_ex.cold+0x5/0xa [ 1248.921637][T22955] get_futex_key+0x1d2/0x1620 [ 1248.921670][T22955] ? __pfx_get_futex_key+0x10/0x10 [ 1248.921698][T22955] ? futex_hash+0x2c5/0x380 [ 1248.921735][T22955] futex_wake+0xea/0x530 [ 1248.921772][T22955] ? __pfx_futex_wait+0x10/0x10 [ 1248.921810][T22955] ? __pfx_futex_wake+0x10/0x10 [ 1248.921851][T22955] ? __lock_acquire+0x4a5/0x2630 [ 1248.921889][T22955] do_futex+0x32b/0x350 [ 1248.921921][T22955] ? __pfx_do_futex+0x10/0x10 [ 1248.921955][T22955] ? find_held_lock+0x2b/0x80 [ 1248.921982][T22955] __x64_sys_futex+0x34f/0x4d0 [ 1248.922016][T22955] ? __fget_files+0x21f/0x3d0 [ 1248.922040][T22955] ? __pfx___x64_sys_futex+0x10/0x10 [ 1248.922091][T22955] do_syscall_64+0x106/0xf80 [ 1248.922128][T22955] ? clear_bhb_loop+0x40/0x90 [ 1248.922159][T22955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1248.922185][T22955] RIP: 0033:0x7fb91299c799 [ 1248.922205][T22955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1248.922230][T22955] RSP: 002b:00007fb9137e20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1248.922273][T22955] RAX: ffffffffffffffda RBX: 00007fb912c15fa8 RCX: 00007fb91299c799 [ 1248.922290][T22955] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb912c15fac [ 1248.922306][T22955] RBP: 00007fb912c15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1248.922323][T22955] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1248.922339][T22955] R13: 00007fb912c16038 R14: 00007ffe0e341380 R15: 00007ffe0e341468 [ 1248.922370][T22955] [ 1250.620416][T22979] pci 0000:00:00.0: MSI/MSI-X allowed for future drivers [ 1255.487875][T23034] NFSD: Failed to start, no listeners configured. [ 1255.519176][T23041] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1255.525768][T23041] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1259.977631][T23108] block2mtd: illegal erase size [ 1260.058604][T23105] netlink: 'syz.0.3759': attribute type 1 has an invalid length. [ 1262.097841][T23130] NFSD: Failed to start, no listeners configured. [ 1264.295387][T23184] Invalid ELF header magic: != ELF [ 1267.934331][T23239] vivid-007: ================= START STATUS ================= [ 1267.977134][T23239] vivid-007: Generate PTS: true [ 1268.011651][T23239] vivid-007: Generate SCR: true [ 1268.016578][T23239] tpg source WxH: 320x240 (Y'CbCr) [ 1268.145438][T23239] tpg field: 1 [ 1268.166337][T23239] tpg crop: (0,0)/320x240 [ 1268.207831][T23239] tpg compose: (0,0)/320x240 [ 1268.254655][T23239] tpg colorspace: 8 [ 1268.306317][T23239] tpg transfer function: 0/0 [ 1268.345978][T23239] tpg Y'CbCr encoding: 0/0 [ 1268.423497][T23239] tpg quantization: 0/0 [ 1268.433683][T23239] tpg RGB range: 0/2 [ 1268.437622][T23239] vivid-007: ================== END STATUS ================== [ 1269.843040][T23257] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1269.849499][T23257] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1270.317227][T23263] netlink: 338 bytes leftover after parsing attributes in process `syz.0.3792'. [ 1270.393498][T23263] netlink: 338 bytes leftover after parsing attributes in process `syz.0.3792'. [ 1270.442992][T23265] netlink: 210 bytes leftover after parsing attributes in process `syz.0.3792'. [ 1270.659390][T23259] bond0: option slaves: interface - does not exist! [ 1271.762576][T23290] sock: sock_timestamping_bind_phc: sock not bind to device [ 1272.475152][T23287] [U] ^@ [ 1272.792946][T23315] nfs4: Unknown parameter '' [ 1273.301181][T23322] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1273.307706][T23322] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1273.480835][T23325] veth1_to_batadv: entered promiscuous mode [ 1273.609500][T23325] FAULT_INJECTION: forcing a failure. [ 1273.609500][T23325] name failslab, interval 1, probability 0, space 0, times 0 [ 1273.675504][T23325] CPU: 0 UID: 0 PID: 23325 Comm: syz.2.3807 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1273.675548][T23325] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1273.675559][T23325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1273.675575][T23325] Call Trace: [ 1273.675584][T23325] [ 1273.675594][T23325] dump_stack_lvl+0x100/0x190 [ 1273.675651][T23325] should_fail_ex.cold+0x5/0xa [ 1273.675681][T23325] should_failslab+0xc2/0x120 [ 1273.675710][T23325] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1273.675751][T23325] ? __kernfs_new_node+0xd2/0x960 [ 1273.675795][T23325] __kernfs_new_node+0xd2/0x960 [ 1273.675835][T23325] ? __pfx___kernfs_new_node+0x10/0x10 [ 1273.675879][T23325] ? find_held_lock+0x2b/0x80 [ 1273.675905][T23325] ? kernfs_root+0xee/0x2a0 [ 1273.675939][T23325] ? kernfs_root+0xee/0x2a0 [ 1273.675982][T23325] kernfs_new_node+0x11b/0x1a0 [ 1273.676027][T23325] __kernfs_create_file+0x53/0x350 [ 1273.676060][T23325] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1273.676102][T23325] internal_create_group+0x593/0xf40 [ 1273.676148][T23325] ? __pfx_internal_create_group+0x10/0x10 [ 1273.676192][T23325] ? kernfs_create_link+0x1bd/0x240 [ 1273.676226][T23325] internal_create_groups+0x9d/0x150 [ 1273.676268][T23325] device_add+0x71a/0x1950 [ 1273.676301][T23325] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1273.676346][T23325] ? __pfx_device_add+0x10/0x10 [ 1273.676376][T23325] ? lockdep_init_map_type+0x5c/0x250 [ 1273.676411][T23325] ? __init_waitqueue_head+0xca/0x150 [ 1273.676457][T23325] netdev_register_kobject+0x1a9/0x3d0 [ 1273.676506][T23325] register_netdevice+0x12e0/0x2210 [ 1273.676553][T23325] ? __pfx_register_netdevice+0x10/0x10 [ 1273.676599][T23325] ? __pfx_loopback_net_init+0x10/0x10 [ 1273.676635][T23325] register_netdev+0x34/0x50 [ 1273.676673][T23325] loopback_net_init+0x7a/0x170 [ 1273.676701][T23325] ? __pfx_loopback_net_init+0x10/0x10 [ 1273.676728][T23325] ops_init+0x1e2/0x5f0 [ 1273.676769][T23325] setup_net+0x118/0x3a0 [ 1273.676808][T23325] ? __pfx_setup_net+0x10/0x10 [ 1273.676845][T23325] ? lockdep_init_map_type+0x5c/0x250 [ 1273.676880][T23325] ? mutex_init_lockep+0x110/0x150 [ 1273.676920][T23325] copy_net_ns+0x46f/0x7c0 [ 1273.676947][T23325] create_new_namespaces+0x3ea/0xac0 [ 1273.676981][T23325] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1273.677012][T23325] ksys_unshare+0x473/0xad0 [ 1273.677047][T23325] ? __pfx_ksys_unshare+0x10/0x10 [ 1273.677091][T23325] __x64_sys_unshare+0x31/0x40 [ 1273.677122][T23325] do_syscall_64+0x106/0xf80 [ 1273.677162][T23325] ? clear_bhb_loop+0x40/0x90 [ 1273.677194][T23325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1273.677220][T23325] RIP: 0033:0x7fb91299c799 [ 1273.677241][T23325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1273.677267][T23325] RSP: 002b:00007fb9137e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1273.677292][T23325] RAX: ffffffffffffffda RBX: 00007fb912c15fa0 RCX: 00007fb91299c799 [ 1273.677309][T23325] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1273.677324][T23325] RBP: 00007fb912a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1273.677341][T23325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1273.677357][T23325] R13: 00007fb912c16038 R14: 00007fb912c15fa0 R15: 00007ffe0e341468 [ 1273.677389][T23325] [ 1274.118610][T23334] cgroup: fork rejected by pids controller in /syz4 [ 1274.219885][T23324] veth1_to_batadv: left promiscuous mode [ 1275.344759][T23494] Invalid ELF header magic: != ELF [ 1276.685540][T23516] Invalid ELF header magic: != ELF [ 1277.405884][T23528] mmap: syz.2.3821 (23528) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1278.411711][T23539] Zero length message leads to an empty skb [ 1278.593148][T23539] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input183 [ 1280.058823][T23552] bond0: option slaves: interface - does not exist! [ 1287.462533][T23628] FAULT_INJECTION: forcing a failure. [ 1287.462533][T23628] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1287.547307][T23628] CPU: 0 UID: 0 PID: 23628 Comm: syz.2.3842 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1287.547349][T23628] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1287.547359][T23628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1287.547374][T23628] Call Trace: [ 1287.547382][T23628] [ 1287.547392][T23628] dump_stack_lvl+0x100/0x190 [ 1287.547434][T23628] should_fail_ex.cold+0x5/0xa [ 1287.547461][T23628] _copy_from_user+0x2e/0xd0 [ 1287.547493][T23628] copy_msghdr_from_user+0x9f/0x4f0 [ 1287.547522][T23628] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1287.547564][T23628] ___sys_sendmsg+0x106/0x1e0 [ 1287.547593][T23628] ? __pfx____sys_sendmsg+0x10/0x10 [ 1287.547671][T23628] __sys_sendmsg+0x170/0x220 [ 1287.547706][T23628] ? __pfx___sys_sendmsg+0x10/0x10 [ 1287.547758][T23628] do_syscall_64+0x106/0xf80 [ 1287.547795][T23628] ? clear_bhb_loop+0x40/0x90 [ 1287.547831][T23628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1287.547856][T23628] RIP: 0033:0x7fb91299c799 [ 1287.547876][T23628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1287.547900][T23628] RSP: 002b:00007fb9137e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1287.547923][T23628] RAX: ffffffffffffffda RBX: 00007fb912c15fa0 RCX: 00007fb91299c799 [ 1287.547938][T23628] RDX: 0000000004000800 RSI: 0000200000002f40 RDI: 0000000000000002 [ 1287.547953][T23628] RBP: 00007fb9137e2090 R08: 0000000000000000 R09: 0000000000000000 [ 1287.547968][T23628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1287.547982][T23628] R13: 00007fb912c16038 R14: 00007fb912c15fa0 R15: 00007ffe0e341468 [ 1287.548012][T23628] [ 1290.098482][T23656] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3848'. [ 1290.164499][T23656] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3848'. [ 1290.251115][T23656] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3848'. [ 1291.246117][T23668] netlink: 'syz.2.3850': attribute type 1 has an invalid length. [ 1291.677330][T23673] netlink: 206 bytes leftover after parsing attributes in process `syz.2.3852'. [ 1295.008328][T23716] dyndbg: expected <4096 bytes into control [ 1295.045646][T23717] dyndbg: expected <4096 bytes into control [ 1296.281893][T23734] FAULT_INJECTION: forcing a failure. [ 1296.281893][T23734] name failslab, interval 1, probability 0, space 0, times 0 [ 1296.383495][T23734] CPU: 0 UID: 0 PID: 23734 Comm: syz.4.3867 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1296.383538][T23734] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1296.383549][T23734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1296.383565][T23734] Call Trace: [ 1296.383574][T23734] [ 1296.383584][T23734] dump_stack_lvl+0x100/0x190 [ 1296.383627][T23734] should_fail_ex.cold+0x5/0xa [ 1296.383656][T23734] ? tracepoint_add_func+0x2c5/0xf30 [ 1296.383682][T23734] should_failslab+0xc2/0x120 [ 1296.383709][T23734] __kmalloc_noprof+0xe0/0x850 [ 1296.383755][T23734] tracepoint_add_func+0x2c5/0xf30 [ 1296.383786][T23734] ? __pfx_probe_sched_wakeup+0x10/0x10 [ 1296.383819][T23734] ? __pfx_probe_sched_wakeup+0x10/0x10 [ 1296.383845][T23734] tracepoint_probe_register+0xc4/0x110 [ 1296.383873][T23734] ? __pfx_tracepoint_probe_register+0x10/0x10 [ 1296.383900][T23734] ? __pfx_probe_sched_wakeup+0x10/0x10 [ 1296.383926][T23734] ? __lock_acquire+0x4a5/0x2630 [ 1296.383966][T23734] tracing_start_sched_switch+0xaf/0x170 [ 1296.384009][T23734] __ftrace_event_enable_disable+0x557/0x6f0 [ 1296.384041][T23734] __ftrace_set_clr_event_nolock+0x390/0xc30 [ 1296.384081][T23734] ftrace_set_clr_event+0x16e/0x330 [ 1296.384115][T23734] ? __pfx_ftrace_set_clr_event+0x10/0x10 [ 1296.384149][T23734] ? trace_get_user+0x3ae/0xa70 [ 1296.384183][T23734] ftrace_event_write+0x259/0x2c0 [ 1296.384217][T23734] ? __pfx_ftrace_event_write+0x10/0x10 [ 1296.384263][T23734] vfs_write+0x2aa/0x1070 [ 1296.384288][T23734] ? __pfx_ftrace_event_write+0x10/0x10 [ 1296.384325][T23734] ? __pfx_vfs_write+0x10/0x10 [ 1296.384348][T23734] ? __fget_files+0x215/0x3d0 [ 1296.384379][T23734] ? __fget_files+0x21f/0x3d0 [ 1296.384411][T23734] ksys_write+0x12a/0x250 [ 1296.384434][T23734] ? __pfx_ksys_write+0x10/0x10 [ 1296.384466][T23734] do_syscall_64+0x106/0xf80 [ 1296.384503][T23734] ? clear_bhb_loop+0x40/0x90 [ 1296.384535][T23734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1296.384567][T23734] RIP: 0033:0x7f3676d9c799 [ 1296.384587][T23734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1296.384612][T23734] RSP: 002b:00007f3677cba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1296.384637][T23734] RAX: ffffffffffffffda RBX: 00007f3677015fa0 RCX: 00007f3676d9c799 [ 1296.384654][T23734] RDX: 0000000000000004 RSI: 0000200000000040 RDI: 0000000000000006 [ 1296.384670][T23734] RBP: 00007f3676e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1296.384685][T23734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1296.384701][T23734] R13: 00007f3677016038 R14: 00007f3677015fa0 R15: 00007ffd28a91968 [ 1296.384734][T23734] [ 1296.384746][T23734] wakeup trace: Couldn't activate tracepoint probe to kernel_sched_wakeup [ 1298.447486][T23753] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3870'. [ 1298.650353][ T30] audit: type=1800 audit(4294991445.696:46): pid=23756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3869" name="trace_marker" dev="tracefs" ino=783 res=0 errno=0 [ 1299.762624][T23778] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1299.769125][T23778] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1300.750978][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.758292][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.811590][T23802] random: crng reseeded on system resumption [ 1300.907411][T23802] hub 1-0:1.0: USB hub found [ 1300.944789][T23802] hub 1-0:1.0: 1 port detected [ 1300.967359][T23768] futex_wake_op: syz.2.3872 tries to shift op by -2048; fix this program [ 1301.003295][T23800] Invalid ELF header magic: != ELF [ 1302.656991][T23822] random: crng reseeded on system resumption [ 1302.841139][T23823] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 1303.090443][T23823] MDS CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/mds.html for more details. [ 1303.247283][T23823] TAA CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/tsx_async_abort.html for more details. [ 1303.351334][T23823] MMIO Stale Data CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/processor_mmio_stale_data.html for more details. [ 1303.683255][T23825] smpboot: CPU 1 is now offline [ 1303.959387][T23825] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 1304.047983][T23825] ------------[ cut here ]------------ [ 1304.053746][T23825] DEAD callback error for CPU1 [ 1304.053792][T23825] WARNING: kernel/cpu.c:1463 at _cpu_down+0x759/0x1020, CPU#0: syz.3.3886/23825 [ 1304.068228][T23825] Modules linked in: [ 1304.072796][T23825] CPU: 0 UID: 0 PID: 23825 Comm: syz.3.3886 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1304.084248][T23825] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1304.089462][T23825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1304.099942][T23825] RIP: 0010:_cpu_down+0x75c/0x1020 [ 1304.105777][T23825] Code: 41 7a f6 89 ee bf 91 00 00 00 e8 5f 3c 7a f6 81 fd 91 00 00 00 0f 84 6b 02 00 00 e8 9e 41 7a f6 48 8d 3d f7 e3 4e 05 44 89 ee <67> 48 0f b9 3a e9 3a fa ff ff 45 31 ff e9 32 fa ff ff e8 7d 41 7a [ 1304.125789][T23825] RSP: 0018:ffffc90003c0faa8 EFLAGS: 00010283 [ 1304.132090][T23825] RAX: 000000000000b440 RBX: ffff8880b85242e0 RCX: ffffc90012b0b000 [ 1304.140588][T23825] RDX: 0000000000080000 RSI: 0000000000000001 RDI: ffffffff90dcbe40 [ 1304.149019][T23825] RBP: 0000000000000092 R08: 0000000000000005 R09: 0000000000000091 [ 1304.157584][T23825] R10: 0000000000000092 R11: 0000000000000000 R12: 00000000000000ed [ 1304.165834][T23825] R13: 0000000000000001 R14: 0000000000000001 R15: 00000000fffffff5 [ 1304.174028][T23825] FS: 00007fed12be86c0(0000) GS:ffff888124349000(0000) knlGS:0000000000000000 [ 1304.183357][T23825] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1304.189999][T23825] CR2: 00007f3677b456b8 CR3: 00000000a8b3e000 CR4: 00000000003526f0 [ 1304.198352][T23825] Call Trace: [ 1304.201749][T23825] [ 1304.204705][T23825] ? __pfx_cpu_subsys_offline+0x10/0x10 [ 1304.210686][T23825] cpu_device_down+0x82/0xc0 [ 1304.215551][T23825] device_offline+0x2a7/0x3c0 [ 1304.220270][T23825] ? __pfx_device_offline+0x10/0x10 [ 1304.225568][T23825] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1304.231572][T23825] ? __pfx_online_store+0x10/0x10 [ 1304.236657][T23825] online_store+0xd1/0x180 [ 1304.241627][T23825] ? __pfx_online_store+0x10/0x10 [ 1304.246686][T23825] ? __print_lock_name+0x60/0x80 [ 1304.252017][T23825] ? sysfs_file_kobj+0xe4/0x290 [ 1304.256905][T23825] ? sysfs_file_kobj+0xe4/0x290 [ 1304.262065][T23825] dev_attr_store+0x58/0x80 [ 1304.266610][T23825] ? __pfx_dev_attr_store+0x10/0x10 [ 1304.272260][T23825] sysfs_kf_write+0xf2/0x150 [ 1304.276899][T23825] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1304.282303][T23825] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1304.287873][T23825] vfs_write+0x6ac/0x1070 [ 1304.292683][T23825] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1304.298549][T23825] ? __pfx_vfs_write+0x10/0x10 [ 1304.303438][T23825] ksys_write+0x12a/0x250 [ 1304.307902][T23825] ? __pfx_ksys_write+0x10/0x10 [ 1304.313212][T23825] ? kcov_ioctl+0x16a/0x720 [ 1304.317755][T23825] do_syscall_64+0x106/0xf80 [ 1304.322673][T23825] ? clear_bhb_loop+0x40/0x90 [ 1304.327386][T23825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1304.333379][T23825] RIP: 0033:0x7fed11d9c799 [ 1304.337815][T23825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1304.358278][T23825] RSP: 002b:00007fed12be8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1304.367204][T23825] RAX: ffffffffffffffda RBX: 00007fed12016180 RCX: 00007fed11d9c799 [ 1304.375377][T23825] RDX: 000000000000000b RSI: 00002000000002c0 RDI: 0000000000000003 [ 1304.383430][T23825] RBP: 00007fed11e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1304.391777][T23825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1304.399761][T23825] R13: 00007fed12016218 R14: 00007fed12016180 R15: 00007ffff0cfb448 [ 1304.408058][T23825] [ 1304.411154][T23825] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1304.418449][T23825] CPU: 0 UID: 0 PID: 23825 Comm: syz.3.3886 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1304.429402][T23825] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1304.434619][T23825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1304.444694][T23825] Call Trace: [ 1304.447992][T23825] [ 1304.450945][T23825] dump_stack_lvl+0x100/0x190 [ 1304.455668][T23825] vpanic+0x552/0x970 [ 1304.459706][T23825] ? __pfx_vpanic+0x10/0x10 [ 1304.464240][T23825] panic+0xd1/0xe0 [ 1304.467973][T23825] ? __pfx_panic+0x10/0x10 [ 1304.472459][T23825] check_panic_on_warn.cold+0x19/0x34 [ 1304.477873][T23825] ? _cpu_down+0x759/0x1020 [ 1304.482413][T23825] __warn.cold+0x191/0x348 [ 1304.486863][T23825] __report_bug+0x296/0x3d0 [ 1304.491455][T23825] ? _cpu_down+0x759/0x1020 [ 1304.495979][T23825] ? __pfx___report_bug+0x10/0x10 [ 1304.501026][T23825] ? __pfx_try_to_wake_up+0x10/0x10 [ 1304.506344][T23825] report_bug_entry+0xe1/0x290 [ 1304.511138][T23825] ? _cpu_down+0x75c/0x1020 [ 1304.515680][T23825] handle_bug+0x1cd/0x2a0 [ 1304.520032][T23825] exc_invalid_op+0x17/0x50 [ 1304.524550][T23825] asm_exc_invalid_op+0x1a/0x20 [ 1304.529424][T23825] RIP: 0010:_cpu_down+0x75c/0x1020 [ 1304.534556][T23825] Code: 41 7a f6 89 ee bf 91 00 00 00 e8 5f 3c 7a f6 81 fd 91 00 00 00 0f 84 6b 02 00 00 e8 9e 41 7a f6 48 8d 3d f7 e3 4e 05 44 89 ee <67> 48 0f b9 3a e9 3a fa ff ff 45 31 ff e9 32 fa ff ff e8 7d 41 7a [ 1304.554179][T23825] RSP: 0018:ffffc90003c0faa8 EFLAGS: 00010283 [ 1304.560281][T23825] RAX: 000000000000b440 RBX: ffff8880b85242e0 RCX: ffffc90012b0b000 [ 1304.568297][T23825] RDX: 0000000000080000 RSI: 0000000000000001 RDI: ffffffff90dcbe40 [ 1304.576288][T23825] RBP: 0000000000000092 R08: 0000000000000005 R09: 0000000000000091 [ 1304.584359][T23825] R10: 0000000000000092 R11: 0000000000000000 R12: 00000000000000ed [ 1304.592367][T23825] R13: 0000000000000001 R14: 0000000000000001 R15: 00000000fffffff5 [ 1304.600378][T23825] ? _cpu_down+0x752/0x1020 [ 1304.604922][T23825] ? __pfx_cpu_subsys_offline+0x10/0x10 [ 1304.610498][T23825] cpu_device_down+0x82/0xc0 [ 1304.615109][T23825] device_offline+0x2a7/0x3c0 [ 1304.619811][T23825] ? __pfx_device_offline+0x10/0x10 [ 1304.625033][T23825] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1304.630962][T23825] ? __pfx_online_store+0x10/0x10 [ 1304.636029][T23825] online_store+0xd1/0x180 [ 1304.640467][T23825] ? __pfx_online_store+0x10/0x10 [ 1304.645639][T23825] ? __print_lock_name+0x60/0x80 [ 1304.650598][T23825] ? sysfs_file_kobj+0xe4/0x290 [ 1304.655471][T23825] ? sysfs_file_kobj+0xe4/0x290 [ 1304.660345][T23825] dev_attr_store+0x58/0x80 [ 1304.664871][T23825] ? __pfx_dev_attr_store+0x10/0x10 [ 1304.670091][T23825] sysfs_kf_write+0xf2/0x150 [ 1304.674714][T23825] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1304.680019][T23825] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1304.685245][T23825] vfs_write+0x6ac/0x1070 [ 1304.689587][T23825] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1304.695416][T23825] ? __pfx_vfs_write+0x10/0x10 [ 1304.700213][T23825] ksys_write+0x12a/0x250 [ 1304.704558][T23825] ? __pfx_ksys_write+0x10/0x10 [ 1304.709420][T23825] ? kcov_ioctl+0x16a/0x720 [ 1304.714030][T23825] do_syscall_64+0x106/0xf80 [ 1304.718651][T23825] ? clear_bhb_loop+0x40/0x90 [ 1304.723371][T23825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1304.729383][T23825] RIP: 0033:0x7fed11d9c799 [ 1304.733814][T23825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1304.753632][T23825] RSP: 002b:00007fed12be8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1304.762072][T23825] RAX: ffffffffffffffda RBX: 00007fed12016180 RCX: 00007fed11d9c799 [ 1304.770059][T23825] RDX: 000000000000000b RSI: 00002000000002c0 RDI: 0000000000000003 [ 1304.778062][T23825] RBP: 00007fed11e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1304.786061][T23825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1304.794053][T23825] R13: 00007fed12016218 R14: 00007fed12016180 R15: 00007ffff0cfb448 [ 1304.802058][T23825] [ 1304.805306][T23825] Kernel Offset: disabled [ 1304.809660][T23825] Rebooting in 86400 seconds..