last executing test programs: 5.028998394s ago: executing program 2 (id=1154): r0 = socket(0x2b, 0x4, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, 0x0, 0x4, 0x5) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x18dd01, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) ioctl$auto_BLKALIGNOFF(0xffffffffffffffff, 0x127a, 0x0) madvise$auto(0x0, 0x1010001, 0x100000003) madvise$auto(0x1000, 0x400050, 0x9) openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/error_log\x00', 0xb01, 0x0) io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x8, 0x8000) r1 = openat$auto_minstrel_ht_stat_csv_fops_rc80211_minstrel_ht_debugfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/ieee80211/phy6/netdev:wlan1/stations/08:02:11:00:00:00/rc_stats_csv\x00', 0x40, 0x0) read$auto_minstrel_ht_stat_csv_fops_rc80211_minstrel_ht_debugfs(r1, 0x0, 0x0) clock_nanosleep$auto(0x2, 0x7, &(0x7f0000000840)={0x0, 0xc025}, 0x0) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, r2, 0x2) mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_UPD_RXSA(r3, &(0x7f0000006200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="67ffffff", @ANYRES16=r4, @ANYBLOB="230900000004000380040002993e7e48d902b89b3546380c88080001eeffddff", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x20008005) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) 5.027704591s ago: executing program 1 (id=1155): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9) mlockall$auto(0x7) mmap$auto(0x0, 0x400008, 0x9eb3, 0x9b72, 0xffffffffffffffff, 0x8000) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) ioctl$auto_KVM_GET_DEVICE_ATTR(r3, 0x4018aee2, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x40000008000) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x4800c000, 0x800c000}, 0x4) mmap$auto(0x4, 0x7, 0x3, 0x1d, 0xffffffffffffffff, 0x7) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyr5\x00', 0x0, 0x0) ioctl$auto_TIOCSWINSZ2(r4, 0x5414, 0x0) ioctl$auto(r2, 0x1265, r1) socket(0xa, 0x5, 0x84) shmctl$auto_IPC_STAT(0x0, 0x2, &(0x7f0000000640)={{0x7, 0x0, 0x0, 0x7, 0x505, 0xfffffff8, 0x3a41}, 0x0, 0x8, 0x6, 0x100, @inferred, @raw=0x4, 0x7a00, 0x0, 0x0, 0x0}) process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, &(0x7f0000000140)={&(0x7f0000000000), 0x55}, 0x8000000000000001, 0x0, 0x0) mmap$auto(0x0, 0x202000a, 0xffffffff, 0xdc, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x0, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfc(0x0, 0xffffffffffffffff) 3.81494669s ago: executing program 2 (id=1160): r0 = openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Virtual-1/edid_override\x00', 0x5054c2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r1, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000800) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000280), 0x8000, 0x0) fcntl$auto(0x3, 0x4, 0xa553) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8000) r2 = io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0xc, 0x0, 0x0, 0x526) r3 = gettid() futex$auto(0x0, 0x6, 0x6, 0x0, 0x0, 0x80) close_range$auto(r2, r2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) kill$auto(r3, 0x11) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000380), r1) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/state\x00', 0x102, 0x0) sendfile$auto(r4, r4, 0x0, 0x7ffffffc) remap_file_pages$auto(0x0, 0xf3a4, 0x0, 0x5, 0x15) sendmsg$auto_NL802154_CMD_DEL_SEC_KEY(r1, 0x0, 0x40084) io_uring_register$auto_IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, &(0x7f0000000080)="3f75827f01376b693e5619957cdb42a35b939ce4f7b608e5dd1c66ee3e845913c146de83bce901556ff00ae290b5742ac4904ee69de0b8763575b8c2fd0997b7887ae2681021c940e45bb08da8380a2ad1587c02c4263f24fdb742f06daf7ad0a6570e0a86d08b465f6cb24b5244b943da3add0912b6b2d74111b39592a9b16f71cf362e6644af72ff074ea264501e9610b2aa04849c8ff29dc0538aaed2d4b41c823c8b73af98956951557d8e4e528b68a089ef918856eb87ae83848c186adbaeaf119b8506e93434fc57161c38cdf7b2fa29c00c651291ad434bd09390419afa3284a11e8b20128accf12291a56463479716e0cef9", 0xd) mprotect$auto(0x200000000000, 0x806122, 0xc) sched_setscheduler$auto(0x0, 0x5, &(0x7f0000000040)={0x2}) r5 = getpid() sched_setparam$auto(r5, &(0x7f0000000180)={0x13a2}) mmap$auto(0x0, 0xa00004, 0xfffffffffffffff7, 0x40eb1, 0x602, 0x300000000000) 3.511202877s ago: executing program 0 (id=1161): mkdir$auto(0x0, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) unshare$auto(0x40000080) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000180)='\x10\x01\x80\x00\x00', 0x1, 0x0) 3.036041955s ago: executing program 1 (id=1163): r0 = socket(0x10, 0x3, 0x6) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x7}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x4}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x40}, @NETDEV_A_PAGE_POOL_ID={0x2, 0x20, 0x4}, @NETDEV_A_PAGE_POOL_ID={0xc}, @NETDEV_A_PAGE_POOL_ID={0x0, 0x1, 0xfd}]}, 0x50}, 0x1, 0x100000000000000, 0xf0ffff, 0x4048000}, 0x0) 2.917998479s ago: executing program 1 (id=1164): socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x2, 0x1, 0x0) (async) timerfd_create$auto(0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) socket(0x10, 0x2, 0x4) (async) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtdblock0\x00', 0x14fe02, 0x0) r2 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r2, 0xc0606610, 0x0) (async) fsconfig$auto_FSCONFIG_SET_BINARY(r1, 0x2, 0x0, &(0x7f00000000c0)="1bd48eb3cda778a6f60814f0d153d2", 0x0) (async) mmap$auto(0x0, 0x9, 0x7, 0x8000000008011, 0x3, 0x8000) (async) mprotect$auto(0x200000000000, 0x8002, 0xc) (async) sched_setscheduler$auto(0x0, 0x5, &(0x7f0000000040)={0x2}) read$auto(0x3, 0x0, 0xfffffdef) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0xa, 0x5, 0x0) (async) inotify_init1$auto(0x3000000000000) (async) ioctl$auto(r0, 0x80000541b, 0x38) 2.831519503s ago: executing program 3 (id=1165): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) futex$auto(&(0x7f0000000080)=0x2948, 0x9, 0x2948, 0x0, 0x0, 0x5) futex$auto(&(0x7f0000000080)=0x3, 0x3, 0x1f, 0x0, 0x0, 0x440a48d3) 2.801302845s ago: executing program 1 (id=1166): close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) futex$auto(0x0, 0x204, 0x3, 0x0, 0x0, 0x7d) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x1, 0x84) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd15/queue/scheduler\x00', 0x103a42, 0x0) write$auto(0x3, 0x0, 0x7fffffff) r0 = ioctl$auto_NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r0) sendmsg$auto_TIPC_NL_NET_SET(r2, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRESHEX=r1, @ANYBLOB="01002cbd7000ffdbdf250f0000000c00078008000200", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x44050}, 0x2) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x413) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r3 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(r3, &(0x7f0000000300)="632d1bfe595046ab5c40bd6163307acb6501baef6176e669a216aae1144ccafdd80500ffffffffdfff0000018056ada5cc4fbc3fc0ebbc2f", 0x38) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0x0, 0x3, 0x40000000000000, 0x3, 0x15f4da0a, 0x2, 0x9, 0x62, 0x3, 0x400000000000005, 0x6d3f, 0x6, 0x6, 0x5]}, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) socket(0xa, 0x801, 0x84) 2.775306734s ago: executing program 2 (id=1167): r0 = socket(0x2, 0x3, 0xa) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x62, 0x0) setsockopt$auto(0xffffffffffffffff, 0x65, 0xffffffff, 0x0, 0x800) r2 = socket(0x2c, 0x3, 0xa) mmap$auto(0x0, 0x200, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(r2, 0x0, 0x10000, 0x0, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x102, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000884) lstat$auto(0x0, &(0x7f0000000180)={0xe, 0xfffffffffffffffe, 0x100000001, 0x1000, 0x0, 0x0, 0x0, 0x200fa98, 0x8, 0x7ffffffffffffffc, 0x8000000004, 0x100000007fffffff, 0x5, 0x0, 0x7, 0x4, 0xb}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000140), r0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x6) keyctl$auto(0x15, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8) keyctl$auto_KEY_REQKEY_DEFL_NO_CHANGE(0x4, 0xffffffffffffffff, 0x0, 0x0, 0xf0) ioctl$auto(r3, 0x4b53, r2) socket(0xa, 0x2, 0x0) sendto$auto(0xffffffffffffffff, 0x0, 0x402, 0xacf8, &(0x7f0000000000)=@generic={0xa, "e2e13d0ee94e00"}, 0x1b) capset$auto(&(0x7f0000000100)={0x3, 0xffffffffffffffff}, &(0x7f0000000240)={0x9, 0x3338, 0x2}) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x4, 0x3, r5, 0x2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000080), r1) epoll_ctl$auto(0xffffffffffffffff, 0x1, 0x8000000000000000, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x9) listmount$auto(0x0, &(0x7f0000000180)=0xfff, 0x24000000000000, 0xffffffff) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2.632834796s ago: executing program 0 (id=1168): socket(0x11, 0x80003, 0x300) mprotect$auto(0x2, 0x7862, 0x7fffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}, 0x1, 0x0, 0x0, 0x4000804}, 0x40000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0x800}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0xa788}, 0x7, 0x8) r1 = socket(0xa, 0x3, 0x3b) getsockopt$auto(r1, 0x29, 0x1e, 0x0, 0x0) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x4, 0x8000) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) ioctl$auto(0x3, 0x541d, 0x38) 2.538186632s ago: executing program 3 (id=1169): mmap$auto(0x0, 0x2020009, 0x126, 0xf8, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2000a, 0x4000000000df, 0xeb1, r0, 0x25e) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2b, 0x1, 0x0) setsockopt$auto(r1, 0x6, 0x22, 0x0, 0x6) unshare$auto(0x40000080) signalfd4$auto(0xffffffffffffffff, 0x0, 0x6, 0xa) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = eventfd$auto(0x0) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/ext4/sda1/mb_groups\x00', 0x109180, 0x0) pread64$auto(r3, 0x0, 0x682c3390, 0xcff) readv$auto(r2, &(0x7f0000000380)={0x0, 0x8}, 0x100) memfd_create$auto(&(0x7f0000000000)='!\x00', 0x16) cachestat$auto(0x3, &(0x7f0000000080)={0x3, 0xa1}, 0x0, 0x4) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4$auto(r4, 0x0, 0x8, 0x0) iopl$auto(0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x7, 0x0) r5 = socket(0xa, 0x5, 0x84) getsockopt$auto(r5, 0x84, 0x1f, 0x0, &(0x7f0000000080)=0x49b) write$auto(r2, &(0x7f0000000040)='\xa5\x99\x94\xf7\x87~\x1c\x00\x00\x00\x86', 0x8) ioctl$auto_SNDCTL_TMR_CONTINUE(r2, 0x5404, &(0x7f0000000080)="7c5f0498760da8d01654b2f35091d652eb1d7bef505ad939eb378a74511d43305347e25f17404bab2b9a220c87cb1f5d8f3411d56ecff28609e0f8e18e22e64fc36757a5154aefec56665261") 2.31221413s ago: executing program 2 (id=1170): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x1, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) socket(0x10, 0x3, 0x15) socket(0x1e, 0x1, 0x84) capset$auto(0x0, 0x0) r0 = open(0x0, 0x50002, 0x80) bpf$auto(0x0, &(0x7f0000000400)=@link_update={r0, @new_prog_fd=0x4, 0x4, @old_map_fd=0x3ff}, 0xa3) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000000), 0x301402, 0x0) r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) sendfile$auto(r2, r2, 0x0, 0x2) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) fcntl$auto_F_GET_RW_HINT(r1, 0x40b, 0x4bf060d9) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x4, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/hugetlb.1GB.limit_in_bytes\x00', 0xa001, 0x0) write$auto(r3, &(0x7f00000002c0)='0T\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k>\xc8\x1f\xad\xf6\xf0\xef\xe4s\x95\xf2\x00\x97S\xb9O\xac\xbe\xd6\\J<\x02YK\xd6M\xe6\xe7\xa0\xb8\xc3[\x01\xc5\xe8|\xb0\xb0\x80\xbf\xa5?=i\x88UB\x1d\x8e\xd3\xc2\x949\xb6\xfb\x006\x02\x9c\x83\x14\x13\x99\xc7\xb4)M\xed\tN $\xd4\x90^?J\x92\x9a?\xf8b\x03\xd8\xdd\x84\xdf\x92\xf0\xcd\xd8\xba\xab\x15\x80\x9eo,\xc8\xf2\x82\xd2\x88\xbeL\xa0\x1a\xd3\xd5Of\x95\xee\x13e\xeb}o\x9b\x86_\xf0?\f<\xf3t7\xb6\x0f\x93\xc79@\xd8x\x9e\xef!\x006\b\xdbWB\x84\xdd\xac\xdau\x86g\x8f\x02@O7\x0f\xf8\x8d(\x9c\xf2NyD\x7f3\x14\x9eg\x86%)\xd6\b\xcd\x1f\x03\x00:\xa6\x83\'\xf4\xf2\x9dd\xf4z\x89\xc5D\xc4\x02\\\x81\xcf\x02Ep\xf6`\xde*\x1dV', 0x2) unshare$auto(0x40000080) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/firmware/memmap/2/type\x00', 0x18b740, 0x0) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) r5 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r6 = getpid() process_vm_readv$auto(r6, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000040)="8c9700089d1b208365d5b5d112dbab029ed13881d2f2c7ba2eb01c3db79f77fdc2bb50c64a925009dff4cd1aca925c57100112d88f73348a54396800ed598a0e5500d7c0cbb6b1e91d", 0x40000000001243}, 0x4, 0x0) ioctl$auto(r5, 0x400454ca, 0x38) ioctl$auto_TUNSETTXFILTER(r5, 0x400454d1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000000)=""/112, 0x70) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) mmap$auto(0x0, 0x2020006, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000) 1.789542568s ago: executing program 3 (id=1171): openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, 0x0, 0x169a02, 0x0) mmap$auto(0x0, 0x240009, 0xdf, 0x8000009b72, 0x7, 0x28000) semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0) setsockopt$auto(0x3, 0x10000000084, 0xd, 0x0, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram6/queue/max_hw_sectors_kb\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, 0x0, 0x28400, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r2) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x805, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x1f00000000000000, 0x4004044}, 0x8000) 1.786559005s ago: executing program 0 (id=1179): prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) splice$auto(r0, 0x0, r0, 0x0, 0x0, 0x2) landlock_restrict_self$auto(0xffffffffffffffff, 0x3) 1.646935228s ago: executing program 2 (id=1172): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0xa, 0x5, 0x84) ptrace$auto(0x10, 0x0, 0x4, 0x7ff) shmctl$auto_IPC_STAT(0x0, 0x2, &(0x7f0000000640)={{0x7, 0x0, 0x0, 0x7, 0x505, 0xfffffff8, 0x3a41}, 0x0, 0x8, 0x6, 0x100, @inferred, @raw=0x4, 0x7a00, 0x0, 0x0, 0x0}) process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, &(0x7f0000000140)={&(0x7f0000000000), 0x55}, 0x8000000000000001, 0x0, 0x0) mmap$auto(0x0, 0x202000a, 0xffffffff, 0xdc, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x0, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfc(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setresuid$auto(0xffffffffffffffff, 0x8, 0x8000) fsopen$auto(0x0, 0x1) madvise$auto(0x0, 0xffffff7fffff0005, 0x8) ioctl$auto_TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, &(0x7f0000000180)) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x200007, 0x8) mmap$auto(0x0, 0x200009, 0x80000000000002, 0x48eb1, 0xffffffffffffffff, 0x300000000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x6a1, 0x2000000000002) socket(0x28, 0x1, 0x0) 1.612623141s ago: executing program 0 (id=1173): openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x8a001, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xed\xf8\xe1\xbc\x1d\x91D\xe7R\x12\xc4\xcd\xc6\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY2@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(', 0x100000a3dd) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f00000001c0)=""/218, 0xda) mremap$auto(0x8000000000007, 0x7, 0x2, 0x4e, 0x8001) write$auto(0xffffffffffffffff, 0x0, 0x8) r2 = openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f00000023c0)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/enable\x00', 0x40000, 0x0) fchmod$auto(r2, 0x1) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x10800, 0x0) write$auto(0xca, &(0x7f00000000c0)='\x04>\x01\x01\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x96\b\'\x02\xb0\x93l\xeb\x87\r\b\x87\x14\xf8e6\x9c\f\xb6,NS\xa2(Q\xcc', 0x7f) statmount$auto(0x0, 0x0, 0x9, 0xd) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) ioctl$auto_FUSE_DEV_IOC_BACKING_OPEN(r1, 0x4010e501, 0x0) read$auto(r3, 0x0, 0x20) pidfd_open$auto(0x1, 0x0) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) write$auto(0x3, 0x0, 0xffd8) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x40000, 0x0) write$auto(0x3, 0x0, 0xfffffdef) 1.430871355s ago: executing program 1 (id=1174): shmdt$auto(0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x200000000eb1, 0x401, 0x8000) io_uring_setup$auto(0x59, 0x0) socket(0x3, 0x2, 0x4) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x480, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e000000000100", @raw=0x3}, 0x4, 0x966, 0x3, @raw=0x404, @enumerated={0x8, 0x80000000, "033beddd1805dc0a0f9236c0095295603854aabf973f037f0896b19cbe04c0aa95c57dc0788556977828784abe1a8f695f19b28fd798a2fb818b216638fd3266", 0x48, 0x3}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x5, 0x3, 0xd, 0x2000000000000002, 0x9, 0x8, 0x400000000ff, 0xa, 0x6, 0xaab, 0x8, 0x7]}, 0x0, 0x0) 1.419464755s ago: executing program 3 (id=1175): r0 = socket(0x10, 0x3, 0x6) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x7}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x4}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x40}, @NETDEV_A_PAGE_POOL_ID={0x2, 0x20, 0x4}, @NETDEV_A_PAGE_POOL_ID={0xc}, @NETDEV_A_PAGE_POOL_ID={0x0, 0x1, 0xfd}]}, 0x50}, 0x1, 0x100000000000000, 0x1000000, 0x4048000}, 0x0) 1.300464581s ago: executing program 3 (id=1176): mmap$auto(0x0, 0x0, 0xe4, 0x100000eb1, 0x40000000000a1, 0x8000) (async) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/trace_clock\x00', 0x88000, 0x0) shmctl$auto_SHM_LOCK(0x8001, 0xb, &(0x7f0000000180)={{0x7, 0x0, 0xee00, 0xa, 0x5, 0x71d256ef, 0x840}, 0x7, 0x6, 0x8, 0xffffffffffffffff, @inferred=0xffffffffffffffff, @raw=0x10000, 0x10e, 0x0, &(0x7f0000000100)="ed794d9e305794e88cd4cb27e861fab767a31bb2b1510d7a886cd483a9af333ed345f8ae95a1ce1a72119814108eeb5a389e03fc214fbabe", &(0x7f0000000140)="4846aa2b7c99"}) (async) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/sequencer2\x00', 0xea8200, 0x0) ioctl$auto_SNDCTL_TMR_CONTINUE(r2, 0x5404, &(0x7f0000001700)) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80002, 0x73) (async) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_GET_MSRS(r3, 0x4068aea3, &(0x7f0000000040)={0xc7}) sendmsg$auto_NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100100}, 0xc, &(0x7f0000001500)={&(0x7f0000001740)=ANY=[@ANYBLOB="4763afc678a3a5f0dd9bca4b9bc103a72443ef7b6e17fc30c10fdf792e604dbac922b4059c2a23840e6424429b4aa7d4de27adce3f0148b026fee8788f8a6c0d2d006073c5559a7da05ba926fe", @ANYRES16=r0, @ANYBLOB="01002bbd7000fcdbdf25390000008a117580b991f508b774928d8412640ad63bc04742bc4495ca1bad72ff0fcbe49df2375869f99a82c80cf718911b4942f607269752696596195ab5d4c41b0fabb99990db1b34bad7a74c1a0ee92a0c36927d447c0677f3cc0a7020880585c13e141f91ba9c4dde0639a761f3d57f2bc21d0dc597a31bd5d2900c9ee773df935254b6ee017147b6f7996a4b82ac589558879a14a85a1c04dc7ce836a8af13ba999a79acd083e28528552a6796a8a1bb96b522388c1f83917c080ef350dfb1e9026ed8ebd0d6d5ce93cac63c08001700", @ANYRES32=r1, @ANYBLOB="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"], 0x12e8}}, 0x20040000) (async) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/v4l-subdev3\x00', 0x80000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001580)='/sys/devices/virtual/tty/ttyqc/power/control\x00', 0x20400, 0x0) (async) ioctl$auto_SNDCTL_SEQ_RESET(r2, 0x5100, &(0x7f0000001700)="2a8d9f785a0f98e1bcdbbc2906c56992084895a9620881ef461d4c250dd74c0072b06f86706a97") (async) ioctl$auto(r5, 0xc040563e, r5) r6 = socket(0x23, 0x5, 0x0) sendmsg$auto_ETHTOOL_MSG_PRIVFLAGS_SET(r6, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002bc0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x80) (async) syz_genetlink_get_family_id$auto_nfc(&(0x7f00000015c0), 0xffffffffffffffff) 334.94826ms ago: executing program 3 (id=1177): timer_create$auto_CLOCK_TAI(0xb, 0x0, &(0x7f0000000fc0)=0xa) mmap$auto(0x0, 0x4020005, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x00\x01_\x9e\x99:R\xcc\x96\b\'\x02\xb0\x93l\xeb\x87\r\b\x87\x14\xf8e6\x9c%\xb6\x9a\\S\xa2(Q\xcc', 0x7f) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/event0\x00', 0x2, 0x0) ioctl$auto_EVIOCGMASK(r0, 0x80104592, &(0x7f0000000000)={0x11, 0x800004, 0x8}) write$auto(r0, 0x0, 0x47ffffdf2) 210.86417ms ago: executing program 0 (id=1178): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) timer_settime$auto(0x0, 0x809, &(0x7f0000000000)={{0xa6, 0xffff}, {0x10000000000, 0x3}}, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) sendto$auto(r0, 0x0, 0x402, 0x101, &(0x7f0000000000)=@generic={0xa, "01e98301800a00001000012000"}, 0x1c) 204.29534ms ago: executing program 1 (id=1180): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) (async) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b3010000", @ANYRES16=r0, @ANYRES8=0x0], 0x1d8}, 0x1, 0x0, 0x0, 0x85}, 0x20040000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf2502e0"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) syz_genetlink_get_family_id$auto_ioam6(&(0x7f00000001c0), r0) (async) syz_genetlink_get_family_id$auto_ioam6(&(0x7f00000001c0), r0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/rpc/auth.unix.ip/content\x00', 0x2000, 0x0) r4 = setfsuid$auto(0xee01) keyctl$auto_KEYCTL_GET_PERSISTENT(0x16, r4, 0x0, 0x5, 0x9cb) clone3$auto(&(0x7f0000000380)={0x3, 0xfffffffffffffffd, 0x0, 0x0, 0xfff, 0xfffffffffffff169, 0xfffffffffffffff7, 0xcc0, 0x3ff, 0x3, 0x7ff}, 0x2) (async) clone3$auto(&(0x7f0000000380)={0x3, 0xfffffffffffffffd, 0x0, 0x0, 0xfff, 0xfffffffffffff169, 0xfffffffffffffff7, 0xcc0, 0x3ff, 0x3, 0x7ff}, 0x2) setfsuid$auto(0xee00) (async) r5 = setfsuid$auto(0xee00) setfsuid$auto(0xee01) (async) r6 = setfsuid$auto(0xee01) setresuid$auto(r5, r6, r5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth1_to_hsr\x00', 0x0}) ioctl$auto_XFS_IOC_FREESP(0xffffffffffffffff, 0x4030580b, &(0x7f0000000440)={0x1ff, 0x2000, 0xfff, 0x639, 0x401, 0x0}) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/block/loop9/hctx0/sched_tags_bitmap\x00', 0x200, 0x0) sendmsg$auto_MACSEC_CMD_DEL_RXSA(r0, &(0x7f0000004a80)={&(0x7f0000000280), 0xc, &(0x7f0000004a40)={&(0x7f00000090c0)=ANY=[@ANYBLOB="44440000ad122927753030b37655b44d6f18f18cb17324196b5c369264b8b7cfcc3ba03322223bfd6794a70a66d83eb60b75876d1532dc0b99c1207fa77209a9c0c1edd4bd8aa651e3b14bc1057412b077d5838d3301d545ab58163d550054c77052eca37054068856a798ac02699d231922159d44db2b61d2271b2882c3a0e857bba2ffc7cb5be4234e", @ANYRES16=0x0, @ANYBLOB="000127bd7000fddbdf25080000003c040280a00034802274a0bc7ac954aa185625d931b2302c840ebf4083418021dd55fdd11cf3fe999a0abd8ac7092b57f6ba231c768a5fab54e003b8a8feeb3dd3115ff57661f44408e35b739b276e4a161dab9df7e610feadda44a47e946983c7ae66f07d5b0d93aa26195a4839ffb81a02d4aec6cf033a0b6d3ae5b7837d0f4d0e87c85b2989bfd57e438409e4faae080068000500000008003800090000000400f080160166800c009600000200000000000008000800ac1414bb0800ef00", @ANYRES32=r0, @ANYBLOB="6442a832ca8acb36be94ff1196cf3b8de44f97300491d802abb002a76048f052e34d7a8fd229a32d5550d59f9d0086d36d4ea73e6543ecc9828be3b6c8c2521bbc8721b2dface5c00ef1222b48cc475679a00998a7830a646574bf01e75151c42c9e2cd2c6ca08004200f50381e9322be4795978e82c34b01b75a0d41b3dcae31de662d26f906e160fd8f869b8a6f73fd6fa8a1f4ca91ffc03debc64d0edee40643630c27c", @ANYRES32=0x0, @ANYBLOB="e540132e30e3f31b775c37fc1f59aa09e9a5ed20d899351bf1b15ff98283c014454b561a029e5e1c5304d1e5e77a44029da191341d9f5770cdc5a41335c3fad46ef4792b049d79dbd889ccaef75bd7d5b8a2b4b50413cc911747ba87533a4d6eff7e3a9eaf5d0e039d9552cc2ac717e1bb78f31308001b00", @ANYRES32=r4, @ANYBLOB="9d7966b837084e3722de015e44fda67d01ef8be2923da75affa44ad0ad1be6", @ANYRES64=r2, @ANYBLOB="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", @ANYBLOB="af09302647f1714dd38da8e52f9b411559fea6e2579bfa52a23e6fe0272cf8be1bcb95a32e95c205830dbc3f7b3285f62744e8744c5c918e9a82ae5b0def9e672cac9a90e09b440e8172d14c1b7794fb76d55921a9f7332cdf2f2d74983d33f45cdba9344bc27bfd513a725e3e5b9c4240d681a011d1112da275f86cd28cd6d7e873a1f556c9c21295355155e488e2d95e5c2095cd0bacd9780a9235ca1e4bad3678d04be687130bc67a7ab8424f065b052aaaeb48144fc4e6737607a936", @ANYBLOB="040065800800ae00", @ANYRES32=r6, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="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", @ANYRES8=r1, @ANYBLOB="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"], 0x4444}, 0x1, 0x0, 0x0, 0x240400d0}, 0x40000004) pread64$auto(r3, 0x0, 0xf42c, 0x38) (async) pread64$auto(r3, 0x0, 0xf42c, 0x38) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x7) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) ioprio_set$auto(0x3, 0xee01, 0x8) (async) ioprio_set$auto(0x3, 0xee01, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000140), r9) sendmsg$auto_CTRL_CMD_GETPOLICY(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01032cb57000fbdbdf250a0000000600010018000000"], 0x1c}, 0x1, 0x0, 0x0, 0x400c819}, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/midi2\x00', 0x801, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 5.478748ms ago: executing program 2 (id=1181): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000180), r0) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="013ad7fac400f8dbdf250100000008000200", @ANYRES32=0x4, @ANYBLOB="080001004866520008000200", @ANYRES32=0x9], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_DEL(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0109080000000000002502"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x2, 0x0) close_range$auto(0x2, r0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x34d802, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) write$auto_seq_oss_f_ops_seq_oss(0xffffffffffffffff, &(0x7f0000000040)="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", 0x380) 0s ago: executing program 0 (id=1182): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000180), r0) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="013ad7fac400f8dbdf250100000008000200", @ANYRES32=0x4, @ANYBLOB="080001004866520008000200", @ANYRES32=0x9], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_DEL(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0109080000000000002502"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x2, 0x0) close_range$auto(0x2, r0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x34d802, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) write$auto_seq_oss_f_ops_seq_oss(0xffffffffffffffff, &(0x7f0000000040)="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", 0x380) kernel console output (not intermixed with test programs): 0x10/0x10 [ 194.799784][ T7385] ? __import_iovec+0x1d2/0x640 [ 194.799819][ T7385] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 194.799872][ T7385] ____sys_sendmsg+0x9e1/0xb70 [ 194.799913][ T7385] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.799959][ T7385] ? __pfx_____sys_sendmsg+0x10/0x10 [ 194.799998][ T7385] ? preempt_schedule_thunk+0x16/0x30 [ 194.800049][ T7385] ? try_to_wake_up+0x5f6/0x1900 [ 194.800094][ T7385] ___sys_sendmsg+0x190/0x1e0 [ 194.800142][ T7385] ? __pfx____sys_sendmsg+0x10/0x10 [ 194.800186][ T7385] ? futex_private_hash_put+0x107/0x1c0 [ 194.800260][ T7385] __sys_sendmsg+0x170/0x220 [ 194.800296][ T7385] ? __pfx___sys_sendmsg+0x10/0x10 [ 194.800330][ T7385] ? __x64_sys_futex+0x34f/0x4d0 [ 194.800377][ T7385] ? rcu_is_watching+0x12/0xc0 [ 194.800417][ T7385] do_syscall_64+0x10b/0xf80 [ 194.800460][ T7385] ? clear_bhb_loop+0x40/0x90 [ 194.800496][ T7385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.800525][ T7385] RIP: 0033:0x7f8468f9ce59 [ 194.800550][ T7385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.800577][ T7385] RSP: 002b:00007f8469e71028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 194.800605][ T7385] RAX: ffffffffffffffda RBX: 00007f8469215fa0 RCX: 00007f8468f9ce59 [ 194.800625][ T7385] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000005 [ 194.800643][ T7385] RBP: 00007f8469032d6f R08: 0000000000000000 R09: 0000000000000000 [ 194.800661][ T7385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.800678][ T7385] R13: 00007f8469216038 R14: 00007f8469215fa0 R15: 00007ffdba5df0e8 [ 194.800717][ T7385] [ 195.469624][ T7399] capability: warning: `syz.3.308' uses 32-bit capabilities (legacy support in use) [ 196.002956][ T7410] netlink: 34 bytes leftover after parsing attributes in process `syz.1.309'. [ 196.007780][ T29] audit: type=1806 audit(1779333518.761:5): xattr="." res=0 [ 196.371852][ T7419] FAULT_INJECTION: forcing a failure. [ 196.371852][ T7419] name failslab, interval 1, probability 0, space 0, times 0 [ 196.400397][ T7419] CPU: 1 UID: 0 PID: 7419 Comm: syz.3.311 Tainted: G U L syzkaller #0 PREEMPT(full) [ 196.400445][ T7419] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 196.400455][ T7419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 196.400472][ T7419] Call Trace: [ 196.400480][ T7419] [ 196.400491][ T7419] dump_stack_lvl+0x100/0x190 [ 196.400526][ T7419] should_fail_ex.cold+0x5/0xa [ 196.400562][ T7419] ? mpi_resize+0x1ac/0x250 [ 196.400589][ T7419] should_failslab+0xc2/0x120 [ 196.400623][ T7419] __kmalloc_noprof+0xe0/0x850 [ 196.400648][ T7419] ? __kasan_kmalloc+0xaa/0xb0 [ 196.400682][ T7419] mpi_resize+0x1ac/0x250 [ 196.400714][ T7419] mpi_powm+0x9ff/0x1e50 [ 196.400759][ T7419] ? __pfx_mpi_powm+0x10/0x10 [ 196.400786][ T7419] ? mpi_free+0xa0/0x150 [ 196.400811][ T7419] ? mpi_free+0xe1/0x150 [ 196.400837][ T7419] ? kfree+0x223/0x6c0 [ 196.400881][ T7419] ? mpi_free+0xe6/0x150 [ 196.400913][ T7419] rsa_enc+0x1fe/0x3b0 [ 196.400958][ T7419] ? __pfx_rsa_enc+0x10/0x10 [ 196.401001][ T7419] ? __virt_addr_valid+0x239/0x430 [ 196.401047][ T7419] ? sg_init_one+0xf5/0x1b0 [ 196.401089][ T7419] rsassa_pkcs1_verify+0x4eb/0xc20 [ 196.401128][ T7419] ? __pfx_rsassa_pkcs1_verify+0x10/0x10 [ 196.401177][ T7419] ? rsa_max_size+0xd/0x70 [ 196.401218][ T7419] ? rsassa_pkcs1_set_pub_key+0x17d/0x1f0 [ 196.401254][ T7419] public_key_verify_signature+0x5ee/0x910 [ 196.401299][ T7419] ? __pfx_public_key_verify_signature+0x10/0x10 [ 196.401347][ T7419] ? __kmalloc_noprof+0x320/0x850 [ 196.401384][ T7419] x509_check_for_self_signed+0x325/0x510 [ 196.401423][ T7419] x509_cert_parse+0x60c/0x910 [ 196.401451][ T7419] ? kasan_save_stack+0x3f/0x50 [ 196.401478][ T7419] ? kasan_save_stack+0x30/0x50 [ 196.401504][ T7419] ? kasan_save_track+0x14/0x30 [ 196.401534][ T7419] pkcs7_extract_cert+0xa4/0x380 [ 196.401573][ T7419] asn1_ber_decoder+0x12b3/0x2170 [ 196.401628][ T7419] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 196.401692][ T7419] pkcs7_parse_message+0x289/0x870 [ 196.401733][ T7419] verify_pkcs7_signature+0x30/0xa0 [ 196.401767][ T7419] valid_regdb+0x211/0x590 [ 196.401809][ T7419] ? __pfx_valid_regdb+0x10/0x10 [ 196.401855][ T7419] reg_reload_regdb+0x11a/0x460 [ 196.401895][ T7419] ? __pfx_reg_reload_regdb+0x10/0x10 [ 196.401936][ T7419] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 196.401964][ T7419] ? nl80211_pre_doit+0x19a/0xae0 [ 196.401998][ T7419] genl_family_rcv_msg_doit+0x214/0x300 [ 196.402031][ T7419] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 196.402061][ T7419] ? genl_get_cmd+0x3e7/0x760 [ 196.402115][ T7419] ? bpf_lsm_capable+0x9/0x10 [ 196.402146][ T7419] ? security_capable+0x80/0x260 [ 196.402193][ T7419] genl_rcv_msg+0x560/0x800 [ 196.402225][ T7419] ? __pfx_genl_rcv_msg+0x10/0x10 [ 196.402254][ T7419] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 196.402288][ T7419] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 196.402326][ T7419] ? __pfx_nl80211_post_doit+0x10/0x10 [ 196.402370][ T7419] netlink_rcv_skb+0x159/0x420 [ 196.402412][ T7419] ? __pfx_genl_rcv_msg+0x10/0x10 [ 196.402442][ T7419] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 196.402500][ T7419] ? netlink_deliver_tap+0x1ae/0xcc0 [ 196.402544][ T7419] genl_rcv+0x28/0x40 [ 196.402568][ T7419] netlink_unicast+0x585/0x850 [ 196.402615][ T7419] ? __pfx_netlink_unicast+0x10/0x10 [ 196.402667][ T7419] netlink_sendmsg+0x8b0/0xda0 [ 196.402715][ T7419] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.402755][ T7419] ? __import_iovec+0x1d2/0x640 [ 196.402789][ T7419] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 196.402839][ T7419] ____sys_sendmsg+0x9e1/0xb70 [ 196.402878][ T7419] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.402920][ T7419] ? __pfx_____sys_sendmsg+0x10/0x10 [ 196.402956][ T7419] ? preempt_schedule_thunk+0x16/0x30 [ 196.403003][ T7419] ? try_to_wake_up+0x5f6/0x1900 [ 196.403048][ T7419] ___sys_sendmsg+0x190/0x1e0 [ 196.403094][ T7419] ? __pfx____sys_sendmsg+0x10/0x10 [ 196.403143][ T7419] ? futex_private_hash_put+0x107/0x1c0 [ 196.403217][ T7419] __sys_sendmsg+0x170/0x220 [ 196.403251][ T7419] ? __pfx___sys_sendmsg+0x10/0x10 [ 196.403289][ T7419] ? __x64_sys_futex+0x34f/0x4d0 [ 196.403336][ T7419] ? rcu_is_watching+0x12/0xc0 [ 196.403376][ T7419] do_syscall_64+0x10b/0xf80 [ 196.403419][ T7419] ? clear_bhb_loop+0x40/0x90 [ 196.403454][ T7419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.403484][ T7419] RIP: 0033:0x7fa66299ce59 [ 196.403508][ T7419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.403533][ T7419] RSP: 002b:00007fa6638ec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.403559][ T7419] RAX: ffffffffffffffda RBX: 00007fa662c15fa0 RCX: 00007fa66299ce59 [ 196.403578][ T7419] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000005 [ 196.403595][ T7419] RBP: 00007fa662a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 196.403612][ T7419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.403628][ T7419] R13: 00007fa662c16038 R14: 00007fa662c15fa0 R15: 00007ffcccaad578 [ 196.403666][ T7419] [ 197.004161][ T7441] HfR: entered promiscuous mode [ 197.105400][ T7441] netlink: 12 bytes leftover after parsing attributes in process `syz.2.317'. [ 197.152686][ T7441] HfR: left promiscuous mode [ 197.840945][ T7451] random: crng reseeded on system resumption [ 198.162518][ T7468] FAULT_INJECTION: forcing a failure. [ 198.162518][ T7468] name failslab, interval 1, probability 0, space 0, times 0 [ 198.237789][ T7468] CPU: 0 UID: 0 PID: 7468 Comm: syz.1.323 Tainted: G U L syzkaller #0 PREEMPT(full) [ 198.237832][ T7468] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 198.237838][ T7468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 198.237847][ T7468] Call Trace: [ 198.237852][ T7468] [ 198.237858][ T7468] dump_stack_lvl+0x100/0x190 [ 198.237881][ T7468] should_fail_ex.cold+0x5/0xa [ 198.237900][ T7468] should_failslab+0xc2/0x120 [ 198.237918][ T7468] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 198.237941][ T7468] ? __d_alloc+0x34/0xa40 [ 198.237964][ T7468] __d_alloc+0x34/0xa40 [ 198.237986][ T7468] d_alloc+0x4a/0x1e0 [ 198.238006][ T7468] lookup_one_qstr_excl+0x171/0x250 [ 198.238030][ T7468] start_dirop+0x59/0xb0 [ 198.238048][ T7468] simple_start_creating+0xf9/0x110 [ 198.238065][ T7468] ? __pfx_simple_start_creating+0x10/0x10 [ 198.238083][ T7468] ? mntput+0x70/0xa0 [ 198.238098][ T7468] ? simple_pin_fs+0xa3/0x190 [ 198.238114][ T7468] debugfs_start_creating.part.0+0x82/0x170 [ 198.238140][ T7468] __debugfs_create_file+0xb3/0x4f0 [ 198.238168][ T7468] debugfs_create_file_full+0x41/0x60 [ 198.238193][ T7468] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 198.238212][ T7468] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 198.238230][ T7468] ? ida_alloc_range+0x70d/0x830 [ 198.238268][ T7468] ? lockdep_init_map_type+0x5c/0x250 [ 198.238287][ T7468] preinit_net.part.0+0x252/0x920 [ 198.238308][ T7468] copy_net_ns+0x339/0x7c0 [ 198.238336][ T7468] create_new_namespaces+0x3ea/0xac0 [ 198.238378][ T7468] unshare_nsproxy_namespaces+0xf2/0x220 [ 198.238400][ T7468] ksys_unshare+0x438/0xab0 [ 198.238424][ T7468] ? __pfx_ksys_unshare+0x10/0x10 [ 198.238444][ T7468] ? xfd_validate_state+0x129/0x190 [ 198.238459][ T7468] ? ksys_write+0x1ac/0x250 [ 198.238481][ T7468] __x64_sys_unshare+0x31/0x40 [ 198.238502][ T7468] do_syscall_64+0x10b/0xf80 [ 198.238523][ T7468] ? clear_bhb_loop+0x40/0x90 [ 198.238540][ T7468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.238555][ T7468] RIP: 0033:0x7f25ea79ce59 [ 198.238569][ T7468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.238582][ T7468] RSP: 002b:00007f25eb5fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 198.238598][ T7468] RAX: ffffffffffffffda RBX: 00007f25eaa16090 RCX: 00007f25ea79ce59 [ 198.238608][ T7468] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 198.238617][ T7468] RBP: 00007f25ea832d6f R08: 0000000000000000 R09: 0000000000000000 [ 198.238625][ T7468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 198.238634][ T7468] R13: 00007f25eaa16128 R14: 00007f25eaa16090 R15: 00007fff38b1cae8 [ 198.238654][ T7468] [ 199.093870][ T7477] FAULT_INJECTION: forcing a failure. [ 199.093870][ T7477] name failslab, interval 1, probability 0, space 0, times 0 [ 199.147551][ T7477] CPU: 1 UID: 0 PID: 7477 Comm: syz.0.324 Tainted: G U L syzkaller #0 PREEMPT(full) [ 199.147603][ T7477] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 199.147613][ T7477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 199.147627][ T7477] Call Trace: [ 199.147635][ T7477] [ 199.147645][ T7477] dump_stack_lvl+0x100/0x190 [ 199.147681][ T7477] should_fail_ex.cold+0x5/0xa [ 199.147719][ T7477] should_failslab+0xc2/0x120 [ 199.147752][ T7477] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 199.147796][ T7477] ? shmem_alloc_inode+0x25/0x50 [ 199.147835][ T7477] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 199.147872][ T7477] shmem_alloc_inode+0x25/0x50 [ 199.147904][ T7477] alloc_inode+0x68/0x250 [ 199.147947][ T7477] new_inode+0x22/0x1c0 [ 199.147986][ T7477] ? trace_kmem_cache_alloc+0xd5/0x100 [ 199.148024][ T7477] shmem_get_inode+0x1e3/0xfb0 [ 199.148064][ T7477] ? __pfx_shmem_get_inode+0x10/0x10 [ 199.148113][ T7477] __shmem_file_setup+0x382/0x460 [ 199.148154][ T7477] ? __pfx___shmem_file_setup+0x10/0x10 [ 199.148195][ T7477] ? vm_area_alloc+0x1f/0x160 [ 199.148240][ T7477] shmem_zero_setup+0x96/0x1b0 [ 199.148283][ T7477] __mmap_region+0x24e9/0x2da0 [ 199.148333][ T7477] ? __pfx___mmap_region+0x10/0x10 [ 199.148404][ T7477] ? do_raw_spin_lock+0x128/0x260 [ 199.148461][ T7477] ? do_raw_spin_lock+0x128/0x260 [ 199.148493][ T7477] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 199.148538][ T7477] ? hrtimer_start_range_ns+0x860/0x1a50 [ 199.148575][ T7477] ? find_held_lock+0x2b/0x80 [ 199.148610][ T7477] ? finish_task_switch.isra.0+0x2c6/0x1010 [ 199.148708][ T7477] mmap_region+0x35d/0x620 [ 199.148736][ T7477] ? rcu_is_watching+0x12/0xc0 [ 199.148770][ T7477] ? __pfx_mmap_region+0x10/0x10 [ 199.148800][ T7477] ? cap_mmap_addr+0x4b/0x120 [ 199.148841][ T7477] ? bpf_lsm_mmap_addr+0x9/0x30 [ 199.148870][ T7477] ? security_mmap_addr+0x71/0x1e0 [ 199.148905][ T7477] ? __get_unmapped_area+0x255/0x3e0 [ 199.148950][ T7477] do_mmap+0xc63/0x12f0 [ 199.148993][ T7477] ? __pfx_do_mmap+0x10/0x10 [ 199.149032][ T7477] ? __pfx_down_write_killable+0x10/0x10 [ 199.149076][ T7477] vm_mmap_pgoff+0x29e/0x470 [ 199.149119][ T7477] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 199.149158][ T7477] ? do_futex+0x192/0x350 [ 199.149190][ T7477] ? __pfx_do_futex+0x10/0x10 [ 199.149228][ T7477] ksys_mmap_pgoff+0xe4/0x610 [ 199.149270][ T7477] ? __x64_sys_futex+0x358/0x4d0 [ 199.149303][ T7477] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 199.149334][ T7477] ? xfd_validate_state+0x129/0x190 [ 199.149362][ T7477] ? ksys_write+0x1ac/0x250 [ 199.149399][ T7477] __x64_sys_mmap+0x125/0x190 [ 199.149435][ T7477] do_syscall_64+0x10b/0xf80 [ 199.149470][ T7477] ? clear_bhb_loop+0x40/0x90 [ 199.149501][ T7477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.149528][ T7477] RIP: 0033:0x7f41ce79ce59 [ 199.149551][ T7477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.149581][ T7477] RSP: 002b:00007f41cf592028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 199.149607][ T7477] RAX: ffffffffffffffda RBX: 00007f41cea16180 RCX: 00007f41ce79ce59 [ 199.149624][ T7477] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 199.149640][ T7477] RBP: 00007f41ce832d6f R08: fffffffffffffffa R09: 0000000000008000 [ 199.149657][ T7477] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 199.149673][ T7477] R13: 00007f41cea16218 R14: 00007f41cea16180 R15: 00007fff306bd948 [ 199.149710][ T7477] [ 199.670491][ T29] audit: type=1800 audit(1779333522.431:6): pid=7485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.326" name="file1" dev="tmpfs" ino=485 res=0 errno=0 [ 199.993592][ T7490] netlink: 25 bytes leftover after parsing attributes in process `syz.1.336'. [ 200.095257][ T7494] HfR: entered promiscuous mode [ 200.120984][ T7494] netlink: 12 bytes leftover after parsing attributes in process `syz.0.329'. [ 200.153339][ T7495] netlink: 24 bytes leftover after parsing attributes in process `syz.1.336'. [ 200.344131][ T7494] HfR: left promiscuous mode [ 200.344436][ T7492] FAULT_INJECTION: forcing a failure. [ 200.344436][ T7492] name failslab, interval 1, probability 0, space 0, times 0 [ 200.364814][ T7492] CPU: 0 UID: 0 PID: 7492 Comm: syz.2.328 Tainted: G U L syzkaller #0 PREEMPT(full) [ 200.364862][ T7492] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 200.364871][ T7492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 200.364887][ T7492] Call Trace: [ 200.364896][ T7492] [ 200.364906][ T7492] dump_stack_lvl+0x100/0x190 [ 200.364946][ T7492] should_fail_ex.cold+0x5/0xa [ 200.364983][ T7492] should_failslab+0xc2/0x120 [ 200.365014][ T7492] __kmalloc_cache_noprof+0x7a/0x6f0 [ 200.365054][ T7492] ? mpi_alloc+0x46/0x230 [ 200.365089][ T7492] mpi_alloc+0x46/0x230 [ 200.365124][ T7492] rsa_check_payload+0x3b/0xc0 [ 200.365169][ T7492] rsa_enc+0x198/0x3b0 [ 200.365214][ T7492] ? __pfx_rsa_enc+0x10/0x10 [ 200.365258][ T7492] ? __virt_addr_valid+0x239/0x430 [ 200.365303][ T7492] ? sg_init_one+0xf5/0x1b0 [ 200.365345][ T7492] rsassa_pkcs1_verify+0x4eb/0xc20 [ 200.365387][ T7492] ? __pfx_rsassa_pkcs1_verify+0x10/0x10 [ 200.365428][ T7492] ? rsa_max_size+0xd/0x70 [ 200.365462][ T7492] ? rsassa_pkcs1_set_pub_key+0x17d/0x1f0 [ 200.365497][ T7492] public_key_verify_signature+0x5ee/0x910 [ 200.365534][ T7492] ? __pfx_public_key_verify_signature+0x10/0x10 [ 200.365583][ T7492] ? __kmalloc_noprof+0x320/0x850 [ 200.365615][ T7492] x509_check_for_self_signed+0x325/0x510 [ 200.365653][ T7492] x509_cert_parse+0x60c/0x910 [ 200.365678][ T7492] ? kasan_save_stack+0x3f/0x50 [ 200.365704][ T7492] ? kasan_save_stack+0x30/0x50 [ 200.365726][ T7492] ? kasan_save_track+0x14/0x30 [ 200.365752][ T7492] pkcs7_extract_cert+0xa4/0x380 [ 200.365789][ T7492] asn1_ber_decoder+0x12b3/0x2170 [ 200.365842][ T7492] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 200.365900][ T7492] pkcs7_parse_message+0x289/0x870 [ 200.365939][ T7492] verify_pkcs7_signature+0x30/0xa0 [ 200.365973][ T7492] valid_regdb+0x211/0x590 [ 200.366011][ T7492] ? __pfx_valid_regdb+0x10/0x10 [ 200.366053][ T7492] reg_reload_regdb+0x11a/0x460 [ 200.366091][ T7492] ? __pfx_reg_reload_regdb+0x10/0x10 [ 200.366137][ T7492] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 200.366165][ T7492] ? nl80211_pre_doit+0x19a/0xae0 [ 200.366198][ T7492] genl_family_rcv_msg_doit+0x214/0x300 [ 200.366232][ T7492] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 200.366260][ T7492] ? genl_get_cmd+0x3e7/0x760 [ 200.366312][ T7492] ? bpf_lsm_capable+0x9/0x10 [ 200.366342][ T7492] ? security_capable+0x80/0x260 [ 200.366392][ T7492] genl_rcv_msg+0x560/0x800 [ 200.366424][ T7492] ? __pfx_genl_rcv_msg+0x10/0x10 [ 200.366452][ T7492] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 200.366479][ T7492] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 200.366514][ T7492] ? __pfx_nl80211_post_doit+0x10/0x10 [ 200.366556][ T7492] netlink_rcv_skb+0x159/0x420 [ 200.366599][ T7492] ? __pfx_genl_rcv_msg+0x10/0x10 [ 200.366629][ T7492] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 200.366687][ T7492] ? netlink_deliver_tap+0x1ae/0xcc0 [ 200.366732][ T7492] genl_rcv+0x28/0x40 [ 200.366755][ T7492] netlink_unicast+0x585/0x850 [ 200.366802][ T7492] ? __pfx_netlink_unicast+0x10/0x10 [ 200.366854][ T7492] netlink_sendmsg+0x8b0/0xda0 [ 200.366902][ T7492] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.366941][ T7492] ? __import_iovec+0x1d2/0x640 [ 200.366975][ T7492] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 200.367023][ T7492] ____sys_sendmsg+0x9e1/0xb70 [ 200.367060][ T7492] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.367102][ T7492] ? __pfx_____sys_sendmsg+0x10/0x10 [ 200.367158][ T7492] ? __pfx_futex_wake_mark+0x10/0x10 [ 200.367204][ T7492] ___sys_sendmsg+0x190/0x1e0 [ 200.367250][ T7492] ? __pfx____sys_sendmsg+0x10/0x10 [ 200.367339][ T7492] __sys_sendmsg+0x170/0x220 [ 200.367374][ T7492] ? __pfx___sys_sendmsg+0x10/0x10 [ 200.367407][ T7492] ? __x64_sys_futex+0x34f/0x4d0 [ 200.367453][ T7492] ? rcu_is_watching+0x12/0xc0 [ 200.367493][ T7492] do_syscall_64+0x10b/0xf80 [ 200.367536][ T7492] ? clear_bhb_loop+0x40/0x90 [ 200.367572][ T7492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.367606][ T7492] RIP: 0033:0x7f8468f9ce59 [ 200.367629][ T7492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.367655][ T7492] RSP: 002b:00007f8469e71028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.367683][ T7492] RAX: ffffffffffffffda RBX: 00007f8469215fa0 RCX: 00007f8468f9ce59 [ 200.367703][ T7492] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000005 [ 200.367721][ T7492] RBP: 00007f8469032d6f R08: 0000000000000000 R09: 0000000000000000 [ 200.367738][ T7492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.367755][ T7492] R13: 00007f8469216038 R14: 00007f8469215fa0 R15: 00007ffdba5df0e8 [ 200.367795][ T7492] [ 200.845455][ T7498] FAULT_INJECTION: forcing a failure. [ 200.845455][ T7498] name failslab, interval 1, probability 0, space 0, times 0 [ 200.876296][ T7498] CPU: 1 UID: 0 PID: 7498 Comm: syz.3.330 Tainted: G U L syzkaller #0 PREEMPT(full) [ 200.876344][ T7498] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 200.876355][ T7498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 200.876371][ T7498] Call Trace: [ 200.876380][ T7498] [ 200.876391][ T7498] dump_stack_lvl+0x100/0x190 [ 200.876427][ T7498] should_fail_ex.cold+0x5/0xa [ 200.876463][ T7498] ? mpi_resize+0x1ac/0x250 [ 200.876490][ T7498] should_failslab+0xc2/0x120 [ 200.876524][ T7498] __kmalloc_noprof+0xe0/0x850 [ 200.876550][ T7498] ? __kasan_kmalloc+0xaa/0xb0 [ 200.876584][ T7498] mpi_resize+0x1ac/0x250 [ 200.876617][ T7498] mpi_powm+0x9ff/0x1e50 [ 200.876662][ T7498] ? __pfx_mpi_powm+0x10/0x10 [ 200.876689][ T7498] ? mpi_free+0xa0/0x150 [ 200.876714][ T7498] ? mpi_free+0xe1/0x150 [ 200.876740][ T7498] ? kfree+0x223/0x6c0 [ 200.876783][ T7498] ? mpi_free+0xe6/0x150 [ 200.876814][ T7498] rsa_enc+0x1fe/0x3b0 [ 200.876858][ T7498] ? __pfx_rsa_enc+0x10/0x10 [ 200.876898][ T7498] ? __virt_addr_valid+0x239/0x430 [ 200.876941][ T7498] ? sg_init_one+0xf5/0x1b0 [ 200.876982][ T7498] rsassa_pkcs1_verify+0x4eb/0xc20 [ 200.877020][ T7498] ? __pfx_rsassa_pkcs1_verify+0x10/0x10 [ 200.877066][ T7498] ? rsa_max_size+0xd/0x70 [ 200.877133][ T7498] ? rsassa_pkcs1_set_pub_key+0x17d/0x1f0 [ 200.877169][ T7498] public_key_verify_signature+0x5ee/0x910 [ 200.877201][ T7498] ? __pfx_public_key_verify_signature+0x10/0x10 [ 200.877243][ T7498] ? __kmalloc_noprof+0x320/0x850 [ 200.877282][ T7498] x509_check_for_self_signed+0x325/0x510 [ 200.877321][ T7498] x509_cert_parse+0x60c/0x910 [ 200.877348][ T7498] ? kasan_save_stack+0x3f/0x50 [ 200.877375][ T7498] ? kasan_save_stack+0x30/0x50 [ 200.877398][ T7498] ? kasan_save_track+0x14/0x30 [ 200.877428][ T7498] pkcs7_extract_cert+0xa4/0x380 [ 200.877468][ T7498] asn1_ber_decoder+0x12b3/0x2170 [ 200.877518][ T7498] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 200.877574][ T7498] pkcs7_parse_message+0x289/0x870 [ 200.877611][ T7498] verify_pkcs7_signature+0x30/0xa0 [ 200.877644][ T7498] valid_regdb+0x211/0x590 [ 200.877683][ T7498] ? __pfx_valid_regdb+0x10/0x10 [ 200.877723][ T7498] reg_reload_regdb+0x11a/0x460 [ 200.877765][ T7498] ? __pfx_reg_reload_regdb+0x10/0x10 [ 200.877806][ T7498] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 200.877835][ T7498] ? nl80211_pre_doit+0x19a/0xae0 [ 200.877869][ T7498] genl_family_rcv_msg_doit+0x214/0x300 [ 200.877904][ T7498] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 200.877933][ T7498] ? genl_get_cmd+0x3e7/0x760 [ 200.877978][ T7498] ? bpf_lsm_capable+0x9/0x10 [ 200.878006][ T7498] ? security_capable+0x80/0x260 [ 200.878050][ T7498] genl_rcv_msg+0x560/0x800 [ 200.878080][ T7498] ? __pfx_genl_rcv_msg+0x10/0x10 [ 200.878113][ T7498] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 200.878140][ T7498] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 200.878176][ T7498] ? __pfx_nl80211_post_doit+0x10/0x10 [ 200.878218][ T7498] netlink_rcv_skb+0x159/0x420 [ 200.878259][ T7498] ? __pfx_genl_rcv_msg+0x10/0x10 [ 200.878289][ T7498] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 200.878345][ T7498] ? netlink_deliver_tap+0x1ae/0xcc0 [ 200.878390][ T7498] genl_rcv+0x28/0x40 [ 200.878413][ T7498] netlink_unicast+0x585/0x850 [ 200.878460][ T7498] ? __pfx_netlink_unicast+0x10/0x10 [ 200.878511][ T7498] netlink_sendmsg+0x8b0/0xda0 [ 200.878559][ T7498] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.878599][ T7498] ? __import_iovec+0x1d2/0x640 [ 200.878632][ T7498] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 200.878681][ T7498] ____sys_sendmsg+0x9e1/0xb70 [ 200.878721][ T7498] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.878765][ T7498] ? __pfx_____sys_sendmsg+0x10/0x10 [ 200.878839][ T7498] ? __pfx_futex_wake_mark+0x10/0x10 [ 200.878883][ T7498] ___sys_sendmsg+0x190/0x1e0 [ 200.878930][ T7498] ? __pfx____sys_sendmsg+0x10/0x10 [ 200.879014][ T7498] __sys_sendmsg+0x170/0x220 [ 200.879049][ T7498] ? __pfx___sys_sendmsg+0x10/0x10 [ 200.879081][ T7498] ? __x64_sys_futex+0x34f/0x4d0 [ 200.879134][ T7498] ? rcu_is_watching+0x12/0xc0 [ 200.879174][ T7498] do_syscall_64+0x10b/0xf80 [ 200.879216][ T7498] ? clear_bhb_loop+0x40/0x90 [ 200.879251][ T7498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.879279][ T7498] RIP: 0033:0x7fa66299ce59 [ 200.879303][ T7498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.879329][ T7498] RSP: 002b:00007fa6638ec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.879356][ T7498] RAX: ffffffffffffffda RBX: 00007fa662c15fa0 RCX: 00007fa66299ce59 [ 200.879374][ T7498] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000005 [ 200.879391][ T7498] RBP: 00007fa662a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 200.879408][ T7498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.879424][ T7498] R13: 00007fa662c16038 R14: 00007fa662c15fa0 R15: 00007ffcccaad578 [ 200.879462][ T7498] [ 201.718986][ T4946] Bluetooth: hci3: command 0x0406 tx timeout [ 201.725499][ T5632] Bluetooth: hci0: command 0x0406 tx timeout [ 201.725529][ T5640] Bluetooth: hci1: command 0x0406 tx timeout [ 201.732577][ T5639] Bluetooth: hci2: command 0x0406 tx timeout [ 202.116491][ T7490] Process accounting resumed [ 202.262543][ T7516] random: crng reseeded on system resumption [ 203.354598][ T7530] Process accounting paused [ 203.581128][ T7538] netlink: 12 bytes leftover after parsing attributes in process `syz.0.341'. [ 203.677391][ T7537] HfR: entered promiscuous mode [ 203.751218][ T7538] HfR: left promiscuous mode [ 203.939716][ T7542] FAULT_INJECTION: forcing a failure. [ 203.939716][ T7542] name failslab, interval 1, probability 0, space 0, times 0 [ 203.986445][ T7542] CPU: 1 UID: 0 PID: 7542 Comm: syz.1.342 Tainted: G U L syzkaller #0 PREEMPT(full) [ 203.986493][ T7542] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 203.986503][ T7542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 203.986520][ T7542] Call Trace: [ 203.986529][ T7542] [ 203.986539][ T7542] dump_stack_lvl+0x100/0x190 [ 203.986574][ T7542] should_fail_ex.cold+0x5/0xa [ 203.986611][ T7542] ? mpi_alloc_limb_space+0x31/0x60 [ 203.986638][ T7542] should_failslab+0xc2/0x120 [ 203.986673][ T7542] __kmalloc_noprof+0xe0/0x850 [ 203.986708][ T7542] mpi_alloc_limb_space+0x31/0x60 [ 203.986745][ T7542] mpihelp_mul_karatsuba_case+0x116/0xc20 [ 203.986788][ T7542] ? __pfx_mpihelp_mul_karatsuba_case+0x10/0x10 [ 203.986831][ T7542] mpi_powm+0xf9a/0x1e50 [ 203.986877][ T7542] ? __pfx_mpi_powm+0x10/0x10 [ 203.986905][ T7542] ? mpi_free+0xa0/0x150 [ 203.986930][ T7542] ? mpi_free+0xe1/0x150 [ 203.986956][ T7542] ? kfree+0x223/0x6c0 [ 203.987000][ T7542] ? mpi_free+0xe6/0x150 [ 203.987032][ T7542] rsa_enc+0x1fe/0x3b0 [ 203.987077][ T7542] ? __pfx_rsa_enc+0x10/0x10 [ 203.987121][ T7542] ? __virt_addr_valid+0x239/0x430 [ 203.987166][ T7542] ? sg_init_one+0xf5/0x1b0 [ 203.987209][ T7542] rsassa_pkcs1_verify+0x4eb/0xc20 [ 203.987251][ T7542] ? __pfx_rsassa_pkcs1_verify+0x10/0x10 [ 203.987302][ T7542] ? rsa_max_size+0xd/0x70 [ 203.987342][ T7542] ? rsassa_pkcs1_set_pub_key+0x17d/0x1f0 [ 203.987378][ T7542] public_key_verify_signature+0x5ee/0x910 [ 203.987415][ T7542] ? __pfx_public_key_verify_signature+0x10/0x10 [ 203.987462][ T7542] ? __kmalloc_noprof+0x320/0x850 [ 203.987498][ T7542] x509_check_for_self_signed+0x325/0x510 [ 203.987536][ T7542] x509_cert_parse+0x60c/0x910 [ 203.987564][ T7542] ? kasan_save_stack+0x3f/0x50 [ 203.987591][ T7542] ? kasan_save_stack+0x30/0x50 [ 203.987617][ T7542] ? kasan_save_track+0x14/0x30 [ 203.987647][ T7542] pkcs7_extract_cert+0xa4/0x380 [ 203.987686][ T7542] asn1_ber_decoder+0x12b3/0x2170 [ 203.987744][ T7542] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 203.987809][ T7542] pkcs7_parse_message+0x289/0x870 [ 203.987849][ T7542] verify_pkcs7_signature+0x30/0xa0 [ 203.987882][ T7542] valid_regdb+0x211/0x590 [ 203.987926][ T7542] ? __pfx_valid_regdb+0x10/0x10 [ 203.987969][ T7542] reg_reload_regdb+0x11a/0x460 [ 203.988008][ T7542] ? __pfx_reg_reload_regdb+0x10/0x10 [ 203.988048][ T7542] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 203.988075][ T7542] ? nl80211_pre_doit+0x19a/0xae0 [ 203.988113][ T7542] genl_family_rcv_msg_doit+0x214/0x300 [ 203.988144][ T7542] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 203.988171][ T7542] ? genl_get_cmd+0x3e7/0x760 [ 203.988227][ T7542] ? bpf_lsm_capable+0x9/0x10 [ 203.988260][ T7542] ? security_capable+0x80/0x260 [ 203.988313][ T7542] genl_rcv_msg+0x560/0x800 [ 203.988345][ T7542] ? __pfx_genl_rcv_msg+0x10/0x10 [ 203.988375][ T7542] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 203.988404][ T7542] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 203.988446][ T7542] ? __pfx_nl80211_post_doit+0x10/0x10 [ 203.988488][ T7542] netlink_rcv_skb+0x159/0x420 [ 203.988531][ T7542] ? __pfx_genl_rcv_msg+0x10/0x10 [ 203.988562][ T7542] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 203.988614][ T7542] ? netlink_deliver_tap+0x1ae/0xcc0 [ 203.988658][ T7542] genl_rcv+0x28/0x40 [ 203.988682][ T7542] netlink_unicast+0x585/0x850 [ 203.988734][ T7542] ? __pfx_netlink_unicast+0x10/0x10 [ 203.988788][ T7542] netlink_sendmsg+0x8b0/0xda0 [ 203.988832][ T7542] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.988869][ T7542] ? __import_iovec+0x1d2/0x640 [ 203.988903][ T7542] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 203.988949][ T7542] ____sys_sendmsg+0x9e1/0xb70 [ 203.988987][ T7542] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.989031][ T7542] ? __pfx_____sys_sendmsg+0x10/0x10 [ 203.989080][ T7542] ? __pfx_futex_wake_mark+0x10/0x10 [ 203.989124][ T7542] ___sys_sendmsg+0x190/0x1e0 [ 203.989163][ T7542] ? __pfx____sys_sendmsg+0x10/0x10 [ 203.989247][ T7542] __sys_sendmsg+0x170/0x220 [ 203.989282][ T7542] ? __pfx___sys_sendmsg+0x10/0x10 [ 203.989313][ T7542] ? __x64_sys_futex+0x34f/0x4d0 [ 203.989353][ T7542] ? rcu_is_watching+0x12/0xc0 [ 203.989390][ T7542] do_syscall_64+0x10b/0xf80 [ 203.989429][ T7542] ? clear_bhb_loop+0x40/0x90 [ 203.989462][ T7542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.989488][ T7542] RIP: 0033:0x7f25ea79ce59 [ 203.989509][ T7542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.989536][ T7542] RSP: 002b:00007f25eb61d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.989564][ T7542] RAX: ffffffffffffffda RBX: 00007f25eaa15fa0 RCX: 00007f25ea79ce59 [ 203.989583][ T7542] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000005 [ 203.989600][ T7542] RBP: 00007f25ea832d6f R08: 0000000000000000 R09: 0000000000000000 [ 203.989617][ T7542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.989633][ T7542] R13: 00007f25eaa16038 R14: 00007f25eaa15fa0 R15: 00007fff38b1cae8 [ 203.989670][ T7542] [ 207.201040][ T7606] netlink: 186 bytes leftover after parsing attributes in process `syz.0.354'. [ 207.325716][ T7606] netlink: 186 bytes leftover after parsing attributes in process `syz.0.354'. [ 208.283002][ T7631] FAULT_INJECTION: forcing a failure. [ 208.283002][ T7631] name failslab, interval 1, probability 0, space 0, times 0 [ 208.301374][ T7631] CPU: 0 UID: 0 PID: 7631 Comm: syz.3.358 Tainted: G U L syzkaller #0 PREEMPT(full) [ 208.301420][ T7631] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 208.301431][ T7631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 208.301446][ T7631] Call Trace: [ 208.301455][ T7631] [ 208.301464][ T7631] dump_stack_lvl+0x100/0x190 [ 208.301503][ T7631] should_fail_ex.cold+0x5/0xa [ 208.301537][ T7631] ? mpi_alloc_limb_space+0x31/0x60 [ 208.301565][ T7631] should_failslab+0xc2/0x120 [ 208.301599][ T7631] __kmalloc_noprof+0xe0/0x850 [ 208.301632][ T7631] mpi_alloc_limb_space+0x31/0x60 [ 208.301661][ T7631] mpi_powm+0x1083/0x1e50 [ 208.301706][ T7631] ? __pfx_mpi_powm+0x10/0x10 [ 208.301732][ T7631] ? mpi_free+0xa0/0x150 [ 208.301757][ T7631] ? mpi_free+0xe1/0x150 [ 208.301782][ T7631] ? kfree+0x223/0x6c0 [ 208.301826][ T7631] ? mpi_free+0xe6/0x150 [ 208.301858][ T7631] rsa_enc+0x1fe/0x3b0 [ 208.301903][ T7631] ? __pfx_rsa_enc+0x10/0x10 [ 208.301945][ T7631] ? __virt_addr_valid+0x239/0x430 [ 208.301990][ T7631] ? sg_init_one+0xf5/0x1b0 [ 208.302033][ T7631] rsassa_pkcs1_verify+0x4eb/0xc20 [ 208.302073][ T7631] ? __pfx_rsassa_pkcs1_verify+0x10/0x10 [ 208.302124][ T7631] ? rsa_max_size+0xd/0x70 [ 208.302164][ T7631] ? rsassa_pkcs1_set_pub_key+0x17d/0x1f0 [ 208.302200][ T7631] public_key_verify_signature+0x5ee/0x910 [ 208.302237][ T7631] ? __pfx_public_key_verify_signature+0x10/0x10 [ 208.302280][ T7631] ? __kmalloc_noprof+0x320/0x850 [ 208.302320][ T7631] x509_check_for_self_signed+0x325/0x510 [ 208.302359][ T7631] x509_cert_parse+0x60c/0x910 [ 208.302386][ T7631] ? kasan_save_stack+0x3f/0x50 [ 208.302413][ T7631] ? kasan_save_stack+0x30/0x50 [ 208.302438][ T7631] ? kasan_save_track+0x14/0x30 [ 208.302469][ T7631] pkcs7_extract_cert+0xa4/0x380 [ 208.302507][ T7631] asn1_ber_decoder+0x12b3/0x2170 [ 208.302559][ T7631] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 208.302625][ T7631] pkcs7_parse_message+0x289/0x870 [ 208.302666][ T7631] verify_pkcs7_signature+0x30/0xa0 [ 208.302700][ T7631] valid_regdb+0x211/0x590 [ 208.302741][ T7631] ? __pfx_valid_regdb+0x10/0x10 [ 208.302784][ T7631] reg_reload_regdb+0x11a/0x460 [ 208.302822][ T7631] ? __pfx_reg_reload_regdb+0x10/0x10 [ 208.302862][ T7631] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 208.302888][ T7631] ? nl80211_pre_doit+0x19a/0xae0 [ 208.302921][ T7631] genl_family_rcv_msg_doit+0x214/0x300 [ 208.302954][ T7631] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 208.302980][ T7631] ? genl_get_cmd+0x3e7/0x760 [ 208.303033][ T7631] ? bpf_lsm_capable+0x9/0x10 [ 208.303063][ T7631] ? security_capable+0x80/0x260 [ 208.303113][ T7631] genl_rcv_msg+0x560/0x800 [ 208.303144][ T7631] ? __pfx_genl_rcv_msg+0x10/0x10 [ 208.303173][ T7631] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 208.303201][ T7631] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 208.303238][ T7631] ? __pfx_nl80211_post_doit+0x10/0x10 [ 208.303282][ T7631] netlink_rcv_skb+0x159/0x420 [ 208.303332][ T7631] ? __pfx_genl_rcv_msg+0x10/0x10 [ 208.303363][ T7631] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 208.303421][ T7631] ? rcu_is_watching+0x12/0xc0 [ 208.303465][ T7631] genl_rcv+0x28/0x40 [ 208.303489][ T7631] netlink_unicast+0x585/0x850 [ 208.303536][ T7631] ? __pfx_netlink_unicast+0x10/0x10 [ 208.303583][ T7631] netlink_sendmsg+0x8b0/0xda0 [ 208.303627][ T7631] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.303664][ T7631] ? __import_iovec+0x1d2/0x640 [ 208.303705][ T7631] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 208.303755][ T7631] ____sys_sendmsg+0x9e1/0xb70 [ 208.303790][ T7631] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.303834][ T7631] ? __pfx_____sys_sendmsg+0x10/0x10 [ 208.303873][ T7631] ? preempt_schedule_thunk+0x16/0x30 [ 208.303924][ T7631] ? try_to_wake_up+0x5f6/0x1900 [ 208.303968][ T7631] ___sys_sendmsg+0x190/0x1e0 [ 208.304011][ T7631] ? __pfx____sys_sendmsg+0x10/0x10 [ 208.304053][ T7631] ? futex_private_hash_put+0x107/0x1c0 [ 208.304121][ T7631] __sys_sendmsg+0x170/0x220 [ 208.304156][ T7631] ? __pfx___sys_sendmsg+0x10/0x10 [ 208.304188][ T7631] ? __x64_sys_futex+0x34f/0x4d0 [ 208.304227][ T7631] ? rcu_is_watching+0x12/0xc0 [ 208.304264][ T7631] do_syscall_64+0x10b/0xf80 [ 208.304310][ T7631] ? clear_bhb_loop+0x40/0x90 [ 208.304343][ T7631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.304371][ T7631] RIP: 0033:0x7fa66299ce59 [ 208.304393][ T7631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.304417][ T7631] RSP: 002b:00007fa6638ec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.304443][ T7631] RAX: ffffffffffffffda RBX: 00007fa662c15fa0 RCX: 00007fa66299ce59 [ 208.304460][ T7631] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000005 [ 208.304476][ T7631] RBP: 00007fa662a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 208.304492][ T7631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.304507][ T7631] R13: 00007fa662c16038 R14: 00007fa662c15fa0 R15: 00007ffcccaad578 [ 208.304542][ T7631] [ 208.949139][ T7641] HfR: entered promiscuous mode [ 209.005421][ T7641] netlink: 12 bytes leftover after parsing attributes in process `syz.3.362'. [ 209.035146][ T7641] HfR: left promiscuous mode [ 209.290854][ T7657] netlink: 186 bytes leftover after parsing attributes in process `syz.3.366'. [ 209.352994][ T7657] netlink: 186 bytes leftover after parsing attributes in process `syz.3.366'. [ 210.151417][ T7676] HfR: entered promiscuous mode [ 210.181795][ T7676] netlink: 12 bytes leftover after parsing attributes in process `syz.1.370'. [ 210.232512][ T7676] HfR: left promiscuous mode [ 211.643489][ T7696] HfR: entered promiscuous mode [ 211.658432][ T7696] netlink: 12 bytes leftover after parsing attributes in process `syz.2.375'. [ 211.667808][ T7696] HfR: left promiscuous mode [ 211.731631][ T7705] netlink: 186 bytes leftover after parsing attributes in process `syz.1.377'. [ 211.802596][ T7709] netlink: 186 bytes leftover after parsing attributes in process `syz.1.377'. [ 212.550767][ T7737] HfR: entered promiscuous mode [ 212.574544][ T7737] netlink: 12 bytes leftover after parsing attributes in process `syz.3.385'. [ 212.619020][ T7737] HfR: left promiscuous mode [ 212.948878][ T7751] netlink: 28 bytes leftover after parsing attributes in process `syz.0.390'. [ 214.077842][ T7778] HfR: entered promiscuous mode [ 214.110156][ T7778] netlink: 12 bytes leftover after parsing attributes in process `syz.1.391'. [ 214.139868][ T7778] HfR: left promiscuous mode [ 215.670838][ T7812] FAULT_INJECTION: forcing a failure. [ 215.670838][ T7812] name failslab, interval 1, probability 0, space 0, times 0 [ 215.764060][ T7812] CPU: 0 UID: 0 PID: 7812 Comm: syz.1.395 Tainted: G U L syzkaller #0 PREEMPT(full) [ 215.764100][ T7812] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 215.764109][ T7812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 215.764120][ T7812] Call Trace: [ 215.764126][ T7812] [ 215.764131][ T7812] dump_stack_lvl+0x100/0x190 [ 215.764155][ T7812] should_fail_ex.cold+0x5/0xa [ 215.764177][ T7812] should_failslab+0xc2/0x120 [ 215.764195][ T7812] __kmalloc_cache_noprof+0x7a/0x6f0 [ 215.764216][ T7812] ? netdev_init+0xa0/0x3c0 [ 215.764236][ T7812] ? __pfx_proc_create_net_data+0x10/0x10 [ 215.764255][ T7812] ? __pfx_uevent_net_rcv+0x10/0x10 [ 215.764276][ T7812] netdev_init+0xa0/0x3c0 [ 215.764303][ T7812] ? __pfx_netdev_init+0x10/0x10 [ 215.764324][ T7812] ops_init+0x1e2/0x5f0 [ 215.764344][ T7812] setup_net+0x118/0x3a0 [ 215.764362][ T7812] ? __pfx_setup_net+0x10/0x10 [ 215.764380][ T7812] ? mutex_init_lockdep+0xf1/0x120 [ 215.764399][ T7812] copy_net_ns+0x46f/0x7c0 [ 215.764420][ T7812] create_new_namespaces+0x3ea/0xac0 [ 215.764444][ T7812] unshare_nsproxy_namespaces+0xf2/0x220 [ 215.764464][ T7812] ksys_unshare+0x438/0xab0 [ 215.764487][ T7812] ? __pfx_ksys_unshare+0x10/0x10 [ 215.764507][ T7812] ? xfd_validate_state+0x129/0x190 [ 215.764529][ T7812] __x64_sys_unshare+0x31/0x40 [ 215.764552][ T7812] do_syscall_64+0x10b/0xf80 [ 215.764574][ T7812] ? clear_bhb_loop+0x40/0x90 [ 215.764592][ T7812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.764607][ T7812] RIP: 0033:0x7f25ea79ce59 [ 215.764623][ T7812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.764637][ T7812] RSP: 002b:00007f25eb5db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 215.764652][ T7812] RAX: ffffffffffffffda RBX: 00007f25eaa16180 RCX: 00007f25ea79ce59 [ 215.764662][ T7812] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 215.764671][ T7812] RBP: 00007f25ea832d6f R08: 0000000000000000 R09: 0000000000000000 [ 215.764679][ T7812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 215.764688][ T7812] R13: 00007f25eaa16218 R14: 00007f25eaa16180 R15: 00007fff38b1cae8 [ 215.764707][ T7812] [ 216.699034][ T7837] netlink: 12 bytes leftover after parsing attributes in process `syz.1.401'. [ 216.718608][ T7836] HfR: entered promiscuous mode [ 216.744916][ T7837] HfR: left promiscuous mode [ 217.049516][ T7843] HfR: entered promiscuous mode [ 217.087416][ T7843] netlink: 12 bytes leftover after parsing attributes in process `syz.0.411'. [ 217.125033][ T7843] HfR: left promiscuous mode [ 217.260189][ T7849] FAULT_INJECTION: forcing a failure. [ 217.260189][ T7849] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 217.302193][ T7849] CPU: 0 UID: 0 PID: 7849 Comm: syz.3.404 Tainted: G U L syzkaller #0 PREEMPT(full) [ 217.302246][ T7849] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 217.302258][ T7849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 217.302276][ T7849] Call Trace: [ 217.302286][ T7849] [ 217.302296][ T7849] dump_stack_lvl+0x100/0x190 [ 217.302334][ T7849] should_fail_ex.cold+0x5/0xa [ 217.302367][ T7849] ? prepare_alloc_pages+0x16d/0x5f0 [ 217.302408][ T7849] should_fail_alloc_page+0xeb/0x140 [ 217.302444][ T7849] prepare_alloc_pages+0x1f0/0x5f0 [ 217.302491][ T7849] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 217.302542][ T7849] ? lru_gen_add_folio+0x20f/0x13d0 [ 217.302580][ T7849] ? folios_put_refs+0x716/0xa90 [ 217.302614][ T7849] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 217.302669][ T7849] ? __lock_acquire+0x4a5/0x2630 [ 217.302697][ T7849] ? __lock_acquire+0x4a5/0x2630 [ 217.302723][ T7849] ? css_rstat_updated+0x1ce/0x5a0 [ 217.302779][ T7849] ? lock_acquire+0x1b1/0x370 [ 217.302806][ T7849] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 217.302851][ T7849] ? policy_nodemask+0xed/0x4f0 [ 217.302888][ T7849] alloc_pages_mpol+0x1fb/0x540 [ 217.302923][ T7849] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 217.302961][ T7849] ? __lock_acquire+0x4a5/0x2630 [ 217.302993][ T7849] folio_alloc_mpol_noprof+0x36/0x260 [ 217.303035][ T7849] vma_alloc_folio_noprof+0xed/0x1d0 [ 217.303074][ T7849] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 217.303125][ T7849] do_anonymous_page+0xb46/0x2050 [ 217.303174][ T7849] ? rcu_read_unlock+0x2d/0xb0 [ 217.303222][ T7849] __handle_mm_fault+0x1d2c/0x2a00 [ 217.303264][ T7849] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 217.303298][ T7849] ? __pfx___handle_mm_fault+0x10/0x10 [ 217.303339][ T7849] ? pte_offset_map_lock+0x174/0x320 [ 217.303370][ T7849] ? find_held_lock+0x2b/0x80 [ 217.303415][ T7849] ? follow_page_pte+0x4d0/0x13f0 [ 217.303455][ T7849] handle_mm_fault+0x36d/0xa20 [ 217.303503][ T7849] __get_user_pages+0x1178/0x32a0 [ 217.303553][ T7849] ? __pfx___get_user_pages+0x10/0x10 [ 217.303600][ T7849] populate_vma_page_range+0x267/0x3f0 [ 217.303641][ T7849] ? __pfx_populate_vma_page_range+0x10/0x10 [ 217.303677][ T7849] ? __pfx_find_vma_intersection+0x10/0x10 [ 217.303712][ T7849] ? do_mmap+0x93f/0x12f0 [ 217.303749][ T7849] __mm_populate+0x107/0x3a0 [ 217.303787][ T7849] ? __pfx___mm_populate+0x10/0x10 [ 217.303823][ T7849] ? up_write+0x28c/0x4f0 [ 217.303857][ T7849] vm_mmap_pgoff+0x37f/0x470 [ 217.303895][ T7849] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 217.303933][ T7849] ? do_futex+0x192/0x350 [ 217.303964][ T7849] ? __pfx_do_futex+0x10/0x10 [ 217.304003][ T7849] ksys_mmap_pgoff+0xe4/0x610 [ 217.304037][ T7849] ? __x64_sys_futex+0x358/0x4d0 [ 217.304065][ T7849] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 217.304097][ T7849] ? xfd_validate_state+0x129/0x190 [ 217.304134][ T7849] __x64_sys_mmap+0x125/0x190 [ 217.304174][ T7849] do_syscall_64+0x10b/0xf80 [ 217.304214][ T7849] ? clear_bhb_loop+0x40/0x90 [ 217.304246][ T7849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.304271][ T7849] RIP: 0033:0x7fa66299ce59 [ 217.304294][ T7849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.304320][ T7849] RSP: 002b:00007fa6638ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 217.304346][ T7849] RAX: ffffffffffffffda RBX: 00007fa662c15fa0 RCX: 00007fa66299ce59 [ 217.304365][ T7849] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 217.304382][ T7849] RBP: 00007fa662a32d6f R08: 0000000000000002 R09: 0000000000000000 [ 217.304399][ T7849] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 217.304415][ T7849] R13: 00007fa662c16038 R14: 00007fa662c15fa0 R15: 00007ffcccaad578 [ 217.304448][ T7849] [ 219.705196][ T7883] netlink: 342 bytes leftover after parsing attributes in process `syz.1.413'. [ 219.717547][ T7883] netlink: 342 bytes leftover after parsing attributes in process `syz.1.413'. [ 219.819443][ T7887] bond0: invalid ARP target specified [ 220.687030][ T7910] HfR: entered promiscuous mode [ 221.043919][ T7915] openvswitch: HfR: Dropping previously announced user features [ 222.186280][ T7948] bond0: invalid ARP target specified [ 222.874113][ T7958] HfR: entered promiscuous mode [ 225.035933][ T7994] bond0: invalid ARP target specified [ 226.294538][ T8014] openvswitch: HfR: Dropping previously announced user features [ 226.345203][ T8014] netlink: 12 bytes leftover after parsing attributes in process `syz.2.446'. [ 226.431673][ T8014] HfR: left promiscuous mode [ 227.846806][ T8046] mmap: syz.3.451 (8046) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 229.920985][ T8073] syz.1.458 uses obsolete (PF_INET,SOCK_PACKET) [ 230.527600][ T8098] HfR: entered promiscuous mode [ 230.755384][ T8107] random: crng reseeded on system resumption [ 230.791350][ T8103] Restarting kernel threads ... [ 230.818795][ T8103] Done restarting kernel threads. [ 233.930160][ T8109] Process accounting paused [ 234.128294][ T8150] HfR: entered promiscuous mode [ 234.768199][ T8141] Process accounting resumed [ 237.794007][ T8213] random: crng reseeded on system resumption [ 238.144083][ T8218] openvswitch: HfR: Dropping previously announced user features [ 239.470540][ T8257] openvswitch: HfR: Dropping previously announced user features [ 239.683113][ T8263] netlink: 'syz.3.504': attribute type 1 has an invalid length. [ 242.236494][ T8296] kexec: Could not allocate control_code_buffer [ 242.427615][ T8318] openvswitch: HfR: Dropping previously announced user features [ 243.844229][ T8349] netlink: 28 bytes leftover after parsing attributes in process `syz.2.522'. [ 244.021707][ T8349] bridge_slave_1: left allmulticast mode [ 244.052166][ T8349] bridge_slave_1: left promiscuous mode [ 244.066771][ T8349] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.134080][ T8349] bridge_slave_0: left allmulticast mode [ 244.165567][ T8349] bridge_slave_0: left promiscuous mode [ 244.194701][ T8349] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.692082][ T8352] NFSD: Failed to start, no listeners configured. [ 244.785138][ T8016] Bluetooth: hci2: unexpected event 0x1c length: 725 > 5 [ 245.518715][ T8382] HfR: entered promiscuous mode [ 245.553749][ T8382] netlink: 12 bytes leftover after parsing attributes in process `syz.3.528'. [ 245.574555][ T8382] HfR: left promiscuous mode [ 246.788887][ T8409] random: crng reseeded on system resumption [ 247.744725][ T8433] openvswitch: HfR: Dropping previously announced user features [ 248.393414][ T8455] netlink: 28 bytes leftover after parsing attributes in process `syz.3.547'. [ 248.440726][ T8455] bridge_slave_1: left allmulticast mode [ 248.470377][ T8455] bridge_slave_1: left promiscuous mode [ 248.498049][ T8455] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.564726][ T8455] bridge_slave_0: left allmulticast mode [ 248.599142][ T8455] bridge_slave_0: left promiscuous mode [ 248.615044][ T8455] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.829245][ T8465] block nbd2: not configured, cannot reconfigure [ 249.371242][ T8477] openvswitch: HfR: Dropping previously announced user features [ 249.399898][ T8477] netlink: 12 bytes leftover after parsing attributes in process `syz.1.551'. [ 249.417141][ T8477] HfR: left promiscuous mode [ 250.682878][ T8499] FAULT_INJECTION: forcing a failure. [ 250.682878][ T8499] name failslab, interval 1, probability 0, space 0, times 0 [ 250.744460][ T8499] CPU: 1 UID: 0 PID: 8499 Comm: syz.0.557 Tainted: G U L syzkaller #0 PREEMPT(full) [ 250.744489][ T8499] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 250.744494][ T8499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 250.744507][ T8499] Call Trace: [ 250.744513][ T8499] [ 250.744519][ T8499] dump_stack_lvl+0x100/0x190 [ 250.744540][ T8499] should_fail_ex.cold+0x5/0xa [ 250.744560][ T8499] should_failslab+0xc2/0x120 [ 250.744578][ T8499] __kmalloc_node_noprof+0xe6/0x850 [ 250.744591][ T8499] ? get_callchain_buffers+0x1e5/0x380 [ 250.744622][ T8499] get_callchain_buffers+0x1e5/0x380 [ 250.744641][ T8499] ? security_capable+0x80/0x260 [ 250.744665][ T8499] stack_map_alloc+0x316/0x610 [ 250.744684][ T8499] ? __pfx_stack_map_mem_usage+0x10/0x10 [ 250.744701][ T8499] map_create+0x84e/0x2bc0 [ 250.744723][ T8499] ? preempt_schedule_thunk+0x16/0x30 [ 250.744750][ T8499] ? __pfx_map_create+0x10/0x10 [ 250.744770][ T8499] ? __might_fault+0xc5/0x140 [ 250.744791][ T8499] ? __might_fault+0xc5/0x140 [ 250.744820][ T8499] __sys_bpf+0x2091/0x4b90 [ 250.744834][ T8499] ? futex_private_hash_put+0x107/0x1c0 [ 250.744852][ T8499] ? __pfx___sys_bpf+0x10/0x10 [ 250.744870][ T8499] ? __pfx_futex_wake+0x10/0x10 [ 250.744890][ T8499] ? ksys_write+0x190/0x250 [ 250.744912][ T8499] ? do_futex+0x192/0x350 [ 250.744938][ T8499] ? xfd_validate_state+0x129/0x190 [ 250.744959][ T8499] __x64_sys_bpf+0x7b/0xc0 [ 250.744974][ T8499] ? lockdep_hardirqs_on+0x78/0x100 [ 250.744997][ T8499] do_syscall_64+0x10b/0xf80 [ 250.745018][ T8499] ? clear_bhb_loop+0x40/0x90 [ 250.745036][ T8499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.745052][ T8499] RIP: 0033:0x7f41ce79ce59 [ 250.745065][ T8499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.745079][ T8499] RSP: 002b:00007f41cf5b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 250.745094][ T8499] RAX: ffffffffffffffda RBX: 00007f41cea16090 RCX: 00007f41ce79ce59 [ 250.745104][ T8499] RDX: 00000000000006f4 RSI: 0000200000000580 RDI: 0000000000000000 [ 250.745113][ T8499] RBP: 00007f41ce832d6f R08: 0000000000000000 R09: 0000000000000000 [ 250.745122][ T8499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.745130][ T8499] R13: 00007f41cea16128 R14: 00007f41cea16090 R15: 00007fff306bd948 [ 250.745150][ T8499] [ 251.367974][ T8509] kafs: addr_prefs: Invalid Command [ 251.689359][ T8512] usb usb24: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 252.132358][ T8531] can: request_module (can-proto-0) failed. [ 255.229228][ T8613] kafs: addr_prefs: Invalid Command [ 255.373258][ T8616] usb usb24: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 255.730922][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.741358][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.063440][ T8640] netlink: 20 bytes leftover after parsing attributes in process `syz.1.590'. [ 256.117636][ T8642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.590'. [ 257.387911][ T8667] openvswitch: HfR: Dropping previously announced user features [ 257.409989][ T8667] netlink: 12 bytes leftover after parsing attributes in process `syz.0.597'. [ 257.493889][ T8667] HfR: left promiscuous mode [ 261.428420][ T8754] kexec: Could not allocate control_code_buffer [ 261.780944][ T8776] HfR: entered promiscuous mode [ 261.808466][ T8776] netlink: 12 bytes leftover after parsing attributes in process `syz.1.614'. [ 261.872991][ T8776] HfR: left promiscuous mode [ 263.369462][ T8820] FAULT_INJECTION: forcing a failure. [ 263.369462][ T8820] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 263.383080][ T8820] CPU: 1 UID: 0 PID: 8820 Comm: syz.0.622 Tainted: G U L syzkaller #0 PREEMPT(full) [ 263.383131][ T8820] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 263.383141][ T8820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 263.383158][ T8820] Call Trace: [ 263.383168][ T8820] [ 263.383178][ T8820] dump_stack_lvl+0x100/0x190 [ 263.383214][ T8820] should_fail_ex.cold+0x5/0xa [ 263.383250][ T8820] _copy_to_user+0x32/0xd0 [ 263.383282][ T8820] simple_read_from_buffer+0xcb/0x170 [ 263.383319][ T8820] proc_fail_nth_read+0x1af/0x230 [ 263.383364][ T8820] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 263.383410][ T8820] ? rw_verify_area+0xce/0x6d0 [ 263.383439][ T8820] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 263.383481][ T8820] vfs_read+0x1e4/0xb30 [ 263.383517][ T8820] ? __pfx_vfs_read+0x10/0x10 [ 263.383553][ T8820] ? __fget_files+0x215/0x3d0 [ 263.383593][ T8820] ? __fget_files+0x21f/0x3d0 [ 263.383636][ T8820] ksys_read+0x12a/0x250 [ 263.383667][ T8820] ? __pfx_ksys_read+0x10/0x10 [ 263.383701][ T8820] ? rcu_is_watching+0x12/0xc0 [ 263.383740][ T8820] do_syscall_64+0x10b/0xf80 [ 263.383783][ T8820] ? clear_bhb_loop+0x40/0x90 [ 263.383816][ T8820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.383845][ T8820] RIP: 0033:0x7f41ce75d68e [ 263.383868][ T8820] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 263.383895][ T8820] RSP: 002b:00007f41cf5d3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 263.383922][ T8820] RAX: ffffffffffffffda RBX: 00007f41cf5d46c0 RCX: 00007f41ce75d68e [ 263.383941][ T8820] RDX: 000000000000000f RSI: 00007f41cf5d40a0 RDI: 0000000000000003 [ 263.383958][ T8820] RBP: 00007f41cf5d4090 R08: 0000000000000000 R09: 0000000000000000 [ 263.383975][ T8820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.383991][ T8820] R13: 00007f41cea16038 R14: 00007f41cea15fa0 R15: 00007fff306bd948 [ 263.384029][ T8820] [ 263.821942][ T8822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.623'. [ 264.020162][ T8791] Process accounting resumed [ 264.563544][ T8852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.637'. [ 264.707986][ T8855] bridge0: port 3(vlan1) entered blocking state [ 264.726443][ T8855] bridge0: port 3(vlan1) entered disabled state [ 264.732996][ T8855] vlan1: entered allmulticast mode [ 264.738808][ T8855] veth0_vlan: entered allmulticast mode [ 264.747277][ T8855] vlan1: entered promiscuous mode [ 264.758579][ T8855] bridge0: port 3(vlan1) entered blocking state [ 264.764966][ T8855] bridge0: port 3(vlan1) entered forwarding state [ 265.697890][ T8803] Process accounting paused [ 265.853597][ T8887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.647'. [ 266.112151][ T8893] HfR: entered promiscuous mode [ 266.142962][ T8893] netlink: 12 bytes leftover after parsing attributes in process `syz.3.649'. [ 266.153118][ T8878] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 266.174578][ T8878] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 266.185273][ T8893] HfR: left promiscuous mode [ 266.254951][ T8878] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 266.261668][ T8878] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 266.280647][ T8878] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 266.290303][ T8878] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 266.333024][ T8878] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 266.349604][ T8878] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 266.405897][ T8898] openvswitch: HfR: Dropping previously announced user features [ 266.448350][ T8898] netlink: 12 bytes leftover after parsing attributes in process `syz.2.652'. [ 266.500136][ T8898] HfR: left promiscuous mode [ 267.477019][ T8016] Bluetooth: hci1: command 0x0406 tx timeout [ 268.033238][ T8944] HfR: entered promiscuous mode [ 268.080154][ T8944] netlink: 12 bytes leftover after parsing attributes in process `syz.2.664'. [ 268.115633][ T8944] HfR: left promiscuous mode [ 268.278100][ T8016] Bluetooth: hci0: command 0x0406 tx timeout [ 268.356074][ T8016] Bluetooth: hci3: command 0x0406 tx timeout [ 268.363097][ T8016] Bluetooth: hci2: command 0x0406 tx timeout [ 268.380005][ T8951] HfR: entered promiscuous mode [ 268.392408][ T8952] netlink: 12 bytes leftover after parsing attributes in process `syz.1.667'. [ 268.433988][ T8952] HfR: left promiscuous mode [ 269.382472][ T8985] net_ratelimit: 47 callbacks suppressed [ 269.382494][ T8985] netlink: Invalid conntrack timeout [ 269.556041][ T8954] Bluetooth: hci1: command 0x0406 tx timeout [ 270.356038][ T8954] Bluetooth: hci0: command 0x0406 tx timeout [ 270.436266][ T8050] Bluetooth: hci3: command 0x0406 tx timeout [ 270.442369][ T8954] Bluetooth: hci2: command 0x0406 tx timeout [ 270.694776][ T9011] netlink: 12 bytes leftover after parsing attributes in process `syz.0.678'. [ 270.841209][ T9009] HfR: entered promiscuous mode [ 270.919551][ T9011] HfR: left promiscuous mode [ 271.169790][ T9018] netlink: 12 bytes leftover after parsing attributes in process `syz.0.681'. [ 271.198803][ T9017] HfR: entered promiscuous mode [ 271.304688][ T9018] HfR: left promiscuous mode [ 273.445813][ T9064] HfR: entered promiscuous mode [ 273.476374][ T9064] netlink: 12 bytes leftover after parsing attributes in process `syz.0.691'. [ 273.561860][ T9064] HfR: left promiscuous mode [ 276.424863][ T9107] HfR: entered promiscuous mode [ 276.496875][ T9107] netlink: 12 bytes leftover after parsing attributes in process `syz.2.702'. [ 276.536662][ T9107] HfR: left promiscuous mode [ 278.591538][ T9144] netlink: 36 bytes leftover after parsing attributes in process `syz.2.713'. [ 278.638711][ T29] audit: type=1800 audit(1779333601.391:7): pid=9144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.713" name="trace_pipe" dev="tracefs" ino=4123 res=0 errno=0 [ 278.900379][ T9147] FAULT_INJECTION: forcing a failure. [ 278.900379][ T9147] name failslab, interval 1, probability 0, space 0, times 0 [ 278.941602][ T9147] CPU: 0 UID: 0 PID: 9147 Comm: syz.0.714 Tainted: G U L syzkaller #0 PREEMPT(full) [ 278.941648][ T9147] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 278.941666][ T9147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 278.941682][ T9147] Call Trace: [ 278.941691][ T9147] [ 278.941701][ T9147] dump_stack_lvl+0x100/0x190 [ 278.941735][ T9147] should_fail_ex.cold+0x5/0xa [ 278.941769][ T9147] ? __alloc_empty_sheaf+0x35/0x50 [ 278.941807][ T9147] should_failslab+0xc2/0x120 [ 278.941842][ T9147] __kmalloc_noprof+0xe0/0x850 [ 278.941867][ T9147] ? __pcs_replace_empty_main+0x13a/0x650 [ 278.941912][ T9147] ? __pcs_replace_empty_main+0x13a/0x650 [ 278.941963][ T9147] __alloc_empty_sheaf+0x35/0x50 [ 278.942004][ T9147] __pcs_replace_empty_main+0x3e8/0x650 [ 278.942056][ T9147] kmem_cache_alloc_noprof+0x480/0x6e0 [ 278.942100][ T9147] ? new_userfaultfd+0x7d/0x400 [ 278.942139][ T9147] new_userfaultfd+0x7d/0x400 [ 278.942174][ T9147] __x64_sys_userfaultfd+0x4b/0xb0 [ 278.942211][ T9147] do_syscall_64+0x10b/0xf80 [ 278.942254][ T9147] ? clear_bhb_loop+0x40/0x90 [ 278.942289][ T9147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.942317][ T9147] RIP: 0033:0x7f41ce79ce59 [ 278.942340][ T9147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.942366][ T9147] RSP: 002b:00007f41cf5d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 278.942393][ T9147] RAX: ffffffffffffffda RBX: 00007f41cea15fa0 RCX: 00007f41ce79ce59 [ 278.942411][ T9147] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 278.942426][ T9147] RBP: 00007f41ce832d6f R08: 0000000000000000 R09: 0000000000000000 [ 278.942442][ T9147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.942458][ T9147] R13: 00007f41cea16038 R14: 00007f41cea15fa0 R15: 00007fff306bd948 [ 278.942493][ T9147] [ 279.542635][ T9153] HfR: entered promiscuous mode [ 279.584474][ T9153] netlink: 12 bytes leftover after parsing attributes in process `syz.1.712'. [ 279.625626][ T9153] HfR: left promiscuous mode [ 279.790246][ T9156] netlink: 342 bytes leftover after parsing attributes in process `syz.0.715'. [ 280.301805][ T9172] FAULT_INJECTION: forcing a failure. [ 280.301805][ T9172] name failslab, interval 1, probability 0, space 0, times 0 [ 280.337272][ T9172] CPU: 1 UID: 0 PID: 9172 Comm: syz.1.720 Tainted: G U L syzkaller #0 PREEMPT(full) [ 280.337325][ T9172] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 280.337336][ T9172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 280.337353][ T9172] Call Trace: [ 280.337362][ T9172] [ 280.337372][ T9172] dump_stack_lvl+0x100/0x190 [ 280.337408][ T9172] should_fail_ex.cold+0x5/0xa [ 280.337443][ T9172] ? __register_sysctl_table+0xac/0x1650 [ 280.337481][ T9172] should_failslab+0xc2/0x120 [ 280.337520][ T9172] __kmalloc_noprof+0xe0/0x850 [ 280.337556][ T9172] __register_sysctl_table+0xac/0x1650 [ 280.337592][ T9172] ? is_module_address+0x5f/0xf0 [ 280.337626][ T9172] ? __pfx___register_sysctl_table+0x10/0x10 [ 280.337663][ T9172] ? is_module_address+0x69/0xf0 [ 280.337688][ T9172] ? register_net_sysctl_sz+0x222/0x430 [ 280.337723][ T9172] __addrconf_sysctl_register+0x1a2/0x360 [ 280.337776][ T9172] ? __pfx___addrconf_sysctl_register+0x10/0x10 [ 280.337823][ T9172] ? __asan_memcpy+0x3c/0x60 [ 280.337870][ T9172] addrconf_init_net+0x5dd/0x8e0 [ 280.337913][ T9172] ? __pfx_addrconf_init_net+0x10/0x10 [ 280.337954][ T9172] ops_init+0x1e2/0x5f0 [ 280.337993][ T9172] setup_net+0x118/0x3a0 [ 280.338029][ T9172] ? __pfx_setup_net+0x10/0x10 [ 280.338065][ T9172] ? mutex_init_lockdep+0xf1/0x120 [ 280.338102][ T9172] copy_net_ns+0x46f/0x7c0 [ 280.338144][ T9172] create_new_namespaces+0x3ea/0xac0 [ 280.338190][ T9172] unshare_nsproxy_namespaces+0xf2/0x220 [ 280.338231][ T9172] ksys_unshare+0x438/0xab0 [ 280.338275][ T9172] ? __pfx_ksys_unshare+0x10/0x10 [ 280.338315][ T9172] ? xfd_validate_state+0x129/0x190 [ 280.338358][ T9172] __x64_sys_unshare+0x31/0x40 [ 280.338399][ T9172] do_syscall_64+0x10b/0xf80 [ 280.338441][ T9172] ? clear_bhb_loop+0x40/0x90 [ 280.338471][ T9172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.338500][ T9172] RIP: 0033:0x7f25ea79ce59 [ 280.338523][ T9172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.338548][ T9172] RSP: 002b:00007f25eb61d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 280.338575][ T9172] RAX: ffffffffffffffda RBX: 00007f25eaa15fa0 RCX: 00007f25ea79ce59 [ 280.338595][ T9172] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 280.338612][ T9172] RBP: 00007f25ea832d6f R08: 0000000000000000 R09: 0000000000000000 [ 280.338629][ T9172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.338643][ T9172] R13: 00007f25eaa16038 R14: 00007f25eaa15fa0 R15: 00007fff38b1cae8 [ 280.338680][ T9172] [ 282.529825][ T9221] random: crng reseeded on system resumption [ 283.901174][ T9247] openvswitch: netlink: Duplicate key (type 15). [ 285.445601][ T9291] FAULT_INJECTION: forcing a failure. [ 285.445601][ T9291] name failslab, interval 1, probability 0, space 0, times 0 [ 285.461390][ T9291] CPU: 1 UID: 0 PID: 9291 Comm: syz.2.745 Tainted: G U L syzkaller #0 PREEMPT(full) [ 285.461439][ T9291] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 285.461450][ T9291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 285.461466][ T9291] Call Trace: [ 285.461475][ T9291] [ 285.461485][ T9291] dump_stack_lvl+0x100/0x190 [ 285.461522][ T9291] should_fail_ex.cold+0x5/0xa [ 285.461559][ T9291] should_failslab+0xc2/0x120 [ 285.461593][ T9291] __kmalloc_cache_noprof+0x7a/0x6f0 [ 285.461631][ T9291] ? ip6addrlbl_add+0xe0/0xdb0 [ 285.461669][ T9291] ip6addrlbl_add+0xe0/0xdb0 [ 285.461710][ T9291] ip6addrlbl_net_init+0x10a/0x330 [ 285.461743][ T9291] ? __pfx_ip6addrlbl_net_init+0x10/0x10 [ 285.461776][ T9291] ops_init+0x1e2/0x5f0 [ 285.461814][ T9291] setup_net+0x118/0x3a0 [ 285.461849][ T9291] ? __pfx_setup_net+0x10/0x10 [ 285.461884][ T9291] ? mutex_init_lockdep+0xf1/0x120 [ 285.461921][ T9291] copy_net_ns+0x46f/0x7c0 [ 285.461962][ T9291] create_new_namespaces+0x3ea/0xac0 [ 285.462005][ T9291] unshare_nsproxy_namespaces+0xf2/0x220 [ 285.462046][ T9291] ksys_unshare+0x438/0xab0 [ 285.462090][ T9291] ? __pfx_ksys_unshare+0x10/0x10 [ 285.462130][ T9291] ? xfd_validate_state+0x129/0x190 [ 285.462174][ T9291] __x64_sys_unshare+0x31/0x40 [ 285.462210][ T9291] do_syscall_64+0x10b/0xf80 [ 285.462261][ T9291] ? clear_bhb_loop+0x40/0x90 [ 285.462297][ T9291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.462327][ T9291] RIP: 0033:0x7f8468f9ce59 [ 285.462350][ T9291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.462378][ T9291] RSP: 002b:00007f8469e71028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 285.462404][ T9291] RAX: ffffffffffffffda RBX: 00007f8469215fa0 RCX: 00007f8468f9ce59 [ 285.462423][ T9291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 285.462440][ T9291] RBP: 00007f8469032d6f R08: 0000000000000000 R09: 0000000000000000 [ 285.462456][ T9291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 285.462473][ T9291] R13: 00007f8469216038 R14: 00007f8469215fa0 R15: 00007ffdba5df0e8 [ 285.462509][ T9291] [ 285.920175][ T9298] HfR: entered promiscuous mode [ 285.936602][ T9298] netlink: 12 bytes leftover after parsing attributes in process `syz.3.746'. [ 285.946119][ T9298] HfR: left promiscuous mode [ 286.491411][ T9315] bond0: invalid ARP target specified [ 286.574594][ T9315] nbd: socks must be embedded in a SOCK_ITEM attr [ 286.619872][ T9316] netlink: 28 bytes leftover after parsing attributes in process `syz.3.749'. [ 286.638716][ T9315] block nbd0: shutting down sockets [ 287.557860][ T9336] HfR: entered promiscuous mode [ 287.576961][ T9336] netlink: 12 bytes leftover after parsing attributes in process `syz.0.757'. [ 287.586963][ T9336] HfR: left promiscuous mode [ 288.120583][ T9358] HfR: entered promiscuous mode [ 289.213503][ T9376] warning: `syz.2.766' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 289.226458][ T9385] FAULT_INJECTION: forcing a failure. [ 289.226458][ T9385] name failslab, interval 1, probability 0, space 0, times 0 [ 289.294701][ T9385] CPU: 0 UID: 0 PID: 9385 Comm: syz.2.766 Tainted: G U L syzkaller #0 PREEMPT(full) [ 289.294749][ T9385] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 289.294759][ T9385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 289.294777][ T9385] Call Trace: [ 289.294786][ T9385] [ 289.294796][ T9385] dump_stack_lvl+0x100/0x190 [ 289.294833][ T9385] should_fail_ex.cold+0x5/0xa [ 289.294869][ T9385] should_failslab+0xc2/0x120 [ 289.294902][ T9385] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 289.294948][ T9385] ? __d_alloc+0x34/0xa40 [ 289.294994][ T9385] __d_alloc+0x34/0xa40 [ 289.295035][ T9385] d_alloc+0x4a/0x1e0 [ 289.295076][ T9385] lookup_one_qstr_excl+0x171/0x250 [ 289.295123][ T9385] start_dirop+0x59/0xb0 [ 289.295156][ T9385] simple_start_creating+0xf9/0x110 [ 289.295191][ T9385] ? __pfx_simple_start_creating+0x10/0x10 [ 289.295227][ T9385] ? mntput+0x70/0xa0 [ 289.295256][ T9385] ? simple_pin_fs+0xa3/0x190 [ 289.295287][ T9385] debugfs_start_creating.part.0+0x82/0x170 [ 289.295333][ T9385] __debugfs_create_file+0xb3/0x4f0 [ 289.295382][ T9385] debugfs_create_file_full+0x41/0x60 [ 289.295430][ T9385] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 289.295468][ T9385] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 289.295504][ T9385] ? ida_alloc_range+0x70d/0x830 [ 289.295578][ T9385] ? lockdep_init_map_type+0x5c/0x250 [ 289.295614][ T9385] preinit_net.part.0+0x252/0x920 [ 289.295661][ T9385] copy_net_ns+0x339/0x7c0 [ 289.295703][ T9385] create_new_namespaces+0x3ea/0xac0 [ 289.295750][ T9385] unshare_nsproxy_namespaces+0xf2/0x220 [ 289.295791][ T9385] ksys_unshare+0x438/0xab0 [ 289.295834][ T9385] ? __pfx_ksys_unshare+0x10/0x10 [ 289.295873][ T9385] ? xfd_validate_state+0x129/0x190 [ 289.295900][ T9385] ? ksys_write+0x1ac/0x250 [ 289.295942][ T9385] __x64_sys_unshare+0x31/0x40 [ 289.295984][ T9385] do_syscall_64+0x10b/0xf80 [ 289.296021][ T9385] ? clear_bhb_loop+0x40/0x90 [ 289.296055][ T9385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.296084][ T9385] RIP: 0033:0x7f8468f9ce59 [ 289.296108][ T9385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.296135][ T9385] RSP: 002b:00007f8469e0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 289.296163][ T9385] RAX: ffffffffffffffda RBX: 00007f8469216270 RCX: 00007f8468f9ce59 [ 289.296182][ T9385] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 289.296198][ T9385] RBP: 00007f8469032d6f R08: 0000000000000000 R09: 0000000000000000 [ 289.296215][ T9385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 289.296232][ T9385] R13: 00007f8469216308 R14: 00007f8469216270 R15: 00007ffdba5df0e8 [ 289.296270][ T9385] [ 289.596759][ T9384] random: crng reseeded on system resumption [ 290.490462][ T9397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.768'. [ 291.947541][ T9418] random: crng reseeded on system resumption [ 292.539446][ T9425] HfR: entered promiscuous mode [ 294.422497][ T9458] bond0: invalid ARP target specified [ 294.476458][ T9458] nbd: socks must be embedded in a SOCK_ITEM attr [ 294.497020][ T9458] block nbd0: shutting down sockets [ 294.519470][ T9460] netlink: 28 bytes leftover after parsing attributes in process `syz.2.784'. [ 294.937446][ T9468] openvswitch: HfR: Dropping previously announced user features [ 295.039662][ T9469] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 295.680138][ T9486] random: crng reseeded on system resumption [ 296.496675][ T9499] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 11!phy1!netdev:wlan1!rc_rateid [ 297.173262][ T9503] sysfs: cannot create duplicate filename '/class/ieee80211/11!phy1!netdev:wlan1!rc_rateidx_mcs_mask' [ 297.216216][ T9503] CPU: 0 UID: 0 PID: 9503 Comm: syz.0.800 Tainted: G U L syzkaller #0 PREEMPT(full) [ 297.216266][ T9503] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 297.216279][ T9503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 297.216296][ T9503] Call Trace: [ 297.216305][ T9503] [ 297.216318][ T9503] dump_stack_lvl+0x100/0x190 [ 297.216356][ T9503] sysfs_warn_dup.cold+0x1c/0x28 [ 297.216400][ T9503] sysfs_do_create_link_sd+0x113/0x140 [ 297.216437][ T9503] sysfs_create_link+0x61/0xc0 [ 297.216469][ T9503] device_add+0x675/0x1950 [ 297.216513][ T9503] ? __pfx_device_add+0x10/0x10 [ 297.216550][ T9503] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 297.216595][ T9503] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 297.216637][ T9503] wiphy_register+0x1edd/0x2d90 [ 297.216675][ T9503] ? __rtnl_unlock+0xb9/0xf0 [ 297.216725][ T9503] ? __pfx_wiphy_register+0x10/0x10 [ 297.216765][ T9503] ? __asan_memset+0x23/0x50 [ 297.216881][ T9503] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 297.216927][ T9503] ieee80211_register_hw+0x3055/0x4570 [ 297.216980][ T9503] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 297.217048][ T9503] ? __pfx___debug_object_init+0x10/0x10 [ 297.217105][ T9503] ? find_held_lock+0x2b/0x80 [ 297.217146][ T9503] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 297.217189][ T9503] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 297.217228][ T9503] ? __hrtimer_setup+0x208/0x330 [ 297.217262][ T9503] mac80211_hwsim_new_radio+0x2a01/0x5aa0 [ 297.217321][ T9503] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 297.217360][ T9503] ? __asan_memcpy+0x3c/0x60 [ 297.217407][ T9503] hwsim_new_radio_nl+0xc5f/0x1370 [ 297.217441][ T9503] ? rcu_is_watching+0x12/0xc0 [ 297.217479][ T9503] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 297.217524][ T9503] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 297.217558][ T9503] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 297.217605][ T9503] genl_family_rcv_msg_doit+0x214/0x300 [ 297.217640][ T9503] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 297.217670][ T9503] ? genl_get_cmd+0x3e7/0x760 [ 297.217725][ T9503] ? bpf_lsm_capable+0x9/0x10 [ 297.217788][ T9503] ? security_capable+0x80/0x260 [ 297.217837][ T9503] ? ns_capable+0xd2/0xf0 [ 297.217876][ T9503] genl_rcv_msg+0x560/0x800 [ 297.217911][ T9503] ? __pfx_genl_rcv_msg+0x10/0x10 [ 297.217949][ T9503] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 297.217997][ T9503] netlink_rcv_skb+0x159/0x420 [ 297.218040][ T9503] ? __pfx_genl_rcv_msg+0x10/0x10 [ 297.218071][ T9503] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 297.218129][ T9503] ? netlink_deliver_tap+0x1ae/0xcc0 [ 297.218175][ T9503] genl_rcv+0x28/0x40 [ 297.218200][ T9503] netlink_unicast+0x585/0x850 [ 297.218248][ T9503] ? __pfx_netlink_unicast+0x10/0x10 [ 297.218301][ T9503] netlink_sendmsg+0x8b0/0xda0 [ 297.218351][ T9503] ? __pfx_netlink_sendmsg+0x10/0x10 [ 297.218391][ T9503] ? __import_iovec+0x1d2/0x640 [ 297.218427][ T9503] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 297.218478][ T9503] ____sys_sendmsg+0x9e1/0xb70 [ 297.218518][ T9503] ? __pfx_netlink_sendmsg+0x10/0x10 [ 297.218564][ T9503] ? __pfx_____sys_sendmsg+0x10/0x10 [ 297.218610][ T9503] ? rcu_is_watching+0x12/0xc0 [ 297.218644][ T9503] ? ___sys_sendmsg+0x19d/0x1e0 [ 297.218683][ T9503] ? kfree+0x1dd/0x6c0 [ 297.218729][ T9503] ___sys_sendmsg+0x190/0x1e0 [ 297.218789][ T9503] ? __pfx____sys_sendmsg+0x10/0x10 [ 297.218870][ T9503] ? __pfx___might_resched+0x10/0x10 [ 297.218913][ T9503] __sys_sendmmsg+0x205/0x430 [ 297.218953][ T9503] ? __pfx___sys_sendmmsg+0x10/0x10 [ 297.219018][ T9503] ? _raw_spin_unlock_irqrestore+0x31/0x80 [ 297.219065][ T9503] ? kcov_ioctl+0x16a/0x720 [ 297.219111][ T9503] __x64_sys_sendmmsg+0x9c/0x100 [ 297.219146][ T9503] ? lockdep_hardirqs_on+0x78/0x100 [ 297.219190][ T9503] do_syscall_64+0x10b/0xf80 [ 297.219232][ T9503] ? clear_bhb_loop+0x40/0x90 [ 297.219268][ T9503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.219298][ T9503] RIP: 0033:0x7f41ce79ce59 [ 297.219323][ T9503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 297.219351][ T9503] RSP: 002b:00007f41cf5b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 297.219378][ T9503] RAX: ffffffffffffffda RBX: 00007f41cea16090 RCX: 00007f41ce79ce59 [ 297.219398][ T9503] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 297.219431][ T9503] RBP: 00007f41ce832d6f R08: 0000000000000000 R09: 0000000000000000 [ 297.219449][ T9503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 297.219466][ T9503] R13: 00007f41cea16128 R14: 00007f41cea16090 R15: 00007fff306bd948 [ 297.219507][ T9503] syzkaller syzkaller login: [ 298.621956][ T9536] openvswitch: HfR: Dropping previously announced user features [ 299.003323][ T9543] vivid-008: ================= START STATUS ================= [ 299.028002][ T9543] vivid-008: ================== END STATUS ================== [ 299.535457][ T9568] netlink: 16 bytes leftover after parsing attributes in process `syz.0.807'. [ 300.947013][ T9576] kexec: Could not allocate control_code_buffer [ 301.785397][ T9614] openvswitch: HfR: Dropping previously announced user features [ 301.892022][ T9616] FAULT_INJECTION: forcing a failure. [ 301.892022][ T9616] name failslab, interval 1, probability 0, space 0, times 0 [ 301.925261][ T9616] CPU: 1 UID: 0 PID: 9616 Comm: syz.0.818 Tainted: G U L syzkaller #0 PREEMPT(full) [ 301.925319][ T9616] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 301.925332][ T9616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 301.925350][ T9616] Call Trace: [ 301.925359][ T9616] [ 301.925370][ T9616] dump_stack_lvl+0x100/0x190 [ 301.925406][ T9616] should_fail_ex.cold+0x5/0xa [ 301.925443][ T9616] should_failslab+0xc2/0x120 [ 301.925482][ T9616] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 301.925529][ T9616] ? __d_alloc+0x34/0xa40 [ 301.925575][ T9616] __d_alloc+0x34/0xa40 [ 301.925618][ T9616] d_alloc+0x4a/0x1e0 [ 301.925658][ T9616] lookup_one_qstr_excl+0x171/0x250 [ 301.925706][ T9616] start_dirop+0x59/0xb0 [ 301.925740][ T9616] simple_start_creating+0xf9/0x110 [ 301.925775][ T9616] ? __pfx_simple_start_creating+0x10/0x10 [ 301.925811][ T9616] ? mntput+0x70/0xa0 [ 301.925842][ T9616] ? simple_pin_fs+0xa3/0x190 [ 301.925874][ T9616] debugfs_start_creating.part.0+0x82/0x170 [ 301.925926][ T9616] __debugfs_create_file+0xb3/0x4f0 [ 301.925976][ T9616] debugfs_create_file_full+0x41/0x60 [ 301.926023][ T9616] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 301.926062][ T9616] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 301.926133][ T9616] ? lockdep_init_map_type+0x5c/0x250 [ 301.926170][ T9616] preinit_net.part.0+0x43b/0x920 [ 301.926210][ T9616] copy_net_ns+0x339/0x7c0 [ 301.926252][ T9616] create_new_namespaces+0x3ea/0xac0 [ 301.926307][ T9616] unshare_nsproxy_namespaces+0xf2/0x220 [ 301.926350][ T9616] ksys_unshare+0x438/0xab0 [ 301.926394][ T9616] ? __pfx_ksys_unshare+0x10/0x10 [ 301.926433][ T9616] ? xfd_validate_state+0x129/0x190 [ 301.926460][ T9616] ? ksys_write+0x1ac/0x250 [ 301.926498][ T9616] __x64_sys_unshare+0x31/0x40 [ 301.926538][ T9616] do_syscall_64+0x10b/0xf80 [ 301.926581][ T9616] ? clear_bhb_loop+0x40/0x90 [ 301.926618][ T9616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.926648][ T9616] RIP: 0033:0x7f41ce79ce59 [ 301.926673][ T9616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.926701][ T9616] RSP: 002b:00007f41cf592028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 301.926730][ T9616] RAX: ffffffffffffffda RBX: 00007f41cea16180 RCX: 00007f41ce79ce59 [ 301.926750][ T9616] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 301.926768][ T9616] RBP: 00007f41ce832d6f R08: 0000000000000000 R09: 0000000000000000 [ 301.926786][ T9616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 301.926804][ T9616] R13: 00007f41cea16218 R14: 00007f41cea16180 R15: 00007fff306bd948 [ 301.926843][ T9616] [ 303.139086][ T9643] dyndbg: bad flag-op , at start of  [ 303.156078][ T9643] dyndbg: flags parse failed [ 303.866208][ T9670] FAULT_INJECTION: forcing a failure. [ 303.866208][ T9670] name failslab, interval 1, probability 0, space 0, times 0 [ 303.891702][ T9670] CPU: 1 UID: 0 PID: 9670 Comm: syz.3.831 Tainted: G U L syzkaller #0 PREEMPT(full) [ 303.891748][ T9670] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 303.891758][ T9670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 303.891777][ T9670] Call Trace: [ 303.891786][ T9670] [ 303.891796][ T9670] dump_stack_lvl+0x100/0x190 [ 303.891831][ T9670] should_fail_ex.cold+0x5/0xa [ 303.891864][ T9670] should_failslab+0xc2/0x120 [ 303.891898][ T9670] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 303.891942][ T9670] ? mas_preallocate+0x1105/0x14a0 [ 303.891980][ T9670] mas_preallocate+0x1105/0x14a0 [ 303.892018][ T9670] ? __pfx_mas_preallocate+0x10/0x10 [ 303.892056][ T9670] ? vm_area_alloc+0x1f/0x160 [ 303.892105][ T9670] ? lockdep_init_map_type+0x5c/0x250 [ 303.892139][ T9670] __mmap_region+0x124a/0x2da0 [ 303.892191][ T9670] ? __pfx___mmap_region+0x10/0x10 [ 303.892246][ T9670] ? rcu_is_watching+0x12/0xc0 [ 303.892280][ T9670] ? trace_pelt_se_tp+0x13b/0x190 [ 303.892321][ T9670] ? __lock_acquire+0x4a5/0x2630 [ 303.892356][ T9670] ? __lock_acquire+0x4a5/0x2630 [ 303.892392][ T9670] ? __pfx_hugetlb_file_mmap_prepare_success+0x10/0x10 [ 303.892440][ T9670] ? find_held_lock+0x2b/0x80 [ 303.892493][ T9670] ? __kernel_text_address+0xd/0x30 [ 303.892525][ T9670] ? unwind_get_return_address+0x59/0xa0 [ 303.892565][ T9670] ? arch_stack_walk+0xa6/0xf0 [ 303.892661][ T9670] mmap_region+0x35d/0x620 [ 303.892693][ T9670] ? __pfx_mmap_region+0x10/0x10 [ 303.892726][ T9670] ? cap_mmap_addr+0x4b/0x120 [ 303.892769][ T9670] ? bpf_lsm_mmap_addr+0x9/0x30 [ 303.892796][ T9670] ? security_mmap_addr+0x71/0x1e0 [ 303.892831][ T9670] ? __get_unmapped_area+0x255/0x3e0 [ 303.892871][ T9670] do_mmap+0xc63/0x12f0 [ 303.892911][ T9670] ? __pfx_do_mmap+0x10/0x10 [ 303.892947][ T9670] ? __pfx_down_write_killable+0x10/0x10 [ 303.892987][ T9670] vm_mmap_pgoff+0x29e/0x470 [ 303.893031][ T9670] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 303.893065][ T9670] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 303.893134][ T9670] ksys_mmap_pgoff+0x285/0x610 [ 303.893174][ T9670] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 303.893209][ T9670] ? xfd_validate_state+0x129/0x190 [ 303.893248][ T9670] __x64_sys_mmap+0x125/0x190 [ 303.893284][ T9670] do_syscall_64+0x10b/0xf80 [ 303.893326][ T9670] ? clear_bhb_loop+0x40/0x90 [ 303.893362][ T9670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.893391][ T9670] RIP: 0033:0x7fa66299ce59 [ 303.893416][ T9670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.893444][ T9670] RSP: 002b:00007fa6638cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 303.893480][ T9670] RAX: ffffffffffffffda RBX: 00007fa662c16090 RCX: 00007fa66299ce59 [ 303.893500][ T9670] RDX: 00004000000000e3 RSI: 0000000000200004 RDI: 0000000000000000 [ 303.893518][ T9670] RBP: 00007fa662a32d6f R08: 000000000000000d R09: 0000300000000000 [ 303.893537][ T9670] R10: 0000000000040eb2 R11: 0000000000000246 R12: 0000000000000000 [ 303.893555][ T9670] R13: 00007fa662c16128 R14: 00007fa662c16090 R15: 00007ffcccaad578 [ 303.893594][ T9670] [ 304.328563][ T9676] netlink: del zone limit has 4 unknown bytes [ 304.486158][ T8954] Bluetooth: hci3: unexpected event 0x3e length: 508 > 260 [ 304.486201][ T8954] Bluetooth: hci3: unexpected subevent 0x02 length: 507 > 260 [ 304.502842][ T8954] Bluetooth: hci3: Dropping invalid advertising data [ 304.513470][ T8954] Bluetooth: hci3: unknown advertising packet type: 0xe9 [ 304.513523][ T8954] Bluetooth: hci3: Dropping invalid advertising data [ 304.534848][ T8954] Bluetooth: hci3: Malformed LE Event: 0x02 [ 305.388988][ T9698] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 305.989282][ T9717] debugfs: '11!phy1!netdev:wlan1!rc_rateidx_mcs_mask' already exists in 'ieee80211' [ 306.122005][ T9718] sysfs: cannot create duplicate filename '/class/ieee80211/11!phy1!netdev:wlan1!rc_rateidx_mcs_mask' [ 306.146641][ T9718] CPU: 1 UID: 0 PID: 9718 Comm: syz.3.841 Tainted: G U L syzkaller #0 PREEMPT(full) [ 306.146688][ T9718] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 306.146699][ T9718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 306.146713][ T9718] Call Trace: [ 306.146721][ T9718] [ 306.146731][ T9718] dump_stack_lvl+0x100/0x190 [ 306.146765][ T9718] sysfs_warn_dup.cold+0x1c/0x28 [ 306.146808][ T9718] sysfs_do_create_link_sd+0x113/0x140 [ 306.146853][ T9718] sysfs_create_link+0x61/0xc0 [ 306.146886][ T9718] device_add+0x675/0x1950 [ 306.146931][ T9718] ? __pfx_device_add+0x10/0x10 [ 306.146968][ T9718] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 306.147014][ T9718] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 306.147056][ T9718] wiphy_register+0x1edd/0x2d90 [ 306.147094][ T9718] ? __rtnl_unlock+0xb9/0xf0 [ 306.147143][ T9718] ? __pfx_wiphy_register+0x10/0x10 [ 306.147184][ T9718] ? __asan_memset+0x23/0x50 [ 306.147228][ T9718] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 306.147275][ T9718] ieee80211_register_hw+0x3055/0x4570 [ 306.147324][ T9718] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 306.147354][ T9718] ? __pfx___debug_object_init+0x10/0x10 [ 306.147408][ T9718] ? find_held_lock+0x2b/0x80 [ 306.147447][ T9718] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 306.147490][ T9718] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 306.147533][ T9718] ? __hrtimer_setup+0x208/0x330 [ 306.147568][ T9718] mac80211_hwsim_new_radio+0x2a01/0x5aa0 [ 306.147628][ T9718] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 306.147666][ T9718] ? __asan_memcpy+0x3c/0x60 [ 306.147714][ T9718] hwsim_new_radio_nl+0xc5f/0x1370 [ 306.147748][ T9718] ? rcu_is_watching+0x12/0xc0 [ 306.147784][ T9718] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 306.147855][ T9718] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 306.147888][ T9718] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 306.147929][ T9718] genl_family_rcv_msg_doit+0x214/0x300 [ 306.147963][ T9718] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 306.147996][ T9718] ? genl_get_cmd+0x3e7/0x760 [ 306.148051][ T9718] ? bpf_lsm_capable+0x9/0x10 [ 306.148083][ T9718] ? security_capable+0x80/0x260 [ 306.148125][ T9718] ? ns_capable+0xd2/0xf0 [ 306.148160][ T9718] genl_rcv_msg+0x560/0x800 [ 306.148190][ T9718] ? __pfx_genl_rcv_msg+0x10/0x10 [ 306.148221][ T9718] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 306.148270][ T9718] netlink_rcv_skb+0x159/0x420 [ 306.148313][ T9718] ? __pfx_genl_rcv_msg+0x10/0x10 [ 306.148344][ T9718] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 306.148404][ T9718] ? netlink_deliver_tap+0x1ae/0xcc0 [ 306.148450][ T9718] genl_rcv+0x28/0x40 [ 306.148474][ T9718] netlink_unicast+0x585/0x850 [ 306.148522][ T9718] ? __pfx_netlink_unicast+0x10/0x10 [ 306.148576][ T9718] netlink_sendmsg+0x8b0/0xda0 [ 306.148626][ T9718] ? __pfx_netlink_sendmsg+0x10/0x10 [ 306.148667][ T9718] ? __import_iovec+0x1d2/0x640 [ 306.148702][ T9718] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 306.148754][ T9718] ____sys_sendmsg+0x9e1/0xb70 [ 306.148795][ T9718] ? __pfx_netlink_sendmsg+0x10/0x10 [ 306.148842][ T9718] ? __pfx_____sys_sendmsg+0x10/0x10 [ 306.148898][ T9718] ? rcu_is_watching+0x12/0xc0 [ 306.148932][ T9718] ? ___sys_sendmsg+0x19d/0x1e0 [ 306.148974][ T9718] ? kfree+0x1dd/0x6c0 [ 306.149020][ T9718] ___sys_sendmsg+0x190/0x1e0 [ 306.149068][ T9718] ? __pfx____sys_sendmsg+0x10/0x10 [ 306.149147][ T9718] ? __pfx___might_resched+0x10/0x10 [ 306.149188][ T9718] __sys_sendmmsg+0x205/0x430 [ 306.149228][ T9718] ? __pfx___sys_sendmmsg+0x10/0x10 [ 306.149294][ T9718] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 306.149341][ T9718] ? kcov_ioctl+0x16a/0x720 [ 306.149388][ T9718] __x64_sys_sendmmsg+0x9c/0x100 [ 306.149424][ T9718] ? lockdep_hardirqs_on+0x78/0x100 [ 306.149467][ T9718] do_syscall_64+0x10b/0xf80 [ 306.149510][ T9718] ? clear_bhb_loop+0x40/0x90 [ 306.149546][ T9718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.149575][ T9718] RIP: 0033:0x7fa66299ce59 [ 306.149599][ T9718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.149627][ T9718] RSP: 002b:00007fa6638cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 306.149654][ T9718] RAX: ffffffffffffffda RBX: 00007fa662c16090 RCX: 00007fa66299ce59 [ 306.149673][ T9718] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 306.149688][ T9718] RBP: 00007fa662a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 306.149706][ T9718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 306.149722][ T9718] R13: 00007fa662c16128 R14: 00007fa662c16090 R15: 00007ffcccaad578 [ 306.149762][ T9718] [ 306.911487][ T9736] netlink: 'syz.1.846': attribute type 64 has an invalid length. [ 306.919306][ T9736] netlink: 74 bytes leftover after parsing attributes in process `syz.1.846'. [ 307.025346][ T9739] netlink: 'syz.0.845': attribute type 8 has an invalid length. syzkaller syzkaller login: [ 307.292640][ T9744] FAULT_INJECTION: forcing a failure. [ 307.292640][ T9744] name failslab, interval 1, probability 0, space 0, times 0 [ 307.399147][ T9744] CPU: 0 UID: 0 PID: 9744 Comm: syz.0.845 Tainted: G U L syzkaller #0 PREEMPT(full) [ 307.399184][ T9744] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 307.399190][ T9744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 307.399200][ T9744] Call Trace: [ 307.399205][ T9744] [ 307.399211][ T9744] dump_stack_lvl+0x100/0x190 [ 307.399233][ T9744] should_fail_ex.cold+0x5/0xa [ 307.399253][ T9744] should_failslab+0xc2/0x120 [ 307.399271][ T9744] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 307.399295][ T9744] ? __d_alloc+0x34/0xa40 [ 307.399318][ T9744] __d_alloc+0x34/0xa40 [ 307.399339][ T9744] d_alloc+0x4a/0x1e0 [ 307.399359][ T9744] lookup_one_qstr_excl+0x171/0x250 [ 307.399383][ T9744] start_dirop+0x59/0xb0 [ 307.399400][ T9744] simple_start_creating+0xf9/0x110 [ 307.399418][ T9744] ? __pfx_simple_start_creating+0x10/0x10 [ 307.399436][ T9744] ? mntput+0x70/0xa0 [ 307.399451][ T9744] ? simple_pin_fs+0xa3/0x190 [ 307.399467][ T9744] debugfs_start_creating.part.0+0x82/0x170 [ 307.399492][ T9744] __debugfs_create_file+0xb3/0x4f0 [ 307.399517][ T9744] debugfs_create_file_full+0x41/0x60 [ 307.399541][ T9744] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 307.399561][ T9744] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 307.399579][ T9744] ? ida_alloc_range+0x70d/0x830 [ 307.399618][ T9744] ? lockdep_init_map_type+0x5c/0x250 [ 307.399639][ T9744] preinit_net.part.0+0x252/0x920 [ 307.399674][ T9744] copy_net_ns+0x339/0x7c0 [ 307.399716][ T9744] create_new_namespaces+0x3ea/0xac0 [ 307.399753][ T9744] unshare_nsproxy_namespaces+0xf2/0x220 [ 307.399775][ T9744] ksys_unshare+0x438/0xab0 [ 307.399799][ T9744] ? __pfx_ksys_unshare+0x10/0x10 [ 307.399820][ T9744] ? xfd_validate_state+0x129/0x190 [ 307.399835][ T9744] ? ksys_write+0x1ac/0x250 [ 307.399858][ T9744] __x64_sys_unshare+0x31/0x40 [ 307.399878][ T9744] do_syscall_64+0x10b/0xf80 [ 307.399900][ T9744] ? clear_bhb_loop+0x40/0x90 [ 307.399918][ T9744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.399933][ T9744] RIP: 0033:0x7f41ce79ce59 [ 307.399947][ T9744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.399961][ T9744] RSP: 002b:00007f41cf5b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 307.399977][ T9744] RAX: ffffffffffffffda RBX: 00007f41cea16090 RCX: 00007f41ce79ce59 [ 307.399994][ T9744] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 307.400004][ T9744] RBP: 00007f41ce832d6f R08: 0000000000000000 R09: 0000000000000000 [ 307.400012][ T9744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 307.400021][ T9744] R13: 00007f41cea16128 R14: 00007f41cea16090 R15: 00007fff306bd948 [ 307.400041][ T9744] [ 308.643773][ T9776] debugfs: '11!phy1!netdev:wlan1!rc_rateidx_mcs_mask' already exists in 'ieee80211' [ 308.919829][ T9776] sysfs: cannot create duplicate filename '/class/ieee80211/11!phy1!netdev:wlan1!rc_rateidx_mcs_mask' [ 308.959671][ T9776] CPU: 1 UID: 0 PID: 9776 Comm: syz.1.853 Tainted: G U L syzkaller #0 PREEMPT(full) [ 308.959722][ T9776] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 308.959733][ T9776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 308.959750][ T9776] Call Trace: [ 308.959758][ T9776] [ 308.959769][ T9776] dump_stack_lvl+0x100/0x190 [ 308.959807][ T9776] sysfs_warn_dup.cold+0x1c/0x28 [ 308.959849][ T9776] sysfs_do_create_link_sd+0x113/0x140 [ 308.959885][ T9776] sysfs_create_link+0x61/0xc0 [ 308.959917][ T9776] device_add+0x675/0x1950 [ 308.959957][ T9776] ? __pfx_device_add+0x10/0x10 [ 308.959993][ T9776] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 308.960034][ T9776] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 308.960070][ T9776] wiphy_register+0x1edd/0x2d90 [ 308.960107][ T9776] ? __rtnl_unlock+0xb9/0xf0 [ 308.960153][ T9776] ? __pfx_wiphy_register+0x10/0x10 [ 308.960187][ T9776] ? __asan_memset+0x23/0x50 [ 308.960229][ T9776] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 308.960280][ T9776] ieee80211_register_hw+0x3055/0x4570 [ 308.960329][ T9776] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 308.960358][ T9776] ? __pfx___debug_object_init+0x10/0x10 [ 308.960409][ T9776] ? find_held_lock+0x2b/0x80 [ 308.960446][ T9776] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 308.960485][ T9776] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 308.960524][ T9776] ? __hrtimer_setup+0x208/0x330 [ 308.960549][ T9776] mac80211_hwsim_new_radio+0x2a01/0x5aa0 [ 308.960589][ T9776] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 308.960609][ T9776] ? __asan_memcpy+0x3c/0x60 [ 308.960634][ T9776] hwsim_new_radio_nl+0xc5f/0x1370 [ 308.960651][ T9776] ? rcu_is_watching+0x12/0xc0 [ 308.960670][ T9776] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 308.960693][ T9776] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 308.960709][ T9776] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 308.960729][ T9776] genl_family_rcv_msg_doit+0x214/0x300 [ 308.960746][ T9776] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 308.960761][ T9776] ? genl_get_cmd+0x3e7/0x760 [ 308.960788][ T9776] ? bpf_lsm_capable+0x9/0x10 [ 308.960805][ T9776] ? security_capable+0x80/0x260 [ 308.960830][ T9776] ? ns_capable+0xd2/0xf0 [ 308.960849][ T9776] genl_rcv_msg+0x560/0x800 [ 308.960867][ T9776] ? __pfx_genl_rcv_msg+0x10/0x10 [ 308.960882][ T9776] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 308.960905][ T9776] netlink_rcv_skb+0x159/0x420 [ 308.960927][ T9776] ? __pfx_genl_rcv_msg+0x10/0x10 [ 308.960943][ T9776] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 308.960972][ T9776] ? netlink_deliver_tap+0x1ae/0xcc0 [ 308.960996][ T9776] genl_rcv+0x28/0x40 [ 308.961008][ T9776] netlink_unicast+0x585/0x850 [ 308.961032][ T9776] ? __pfx_netlink_unicast+0x10/0x10 [ 308.961059][ T9776] netlink_sendmsg+0x8b0/0xda0 [ 308.961084][ T9776] ? __pfx_netlink_sendmsg+0x10/0x10 [ 308.961104][ T9776] ? __import_iovec+0x1d2/0x640 [ 308.961124][ T9776] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 308.961167][ T9776] ____sys_sendmsg+0x9e1/0xb70 [ 308.961189][ T9776] ? __pfx_netlink_sendmsg+0x10/0x10 [ 308.961212][ T9776] ? __pfx_____sys_sendmsg+0x10/0x10 [ 308.961236][ T9776] ? rcu_is_watching+0x12/0xc0 [ 308.961253][ T9776] ? ___sys_sendmsg+0x19d/0x1e0 [ 308.961273][ T9776] ? kfree+0x1dd/0x6c0 [ 308.961296][ T9776] ___sys_sendmsg+0x190/0x1e0 [ 308.961320][ T9776] ? __pfx____sys_sendmsg+0x10/0x10 [ 308.961367][ T9776] ? __pfx___might_resched+0x10/0x10 [ 308.961389][ T9776] __sys_sendmmsg+0x205/0x430 [ 308.961411][ T9776] ? __pfx___sys_sendmmsg+0x10/0x10 [ 308.961435][ T9776] ? __pfx_do_futex+0x10/0x10 [ 308.961461][ T9776] ? xfd_validate_state+0x129/0x190 [ 308.961482][ T9776] __x64_sys_sendmmsg+0x9c/0x100 [ 308.961499][ T9776] ? lockdep_hardirqs_on+0x78/0x100 [ 308.961521][ T9776] do_syscall_64+0x10b/0xf80 [ 308.961542][ T9776] ? clear_bhb_loop+0x40/0x90 [ 308.961568][ T9776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.961584][ T9776] RIP: 0033:0x7f25ea79ce59 [ 308.961597][ T9776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.961612][ T9776] RSP: 002b:00007f25eb61d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 308.961628][ T9776] RAX: ffffffffffffffda RBX: 00007f25eaa15fa0 RCX: 00007f25ea79ce59 [ 308.961638][ T9776] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 308.961648][ T9776] RBP: 00007f25ea832d6f R08: 0000000000000000 R09: 0000000000000000 [ 308.961657][ T9776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 308.961666][ T9776] R13: 00007f25eaa16038 R14: 00007f25eaa15fa0 R15: 00007fff38b1cae8 [ 308.961687][ T9776] syzkaller syzkaller login: [ 311.108795][ T9825] FAULT_INJECTION: forcing a failure. [ 311.108795][ T9825] name failslab, interval 1, probability 0, space 0, times 0 [ 311.151557][ T9825] CPU: 1 UID: 0 PID: 9825 Comm: syz.0.862 Tainted: G U L syzkaller #0 PREEMPT(full) [ 311.151606][ T9825] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 311.151617][ T9825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 311.151634][ T9825] Call Trace: [ 311.151642][ T9825] [ 311.151653][ T9825] dump_stack_lvl+0x100/0x190 [ 311.151688][ T9825] should_fail_ex.cold+0x5/0xa [ 311.151722][ T9825] should_failslab+0xc2/0x120 [ 311.151759][ T9825] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 311.151820][ T9825] ? vm_area_alloc+0x1f/0x160 [ 311.151866][ T9825] vm_area_alloc+0x1f/0x160 [ 311.151903][ T9825] __mmap_region+0x104d/0x2da0 [ 311.151951][ T9825] ? __pfx___mmap_region+0x10/0x10 [ 311.152002][ T9825] ? rcu_is_watching+0x12/0xc0 [ 311.152037][ T9825] ? trace_pelt_se_tp+0x13b/0x190 [ 311.152080][ T9825] ? __lock_acquire+0x4a5/0x2630 [ 311.152115][ T9825] ? __lock_acquire+0x4a5/0x2630 [ 311.152154][ T9825] ? __pfx_hugetlb_file_mmap_prepare_success+0x10/0x10 [ 311.152203][ T9825] ? find_held_lock+0x2b/0x80 [ 311.152256][ T9825] ? __kernel_text_address+0xd/0x30 [ 311.152287][ T9825] ? unwind_get_return_address+0x59/0xa0 [ 311.152334][ T9825] ? arch_stack_walk+0xa6/0xf0 [ 311.152430][ T9825] mmap_region+0x35d/0x620 [ 311.152461][ T9825] ? __pfx_mmap_region+0x10/0x10 [ 311.152493][ T9825] ? cap_mmap_addr+0x4b/0x120 [ 311.152536][ T9825] ? bpf_lsm_mmap_addr+0x9/0x30 [ 311.152563][ T9825] ? security_mmap_addr+0x71/0x1e0 [ 311.152598][ T9825] ? __get_unmapped_area+0x255/0x3e0 [ 311.152639][ T9825] do_mmap+0xc63/0x12f0 [ 311.152680][ T9825] ? __pfx_do_mmap+0x10/0x10 [ 311.152715][ T9825] ? __pfx_down_write_killable+0x10/0x10 [ 311.152753][ T9825] vm_mmap_pgoff+0x29e/0x470 [ 311.152796][ T9825] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 311.152830][ T9825] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 311.152890][ T9825] ksys_mmap_pgoff+0x285/0x610 [ 311.152929][ T9825] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 311.152962][ T9825] ? xfd_validate_state+0x129/0x190 [ 311.152999][ T9825] __x64_sys_mmap+0x125/0x190 [ 311.153034][ T9825] do_syscall_64+0x10b/0xf80 [ 311.153076][ T9825] ? clear_bhb_loop+0x40/0x90 [ 311.153111][ T9825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.153140][ T9825] RIP: 0033:0x7f41ce79ce59 [ 311.153164][ T9825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.153191][ T9825] RSP: 002b:00007f41cf5b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 311.153218][ T9825] RAX: ffffffffffffffda RBX: 00007f41cea16090 RCX: 00007f41ce79ce59 [ 311.153235][ T9825] RDX: 00004000000000e3 RSI: 0000000000200004 RDI: 0000000000000000 [ 311.153251][ T9825] RBP: 00007f41ce832d6f R08: 000000000000000d R09: 0000300000000000 [ 311.153268][ T9825] R10: 0000000000040eb2 R11: 0000000000000246 R12: 0000000000000000 [ 311.153286][ T9825] R13: 00007f41cea16128 R14: 00007f41cea16090 R15: 00007fff306bd948 [ 311.153332][ T9825] [ 311.515675][ T9823] netlink: del zone limit has 4 unknown bytes [ 311.586531][ T8954] Bluetooth: hci0: unexpected event 0x3e length: 508 > 260 [ 311.586569][ T8954] Bluetooth: hci0: unexpected subevent 0x02 length: 507 > 260 [ 311.602238][ T8954] Bluetooth: hci0: Dropping invalid advertising data [ 311.609802][ T8954] Bluetooth: hci0: unknown advertising packet type: 0xe9 [ 311.609841][ T8954] Bluetooth: hci0: Dropping invalid advertising data [ 311.624596][ T8954] Bluetooth: hci0: Malformed LE Event: 0x02 [ 313.123178][ T9877] netlink: del zone limit has 4 unknown bytes [ 313.134597][ T9882] nbd: must specify at least one socket [ 313.275375][ T8954] Bluetooth: hci1: unexpected event 0x3e length: 508 > 260 [ 313.275414][ T8954] Bluetooth: hci1: unexpected subevent 0x02 length: 507 > 260 [ 313.291508][ T8954] Bluetooth: hci1: Dropping invalid advertising data [ 313.298472][ T8954] Bluetooth: hci1: unknown advertising packet type: 0xe9 [ 313.298506][ T8954] Bluetooth: hci1: Dropping invalid advertising data [ 313.312417][ T8954] Bluetooth: hci1: Malformed LE Event: 0x02 [ 314.169196][ T9900] openvswitch: HfR: Dropping previously announced user features [ 315.642872][ T9948] netlink: 350 bytes leftover after parsing attributes in process `syz.0.895'. [ 315.691146][ T9948] netlink: 342 bytes leftover after parsing attributes in process `syz.0.895'. [ 315.740580][ T9951] snd_aloop snd_aloop.0: control 16781582:65539:11929:'x?F/zF˷fC:7 is already present [ 317.168576][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.180392][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.863679][T10016] nbd: must specify at least one socket [ 322.982867][T10088] zswap: compressor not available [ 322.997733][T10089] zswap: compressor not available [ 323.141324][T10103] nbd: must specify at least one socket [ 323.144376][T10095] vcan0: tx drop: invalid da for name 0x000000000000003f [ 326.299280][T10149] kexec: Could not allocate control_code_buffer [ 326.918135][T10167] openvswitch: HfR: Dropping previously announced user features [ 326.964696][T10167] netlink: 12 bytes leftover after parsing attributes in process `syz.1.945'. [ 327.003936][T10167] HfR: left promiscuous mode [ 328.202744][T10185] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 328.297621][T10185] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 328.343218][T10185] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 328.366045][T10195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.950'. [ 328.385038][T10185] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 328.727663][T10197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.950'. [ 329.796132][ T8954] Bluetooth: hci1: command 0x0406 tx timeout [ 329.964342][T10220] HfR: entered promiscuous mode [ 329.980726][T10220] netlink: 12 bytes leftover after parsing attributes in process `syz.3.956'. [ 329.997483][T10220] HfR: left promiscuous mode [ 330.356172][ T8050] Bluetooth: hci0: command 0x0406 tx timeout [ 330.362357][ T8954] Bluetooth: hci2: command 0x0406 tx timeout [ 330.436357][ T8954] Bluetooth: hci3: command 0x0406 tx timeout [ 330.479590][ T8954] Bluetooth: hci0: unexpected subevent 0x0e length: 3 < 15 [ 331.725141][T10268] HfR: entered promiscuous mode [ 331.761433][T10268] netlink: 12 bytes leftover after parsing attributes in process `syz.0.967'. [ 331.771588][T10268] HfR: left promiscuous mode [ 331.802715][ T8954] Bluetooth: hci3: unexpected event 0x01 length: 124 > 1 [ 332.668387][T10291] ubi0: attaching mtd0 [ 332.808594][T10291] ubi0: scanning is finished [ 332.821839][T10291] ubi0: empty MTD device detected [ 332.919456][T10293] FAULT_INJECTION: forcing a failure. [ 332.919456][T10293] name failslab, interval 1, probability 0, space 0, times 0 [ 332.993109][T10290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.973'. [ 333.003220][T10293] CPU: 1 UID: 0 PID: 10293 Comm: syz.3.974 Tainted: G U L syzkaller #0 PREEMPT(full) [ 333.003250][T10293] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 333.003256][T10293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 333.003265][T10293] Call Trace: [ 333.003271][T10293] [ 333.003277][T10293] dump_stack_lvl+0x100/0x190 [ 333.003305][T10293] should_fail_ex.cold+0x5/0xa [ 333.003325][T10293] should_failslab+0xc2/0x120 [ 333.003343][T10293] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 333.003367][T10293] ? alloc_inode+0x183/0x250 [ 333.003388][T10293] ? stashed_dentry_get+0x10a/0x2c0 [ 333.003407][T10293] ? stashed_dentry_get+0x10a/0x2c0 [ 333.003430][T10293] alloc_inode+0x183/0x250 [ 333.003452][T10293] path_from_stashed+0x25b/0x750 [ 333.003475][T10293] ns_get_path+0x60/0x80 [ 333.003494][T10293] proc_ns_get_link+0x121/0x230 [ 333.003510][T10293] ? __pfx_proc_ns_get_link+0x10/0x10 [ 333.003528][T10293] ? atime_needs_update+0x8b/0x6b0 [ 333.003544][T10293] pick_link+0xd17/0x13c0 [ 333.003559][T10293] ? __pfx_proc_ns_get_link+0x10/0x10 [ 333.003577][T10293] step_into_slowpath+0x9ba/0xf90 [ 333.003596][T10293] ? __pfx_step_into_slowpath+0x10/0x10 [ 333.003611][T10293] ? find_held_lock+0x2b/0x80 [ 333.003639][T10293] path_openat+0xf95/0x31a0 [ 333.003664][T10293] ? __pfx_path_openat+0x10/0x10 [ 333.003688][T10293] do_file_open+0x20e/0x430 [ 333.003707][T10293] ? __pfx_do_file_open+0x10/0x10 [ 333.003739][T10293] ? alloc_fd+0x476/0x790 [ 333.003758][T10293] ? do_getname+0x191/0x390 [ 333.003781][T10293] do_sys_openat2+0x10d/0x1e0 [ 333.003803][T10293] ? __pfx_do_sys_openat2+0x10/0x10 [ 333.003831][T10293] __x64_sys_openat+0x12d/0x210 [ 333.003854][T10293] ? __pfx___x64_sys_openat+0x10/0x10 [ 333.003879][T10293] ? rcu_is_watching+0x12/0xc0 [ 333.003899][T10293] do_syscall_64+0x10b/0xf80 [ 333.003921][T10293] ? clear_bhb_loop+0x40/0x90 [ 333.003938][T10293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.003953][T10293] RIP: 0033:0x7fa66295d68e [ 333.003966][T10293] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 333.003980][T10293] RSP: 002b:00007fa6638ebec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 333.004002][T10293] RAX: ffffffffffffffda RBX: 00007fa6638ec6c0 RCX: 00007fa66295d68e [ 333.004020][T10293] RDX: 0000000000000002 RSI: 00007fa6638ebf90 RDI: ffffffffffffff9c [ 333.004038][T10293] RBP: 00007fa662a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 333.004048][T10293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 333.004057][T10293] R13: 00007fa662c16038 R14: 00007fa662c15fa0 R15: 00007ffcccaad578 [ 333.004076][T10293] [ 333.960455][T10291] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 334.135075][T10304] netlink: 338 bytes leftover after parsing attributes in process `syz.3.976'. [ 334.722458][T10321] openvswitch: HfR: Dropping previously announced user features [ 334.774953][T10324] netlink: 12 bytes leftover after parsing attributes in process `syz.2.979'. [ 334.826608][T10324] HfR: left promiscuous mode [ 336.694964][T10385] EXT4-fs error (device sda1): trigger_test_error:130: comm syz.3.987: 1 [ 336.848843][T10394] EXT4-fs error (device sda1): trigger_test_error:130: comm syz.3.987: XnpRN8s>)>bZL'`l@*^o Q;CL"vC [ 337.269279][T10400] bridge0: port 3(team0) entered blocking state [ 337.289079][T10400] bridge0: port 3(team0) entered disabled state [ 337.310360][T10400] team0: entered allmulticast mode [ 337.316965][T10400] team_slave_0: entered allmulticast mode [ 337.329203][T10400] team_slave_1: entered allmulticast mode [ 337.360456][T10400] team0: entered promiscuous mode [ 337.366649][T10400] team_slave_0: entered promiscuous mode [ 337.392262][T10400] team_slave_1: entered promiscuous mode [ 337.414029][T10400] bridge0: port 3(team0) entered blocking state [ 337.420587][T10400] bridge0: port 3(team0) entered forwarding state [ 338.244566][ T8954] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 340.276291][ T8050] Bluetooth: hci3: command 0x0406 tx timeout [ 340.618014][T10486] HfR: entered promiscuous mode [ 341.823843][T10514] ubi0: attaching mtd0 [ 341.899942][T10514] ubi0: scanning is finished [ 342.178415][T10514] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 342.187511][T10514] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 342.240772][T10514] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 342.269029][T10514] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 342.285629][T10514] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 342.311934][T10514] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 342.337152][T10514] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 4227758412 [ 342.358536][ T8954] Bluetooth: hci3: command 0x0406 tx timeout [ 342.367203][T10514] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 342.450046][T10523] ubi0: background thread "ubi_bgt0d" started, PID 10523 [ 342.526914][T10518] ubi0: detaching mtd0 [ 342.611152][T10518] ubi0: mtd0 is detached [ 342.755787][T10537] HfR: entered promiscuous mode [ 342.800386][T10537] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1027'. [ 342.821858][T10537] HfR: left promiscuous mode [ 343.251893][T10541] can: request_module (can-proto-0) failed. [ 344.918429][T10578] bridge0: port 4(team0) entered blocking state [ 344.918675][T10578] bridge0: port 4(team0) entered disabled state [ 344.918783][T10578] team0: entered allmulticast mode [ 344.918797][T10578] team_slave_0: entered allmulticast mode [ 344.918809][T10578] team_slave_1: entered allmulticast mode [ 344.938248][T10578] team0: entered promiscuous mode [ 344.938265][T10578] team_slave_0: entered promiscuous mode [ 344.938387][T10578] team_slave_1: entered promiscuous mode [ 344.938852][T10578] bridge0: port 4(team0) entered blocking state [ 344.938924][T10578] bridge0: port 4(team0) entered forwarding state [ 345.365290][T10587] random: crng reseeded on system resumption [ 345.942554][T10598] HfR: entered promiscuous mode [ 346.048104][T10603] ubi0: attaching mtd0 [ 346.067447][T10603] ubi0: scanning is finished [ 346.438235][T10603] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 346.465916][T10603] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 346.526072][T10603] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 346.563360][T10603] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 346.600948][T10603] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 346.609564][T10603] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 346.619572][T10603] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 4227758412 [ 346.639479][T10603] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 346.651118][T10607] ubi0: detaching mtd0 [ 346.753951][T10607] ubi0: mtd0 is detached [ 346.855158][T10626] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1046'. [ 346.942246][T10625] HfR: entered promiscuous mode [ 347.053450][T10626] HfR: left promiscuous mode [ 348.372011][T10650] HfR: entered promiscuous mode [ 348.832253][T10661] can: request_module (can-proto-0) failed. [ 349.789159][T10638] kexec: Could not allocate control_code_buffer [ 350.040488][T10672] openvswitch: HfR: Dropping previously announced user features [ 350.065389][T10672] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1066'. [ 350.115763][T10672] HfR: left promiscuous mode [ 350.132168][T10679] ubi0: attaching mtd0 [ 350.181143][T10679] ubi0: scanning is finished [ 350.432104][T10679] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 350.440592][T10679] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 350.459397][T10679] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 350.469051][T10679] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 350.485816][T10679] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 350.505036][T10679] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 350.518296][T10679] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 4227758412 [ 350.532316][T10679] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 350.546311][T10681] ubi0: detaching mtd0 [ 350.552280][T10691] ubi0: background thread "ubi_bgt0d" started, PID 10691 [ 350.602945][T10681] ubi0: mtd0 is detached [ 351.336568][T10699] openvswitch: HfR: Dropping previously announced user features [ 352.247297][T10708] can: request_module (can-proto-0) failed. [ 353.229857][T10740] FAULT_INJECTION: forcing a failure. [ 353.229857][T10740] name failslab, interval 1, probability 0, space 0, times 0 [ 353.271479][ T8050] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 353.305595][T10740] CPU: 0 UID: 0 PID: 10740 Comm: syz.3.1072 Tainted: G U L syzkaller #0 PREEMPT(full) [ 353.305636][T10740] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 353.305645][T10740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 353.305665][T10740] Call Trace: [ 353.305674][T10740] [ 353.305683][T10740] dump_stack_lvl+0x100/0x190 [ 353.305715][T10740] should_fail_ex.cold+0x5/0xa [ 353.305737][T10740] ? get_mem_cgroup_from_objcg+0x13f/0x620 [ 353.305775][T10740] should_failslab+0xc2/0x120 [ 353.305803][T10740] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 353.305843][T10740] ? zswap_store+0xc6d/0x2e70 [ 353.305883][T10740] zswap_store+0xc6d/0x2e70 [ 353.305927][T10740] ? rmap_walk_anon+0x561/0x870 [ 353.305966][T10740] ? __pfx_zswap_store+0x10/0x10 [ 353.306002][T10740] ? find_held_lock+0x2b/0x80 [ 353.306036][T10740] ? folio_free_swap+0x60a/0x9f0 [ 353.306066][T10740] ? folio_free_swap+0x60a/0x9f0 [ 353.306103][T10740] ? folio_free_swap+0x3f/0x9f0 [ 353.306143][T10740] swap_writeout+0x47e/0x14f0 [ 353.306196][T10740] shrink_folio_list+0x51c5/0x60c0 [ 353.306253][T10740] ? __pfx_shrink_folio_list+0x10/0x10 [ 353.306290][T10740] ? trace_pelt_se_tp+0x13b/0x190 [ 353.306324][T10740] ? do_raw_spin_lock+0x128/0x260 [ 353.306362][T10740] ? __lock_acquire+0x4a5/0x2630 [ 353.306387][T10740] ? do_raw_spin_unlock+0x145/0x1e0 [ 353.306419][T10740] ? debug_object_assert_init+0x1c4/0x300 [ 353.306483][T10740] ? __lock_acquire+0x4a5/0x2630 [ 353.306509][T10740] ? css_rstat_updated+0x1ce/0x5a0 [ 353.306552][T10740] ? __pfx_css_rstat_updated+0x10/0x10 [ 353.306594][T10740] reclaim_folio_list+0xdc/0x5e0 [ 353.306638][T10740] ? __pfx_reclaim_folio_list+0x10/0x10 [ 353.306674][T10740] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 353.306732][T10740] ? lru_gen_update_size+0x431/0xe20 [ 353.306775][T10740] ? lru_gen_del_folio+0x382/0x5f0 [ 353.306811][T10740] reclaim_pages+0x428/0x5e0 [ 353.306854][T10740] ? __pfx_reclaim_pages+0x10/0x10 [ 353.306892][T10740] ? find_held_lock+0x2b/0x80 [ 353.306928][T10740] ? madvise_cold_or_pageout_pte_range+0xb49/0x2620 [ 353.306970][T10740] madvise_cold_or_pageout_pte_range+0x155c/0x2620 [ 353.307022][T10740] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 353.307059][T10740] ? __lock_acquire+0x4a5/0x2630 [ 353.307083][T10740] ? css_rstat_updated+0x1ce/0x5a0 [ 353.307126][T10740] ? __pfx_css_rstat_updated+0x10/0x10 [ 353.307177][T10740] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 353.307217][T10740] walk_pgd_range+0xc1a/0x1dd0 [ 353.307254][T10740] ? rcu_read_unlock+0x17/0x60 [ 353.307300][T10740] ? __pfx_walk_pgd_range+0x10/0x10 [ 353.307330][T10740] ? folios_put_refs+0x716/0xa90 [ 353.307361][T10740] __walk_page_range+0x163/0x820 [ 353.307392][T10740] ? find_held_lock+0x2b/0x80 [ 353.307439][T10740] walk_page_range_vma_unsafe+0x209/0x8f0 [ 353.307474][T10740] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 353.307512][T10740] ? find_held_lock+0x2b/0x80 [ 353.307545][T10740] ? mlock_drain_local+0x254/0x4e0 [ 353.307570][T10740] ? mlock_drain_local+0x254/0x4e0 [ 353.307601][T10740] walk_page_range_vma+0x63/0x90 [ 353.307633][T10740] madvise_pageout+0x259/0x540 [ 353.307668][T10740] ? __pfx_madvise_pageout+0x10/0x10 [ 353.307720][T10740] ? find_held_lock+0x2b/0x80 [ 353.307753][T10740] ? mt_find+0x687/0x8e0 [ 353.307784][T10740] madvise_vma_behavior+0x4f7/0x2200 [ 353.307822][T10740] ? mt_find+0x45e/0x8e0 [ 353.307848][T10740] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 353.307885][T10740] ? __pfx_mt_find+0x10/0x10 [ 353.307918][T10740] ? find_vma_prev+0xd8/0x150 [ 353.307948][T10740] ? _kstrtoull+0x13c/0x1f0 [ 353.307991][T10740] ? find_vma+0xbf/0x140 [ 353.308020][T10740] ? __pfx_find_vma+0x10/0x10 [ 353.308058][T10740] madvise_walk_vmas+0x2fe/0xa90 [ 353.308101][T10740] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 353.308147][T10740] madvise_do_behavior+0x1ea/0x510 [ 353.308192][T10740] ? __pfx_madvise_do_behavior+0x10/0x10 [ 353.308230][T10740] ? down_read+0x13b/0x450 [ 353.308276][T10740] do_madvise+0x195/0x240 [ 353.308311][T10740] ? __pfx_do_madvise+0x10/0x10 [ 353.308344][T10740] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 353.308369][T10740] ? kernel_write+0x5e3/0x6c0 [ 353.308421][T10740] ? ksys_write+0x1ac/0x250 [ 353.308451][T10740] ? __pfx_ksys_write+0x10/0x10 [ 353.308488][T10740] __x64_sys_madvise+0xa9/0x110 [ 353.308524][T10740] ? lockdep_hardirqs_on+0x78/0x100 [ 353.308565][T10740] do_syscall_64+0x10b/0xf80 [ 353.308604][T10740] ? clear_bhb_loop+0x40/0x90 [ 353.308638][T10740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.308667][T10740] RIP: 0033:0x7fa66299ce59 [ 353.308691][T10740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.308718][T10740] RSP: 002b:00007fa663889028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 353.308745][T10740] RAX: ffffffffffffffda RBX: 00007fa662c16270 RCX: 00007fa66299ce59 [ 353.308764][T10740] RDX: 0000000000000015 RSI: ffffffffffff0001 RDI: 0000000000000000 [ 353.308781][T10740] RBP: 00007fa663889090 R08: 0000000000000000 R09: 0000000000000000 [ 353.308798][T10740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.308815][T10740] R13: 00007fa662c16308 R14: 00007fa662c16270 R15: 00007ffcccaad578 [ 353.308853][T10740] [ 354.102645][T10756] openvswitch: HfR: Dropping previously announced user features [ 355.316044][ T8954] Bluetooth: hci0: command 0x0406 tx timeout [ 355.541593][T10790] FAULT_INJECTION: forcing a failure. [ 355.541593][T10790] name failslab, interval 1, probability 0, space 0, times 0 [ 355.575639][T10790] CPU: 1 UID: 0 PID: 10790 Comm: syz.0.1085 Tainted: G U L syzkaller #0 PREEMPT(full) [ 355.575689][T10790] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 355.575699][T10790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 355.575716][T10790] Call Trace: [ 355.575725][T10790] [ 355.575740][T10790] dump_stack_lvl+0x100/0x190 [ 355.575769][T10790] should_fail_ex.cold+0x5/0xa [ 355.575790][T10790] should_failslab+0xc2/0x120 [ 355.575808][T10790] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 355.575831][T10790] ? security_file_alloc+0x34/0x2c0 [ 355.575849][T10790] ? trace_kmem_cache_alloc+0xd5/0x100 [ 355.575869][T10790] security_file_alloc+0x34/0x2c0 [ 355.575887][T10790] init_file+0x95/0x480 [ 355.575908][T10790] alloc_empty_file+0x79/0x1c0 [ 355.575953][T10790] path_openat+0xe8/0x31a0 [ 355.575985][T10790] ? kasan_save_stack+0x3f/0x50 [ 355.576008][T10790] ? kasan_save_stack+0x30/0x50 [ 355.576033][T10790] ? kasan_save_track+0x14/0x30 [ 355.576060][T10790] ? __kasan_slab_alloc+0x89/0x90 [ 355.576089][T10790] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 355.576134][T10790] ? do_getname+0x35/0x390 [ 355.576172][T10790] ? do_sys_openat2+0xc5/0x1e0 [ 355.576215][T10790] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.576248][T10790] ? __pfx_path_openat+0x10/0x10 [ 355.576295][T10790] do_file_open+0x20e/0x430 [ 355.576333][T10790] ? __pfx_do_file_open+0x10/0x10 [ 355.576393][T10790] ? alloc_fd+0x476/0x790 [ 355.576431][T10790] ? do_getname+0x191/0x390 [ 355.576475][T10790] do_sys_openat2+0x10d/0x1e0 [ 355.576518][T10790] ? __pfx_do_sys_openat2+0x10/0x10 [ 355.576573][T10790] __x64_sys_openat+0x12d/0x210 [ 355.576618][T10790] ? __pfx___x64_sys_openat+0x10/0x10 [ 355.576669][T10790] ? rcu_is_watching+0x12/0xc0 [ 355.576708][T10790] do_syscall_64+0x10b/0xf80 [ 355.576751][T10790] ? clear_bhb_loop+0x40/0x90 [ 355.576783][T10790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.576813][T10790] RIP: 0033:0x7f41ce79ce59 [ 355.576837][T10790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.576865][T10790] RSP: 002b:00007f41cf5d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 355.576893][T10790] RAX: ffffffffffffffda RBX: 00007f41cea15fa0 RCX: 00007f41ce79ce59 [ 355.576913][T10790] RDX: 000000000014f602 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 355.576931][T10790] RBP: 00007f41ce832d6f R08: 0000000000000000 R09: 0000000000000000 [ 355.576956][T10790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 355.576973][T10790] R13: 00007f41cea16038 R14: 00007f41cea15fa0 R15: 00007fff306bd948 [ 355.577012][T10790] [ 356.268901][T10795] HfR: entered promiscuous mode [ 356.603947][T10801] MTRR 1 not used [ 356.613918][T10800] MTRR 1 not used [ 357.282960][T10824] random: crng reseeded on system resumption [ 357.396850][ T8954] Bluetooth: hci0: command 0x0406 tx timeout [ 360.462603][ T8050] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 362.095376][T10902] openvswitch: HfR: Dropping previously announced user features [ 362.373698][T10904] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1109'. [ 362.517864][ T8954] Bluetooth: hci3: command 0x0406 tx timeout [ 363.145259][T10919] openvswitch: HfR: Dropping previously announced user features [ 364.538110][ T8954] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 364.596256][T10948] Bluetooth: hci3: command 0x0406 tx timeout [ 366.597403][ T8050] Bluetooth: hci1: command 0x0406 tx timeout [ 367.219885][ T8050] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 368.691648][ T8050] Bluetooth: hci1: command 0x0406 tx timeout [ 369.316629][T10948] Bluetooth: hci2: command 0x0406 tx timeout [ 369.382366][T11050] random: crng reseeded on system resumption [ 369.574793][T11050] hub 1-0:1.0: USB hub found [ 369.588576][T11050] hub 1-0:1.0: 1 port detected [ 371.402785][T10948] Bluetooth: hci2: command 0x0406 tx timeout [ 374.136320][T11163] random: crng reseeded on system resumption [ 374.194756][T11163] hub 1-0:1.0: USB hub found [ 374.202075][T11163] hub 1-0:1.0: 1 port detected [ 375.004973][T10948] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 375.104112][T11182] FAULT_INJECTION: forcing a failure. [ 375.104112][T11182] name failslab, interval 1, probability 0, space 0, times 0 [ 375.180982][T11182] CPU: 0 UID: 0 PID: 11182 Comm: syz.0.1173 Tainted: G U L syzkaller #0 PREEMPT(full) [ 375.181030][T11182] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 375.181040][T11182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 375.181057][T11182] Call Trace: [ 375.181065][T11182] [ 375.181076][T11182] dump_stack_lvl+0x100/0x190 [ 375.181111][T11182] should_fail_ex.cold+0x5/0xa [ 375.181146][T11182] should_failslab+0xc2/0x120 [ 375.181179][T11182] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 375.181222][T11182] ? __kernfs_new_node+0xd2/0x9f0 [ 375.181259][T11182] __kernfs_new_node+0xd2/0x9f0 [ 375.181291][T11182] ? __pfx___kernfs_new_node+0x10/0x10 [ 375.181333][T11182] ? find_held_lock+0x2b/0x80 [ 375.181369][T11182] ? kernfs_root+0xee/0x2a0 [ 375.181398][T11182] ? kernfs_root+0xee/0x2a0 [ 375.181438][T11182] kernfs_new_node+0x11b/0x1a0 [ 375.181481][T11182] __kernfs_create_file+0x53/0x350 [ 375.181528][T11182] sysfs_add_file_mode_ns+0x207/0x3c0 [ 375.181567][T11182] sysfs_merge_group+0x194/0x340 [ 375.181602][T11182] ? __pfx_sysfs_merge_group+0x10/0x10 [ 375.181645][T11182] ? bus_add_device+0x368/0x6b0 [ 375.181677][T11182] ? __pfx_bus_add_device+0x10/0x10 [ 375.181703][T11182] ? __pfx_dev_add_physical_location+0x10/0x10 [ 375.181753][T11182] dpm_sysfs_add+0x237/0x280 [ 375.181795][T11182] device_add+0x9ef/0x1950 [ 375.181837][T11182] ? __pfx_device_add+0x10/0x10 [ 375.181873][T11182] ? lockdep_init_map_type+0x5c/0x250 [ 375.181902][T11182] ? __init_waitqueue_head+0xca/0x150 [ 375.181944][T11182] rfkill_register+0x1ad/0xb30 [ 375.181990][T11182] nfc_register_device+0x11f/0x3e0 [ 375.182036][T11182] nci_register_device+0x7f1/0xb80 [ 375.182069][T11182] ? __pfx_nci_register_device+0x10/0x10 [ 375.182101][T11182] ? lockdep_init_map_type+0x5c/0x250 [ 375.182129][T11182] virtual_ncidev_open+0x141/0x220 [ 375.182173][T11182] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 375.182213][T11182] misc_open+0x26d/0x450 [ 375.182248][T11182] ? __pfx_misc_open+0x10/0x10 [ 375.182280][T11182] chrdev_open+0x234/0x6a0 [ 375.182314][T11182] ? __pfx_apparmor_file_open+0x10/0x10 [ 375.182343][T11182] ? __pfx_chrdev_open+0x10/0x10 [ 375.182378][T11182] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 375.182422][T11182] do_dentry_open+0x6d8/0x1660 [ 375.182456][T11182] ? __pfx_chrdev_open+0x10/0x10 [ 375.182501][T11182] vfs_open+0x82/0x3f0 [ 375.182546][T11182] path_openat+0x208c/0x31a0 [ 375.182595][T11182] ? __pfx_path_openat+0x10/0x10 [ 375.182655][T11182] do_file_open+0x20e/0x430 [ 375.182696][T11182] ? __pfx_do_file_open+0x10/0x10 [ 375.182760][T11182] ? alloc_fd+0x476/0x790 [ 375.182799][T11182] ? do_getname+0x191/0x390 [ 375.182845][T11182] do_sys_openat2+0x10d/0x1e0 [ 375.182887][T11182] ? __pfx_do_sys_openat2+0x10/0x10 [ 375.182933][T11182] ? __fget_files+0x21f/0x3d0 [ 375.182974][T11182] __x64_sys_openat+0x12d/0x210 [ 375.183019][T11182] ? __pfx___x64_sys_openat+0x10/0x10 [ 375.183071][T11182] ? rcu_is_watching+0x12/0xc0 [ 375.183110][T11182] do_syscall_64+0x10b/0xf80 [ 375.183152][T11182] ? clear_bhb_loop+0x40/0x90 [ 375.183188][T11182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.183218][T11182] RIP: 0033:0x7f41ce79ce59 [ 375.183242][T11182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 375.183269][T11182] RSP: 002b:00007f41cf592028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 375.183296][T11182] RAX: ffffffffffffffda RBX: 00007f41cea16180 RCX: 00007f41ce79ce59 [ 375.183316][T11182] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 375.183335][T11182] RBP: 00007f41ce832d6f R08: 0000000000000000 R09: 0000000000000000 [ 375.183352][T11182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 375.183370][T11182] R13: 00007f41cea16218 R14: 00007f41cea16180 R15: 00007fff306bd948 [ 375.183410][T11182] [ 376.128987][ T8954] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 376.493273][T11211] openvswitch: HfR: Dropping previously announced user features [ 376.494340][T11207] ================================================================== [ 376.509014][T11207] BUG: KASAN: slab-out-of-bounds in cache_seq_start_rcu+0x3fe/0x420 [ 376.509323][T11211] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1182'. [ 376.517011][T11207] Read of size 8 at addr ffff888022ecf800 by task syz.1.1180/11207 [ 376.517035][T11207] [ 376.517054][T11207] CPU: 1 UID: 60929 PID: 11207 Comm: syz.1.1180 Tainted: G U L syzkaller #0 PREEMPT(full) [ 376.517093][T11207] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 376.517103][T11207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 376.517118][T11207] Call Trace: [ 376.517127][T11207] [ 376.517136][T11207] dump_stack_lvl+0x100/0x190 [ 376.517166][T11207] print_report+0x13d/0x4b0 [ 376.517199][T11207] ? __virt_addr_valid+0x239/0x430 [ 376.517242][T11207] ? cache_seq_start_rcu+0x3fe/0x420 [ 376.517269][T11207] kasan_report+0xdf/0x1d0 [ 376.517299][T11207] ? cache_seq_start_rcu+0x3fe/0x420 [ 376.517330][T11207] cache_seq_start_rcu+0x3fe/0x420 [ 376.517361][T11207] seq_read_iter+0x2c1/0x1270 [ 376.517396][T11207] seq_read+0x33b/0x4c0 [ 376.517423][T11207] ? __pfx_seq_read+0x10/0x10 [ 376.517460][T11207] ? __pfx_seq_read+0x10/0x10 [ 376.517495][T11207] proc_reg_read+0x240/0x330 [ 376.517525][T11207] ? __pfx_proc_reg_read+0x10/0x10 [ 376.517555][T11207] vfs_read+0x1e4/0xb30 [ 376.517586][T11207] ? __pfx_vfs_read+0x10/0x10 [ 376.517612][T11207] ? find_held_lock+0x2b/0x80 [ 376.517646][T11207] ? __fget_files+0x215/0x3d0 [ 376.517674][T11207] ? __fget_files+0x215/0x3d0 [ 376.517707][T11207] ? __fget_files+0x21f/0x3d0 [ 376.517740][T11207] __x64_sys_pread64+0x1eb/0x250 [ 376.517777][T11207] ? __pfx___x64_sys_pread64+0x10/0x10 [ 376.517810][T11207] ? rcu_is_watching+0x12/0xc0 [ 376.517843][T11207] do_syscall_64+0x10b/0xf80 [ 376.517881][T11207] ? clear_bhb_loop+0x40/0x90 [ 376.517911][T11207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.517938][T11207] RIP: 0033:0x7f25ea79ce59 [ 376.517959][T11207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.517984][T11207] RSP: 002b:00007f25eb61d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 376.518010][T11207] RAX: ffffffffffffffda RBX: 00007f25eaa15fa0 RCX: 00007f25ea79ce59 [ 376.518029][T11207] RDX: 000000000000f42c RSI: 0000000000000000 RDI: 0000000000000005 [ 376.518046][T11207] RBP: 00007f25ea832d6f R08: 0000000000000000 R09: 0000000000000000 [ 376.518062][T11207] R10: 0000000000000038 R11: 0000000000000246 R12: 0000000000000000 [ 376.518079][T11207] R13: 00007f25eaa16038 R14: 00007f25eaa15fa0 R15: 00007fff38b1cae8 [ 376.518105][T11207] [ 376.518114][T11207] [ 376.526381][T11211] HfR: left promiscuous mode [ 376.533945][T11207] Allocated by task 5627: [ 376.533968][T11207] kasan_save_stack+0x30/0x50 [ 376.533996][T11207] kasan_save_track+0x14/0x30 [ 376.783974][T11207] __kasan_kmalloc+0xaa/0xb0 [ 376.788568][T11207] __kmalloc_noprof+0x301/0x850 [ 376.793417][T11207] cache_create_net+0xa2/0x1f0 [ 376.798176][T11207] ip_map_cache_create+0x60/0x130 [ 376.803202][T11207] sunrpc_init_net+0x55/0x190 [ 376.807886][T11207] ops_init+0x1e2/0x5f0 [ 376.812057][T11207] setup_net+0x118/0x3a0 [ 376.816306][T11207] copy_net_ns+0x46f/0x7c0 [ 376.820735][T11207] create_new_namespaces+0x3ea/0xac0 [ 376.826028][T11207] unshare_nsproxy_namespaces+0xf2/0x220 [ 376.831669][T11207] ksys_unshare+0x438/0xab0 [ 376.836181][T11207] __x64_sys_unshare+0x31/0x40 [ 376.840954][T11207] do_syscall_64+0x10b/0xf80 [ 376.845555][T11207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.851448][T11207] [ 376.853762][T11207] The buggy address belongs to the object at ffff888022ecf000 [ 376.853762][T11207] which belongs to the cache kmalloc-2k of size 2048 [ 376.867809][T11207] The buggy address is located 0 bytes to the right of [ 376.867809][T11207] allocated 2048-byte region [ffff888022ecf000, ffff888022ecf800) [ 376.882384][T11207] [ 376.884712][T11207] The buggy address belongs to the physical page: [ 376.891120][T11207] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x22ec8 [ 376.899887][T11207] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 376.908378][T11207] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 376.915932][T11207] page_type: f5(slab) [ 376.919920][T11207] raw: 00fff00000000040 ffff88813fe34000 dead000000000100 dead000000000122 [ 376.928515][T11207] raw: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 376.937098][T11207] head: 00fff00000000040 ffff88813fe34000 dead000000000100 dead000000000122 [ 376.945766][T11207] head: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 376.954433][T11207] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 376.963103][T11207] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 376.971761][T11207] page dumped because: kasan: bad access detected [ 376.978172][T11207] page_owner tracks the page as allocated [ 376.983877][T11207] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 3097987955, free_ts 0 [ 377.003507][T11207] post_alloc_hook+0xfd/0x120 [ 377.008197][T11207] get_page_from_freelist+0x11a6/0x33b0 [ 377.013753][T11207] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 377.019662][T11207] new_slab+0xa6/0x6c0 [ 377.023746][T11207] refill_objects+0x277/0x420 [ 377.028432][T11207] __pcs_replace_empty_main+0x375/0x650 [ 377.033993][T11207] __kmalloc_cache_noprof+0x493/0x6f0 [ 377.039372][T11207] acpi_ds_create_walk_state+0x95/0x300 [ 377.044923][T11207] acpi_ps_execute_method+0x2c1/0xe90 [ 377.050299][T11207] acpi_ns_evaluate+0x640/0x1670 [ 377.055266][T11207] acpi_ut_evaluate_object+0xf7/0x610 [ 377.060644][T11207] acpi_rs_get_method_data+0xa1/0x160 [ 377.066033][T11207] acpi_walk_resources+0x178/0x270 [ 377.071156][T11207] acpi_dev_get_resources+0x1d2/0x260 [ 377.076538][T11207] acpi_init_device_object+0x1061/0x1970 [ 377.082175][T11207] acpi_add_single_object+0xe8/0x1ab0 [ 377.087553][T11207] page_owner free stack trace missing [ 377.092906][T11207] [ 377.095215][T11207] Memory state around the buggy address: [ 377.100833][T11207] ffff888022ecf700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 377.108886][T11207] ffff888022ecf780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 377.116943][T11207] >ffff888022ecf800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 377.125008][T11207] ^ [ 377.129066][T11207] ffff888022ecf880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 377.137122][T11207] ffff888022ecf900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 377.145174][T11207] ================================================================== [ 377.170260][T11215] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1181'. [ 377.195894][T11207] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 377.203131][T11207] CPU: 0 UID: 60929 PID: 11207 Comm: syz.1.1180 Tainted: G U L syzkaller #0 PREEMPT(full) [ 377.214404][T11207] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 377.219581][T11207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 377.229628][T11207] Call Trace: [ 377.232896][T11207] [ 377.235817][T11207] dump_stack_lvl+0x100/0x190 [ 377.240491][T11207] vpanic+0x552/0x970 [ 377.244473][T11207] ? __pfx_vpanic+0x10/0x10 [ 377.248995][T11207] ? mark_held_locks+0x40/0x70 [ 377.253771][T11207] ? cache_seq_start_rcu+0x3fe/0x420 [ 377.259049][T11207] panic+0xd1/0xe0 [ 377.262779][T11207] ? __pfx_panic+0x10/0x10 [ 377.267183][T11207] ? cache_seq_start_rcu+0x3fe/0x420 [ 377.272457][T11207] ? preempt_schedule_common+0x42/0xc0 [ 377.277913][T11207] ? check_panic_on_warn+0x1f/0x90 [ 377.283013][T11207] check_panic_on_warn.cold+0x19/0x34 [ 377.288378][T11207] end_report.part.0+0x3a/0x90 [ 377.293140][T11207] kasan_report.cold+0xe/0x18 [ 377.297811][T11207] ? cache_seq_start_rcu+0x3fe/0x420 [ 377.303088][T11207] cache_seq_start_rcu+0x3fe/0x420 [ 377.308208][T11207] seq_read_iter+0x2c1/0x1270 [ 377.312911][T11207] seq_read+0x33b/0x4c0 [ 377.317095][T11207] ? __pfx_seq_read+0x10/0x10 [ 377.321791][T11207] ? __pfx_seq_read+0x10/0x10 [ 377.326458][T11207] proc_reg_read+0x240/0x330 [ 377.331041][T11207] ? __pfx_proc_reg_read+0x10/0x10 [ 377.336144][T11207] vfs_read+0x1e4/0xb30 [ 377.340304][T11207] ? __pfx_vfs_read+0x10/0x10 [ 377.344972][T11207] ? find_held_lock+0x2b/0x80 [ 377.349645][T11207] ? __fget_files+0x215/0x3d0 [ 377.354319][T11207] ? __fget_files+0x215/0x3d0 [ 377.358988][T11207] ? __fget_files+0x21f/0x3d0 [ 377.363654][T11207] __x64_sys_pread64+0x1eb/0x250 [ 377.368585][T11207] ? __pfx___x64_sys_pread64+0x10/0x10 [ 377.374031][T11207] ? rcu_is_watching+0x12/0xc0 [ 377.378787][T11207] do_syscall_64+0x10b/0xf80 [ 377.383375][T11207] ? clear_bhb_loop+0x40/0x90 [ 377.388049][T11207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.393955][T11207] RIP: 0033:0x7f25ea79ce59 [ 377.398357][T11207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.417951][T11207] RSP: 002b:00007f25eb61d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 377.426357][T11207] RAX: ffffffffffffffda RBX: 00007f25eaa15fa0 RCX: 00007f25ea79ce59 [ 377.434317][T11207] RDX: 000000000000f42c RSI: 0000000000000000 RDI: 0000000000000005 [ 377.442288][T11207] RBP: 00007f25ea832d6f R08: 0000000000000000 R09: 0000000000000000 [ 377.450244][T11207] R10: 0000000000000038 R11: 0000000000000246 R12: 0000000000000000 [ 377.458201][T11207] R13: 00007f25eaa16038 R14: 00007f25eaa15fa0 R15: 00007fff38b1cae8 [ 377.466166][T11207] [ 377.469682][T11207] Kernel Offset: disabled [ 377.473999][T11207] Rebooting in 86400 seconds..