last executing test programs: 9.77544736s ago: executing program 2 (id=242): bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x800000000012, 0x4, 0x80000001, 0x8}, 0x6f4) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r2, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000440)={0x34, r3, 0x201, 0x70bd2c, 0x25dfdbff, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x1c, 0x1, 0x0, 0x1, [@nested={0x15, 0x139, 0x0, 0x1, [@nested={0x4, 0xeb}, @typed={0x8, 0x2d, 0x0, 0x0, @fd}, @generic="5ecb8698ec"]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x4000048) sendmsg$auto_NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="00dd0000", @ANYRES16=0x0, @ANYBLOB="000227bd7000fedbdf254b00000008009e00050000000c001b80040002000400"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x1) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x60d80, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/fib_trie\x00', 0x0, 0x0) r4 = open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) copy_file_range$auto(r4, 0x0, r4, 0x0, 0x2, 0x0) r5 = bpf$auto(0x0, &(0x7f0000000000)=@link_update={0xa, @new_map_fd=0x2, 0x7, @old_prog_fd=0x13b}, 0xa3) bpf$auto(0x2, &(0x7f00000001c0)=@query={@target_fd=r5, 0x1, 0x183, 0x9, 0x63, @prog_cnt=0xfd, 0x0, 0x6, 0x5, 0x4000009, 0x9}, 0xc) 9.028068788s ago: executing program 1 (id=244): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x5b) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0xfffffffffffffffa, 0x15, 0xfffffffffffffffa, 0x100009000) mmap$auto(0x0, 0xa00005, 0x9, 0x40abe, r0, 0x7) io_uring_setup$auto(0x6, 0x0) r1 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x40200, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x74c) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x280, 0x0) pread64$auto(r2, 0x0, 0x5, 0x8d) mmap$auto(0x0, 0x400008, 0xe4, 0x9b72, 0x2, 0x400) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/dirty_ratio\x00', 0x2, 0x0) sendfile$auto(r3, r3, 0x0, 0x7fffe000) fcntl$auto_F_GETOWN(r1, 0x9, 0x2) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) msgctl$auto_IPC_RMID(0x4, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r4, 0x0, 0x800) r5 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r5, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) 8.861123424s ago: executing program 3 (id=246): socket(0x2, 0x3, 0x1008) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x200) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x9) readv$auto(0x3, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810008, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000040)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x2401, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x62040, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x1, 0x40009, 0xdf, 0x13, 0xffffffffffffffff, 0x10001) msync$auto(0x1ffff000, 0x1800000ff00f500, 0x400000004) r2 = socket(0x23, 0x5, 0x0) bind$auto(r2, 0x0, 0x80) socket(0xf, 0xa, 0x5) ioperm$auto(0x7, 0x75, 0x4) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) kexec_load$auto(0xff, 0x2, 0x0, 0x4) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x7) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptys2\x00', 0xc0982, 0x0) fstatfs$auto(0x3, 0x0) ioctl$auto(r3, 0x4b66, 0x1) 7.117689739s ago: executing program 2 (id=248): bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x800000000012, 0x4, 0x80000001, 0x8}, 0x6f4) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r2, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000440)={0x34, r3, 0x201, 0x70bd2c, 0x25dfdbff, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x1c, 0x1, 0x0, 0x1, [@nested={0x15, 0x139, 0x0, 0x1, [@nested={0x4, 0xeb}, @typed={0x8, 0x2d, 0x0, 0x0, @fd}, @generic="5ecb8698ec"]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x4000048) sendmsg$auto_NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="00dd0000", @ANYRES16=0x0, @ANYBLOB="000227bd7000fedbdf254b00000008009e00050000000c001b80040002000400"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x1) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x60d80, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/fib_trie\x00', 0x0, 0x0) r4 = open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) copy_file_range$auto(r4, 0x0, r4, 0x0, 0x2, 0x0) r5 = bpf$auto(0x0, &(0x7f0000000000)=@link_update={0xa, @new_map_fd=0x2, 0x7, @old_prog_fd=0x13b}, 0xa3) bpf$auto(0x2, &(0x7f00000001c0)=@query={@target_fd=r5, 0x1, 0x183, 0x9, 0x63, @prog_cnt=0xfd, 0x0, 0x6, 0x5, 0x4000009, 0x9}, 0xc) 7.058795652s ago: executing program 1 (id=249): mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) set_mempolicy$auto(0x8005, &(0x7f0000000280)=0x99, 0x4) sendmsg$auto_THERMAL_GENL_CMD_CDEV_GET(0xffffffffffffffff, 0x0, 0x8801) r0 = socket(0x2c, 0x3, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), r1) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x1c, r2, 0xb3eaee9e9ed11725, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41001}, 0x64810) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'pim6reg1\x00'}) fcntl$auto_F_GETOWN(r0, 0x9, 0x3) fanotify_init$auto(0x3, 0xf8e9) waitid$auto_P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000140)={@_si_pad}, 0x6, &(0x7f00000001c0)={{0x1, 0x585}, {0xe, 0x1}, 0x4, 0x1, 0x1, 0x5, 0x2, 0x1, 0x7, 0x7, 0x2, 0x9, 0x9, 0x1, 0x4}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r3, 0x4, 0x7ff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) fstat$auto(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x80000001, 0x0, 0x100, 0x0, 0x0, 0x0, 0xffffffffffffff91, 0xfd3, 0x2, 0xec, 0x4, 0x80000020281, 0x8, 0x2, 0xfffffffffffffff8}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) ptrace$auto_PTRACE_PEEKSIGINFO(0x4209, r3, 0x8, 0x6) listmount$auto(&(0x7f0000000100)={0x20, @raw, 0xffffffffffffffff, 0xfffffffffffffff7}, 0x0, 0xf4240, 0x1) 6.514672174s ago: executing program 1 (id=250): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x5b) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0xfffffffffffffffa, 0x15, 0xfffffffffffffffa, 0x100009000) mmap$auto(0x0, 0xa00005, 0x9, 0x40abe, r0, 0x7) io_uring_setup$auto(0x6, 0x0) r1 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x40200, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x74c) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x280, 0x0) pread64$auto(r2, 0x0, 0x5, 0x8d) mmap$auto(0x0, 0x400008, 0xe4, 0x9b72, 0x2, 0x400) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/dirty_ratio\x00', 0x2, 0x0) sendfile$auto(r3, r3, 0x0, 0x7fffe000) fcntl$auto_F_GETOWN(r1, 0x9, 0x2) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) msgctl$auto_IPC_RMID(0x4, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r4, 0x0, 0x800) r5 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r5, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) 6.129455735s ago: executing program 3 (id=251): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) statmount$auto(0x0, 0x0, 0x1fe, 0x31) setdomainname$auto(0xfffffffffffffffc, 0x9) sendmsg$auto_NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="e5fcffff", @ANYRES16=0x0, @ANYBLOB="000427ad7000ffdbdf252600000010003a019bd0253fe0a85f6df369d6bdd5538493e2093a9c0bb4dbf12b9909bc92b749e009dfe9e356995c1dbb7ea40b41b22574feb2167fe2e10125cabcd45cd6491aeb04afa17f911ca08e854582d2cf7a0a137e301ed1fb83330f6fc0ee3c402542208fbc010bf64cddb6bcfebec0aad2ac4aef1ba52a486436e6d589e444f4d0c7e79ac94a5697e2284c969a1d2588"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x2, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003b40)={'veth0_to_hsr\x00'}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf2503000000080003000002000006000700008000000800", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a000500000000000000000008000200", @ANYRES32], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x4048800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0x3}, 0x800}, 0x7, 0x4008) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060006004000000006000600070000000a"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r2 = socket(0x2, 0x3, 0x100) sendmsg$auto_L2TP_CMD_TUNNEL_MODIFY(r2, 0x0, 0x80) socket(0x10, 0x80006, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/pci0000:00/0000:00:04.0/net/eth0/carrier\x00', 0x881, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="5e002761a68818600ed32f19e6a738cd36daae074a"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) writev$auto(r3, &(0x7f0000000080)={&(0x7f00000000c0)="78202e01e4bb5c0c0a", 0x3}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1f1}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) lseek$auto(r2, 0x5, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="72010000", @ANYBLOB="7913"], 0x1ac}, 0x1, 0x0, 0x0, 0x10}, 0x4004) getsockopt$auto(r3, 0x8, 0x4bd, &(0x7f0000000040)='-\x00', &(0x7f0000000100)=0x2) rseq$auto(&(0x7f0000000040)={0x5, 0x7, 0x80000001, 0x806, 0xffffffff, 0x2}, 0x8004, 0x0, 0x8000006) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/trigger\x00', 0x400, 0x0) socket(0x2, 0x3, 0xa) bind$auto(0x3, &(0x7f0000000140)=@sco={0x1f, @none}, 0x7) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 5.923590677s ago: executing program 0 (id=252): socket(0x2, 0x80002, 0x73) r0 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="100000000214af"], 0x14}, 0x1, 0x0, 0x0, 0x20000045}, 0x24000044) setsockopt$auto(0x3, 0x0, 0x11, 0x0, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r1 = clone$auto(0x21, 0x80000007, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) wait4$auto(r1, 0x0, 0x80000000, &(0x7f0000000140)={{0x4, 0x10007f}, {0x4, 0xb}, 0x43, 0x2, 0x9, 0x10, 0x2, 0x1, 0x5, 0x6, 0x6, 0x800000000000008, 0x4, 0x7, 0x3, 0xb4b9}) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_PROCMAP_QUERY(0xffffffffffffffff, 0xc0686611, &(0x7f00000000c0)={0xfffffffffffffffa, 0x7, 0xfd, 0x4, 0x4, 0xfffffffffffffffd, 0x324, 0x4, 0x3, 0x5, 0xe, 0x2, 0x7, 0x800, 0xfffffffffffffb13}) socket(0xa, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_USBDEVFS_CONTROL32(r2, 0xc0105500, &(0x7f0000000340)={0x7, 0x6c, 0x1ff, 0x35, 0x68, 0x4, 0x101}) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MPP(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fedbdf256b00000021000d01fd5736a95c80db53e7c4aadb2715982f8807943d1727244eba33fc42fe000000"], 0x38}, 0x1, 0x0, 0x0, 0x804}, 0x4000890) setsockopt$auto(0x400000000000003, 0x29, 0x33, 0x0, 0x20056b) socketpair$auto(0x7f, 0x2, 0x8000000000000000, 0x0) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/fs/cifs/smbd_max_receive_size\x00', 0x40200, 0x0) read$auto_proc_reg_file_ops_compat_inode(r5, &(0x7f0000000000)=""/65, 0x41) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) capset$auto(&(0x7f0000000100)={0x20080522}, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x7ff2133f83a4752c, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0) ioctl$auto(r6, 0x560c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg$auto(0x3, 0x0, 0xfffd, 0x8000, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) 5.695459643s ago: executing program 3 (id=253): bind$auto(0xffffffffffffffff, 0x0, 0x6a) r0 = socket(0x25, 0x5, 0x0) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000000), r0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/veth0_to_bridge/base_reachable_time\x00', 0x202, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x4) ioctl$auto_FIDEDUPERANGE(r1, 0xc0189436, 0x8000) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000040), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x448c0) close_range$auto(0x2, 0xa, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) 5.627819546s ago: executing program 2 (id=254): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x5b) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0xfffffffffffffffa, 0x15, 0xfffffffffffffffa, 0x100009000) mmap$auto(0x0, 0xa00005, 0x9, 0x40abe, r0, 0x7) io_uring_setup$auto(0x6, 0x0) r1 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x40200, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x74c) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x280, 0x0) pread64$auto(r2, 0x0, 0x5, 0x8d) mmap$auto(0x0, 0x400008, 0xe4, 0x9b72, 0x2, 0x400) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/dirty_ratio\x00', 0x2, 0x0) sendfile$auto(r3, r3, 0x0, 0x7fffe000) fcntl$auto_F_GETOWN(r1, 0x9, 0x2) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) msgctl$auto_IPC_RMID(0x4, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r4, 0x0, 0x800) r5 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r5, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) 5.330565579s ago: executing program 3 (id=255): bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x800000000012, 0x4, 0x80000001, 0x8}, 0x6f4) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r2, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000440)={0x34, r3, 0x201, 0x70bd2c, 0x25dfdbff, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x1c, 0x1, 0x0, 0x1, [@nested={0x15, 0x139, 0x0, 0x1, [@nested={0x4, 0xeb}, @typed={0x8, 0x2d, 0x0, 0x0, @fd}, @generic="5ecb8698ec"]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x4000048) sendmsg$auto_NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="00dd0000", @ANYBLOB="000227bd7000fedbdf254b00000008009e00050000000c001b8004000200040003"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x1) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x60d80, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/fib_trie\x00', 0x0, 0x0) r4 = open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) copy_file_range$auto(r4, 0x0, r4, 0x0, 0x2, 0x0) r5 = bpf$auto(0x0, &(0x7f0000000000)=@link_update={0xa, @new_map_fd=0x2, 0x7, @old_prog_fd=0x13b}, 0xa3) bpf$auto(0x2, &(0x7f00000001c0)=@query={@target_fd=r5, 0x1, 0x183, 0x9, 0x63, @prog_cnt=0xfd, 0x0, 0x6, 0x5, 0x4000009, 0x9}, 0xc) 4.861975349s ago: executing program 0 (id=256): mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) set_mempolicy$auto(0x8005, &(0x7f0000000280)=0x99, 0x4) sendmsg$auto_THERMAL_GENL_CMD_CDEV_GET(0xffffffffffffffff, 0x0, 0x8801) r0 = socket(0x2c, 0x3, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), r1) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x1c, r2, 0xb3eaee9e9ed11725, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41001}, 0x64810) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'pim6reg1\x00'}) fcntl$auto_F_GETOWN(r0, 0x9, 0x3) fanotify_init$auto(0x3, 0xf8e9) waitid$auto_P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000140)={@_si_pad}, 0x6, &(0x7f00000001c0)={{0x1, 0x585}, {0xe, 0x1}, 0x4, 0x1, 0x1, 0x5, 0x2, 0x1, 0x7, 0x7, 0x2, 0x9, 0x9, 0x1, 0x4}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r3, 0x4, 0x7ff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) fstat$auto(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x80000001, 0x0, 0x100, 0x0, 0x0, 0x0, 0xffffffffffffff91, 0xfd3, 0x2, 0xec, 0x4, 0x80000020281, 0x8, 0x2, 0xfffffffffffffff8}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) madvise$auto(0x0, 0x20499d, 0x9) listmount$auto(&(0x7f0000000100)={0x20, @raw, 0xffffffffffffffff, 0xfffffffffffffff7}, 0x0, 0xf4240, 0x1) 4.304965183s ago: executing program 1 (id=257): bind$auto(0xffffffffffffffff, 0x0, 0x6a) r0 = socket(0x25, 0x5, 0x0) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000000), r0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/veth0_to_bridge/base_reachable_time\x00', 0x202, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x4) ioctl$auto_FIDEDUPERANGE(r1, 0xc0189436, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x448c0) close_range$auto(0x2, 0xa, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) 4.089739777s ago: executing program 0 (id=258): openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000000), 0x62800, 0x0) read$auto(0x3, 0x0, 0x80) bpf$auto(0x0, 0x0, 0x6f4) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/oom_score_adj\x00', 0x19d403, 0x0) sendto$auto(0x3, 0x0, 0x18, 0x7, &(0x7f0000000180)=@hci={0x1f, 0xdd86, 0x7}, 0x22) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = getpid() ioprio_get$auto_IOPRIO_WHO_PGRP(0x2, r1) r2 = socketcall$auto(0x8000, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) ioctl$auto_UBI_IOCDET(r4, 0x40046f41, 0x0) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r0, 0x4400ae8f, &(0x7f00000000c0)={0xdd}) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x1, 0x0) io_uring_register$auto(0x2, 0x6, 0x0, 0x86) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x108000a3d9) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x9, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) socketpair$auto(0x4, 0x2, 0x3000, 0x0) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) 3.526205431s ago: executing program 2 (id=259): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) ioctl$auto(r0, 0x5, r0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x0, 0x2000000005, 0x6) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) membarrier$auto(0x2, 0x0, 0x9) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xc02, 0x0) mmap$auto(0x20000000, 0x4, 0x4000000000df, 0x40eb1, r0, 0x300000000000) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) acct$auto(&(0x7f0000000140)='/dev/ptmx\x00') r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/net/packet\x00', 0x2880, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000001300)=""/4096, 0x1000) socket(0xa, 0x3, 0x3b) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x9, 0x2, 0x7, 0x100000006, 0x5, 0x3, 0x2000000000230006, 0x4, 0x7, 0x5, 0x2, 0x7, 0xaf, 0x6, 0x24, 0x3, 0x103, 0xfffffffffffffff7, 0x0, 0x0, 0x8000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x1fe, 0x81) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="d6000000", @ANYBLOB='p\x00', @ANYRES16=r2], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x1) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1ac}}, 0x40000) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) mmap$auto(0x0, 0x9, 0x9cad, 0x8012, 0x3, 0x8000) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) swapon$auto(&(0x7f0000000140)='./cgroup.cpu/cgroup.clone_children\x00', 0x2) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0xc8201, 0x0) 3.345663678s ago: executing program 1 (id=260): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x5b) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0xfffffffffffffffa, 0x15, 0xfffffffffffffffa, 0x100009000) mmap$auto(0x0, 0xa00005, 0x9, 0x40abe, r0, 0x7) io_uring_setup$auto(0x6, 0x0) r1 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x40200, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x74c) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x280, 0x0) pread64$auto(r2, 0x0, 0x5, 0x8d) mmap$auto(0x0, 0x400008, 0xe4, 0x9b72, 0x2, 0x400) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/dirty_ratio\x00', 0x2, 0x0) sendfile$auto(r3, r3, 0x0, 0x7fffe000) fcntl$auto_F_GETOWN(r1, 0x9, 0x2) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) msgctl$auto_IPC_RMID(0x4, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r4, 0x0, 0x800) r5 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r5, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) 2.758073582s ago: executing program 0 (id=261): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) connect$auto(0x3, 0x0, 0x81) mmap$auto(0x0, 0x7, 0x0, 0x19, 0x40000000000a5, 0x5) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) write$auto_proc_loginuid_operations_base(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f000000c380)={0x63, 0x0, 0xbde, 0x7fffffffefff, 0xfffffffffffffffe, 0x9702, 0x0, 0x50b301a, 0x4, 0x5f, 0x0, 0x8}) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042bbd7000fcdbdf2504000000040010"], 0x20}, 0x1, 0x0, 0x0, 0x24048040}, 0x10804) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x8000ffff}, 0x3) 2.673953538s ago: executing program 3 (id=262): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x5b) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0xfffffffffffffffa, 0x15, 0xfffffffffffffffa, 0x100009000) mmap$auto(0x0, 0xa00005, 0x9, 0x40abe, r0, 0x7) io_uring_setup$auto(0x6, 0x0) r1 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x40200, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x74c) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x280, 0x0) pread64$auto(r2, 0x0, 0x5, 0x8d) mmap$auto(0x0, 0x400008, 0xe4, 0x9b72, 0x2, 0x400) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/dirty_ratio\x00', 0x2, 0x0) sendfile$auto(r3, r3, 0x0, 0x7fffe000) fcntl$auto_F_GETOWN(r1, 0x9, 0x2) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) msgctl$auto_IPC_RMID(0x4, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r4, 0x0, 0x800) r5 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r5, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) 1.974110022s ago: executing program 2 (id=263): socket(0x11, 0x80003, 0x300) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x519000, 0x51) keyctl$auto(0x3, 0xfffffffffffffffd, 0x0, 0x0, 0xa00002) mmap$auto(0x0, 0x20000, 0x7, 0x9b72, r0, 0x8000) msgsnd$auto(0xfffffffc, 0x0, 0x1, 0x963) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) socket(0x11, 0x2, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r0, r1, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) setsockopt$auto(0x3, 0x1, 0x8, 0x0, 0x89) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r2) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)={0x14, r3, 0xd0d58b333228212f, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x20000040) close_range$auto(0xffffffffffffffff, 0x8, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xffffffffffffffff, 0x8000) r6 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r7 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r7, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x85) syz_genetlink_get_family_id$auto_nl80211(0x0, r6) swapon$auto(0x0, 0x7057) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010031bd7000fddbdf250c0000003800038931a48034000380f935a2c17474308106133248f5d11ec2969e42218261e3d6fe3baadfd844b58c159eabdb49e2971b5425494504001e801800018014f10200776c612e3000"/97], 0x64}}, 0x20048084) unshare$auto(0x40000080) get_mempolicy$auto(0x0, 0x0, 0x3, 0x1ff, 0x3) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace\x00', 0x280, 0x0) 1.369592358s ago: executing program 1 (id=264): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc0002, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x20) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x2, 0x100000001, 0x4000000000df, 0x17, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) madvise$auto(0x0, 0xffffffffffff0004, 0x19) madvise$auto(0x0, 0x200007, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r1 = epoll_create$auto(0x8800001) epoll_ctl$auto(r1, 0x1, r0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x3e00, 0x0) read$auto(r2, 0x0, 0x1f40) close_range$auto(0x0, 0xffffffffffffffff, 0x2) fanotify_init$auto(0xfefffffb, 0x10001) r3 = open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) fanotify_mark$auto(0x400000000000, 0x9, 0xf2b, r3, 0x0) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x5, 0x2, 0x1, 0x9b72, 0xffffffffffffffff, 0x20000028028) mmap$auto(0xfffff000, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) 1.122352927s ago: executing program 0 (id=265): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) connect$auto(0x3, 0x0, 0x81) mmap$auto(0x0, 0x7, 0x0, 0x19, 0x40000000000a5, 0x5) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) write$auto_proc_loginuid_operations_base(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f000000c380)={0x63, 0x0, 0xbde, 0x7fffffffefff, 0xfffffffffffffffe, 0x9702, 0x0, 0x50b301a, 0x4, 0x5f, 0x0, 0x8}) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042bbd7000fcdbdf2504000000040010"], 0x20}, 0x1, 0x0, 0x0, 0x24048040}, 0x10804) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x8000ffff}, 0x3) 744.103311ms ago: executing program 2 (id=266): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r0, 0x0, 0x7fd) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000100)='.\x00', 0x40000, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) statfs$auto(&(0x7f0000000180)='}[,&*}\x00', 0x0) clone$auto(0x100000020003b49, 0x80000000002, 0x0, 0x0, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x2, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x2, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) landlock_add_rule$auto(r1, 0x1, 0x0, 0x0) 453.482823ms ago: executing program 3 (id=267): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) ustat$auto(0x801, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000d, 0x3ff, 0x1000000000012, 0xffffffffffffffff, 0xf4e) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000840)="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", 0xd4f) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000002500), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_SET(r2, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002580)={&(0x7f0000000580)={0x30, r3, 0x601, 0x70bd28, 0x25cfdbfe, {}, [@OVS_FLOW_ATTR_KEY={0x1c, 0x1, 0x0, 0x1, [@typed={0x15, 0x9, 0x0, 0x0, @binary="ef6735f5058af96b26651160dfbb140872"}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) io_uring_register$auto(0x2, 0xe, 0x0, 0x20) r4 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0\x00', 0x940, 0x0) ioctl$auto_MEMGETBADBLOCK(r4, 0x40084d0b, &(0x7f0000000040)=0x7) ioctl$auto_IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001680), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, r5) write$auto(0xffffffffffffffff, 0x0, 0x80000000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) timer_create$auto(0x0, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) 0s ago: executing program 0 (id=268): bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x800000000012, 0x4, 0x80000001, 0x8}, 0x6f4) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r2, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000440)={0x34, r3, 0x201, 0x70bd2c, 0x25dfdbff, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x1c, 0x1, 0x0, 0x1, [@nested={0x15, 0x139, 0x0, 0x1, [@nested={0x4, 0xeb}, @typed={0x8, 0x2d, 0x0, 0x0, @fd}, @generic="5ecb8698ec"]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x4000048) sendmsg$auto_NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="00dd0000", @ANYBLOB="000227bd7000fedbdf254b00000008009e00050000000c001b8004000200040003"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x1) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x60d80, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/fib_trie\x00', 0x0, 0x0) r4 = open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) copy_file_range$auto(r4, 0x0, r4, 0x0, 0x2, 0x0) r5 = bpf$auto(0x0, &(0x7f0000000000)=@link_update={0xa, @new_map_fd=0x2, 0x7, @old_prog_fd=0x13b}, 0xa3) bpf$auto(0x2, &(0x7f00000001c0)=@query={@target_fd=r5, 0x1, 0x183, 0x9, 0x63, @prog_cnt=0xfd, 0x0, 0x6, 0x5, 0x4000009, 0x9}, 0xc) kernel console output (not intermixed with test programs): nl_rcv+0x28/0x40 [ 111.462859][ T6024] netlink_unicast+0x5aa/0x870 [ 111.462900][ T6024] ? __pfx_netlink_unicast+0x10/0x10 [ 111.462933][ T6024] ? __pfx___might_resched+0x10/0x10 [ 111.462984][ T6024] netlink_sendmsg+0x8c8/0xdd0 [ 111.463025][ T6024] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.463060][ T6024] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 111.463114][ T6024] ____sys_sendmsg+0xa98/0xc70 [ 111.463158][ T6024] ? copy_msghdr_from_user+0x10a/0x160 [ 111.463190][ T6024] ? __pfx_____sys_sendmsg+0x10/0x10 [ 111.463240][ T6024] ? __pfx_futex_wake_mark+0x10/0x10 [ 111.463297][ T6024] ___sys_sendmsg+0x134/0x1d0 [ 111.463325][ T6024] ? futex_private_hash_put+0x176/0x300 [ 111.463369][ T6024] ? __pfx____sys_sendmsg+0x10/0x10 [ 111.463397][ T6024] ? __lock_acquire+0x622/0x1c90 [ 111.463503][ T6024] __sys_sendmsg+0x16d/0x220 [ 111.463537][ T6024] ? __pfx___sys_sendmsg+0x10/0x10 [ 111.463567][ T6024] ? __x64_sys_futex+0x1e0/0x4c0 [ 111.463635][ T6024] do_syscall_64+0xcd/0xfa0 [ 111.463673][ T6024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.463705][ T6024] RIP: 0033:0x7ffba7f8efc9 [ 111.463730][ T6024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.463761][ T6024] RSP: 002b:00007ffba8da6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.463792][ T6024] RAX: ffffffffffffffda RBX: 00007ffba81e5fa0 RCX: 00007ffba7f8efc9 [ 111.463814][ T6024] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 111.463833][ T6024] RBP: 00007ffba8011f91 R08: 0000000000000000 R09: 0000000000000000 [ 111.463854][ T6024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.463873][ T6024] R13: 00007ffba81e6038 R14: 00007ffba81e5fa0 R15: 00007ffe31094cb8 [ 111.463920][ T6024] [ 112.302448][ T6029] netlink: zone id is out of range [ 112.310603][ T6029] netlink: del zone limit has 4 unknown bytes [ 113.138508][ T6048] netlink: zone id is out of range [ 113.548634][ T6053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.25'. [ 114.581892][ T6054] syz.2.26 (6054) used greatest stack depth: 19720 bytes left [ 115.118365][ T6068] FAULT_INJECTION: forcing a failure. [ 115.118365][ T6068] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 115.144867][ T6068] CPU: 0 UID: 0 PID: 6068 Comm: syz.3.29 Not tainted syzkaller #0 PREEMPT(full) [ 115.144910][ T6068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 115.144928][ T6068] Call Trace: [ 115.144938][ T6068] [ 115.144951][ T6068] dump_stack_lvl+0x16c/0x1f0 [ 115.144993][ T6068] should_fail_ex+0x512/0x640 [ 115.145050][ T6068] should_fail_alloc_page+0xe7/0x130 [ 115.145097][ T6068] prepare_alloc_pages+0x3c2/0x610 [ 115.145159][ T6068] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 115.145218][ T6068] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 115.145258][ T6068] ? validate_mm+0x403/0x560 [ 115.145321][ T6068] ? __pfx_validate_mm+0x10/0x10 [ 115.145370][ T6068] ? __vma_enter_locked+0x163/0x3f0 [ 115.145437][ T6068] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 115.145494][ T6068] ? policy_nodemask+0xea/0x4e0 [ 115.145543][ T6068] alloc_pages_mpol+0x1fb/0x550 [ 115.145594][ T6068] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 115.145660][ T6068] alloc_pages_noprof+0x131/0x390 [ 115.145712][ T6068] __pmd_alloc+0x3b/0x8b0 [ 115.145778][ T6068] move_page_tables+0x30b7/0x4230 [ 115.145828][ T6068] ? __pfx_copy_vma+0x10/0x10 [ 115.145876][ T6068] ? __pfx_move_page_tables+0x10/0x10 [ 115.145950][ T6068] copy_vma_and_data+0x24e/0x790 [ 115.145990][ T6068] ? __pfx_copy_vma_and_data+0x10/0x10 [ 115.146025][ T6068] ? lockdep_hardirqs_on+0x7c/0x110 [ 115.146073][ T6068] ? __vma_enter_locked+0x163/0x3f0 [ 115.146128][ T6068] ? find_held_lock+0x2b/0x80 [ 115.146161][ T6068] ? move_vma+0x52e/0x1770 [ 115.146190][ T6068] ? __vm_enough_memory+0x184/0x3f0 [ 115.146241][ T6068] move_vma+0x540/0x1770 [ 115.146279][ T6068] ? __pfx_move_vma+0x10/0x10 [ 115.146324][ T6068] ? mm_get_unmapped_area_vmflags+0x97/0xe0 [ 115.146370][ T6068] ? cap_mmap_addr+0x4b/0x120 [ 115.146425][ T6068] ? bpf_lsm_mmap_addr+0x9/0x10 [ 115.146462][ T6068] ? security_mmap_addr+0x6c/0x1e0 [ 115.146496][ T6068] ? __get_unmapped_area+0x267/0x440 [ 115.146545][ T6068] ? vrm_set_new_addr+0x208/0x290 [ 115.146580][ T6068] mremap_to+0x1b7/0x450 [ 115.146614][ T6068] do_mremap+0x13a8/0x2020 [ 115.146647][ T6068] ? futex_private_hash_put+0x130/0x300 [ 115.146700][ T6068] ? __pfx_do_mremap+0x10/0x10 [ 115.146742][ T6068] ? ksys_write+0x190/0x250 [ 115.146787][ T6068] __do_sys_mremap+0x119/0x170 [ 115.146820][ T6068] ? __pfx___do_sys_mremap+0x10/0x10 [ 115.146863][ T6068] ? __x64_sys_futex+0x1e0/0x4c0 [ 115.146936][ T6068] do_syscall_64+0xcd/0xfa0 [ 115.146974][ T6068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.147007][ T6068] RIP: 0033:0x7fa7c718efc9 [ 115.147033][ T6068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.147062][ T6068] RSP: 002b:00007fa7c80f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 115.147092][ T6068] RAX: ffffffffffffffda RBX: 00007fa7c73e6090 RCX: 00007fa7c718efc9 [ 115.147113][ T6068] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 115.147132][ T6068] RBP: 00007fa7c7211f91 R08: 0000000100000000 R09: 0000000000000000 [ 115.147152][ T6068] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 115.147171][ T6068] R13: 00007fa7c73e6128 R14: 00007fa7c73e6090 R15: 00007ffd75c0fea8 [ 115.147215][ T6068] [ 115.469513][ C0] vkms_vblank_simulate: vblank timer overrun [ 115.707533][ T6073] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 115.908067][ T6082] FAULT_INJECTION: forcing a failure. [ 115.908067][ T6082] name failslab, interval 1, probability 0, space 0, times 1 [ 115.955591][ T6082] CPU: 1 UID: 0 PID: 6082 Comm: syz.0.33 Not tainted syzkaller #0 PREEMPT(full) [ 115.955622][ T6082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 115.955637][ T6082] Call Trace: [ 115.955644][ T6082] [ 115.955653][ T6082] dump_stack_lvl+0x16c/0x1f0 [ 115.955683][ T6082] should_fail_ex+0x512/0x640 [ 115.955720][ T6082] ? __kmalloc_cache_noprof+0x5f/0x780 [ 115.955762][ T6082] should_failslab+0xc2/0x120 [ 115.955794][ T6082] __kmalloc_cache_noprof+0x72/0x780 [ 115.955834][ T6082] ? percpu_ref_init+0xec/0x410 [ 115.955868][ T6082] ? percpu_ref_init+0xec/0x410 [ 115.955897][ T6082] ? __pfx_swap_users_ref_free+0x10/0x10 [ 115.955922][ T6082] percpu_ref_init+0xec/0x410 [ 115.955954][ T6082] __do_sys_swapon+0x165/0x3a90 [ 115.955983][ T6082] ? find_held_lock+0x2b/0x80 [ 115.956008][ T6082] ? handle_mm_fault+0x2ab/0xd10 [ 115.956047][ T6082] ? __x64_sys_futex+0x1e0/0x4c0 [ 115.956079][ T6082] ? __x64_sys_futex+0x1e9/0x4c0 [ 115.956112][ T6082] ? exc_page_fault+0x64/0xc0 [ 115.956137][ T6082] ? arch_syscall_is_vdso_sigreturn+0xb6/0x230 [ 115.956175][ T6082] ? __pfx___do_sys_swapon+0x10/0x10 [ 115.956203][ T6082] ? syscall_user_dispatch+0x78/0x140 [ 115.956249][ T6082] do_syscall_64+0xcd/0xfa0 [ 115.956278][ T6082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.956302][ T6082] RIP: 0033:0x7f4b2a58efc9 [ 115.956320][ T6082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.956343][ T6082] RSP: 002b:00007f4b2b431038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a7 [ 115.956365][ T6082] RAX: ffffffffffffffda RBX: 00007f4b2a7e6090 RCX: 00007f4b2a58efc9 [ 115.956381][ T6082] RDX: 0000000000000000 RSI: 0000000000007057 RDI: 0000000000000000 [ 115.956395][ T6082] RBP: 00007f4b2a611f91 R08: 0000000000000000 R09: 0000000000000000 [ 115.956409][ T6082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.956423][ T6082] R13: 00007f4b2a7e6128 R14: 00007f4b2a7e6090 R15: 00007ffe98d583b8 [ 115.956454][ T6082] [ 116.583890][ T6095] netlink: zone id is out of range [ 116.589098][ T6095] netlink: del zone limit has 8 unknown bytes [ 116.625619][ T6094] syz.3.34 uses obsolete (PF_INET,SOCK_PACKET) [ 117.744232][ T6114] FAULT_INJECTION: forcing a failure. [ 117.744232][ T6114] name failslab, interval 1, probability 0, space 0, times 0 [ 117.808507][ T6114] CPU: 1 UID: 0 PID: 6114 Comm: syz.1.38 Not tainted syzkaller #0 PREEMPT(full) [ 117.808551][ T6114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 117.808570][ T6114] Call Trace: [ 117.808580][ T6114] [ 117.808591][ T6114] dump_stack_lvl+0x16c/0x1f0 [ 117.808636][ T6114] should_fail_ex+0x512/0x640 [ 117.808686][ T6114] ? __kmalloc_cache_noprof+0x5f/0x780 [ 117.808748][ T6114] should_failslab+0xc2/0x120 [ 117.808792][ T6114] __kmalloc_cache_noprof+0x72/0x780 [ 117.808850][ T6114] ? percpu_ref_init+0xec/0x410 [ 117.808899][ T6114] ? percpu_ref_init+0xec/0x410 [ 117.808939][ T6114] ? __pfx_swap_users_ref_free+0x10/0x10 [ 117.808974][ T6114] percpu_ref_init+0xec/0x410 [ 117.809020][ T6114] __do_sys_swapon+0x165/0x3a90 [ 117.809059][ T6114] ? find_held_lock+0x2b/0x80 [ 117.809094][ T6114] ? handle_mm_fault+0x2ab/0xd10 [ 117.809160][ T6114] ? __x64_sys_futex+0x1e0/0x4c0 [ 117.809204][ T6114] ? __x64_sys_futex+0x1e9/0x4c0 [ 117.809252][ T6114] ? exc_page_fault+0x64/0xc0 [ 117.809287][ T6114] ? arch_syscall_is_vdso_sigreturn+0xb6/0x230 [ 117.809340][ T6114] ? __pfx___do_sys_swapon+0x10/0x10 [ 117.809377][ T6114] ? syscall_user_dispatch+0x78/0x140 [ 117.809448][ T6114] do_syscall_64+0xcd/0xfa0 [ 117.809488][ T6114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.809522][ T6114] RIP: 0033:0x7fcf6f58efc9 [ 117.809547][ T6114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.809578][ T6114] RSP: 002b:00007fcf70425038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a7 [ 117.809609][ T6114] RAX: ffffffffffffffda RBX: 00007fcf6f7e5fa0 RCX: 00007fcf6f58efc9 [ 117.809629][ T6114] RDX: 0000000000000000 RSI: 0000000000007057 RDI: 0000000000000000 [ 117.809649][ T6114] RBP: 00007fcf6f611f91 R08: 0000000000000000 R09: 0000000000000000 [ 117.809668][ T6114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.809685][ T6114] R13: 00007fcf6f7e6038 R14: 00007fcf6f7e5fa0 R15: 00007fffed5f26d8 [ 117.809727][ T6114] [ 118.729880][ T6120] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' [ 118.746549][ T6120] CPU: 1 UID: 0 PID: 6120 Comm: syz.2.39 Not tainted syzkaller #0 PREEMPT(full) [ 118.746590][ T6120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 118.746608][ T6120] Call Trace: [ 118.746618][ T6120] [ 118.746629][ T6120] dump_stack_lvl+0x16c/0x1f0 [ 118.746670][ T6120] sysfs_warn_dup+0x7f/0xa0 [ 118.746711][ T6120] sysfs_do_create_link_sd+0x124/0x140 [ 118.746757][ T6120] sysfs_create_link+0x61/0xc0 [ 118.746796][ T6120] device_add+0x62c/0x1aa0 [ 118.746850][ T6120] ? __pfx_device_add+0x10/0x10 [ 118.746898][ T6120] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 118.746957][ T6120] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 118.747004][ T6120] wiphy_register+0x1eb0/0x2b20 [ 118.747047][ T6120] ? netdev_run_todo+0x864/0x1320 [ 118.747093][ T6120] ? __pfx_wiphy_register+0x10/0x10 [ 118.747160][ T6120] ieee80211_register_hw+0x253d/0x4120 [ 118.747221][ T6120] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 118.747263][ T6120] ? __pfx___debug_object_init+0x10/0x10 [ 118.747326][ T6120] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 118.747385][ T6120] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 118.747431][ T6120] ? __hrtimer_setup+0x176/0x280 [ 118.747498][ T6120] mac80211_hwsim_new_radio+0x32d8/0x50b0 [ 118.747555][ T6120] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 118.747604][ T6120] hwsim_new_radio_nl+0xba2/0x1330 [ 118.747638][ T6120] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 118.747682][ T6120] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 118.747722][ T6120] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 118.747773][ T6120] genl_family_rcv_msg_doit+0x209/0x2f0 [ 118.747814][ T6120] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 118.747868][ T6120] ? bpf_lsm_capable+0x9/0x10 [ 118.747909][ T6120] ? security_capable+0x7e/0x260 [ 118.747949][ T6120] ? ns_capable+0xd7/0x110 [ 118.747982][ T6120] genl_rcv_msg+0x55c/0x800 [ 118.748024][ T6120] ? __pfx_genl_rcv_msg+0x10/0x10 [ 118.748065][ T6120] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 118.748113][ T6120] netlink_rcv_skb+0x158/0x420 [ 118.748145][ T6120] ? __pfx_genl_rcv_msg+0x10/0x10 [ 118.748187][ T6120] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 118.748238][ T6120] ? netlink_deliver_tap+0x1ae/0xd30 [ 118.748285][ T6120] genl_rcv+0x28/0x40 [ 118.748316][ T6120] netlink_unicast+0x5aa/0x870 [ 118.748357][ T6120] ? __pfx_netlink_unicast+0x10/0x10 [ 118.748391][ T6120] ? __pfx___might_resched+0x10/0x10 [ 118.748438][ T6120] netlink_sendmsg+0x8c8/0xdd0 [ 118.748479][ T6120] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.748519][ T6120] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 118.748574][ T6120] ____sys_sendmsg+0xa98/0xc70 [ 118.748613][ T6120] ? copy_msghdr_from_user+0x10a/0x160 [ 118.748640][ T6120] ? __pfx_____sys_sendmsg+0x10/0x10 [ 118.748692][ T6120] ? __pfx_futex_wake_mark+0x10/0x10 [ 118.748748][ T6120] ___sys_sendmsg+0x134/0x1d0 [ 118.748774][ T6120] ? futex_private_hash_put+0x176/0x300 [ 118.748816][ T6120] ? __pfx____sys_sendmsg+0x10/0x10 [ 118.748842][ T6120] ? __lock_acquire+0x622/0x1c90 [ 118.748937][ T6120] __sys_sendmsg+0x16d/0x220 [ 118.748967][ T6120] ? __pfx___sys_sendmsg+0x10/0x10 [ 118.748996][ T6120] ? __x64_sys_futex+0x1e0/0x4c0 [ 118.749066][ T6120] do_syscall_64+0xcd/0xfa0 [ 118.749105][ T6120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.749136][ T6120] RIP: 0033:0x7ffba7f8efc9 [ 118.749161][ T6120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.749208][ T6120] RSP: 002b:00007ffba8da6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.749238][ T6120] RAX: ffffffffffffffda RBX: 00007ffba81e5fa0 RCX: 00007ffba7f8efc9 [ 118.749258][ T6120] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 118.749285][ T6120] RBP: 00007ffba8011f91 R08: 0000000000000000 R09: 0000000000000000 [ 118.749305][ T6120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.749324][ T6120] R13: 00007ffba81e6038 R14: 00007ffba81e5fa0 R15: 00007ffe31094cb8 [ 118.749371][ T6120] [ 120.099710][ T6141] FAULT_INJECTION: forcing a failure. [ 120.099710][ T6141] name failslab, interval 1, probability 0, space 0, times 0 [ 120.113213][ T6141] CPU: 0 UID: 0 PID: 6141 Comm: syz.1.43 Not tainted syzkaller #0 PREEMPT(full) [ 120.113255][ T6141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 120.113274][ T6141] Call Trace: [ 120.113284][ T6141] [ 120.113296][ T6141] dump_stack_lvl+0x16c/0x1f0 [ 120.113338][ T6141] should_fail_ex+0x512/0x640 [ 120.113390][ T6141] ? __kmalloc_cache_noprof+0x5f/0x780 [ 120.113450][ T6141] should_failslab+0xc2/0x120 [ 120.113495][ T6141] __kmalloc_cache_noprof+0x72/0x780 [ 120.113548][ T6141] ? percpu_ref_init+0xec/0x410 [ 120.113597][ T6141] ? percpu_ref_init+0xec/0x410 [ 120.113638][ T6141] ? __pfx_swap_users_ref_free+0x10/0x10 [ 120.113673][ T6141] percpu_ref_init+0xec/0x410 [ 120.113718][ T6141] __do_sys_swapon+0x165/0x3a90 [ 120.113757][ T6141] ? find_held_lock+0x2b/0x80 [ 120.113792][ T6141] ? handle_mm_fault+0x2ab/0xd10 [ 120.113846][ T6141] ? __x64_sys_futex+0x1e0/0x4c0 [ 120.113890][ T6141] ? __x64_sys_futex+0x1e9/0x4c0 [ 120.113934][ T6141] ? exc_page_fault+0x64/0xc0 [ 120.113969][ T6141] ? arch_syscall_is_vdso_sigreturn+0xb6/0x230 [ 120.114034][ T6141] ? __pfx___do_sys_swapon+0x10/0x10 [ 120.114072][ T6141] ? syscall_user_dispatch+0x78/0x140 [ 120.114138][ T6141] do_syscall_64+0xcd/0xfa0 [ 120.114183][ T6141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.114216][ T6141] RIP: 0033:0x7fcf6f58efc9 [ 120.114242][ T6141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.114271][ T6141] RSP: 002b:00007fcf70425038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a7 [ 120.114303][ T6141] RAX: ffffffffffffffda RBX: 00007fcf6f7e5fa0 RCX: 00007fcf6f58efc9 [ 120.114324][ T6141] RDX: 0000000000000000 RSI: 0000000000007057 RDI: 0000000000000000 [ 120.114343][ T6141] RBP: 00007fcf6f611f91 R08: 0000000000000000 R09: 0000000000000000 [ 120.114363][ T6141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.114382][ T6141] R13: 00007fcf6f7e6038 R14: 00007fcf6f7e5fa0 R15: 00007fffed5f26d8 [ 120.114426][ T6141] [ 120.950434][ T6153] device-mapper: ioctl: Invalid ioctl structure: name þÿÿÿÿÿÿÿ, dev 4 [ 121.218951][ T6159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.45'. [ 121.575506][ T6163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.47'. [ 122.013642][ T6166] netlink: zone id is out of range [ 122.019021][ T6166] netlink: del zone limit has 8 unknown bytes [ 122.225775][ T6173] FAULT_INJECTION: forcing a failure. [ 122.225775][ T6173] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 122.238967][ T6173] CPU: 0 UID: 0 PID: 6173 Comm: syz.0.49 Not tainted syzkaller #0 PREEMPT(full) [ 122.239007][ T6173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 122.239021][ T6173] Call Trace: [ 122.239029][ T6173] [ 122.239039][ T6173] dump_stack_lvl+0x16c/0x1f0 [ 122.239071][ T6173] should_fail_ex+0x512/0x640 [ 122.239112][ T6173] strncpy_from_user+0x3b/0x2e0 [ 122.239150][ T6173] getname_flags.part.0+0x8f/0x550 [ 122.239191][ T6173] getname_flags+0x93/0xf0 [ 122.239215][ T6173] __do_sys_swapon+0x848/0x3a90 [ 122.239248][ T6173] ? handle_mm_fault+0x2ab/0xd10 [ 122.239290][ T6173] ? __x64_sys_futex+0x1e0/0x4c0 [ 122.239322][ T6173] ? __x64_sys_futex+0x1e9/0x4c0 [ 122.239356][ T6173] ? exc_page_fault+0x64/0xc0 [ 122.239382][ T6173] ? arch_syscall_is_vdso_sigreturn+0xb6/0x230 [ 122.239422][ T6173] ? __pfx___do_sys_swapon+0x10/0x10 [ 122.239450][ T6173] ? syscall_user_dispatch+0x78/0x140 [ 122.239498][ T6173] do_syscall_64+0xcd/0xfa0 [ 122.239528][ T6173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.239552][ T6173] RIP: 0033:0x7f4b2a58efc9 [ 122.239570][ T6173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.239593][ T6173] RSP: 002b:00007f4b2b452038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a7 [ 122.239615][ T6173] RAX: ffffffffffffffda RBX: 00007f4b2a7e5fa0 RCX: 00007f4b2a58efc9 [ 122.239631][ T6173] RDX: 0000000000000000 RSI: 0000000000007057 RDI: 0000000000000000 [ 122.239645][ T6173] RBP: 00007f4b2a611f91 R08: 0000000000000000 R09: 0000000000000000 [ 122.239660][ T6173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.239674][ T6173] R13: 00007f4b2a7e6038 R14: 00007f4b2a7e5fa0 R15: 00007ffe98d583b8 [ 122.239705][ T6173] [ 122.897550][ T6180] debugfs: '!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' already exists in 'ieee80211' [ 122.998488][ T6184] warning: `syz.2.52' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 123.223140][ T6191] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 125.623665][ T6202] netlink: zone id is out of range [ 125.628849][ T6202] netlink: del zone limit has 4 unknown bytes [ 127.546781][ T6237] netlink: zone id is out of range [ 127.560652][ T6237] netlink: del zone limit has 4 unknown bytes [ 128.799069][ T6251] debugfs: '!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' already exists in 'ieee80211' [ 129.305505][ T6268] netlink: zone id is out of range [ 129.330279][ T6268] netlink: del zone limit has 4 unknown bytes [ 130.095675][ T6276] netlink: zone id is out of range [ 131.994700][ T6310] FAULT_INJECTION: forcing a failure. [ 131.994700][ T6310] name failslab, interval 1, probability 0, space 0, times 0 [ 132.057827][ T6310] CPU: 1 UID: 0 PID: 6310 Comm: syz.3.71 Not tainted syzkaller #0 PREEMPT(full) [ 132.057869][ T6310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 132.057888][ T6310] Call Trace: [ 132.057896][ T6310] [ 132.057905][ T6310] dump_stack_lvl+0x16c/0x1f0 [ 132.057937][ T6310] should_fail_ex+0x512/0x640 [ 132.057974][ T6310] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 132.058002][ T6310] should_failslab+0xc2/0x120 [ 132.058036][ T6310] kmem_cache_alloc_noprof+0x75/0x6e0 [ 132.058059][ T6310] ? kasan_quarantine_put+0x10a/0x240 [ 132.058086][ T6310] ? getname_flags.part.0+0x4c/0x550 [ 132.058128][ T6310] ? getname_flags.part.0+0x4c/0x550 [ 132.058162][ T6310] getname_flags.part.0+0x4c/0x550 [ 132.058202][ T6310] getname_flags+0x93/0xf0 [ 132.058226][ T6310] __do_sys_swapon+0x848/0x3a90 [ 132.058258][ T6310] ? handle_mm_fault+0x2ab/0xd10 [ 132.058299][ T6310] ? __x64_sys_futex+0x1e0/0x4c0 [ 132.058332][ T6310] ? __x64_sys_futex+0x1e9/0x4c0 [ 132.058366][ T6310] ? exc_page_fault+0x64/0xc0 [ 132.058398][ T6310] ? arch_syscall_is_vdso_sigreturn+0xb6/0x230 [ 132.058438][ T6310] ? __pfx___do_sys_swapon+0x10/0x10 [ 132.058467][ T6310] ? syscall_user_dispatch+0x78/0x140 [ 132.058522][ T6310] do_syscall_64+0xcd/0xfa0 [ 132.058551][ T6310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.058576][ T6310] RIP: 0033:0x7fa7c718efc9 [ 132.058594][ T6310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.058617][ T6310] RSP: 002b:00007fa7c8112038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a7 [ 132.058639][ T6310] RAX: ffffffffffffffda RBX: 00007fa7c73e5fa0 RCX: 00007fa7c718efc9 [ 132.058655][ T6310] RDX: 0000000000000000 RSI: 0000000000007057 RDI: 0000000000000000 [ 132.058669][ T6310] RBP: 00007fa7c7211f91 R08: 0000000000000000 R09: 0000000000000000 [ 132.058684][ T6310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.058698][ T6310] R13: 00007fa7c73e6038 R14: 00007fa7c73e5fa0 R15: 00007ffd75c0fea8 [ 132.058729][ T6310] [ 132.902327][ T6328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.74'. [ 134.136768][ T6346] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 134.146126][ T6346] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 135.986110][ T6352] netlink: zone id is out of range [ 136.750050][ T6379] FAULT_INJECTION: forcing a failure. [ 136.750050][ T6379] name failslab, interval 1, probability 0, space 0, times 0 [ 136.785934][ T6379] CPU: 0 UID: 0 PID: 6379 Comm: syz.1.81 Not tainted syzkaller #0 PREEMPT(full) [ 136.785979][ T6379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 136.785999][ T6379] Call Trace: [ 136.786010][ T6379] [ 136.786022][ T6379] dump_stack_lvl+0x16c/0x1f0 [ 136.786065][ T6379] should_fail_ex+0x512/0x640 [ 136.786114][ T6379] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 136.786152][ T6379] should_failslab+0xc2/0x120 [ 136.786196][ T6379] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 136.786234][ T6379] ? sock_alloc_inode+0x25/0x1c0 [ 136.786287][ T6379] ? __pfx_sock_alloc_inode+0x10/0x10 [ 136.786323][ T6379] ? sock_alloc_inode+0x25/0x1c0 [ 136.786359][ T6379] sock_alloc_inode+0x25/0x1c0 [ 136.786398][ T6379] alloc_inode+0x64/0x240 [ 136.786442][ T6379] sock_alloc+0x40/0x280 [ 136.786477][ T6379] __sock_create+0xc1/0x8d0 [ 136.786526][ T6379] __sys_socketpair+0x1d8/0x5a0 [ 136.786571][ T6379] ? __pfx___sys_socketpair+0x10/0x10 [ 136.786615][ T6379] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 136.786657][ T6379] ? xfd_validate_state+0x61/0x180 [ 136.786711][ T6379] __x64_sys_socketpair+0x96/0x100 [ 136.786754][ T6379] ? lockdep_hardirqs_on+0x7c/0x110 [ 136.786789][ T6379] do_syscall_64+0xcd/0xfa0 [ 136.786828][ T6379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.786859][ T6379] RIP: 0033:0x7fcf6f58efc9 [ 136.786886][ T6379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.786917][ T6379] RSP: 002b:00007fcf70425038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 136.786949][ T6379] RAX: ffffffffffffffda RBX: 00007fcf6f7e5fa0 RCX: 00007fcf6f58efc9 [ 136.786969][ T6379] RDX: 8000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 136.786989][ T6379] RBP: 00007fcf6f611f91 R08: 0000000000000000 R09: 0000000000000000 [ 136.787010][ T6379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.787028][ T6379] R13: 00007fcf6f7e6038 R14: 00007fcf6f7e5fa0 R15: 00007fffed5f26d8 [ 136.787071][ T6379] [ 136.787086][ T6379] socket: no more sockets [ 137.486141][ T6386] FAULT_INJECTION: forcing a failure. [ 137.486141][ T6386] name failslab, interval 1, probability 0, space 0, times 0 [ 137.509037][ T6386] CPU: 0 UID: 0 PID: 6386 Comm: syz.0.82 Not tainted syzkaller #0 PREEMPT(full) [ 137.509086][ T6386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 137.509105][ T6386] Call Trace: [ 137.509115][ T6386] [ 137.509127][ T6386] dump_stack_lvl+0x16c/0x1f0 [ 137.509168][ T6386] should_fail_ex+0x512/0x640 [ 137.509214][ T6386] ? __kmalloc_cache_noprof+0x5f/0x780 [ 137.509271][ T6386] should_failslab+0xc2/0x120 [ 137.509315][ T6386] __kmalloc_cache_noprof+0x72/0x780 [ 137.509368][ T6386] ? percpu_ref_init+0xec/0x410 [ 137.509416][ T6386] ? percpu_ref_init+0xec/0x410 [ 137.509454][ T6386] ? __pfx_swap_users_ref_free+0x10/0x10 [ 137.509487][ T6386] percpu_ref_init+0xec/0x410 [ 137.509531][ T6386] __do_sys_swapon+0x165/0x3a90 [ 137.509571][ T6386] ? find_held_lock+0x2b/0x80 [ 137.509605][ T6386] ? handle_mm_fault+0x2ab/0xd10 [ 137.509662][ T6386] ? __x64_sys_futex+0x1e0/0x4c0 [ 137.509703][ T6386] ? __x64_sys_futex+0x1e9/0x4c0 [ 137.509748][ T6386] ? exc_page_fault+0x64/0xc0 [ 137.509781][ T6386] ? arch_syscall_is_vdso_sigreturn+0xb6/0x230 [ 137.509832][ T6386] ? __pfx___do_sys_swapon+0x10/0x10 [ 137.509869][ T6386] ? syscall_user_dispatch+0x78/0x140 [ 137.509931][ T6386] do_syscall_64+0xcd/0xfa0 [ 137.509970][ T6386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.510012][ T6386] RIP: 0033:0x7f4b2a58efc9 [ 137.510037][ T6386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.510069][ T6386] RSP: 002b:00007f4b2b452038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a7 [ 137.510099][ T6386] RAX: ffffffffffffffda RBX: 00007f4b2a7e5fa0 RCX: 00007f4b2a58efc9 [ 137.510122][ T6386] RDX: 0000000000000000 RSI: 0000000000007057 RDI: 0000000000000000 [ 137.510141][ T6386] RBP: 00007f4b2a611f91 R08: 0000000000000000 R09: 0000000000000000 [ 137.510161][ T6386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.510181][ T6386] R13: 00007f4b2a7e6038 R14: 00007f4b2a7e5fa0 R15: 00007ffe98d583b8 [ 137.510224][ T6386] [ 138.265986][ T6393] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' [ 138.280243][ T6393] CPU: 0 UID: 0 PID: 6393 Comm: syz.2.84 Not tainted syzkaller #0 PREEMPT(full) [ 138.280280][ T6393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 138.280298][ T6393] Call Trace: [ 138.280307][ T6393] [ 138.280318][ T6393] dump_stack_lvl+0x16c/0x1f0 [ 138.280358][ T6393] sysfs_warn_dup+0x7f/0xa0 [ 138.280396][ T6393] sysfs_do_create_link_sd+0x124/0x140 [ 138.280442][ T6393] sysfs_create_link+0x61/0xc0 [ 138.280484][ T6393] device_add+0x62c/0x1aa0 [ 138.280536][ T6393] ? __pfx_device_add+0x10/0x10 [ 138.280577][ T6393] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 138.280627][ T6393] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 138.280667][ T6393] wiphy_register+0x1eb0/0x2b20 [ 138.280704][ T6393] ? netdev_run_todo+0x864/0x1320 [ 138.280745][ T6393] ? __pfx_wiphy_register+0x10/0x10 [ 138.280802][ T6393] ieee80211_register_hw+0x253d/0x4120 [ 138.280855][ T6393] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 138.280894][ T6393] ? __pfx___debug_object_init+0x10/0x10 [ 138.280942][ T6393] ? find_held_lock+0x2b/0x80 [ 138.280975][ T6393] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 138.281030][ T6393] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 138.281075][ T6393] ? __hrtimer_setup+0x176/0x280 [ 138.281129][ T6393] mac80211_hwsim_new_radio+0x32d8/0x50b0 [ 138.281203][ T6393] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 138.281253][ T6393] hwsim_new_radio_nl+0xba2/0x1330 [ 138.281292][ T6393] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 138.281341][ T6393] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 138.281386][ T6393] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 138.281441][ T6393] genl_family_rcv_msg_doit+0x209/0x2f0 [ 138.281485][ T6393] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 138.281541][ T6393] ? bpf_lsm_capable+0x9/0x10 [ 138.281583][ T6393] ? security_capable+0x7e/0x260 [ 138.281628][ T6393] ? ns_capable+0xd7/0x110 [ 138.281666][ T6393] genl_rcv_msg+0x55c/0x800 [ 138.281711][ T6393] ? __pfx_genl_rcv_msg+0x10/0x10 [ 138.281753][ T6393] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 138.281804][ T6393] netlink_rcv_skb+0x158/0x420 [ 138.281837][ T6393] ? __pfx_genl_rcv_msg+0x10/0x10 [ 138.281881][ T6393] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 138.281935][ T6393] ? netlink_deliver_tap+0x1ae/0xd30 [ 138.281975][ T6393] genl_rcv+0x28/0x40 [ 138.282009][ T6393] netlink_unicast+0x5aa/0x870 [ 138.282050][ T6393] ? __pfx_netlink_unicast+0x10/0x10 [ 138.282084][ T6393] ? __pfx___might_resched+0x10/0x10 [ 138.282133][ T6393] netlink_sendmsg+0x8c8/0xdd0 [ 138.282181][ T6393] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.282222][ T6393] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 138.282277][ T6393] ____sys_sendmsg+0xa98/0xc70 [ 138.282322][ T6393] ? copy_msghdr_from_user+0x10a/0x160 [ 138.282354][ T6393] ? __pfx_____sys_sendmsg+0x10/0x10 [ 138.282406][ T6393] ? __pfx_futex_wake_mark+0x10/0x10 [ 138.282464][ T6393] ___sys_sendmsg+0x134/0x1d0 [ 138.282490][ T6393] ? futex_private_hash_put+0x176/0x300 [ 138.282534][ T6393] ? __pfx____sys_sendmsg+0x10/0x10 [ 138.282562][ T6393] ? __lock_acquire+0x622/0x1c90 [ 138.282662][ T6393] __sys_sendmsg+0x16d/0x220 [ 138.282694][ T6393] ? __pfx___sys_sendmsg+0x10/0x10 [ 138.282724][ T6393] ? __x64_sys_futex+0x1e0/0x4c0 [ 138.282796][ T6393] do_syscall_64+0xcd/0xfa0 [ 138.282836][ T6393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.282869][ T6393] RIP: 0033:0x7ffba7f8efc9 [ 138.282898][ T6393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.282929][ T6393] RSP: 002b:00007ffba8da6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.282963][ T6393] RAX: ffffffffffffffda RBX: 00007ffba81e5fa0 RCX: 00007ffba7f8efc9 [ 138.282983][ T6393] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 138.283002][ T6393] RBP: 00007ffba8011f91 R08: 0000000000000000 R09: 0000000000000000 [ 138.283022][ T6393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.283041][ T6393] R13: 00007ffba81e6038 R14: 00007ffba81e5fa0 R15: 00007ffe31094cb8 [ 138.283088][ T6393] [ 141.952273][ T6432] mmap: syz.3.91 (6432) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 141.982401][ T6432] Unable to find swap-space signature [ 142.609592][ T6438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.93'. [ 143.251252][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 143.257815][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 144.640303][ T6452] netlink: zone id is out of range [ 144.917118][ T6458] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 144.962139][ T6458] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 145.077330][ T6458] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 145.238151][ T6458] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 145.254260][ T6458] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 145.317788][ T6458] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 145.418767][ T6458] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 145.435134][ T6458] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 145.599453][ T6458] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 145.677998][ T6458] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 145.684163][ T6458] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 145.716768][ T6458] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 147.064328][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 147.244471][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 147.502181][ T6489] netlink: zone id is out of range [ 147.507623][ T6489] netlink: del zone limit has 8 unknown bytes [ 147.553790][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 147.723237][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 148.479613][ T6511] debugfs: '!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' already exists in 'ieee80211' [ 149.083935][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 149.333058][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 149.563925][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 149.805185][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 150.852715][ T6563] FAULT_INJECTION: forcing a failure. [ 150.852715][ T6563] name failslab, interval 1, probability 0, space 0, times 0 [ 150.908420][ T6563] CPU: 1 UID: 0 PID: 6563 Comm: syz.2.111 Not tainted syzkaller #0 PREEMPT(full) [ 150.908466][ T6563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 150.908486][ T6563] Call Trace: [ 150.908497][ T6563] [ 150.908510][ T6563] dump_stack_lvl+0x16c/0x1f0 [ 150.908554][ T6563] should_fail_ex+0x512/0x640 [ 150.908605][ T6563] ? __kmalloc_cache_noprof+0x5f/0x780 [ 150.908664][ T6563] should_failslab+0xc2/0x120 [ 150.908708][ T6563] __kmalloc_cache_noprof+0x72/0x780 [ 150.908762][ T6563] ? percpu_ref_init+0xec/0x410 [ 150.908809][ T6563] ? percpu_ref_init+0xec/0x410 [ 150.908848][ T6563] ? __pfx_swap_users_ref_free+0x10/0x10 [ 150.908884][ T6563] percpu_ref_init+0xec/0x410 [ 150.908928][ T6563] __do_sys_swapon+0x165/0x3a90 [ 150.908966][ T6563] ? find_held_lock+0x2b/0x80 [ 150.909000][ T6563] ? handle_mm_fault+0x2ab/0xd10 [ 150.909054][ T6563] ? __x64_sys_futex+0x1e0/0x4c0 [ 150.909095][ T6563] ? __x64_sys_futex+0x1e9/0x4c0 [ 150.909139][ T6563] ? exc_page_fault+0x64/0xc0 [ 150.909175][ T6563] ? arch_syscall_is_vdso_sigreturn+0xb6/0x230 [ 150.909236][ T6563] ? __pfx___do_sys_swapon+0x10/0x10 [ 150.909275][ T6563] ? syscall_user_dispatch+0x78/0x140 [ 150.909341][ T6563] do_syscall_64+0xcd/0xfa0 [ 150.909383][ T6563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.909415][ T6563] RIP: 0033:0x7ffba7f8efc9 [ 150.909440][ T6563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.909472][ T6563] RSP: 002b:00007ffba8da6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a7 [ 150.909503][ T6563] RAX: ffffffffffffffda RBX: 00007ffba81e5fa0 RCX: 00007ffba7f8efc9 [ 150.909524][ T6563] RDX: 0000000000000000 RSI: 0000000000007057 RDI: 0000000000000000 [ 150.909545][ T6563] RBP: 00007ffba8011f91 R08: 0000000000000000 R09: 0000000000000000 [ 150.909564][ T6563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.909584][ T6563] R13: 00007ffba81e6038 R14: 00007ffba81e5fa0 R15: 00007ffe31094cb8 [ 150.909628][ T6563] [ 151.141141][ T6545] netlink: zone id is out of range [ 151.173102][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 151.423206][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 151.643969][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 151.883193][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 152.800673][ T6592] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' [ 152.813590][ T6592] CPU: 1 UID: 0 PID: 6592 Comm: syz.0.116 Not tainted syzkaller #0 PREEMPT(full) [ 152.813633][ T6592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 152.813651][ T6592] Call Trace: [ 152.813662][ T6592] [ 152.813674][ T6592] dump_stack_lvl+0x16c/0x1f0 [ 152.813716][ T6592] sysfs_warn_dup+0x7f/0xa0 [ 152.813756][ T6592] sysfs_do_create_link_sd+0x124/0x140 [ 152.813796][ T6592] sysfs_create_link+0x61/0xc0 [ 152.813843][ T6592] device_add+0x62c/0x1aa0 [ 152.813898][ T6592] ? __pfx_device_add+0x10/0x10 [ 152.813945][ T6592] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 152.814000][ T6592] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 152.814045][ T6592] wiphy_register+0x1eb0/0x2b20 [ 152.814088][ T6592] ? netdev_run_todo+0x864/0x1320 [ 152.814135][ T6592] ? __pfx_wiphy_register+0x10/0x10 [ 152.814209][ T6592] ieee80211_register_hw+0x253d/0x4120 [ 152.814279][ T6592] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 152.814322][ T6592] ? __pfx___debug_object_init+0x10/0x10 [ 152.814370][ T6592] ? find_held_lock+0x2b/0x80 [ 152.814403][ T6592] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 152.814457][ T6592] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 152.814499][ T6592] ? __hrtimer_setup+0x176/0x280 [ 152.814550][ T6592] mac80211_hwsim_new_radio+0x32d8/0x50b0 [ 152.814611][ T6592] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 152.814662][ T6592] hwsim_new_radio_nl+0xba2/0x1330 [ 152.814701][ T6592] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 152.814749][ T6592] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 152.814794][ T6592] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 152.814845][ T6592] genl_family_rcv_msg_doit+0x209/0x2f0 [ 152.814889][ T6592] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 152.814947][ T6592] ? bpf_lsm_capable+0x9/0x10 [ 152.814991][ T6592] ? security_capable+0x7e/0x260 [ 152.815135][ T6592] ? ns_capable+0xd7/0x110 [ 152.815170][ T6592] genl_rcv_msg+0x55c/0x800 [ 152.815206][ T6592] ? __pfx_genl_rcv_msg+0x10/0x10 [ 152.815238][ T6592] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 152.815275][ T6592] netlink_rcv_skb+0x158/0x420 [ 152.815303][ T6592] ? __pfx_genl_rcv_msg+0x10/0x10 [ 152.815336][ T6592] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 152.815376][ T6592] ? netlink_deliver_tap+0x1ae/0xd30 [ 152.815405][ T6592] genl_rcv+0x28/0x40 [ 152.815431][ T6592] netlink_unicast+0x5aa/0x870 [ 152.815462][ T6592] ? __pfx_netlink_unicast+0x10/0x10 [ 152.815489][ T6592] ? __pfx___might_resched+0x10/0x10 [ 152.815526][ T6592] netlink_sendmsg+0x8c8/0xdd0 [ 152.815564][ T6592] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.815594][ T6592] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 152.815636][ T6592] ____sys_sendmsg+0xa98/0xc70 [ 152.815669][ T6592] ? copy_msghdr_from_user+0x10a/0x160 [ 152.815693][ T6592] ? __pfx_____sys_sendmsg+0x10/0x10 [ 152.815731][ T6592] ? __pfx_futex_wake_mark+0x10/0x10 [ 152.815775][ T6592] ___sys_sendmsg+0x134/0x1d0 [ 152.815796][ T6592] ? futex_private_hash_put+0x176/0x300 [ 152.815830][ T6592] ? __pfx____sys_sendmsg+0x10/0x10 [ 152.815851][ T6592] ? __lock_acquire+0x622/0x1c90 [ 152.815922][ T6592] __sys_sendmsg+0x16d/0x220 [ 152.815945][ T6592] ? __pfx___sys_sendmsg+0x10/0x10 [ 152.815968][ T6592] ? __x64_sys_futex+0x1e0/0x4c0 [ 152.816021][ T6592] do_syscall_64+0xcd/0xfa0 [ 152.816104][ T6592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.816129][ T6592] RIP: 0033:0x7f4b2a58efc9 [ 152.816149][ T6592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.816172][ T6592] RSP: 002b:00007f4b2b452038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 152.816195][ T6592] RAX: ffffffffffffffda RBX: 00007f4b2a7e5fa0 RCX: 00007f4b2a58efc9 [ 152.816211][ T6592] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 152.816226][ T6592] RBP: 00007f4b2a611f91 R08: 0000000000000000 R09: 0000000000000000 [ 152.816241][ T6592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.816255][ T6592] R13: 00007f4b2a7e6038 R14: 00007f4b2a7e5fa0 R15: 00007ffe98d583b8 [ 152.816290][ T6592] [ 153.219051][ C1] vkms_vblank_simulate: vblank timer overrun [ 154.530546][ T6602] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 154.540338][ T6602] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 155.259109][ T6619] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' [ 155.298244][ T6619] CPU: 1 UID: 0 PID: 6619 Comm: syz.3.121 Not tainted syzkaller #0 PREEMPT(full) [ 155.298289][ T6619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 155.298308][ T6619] Call Trace: [ 155.298318][ T6619] [ 155.298330][ T6619] dump_stack_lvl+0x16c/0x1f0 [ 155.298373][ T6619] sysfs_warn_dup+0x7f/0xa0 [ 155.298414][ T6619] sysfs_do_create_link_sd+0x124/0x140 [ 155.298460][ T6619] sysfs_create_link+0x61/0xc0 [ 155.298501][ T6619] device_add+0x62c/0x1aa0 [ 155.298555][ T6619] ? __pfx_device_add+0x10/0x10 [ 155.298605][ T6619] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 155.298665][ T6619] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 155.298712][ T6619] wiphy_register+0x1eb0/0x2b20 [ 155.298756][ T6619] ? netdev_run_todo+0x864/0x1320 [ 155.298804][ T6619] ? __pfx_wiphy_register+0x10/0x10 [ 155.298871][ T6619] ieee80211_register_hw+0x253d/0x4120 [ 155.298932][ T6619] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 155.298975][ T6619] ? __pfx___debug_object_init+0x10/0x10 [ 155.299023][ T6619] ? find_held_lock+0x2b/0x80 [ 155.299057][ T6619] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 155.299124][ T6619] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 155.299169][ T6619] ? __hrtimer_setup+0x176/0x280 [ 155.299224][ T6619] mac80211_hwsim_new_radio+0x32d8/0x50b0 [ 155.299285][ T6619] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 155.299334][ T6619] hwsim_new_radio_nl+0xba2/0x1330 [ 155.299373][ T6619] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 155.299421][ T6619] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 155.299464][ T6619] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 155.299517][ T6619] genl_family_rcv_msg_doit+0x209/0x2f0 [ 155.299561][ T6619] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 155.299619][ T6619] ? bpf_lsm_capable+0x9/0x10 [ 155.299660][ T6619] ? security_capable+0x7e/0x260 [ 155.299706][ T6619] ? ns_capable+0xd7/0x110 [ 155.299745][ T6619] genl_rcv_msg+0x55c/0x800 [ 155.299790][ T6619] ? __pfx_genl_rcv_msg+0x10/0x10 [ 155.299831][ T6619] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 155.299884][ T6619] netlink_rcv_skb+0x158/0x420 [ 155.299918][ T6619] ? __pfx_genl_rcv_msg+0x10/0x10 [ 155.299959][ T6619] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 155.300013][ T6619] ? netlink_deliver_tap+0x1ae/0xd30 [ 155.300052][ T6619] genl_rcv+0x28/0x40 [ 155.300091][ T6619] netlink_unicast+0x5aa/0x870 [ 155.300132][ T6619] ? __pfx_netlink_unicast+0x10/0x10 [ 155.300166][ T6619] ? __pfx___might_resched+0x10/0x10 [ 155.300217][ T6619] netlink_sendmsg+0x8c8/0xdd0 [ 155.300260][ T6619] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.300301][ T6619] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 155.300355][ T6619] ____sys_sendmsg+0xa98/0xc70 [ 155.300398][ T6619] ? copy_msghdr_from_user+0x10a/0x160 [ 155.300430][ T6619] ? __pfx_____sys_sendmsg+0x10/0x10 [ 155.300482][ T6619] ? __pfx_futex_wake_mark+0x10/0x10 [ 155.300542][ T6619] ___sys_sendmsg+0x134/0x1d0 [ 155.300571][ T6619] ? futex_private_hash_put+0x176/0x300 [ 155.300614][ T6619] ? __pfx____sys_sendmsg+0x10/0x10 [ 155.300641][ T6619] ? __lock_acquire+0x622/0x1c90 [ 155.300743][ T6619] __sys_sendmsg+0x16d/0x220 [ 155.300775][ T6619] ? __pfx___sys_sendmsg+0x10/0x10 [ 155.300806][ T6619] ? __x64_sys_futex+0x1e0/0x4c0 [ 155.300879][ T6619] do_syscall_64+0xcd/0xfa0 [ 155.300920][ T6619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.300952][ T6619] RIP: 0033:0x7fa7c718efc9 [ 155.300979][ T6619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.301010][ T6619] RSP: 002b:00007fa7c8112038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 155.301040][ T6619] RAX: ffffffffffffffda RBX: 00007fa7c73e5fa0 RCX: 00007fa7c718efc9 [ 155.301061][ T6619] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 155.301087][ T6619] RBP: 00007fa7c7211f91 R08: 0000000000000000 R09: 0000000000000000 [ 155.301106][ T6619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.301125][ T6619] R13: 00007fa7c73e6038 R14: 00007fa7c73e5fa0 R15: 00007ffd75c0fea8 [ 155.301171][ T6619] [ 155.698493][ C1] vkms_vblank_simulate: vblank timer overrun [ 156.012202][ T6615] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 156.020904][ T6615] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 156.410985][ T6634] FAULT_INJECTION: forcing a failure. [ 156.410985][ T6634] name failslab, interval 1, probability 0, space 0, times 0 [ 156.453177][ T6634] CPU: 1 UID: 0 PID: 6634 Comm: syz.2.123 Not tainted syzkaller #0 PREEMPT(full) [ 156.453223][ T6634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 156.453242][ T6634] Call Trace: [ 156.453253][ T6634] [ 156.453265][ T6634] dump_stack_lvl+0x16c/0x1f0 [ 156.453308][ T6634] should_fail_ex+0x512/0x640 [ 156.453355][ T6634] ? __kmalloc_cache_noprof+0x5f/0x780 [ 156.453412][ T6634] should_failslab+0xc2/0x120 [ 156.453454][ T6634] __kmalloc_cache_noprof+0x72/0x780 [ 156.453507][ T6634] ? percpu_ref_init+0xec/0x410 [ 156.453555][ T6634] ? percpu_ref_init+0xec/0x410 [ 156.453592][ T6634] ? __pfx_swap_users_ref_free+0x10/0x10 [ 156.453626][ T6634] percpu_ref_init+0xec/0x410 [ 156.453670][ T6634] __do_sys_swapon+0x165/0x3a90 [ 156.453711][ T6634] ? find_held_lock+0x2b/0x80 [ 156.453746][ T6634] ? handle_mm_fault+0x2ab/0xd10 [ 156.453801][ T6634] ? __x64_sys_futex+0x1e0/0x4c0 [ 156.453842][ T6634] ? __x64_sys_futex+0x1e9/0x4c0 [ 156.453896][ T6634] ? exc_page_fault+0x64/0xc0 [ 156.453930][ T6634] ? arch_syscall_is_vdso_sigreturn+0xb6/0x230 [ 156.453984][ T6634] ? __pfx___do_sys_swapon+0x10/0x10 [ 156.454022][ T6634] ? syscall_user_dispatch+0x78/0x140 [ 156.454087][ T6634] do_syscall_64+0xcd/0xfa0 [ 156.454126][ T6634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.454158][ T6634] RIP: 0033:0x7ffba7f8efc9 [ 156.454183][ T6634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.454214][ T6634] RSP: 002b:00007ffba8da6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a7 [ 156.454245][ T6634] RAX: ffffffffffffffda RBX: 00007ffba81e5fa0 RCX: 00007ffba7f8efc9 [ 156.454265][ T6634] RDX: 0000000000000000 RSI: 0000000000007057 RDI: 0000000000000000 [ 156.454285][ T6634] RBP: 00007ffba8011f91 R08: 0000000000000000 R09: 0000000000000000 [ 156.454304][ T6634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.454324][ T6634] R13: 00007ffba81e6038 R14: 00007ffba81e5fa0 R15: 00007ffe31094cb8 [ 156.454367][ T6634] [ 156.665211][ C1] vkms_vblank_simulate: vblank timer overrun [ 157.106644][ T6639] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' [ 157.132056][ T6639] CPU: 1 UID: 0 PID: 6639 Comm: syz.1.124 Not tainted syzkaller #0 PREEMPT(full) [ 157.132095][ T6639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 157.132112][ T6639] Call Trace: [ 157.132123][ T6639] [ 157.132134][ T6639] dump_stack_lvl+0x16c/0x1f0 [ 157.132176][ T6639] sysfs_warn_dup+0x7f/0xa0 [ 157.132213][ T6639] sysfs_do_create_link_sd+0x124/0x140 [ 157.132252][ T6639] sysfs_create_link+0x61/0xc0 [ 157.132287][ T6639] device_add+0x62c/0x1aa0 [ 157.132335][ T6639] ? __pfx_device_add+0x10/0x10 [ 157.132377][ T6639] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 157.132427][ T6639] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 157.132468][ T6639] wiphy_register+0x1eb0/0x2b20 [ 157.132507][ T6639] ? netdev_run_todo+0x864/0x1320 [ 157.132555][ T6639] ? __pfx_wiphy_register+0x10/0x10 [ 157.132624][ T6639] ieee80211_register_hw+0x253d/0x4120 [ 157.132684][ T6639] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 157.132727][ T6639] ? __pfx___debug_object_init+0x10/0x10 [ 157.132767][ T6639] ? find_held_lock+0x2b/0x80 [ 157.132795][ T6639] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 157.132837][ T6639] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 157.132870][ T6639] ? __hrtimer_setup+0x176/0x280 [ 157.132916][ T6639] mac80211_hwsim_new_radio+0x32d8/0x50b0 [ 157.132973][ T6639] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 157.133021][ T6639] hwsim_new_radio_nl+0xba2/0x1330 [ 157.133065][ T6639] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 157.133100][ T6639] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 157.133134][ T6639] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 157.133174][ T6639] genl_family_rcv_msg_doit+0x209/0x2f0 [ 157.133207][ T6639] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 157.133249][ T6639] ? bpf_lsm_capable+0x9/0x10 [ 157.133281][ T6639] ? security_capable+0x7e/0x260 [ 157.133316][ T6639] ? ns_capable+0xd7/0x110 [ 157.133344][ T6639] genl_rcv_msg+0x55c/0x800 [ 157.133377][ T6639] ? __pfx_genl_rcv_msg+0x10/0x10 [ 157.133409][ T6639] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 157.133445][ T6639] netlink_rcv_skb+0x158/0x420 [ 157.133470][ T6639] ? __pfx_genl_rcv_msg+0x10/0x10 [ 157.133502][ T6639] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 157.133541][ T6639] ? netlink_deliver_tap+0x1ae/0xd30 [ 157.133569][ T6639] genl_rcv+0x28/0x40 [ 157.133594][ T6639] netlink_unicast+0x5aa/0x870 [ 157.133625][ T6639] ? __pfx_netlink_unicast+0x10/0x10 [ 157.133650][ T6639] ? __pfx___might_resched+0x10/0x10 [ 157.133685][ T6639] netlink_sendmsg+0x8c8/0xdd0 [ 157.133716][ T6639] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.133746][ T6639] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 157.133788][ T6639] ____sys_sendmsg+0xa98/0xc70 [ 157.133821][ T6639] ? copy_msghdr_from_user+0x10a/0x160 [ 157.133844][ T6639] ? __pfx_____sys_sendmsg+0x10/0x10 [ 157.133882][ T6639] ? __pfx_futex_wake_mark+0x10/0x10 [ 157.133925][ T6639] ___sys_sendmsg+0x134/0x1d0 [ 157.133946][ T6639] ? futex_private_hash_put+0x176/0x300 [ 157.133978][ T6639] ? __pfx____sys_sendmsg+0x10/0x10 [ 157.133999][ T6639] ? __lock_acquire+0x622/0x1c90 [ 157.134077][ T6639] __sys_sendmsg+0x16d/0x220 [ 157.134100][ T6639] ? __pfx___sys_sendmsg+0x10/0x10 [ 157.134123][ T6639] ? __x64_sys_futex+0x1e0/0x4c0 [ 157.134181][ T6639] do_syscall_64+0xcd/0xfa0 [ 157.134212][ T6639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.134237][ T6639] RIP: 0033:0x7fcf6f58efc9 [ 157.134257][ T6639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.134279][ T6639] RSP: 002b:00007fcf70425038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.134302][ T6639] RAX: ffffffffffffffda RBX: 00007fcf6f7e5fa0 RCX: 00007fcf6f58efc9 [ 157.134318][ T6639] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 157.134332][ T6639] RBP: 00007fcf6f611f91 R08: 0000000000000000 R09: 0000000000000000 [ 157.134347][ T6639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.134362][ T6639] R13: 00007fcf6f7e6038 R14: 00007fcf6f7e5fa0 R15: 00007fffed5f26d8 [ 157.134396][ T6639] [ 157.529215][ C1] vkms_vblank_simulate: vblank timer overrun [ 158.768610][ T6668] ubi0: attaching mtd0 [ 158.788209][ T6668] ubi0: scanning is finished [ 158.792874][ T6668] ubi0: empty MTD device detected [ 159.074414][ T6668] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 159.102860][ T6668] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 159.128677][ T6668] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 159.189032][ T6668] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 159.253332][ T6668] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 159.261086][ T6668] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 159.270835][ T6668] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 509042720 [ 159.282231][ T6668] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 159.352686][ T6675] ubi0: background thread "ubi_bgt0d" started, PID 6675 [ 159.435923][ T6679] netlink: 338 bytes leftover after parsing attributes in process `syz.1.127'. [ 159.578094][ T6679] netlink: 338 bytes leftover after parsing attributes in process `syz.1.127'. [ 160.209862][ T6694] netlink: zone id is out of range [ 160.987510][ T6704] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' [ 161.037611][ T6704] CPU: 1 UID: 0 PID: 6704 Comm: syz.0.132 Not tainted syzkaller #0 PREEMPT(full) [ 161.037655][ T6704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 161.037674][ T6704] Call Trace: [ 161.037685][ T6704] [ 161.037697][ T6704] dump_stack_lvl+0x16c/0x1f0 [ 161.037740][ T6704] sysfs_warn_dup+0x7f/0xa0 [ 161.037781][ T6704] sysfs_do_create_link_sd+0x124/0x140 [ 161.037826][ T6704] sysfs_create_link+0x61/0xc0 [ 161.037866][ T6704] device_add+0x62c/0x1aa0 [ 161.037922][ T6704] ? __pfx_device_add+0x10/0x10 [ 161.037970][ T6704] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 161.038027][ T6704] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 161.038074][ T6704] wiphy_register+0x1eb0/0x2b20 [ 161.038118][ T6704] ? netdev_run_todo+0x864/0x1320 [ 161.038164][ T6704] ? __pfx_wiphy_register+0x10/0x10 [ 161.038233][ T6704] ieee80211_register_hw+0x253d/0x4120 [ 161.038293][ T6704] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 161.038336][ T6704] ? __pfx___debug_object_init+0x10/0x10 [ 161.038382][ T6704] ? find_held_lock+0x2b/0x80 [ 161.038417][ T6704] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 161.038474][ T6704] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 161.038527][ T6704] ? __hrtimer_setup+0x176/0x280 [ 161.038580][ T6704] mac80211_hwsim_new_radio+0x32d8/0x50b0 [ 161.038643][ T6704] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 161.038690][ T6704] hwsim_new_radio_nl+0xba2/0x1330 [ 161.038727][ T6704] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 161.038774][ T6704] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 161.038818][ T6704] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 161.038869][ T6704] genl_family_rcv_msg_doit+0x209/0x2f0 [ 161.038914][ T6704] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 161.038971][ T6704] ? bpf_lsm_capable+0x9/0x10 [ 161.039012][ T6704] ? security_capable+0x7e/0x260 [ 161.039056][ T6704] ? ns_capable+0xd7/0x110 [ 161.039092][ T6704] genl_rcv_msg+0x55c/0x800 [ 161.039134][ T6704] ? __pfx_genl_rcv_msg+0x10/0x10 [ 161.039175][ T6704] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 161.039224][ T6704] netlink_rcv_skb+0x158/0x420 [ 161.039258][ T6704] ? __pfx_genl_rcv_msg+0x10/0x10 [ 161.039299][ T6704] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 161.039353][ T6704] ? netlink_deliver_tap+0x1ae/0xd30 [ 161.039390][ T6704] genl_rcv+0x28/0x40 [ 161.039425][ T6704] netlink_unicast+0x5aa/0x870 [ 161.039464][ T6704] ? __pfx_netlink_unicast+0x10/0x10 [ 161.039498][ T6704] ? __pfx___might_resched+0x10/0x10 [ 161.039557][ T6704] netlink_sendmsg+0x8c8/0xdd0 [ 161.039599][ T6704] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.039642][ T6704] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 161.039700][ T6704] ____sys_sendmsg+0xa98/0xc70 [ 161.039745][ T6704] ? copy_msghdr_from_user+0x10a/0x160 [ 161.039775][ T6704] ? __pfx_____sys_sendmsg+0x10/0x10 [ 161.039828][ T6704] ? __pfx_futex_wake_mark+0x10/0x10 [ 161.039888][ T6704] ___sys_sendmsg+0x134/0x1d0 [ 161.039915][ T6704] ? futex_private_hash_put+0x176/0x300 [ 161.039957][ T6704] ? __pfx____sys_sendmsg+0x10/0x10 [ 161.039985][ T6704] ? __lock_acquire+0x622/0x1c90 [ 161.040084][ T6704] __sys_sendmsg+0x16d/0x220 [ 161.040117][ T6704] ? __pfx___sys_sendmsg+0x10/0x10 [ 161.040147][ T6704] ? __x64_sys_futex+0x1e0/0x4c0 [ 161.040220][ T6704] do_syscall_64+0xcd/0xfa0 [ 161.040259][ T6704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.040291][ T6704] RIP: 0033:0x7f4b2a58efc9 [ 161.040317][ T6704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.040347][ T6704] RSP: 002b:00007f4b2b452038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.040378][ T6704] RAX: ffffffffffffffda RBX: 00007f4b2a7e5fa0 RCX: 00007f4b2a58efc9 [ 161.040398][ T6704] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 161.040417][ T6704] RBP: 00007f4b2a611f91 R08: 0000000000000000 R09: 0000000000000000 [ 161.040436][ T6704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.040454][ T6704] R13: 00007f4b2a7e6038 R14: 00007f4b2a7e5fa0 R15: 00007ffe98d583b8 [ 161.040501][ T6704] [ 162.944631][ T6722] netlink: zone id is out of range [ 162.949799][ T6722] netlink: del zone limit has 4 unknown bytes [ 163.463195][ T6728] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 163.470054][ T6728] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 163.685381][ T52] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 163.685438][ T52] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 163.708039][ T52] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 163.708105][ T52] Bluetooth: hci1: adv larger than maximum supported [ 163.717567][ T52] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 163.729258][ T52] Bluetooth: hci1: adv larger than maximum supported [ 163.736602][ T52] Bluetooth: hci1: adv larger than maximum supported [ 163.743492][ T52] Bluetooth: hci1: Malformed LE Event: 0x0d [ 164.791109][ T6759] vivid-003: ================= START STATUS ================= [ 164.800043][ T10] Process accounting resumed [ 164.829640][ T6759] vivid-003: Radio HW Seek Mode: Bounded [ 164.853413][ T6759] vivid-003: Radio Programmable HW Seek: false [ 164.929475][ T6759] vivid-003: RDS Rx I/O Mode: Block I/O [ 164.993745][ T6759] vivid-003: Generate RBDS Instead of RDS: false [ 165.037292][ T6759] vivid-003: RDS Reception: true [ 165.058467][ T6759] vivid-003: RDS Program Type: 0 inactive [ 165.071875][ T6759] vivid-003: RDS PS Name: inactive [ 165.099367][ T6759] vivid-003: RDS Radio Text: inactive [ 165.120073][ T6759] vivid-003: RDS Traffic Announcement: false inactive [ 165.152689][ T6759] vivid-003: RDS Traffic Program: false inactive [ 165.192676][ T6759] vivid-003: RDS Music: false inactive [ 165.198594][ T6759] vivid-003: ================== END STATUS ================== [ 165.606663][ T6754] netlink: zone id is out of range [ 166.741658][ T6787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.147'. [ 167.103071][ T6790] FAULT_INJECTION: forcing a failure. [ 167.103071][ T6790] name failslab, interval 1, probability 0, space 0, times 0 [ 167.133267][ T6790] CPU: 1 UID: 0 PID: 6790 Comm: syz.3.148 Not tainted syzkaller #0 PREEMPT(full) [ 167.133311][ T6790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 167.133330][ T6790] Call Trace: [ 167.133341][ T6790] [ 167.133354][ T6790] dump_stack_lvl+0x16c/0x1f0 [ 167.133396][ T6790] should_fail_ex+0x512/0x640 [ 167.133446][ T6790] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 167.133482][ T6790] should_failslab+0xc2/0x120 [ 167.133524][ T6790] kmem_cache_alloc_noprof+0x75/0x6e0 [ 167.133557][ T6790] ? pidfs_register_pid+0x97/0x1f0 [ 167.133594][ T6790] ? pidfs_register_pid+0x97/0x1f0 [ 167.133623][ T6790] pidfs_register_pid+0x97/0x1f0 [ 167.133656][ T6790] unix_socketpair+0x126/0x860 [ 167.133703][ T6790] ? unix_connect_peers+0x345/0x500 [ 167.133751][ T6790] ? __pfx_unix_socketpair+0x10/0x10 [ 167.133795][ T6790] ? apparmor_socket_socketpair+0x49b/0x700 [ 167.133839][ T6790] __sys_socketpair+0x2f2/0x5a0 [ 167.133888][ T6790] ? __pfx___sys_socketpair+0x10/0x10 [ 167.133929][ T6790] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 167.133970][ T6790] ? xfd_validate_state+0x61/0x180 [ 167.134012][ T6790] ? __pfx___do_sys_close_range+0x10/0x10 [ 167.134056][ T6790] __x64_sys_socketpair+0x96/0x100 [ 167.134099][ T6790] ? lockdep_hardirqs_on+0x7c/0x110 [ 167.134136][ T6790] do_syscall_64+0xcd/0xfa0 [ 167.134186][ T6790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.134219][ T6790] RIP: 0033:0x7fa7c718efc9 [ 167.134245][ T6790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.134277][ T6790] RSP: 002b:00007fa7c8112038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 167.134307][ T6790] RAX: ffffffffffffffda RBX: 00007fa7c73e5fa0 RCX: 00007fa7c718efc9 [ 167.134328][ T6790] RDX: 8000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 167.134348][ T6790] RBP: 00007fa7c7211f91 R08: 0000000000000000 R09: 0000000000000000 [ 167.134368][ T6790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.134387][ T6790] R13: 00007fa7c73e6038 R14: 00007fa7c73e5fa0 R15: 00007ffd75c0fea8 [ 167.134430][ T6790] [ 170.622180][ T6841] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' [ 170.649388][ T6841] CPU: 0 UID: 0 PID: 6841 Comm: syz.2.154 Not tainted syzkaller #0 PREEMPT(full) [ 170.649430][ T6841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 170.649449][ T6841] Call Trace: [ 170.649459][ T6841] [ 170.649470][ T6841] dump_stack_lvl+0x16c/0x1f0 [ 170.649512][ T6841] sysfs_warn_dup+0x7f/0xa0 [ 170.649550][ T6841] sysfs_do_create_link_sd+0x124/0x140 [ 170.649594][ T6841] sysfs_create_link+0x61/0xc0 [ 170.649632][ T6841] device_add+0x62c/0x1aa0 [ 170.649687][ T6841] ? __pfx_device_add+0x10/0x10 [ 170.649734][ T6841] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 170.649794][ T6841] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 170.649843][ T6841] wiphy_register+0x1eb0/0x2b20 [ 170.649887][ T6841] ? netdev_run_todo+0x864/0x1320 [ 170.649940][ T6841] ? __pfx_wiphy_register+0x10/0x10 [ 170.650067][ T6841] ieee80211_register_hw+0x253d/0x4120 [ 170.650112][ T6841] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 170.650145][ T6841] ? __pfx___debug_object_init+0x10/0x10 [ 170.650182][ T6841] ? find_held_lock+0x2b/0x80 [ 170.650208][ T6841] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 170.650253][ T6841] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 170.650286][ T6841] ? __hrtimer_setup+0x176/0x280 [ 170.650327][ T6841] mac80211_hwsim_new_radio+0x32d8/0x50b0 [ 170.650371][ T6841] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 170.650407][ T6841] hwsim_new_radio_nl+0xba2/0x1330 [ 170.650435][ T6841] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 170.650470][ T6841] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 170.650504][ T6841] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 170.650543][ T6841] genl_family_rcv_msg_doit+0x209/0x2f0 [ 170.650576][ T6841] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 170.650617][ T6841] ? bpf_lsm_capable+0x9/0x10 [ 170.650649][ T6841] ? security_capable+0x7e/0x260 [ 170.650684][ T6841] ? ns_capable+0xd7/0x110 [ 170.650713][ T6841] genl_rcv_msg+0x55c/0x800 [ 170.650746][ T6841] ? __pfx_genl_rcv_msg+0x10/0x10 [ 170.650777][ T6841] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 170.650813][ T6841] netlink_rcv_skb+0x158/0x420 [ 170.650839][ T6841] ? __pfx_genl_rcv_msg+0x10/0x10 [ 170.650871][ T6841] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 170.650909][ T6841] ? netlink_deliver_tap+0x1ae/0xd30 [ 170.650937][ T6841] genl_rcv+0x28/0x40 [ 170.650963][ T6841] netlink_unicast+0x5aa/0x870 [ 170.650999][ T6841] ? __pfx_netlink_unicast+0x10/0x10 [ 170.651024][ T6841] ? __pfx___might_resched+0x10/0x10 [ 170.651060][ T6841] netlink_sendmsg+0x8c8/0xdd0 [ 170.651091][ T6841] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.651121][ T6841] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 170.651162][ T6841] ____sys_sendmsg+0xa98/0xc70 [ 170.651194][ T6841] ? copy_msghdr_from_user+0x10a/0x160 [ 170.651217][ T6841] ? __pfx_____sys_sendmsg+0x10/0x10 [ 170.651255][ T6841] ? __pfx_futex_wake_mark+0x10/0x10 [ 170.651299][ T6841] ___sys_sendmsg+0x134/0x1d0 [ 170.651319][ T6841] ? futex_private_hash_put+0x176/0x300 [ 170.651352][ T6841] ? __pfx____sys_sendmsg+0x10/0x10 [ 170.651373][ T6841] ? __lock_acquire+0x622/0x1c90 [ 170.651443][ T6841] __sys_sendmsg+0x16d/0x220 [ 170.651467][ T6841] ? __pfx___sys_sendmsg+0x10/0x10 [ 170.651489][ T6841] ? __x64_sys_futex+0x1e0/0x4c0 [ 170.651541][ T6841] do_syscall_64+0xcd/0xfa0 [ 170.651571][ T6841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.651596][ T6841] RIP: 0033:0x7ffba7f8efc9 [ 170.651616][ T6841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.651639][ T6841] RSP: 002b:00007ffba8da6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.651661][ T6841] RAX: ffffffffffffffda RBX: 00007ffba81e5fa0 RCX: 00007ffba7f8efc9 [ 170.651678][ T6841] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 170.651692][ T6841] RBP: 00007ffba8011f91 R08: 0000000000000000 R09: 0000000000000000 [ 170.651707][ T6841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.651721][ T6841] R13: 00007ffba81e6038 R14: 00007ffba81e5fa0 R15: 00007ffe31094cb8 [ 170.651753][ T6841] [ 171.539495][ T6851] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' [ 171.557503][ T6851] CPU: 1 UID: 0 PID: 6851 Comm: syz.0.155 Not tainted syzkaller #0 PREEMPT(full) [ 171.557545][ T6851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 171.557563][ T6851] Call Trace: [ 171.557574][ T6851] [ 171.557586][ T6851] dump_stack_lvl+0x16c/0x1f0 [ 171.557628][ T6851] sysfs_warn_dup+0x7f/0xa0 [ 171.557668][ T6851] sysfs_do_create_link_sd+0x124/0x140 [ 171.557711][ T6851] sysfs_create_link+0x61/0xc0 [ 171.557750][ T6851] device_add+0x62c/0x1aa0 [ 171.557806][ T6851] ? __pfx_device_add+0x10/0x10 [ 171.557848][ T6851] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 171.557903][ T6851] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 171.557947][ T6851] wiphy_register+0x1eb0/0x2b20 [ 171.557988][ T6851] ? netdev_run_todo+0x864/0x1320 [ 171.558033][ T6851] ? __pfx_wiphy_register+0x10/0x10 [ 171.558096][ T6851] ieee80211_register_hw+0x253d/0x4120 [ 171.558162][ T6851] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 171.558203][ T6851] ? __pfx___debug_object_init+0x10/0x10 [ 171.558246][ T6851] ? find_held_lock+0x2b/0x80 [ 171.558276][ T6851] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 171.558325][ T6851] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 171.558363][ T6851] ? __hrtimer_setup+0x176/0x280 [ 171.558410][ T6851] mac80211_hwsim_new_radio+0x32d8/0x50b0 [ 171.558463][ T6851] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 171.558505][ T6851] hwsim_new_radio_nl+0xba2/0x1330 [ 171.558539][ T6851] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 171.558581][ T6851] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 171.558620][ T6851] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 171.558666][ T6851] genl_family_rcv_msg_doit+0x209/0x2f0 [ 171.558704][ T6851] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 171.558753][ T6851] ? bpf_lsm_capable+0x9/0x10 [ 171.558790][ T6851] ? security_capable+0x7e/0x260 [ 171.558831][ T6851] ? ns_capable+0xd7/0x110 [ 171.558863][ T6851] genl_rcv_msg+0x55c/0x800 [ 171.558902][ T6851] ? __pfx_genl_rcv_msg+0x10/0x10 [ 171.558943][ T6851] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 171.558992][ T6851] netlink_rcv_skb+0x158/0x420 [ 171.559024][ T6851] ? __pfx_genl_rcv_msg+0x10/0x10 [ 171.559064][ T6851] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 171.559113][ T6851] ? netlink_deliver_tap+0x1ae/0xd30 [ 171.559150][ T6851] genl_rcv+0x28/0x40 [ 171.559189][ T6851] netlink_unicast+0x5aa/0x870 [ 171.559227][ T6851] ? __pfx_netlink_unicast+0x10/0x10 [ 171.559258][ T6851] ? __pfx___might_resched+0x10/0x10 [ 171.559302][ T6851] netlink_sendmsg+0x8c8/0xdd0 [ 171.559340][ T6851] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.559376][ T6851] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 171.559433][ T6851] ____sys_sendmsg+0xa98/0xc70 [ 171.559475][ T6851] ? copy_msghdr_from_user+0x10a/0x160 [ 171.559505][ T6851] ? __pfx_____sys_sendmsg+0x10/0x10 [ 171.559554][ T6851] ? __pfx_futex_wake_mark+0x10/0x10 [ 171.559610][ T6851] ___sys_sendmsg+0x134/0x1d0 [ 171.559637][ T6851] ? futex_private_hash_put+0x176/0x300 [ 171.559677][ T6851] ? __pfx____sys_sendmsg+0x10/0x10 [ 171.559704][ T6851] ? __lock_acquire+0x622/0x1c90 [ 171.559797][ T6851] __sys_sendmsg+0x16d/0x220 [ 171.559827][ T6851] ? __pfx___sys_sendmsg+0x10/0x10 [ 171.559856][ T6851] ? __x64_sys_futex+0x1e0/0x4c0 [ 171.559925][ T6851] do_syscall_64+0xcd/0xfa0 [ 171.559963][ T6851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.559995][ T6851] RIP: 0033:0x7f4b2a58efc9 [ 171.560021][ T6851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.560050][ T6851] RSP: 002b:00007f4b2b452038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 171.560080][ T6851] RAX: ffffffffffffffda RBX: 00007f4b2a7e5fa0 RCX: 00007f4b2a58efc9 [ 171.560100][ T6851] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 171.560120][ T6851] RBP: 00007f4b2a611f91 R08: 0000000000000000 R09: 0000000000000000 [ 171.560139][ T6851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.560165][ T6851] R13: 00007f4b2a7e6038 R14: 00007f4b2a7e5fa0 R15: 00007ffe98d583b8 [ 171.560210][ T6851] [ 172.537214][ T6864] netlink: zone id is out of range [ 173.616728][ T6879] FAULT_INJECTION: forcing a failure. [ 173.616728][ T6879] name failslab, interval 1, probability 0, space 0, times 0 [ 173.629600][ T6879] CPU: 1 UID: 0 PID: 6879 Comm: syz.2.159 Not tainted syzkaller #0 PREEMPT(full) [ 173.629632][ T6879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 173.629646][ T6879] Call Trace: [ 173.629654][ T6879] [ 173.629663][ T6879] dump_stack_lvl+0x16c/0x1f0 [ 173.629694][ T6879] should_fail_ex+0x512/0x640 [ 173.629730][ T6879] ? __kmalloc_cache_noprof+0x5f/0x780 [ 173.629774][ T6879] should_failslab+0xc2/0x120 [ 173.629807][ T6879] __kmalloc_cache_noprof+0x72/0x780 [ 173.629871][ T6879] ? percpu_ref_init+0xec/0x410 [ 173.629907][ T6879] ? percpu_ref_init+0xec/0x410 [ 173.629937][ T6879] ? __pfx_swap_users_ref_free+0x10/0x10 [ 173.629963][ T6879] percpu_ref_init+0xec/0x410 [ 173.629997][ T6879] __do_sys_swapon+0x165/0x3a90 [ 173.630026][ T6879] ? find_held_lock+0x2b/0x80 [ 173.630052][ T6879] ? handle_mm_fault+0x2ab/0xd10 [ 173.630093][ T6879] ? __x64_sys_futex+0x1e0/0x4c0 [ 173.630126][ T6879] ? __x64_sys_futex+0x1e9/0x4c0 [ 173.630159][ T6879] ? exc_page_fault+0x64/0xc0 [ 173.630185][ T6879] ? arch_syscall_is_vdso_sigreturn+0xb6/0x230 [ 173.630226][ T6879] ? __pfx___do_sys_swapon+0x10/0x10 [ 173.630254][ T6879] ? syscall_user_dispatch+0x78/0x140 [ 173.630302][ T6879] do_syscall_64+0xcd/0xfa0 [ 173.630331][ T6879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.630356][ T6879] RIP: 0033:0x7ffba7f8efc9 [ 173.630374][ T6879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.630397][ T6879] RSP: 002b:00007ffba8d85038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a7 [ 173.630419][ T6879] RAX: ffffffffffffffda RBX: 00007ffba81e6090 RCX: 00007ffba7f8efc9 [ 173.630435][ T6879] RDX: 0000000000000000 RSI: 0000000000007057 RDI: 0000000000000000 [ 173.630449][ T6879] RBP: 00007ffba8011f91 R08: 0000000000000000 R09: 0000000000000000 [ 173.630463][ T6879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.630477][ T6879] R13: 00007ffba81e6128 R14: 00007ffba81e6090 R15: 00007ffe31094cb8 [ 173.630508][ T6879] [ 174.069140][ T6877] netlink: zone id is out of range [ 174.074499][ T6877] netlink: del zone limit has 8 unknown bytes [ 175.543809][ T6904] netlink: zone id is out of range [ 177.474763][ T6921] FAULT_INJECTION: forcing a failure. [ 177.474763][ T6921] name failslab, interval 1, probability 0, space 0, times 0 [ 177.522821][ T6921] CPU: 1 UID: 0 PID: 6921 Comm: syz.2.167 Not tainted syzkaller #0 PREEMPT(full) [ 177.522865][ T6921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 177.522883][ T6921] Call Trace: [ 177.522893][ T6921] [ 177.522905][ T6921] dump_stack_lvl+0x16c/0x1f0 [ 177.522952][ T6921] should_fail_ex+0x512/0x640 [ 177.523000][ T6921] ? __kmalloc_cache_noprof+0x5f/0x780 [ 177.523055][ T6921] should_failslab+0xc2/0x120 [ 177.523098][ T6921] __kmalloc_cache_noprof+0x72/0x780 [ 177.523150][ T6921] ? percpu_ref_init+0xec/0x410 [ 177.523198][ T6921] ? percpu_ref_init+0xec/0x410 [ 177.523236][ T6921] ? __pfx_swap_users_ref_free+0x10/0x10 [ 177.523269][ T6921] percpu_ref_init+0xec/0x410 [ 177.523312][ T6921] __do_sys_swapon+0x165/0x3a90 [ 177.523350][ T6921] ? find_held_lock+0x2b/0x80 [ 177.523384][ T6921] ? handle_mm_fault+0x2ab/0xd10 [ 177.523438][ T6921] ? __x64_sys_futex+0x1e0/0x4c0 [ 177.523520][ T6921] ? __x64_sys_futex+0x1e9/0x4c0 [ 177.523573][ T6921] ? exc_page_fault+0x64/0xc0 [ 177.523611][ T6921] ? arch_syscall_is_vdso_sigreturn+0xb6/0x230 [ 177.523668][ T6921] ? __pfx___do_sys_swapon+0x10/0x10 [ 177.523704][ T6921] ? syscall_user_dispatch+0x78/0x140 [ 177.523768][ T6921] do_syscall_64+0xcd/0xfa0 [ 177.523808][ T6921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.523840][ T6921] RIP: 0033:0x7ffba7f8efc9 [ 177.523864][ T6921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.523895][ T6921] RSP: 002b:00007ffba8da6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a7 [ 177.523926][ T6921] RAX: ffffffffffffffda RBX: 00007ffba81e5fa0 RCX: 00007ffba7f8efc9 [ 177.523948][ T6921] RDX: 0000000000000000 RSI: 0000000000007057 RDI: 0000000000000000 [ 177.523967][ T6921] RBP: 00007ffba8011f91 R08: 0000000000000000 R09: 0000000000000000 [ 177.523986][ T6921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.524006][ T6921] R13: 00007ffba81e6038 R14: 00007ffba81e5fa0 R15: 00007ffe31094cb8 [ 177.524048][ T6921] [ 177.755231][ T6919] netlink: zone id is out of range [ 178.548478][ T6936] ======================================================= [ 178.548478][ T6936] WARNING: The mand mount option has been deprecated and [ 178.548478][ T6936] and is ignored by this kernel. Remove the mand [ 178.548478][ T6936] option from the mount to silence this warning. [ 178.548478][ T6936] ======================================================= [ 178.642854][ T6927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.168'. [ 179.658195][ T6951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.174'. [ 179.777863][ T6954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.173'. [ 180.853179][ T6966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.176'. [ 181.288085][ T6961] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 181.296476][ T6961] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 181.601221][ T6974] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 181.747459][ T6974] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 183.523742][ T7003] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 183.551476][ T7003] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 183.702834][ T7007] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' [ 183.724120][ T7007] CPU: 0 UID: 0 PID: 7007 Comm: syz.1.183 Not tainted syzkaller #0 PREEMPT(full) [ 183.724154][ T7007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 183.724168][ T7007] Call Trace: [ 183.724176][ T7007] [ 183.724194][ T7007] dump_stack_lvl+0x16c/0x1f0 [ 183.724227][ T7007] sysfs_warn_dup+0x7f/0xa0 [ 183.724257][ T7007] sysfs_do_create_link_sd+0x124/0x140 [ 183.724291][ T7007] sysfs_create_link+0x61/0xc0 [ 183.724321][ T7007] device_add+0x62c/0x1aa0 [ 183.724363][ T7007] ? __pfx_device_add+0x10/0x10 [ 183.724400][ T7007] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 183.724444][ T7007] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 183.724477][ T7007] wiphy_register+0x1eb0/0x2b20 [ 183.724509][ T7007] ? netdev_run_todo+0x864/0x1320 [ 183.724548][ T7007] ? __pfx_wiphy_register+0x10/0x10 [ 183.724596][ T7007] ieee80211_register_hw+0x253d/0x4120 [ 183.724641][ T7007] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 183.724673][ T7007] ? __pfx___debug_object_init+0x10/0x10 [ 183.724710][ T7007] ? find_held_lock+0x2b/0x80 [ 183.724735][ T7007] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 183.724777][ T7007] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 183.724811][ T7007] ? __hrtimer_setup+0x176/0x280 [ 183.724852][ T7007] mac80211_hwsim_new_radio+0x32d8/0x50b0 [ 183.724896][ T7007] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 183.724931][ T7007] hwsim_new_radio_nl+0xba2/0x1330 [ 183.724960][ T7007] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 183.724995][ T7007] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 183.725028][ T7007] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 183.725067][ T7007] genl_family_rcv_msg_doit+0x209/0x2f0 [ 183.725100][ T7007] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 183.725141][ T7007] ? bpf_lsm_capable+0x9/0x10 [ 183.725173][ T7007] ? security_capable+0x7e/0x260 [ 183.725218][ T7007] ? ns_capable+0xd7/0x110 [ 183.725248][ T7007] genl_rcv_msg+0x55c/0x800 [ 183.725284][ T7007] ? __pfx_genl_rcv_msg+0x10/0x10 [ 183.725313][ T7007] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 183.725348][ T7007] netlink_rcv_skb+0x158/0x420 [ 183.725372][ T7007] ? __pfx_genl_rcv_msg+0x10/0x10 [ 183.725402][ T7007] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 183.725441][ T7007] ? netlink_deliver_tap+0x1ae/0xd30 [ 183.725469][ T7007] genl_rcv+0x28/0x40 [ 183.725495][ T7007] netlink_unicast+0x5aa/0x870 [ 183.725525][ T7007] ? __pfx_netlink_unicast+0x10/0x10 [ 183.725550][ T7007] ? __pfx___might_resched+0x10/0x10 [ 183.725585][ T7007] netlink_sendmsg+0x8c8/0xdd0 [ 183.725616][ T7007] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.725646][ T7007] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 183.725687][ T7007] ____sys_sendmsg+0xa98/0xc70 [ 183.725719][ T7007] ? copy_msghdr_from_user+0x10a/0x160 [ 183.725742][ T7007] ? __pfx_____sys_sendmsg+0x10/0x10 [ 183.725780][ T7007] ? __pfx_futex_wake_mark+0x10/0x10 [ 183.725824][ T7007] ___sys_sendmsg+0x134/0x1d0 [ 183.725845][ T7007] ? futex_private_hash_put+0x176/0x300 [ 183.725877][ T7007] ? __pfx____sys_sendmsg+0x10/0x10 [ 183.725898][ T7007] ? __lock_acquire+0x622/0x1c90 [ 183.725969][ T7007] __sys_sendmsg+0x16d/0x220 [ 183.725992][ T7007] ? __pfx___sys_sendmsg+0x10/0x10 [ 183.726015][ T7007] ? __x64_sys_futex+0x1e0/0x4c0 [ 183.726067][ T7007] do_syscall_64+0xcd/0xfa0 [ 183.726097][ T7007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.726122][ T7007] RIP: 0033:0x7fcf6f58efc9 [ 183.726141][ T7007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.726164][ T7007] RSP: 002b:00007fcf70425038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 183.726199][ T7007] RAX: ffffffffffffffda RBX: 00007fcf6f7e5fa0 RCX: 00007fcf6f58efc9 [ 183.726214][ T7007] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 183.726229][ T7007] RBP: 00007fcf6f611f91 R08: 0000000000000000 R09: 0000000000000000 [ 183.726244][ T7007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.726258][ T7007] R13: 00007fcf6f7e6038 R14: 00007fcf6f7e5fa0 R15: 00007fffed5f26d8 [ 183.726291][ T7007] [ 185.229735][ T7015] netlink: zone id is out of range [ 185.985594][ T7035] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' [ 185.998917][ T7035] CPU: 1 UID: 0 PID: 7035 Comm: syz.1.187 Not tainted syzkaller #0 PREEMPT(full) [ 185.998964][ T7035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 185.998984][ T7035] Call Trace: [ 185.998994][ T7035] [ 185.999006][ T7035] dump_stack_lvl+0x16c/0x1f0 [ 185.999049][ T7035] sysfs_warn_dup+0x7f/0xa0 [ 185.999090][ T7035] sysfs_do_create_link_sd+0x124/0x140 [ 185.999135][ T7035] sysfs_create_link+0x61/0xc0 [ 185.999174][ T7035] device_add+0x62c/0x1aa0 [ 185.999230][ T7035] ? __pfx_device_add+0x10/0x10 [ 185.999276][ T7035] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 185.999341][ T7035] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 185.999388][ T7035] wiphy_register+0x1eb0/0x2b20 [ 185.999430][ T7035] ? netdev_run_todo+0x864/0x1320 [ 185.999477][ T7035] ? __pfx_wiphy_register+0x10/0x10 [ 185.999543][ T7035] ieee80211_register_hw+0x253d/0x4120 [ 185.999604][ T7035] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 185.999647][ T7035] ? __pfx___debug_object_init+0x10/0x10 [ 185.999696][ T7035] ? find_held_lock+0x2b/0x80 [ 185.999730][ T7035] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 185.999785][ T7035] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 185.999828][ T7035] ? __hrtimer_setup+0x176/0x280 [ 185.999884][ T7035] mac80211_hwsim_new_radio+0x32d8/0x50b0 [ 185.999944][ T7035] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 185.999993][ T7035] hwsim_new_radio_nl+0xba2/0x1330 [ 186.000033][ T7035] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 186.000082][ T7035] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 186.000126][ T7035] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 186.000181][ T7035] genl_family_rcv_msg_doit+0x209/0x2f0 [ 186.000226][ T7035] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 186.000282][ T7035] ? bpf_lsm_capable+0x9/0x10 [ 186.000326][ T7035] ? security_capable+0x7e/0x260 [ 186.000380][ T7035] ? ns_capable+0xd7/0x110 [ 186.000419][ T7035] genl_rcv_msg+0x55c/0x800 [ 186.000464][ T7035] ? __pfx_genl_rcv_msg+0x10/0x10 [ 186.000507][ T7035] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 186.000559][ T7035] netlink_rcv_skb+0x158/0x420 [ 186.000592][ T7035] ? __pfx_genl_rcv_msg+0x10/0x10 [ 186.000634][ T7035] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 186.000688][ T7035] ? netlink_deliver_tap+0x1ae/0xd30 [ 186.000727][ T7035] genl_rcv+0x28/0x40 [ 186.000762][ T7035] netlink_unicast+0x5aa/0x870 [ 186.000802][ T7035] ? __pfx_netlink_unicast+0x10/0x10 [ 186.000837][ T7035] ? __pfx___might_resched+0x10/0x10 [ 186.000910][ T7035] netlink_sendmsg+0x8c8/0xdd0 [ 186.000953][ T7035] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.000995][ T7035] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 186.001051][ T7035] ____sys_sendmsg+0xa98/0xc70 [ 186.001093][ T7035] ? copy_msghdr_from_user+0x10a/0x160 [ 186.001125][ T7035] ? __pfx_____sys_sendmsg+0x10/0x10 [ 186.001177][ T7035] ? __pfx_futex_wake_mark+0x10/0x10 [ 186.001236][ T7035] ___sys_sendmsg+0x134/0x1d0 [ 186.001264][ T7035] ? futex_private_hash_put+0x176/0x300 [ 186.001307][ T7035] ? __pfx____sys_sendmsg+0x10/0x10 [ 186.001342][ T7035] ? __lock_acquire+0x622/0x1c90 [ 186.001441][ T7035] __sys_sendmsg+0x16d/0x220 [ 186.001474][ T7035] ? __pfx___sys_sendmsg+0x10/0x10 [ 186.001505][ T7035] ? __x64_sys_futex+0x1e0/0x4c0 [ 186.001579][ T7035] do_syscall_64+0xcd/0xfa0 [ 186.001618][ T7035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.001651][ T7035] RIP: 0033:0x7fcf6f58efc9 [ 186.001678][ T7035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.001710][ T7035] RSP: 002b:00007fcf70425038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.001739][ T7035] RAX: ffffffffffffffda RBX: 00007fcf6f7e5fa0 RCX: 00007fcf6f58efc9 [ 186.001759][ T7035] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 186.001778][ T7035] RBP: 00007fcf6f611f91 R08: 0000000000000000 R09: 0000000000000000 [ 186.001797][ T7035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.001815][ T7035] R13: 00007fcf6f7e6038 R14: 00007fcf6f7e5fa0 R15: 00007fffed5f26d8 [ 186.001860][ T7035] [ 188.486927][ T7064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.193'. [ 190.076531][ T7087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.198'. [ 190.131291][ T7071] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 190.140863][ T7071] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 190.183212][ T7071] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 190.191809][ T7071] page_type: f5(slab) [ 190.218105][ T7071] raw: 00fff00000000040 ffff88813ffa7140 dead000000000100 dead000000000122 [ 190.233840][ T7071] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 190.252690][ T7071] head: 00fff00000000040 ffff88813ffa7140 dead000000000100 dead000000000122 [ 190.266239][ T7089] FAULT_INJECTION: forcing a failure. [ 190.266239][ T7089] name failslab, interval 1, probability 0, space 0, times 0 [ 190.286029][ T7089] CPU: 1 UID: 0 PID: 7089 Comm: syz.1.197 Not tainted syzkaller #0 PREEMPT(full) [ 190.286073][ T7089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 190.286091][ T7089] Call Trace: [ 190.286101][ T7089] [ 190.286113][ T7089] dump_stack_lvl+0x16c/0x1f0 [ 190.286156][ T7089] should_fail_ex+0x512/0x640 [ 190.286206][ T7089] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 190.286247][ T7089] should_failslab+0xc2/0x120 [ 190.286290][ T7089] __kvmalloc_node_noprof+0x141/0x9c0 [ 190.286328][ T7089] ? apparmor_capable+0x114/0x1d0 [ 190.286375][ T7089] ? __do_sys_swapon+0x13b/0x3a90 [ 190.286424][ T7089] ? __do_sys_swapon+0x13b/0x3a90 [ 190.286462][ T7089] __do_sys_swapon+0x13b/0x3a90 [ 190.286500][ T7089] ? find_held_lock+0x2b/0x80 [ 190.286535][ T7089] ? handle_mm_fault+0x2ab/0xd10 [ 190.286590][ T7089] ? __x64_sys_futex+0x1e0/0x4c0 [ 190.286634][ T7089] ? __x64_sys_futex+0x1e9/0x4c0 [ 190.286679][ T7089] ? exc_page_fault+0x64/0xc0 [ 190.286714][ T7089] ? arch_syscall_is_vdso_sigreturn+0xb6/0x230 [ 190.286764][ T7089] ? __pfx___do_sys_swapon+0x10/0x10 [ 190.286803][ T7089] ? syscall_user_dispatch+0x78/0x140 [ 190.286879][ T7089] do_syscall_64+0xcd/0xfa0 [ 190.286918][ T7089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.286951][ T7089] RIP: 0033:0x7fcf6f58efc9 [ 190.286977][ T7089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.287016][ T7089] RSP: 002b:00007fcf703e3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a7 [ 190.287047][ T7089] RAX: ffffffffffffffda RBX: 00007fcf6f7e6180 RCX: 00007fcf6f58efc9 [ 190.287069][ T7089] RDX: 0000000000000000 RSI: 0000000000007057 RDI: 0000000000000000 [ 190.287088][ T7089] RBP: 00007fcf6f611f91 R08: 0000000000000000 R09: 0000000000000000 [ 190.287108][ T7089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.287127][ T7089] R13: 00007fcf6f7e6218 R14: 00007fcf6f7e6180 R15: 00007fffed5f26d8 [ 190.287171][ T7089] [ 190.293925][ T7071] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 190.575023][ T7071] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 190.602213][ T7071] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 190.614268][ T7071] page dumped because: unmovable page [ 190.622369][ T7071] page_owner tracks the page as allocated [ 190.683890][ T7071] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1156, tgid 1156 (kworker/u8:6), ts 128257194749, free_ts 128254725751 [ 190.706648][ T7071] post_alloc_hook+0x1c0/0x230 [ 190.711614][ T7071] get_page_from_freelist+0x10a3/0x3a30 [ 190.717381][ T7071] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 190.723748][ T7071] alloc_pages_mpol+0x1fb/0x550 [ 190.728798][ T7071] new_slab+0x24a/0x360 [ 190.733711][ T7071] ___slab_alloc+0xdae/0x1a60 [ 190.738581][ T7071] __slab_alloc.constprop.0+0x63/0x110 [ 190.747580][ T7071] __kmalloc_node_track_caller_noprof+0x4db/0x8a0 [ 190.756499][ T7071] kmalloc_reserve+0xef/0x2c0 [ 190.782538][ T7071] __alloc_skb+0x166/0x380 [ 190.787165][ T7071] nsim_dev_trap_report_work+0x2b1/0xcf0 [ 190.803018][ T7071] process_one_work+0x9cf/0x1b70 [ 190.809134][ T7071] worker_thread+0x6c8/0xf10 [ 190.814435][ T7071] kthread+0x3c5/0x780 [ 190.818594][ T7071] ret_from_fork+0x675/0x7d0 [ 190.843038][ T7071] ret_from_fork_asm+0x1a/0x30 [ 190.847936][ T7071] page last free pid 6227 tgid 6220 stack trace: [ 190.862577][ T7071] __free_frozen_pages+0x7df/0x1160 [ 190.868738][ T7071] __folio_put+0x329/0x450 [ 190.873619][ T7071] skb_release_data+0x81a/0x9e0 [ 190.878532][ T7071] sk_skb_reason_drop+0x129/0x1a0 [ 190.884188][ T7071] mptcp_destroy_common+0x77d/0xaf0 [ 190.889475][ T7071] mptcp_destroy+0x9d/0x130 [ 190.895508][ T7071] __mptcp_destroy_sock+0x129/0x320 [ 190.900788][ T7071] __mptcp_close+0x721/0xbe0 [ 190.905929][ T7071] mptcp_close+0x28/0xe0 [ 190.911493][ T7071] inet_release+0xed/0x200 [ 190.917316][ T7071] __sock_release+0xb3/0x270 [ 190.922062][ T7071] sock_close+0x1c/0x30 [ 190.926790][ T7071] __fput+0x402/0xb70 [ 190.930837][ T7071] task_work_run+0x150/0x240 [ 190.935994][ T7071] exit_to_user_mode_loop+0xec/0x130 [ 190.941363][ T7071] do_syscall_64+0x426/0xfa0 [ 191.794549][ T7106] FAULT_INJECTION: forcing a failure. [ 191.794549][ T7106] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.937230][ T7106] CPU: 0 UID: 0 PID: 7106 Comm: syz.0.201 Not tainted syzkaller #0 PREEMPT(full) [ 191.937273][ T7106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 191.937291][ T7106] Call Trace: [ 191.937301][ T7106] [ 191.937313][ T7106] dump_stack_lvl+0x16c/0x1f0 [ 191.937355][ T7106] should_fail_ex+0x512/0x640 [ 191.937414][ T7106] strncpy_from_user+0x3b/0x2e0 [ 191.937463][ T7106] getname_flags.part.0+0x8f/0x550 [ 191.937517][ T7106] getname_flags+0x93/0xf0 [ 191.937549][ T7106] __do_sys_swapon+0x848/0x3a90 [ 191.937592][ T7106] ? handle_mm_fault+0x2ab/0xd10 [ 191.937646][ T7106] ? __x64_sys_futex+0x1e0/0x4c0 [ 191.937690][ T7106] ? __x64_sys_futex+0x1e9/0x4c0 [ 191.937736][ T7106] ? exc_page_fault+0x64/0xc0 [ 191.937784][ T7106] ? arch_syscall_is_vdso_sigreturn+0xb6/0x230 [ 191.937838][ T7106] ? __pfx___do_sys_swapon+0x10/0x10 [ 191.937875][ T7106] ? syscall_user_dispatch+0x78/0x140 [ 191.937940][ T7106] do_syscall_64+0xcd/0xfa0 [ 191.937977][ T7106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.938010][ T7106] RIP: 0033:0x7f4b2a58efc9 [ 191.938037][ T7106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.938067][ T7106] RSP: 002b:00007f4b2b431038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a7 [ 191.938099][ T7106] RAX: ffffffffffffffda RBX: 00007f4b2a7e6090 RCX: 00007f4b2a58efc9 [ 191.938121][ T7106] RDX: 0000000000000000 RSI: 0000000000007057 RDI: 0000000000000000 [ 191.938140][ T7106] RBP: 00007f4b2a611f91 R08: 0000000000000000 R09: 0000000000000000 [ 191.938158][ T7106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.938178][ T7106] R13: 00007f4b2a7e6128 R14: 00007f4b2a7e6090 R15: 00007ffe98d583b8 [ 191.938221][ T7106] [ 192.245778][ T7115] netlink: zone id is out of range [ 193.440046][ T7138] netlink: 8 bytes leftover after parsing attributes in process `syz.3.205'. [ 194.492378][ T7155] FAULT_INJECTION: forcing a failure. [ 194.492378][ T7155] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.543064][ T7155] CPU: 1 UID: 0 PID: 7155 Comm: syz.0.208 Not tainted syzkaller #0 PREEMPT(full) [ 194.543112][ T7155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 194.543133][ T7155] Call Trace: [ 194.543143][ T7155] [ 194.543156][ T7155] dump_stack_lvl+0x16c/0x1f0 [ 194.543198][ T7155] should_fail_ex+0x512/0x640 [ 194.543253][ T7155] strncpy_from_user+0x3b/0x2e0 [ 194.543303][ T7155] getname_flags.part.0+0x8f/0x550 [ 194.543357][ T7155] getname_flags+0x93/0xf0 [ 194.543389][ T7155] __do_sys_swapon+0x848/0x3a90 [ 194.543433][ T7155] ? handle_mm_fault+0x2ab/0xd10 [ 194.543487][ T7155] ? __x64_sys_futex+0x1e0/0x4c0 [ 194.543529][ T7155] ? __x64_sys_futex+0x1e9/0x4c0 [ 194.543574][ T7155] ? exc_page_fault+0x64/0xc0 [ 194.543608][ T7155] ? arch_syscall_is_vdso_sigreturn+0xb6/0x230 [ 194.543657][ T7155] ? __pfx___do_sys_swapon+0x10/0x10 [ 194.543692][ T7155] ? syscall_user_dispatch+0x78/0x140 [ 194.543752][ T7155] do_syscall_64+0xcd/0xfa0 [ 194.543791][ T7155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.543821][ T7155] RIP: 0033:0x7f4b2a58efc9 [ 194.543855][ T7155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.543885][ T7155] RSP: 002b:00007f4b2b452038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a7 [ 194.543915][ T7155] RAX: ffffffffffffffda RBX: 00007f4b2a7e5fa0 RCX: 00007f4b2a58efc9 [ 194.543936][ T7155] RDX: 0000000000000000 RSI: 0000000000007057 RDI: 0000000000000000 [ 194.543955][ T7155] RBP: 00007f4b2a611f91 R08: 0000000000000000 R09: 0000000000000000 [ 194.543973][ T7155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.543993][ T7155] R13: 00007f4b2a7e6038 R14: 00007f4b2a7e5fa0 R15: 00007ffe98d583b8 [ 194.544038][ T7155] [ 195.345016][ T7160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.209'. [ 196.925761][ T7192] FAULT_INJECTION: forcing a failure. [ 196.925761][ T7192] name failslab, interval 1, probability 0, space 0, times 0 [ 196.964222][ T7192] CPU: 1 UID: 0 PID: 7192 Comm: syz.2.213 Not tainted syzkaller #0 PREEMPT(full) [ 196.964266][ T7192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 196.964283][ T7192] Call Trace: [ 196.964290][ T7192] [ 196.964299][ T7192] dump_stack_lvl+0x16c/0x1f0 [ 196.964331][ T7192] should_fail_ex+0x512/0x640 [ 196.964369][ T7192] ? __kmalloc_cache_noprof+0x5f/0x780 [ 196.964417][ T7192] should_failslab+0xc2/0x120 [ 196.964458][ T7192] __kmalloc_cache_noprof+0x72/0x780 [ 196.964499][ T7192] ? percpu_ref_init+0xec/0x410 [ 196.964536][ T7192] ? percpu_ref_init+0xec/0x410 [ 196.964565][ T7192] ? __pfx_swap_users_ref_free+0x10/0x10 [ 196.964591][ T7192] percpu_ref_init+0xec/0x410 [ 196.964625][ T7192] __do_sys_swapon+0x165/0x3a90 [ 196.964654][ T7192] ? find_held_lock+0x2b/0x80 [ 196.964680][ T7192] ? handle_mm_fault+0x2ab/0xd10 [ 196.964721][ T7192] ? __x64_sys_futex+0x1e0/0x4c0 [ 196.964753][ T7192] ? __x64_sys_futex+0x1e9/0x4c0 [ 196.964787][ T7192] ? exc_page_fault+0x64/0xc0 [ 196.964813][ T7192] ? arch_syscall_is_vdso_sigreturn+0xb6/0x230 [ 196.964857][ T7192] ? __pfx___do_sys_swapon+0x10/0x10 [ 196.964885][ T7192] ? syscall_user_dispatch+0x78/0x140 [ 196.964933][ T7192] do_syscall_64+0xcd/0xfa0 [ 196.964962][ T7192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.964986][ T7192] RIP: 0033:0x7ffba7f8efc9 [ 196.965004][ T7192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.965027][ T7192] RSP: 002b:00007ffba8d85038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a7 [ 196.965049][ T7192] RAX: ffffffffffffffda RBX: 00007ffba81e6090 RCX: 00007ffba7f8efc9 [ 196.965065][ T7192] RDX: 0000000000000000 RSI: 0000000000007057 RDI: 0000000000000000 [ 196.965079][ T7192] RBP: 00007ffba8011f91 R08: 0000000000000000 R09: 0000000000000000 [ 196.965094][ T7192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.965108][ T7192] R13: 00007ffba81e6128 R14: 00007ffba81e6090 R15: 00007ffe31094cb8 [ 196.965139][ T7192] [ 198.182739][ T7209] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' [ 198.292096][ T7209] CPU: 1 UID: 0 PID: 7209 Comm: syz.1.217 Not tainted syzkaller #0 PREEMPT(full) [ 198.292136][ T7209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 198.292151][ T7209] Call Trace: [ 198.292159][ T7209] [ 198.292168][ T7209] dump_stack_lvl+0x16c/0x1f0 [ 198.292200][ T7209] sysfs_warn_dup+0x7f/0xa0 [ 198.292231][ T7209] sysfs_do_create_link_sd+0x124/0x140 [ 198.292264][ T7209] sysfs_create_link+0x61/0xc0 [ 198.292295][ T7209] device_add+0x62c/0x1aa0 [ 198.292338][ T7209] ? __pfx_device_add+0x10/0x10 [ 198.292375][ T7209] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 198.292419][ T7209] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 198.292453][ T7209] wiphy_register+0x1eb0/0x2b20 [ 198.292486][ T7209] ? netdev_run_todo+0x864/0x1320 [ 198.292521][ T7209] ? __pfx_wiphy_register+0x10/0x10 [ 198.292577][ T7209] ieee80211_register_hw+0x253d/0x4120 [ 198.292624][ T7209] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 198.292657][ T7209] ? __pfx___debug_object_init+0x10/0x10 [ 198.292693][ T7209] ? find_held_lock+0x2b/0x80 [ 198.292719][ T7209] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 198.292761][ T7209] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 198.292794][ T7209] ? __hrtimer_setup+0x176/0x280 [ 198.292835][ T7209] mac80211_hwsim_new_radio+0x32d8/0x50b0 [ 198.292880][ T7209] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 198.292922][ T7209] hwsim_new_radio_nl+0xba2/0x1330 [ 198.292958][ T7209] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 198.293002][ T7209] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 198.293044][ T7209] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 198.293096][ T7209] genl_family_rcv_msg_doit+0x209/0x2f0 [ 198.293139][ T7209] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 198.293194][ T7209] ? bpf_lsm_capable+0x9/0x10 [ 198.293236][ T7209] ? security_capable+0x7e/0x260 [ 198.293281][ T7209] ? ns_capable+0xd7/0x110 [ 198.293320][ T7209] genl_rcv_msg+0x55c/0x800 [ 198.293365][ T7209] ? __pfx_genl_rcv_msg+0x10/0x10 [ 198.293407][ T7209] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 198.293456][ T7209] netlink_rcv_skb+0x158/0x420 [ 198.293491][ T7209] ? __pfx_genl_rcv_msg+0x10/0x10 [ 198.293532][ T7209] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 198.293592][ T7209] ? netlink_deliver_tap+0x1ae/0xd30 [ 198.293631][ T7209] genl_rcv+0x28/0x40 [ 198.293664][ T7209] netlink_unicast+0x5aa/0x870 [ 198.293704][ T7209] ? __pfx_netlink_unicast+0x10/0x10 [ 198.293737][ T7209] ? __pfx___might_resched+0x10/0x10 [ 198.293781][ T7209] netlink_sendmsg+0x8c8/0xdd0 [ 198.293816][ T7209] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.293846][ T7209] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 198.293887][ T7209] ____sys_sendmsg+0xa98/0xc70 [ 198.293919][ T7209] ? copy_msghdr_from_user+0x10a/0x160 [ 198.293943][ T7209] ? __pfx_____sys_sendmsg+0x10/0x10 [ 198.293981][ T7209] ? __pfx_futex_wake_mark+0x10/0x10 [ 198.294025][ T7209] ___sys_sendmsg+0x134/0x1d0 [ 198.294045][ T7209] ? futex_private_hash_put+0x176/0x300 [ 198.294077][ T7209] ? __pfx____sys_sendmsg+0x10/0x10 [ 198.294098][ T7209] ? __lock_acquire+0x622/0x1c90 [ 198.294169][ T7209] __sys_sendmsg+0x16d/0x220 [ 198.294195][ T7209] ? __pfx___sys_sendmsg+0x10/0x10 [ 198.294217][ T7209] ? __x64_sys_futex+0x1e0/0x4c0 [ 198.294269][ T7209] do_syscall_64+0xcd/0xfa0 [ 198.294300][ T7209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.294325][ T7209] RIP: 0033:0x7fcf6f58efc9 [ 198.294344][ T7209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.294367][ T7209] RSP: 002b:00007fcf70425038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 198.294390][ T7209] RAX: ffffffffffffffda RBX: 00007fcf6f7e5fa0 RCX: 00007fcf6f58efc9 [ 198.294406][ T7209] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 198.294421][ T7209] RBP: 00007fcf6f611f91 R08: 0000000000000000 R09: 0000000000000000 [ 198.294435][ T7209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 198.294450][ T7209] R13: 00007fcf6f7e6038 R14: 00007fcf6f7e5fa0 R15: 00007fffed5f26d8 [ 198.294483][ T7209] [ 201.573420][ T7264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.221'. [ 202.715159][ T7273] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 202.729518][ T7273] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 203.263793][ T7294] FAULT_INJECTION: forcing a failure. [ 203.263793][ T7294] name failslab, interval 1, probability 0, space 0, times 0 [ 203.303337][ T7294] CPU: 1 UID: 0 PID: 7294 Comm: syz.0.225 Not tainted syzkaller #0 PREEMPT(full) [ 203.303383][ T7294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 203.303398][ T7294] Call Trace: [ 203.303405][ T7294] [ 203.303414][ T7294] dump_stack_lvl+0x16c/0x1f0 [ 203.303445][ T7294] should_fail_ex+0x512/0x640 [ 203.303481][ T7294] ? __kmalloc_cache_noprof+0x5f/0x780 [ 203.303524][ T7294] should_failslab+0xc2/0x120 [ 203.303556][ T7294] __kmalloc_cache_noprof+0x72/0x780 [ 203.303596][ T7294] ? percpu_ref_init+0xec/0x410 [ 203.303630][ T7294] ? percpu_ref_init+0xec/0x410 [ 203.303659][ T7294] ? __pfx_swap_users_ref_free+0x10/0x10 [ 203.303684][ T7294] percpu_ref_init+0xec/0x410 [ 203.303717][ T7294] __do_sys_swapon+0x165/0x3a90 [ 203.303745][ T7294] ? find_held_lock+0x2b/0x80 [ 203.303770][ T7294] ? handle_mm_fault+0x2ab/0xd10 [ 203.303810][ T7294] ? __x64_sys_futex+0x1e0/0x4c0 [ 203.303841][ T7294] ? __x64_sys_futex+0x1e9/0x4c0 [ 203.303874][ T7294] ? exc_page_fault+0x64/0xc0 [ 203.303899][ T7294] ? arch_syscall_is_vdso_sigreturn+0xb6/0x230 [ 203.303938][ T7294] ? __pfx___do_sys_swapon+0x10/0x10 [ 203.303965][ T7294] ? syscall_user_dispatch+0x78/0x140 [ 203.304012][ T7294] do_syscall_64+0xcd/0xfa0 [ 203.304040][ T7294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.304063][ T7294] RIP: 0033:0x7f4b2a58efc9 [ 203.304081][ T7294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.304104][ T7294] RSP: 002b:00007f4b2b431038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a7 [ 203.304126][ T7294] RAX: ffffffffffffffda RBX: 00007f4b2a7e6090 RCX: 00007f4b2a58efc9 [ 203.304142][ T7294] RDX: 0000000000000000 RSI: 0000000000007057 RDI: 0000000000000000 [ 203.304156][ T7294] RBP: 00007f4b2a611f91 R08: 0000000000000000 R09: 0000000000000000 [ 203.304171][ T7294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.304191][ T7294] R13: 00007f4b2a7e6128 R14: 00007f4b2a7e6090 R15: 00007ffe98d583b8 [ 203.304222][ T7294] [ 204.696639][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.710682][ T7303] netlink: zone id is out of range [ 204.718644][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 205.816186][ T7325] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' [ 205.860111][ T7325] CPU: 0 UID: 0 PID: 7325 Comm: syz.1.232 Not tainted syzkaller #0 PREEMPT(full) [ 205.860154][ T7325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 205.860173][ T7325] Call Trace: [ 205.860183][ T7325] [ 205.860194][ T7325] dump_stack_lvl+0x16c/0x1f0 [ 205.860233][ T7325] sysfs_warn_dup+0x7f/0xa0 [ 205.860269][ T7325] sysfs_do_create_link_sd+0x124/0x140 [ 205.860309][ T7325] sysfs_create_link+0x61/0xc0 [ 205.860346][ T7325] device_add+0x62c/0x1aa0 [ 205.860396][ T7325] ? __pfx_device_add+0x10/0x10 [ 205.860438][ T7325] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 205.860490][ T7325] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 205.860530][ T7325] wiphy_register+0x1eb0/0x2b20 [ 205.860568][ T7325] ? netdev_run_todo+0x864/0x1320 [ 205.860609][ T7325] ? __pfx_wiphy_register+0x10/0x10 [ 205.860665][ T7325] ieee80211_register_hw+0x253d/0x4120 [ 205.860719][ T7325] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 205.860758][ T7325] ? __pfx___debug_object_init+0x10/0x10 [ 205.860801][ T7325] ? find_held_lock+0x2b/0x80 [ 205.860841][ T7325] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 205.860905][ T7325] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 205.860946][ T7325] ? __hrtimer_setup+0x176/0x280 [ 205.860995][ T7325] mac80211_hwsim_new_radio+0x32d8/0x50b0 [ 205.861049][ T7325] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 205.861092][ T7325] hwsim_new_radio_nl+0xba2/0x1330 [ 205.861127][ T7325] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 205.861173][ T7325] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 205.861215][ T7325] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 205.861265][ T7325] genl_family_rcv_msg_doit+0x209/0x2f0 [ 205.861309][ T7325] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 205.861364][ T7325] ? bpf_lsm_capable+0x9/0x10 [ 205.861405][ T7325] ? security_capable+0x7e/0x260 [ 205.861451][ T7325] ? ns_capable+0xd7/0x110 [ 205.861489][ T7325] genl_rcv_msg+0x55c/0x800 [ 205.861534][ T7325] ? __pfx_genl_rcv_msg+0x10/0x10 [ 205.861575][ T7325] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 205.861627][ T7325] netlink_rcv_skb+0x158/0x420 [ 205.861661][ T7325] ? __pfx_genl_rcv_msg+0x10/0x10 [ 205.861714][ T7325] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 205.861766][ T7325] ? netlink_deliver_tap+0x1ae/0xd30 [ 205.861802][ T7325] genl_rcv+0x28/0x40 [ 205.861850][ T7325] netlink_unicast+0x5aa/0x870 [ 205.861892][ T7325] ? __pfx_netlink_unicast+0x10/0x10 [ 205.861925][ T7325] ? __pfx___might_resched+0x10/0x10 [ 205.861971][ T7325] netlink_sendmsg+0x8c8/0xdd0 [ 205.862012][ T7325] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.862050][ T7325] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 205.862102][ T7325] ____sys_sendmsg+0xa98/0xc70 [ 205.862145][ T7325] ? copy_msghdr_from_user+0x10a/0x160 [ 205.862174][ T7325] ? __pfx_____sys_sendmsg+0x10/0x10 [ 205.862234][ T7325] ___sys_sendmsg+0x134/0x1d0 [ 205.862261][ T7325] ? futex_private_hash_put+0x176/0x300 [ 205.862301][ T7325] ? __pfx____sys_sendmsg+0x10/0x10 [ 205.862324][ T7325] ? __lock_acquire+0x622/0x1c90 [ 205.862410][ T7325] __sys_sendmsg+0x16d/0x220 [ 205.862438][ T7325] ? __pfx___sys_sendmsg+0x10/0x10 [ 205.862465][ T7325] ? __x64_sys_futex+0x1e0/0x4c0 [ 205.862532][ T7325] do_syscall_64+0xcd/0xfa0 [ 205.862575][ T7325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.862609][ T7325] RIP: 0033:0x7fcf6f58efc9 [ 205.862635][ T7325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.862666][ T7325] RSP: 002b:00007fcf70425038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 205.862697][ T7325] RAX: ffffffffffffffda RBX: 00007fcf6f7e5fa0 RCX: 00007fcf6f58efc9 [ 205.862719][ T7325] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 205.862740][ T7325] RBP: 00007fcf6f611f91 R08: 0000000000000000 R09: 0000000000000000 [ 205.862760][ T7325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.862779][ T7325] R13: 00007fcf6f7e6038 R14: 00007fcf6f7e5fa0 R15: 00007fffed5f26d8 [ 205.862834][ T7325] [ 206.430448][ T7331] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 206.454342][ T7331] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 206.517293][ T7329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.233'. [ 207.380008][ T7352] FAULT_INJECTION: forcing a failure. [ 207.380008][ T7352] name failslab, interval 1, probability 0, space 0, times 0 [ 207.403719][ T7352] CPU: 1 UID: 0 PID: 7352 Comm: syz.3.235 Not tainted syzkaller #0 PREEMPT(full) [ 207.403775][ T7352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 207.403795][ T7352] Call Trace: [ 207.403806][ T7352] [ 207.403818][ T7352] dump_stack_lvl+0x16c/0x1f0 [ 207.403862][ T7352] should_fail_ex+0x512/0x640 [ 207.403910][ T7352] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 207.403948][ T7352] should_failslab+0xc2/0x120 [ 207.403992][ T7352] kmem_cache_alloc_noprof+0x75/0x6e0 [ 207.404025][ T7352] ? security_file_alloc+0x34/0x2b0 [ 207.404068][ T7352] ? security_file_alloc+0x34/0x2b0 [ 207.404098][ T7352] security_file_alloc+0x34/0x2b0 [ 207.404131][ T7352] init_file+0x93/0x4c0 [ 207.404176][ T7352] alloc_empty_file+0x73/0x1e0 [ 207.404223][ T7352] alloc_file_pseudo+0x13a/0x230 [ 207.404272][ T7352] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 207.404319][ T7352] ? __pfx_unix_socketpair+0x10/0x10 [ 207.404373][ T7352] sock_alloc_file+0x50/0x210 [ 207.404410][ T7352] __sys_socketpair+0x31c/0x5a0 [ 207.404457][ T7352] ? __pfx___sys_socketpair+0x10/0x10 [ 207.404502][ T7352] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 207.404544][ T7352] ? xfd_validate_state+0x61/0x180 [ 207.404589][ T7352] ? __pfx___do_sys_close_range+0x10/0x10 [ 207.404633][ T7352] __x64_sys_socketpair+0x96/0x100 [ 207.404675][ T7352] ? lockdep_hardirqs_on+0x7c/0x110 [ 207.404711][ T7352] do_syscall_64+0xcd/0xfa0 [ 207.404761][ T7352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.404794][ T7352] RIP: 0033:0x7fa7c718efc9 [ 207.404820][ T7352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.404852][ T7352] RSP: 002b:00007fa7c8112038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 207.404883][ T7352] RAX: ffffffffffffffda RBX: 00007fa7c73e5fa0 RCX: 00007fa7c718efc9 [ 207.404905][ T7352] RDX: 8000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 207.404925][ T7352] RBP: 00007fa7c7211f91 R08: 0000000000000000 R09: 0000000000000000 [ 207.404944][ T7352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 207.404962][ T7352] R13: 00007fa7c73e6038 R14: 00007fa7c73e5fa0 R15: 00007ffd75c0fea8 [ 207.405006][ T7352] [ 207.904652][ T7349] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' [ 207.982738][ T7349] CPU: 0 UID: 0 PID: 7349 Comm: syz.0.234 Not tainted syzkaller #0 PREEMPT(full) [ 207.982782][ T7349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 207.982801][ T7349] Call Trace: [ 207.982812][ T7349] [ 207.982823][ T7349] dump_stack_lvl+0x16c/0x1f0 [ 207.982866][ T7349] sysfs_warn_dup+0x7f/0xa0 [ 207.982910][ T7349] sysfs_do_create_link_sd+0x124/0x140 [ 207.982953][ T7349] sysfs_create_link+0x61/0xc0 [ 207.982993][ T7349] device_add+0x62c/0x1aa0 [ 207.983048][ T7349] ? __pfx_device_add+0x10/0x10 [ 207.983099][ T7349] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 207.983158][ T7349] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 207.983205][ T7349] wiphy_register+0x1eb0/0x2b20 [ 207.983248][ T7349] ? netdev_run_todo+0x864/0x1320 [ 207.983296][ T7349] ? __pfx_wiphy_register+0x10/0x10 [ 207.983364][ T7349] ieee80211_register_hw+0x253d/0x4120 [ 207.983426][ T7349] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 207.983469][ T7349] ? __pfx___debug_object_init+0x10/0x10 [ 207.983519][ T7349] ? find_held_lock+0x2b/0x80 [ 207.983553][ T7349] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 207.983610][ T7349] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 207.983655][ T7349] ? __hrtimer_setup+0x176/0x280 [ 207.983717][ T7349] mac80211_hwsim_new_radio+0x32d8/0x50b0 [ 207.983789][ T7349] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 207.983840][ T7349] hwsim_new_radio_nl+0xba2/0x1330 [ 207.983879][ T7349] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 207.983928][ T7349] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 207.983971][ T7349] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 207.984026][ T7349] genl_family_rcv_msg_doit+0x209/0x2f0 [ 207.984070][ T7349] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 207.984125][ T7349] ? bpf_lsm_capable+0x9/0x10 [ 207.984167][ T7349] ? security_capable+0x7e/0x260 [ 207.984213][ T7349] ? ns_capable+0xd7/0x110 [ 207.984250][ T7349] genl_rcv_msg+0x55c/0x800 [ 207.984293][ T7349] ? __pfx_genl_rcv_msg+0x10/0x10 [ 207.984334][ T7349] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 207.984384][ T7349] netlink_rcv_skb+0x158/0x420 [ 207.984417][ T7349] ? __pfx_genl_rcv_msg+0x10/0x10 [ 207.984459][ T7349] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 207.984512][ T7349] ? netlink_deliver_tap+0x1ae/0xd30 [ 207.984550][ T7349] genl_rcv+0x28/0x40 [ 207.984582][ T7349] netlink_unicast+0x5aa/0x870 [ 207.984620][ T7349] ? __pfx_netlink_unicast+0x10/0x10 [ 207.984654][ T7349] ? __pfx___might_resched+0x10/0x10 [ 207.984701][ T7349] netlink_sendmsg+0x8c8/0xdd0 [ 207.984753][ T7349] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.984792][ T7349] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 207.984845][ T7349] ____sys_sendmsg+0xa98/0xc70 [ 207.984886][ T7349] ? copy_msghdr_from_user+0x10a/0x160 [ 207.984916][ T7349] ? __pfx_____sys_sendmsg+0x10/0x10 [ 207.984963][ T7349] ? __pfx_futex_wake_mark+0x10/0x10 [ 207.985021][ T7349] ___sys_sendmsg+0x134/0x1d0 [ 207.985051][ T7349] ? futex_private_hash_put+0x176/0x300 [ 207.985094][ T7349] ? __pfx____sys_sendmsg+0x10/0x10 [ 207.985122][ T7349] ? __lock_acquire+0x622/0x1c90 [ 207.985220][ T7349] __sys_sendmsg+0x16d/0x220 [ 207.985253][ T7349] ? __pfx___sys_sendmsg+0x10/0x10 [ 207.985284][ T7349] ? __x64_sys_futex+0x1e0/0x4c0 [ 207.985353][ T7349] do_syscall_64+0xcd/0xfa0 [ 207.985393][ T7349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.985425][ T7349] RIP: 0033:0x7f4b2a58efc9 [ 207.985453][ T7349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.985486][ T7349] RSP: 002b:00007f4b2b452038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 207.985519][ T7349] RAX: ffffffffffffffda RBX: 00007f4b2a7e5fa0 RCX: 00007f4b2a58efc9 [ 207.985541][ T7349] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 207.985562][ T7349] RBP: 00007f4b2a611f91 R08: 0000000000000000 R09: 0000000000000000 [ 207.985581][ T7349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 207.985601][ T7349] R13: 00007f4b2a7e6038 R14: 00007f4b2a7e5fa0 R15: 00007ffe98d583b8 [ 207.985648][ T7349] [ 208.488294][ T7362] FAULT_INJECTION: forcing a failure. [ 208.488294][ T7362] name failslab, interval 1, probability 0, space 0, times 0 [ 208.558887][ T7362] CPU: 1 UID: 0 PID: 7362 Comm: syz.3.236 Not tainted syzkaller #0 PREEMPT(full) [ 208.558930][ T7362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 208.558950][ T7362] Call Trace: [ 208.558960][ T7362] [ 208.558972][ T7362] dump_stack_lvl+0x16c/0x1f0 [ 208.559015][ T7362] should_fail_ex+0x512/0x640 [ 208.559065][ T7362] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 208.559114][ T7362] should_failslab+0xc2/0x120 [ 208.559161][ T7362] __kvmalloc_node_noprof+0x141/0x9c0 [ 208.559200][ T7362] ? apparmor_capable+0x114/0x1d0 [ 208.559250][ T7362] ? __do_sys_swapon+0x13b/0x3a90 [ 208.559298][ T7362] ? __do_sys_swapon+0x13b/0x3a90 [ 208.559333][ T7362] __do_sys_swapon+0x13b/0x3a90 [ 208.559371][ T7362] ? find_held_lock+0x2b/0x80 [ 208.559407][ T7362] ? handle_mm_fault+0x2ab/0xd10 [ 208.559464][ T7362] ? __x64_sys_futex+0x1e0/0x4c0 [ 208.559530][ T7362] ? __x64_sys_futex+0x1e9/0x4c0 [ 208.559579][ T7362] ? exc_page_fault+0x64/0xc0 [ 208.559616][ T7362] ? arch_syscall_is_vdso_sigreturn+0xb6/0x230 [ 208.559671][ T7362] ? __pfx___do_sys_swapon+0x10/0x10 [ 208.559709][ T7362] ? syscall_user_dispatch+0x78/0x140 [ 208.559783][ T7362] do_syscall_64+0xcd/0xfa0 [ 208.559822][ T7362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.559857][ T7362] RIP: 0033:0x7fa7c718efc9 [ 208.559884][ T7362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.559915][ T7362] RSP: 002b:00007fa7c80d0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a7 [ 208.559947][ T7362] RAX: ffffffffffffffda RBX: 00007fa7c73e6180 RCX: 00007fa7c718efc9 [ 208.559969][ T7362] RDX: 0000000000000000 RSI: 0000000000007057 RDI: 0000000000000000 [ 208.559990][ T7362] RBP: 00007fa7c7211f91 R08: 0000000000000000 R09: 0000000000000000 [ 208.560010][ T7362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.560029][ T7362] R13: 00007fa7c73e6218 R14: 00007fa7c73e6180 R15: 00007ffd75c0fea8 [ 208.560079][ T7362] [ 210.287786][ T7392] netlink: zone id is out of range [ 210.976271][ T7399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.241'. [ 212.556193][ T7424] FAULT_INJECTION: forcing a failure. [ 212.556193][ T7424] name fail_futex, interval 1, probability 0, space 0, times 1 [ 212.646446][ T7412] netlink: zone id is out of range [ 212.678279][ T7424] CPU: 0 UID: 0 PID: 7424 Comm: syz.0.245 Not tainted syzkaller #0 PREEMPT(full) [ 212.678320][ T7424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 212.678341][ T7424] Call Trace: [ 212.678349][ T7424] [ 212.678358][ T7424] dump_stack_lvl+0x16c/0x1f0 [ 212.678389][ T7424] should_fail_ex+0x512/0x640 [ 212.678435][ T7424] get_futex_key+0x293/0x1560 [ 212.678481][ T7424] ? __pfx_get_futex_key+0x10/0x10 [ 212.678513][ T7424] ? __mutex_trylock_common+0xe9/0x250 [ 212.678559][ T7424] futex_wake+0xea/0x530 [ 212.678600][ T7424] ? __pfx_futex_wake+0x10/0x10 [ 212.678635][ T7424] ? __lock_acquire+0xb8a/0x1c90 [ 212.678681][ T7424] do_futex+0x1e3/0x350 [ 212.678720][ T7424] ? __pfx_do_futex+0x10/0x10 [ 212.678756][ T7424] ? __might_fault+0xe3/0x190 [ 212.678788][ T7424] mm_release+0x24e/0x300 [ 212.678815][ T7424] do_exit+0x68e/0x2bf0 [ 212.678853][ T7424] ? __pfx_do_exit+0x10/0x10 [ 212.678886][ T7424] ? do_raw_spin_lock+0x12c/0x2b0 [ 212.678923][ T7424] ? find_held_lock+0x2b/0x80 [ 212.678951][ T7424] do_group_exit+0xd3/0x2a0 [ 212.678987][ T7424] get_signal+0x2671/0x26d0 [ 212.679021][ T7424] ? lock_acquire+0x179/0x350 [ 212.679054][ T7424] ? __pfx_get_signal+0x10/0x10 [ 212.679081][ T7424] ? do_futex+0x122/0x350 [ 212.679113][ T7424] ? __pfx_do_futex+0x10/0x10 [ 212.679148][ T7424] arch_do_signal_or_restart+0x8f/0x790 [ 212.679180][ T7424] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 212.679226][ T7424] ? xfd_validate_state+0x61/0x180 [ 212.679279][ T7424] ? __pfx___do_sys_close_range+0x10/0x10 [ 212.679321][ T7424] exit_to_user_mode_loop+0x85/0x130 [ 212.679370][ T7424] do_syscall_64+0x426/0xfa0 [ 212.679409][ T7424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.679441][ T7424] RIP: 0033:0x7f4b2a58efc9 [ 212.679465][ T7424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.679495][ T7424] RSP: 002b:00007f4b2b4520e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 212.679524][ T7424] RAX: fffffffffffffe00 RBX: 00007f4b2a7e5fa8 RCX: 00007f4b2a58efc9 [ 212.679543][ T7424] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4b2a7e5fa8 [ 212.679562][ T7424] RBP: 00007f4b2a7e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 212.679582][ T7424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.679600][ T7424] R13: 00007f4b2a7e6038 R14: 00007ffe98d582d0 R15: 00007ffe98d583b8 [ 212.679640][ T7424] [ 214.247555][ T7430] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 214.256052][ T7430] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 214.304060][ T7445] netlink: zone id is out of range [ 214.385371][ T7426] kexec: Could not allocate control_code_buffer [ 216.693998][ T7475] FAULT_INJECTION: forcing a failure. [ 216.693998][ T7475] name failslab, interval 1, probability 0, space 0, times 0 [ 216.747167][ T7475] CPU: 1 UID: 0 PID: 7475 Comm: syz.1.257 Not tainted syzkaller #0 PREEMPT(full) [ 216.747210][ T7475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 216.747229][ T7475] Call Trace: [ 216.747240][ T7475] [ 216.747252][ T7475] dump_stack_lvl+0x16c/0x1f0 [ 216.747294][ T7475] should_fail_ex+0x512/0x640 [ 216.747343][ T7475] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 216.747381][ T7475] should_failslab+0xc2/0x120 [ 216.747437][ T7475] kmem_cache_alloc_noprof+0x75/0x6e0 [ 216.747470][ T7475] ? alloc_empty_file+0x55/0x1e0 [ 216.747521][ T7475] ? alloc_empty_file+0x55/0x1e0 [ 216.747558][ T7475] ? _raw_spin_unlock+0x28/0x50 [ 216.747586][ T7475] alloc_empty_file+0x55/0x1e0 [ 216.747634][ T7475] alloc_file_pseudo+0x13a/0x230 [ 216.747683][ T7475] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 216.747732][ T7475] ? __pfx_unix_socketpair+0x10/0x10 [ 216.747784][ T7475] sock_alloc_file+0x50/0x210 [ 216.747819][ T7475] __sys_socketpair+0x34e/0x5a0 [ 216.747865][ T7475] ? __pfx___sys_socketpair+0x10/0x10 [ 216.747905][ T7475] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 216.747947][ T7475] ? xfd_validate_state+0x61/0x180 [ 216.747992][ T7475] ? __pfx___do_sys_close_range+0x10/0x10 [ 216.748036][ T7475] __x64_sys_socketpair+0x96/0x100 [ 216.748081][ T7475] ? lockdep_hardirqs_on+0x7c/0x110 [ 216.748117][ T7475] do_syscall_64+0xcd/0xfa0 [ 216.748157][ T7475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.748189][ T7475] RIP: 0033:0x7fcf6f58efc9 [ 216.748215][ T7475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.748246][ T7475] RSP: 002b:00007fcf70425038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 216.748277][ T7475] RAX: ffffffffffffffda RBX: 00007fcf6f7e5fa0 RCX: 00007fcf6f58efc9 [ 216.748300][ T7475] RDX: 8000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 216.748321][ T7475] RBP: 00007fcf6f611f91 R08: 0000000000000000 R09: 0000000000000000 [ 216.748341][ T7475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.748361][ T7475] R13: 00007fcf6f7e6038 R14: 00007fcf6f7e5fa0 R15: 00007fffed5f26d8 [ 216.748417][ T7475] [ 217.451982][ T7467] netlink: zone id is out of range [ 218.101426][ T7488] Unable to find swap-space signature [ 218.374873][ T7498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.261'. [ 218.967813][ T7505] FAULT_INJECTION: forcing a failure. [ 218.967813][ T7505] name failslab, interval 1, probability 0, space 0, times 0 [ 218.980855][ T7505] CPU: 1 UID: 0 PID: 7505 Comm: syz.2.263 Not tainted syzkaller #0 PREEMPT(full) [ 218.980889][ T7505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 218.980903][ T7505] Call Trace: [ 218.980910][ T7505] [ 218.980920][ T7505] dump_stack_lvl+0x16c/0x1f0 [ 218.980951][ T7505] should_fail_ex+0x512/0x640 [ 218.980989][ T7505] ? __kmalloc_cache_noprof+0x5f/0x780 [ 218.981033][ T7505] should_failslab+0xc2/0x120 [ 218.981066][ T7505] __kmalloc_cache_noprof+0x72/0x780 [ 218.981143][ T7505] ? percpu_ref_init+0xec/0x410 [ 218.981180][ T7505] ? percpu_ref_init+0xec/0x410 [ 218.981210][ T7505] ? __pfx_swap_users_ref_free+0x10/0x10 [ 218.981237][ T7505] percpu_ref_init+0xec/0x410 [ 218.981271][ T7505] __do_sys_swapon+0x165/0x3a90 [ 218.981300][ T7505] ? find_held_lock+0x2b/0x80 [ 218.981327][ T7505] ? handle_mm_fault+0x2ab/0xd10 [ 218.981459][ T7505] ? __x64_sys_futex+0x1e0/0x4c0 [ 218.981496][ T7505] ? __x64_sys_futex+0x1e9/0x4c0 [ 218.981531][ T7505] ? exc_page_fault+0x64/0xc0 [ 218.981557][ T7505] ? arch_syscall_is_vdso_sigreturn+0xb6/0x230 [ 218.981599][ T7505] ? __pfx___do_sys_swapon+0x10/0x10 [ 218.981629][ T7505] ? syscall_user_dispatch+0x78/0x140 [ 218.981679][ T7505] do_syscall_64+0xcd/0xfa0 [ 218.981710][ T7505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.981736][ T7505] RIP: 0033:0x7ffba7f8efc9 [ 218.981756][ T7505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.981780][ T7505] RSP: 002b:00007ffba8d85038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a7 [ 218.981804][ T7505] RAX: ffffffffffffffda RBX: 00007ffba81e6090 RCX: 00007ffba7f8efc9 [ 218.981820][ T7505] RDX: 0000000000000000 RSI: 0000000000007057 RDI: 0000000000000000 [ 218.981836][ T7505] RBP: 00007ffba8011f91 R08: 0000000000000000 R09: 0000000000000000 [ 218.981851][ T7505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.981867][ T7505] R13: 00007ffba81e6128 R14: 00007ffba81e6090 R15: 00007ffe31094cb8 [ 218.981900][ T7505] [ 220.057112][ T7513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.265'. [ 220.661076][ T7524] ================================================================== [ 220.661097][ T7524] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1a6f/0x1e60 [ 220.661141][ T7524] Write of size 8 at addr ffffc900038493e0 by task syz.3.267/7524 [ 220.661171][ T7524] [ 220.661185][ T7524] CPU: 0 UID: 0 PID: 7524 Comm: syz.3.267 Not tainted syzkaller #0 PREEMPT(full) [ 220.661221][ T7524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 220.661248][ T7524] Call Trace: [ 220.661259][ T7524] [ 220.661270][ T7524] dump_stack_lvl+0x116/0x1f0 [ 220.661306][ T7524] print_report+0xcd/0x630 [ 220.661344][ T7524] ? __virt_addr_valid+0x81/0x610 [ 220.661385][ T7524] ? sys_imageblit+0x1a6f/0x1e60 [ 220.661416][ T7524] kasan_report+0xe0/0x110 [ 220.661454][ T7524] ? sys_imageblit+0x1a6f/0x1e60 [ 220.661489][ T7524] sys_imageblit+0x1a6f/0x1e60 [ 220.661525][ T7524] ? __pfx_sys_imageblit+0x10/0x10 [ 220.661557][ T7524] ? __pfx__prb_read_valid+0x10/0x10 [ 220.661597][ T7524] ? find_held_lock+0x2b/0x80 [ 220.661626][ T7524] ? up+0xcb/0x140 [ 220.661658][ T7524] ? do_raw_spin_unlock+0x172/0x230 [ 220.661707][ T7524] ? prb_read_valid+0x78/0xa0 [ 220.661750][ T7524] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 220.661788][ T7524] soft_cursor+0x524/0xa10 [ 220.661840][ T7524] ? fb_get_color_depth+0x120/0x250 [ 220.661889][ T7524] bit_cursor+0xe8c/0x17e0 [ 220.661942][ T7524] ? __pfx_bit_cursor+0x10/0x10 [ 220.661998][ T7524] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 220.662052][ T7524] ? get_color+0x1da/0x450 [ 220.662094][ T7524] ? __pfx_bit_cursor+0x10/0x10 [ 220.662142][ T7524] fbcon_cursor+0x40c/0x5a0 [ 220.662186][ T7524] ? add_softcursor+0x61/0x290 [ 220.662217][ T7524] set_cursor+0x1db/0x250 [ 220.662255][ T7524] con_write+0x89/0xb0 [ 220.662290][ T7524] n_tty_write+0x41e/0x11e0 [ 220.662343][ T7524] ? __pfx_n_tty_write+0x10/0x10 [ 220.662386][ T7524] ? trace_kmalloc+0x2b/0xd0 [ 220.662425][ T7524] ? __pfx_woken_wake_function+0x10/0x10 [ 220.662479][ T7524] ? kfree+0x252/0x6d0 [ 220.662507][ T7524] ? __pfx_n_tty_write+0x10/0x10 [ 220.662550][ T7524] file_tty_write.constprop.0+0x503/0x9b0 [ 220.662593][ T7524] redirected_tty_write+0xd4/0x150 [ 220.662629][ T7524] vfs_write+0x7d3/0x11d0 [ 220.662664][ T7524] ? __pfx_redirected_tty_write+0x10/0x10 [ 220.662702][ T7524] ? __pfx_vfs_write+0x10/0x10 [ 220.662734][ T7524] ? find_held_lock+0x2b/0x80 [ 220.662779][ T7524] ksys_write+0x12a/0x250 [ 220.662812][ T7524] ? __pfx_ksys_write+0x10/0x10 [ 220.662853][ T7524] do_syscall_64+0xcd/0xfa0 [ 220.662891][ T7524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.662930][ T7524] RIP: 0033:0x7fa7c718efc9 [ 220.662954][ T7524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.662985][ T7524] RSP: 002b:00007fa7c80f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 220.663014][ T7524] RAX: ffffffffffffffda RBX: 00007fa7c73e6090 RCX: 00007fa7c718efc9 [ 220.663035][ T7524] RDX: 0000000000000d4f RSI: 0000200000000840 RDI: 0000000000000002 [ 220.663056][ T7524] RBP: 00007fa7c7211f91 R08: 0000000000000000 R09: 0000000000000000 [ 220.663080][ T7524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 220.663100][ T7524] R13: 00007fa7c73e6128 R14: 00007fa7c73e6090 R15: 00007ffd75c0fea8 [ 220.663132][ T7524] [ 220.663142][ T7524] [ 220.663150][ T7524] The buggy address belongs to a vmalloc virtual mapping [ 220.663172][ T7524] Memory state around the buggy address: [ 220.663190][ T7524] ffffc90003849280: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 220.663214][ T7524] ffffc90003849300: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 220.663248][ T7524] >ffffc90003849380: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 220.663267][ T7524] ^ [ 220.663286][ T7524] ffffc90003849400: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 220.663311][ T7524] ffffc90003849480: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 220.663331][ T7524] ================================================================== [ 220.682049][ T7524] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 220.682079][ T7524] CPU: 0 UID: 0 PID: 7524 Comm: syz.3.267 Not tainted syzkaller #0 PREEMPT(full) [ 220.682121][ T7524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 220.682141][ T7524] Call Trace: [ 220.682153][ T7524] [ 220.682166][ T7524] dump_stack_lvl+0x3d/0x1f0 [ 220.682209][ T7524] vpanic+0x640/0x6f0 [ 220.682267][ T7524] panic+0xca/0xd0 [ 220.682310][ T7524] ? __pfx_panic+0x10/0x10 [ 220.682356][ T7524] ? sys_imageblit+0x1a6f/0x1e60 [ 220.682394][ T7524] ? preempt_schedule_common+0x44/0xc0 [ 220.682430][ T7524] ? preempt_schedule_thunk+0x16/0x30 [ 220.682479][ T7524] check_panic_on_warn+0xab/0xb0 [ 220.682529][ T7524] end_report+0x107/0x170 [ 220.682571][ T7524] kasan_report+0xee/0x110 [ 220.682614][ T7524] ? sys_imageblit+0x1a6f/0x1e60 [ 220.682658][ T7524] sys_imageblit+0x1a6f/0x1e60 [ 220.682704][ T7524] ? __pfx_sys_imageblit+0x10/0x10 [ 220.682741][ T7524] ? __pfx__prb_read_valid+0x10/0x10 [ 220.682789][ T7524] ? find_held_lock+0x2b/0x80 [ 220.682823][ T7524] ? up+0xcb/0x140 [ 220.682860][ T7524] ? do_raw_spin_unlock+0x172/0x230 [ 220.682919][ T7524] ? prb_read_valid+0x78/0xa0 [ 220.682975][ T7524] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 220.683014][ T7524] soft_cursor+0x524/0xa10 [ 220.683065][ T7524] ? fb_get_color_depth+0x120/0x250 [ 220.683114][ T7524] bit_cursor+0xe8c/0x17e0 [ 220.683167][ T7524] ? __pfx_bit_cursor+0x10/0x10 [ 220.683223][ T7524] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 220.683291][ T7524] ? get_color+0x1da/0x450 [ 220.683335][ T7524] ? __pfx_bit_cursor+0x10/0x10 [ 220.683385][ T7524] fbcon_cursor+0x40c/0x5a0 [ 220.683429][ T7524] ? add_softcursor+0x61/0x290 [ 220.683463][ T7524] set_cursor+0x1db/0x250 [ 220.683492][ T7524] con_write+0x89/0xb0 [ 220.683528][ T7524] n_tty_write+0x41e/0x11e0 [ 220.683583][ T7524] ? __pfx_n_tty_write+0x10/0x10 [ 220.683627][ T7524] ? trace_kmalloc+0x2b/0xd0 [ 220.683668][ T7524] ? __pfx_woken_wake_function+0x10/0x10 [ 220.683724][ T7524] ? kfree+0x252/0x6d0 [ 220.683753][ T7524] ? __pfx_n_tty_write+0x10/0x10 [ 220.683800][ T7524] file_tty_write.constprop.0+0x503/0x9b0 [ 220.683843][ T7524] redirected_tty_write+0xd4/0x150 [ 220.683882][ T7524] vfs_write+0x7d3/0x11d0 [ 220.683919][ T7524] ? __pfx_redirected_tty_write+0x10/0x10 [ 220.683972][ T7524] ? __pfx_vfs_write+0x10/0x10 [ 220.684008][ T7524] ? find_held_lock+0x2b/0x80 [ 220.684056][ T7524] ksys_write+0x12a/0x250 [ 220.684093][ T7524] ? __pfx_ksys_write+0x10/0x10 [ 220.684135][ T7524] do_syscall_64+0xcd/0xfa0 [ 220.684175][ T7524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.684215][ T7524] RIP: 0033:0x7fa7c718efc9 [ 220.684248][ T7524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.684283][ T7524] RSP: 002b:00007fa7c80f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 220.684317][ T7524] RAX: ffffffffffffffda RBX: 00007fa7c73e6090 RCX: 00007fa7c718efc9 [ 220.684339][ T7524] RDX: 0000000000000d4f RSI: 0000200000000840 RDI: 0000000000000002 [ 220.684361][ T7524] RBP: 00007fa7c7211f91 R08: 0000000000000000 R09: 0000000000000000 [ 220.684382][ T7524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 220.684402][ T7524] R13: 00007fa7c73e6128 R14: 00007fa7c73e6090 R15: 00007ffd75c0fea8 [ 220.684437][ T7524] [ 220.684758][ T7524] Kernel Offset: disabled