last executing test programs: 13.120610714s ago: executing program 2 (id=1195): syz_clone3(&(0x7f0000000500)={0x400, 0x0, 0x0, &(0x7f0000000140), {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/event1\x00', 0x34d802, 0x0) (async, rerun: 32) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (rerun: 32) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) (async, rerun: 64) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) (rerun: 64) write$auto(r3, 0x0, 0x0) ioctl$auto(0x3, 0xae41, r1) (async, rerun: 64) ioctl$auto_KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000500)={0x7}) (rerun: 64) 12.983920551s ago: executing program 2 (id=1196): close_range$auto(0x2, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_NEW_STATION(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x24, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_BEACON_HEAD={0xd, 0xe, "5256441b633b87bba3"}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40004) mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/zram0/disksize\x00', 0x2202, 0x0) write$auto(r2, &(0x7f00000001c0)='7K\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x3dec) sysfs$auto(0x2, 0xd, 0x0) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto_FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\xff\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00', &(0x7f0000000180), 0x100d1) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyua\x00', 0x20804, 0x0) close_range$auto(0x2, 0x8, 0x0) 12.847204601s ago: executing program 2 (id=1197): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) r1 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cmdline\x00', 0x80, 0x0) (async) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) io_uring_setup$auto(0x4, &(0x7f00000000c0)={0x0, 0x6, 0x6, 0x5, 0x81, 0x5, r2, [0x9, 0x9, 0x8], {0x1d5fd033, 0x9, 0x4, 0x382, 0xa41a, 0xb, 0xe00000, 0xfffff155, 0x8}, {0x4, 0xb7, 0x4, 0xffff, 0x7, 0xff7, 0xffffff81, 0x3688, 0x7}}) (async) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae41, r4) (async, rerun: 32) ioctl$auto_KVM_CREATE_VM(r3, 0xc048aeca, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mlockall$auto(0x7) (async, rerun: 64) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (rerun: 64) shmget$auto(0x8, 0x10569, 0x7ff) (async) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) (async) finit_module$auto(r1, 0x0, 0x1) (async) bpf$auto(0x25, &(0x7f0000000140)=@link_create={@prog_fd, @target_ifindex, 0x1, 0x9, @tracing={0x10, 0x1}}, 0x6) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) r7 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000380), r5) sendmsg$auto_BATADV_CMD_SET_MESH(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x24, r7, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xe3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x140080e4) 11.095391368s ago: executing program 2 (id=1204): pipe$auto(&(0x7f0000000500)=0xffffffffffffffff) r1 = openat$auto_fops_blob_file(0xffffffffffffff9c, &(0x7f0000000080), 0x48102, 0x0) writev$auto(r1, &(0x7f0000005ec0)={&(0x7f0000005e40), 0x5}, 0x6) mmap$auto(0x0, 0x400008, 0x1000dd, 0x9b72, 0xffffffffffffffff, 0x8000) get_mempolicy$auto(0x0, 0x0, 0x3, 0x1ff, 0x3) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="13002ebd7000dddbdf250200000008000300", @ANYRES8=r0, @ANYBLOB="05003d005c"], 0x24}, 0x1, 0x0, 0x0, 0x4c0d4}, 0x20040894) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_5={@target_ifindex=r5, 0x7f, 0x0, 0x10000008, 0x1, @relative_fd, 0xd}, 0x92) sendmsg$auto_NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x24, r2, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0xf97f}]}, 0x24}, 0x1, 0x0, 0x0, 0x3}, 0x4048000) r6 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0xc, 0x4000000000df, 0x100000044eb2, 0x10006, 0x300000000000) mprotect$auto(0x0, 0x806121, 0x6) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) recvfrom$auto(r6, &(0x7f0000000600), 0x4, 0x4, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="ff032cbd7000fedbdf251f000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x80000000}, 0x5, 0xfffffffffffffffc, 0x7, 0x2e) 10.72782033s ago: executing program 2 (id=1206): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) connect$auto(0xffffffffffffffff, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0xdb) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x9}, 0x6, 0x0) r1 = socket(0x21, 0xa, 0x9) r2 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/netdev:wlan0/state\x00', 0x88002, 0x0) read$auto(r2, &(0x7f0000001200)='\x00', 0x100000004) mmap$auto(0x1, 0x5, 0xf, 0x19, r2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8955, 0x0) 10.457596069s ago: executing program 2 (id=1208): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) r0 = socket(0xa, 0x5, 0x84) (async) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) close$auto(0xffffffffffffffff) (async, rerun: 32) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 32) r1 = open(0x0, 0x0, 0x408) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) (async, rerun: 32) preadv2$auto(0xffffffffffffffff, 0x0, 0x6, 0xffffffffffffffff, 0x4, 0x2e) (rerun: 32) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x100000000000000, 0x400053, 0x9) (async) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000040)=0x4544) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) (async, rerun: 64) mmap$auto(0x198f, 0x810004, 0x200000000000ffb, 0x18, 0x3, 0x0) (async, rerun: 64) r2 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f00000000c0), r0) sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x10, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004804}, 0x4000) msync$auto(0x0, 0xe0, 0x6) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) (async, rerun: 32) socket(0xa, 0x1, 0x84) (async, rerun: 32) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x54) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0xc) mmap$auto(0x9, 0x10000000000002, 0xffd, 0xea93, 0x3, 0x40000007) (async, rerun: 32) timer_create$auto(0x9, 0x0, 0x0) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) 8.59191838s ago: executing program 0 (id=1215): mlockall$auto(0x1) mprotect$auto(0x1ffffffff000, 0x100004, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram6/queue/max_hw_sectors_kb\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) inotify_init1$auto(0x3000000000000) r2 = gettid() rt_sigqueueinfo$auto(r2, 0xb, &(0x7f00000001c0)={@siginfo_0_0={0x3, 0x401, 0xfffffffb, @_timer={r2, 0xd, @sival_ptr=0x0, 0x62}}}) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, 0x0, 0x28400, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r3) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x805, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) unshare$auto(0x20000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/netfs/volumes\x00', 0x0, 0x0) mmap$auto(0x0, 0x2000c, 0x7, 0x12, 0x40000000000a5, 0x100000000008000) io_uring_setup$auto(0x1, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/boot_params/version\x00', 0x80000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000580)=""/216, 0xd8) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) sendfile$auto(r6, r6, 0x0, 0x2) r7 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r7, 0x40045010, 0xfffffffffffffffe) r8 = socket(0x2, 0x801, 0x6) setsockopt$auto(r8, 0x1, 0x12, 0x0, 0xa4) close_range$auto(r8, r5, 0x83) 7.346088971s ago: executing program 1 (id=1220): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/nbd3/queue/io_timeout\x00', 0x141002, 0x0) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x240802, 0x0) mmap$auto(0x0, 0x2020009, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket(0xa, 0x5, 0x0) setsockopt$auto(r2, 0x10000000084, 0x4, 0x0, 0x4) ioctl$auto_USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000380)={0x0, 0x5, 0x2, 0x40, 0x200, 0x26, &(0x7f0000000280)}) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101c40, 0x0) r4 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) ioctl$auto_TCSBRKP2(r5, 0x5425, 0x0) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) recvfrom$auto(r5, &(0x7f0000000200), 0x4, 0x10001, 0x0, &(0x7f0000000480)=0xc) ioctl$auto_TCSBRKP2(r6, 0x5425, 0x0) r7 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r7, 0x40045010, &(0x7f0000000040)) socket(0xa, 0x1, 0x84) r8 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r8, &(0x7f0000000080)='/dev/\x0e?^\xd8[\xa1~\xf5\xdfaudio1\x00\x11I\x9f\xabA\a\x1c\xc4\x06\xde@z\xe0\xf9\xc3R\"\x06a\xa7\xe5\x03\x00\x00', 0x100000a3d9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x9488, 0x9, 0x15f4da07, 0x6, 0x4, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bbf, 0x7ff, 0x3, 0xff, 0x10001, 0x1, 0x3, 0x8001, 0xfffffffffffffffe, 0x80000000, 0x335b0ef1, 0xffffdfffffffff81, 0x4]}, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto(r3, 0x541c, r4) ioctl$auto_VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f0000000000)={0x3, r0}) 5.199120595s ago: executing program 1 (id=1225): unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) io_uring_register$auto(0x2, 0xe, 0x0, 0x20) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0xd, 0x0, 0x8) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_TIOCSTI2(0xffffffffffffffff, 0x5412, &(0x7f0000000840)="13") ioctl$auto_TIOCSTI2(0xffffffffffffffff, 0x5412, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) 4.648555668s ago: executing program 0 (id=1227): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/neigh/vlan0/anycast_delay\x00', 0x88042, 0x0) sendfile$auto(r0, r0, 0x0, 0xd021) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@ethernet={0x306, @remote}, 0x54) mmap$auto(0x5, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) socket(0x2, 0x1, 0x0) semctl$auto(0x201, 0xfffffffd, 0x3, 0x400000) setsockopt$auto(0x3, 0x1, 0x2, 0x0, 0x100008) listen$auto(0x3, 0x81) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/irq/25/smp_affinity_list\x00', 0x402, 0x0) write$auto(r1, &(0x7f0000000500)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x9f\xe2\xc7cOM\xb6\xa3,!oc.\xe7\x1d$\x9a`\xd8/g\xd3\x1a\xcd\x8e\x1d\xbb\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xa9O\x00\x00\x00\x00\xabxo\xd9\x90\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xb6\xb0N\x99\x04z\xd0I>\x8f\x00\xe5\x1c*\xedE\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xa3\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xa5\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\xac\x92\x7f]|\x04\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x85R\x96\xa6\x89\xdd\xce\xab\xd5\xe4+\xeaF\x06Y\xe9\xa1`\xb1\x8d\x85\xe0w+\x1e\x8b+\xd67IH\xff\x80N\xd1E8\xb7\xff\xa7\xff\x80\xd0y\x0f\x1d(!\x99\xab\xdf\x01\x00\x00\x00\x00\x00\x00\x00\xcdd\x87\x06\xfbK\xb9/\x19\xe5\x8b\x10P\xe7i8\xbe', 0x7) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x9, 0x1, 0x400000) socket(0x2c, 0x3, 0x0) connect$auto(r1, &(0x7f00000000c0)=@isdn={0x22, 0x8, 0xf4, 0x8, 0xa2}, 0x2) ioctl$auto(0x3, 0x800005411, r1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x1, 0x1000) socket(0x15, 0x5, 0x0) unshare$auto(0x40000080) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/021/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000100)={0x13, 0x80, 0x8ffff, 0x5, &(0x7f0000000140), 0xc692, 0x3, 0x80005, @stream_id=0x2, 0x0, 0xc, 0x0}) ioctl$auto_USBDEVFS_REAPURB32(r2, 0x4004550c, &(0x7f0000000300)=0x7f) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setresuid$auto(0x0, 0x7, 0x8080) setfsuid$auto(0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/netfilter/nf_log\x00', 0x185846, 0x0) 4.494833906s ago: executing program 3 (id=1228): r0 = openat$auto_minstrel_ht_stat_csv_fops_rc80211_minstrel_ht_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy6/netdev:wlan1/stations/08:02:11:00:00:00/rc_stats_csv\x00', 0x40142, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{&(0x7f0000000080)="ab7d968dccb760503f4ad65fb075096e54fa746be5cdc5ca99d799d3af464ebfa2329127d5b082130e551e26f7e59637c056ad44dc0e1f571899fccb487d579ffb41553926c78a00614373f6b3122331e1c4a4c09f5a1f6d197e3fd3b4", 0x9, &(0x7f0000000180)={&(0x7f0000000100)="9e270bfa2b601d90a073b8f776e6d0072de4eead856b849d7a16499d150271413218033ba9631b13e25d63dbf023efab457832043817db8420ba33e1b3a80b6e111fac9450b7d76c20f53f56a5c4e42c297a52a083c40c20ffd5bf9b20376c3a7ba21faaf18bff082e46b97df3e43c9175e93ecd850184fc8c57adf6c0e44a", 0xf2}, 0x6, &(0x7f00000001c0)="5ea7403863cba4d984ef64e040a1f326e5a7bc09c268", 0x1, 0xffff}, 0x1}, 0xd88d, 0x693) getsockopt$auto_SO_WIFI_STATUS(r0, 0xf, 0x29, &(0x7f0000000240)=':+)]@{\xea!\x00', &(0x7f0000000280)=0x500000) r1 = socket$nl_generic(0x10, 0x3, 0x10) capget$auto(&(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000300)={0x2a9, 0xfffffff7, 0x21c9c14e}) r3 = fcntl$auto(r1, 0xf, r2) lsetxattr$auto(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='&}\x00', &(0x7f00000003c0)="af224e31d2f2fc268bd53b8e983d20a1b58fadebc7b80fb1c5198c9e461338a0819a21b4090465dc1cc07f370d3e31b5c33f40d96db28f435cc85fb4c7e00bd7c9aaf0f31a5de3e2c4d7e08a5825f09a922f415ea59cd22c0e071b8d4a0296d177c5f4ddb48535caa1764b047dbdc4d6763fbdc495a5688736f5283aa344ca8d963fc7b25d909a2059e2fe40267cf442712351fab5fb2c9802fe87ebd91c9dfffc2d281b025add715ede7062d907685b66e0b3843f02f84f96c08bee40b25b3a8183eca182da730210ab62d22b117ed847a9a69297d60134", 0xb, 0x1) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/snd/midiC2D3\x00', 0x80, 0x0) r5 = ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto_SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000500)="01bc7775f2349617028cc14580129697bdc6e6f5a8a8177cf35638722b6d0e92ed306341989972735530220edaab80eb36e44a") chdir$auto(&(0x7f0000000540)='./file0\x00') mmap$auto(0x2, 0x5, 0x5, 0x11, r4, 0x81) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x501001, 0x90) unlinkat$auto(r3, &(0x7f00000005c0)='./file0\x00', 0x5) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000600)='/dev/input/event0\x00', 0x20000, 0x0) faccessat$auto(r3, &(0x7f0000000640)='./file0\x00', 0x9) getpid() fcntl$auto_F_GETSIG(r6, 0xb, 0x2) r7 = fspick$auto(r5, &(0x7f0000000680)='./file0\x00', 0x1) ioctl$auto_SNDRV_CTL_IOCTL_TLV_COMMAND(r7, 0xc008551c, &(0x7f00000006c0)={0x6, 0x3, [0x4, 0x8, 0x5, 0x5, 0x2b0, 0x920]}) mlockall$auto(0x0) mmap$auto(0x0, 0x1, 0x80000001, 0x17, r6, 0x5) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_SAR_SPECS(r3, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, r8, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x2}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004001}, 0x4040000) r9 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000880), r7) sendmsg$auto_L2TP_CMD_SESSION_GET(r7, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1004804}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x70, r9, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x9}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x3}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x9}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1={0xfc, 0x1, '\x00', 0x1}}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x5fec278a}]}, 0x70}}, 0x40480d4) getsockopt$auto_SO_BSDCOMPAT(r0, 0x200, 0xe, &(0x7f00000009c0)='/dev/input/event0\x00', &(0x7f0000000a00)=0x7) capset$auto(&(0x7f0000000a40)={0x3, r2}, &(0x7f0000000a80)={0x9, 0x5, 0x8}) ioctl$auto_TUNGETFILTER(r7, 0x801054db, &(0x7f0000000b00)={0xd, &(0x7f0000000ac0)={0x0, 0x3, 0x2}}) read$auto_proc_page_owner_threshold_(0xffffffffffffffff, &(0x7f0000000b40)=""/36, 0x24) 4.355907575s ago: executing program 3 (id=1229): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x2a742, 0x0) mmap$auto(0x0, 0x10000, 0xde, 0x11, r0, 0x28000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) write$auto(0xffffffffffffffff, &(0x7f0000000000)='3\xc7\xff\xff\xff\xdd\x00\b(Ks\x0f\x87|P\x11\xd1li0\x89\x85\x90QM\xd6wfF\xf1x\xb3;c\tP\x03\x84\x97\x99\x83\x97\x81:\xf3\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xff\xdak\xb0m\xe1U\xb3\xa2\xee\xdcTJQO\x98\xc8w\x8c\xe7\x00\x00\x00\x1dj\x1e\xebQT\xdd\x9b\x00'/101, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x18b040, 0x0) close_range$auto(0x2, r1, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x902, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_CREATE_VM(r1, 0x4004ae99, 0x0) 4.108503917s ago: executing program 1 (id=1230): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) getpriority$auto(0x9, 0x0) sched_setattr$auto(0x0, 0x0, 0x0) 3.950103955s ago: executing program 1 (id=1231): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x28000) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x28000) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000200)={{@inferred, 0x1, 0x1, 0x81, "3112d585005a614d19e22af9ffb683dbede3d0bf828bbfba40f035f4be6b7fe5e2f94bd90484b0755015e48d"}, 0x401, 0x5, 0x4, @raw=0x7, @integer={0xdbe, 0x255, 0x208}, "7a9fc199a16a2311eacf2fc7ae1d8778dc618090334fdd73340238d21000debe0eda71bdd709254592b67f9cb5adb17884a16f7ce8cbce0bb32791702b8d7c2d"}) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000640)={0x0, 0x1d, 0x3800, 0x2, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7b, 0x0, 0x5, 0xfffffffffffffffd}, {0x100, 0x20001, 0x52, 0x85, 0x2, 0x1a7b870a, 0x9, 0xc, 0x100000000}}) io_uring_register$auto(0x2, 0x20, &(0x7f0000000240), 0x1) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) ioctl$auto_UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000400)={{0xc, 0x23, 0xa6, 0x83}, "66ac010005000000000068d190eb0d4a4cada7272464294b9183349eef4c1f028fdcc8ecc66fdd02316f064ebd893007abb4c0bbc3b822f66eaf240963110d61771552c03de65800", 0x2}) ioctl$auto_UI_DEV_CREATE(r0, 0x5501, 0x0) io_uring_setup$auto(0x6, 0x0) (async) io_uring_setup$auto(0x6, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) (async) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0x8, 0x0) 3.738587453s ago: executing program 3 (id=1232): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x91}, 0x4000000) 3.621883988s ago: executing program 0 (id=1233): mmap$auto(0x0, 0xe985, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0xe985, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x103e81, 0x0) landlock_add_rule$auto(r0, 0x2, 0x0, 0xd) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x8081, 0x0) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) (async) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) kexec_load$auto(0x0, 0x2, 0x0, 0x1000000000004) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) ioctl$auto_SNDCTL_SEQ_PANIC(r1, 0x5111, &(0x7f0000000180)="ccc0f645283b00a8b78630b7b81a0677dffe327a958d2089dcd23b041d98e6dc9e7cf0b5e6bd6356e8b9cf7f39a7cb5728cd3d9dd441720371cd75db361f4a3b0e6401967132baea74211a304e300f99a417316785e9fb4a5d3d43e6675eeff476e32c17aa790f20135004914bf9167d36f9bbbf01cd428917ee0968d3391e23126ddf1d4e7ae4281596b82058e0015dfb386630bb4aeebde0671f3ada8f437df1c8df6edd3c8778dd5f647fa799ed0ffe8fe75adb95c1e21ee0a1e463da02ebb8f9faae3e64fbdec507c1ce3cef8009ebf7ada3bc7d27d0a164c06999f52d5fff1cf662073236") move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) r2 = epoll_create$auto(0x1) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sda1\x00', 0x12d040, 0x0) (async) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sda1\x00', 0x12d040, 0x0) ioctl$auto_BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={"ef65ce6ceb0700", 0x3, 0x406, 0x5, 0x400004, 0x6}) (async) ioctl$auto_BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={"ef65ce6ceb0700", 0x3, 0x406, 0x5, 0x400004, 0x6}) capset$auto(0x0, 0x0) epoll_ctl$auto(r2, 0x1, 0x8000000000000000, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count\x00', 0xc0082, 0x0) read$auto(r4, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) r5 = socket(0x11, 0xa, 0x10001) setsockopt$auto(r5, 0x107, 0x12, 0x0, 0x4) (async) setsockopt$auto(r5, 0x107, 0x12, 0x0, 0x4) socket(0x11, 0x80003, 0x300) (async) r6 = socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb2, 0x40000000000a1, 0x8000) setsockopt$auto(r6, 0x107, 0x12, 0x0, 0x4) (async) setsockopt$auto(r6, 0x107, 0x12, 0x0, 0x4) 3.544161371s ago: executing program 3 (id=1234): unshare$auto(0x8000000) unshare$auto(0x8000400) r0 = socket(0x2, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0xffffffffffffffff, 0x2000d, 0x7, 0xeb1, r0, 0x10008000) r1 = socket(0x2a, 0x2, 0x0) fcntl$auto(r1, 0x6, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xe0300, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xfffffffffffeffff, 0x15) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r0, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) socket(0x3, 0x3, 0xa) socket(0x3, 0x3, 0xa) r2 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/tracing/dynamic_events\x00', 0x80442, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r2, &(0x7f0000000540)='eI\f/', 0x4) connect$auto(0x3, 0x0, 0x54) socket$nl_generic(0x10, 0x3, 0x10) mbind$auto(0x7, 0x1, 0xe9, &(0x7f0000000040)=0x1, 0x3, 0x7) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x22004840}, 0x4001) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0xfffffffffffffda7, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x0, 0x3b, 0xeb57}, @BATADV_ATTR_TT_TTVN={0x5, 0x11, 0xee}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x4008800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' '], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x8}, 0x7, 0x0, 0x1, 0x9}, 0x807}, 0x3, 0x0) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r3) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x805, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) 3.219152533s ago: executing program 1 (id=1235): close_range$auto(0x2, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_NEW_STATION(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x24, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_BEACON_HEAD={0xd, 0xe, "5256441b633b87bba3"}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40004) mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/zram0/disksize\x00', 0x2202, 0x0) write$auto(r2, &(0x7f00000001c0)='7K\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x3dec) sysfs$auto(0x2, 0xd, 0x0) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto_FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\xff\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00', &(0x7f0000000180), 0x100d1) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyua\x00', 0x20804, 0x0) close_range$auto(0x2, 0x8, 0x0) 2.879955689s ago: executing program 1 (id=1236): mlockall$auto(0x1) mprotect$auto(0x1ffffffff000, 0x100004, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram6/queue/max_hw_sectors_kb\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) inotify_init1$auto(0x3000000000000) r2 = gettid() rt_sigqueueinfo$auto(r2, 0xb, &(0x7f00000001c0)={@siginfo_0_0={0x3, 0x401, 0xfffffffb, @_timer={r2, 0xd, @sival_ptr=0x0, 0x62}}}) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, 0x0, 0x28400, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r3) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x805, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) unshare$auto(0x20000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/netfs/volumes\x00', 0x0, 0x0) socket(0x2, 0x80802, 0x0) io_uring_setup$auto(0x1, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/boot_params/version\x00', 0x80000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000580)=""/216, 0xd8) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) sendfile$auto(r6, r6, 0x0, 0x2) r7 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r7, 0x40045010, 0xfffffffffffffffe) r8 = socket(0x2, 0x801, 0x6) setsockopt$auto(r8, 0x1, 0x12, 0x0, 0xa4) close_range$auto(r8, r5, 0x83) 1.152400191s ago: executing program 0 (id=1237): msync$auto(0x1ffff000, 0x17ffffffffffffc, 0x400000004) socket(0x22, 0xa, 0x6) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb2, 0x401, 0x8000) unshare$auto(0x40000080) mmap$auto(0x3, 0x400007, 0x8, 0x9b72, 0xffffffffffffffff, 0x6) sendmsg$auto_OVS_FLOW_CMD_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x10) io_uring_setup$auto(0x6, 0x0) openat$auto_generic(0xffffffffffffff9c, 0x0, 0x8000, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe\x00', 0x3, 0x0) chdir$auto(&(0x7f0000000180)='./cgroup/../file0\x00') r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) rt_sigqueueinfo$auto(0x0, 0x7e, &(0x7f0000000000)={@siginfo_0_0={0xf9, 0x41, 0x7e73, @_sigfault={0x0, @_perf={0xc, 0x40009, 0x9}}}}) r1 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r1, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x49}, 0x5, &(0x7f0000000180), 0x5, 0xe}, 0x5}, 0x2, 0x100) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000002f80), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_NEWPDP(r2, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000000040)={0x1c, r3, 0x5, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c000}, 0x80) lseek$auto(r0, 0x2, 0x0) getdents$auto(r0, 0x0, 0x62d7) 1.152120852s ago: executing program 3 (id=1238): mmap$auto(0x0, 0x5, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000008000) (async) r0 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) (async, rerun: 64) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) (async, rerun: 64) ioctl$auto(r0, 0x541b, 0xffffffffffffffff) (async, rerun: 64) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x12}}, 0x54) (rerun: 64) getsockopt$auto(r0, 0x84, 0x9, 0x0, &(0x7f0000000000)=0x4bb) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) socket(0xa, 0x1, 0x100) (async) ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x5429, 0x0) (async) process_mrelease$auto(0xffffffffffffffff, 0xa) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r1 = socket(0xa, 0x2, 0x73) getsockopt$auto_SO_TIMESTAMPNS_NEW(r1, 0x0, 0x40, 0x0, &(0x7f0000000240)=0x54) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(0xffffffffffffffff, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) (async) read$auto(0xffffffffffffffff, &(0x7f0000001200)='\x00', 0x4) r2 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f00000000c0), 0x141000, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) (async, rerun: 32) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) (async, rerun: 64) r3 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtd0ro\x00', 0x0, 0x0) (rerun: 64) ioctl$auto_BLKPG2(r3, 0x1269, 0x0) (async, rerun: 64) ioctl$auto_UBI_IOCATT(r2, 0x40186f40, 0x0) (async, rerun: 64) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) (async) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dri/card1\x00', 0x16d8c1, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f0000000240)={[0x10000000000001ff, 0x7, 0x2, 0x20, 0x9687, 0x9, 0x3c2a19d5, 0x5, 0x1, 0x3, 0x8, 0x80000000007, 0x6d3f, 0x9, 0xa, 0x1]}, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x1, 0x4, 0x3, 0x3, 0x3, 0xffffffffffffffff, 0x3, 0x8000000000400000, 0x3, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0) (async, rerun: 32) readv$auto(0xffffffffffffffff, 0x0, 0x7f) (rerun: 32) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm1c/sub5/status\x00', 0x6100, 0x0) write$auto(r4, 0x0, 0x76d) 518.881465ms ago: executing program 0 (id=1239): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) getpriority$auto(0x9, 0x0) sched_setattr$auto(0x0, 0x0, 0x0) 330.267828ms ago: executing program 0 (id=1240): openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi22\x00', 0x100, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0xa, 0x1, 0x100) pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\b\x06\x11\x00\x00\x00\x00?W\xff\xff\xba\xae\xb8-\x14\xe4\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\x00\x9f\x1e\xf6\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9\xc5\x93\x1dD\x811\xb9_\xdd*j\xfd\xeb\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;\x9e\x83\x120\x81\x11\x9a?g`sFh\x00\x00\xda,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xdex\xd8\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/228, 0x8fdef, 0x4000000000000007) r0 = socket(0x10, 0x2, 0x4) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x20008800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYRES32=r0], 0x38}}, 0x40008c0) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x1, 0x2) socket(0x1d, 0x2, 0x2) connect$auto(0x3, 0x0, 0x53) socket(0x10, 0x3, 0x6) socketpair$auto(0x1e, 0xb, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x38}, 0x6, 0x0, 0x4, 0x9}, 0x9}, 0x6, 0x1f00) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x40200, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x40080, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x9, 0xd3e, 0x780, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0x7]}, 0x0) r1 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0x5, 0x0) pipe$auto(0x0) write$auto(0x1, 0x0, 0x80000000) fchdir$auto(r1) mkdir$auto(&(0x7f0000000040)='./cgroup\x00', 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/cgroup.type\x00', 0x103042, 0x0) rmdir$auto(&(0x7f0000000080)='./cgroup\x00') select$auto(0xe, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=1241): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtdblock0\x00', 0x14f602, 0x0) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x0) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/vhci_hcd.11/usb31/31-0:1.0/ep_81/power/autosuspend_delay_ms\x00', 0x149300, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000280)=""/50, 0x32) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptyva\x00', 0x280080, 0x0) ioctl$auto_TIOCSTI2(r2, 0x5412, &(0x7f0000000100)="edc6726348e17cb02d72b543b5a28e5c492b52ee85d9440cc4bc3da65c2f543f3ff2aff17bc820f2c1c5ea89db4e13ee68eb515e6bc62fd14409dd480c22f88d46e639753ed8e55e42cef898020b006f7cc49a796d535f64966a00ab43ef9657349b1a82368746584f222708a1edd1869afbf004303c1909120019ee816227560ada0afdcf91d34368717555c585477f5a30b712275186d65bf302f25b05282cd8cbd865a536d0b7fcb39d25dcf3816ceb2204f7f1d6b83807554631dd485fee77b207200191eb1c198032f96efe41be367a8d79462c90924b72f4f94164d42b83e7a453dec9010e7c865ee55530a9c21f") (async) write$auto(r0, 0x0, 0x10007c) (async) openat$auto_snapshot_fops_user(0xffffffffffffff9c, 0x0, 0x703c0, 0x0) mmap$auto(0xdf3, 0x4, 0x3, 0xeb1, r0, 0xffffffff) close_range$auto(0x2, 0xa, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = socket(0x2, 0x1, 0x106) bind$auto(r3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) setsockopt$auto_SO_DEBUG(r3, 0x6, 0x1, 0x0, 0xda3) (async) timer_create$auto(0x9, 0x0, 0x0) (async) write$auto(0x3, 0x0, 0xffd8) (async) write$auto(0x3, 0x0, 0x100084) (async) close_range$auto(0x2, 0x8, 0x0) kernel console output (not intermixed with test programs): 0 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.854833][T10359] RSP: 002b:00007f8a09aca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 320.854848][T10359] RAX: ffffffffffffffda RBX: 00007f8a08e16090 RCX: 00007f8a08b9ce59 [ 320.854859][T10359] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000007 [ 320.854868][T10359] RBP: 00007f8a08c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 320.854884][T10359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 320.854894][T10359] R13: 00007f8a08e16128 R14: 00007f8a08e16090 R15: 00007ffc54d072c8 [ 320.854913][T10359] [ 321.836476][T10356] hub 1-0:1.0: USB hub found [ 321.852351][T10356] hub 1-0:1.0: 1 port detected [ 323.072309][T10400] 0 [ 323.257050][T10405] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5630] was attempted by ""[10405] [ 323.788398][T10410] FAULT_INJECTION: forcing a failure. [ 323.788398][T10410] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 323.827912][T10410] CPU: 1 UID: 0 PID: 10410 Comm: syz.3.838 Tainted: G L syzkaller #0 PREEMPT(full) [ 323.827959][T10410] Tainted: [L]=SOFTLOCKUP [ 323.827970][T10410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 323.827986][T10410] Call Trace: [ 323.827996][T10410] [ 323.828006][T10410] dump_stack_lvl+0x100/0x190 [ 323.828044][T10410] should_fail_ex.cold+0x5/0xa [ 323.828079][T10410] ? prepare_alloc_pages+0x16d/0x5f0 [ 323.828130][T10410] should_fail_alloc_page+0xeb/0x140 [ 323.828168][T10410] prepare_alloc_pages+0x1f0/0x5f0 [ 323.828203][T10410] ? kernel_text_address+0x8d/0x100 [ 323.828235][T10410] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 323.828294][T10410] ? copy_splice_read+0x1a3/0xb90 [ 323.828326][T10410] ? stack_trace_save+0x8e/0xc0 [ 323.828359][T10410] ? __pfx_stack_trace_save+0x10/0x10 [ 323.828391][T10410] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 323.828440][T10410] ? copy_splice_read+0x1a3/0xb90 [ 323.828471][T10410] ? kasan_save_stack+0x3f/0x50 [ 323.828498][T10410] ? kasan_save_stack+0x30/0x50 [ 323.828525][T10410] ? kasan_save_track+0x14/0x30 [ 323.828551][T10410] ? __kasan_kmalloc+0xaa/0xb0 [ 323.828577][T10410] ? __kmalloc_noprof+0x301/0x850 [ 323.828600][T10410] ? copy_splice_read+0x1a3/0xb90 [ 323.828637][T10410] ? do_syscall_64+0x115/0x840 [ 323.828674][T10410] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.828723][T10410] alloc_pages_bulk_noprof+0x649/0x1360 [ 323.828784][T10410] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 323.828840][T10410] ? __kmalloc_noprof+0x320/0x850 [ 323.828872][T10410] copy_splice_read+0x1e1/0xb90 [ 323.828915][T10410] ? __pfx_copy_splice_read+0x10/0x10 [ 323.828961][T10410] ? lockdep_init_map_type+0x5c/0x250 [ 323.829008][T10410] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 323.829042][T10410] ? __pfx_filemap_splice_read+0x10/0x10 [ 323.829073][T10410] do_splice_read+0x2bd/0x370 [ 323.829121][T10410] splice_direct_to_actor+0x2a1/0xa30 [ 323.829160][T10410] ? __pfx_direct_splice_actor+0x10/0x10 [ 323.829202][T10410] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 323.829251][T10410] do_splice_direct+0x174/0x240 [ 323.829288][T10410] ? __pfx_do_splice_direct+0x10/0x10 [ 323.829320][T10410] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 323.829351][T10410] ? bpf_lsm_file_permission+0x9/0x10 [ 323.829372][T10410] ? security_file_permission+0x76/0x210 [ 323.829406][T10410] ? rw_verify_area+0xce/0x6d0 [ 323.829434][T10410] do_sendfile+0xadc/0xe20 [ 323.829465][T10410] ? __pfx_do_sendfile+0x10/0x10 [ 323.829493][T10410] ? __x64_sys_futex+0x34f/0x4d0 [ 323.829516][T10410] ? __x64_sys_futex+0x358/0x4d0 [ 323.829539][T10410] __x64_sys_sendfile64+0x1d8/0x220 [ 323.829596][T10410] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 323.829634][T10410] ? rcu_is_watching+0x12/0xc0 [ 323.829670][T10410] do_syscall_64+0x115/0x840 [ 323.829703][T10410] ? clear_bhb_loop+0x40/0x90 [ 323.829734][T10410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.829764][T10410] RIP: 0033:0x7fe606b9ce59 [ 323.829787][T10410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.829813][T10410] RSP: 002b:00007fe607ab8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 323.829837][T10410] RAX: ffffffffffffffda RBX: 00007fe606e15fa0 RCX: 00007fe606b9ce59 [ 323.829850][T10410] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 323.829862][T10410] RBP: 00007fe606c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 323.829875][T10410] R10: 0000400000000006 R11: 0000000000000246 R12: 0000000000000000 [ 323.829887][T10410] R13: 00007fe606e16038 R14: 00007fe606e15fa0 R15: 00007ffc8e832398 [ 323.829914][T10410] [ 324.453314][T10415] hub 1-0:1.0: USB hub found [ 324.523540][T10422] syz.1.841 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 324.560724][T10415] hub 1-0:1.0: 1 port detected [ 324.602137][T10397] FAULT_INJECTION: forcing a failure. [ 324.602137][T10397] name failslab, interval 1, probability 0, space 0, times 0 [ 324.643740][T10397] CPU: 0 UID: 0 PID: 10397 Comm: syz.0.836 Tainted: G L syzkaller #0 PREEMPT(full) [ 324.643787][T10397] Tainted: [L]=SOFTLOCKUP [ 324.643796][T10397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 324.643813][T10397] Call Trace: [ 324.643821][T10397] [ 324.643831][T10397] dump_stack_lvl+0x100/0x190 [ 324.643865][T10397] should_fail_ex.cold+0x5/0xa [ 324.643900][T10397] ? __pfx_crypto_alg_extsize+0x10/0x10 [ 324.643944][T10397] should_failslab+0xc2/0x120 [ 324.643975][T10397] ? __pfx_crypto_alg_extsize+0x10/0x10 [ 324.644017][T10397] __kmalloc_node_noprof+0xe6/0x850 [ 324.644061][T10397] ? crypto_alloc_tfmmem.isra.0+0x38/0x110 [ 324.644102][T10397] ? __pfx_crypto_alg_extsize+0x10/0x10 [ 324.644171][T10397] crypto_alloc_tfmmem.isra.0+0x38/0x110 [ 324.644212][T10397] crypto_create_tfm_node+0x85/0x350 [ 324.644254][T10397] crypto_alloc_tfm_node+0x102/0x260 [ 324.644297][T10397] x509_get_sig_params+0x2bb/0x6c0 [ 324.644339][T10397] ? __asan_memcpy+0x3c/0x60 [ 324.644384][T10397] x509_cert_parse+0x4e9/0x910 [ 324.644421][T10397] ? kasan_save_stack+0x3f/0x50 [ 324.644447][T10397] ? kasan_save_stack+0x30/0x50 [ 324.644472][T10397] ? kasan_save_track+0x14/0x30 [ 324.644502][T10397] pkcs7_extract_cert+0xa4/0x380 [ 324.644551][T10397] asn1_ber_decoder+0x12b3/0x2170 [ 324.644596][T10397] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 324.644653][T10397] pkcs7_parse_message+0x289/0x870 [ 324.644703][T10397] verify_pkcs7_signature+0x30/0xa0 [ 324.644738][T10397] valid_regdb+0x211/0x590 [ 324.644772][T10397] ? __pfx_valid_regdb+0x10/0x10 [ 324.644811][T10397] reg_reload_regdb+0x11a/0x460 [ 324.644847][T10397] ? __pfx_reg_reload_regdb+0x10/0x10 [ 324.644884][T10397] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 324.644926][T10397] ? nl80211_pre_doit+0x19a/0xae0 [ 324.644973][T10397] genl_family_rcv_msg_doit+0x214/0x300 [ 324.645021][T10397] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 324.645062][T10397] ? genl_get_cmd+0x3e7/0x760 [ 324.645116][T10397] ? bpf_lsm_capable+0x9/0x10 [ 324.645146][T10397] ? security_capable+0x80/0x260 [ 324.645177][T10397] genl_rcv_msg+0x560/0x800 [ 324.645216][T10397] ? __pfx_genl_rcv_msg+0x10/0x10 [ 324.645259][T10397] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 324.645293][T10397] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 324.645322][T10397] ? __pfx_nl80211_post_doit+0x10/0x10 [ 324.645377][T10397] netlink_rcv_skb+0x159/0x420 [ 324.645413][T10397] ? __pfx_genl_rcv_msg+0x10/0x10 [ 324.645455][T10397] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 324.645499][T10397] ? netlink_deliver_tap+0x1ae/0xcc0 [ 324.645535][T10397] genl_rcv+0x28/0x40 [ 324.645569][T10397] netlink_unicast+0x585/0x850 [ 324.645609][T10397] ? __pfx_netlink_unicast+0x10/0x10 [ 324.645654][T10397] netlink_sendmsg+0x8b0/0xda0 [ 324.645696][T10397] ? __pfx_netlink_sendmsg+0x10/0x10 [ 324.645731][T10397] ? __import_iovec+0x1d2/0x640 [ 324.645769][T10397] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 324.645803][T10397] ____sys_sendmsg+0x9e1/0xb70 [ 324.645840][T10397] ? __pfx_netlink_sendmsg+0x10/0x10 [ 324.645878][T10397] ? __pfx_____sys_sendmsg+0x10/0x10 [ 324.645921][T10397] ? __pfx_futex_wake_mark+0x10/0x10 [ 324.645963][T10397] ___sys_sendmsg+0x190/0x1e0 [ 324.646004][T10397] ? __pfx____sys_sendmsg+0x10/0x10 [ 324.646085][T10397] __sys_sendmsg+0x170/0x220 [ 324.646125][T10397] ? __pfx___sys_sendmsg+0x10/0x10 [ 324.646155][T10397] ? __x64_sys_futex+0x34f/0x4d0 [ 324.646192][T10397] ? exit_to_user_mode_loop+0xf3/0x670 [ 324.646241][T10397] ? rcu_is_watching+0x12/0xc0 [ 324.646278][T10397] do_syscall_64+0x115/0x840 [ 324.646316][T10397] ? clear_bhb_loop+0x40/0x90 [ 324.646350][T10397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.646379][T10397] RIP: 0033:0x7f8a08b9ce59 [ 324.646402][T10397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.646430][T10397] RSP: 002b:00007f8a09aeb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 324.646457][T10397] RAX: ffffffffffffffda RBX: 00007f8a08e15fa0 RCX: 00007f8a08b9ce59 [ 324.646476][T10397] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000007 [ 324.646493][T10397] RBP: 00007f8a08c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 324.646509][T10397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 324.646525][T10397] R13: 00007f8a08e16038 R14: 00007f8a08e15fa0 R15: 00007ffc54d072c8 [ 324.646561][T10397] [ 325.279703][T10426] openvswitch: netlink: Key 4 has unexpected len 0 expected 12 [ 325.870288][T10435] bridge0: port 3(batadv0) entered blocking state [ 325.889202][T10435] bridge0: port 3(batadv0) entered disabled state [ 325.909975][T10435] batadv0: entered allmulticast mode [ 325.922349][T10435] batadv0: entered promiscuous mode [ 325.941097][T10435] bridge0: port 3(batadv0) entered blocking state [ 325.947772][T10435] bridge0: port 3(batadv0) entered forwarding state [ 326.084690][T10438] FAULT_INJECTION: forcing a failure. [ 326.084690][T10438] name failslab, interval 1, probability 0, space 0, times 0 [ 326.117418][T10438] CPU: 0 UID: 0 PID: 10438 Comm: syz.0.847 Tainted: G L syzkaller #0 PREEMPT(full) [ 326.117462][T10438] Tainted: [L]=SOFTLOCKUP [ 326.117471][T10438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 326.117487][T10438] Call Trace: [ 326.117496][T10438] [ 326.117506][T10438] dump_stack_lvl+0x100/0x190 [ 326.117539][T10438] should_fail_ex.cold+0x5/0xa [ 326.117571][T10438] should_failslab+0xc2/0x120 [ 326.117601][T10438] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 326.117641][T10438] ? do_getname+0x35/0x390 [ 326.117677][T10438] ? fput+0x79/0x100 [ 326.117716][T10438] do_getname+0x35/0x390 [ 326.117757][T10438] __x64_sys_rename+0x57/0xb0 [ 326.117795][T10438] do_syscall_64+0x115/0x840 [ 326.117830][T10438] ? clear_bhb_loop+0x40/0x90 [ 326.117863][T10438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.117890][T10438] RIP: 0033:0x7f8a08b9ce59 [ 326.117914][T10438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.117939][T10438] RSP: 002b:00007f8a09aeb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 326.117964][T10438] RAX: ffffffffffffffda RBX: 00007f8a08e15fa0 RCX: 00007f8a08b9ce59 [ 326.117981][T10438] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 00002000000004c0 [ 326.117998][T10438] RBP: 00007f8a09aeb090 R08: 0000000000000000 R09: 0000000000000000 [ 326.118014][T10438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.118030][T10438] R13: 00007f8a08e16038 R14: 00007f8a08e15fa0 R15: 00007ffc54d072c8 [ 326.118066][T10438] [ 326.283318][T10436] FAULT_INJECTION: forcing a failure. [ 326.283318][T10436] name failslab, interval 1, probability 0, space 0, times 0 [ 326.323759][T10436] CPU: 1 UID: 0 PID: 10436 Comm: syz.1.845 Tainted: G L syzkaller #0 PREEMPT(full) [ 326.323809][T10436] Tainted: [L]=SOFTLOCKUP [ 326.323819][T10436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 326.323837][T10436] Call Trace: [ 326.323846][T10436] [ 326.323857][T10436] dump_stack_lvl+0x100/0x190 [ 326.323901][T10436] should_fail_ex.cold+0x5/0xa [ 326.323939][T10436] ? x509_fabricate_name.isra.0+0x5ea/0xa10 [ 326.323980][T10436] should_failslab+0xc2/0x120 [ 326.324013][T10436] __kmalloc_noprof+0xe0/0x850 [ 326.324038][T10436] ? __kmalloc_noprof+0x320/0x850 [ 326.324066][T10436] x509_fabricate_name.isra.0+0x5ea/0xa10 [ 326.324112][T10436] x509_note_issuer+0xf9/0x210 [ 326.324153][T10436] asn1_ber_decoder+0xd0c/0x2170 [ 326.324196][T10436] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 326.324252][T10436] x509_cert_parse+0x1c9/0x910 [ 326.324289][T10436] ? kasan_save_stack+0x3f/0x50 [ 326.324317][T10436] ? kasan_save_stack+0x30/0x50 [ 326.324344][T10436] ? kasan_save_track+0x14/0x30 [ 326.324373][T10436] pkcs7_extract_cert+0xa4/0x380 [ 326.324422][T10436] asn1_ber_decoder+0x12b3/0x2170 [ 326.324467][T10436] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 326.324524][T10436] pkcs7_parse_message+0x289/0x870 [ 326.324574][T10436] verify_pkcs7_signature+0x30/0xa0 [ 326.324609][T10436] valid_regdb+0x211/0x590 [ 326.324645][T10436] ? __pfx_valid_regdb+0x10/0x10 [ 326.324684][T10436] reg_reload_regdb+0x11a/0x460 [ 326.324720][T10436] ? __pfx_reg_reload_regdb+0x10/0x10 [ 326.324756][T10436] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 326.324798][T10436] ? nl80211_pre_doit+0x19a/0xae0 [ 326.324845][T10436] genl_family_rcv_msg_doit+0x214/0x300 [ 326.324900][T10436] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 326.324984][T10436] ? genl_get_cmd+0x3e7/0x760 [ 326.325032][T10436] ? bpf_lsm_capable+0x9/0x10 [ 326.325061][T10436] ? security_capable+0x80/0x260 [ 326.325097][T10436] genl_rcv_msg+0x560/0x800 [ 326.325150][T10436] ? __pfx_genl_rcv_msg+0x10/0x10 [ 326.325190][T10436] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 326.325234][T10436] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 326.325267][T10436] ? __pfx_nl80211_post_doit+0x10/0x10 [ 326.325322][T10436] netlink_rcv_skb+0x159/0x420 [ 326.325359][T10436] ? __pfx_genl_rcv_msg+0x10/0x10 [ 326.325400][T10436] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 326.325451][T10436] ? netlink_deliver_tap+0x1ae/0xcc0 [ 326.325490][T10436] genl_rcv+0x28/0x40 [ 326.325526][T10436] netlink_unicast+0x585/0x850 [ 326.325564][T10436] ? __pfx_netlink_unicast+0x10/0x10 [ 326.325606][T10436] netlink_sendmsg+0x8b0/0xda0 [ 326.325643][T10436] ? __pfx_netlink_sendmsg+0x10/0x10 [ 326.325673][T10436] ? __import_iovec+0x1d2/0x640 [ 326.325707][T10436] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 326.325739][T10436] ____sys_sendmsg+0x9e1/0xb70 [ 326.325769][T10436] ? __pfx_netlink_sendmsg+0x10/0x10 [ 326.325806][T10436] ? __pfx_____sys_sendmsg+0x10/0x10 [ 326.325846][T10436] ? __pfx_futex_wake_mark+0x10/0x10 [ 326.325896][T10436] ___sys_sendmsg+0x190/0x1e0 [ 326.325936][T10436] ? __pfx____sys_sendmsg+0x10/0x10 [ 326.326029][T10436] __sys_sendmsg+0x170/0x220 [ 326.326059][T10436] ? __pfx___sys_sendmsg+0x10/0x10 [ 326.326082][T10436] ? __x64_sys_futex+0x34f/0x4d0 [ 326.326116][T10436] ? rcu_is_watching+0x12/0xc0 [ 326.326148][T10436] do_syscall_64+0x115/0x840 [ 326.326180][T10436] ? clear_bhb_loop+0x40/0x90 [ 326.326216][T10436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.326244][T10436] RIP: 0033:0x7f50aa19ce59 [ 326.326265][T10436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.326290][T10436] RSP: 002b:00007f50ab07e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 326.326313][T10436] RAX: ffffffffffffffda RBX: 00007f50aa416090 RCX: 00007f50aa19ce59 [ 326.326330][T10436] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000007 [ 326.326347][T10436] RBP: 00007f50aa232d6f R08: 0000000000000000 R09: 0000000000000000 [ 326.326362][T10436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 326.326377][T10436] R13: 00007f50aa416128 R14: 00007f50aa416090 R15: 00007ffce9d760f8 [ 326.326410][T10436] [ 326.737652][ T8694] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 326.749075][ T8694] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 327.071379][T10434] hub 1-0:1.0: USB hub found [ 327.077894][T10434] hub 1-0:1.0: 1 port detected [ 327.840848][T10456] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 327.848995][T10456] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 327.877445][T10456] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 327.903915][T10456] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 328.053715][T10456] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 328.090694][T10456] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 328.210746][T10456] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 328.553511][T10477] FAULT_INJECTION: forcing a failure. [ 328.553511][T10477] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 328.575322][T10477] CPU: 0 UID: 0 PID: 10477 Comm: syz.2.853 Tainted: G L syzkaller #0 PREEMPT(full) [ 328.575369][T10477] Tainted: [L]=SOFTLOCKUP [ 328.575379][T10477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 328.575396][T10477] Call Trace: [ 328.575406][T10477] [ 328.575416][T10477] dump_stack_lvl+0x100/0x190 [ 328.575449][T10477] should_fail_ex.cold+0x5/0xa [ 328.575479][T10477] ? prepare_alloc_pages+0x16d/0x5f0 [ 328.575520][T10477] should_fail_alloc_page+0xeb/0x140 [ 328.575555][T10477] prepare_alloc_pages+0x1f0/0x5f0 [ 328.575591][T10477] ? kernel_text_address+0x8d/0x100 [ 328.575622][T10477] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 328.575680][T10477] ? copy_splice_read+0x1a3/0xb90 [ 328.575711][T10477] ? stack_trace_save+0x8e/0xc0 [ 328.575743][T10477] ? __pfx_stack_trace_save+0x10/0x10 [ 328.575777][T10477] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 328.575822][T10477] ? copy_splice_read+0x1a3/0xb90 [ 328.575851][T10477] ? kasan_save_stack+0x3f/0x50 [ 328.575875][T10477] ? kasan_save_stack+0x30/0x50 [ 328.575902][T10477] ? kasan_save_track+0x14/0x30 [ 328.575930][T10477] ? __kasan_kmalloc+0xaa/0xb0 [ 328.575953][T10477] ? __kmalloc_noprof+0x301/0x850 [ 328.575977][T10477] ? copy_splice_read+0x1a3/0xb90 [ 328.576013][T10477] ? do_syscall_64+0x115/0x840 [ 328.576051][T10477] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.576100][T10477] alloc_pages_bulk_noprof+0x649/0x1360 [ 328.576168][T10477] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 328.576236][T10477] ? __kmalloc_noprof+0x320/0x850 [ 328.576277][T10477] copy_splice_read+0x1e1/0xb90 [ 328.576322][T10477] ? __pfx_copy_splice_read+0x10/0x10 [ 328.576368][T10477] ? lockdep_init_map_type+0x5c/0x250 [ 328.576412][T10477] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 328.576446][T10477] ? __pfx_filemap_splice_read+0x10/0x10 [ 328.576476][T10477] do_splice_read+0x2bd/0x370 [ 328.576511][T10477] splice_direct_to_actor+0x2a1/0xa30 [ 328.576549][T10477] ? __pfx_direct_splice_actor+0x10/0x10 [ 328.576587][T10477] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 328.576625][T10477] do_splice_direct+0x174/0x240 [ 328.576658][T10477] ? __pfx_do_splice_direct+0x10/0x10 [ 328.576696][T10477] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 328.576730][T10477] ? bpf_lsm_file_permission+0x9/0x10 [ 328.576756][T10477] ? security_file_permission+0x76/0x210 [ 328.576794][T10477] ? rw_verify_area+0xce/0x6d0 [ 328.576826][T10477] do_sendfile+0xadc/0xe20 [ 328.576864][T10477] ? __pfx_do_sendfile+0x10/0x10 [ 328.576909][T10477] ? __x64_sys_futex+0x34f/0x4d0 [ 328.576937][T10477] ? __x64_sys_futex+0x358/0x4d0 [ 328.576971][T10477] __x64_sys_sendfile64+0x1d8/0x220 [ 328.577009][T10477] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 328.577047][T10477] ? rcu_is_watching+0x12/0xc0 [ 328.577083][T10477] do_syscall_64+0x115/0x840 [ 328.577118][T10477] ? clear_bhb_loop+0x40/0x90 [ 328.577151][T10477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.577179][T10477] RIP: 0033:0x7eff8b39ce59 [ 328.577203][T10477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 328.577238][T10477] RSP: 002b:00007eff8c24a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 328.577264][T10477] RAX: ffffffffffffffda RBX: 00007eff8b615fa0 RCX: 00007eff8b39ce59 [ 328.577284][T10477] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 328.577299][T10477] RBP: 00007eff8b432d6f R08: 0000000000000000 R09: 0000000000000000 [ 328.577316][T10477] R10: 0000400000000006 R11: 0000000000000246 R12: 0000000000000000 [ 328.577331][T10477] R13: 00007eff8b616038 R14: 00007eff8b615fa0 R15: 00007fff82bf6fc8 [ 328.577367][T10477] [ 329.248977][T10504] 0 [ 329.362125][T10509] 0 [ 329.435776][T10504] netlink: zone id is out of range [ 329.471275][T10504] netlink: zone id is out of range [ 329.488036][T10504] netlink: zone id is out of range [ 329.515376][T10504] netlink: zone id is out of range [ 329.537656][T10504] netlink: zone id is out of range [ 329.554760][T10504] netlink: zone id is out of range [ 329.560176][T10504] netlink: zone id is out of range [ 329.565948][T10504] netlink: zone id is out of range [ 329.574259][T10504] netlink: zone id is out of range [ 329.801348][ T5640] Bluetooth: hci1: command 0x2016 tx timeout [ 329.888997][ T5640] Bluetooth: hci2: command 0x2016 tx timeout [ 329.972842][ T5640] Bluetooth: hci3: command 0x2016 tx timeout [ 330.121265][ T5640] Bluetooth: hci4: command 0x0c1a tx timeout [ 330.289602][T10539] FAULT_INJECTION: forcing a failure. [ 330.289602][T10539] name failslab, interval 1, probability 0, space 0, times 0 [ 330.311410][T10539] CPU: 1 UID: 0 PID: 10539 Comm: syz.1.861 Tainted: G L syzkaller #0 PREEMPT(full) [ 330.311454][T10539] Tainted: [L]=SOFTLOCKUP [ 330.311463][T10539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 330.311479][T10539] Call Trace: [ 330.311488][T10539] [ 330.311498][T10539] dump_stack_lvl+0x100/0x190 [ 330.311530][T10539] should_fail_ex.cold+0x5/0xa [ 330.311561][T10539] should_failslab+0xc2/0x120 [ 330.311589][T10539] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 330.311626][T10539] ? do_getname+0x35/0x390 [ 330.311668][T10539] ? strncpy_from_user+0x19d/0x2d0 [ 330.311707][T10539] do_getname+0x35/0x390 [ 330.311748][T10539] __x64_sys_rename+0x66/0xb0 [ 330.311786][T10539] do_syscall_64+0x115/0x840 [ 330.311821][T10539] ? clear_bhb_loop+0x40/0x90 [ 330.311854][T10539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.311881][T10539] RIP: 0033:0x7f50aa19ce59 [ 330.311904][T10539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 330.311929][T10539] RSP: 002b:00007f50ab09f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 330.311955][T10539] RAX: ffffffffffffffda RBX: 00007f50aa415fa0 RCX: 00007f50aa19ce59 [ 330.311973][T10539] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 00002000000004c0 [ 330.311990][T10539] RBP: 00007f50ab09f090 R08: 0000000000000000 R09: 0000000000000000 [ 330.312006][T10539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.312021][T10539] R13: 00007f50aa416038 R14: 00007f50aa415fa0 R15: 00007ffce9d760f8 [ 330.312057][T10539] [ 330.641896][T10548] bridge0: port 4(batadv0) entered blocking state [ 330.641954][T10548] bridge0: port 4(batadv0) entered disabled state [ 330.642063][T10548] batadv0: entered allmulticast mode [ 330.670016][T10548] batadv0: entered promiscuous mode [ 330.673280][T10548] bridge0: port 4(batadv0) entered blocking state [ 330.673398][T10548] bridge0: port 4(batadv0) entered forwarding state [ 330.764784][T10550] vivid-007: ================= START STATUS ================= [ 330.764840][T10550] vivid-007: Generate PTS: true [ 330.764901][T10550] vivid-007: Generate SCR: true [ 330.764944][T10550] tpg source WxH: 320x240 (Y'CbCr) [ 330.764961][T10550] tpg field: 1 [ 330.764971][T10550] tpg crop: (0,0)/320x240 [ 330.764988][T10550] tpg compose: (0,0)/320x240 [ 330.765006][T10550] tpg colorspace: 8 [ 330.765016][T10550] tpg transfer function: 0/0 [ 330.765028][T10550] tpg Y'CbCr encoding: 0/0 [ 330.765050][T10550] tpg quantization: 0/0 [ 330.765063][T10550] tpg RGB range: 0/2 [ 330.765085][T10550] vivid-007: ================== END STATUS ================== [ 331.009918][ T35] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 331.009959][ T35] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 331.872166][ T5640] Bluetooth: hci1: command 0x2016 tx timeout [ 332.190152][ T5640] Bluetooth: hci4: command 0x0c1a tx timeout [ 332.203315][T10587] FAULT_INJECTION: forcing a failure. [ 332.203315][T10587] name failslab, interval 1, probability 0, space 0, times 0 [ 332.259583][T10587] CPU: 1 UID: 0 PID: 10587 Comm: syz.0.872 Tainted: G L syzkaller #0 PREEMPT(full) [ 332.259627][T10587] Tainted: [L]=SOFTLOCKUP [ 332.259636][T10587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 332.259651][T10587] Call Trace: [ 332.259660][T10587] [ 332.259672][T10587] dump_stack_lvl+0x100/0x190 [ 332.259702][T10587] should_fail_ex.cold+0x5/0xa [ 332.259734][T10587] should_failslab+0xc2/0x120 [ 332.259762][T10587] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 332.259798][T10587] ? do_getname+0x35/0x390 [ 332.259831][T10587] ? strncpy_from_user+0x19d/0x2d0 [ 332.259868][T10587] do_getname+0x35/0x390 [ 332.259906][T10587] __x64_sys_rename+0x66/0xb0 [ 332.259954][T10587] do_syscall_64+0x115/0x840 [ 332.259989][T10587] ? clear_bhb_loop+0x40/0x90 [ 332.260022][T10587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.260049][T10587] RIP: 0033:0x7f8a08b9ce59 [ 332.260072][T10587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 332.260097][T10587] RSP: 002b:00007f8a09aeb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 332.260123][T10587] RAX: ffffffffffffffda RBX: 00007f8a08e15fa0 RCX: 00007f8a08b9ce59 [ 332.260141][T10587] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 00002000000004c0 [ 332.260158][T10587] RBP: 00007f8a09aeb090 R08: 0000000000000000 R09: 0000000000000000 [ 332.260175][T10587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.260190][T10587] R13: 00007f8a08e16038 R14: 00007f8a08e15fa0 R15: 00007ffc54d072c8 [ 332.260226][T10587] [ 332.627475][ T8680] EXT4-fs (sda1): Delayed block allocation failed for inode 2030 at logical offset 913 with max blocks 3 with error 117 [ 332.664173][ T8680] EXT4-fs (sda1): This should not happen!! Data will be lost [ 332.664173][ T8680] [ 332.732132][T10588] FAULT_INJECTION: forcing a failure. [ 332.732132][T10588] name failslab, interval 1, probability 0, space 0, times 0 [ 332.732178][ T8680] EXT4-fs (sda1): Delayed block allocation failed for inode 2030 at logical offset 913 with max blocks 1 with error 117 [ 332.762693][ T8680] EXT4-fs (sda1): This should not happen!! Data will be lost [ 332.762693][ T8680] [ 332.792653][T10588] CPU: 1 UID: 0 PID: 10588 Comm: syz.3.865 Tainted: G L syzkaller #0 PREEMPT(full) [ 332.792700][T10588] Tainted: [L]=SOFTLOCKUP [ 332.792710][T10588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 332.792728][T10588] Call Trace: [ 332.792737][T10588] [ 332.792748][T10588] dump_stack_lvl+0x100/0x190 [ 332.792785][T10588] should_fail_ex.cold+0x5/0xa [ 332.792821][T10588] ? asymmetric_key_generate_id+0x7e/0x180 [ 332.792856][T10588] should_failslab+0xc2/0x120 [ 332.792889][T10588] __kmalloc_noprof+0xe0/0x850 [ 332.792925][T10588] ? __pfx_x509_note_OID+0x10/0x10 [ 332.792974][T10588] asymmetric_key_generate_id+0x7e/0x180 [ 332.793016][T10588] x509_note_issuer+0x128/0x210 [ 332.793058][T10588] asn1_ber_decoder+0xd0c/0x2170 [ 332.793104][T10588] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 332.793161][T10588] x509_cert_parse+0x1c9/0x910 [ 332.793198][T10588] ? kasan_save_stack+0x3f/0x50 [ 332.793225][T10588] ? kasan_save_stack+0x30/0x50 [ 332.793251][T10588] ? kasan_save_track+0x14/0x30 [ 332.793282][T10588] pkcs7_extract_cert+0xa4/0x380 [ 332.793330][T10588] asn1_ber_decoder+0x12b3/0x2170 [ 332.793376][T10588] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 332.793431][T10588] pkcs7_parse_message+0x289/0x870 [ 332.793480][T10588] verify_pkcs7_signature+0x30/0xa0 [ 332.793515][T10588] valid_regdb+0x211/0x590 [ 332.793551][T10588] ? __pfx_valid_regdb+0x10/0x10 [ 332.793589][T10588] reg_reload_regdb+0x11a/0x460 [ 332.793625][T10588] ? __pfx_reg_reload_regdb+0x10/0x10 [ 332.793659][T10588] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 332.793692][T10588] ? nl80211_pre_doit+0x19a/0xae0 [ 332.793734][T10588] genl_family_rcv_msg_doit+0x214/0x300 [ 332.793776][T10588] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 332.793818][T10588] ? genl_get_cmd+0x3e7/0x760 [ 332.793866][T10588] ? bpf_lsm_capable+0x9/0x10 [ 332.793902][T10588] ? security_capable+0x80/0x260 [ 332.793938][T10588] genl_rcv_msg+0x560/0x800 [ 332.793984][T10588] ? __pfx_genl_rcv_msg+0x10/0x10 [ 332.794026][T10588] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 332.794067][T10588] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 332.794098][T10588] ? __pfx_nl80211_post_doit+0x10/0x10 [ 332.794153][T10588] netlink_rcv_skb+0x159/0x420 [ 332.794190][T10588] ? __pfx_genl_rcv_msg+0x10/0x10 [ 332.794232][T10588] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 332.794284][T10588] ? netlink_deliver_tap+0x1ae/0xcc0 [ 332.794325][T10588] genl_rcv+0x28/0x40 [ 332.794361][T10588] netlink_unicast+0x585/0x850 [ 332.794402][T10588] ? __pfx_netlink_unicast+0x10/0x10 [ 332.794449][T10588] netlink_sendmsg+0x8b0/0xda0 [ 332.794493][T10588] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.794527][T10588] ? __import_iovec+0x1d2/0x640 [ 332.794569][T10588] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 332.794601][T10588] ____sys_sendmsg+0x9e1/0xb70 [ 332.794633][T10588] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.794667][T10588] ? __pfx_____sys_sendmsg+0x10/0x10 [ 332.794703][T10588] ? __pfx_futex_wake_mark+0x10/0x10 [ 332.794739][T10588] ___sys_sendmsg+0x190/0x1e0 [ 332.794778][T10588] ? __pfx____sys_sendmsg+0x10/0x10 [ 332.794857][T10588] __sys_sendmsg+0x170/0x220 [ 332.794885][T10588] ? __pfx___sys_sendmsg+0x10/0x10 [ 332.794920][T10588] ? __x64_sys_futex+0x34f/0x4d0 [ 332.794956][T10588] ? rcu_is_watching+0x12/0xc0 [ 332.794989][T10588] do_syscall_64+0x115/0x840 [ 332.795022][T10588] ? clear_bhb_loop+0x40/0x90 [ 332.795057][T10588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.795085][T10588] RIP: 0033:0x7fe606b9ce59 [ 332.795109][T10588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 332.795136][T10588] RSP: 002b:00007fe607a97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 332.795162][T10588] RAX: ffffffffffffffda RBX: 00007fe606e16090 RCX: 00007fe606b9ce59 [ 332.795181][T10588] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000007 [ 332.795197][T10588] RBP: 00007fe606c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 332.795211][T10588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 332.795224][T10588] R13: 00007fe606e16128 R14: 00007fe606e16090 R15: 00007ffc8e832398 [ 332.795253][T10588] [ 334.270798][ T5640] Bluetooth: hci4: command 0x0c1a tx timeout [ 335.173398][T10650] netlink: 4 bytes leftover after parsing attributes in process `syz.3.877'. [ 335.189395][T10652] netlink: 25 bytes leftover after parsing attributes in process `syz.3.877'. [ 335.200277][T10650] netlink: 25 bytes leftover after parsing attributes in process `syz.3.877'. [ 335.367074][T10660] FAULT_INJECTION: forcing a failure. [ 335.367074][T10660] name failslab, interval 1, probability 0, space 0, times 0 [ 335.380274][T10660] CPU: 0 UID: 0 PID: 10660 Comm: syz.1.881 Tainted: G L syzkaller #0 PREEMPT(full) [ 335.380298][T10660] Tainted: [L]=SOFTLOCKUP [ 335.380303][T10660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 335.380312][T10660] Call Trace: [ 335.380317][T10660] [ 335.380322][T10660] dump_stack_lvl+0x100/0x190 [ 335.380341][T10660] should_fail_ex.cold+0x5/0xa [ 335.380360][T10660] should_failslab+0xc2/0x120 [ 335.380377][T10660] __kmalloc_cache_noprof+0x7a/0x6f0 [ 335.380397][T10660] ? nd_alloc_stack+0x85/0x110 [ 335.380420][T10660] nd_alloc_stack+0x85/0x110 [ 335.380439][T10660] pick_link+0xd4a/0x13c0 [ 335.380455][T10660] step_into_slowpath+0x9ba/0xf90 [ 335.380474][T10660] ? __pfx_step_into_slowpath+0x10/0x10 [ 335.380492][T10660] ? lookup_fast+0x2da/0x600 [ 335.380504][T10660] ? inode_permission+0x374/0x620 [ 335.380528][T10660] link_path_walk+0xf28/0x1cc0 [ 335.380549][T10660] __filename_parentat+0x213/0x740 [ 335.380567][T10660] ? __pfx___filename_parentat+0x10/0x10 [ 335.380603][T10660] filename_renameat2+0x23d/0xa60 [ 335.380629][T10660] ? __pfx_filename_renameat2+0x10/0x10 [ 335.380653][T10660] ? __might_fault+0xc5/0x140 [ 335.380684][T10660] ? do_getname+0x191/0x390 [ 335.380706][T10660] __x64_sys_rename+0x81/0xb0 [ 335.380726][T10660] do_syscall_64+0x115/0x840 [ 335.380750][T10660] ? clear_bhb_loop+0x40/0x90 [ 335.380767][T10660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.380781][T10660] RIP: 0033:0x7f50aa19ce59 [ 335.380794][T10660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.380807][T10660] RSP: 002b:00007f50ab09f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 335.380821][T10660] RAX: ffffffffffffffda RBX: 00007f50aa415fa0 RCX: 00007f50aa19ce59 [ 335.380831][T10660] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 00002000000004c0 [ 335.380839][T10660] RBP: 00007f50ab09f090 R08: 0000000000000000 R09: 0000000000000000 [ 335.380847][T10660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.380856][T10660] R13: 00007f50aa416038 R14: 00007f50aa415fa0 R15: 00007ffce9d760f8 [ 335.380874][T10660] [ 335.816183][T10667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.883'. [ 335.843428][T10667] net_ratelimit: 48 callbacks suppressed [ 335.843449][T10667] openvswitch: netlink: Flow key attr not present in new flow. [ 335.860788][T10664] netlink: 28 bytes leftover after parsing attributes in process `syz.1.882'. [ 335.884666][T10664] bond0: entered promiscuous mode [ 335.889903][T10664] bond_slave_0: entered promiscuous mode [ 335.897834][T10664] bond_slave_1: entered promiscuous mode [ 336.678109][T10684] binder: 10680:10684 ioctl 400c620e 0 returned -22 [ 337.017645][T10703] : Can't lookup blockdev [ 337.504995][T10714] FAULT_INJECTION: forcing a failure. [ 337.504995][T10714] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 337.521462][T10714] CPU: 0 UID: 0 PID: 10714 Comm: syz.1.891 Tainted: G L syzkaller #0 PREEMPT(full) [ 337.521499][T10714] Tainted: [L]=SOFTLOCKUP [ 337.521507][T10714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 337.521522][T10714] Call Trace: [ 337.521529][T10714] [ 337.521539][T10714] dump_stack_lvl+0x100/0x190 [ 337.521569][T10714] should_fail_ex.cold+0x5/0xa [ 337.521602][T10714] _copy_to_user+0x32/0xd0 [ 337.521636][T10714] simple_read_from_buffer+0xcb/0x170 [ 337.521668][T10714] proc_fail_nth_read+0x1af/0x230 [ 337.521706][T10714] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 337.521744][T10714] ? rw_verify_area+0xce/0x6d0 [ 337.521768][T10714] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 337.521805][T10714] vfs_read+0x1e4/0xb30 [ 337.521839][T10714] ? __pfx_vfs_read+0x10/0x10 [ 337.521866][T10714] ? __fget_files+0x215/0x3d0 [ 337.521900][T10714] ? __fget_files+0x21f/0x3d0 [ 337.521939][T10714] ksys_read+0x12a/0x250 [ 337.521968][T10714] ? __pfx_ksys_read+0x10/0x10 [ 337.522008][T10714] ? rcu_is_watching+0x12/0xc0 [ 337.522044][T10714] do_syscall_64+0x115/0x840 [ 337.522079][T10714] ? clear_bhb_loop+0x40/0x90 [ 337.522112][T10714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.522140][T10714] RIP: 0033:0x7f50aa15d68e [ 337.522161][T10714] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 337.522187][T10714] RSP: 002b:00007f50ab09efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 337.522213][T10714] RAX: ffffffffffffffda RBX: 00007f50ab09f6c0 RCX: 00007f50aa15d68e [ 337.522230][T10714] RDX: 000000000000000f RSI: 00007f50ab09f0a0 RDI: 0000000000000003 [ 337.522247][T10714] RBP: 00007f50ab09f090 R08: 0000000000000000 R09: 0000000000000000 [ 337.522263][T10714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.522278][T10714] R13: 00007f50aa416038 R14: 00007f50aa415fa0 R15: 00007ffce9d760f8 [ 337.522315][T10714] [ 338.502165][ T29] audit: type=1804 audit(1780604920.013:19): pid=10740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.896" name="/newroot/212/file0" dev="tmpfs" ino=1130 res=1 errno=0 [ 338.588494][T10729] netlink: 342 bytes leftover after parsing attributes in process `syz.0.894'. [ 339.240928][T10766] FAULT_INJECTION: forcing a failure. [ 339.240928][T10766] name failslab, interval 1, probability 0, space 0, times 0 [ 339.310669][T10766] CPU: 1 UID: 0 PID: 10766 Comm: syz.1.901 Tainted: G L syzkaller #0 PREEMPT(full) [ 339.310715][T10766] Tainted: [L]=SOFTLOCKUP [ 339.310725][T10766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 339.310742][T10766] Call Trace: [ 339.310751][T10766] [ 339.310761][T10766] dump_stack_lvl+0x100/0x190 [ 339.310796][T10766] should_fail_ex.cold+0x5/0xa [ 339.310832][T10766] should_failslab+0xc2/0x120 [ 339.310866][T10766] __kmalloc_cache_noprof+0x7a/0x6f0 [ 339.310904][T10766] ? x509_cert_parse+0xfc/0x910 [ 339.310950][T10766] x509_cert_parse+0xfc/0x910 [ 339.310987][T10766] ? kasan_save_stack+0x3f/0x50 [ 339.311014][T10766] ? kasan_save_stack+0x30/0x50 [ 339.311040][T10766] ? kasan_save_track+0x14/0x30 [ 339.311071][T10766] pkcs7_extract_cert+0xa4/0x380 [ 339.311117][T10766] asn1_ber_decoder+0x12b3/0x2170 [ 339.311162][T10766] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 339.311215][T10766] pkcs7_parse_message+0x289/0x870 [ 339.311262][T10766] verify_pkcs7_signature+0x30/0xa0 [ 339.311295][T10766] valid_regdb+0x211/0x590 [ 339.311330][T10766] ? __pfx_valid_regdb+0x10/0x10 [ 339.311366][T10766] reg_reload_regdb+0x11a/0x460 [ 339.311408][T10766] ? __pfx_reg_reload_regdb+0x10/0x10 [ 339.311445][T10766] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 339.311485][T10766] ? nl80211_pre_doit+0x19a/0xae0 [ 339.311530][T10766] genl_family_rcv_msg_doit+0x214/0x300 [ 339.311577][T10766] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 339.311618][T10766] ? genl_get_cmd+0x3e7/0x760 [ 339.311664][T10766] ? bpf_lsm_capable+0x9/0x10 [ 339.311693][T10766] ? security_capable+0x80/0x260 [ 339.311728][T10766] genl_rcv_msg+0x560/0x800 [ 339.311774][T10766] ? __pfx_genl_rcv_msg+0x10/0x10 [ 339.311814][T10766] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 339.311855][T10766] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 339.311886][T10766] ? __pfx_nl80211_post_doit+0x10/0x10 [ 339.311940][T10766] netlink_rcv_skb+0x159/0x420 [ 339.311976][T10766] ? __pfx_genl_rcv_msg+0x10/0x10 [ 339.312019][T10766] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 339.312070][T10766] ? netlink_deliver_tap+0x1ae/0xcc0 [ 339.312111][T10766] genl_rcv+0x28/0x40 [ 339.312147][T10766] netlink_unicast+0x585/0x850 [ 339.312189][T10766] ? __pfx_netlink_unicast+0x10/0x10 [ 339.312235][T10766] netlink_sendmsg+0x8b0/0xda0 [ 339.312276][T10766] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.312311][T10766] ? __import_iovec+0x1d2/0x640 [ 339.312354][T10766] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 339.312397][T10766] ____sys_sendmsg+0x9e1/0xb70 [ 339.312433][T10766] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.312473][T10766] ? __pfx_____sys_sendmsg+0x10/0x10 [ 339.312518][T10766] ? __pfx_futex_wake_mark+0x10/0x10 [ 339.312560][T10766] ___sys_sendmsg+0x190/0x1e0 [ 339.312601][T10766] ? __pfx____sys_sendmsg+0x10/0x10 [ 339.312683][T10766] __sys_sendmsg+0x170/0x220 [ 339.312712][T10766] ? __pfx___sys_sendmsg+0x10/0x10 [ 339.312739][T10766] ? __x64_sys_futex+0x34f/0x4d0 [ 339.312781][T10766] ? rcu_is_watching+0x12/0xc0 [ 339.312818][T10766] do_syscall_64+0x115/0x840 [ 339.312856][T10766] ? clear_bhb_loop+0x40/0x90 [ 339.312888][T10766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.312918][T10766] RIP: 0033:0x7f50aa19ce59 [ 339.312942][T10766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.312969][T10766] RSP: 002b:00007f50ab07e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 339.312996][T10766] RAX: ffffffffffffffda RBX: 00007f50aa416090 RCX: 00007f50aa19ce59 [ 339.313014][T10766] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000007 [ 339.313032][T10766] RBP: 00007f50aa232d6f R08: 0000000000000000 R09: 0000000000000000 [ 339.313050][T10766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 339.313065][T10766] R13: 00007f50aa416128 R14: 00007f50aa416090 R15: 00007ffce9d760f8 [ 339.313098][T10766] [ 340.024704][T10777] netlink: 28 bytes leftover after parsing attributes in process `syz.2.904'. [ 340.765868][T10789] netlink: 28 bytes leftover after parsing attributes in process `syz.0.906'. [ 341.341134][T10786] [U]  [ 341.364606][T10797] FAULT_INJECTION: forcing a failure. [ 341.364606][T10797] name failslab, interval 1, probability 0, space 0, times 0 [ 341.490867][T10797] CPU: 1 UID: 0 PID: 10797 Comm: syz.1.907 Tainted: G L syzkaller #0 PREEMPT(full) [ 341.490912][T10797] Tainted: [L]=SOFTLOCKUP [ 341.490922][T10797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 341.490940][T10797] Call Trace: [ 341.490950][T10797] [ 341.490962][T10797] dump_stack_lvl+0x100/0x190 [ 341.490998][T10797] should_fail_ex.cold+0x5/0xa [ 341.491036][T10797] ? security_inode_init_security+0x113/0x370 [ 341.491079][T10797] should_failslab+0xc2/0x120 [ 341.491113][T10797] __kmalloc_noprof+0xe0/0x850 [ 341.491149][T10797] security_inode_init_security+0x113/0x370 [ 341.491195][T10797] ? __pfx_shmem_initxattrs+0x10/0x10 [ 341.491231][T10797] ? __pfx_security_inode_init_security+0x10/0x10 [ 341.491275][T10797] ? make_vfsgid+0xf1/0x140 [ 341.491306][T10797] shmem_mknod+0x2ce/0x480 [ 341.491347][T10797] ? __pfx_shmem_mknod+0x10/0x10 [ 341.491395][T10797] vfs_create+0x301/0x6c0 [ 341.491427][T10797] filename_mknodat+0x2de/0x7f0 [ 341.491470][T10797] ? __pfx_filename_mknodat+0x10/0x10 [ 341.491506][T10797] ? strncpy_from_user+0x19d/0x2d0 [ 341.491551][T10797] ? do_getname+0x191/0x390 [ 341.491605][T10797] __x64_sys_mknod+0x8f/0xc0 [ 341.491645][T10797] do_syscall_64+0x115/0x840 [ 341.491683][T10797] ? clear_bhb_loop+0x40/0x90 [ 341.491718][T10797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.491746][T10797] RIP: 0033:0x7f50aa19ce59 [ 341.491777][T10797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.491805][T10797] RSP: 002b:00007f50ab05d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 341.491833][T10797] RAX: ffffffffffffffda RBX: 00007f50aa416180 RCX: 00007f50aa19ce59 [ 341.491852][T10797] RDX: 0000000000000009 RSI: 0000000000000002 RDI: 0000000000000000 [ 341.491869][T10797] RBP: 00007f50aa232d6f R08: 0000000000000000 R09: 0000000000000000 [ 341.491886][T10797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 341.491903][T10797] R13: 00007f50aa416218 R14: 00007f50aa416180 R15: 00007ffce9d760f8 [ 341.491943][T10797] [ 342.424597][T10806] smpboot: CPU 1 is now offline [ 343.483689][T10832] 0 [ 343.799727][T10830] vivid-007: ================= START STATUS ================= [ 343.845832][T10830] vivid-007: Generate PTS: true [ 343.898688][T10830] vivid-007: Generate SCR: true [ 343.914246][T10830] tpg source WxH: 320x240 (Y'CbCr) [ 343.931564][T10830] tpg field: 1 [ 343.969842][T10830] tpg crop: (0,0)/320x240 [ 344.000574][T10830] tpg compose: (0,0)/320x240 [ 344.041431][T10830] tpg colorspace: 8 [ 344.101652][T10830] tpg transfer function: 0/0 [ 344.145225][T10830] tpg Y'CbCr encoding: 0/0 [ 344.204214][T10830] tpg quantization: 0/0 [ 344.245174][T10830] tpg RGB range: 0/2 [ 344.272011][T10830] vivid-007: ================== END STATUS ================== [ 345.032426][T10860] FAULT_INJECTION: forcing a failure. [ 345.032426][T10860] name failslab, interval 1, probability 0, space 0, times 0 [ 345.081767][T10860] CPU: 0 UID: 0 PID: 10860 Comm: syz.2.918 Tainted: G L syzkaller #0 PREEMPT(full) [ 345.081792][T10860] Tainted: [L]=SOFTLOCKUP [ 345.081797][T10860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 345.081806][T10860] Call Trace: [ 345.081811][T10860] [ 345.081816][T10860] dump_stack_lvl+0x100/0x190 [ 345.081836][T10860] should_fail_ex.cold+0x5/0xa [ 345.081854][T10860] ? __register_sysctl_table+0xac/0x1650 [ 345.081873][T10860] should_failslab+0xc2/0x120 [ 345.081891][T10860] __kmalloc_noprof+0xe0/0x850 [ 345.081908][T10860] __register_sysctl_table+0xac/0x1650 [ 345.081934][T10860] ? is_module_address+0x5f/0xf0 [ 345.081951][T10860] ? __pfx___register_sysctl_table+0x10/0x10 [ 345.081969][T10860] ? is_module_address+0x69/0xf0 [ 345.081981][T10860] ? register_net_sysctl_sz+0x222/0x430 [ 345.082009][T10860] __devinet_sysctl_register+0x1b9/0x360 [ 345.082031][T10860] ? trace_kmalloc+0xe3/0x110 [ 345.082048][T10860] ? __pfx___devinet_sysctl_register+0x10/0x10 [ 345.082072][T10860] ? __asan_memcpy+0x3c/0x60 [ 345.082095][T10860] devinet_init_net+0x303/0x8d0 [ 345.082116][T10860] ? __pfx_devinet_init_net+0x10/0x10 [ 345.082136][T10860] ops_init+0x1e2/0x5f0 [ 345.082153][T10860] setup_net+0x118/0x3a0 [ 345.082168][T10860] ? __pfx_setup_net+0x10/0x10 [ 345.082183][T10860] ? mutex_init_lockdep+0xf1/0x120 [ 345.082201][T10860] copy_net_ns+0x46f/0x7c0 [ 345.082220][T10860] create_new_namespaces+0x3ea/0xac0 [ 345.082242][T10860] unshare_nsproxy_namespaces+0xf2/0x220 [ 345.082261][T10860] ksys_unshare+0x438/0xab0 [ 345.082284][T10860] ? __pfx_ksys_unshare+0x10/0x10 [ 345.082302][T10860] ? xfd_validate_state+0x129/0x190 [ 345.082316][T10860] ? exit_to_user_mode_loop+0xf3/0x670 [ 345.082344][T10860] __x64_sys_unshare+0x31/0x40 [ 345.082371][T10860] do_syscall_64+0x115/0x840 [ 345.082391][T10860] ? clear_bhb_loop+0x40/0x90 [ 345.082409][T10860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.082423][T10860] RIP: 0033:0x7eff8b39ce59 [ 345.082436][T10860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.082450][T10860] RSP: 002b:00007eff8c24a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 345.082464][T10860] RAX: ffffffffffffffda RBX: 00007eff8b615fa0 RCX: 00007eff8b39ce59 [ 345.082474][T10860] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 345.082482][T10860] RBP: 00007eff8b432d6f R08: 0000000000000000 R09: 0000000000000000 [ 345.082490][T10860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 345.082498][T10860] R13: 00007eff8b616038 R14: 00007eff8b615fa0 R15: 00007fff82bf6fc8 [ 345.082519][T10860] [ 346.065922][T10876] capability: warning: `syz.0.921' uses deprecated v2 capabilities in a way that may be insecure [ 346.145767][T10876] random: crng reseeded on system resumption [ 346.300604][T10877] Process accounting resumed [ 350.057657][T10969] Process accounting paused [ 351.720799][T10953] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 352.053025][T10953] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 352.503670][T10953] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 352.818906][T10997] 0 [ 354.847752][T11020] 0 [ 355.120063][T11029] binder: BINDER_SET_CONTEXT_MGR bad uid 8 != 0 [ 355.217719][T11029] binder: 11019:11029 ioctl 4018620d 9 returned -1 [ 355.537313][T11037] 0 [ 355.553724][T11012] FAULT_INJECTION: forcing a failure. [ 355.553724][T11012] name failslab, interval 1, probability 0, space 0, times 0 [ 355.638745][T11012] CPU: 0 UID: 0 PID: 11012 Comm: syz.0.938 Tainted: G L syzkaller #0 PREEMPT(full) [ 355.638772][T11012] Tainted: [L]=SOFTLOCKUP [ 355.638778][T11012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 355.638792][T11012] Call Trace: [ 355.638846][T11012] [ 355.638852][T11012] dump_stack_lvl+0x100/0x190 [ 355.638916][T11012] should_fail_ex.cold+0x5/0xa [ 355.638949][T11012] should_failslab+0xc2/0x120 [ 355.638984][T11012] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 355.639004][T11012] ? x509_cert_parse+0x2b6/0x910 [ 355.639095][T11012] kmemdup_noprof+0x29/0x60 [ 355.639119][T11012] x509_cert_parse+0x2b6/0x910 [ 355.639139][T11012] ? kasan_save_stack+0x3f/0x50 [ 355.639153][T11012] ? kasan_save_stack+0x30/0x50 [ 355.639166][T11012] ? kasan_save_track+0x14/0x30 [ 355.639181][T11012] pkcs7_extract_cert+0xa4/0x380 [ 355.639321][T11012] asn1_ber_decoder+0x12b3/0x2170 [ 355.639382][T11012] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 355.639412][T11012] pkcs7_parse_message+0x289/0x870 [ 355.639437][T11012] verify_pkcs7_signature+0x30/0xa0 [ 355.639455][T11012] valid_regdb+0x211/0x590 [ 355.639524][T11012] ? irqentry_exit+0x24d/0x970 [ 355.639600][T11012] ? __pfx_valid_regdb+0x10/0x10 [ 355.639621][T11012] reg_reload_regdb+0x11a/0x460 [ 355.639641][T11012] ? __pfx_reg_reload_regdb+0x10/0x10 [ 355.639659][T11012] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 355.639716][T11012] ? nl80211_pre_doit+0x19a/0xae0 [ 355.639740][T11012] genl_family_rcv_msg_doit+0x214/0x300 [ 355.639810][T11012] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 355.639832][T11012] ? genl_get_cmd+0x3e7/0x760 [ 355.639857][T11012] ? bpf_lsm_capable+0x9/0x10 [ 355.639877][T11012] ? security_capable+0x80/0x260 [ 355.639927][T11012] genl_rcv_msg+0x560/0x800 [ 355.639951][T11012] ? __pfx_genl_rcv_msg+0x10/0x10 [ 355.639972][T11012] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 355.639992][T11012] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 355.640032][T11012] ? __pfx_nl80211_post_doit+0x10/0x10 [ 355.640061][T11012] netlink_rcv_skb+0x159/0x420 [ 355.640081][T11012] ? __pfx_genl_rcv_msg+0x10/0x10 [ 355.640103][T11012] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 355.640130][T11012] ? netlink_deliver_tap+0x1ae/0xcc0 [ 355.640151][T11012] genl_rcv+0x28/0x40 [ 355.640169][T11012] netlink_unicast+0x585/0x850 [ 355.640199][T11012] ? __pfx_netlink_unicast+0x10/0x10 [ 355.640224][T11012] netlink_sendmsg+0x8b0/0xda0 [ 355.640247][T11012] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.640266][T11012] ? __import_iovec+0x1d2/0x640 [ 355.640335][T11012] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 355.640377][T11012] ____sys_sendmsg+0x9e1/0xb70 [ 355.640436][T11012] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.640458][T11012] ? __pfx_____sys_sendmsg+0x10/0x10 [ 355.640475][T11012] ? preempt_schedule_thunk+0x16/0x30 [ 355.640500][T11012] ? try_to_wake_up+0x5f6/0x1900 [ 355.640535][T11012] ___sys_sendmsg+0x190/0x1e0 [ 355.640555][T11012] ? __pfx____sys_sendmsg+0x10/0x10 [ 355.640575][T11012] ? futex_private_hash_put+0x107/0x1c0 [ 355.640627][T11012] __sys_sendmsg+0x170/0x220 [ 355.640642][T11012] ? __pfx___sys_sendmsg+0x10/0x10 [ 355.640656][T11012] ? __x64_sys_futex+0x34f/0x4d0 [ 355.640678][T11012] ? rcu_is_watching+0x12/0xc0 [ 355.640700][T11012] do_syscall_64+0x115/0x840 [ 355.640719][T11012] ? clear_bhb_loop+0x40/0x90 [ 355.640744][T11012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.640759][T11012] RIP: 0033:0x7f8a08b9ce59 [ 355.640774][T11012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.640788][T11012] RSP: 002b:00007f8a09aeb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 355.640809][T11012] RAX: ffffffffffffffda RBX: 00007f8a08e15fa0 RCX: 00007f8a08b9ce59 [ 355.640820][T11012] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000007 [ 355.640829][T11012] RBP: 00007f8a08c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 355.640838][T11012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 355.640847][T11012] R13: 00007f8a08e16038 R14: 00007f8a08e15fa0 R15: 00007ffc54d072c8 [ 355.640866][T11012] [ 356.626051][T11044] binder: BINDER_SET_CONTEXT_MGR bad uid 8 != 0 [ 356.657681][T11044] binder: 11035:11044 ioctl 4018620d 9 returned -1 [ 356.741194][T11041] netlink: 28 bytes leftover after parsing attributes in process `syz.1.942'. [ 357.420789][T11028] [U]  [ 357.695455][T11036] hub 1-0:1.0: USB hub found [ 357.714861][T11036] hub 1-0:1.0: 1 port detected [ 358.650705][T11064] FAULT_INJECTION: forcing a failure. [ 358.650705][T11064] name fail_futex, interval 1, probability 0, space 0, times 0 [ 358.687256][T11064] CPU: 0 UID: 0 PID: 11064 Comm: syz.0.949 Tainted: G L syzkaller #0 PREEMPT(full) [ 358.687282][T11064] Tainted: [L]=SOFTLOCKUP [ 358.687287][T11064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 358.687296][T11064] Call Trace: [ 358.687302][T11064] [ 358.687308][T11064] dump_stack_lvl+0x100/0x190 [ 358.687329][T11064] should_fail_ex.cold+0x5/0xa [ 358.687349][T11064] get_futex_key+0x1d2/0x1510 [ 358.687375][T11064] ? __pfx_get_futex_key+0x10/0x10 [ 358.687404][T11064] futex_wake+0xea/0x530 [ 358.687421][T11064] ? rcu_is_watching+0x12/0xc0 [ 358.687437][T11064] ? __pfx_futex_wake+0x10/0x10 [ 358.687456][T11064] ? putname+0xb1/0x110 [ 358.687502][T11064] ? kmem_cache_free+0x127/0x6c0 [ 358.687527][T11064] do_futex+0x32b/0x350 [ 358.687543][T11064] ? __pfx_do_futex+0x10/0x10 [ 358.687556][T11064] ? __pfx_do_sys_openat2+0x10/0x10 [ 358.687585][T11064] __x64_sys_futex+0x34f/0x4d0 [ 358.687602][T11064] ? __pfx___x64_sys_futex+0x10/0x10 [ 358.687621][T11064] ? rcu_is_watching+0x12/0xc0 [ 358.687639][T11064] do_syscall_64+0x115/0x840 [ 358.687659][T11064] ? clear_bhb_loop+0x40/0x90 [ 358.687676][T11064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.687691][T11064] RIP: 0033:0x7f8a08b9ce59 [ 358.687704][T11064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.687718][T11064] RSP: 002b:00007f8a09aca0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 358.687732][T11064] RAX: ffffffffffffffda RBX: 00007f8a08e16098 RCX: 00007f8a08b9ce59 [ 358.687742][T11064] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8a08e1609c [ 358.687750][T11064] RBP: 00007f8a08e16090 R08: 0000000000000001 R09: 0000000000000000 [ 358.687759][T11064] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 358.687767][T11064] R13: 00007f8a08e16128 R14: 00007ffc54d071e0 R15: 00007ffc54d072c8 [ 358.687785][T11064] [ 359.445107][ T5640] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 360.876722][T11079] netlink: 346 bytes leftover after parsing attributes in process `syz.2.952'. [ 361.492423][ T5636] Bluetooth: hci3: command 0x2016 tx timeout [ 361.892529][T11092] NFSD: Failed to start, no listeners configured. [ 361.969761][T11091] cifs: Unknown parameter 'T.ŸÜÛæ¨Å¼c[ŸÐê€$âæµÈ)ü±UóÑnEó-Ê™¾l®öÚ-ºŒ -¾_€™¯Ôåáª5Z äoåé¢mžÐfwYÍhº*/ÿxDlÝ©Š×ígÕkÇAí³ùÏ7ÍØØ9’ôXöa/fê_ÿAR£ˆ™‘ÈxM ‚v¬—pÿ±$^;ôØq‡3±«£n졵-6©+e„k„¾ñÇ<°kœcÔ)n.üeMÍ÷Na¨t®ÐSMÎÆ1,™úuÍê*Ù‹1‡4M++j³ˆ×¹ç:|:/³+'Šm/úC [ 361.969761][T11091] Ö!‰÷S»—gƒ‡ŒÐ@ΪMLîÝT¾w.‡œlÉ;Õ_-:Q÷y•K¶N½ïMz>‘l*[çG˜§ÜC°ŠH‚ž¸®Fx^ÉÄ’©’Pktkëyÿøývû¼e' [ 362.175115][T11098] FAULT_INJECTION: forcing a failure. [ 362.175115][T11098] name failslab, interval 1, probability 0, space 0, times 0 [ 362.392829][T11098] CPU: 0 UID: 0 PID: 11098 Comm: syz.3.959 Tainted: G L syzkaller #0 PREEMPT(full) [ 362.392856][T11098] Tainted: [L]=SOFTLOCKUP [ 362.392861][T11098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 362.392871][T11098] Call Trace: [ 362.392876][T11098] [ 362.392882][T11098] dump_stack_lvl+0x100/0x190 [ 362.392904][T11098] should_fail_ex.cold+0x5/0xa [ 362.392924][T11098] ? security_inode_init_security+0x113/0x370 [ 362.393009][T11098] should_failslab+0xc2/0x120 [ 362.393027][T11098] __kmalloc_noprof+0xe0/0x850 [ 362.393045][T11098] security_inode_init_security+0x113/0x370 [ 362.393068][T11098] ? __pfx_shmem_initxattrs+0x10/0x10 [ 362.393087][T11098] ? __pfx_security_inode_init_security+0x10/0x10 [ 362.393111][T11098] ? make_vfsgid+0xf1/0x140 [ 362.393134][T11098] shmem_mknod+0x2ce/0x480 [ 362.393155][T11098] ? __pfx_shmem_mknod+0x10/0x10 [ 362.393180][T11098] vfs_create+0x301/0x6c0 [ 362.393197][T11098] filename_mknodat+0x2de/0x7f0 [ 362.393219][T11098] ? __pfx_filename_mknodat+0x10/0x10 [ 362.393237][T11098] ? strncpy_from_user+0x19d/0x2d0 [ 362.393259][T11098] ? do_getname+0x191/0x390 [ 362.393281][T11098] __x64_sys_mknod+0x8f/0xc0 [ 362.393300][T11098] do_syscall_64+0x115/0x840 [ 362.393319][T11098] ? clear_bhb_loop+0x40/0x90 [ 362.393337][T11098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.393353][T11098] RIP: 0033:0x7fe606b9ce59 [ 362.393366][T11098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 362.393380][T11098] RSP: 002b:00007fe607a76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 362.393394][T11098] RAX: ffffffffffffffda RBX: 00007fe606e16180 RCX: 00007fe606b9ce59 [ 362.393404][T11098] RDX: 0000000000000009 RSI: 0000000000000002 RDI: 0000000000000000 [ 362.393412][T11098] RBP: 00007fe606c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 362.393420][T11098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 362.393429][T11098] R13: 00007fe606e16218 R14: 00007fe606e16180 R15: 00007ffc8e832398 [ 362.393448][T11098] [ 363.566903][ T5640] Bluetooth: hci3: command 0x2016 tx timeout [ 364.466883][ T8694] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm kworker/u8:15: bg 4: bad block bitmap checksum [ 364.528909][ T8694] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 74 [ 364.591137][ T8694] EXT4-fs (sda1): This should not happen!! Data will be lost [ 364.591137][ T8694] [ 366.461502][T11153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.964'. [ 366.950345][T11165] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 366.983301][T11153] openvswitch: netlink: Multiple metadata blocks provided [ 367.028620][T11165] EXT4-fs (sda1): This should not happen!! Data will be lost [ 367.028620][T11165] [ 368.083312][T11164] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 368.146915][T11164] EXT4-fs (sda1): This should not happen!! Data will be lost [ 368.146915][T11164] [ 368.391538][T11159] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 368.424800][T11201] futex_wake_op: syz.0.973 tries to shift op by -2048; fix this program [ 368.452867][ T29] audit: type=1800 audit(1780604950.104:20): pid=11205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.975" name="members" dev="configfs" ino=39257 res=0 errno=0 [ 368.570030][T11201] futex_wake_op: syz.0.973 tries to shift op by -2048; fix this program [ 368.753645][T11217] netlink: 28 bytes leftover after parsing attributes in process `syz.3.976'. [ 369.020644][T11223] 0 [ 369.132916][T11208] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 369.166779][T11228] binder: BINDER_SET_CONTEXT_MGR bad uid 8 != 0 [ 369.210207][T11228] binder: 11221:11228 ioctl 4018620d 9 returned -1 [ 369.224033][T11208] EXT4-fs (sda1): This should not happen!! Data will be lost [ 369.224033][T11208] [ 369.890790][T11240] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000 [ 369.931719][T11240] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 369.970197][T11240] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000 [ 370.000008][T11240] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 370.027480][T11240] page dumped because: unmovable page [ 370.051041][T11240] page_owner info is not present (never set?) [ 370.397236][T11167] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 370.451000][T11167] EXT4-fs (sda1): This should not happen!! Data will be lost [ 370.451000][T11167] [ 371.271182][T11157] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 371.328713][T11157] EXT4-fs (sda1): This should not happen!! Data will be lost [ 371.328713][T11157] [ 372.274746][T11231] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 372.365496][T11231] EXT4-fs (sda1): This should not happen!! Data will be lost [ 372.365496][T11231] [ 372.580098][T11289] netlink: 12 bytes leftover after parsing attributes in process `syz.2.988'. [ 372.631028][T11288] netlink: 12 bytes leftover after parsing attributes in process `syz.2.988'. [ 373.256769][T11167] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 373.329345][T11167] EXT4-fs (sda1): This should not happen!! Data will be lost [ 373.329345][T11167] [ 373.780586][T11317] FAULT_INJECTION: forcing a failure. [ 373.780586][T11317] name fail_futex, interval 1, probability 0, space 0, times 0 [ 373.823563][T11317] CPU: 0 UID: 0 PID: 11317 Comm: syz.0.994 Tainted: G L syzkaller #0 PREEMPT(full) [ 373.823589][T11317] Tainted: [L]=SOFTLOCKUP [ 373.823595][T11317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 373.823604][T11317] Call Trace: [ 373.823609][T11317] [ 373.823615][T11317] dump_stack_lvl+0x100/0x190 [ 373.823635][T11317] should_fail_ex.cold+0x5/0xa [ 373.823655][T11317] get_futex_key+0x1d2/0x1510 [ 373.823681][T11317] ? __pfx_get_futex_key+0x10/0x10 [ 373.823715][T11317] futex_wait_setup+0x83/0x510 [ 373.823742][T11317] __futex_wait+0x19f/0x300 [ 373.823762][T11317] ? __pfx___futex_wait+0x10/0x10 [ 373.823783][T11317] ? __pfx_futex_wake_mark+0x10/0x10 [ 373.823803][T11317] ? futex_hash+0x2ad/0x370 [ 373.823825][T11317] ? futex_hash+0x141/0x370 [ 373.823848][T11317] futex_wait+0xe6/0x370 [ 373.823866][T11317] ? __pfx_futex_wait+0x10/0x10 [ 373.823888][T11317] ? find_held_lock+0x2b/0x80 [ 373.823928][T11317] ? __fget_files+0x215/0x3d0 [ 373.823948][T11317] do_futex+0x1ef/0x350 [ 373.823964][T11317] ? __pfx_do_futex+0x10/0x10 [ 373.823983][T11317] __x64_sys_futex+0x34f/0x4d0 [ 373.823998][T11317] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 373.824016][T11317] ? __pfx___x64_sys_futex+0x10/0x10 [ 373.824034][T11317] ? rcu_is_watching+0x12/0xc0 [ 373.824053][T11317] do_syscall_64+0x115/0x840 [ 373.824072][T11317] ? clear_bhb_loop+0x40/0x90 [ 373.824089][T11317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.824104][T11317] RIP: 0033:0x7f8a08b9ce59 [ 373.824117][T11317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.824130][T11317] RSP: 002b:00007f8a09aca0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 373.824145][T11317] RAX: ffffffffffffffda RBX: 00007f8a08e16098 RCX: 00007f8a08b9ce59 [ 373.824154][T11317] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8a08e16098 [ 373.824163][T11317] RBP: 00007f8a08e16090 R08: 0000000000000000 R09: 0000000000000000 [ 373.824171][T11317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 373.824179][T11317] R13: 00007f8a08e16128 R14: 00007ffc54d071e0 R15: 00007ffc54d072c8 [ 373.824198][T11317] [ 374.639992][T11167] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 374.687180][T11167] EXT4-fs (sda1): This should not happen!! Data will be lost [ 374.687180][T11167] [ 374.758079][T11303] FAULT_INJECTION: forcing a failure. [ 374.758079][T11303] name fail_futex, interval 1, probability 0, space 0, times 0 [ 374.775049][T11303] CPU: 0 UID: 0 PID: 11303 Comm: syz.2.992 Tainted: G L syzkaller #0 PREEMPT(full) [ 374.775076][T11303] Tainted: [L]=SOFTLOCKUP [ 374.775081][T11303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 374.775089][T11303] Call Trace: [ 374.775094][T11303] [ 374.775099][T11303] dump_stack_lvl+0x100/0x190 [ 374.775119][T11303] should_fail_ex.cold+0x5/0xa [ 374.775138][T11303] get_futex_key+0xf78/0x1510 [ 374.775163][T11303] ? __pfx_get_futex_key+0x10/0x10 [ 374.775184][T11303] ? lock_acquire+0x1b1/0x370 [ 374.775211][T11303] futex_wake+0xea/0x530 [ 374.775230][T11303] ? __pfx_futex_wake+0x10/0x10 [ 374.775246][T11303] ? exit_mm_release+0x19/0x30 [ 374.775298][T11303] do_futex+0x32b/0x350 [ 374.775313][T11303] ? __pfx_do_futex+0x10/0x10 [ 374.775326][T11303] ? __might_fault+0xc5/0x140 [ 374.775353][T11303] mm_release+0x24a/0x2f0 [ 374.775370][T11303] do_exit+0x707/0x2af0 [ 374.775399][T11303] ? __pfx_do_exit+0x10/0x10 [ 374.775419][T11303] ? do_raw_spin_lock+0x128/0x260 [ 374.775434][T11303] ? find_held_lock+0x2b/0x80 [ 374.775450][T11303] ? get_signal+0x7e5/0x2210 [ 374.775469][T11303] do_group_exit+0xd5/0x2a0 [ 374.775491][T11303] get_signal+0x20ff/0x2210 [ 374.775513][T11303] ? kill_rules+0x6a0/0x6c0 [ 374.775536][T11303] ? __pfx_get_signal+0x10/0x10 [ 374.775554][T11303] ? do_futex+0x192/0x350 [ 374.775569][T11303] arch_do_signal_or_restart+0x91/0x7a0 [ 374.775600][T11303] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 374.775616][T11303] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 374.775641][T11303] ? exc_page_fault+0x6f/0xd0 [ 374.775661][T11303] ? rcu_is_watching+0x12/0xc0 [ 374.775680][T11303] exit_to_user_mode_loop+0x98/0x670 [ 374.775706][T11303] ? rcu_is_watching+0x12/0xc0 [ 374.775724][T11303] do_syscall_64+0x652/0x840 [ 374.775743][T11303] ? clear_bhb_loop+0x40/0x90 [ 374.775767][T11303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.775781][T11303] RIP: 0033:0x7eff8b39ce59 [ 374.775794][T11303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.775808][T11303] RSP: 002b:00007eff8c24a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 374.775822][T11303] RAX: fffffffffffffe00 RBX: 00007eff8b615fa8 RCX: 00007eff8b39ce59 [ 374.775831][T11303] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007eff8b615fa8 [ 374.775841][T11303] RBP: 00007eff8b615fa0 R08: 0000000000000000 R09: 0000000000000000 [ 374.775851][T11303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 374.775859][T11303] R13: 00007eff8b616038 R14: 00007fff82bf6ee0 R15: 00007fff82bf6fc8 [ 374.775877][T11303] [ 375.344492][T11327] dlm: plock device version mismatch: kernel (1.2.0), user (1489226698.240317300.1121487582) [ 375.449022][T11231] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 375.500245][T11231] EXT4-fs (sda1): This should not happen!! Data will be lost [ 375.500245][T11231] [ 375.674961][T11157] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 375.708952][T11157] EXT4-fs (sda1): This should not happen!! Data will be lost [ 375.708952][T11157] [ 376.046536][T11343] 0 [ 376.223607][T11348] binder: BINDER_SET_CONTEXT_MGR bad uid 8 != 0 [ 376.344507][T11348] binder: 11341:11348 ioctl 4018620d 9 returned -1 [ 376.779721][T11164] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 376.779747][T11164] EXT4-fs (sda1): This should not happen!! Data will be lost [ 376.779747][T11164] [ 377.430745][T11231] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 377.496357][T11231] EXT4-fs (sda1): This should not happen!! Data will be lost [ 377.496357][T11231] [ 377.735648][T11167] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 377.814843][T11167] EXT4-fs (sda1): This should not happen!! Data will be lost [ 377.814843][T11167] [ 377.965421][T11384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1010'. [ 377.989294][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.996480][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.016191][T11384] openvswitch: netlink: Multiple metadata blocks provided [ 378.528853][T11347] Process accounting paused [ 378.659653][T11396] FAULT_INJECTION: forcing a failure. [ 378.659653][T11396] name fail_futex, interval 1, probability 0, space 0, times 0 [ 378.754280][T11396] CPU: 0 UID: 0 PID: 11396 Comm: syz.0.1014 Tainted: G L syzkaller #0 PREEMPT(full) [ 378.754307][T11396] Tainted: [L]=SOFTLOCKUP [ 378.754312][T11396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 378.754323][T11396] Call Trace: [ 378.754327][T11396] [ 378.754333][T11396] dump_stack_lvl+0x100/0x190 [ 378.754360][T11396] should_fail_ex.cold+0x5/0xa [ 378.754378][T11396] ? rcu_is_watching+0x12/0xc0 [ 378.754402][T11396] get_futex_key+0x1d2/0x1510 [ 378.754435][T11396] ? __pfx_get_futex_key+0x10/0x10 [ 378.754461][T11396] ? __sys_bpf+0x173/0x4b90 [ 378.754500][T11396] futex_wake+0xea/0x530 [ 378.754517][T11396] ? __pfx___sys_bpf+0x10/0x10 [ 378.754531][T11396] ? __pfx_futex_wait+0x10/0x10 [ 378.754548][T11396] ? __pfx_futex_wake+0x10/0x10 [ 378.754567][T11396] ? ksys_write+0x190/0x250 [ 378.754589][T11396] do_futex+0x32b/0x350 [ 378.754603][T11396] ? __pfx_do_futex+0x10/0x10 [ 378.754623][T11396] __x64_sys_futex+0x34f/0x4d0 [ 378.754639][T11396] ? __pfx___x64_sys_futex+0x10/0x10 [ 378.754658][T11396] ? rcu_is_watching+0x12/0xc0 [ 378.754678][T11396] do_syscall_64+0x115/0x840 [ 378.754697][T11396] ? clear_bhb_loop+0x40/0x90 [ 378.754715][T11396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.754731][T11396] RIP: 0033:0x7f8a08b9ce59 [ 378.754743][T11396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 378.754757][T11396] RSP: 002b:00007f8a09aeb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 378.754771][T11396] RAX: ffffffffffffffda RBX: 00007f8a08e15fa8 RCX: 00007f8a08b9ce59 [ 378.754781][T11396] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8a08e15fac [ 378.754789][T11396] RBP: 00007f8a08e15fa0 R08: 0000000000000001 R09: 0000000000000000 [ 378.754798][T11396] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 378.754806][T11396] R13: 00007f8a08e16038 R14: 00007ffc54d071e0 R15: 00007ffc54d072c8 [ 378.754824][T11396] [ 379.385960][T11412] EXT4-fs error (device sda1): ext4_discard_preallocations:5696: comm syz.3.1015: Error -117 reading block bitmap for 4 [ 381.035882][T11442] WARNING! power/level is deprecated; use power/control instead [ 381.533849][T11450] 0 [ 381.887934][T11420] Process accounting resumed [ 382.540853][T11471] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000 [ 382.566468][T11471] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 382.595050][T11471] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000 [ 382.647176][T11471] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 382.683022][T11471] page dumped because: unmovable page [ 382.710838][T11471] page_owner info is not present (never set?) [ 382.980617][T11479] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1030'. [ 383.316519][T11479] HfR: entered promiscuous mode [ 383.614751][T11490] FAULT_INJECTION: forcing a failure. [ 383.614751][T11490] name fail_futex, interval 1, probability 0, space 0, times 0 [ 383.691635][T11490] CPU: 0 UID: 0 PID: 11490 Comm: syz.1.1031 Tainted: G L syzkaller #0 PREEMPT(full) [ 383.691663][T11490] Tainted: [L]=SOFTLOCKUP [ 383.691669][T11490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 383.691677][T11490] Call Trace: [ 383.691683][T11490] [ 383.691689][T11490] dump_stack_lvl+0x100/0x190 [ 383.691710][T11490] should_fail_ex.cold+0x5/0xa [ 383.691730][T11490] get_futex_key+0x1d2/0x1510 [ 383.691757][T11490] ? __pfx_get_futex_key+0x10/0x10 [ 383.691784][T11490] futex_wake+0xea/0x530 [ 383.691803][T11490] ? __pfx_futex_wake+0x10/0x10 [ 383.691819][T11490] ? __pfx___might_resched+0x10/0x10 [ 383.691834][T11490] ? __kasan_slab_alloc+0x89/0x90 [ 383.691852][T11490] ? lockdep_init_map_type+0x5c/0x250 [ 383.691878][T11490] do_futex+0x32b/0x350 [ 383.691893][T11490] ? __pfx_do_futex+0x10/0x10 [ 383.691911][T11490] __x64_sys_futex+0x34f/0x4d0 [ 383.691928][T11490] ? fd_install+0x223/0x580 [ 383.691946][T11490] ? __pfx___x64_sys_futex+0x10/0x10 [ 383.691964][T11490] ? rcu_is_watching+0x12/0xc0 [ 383.691982][T11490] do_syscall_64+0x115/0x840 [ 383.692005][T11490] ? clear_bhb_loop+0x40/0x90 [ 383.692022][T11490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.692037][T11490] RIP: 0033:0x7f50aa19ce59 [ 383.692050][T11490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 383.692065][T11490] RSP: 002b:00007f50ab07e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 383.692080][T11490] RAX: ffffffffffffffda RBX: 00007f50aa416098 RCX: 00007f50aa19ce59 [ 383.692089][T11490] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f50aa41609c [ 383.692098][T11490] RBP: 00007f50aa416090 R08: 0000000000000001 R09: 0000000000000000 [ 383.692106][T11490] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 383.692114][T11490] R13: 00007f50aa416128 R14: 00007ffce9d76010 R15: 00007ffce9d760f8 [ 383.692133][T11490] [ 384.354525][T11495] zswap: compressor not available [ 386.069615][T11502] FAULT_INJECTION: forcing a failure. [ 386.069615][T11502] name failslab, interval 1, probability 0, space 0, times 0 [ 386.134473][T11502] CPU: 0 UID: 0 PID: 11502 Comm: syz.0.1035 Tainted: G L syzkaller #0 PREEMPT(full) [ 386.134500][T11502] Tainted: [L]=SOFTLOCKUP [ 386.134505][T11502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 386.134514][T11502] Call Trace: [ 386.134520][T11502] [ 386.134526][T11502] dump_stack_lvl+0x100/0x190 [ 386.134546][T11502] should_fail_ex.cold+0x5/0xa [ 386.134566][T11502] ? asymmetric_key_generate_id+0x7e/0x180 [ 386.134585][T11502] should_failslab+0xc2/0x120 [ 386.134603][T11502] __kmalloc_noprof+0xe0/0x850 [ 386.134621][T11502] asymmetric_key_generate_id+0x7e/0x180 [ 386.134642][T11502] x509_cert_parse+0x5c1/0x910 [ 386.134660][T11502] ? kasan_save_stack+0x3f/0x50 [ 386.134674][T11502] ? kasan_save_stack+0x30/0x50 [ 386.134687][T11502] ? kasan_save_track+0x14/0x30 [ 386.134702][T11502] pkcs7_extract_cert+0xa4/0x380 [ 386.134726][T11502] asn1_ber_decoder+0x12b3/0x2170 [ 386.134750][T11502] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 386.134777][T11502] pkcs7_parse_message+0x289/0x870 [ 386.134802][T11502] verify_pkcs7_signature+0x30/0xa0 [ 386.134820][T11502] valid_regdb+0x211/0x590 [ 386.134838][T11502] ? __pfx_valid_regdb+0x10/0x10 [ 386.134858][T11502] reg_reload_regdb+0x11a/0x460 [ 386.134885][T11502] ? __pfx_reg_reload_regdb+0x10/0x10 [ 386.134906][T11502] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 386.134928][T11502] ? nl80211_pre_doit+0x19a/0xae0 [ 386.134952][T11502] genl_family_rcv_msg_doit+0x214/0x300 [ 386.134977][T11502] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 386.134997][T11502] ? genl_get_cmd+0x3e7/0x760 [ 386.135021][T11502] ? bpf_lsm_capable+0x9/0x10 [ 386.135036][T11502] ? security_capable+0x80/0x260 [ 386.135054][T11502] genl_rcv_msg+0x560/0x800 [ 386.135076][T11502] ? __pfx_genl_rcv_msg+0x10/0x10 [ 386.135097][T11502] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 386.135117][T11502] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 386.135133][T11502] ? __pfx_nl80211_post_doit+0x10/0x10 [ 386.135160][T11502] netlink_rcv_skb+0x159/0x420 [ 386.135178][T11502] ? __pfx_genl_rcv_msg+0x10/0x10 [ 386.135200][T11502] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 386.135225][T11502] ? netlink_deliver_tap+0x1ae/0xcc0 [ 386.135245][T11502] genl_rcv+0x28/0x40 [ 386.135264][T11502] netlink_unicast+0x585/0x850 [ 386.135287][T11502] ? __pfx_netlink_unicast+0x10/0x10 [ 386.135311][T11502] netlink_sendmsg+0x8b0/0xda0 [ 386.135332][T11502] ? __pfx_netlink_sendmsg+0x10/0x10 [ 386.135349][T11502] ? __import_iovec+0x1d2/0x640 [ 386.135372][T11502] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 386.135390][T11502] ____sys_sendmsg+0x9e1/0xb70 [ 386.135408][T11502] ? __pfx_netlink_sendmsg+0x10/0x10 [ 386.135429][T11502] ? __pfx_____sys_sendmsg+0x10/0x10 [ 386.135450][T11502] ? __pfx_futex_wake_mark+0x10/0x10 [ 386.135472][T11502] ___sys_sendmsg+0x190/0x1e0 [ 386.135492][T11502] ? __pfx____sys_sendmsg+0x10/0x10 [ 386.135532][T11502] __sys_sendmsg+0x170/0x220 [ 386.135548][T11502] ? __pfx___sys_sendmsg+0x10/0x10 [ 386.135562][T11502] ? __x64_sys_futex+0x34f/0x4d0 [ 386.135584][T11502] ? rcu_is_watching+0x12/0xc0 [ 386.135603][T11502] do_syscall_64+0x115/0x840 [ 386.135622][T11502] ? clear_bhb_loop+0x40/0x90 [ 386.135640][T11502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.135654][T11502] RIP: 0033:0x7f8a08b9ce59 [ 386.135667][T11502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.135682][T11502] RSP: 002b:00007f8a09aeb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 386.135697][T11502] RAX: ffffffffffffffda RBX: 00007f8a08e15fa0 RCX: 00007f8a08b9ce59 [ 386.135707][T11502] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000007 [ 386.135716][T11502] RBP: 00007f8a08c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 386.135725][T11502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 386.135733][T11502] R13: 00007f8a08e16038 R14: 00007f8a08e15fa0 R15: 00007ffc54d072c8 [ 386.135753][T11502] [ 387.016265][T11516] hub 1-0:1.0: USB hub found [ 387.060038][T11516] hub 1-0:1.0: 1 port detected [ 387.972302][T11540] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88807840e000 pfn:0x78408 [ 388.044402][T11540] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 388.138216][T11543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1050'. [ 388.214661][T11540] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 388.263327][T11546] 0 [ 388.313893][T11540] raw: ffff88807840e000 0000000000000000 00000001ffffffff 0000000000000000 [ 388.431374][T11540] page dumped because: unmovable page [ 388.514014][T11540] page_owner tracks the page as allocated [ 388.661212][T11540] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 5293, tgid 5293 (dhcpcd), ts 59560313409, free_ts 56188217315 [ 388.766131][T11540] post_alloc_hook+0xfd/0x120 [ 388.792462][T11540] get_page_from_freelist+0x11a6/0x3410 [ 388.879654][T11540] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 388.933537][T11540] alloc_pages_mpol+0x1fb/0x540 [ 388.971024][T11540] alloc_pages_noprof+0x1a/0x160 [ 389.004187][T11540] __vmalloc_node_range_noprof+0xf9a/0x1630 [ 389.047661][T11540] __vmalloc_node_noprof+0xad/0xf0 [ 389.083169][T11540] copy_process+0x7fb/0x7ed0 [ 389.109966][T11540] kernel_clone+0x176/0x9e0 [ 389.131395][T11540] __do_sys_clone+0xd9/0x120 [ 389.155291][T11540] do_syscall_64+0x115/0x840 [ 389.173380][T11540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.222480][T11540] page last free pid 4998 tgid 4998 stack trace: [ 389.296009][T11540] __free_frozen_pages+0x794/0x10a0 [ 389.341465][T11540] qlist_free_all+0x47/0xf0 [ 389.358030][T11540] kasan_quarantine_reduce+0x1a0/0x1f0 [ 389.384424][T11540] __kasan_slab_alloc+0x69/0x90 [ 389.404548][T11540] kmem_cache_alloc_noprof+0x241/0x6e0 [ 389.432441][T11540] do_getname+0x35/0x390 [ 389.451390][T11540] __x64_sys_unlink+0x36/0x70 [ 389.472898][T11540] do_syscall_64+0x115/0x840 [ 389.495421][T11540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.676083][ T29] audit: type=1800 audit(1780607019.417:21): pid=11583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1051" name="dbroot" dev="configfs" ino=41595 res=0 errno=0 [ 389.730936][T11583] db_root: cannot open: /dev/audio1 [ 389.793413][T11583] db_root: not a directory: /dev/audio1 [ 391.104828][T11614] FAULT_INJECTION: forcing a failure. [ 391.104828][T11614] name failslab, interval 1, probability 0, space 0, times 0 [ 391.307472][T11614] CPU: 0 UID: 0 PID: 11614 Comm: syz.2.1057 Tainted: G L syzkaller #0 PREEMPT(full) [ 391.307510][T11614] Tainted: [L]=SOFTLOCKUP [ 391.307520][T11614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 391.307535][T11614] Call Trace: [ 391.307541][T11614] [ 391.307547][T11614] dump_stack_lvl+0x100/0x190 [ 391.307568][T11614] should_fail_ex.cold+0x5/0xa [ 391.307587][T11614] ? __pfx_crypto_alg_extsize+0x10/0x10 [ 391.307672][T11614] should_failslab+0xc2/0x120 [ 391.307690][T11614] ? __pfx_crypto_alg_extsize+0x10/0x10 [ 391.307711][T11614] __kmalloc_node_noprof+0xe6/0x850 [ 391.307732][T11614] ? crypto_alloc_tfmmem.isra.0+0x38/0x110 [ 391.307754][T11614] ? __pfx_crypto_alg_extsize+0x10/0x10 [ 391.307774][T11614] crypto_alloc_tfmmem.isra.0+0x38/0x110 [ 391.307794][T11614] crypto_create_tfm_node+0x85/0x350 [ 391.307815][T11614] crypto_alloc_tfm_node+0x102/0x260 [ 391.307836][T11614] x509_get_sig_params+0x2bb/0x6c0 [ 391.307858][T11614] ? __asan_memcpy+0x3c/0x60 [ 391.307881][T11614] x509_cert_parse+0x4e9/0x910 [ 391.307900][T11614] ? kasan_save_stack+0x3f/0x50 [ 391.307913][T11614] ? kasan_save_stack+0x30/0x50 [ 391.307926][T11614] ? kasan_save_track+0x14/0x30 [ 391.307941][T11614] pkcs7_extract_cert+0xa4/0x380 [ 391.307965][T11614] asn1_ber_decoder+0x12b3/0x2170 [ 391.307989][T11614] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 391.308017][T11614] pkcs7_parse_message+0x289/0x870 [ 391.308041][T11614] verify_pkcs7_signature+0x30/0xa0 [ 391.308059][T11614] valid_regdb+0x211/0x590 [ 391.308078][T11614] ? __pfx_valid_regdb+0x10/0x10 [ 391.308098][T11614] reg_reload_regdb+0x11a/0x460 [ 391.308116][T11614] ? __pfx_reg_reload_regdb+0x10/0x10 [ 391.308135][T11614] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 391.308161][T11614] ? nl80211_pre_doit+0x19a/0xae0 [ 391.308185][T11614] genl_family_rcv_msg_doit+0x214/0x300 [ 391.308209][T11614] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 391.308230][T11614] ? genl_get_cmd+0x3e7/0x760 [ 391.308254][T11614] ? bpf_lsm_capable+0x9/0x10 [ 391.308269][T11614] ? security_capable+0x80/0x260 [ 391.308286][T11614] genl_rcv_msg+0x560/0x800 [ 391.308309][T11614] ? __pfx_genl_rcv_msg+0x10/0x10 [ 391.308329][T11614] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 391.308349][T11614] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 391.308373][T11614] ? __pfx_nl80211_post_doit+0x10/0x10 [ 391.308402][T11614] netlink_rcv_skb+0x159/0x420 [ 391.308421][T11614] ? __pfx_genl_rcv_msg+0x10/0x10 [ 391.308443][T11614] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 391.308468][T11614] ? netlink_deliver_tap+0x1ae/0xcc0 [ 391.308488][T11614] genl_rcv+0x28/0x40 [ 391.308506][T11614] netlink_unicast+0x585/0x850 [ 391.308527][T11614] ? __pfx_netlink_unicast+0x10/0x10 [ 391.308551][T11614] netlink_sendmsg+0x8b0/0xda0 [ 391.308572][T11614] ? __pfx_netlink_sendmsg+0x10/0x10 [ 391.308590][T11614] ? __import_iovec+0x1d2/0x640 [ 391.308611][T11614] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 391.308629][T11614] ____sys_sendmsg+0x9e1/0xb70 [ 391.308648][T11614] ? __pfx_netlink_sendmsg+0x10/0x10 [ 391.308673][T11614] ? __pfx_____sys_sendmsg+0x10/0x10 [ 391.308696][T11614] ? __pfx_futex_wake_mark+0x10/0x10 [ 391.308718][T11614] ___sys_sendmsg+0x190/0x1e0 [ 391.308739][T11614] ? __pfx____sys_sendmsg+0x10/0x10 [ 391.308781][T11614] __sys_sendmsg+0x170/0x220 [ 391.308797][T11614] ? __pfx___sys_sendmsg+0x10/0x10 [ 391.308811][T11614] ? __x64_sys_futex+0x34f/0x4d0 [ 391.308832][T11614] ? rcu_is_watching+0x12/0xc0 [ 391.308851][T11614] do_syscall_64+0x115/0x840 [ 391.308870][T11614] ? clear_bhb_loop+0x40/0x90 [ 391.308887][T11614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.308902][T11614] RIP: 0033:0x7eff8b39ce59 [ 391.308917][T11614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.308931][T11614] RSP: 002b:00007eff8c229028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 391.308946][T11614] RAX: ffffffffffffffda RBX: 00007eff8b616090 RCX: 00007eff8b39ce59 [ 391.308956][T11614] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000007 [ 391.308965][T11614] RBP: 00007eff8b432d6f R08: 0000000000000000 R09: 0000000000000000 [ 391.308974][T11614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 391.308983][T11614] R13: 00007eff8b616128 R14: 00007eff8b616090 R15: 00007fff82bf6fc8 [ 391.309002][T11614] [ 391.833185][T11619] hub 1-0:1.0: USB hub found [ 391.844275][T11619] hub 1-0:1.0: 1 port detected [ 392.403485][T11634] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1061'. [ 392.479380][T11632] nbd: socks must be embedded in a SOCK_ITEM attr [ 392.508736][T11632] block nbd0: shutting down sockets [ 394.906892][T11203] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 395.260006][T11691] random: crng reseeded on system resumption [ 395.839597][T11709] FAULT_INJECTION: forcing a failure. [ 395.839597][T11709] name failslab, interval 1, probability 0, space 0, times 0 [ 395.978880][ T29] audit: type=1804 audit(1780607025.747:22): pid=11716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1084" name="/newroot/263/file0" dev="tmpfs" ino=1387 res=1 errno=0 [ 396.022285][T11714] hub 1-0:1.0: USB hub found [ 396.086923][T11714] hub 1-0:1.0: 1 port detected [ 396.105493][T11709] CPU: 0 UID: 0 PID: 11709 Comm: syz.3.1075 Tainted: G L syzkaller #0 PREEMPT(full) [ 396.105519][T11709] Tainted: [L]=SOFTLOCKUP [ 396.105525][T11709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 396.105534][T11709] Call Trace: [ 396.105539][T11709] [ 396.105545][T11709] dump_stack_lvl+0x100/0x190 [ 396.105567][T11709] should_fail_ex.cold+0x5/0xa [ 396.105587][T11709] ? x509_fabricate_name.isra.0+0x5ea/0xa10 [ 396.105608][T11709] should_failslab+0xc2/0x120 [ 396.105626][T11709] __kmalloc_noprof+0xe0/0x850 [ 396.105639][T11709] ? __asan_memcpy+0x3c/0x60 [ 396.105663][T11709] x509_fabricate_name.isra.0+0x5ea/0xa10 [ 396.105687][T11709] asn1_ber_decoder+0xd0c/0x2170 [ 396.105711][T11709] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 396.105739][T11709] x509_cert_parse+0x1c9/0x910 [ 396.105757][T11709] ? kasan_save_stack+0x3f/0x50 [ 396.105770][T11709] ? kasan_save_stack+0x30/0x50 [ 396.105783][T11709] ? kasan_save_track+0x14/0x30 [ 396.105799][T11709] pkcs7_extract_cert+0xa4/0x380 [ 396.105822][T11709] asn1_ber_decoder+0x12b3/0x2170 [ 396.105845][T11709] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 396.105872][T11709] pkcs7_parse_message+0x289/0x870 [ 396.105897][T11709] verify_pkcs7_signature+0x30/0xa0 [ 396.105914][T11709] valid_regdb+0x211/0x590 [ 396.105933][T11709] ? __pfx_valid_regdb+0x10/0x10 [ 396.105953][T11709] reg_reload_regdb+0x11a/0x460 [ 396.105971][T11709] ? __pfx_reg_reload_regdb+0x10/0x10 [ 396.105989][T11709] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 396.106009][T11709] ? nl80211_pre_doit+0x19a/0xae0 [ 396.106032][T11709] genl_family_rcv_msg_doit+0x214/0x300 [ 396.106056][T11709] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 396.106076][T11709] ? genl_get_cmd+0x3e7/0x760 [ 396.106110][T11709] ? bpf_lsm_capable+0x9/0x10 [ 396.106126][T11709] ? security_capable+0x80/0x260 [ 396.106146][T11709] genl_rcv_msg+0x560/0x800 [ 396.106170][T11709] ? __pfx_genl_rcv_msg+0x10/0x10 [ 396.106191][T11709] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 396.106211][T11709] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 396.106227][T11709] ? __pfx_nl80211_post_doit+0x10/0x10 [ 396.106254][T11709] netlink_rcv_skb+0x159/0x420 [ 396.106272][T11709] ? __pfx_genl_rcv_msg+0x10/0x10 [ 396.106293][T11709] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 396.106318][T11709] ? netlink_deliver_tap+0x1ae/0xcc0 [ 396.106338][T11709] genl_rcv+0x28/0x40 [ 396.106356][T11709] netlink_unicast+0x585/0x850 [ 396.106377][T11709] ? __pfx_netlink_unicast+0x10/0x10 [ 396.106401][T11709] netlink_sendmsg+0x8b0/0xda0 [ 396.106423][T11709] ? __pfx_netlink_sendmsg+0x10/0x10 [ 396.106440][T11709] ? __import_iovec+0x1d2/0x640 [ 396.106462][T11709] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 396.106480][T11709] ____sys_sendmsg+0x9e1/0xb70 [ 396.106498][T11709] ? __pfx_netlink_sendmsg+0x10/0x10 [ 396.106518][T11709] ? __pfx_____sys_sendmsg+0x10/0x10 [ 396.106539][T11709] ? __pfx_futex_wake_mark+0x10/0x10 [ 396.106561][T11709] ___sys_sendmsg+0x190/0x1e0 [ 396.106581][T11709] ? __pfx____sys_sendmsg+0x10/0x10 [ 396.106622][T11709] __sys_sendmsg+0x170/0x220 [ 396.106637][T11709] ? __pfx___sys_sendmsg+0x10/0x10 [ 396.106651][T11709] ? __x64_sys_futex+0x34f/0x4d0 [ 396.106673][T11709] ? rcu_is_watching+0x12/0xc0 [ 396.106691][T11709] do_syscall_64+0x115/0x840 [ 396.106710][T11709] ? clear_bhb_loop+0x40/0x90 [ 396.106727][T11709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.106742][T11709] RIP: 0033:0x7fe606b9ce59 [ 396.106756][T11709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 396.106769][T11709] RSP: 002b:00007fe607a97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 396.106783][T11709] RAX: ffffffffffffffda RBX: 00007fe606e16090 RCX: 00007fe606b9ce59 [ 396.106794][T11709] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000007 [ 396.106802][T11709] RBP: 00007fe606c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 396.106812][T11709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 396.106820][T11709] R13: 00007fe606e16128 R14: 00007fe606e16090 R15: 00007ffc8e832398 [ 396.106839][T11709] [ 397.113943][T11203] Bluetooth: hci2: command 0x2016 tx timeout [ 399.161143][T11202] Bluetooth: hci2: command 0x2016 tx timeout [ 402.972195][T11846] zswap: compressor not available [ 403.179934][T11864] 0 [ 403.275763][T11865] binder: BINDER_SET_CONTEXT_MGR bad uid 8 != 0 [ 403.310066][T11865] binder: 11861:11865 ioctl 4018620d 9 returned -1 [ 404.976048][T11871] FAULT_INJECTION: forcing a failure. [ 404.976048][T11871] name failslab, interval 1, probability 0, space 0, times 0 [ 405.040224][T11871] CPU: 0 UID: 0 PID: 11871 Comm: syz.2.1103 Tainted: G L syzkaller #0 PREEMPT(full) [ 405.040250][T11871] Tainted: [L]=SOFTLOCKUP [ 405.040255][T11871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 405.040265][T11871] Call Trace: [ 405.040270][T11871] [ 405.040277][T11871] dump_stack_lvl+0x100/0x190 [ 405.040297][T11871] should_fail_ex.cold+0x5/0xa [ 405.040317][T11871] ? asymmetric_key_generate_id+0x7e/0x180 [ 405.040337][T11871] should_failslab+0xc2/0x120 [ 405.040354][T11871] __kmalloc_noprof+0xe0/0x850 [ 405.040372][T11871] asymmetric_key_generate_id+0x7e/0x180 [ 405.040393][T11871] x509_cert_parse+0x5c1/0x910 [ 405.040417][T11871] ? kasan_save_stack+0x3f/0x50 [ 405.040431][T11871] ? kasan_save_stack+0x30/0x50 [ 405.040445][T11871] ? kasan_save_track+0x14/0x30 [ 405.040461][T11871] pkcs7_extract_cert+0xa4/0x380 [ 405.040486][T11871] asn1_ber_decoder+0x12b3/0x2170 [ 405.040511][T11871] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 405.040539][T11871] pkcs7_parse_message+0x289/0x870 [ 405.040564][T11871] verify_pkcs7_signature+0x30/0xa0 [ 405.040581][T11871] valid_regdb+0x211/0x590 [ 405.040600][T11871] ? __pfx_valid_regdb+0x10/0x10 [ 405.040619][T11871] reg_reload_regdb+0x11a/0x460 [ 405.040637][T11871] ? __pfx_reg_reload_regdb+0x10/0x10 [ 405.040656][T11871] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 405.040676][T11871] ? nl80211_pre_doit+0x19a/0xae0 [ 405.040699][T11871] genl_family_rcv_msg_doit+0x214/0x300 [ 405.040723][T11871] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 405.040743][T11871] ? genl_get_cmd+0x3e7/0x760 [ 405.040767][T11871] ? bpf_lsm_capable+0x9/0x10 [ 405.040782][T11871] ? security_capable+0x80/0x260 [ 405.040800][T11871] genl_rcv_msg+0x560/0x800 [ 405.040822][T11871] ? __pfx_genl_rcv_msg+0x10/0x10 [ 405.040842][T11871] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 405.040862][T11871] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 405.040878][T11871] ? __pfx_nl80211_post_doit+0x10/0x10 [ 405.040905][T11871] netlink_rcv_skb+0x159/0x420 [ 405.040923][T11871] ? __pfx_genl_rcv_msg+0x10/0x10 [ 405.040945][T11871] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 405.040970][T11871] ? netlink_deliver_tap+0x1ae/0xcc0 [ 405.040990][T11871] genl_rcv+0x28/0x40 [ 405.041008][T11871] netlink_unicast+0x585/0x850 [ 405.041029][T11871] ? __pfx_netlink_unicast+0x10/0x10 [ 405.041053][T11871] netlink_sendmsg+0x8b0/0xda0 [ 405.041074][T11871] ? __pfx_netlink_sendmsg+0x10/0x10 [ 405.041091][T11871] ? __import_iovec+0x1d2/0x640 [ 405.041113][T11871] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 405.041131][T11871] ____sys_sendmsg+0x9e1/0xb70 [ 405.041149][T11871] ? __pfx_netlink_sendmsg+0x10/0x10 [ 405.041169][T11871] ? __pfx_____sys_sendmsg+0x10/0x10 [ 405.041186][T11871] ? preempt_schedule_thunk+0x16/0x30 [ 405.041210][T11871] ? try_to_wake_up+0x5f6/0x1900 [ 405.041231][T11871] ___sys_sendmsg+0x190/0x1e0 [ 405.041251][T11871] ? __pfx____sys_sendmsg+0x10/0x10 [ 405.041270][T11871] ? futex_private_hash_put+0x107/0x1c0 [ 405.041312][T11871] __sys_sendmsg+0x170/0x220 [ 405.041327][T11871] ? __pfx___sys_sendmsg+0x10/0x10 [ 405.041342][T11871] ? __x64_sys_futex+0x34f/0x4d0 [ 405.041363][T11871] ? rcu_is_watching+0x12/0xc0 [ 405.041382][T11871] do_syscall_64+0x115/0x840 [ 405.041401][T11871] ? clear_bhb_loop+0x40/0x90 [ 405.041426][T11871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.041441][T11871] RIP: 0033:0x7eff8b39ce59 [ 405.041455][T11871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.041469][T11871] RSP: 002b:00007eff8c24a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 405.041483][T11871] RAX: ffffffffffffffda RBX: 00007eff8b615fa0 RCX: 00007eff8b39ce59 [ 405.041493][T11871] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000007 [ 405.041502][T11871] RBP: 00007eff8b432d6f R08: 0000000000000000 R09: 0000000000000000 [ 405.041511][T11871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 405.041520][T11871] R13: 00007eff8b616038 R14: 00007eff8b615fa0 R15: 00007fff82bf6fc8 [ 405.041539][T11871] [ 405.936864][T11871] hub 1-0:1.0: USB hub found [ 406.067823][T11871] hub 1-0:1.0: 1 port detected [ 406.189490][T11203] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 406.201100][T11203] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 406.213617][T11203] CPU: 0 UID: 0 PID: 11203 Comm: kworker/u13:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 406.213643][T11203] Tainted: [L]=SOFTLOCKUP [ 406.213649][T11203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 406.213680][T11203] Workqueue: hci3 hci_rx_work [ 406.213789][T11203] Call Trace: [ 406.213796][T11203] [ 406.213805][T11203] dump_stack_lvl+0x100/0x190 [ 406.213824][T11203] sysfs_warn_dup.cold+0x1c/0x28 [ 406.213851][T11203] sysfs_create_dir_ns+0x24b/0x2b0 [ 406.213875][T11203] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 406.213890][T11203] ? find_held_lock+0x2b/0x80 [ 406.213909][T11203] ? kobject_add_internal+0x25f/0x930 [ 406.213958][T11203] ? kobject_add_internal+0x25f/0x930 [ 406.213974][T11203] ? do_raw_spin_unlock+0x145/0x1e0 [ 406.213993][T11203] kobject_add_internal+0x2c8/0x930 [ 406.214012][T11203] kobject_add+0x16a/0x1e0 [ 406.214026][T11203] ? __pfx_kobject_add+0x10/0x10 [ 406.214039][T11203] ? class_to_subsys+0x10f/0x150 [ 406.214103][T11203] ? kobject_put+0xb9/0x640 [ 406.214146][T11203] ? _raw_spin_unlock+0x28/0x50 [ 406.214210][T11203] device_add+0x294/0x1950 [ 406.214246][T11203] ? __pfx_dev_set_name+0x10/0x10 [ 406.214290][T11203] ? __pfx_device_add+0x10/0x10 [ 406.214306][T11203] ? mgmt_send_event_skb+0x2fb/0x460 [ 406.214365][T11203] hci_conn_add_sysfs+0x1a3/0x260 [ 406.214437][T11203] le_conn_complete_evt+0x11eb/0x1f60 [ 406.214499][T11203] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 406.214517][T11203] ? __pfx_bt_warn+0x10/0x10 [ 406.214551][T11203] hci_le_conn_complete_evt+0x23c/0x3a0 [ 406.214570][T11203] ? skb_pull_data+0x15f/0x1e0 [ 406.214617][T11203] hci_le_meta_evt+0x34a/0x5f0 [ 406.214657][T11203] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 406.214678][T11203] hci_event_packet+0x51c/0xcd0 [ 406.214697][T11203] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 406.214718][T11203] ? __pfx_hci_event_packet+0x10/0x10 [ 406.214738][T11203] ? kcov_remote_start+0x374/0x660 [ 406.214757][T11203] ? lockdep_hardirqs_on+0x78/0x100 [ 406.214781][T11203] hci_rx_work+0x451/0xfc0 [ 406.214802][T11203] process_one_work+0xa0e/0x1980 [ 406.214824][T11203] ? __pfx_process_one_work+0x10/0x10 [ 406.214844][T11203] ? __pfx_hci_rx_work+0x10/0x10 [ 406.214863][T11203] worker_thread+0x5ef/0xe50 [ 406.214881][T11203] ? __pfx_worker_thread+0x10/0x10 [ 406.214895][T11203] ? kthread+0x13a/0x450 [ 406.214914][T11203] ? __pfx_worker_thread+0x10/0x10 [ 406.214927][T11203] kthread+0x370/0x450 [ 406.214946][T11203] ? __pfx_kthread+0x10/0x10 [ 406.214968][T11203] ret_from_fork+0x72b/0xd50 [ 406.214993][T11203] ? __pfx_ret_from_fork+0x10/0x10 [ 406.215007][T11203] ? rcu_is_watching+0x12/0xc0 [ 406.215024][T11203] ? __switch_to+0x800/0x1100 [ 406.215043][T11203] ? __switch_to_asm+0x39/0x70 [ 406.215062][T11203] ? __pfx_kthread+0x10/0x10 [ 406.215084][T11203] ret_from_fork_asm+0x1a/0x30 [ 406.215111][T11203] [ 406.215169][T11203] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 406.542483][T11203] Bluetooth: hci3: failed to register connection device [ 407.110693][T11895] random: crng reseeded on system resumption [ 407.361813][T11908] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1110'. [ 408.551773][T11203] Bluetooth: hci3: command 0x2016 tx timeout [ 408.678543][T11941] __vm_enough_memory: pid: 11941, comm: syz.0.1122, bytes: 4398046457856 not enough memory for the allocation [ 408.752754][T11934] ubi0: attaching mtd0 [ 408.809583][T11934] ubi0: scanning is finished [ 408.826659][T11942] __vm_enough_memory: pid: 11942, comm: syz.0.1122, bytes: 4398046457856 not enough memory for the allocation [ 408.912742][T11934] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 409.141954][T11947] FAULT_INJECTION: forcing a failure. [ 409.141954][T11947] name failslab, interval 1, probability 0, space 0, times 0 [ 409.301552][T11947] CPU: 0 UID: 0 PID: 11947 Comm: syz.1.1114 Tainted: G L syzkaller #0 PREEMPT(full) [ 409.301579][T11947] Tainted: [L]=SOFTLOCKUP [ 409.301585][T11947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 409.301594][T11947] Call Trace: [ 409.301599][T11947] [ 409.301605][T11947] dump_stack_lvl+0x100/0x190 [ 409.301626][T11947] should_fail_ex.cold+0x5/0xa [ 409.301646][T11947] should_failslab+0xc2/0x120 [ 409.301665][T11947] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 409.301681][T11947] ? x509_cert_parse+0x2b6/0x910 [ 409.301705][T11947] kmemdup_noprof+0x29/0x60 [ 409.301721][T11947] x509_cert_parse+0x2b6/0x910 [ 409.301743][T11947] pkcs7_extract_cert+0xa4/0x380 [ 409.301767][T11947] asn1_ber_decoder+0x12b3/0x2170 [ 409.301791][T11947] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 409.301818][T11947] pkcs7_parse_message+0x289/0x870 [ 409.301843][T11947] verify_pkcs7_signature+0x30/0xa0 [ 409.301860][T11947] valid_regdb+0x211/0x590 [ 409.301879][T11947] ? __pfx_valid_regdb+0x10/0x10 [ 409.301899][T11947] reg_reload_regdb+0x11a/0x460 [ 409.301916][T11947] ? __pfx_reg_reload_regdb+0x10/0x10 [ 409.301936][T11947] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 409.301957][T11947] ? nl80211_pre_doit+0x19a/0xae0 [ 409.301980][T11947] genl_family_rcv_msg_doit+0x214/0x300 [ 409.302004][T11947] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 409.302025][T11947] ? genl_get_cmd+0x3e7/0x760 [ 409.302048][T11947] ? bpf_lsm_capable+0x9/0x10 [ 409.302072][T11947] ? security_capable+0x80/0x260 [ 409.302091][T11947] genl_rcv_msg+0x560/0x800 [ 409.302116][T11947] ? __pfx_genl_rcv_msg+0x10/0x10 [ 409.302138][T11947] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 409.302160][T11947] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 409.302177][T11947] ? __pfx_nl80211_post_doit+0x10/0x10 [ 409.302206][T11947] netlink_rcv_skb+0x159/0x420 [ 409.302224][T11947] ? __pfx_genl_rcv_msg+0x10/0x10 [ 409.302245][T11947] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 409.302270][T11947] ? netlink_deliver_tap+0x1ae/0xcc0 [ 409.302290][T11947] genl_rcv+0x28/0x40 [ 409.302309][T11947] netlink_unicast+0x585/0x850 [ 409.302329][T11947] ? __pfx_netlink_unicast+0x10/0x10 [ 409.302353][T11947] netlink_sendmsg+0x8b0/0xda0 [ 409.302374][T11947] ? __pfx_netlink_sendmsg+0x10/0x10 [ 409.302392][T11947] ? __import_iovec+0x1d2/0x640 [ 409.302413][T11947] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 409.302431][T11947] ____sys_sendmsg+0x9e1/0xb70 [ 409.302449][T11947] ? __pfx_netlink_sendmsg+0x10/0x10 [ 409.302474][T11947] ? __pfx_____sys_sendmsg+0x10/0x10 [ 409.302496][T11947] ? __pfx_futex_wake_mark+0x10/0x10 [ 409.302517][T11947] ___sys_sendmsg+0x190/0x1e0 [ 409.302538][T11947] ? __pfx____sys_sendmsg+0x10/0x10 [ 409.302579][T11947] __sys_sendmsg+0x170/0x220 [ 409.302594][T11947] ? __pfx___sys_sendmsg+0x10/0x10 [ 409.302608][T11947] ? __x64_sys_futex+0x34f/0x4d0 [ 409.302629][T11947] ? rcu_is_watching+0x12/0xc0 [ 409.302648][T11947] do_syscall_64+0x115/0x840 [ 409.302667][T11947] ? clear_bhb_loop+0x40/0x90 [ 409.302684][T11947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.302699][T11947] RIP: 0033:0x7f50aa19ce59 [ 409.302713][T11947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 409.302727][T11947] RSP: 002b:00007f50ab07e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 409.302742][T11947] RAX: ffffffffffffffda RBX: 00007f50aa416090 RCX: 00007f50aa19ce59 [ 409.302755][T11947] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000007 [ 409.302763][T11947] RBP: 00007f50aa232d6f R08: 0000000000000000 R09: 0000000000000000 [ 409.302772][T11947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 409.302780][T11947] R13: 00007f50aa416128 R14: 00007f50aa416090 R15: 00007ffce9d760f8 [ 409.302798][T11947] [ 410.482258][T11938] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 410.520708][T11934] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 410.602593][T11934] Process accounting resumed [ 410.623405][T11203] Bluetooth: hci3: command 0x2016 tx timeout [ 410.757740][T11969] FAULT_INJECTION: forcing a failure. [ 410.757740][T11969] name failslab, interval 1, probability 0, space 0, times 0 [ 410.846008][T11969] CPU: 0 UID: 0 PID: 11969 Comm: syz.3.1117 Tainted: G L syzkaller #0 PREEMPT(full) [ 410.846035][T11969] Tainted: [L]=SOFTLOCKUP [ 410.846041][T11969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 410.846050][T11969] Call Trace: [ 410.846055][T11969] [ 410.846061][T11969] dump_stack_lvl+0x100/0x190 [ 410.846083][T11969] should_fail_ex.cold+0x5/0xa [ 410.846103][T11969] should_failslab+0xc2/0x120 [ 410.846122][T11969] __kmalloc_cache_noprof+0x7a/0x6f0 [ 410.846142][T11969] ? alloc_fs_context+0x57/0xf40 [ 410.846167][T11969] alloc_fs_context+0x57/0xf40 [ 410.846190][T11969] mq_init_ns+0x16e/0x820 [ 410.846276][T11969] copy_ipcs+0x3dd/0x7e0 [ 410.846294][T11969] create_new_namespaces+0x20a/0xac0 [ 410.846313][T11969] ? security_capable+0x80/0x260 [ 410.846329][T11969] unshare_nsproxy_namespaces+0xf2/0x220 [ 410.846349][T11969] ksys_unshare+0x438/0xab0 [ 410.846370][T11969] ? __pfx_ksys_unshare+0x10/0x10 [ 410.846389][T11969] ? xfd_validate_state+0x129/0x190 [ 410.846416][T11969] __x64_sys_unshare+0x31/0x40 [ 410.846436][T11969] do_syscall_64+0x115/0x840 [ 410.846455][T11969] ? clear_bhb_loop+0x40/0x90 [ 410.846473][T11969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.846489][T11969] RIP: 0033:0x7fe606b9ce59 [ 410.846502][T11969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.846516][T11969] RSP: 002b:00007fe607ab8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 410.846531][T11969] RAX: ffffffffffffffda RBX: 00007fe606e15fa0 RCX: 00007fe606b9ce59 [ 410.846541][T11969] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c000000 [ 410.846549][T11969] RBP: 00007fe606c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 410.846557][T11969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 410.846565][T11969] R13: 00007fe606e16038 R14: 00007fe606e15fa0 R15: 00007ffc8e832398 [ 410.846584][T11969] [ 412.193493][T11965] Process accounting paused [ 412.474179][T12001] 0 [ 413.824424][T12037] 0 [ 413.878611][T12037] binder: BINDER_SET_CONTEXT_MGR bad uid 8 != 0 [ 413.930991][T12037] binder: 12035:12037 ioctl 4018620d 9 returned -1 [ 413.962068][ T29] audit: type=1800 audit(1780607043.821:23): pid=12043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1136" name="trace_pipe" dev="tracefs" ino=839 res=0 errno=0 [ 414.880628][T11285] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm kworker/u11:6: bg 5: bad block bitmap checksum [ 414.943956][T11285] EXT4-fs: 4 callbacks suppressed [ 414.943989][T11285] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 74 [ 415.036471][T11285] EXT4-fs (sda1): This should not happen!! Data will be lost [ 415.036471][T11285] [ 415.085651][T12069] ubi31: attaching mtd0 [ 415.116575][T12069] ubi31: scanning is finished [ 415.145181][T12069] ubi31 error: ubi_read_volume_table: the layout volume was not found [ 415.352431][T11203] Bluetooth: hci2: unexpected event for opcode 0x7c89 [ 415.370781][T12069] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 415.426750][T12070] ubi31: attaching mtd0 [ 415.464225][T12078] random: crng reseeded on system resumption [ 415.500001][T12070] ubi31: scanning is finished [ 415.525588][T12081] EXT4-fs error (device sda1): ext4_discard_preallocations:5696: comm syz.2.1143: Error -117 reading block bitmap for 5 [ 415.539963][T12070] ubi31 error: ubi_read_volume_table: the layout volume was not found [ 415.741550][T12070] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 415.821211][T12085] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff81b0e02a (__mcheck_cpu_init_prepare_banks+0x18a/0x380) [ 415.837093][T12085] Call Trace: [ 415.840565][T12085] [ 415.843521][T12085] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 415.850213][T12085] ? __pfx___schedule+0x10/0x10 [ 415.855070][T12085] ? irqentry_exit+0x24d/0x970 [ 415.859952][T12085] mce_cpu_restart+0xd5/0x1f0 [ 415.864631][T12085] ? __pfx_mce_cpu_restart+0x10/0x10 [ 415.869913][T12085] smp_call_function_many_cond+0x13d4/0x1700 [ 415.875894][T12085] ? __pfx_mce_cpu_restart+0x10/0x10 [ 415.881283][T12085] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 415.887122][T12085] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 415.893478][T12085] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 415.899489][T12085] ? __timer_delete_sync+0x151/0x1c0 [ 415.904787][T12085] ? __pfx_mce_cpu_restart+0x10/0x10 [ 415.910113][T12085] on_each_cpu_cond_mask+0x40/0x90 [ 415.915221][T12085] set_bank+0x240/0x3a0 [ 415.919380][T12085] ? __pfx_set_bank+0x10/0x10 [ 415.924066][T12085] ? find_held_lock+0x2b/0x80 [ 415.928788][T12085] ? sysfs_file_kobj+0xe4/0x290 [ 415.933825][T12085] ? sysfs_file_kobj+0xe4/0x290 [ 415.938703][T12085] ? __pfx_set_bank+0x10/0x10 [ 415.943382][T12085] dev_attr_store+0x58/0x80 [ 415.947883][T12085] ? __pfx_dev_attr_store+0x10/0x10 [ 415.953181][T12085] sysfs_kf_write+0xf2/0x150 [ 415.957794][T12085] kernfs_fop_write_iter+0x3e0/0x5f0 [ 415.963129][T12085] ? __pfx_sysfs_kf_write+0x10/0x10 [ 415.968353][T12085] vfs_write+0x6ac/0x1070 [ 415.972699][T12085] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 415.978524][T12085] ? __pfx_vfs_write+0x10/0x10 [ 415.983343][T12085] ksys_write+0x12a/0x250 [ 415.987680][T12085] ? __pfx_ksys_write+0x10/0x10 [ 415.992653][T12085] ? rcu_is_watching+0x12/0xc0 [ 415.997461][T12085] do_syscall_64+0x115/0x840 [ 416.002108][T12085] ? clear_bhb_loop+0x40/0x90 [ 416.006788][T12085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.012672][T12085] RIP: 0033:0x7f50aa19ce59 [ 416.017108][T12085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 416.036726][T12085] RSP: 002b:00007f50ab09f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 416.045144][T12085] RAX: ffffffffffffffda RBX: 00007f50aa415fa0 RCX: 00007f50aa19ce59 [ 416.053144][T12085] RDX: 0000000000000003 RSI: 0000200000000240 RDI: 0000000000000006 [ 416.061131][T12085] RBP: 00007f50aa232d6f R08: 0000000000000000 R09: 0000000000000000 [ 416.069099][T12085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 416.077146][T12085] R13: 00007f50aa416038 R14: 00007f50aa415fa0 R15: 00007ffce9d760f8 [ 416.085121][T12085] [ 417.854742][T12134] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 8 [ 417.944006][T12134] binder: 12128:12134 ioctl 40046207 0 returned -1 [ 418.784003][T12151] futex_wake_op: syz.3.1156 tries to shift op by -2048; fix this program [ 418.851000][T12151] futex_wake_op: syz.3.1156 tries to shift op by -2048; fix this program [ 419.783508][ T29] audit: type=1800 audit(1780607049.659:24): pid=12173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1161" name="dbroot" dev="configfs" ino=44446 res=0 errno=0 [ 420.495269][T12189] ubi0: attaching mtd0 [ 420.618224][T12189] ubi0: scanning is finished [ 420.708829][T12199] 0 [ 420.726047][T12199] binder: 12198:12199 ioctl 4018620d 9 returned -22 [ 420.742231][T12189] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 421.128638][T12189] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 422.677643][T12234] 0 [ 422.691420][T12234] binder: 12233:12234 ioctl 4018620d 9 returned -22 [ 423.801365][T12257] FAULT_INJECTION: forcing a failure. [ 423.801365][T12257] name failslab, interval 1, probability 0, space 0, times 0 [ 424.000514][T12257] CPU: 0 UID: 0 PID: 12257 Comm: syz.1.1181 Tainted: G L syzkaller #0 PREEMPT(full) [ 424.000541][T12257] Tainted: [L]=SOFTLOCKUP [ 424.000546][T12257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 424.000555][T12257] Call Trace: [ 424.000561][T12257] [ 424.000567][T12257] dump_stack_lvl+0x100/0x190 [ 424.000587][T12257] should_fail_ex.cold+0x5/0xa [ 424.000607][T12257] should_failslab+0xc2/0x120 [ 424.000624][T12257] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 424.000647][T12257] ? prepare_creds+0x2c/0x950 [ 424.000668][T12257] prepare_creds+0x2c/0x950 [ 424.000683][T12257] __sys_setuid+0x9c/0x440 [ 424.000701][T12257] do_syscall_64+0x115/0x840 [ 424.000720][T12257] ? clear_bhb_loop+0x40/0x90 [ 424.000739][T12257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.000755][T12257] RIP: 0033:0x7f50aa19ce59 [ 424.000768][T12257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 424.000782][T12257] RSP: 002b:00007f50ab09f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000069 [ 424.000796][T12257] RAX: ffffffffffffffda RBX: 00007f50aa415fa0 RCX: 00007f50aa19ce59 [ 424.000805][T12257] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 424.000813][T12257] RBP: 00007f50aa232d6f R08: 0000000000000000 R09: 0000000000000000 [ 424.000822][T12257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 424.000837][T12257] R13: 00007f50aa416038 R14: 00007f50aa415fa0 R15: 00007ffce9d760f8 [ 424.000856][T12257] [ 425.901602][T12299] 0 [ 426.686096][T12330] zram0: detected capacity change from 0 to 16 [ 427.212264][T12343] 0 [ 427.222373][T12343] binder: BINDER_SET_CONTEXT_MGR bad uid 8 != 0 [ 427.265105][T12343] binder: 12342:12343 ioctl 4018620d 9 returned -1 [ 428.687305][T11284] EXT4-fs (sda1): Delayed block allocation failed for inode 2030 at logical offset 912 with max blocks 4 with error 117 [ 428.718588][T12363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1204'. [ 428.755268][T11284] EXT4-fs (sda1): This should not happen!! Data will be lost [ 428.755268][T11284] [ 429.488692][T12388] can: request_module (can-proto-3) failed. [ 429.657857][T11285] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 7 with max blocks 1 with error 117 [ 429.691694][T11203] Bluetooth: hci4: unexpected event for opcode 0x7c89 [ 429.748802][T11285] EXT4-fs (sda1): This should not happen!! Data will be lost [ 429.748802][T11285] [ 432.284380][T12432] [U] ^\ [ 432.291058][T12416] FAULT_INJECTION: forcing a failure. [ 432.291058][T12416] name failslab, interval 1, probability 0, space 0, times 0 [ 432.359818][T12416] CPU: 0 UID: 0 PID: 12416 Comm: syz.0.1215 Tainted: G L syzkaller #0 PREEMPT(full) [ 432.359845][T12416] Tainted: [L]=SOFTLOCKUP [ 432.359850][T12416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 432.359860][T12416] Call Trace: [ 432.359865][T12416] [ 432.359871][T12416] dump_stack_lvl+0x100/0x190 [ 432.359892][T12416] should_fail_ex.cold+0x5/0xa [ 432.359911][T12416] ? __pfx_crypto_alg_extsize+0x10/0x10 [ 432.359933][T12416] should_failslab+0xc2/0x120 [ 432.359950][T12416] ? __pfx_crypto_alg_extsize+0x10/0x10 [ 432.359971][T12416] __kmalloc_node_noprof+0xe6/0x850 [ 432.359992][T12416] ? crypto_alloc_tfmmem.isra.0+0x38/0x110 [ 432.360013][T12416] ? __pfx_crypto_alg_extsize+0x10/0x10 [ 432.360034][T12416] crypto_alloc_tfmmem.isra.0+0x38/0x110 [ 432.360053][T12416] crypto_create_tfm_node+0x85/0x350 [ 432.360074][T12416] crypto_alloc_tfm_node+0x102/0x260 [ 432.360095][T12416] public_key_verify_signature+0x21b/0x910 [ 432.360118][T12416] ? __pfx_public_key_verify_signature+0x10/0x10 [ 432.360146][T12416] ? __kmalloc_noprof+0x320/0x850 [ 432.360164][T12416] x509_check_for_self_signed+0x325/0x510 [ 432.360190][T12416] x509_cert_parse+0x60c/0x910 [ 432.360209][T12416] ? kasan_save_stack+0x3f/0x50 [ 432.360222][T12416] ? kasan_save_stack+0x30/0x50 [ 432.360235][T12416] ? kasan_save_track+0x14/0x30 [ 432.360250][T12416] pkcs7_extract_cert+0xa4/0x380 [ 432.360275][T12416] asn1_ber_decoder+0x12b3/0x2170 [ 432.360299][T12416] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 432.360326][T12416] pkcs7_parse_message+0x289/0x870 [ 432.360351][T12416] verify_pkcs7_signature+0x30/0xa0 [ 432.360369][T12416] valid_regdb+0x211/0x590 [ 432.360394][T12416] ? __pfx_valid_regdb+0x10/0x10 [ 432.360414][T12416] reg_reload_regdb+0x11a/0x460 [ 432.360434][T12416] ? __pfx_reg_reload_regdb+0x10/0x10 [ 432.360453][T12416] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 432.360475][T12416] ? nl80211_pre_doit+0x19a/0xae0 [ 432.360500][T12416] genl_family_rcv_msg_doit+0x214/0x300 [ 432.360524][T12416] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 432.360545][T12416] ? genl_get_cmd+0x3e7/0x760 [ 432.360569][T12416] ? bpf_lsm_capable+0x9/0x10 [ 432.360585][T12416] ? security_capable+0x80/0x260 [ 432.360603][T12416] genl_rcv_msg+0x560/0x800 [ 432.360625][T12416] ? __pfx_genl_rcv_msg+0x10/0x10 [ 432.360645][T12416] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 432.360665][T12416] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 432.360681][T12416] ? __pfx_nl80211_post_doit+0x10/0x10 [ 432.360708][T12416] netlink_rcv_skb+0x159/0x420 [ 432.360726][T12416] ? __pfx_genl_rcv_msg+0x10/0x10 [ 432.360748][T12416] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 432.360773][T12416] ? netlink_deliver_tap+0x1ae/0xcc0 [ 432.360793][T12416] genl_rcv+0x28/0x40 [ 432.360811][T12416] netlink_unicast+0x585/0x850 [ 432.360832][T12416] ? __pfx_netlink_unicast+0x10/0x10 [ 432.360855][T12416] netlink_sendmsg+0x8b0/0xda0 [ 432.360877][T12416] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.360894][T12416] ? __import_iovec+0x1d2/0x640 [ 432.360916][T12416] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 432.360934][T12416] ____sys_sendmsg+0x9e1/0xb70 [ 432.360952][T12416] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.360972][T12416] ? __pfx_____sys_sendmsg+0x10/0x10 [ 432.360989][T12416] ? preempt_schedule_thunk+0x16/0x30 [ 432.361013][T12416] ? try_to_wake_up+0x5f6/0x1900 [ 432.361035][T12416] ___sys_sendmsg+0x190/0x1e0 [ 432.361055][T12416] ? __pfx____sys_sendmsg+0x10/0x10 [ 432.361074][T12416] ? futex_private_hash_put+0x107/0x1c0 [ 432.361117][T12416] __sys_sendmsg+0x170/0x220 [ 432.361132][T12416] ? __pfx___sys_sendmsg+0x10/0x10 [ 432.361146][T12416] ? __x64_sys_futex+0x34f/0x4d0 [ 432.361168][T12416] ? rcu_is_watching+0x12/0xc0 [ 432.361205][T12416] do_syscall_64+0x115/0x840 [ 432.361226][T12416] ? clear_bhb_loop+0x40/0x90 [ 432.361243][T12416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.361258][T12416] RIP: 0033:0x7f8a08b9ce59 [ 432.361272][T12416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 432.361287][T12416] RSP: 002b:00007f8a09aeb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 432.361302][T12416] RAX: ffffffffffffffda RBX: 00007f8a08e15fa0 RCX: 00007f8a08b9ce59 [ 432.361311][T12416] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000007 [ 432.361321][T12416] RBP: 00007f8a08c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 432.361329][T12416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 432.361338][T12416] R13: 00007f8a08e16038 R14: 00007f8a08e15fa0 R15: 00007ffc54d072c8 [ 432.361357][T12416] [ 433.873347][T12416] hub 1-0:1.0: USB hub found [ 433.895869][T12416] hub 1-0:1.0: 1 port detected [ 435.974975][T12482] input: f¬ as /devices/virtual/input/input8 [ 436.315804][T12489] blktrace: Concurrent blktraces are not allowed on sda1 [ 436.538995][T12500] zram: Cannot change disksize for initialized device [ 437.140979][T12506] FAULT_INJECTION: forcing a failure. [ 437.140979][T12506] name failslab, interval 1, probability 0, space 0, times 0 [ 437.177892][T12490] kexec: Could not allocate control_code_buffer [ 437.195962][T12506] CPU: 0 UID: 0 PID: 12506 Comm: syz.1.1236 Tainted: G L syzkaller #0 PREEMPT(full) [ 437.195989][T12506] Tainted: [L]=SOFTLOCKUP [ 437.195994][T12506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 437.196010][T12506] Call Trace: [ 437.196016][T12506] [ 437.196023][T12506] dump_stack_lvl+0x100/0x190 [ 437.196044][T12506] should_fail_ex.cold+0x5/0xa [ 437.196063][T12506] should_failslab+0xc2/0x120 [ 437.196081][T12506] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 437.196097][T12506] ? x509_get_sig_params+0xf5/0x6c0 [ 437.196119][T12506] ? trace_kmalloc+0xe3/0x110 [ 437.196138][T12506] kmemdup_noprof+0x29/0x60 [ 437.196155][T12506] x509_get_sig_params+0xf5/0x6c0 [ 437.196176][T12506] ? __asan_memcpy+0x3c/0x60 [ 437.196199][T12506] x509_cert_parse+0x4e9/0x910 [ 437.196217][T12506] ? kasan_save_stack+0x3f/0x50 [ 437.196230][T12506] ? kasan_save_stack+0x30/0x50 [ 437.196250][T12506] ? kasan_save_track+0x14/0x30 [ 437.196266][T12506] pkcs7_extract_cert+0xa4/0x380 [ 437.196292][T12506] asn1_ber_decoder+0x12b3/0x2170 [ 437.196316][T12506] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 437.196345][T12506] pkcs7_parse_message+0x289/0x870 [ 437.196371][T12506] verify_pkcs7_signature+0x30/0xa0 [ 437.196389][T12506] valid_regdb+0x211/0x590 [ 437.196408][T12506] ? __pfx_valid_regdb+0x10/0x10 [ 437.196430][T12506] reg_reload_regdb+0x11a/0x460 [ 437.196450][T12506] ? __pfx_reg_reload_regdb+0x10/0x10 [ 437.196468][T12506] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 437.196489][T12506] ? nl80211_pre_doit+0x19a/0xae0 [ 437.196511][T12506] genl_family_rcv_msg_doit+0x214/0x300 [ 437.196535][T12506] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 437.196556][T12506] ? genl_get_cmd+0x3e7/0x760 [ 437.196580][T12506] ? bpf_lsm_capable+0x9/0x10 [ 437.196596][T12506] ? security_capable+0x80/0x260 [ 437.196615][T12506] genl_rcv_msg+0x560/0x800 [ 437.196637][T12506] ? __pfx_genl_rcv_msg+0x10/0x10 [ 437.196657][T12506] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 437.196677][T12506] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 437.196693][T12506] ? __pfx_nl80211_post_doit+0x10/0x10 [ 437.196720][T12506] netlink_rcv_skb+0x159/0x420 [ 437.196739][T12506] ? __pfx_genl_rcv_msg+0x10/0x10 [ 437.196760][T12506] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 437.196785][T12506] ? netlink_deliver_tap+0x1ae/0xcc0 [ 437.196805][T12506] genl_rcv+0x28/0x40 [ 437.196831][T12506] netlink_unicast+0x585/0x850 [ 437.196853][T12506] ? __pfx_netlink_unicast+0x10/0x10 [ 437.196877][T12506] netlink_sendmsg+0x8b0/0xda0 [ 437.196900][T12506] ? __pfx_netlink_sendmsg+0x10/0x10 [ 437.196918][T12506] ? __import_iovec+0x1d2/0x640 [ 437.196940][T12506] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 437.196958][T12506] ____sys_sendmsg+0x9e1/0xb70 [ 437.196976][T12506] ? __pfx_netlink_sendmsg+0x10/0x10 [ 437.196996][T12506] ? __pfx_____sys_sendmsg+0x10/0x10 [ 437.197012][T12506] ? preempt_schedule_thunk+0x16/0x30 [ 437.197037][T12506] ? try_to_wake_up+0x5f6/0x1900 [ 437.197058][T12506] ___sys_sendmsg+0x190/0x1e0 [ 437.197078][T12506] ? __pfx____sys_sendmsg+0x10/0x10 [ 437.197097][T12506] ? futex_private_hash_put+0x107/0x1c0 [ 437.197140][T12506] __sys_sendmsg+0x170/0x220 [ 437.197155][T12506] ? __pfx___sys_sendmsg+0x10/0x10 [ 437.197169][T12506] ? __x64_sys_futex+0x34f/0x4d0 [ 437.197190][T12506] ? rcu_is_watching+0x12/0xc0 [ 437.197209][T12506] do_syscall_64+0x115/0x840 [ 437.197229][T12506] ? clear_bhb_loop+0x40/0x90 [ 437.197246][T12506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.197261][T12506] RIP: 0033:0x7f50aa19ce59 [ 437.197276][T12506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.197291][T12506] RSP: 002b:00007f50ab07e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 437.197306][T12506] RAX: ffffffffffffffda RBX: 00007f50aa416090 RCX: 00007f50aa19ce59 [ 437.197316][T12506] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000007 [ 437.197325][T12506] RBP: 00007f50aa232d6f R08: 0000000000000000 R09: 0000000000000000 [ 437.197335][T12506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 437.197344][T12506] R13: 00007f50aa416128 R14: 00007f50aa416090 R15: 00007ffce9d760f8 [ 437.197364][T12506] [ 438.664989][T12518] futex_wake_op: syz.3.1238 tries to shift op by -2048; fix this program [ 438.701472][ T29] audit: type=1800 audit(1780609116.672:25): pid=12515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1237" name="trace_pipe" dev="tracefs" ino=839 res=0 errno=0 [ 438.819569][T12514] ubi0: attaching mtd0 [ 438.840851][T12518] futex_wake_op: syz.3.1238 tries to shift op by -2048; fix this program [ 438.886134][T12514] ubi0: scanning is finished [ 438.934885][T12514] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 438.974848][T12518] futex_wake_op: syz.3.1238 tries to shift op by -2048; fix this program [ 439.076156][T12518] futex_wake_op: syz.3.1238 tries to shift op by -2048; fix this program [ 439.133451][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.139948][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.306836][T12518] futex_wake_op: syz.3.1238 tries to shift op by -2048; fix this program [ 439.466910][T12514] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 439.737368][T12505] hub 1-0:1.0: USB hub found [ 439.771629][T12505] hub 1-0:1.0: 1 port detected [ 439.781015][T12537] [ 439.783450][T12537] ====================================================== [ 439.790453][T12537] WARNING: possible circular locking dependency detected [ 439.797460][T12537] syzkaller #0 Tainted: G L [ 439.803438][T12537] ------------------------------------------------------ [ 439.810449][T12537] syz.0.1240/12537 is trying to acquire lock: [ 439.816714][T12537] ffffffff8e849920 (cgroup_mutex){+.+.}-{4:4}, at: cgroup_kn_lock_live+0x116/0x520 [ 439.826039][T12537] [ 439.826039][T12537] but task is already holding lock: [ 439.833402][T12537] ffff88805a349440 (&type->i_mutex_dir_key#6){++++}-{4:4}, at: vfs_rmdir+0xed/0x8a0 [ 439.842994][T12537] [ 439.842994][T12537] which lock already depends on the new lock. [ 439.842994][T12537] [ 439.853428][T12537] [ 439.853428][T12537] the existing dependency chain (in reverse order) is: [ 439.862557][T12537] [ 439.862557][T12537] -> #3 (&type->i_mutex_dir_key#6){++++}-{4:4}: [ 439.870988][T12537] down_read+0x99/0x450 [ 439.875695][T12537] lookup_slow+0x42/0x70 [ 439.880492][T12537] path_lookupat+0x5e8/0xc40 [ 439.885773][T12537] filename_lookup+0x202/0x590 [ 439.891169][T12537] kern_path+0x37/0x50 [ 439.895757][T12537] lookup_bdev+0xd8/0x280 [ 439.900664][T12537] bdev_file_open_by_path+0x82/0x330 [ 439.906733][T12537] block2mtd_setup2.isra.0+0x2ee/0xc70 [ 439.912800][T12537] block2mtd_setup+0xbd/0xd0 [ 439.917900][T12537] param_attr_store+0x199/0x300 [ 439.923691][T12537] module_attr_store+0x58/0x80 [ 439.928978][T12537] sysfs_kf_write+0xf2/0x150 [ 439.934083][T12537] kernfs_fop_write_iter+0x3e0/0x5f0 [ 439.939885][T12537] vfs_write+0x6ac/0x1070 [ 439.944720][T12537] ksys_write+0x12a/0x250 [ 439.949552][T12537] do_syscall_64+0x115/0x840 [ 439.954653][T12537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.961071][T12537] [ 439.961071][T12537] -> #2 (param_lock){+.+.}-{4:4}: [ 439.968309][T12537] __mutex_lock+0x1a4/0x1b10 [ 439.973419][T12537] ieee80211_init_rate_ctrl_alg+0x1df/0x3b0 [ 439.979933][T12537] ieee80211_register_hw+0x2c20/0x4570 [ 439.985986][T12537] mac80211_hwsim_new_radio+0x2a01/0x5aa0 [ 439.992364][T12537] init_mac80211_hwsim+0x3f2/0x830 [ 439.998381][T12537] do_one_initcall+0x121/0x750 [ 440.003755][T12537] kernel_init_freeable+0x6ea/0x7b0 [ 440.009593][T12537] kernel_init+0x1f/0x1e0 [ 440.014466][T12537] ret_from_fork+0x72b/0xd50 [ 440.019662][T12537] ret_from_fork_asm+0x1a/0x30 [ 440.025379][T12537] [ 440.025379][T12537] -> #1 (rtnl_mutex){+.+.}-{4:4}: [ 440.032587][T12537] __mutex_lock+0x1a4/0x1b10 [ 440.037703][T12537] cgrp_css_online+0xa1/0x1f0 [ 440.043008][T12537] online_css+0xb2/0x350 [ 440.047772][T12537] cgroup_apply_control_enable+0xa8d/0xdd0 [ 440.054094][T12537] cgroup_mkdir+0x59c/0x1310 [ 440.059200][T12537] kernfs_iop_mkdir+0x111/0x190 [ 440.064561][T12537] vfs_mkdir+0x361/0x850 [ 440.069340][T12537] filename_mkdirat+0x48b/0x5e0 [ 440.074722][T12537] __x64_sys_mkdirat+0x89/0xc0 [ 440.079994][T12537] do_syscall_64+0x115/0x840 [ 440.085097][T12537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.091499][T12537] [ 440.091499][T12537] -> #0 (cgroup_mutex){+.+.}-{4:4}: [ 440.098868][T12537] __lock_acquire+0x14b8/0x2630 [ 440.104407][T12537] lock_acquire+0x1b1/0x370 [ 440.109422][T12537] __mutex_lock+0x1a4/0x1b10 [ 440.114524][T12537] cgroup_kn_lock_live+0x116/0x520 [ 440.120147][T12537] cgroup_rmdir+0x26/0x2e0 [ 440.125080][T12537] kernfs_iop_rmdir+0x106/0x170 [ 440.130465][T12537] vfs_rmdir+0x328/0x8a0 [ 440.135313][T12537] filename_rmdir+0x31a/0x5c0 [ 440.140504][T12537] __x64_sys_rmdir+0x46/0x70 [ 440.145598][T12537] do_syscall_64+0x115/0x840 [ 440.150704][T12537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.157190][T12537] [ 440.157190][T12537] other info that might help us debug this: [ 440.157190][T12537] [ 440.167517][T12537] Chain exists of: [ 440.167517][T12537] cgroup_mutex --> param_lock --> &type->i_mutex_dir_key#6 [ 440.167517][T12537] [ 440.181253][T12537] Possible unsafe locking scenario: [ 440.181253][T12537] [ 440.188725][T12537] CPU0 CPU1 [ 440.194078][T12537] ---- ---- [ 440.199433][T12537] lock(&type->i_mutex_dir_key#6); [ 440.204618][T12537] lock(param_lock); [ 440.211209][T12537] lock(&type->i_mutex_dir_key#6); [ 440.218919][T12537] lock(cgroup_mutex); [ 440.223061][T12537] [ 440.223061][T12537] *** DEADLOCK *** [ 440.223061][T12537] [ 440.231284][T12537] 3 locks held by syz.0.1240/12537: [ 440.236602][T12537] #0: ffff888079a74410 (sb_writers#9){.+.+}-{0:0}, at: filename_rmdir+0x1ff/0x5c0 [ 440.246046][T12537] #1: ffff88805a20b580 (&type->i_mutex_dir_key#6/1){+.+.}-{4:4}, at: filename_rmdir+0x258/0x5c0 [ 440.256602][T12537] #2: ffff88805a349440 (&type->i_mutex_dir_key#6){++++}-{4:4}, at: vfs_rmdir+0xed/0x8a0 [ 440.266475][T12537] [ 440.266475][T12537] stack backtrace: [ 440.272462][T12537] CPU: 0 UID: 0 PID: 12537 Comm: syz.0.1240 Tainted: G L syzkaller #0 PREEMPT(full) [ 440.272488][T12537] Tainted: [L]=SOFTLOCKUP [ 440.272494][T12537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 440.272503][T12537] Call Trace: [ 440.272511][T12537] [ 440.272517][T12537] dump_stack_lvl+0x100/0x190 [ 440.272536][T12537] print_circular_bug.cold+0x178/0x1c7 [ 440.272559][T12537] check_noncircular+0x146/0x160 [ 440.272582][T12537] __lock_acquire+0x14b8/0x2630 [ 440.272609][T12537] lock_acquire+0x1b1/0x370 [ 440.272639][T12537] ? cgroup_kn_lock_live+0x116/0x520 [ 440.272658][T12537] ? __pfx___might_resched+0x10/0x10 [ 440.272674][T12537] __mutex_lock+0x1a4/0x1b10 [ 440.272696][T12537] ? cgroup_kn_lock_live+0x116/0x520 [ 440.272716][T12537] ? cgroup_kn_lock_live+0x116/0x520 [ 440.272733][T12537] ? __lock_acquire+0x4a5/0x2630 [ 440.272754][T12537] ? __pfx___mutex_lock+0x10/0x10 [ 440.272776][T12537] ? find_held_lock+0x2b/0x80 [ 440.272792][T12537] ? cgroup_kn_lock_live+0x290/0x520 [ 440.272808][T12537] ? cgroup_kn_lock_live+0x290/0x520 [ 440.272826][T12537] ? cgroup_kn_lock_live+0x116/0x520 [ 440.272842][T12537] cgroup_kn_lock_live+0x116/0x520 [ 440.272859][T12537] ? kernfs_root+0xee/0x2a0 [ 440.272875][T12537] cgroup_rmdir+0x26/0x2e0 [ 440.272893][T12537] kernfs_iop_rmdir+0x106/0x170 [ 440.272910][T12537] ? security_inode_rmdir+0xe2/0x280 [ 440.272928][T12537] vfs_rmdir+0x328/0x8a0 [ 440.272941][T12537] filename_rmdir+0x31a/0x5c0 [ 440.272960][T12537] ? __pfx_filename_rmdir+0x10/0x10 [ 440.272981][T12537] ? do_getname+0x191/0x390 [ 440.273001][T12537] __x64_sys_rmdir+0x46/0x70 [ 440.273019][T12537] do_syscall_64+0x115/0x840 [ 440.273038][T12537] ? clear_bhb_loop+0x40/0x90 [ 440.273053][T12537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.273068][T12537] RIP: 0033:0x7f8a08b9ce59 [ 440.273084][T12537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 440.273101][T12537] RSP: 002b:00007f8a09aa9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 440.273115][T12537] RAX: ffffffffffffffda RBX: 00007f8a08e16180 RCX: 00007f8a08b9ce59 [ 440.273124][T12537] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 440.273134][T12537] RBP: 00007f8a08c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 440.273145][T12537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 440.273153][T12537] R13: 00007f8a08e16218 R14: 00007f8a08e16180 R15: 00007ffc54d072c8 [ 440.273166][T12537] [ 440.528293][T12531] Process accounting paused