last executing test programs: 13m9.792235637s ago: executing program 0 (id=1605): mmap$auto(0x0, 0x4020009, 0x40000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/pci0000:00/0000:00:01.3/enable\x00', 0x20f01, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_thermal(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_THERMAL_GENL_CMD_CDEV_GET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x190, r2, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@THERMAL_GENL_ATTR_TZ_TRIP={0x10c, 0x4, 0x0, 0x1, [@typed={0x8, 0x8b, 0x0, 0x0, @u32=0x6}, @nested={0x100, 0xac, 0x0, 0x1, [@typed={0x21, 0x2a, 0x0, 0x0, @str='\\x7fF&\xb5\x8d\xddEl/trac_notrace_pid\x00'}, @typed={0x14, 0x77, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @typed={0x8, 0xbc, 0x0, 0x0, @ipv4=@multicast2}, @generic="fcbddfaaa006b3577e337c64eadbad83c40f6773a896cbc5bde760db9bac6f9017fa88f6fb9b9951a012160776defa44750125a3b46be5d083f435b22726c292f248c78a92dfbfb68e49d94afe1359b7bd70eb466f946c766c5067721b3d517f389b", @typed={0x4, 0xdd}, @generic="37596d2eeaa8a5e23e6e02c8e4db352dcefb5abeac739ad995255c6c42b2c78c23b7ff6a5ff5a3d0e960d2efa625ed82da7b348f016aec4d70e13fb8a807fc97236e766bb4921c28dc4d68dc5405", @typed={0x8, 0x5b, 0x0, 0x0, @ipv4=@broadcast}]}]}, @THERMAL_GENL_ATTR_CDEV_CUR_STATE={0x8, 0x10, 0x7}, @THERMAL_GENL_ATTR_CPU_CAPABILITY_PERFORMANCE={0x8, 0x16, 0x9}, @THERMAL_GENL_ATTR_TZ_TRIP_HYST={0x8, 0x8, 0xd}, @THERMAL_GENL_ATTR_TZ_GOV_NAME={0x30, 0xd, '/sys/devices/pci0000:00/0000:00:01.3/enable\x00'}, @THERMAL_GENL_ATTR_CPU_CAPABILITY_ID={0x8, 0x15, 0x8}, @THERMAL_GENL_ATTR_CDEV_CUR_STATE={0x8}, @THERMAL_GENL_ATTR_TZ_TEMP={0x8, 0x3, 0x6000}, @THERMAL_GENL_ATTR_TZ_TRIP_ID={0x8, 0x5, 0x19}, @THERMAL_GENL_ATTR_TZ_NAME={0x5, 0xa, '('}]}, 0x190}}, 0x800) memfd_create$auto(0x0, 0x4) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bus/usb/028/001\x00', 0xb2c00, 0x0) ioctl$auto_USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f00000000c0)={0xa1, 0x0, 0xa, 0xac, 0xfff8, 0xfffffffe, 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x40088c4) r5 = open(&(0x7f0000000100)='.\x00', 0x595082, 0x0) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000780)='/proc/self/net/rpc/auth.rpcsec.init/channel\x00', 0x441, 0x0) write$auto(r6, &(0x7f0000000080)='\\x7fF&\xb5\x8d\xddEl/trac_notrace_pid\x00\x00\x00\x00', 0x7) write$auto(r5, 0x0, 0xfffffdf1) fcntl$auto_F_ADD_SEALS(r5, 0x409, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0xd561, 0x10000000000df, 0xeb2, 0xffffffffffffffff, 0x8000) timer_create$auto(0x2, 0x0, 0x0) timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x26b, 0x4}, {0x0, 0x83}}, 0x0) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) kexec_load$auto(0x200000000007, 0x1, &(0x7f0000000040)={@kbuf=0x0, 0x2aaa, 0x6c0000c000, 0xc000}, 0x4) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) 13m8.427909887s ago: executing program 0 (id=1609): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000040), r0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x3c, r1, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0xc, 0x3, 0x0, 0x1, [@nested={0x8, 0x17, 0x0, 0x1, [@nested={0x4}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x3c}, 0x1, 0xe00, 0x0, 0x4004040}, 0xc800) 13m8.155133734s ago: executing program 0 (id=1611): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00D\xa0\x04|P\xd4Ig\xc5\x9f\xbdu', 0x81) prctl$auto(0x42, 0x0, 0x0, 0x1, 0x0) socket(0x2000000000000021, 0x5, 0x2) 13m7.979197958s ago: executing program 0 (id=1612): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) (async) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x1ffff000, 0x17ffffffffffffc, 0x400000004) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x22, 0x5, 0x6) socket(0x2, 0x1, 0x0) socketpair$auto(0x1e, 0x3, 0xffffff00, 0x0) (async) socketpair$auto(0x1e, 0x3, 0xffffff00, 0x0) setsockopt$auto(0x3, 0x6, 0x5, 0x0, 0x8) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) (async) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) socket(0x10, 0x2, 0x0) statmount$auto(0x0, 0x0, 0x202, 0x2000000) mmap$auto(0x0, 0x4020009, 0xdc, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0x8000000000000001, 0x15) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) read$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffffff, &(0x7f0000000040)=""/4080, 0x1036) 13m7.621585806s ago: executing program 0 (id=1613): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio1/firmware_id\x00', 0x400, 0x0) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio1/firmware_id\x00', 0x400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001080)=""/98, 0x62) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) 13m7.381296605s ago: executing program 0 (id=1615): socket(0xa, 0x5, 0x84) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) fanotify_init$auto(0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x1, 0x0) write$auto(0x3, 0x0, 0x5c8) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0xc) r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x309000, 0x0) mmap$auto(0x0, 0x2020409, 0xa, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x41, 0x0) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto(r1, 0x8, 0x0, 0x0, 0x0) ioctl$auto_USB_RAW_IOCTL_RUN(r0, 0x5501, 0x0) 12m52.152943743s ago: executing program 32 (id=1615): socket(0xa, 0x5, 0x84) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) fanotify_init$auto(0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x1, 0x0) write$auto(0x3, 0x0, 0x5c8) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0xc) r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x309000, 0x0) mmap$auto(0x0, 0x2020409, 0xa, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x41, 0x0) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto(r1, 0x8, 0x0, 0x0, 0x0) ioctl$auto_USB_RAW_IOCTL_RUN(r0, 0x5501, 0x0) 35.188924613s ago: executing program 4 (id=4149): sendmsg$auto_NFC_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x845) (async) sendmsg$auto_NFC_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x845) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) (async) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xf3, 0xb0, @raw=0xfffff02c}}) 34.389358809s ago: executing program 4 (id=4152): bpf$auto(0x18, &(0x7f0000000040)=@bpf_attr_3={0x4400, 0xa9f, 0x3, 0x8, 0x200, 0x2, 0x9, 0x4, 0x2, "6112c2774a07000000bacfcb2688c651", 0x0, 0x7, 0xffffffffffffffff, 0x2, 0x8000b1, 0x3, 0x640, 0xe038, 0x4, 0xd, @attach_btf_obj_fd, 0x9, 0x401, 0xad, 0x3d81cdbc, 0x5}, 0x2f) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) write$auto(r0, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) (fail_nth: 3) 33.481034641s ago: executing program 4 (id=4153): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.1/usb2/2-0:1.0/usb2-port1/disable\x00', 0x102, 0x0) socket(0xa, 0x801, 0x84) msgctl$auto_MSG_STAT(0x0, 0xb, &(0x7f0000004500)={{0x0, 0x0, 0x0, 0x8, 0x3, 0x8000, 0x1}, 0x0, 0x0, 0x8000000000000001, 0xac6, 0xffffffffffff966c, 0x0, 0x8, 0xbaa, 0x7, 0x8, @inferred, @raw=0xd}) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x40, 0x942, 0x1fee0, 0x3, 0x6, 0xfffffffffffffffe, 0x1ff, 0x5, 0x8005, 0x7, 0xb0, 0x9, 0x5, 0x2000003, 0x8, 0x4, 0x10, 0xb65, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x800, 0x0, 0x0, [0x2, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x0, 0x2d24, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffff, 0x9, 0x0, 0x0, 0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x1fe, 0x82) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty48\x00', 0x40000, 0x0) prctl$auto(0x35, 0x0, 0x8, 0x0, 0x0) ioctl$auto_TIOCSWINSZ2(r0, 0x5414, &(0x7f0000000080)="d82acb") r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r2 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) mq_notify$auto(r2, &(0x7f0000000180)={@sival_ptr=0x0, @raw=0x1, 0x1, @_sigev_thread={0x0, 0x0}}) ioctl$auto_SW_SYNC_GET_DEADLINE(r2, 0xc0105702, &(0x7f0000000040)={0x10001, 0x0, r0}) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x2000000, &(0x7f0000000080)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) write$auto(0x3, 0x0, 0x6) 33.211861864s ago: executing program 4 (id=4154): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x68982, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x22a01, 0x0) io_uring_setup$auto(0x403, 0x0) getpid() unshare$auto(0x40000080) r1 = openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000000040), 0x101002, 0x0) pwritev$auto(r1, &(0x7f0000000680)={0x0, 0x1ff}, 0x3, 0x0, 0x800) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) prctl$auto(0x1000000003b, 0x80, 0x4, 0x5, 0x4) statx$auto(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x4, 0x7fffffff, &(0x7f0000000140)={0x9, 0xf, 0xb476, 0x0, 0x0, 0x0, 0xffff, 0xb9, 0x3, 0x7, 0x5, 0x80, {0x7, 0x10000}, {0x2, 0x9}, {0x7378, 0x7}, {0x5, 0x1}, 0x8, 0xfffffffc, 0x1, 0x401, 0x400000000006, 0x46b, 0xa, 0x2, 0x40, 0x6, 0x0, 0x9, [0x3, 0x10, 0x7fffffffffffffff, 0x81, 0xd, 0x8001, 0x5, 0x3, 0x9]}) fchown$auto(r1, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x200007, 0x19) unshare$auto(0x20000080) syz_clone3(&(0x7f0000000380)={0x2c022000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) sendmsg$auto_NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="be5fa68d07f48a2ac184277b44020000", @ANYBLOB="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"], 0x244}, 0x1, 0x0, 0x0, 0x24040081}, 0x40094) r3 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r3, &(0x7f0000000240)='\x03W\x96l\x15\x00\x00\x00\x00\xf4\x00'/21, 0x100000002, 0x100000001) 28.292909999s ago: executing program 4 (id=4168): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000db, 0x12, 0x400, 0x18002) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0xbffffffffffffffc, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) getpriority$auto_PRIO_USER(0x2, 0x0) pipe2$auto(0x0, 0x80) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x7c5200, 0x0) prctl$auto(0x3e, 0x4, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r1 = socket(0x10, 0x4, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB="5de10dbe47d7cb1c64bdf3d075eb7be5c4cba072a705e3a4ad117b60063f3b2ef8cb52a278fb36240726567c3170f02b2c318084851bd6df70cd8bba"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) read$auto(r1, 0x0, 0xfdef) r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/binder1\x00', 0x0, 0x0) ioctl$auto_BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) io_uring_setup$auto(0x2, &(0x7f00000004c0)={0x80000003, 0x9, 0x4002, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0xfffffffd, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x52, 0x5757e4ee, 0x1, 0x6, 0x104, 0x8, 0x100000000}}) syz_clone(0x1002000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x40008000) sendmsg$auto_MACSEC_CMD_ADD_RXSA(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b0000000", @ANYRES16=0x0, @ANYBLOB="080b27bd700900dbdf25070000009b0002800e276aa28dabe178f43bb17008156d2b241bafced59f417fe6baf66364275cc0238d6dbcab06c0c02c662204313167daca63ee70867cbdc7a8f650e1bcb03b57c15a0f3455f227d49a46b3bf0e3b12e3315f454dfedf882675de175121131150514fcafbc6682adb6e969ea7af2239ce18e215ba9ddd0101122070275b0b2edeb85296f9f689495e8c0ef97ebe6d8ef6354b115717904200"], 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000004) mbind$auto(0x2000, 0x2091d2, 0x4, 0x0, 0x6, 0x2) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$auto_state_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x1e9482, 0x0) ioctl$auto_FS_IOC_SETFLAGS(r2, 0x40086602, 0xe20) getcwd$auto(&(0x7f0000000440)='/r\x01\x00\x00\x00ernel/debue/b\xffoder/staG\xfd\xde\xdf\'\b\xf1te\x00\xca\x90\xda\n\x01dH\x9e\x14\x96/\xeds\xb0D\xd2\x9f\xea\xec\xeb\x9d\xd3\xe6\x9e\xcd\"\xeci\xab\xbd\x9dRY\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1) 21.940998204s ago: executing program 4 (id=4175): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x11, 0x2, 0x300) r1 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r1, 0x0, 0x2, 0x100) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffffffffffffb) ioctl$auto_SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f0000000240)) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) preadv$auto(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000001c0)="522e68880b66e736e04b92f674ada7760ea80e37bb469357500e017f29e7eb2c5ebfee7548efd523ae6199e3f6caa510b91366e1748c71e2d79dbbb4e58f96d122c3685ce6b3fda30b6a3d7de0adf1b3094034bd55236900b4729261d5600a6434b9ba8948be7ac19251ce944fc54c9f7ac11b4e82d8291daf1f9f58cd41df5c0530fbcfcb3b56df2bf719c93f18577a1173804afe51a9d1dcac", 0xff}, 0x5, 0x0, 0x4) r2 = socket(0x2, 0x1, 0x106) setsockopt$auto(r2, 0x6, 0x6, &(0x7f0000000700)='\b\x00\x00\x00\xe4\x15\rq\tW\x9d=\x1e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe7\x9b\xdd\x1cp\x19\xa0\x9dHN\xb4\x7f\x7f\xa0\xeaI\xa1\x0f/\xfc\x8e\xf9\xa6x\xa0\xdeo\t\x826Xe(\x0e\xffr\r\x8d\xefh\xdbG\x8b\xde\xfd$\'\a ]\x91YP\x94\xd0\xd0\x02\x10\xb1_z\xa2Ql\x8c\x91\xca4\x118\xcd\xc3\x97\x03J:\x1e\xe5f\xcaq\xdf`\x01;\xf9{D2\xc9WV)\xa3JH\xf5\xf9\x16\xac\xa4\x155\x80\x01I\xd9\xa5\xd0\xf1\xbd\xa0\xa4\xa5q\xc6F\x940\x00\xf8\xef\xa4\xfd\xd2z\xf5\x91z<\x9f\xf0\x8f.\x81\x84\xed J&\x8f\xd9\xab-\xf8\xd0\xd3\xcea\x91pM0\xcd\x18\xb4\xe0u\x99\b\x19I\x87\xbb/1\xf9\x84\xbf\xcc\x0e5\xba\x9a\xba\xfb\xde\x16kU\x97\xec\xc6\xe15u\xd5\x94D\xab\xec.K\xfbD\x0f\xc16g\xf3`\x03O\xae]B@\x0e!n\x8dy\x97\xaa\xa7\x12\xbbyD\xd3\x82\xb3\x9a\x88L\x1b\x8b\xfb\xe7\xc8\xa8\xf66\x16\xe1\x04T\'/8a\xeb\xe6\xe6+!\x97\b\xc8;P\f~\x88\x02\x91 \xd3\x93\xa7.xCNA\xcax)\xb4\xdf\xfe/\xe40\xc6y\x13\x8d\bfJ\x85\x05\xf5\x9f\xea\x15\xe9{3\xcc\xac\x94w.%\x11_\xd3\xe2\xe9\x8c\x9c\xb1\xfb\xf9o\xf4\xc9\x88\xbd\x90p\xae\x8ap\xb9\xa4\xb7\xadv&\x999\xdf\x83\xae\xff\xa5\xfc\xd3\xc0!\xdc\xc4\xa0\xce8:\xeb~\x9b_F\x8f\xcaY\xa9\x89@\x99)\x1c\x8b\xc5\xb7\x10\xd1\xc8`\xb6\x8f\x136\xc3\x1e\xbd\x8e$\"\xbfJ\n\xd6\x0f\x9d\xcbr\xb7\xa8\xed\r+$\x94\x9b\xfe8\x8ao\xf8\xba\'i\xf1\xd3\x9c7P\xe3\x14\xa2\x1b-\xbb\xae\xe3P#:$\xaf\aB\xd2\x95\x18\\r\xd1\x80\x9fD\xd5\xaba\xc8\xd4\xd1\xb6\xf5\xb9\x16\xbb\xbc\xd6\xb3+\xdf\xfc\x89\x1f\xe9M|\x0e?g\x18\v\"', 0x4000007) getsockopt$auto(r2, 0x6, 0x6, &(0x7f0000000000)='\b\x00\x00\x00\xe4\x15\rq\tW\x9d=\x1e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe7\x9b\xdd\x1cp\x19\xa0\x9dHN\xb4\x7f\x7f\xa0\xeaI\xa1\x0f/\xfc\x8e\xf9\xa6x\xa0\xdeo\t\x826Xe(\x0e\xffr\r\x8d\xefh\xdbG\x8b\xde\xfd$\'\a ]\x91YP\x94\xd0\xd0\x02\x10\xb1_z\xa2Ql\x8c\x91\xca4\x118\xcd\xc3\x97\xdaJ:\x1e\xe5f\xcaq\xdf`\x01;\xf9{D2\xc9WV)\xa3JH\xf5\xf9\x16\xac\xa4\x155\x80\x01I\xd9\xa5\xd0\xf1\xbd\xa0\xa4\xa5q\xc6F\x940\x00\xf8\xef\xa4\xfd\xd2z\xf5\x91z<\x9f\xf0\x8f/\x81\x84\xed J&\x8f\xd9\xab-\xf8\xd0\xd3\xcea\x91pM0\xcd\x18\xb4\xe0u\x99\b', &(0x7f00000000c0)=0x800) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(0xffffffffffffffff, 0x4008550d, 0xffffffffffffffff) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/graphics/fbcon/rotate_all\x00', 0xa001, 0x0) r4 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/tracing/dynamic_events\x00', 0x1, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r4, &(0x7f0000000000)=' ', 0x1) settimeofday$auto(&(0x7f0000000180)={0x6ddb8b07, 0x9}, 0x0) write$auto(r3, &(0x7f0000000000)='3\xc7\xff\xff\xff\xdd\x00\b(Ks\x0f\x87|P\x11\xd1li0\x89\x85\x90QM\xd6wfF\xf1x\xb3;c\tP\x03\x84\x97\x99\x83\x97\x81:\xf3\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xff\xdak\xb0m\xe1U\xb3\xa2\xee\xdcTJQO\x98\xc8w\x8c\xe7\x00\x00\x00\x1dj\x1e\xebQT\xdd\x9b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00', 0x9) r5 = openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev$auto(r5, &(0x7f0000000300)={0x0, 0x10001}, 0xc) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/arp\x00', 0x101000, 0x0) 10.45221067s ago: executing program 2 (id=4203): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_GET_RADIO(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000280)={0x14, r1, 0xf3e97f51700e57cf, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x884}, 0x8020) r2 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) sendmsg$auto_NL80211_CMD_SET_PMK(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x8c, r3, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_FILS_CACHE_ID={0x77, 0xfd, "9ba42379a898f3bf5e58335e7c726780c2144db6ac042b36397c1070fe2c9ca55177832721fccbca0b6140022dff32ec0dcd095f654e1f11dc93c1f44a09a49fb13dcef048899dc87b9812fbbd7350e33280de4be30d89cc3f9fb15fb8772468c93604f94d6acb47da6b4cc75403ec47d4c1aa"}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40040}, 0x4800) read$auto(0xffffffffffffffff, 0x0, 0x7f) mmap$auto(0x3, 0x400008, 0xdf, 0x10009b72, 0xffffffffffffffff, 0x0) r4 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x40, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002bbd7000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) fadvise64$auto_POSIX_FADV_NORMAL(r4, 0x9, 0x769, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) semctl$auto_SETVAL(0x7fffffff, 0x3, 0x10, 0x8) sendmsg$auto_NBD_CMD_CONNECT(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x2c, r8, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x1021}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) read$auto(r0, 0x0, 0x3) 8.358153036s ago: executing program 2 (id=4207): r0 = socket(0x2b, 0x1, 0x0) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x5, 0x7}, 0xa}, 0x5, 0x20000000) io_uring_setup$auto(0x6, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r2 = io_uring_setup$auto(0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a1842, 0x0) socket(0x2, 0x3, 0x100) fstat$auto(0x2, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @local}, 0x55) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4020}, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x20a02, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000180), 0x40900, 0x0) ioctl$auto_UBI_IOCATT(r3, 0x40186f40, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x40880, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/kvm/max_mmu_rmap_size\x00', 0xa2500, 0x0) read$auto_stat_fops_per_vm_kvm_main(r5, 0x0, 0x0) ioctl$auto_UBI_IOCDET(r3, 0x40046f41, 0x0) ioctl$auto_UBI_IOCDET(r3, 0x40046f41, 0x0) ioctl$auto_XFS_IOC_FSBULKSTAT_SINGLE(r2, 0xc0205866, &(0x7f0000000380)={&(0x7f0000000040)=0xea9c, 0x2, &(0x7f0000000280)="2efc81fadde494b8cc65382920fcafabdb3251e16f913631763bb726a018a89ae2e9b3342f53d8c288ea078c35d909f45608e11636004cb38eb93c705002e84811a072915968af13a32c71a053b13580eb861eb46264a40c0524de2987e096ec102ac0cd8780be2c48b83437355af8014a6d8890f4991c5196f05db3bcf04ec6648b08821cab125a0b5fab83d204ec3d209fd78b04", &(0x7f0000000340)=0xfffffff8}) ioctl$auto_BLKGETNRZONES(0xffffffffffffffff, 0x80041285, 0x0) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) 8.303450592s ago: executing program 3 (id=4208): write$auto(0xffffffffffffffff, 0x0, 0x8) write$auto(0xca, &(0x7f00000000c0)='\x04>\x01\x01\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x96\b\'\x02\xb0\x93l\xeb\x87\r\b\x87\x14\xf8e6\x9c\f\xb6,NS\xa2(Q\xcc', 0x7f) statmount$auto(0x0, 0x0, 0x9, 0xd) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ppoll$auto(&(0x7f0000000040)={0xffffffffffffffff, 0x4, 0x2}, 0x10, 0x0, &(0x7f00000000c0)={0x1}, 0x8) write$auto_seq_oss_f_ops_seq_oss(0xffffffffffffffff, &(0x7f0000000500), 0x0) r1 = fcntl$auto_F_GETOWN(0xffffffffffffffff, 0x9, 0x1) prctl$auto(0x1, 0x10, r1, 0xa42, 0x47) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x140082, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) r4 = syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000280)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="174010186da7dfcddf25770000000800f800090000002a00b30056000000"], 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) futex$auto(0x0, 0x2, 0xa, 0x0, 0x0, 0xa0800002) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$auto_RNDADDENTROPY(r5, 0x40085203, &(0x7f0000000040)=[0x19a, 0x420fb479]) 6.529602865s ago: executing program 2 (id=4211): connect$auto(0xffffffffffffffff, 0x0, 0x52) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/memory.force_empty\x00', 0xa001, 0x0) write$auto(r1, &(0x7f0000000000)='3\xc7\xff\xff\xff\xdd\x00\b(Ks\x0f\x87|P\x11\xd1li0\x89\x85\x90QM\xd6wfF\xf1x\xb3;c\tP\x03\x84\x97\x99\x83\x97\x81:\xf3\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xff\xdak\xb0m\xe1U\xb3O\x98\xc8w\x8c\xe7\x00\x00?\x1dj\x1e\xebQT\xdd\x9b\x00\x00\x00\x00\x00\x00\x00\xf4\x00\x00\x00\x00\x00', 0x9) 4.780474392s ago: executing program 2 (id=4212): mmap$auto(0xffffffffffffffff, 0x4020007, 0x9, 0xeb1, 0xffffffffffffffff, 0x8) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/pci0000:00/0000:00:01.3/enable\x00', 0x20f01, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_thermal(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_THERMAL_GENL_CMD_CDEV_GET(r1, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000280)=ANY=[@ANYBLOB="9001000043b243538d8d5d50f29db6cb41dc6870885308cd000000000000", @ANYRES16=r2, @ANYBLOB="000227bd7000fcdbdf25060000000c01048008008b0006000000000051000100000000000000080010000700000008000800ffffff7f080008000d00000030000d002f7379732f646576696365732f706369303030303a30302f303030303a30303a30312e332f656e61626c6500080015000800000008001a0077ab00000800030004600000080005001900000005000a0000000000"], 0x190}}, 0x800) memfd_create$auto(0x0, 0x4) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bus/usb/028/001\x00', 0xb2c00, 0x0) ioctl$auto_USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f00000000c0)={0xa1, 0x0, 0x100a, 0xac, 0xfff8, 0xfffffffe, 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x40088c4) r5 = open(&(0x7f0000000100)='.\x00', 0x595082, 0x0) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000780)='/proc/self/net/rpc/auth.rpcsec.init/channel\x00', 0x401, 0x0) write$auto(r6, &(0x7f0000000080)='\\x7fF&\xb5\x8d\xddEl/trac_notrace_pid\x00\x00\x00\x00', 0x7) write$auto(r5, 0x0, 0xfffffdf1) fcntl$auto_F_ADD_SEALS(r5, 0x409, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0xd561, 0x10000000000df, 0xeb2, 0xffffffffffffffff, 0x8000) timer_create$auto(0x2, 0x0, 0x0) timer_settime$auto(0x0, 0x4, &(0x7f00000000c0)={{0x267, 0x4}, {0x0, 0x83}}, 0x0) close_range$auto(r5, r3, 0x0) memfd_create$auto(0x0, 0xe) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) kexec_load$auto(0x200000000007, 0x1, &(0x7f0000000040)={@buf=&(0x7f0000000380)="c9a09e1f7e43abcb0a249de9cdad44e41b10c8f80e8cf284aafe696f0d8dc956fc1e4827fcaa9ceb0a2c294d80762fde9b5f915ddfb67454648264523464c4fce7ff306c2993cdfeb825440cb332790ead53a5b4c646e97813c44ebdc43054a9b76778b95b643e7bd423dc06b0fc7eefff221d19c3a0eae4831e", 0x2aaa, 0x6c0000c000, 0xffffffffffffffff}, 0x4) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x74b640, 0x0) setsockopt$auto_SO_ATTACH_REUSEPORT_EBPF(r5, 0xfffffff9, 0x34, &(0x7f0000000200)='/sys/devices/pci0000:00/0000:00:01.3/enable\x00', 0x8) 4.779108841s ago: executing program 3 (id=4213): r0 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/set_event_notrace_pid\x00', 0x58102, 0x0) r1 = prctl$auto_PR_SYS_DISPATCH_OFF(0x80000001, 0x0, 0xffffffffffffffff, 0x5, 0x0) ioctl$auto_SNDCTL_SEQ_CTRLRATE(r1, 0xc0045103, &(0x7f0000000040)="995149ce586fca6cac5f7b27f424d8ac56175f52a1214cc586310255545e76346d4b5e53e68c13c7e55be6ed5dd2071ce15fdb68ed3aa4630cf7c2aa17e502333e423484c9b7eed01833ebba414ec0d59189d009f92b168b105d8810b5ef64bb085fa0fece4c1291408c573ffffa37dd91420788a0e7e792b7f3dbb7db39e2f1113f404b47e55125f0f1cbdb5d585b3829f605f94efb5854c6ec833f6523af0b14296b581fb17fa64a00507cfacc89f03d24d14de3f4de856eb49994683a16") r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/pci0000:00/0000:00:03.0/resource0\x00', 0x303000, 0x0) fsconfig$auto_SHMEM_HUGE_DENY(r0, 0xff, &(0x7f0000000100)='/sys/kernel/debug/tracing/set_event_notrace_pid\x00', &(0x7f0000000140)="8803f3d679a9e7a347d758f4c8262c05a091b16d5e8c778847d6590f97b4d70730ae790913e93913859a8efabdc73ccb4b347d1614550f9becbb6eb3bc0c1c23294719893ea7d6c90a0d0836bbbc36590bc43da05ae3f212e48bd4916d1621f3d440c6a1557a019311907aea21ec533100ee8cbedbfb8fe76df45e550e4e1d688deafa7621cb55b305d66e3fed9cc4eb8000e6fab88bcd4690fced29c3ebd2811232675ae5552e1fe9a59799251ee3b60eb6bb004366d6880cb00bdf", 0xffffffffffffffff) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/damon_reclaim/parameters/enabled\x00', 0xc2481, 0x0) write$auto(r3, &(0x7f0000000040)='E\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/workqueue/nvmet-wq/max_active\x00', 0x402, 0x0) mmap$auto(0x0, 0x6, 0xdf, 0x800009b72, 0x2, 0xeaa9) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/conf/team0/tag\x00', 0x42440, 0x0) read$auto(r4, 0x0, 0x1ff) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) close_range$auto(0x2, 0x8, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x3d, 0x0) r6 = fsopen$auto(0x0, 0x1) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/ksm/max_page_sharing\x00', 0x12b141, 0x0) write$auto(r7, &(0x7f0000000140)='-\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) fsconfig$auto(r6, 0x8, 0x0, 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/SecurityFlags\x00', 0x48041, 0x0) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/bond0/bonding/peer_notif_delay\x00', 0x68880, 0x0) sendmmsg$auto(r5, &(0x7f0000000080)={{0x0, 0x1c03, 0x0, 0x3, 0x0, 0x0, 0xd}, 0x7}, 0x1, 0x6) read$auto(r8, 0x0, 0x3) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) r9 = openat$auto_buffer_subbuf_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/buffer_subbuf_size_kb\x00', 0x2401, 0x0) bpf$auto_BPF_MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)=@token_create={0x2, r0}, 0x1000) write$auto(r9, 0x0, 0x40) write$auto(r2, &(0x7f0000000140)='0[.[\x00', 0xcd05) readv$auto(0x3, &(0x7f0000003080)={&(0x7f0000003040), 0x4}, 0x9) 4.676331193s ago: executing program 1 (id=4214): openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/vmallocinfo\x00', 0x0, 0x0) read$auto(0x3, 0x0, 0xfdef) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/nbd7/power/autosuspend_delay_ms\x00', 0x22902, 0x0) r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto_RTC_PARAM_GET(r0, 0x40187013, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) r2 = socketcall$auto(0xa, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) timerfd_settime$auto(r1, 0x2, &(0x7f0000000040)={{0x3, 0x7fff}, {0x5, 0x8}}, &(0x7f0000000180)={{0x9, 0x3}, {0x1ff, 0x5}}) openat$auto_fops_blob_file(0xffffffffffffff9c, &(0x7f0000000080), 0xa0000, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) io_uring_register$auto_IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, 0x0, 0x5) read$auto_debugfs_devm_entry_ops_file(r2, &(0x7f0000000200)=""/180, 0xb4) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0xffffffffffffffff) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000000), 0x101600, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sendmsg$auto_NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="0a9ebda1c0292d4e70d346bab289db6a659df8a10f58b2a86c76cb953dfb87937c6e7745daa8e7378b07ac0970600ebc8888a8a24e009d3c4f1ee8d07c", @ANYRES16=0x0, @ANYBLOB="010026bd7000fedbdf252e00000004004400"], 0x18}, 0x1, 0x0, 0x0, 0x20000080}, 0x200000c4) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, 0x0, 0x101002, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0xa2781, 0x0) 4.553210769s ago: executing program 3 (id=4215): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) pread64$auto(r0, &(0x7f0000000340)='/proc/Nes\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xf5\x00', 0x100000001, 0x100) 4.292247825s ago: executing program 3 (id=4216): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) mmap$auto(0x2000, 0x80009, 0xb, 0x8000000008011, r0, 0x0) semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0) r1 = getpid() process_vm_readv$auto(r1, 0x0, 0x1, &(0x7f0000000280)={0x0, 0xffffffff}, 0x6, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/card0\x00', 0x121000, 0x0) setxattrat$auto(0xffffffffffffffff, 0x0, 0x1004, 0x0, 0x0, 0xc000000000000000) read$auto(0x3, 0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) mmap$auto(0x0, 0x2020009, 0x80000003, 0xeb1, 0xfffffffffffffffa, 0x8000) ioperm$auto(0x3, 0xe, 0x2000000000000149) ioctl$auto_BLKPG(0xffffffffffffffff, 0x1269, 0x0) inotify_init1$auto(0x3000000000000) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) lsetxattr$auto(0x0, &(0x7f0000000180)='3\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x9b\xcf\x1a@4\x1d>\x9b\xb8\xe7\t\x88\xe0\x85\xee\x1a\a-T\xf8\xcfHx|j\xa0\n\xc7q\x93\x8e\bOp\xd8\x05\x94\xb77\x8d.\xb3t\xbd\x15\xfdR\xfd3\xa0\xe4\xecz8\x1a\xa1V8\xa4\xe3O\xc8w|\xd4\x7f\xea\xa2X\x86\xa0\xec\xd7\x91\xb1B\xcdd9\x1a[\x96\xf7=\x9aU\xeb\r\xb5\x8e\x8b\xaeq\xa12\xc9\\\xb2\xd5\xfd\xf5\xfb\x88R\xa7\xb5\xfd\xe3\xf9\x10\xf2f\xe7\t}\xe61\xcb\x14\x88\xa2\x0f\xfa\xb5T%\xc6 \\\xa3\xa1\x10@y\xbd\x16\xe1\xdfh\xee\xde\xaa\xa2U\xd7\xf4\xa8\xd6\xc1\xe0X\x8f{m\'(\xfb\xab\x8bXW\x9a>Hl\x9d\xcb\xa3T\x9a%\x1e\x92|a\x9f\xbc\xe4\xd0\xa7\xeb\xb1\xe6\x8e\xae\x02\x964q#u\x8c\x19\x17\xeb\xfc\x16\xab\xb7\b_\xdfh\r\f\xa8/N\xc6\f\xef\xda\xaay\xf8fm\f\xabH\x9f\f\xd1\xc2fZ8\xcd\xb61\xcd\xd8\xcc|p:7\x15\xb2\xcb\xf5\x13\xcc\xb6\x97\x18=[\x8a\x920x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEC_SET(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="a59f53a14c731266110975b751e955", @ANYRES16=r3, @ANYBLOB="01002dbd7000fbdbdf251e000000040002800c00018008000100", @ANYRES32=r1, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0xac8fe2812c65ec00) r4 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto_IORING_REGISTER_NAPI(r4, 0x1b, &(0x7f00000000c0), 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000300), 0x8000, 0x0) socketcall$auto(0x9, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x42, 0x0) fsopen$auto(0x0, 0x1) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder0\x00', 0x0, 0x0) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14be02, 0x0) mq_timedsend$auto(r4, 0x0, 0xfff, 0x10000, 0xfffffffffffffffe) ioctl$auto_BLKFLSBUF(r5, 0x1261, 0x0) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x400000, 0x0) r6 = openat$auto_debugfs_devm_entry_ops_file(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/cec/cec4/status\x00', 0x10f303, 0x0) read$auto_debugfs_devm_entry_ops_file(r6, &(0x7f00000001c0)=""/27, 0x1b) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x20000081) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x802, 0x9, 0x63, 0x0, 0x0, 0x0, 0x7, 0x7ff, 0x800000000100002, 0x0, 0x2, 0xc, 0x40, 0x1c, 0x20000000009, 0xb}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xa, 0x2, 0x73) getpeername$auto(0x3, 0xfffffffffffffffe, 0x0) socket(0x2, 0x3, 0x100) 1.0019085s ago: executing program 1 (id=4220): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000040), r0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x3c, r1, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0xc, 0x3, 0x0, 0x1, [@nested={0x8, 0x17, 0x0, 0x1, [@nested={0x4}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x3c}, 0x1, 0x0, 0x2000000000000000, 0x4004040}, 0xc800) 602.019535ms ago: executing program 2 (id=4221): mmap$auto(0x0, 0x4020009, 0x40000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/pci0000:00/0000:00:01.3/enable\x00', 0x20f01, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_thermal(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_THERMAL_GENL_CMD_CDEV_GET(r1, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)=ANY=[@ANYBLOB="90010000", @ANYRES16=r2, @ANYBLOB="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"], 0x190}}, 0x800) r3 = memfd_create$auto(0x0, 0x4) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bus/usb/028/001\x00', 0xb2c00, 0x0) ioctl$auto_USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f00000000c0)={0xa1, 0x0, 0xa, 0xac, 0xfff8, 0xfffffffe, 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x40088c4) r6 = open(&(0x7f0000000100)='.\x00', 0x595082, 0x0) r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000780)='/proc/self/net/rpc/auth.rpcsec.init/channel\x00', 0x441, 0x0) write$auto(r7, &(0x7f0000000080)='\\x7fF&\xb5\x8d\xddEl/trac_notrace_pid\x00\x00\x00\x00', 0x7) write$auto(r6, 0x0, 0xfffffdf1) fcntl$auto_F_ADD_SEALS(r6, 0x409, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000004ec0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000004e80)={&(0x7f0000001980)={0x34e4, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x2280, 0x2, 0x0, 0x1, [@nested={0x116d, 0x137, 0x0, 0x1, [@typed={0x8, 0x159, 0x0, 0x0, @pid}, @generic="32b8a92f84f6f0059e2b9dc094d7361f9945f9e0745e513be49c9297aa4c79be97d0562858cc1048b36569e3f43a069b9222914e3134b798a0a36af66a54e50bf5d5176409583136df6dd541f467fd2d91aacc98f05eb12269713439e4160947c94127ba79d28500e829ad04847de375c99760f7d76402c4ef3fadb1122847ec8151a7412d16550ad29335bc349d1e0ed3f0e860ee13bc7b45d73ddd326e205dbef9063238b28308e35b9b77abe88c6fd494294ed82f29f04cc3925e6f0fbb5870164d254853b63df07b2597f9a4bb953527373bfa5689d4f26c9f2c82c4d4e8c3a313062851939d60ec7debf73b8e", @typed={0x8, 0x8, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x32, 0x0, 0x0, @uid}, @nested={0x4, 0xd0}, @generic="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", @generic="15fb0647424ddc3ad81a4a1fc6e95a155e712f58953f329a3dfe1f16285f86b8e0767528227464fc2f40354497704f431d5365af212827938a68876ef3d26208ce5f58ebeefe3348dc6af81694c6714603efe730f925", @typed={0x8, 0x133, 0x0, 0x0, @uid}]}, @typed={0x8, 0x138, 0x0, 0x0, @fd=r1}, @generic="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", @nested={0xe9, 0x12f, 0x0, 0x1, [@nested={0x4, 0x115}, @typed={0xb7, 0x2f, 0x0, 0x0, @binary="351b4fc844b7e9e8f43ccd75c5ccbe881f758fde8402b4fad9eeb5f0e71ea22a0d91a1698f8dace612cd4f21bd36fd93eb8b22e629e39ebd6294baa2700260065d1aee727704cb7b78e8d66c04e50d6fb7464863a84a9110986046405532c49458030cd9e219c68596ddb273386ee4cfeefe20cf2fe6bb77e0f39fadfea3499cbbaea7d89709b1c04623f5dd935f0ec07351b371d6ae91ee66f861a23c4bbfd4ac0dda4f5ba33e283ade017d61eaefa323bc70"}, @generic="7a31f945aa2a04dbf6b254294bfbbee785", @typed={0xf, 0x11f, 0x0, 0x0, @str='ovs_packet\x00'}, @nested={0x4, 0x3d}, @nested={0x4, 0x155}]}, @typed={0x4, 0x12a}, @typed={0x8, 0x141, 0x0, 0x0, @ipv4=@multicast1}, @typed={0xc, 0x12e, 0x0, 0x0, @u64}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x1227, 0x3, 0x0, 0x1, [@typed={0x8, 0x105, 0x0, 0x0, @fd=r1}, @nested={0x10c5, 0xf1, 0x0, 0x1, [@typed={0x8, 0xd, 0x0, 0x0, @pid}, @generic="49f120f37cf5e3aa1296b0d0d6d5dc4db9bad8f36ec9d809254816538c25358e668d1485ba", @nested={0x4, 0x158}, @generic="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", @typed={0x8, 0x66, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x32}}, @generic="e1fcebed41fd4db38ea664965ca28d03cfaced25b1eca4802541f9c65399a7a487ea73b75a14008d28489575283c3ad1b74273285f8b1925c94a2a0a2b6c7e472b4a2965dc9709468e", @nested={0x4, 0x7f}, @generic="bb7950276ff22ef3d70226437aa6eedf0eac11538089a73b9f6427", @typed={0x19, 0xe8, 0x0, 0x0, @str='/dev/bus/usb/028/001\x00'}, @nested={0x4, 0xaa}]}, @nested={0x12e, 0xfc, 0x0, 0x1, [@nested={0x4, 0x1b}, @typed={0x8, 0x40, 0x0, 0x0, @pid}, @typed={0x8, 0x132, 0x0, 0x0, @pid}, @typed={0x4, 0xee}, @nested={0x4, 0xdf}, @typed={0xf, 0xb1, 0x0, 0x0, @str='ovs_packet\x00'}, @nested={0x4, 0x4f}, @generic="60bb805ba33fa3f6ec1c67e266079ea3a09080cd72be60bbd7d8b332a76b2c65c4cb273604bf8679fd8041b6aa29a42fd2f0d132ba2ffca34f745a3eccc13f0696596019d70695f8011a338a78797e96aaf12ba73e0b1cc3f73d4e06c232dc61fa87033f9163166a5d65d8688ff5efcc4f7c979533516152fb11768ed6bbd5f5237b484c7e3d472587fcd42bb97a68bc4e7fd51b17d965c04210ac526fa4cfc1dce4c735e530e0019677a920833631adb346bde275b7fa1294e0f39775685b9417143321c370397d97cabf651c74acd933b1f4c75113787250fbef61710e140194b140182669c697252bf07dd70a467a963851e32f81", @nested={0x4, 0xf9}]}, @generic="2db6c91132ec4046828d0a87262caa955a5e703d43d6d5", @typed={0xc, 0x47, 0x0, 0x0, @u64=0x9}]}]}, 0x34e4}, 0x1, 0x0, 0x0, 0x4040084}, 0x30008840) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0xd561, 0x10000000000df, 0xeb2, 0xffffffffffffffff, 0x8000) timer_create$auto(0x2, 0x0, 0x0) timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x26b, 0x4}, {0x0, 0x83}}, 0x0) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) kexec_load$auto(0x200000000007, 0x1, &(0x7f0000000040)={@kbuf=0x0, 0x2aaa, 0x6c0000c000, 0xc000}, 0x4) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) 601.604866ms ago: executing program 1 (id=4222): mmap$auto(0x0, 0x20009, 0x10000, 0xebf, 0x401, 0xffffffffffffffd6) listmount$auto(&(0x7f0000000100)={0x20, @raw, 0xffffffffffffffff}, 0x0, 0x5, 0x1) r0 = openat$auto_fops_u8_(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/nfcsim/nfc1/dropframe\x00', 0x40a102, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r1, @new_prog_fd=0x4, 0x4, @old_map_fd=r2}, 0xa3) bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) r5 = fsopen$auto(0x0, 0x1) write$auto_split_huge_pages_fops_huge_memory(r5, &(0x7f0000000180)="e06183e04626df85110cf08fc2841814e5b6381dbb90e668f95656bf63352b21d4e54d18a550fd9f959a0e4666a1a68cc4fba2428f6b066a0c0036047779ec2ff92a6faa937ea128ae8621d032f53bf4aeb49fd8ad89d559e35d86d4b53e0b84deca12f064c08294d901c5c1ebdfe42a054b0f5518f68d8e8b200d5476", 0x7d) fsconfig$auto(r5, 0x8, 0x0, 0x0, 0x0) fsconfig$auto_FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000000c0)='[\x99}/:H\x00', 0x0, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x3, 0x5) lseek$auto(0x3, 0x0, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="03000100fe000000"], 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)={0x20, r9, 0xb01, 0x70bd24, 0x25dfdbfc, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, 0x7}]}, 0x20}, 0x1, 0x0, 0x0, 0x8041}, 0x4000080) sendmsg$auto_NL80211_CMD_VENDOR(r3, &(0x7f0000001640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001600)={&(0x7f0000000480)={0x1110, r9, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_MLO_LINKS={0x10fc, 0x138, 0x0, 0x1, [{0x1ac, 0x0, 0x0, 0x1, [@NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_CENTER_FREQ1_OFFSET={0x8, 0x123, 0xc0000000}, @NL80211_ATTR_QOS_MAP={0xae, 0xc7, "76e774c166dffc23782d1f26ad068cf7072c7a4813ae238ac157b03d930fbfb0ca93f9d0c199d184b6cf7a2daebf96a2dff8529f76e5ed952818d087118ae071c1ac991df8d7d319f59420088336b2ab67e884490d1e4be6761b35bc22fb80335adfbcb05a2484a15269ac1807cfbb997ab3df79099ec805992dde65a054a87cfb237d2702111cd1da03e9db82b3ba04f2a9a73c14ce64885790da7a2db9ae8326c48a218e73e463487e"}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x9}, @NL80211_ATTR_MAC_MASK={0xb2, 0xd7, "1e4fa56fa0ebebe5e13f46f5d6d50cd195498b1d1db4c49cf6cba0c6723202e37b51e38729b07a63521f1a86da5e5f8b1e078feb478d3675d01809bc17a7cbe6fd85ac42e42f75bd85fe5466b3122e10145de84b3b1a74fbd0da1f02907ff7f9dfdf775b6d53c38c8d283b174bcdb495a6acf7f48e5984cc6a7c795717582dad42ab0f34d38f598e940a9d7decae1f51ac5e23c6037296aa2f1b5be1ff88c525a9de993cda2e1edf204eaca9fbda"}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x3}, @NL80211_ATTR_FILS_DISCOVERY={0x24, 0x126, 0x0, 0x1, [@NL80211_FILS_DISCOVERY_ATTR_INT_MIN={0x8, 0x1, 0x48b}, @NL80211_FILS_DISCOVERY_ATTR_INT_MIN={0x8, 0x1, 0x9}, @NL80211_FILS_DISCOVERY_ATTR_INT_MAX={0x8, 0x2, 0x1}, @NL80211_FILS_DISCOVERY_ATTR_INT_MAX={0x8, 0x2, 0x3}]}]}, {0x870, 0x0, 0x0, 0x1, [@NL80211_ATTR_FRAME={0x844, 0x33, "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"}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf7}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, 0x100}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x7f}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x2}, @NL80211_ATTR_PRIVACY={0x4}]}, {0x6c4, 0x0, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x1}, @NL80211_ATTR_MLO_RECONF_REM_LINKS={0x6, 0x14f, 0x100}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x126, 0x75, 0x0, 0x1, [@typed={0x8, 0xaa, 0x0, 0x0, @fd=r4}, @generic="0bbdb93d128c19440626d34554e38424015375bab2d49b26e31aadf02dfdf4bd3522847861bf553a365a5a32f5fd3f2d4e8d6297193a68b972c3c322dd49d0776079c0babebc08ff538aa41d7d7a3091c67af5a4b808a8445cba27b2f837e7c2de1e408f7babfc83e8540384c3561b837aa678336b7a68e1bd4679d7994a466c655333a4e55a1b89a0c6a912452649e533d2f17ffd68068c", @generic="272bb2902ad37336a36f0a3b77db8b4b990840194cee1a76533b3a7a8c10d6ba8458240f83f78fa986a65ba037a6db1833d2e953dbcfc4ebdf94cc2ed43a88d9e2ded36a5ed78dd597a3", @typed={0xc, 0xb, 0x0, 0x0, @u64=0x8}, @nested={0x18, 0x36, 0x0, 0x1, [@typed={0xc, 0x38, 0x0, 0x0, @u64=0x9}, @typed={0x4, 0xe0}, @nested={0x4, 0xc4}]}, @nested={0x14, 0x95, 0x0, 0x1, [@nested={0x4, 0x64}, @nested={0x4, 0x9}, @typed={0x8, 0x11b, 0x0, 0x0, @pid}]}]}, @NL80211_ATTR_QOS_MAP={0x37, 0xc7, "716a32fb841cf790728a973ce5601e8a38b53f61cfbdb194767953dae14efcc2a2d5f2e1d3c1594899a1c9fceb6aa76dc55473"}, @NL80211_ATTR_HE_OBSS_PD={0xb0, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xa1, 0x5, "f302b4041d0a3cba9b7a9bc43872af0b0e4b17a63b6ed6800cf9d332adcb77e264e62f933f6ec0ac1a3020f4cf4789937c47a0652893cec62ef6f882ea824572f16f152a21a0fc20091ef2c32580057a09b9c9d6a77ff920220fe742ca0c57ffd2bca0aa046147334b2196610fd191bec30db5e9811ea99253bf9afb17e6b2d0fd324ec227c868148f46382efc5368a78b64b50cc4658d916ad9ef0fe7"}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}]}, @NL80211_ATTR_FTM_RESPONDER={0x498, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x8d, 0x3, "2f755798579daa58ae75825c93afead215e4ecb61f432c7d302162690c7b611297b36222b1e4da9b1e2ca02a9f7f01a5f454f87af6c65b8be24757b4c15cf65df5956cc692cb2fa62bc4e9f9b1881023f37a4537f2461c8227d4a5841b734347f10ee5eb64243f36e1bf4e49aa7912f7e7851fcbb50c902f5201a6e77ba83a382b06da79276c991673"}, @NL80211_FTM_RESP_ATTR_LCI={0x101, 0x2, "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"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x5f, 0x3, "6260310accc8a377e169412399fa7f31885a5e9b01c6510b467008a59008df3e560f61baf187830e45cbc9e74ea7fd1b473b57054c961d3ab2d6918246e96563518ef92ba091680098b9674512f1fc1b63a5e86d62a105dd29a258"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xfe, 0x3, "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"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xf6, 0x3, "aaa163abbb4a54979d56b7c5cd5161d34c5605bd7a027aa9664e1af2656b67a02e7f6a05955712b593efeed025a8ae140fb8ca4595b40b5f96bc663179feba4730dac55242445863c8dab34a48992e1d89920bb30c0997d49b8d9177fa88365780692d62d4b7fcb28a0aa658607f91d982f681169c9efc1331783f542e2220862e61ce49800c7ac1862c31ca1cc0f8f06e19b96fb68607d472d5cabf47fe51ebd8121209cca53d48a7e146750f8b7ee1607175fe9ea8fd1448402e57800640be6f2a69919cda495bf8c1b9ed664f2869cd7299c087562ec5395a7b09d380c8e3dcbf5d611ff90d6ab08f26fe7f709d09797d"}, @NL80211_FTM_RESP_ATTR_LCI={0x21, 0x2, "d6887cc4ed01f57135a6615fa1302a513698552f13e597f470f36ff22b"}, @NL80211_FTM_RESP_ATTR_LCI={0x81, 0x2, "545121b3a2d9b4a120cadd4f1b517188b981951fe728aad1e0a37ce59d084ee6a4b13c43043d83d8c151403cfa949fbd990ac17eb3d8f593d40e23625656849335d12274630a35fd98fcd2e2c6a7e144be471129dd17105321c410eb7ab0f7e3f568a49dd203368f17f318a74252faf74bf90fa116539ac28b76cd4387"}]}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x5}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x7fff}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x3}]}]}]}, 0x1110}, 0x1, 0x0, 0x0, 0x20000080}, 0x80) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000000), r5) 599.256431ms ago: executing program 3 (id=4223): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0xc) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) rt_sigqueueinfo$auto(0x0, 0xffff7b6b, 0x0) pwrite64$auto(0xc8, &(0x7f0000000200)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x11\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\x00^\x0fo\x97\xfc\x89\v\xea\xc2\x95\xafQ;C>\x15L\x90\xad\xa4\x1648W\t\x00\x00\x001\x00\x00\x00@X\xb9_\xdd\xa6\xa2E\xd8?\'\x8dg\x81h*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&%`_[\xde\x7f\xde8\xf7\xc1\x94\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\xee\xa9\x0eX\x01\xa3g\xba\x9cc\x90\xe3\xae\xa9\xde\x00\x00\x00B\xb4\xf2&\x00\xe2\xead\xd0\"\x16\x84v\n\xcdN\xb6\xa4\xe0\xb7e\x97 ?\xb5\xa1E=t\x96\xbd\xfd\xc5\xebn\xb7\n\xc2\xbc\xa2\xa8\x04#\x84\xa7R|\xed\x8f\x03\x01\x10wLT\vay\x12\xb63\x9e\a\x8e\xbd\x18y<\xb3\v\x14\x82\x97&\xfcm\x86\x10o\xdc\xf3x\xfd\x06\x87t\xb9$\x94,f\x9b0\xcd\xd3\r\xb1e\'\x19\xc1\xe7>*\xad\xa5+\xa8\x1c\x88\xa1\x0e[\x99\xb6LKZ\x9e\r\xd0r\xe2Ct\xc1\x99\x1b/\xc5P.aUdq\x97\x94\xb9\xa8qU\xae*g\x86\xc9\xa4\xe7\n\vh-v\"o.\xbf6\x13\tFK\x8e\xc6&&\x13\x81\x00\x8c7PS\x9c\xa3\xfb\x1d\xa9\x98\xd47\n\xa7\xd1\x10\xb3i\xd2\xa8\x18f\xb3K\x9b\x9b\x8c\xe8\x84\xa3,5-\xd6\xae\xbd\x1d\xf2o\x99\x02\x1azw9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\bl\x042\x935\x9e\xeeH\x87\xda\x10\x8f^1\x89L`\xf4[\x06\xf6\xc7\xd0#\xdb\xb1\\\xc3\xb1\xb8\xe8\xde2\xbb\xf8I\x9c\x17KI\x8c\f\x1d\xaa\xa0\xdb\xc7\x9e\x81\x90CTe\xfa\x8dq&\x17\x908\xc9T\xffm\x930\x1d\x91\xf8|t\xfd\x18\xd5\xb0\xcbH\xa7\xb6T\n\x11%\xba\x16o\r\xf6\x90k\xfb\a\xa1\x15\x0e\xe1\xce0Q\xd0\x00\xc1\x1a\x1f\xaa8\xfbo)rtYK\"c\xe2c\xbeM\x9bT\x05\xf3\xccC\x8c\x00\xdf\x8c\x1b+\xca\x80', 0x84, 0xe83) mmap$auto(0x0, 0x40009, 0xe1, 0x9b72, 0xffffffffffffffff, 0x81) madvise$auto(0x0, 0xfffffffffffeffff, 0x15) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/dummy_hcd.5/usb6/removable\x00', 0x8080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, 0x0, 0x0) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) ioctl$auto_TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000080)=0x80) unshare$auto(0x40000080) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r3, 0x0, 0x9) write$auto(r2, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00', 0xb) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LIST(r4, 0xc0505510, &(0x7f00000001c0)={0x0, 0x8, 0x5, @raw=0x80, 0x0, "5059d005d689f01a18c00f29b5fa494a0200f0fced42bcfab54dc63a1562e39e060000007c7fd574bccc61a93bf6de84233c"}) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000002c0), 0x1aab40, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xc018aec0, 0x38) 179.9256ms ago: executing program 1 (id=4224): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000400), r0) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010b27bd7000fda5c5a620"], 0x1c}, 0x1, 0x0, 0x9000000, 0x1}, 0x4040080) 0s ago: executing program 1 (id=4225): mmap$auto(0x0, 0x4020007, 0xdf, 0xebf, 0xffffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x9000, 0x8002, 0x2) r0 = open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) mmap$auto(0x5, 0x1bbf, 0x1ff, 0x19, r0, 0x8020000007ffd) close_range$auto(0x2, r0, 0x0) socket(0x2b, 0x4, 0x10000033) socket(0xa, 0x1, 0x84) capset$auto(0x0, 0x0) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0xa0681, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/fail-nth\x00', 0x1c9c82, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000040), 0x1bf8c0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) writev$auto(r2, &(0x7f0000000100)={0x0, 0x9}, 0x2) mmap$auto(0x0, 0x400008, 0x8000000000000df, 0x9b72, r1, 0x6) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$auto_SNDCTL_SYNTH_MEMAVL(r3, 0xc004510e, 0x0) connect$auto(0x3, 0x0, 0x55) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x88c2, 0x0) write$auto(r2, &(0x7f00000000c0)='7\x00\\\x1c\xe7k\x00\x00\x00\x00\x00\x00\x00\x00', 0x8083a) getrandom$auto(&(0x7f0000000200)='+\x00^rp\xcb\" \x81u5z\b\x06m7\x84\xc8\xd8\\\x12GM\x02G\xda(\x7f\xe0\x8b\n\n\a\x9f\xcd\xa9\x97i\xe2\xa0\xdd4/^\x13\xde5\x96j\xf4\xcc\xc6g8\xe5\xf6k\xe4\xa0\xc5XF\xd9R5\x81\xa8\xc5\x11\x1a\x8b\xb3Y\xa4\xa1d\xe0\xbe.&\x7f\xd9o*\"\x1c\xe3\xe9%y\xf7\x8ffm\f\xe5\xb0\x13\x16\xa0\x8b>\x7f\xcea\x9b\xe4\x8e\xd4\xf2\xeb\xa5\xb7\xf4\xef\x90\xea\xd4\xa5$\\\x03\a\xf76\xa6z~,7\xccH\xac,\xb4\x8b\xa5\x8b\xcc\xedRFp[h\x14\rn\x1c\x17\x03\x80:\xcaDS\x8b\x01ssn\xc3a\xa8\xfb\x97\xf4\xb0\f\x99\xe2\x16m\v\x9aa\xb8R', 0x6, 0x3c5f) mmap$auto(0x9000, 0x3fffff, 0x7, 0x11, r1, 0x20000040) kernel console output (not intermixed with test programs): are+0x31/0x40 [ 1150.836974][T22238] do_syscall_64+0x10b/0xf80 [ 1150.836998][T22238] ? clear_bhb_loop+0x40/0x90 [ 1150.837022][T22238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1150.837048][T22238] RIP: 0033:0x7f41af59cdd9 [ 1150.837065][T22238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1150.837083][T22238] RSP: 002b:00007f41b0430028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1150.837102][T22238] RAX: ffffffffffffffda RBX: 00007f41af816090 RCX: 00007f41af59cdd9 [ 1150.837114][T22238] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1150.837126][T22238] RBP: 00007f41af632d69 R08: 0000000000000000 R09: 0000000000000000 [ 1150.837137][T22238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1150.837149][T22238] R13: 00007f41af816128 R14: 00007f41af816090 R15: 00007ffea2824438 [ 1150.837173][T22238] [ 1152.137814][T22254] ubi0: attaching mtd0 [ 1152.177643][T22254] ubi0: scanning is finished [ 1152.250441][T22254] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1152.509217][T22264] netlink: 'syz.2.3654': attribute type 11 has an invalid length. [ 1152.554605][T22264] netlink: 'syz.2.3654': attribute type 11 has an invalid length. [ 1152.600813][T22264] netlink: 'syz.2.3654': attribute type 11 has an invalid length. [ 1152.822672][T22254] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1152.983736][T22266] zswap: compressor not available [ 1153.075197][T22273] FAULT_INJECTION: forcing a failure. [ 1153.075197][T22273] name failslab, interval 1, probability 0, space 0, times 0 [ 1153.151165][T22273] CPU: 0 UID: 0 PID: 22273 Comm: syz.2.3656 Tainted: G L syzkaller #0 PREEMPT(full) [ 1153.151197][T22273] Tainted: [L]=SOFTLOCKUP [ 1153.151204][T22273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1153.151215][T22273] Call Trace: [ 1153.151221][T22273] [ 1153.151229][T22273] dump_stack_lvl+0x100/0x190 [ 1153.151255][T22273] should_fail_ex.cold+0x5/0xa [ 1153.151279][T22273] should_failslab+0xc2/0x120 [ 1153.151302][T22273] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1153.151332][T22273] ? anon_vma_clone+0x2ba/0xcd0 [ 1153.151362][T22273] anon_vma_clone+0x2ba/0xcd0 [ 1153.151395][T22273] anon_vma_fork+0x1bb/0x6b0 [ 1153.151427][T22273] dup_mmap+0x141f/0x2180 [ 1153.151461][T22273] ? __pfx_dup_mmap+0x10/0x10 [ 1153.151484][T22273] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1153.151512][T22273] ? __lock_acquire+0x4a5/0x2630 [ 1153.151532][T22273] ? find_held_lock+0x2b/0x80 [ 1153.151557][T22273] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 1153.151595][T22273] copy_process+0x7b37/0x7fa0 [ 1153.151634][T22273] ? __pfx_copy_process+0x10/0x10 [ 1153.151669][T22273] ? futex_hash+0x141/0x370 [ 1153.151693][T22273] kernel_clone+0x12e/0x9c0 [ 1153.151719][T22273] ? __pfx_futex_wait+0x10/0x10 [ 1153.151745][T22273] ? __pfx_kernel_clone+0x10/0x10 [ 1153.151785][T22273] __do_sys_clone+0xd9/0x120 [ 1153.151812][T22273] ? __pfx___do_sys_clone+0x10/0x10 [ 1153.151840][T22273] ? __fget_files+0x21f/0x3d0 [ 1153.151875][T22273] ? rcu_is_watching+0x12/0xc0 [ 1153.151902][T22273] do_syscall_64+0x10b/0xf80 [ 1153.151926][T22273] ? clear_bhb_loop+0x40/0x90 [ 1153.151949][T22273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1153.151969][T22273] RIP: 0033:0x7f5bb839cdd9 [ 1153.151985][T22273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1153.152003][T22273] RSP: 002b:00007f5bb926bfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1153.152022][T22273] RAX: ffffffffffffffda RBX: 00007f5bb8615fa0 RCX: 00007f5bb839cdd9 [ 1153.152034][T22273] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 1153.152052][T22273] RBP: 00007f5bb8432d69 R08: 0000000000000000 R09: 0000000000000000 [ 1153.152063][T22273] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1153.152074][T22273] R13: 00007f5bb8616038 R14: 00007f5bb8615fa0 R15: 00007fff166f7ca8 [ 1153.152099][T22273] [ 1155.015712][T22295] netlink: 'syz.4.3659': attribute type 11 has an invalid length. [ 1155.888909][T22298] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1156.880715][T22316] netlink: 'syz.3.3664': attribute type 11 has an invalid length. [ 1156.936511][T22316] netlink: 'syz.3.3664': attribute type 11 has an invalid length. [ 1156.979864][T22316] netlink: 'syz.3.3664': attribute type 11 has an invalid length. [ 1157.025236][T22316] netlink: 'syz.3.3664': attribute type 11 has an invalid length. [ 1157.071869][T22316] netlink: 'syz.3.3664': attribute type 11 has an invalid length. [ 1157.120943][T22316] netlink: 'syz.3.3664': attribute type 11 has an invalid length. [ 1158.072927][T22336] netlink: 330 bytes leftover after parsing attributes in process `syz.3.3669'. [ 1158.559438][T22358] netlink: 186 bytes leftover after parsing attributes in process `syz.1.3673'. [ 1160.151043][T22393] FAULT_INJECTION: forcing a failure. [ 1160.151043][T22393] name failslab, interval 1, probability 0, space 0, times 0 [ 1160.377933][T22393] CPU: 0 UID: 0 PID: 22393 Comm: syz.3.3681 Tainted: G L syzkaller #0 PREEMPT(full) [ 1160.377968][T22393] Tainted: [L]=SOFTLOCKUP [ 1160.377975][T22393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1160.377986][T22393] Call Trace: [ 1160.377993][T22393] [ 1160.378000][T22393] dump_stack_lvl+0x100/0x190 [ 1160.378026][T22393] should_fail_ex.cold+0x5/0xa [ 1160.378057][T22393] should_failslab+0xc2/0x120 [ 1160.378080][T22393] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1160.378108][T22393] ? copy_net_ns+0x135/0x7c0 [ 1160.378135][T22393] copy_net_ns+0x135/0x7c0 [ 1160.378157][T22393] ? copy_cgroup_ns+0x71/0x970 [ 1160.378177][T22393] create_new_namespaces+0x3ea/0xac0 [ 1160.378207][T22393] unshare_nsproxy_namespaces+0xf2/0x220 [ 1160.378234][T22393] ksys_unshare+0x438/0xab0 [ 1160.378264][T22393] ? __pfx_ksys_unshare+0x10/0x10 [ 1160.378290][T22393] ? xfd_validate_state+0x129/0x190 [ 1160.378309][T22393] ? ksys_write+0x1ac/0x250 [ 1160.378336][T22393] __x64_sys_unshare+0x31/0x40 [ 1160.378363][T22393] do_syscall_64+0x10b/0xf80 [ 1160.378387][T22393] ? clear_bhb_loop+0x40/0x90 [ 1160.378410][T22393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1160.378429][T22393] RIP: 0033:0x7f41af59cdd9 [ 1160.378445][T22393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1160.378463][T22393] RSP: 002b:00007f41b0430028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1160.378482][T22393] RAX: ffffffffffffffda RBX: 00007f41af816090 RCX: 00007f41af59cdd9 [ 1160.378494][T22393] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1160.378505][T22393] RBP: 00007f41af632d69 R08: 0000000000000000 R09: 0000000000000000 [ 1160.378516][T22393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1160.378527][T22393] R13: 00007f41af816128 R14: 00007f41af816090 R15: 00007ffea2824438 [ 1160.378549][T22393] [ 1162.102577][T22414] netlink: 'syz.2.3684': attribute type 11 has an invalid length. [ 1162.535472][T10887] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 1162.543597][T10887] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 1164.056396][T22448] ubi0: attaching mtd0 [ 1164.110196][T22448] ubi0: scanning is finished [ 1164.254598][T22448] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1165.068317][T22448] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1165.087978][T22476] snd_virmidi snd_virmidi.0: control 16781581:65539:6:'x?F/zF˷fC:7 is already present [ 1166.904191][T22504] ovs_: entered promiscuous mode [ 1167.735731][T10887] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 1167.743600][T10887] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1168.433660][T22550] netlink: 'syz.4.3707': attribute type 11 has an invalid length. [ 1168.560669][T22550] netlink: 'syz.4.3707': attribute type 11 has an invalid length. [ 1168.709156][T22550] netlink: 'syz.4.3707': attribute type 11 has an invalid length. [ 1168.840577][T22550] netlink: 'syz.4.3707': attribute type 11 has an invalid length. [ 1168.979816][T22550] netlink: 'syz.4.3707': attribute type 11 has an invalid length. [ 1169.890033][T22563] cifs: Unknown parameter 'no+ 1`rsFn)aHāh`9kA}1\D@.ZCg^' [ 1170.023582][T22568] snd_virmidi snd_virmidi.0: control 16781581:65539:6:'x?F/zF˷fC:7 is already present [ 1173.107639][T22602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3716'. [ 1174.485313][T22631] netlink: 'syz.2.3726': attribute type 11 has an invalid length. [ 1174.743439][T22636] snd_virmidi snd_virmidi.0: control 16781581:65539:8:'x?F/zF˷fC:7 is already present [ 1174.913164][T22639] ubi0: attaching mtd0 [ 1174.939516][T22639] ubi0: scanning is finished [ 1174.980451][T22639] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1175.273690][T22639] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1176.219685][T22646] TCP: TCP_TX_DELAY enabled [ 1176.514206][T22660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3734'. [ 1177.149309][T10887] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 1177.157004][T10887] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1177.548431][T22681] FAULT_INJECTION: forcing a failure. [ 1177.548431][T22681] name failslab, interval 1, probability 0, space 0, times 0 [ 1177.764001][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.770378][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.822304][T22681] CPU: 0 UID: 0 PID: 22681 Comm: syz.1.3738 Tainted: G L syzkaller #0 PREEMPT(full) [ 1177.822337][T22681] Tainted: [L]=SOFTLOCKUP [ 1177.822344][T22681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1177.822356][T22681] Call Trace: [ 1177.822363][T22681] [ 1177.822371][T22681] dump_stack_lvl+0x100/0x190 [ 1177.822396][T22681] should_fail_ex.cold+0x5/0xa [ 1177.822420][T22681] should_failslab+0xc2/0x120 [ 1177.822443][T22681] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1177.822473][T22681] ? __d_alloc+0x34/0xa40 [ 1177.822502][T22681] __d_alloc+0x34/0xa40 [ 1177.822532][T22681] d_alloc+0x4a/0x1e0 [ 1177.822558][T22681] lookup_one_qstr_excl+0x171/0x250 [ 1177.822589][T22681] start_dirop+0x59/0xb0 [ 1177.822611][T22681] simple_start_creating+0xf9/0x110 [ 1177.822633][T22681] ? __pfx_simple_start_creating+0x10/0x10 [ 1177.822656][T22681] ? mntput+0x70/0xa0 [ 1177.822675][T22681] ? simple_pin_fs+0xa3/0x190 [ 1177.822695][T22681] debugfs_start_creating.part.0+0x82/0x170 [ 1177.822726][T22681] __debugfs_create_file+0xb3/0x4f0 [ 1177.822759][T22681] debugfs_create_file_full+0x41/0x60 [ 1177.822789][T22681] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 1177.822813][T22681] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1177.822839][T22681] ? ida_alloc_range+0x70d/0x830 [ 1177.822884][T22681] ? lockdep_init_map_type+0x5c/0x250 [ 1177.822908][T22681] preinit_net.part.0+0x252/0x920 [ 1177.822932][T22681] copy_net_ns+0x339/0x7c0 [ 1177.822957][T22681] create_new_namespaces+0x3ea/0xac0 [ 1177.822987][T22681] unshare_nsproxy_namespaces+0xf2/0x220 [ 1177.823025][T22681] ksys_unshare+0x438/0xab0 [ 1177.823054][T22681] ? __pfx_ksys_unshare+0x10/0x10 [ 1177.823081][T22681] ? xfd_validate_state+0x129/0x190 [ 1177.823100][T22681] ? ksys_write+0x1ac/0x250 [ 1177.823129][T22681] __x64_sys_unshare+0x31/0x40 [ 1177.823157][T22681] do_syscall_64+0x10b/0xf80 [ 1177.823181][T22681] ? clear_bhb_loop+0x40/0x90 [ 1177.823204][T22681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1177.823223][T22681] RIP: 0033:0x7f2874f9cdd9 [ 1177.823240][T22681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1177.823259][T22681] RSP: 002b:00007f2875e6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1177.823278][T22681] RAX: ffffffffffffffda RBX: 00007f2875216090 RCX: 00007f2874f9cdd9 [ 1177.823290][T22681] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1177.823301][T22681] RBP: 00007f2875032d69 R08: 0000000000000000 R09: 0000000000000000 [ 1177.823312][T22681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1177.823323][T22681] R13: 00007f2875216128 R14: 00007f2875216090 R15: 00007fff35696378 [ 1177.823347][T22681] [ 1181.124029][T22708] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1181.150010][T22708] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1181.196079][T22708] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1181.229080][T22708] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1181.293125][T22708] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1181.314332][T22708] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1181.364297][T22708] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1181.398905][T22708] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1181.454825][T22715] netlink: 'syz.4.3746': attribute type 11 has an invalid length. [ 1182.562181][T10887] Bluetooth: hci4: command 0x0c1a tx timeout [ 1183.203801][T10887] Bluetooth: hci0: command 0x0c1a tx timeout [ 1183.363475][T10887] Bluetooth: hci2: command 0x0406 tx timeout [ 1183.442718][T10887] Bluetooth: hci1: command 0x0406 tx timeout [ 1183.527709][T22735] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3751'. [ 1183.655685][T22744] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3751'. [ 1184.642056][T10887] Bluetooth: hci4: command 0x0c1a tx timeout [ 1185.281980][T10887] Bluetooth: hci0: command 0x0c1a tx timeout [ 1185.442181][T10887] Bluetooth: hci2: command 0x0406 tx timeout [ 1185.523446][T10887] Bluetooth: hci1: command 0x0406 tx timeout [ 1185.749315][T22779] FAULT_INJECTION: forcing a failure. [ 1185.749315][T22779] name failslab, interval 1, probability 0, space 0, times 0 [ 1185.947409][T22779] CPU: 0 UID: 0 PID: 22779 Comm: syz.4.3763 Tainted: G L syzkaller #0 PREEMPT(full) [ 1185.947442][T22779] Tainted: [L]=SOFTLOCKUP [ 1185.947449][T22779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1185.947459][T22779] Call Trace: [ 1185.947466][T22779] [ 1185.947474][T22779] dump_stack_lvl+0x100/0x190 [ 1185.947501][T22779] should_fail_ex.cold+0x5/0xa [ 1185.947525][T22779] should_failslab+0xc2/0x120 [ 1185.947547][T22779] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1185.947578][T22779] ? alloc_inode+0x68/0x250 [ 1185.947608][T22779] ? simple_start_creating+0xb0/0x110 [ 1185.947630][T22779] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 1185.947659][T22779] alloc_inode+0x68/0x250 [ 1185.947687][T22779] new_inode+0x22/0x1c0 [ 1185.947718][T22779] __debugfs_create_file+0x105/0x4f0 [ 1185.947749][T22779] debugfs_create_file_full+0x41/0x60 [ 1185.947779][T22779] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 1185.947803][T22779] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1185.947845][T22779] ? lockdep_init_map_type+0x5c/0x250 [ 1185.947868][T22779] preinit_net.part.0+0x43b/0x920 [ 1185.947891][T22779] copy_net_ns+0x339/0x7c0 [ 1185.947916][T22779] create_new_namespaces+0x3ea/0xac0 [ 1185.947953][T22779] unshare_nsproxy_namespaces+0xf2/0x220 [ 1185.947981][T22779] ksys_unshare+0x438/0xab0 [ 1185.948010][T22779] ? __pfx_ksys_unshare+0x10/0x10 [ 1185.948036][T22779] ? xfd_validate_state+0x129/0x190 [ 1185.948055][T22779] ? __hrtimer_rearm_deferred+0x24d/0x740 [ 1185.948087][T22779] __x64_sys_unshare+0x31/0x40 [ 1185.948115][T22779] do_syscall_64+0x10b/0xf80 [ 1185.948139][T22779] ? clear_bhb_loop+0x40/0x90 [ 1185.948162][T22779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1185.948181][T22779] RIP: 0033:0x7f9d8739cdd9 [ 1185.948198][T22779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1185.948216][T22779] RSP: 002b:00007f9d8822b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1185.948235][T22779] RAX: ffffffffffffffda RBX: 00007f9d87616090 RCX: 00007f9d8739cdd9 [ 1185.948248][T22779] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1185.948259][T22779] RBP: 00007f9d87432d69 R08: 0000000000000000 R09: 0000000000000000 [ 1185.948271][T22779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1185.948281][T22779] R13: 00007f9d87616128 R14: 00007f9d87616090 R15: 00007ffd611bfe28 [ 1185.948305][T22779] [ 1185.948313][T22779] debugfs: out of free dentries, can not create file 'net_notrefcnt@ffff8880355729b8' [ 1188.788419][T22800] FAULT_INJECTION: forcing a failure. [ 1188.788419][T22800] name failslab, interval 1, probability 0, space 0, times 0 [ 1188.961998][T22800] CPU: 0 UID: 0 PID: 22800 Comm: syz.3.3767 Tainted: G L syzkaller #0 PREEMPT(full) [ 1188.962031][T22800] Tainted: [L]=SOFTLOCKUP [ 1188.962039][T22800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1188.962050][T22800] Call Trace: [ 1188.962057][T22800] [ 1188.962064][T22800] dump_stack_lvl+0x100/0x190 [ 1188.962091][T22800] should_fail_ex.cold+0x5/0xa [ 1188.962115][T22800] should_failslab+0xc2/0x120 [ 1188.962139][T22800] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1188.962169][T22800] ? __d_alloc+0x34/0xa40 [ 1188.962198][T22800] __d_alloc+0x34/0xa40 [ 1188.962226][T22800] d_alloc+0x4a/0x1e0 [ 1188.962252][T22800] lookup_one_qstr_excl+0x171/0x250 [ 1188.962284][T22800] start_dirop+0x59/0xb0 [ 1188.962306][T22800] simple_start_creating+0xf9/0x110 [ 1188.962329][T22800] ? __pfx_simple_start_creating+0x10/0x10 [ 1188.962352][T22800] ? mntput+0x70/0xa0 [ 1188.962372][T22800] ? simple_pin_fs+0xa3/0x190 [ 1188.962392][T22800] debugfs_start_creating.part.0+0x82/0x170 [ 1188.962422][T22800] __debugfs_create_file+0xb3/0x4f0 [ 1188.962453][T22800] debugfs_create_file_full+0x41/0x60 [ 1188.962483][T22800] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 1188.962506][T22800] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1188.962547][T22800] ? lockdep_init_map_type+0x5c/0x250 [ 1188.962571][T22800] preinit_net.part.0+0x43b/0x920 [ 1188.962594][T22800] copy_net_ns+0x339/0x7c0 [ 1188.962620][T22800] create_new_namespaces+0x3ea/0xac0 [ 1188.962650][T22800] unshare_nsproxy_namespaces+0xf2/0x220 [ 1188.962677][T22800] ksys_unshare+0x438/0xab0 [ 1188.962706][T22800] ? __pfx_ksys_unshare+0x10/0x10 [ 1188.962732][T22800] ? xfd_validate_state+0x129/0x190 [ 1188.962752][T22800] ? ksys_write+0x1ac/0x250 [ 1188.962779][T22800] __x64_sys_unshare+0x31/0x40 [ 1188.962807][T22800] do_syscall_64+0x10b/0xf80 [ 1188.962830][T22800] ? clear_bhb_loop+0x40/0x90 [ 1188.962852][T22800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1188.962871][T22800] RIP: 0033:0x7f41af59cdd9 [ 1188.962888][T22800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1188.962906][T22800] RSP: 002b:00007f41b0430028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1188.962925][T22800] RAX: ffffffffffffffda RBX: 00007f41af816090 RCX: 00007f41af59cdd9 [ 1188.962937][T22800] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1188.962948][T22800] RBP: 00007f41af632d69 R08: 0000000000000000 R09: 0000000000000000 [ 1188.962959][T22800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1188.962970][T22800] R13: 00007f41af816128 R14: 00007f41af816090 R15: 00007ffea2824438 [ 1188.962999][T22800] [ 1189.919571][T22806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3768'. [ 1192.239030][T22824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3773'. [ 1192.755994][T22834] snd_virmidi snd_virmidi.0: control 16781581:65539:6:'x?F/zF˷fC:7 is already present [ 1193.157417][T22839] netlink: 334 bytes leftover after parsing attributes in process `syz.4.3777'. [ 1193.239464][T22839] netlink: 'syz.4.3777': attribute type 3 has an invalid length. [ 1194.219351][T22863] FAULT_INJECTION: forcing a failure. [ 1194.219351][T22863] name failslab, interval 1, probability 0, space 0, times 0 [ 1194.430583][T22864] ubi0: attaching mtd0 [ 1194.719743][T22864] ubi0: scanning is finished [ 1194.769898][T22863] CPU: 0 UID: 0 PID: 22863 Comm: syz.4.3781 Tainted: G L syzkaller #0 PREEMPT(full) [ 1194.769931][T22863] Tainted: [L]=SOFTLOCKUP [ 1194.769939][T22863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1194.769949][T22863] Call Trace: [ 1194.769956][T22863] [ 1194.769964][T22863] dump_stack_lvl+0x100/0x190 [ 1194.769990][T22863] should_fail_ex.cold+0x5/0xa [ 1194.770021][T22863] should_failslab+0xc2/0x120 [ 1194.770044][T22863] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1194.770075][T22863] ? alloc_inode+0x68/0x250 [ 1194.770103][T22863] ? simple_start_creating+0xb0/0x110 [ 1194.770126][T22863] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 1194.770154][T22863] alloc_inode+0x68/0x250 [ 1194.770183][T22863] new_inode+0x22/0x1c0 [ 1194.770213][T22863] __debugfs_create_file+0x105/0x4f0 [ 1194.770244][T22863] debugfs_create_file_full+0x41/0x60 [ 1194.770274][T22863] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 1194.770297][T22863] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1194.770318][T22863] ? ida_alloc_range+0x70d/0x830 [ 1194.770361][T22863] ? lockdep_init_map_type+0x5c/0x250 [ 1194.770384][T22863] preinit_net.part.0+0x252/0x920 [ 1194.770407][T22863] copy_net_ns+0x339/0x7c0 [ 1194.770433][T22863] create_new_namespaces+0x3ea/0xac0 [ 1194.770463][T22863] unshare_nsproxy_namespaces+0xf2/0x220 [ 1194.770491][T22863] ksys_unshare+0x438/0xab0 [ 1194.770520][T22863] ? __pfx_ksys_unshare+0x10/0x10 [ 1194.770547][T22863] ? xfd_validate_state+0x129/0x190 [ 1194.770566][T22863] ? ksys_write+0x1ac/0x250 [ 1194.770601][T22863] __x64_sys_unshare+0x31/0x40 [ 1194.770630][T22863] do_syscall_64+0x10b/0xf80 [ 1194.770653][T22863] ? clear_bhb_loop+0x40/0x90 [ 1194.770676][T22863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1194.770695][T22863] RIP: 0033:0x7f9d8739cdd9 [ 1194.770713][T22863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1194.770732][T22863] RSP: 002b:00007f9d8822b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1194.770750][T22863] RAX: ffffffffffffffda RBX: 00007f9d87616090 RCX: 00007f9d8739cdd9 [ 1194.770763][T22863] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1194.770774][T22863] RBP: 00007f9d87432d69 R08: 0000000000000000 R09: 0000000000000000 [ 1194.770785][T22863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1194.770796][T22863] R13: 00007f9d87616128 R14: 00007f9d87616090 R15: 00007ffd611bfe28 [ 1194.770819][T22863] [ 1194.770827][T22863] debugfs: out of free dentries, can not create file 'net_refcnt@ffff88806321a940' [ 1195.073777][T22864] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1195.803654][T22864] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1199.127595][T22884] snd_virmidi snd_virmidi.0: control 16781581:65539:8:'x?F/zF˷fC:7 is already present [ 1199.588935][T22890] netlink: 'syz.2.3786': attribute type 11 has an invalid length. [ 1199.630276][T22890] netlink: 'syz.2.3786': attribute type 11 has an invalid length. [ 1199.668378][T22890] netlink: 'syz.2.3786': attribute type 11 has an invalid length. [ 1199.721816][T22890] netlink: 'syz.2.3786': attribute type 11 has an invalid length. [ 1199.766781][T22890] netlink: 'syz.2.3786': attribute type 11 has an invalid length. [ 1199.813693][T22890] netlink: 'syz.2.3786': attribute type 11 has an invalid length. [ 1199.830135][T22892] FAULT_INJECTION: forcing a failure. [ 1199.830135][T22892] name failslab, interval 1, probability 0, space 0, times 0 [ 1199.907101][T22892] CPU: 0 UID: 0 PID: 22892 Comm: syz.1.3787 Tainted: G L syzkaller #0 PREEMPT(full) [ 1199.907133][T22892] Tainted: [L]=SOFTLOCKUP [ 1199.907141][T22892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1199.907153][T22892] Call Trace: [ 1199.907160][T22892] [ 1199.907167][T22892] dump_stack_lvl+0x100/0x190 [ 1199.907193][T22892] should_fail_ex.cold+0x5/0xa [ 1199.907217][T22892] ? ima_write_template_field_data+0x59/0x1d0 [ 1199.907240][T22892] should_failslab+0xc2/0x120 [ 1199.907262][T22892] __kmalloc_noprof+0xe0/0x850 [ 1199.907291][T22892] ? __x64_sys_openat+0x12d/0x210 [ 1199.907319][T22892] ? do_syscall_64+0x10b/0xf80 [ 1199.907347][T22892] ima_write_template_field_data+0x59/0x1d0 [ 1199.907373][T22892] ima_eventdigest_init_common+0x158/0x460 [ 1199.907398][T22892] ? __pfx_ima_eventdigest_init_common+0x10/0x10 [ 1199.907434][T22892] ? trace_kmalloc+0x70/0x110 [ 1199.907455][T22892] ? __kasan_kmalloc+0xaa/0xb0 [ 1199.907474][T22892] ? __kmalloc_noprof+0x320/0x850 [ 1199.907507][T22892] ima_alloc_init_template+0x399/0x6d0 [ 1199.907544][T22892] ima_store_measurement+0x1e3/0x5b0 [ 1199.907576][T22892] ? __pfx_ima_store_measurement+0x10/0x10 [ 1199.907616][T22892] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 1199.907645][T22892] process_measurement+0x19cc/0x2350 [ 1199.907682][T22892] ? __pfx_process_measurement+0x10/0x10 [ 1199.907714][T22892] ? find_held_lock+0x2b/0x80 [ 1199.907739][T22892] ? rcu_read_unlock+0x17/0x60 [ 1199.907784][T22892] ? seq_open+0x116/0x170 [ 1199.907814][T22892] ? inode_to_bdi+0x9e/0x160 [ 1199.907837][T22892] ima_file_check+0xcc/0x120 [ 1199.907864][T22892] ? __pfx_ima_file_check+0x10/0x10 [ 1199.907898][T22892] security_file_post_open+0xc4/0x210 [ 1199.907919][T22892] path_openat+0x1418/0x31a0 [ 1199.907949][T22892] ? __pfx_path_openat+0x10/0x10 [ 1199.907980][T22892] do_file_open+0x20e/0x430 [ 1199.908056][T22892] ? __pfx_do_file_open+0x10/0x10 [ 1199.908096][T22892] ? alloc_fd+0x476/0x790 [ 1199.908122][T22892] ? do_getname+0x191/0x390 [ 1199.908152][T22892] do_sys_openat2+0x10d/0x1e0 [ 1199.908181][T22892] ? __pfx_do_sys_openat2+0x10/0x10 [ 1199.908212][T22892] ? __fget_files+0x21f/0x3d0 [ 1199.908240][T22892] __x64_sys_openat+0x12d/0x210 [ 1199.908270][T22892] ? __pfx___x64_sys_openat+0x10/0x10 [ 1199.908303][T22892] ? rcu_is_watching+0x12/0xc0 [ 1199.908329][T22892] do_syscall_64+0x10b/0xf80 [ 1199.908352][T22892] ? clear_bhb_loop+0x40/0x90 [ 1199.908375][T22892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1199.908394][T22892] RIP: 0033:0x7f2874f9cdd9 [ 1199.908411][T22892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1199.908429][T22892] RSP: 002b:00007f2875e8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1199.908449][T22892] RAX: ffffffffffffffda RBX: 00007f2875215fa0 RCX: 00007f2874f9cdd9 [ 1199.908462][T22892] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 1199.908474][T22892] RBP: 00007f2875032d69 R08: 0000000000000000 R09: 0000000000000000 [ 1199.908486][T22892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1199.908497][T22892] R13: 00007f2875216038 R14: 00007f2875215fa0 R15: 00007fff35696378 [ 1199.908521][T22892] [ 1200.650508][ T30] audit: type=1804 audit(1843104536.570:51): pid=22892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.1.3787" name="/newroot/sys/kernel/tracing/set_event" dev="tracefs" ino=1047 res=0 errno=0 [ 1203.019649][T22941] netlink: 'syz.1.3798': attribute type 11 has an invalid length. [ 1203.071081][T22941] netlink: 'syz.1.3798': attribute type 11 has an invalid length. [ 1203.113156][T22941] netlink: 'syz.1.3798': attribute type 11 has an invalid length. [ 1203.152698][T22941] netlink: 'syz.1.3798': attribute type 11 has an invalid length. [ 1203.559871][T22954] FAULT_INJECTION: forcing a failure. [ 1203.559871][T22954] name failslab, interval 1, probability 0, space 0, times 0 [ 1203.715467][T22954] CPU: 0 UID: 0 PID: 22954 Comm: syz.4.3803 Tainted: G L syzkaller #0 PREEMPT(full) [ 1203.715500][T22954] Tainted: [L]=SOFTLOCKUP [ 1203.715506][T22954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1203.715517][T22954] Call Trace: [ 1203.715524][T22954] [ 1203.715532][T22954] dump_stack_lvl+0x100/0x190 [ 1203.715557][T22954] should_fail_ex.cold+0x5/0xa [ 1203.715581][T22954] should_failslab+0xc2/0x120 [ 1203.715604][T22954] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1203.715633][T22954] ? __d_alloc+0x34/0xa40 [ 1203.715664][T22954] __d_alloc+0x34/0xa40 [ 1203.715691][T22954] d_alloc+0x4a/0x1e0 [ 1203.715717][T22954] lookup_one_qstr_excl+0x171/0x250 [ 1203.715747][T22954] start_dirop+0x59/0xb0 [ 1203.715769][T22954] simple_start_creating+0xf9/0x110 [ 1203.715792][T22954] ? __pfx_simple_start_creating+0x10/0x10 [ 1203.715815][T22954] ? mntput+0x70/0xa0 [ 1203.715834][T22954] ? simple_pin_fs+0xa3/0x190 [ 1203.715854][T22954] debugfs_start_creating.part.0+0x82/0x170 [ 1203.715884][T22954] __debugfs_create_file+0xb3/0x4f0 [ 1203.715914][T22954] debugfs_create_file_full+0x41/0x60 [ 1203.715945][T22954] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 1203.715968][T22954] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1203.715989][T22954] ? ida_alloc_range+0x70d/0x830 [ 1203.716032][T22954] ? lockdep_init_map_type+0x5c/0x250 [ 1203.716055][T22954] preinit_net.part.0+0x252/0x920 [ 1203.716079][T22954] copy_net_ns+0x339/0x7c0 [ 1203.716104][T22954] create_new_namespaces+0x3ea/0xac0 [ 1203.716134][T22954] unshare_nsproxy_namespaces+0xf2/0x220 [ 1203.716162][T22954] ksys_unshare+0x438/0xab0 [ 1203.716198][T22954] ? __pfx_ksys_unshare+0x10/0x10 [ 1203.716224][T22954] ? xfd_validate_state+0x129/0x190 [ 1203.716243][T22954] ? ksys_write+0x1ac/0x250 [ 1203.716270][T22954] __x64_sys_unshare+0x31/0x40 [ 1203.716297][T22954] do_syscall_64+0x10b/0xf80 [ 1203.716321][T22954] ? clear_bhb_loop+0x40/0x90 [ 1203.716343][T22954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1203.716363][T22954] RIP: 0033:0x7f9d8739cdd9 [ 1203.716380][T22954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1203.716398][T22954] RSP: 002b:00007f9d8822b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1203.716417][T22954] RAX: ffffffffffffffda RBX: 00007f9d87616090 RCX: 00007f9d8739cdd9 [ 1203.716429][T22954] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1203.716440][T22954] RBP: 00007f9d87432d69 R08: 0000000000000000 R09: 0000000000000000 [ 1203.716451][T22954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1203.716466][T22954] R13: 00007f9d87616128 R14: 00007f9d87616090 R15: 00007ffd611bfe28 [ 1203.716489][T22954] [ 1205.484791][T22929] kexec: Could not allocate control_code_buffer [ 1206.199011][T22974] Invalid ELF header magic: != ELF [ 1206.551748][T22980] FAULT_INJECTION: forcing a failure. [ 1206.551748][T22980] name failslab, interval 1, probability 0, space 0, times 0 [ 1206.634218][T22980] CPU: 0 UID: 0 PID: 22980 Comm: syz.2.3810 Tainted: G L syzkaller #0 PREEMPT(full) [ 1206.634251][T22980] Tainted: [L]=SOFTLOCKUP [ 1206.634258][T22980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1206.634269][T22980] Call Trace: [ 1206.634276][T22980] [ 1206.634284][T22980] dump_stack_lvl+0x100/0x190 [ 1206.634309][T22980] should_fail_ex.cold+0x5/0xa [ 1206.634337][T22980] should_failslab+0xc2/0x120 [ 1206.634360][T22980] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1206.634389][T22980] ? seq_open+0x55/0x170 [ 1206.634422][T22980] seq_open+0x55/0x170 [ 1206.634451][T22980] __seq_open_private+0x3e/0xd0 [ 1206.634471][T22980] seq_open_net+0x1ab/0x2a0 [ 1206.634497][T22980] ? __pfx_seq_open_net+0x10/0x10 [ 1206.634524][T22980] proc_reg_open+0x2ab/0x5f0 [ 1206.634548][T22980] do_dentry_open+0x6d8/0x1660 [ 1206.634569][T22980] ? __pfx_proc_reg_open+0x10/0x10 [ 1206.634597][T22980] vfs_open+0x82/0x3f0 [ 1206.634626][T22980] path_openat+0x208c/0x31a0 [ 1206.634657][T22980] ? __pfx_path_openat+0x10/0x10 [ 1206.634687][T22980] do_file_open+0x20e/0x430 [ 1206.634712][T22980] ? __pfx_do_file_open+0x10/0x10 [ 1206.634743][T22980] ? __pfx_kfree_link+0x10/0x10 [ 1206.634767][T22980] ? alloc_fd+0x476/0x790 [ 1206.634792][T22980] ? do_getname+0x191/0x390 [ 1206.634821][T22980] do_sys_openat2+0x10d/0x1e0 [ 1206.634849][T22980] ? __pfx_do_sys_openat2+0x10/0x10 [ 1206.634879][T22980] ? __fget_files+0x21f/0x3d0 [ 1206.634905][T22980] __x64_sys_openat+0x12d/0x210 [ 1206.634934][T22980] ? __pfx___x64_sys_openat+0x10/0x10 [ 1206.634971][T22980] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 1206.635000][T22980] ? syscall_user_dispatch+0x76/0x130 [ 1206.635024][T22980] do_syscall_64+0x10b/0xf80 [ 1206.635048][T22980] ? clear_bhb_loop+0x40/0x90 [ 1206.635071][T22980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1206.635090][T22980] RIP: 0033:0x7f5bb839cdd9 [ 1206.635107][T22980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1206.635125][T22980] RSP: 002b:00007f5bb926c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1206.635143][T22980] RAX: ffffffffffffffda RBX: 00007f5bb8615fa0 RCX: 00007f5bb839cdd9 [ 1206.635156][T22980] RDX: 0000000000000800 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 1206.635169][T22980] RBP: 00007f5bb8432d69 R08: 0000000000000000 R09: 0000000000000000 [ 1206.635180][T22980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1206.635191][T22980] R13: 00007f5bb8616038 R14: 00007f5bb8615fa0 R15: 00007fff166f7ca8 [ 1206.635214][T22980] [ 1207.387788][T22984] nla_validate_range_unsigned: 2 callbacks suppressed [ 1207.387807][T22984] netlink: 'syz.2.3811': attribute type 11 has an invalid length. [ 1207.441738][T22984] netlink: 'syz.2.3811': attribute type 11 has an invalid length. [ 1207.464237][T22984] netlink: 'syz.2.3811': attribute type 11 has an invalid length. [ 1207.494839][T22984] netlink: 'syz.2.3811': attribute type 11 has an invalid length. [ 1207.522206][T22984] netlink: 'syz.2.3811': attribute type 11 has an invalid length. [ 1207.539344][T22984] netlink: 'syz.2.3811': attribute type 11 has an invalid length. [ 1207.769258][T22989] zram0: detected capacity change from 0 to 16 [ 1209.049182][T23009] netlink: 'syz.3.3819': attribute type 11 has an invalid length. [ 1209.955170][T23031] FAULT_INJECTION: forcing a failure. [ 1209.955170][T23031] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1210.199110][T23031] CPU: 0 UID: 0 PID: 23031 Comm: syz.1.3822 Tainted: G L syzkaller #0 PREEMPT(full) [ 1210.199143][T23031] Tainted: [L]=SOFTLOCKUP [ 1210.199149][T23031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1210.199160][T23031] Call Trace: [ 1210.199167][T23031] [ 1210.199175][T23031] dump_stack_lvl+0x100/0x190 [ 1210.199200][T23031] should_fail_ex.cold+0x5/0xa [ 1210.199224][T23031] _copy_from_user+0x2e/0xd0 [ 1210.199257][T23031] memdup_user+0x6b/0xe0 [ 1210.199278][T23031] __x64_sys_kexec_load+0x18e/0x230 [ 1210.199311][T23031] do_syscall_64+0x10b/0xf80 [ 1210.199335][T23031] ? clear_bhb_loop+0x40/0x90 [ 1210.199360][T23031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1210.199382][T23031] RIP: 0033:0x7f2874f9cdd9 [ 1210.199398][T23031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1210.199416][T23031] RSP: 002b:00007f2875e2c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 1210.199435][T23031] RAX: ffffffffffffffda RBX: 00007f2875216270 RCX: 00007f2874f9cdd9 [ 1210.199447][T23031] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 0000200000000007 [ 1210.199460][T23031] RBP: 00007f2875e2c090 R08: 0000000000000000 R09: 0000000000000000 [ 1210.199471][T23031] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 1210.199482][T23031] R13: 00007f2875216308 R14: 00007f2875216270 R15: 00007fff35696378 [ 1210.199505][T23031] [ 1210.578163][T23041] FAULT_INJECTION: forcing a failure. [ 1210.578163][T23041] name failslab, interval 1, probability 0, space 0, times 0 [ 1210.733872][T23041] CPU: 0 UID: 0 PID: 23041 Comm: syz.2.3827 Tainted: G L syzkaller #0 PREEMPT(full) [ 1210.733905][T23041] Tainted: [L]=SOFTLOCKUP [ 1210.733913][T23041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1210.733924][T23041] Call Trace: [ 1210.733931][T23041] [ 1210.733939][T23041] dump_stack_lvl+0x100/0x190 [ 1210.733970][T23041] should_fail_ex.cold+0x5/0xa [ 1210.733994][T23041] should_failslab+0xc2/0x120 [ 1210.734017][T23041] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1210.734047][T23041] ? __d_alloc+0x34/0xa40 [ 1210.734077][T23041] __d_alloc+0x34/0xa40 [ 1210.734104][T23041] d_alloc+0x4a/0x1e0 [ 1210.734130][T23041] lookup_one_qstr_excl+0x171/0x250 [ 1210.734160][T23041] start_dirop+0x59/0xb0 [ 1210.734182][T23041] simple_start_creating+0xf9/0x110 [ 1210.734205][T23041] ? __pfx_simple_start_creating+0x10/0x10 [ 1210.734228][T23041] ? mntput+0x70/0xa0 [ 1210.734247][T23041] ? simple_pin_fs+0xa3/0x190 [ 1210.734267][T23041] debugfs_start_creating.part.0+0x82/0x170 [ 1210.734298][T23041] __debugfs_create_file+0xb3/0x4f0 [ 1210.734328][T23041] debugfs_create_file_full+0x41/0x60 [ 1210.734358][T23041] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 1210.734382][T23041] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1210.734423][T23041] ? lockdep_init_map_type+0x5c/0x250 [ 1210.734447][T23041] preinit_net.part.0+0x43b/0x920 [ 1210.734470][T23041] copy_net_ns+0x339/0x7c0 [ 1210.734495][T23041] create_new_namespaces+0x3ea/0xac0 [ 1210.734524][T23041] unshare_nsproxy_namespaces+0xf2/0x220 [ 1210.734551][T23041] ksys_unshare+0x438/0xab0 [ 1210.734580][T23041] ? __pfx_ksys_unshare+0x10/0x10 [ 1210.734606][T23041] ? xfd_validate_state+0x129/0x190 [ 1210.734625][T23041] ? ksys_write+0x1ac/0x250 [ 1210.734653][T23041] __x64_sys_unshare+0x31/0x40 [ 1210.734680][T23041] do_syscall_64+0x10b/0xf80 [ 1210.734704][T23041] ? clear_bhb_loop+0x40/0x90 [ 1210.734727][T23041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1210.734747][T23041] RIP: 0033:0x7f5bb839cdd9 [ 1210.734763][T23041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1210.734781][T23041] RSP: 002b:00007f5bb924b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1210.734800][T23041] RAX: ffffffffffffffda RBX: 00007f5bb8616090 RCX: 00007f5bb839cdd9 [ 1210.734813][T23041] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1210.734825][T23041] RBP: 00007f5bb8432d69 R08: 0000000000000000 R09: 0000000000000000 [ 1210.734836][T23041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1210.734847][T23041] R13: 00007f5bb8616128 R14: 00007f5bb8616090 R15: 00007fff166f7ca8 [ 1210.734870][T23041] [ 1211.532300][T23049] ubi0: attaching mtd0 [ 1211.559589][T23049] ubi0: scanning is finished [ 1211.588326][T23049] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1212.503752][T23049] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1212.719831][T23070] snd_virmidi snd_virmidi.0: control 16781581:65539:8:'x?F/zF˷fC:7 is already present [ 1215.258255][T23120] snd_virmidi snd_virmidi.0: control 16781581:65539:8:'x?F/zF˷fC:7 is already present [ 1215.653907][T23134] misc userio: Invalid payload size [ 1217.234074][T23165] FAULT_INJECTION: forcing a failure. [ 1217.234074][T23165] name failslab, interval 1, probability 0, space 0, times 0 [ 1217.416849][T23165] CPU: 0 UID: 0 PID: 23165 Comm: syz.3.3854 Tainted: G L syzkaller #0 PREEMPT(full) [ 1217.416882][T23165] Tainted: [L]=SOFTLOCKUP [ 1217.416889][T23165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1217.416899][T23165] Call Trace: [ 1217.416906][T23165] [ 1217.416914][T23165] dump_stack_lvl+0x100/0x190 [ 1217.416946][T23165] should_fail_ex.cold+0x5/0xa [ 1217.416970][T23165] should_failslab+0xc2/0x120 [ 1217.416992][T23165] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1217.417020][T23165] ? do_kimage_alloc_init+0x40/0x320 [ 1217.417052][T23165] do_kimage_alloc_init+0x40/0x320 [ 1217.417079][T23165] do_kexec_load+0x11b/0x810 [ 1217.417111][T23165] ? __pfx_do_kexec_load+0x10/0x10 [ 1217.417142][T23165] ? _copy_from_user+0x59/0xd0 [ 1217.417176][T23165] __x64_sys_kexec_load+0x1bf/0x230 [ 1217.417208][T23165] do_syscall_64+0x10b/0xf80 [ 1217.417239][T23165] ? clear_bhb_loop+0x40/0x90 [ 1217.417262][T23165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1217.417282][T23165] RIP: 0033:0x7f41af59cdd9 [ 1217.417298][T23165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1217.417317][T23165] RSP: 002b:00007f41b03ee028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 1217.417335][T23165] RAX: ffffffffffffffda RBX: 00007f41af816270 RCX: 00007f41af59cdd9 [ 1217.417348][T23165] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 0000200000000007 [ 1217.417359][T23165] RBP: 00007f41b03ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1217.417371][T23165] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 1217.417382][T23165] R13: 00007f41af816308 R14: 00007f41af816270 R15: 00007ffea2824438 [ 1217.417405][T23165] [ 1218.599871][T23178] snd_virmidi snd_virmidi.0: control 16781581:65539:8:'x?F/zF˷fC:7 is already present [ 1219.413548][T23197] netlink: 'syz.3.3862': attribute type 11 has an invalid length. [ 1219.458256][T23197] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3862'. [ 1220.347174][T23218] snd_virmidi snd_virmidi.0: control 16781581:65539:8:'x?F/zF˷fC:7 is already present [ 1221.304177][T23241] misc userio: Invalid payload size [ 1222.046729][T23257] FAULT_INJECTION: forcing a failure. [ 1222.046729][T23257] name failslab, interval 1, probability 0, space 0, times 0 [ 1222.158171][T23257] CPU: 0 UID: 0 PID: 23257 Comm: syz.1.3877 Tainted: G L syzkaller #0 PREEMPT(full) [ 1222.158204][T23257] Tainted: [L]=SOFTLOCKUP [ 1222.158210][T23257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1222.158221][T23257] Call Trace: [ 1222.158228][T23257] [ 1222.158240][T23257] dump_stack_lvl+0x100/0x190 [ 1222.158266][T23257] should_fail_ex.cold+0x5/0xa [ 1222.158290][T23257] ? nfc_llcp_build_tlv+0x105/0x250 [ 1222.158312][T23257] should_failslab+0xc2/0x120 [ 1222.158334][T23257] __kmalloc_noprof+0xe0/0x850 [ 1222.158369][T23257] nfc_llcp_build_tlv+0x105/0x250 [ 1222.158392][T23257] ? lockdep_hardirqs_on+0x78/0x100 [ 1222.158418][T23257] nfc_llcp_build_gb.isra.0+0xed/0x3f0 [ 1222.158441][T23257] ? __pfx_nfc_llcp_build_gb.isra.0+0x10/0x10 [ 1222.158467][T23257] ? lockdep_init_map_type+0x5c/0x250 [ 1222.158487][T23257] ? lockdep_init_map_type+0x5c/0x250 [ 1222.158509][T23257] nfc_llcp_register_device+0x600/0xa60 [ 1222.158533][T23257] nfc_register_device+0x6d/0x3e0 [ 1222.158558][T23257] nci_register_device+0x7f1/0xb80 [ 1222.158578][T23257] ? __pfx_nci_register_device+0x10/0x10 [ 1222.158600][T23257] ? lockdep_init_map_type+0x5c/0x250 [ 1222.158622][T23257] virtual_ncidev_open+0x141/0x220 [ 1222.158652][T23257] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 1222.158679][T23257] misc_open+0x26d/0x450 [ 1222.158701][T23257] ? __pfx_misc_open+0x10/0x10 [ 1222.158723][T23257] chrdev_open+0x234/0x6a0 [ 1222.158747][T23257] ? __pfx_apparmor_file_open+0x10/0x10 [ 1222.158777][T23257] ? __pfx_chrdev_open+0x10/0x10 [ 1222.158802][T23257] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1222.158832][T23257] do_dentry_open+0x6d8/0x1660 [ 1222.158854][T23257] ? __pfx_chrdev_open+0x10/0x10 [ 1222.158883][T23257] vfs_open+0x82/0x3f0 [ 1222.158913][T23257] path_openat+0x208c/0x31a0 [ 1222.158952][T23257] ? __pfx_path_openat+0x10/0x10 [ 1222.158983][T23257] do_file_open+0x20e/0x430 [ 1222.159009][T23257] ? __pfx_do_file_open+0x10/0x10 [ 1222.159048][T23257] ? alloc_fd+0x476/0x790 [ 1222.159073][T23257] ? do_getname+0x191/0x390 [ 1222.159103][T23257] do_sys_openat2+0x10d/0x1e0 [ 1222.159132][T23257] ? __pfx_do_sys_openat2+0x10/0x10 [ 1222.159163][T23257] ? __sys_sendmsg+0x18f/0x220 [ 1222.159187][T23257] __x64_sys_openat+0x12d/0x210 [ 1222.159216][T23257] ? __pfx___x64_sys_openat+0x10/0x10 [ 1222.159249][T23257] ? rcu_is_watching+0x12/0xc0 [ 1222.159275][T23257] do_syscall_64+0x10b/0xf80 [ 1222.159298][T23257] ? clear_bhb_loop+0x40/0x90 [ 1222.159321][T23257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1222.159340][T23257] RIP: 0033:0x7f2874f9cdd9 [ 1222.159357][T23257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1222.159380][T23257] RSP: 002b:00007f2875e6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1222.159399][T23257] RAX: ffffffffffffffda RBX: 00007f2875216090 RCX: 00007f2874f9cdd9 [ 1222.159411][T23257] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1222.159423][T23257] RBP: 00007f2875032d69 R08: 0000000000000000 R09: 0000000000000000 [ 1222.159434][T23257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1222.159445][T23257] R13: 00007f2875216128 R14: 00007f2875216090 R15: 00007fff35696378 [ 1222.159468][T23257] [ 1224.716741][T23290] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1224.818613][T23294] ubi0: attaching mtd0 [ 1225.014253][T23294] ubi0: scanning is finished [ 1225.095134][T23294] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1225.146286][T23299] block2mtd: illegal erase size [ 1225.243789][T23302] random: crng reseeded on system resumption [ 1225.694007][T23294] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1226.061544][T23310] FAULT_INJECTION: forcing a failure. [ 1226.061544][T23310] name failslab, interval 1, probability 0, space 0, times 0 [ 1226.082057][T10887] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1226.170813][T23310] CPU: 0 UID: 0 PID: 23310 Comm: syz.3.3888 Tainted: G L syzkaller #0 PREEMPT(full) [ 1226.170845][T23310] Tainted: [L]=SOFTLOCKUP [ 1226.170852][T23310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1226.170863][T23310] Call Trace: [ 1226.170870][T23310] [ 1226.170884][T23310] dump_stack_lvl+0x100/0x190 [ 1226.170911][T23310] should_fail_ex.cold+0x5/0xa [ 1226.170936][T23310] should_failslab+0xc2/0x120 [ 1226.170958][T23310] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1226.170988][T23310] ? skb_clone+0x190/0x400 [ 1226.171013][T23310] skb_clone+0x190/0x400 [ 1226.171033][T23310] netlink_broadcast_filtered+0xab3/0xe90 [ 1226.171063][T23310] ? netlink_has_listeners+0x21b/0x430 [ 1226.171090][T23310] netlink_broadcast+0x39/0x50 [ 1226.171115][T23310] kobject_uevent_env+0xcdd/0x18b0 [ 1226.171138][T23310] ? bus_to_subsys+0x114/0x150 [ 1226.171168][T23310] device_add+0x116e/0x1950 [ 1226.171193][T23310] ? __pfx_device_add+0x10/0x10 [ 1226.171224][T23310] nfc_register_device+0x41/0x3e0 [ 1226.171249][T23310] nci_register_device+0x7f1/0xb80 [ 1226.171269][T23310] ? __pfx_nci_register_device+0x10/0x10 [ 1226.171291][T23310] ? lockdep_init_map_type+0x5c/0x250 [ 1226.171316][T23310] virtual_ncidev_open+0x141/0x220 [ 1226.171344][T23310] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 1226.171371][T23310] misc_open+0x26d/0x450 [ 1226.171394][T23310] ? __pfx_misc_open+0x10/0x10 [ 1226.171416][T23310] chrdev_open+0x234/0x6a0 [ 1226.171440][T23310] ? __pfx_apparmor_file_open+0x10/0x10 [ 1226.171470][T23310] ? __pfx_chrdev_open+0x10/0x10 [ 1226.171494][T23310] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1226.171524][T23310] do_dentry_open+0x6d8/0x1660 [ 1226.171551][T23310] ? __pfx_chrdev_open+0x10/0x10 [ 1226.171580][T23310] vfs_open+0x82/0x3f0 [ 1226.171609][T23310] path_openat+0x208c/0x31a0 [ 1226.171641][T23310] ? __pfx_path_openat+0x10/0x10 [ 1226.171673][T23310] do_file_open+0x20e/0x430 [ 1226.171699][T23310] ? __pfx_do_file_open+0x10/0x10 [ 1226.171740][T23310] ? alloc_fd+0x476/0x790 [ 1226.171765][T23310] ? do_getname+0x191/0x390 [ 1226.171794][T23310] do_sys_openat2+0x10d/0x1e0 [ 1226.171822][T23310] ? __pfx_do_sys_openat2+0x10/0x10 [ 1226.171853][T23310] ? __sys_sendmsg+0x18f/0x220 [ 1226.171886][T23310] __x64_sys_openat+0x12d/0x210 [ 1226.171916][T23310] ? __pfx___x64_sys_openat+0x10/0x10 [ 1226.171949][T23310] ? rcu_is_watching+0x12/0xc0 [ 1226.171975][T23310] do_syscall_64+0x10b/0xf80 [ 1226.171999][T23310] ? clear_bhb_loop+0x40/0x90 [ 1226.172023][T23310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1226.172043][T23310] RIP: 0033:0x7f41af59cdd9 [ 1226.172060][T23310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1226.172078][T23310] RSP: 002b:00007f41b0430028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1226.172097][T23310] RAX: ffffffffffffffda RBX: 00007f41af816090 RCX: 00007f41af59cdd9 [ 1226.172109][T23310] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1226.172120][T23310] RBP: 00007f41af632d69 R08: 0000000000000000 R09: 0000000000000000 [ 1226.172132][T23310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1226.172142][T23310] R13: 00007f41af816128 R14: 00007f41af816090 R15: 00007ffea2824438 [ 1226.172166][T23310] [ 1228.784106][T23357] netlink: 'syz.1.3898': attribute type 11 has an invalid length. [ 1229.610425][T23377] netlink: 'syz.4.3903': attribute type 11 has an invalid length. [ 1229.657842][T23377] netlink: 'syz.4.3903': attribute type 11 has an invalid length. [ 1229.707265][T23377] netlink: 'syz.4.3903': attribute type 11 has an invalid length. [ 1229.750458][T23377] netlink: 'syz.4.3903': attribute type 11 has an invalid length. [ 1229.795889][T23377] netlink: 'syz.4.3903': attribute type 11 has an invalid length. [ 1229.824662][T23359] random: crng reseeded on system resumption [ 1229.848838][T23377] netlink: 'syz.4.3903': attribute type 11 has an invalid length. [ 1229.928046][T23385] ubi0: attaching mtd0 [ 1229.974058][T23385] ubi0: scanning is finished [ 1230.050781][T23385] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1230.153061][T23390] bond0: invalid ARP target specified [ 1230.466617][T23385] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1230.528434][T23400] snd_virmidi snd_virmidi.0: control 16781581:65539:8:'x?F/zF˷fC:7 is already present [ 1230.587701][T23401] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input14 [ 1231.760166][T23430] FAULT_INJECTION: forcing a failure. [ 1231.760166][T23430] name failslab, interval 1, probability 0, space 0, times 0 [ 1231.919327][T23430] CPU: 0 UID: 0 PID: 23430 Comm: syz.4.3914 Tainted: G L syzkaller #0 PREEMPT(full) [ 1231.919359][T23430] Tainted: [L]=SOFTLOCKUP [ 1231.919371][T23430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1231.919383][T23430] Call Trace: [ 1231.919390][T23430] [ 1231.919397][T23430] dump_stack_lvl+0x100/0x190 [ 1231.919423][T23430] should_fail_ex.cold+0x5/0xa [ 1231.919447][T23430] should_failslab+0xc2/0x120 [ 1231.919470][T23430] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1231.919500][T23430] ? __d_alloc+0x34/0xa40 [ 1231.919530][T23430] __d_alloc+0x34/0xa40 [ 1231.919557][T23430] d_alloc+0x4a/0x1e0 [ 1231.919583][T23430] lookup_one_qstr_excl+0x171/0x250 [ 1231.919618][T23430] start_dirop+0x59/0xb0 [ 1231.919639][T23430] simple_start_creating+0xf9/0x110 [ 1231.919662][T23430] ? __pfx_simple_start_creating+0x10/0x10 [ 1231.919685][T23430] ? mntput+0x70/0xa0 [ 1231.919704][T23430] ? simple_pin_fs+0xa3/0x190 [ 1231.919724][T23430] debugfs_start_creating.part.0+0x82/0x170 [ 1231.919754][T23430] __debugfs_create_file+0xb3/0x4f0 [ 1231.919784][T23430] debugfs_create_file_full+0x41/0x60 [ 1231.919814][T23430] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 1231.919837][T23430] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1231.919859][T23430] ? ida_alloc_range+0x70d/0x830 [ 1231.919903][T23430] ? lockdep_init_map_type+0x5c/0x250 [ 1231.919926][T23430] preinit_net.part.0+0x252/0x920 [ 1231.919949][T23430] copy_net_ns+0x339/0x7c0 [ 1231.919974][T23430] create_new_namespaces+0x3ea/0xac0 [ 1231.920004][T23430] unshare_nsproxy_namespaces+0xf2/0x220 [ 1231.920031][T23430] ksys_unshare+0x438/0xab0 [ 1231.920060][T23430] ? __pfx_ksys_unshare+0x10/0x10 [ 1231.920086][T23430] ? xfd_validate_state+0x129/0x190 [ 1231.920105][T23430] ? ksys_write+0x1ac/0x250 [ 1231.920133][T23430] __x64_sys_unshare+0x31/0x40 [ 1231.920160][T23430] do_syscall_64+0x10b/0xf80 [ 1231.920183][T23430] ? clear_bhb_loop+0x40/0x90 [ 1231.920212][T23430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1231.920232][T23430] RIP: 0033:0x7f9d8739cdd9 [ 1231.920248][T23430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1231.920267][T23430] RSP: 002b:00007f9d8822b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1231.920286][T23430] RAX: ffffffffffffffda RBX: 00007f9d87616090 RCX: 00007f9d8739cdd9 [ 1231.920299][T23430] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1231.920310][T23430] RBP: 00007f9d87432d69 R08: 0000000000000000 R09: 0000000000000000 [ 1231.920321][T23430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1231.920332][T23430] R13: 00007f9d87616128 R14: 00007f9d87616090 R15: 00007ffd611bfe28 [ 1231.920355][T23430] [ 1234.079701][T23451] CIFS: VFS: UNC: path must begin with // or \\ [ 1234.119068][T23450] CIFS: VFS: UNC: path must begin with // or \\ [ 1234.167949][T23450] Malformed UNC in devname [ 1234.167949][T23450] [ 1234.207822][T23451] Malformed UNC in devname [ 1234.207822][T23451] [ 1234.228390][T23432] FAULT_INJECTION: forcing a failure. [ 1234.228390][T23432] name failslab, interval 1, probability 0, space 0, times 0 [ 1234.263031][T23450] CIFS: VFS: Malformed UNC in devname [ 1234.286083][T23451] CIFS: VFS: Malformed UNC in devname [ 1234.361410][T23432] CPU: 0 UID: 0 PID: 23432 Comm: syz.3.3915 Tainted: G L syzkaller #0 PREEMPT(full) [ 1234.361442][T23432] Tainted: [L]=SOFTLOCKUP [ 1234.361449][T23432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1234.361460][T23432] Call Trace: [ 1234.361466][T23432] [ 1234.361474][T23432] dump_stack_lvl+0x100/0x190 [ 1234.361500][T23432] should_fail_ex.cold+0x5/0xa [ 1234.361524][T23432] should_failslab+0xc2/0x120 [ 1234.361547][T23432] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1234.361577][T23432] ? __d_alloc+0x34/0xa40 [ 1234.361607][T23432] __d_alloc+0x34/0xa40 [ 1234.361633][T23432] d_alloc+0x4a/0x1e0 [ 1234.361660][T23432] lookup_one_qstr_excl+0x171/0x250 [ 1234.361691][T23432] start_dirop+0x59/0xb0 [ 1234.361712][T23432] simple_start_creating+0xf9/0x110 [ 1234.361735][T23432] ? __pfx_simple_start_creating+0x10/0x10 [ 1234.361763][T23432] ? mntput+0x70/0xa0 [ 1234.361782][T23432] ? simple_pin_fs+0xa3/0x190 [ 1234.361802][T23432] debugfs_start_creating.part.0+0x82/0x170 [ 1234.361833][T23432] __debugfs_create_file+0xb3/0x4f0 [ 1234.361864][T23432] debugfs_create_file_full+0x41/0x60 [ 1234.361894][T23432] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 1234.361917][T23432] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1234.361962][T23432] ? lockdep_init_map_type+0x5c/0x250 [ 1234.361986][T23432] preinit_net.part.0+0x43b/0x920 [ 1234.362009][T23432] copy_net_ns+0x339/0x7c0 [ 1234.362034][T23432] create_new_namespaces+0x3ea/0xac0 [ 1234.362064][T23432] unshare_nsproxy_namespaces+0xf2/0x220 [ 1234.362091][T23432] ksys_unshare+0x438/0xab0 [ 1234.362121][T23432] ? __pfx_ksys_unshare+0x10/0x10 [ 1234.362148][T23432] ? xfd_validate_state+0x129/0x190 [ 1234.362167][T23432] ? ksys_write+0x1ac/0x250 [ 1234.362202][T23432] __x64_sys_unshare+0x31/0x40 [ 1234.362229][T23432] do_syscall_64+0x10b/0xf80 [ 1234.362253][T23432] ? clear_bhb_loop+0x40/0x90 [ 1234.362276][T23432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1234.362296][T23432] RIP: 0033:0x7f41af59cdd9 [ 1234.362313][T23432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1234.362330][T23432] RSP: 002b:00007f41b0430028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1234.362349][T23432] RAX: ffffffffffffffda RBX: 00007f41af816090 RCX: 00007f41af59cdd9 [ 1234.362361][T23432] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1234.362373][T23432] RBP: 00007f41af632d69 R08: 0000000000000000 R09: 0000000000000000 [ 1234.362384][T23432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1234.362396][T23432] R13: 00007f41af816128 R14: 00007f41af816090 R15: 00007ffea2824438 [ 1234.362421][T23432] [ 1235.205030][T23472] input: jJǸ-9%vJ86 as /devices/virtual/input/input15 [ 1236.595937][T23488] random: crng reseeded on system resumption [ 1237.331837][T23496] snd_virmidi snd_virmidi.0: control 16781581:65539:8:'x?F/zF˷fC:7 is already present [ 1237.879246][T23503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3929'. [ 1237.951080][T23503] netlink: 13 bytes leftover after parsing attributes in process `syz.1.3929'. [ 1239.019808][T23530] snd_virmidi snd_virmidi.0: control 16781581:65539:8:'x?F/zF˷fC:7 is already present [ 1239.205543][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.214421][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.548650][T23543] misc userio: Invalid payload size [ 1241.511716][T23566] kexec: Could not allocate control_code_buffer [ 1242.475056][T23610] snd_virmidi snd_virmidi.0: control 16781581:65539:6:'x?F/zF˷fC:7 is already present [ 1244.289000][T23642] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3960'. [ 1244.588818][T10887] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 1244.715028][T23651] FAULT_INJECTION: forcing a failure. [ 1244.715028][T23651] name failslab, interval 1, probability 0, space 0, times 0 [ 1244.801439][T23651] CPU: 0 UID: 0 PID: 23651 Comm: syz.2.3962 Tainted: G L syzkaller #0 PREEMPT(full) [ 1244.801472][T23651] Tainted: [L]=SOFTLOCKUP [ 1244.801479][T23651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1244.801491][T23651] Call Trace: [ 1244.801498][T23651] [ 1244.801506][T23651] dump_stack_lvl+0x100/0x190 [ 1244.801532][T23651] should_fail_ex.cold+0x5/0xa [ 1244.801555][T23651] ? nfc_llcp_build_tlv+0x105/0x250 [ 1244.801579][T23651] should_failslab+0xc2/0x120 [ 1244.801603][T23651] __kmalloc_noprof+0xe0/0x850 [ 1244.801636][T23651] nfc_llcp_build_tlv+0x105/0x250 [ 1244.801658][T23651] ? lockdep_hardirqs_on+0x78/0x100 [ 1244.801686][T23651] nfc_llcp_build_gb.isra.0+0x11e/0x3f0 [ 1244.801708][T23651] ? __pfx_nfc_llcp_build_gb.isra.0+0x10/0x10 [ 1244.801735][T23651] ? lockdep_init_map_type+0x5c/0x250 [ 1244.801755][T23651] ? lockdep_init_map_type+0x5c/0x250 [ 1244.801777][T23651] nfc_llcp_register_device+0x600/0xa60 [ 1244.801802][T23651] nfc_register_device+0x6d/0x3e0 [ 1244.801827][T23651] nci_register_device+0x7f1/0xb80 [ 1244.801850][T23651] ? __pfx_nci_register_device+0x10/0x10 [ 1244.801873][T23651] ? lockdep_init_map_type+0x5c/0x250 [ 1244.801902][T23651] virtual_ncidev_open+0x141/0x220 [ 1244.801931][T23651] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 1244.801958][T23651] misc_open+0x26d/0x450 [ 1244.801981][T23651] ? __pfx_misc_open+0x10/0x10 [ 1244.802003][T23651] chrdev_open+0x234/0x6a0 [ 1244.802027][T23651] ? __pfx_apparmor_file_open+0x10/0x10 [ 1244.802057][T23651] ? __pfx_chrdev_open+0x10/0x10 [ 1244.802082][T23651] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1244.802112][T23651] do_dentry_open+0x6d8/0x1660 [ 1244.802135][T23651] ? __pfx_chrdev_open+0x10/0x10 [ 1244.802163][T23651] vfs_open+0x82/0x3f0 [ 1244.802193][T23651] path_openat+0x208c/0x31a0 [ 1244.802225][T23651] ? __pfx_path_openat+0x10/0x10 [ 1244.802257][T23651] do_file_open+0x20e/0x430 [ 1244.802283][T23651] ? __pfx_do_file_open+0x10/0x10 [ 1244.802323][T23651] ? alloc_fd+0x476/0x790 [ 1244.802348][T23651] ? do_getname+0x191/0x390 [ 1244.802377][T23651] do_sys_openat2+0x10d/0x1e0 [ 1244.802405][T23651] ? __pfx_do_sys_openat2+0x10/0x10 [ 1244.802436][T23651] ? __sys_sendmsg+0x18f/0x220 [ 1244.802460][T23651] __x64_sys_openat+0x12d/0x210 [ 1244.802489][T23651] ? __pfx___x64_sys_openat+0x10/0x10 [ 1244.802522][T23651] ? rcu_is_watching+0x12/0xc0 [ 1244.802547][T23651] do_syscall_64+0x10b/0xf80 [ 1244.802571][T23651] ? clear_bhb_loop+0x40/0x90 [ 1244.802594][T23651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1244.802613][T23651] RIP: 0033:0x7f5bb839cdd9 [ 1244.802629][T23651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1244.802648][T23651] RSP: 002b:00007f5bb924b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1244.802666][T23651] RAX: ffffffffffffffda RBX: 00007f5bb8616090 RCX: 00007f5bb839cdd9 [ 1244.802679][T23651] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1244.802690][T23651] RBP: 00007f5bb8432d69 R08: 0000000000000000 R09: 0000000000000000 [ 1244.802701][T23651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1244.802712][T23651] R13: 00007f5bb8616128 R14: 00007f5bb8616090 R15: 00007fff166f7ca8 [ 1244.802736][T23651] [ 1245.128804][T23661] snd_virmidi snd_virmidi.0: control 16781581:65539:8:'x?F/zF˷fC:7 is already present [ 1247.176196][T23694] snd_virmidi snd_virmidi.0: control 16781581:65539:6:'x?F/zF˷fC:7 is already present [ 1247.235898][T23695] snd_virmidi snd_virmidi.0: control 16781581:65539:8:'x?F/zF˷fC:7 is already present [ 1248.828846][T23720] binder: 23714:23720 ioctl c00c620f 200000000080 returned -22 [ 1249.458163][T23774] snd_virmidi snd_virmidi.0: control 16781581:65539:8:'x?F/zF˷fC:7 is already present [ 1250.425515][T23792] FAULT_INJECTION: forcing a failure. [ 1250.425515][T23792] name failslab, interval 1, probability 0, space 0, times 0 [ 1250.609826][T23792] CPU: 0 UID: 0 PID: 23792 Comm: syz.3.3989 Tainted: G L syzkaller #0 PREEMPT(full) [ 1250.609859][T23792] Tainted: [L]=SOFTLOCKUP [ 1250.609866][T23792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1250.609878][T23792] Call Trace: [ 1250.609885][T23792] [ 1250.609893][T23792] dump_stack_lvl+0x100/0x190 [ 1250.609919][T23792] should_fail_ex.cold+0x5/0xa [ 1250.609942][T23792] should_failslab+0xc2/0x120 [ 1250.609965][T23792] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1250.609997][T23792] ? __d_alloc+0x34/0xa40 [ 1250.610027][T23792] __d_alloc+0x34/0xa40 [ 1250.610054][T23792] d_alloc+0x4a/0x1e0 [ 1250.610080][T23792] lookup_one_qstr_excl+0x171/0x250 [ 1250.610111][T23792] start_dirop+0x59/0xb0 [ 1250.610133][T23792] simple_start_creating+0xf9/0x110 [ 1250.610156][T23792] ? __pfx_simple_start_creating+0x10/0x10 [ 1250.610178][T23792] ? mntput+0x70/0xa0 [ 1250.610206][T23792] ? simple_pin_fs+0xa3/0x190 [ 1250.610226][T23792] debugfs_start_creating.part.0+0x82/0x170 [ 1250.610256][T23792] __debugfs_create_file+0xb3/0x4f0 [ 1250.610287][T23792] debugfs_create_file_full+0x41/0x60 [ 1250.610318][T23792] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 1250.610342][T23792] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1250.610364][T23792] ? ida_alloc_range+0x70d/0x830 [ 1250.610407][T23792] ? lockdep_init_map_type+0x5c/0x250 [ 1250.610430][T23792] preinit_net.part.0+0x252/0x920 [ 1250.610453][T23792] copy_net_ns+0x339/0x7c0 [ 1250.610479][T23792] create_new_namespaces+0x3ea/0xac0 [ 1250.610508][T23792] unshare_nsproxy_namespaces+0xf2/0x220 [ 1250.610536][T23792] ksys_unshare+0x438/0xab0 [ 1250.610566][T23792] ? __pfx_ksys_unshare+0x10/0x10 [ 1250.610592][T23792] ? xfd_validate_state+0x129/0x190 [ 1250.610611][T23792] ? ksys_write+0x1ac/0x250 [ 1250.610639][T23792] __x64_sys_unshare+0x31/0x40 [ 1250.610666][T23792] do_syscall_64+0x10b/0xf80 [ 1250.610689][T23792] ? clear_bhb_loop+0x40/0x90 [ 1250.610717][T23792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1250.610736][T23792] RIP: 0033:0x7f41af59cdd9 [ 1250.610753][T23792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1250.610771][T23792] RSP: 002b:00007f41b0430028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1250.610789][T23792] RAX: ffffffffffffffda RBX: 00007f41af816090 RCX: 00007f41af59cdd9 [ 1250.610801][T23792] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1250.610819][T23792] RBP: 00007f41af632d69 R08: 0000000000000000 R09: 0000000000000000 [ 1250.610830][T23792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1250.610841][T23792] R13: 00007f41af816128 R14: 00007f41af816090 R15: 00007ffea2824438 [ 1250.610865][T23792] [ 1251.009424][T23795] misc userio: Invalid payload size [ 1252.503543][T23819] snd_virmidi snd_virmidi.0: control 16781581:65539:8:'x?F/zF˷fC:7 is already present [ 1252.821357][T23822] netlink: 'syz.2.3996': attribute type 11 has an invalid length. [ 1252.864992][T23822] netlink: 'syz.2.3996': attribute type 11 has an invalid length. [ 1252.899153][T23822] netlink: 'syz.2.3996': attribute type 11 has an invalid length. [ 1252.937360][T23822] netlink: 'syz.2.3996': attribute type 11 has an invalid length. [ 1252.976219][T23822] netlink: 'syz.2.3996': attribute type 11 has an invalid length. [ 1253.020047][T23822] netlink: 'syz.2.3996': attribute type 11 has an invalid length. [ 1254.944976][T23861] snd_virmidi snd_virmidi.0: control 16781581:65539:8:'x?F/zF˷fC:7 is already present [ 1255.623610][T23873] ubi0: attaching mtd0 [ 1255.699582][T23873] ubi0: scanning is finished [ 1255.765224][T23873] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1256.265243][T23873] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1258.230624][T23917] snd_virmidi snd_virmidi.0: control 16781581:65539:8:'x?F/zF˷fC:7 is already present [ 1258.659109][T23923] FAULT_INJECTION: forcing a failure. [ 1258.659109][T23923] name failslab, interval 1, probability 0, space 0, times 0 [ 1258.869164][T23923] CPU: 0 UID: 0 PID: 23923 Comm: syz.2.4018 Tainted: G L syzkaller #0 PREEMPT(full) [ 1258.869197][T23923] Tainted: [L]=SOFTLOCKUP [ 1258.869205][T23923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1258.869216][T23923] Call Trace: [ 1258.869223][T23923] [ 1258.869232][T23923] dump_stack_lvl+0x100/0x190 [ 1258.869257][T23923] should_fail_ex.cold+0x5/0xa [ 1258.869280][T23923] should_failslab+0xc2/0x120 [ 1258.869303][T23923] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1258.869333][T23923] ? alloc_inode+0x68/0x250 [ 1258.869363][T23923] ? simple_start_creating+0xb0/0x110 [ 1258.869390][T23923] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 1258.869419][T23923] alloc_inode+0x68/0x250 [ 1258.869447][T23923] new_inode+0x22/0x1c0 [ 1258.869478][T23923] __debugfs_create_file+0x105/0x4f0 [ 1258.869509][T23923] debugfs_create_file_full+0x41/0x60 [ 1258.869539][T23923] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 1258.869562][T23923] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1258.869584][T23923] ? ida_alloc_range+0x70d/0x830 [ 1258.869627][T23923] ? lockdep_init_map_type+0x5c/0x250 [ 1258.869650][T23923] preinit_net.part.0+0x252/0x920 [ 1258.869673][T23923] copy_net_ns+0x339/0x7c0 [ 1258.869698][T23923] create_new_namespaces+0x3ea/0xac0 [ 1258.869728][T23923] unshare_nsproxy_namespaces+0xf2/0x220 [ 1258.869754][T23923] ksys_unshare+0x438/0xab0 [ 1258.869783][T23923] ? __pfx_ksys_unshare+0x10/0x10 [ 1258.869810][T23923] ? xfd_validate_state+0x129/0x190 [ 1258.869829][T23923] ? ksys_write+0x1ac/0x250 [ 1258.869861][T23923] __x64_sys_unshare+0x31/0x40 [ 1258.869888][T23923] do_syscall_64+0x10b/0xf80 [ 1258.869911][T23923] ? clear_bhb_loop+0x40/0x90 [ 1258.869934][T23923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1258.869953][T23923] RIP: 0033:0x7f5bb839cdd9 [ 1258.869970][T23923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1258.869988][T23923] RSP: 002b:00007f5bb924b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1258.870006][T23923] RAX: ffffffffffffffda RBX: 00007f5bb8616090 RCX: 00007f5bb839cdd9 [ 1258.870018][T23923] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1258.870029][T23923] RBP: 00007f5bb8432d69 R08: 0000000000000000 R09: 0000000000000000 [ 1258.870040][T23923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1258.870051][T23923] R13: 00007f5bb8616128 R14: 00007f5bb8616090 R15: 00007fff166f7ca8 [ 1258.870074][T23923] [ 1259.372107][T23923] debugfs: out of free dentries, can not create file 'net_refcnt@ffff888052dad000' [ 1260.889425][T23947] misc userio: Invalid payload size [ 1261.645494][T23964] snd_virmidi snd_virmidi.0: control 16781581:65539:8:'x?F/zF˷fC:7 is already present [ 1262.244624][T23980] netlink: 'syz.1.4033': attribute type 11 has an invalid length. [ 1262.290765][T23980] netlink: 'syz.1.4033': attribute type 11 has an invalid length. [ 1262.337663][T23980] netlink: 'syz.1.4033': attribute type 11 has an invalid length. [ 1262.395525][T23980] netlink: 'syz.1.4033': attribute type 11 has an invalid length. [ 1262.433076][T23985] FAULT_INJECTION: forcing a failure. [ 1262.433076][T23985] name failslab, interval 1, probability 0, space 0, times 0 [ 1262.466399][T23980] netlink: 'syz.1.4033': attribute type 11 has an invalid length. [ 1262.653699][T23985] CPU: 0 UID: 0 PID: 23985 Comm: syz.3.4034 Tainted: G L syzkaller #0 PREEMPT(full) [ 1262.653732][T23985] Tainted: [L]=SOFTLOCKUP [ 1262.653739][T23985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1262.653751][T23985] Call Trace: [ 1262.653759][T23985] [ 1262.653766][T23985] dump_stack_lvl+0x100/0x190 [ 1262.653791][T23985] should_fail_ex.cold+0x5/0xa [ 1262.653815][T23985] should_failslab+0xc2/0x120 [ 1262.653844][T23985] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1262.653875][T23985] ? alloc_inode+0x68/0x250 [ 1262.653904][T23985] ? simple_start_creating+0xb0/0x110 [ 1262.653927][T23985] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 1262.653956][T23985] alloc_inode+0x68/0x250 [ 1262.653985][T23985] new_inode+0x22/0x1c0 [ 1262.654019][T23985] __debugfs_create_file+0x105/0x4f0 [ 1262.654050][T23985] debugfs_create_file_full+0x41/0x60 [ 1262.654082][T23985] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 1262.654106][T23985] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1262.654128][T23985] ? ida_alloc_range+0x70d/0x830 [ 1262.654173][T23985] ? lockdep_init_map_type+0x5c/0x250 [ 1262.654196][T23985] preinit_net.part.0+0x252/0x920 [ 1262.654220][T23985] copy_net_ns+0x339/0x7c0 [ 1262.654246][T23985] create_new_namespaces+0x3ea/0xac0 [ 1262.654276][T23985] unshare_nsproxy_namespaces+0xf2/0x220 [ 1262.654303][T23985] ksys_unshare+0x438/0xab0 [ 1262.654333][T23985] ? __pfx_ksys_unshare+0x10/0x10 [ 1262.654360][T23985] ? xfd_validate_state+0x129/0x190 [ 1262.654379][T23985] ? ksys_write+0x1ac/0x250 [ 1262.654406][T23985] __x64_sys_unshare+0x31/0x40 [ 1262.654433][T23985] do_syscall_64+0x10b/0xf80 [ 1262.654457][T23985] ? clear_bhb_loop+0x40/0x90 [ 1262.654479][T23985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1262.654498][T23985] RIP: 0033:0x7f41af59cdd9 [ 1262.654514][T23985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1262.654532][T23985] RSP: 002b:00007f41b0430028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1262.654551][T23985] RAX: ffffffffffffffda RBX: 00007f41af816090 RCX: 00007f41af59cdd9 [ 1262.654563][T23985] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1262.654574][T23985] RBP: 00007f41af632d69 R08: 0000000000000000 R09: 0000000000000000 [ 1262.654585][T23985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1262.654596][T23985] R13: 00007f41af816128 R14: 00007f41af816090 R15: 00007ffea2824438 [ 1262.654620][T23985] [ 1263.180110][T23985] debugfs: out of free dentries, can not create file 'net_refcnt@ffff88807a335000' [ 1264.852171][T24016] snd_virmidi snd_virmidi.0: control 16781581:65539:8:'x?F/zF˷fC:7 is already present [ 1266.332599][T24045] FAULT_INJECTION: forcing a failure. [ 1266.332599][T24045] name failslab, interval 1, probability 0, space 0, times 0 [ 1266.492846][T24045] CPU: 0 UID: 0 PID: 24045 Comm: syz.1.4047 Tainted: G L syzkaller #0 PREEMPT(full) [ 1266.492879][T24045] Tainted: [L]=SOFTLOCKUP [ 1266.492886][T24045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1266.492898][T24045] Call Trace: [ 1266.492905][T24045] [ 1266.492913][T24045] dump_stack_lvl+0x100/0x190 [ 1266.492938][T24045] should_fail_ex.cold+0x5/0xa [ 1266.492963][T24045] should_failslab+0xc2/0x120 [ 1266.492985][T24045] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1266.493016][T24045] ? __d_alloc+0x34/0xa40 [ 1266.493049][T24045] __d_alloc+0x34/0xa40 [ 1266.493075][T24045] d_alloc+0x4a/0x1e0 [ 1266.493101][T24045] lookup_one_qstr_excl+0x171/0x250 [ 1266.493132][T24045] start_dirop+0x59/0xb0 [ 1266.493153][T24045] simple_start_creating+0xf9/0x110 [ 1266.493176][T24045] ? __pfx_simple_start_creating+0x10/0x10 [ 1266.493199][T24045] ? mntput+0x70/0xa0 [ 1266.493218][T24045] ? simple_pin_fs+0xa3/0x190 [ 1266.493239][T24045] debugfs_start_creating.part.0+0x82/0x170 [ 1266.493269][T24045] __debugfs_create_file+0xb3/0x4f0 [ 1266.493300][T24045] debugfs_create_file_full+0x41/0x60 [ 1266.493330][T24045] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 1266.493353][T24045] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1266.493375][T24045] ? ida_alloc_range+0x70d/0x830 [ 1266.493418][T24045] ? lockdep_init_map_type+0x5c/0x250 [ 1266.493441][T24045] preinit_net.part.0+0x252/0x920 [ 1266.493464][T24045] copy_net_ns+0x339/0x7c0 [ 1266.493489][T24045] create_new_namespaces+0x3ea/0xac0 [ 1266.493519][T24045] unshare_nsproxy_namespaces+0xf2/0x220 [ 1266.493546][T24045] ksys_unshare+0x438/0xab0 [ 1266.493575][T24045] ? __pfx_ksys_unshare+0x10/0x10 [ 1266.493602][T24045] ? xfd_validate_state+0x129/0x190 [ 1266.493620][T24045] ? ksys_write+0x1ac/0x250 [ 1266.493648][T24045] __x64_sys_unshare+0x31/0x40 [ 1266.493675][T24045] do_syscall_64+0x10b/0xf80 [ 1266.493699][T24045] ? clear_bhb_loop+0x40/0x90 [ 1266.493721][T24045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1266.493740][T24045] RIP: 0033:0x7f2874f9cdd9 [ 1266.493757][T24045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1266.493775][T24045] RSP: 002b:00007f2875e6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1266.493801][T24045] RAX: ffffffffffffffda RBX: 00007f2875216090 RCX: 00007f2874f9cdd9 [ 1266.493835][T24045] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1266.493847][T24045] RBP: 00007f2875032d69 R08: 0000000000000000 R09: 0000000000000000 [ 1266.493859][T24045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1266.493870][T24045] R13: 00007f2875216128 R14: 00007f2875216090 R15: 00007fff35696378 [ 1266.493894][T24045] [ 1266.495966][T24046] FAULT_INJECTION: forcing a failure. [ 1266.495966][T24046] name failslab, interval 1, probability 0, space 0, times 0 [ 1266.925064][T23967] kexec: Could not allocate control_code_buffer [ 1267.225910][T24053] netlink: 'syz.3.4050': attribute type 11 has an invalid length. [ 1267.593004][T24058] snd_virmidi snd_virmidi.0: control 16781581:65539:8:'x?F/zF˷fC:7 is already present [ 1267.640927][T24060] misc userio: Invalid payload size [ 1268.145513][T24068] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.128.4294967291), cmd(18) [ 1268.841597][T24080] ubi0: attaching mtd0 [ 1268.899554][T24080] ubi0: scanning is finished [ 1268.921051][T24046] CPU: 0 UID: 0 PID: 24046 Comm: syz.2.4048 Tainted: G L syzkaller #0 PREEMPT(full) [ 1268.921083][T24046] Tainted: [L]=SOFTLOCKUP [ 1268.921090][T24046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1268.921102][T24046] Call Trace: [ 1268.921109][T24046] [ 1268.921117][T24046] dump_stack_lvl+0x100/0x190 [ 1268.921142][T24046] should_fail_ex.cold+0x5/0xa [ 1268.921166][T24046] should_failslab+0xc2/0x120 [ 1268.921188][T24046] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1268.921219][T24046] ? __d_alloc+0x34/0xa40 [ 1268.921248][T24046] __d_alloc+0x34/0xa40 [ 1268.921275][T24046] d_alloc+0x4a/0x1e0 [ 1268.921301][T24046] lookup_one_qstr_excl+0x171/0x250 [ 1268.921331][T24046] start_dirop+0x59/0xb0 [ 1268.921353][T24046] simple_start_creating+0xf9/0x110 [ 1268.921375][T24046] ? __pfx_simple_start_creating+0x10/0x10 [ 1268.921398][T24046] ? mntput+0x70/0xa0 [ 1268.921418][T24046] ? simple_pin_fs+0xa3/0x190 [ 1268.921438][T24046] debugfs_start_creating.part.0+0x82/0x170 [ 1268.921468][T24046] __debugfs_create_file+0xb3/0x4f0 [ 1268.921503][T24046] debugfs_create_file_full+0x41/0x60 [ 1268.921534][T24046] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 1268.921558][T24046] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1268.921580][T24046] ? ida_alloc_range+0x70d/0x830 [ 1268.921624][T24046] ? lockdep_init_map_type+0x5c/0x250 [ 1268.921647][T24046] preinit_net.part.0+0x252/0x920 [ 1268.921669][T24046] copy_net_ns+0x339/0x7c0 [ 1268.921694][T24046] create_new_namespaces+0x3ea/0xac0 [ 1268.921726][T24046] unshare_nsproxy_namespaces+0xf2/0x220 [ 1268.921752][T24046] ksys_unshare+0x438/0xab0 [ 1268.921781][T24046] ? __pfx_ksys_unshare+0x10/0x10 [ 1268.921807][T24046] ? xfd_validate_state+0x129/0x190 [ 1268.921826][T24046] ? ksys_write+0x1ac/0x250 [ 1268.921861][T24046] __x64_sys_unshare+0x31/0x40 [ 1268.921888][T24046] do_syscall_64+0x10b/0xf80 [ 1268.921911][T24046] ? clear_bhb_loop+0x40/0x90 [ 1268.921934][T24046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1268.921955][T24046] RIP: 0033:0x7f5bb839cdd9 [ 1268.921974][T24046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1268.921993][T24046] RSP: 002b:00007f5bb924b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1268.922012][T24046] RAX: ffffffffffffffda RBX: 00007f5bb8616090 RCX: 00007f5bb839cdd9 [ 1268.922025][T24046] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1268.922036][T24046] RBP: 00007f5bb8432d69 R08: 0000000000000000 R09: 0000000000000000 [ 1268.922048][T24046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1268.922059][T24046] R13: 00007f5bb8616128 R14: 00007f5bb8616090 R15: 00007fff166f7ca8 [ 1268.922083][T24046] [ 1269.493314][T24080] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1270.347165][T24080] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1272.073108][T24100] snd_virmidi snd_virmidi.0: control 16781581:65539:8:'x?F/zF˷fC:7 is already present [ 1272.378412][T10887] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 1272.460504][T24110] FAULT_INJECTION: forcing a failure. [ 1272.460504][T24110] name failslab, interval 1, probability 0, space 0, times 0 [ 1272.479106][ T5639] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 1272.488049][ T5639] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 1272.497565][ T5639] CPU: 0 UID: 0 PID: 5639 Comm: kworker/u9:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 1272.497599][ T5639] Tainted: [L]=SOFTLOCKUP [ 1272.497605][ T5639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1272.497618][ T5639] Workqueue: hci1 hci_rx_work [ 1272.497645][ T5639] Call Trace: [ 1272.497654][ T5639] [ 1272.497662][ T5639] dump_stack_lvl+0x100/0x190 [ 1272.497685][ T5639] sysfs_warn_dup.cold+0x1c/0x28 [ 1272.497714][ T5639] sysfs_create_dir_ns+0x24b/0x2b0 [ 1272.497735][ T5639] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1272.497754][ T5639] ? find_held_lock+0x2b/0x80 [ 1272.497778][ T5639] ? kobject_add_internal+0x25f/0x930 [ 1272.497807][ T5639] ? kobject_add_internal+0x25f/0x930 [ 1272.497838][ T5639] ? do_raw_spin_unlock+0x145/0x1e0 [ 1272.497889][ T5639] kobject_add_internal+0x2c8/0x930 [ 1272.497922][ T5639] kobject_add+0x16a/0x1e0 [ 1272.497953][ T5639] ? __pfx_kobject_add+0x10/0x10 [ 1272.497981][ T5639] ? class_to_subsys+0x10f/0x150 [ 1272.498010][ T5639] ? kobject_put+0xb9/0x640 [ 1272.498035][ T5639] ? _raw_spin_unlock+0x28/0x50 [ 1272.498061][ T5639] device_add+0x294/0x1950 [ 1272.498085][ T5639] ? __pfx_dev_set_name+0x10/0x10 [ 1272.498111][ T5639] ? __pfx_device_add+0x10/0x10 [ 1272.498135][ T5639] ? mgmt_send_event_skb+0x2fb/0x460 [ 1272.498164][ T5639] hci_conn_add_sysfs+0x1a3/0x260 [ 1272.498192][ T5639] le_conn_complete_evt+0x11eb/0x1f60 [ 1272.498221][ T5639] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1272.498242][ T5639] ? __pfx_bt_warn+0x10/0x10 [ 1272.498276][ T5639] hci_le_conn_complete_evt+0x23c/0x3a0 [ 1272.498300][ T5639] ? skb_pull_data+0x15f/0x1e0 [ 1272.498327][ T5639] hci_le_meta_evt+0x34a/0x5f0 [ 1272.498352][ T5639] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1272.498379][ T5639] hci_event_packet+0x51c/0xcd0 [ 1272.498401][ T5639] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1272.498425][ T5639] ? __pfx_hci_event_packet+0x10/0x10 [ 1272.498450][ T5639] ? kcov_remote_start+0x374/0x660 [ 1272.498476][ T5639] ? lockdep_hardirqs_on+0x78/0x100 [ 1272.498506][ T5639] hci_rx_work+0x451/0xfc0 [ 1272.498533][ T5639] process_one_work+0xa0e/0x1980 [ 1272.498563][ T5639] ? __pfx_process_one_work+0x10/0x10 [ 1272.498589][ T5639] ? __pfx_hci_rx_work+0x10/0x10 [ 1272.498613][ T5639] worker_thread+0x5ef/0xe50 [ 1272.498641][ T5639] ? kthread+0x13a/0x450 [ 1272.498656][ T5639] ? __pfx_worker_thread+0x10/0x10 [ 1272.498673][ T5639] kthread+0x370/0x450 [ 1272.498689][ T5639] ? __pfx_kthread+0x10/0x10 [ 1272.498707][ T5639] ret_from_fork+0x72b/0xd50 [ 1272.498728][ T5639] ? __pfx_ret_from_fork+0x10/0x10 [ 1272.498749][ T5639] ? __switch_to+0x800/0x1100 [ 1272.498774][ T5639] ? __switch_to_asm+0x39/0x70 [ 1272.498798][ T5639] ? __pfx_kthread+0x10/0x10 [ 1272.498816][ T5639] ret_from_fork_asm+0x1a/0x30 [ 1272.498858][ T5639] [ 1272.498905][ T5639] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1272.810672][T24114] vivid-008: ================= START STATUS ================= [ 1272.829400][ T5639] Bluetooth: hci1: failed to register connection device [ 1272.853909][T24114] vivid-008: ================== END STATUS ================== [ 1272.877390][T24110] CPU: 0 UID: 0 PID: 24110 Comm: syz.1.4063 Tainted: G L syzkaller #0 PREEMPT(full) [ 1272.877422][T24110] Tainted: [L]=SOFTLOCKUP [ 1272.877430][T24110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1272.877441][T24110] Call Trace: [ 1272.877447][T24110] [ 1272.877455][T24110] dump_stack_lvl+0x100/0x190 [ 1272.877479][T24110] should_fail_ex.cold+0x5/0xa [ 1272.877503][T24110] ? nfc_llcp_build_tlv+0x105/0x250 [ 1272.877526][T24110] should_failslab+0xc2/0x120 [ 1272.877549][T24110] __kmalloc_noprof+0xe0/0x850 [ 1272.877583][T24110] nfc_llcp_build_tlv+0x105/0x250 [ 1272.877605][T24110] ? lockdep_hardirqs_on+0x78/0x100 [ 1272.877632][T24110] nfc_llcp_build_gb.isra.0+0xed/0x3f0 [ 1272.877655][T24110] ? __pfx_nfc_llcp_build_gb.isra.0+0x10/0x10 [ 1272.877682][T24110] ? lockdep_init_map_type+0x5c/0x250 [ 1272.877701][T24110] ? lockdep_init_map_type+0x5c/0x250 [ 1272.877722][T24110] nfc_llcp_register_device+0x600/0xa60 [ 1272.877747][T24110] nfc_register_device+0x6d/0x3e0 [ 1272.877772][T24110] nci_register_device+0x7f1/0xb80 [ 1272.877792][T24110] ? __pfx_nci_register_device+0x10/0x10 [ 1272.877813][T24110] ? lockdep_init_map_type+0x5c/0x250 [ 1272.877836][T24110] virtual_ncidev_open+0x141/0x220 [ 1272.877872][T24110] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 1272.877899][T24110] misc_open+0x26d/0x450 [ 1272.877923][T24110] ? __pfx_misc_open+0x10/0x10 [ 1272.877944][T24110] chrdev_open+0x234/0x6a0 [ 1272.877968][T24110] ? __pfx_apparmor_file_open+0x10/0x10 [ 1272.878003][T24110] ? __pfx_chrdev_open+0x10/0x10 [ 1272.878027][T24110] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1272.878058][T24110] do_dentry_open+0x6d8/0x1660 [ 1272.878080][T24110] ? __pfx_chrdev_open+0x10/0x10 [ 1272.878109][T24110] vfs_open+0x82/0x3f0 [ 1272.878139][T24110] path_openat+0x208c/0x31a0 [ 1272.878171][T24110] ? __pfx_path_openat+0x10/0x10 [ 1272.878203][T24110] do_file_open+0x20e/0x430 [ 1272.878229][T24110] ? __pfx_do_file_open+0x10/0x10 [ 1272.878269][T24110] ? alloc_fd+0x476/0x790 [ 1272.878293][T24110] ? do_getname+0x191/0x390 [ 1272.878323][T24110] do_sys_openat2+0x10d/0x1e0 [ 1272.878351][T24110] ? __pfx_do_sys_openat2+0x10/0x10 [ 1272.878381][T24110] ? __sys_sendmsg+0x18f/0x220 [ 1272.878406][T24110] __x64_sys_openat+0x12d/0x210 [ 1272.878435][T24110] ? __pfx___x64_sys_openat+0x10/0x10 [ 1272.878472][T24110] ? rcu_is_watching+0x12/0xc0 [ 1272.878498][T24110] do_syscall_64+0x10b/0xf80 [ 1272.878521][T24110] ? clear_bhb_loop+0x40/0x90 [ 1272.878544][T24110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1272.878563][T24110] RIP: 0033:0x7f2874f9cdd9 [ 1272.878580][T24110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1272.878598][T24110] RSP: 002b:00007f2875e6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1272.878617][T24110] RAX: ffffffffffffffda RBX: 00007f2875216090 RCX: 00007f2874f9cdd9 [ 1272.878630][T24110] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1272.878642][T24110] RBP: 00007f2875032d69 R08: 0000000000000000 R09: 0000000000000000 [ 1272.878654][T24110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1272.878666][T24110] R13: 00007f2875216128 R14: 00007f2875216090 R15: 00007fff35696378 [ 1272.878690][T24110] [ 1274.283495][T24122] netlink: 'syz.3.4066': attribute type 11 has an invalid length. [ 1274.310064][T24122] netlink: 'syz.3.4066': attribute type 11 has an invalid length. [ 1274.365140][T24114] random: crng reseeded on system resumption [ 1274.894798][ T5639] Bluetooth: hci1: command 0x0406 tx timeout [ 1275.405230][T24134] FAULT_INJECTION: forcing a failure. [ 1275.405230][T24134] name failslab, interval 1, probability 0, space 0, times 0 [ 1275.522667][T24134] CPU: 0 UID: 0 PID: 24134 Comm: syz.1.4069 Tainted: G L syzkaller #0 PREEMPT(full) [ 1275.522700][T24134] Tainted: [L]=SOFTLOCKUP [ 1275.522707][T24134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1275.522718][T24134] Call Trace: [ 1275.522725][T24134] [ 1275.522733][T24134] dump_stack_lvl+0x100/0x190 [ 1275.522758][T24134] should_fail_ex.cold+0x5/0xa [ 1275.522782][T24134] should_failslab+0xc2/0x120 [ 1275.522804][T24134] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1275.522842][T24134] ? __d_alloc+0x34/0xa40 [ 1275.522871][T24134] __d_alloc+0x34/0xa40 [ 1275.522903][T24134] d_alloc+0x4a/0x1e0 [ 1275.522929][T24134] lookup_one_qstr_excl+0x171/0x250 [ 1275.522959][T24134] start_dirop+0x59/0xb0 [ 1275.522981][T24134] simple_start_creating+0xf9/0x110 [ 1275.523003][T24134] ? __pfx_simple_start_creating+0x10/0x10 [ 1275.523027][T24134] ? mntput+0x70/0xa0 [ 1275.523046][T24134] ? simple_pin_fs+0xa3/0x190 [ 1275.523066][T24134] debugfs_start_creating.part.0+0x82/0x170 [ 1275.523099][T24134] __debugfs_create_file+0xb3/0x4f0 [ 1275.523130][T24134] debugfs_create_file_full+0x41/0x60 [ 1275.523161][T24134] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 1275.523184][T24134] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1275.523205][T24134] ? ida_alloc_range+0x70d/0x830 [ 1275.523250][T24134] ? lockdep_init_map_type+0x5c/0x250 [ 1275.523273][T24134] preinit_net.part.0+0x252/0x920 [ 1275.523297][T24134] copy_net_ns+0x339/0x7c0 [ 1275.523322][T24134] create_new_namespaces+0x3ea/0xac0 [ 1275.523353][T24134] unshare_nsproxy_namespaces+0xf2/0x220 [ 1275.523387][T24134] ksys_unshare+0x438/0xab0 [ 1275.523415][T24134] ? __pfx_ksys_unshare+0x10/0x10 [ 1275.523441][T24134] ? xfd_validate_state+0x129/0x190 [ 1275.523461][T24134] ? ksys_write+0x1ac/0x250 [ 1275.523490][T24134] __x64_sys_unshare+0x31/0x40 [ 1275.523518][T24134] do_syscall_64+0x10b/0xf80 [ 1275.523542][T24134] ? clear_bhb_loop+0x40/0x90 [ 1275.523564][T24134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1275.523584][T24134] RIP: 0033:0x7f2874f9cdd9 [ 1275.523601][T24134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1275.523619][T24134] RSP: 002b:00007f2875e6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1275.523638][T24134] RAX: ffffffffffffffda RBX: 00007f2875216090 RCX: 00007f2874f9cdd9 [ 1275.523651][T24134] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1275.523662][T24134] RBP: 00007f2875032d69 R08: 0000000000000000 R09: 0000000000000000 [ 1275.523673][T24134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1275.523684][T24134] R13: 00007f2875216128 R14: 00007f2875216090 R15: 00007fff35696378 [ 1275.523707][T24134] [ 1276.971231][ T5639] Bluetooth: hci1: command 0x0406 tx timeout [ 1277.156195][T24141] netlink: 'syz.4.4070': attribute type 11 has an invalid length. [ 1277.682957][T24144] snd_virmidi snd_virmidi.0: control 16781581:65539:8:'x?F/zF˷fC:7 is already present [ 1278.359040][T24163] block2mtd: illegal erase size [ 1278.666406][T24167] netlink: 'syz.4.4076': attribute type 11 has an invalid length. [ 1278.715465][T24167] netlink: 'syz.4.4076': attribute type 11 has an invalid length. [ 1279.070339][T24172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4077'. [ 1279.865660][T24183] snd_virmidi snd_virmidi.0: control 16781581:65539:6:'x?F/zF˷fC:7 is already present [ 1280.271527][T24191] snd_virmidi snd_virmidi.0: control 16781581:65539:8:'x?F/zF˷fC:7 is already present [ 1281.679269][T24208] netlink: 'syz.4.4086': attribute type 11 has an invalid length. [ 1281.688421][T24207] FAULT_INJECTION: forcing a failure. [ 1281.688421][T24207] name failslab, interval 1, probability 0, space 0, times 0 [ 1281.703845][T24205] FAULT_INJECTION: forcing a failure. [ 1281.703845][T24205] name failslab, interval 1, probability 0, space 0, times 0 [ 1281.739537][T24208] netlink: 'syz.4.4086': attribute type 11 has an invalid length. [ 1281.776244][T24205] CPU: 0 UID: 0 PID: 24205 Comm: syz.2.4085 Tainted: G L syzkaller #0 PREEMPT(full) [ 1281.776278][T24205] Tainted: [L]=SOFTLOCKUP [ 1281.776284][T24205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1281.776295][T24205] Call Trace: [ 1281.776302][T24205] [ 1281.776311][T24205] dump_stack_lvl+0x100/0x190 [ 1281.776336][T24205] should_fail_ex.cold+0x5/0xa [ 1281.776361][T24205] should_failslab+0xc2/0x120 [ 1281.776384][T24205] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 1281.776404][T24205] ? snd_pcm_hw_rule_add+0x3b3/0x510 [ 1281.776434][T24205] krealloc_node_align_noprof+0x321/0x3e0 [ 1281.776457][T24205] snd_pcm_hw_rule_add+0x3b3/0x510 [ 1281.776482][T24205] ? __pfx_snd_pcm_hw_rule_format+0x10/0x10 [ 1281.776512][T24205] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 1281.776540][T24205] ? mutex_init_lockdep+0xf1/0x120 [ 1281.776561][T24205] ? snd_pcm_attach_substream+0x287/0xd20 [ 1281.776587][T24205] snd_pcm_open_substream+0x54a/0x1850 [ 1281.776609][T24205] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 1281.776629][T24205] ? rcu_is_watching+0x12/0xc0 [ 1281.776656][T24205] snd_pcm_open+0x2a3/0x710 [ 1281.776677][T24205] ? __pfx_snd_pcm_open+0x10/0x10 [ 1281.776698][T24205] ? __pfx_default_wake_function+0x10/0x10 [ 1281.776730][T24205] ? __pfx_snd_pcm_playback_open+0x10/0x10 [ 1281.776749][T24205] snd_pcm_playback_open+0x86/0xe0 [ 1281.776768][T24205] snd_open+0x201/0x450 [ 1281.776794][T24205] ? __pfx_snd_open+0x10/0x10 [ 1281.776818][T24205] chrdev_open+0x234/0x6a0 [ 1281.776848][T24205] ? __pfx_apparmor_file_open+0x10/0x10 [ 1281.776878][T24205] ? __pfx_chrdev_open+0x10/0x10 [ 1281.776903][T24205] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1281.776933][T24205] do_dentry_open+0x6d8/0x1660 [ 1281.776957][T24205] ? __pfx_chrdev_open+0x10/0x10 [ 1281.776986][T24205] vfs_open+0x82/0x3f0 [ 1281.777016][T24205] path_openat+0x208c/0x31a0 [ 1281.777049][T24205] ? __pfx_path_openat+0x10/0x10 [ 1281.777080][T24205] do_file_open+0x20e/0x430 [ 1281.777105][T24205] ? __pfx_do_file_open+0x10/0x10 [ 1281.777144][T24205] ? alloc_fd+0x476/0x790 [ 1281.777169][T24205] ? do_getname+0x191/0x390 [ 1281.777198][T24205] do_sys_openat2+0x10d/0x1e0 [ 1281.777227][T24205] ? __pfx_do_sys_openat2+0x10/0x10 [ 1281.777263][T24205] __x64_sys_openat+0x12d/0x210 [ 1281.777293][T24205] ? __pfx___x64_sys_openat+0x10/0x10 [ 1281.777332][T24205] ? rcu_is_watching+0x12/0xc0 [ 1281.777362][T24205] do_syscall_64+0x10b/0xf80 [ 1281.777386][T24205] ? clear_bhb_loop+0x40/0x90 [ 1281.777409][T24205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1281.777429][T24205] RIP: 0033:0x7f5bb839cdd9 [ 1281.777444][T24205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1281.777463][T24205] RSP: 002b:00007f5bb926c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1281.777481][T24205] RAX: ffffffffffffffda RBX: 00007f5bb8615fa0 RCX: 00007f5bb839cdd9 [ 1281.777494][T24205] RDX: 0000000000002100 RSI: 0000200000004ec0 RDI: ffffffffffffff9c [ 1281.777505][T24205] RBP: 00007f5bb8432d69 R08: 0000000000000000 R09: 0000000000000000 [ 1281.777516][T24205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1281.777527][T24205] R13: 00007f5bb8616038 R14: 00007f5bb8615fa0 R15: 00007fff166f7ca8 [ 1281.777551][T24205] [ 1282.465153][T24207] CPU: 0 UID: 0 PID: 24207 Comm: syz.1.4084 Tainted: G L syzkaller #0 PREEMPT(full) [ 1282.465186][T24207] Tainted: [L]=SOFTLOCKUP [ 1282.465193][T24207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1282.465204][T24207] Call Trace: [ 1282.465211][T24207] [ 1282.465218][T24207] dump_stack_lvl+0x100/0x190 [ 1282.465244][T24207] should_fail_ex.cold+0x5/0xa [ 1282.465268][T24207] should_failslab+0xc2/0x120 [ 1282.465291][T24207] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1282.465322][T24207] ? __d_alloc+0x34/0xa40 [ 1282.465352][T24207] __d_alloc+0x34/0xa40 [ 1282.465379][T24207] d_alloc+0x4a/0x1e0 [ 1282.465404][T24207] lookup_one_qstr_excl+0x171/0x250 [ 1282.465435][T24207] start_dirop+0x59/0xb0 [ 1282.465457][T24207] simple_start_creating+0xf9/0x110 [ 1282.465480][T24207] ? __pfx_simple_start_creating+0x10/0x10 [ 1282.465504][T24207] ? mntput+0x70/0xa0 [ 1282.465523][T24207] ? simple_pin_fs+0xa3/0x190 [ 1282.465544][T24207] debugfs_start_creating.part.0+0x82/0x170 [ 1282.465573][T24207] __debugfs_create_file+0xb3/0x4f0 [ 1282.465604][T24207] debugfs_create_file_full+0x41/0x60 [ 1282.465634][T24207] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 1282.465658][T24207] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1282.465700][T24207] ? lockdep_init_map_type+0x5c/0x250 [ 1282.465724][T24207] preinit_net.part.0+0x43b/0x920 [ 1282.465747][T24207] copy_net_ns+0x339/0x7c0 [ 1282.465771][T24207] create_new_namespaces+0x3ea/0xac0 [ 1282.465809][T24207] unshare_nsproxy_namespaces+0xf2/0x220 [ 1282.465836][T24207] ksys_unshare+0x438/0xab0 [ 1282.465865][T24207] ? __pfx_ksys_unshare+0x10/0x10 [ 1282.465891][T24207] ? xfd_validate_state+0x129/0x190 [ 1282.465910][T24207] ? ksys_write+0x1ac/0x250 [ 1282.465938][T24207] __x64_sys_unshare+0x31/0x40 [ 1282.465967][T24207] do_syscall_64+0x10b/0xf80 [ 1282.465991][T24207] ? clear_bhb_loop+0x40/0x90 [ 1282.466014][T24207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1282.466033][T24207] RIP: 0033:0x7f2874f9cdd9 [ 1282.466049][T24207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1282.466068][T24207] RSP: 002b:00007f2875e6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1282.466086][T24207] RAX: ffffffffffffffda RBX: 00007f2875216090 RCX: 00007f2874f9cdd9 [ 1282.466098][T24207] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1282.466110][T24207] RBP: 00007f2875032d69 R08: 0000000000000000 R09: 0000000000000000 [ 1282.466121][T24207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1282.466133][T24207] R13: 00007f2875216128 R14: 00007f2875216090 R15: 00007fff35696378 [ 1282.466156][T24207] [ 1284.943928][T24238] snd_virmidi snd_virmidi.0: control 16781581:65539:8:'x?F/zF˷fC:7 is already present [ 1286.089609][T24249] netlink: 'syz.4.4096': attribute type 11 has an invalid length. [ 1286.136180][T24249] netlink: 'syz.4.4096': attribute type 11 has an invalid length. [ 1286.189266][T24249] netlink: 'syz.4.4096': attribute type 11 has an invalid length. [ 1286.240915][T24249] netlink: 'syz.4.4096': attribute type 11 has an invalid length. [ 1286.289635][T24249] netlink: 'syz.4.4096': attribute type 11 has an invalid length. [ 1286.346654][T24249] netlink: 'syz.4.4096': attribute type 11 has an invalid length. [ 1286.881174][T24256] FAULT_INJECTION: forcing a failure. [ 1286.881174][T24256] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1287.067135][T24256] CPU: 0 UID: 0 PID: 24256 Comm: syz.3.4098 Tainted: G L syzkaller #0 PREEMPT(full) [ 1287.067168][T24256] Tainted: [L]=SOFTLOCKUP [ 1287.067175][T24256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1287.067190][T24256] Call Trace: [ 1287.067197][T24256] [ 1287.067205][T24256] dump_stack_lvl+0x100/0x190 [ 1287.067230][T24256] should_fail_ex.cold+0x5/0xa [ 1287.067254][T24256] _copy_from_user+0x2e/0xd0 [ 1287.067286][T24256] sg_write+0x2af/0xdb0 [ 1287.067312][T24256] ? __pfx_sg_write+0x10/0x10 [ 1287.067355][T24256] ? apparmor_file_permission+0x13f/0x1c0 [ 1287.067375][T24256] ? bpf_lsm_file_permission+0x9/0x10 [ 1287.067394][T24256] ? security_file_permission+0x76/0x210 [ 1287.067416][T24256] ? rw_verify_area+0xce/0x6d0 [ 1287.067437][T24256] vfs_write+0x2aa/0x1070 [ 1287.067459][T24256] ? __pfx_sg_write+0x10/0x10 [ 1287.067483][T24256] ? __pfx_vfs_write+0x10/0x10 [ 1287.067503][T24256] ? find_held_lock+0x2b/0x80 [ 1287.067527][T24256] ? __fget_files+0x215/0x3d0 [ 1287.067549][T24256] ? __fget_files+0x215/0x3d0 [ 1287.067575][T24256] ? __fget_files+0x21f/0x3d0 [ 1287.067602][T24256] ksys_write+0x12a/0x250 [ 1287.067623][T24256] ? __pfx_ksys_write+0x10/0x10 [ 1287.067647][T24256] ? rcu_is_watching+0x12/0xc0 [ 1287.067673][T24256] do_syscall_64+0x10b/0xf80 [ 1287.067697][T24256] ? clear_bhb_loop+0x40/0x90 [ 1287.067720][T24256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1287.067740][T24256] RIP: 0033:0x7f41af59cdd9 [ 1287.067756][T24256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1287.067775][T24256] RSP: 002b:00007f41b0451028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1287.067793][T24256] RAX: ffffffffffffffda RBX: 00007f41af815fa0 RCX: 00007f41af59cdd9 [ 1287.067806][T24256] RDX: 0000000000008587 RSI: 0000200000000040 RDI: 0000000000000003 [ 1287.067817][T24256] RBP: 00007f41b0451090 R08: 0000000000000000 R09: 0000000000000000 [ 1287.067835][T24256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1287.067846][T24256] R13: 00007f41af816038 R14: 00007f41af815fa0 R15: 00007ffea2824438 [ 1287.067869][T24256] [ 1288.282147][T24270] snd_virmidi snd_virmidi.0: control 16781581:65539:8:'x?F/zF˷fC:7 is already present [ 1289.936494][T24298] FAULT_INJECTION: forcing a failure. [ 1289.936494][T24298] name failslab, interval 1, probability 0, space 0, times 0 [ 1290.105569][T24298] CPU: 0 UID: 0 PID: 24298 Comm: syz.1.4107 Tainted: G L syzkaller #0 PREEMPT(full) [ 1290.105601][T24298] Tainted: [L]=SOFTLOCKUP [ 1290.105608][T24298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1290.105619][T24298] Call Trace: [ 1290.105627][T24298] [ 1290.105635][T24298] dump_stack_lvl+0x100/0x190 [ 1290.105661][T24298] should_fail_ex.cold+0x5/0xa [ 1290.105685][T24298] should_failslab+0xc2/0x120 [ 1290.105707][T24298] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1290.105738][T24298] ? __d_alloc+0x34/0xa40 [ 1290.105774][T24298] __d_alloc+0x34/0xa40 [ 1290.105802][T24298] d_alloc+0x4a/0x1e0 [ 1290.105828][T24298] lookup_one_qstr_excl+0x171/0x250 [ 1290.105858][T24298] start_dirop+0x59/0xb0 [ 1290.105879][T24298] simple_start_creating+0xf9/0x110 [ 1290.105901][T24298] ? __pfx_simple_start_creating+0x10/0x10 [ 1290.105925][T24298] ? mntput+0x70/0xa0 [ 1290.105944][T24298] ? simple_pin_fs+0xa3/0x190 [ 1290.105964][T24298] debugfs_start_creating.part.0+0x82/0x170 [ 1290.105994][T24298] __debugfs_create_file+0xb3/0x4f0 [ 1290.106024][T24298] debugfs_create_file_full+0x41/0x60 [ 1290.106055][T24298] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 1290.106078][T24298] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1290.106099][T24298] ? ida_alloc_range+0x70d/0x830 [ 1290.106147][T24298] ? lockdep_init_map_type+0x5c/0x250 [ 1290.106171][T24298] preinit_net.part.0+0x252/0x920 [ 1290.106195][T24298] copy_net_ns+0x339/0x7c0 [ 1290.106221][T24298] create_new_namespaces+0x3ea/0xac0 [ 1290.106250][T24298] unshare_nsproxy_namespaces+0xf2/0x220 [ 1290.106277][T24298] ksys_unshare+0x438/0xab0 [ 1290.106306][T24298] ? __pfx_ksys_unshare+0x10/0x10 [ 1290.106333][T24298] ? xfd_validate_state+0x129/0x190 [ 1290.106353][T24298] ? ksys_write+0x1ac/0x250 [ 1290.106381][T24298] __x64_sys_unshare+0x31/0x40 [ 1290.106408][T24298] do_syscall_64+0x10b/0xf80 [ 1290.106431][T24298] ? clear_bhb_loop+0x40/0x90 [ 1290.106454][T24298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1290.106473][T24298] RIP: 0033:0x7f2874f9cdd9 [ 1290.106490][T24298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1290.106508][T24298] RSP: 002b:00007f2875e6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1290.106527][T24298] RAX: ffffffffffffffda RBX: 00007f2875216090 RCX: 00007f2874f9cdd9 [ 1290.106539][T24298] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1290.106550][T24298] RBP: 00007f2875032d69 R08: 0000000000000000 R09: 0000000000000000 [ 1290.106561][T24298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1290.106573][T24298] R13: 00007f2875216128 R14: 00007f2875216090 R15: 00007fff35696378 [ 1290.106596][T24298] [ 1291.849077][T24312] snd_virmidi snd_virmidi.0: control 16781581:65539:8:'x?F/zF˷fC:7 is already present [ 1293.005422][T24339] FAULT_INJECTION: forcing a failure. [ 1293.005422][T24339] name failslab, interval 1, probability 0, space 0, times 0 [ 1293.063960][T24339] CPU: 0 UID: 0 PID: 24339 Comm: syz.2.4118 Tainted: G L syzkaller #0 PREEMPT(full) [ 1293.063993][T24339] Tainted: [L]=SOFTLOCKUP [ 1293.064000][T24339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1293.064011][T24339] Call Trace: [ 1293.064018][T24339] [ 1293.064025][T24339] dump_stack_lvl+0x100/0x190 [ 1293.064050][T24339] should_fail_ex.cold+0x5/0xa [ 1293.064082][T24339] should_failslab+0xc2/0x120 [ 1293.064105][T24339] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1293.064135][T24339] ? do_getname+0x35/0x390 [ 1293.064163][T24339] ? rcu_read_lock_any_held+0x6a/0xa0 [ 1293.064193][T24339] do_getname+0x35/0x390 [ 1293.064222][T24339] do_sys_openat2+0xc5/0x1e0 [ 1293.064251][T24339] ? __pfx_do_sys_openat2+0x10/0x10 [ 1293.064281][T24339] ? blkcg_maybe_throttle_current+0x5e7/0xeb0 [ 1293.064310][T24339] __x64_sys_open+0xfe/0x1d0 [ 1293.064339][T24339] ? __pfx___x64_sys_open+0x10/0x10 [ 1293.064367][T24339] ? ksys_write+0x1ac/0x250 [ 1293.064392][T24339] ? rcu_is_watching+0x12/0xc0 [ 1293.064417][T24339] do_syscall_64+0x10b/0xf80 [ 1293.064441][T24339] ? clear_bhb_loop+0x40/0x90 [ 1293.064469][T24339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1293.064488][T24339] RIP: 0033:0x7f5bb839cdd9 [ 1293.064504][T24339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1293.064523][T24339] RSP: 002b:00007f5bb926c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1293.064541][T24339] RAX: ffffffffffffffda RBX: 00007f5bb8615fa0 RCX: 00007f5bb839cdd9 [ 1293.064554][T24339] RDX: 000000000000011c RSI: 000000000008a2c0 RDI: 0000000000000000 [ 1293.064565][T24339] RBP: 00007f5bb926c090 R08: 0000000000000000 R09: 0000000000000000 [ 1293.064576][T24339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1293.064587][T24339] R13: 00007f5bb8616038 R14: 00007f5bb8615fa0 R15: 00007fff166f7ca8 [ 1293.064632][T24339] [ 1294.388112][T10887] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 1294.877186][T24345] kvm: vcpu 4: requested lapic timer restore with starting count register 0x390=4294967104 (137438947328 ns) > initial count (6624 ns). Using initial count to start timer. [ 1295.107019][T24361] snd_virmidi snd_virmidi.0: control 16781581:65539:8:'x?F/zF˷fC:7 is already present [ 1296.440017][T24383] netlink: 'syz.3.4128': attribute type 11 has an invalid length. [ 1299.011374][T24423] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4137'. [ 1299.155661][T24428] snd_virmidi snd_virmidi.0: control 16781581:65539:8:'x?F/zF˷fC:7 is already present [ 1300.644806][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.651339][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.491584][T24461] ubi0: attaching mtd0 [ 1301.606427][T24461] ubi0: scanning is finished [ 1301.696722][T24461] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1302.236761][T24475] snd_virmidi snd_virmidi.0: control 16781581:65539:8:'x?F/zF˷fC:7 is already present [ 1302.329520][T24461] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1303.354837][T24493] FAULT_INJECTION: forcing a failure. [ 1303.354837][T24493] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1303.499819][T24493] CPU: 0 UID: 0 PID: 24493 Comm: syz.4.4152 Tainted: G L syzkaller #0 PREEMPT(full) [ 1303.499857][T24493] Tainted: [L]=SOFTLOCKUP [ 1303.499865][T24493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1303.499876][T24493] Call Trace: [ 1303.499883][T24493] [ 1303.499890][T24493] dump_stack_lvl+0x100/0x190 [ 1303.499917][T24493] should_fail_ex.cold+0x5/0xa [ 1303.499944][T24493] _copy_to_user+0x32/0xd0 [ 1303.499977][T24493] simple_read_from_buffer+0xcb/0x170 [ 1303.500001][T24493] proc_fail_nth_read+0x1af/0x230 [ 1303.500032][T24493] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1303.500064][T24493] ? rw_verify_area+0xce/0x6d0 [ 1303.500082][T24493] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1303.500113][T24493] vfs_read+0x1e4/0xb30 [ 1303.500136][T24493] ? __pfx_vfs_read+0x10/0x10 [ 1303.500156][T24493] ? __fget_files+0x215/0x3d0 [ 1303.500187][T24493] ? __fget_files+0x21f/0x3d0 [ 1303.500216][T24493] ksys_read+0x12a/0x250 [ 1303.500237][T24493] ? __pfx_ksys_read+0x10/0x10 [ 1303.500260][T24493] ? rcu_is_watching+0x12/0xc0 [ 1303.500286][T24493] do_syscall_64+0x10b/0xf80 [ 1303.500311][T24493] ? clear_bhb_loop+0x40/0x90 [ 1303.500335][T24493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1303.500355][T24493] RIP: 0033:0x7f9d8735d60e [ 1303.500371][T24493] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1303.500390][T24493] RSP: 002b:00007f9d8824bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1303.500409][T24493] RAX: ffffffffffffffda RBX: 00007f9d8824c6c0 RCX: 00007f9d8735d60e [ 1303.500421][T24493] RDX: 000000000000000f RSI: 00007f9d8824c0a0 RDI: 0000000000000004 [ 1303.500433][T24493] RBP: 00007f9d8824c090 R08: 0000000000000000 R09: 0000000000000000 [ 1303.500444][T24493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1303.500455][T24493] R13: 00007f9d87616038 R14: 00007f9d87615fa0 R15: 00007ffd611bfe28 [ 1303.500479][T24493] [ 1305.752659][T24515] ubi0: attaching mtd0 [ 1305.903534][T24515] ubi0: scanning is finished [ 1306.006103][T24515] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1306.814914][T24515] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1307.253214][T24535] netlink: 'syz.3.4160': attribute type 11 has an invalid length. [ 1307.379884][ T5639] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 1307.387774][ T5639] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1307.701732][ T5639] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 1309.164808][T24560] bridge0: port 3(bond0) entered blocking state [ 1309.311691][T24560] bridge0: port 3(bond0) entered disabled state [ 1309.442837][T24560] bond0: entered allmulticast mode [ 1309.693955][T24560] bond_slave_0: entered allmulticast mode [ 1309.924031][T24560] bond_slave_1: entered allmulticast mode [ 1309.980127][T24574] can: request_module (can-proto-0) failed. [ 1310.110444][T24560] bond0: entered promiscuous mode [ 1310.249896][T24560] bond_slave_0: entered promiscuous mode [ 1310.374540][T24560] bond_slave_1: entered promiscuous mode [ 1310.527719][T24560] bridge0: port 3(bond0) entered blocking state [ 1310.534200][T24560] bridge0: port 3(bond0) entered forwarding state [ 1310.751483][T24598] random: crng reseeded on system resumption [ 1311.345749][T24603] FAULT_INJECTION: forcing a failure. [ 1311.345749][T24603] name failslab, interval 1, probability 0, space 0, times 0 [ 1311.479635][T24587] binder: 24567:24587 ioctl 40086602 e20 returned -22 [ 1311.491601][T24603] CPU: 0 UID: 0 PID: 24603 Comm: syz.3.4171 Tainted: G L syzkaller #0 PREEMPT(full) [ 1311.491634][T24603] Tainted: [L]=SOFTLOCKUP [ 1311.491641][T24603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1311.491653][T24603] Call Trace: [ 1311.491660][T24603] [ 1311.491668][T24603] dump_stack_lvl+0x100/0x190 [ 1311.491693][T24603] should_fail_ex.cold+0x5/0xa [ 1311.491717][T24603] should_failslab+0xc2/0x120 [ 1311.491740][T24603] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1311.491777][T24603] ? alloc_inode+0x68/0x250 [ 1311.491807][T24603] ? simple_start_creating+0xb0/0x110 [ 1311.491834][T24603] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 1311.491863][T24603] alloc_inode+0x68/0x250 [ 1311.491892][T24603] new_inode+0x22/0x1c0 [ 1311.491922][T24603] __debugfs_create_file+0x105/0x4f0 [ 1311.491955][T24603] debugfs_create_file_full+0x41/0x60 [ 1311.491985][T24603] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 1311.492011][T24603] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1311.492054][T24603] ? lockdep_init_map_type+0x5c/0x250 [ 1311.492077][T24603] preinit_net.part.0+0x43b/0x920 [ 1311.492100][T24603] copy_net_ns+0x339/0x7c0 [ 1311.492125][T24603] create_new_namespaces+0x3ea/0xac0 [ 1311.492155][T24603] unshare_nsproxy_namespaces+0xf2/0x220 [ 1311.492182][T24603] ksys_unshare+0x438/0xab0 [ 1311.492211][T24603] ? __pfx_ksys_unshare+0x10/0x10 [ 1311.492238][T24603] ? xfd_validate_state+0x129/0x190 [ 1311.492257][T24603] ? ksys_write+0x1ac/0x250 [ 1311.492286][T24603] __x64_sys_unshare+0x31/0x40 [ 1311.492313][T24603] do_syscall_64+0x10b/0xf80 [ 1311.492338][T24603] ? clear_bhb_loop+0x40/0x90 [ 1311.492361][T24603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1311.492380][T24603] RIP: 0033:0x7f41af59cdd9 [ 1311.492397][T24603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1311.492416][T24603] RSP: 002b:00007f41b0430028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1311.492436][T24603] RAX: ffffffffffffffda RBX: 00007f41af816090 RCX: 00007f41af59cdd9 [ 1311.492449][T24603] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1311.492460][T24603] RBP: 00007f41af632d69 R08: 0000000000000000 R09: 0000000000000000 [ 1311.492471][T24603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1311.492482][T24603] R13: 00007f41af816128 R14: 00007f41af816090 R15: 00007ffea2824438 [ 1311.492506][T24603] [ 1313.662328][T24603] debugfs: out of free dentries, can not create file 'net_notrefcnt@ffff888052daa9b8' [ 1315.498646][ T5639] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 1315.506318][ T5639] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1316.189553][T24632] misc userio: Invalid payload size [ 1316.431569][T24635] FAULT_INJECTION: forcing a failure. [ 1316.431569][T24635] name failslab, interval 1, probability 0, space 0, times 0 [ 1316.537258][T24635] CPU: 0 UID: 0 PID: 24635 Comm: syz.3.4176 Tainted: G L syzkaller #0 PREEMPT(full) [ 1316.537290][T24635] Tainted: [L]=SOFTLOCKUP [ 1316.537298][T24635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1316.537308][T24635] Call Trace: [ 1316.537315][T24635] [ 1316.537322][T24635] dump_stack_lvl+0x100/0x190 [ 1316.537348][T24635] should_fail_ex.cold+0x5/0xa [ 1316.537372][T24635] should_failslab+0xc2/0x120 [ 1316.537394][T24635] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1316.537425][T24635] ? alloc_empty_file+0x5b/0x1c0 [ 1316.537452][T24635] ? stack_trace_save+0x8e/0xc0 [ 1316.537482][T24635] alloc_empty_file+0x5b/0x1c0 [ 1316.537511][T24635] path_openat+0xe8/0x31a0 [ 1316.537534][T24635] ? kasan_save_stack+0x3f/0x50 [ 1316.537552][T24635] ? kasan_save_stack+0x30/0x50 [ 1316.537569][T24635] ? kasan_save_track+0x14/0x30 [ 1316.537586][T24635] ? __kasan_slab_alloc+0x89/0x90 [ 1316.537604][T24635] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1316.537634][T24635] ? do_getname+0x35/0x390 [ 1316.537662][T24635] ? do_syscall_64+0x10b/0xf80 [ 1316.537685][T24635] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1316.537707][T24635] ? __pfx_path_openat+0x10/0x10 [ 1316.537746][T24635] do_file_open+0x20e/0x430 [ 1316.537772][T24635] ? __pfx_do_file_open+0x10/0x10 [ 1316.537815][T24635] ? _raw_spin_unlock+0x28/0x50 [ 1316.537836][T24635] ? alloc_fd+0x476/0x790 [ 1316.537865][T24635] do_sys_openat2+0x10d/0x1e0 [ 1316.537894][T24635] ? __pfx_do_sys_openat2+0x10/0x10 [ 1316.537926][T24635] ? kvm_sched_clock_read+0x11/0x20 [ 1316.537953][T24635] __x64_sys_open+0xfe/0x1d0 [ 1316.537982][T24635] ? __pfx___x64_sys_open+0x10/0x10 [ 1316.538011][T24635] ? ksys_write+0x1ac/0x250 [ 1316.538035][T24635] ? rcu_is_watching+0x12/0xc0 [ 1316.538062][T24635] do_syscall_64+0x10b/0xf80 [ 1316.538085][T24635] ? clear_bhb_loop+0x40/0x90 [ 1316.538109][T24635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1316.538128][T24635] RIP: 0033:0x7f41af59cdd9 [ 1316.538144][T24635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1316.538163][T24635] RSP: 002b:00007f41b0451028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1316.538182][T24635] RAX: ffffffffffffffda RBX: 00007f41af815fa0 RCX: 00007f41af59cdd9 [ 1316.538195][T24635] RDX: 000000000000011c RSI: 000000000008a2c0 RDI: 0000000000000000 [ 1316.538206][T24635] RBP: 00007f41b0451090 R08: 0000000000000000 R09: 0000000000000000 [ 1316.538218][T24635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1316.538229][T24635] R13: 00007f41af816038 R14: 00007f41af815fa0 R15: 00007ffea2824438 [ 1316.538252][T24635] [ 1318.292033][T24660] netlink: 'syz.1.4182': attribute type 11 has an invalid length. [ 1318.354540][T24660] netlink: 'syz.1.4182': attribute type 11 has an invalid length. [ 1318.422362][T24660] netlink: 'syz.1.4182': attribute type 11 has an invalid length. [ 1318.478271][T24660] netlink: 'syz.1.4182': attribute type 11 has an invalid length. [ 1318.537854][T24660] netlink: 'syz.1.4182': attribute type 11 has an invalid length. [ 1318.623319][T24660] netlink: 'syz.1.4182': attribute type 11 has an invalid length. [ 1319.075942][T10887] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1319.091277][T10887] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1319.101621][T10887] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1319.111685][T10887] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1319.129016][T10887] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1319.333902][T10887] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 1319.341355][T10887] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1321.202563][T10887] Bluetooth: hci3: command tx timeout [ 1321.250851][T10623] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1321.892854][T10623] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.309103][T10623] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.760492][T10623] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1323.284005][T10887] Bluetooth: hci3: command tx timeout [ 1324.496171][T10623] bridge_slave_1: left allmulticast mode [ 1324.527360][T10623] bridge_slave_1: left promiscuous mode [ 1324.565875][T10623] bridge0: port 2(bridge_slave_1) entered disabled state [ 1324.627883][T10623] bridge_slave_0: left allmulticast mode [ 1324.666157][T10623] bridge_slave_0: left promiscuous mode [ 1324.709963][T10623] bridge0: port 1(bridge_slave_0) entered disabled state [ 1324.807829][T10887] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 1324.815380][T10887] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1325.363893][T10887] Bluetooth: hci3: command tx timeout [ 1325.980704][T10623] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1326.093852][T10623] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1326.150735][T10623] bond0 (unregistering): Released all slaves [ 1326.559515][T24668] bridge0: port 1(bridge_slave_0) entered blocking state [ 1326.599623][T24668] bridge0: port 1(bridge_slave_0) entered disabled state [ 1326.658514][T24668] bridge_slave_0: entered allmulticast mode [ 1326.701010][T24668] bridge_slave_0: entered promiscuous mode [ 1326.797364][T24668] bridge0: port 2(bridge_slave_1) entered blocking state [ 1326.847626][T24668] bridge0: port 2(bridge_slave_1) entered disabled state [ 1326.896406][T24668] bridge_slave_1: entered allmulticast mode [ 1326.939677][T24668] bridge_slave_1: entered promiscuous mode [ 1327.164647][T24668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1327.294606][T24668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1327.445910][T10887] Bluetooth: hci3: command tx timeout [ 1327.780315][T24668] team0: Port device team_slave_0 added [ 1327.870608][T24668] team0: Port device team_slave_1 added [ 1327.903297][T24763] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4203'. [ 1328.074872][T24668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1328.132640][T24668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1328.303545][T24668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1328.378925][T24668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1328.427327][T24668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1328.586798][T24668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1329.197819][T24778] FAULT_INJECTION: forcing a failure. [ 1329.197819][T24778] name failslab, interval 1, probability 0, space 0, times 0 [ 1329.216325][T24668] hsr_slave_0: entered promiscuous mode [ 1329.281395][T24668] hsr_slave_1: entered promiscuous mode [ 1329.309823][T24778] CPU: 0 UID: 0 PID: 24778 Comm: syz.1.4206 Tainted: G L syzkaller #0 PREEMPT(full) [ 1329.309856][T24778] Tainted: [L]=SOFTLOCKUP [ 1329.309863][T24778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1329.309874][T24778] Call Trace: [ 1329.309881][T24778] [ 1329.309889][T24778] dump_stack_lvl+0x100/0x190 [ 1329.309915][T24778] should_fail_ex.cold+0x5/0xa [ 1329.309940][T24778] should_failslab+0xc2/0x120 [ 1329.309963][T24778] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1329.309994][T24778] ? __d_alloc+0x34/0xa40 [ 1329.310019][T24778] ? __pfx_stack_trace_save+0x10/0x10 [ 1329.310049][T24778] __d_alloc+0x34/0xa40 [ 1329.310077][T24778] d_alloc_parallel+0x111/0x14e0 [ 1329.310103][T24778] ? find_held_lock+0x2b/0x80 [ 1329.310129][T24778] ? __d_lookup+0x25c/0x4a0 [ 1329.310147][T24778] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1329.310169][T24778] ? __d_lookup+0x266/0x4a0 [ 1329.310193][T24778] lookup_open.isra.0+0x57c/0x11b0 [ 1329.310218][T24778] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1329.310242][T24778] ? __pfx___might_resched+0x10/0x10 [ 1329.310264][T24778] ? mnt_get_write_access+0x52/0x2f0 [ 1329.310298][T24778] ? __pfx_down_write+0x10/0x10 [ 1329.310326][T24778] ? mnt_get_write_access+0x1e9/0x2f0 [ 1329.310359][T24778] path_openat+0x2291/0x31a0 [ 1329.310387][T24778] ? entry_SYSCALL_64_after_hwframe+0x48/0x7f [ 1329.310411][T24778] ? __pfx_path_openat+0x10/0x10 [ 1329.310442][T24778] do_file_open+0x20e/0x430 [ 1329.310469][T24778] ? __pfx_do_file_open+0x10/0x10 [ 1329.310508][T24778] ? _raw_spin_unlock+0x28/0x50 [ 1329.310529][T24778] ? alloc_fd+0x476/0x790 [ 1329.310558][T24778] do_sys_openat2+0x10d/0x1e0 [ 1329.310588][T24778] ? __pfx_do_sys_openat2+0x10/0x10 [ 1329.310618][T24778] ? blkcg_maybe_throttle_current+0x5e7/0xeb0 [ 1329.310647][T24778] __x64_sys_open+0xfe/0x1d0 [ 1329.310682][T24778] ? __pfx___x64_sys_open+0x10/0x10 [ 1329.310711][T24778] ? ksys_write+0x1ac/0x250 [ 1329.310736][T24778] ? rcu_is_watching+0x12/0xc0 [ 1329.310769][T24778] do_syscall_64+0x10b/0xf80 [ 1329.310793][T24778] ? clear_bhb_loop+0x40/0x90 [ 1329.310816][T24778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1329.310836][T24778] RIP: 0033:0x7f2874f9cdd9 [ 1329.310857][T24778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1329.310876][T24778] RSP: 002b:00007f2875e8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1329.310896][T24778] RAX: ffffffffffffffda RBX: 00007f2875215fa0 RCX: 00007f2874f9cdd9 [ 1329.310908][T24778] RDX: 000000000000011c RSI: 000000000008a2c0 RDI: 0000000000000000 [ 1329.310921][T24778] RBP: 00007f2875e8f090 R08: 0000000000000000 R09: 0000000000000000 [ 1329.310935][T24778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1329.310947][T24778] R13: 00007f2875216038 R14: 00007f2875215fa0 R15: 00007fff35696378 [ 1329.310972][T24778] [ 1330.064040][T10887] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 1330.074437][T10887] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1330.215557][T24790] netlink: 'syz.1.4209': attribute type 11 has an invalid length. [ 1330.266096][T24790] netlink: 'syz.1.4209': attribute type 11 has an invalid length. [ 1330.311014][T24790] netlink: 'syz.1.4209': attribute type 11 has an invalid length. [ 1330.354944][T24790] netlink: 'syz.1.4209': attribute type 11 has an invalid length. [ 1330.400887][T24790] netlink: 'syz.1.4209': attribute type 11 has an invalid length. [ 1330.437429][T24790] netlink: 'syz.1.4209': attribute type 11 has an invalid length. [ 1331.379650][T24668] debugfs: 'hsr0' already exists in 'hsr' [ 1331.480823][T24668] Cannot create hsr debugfs directory [ 1332.437499][T10623] hsr_slave_0: left promiscuous mode [ 1332.512308][T10623] hsr_slave_1: left promiscuous mode [ 1332.538053][T10623] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1332.579802][T10623] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1332.705475][T10623] veth1_macvtap: left promiscuous mode [ 1332.737207][T10623] veth0_macvtap: left promiscuous mode [ 1332.760990][T10623] veth1_vlan: left promiscuous mode [ 1332.816032][T10623] veth0_vlan: left promiscuous mode [ 1333.920712][T10623] team0 (unregistering): Port device team_slave_1 removed [ 1333.998635][T10623] team0 (unregistering): Port device team_slave_0 removed [ 1336.685876][T24829] random: crng reseeded on system resumption [ 1336.715641][T24668] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1336.799196][T24668] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1336.830101][T24668] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1336.880815][T24668] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1336.922515][T24668] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1336.979240][T24668] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1337.022548][T24668] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1337.097475][T24668] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1337.802871][T24668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1337.938589][T24668] 8021q: adding VLAN 0 to HW filter on device team0 [ 1338.021400][T23759] bridge0: port 1(bridge_slave_0) entered blocking state [ 1338.028686][T23759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1338.199587][T24862] Console: switching to colour VGA+ 80x25 [ 1338.289802][T24866] ================================================================== [ 1338.289819][T24866] BUG: KASAN: slab-out-of-bounds in fbcon_prepare_logo+0x94e/0xc60 [ 1338.289849][T24866] Read of size 26 at addr ffff88807ad2d4ea by task syz.1.4225/24866 [ 1338.289866][T24866] [ 1338.289879][T24866] CPU: 0 UID: 0 PID: 24866 Comm: syz.1.4225 Tainted: G L syzkaller #0 PREEMPT(full) [ 1338.289905][T24866] Tainted: [L]=SOFTLOCKUP [ 1338.289913][T24866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1338.289924][T24866] Call Trace: [ 1338.289931][T24866] [ 1338.289946][T24866] dump_stack_lvl+0x100/0x190 [ 1338.289967][T24866] print_report+0x13d/0x4b0 [ 1338.289994][T24866] ? __virt_addr_valid+0x239/0x430 [ 1338.290024][T24866] ? fbcon_prepare_logo+0x94e/0xc60 [ 1338.290043][T24866] kasan_report+0xdf/0x1d0 [ 1338.290064][T24866] ? fbcon_prepare_logo+0x94e/0xc60 [ 1338.290086][T24866] kasan_check_range+0x10f/0x1e0 [ 1338.290110][T24866] __asan_memcpy+0x23/0x60 [ 1338.290138][T24866] fbcon_prepare_logo+0x94e/0xc60 [ 1338.290161][T24866] fbcon_init+0x1065/0x1830 [ 1338.290183][T24866] visual_init+0x320/0x620 [ 1338.290204][T24866] do_bind_con_driver.isra.0+0x636/0x9c0 [ 1338.290232][T24866] store_bind+0x609/0x730 [ 1338.290258][T24866] ? __pfx_store_bind+0x10/0x10 [ 1338.290282][T24866] dev_attr_store+0x58/0x80 [ 1338.290304][T24866] ? __pfx_dev_attr_store+0x10/0x10 [ 1338.290325][T24866] sysfs_kf_write+0xf2/0x150 [ 1338.290355][T24866] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1338.290381][T24866] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1338.290411][T24866] vfs_write+0x6ac/0x1070 [ 1338.290431][T24866] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1338.290458][T24866] ? __pfx_vfs_write+0x10/0x10 [ 1338.290484][T24866] ksys_write+0x12a/0x250 [ 1338.290504][T24866] ? __pfx_ksys_write+0x10/0x10 [ 1338.290524][T24866] ? rcu_is_watching+0x12/0xc0 [ 1338.290548][T24866] do_syscall_64+0x10b/0xf80 [ 1338.290571][T24866] ? clear_bhb_loop+0x40/0x90 [ 1338.290592][T24866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1338.290610][T24866] RIP: 0033:0x7f2874f9cdd9 [ 1338.290625][T24866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1338.290643][T24866] RSP: 002b:00007f2875e4d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1338.290661][T24866] RAX: ffffffffffffffda RBX: 00007f2875216180 RCX: 00007f2874f9cdd9 [ 1338.290674][T24866] RDX: 000000000008083a RSI: 00002000000000c0 RDI: 0000000000000002 [ 1338.290685][T24866] RBP: 00007f2875032d69 R08: 0000000000000000 R09: 0000000000000000 [ 1338.290697][T24866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1338.290709][T24866] R13: 00007f2875216218 R14: 00007f2875216180 R15: 00007fff35696378 [ 1338.290726][T24866] [ 1338.290733][T24866] [ 1338.290738][T24866] Allocated by task 13440: [ 1338.290748][T24866] kasan_save_stack+0x30/0x50 [ 1338.290765][T24866] kasan_save_track+0x14/0x30 [ 1338.290781][T24866] __kasan_kmalloc+0xaa/0xb0 [ 1338.290796][T24866] shrinker_alloc+0xf5/0xc30 [ 1338.290813][T24866] alloc_super+0x7c7/0xd20 [ 1338.290830][T24866] sget_fc+0x117/0xc70 [ 1338.290846][T24866] get_tree_nodev+0x28/0x190 [ 1338.290864][T24866] mqueue_get_tree+0xf1/0x130 [ 1338.290887][T24866] vfs_get_tree+0x92/0x320 [ 1338.290901][T24866] fc_mount_longterm+0x1a/0x270 [ 1338.290918][T24866] mq_init_ns+0x482/0x820 [ 1338.290956][T24866] copy_ipcs+0x3dd/0x7e0 [ 1338.290970][T24866] create_new_namespaces+0x20a/0xac0 [ 1338.290992][T24866] unshare_nsproxy_namespaces+0xf2/0x220 [ 1338.291016][T24866] ksys_unshare+0x438/0xab0 [ 1338.291041][T24866] __x64_sys_unshare+0x31/0x40 [ 1338.291067][T24866] do_syscall_64+0x10b/0xf80 [ 1338.291089][T24866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1338.291108][T24866] [ 1338.291113][T24866] Freed by task 4991: [ 1338.291122][T24866] kasan_save_stack+0x30/0x50 [ 1338.291138][T24866] kasan_save_track+0x14/0x30 [ 1338.291154][T24866] kasan_save_free_info+0x3b/0x70 [ 1338.291179][T24866] __kasan_slab_free+0x5f/0x80 [ 1338.291196][T24866] kfree+0x223/0x6c0 [ 1338.291219][T24866] rcu_core+0x5a2/0x10d0 [ 1338.291236][T24866] handle_softirqs+0x1ea/0xa00 [ 1338.291258][T24866] __irq_exit_rcu+0x162/0x210 [ 1338.291279][T24866] irq_exit_rcu+0x9/0x30 [ 1338.291301][T24866] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1338.291322][T24866] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1338.291342][T24866] [ 1338.291347][T24866] Last potentially related work creation: [ 1338.291354][T24866] kasan_save_stack+0x30/0x50 [ 1338.291370][T24866] kasan_record_aux_stack+0xa7/0xc0 [ 1338.291394][T24866] __call_rcu_common.constprop.0+0xa5/0x9b0 [ 1338.291412][T24866] shrinker_free+0xfe/0x440 [ 1338.291429][T24866] deactivate_locked_super+0x94/0x1b0 [ 1338.291446][T24866] deactivate_super+0xe7/0x110 [ 1338.291461][T24866] cleanup_mnt+0x21f/0x450 [ 1338.291479][T24866] mntput_no_expire_slowpath+0x8b0/0xb00 [ 1338.291499][T24866] mntput_no_expire+0x1fd/0x220 [ 1338.291516][T24866] mntput+0x6b/0xa0 [ 1338.291533][T24866] free_ipc+0x10f/0x210 [ 1338.291558][T24866] process_one_work+0xa0e/0x1980 [ 1338.291575][T24866] worker_thread+0x5ef/0xe50 [ 1338.291591][T24866] kthread+0x370/0x450 [ 1338.291605][T24866] ret_from_fork+0x72b/0xd50 [ 1338.291623][T24866] ret_from_fork_asm+0x1a/0x30 [ 1338.291646][T24866] [ 1338.291651][T24866] The buggy address belongs to the object at ffff88807ad2d400 [ 1338.291651][T24866] which belongs to the cache kmalloc-192 of size 192 [ 1338.291666][T24866] The buggy address is located 42 bytes to the right of [ 1338.291666][T24866] allocated 192-byte region [ffff88807ad2d400, ffff88807ad2d4c0) [ 1338.291683][T24866] [ 1338.291688][T24866] The buggy address belongs to the physical page: [ 1338.291697][T24866] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807ad2d400 pfn:0x7ad2d [ 1338.291714][T24866] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 1338.291731][T24866] page_type: f5(slab) [ 1338.291747][T24866] raw: 00fff00000000200 ffff88813fe2e3c0 ffff88813fe2d288 ffffea0002039750 [ 1338.291764][T24866] raw: ffff88807ad2d400 000000080010000f 00000000f5000000 0000000000000000 [ 1338.291774][T24866] page dumped because: kasan: bad access detected [ 1338.291783][T24866] page_owner tracks the page as allocated [ 1338.291789][T24866] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 8241, tgid 8234 (syz.3.558), ts 256198055445, free_ts 255542808052 [ 1338.291821][T24866] post_alloc_hook+0x153/0x170 [ 1338.291846][T24866] get_page_from_freelist+0x11a6/0x33b0 [ 1338.291874][T24866] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 1338.291904][T24866] new_slab+0xa6/0x6c0 [ 1338.291926][T24866] refill_objects+0x277/0x420 [ 1338.291958][T24866] __pcs_replace_empty_main+0x375/0x650 [ 1338.291985][T24866] __kmalloc_node_track_caller_noprof+0x694/0x850 [ 1338.292004][T24866] kmemdup_noprof+0x29/0x60 [ 1338.292021][T24866] lowpan_frags_init_net+0x113/0x3a0 [ 1338.292053][T24866] ops_init+0x1e2/0x5f0 [ 1338.292071][T24866] setup_net+0x118/0x3a0 [ 1338.292088][T24866] copy_net_ns+0x46f/0x7c0 [ 1338.292108][T24866] create_new_namespaces+0x3ea/0xac0 [ 1338.292131][T24866] unshare_nsproxy_namespaces+0xf2/0x220 [ 1338.292154][T24866] ksys_unshare+0x438/0xab0 [ 1338.292180][T24866] __x64_sys_unshare+0x31/0x40 [ 1338.292206][T24866] page last free pid 15 tgid 15 stack trace: [ 1338.292216][T24866] __free_frozen_pages+0x747/0x1040 [ 1338.292239][T24866] rcu_core+0x5a2/0x10d0 [ 1338.292257][T24866] handle_softirqs+0x1ea/0xa00 [ 1338.292279][T24866] run_ksoftirqd+0x38/0x60 [ 1338.292300][T24866] smpboot_thread_fn+0x3d3/0xaa0 [ 1338.292325][T24866] kthread+0x370/0x450 [ 1338.292338][T24866] ret_from_fork+0x72b/0xd50 [ 1338.292356][T24866] ret_from_fork_asm+0x1a/0x30 [ 1338.292380][T24866] [ 1338.292385][T24866] Memory state around the buggy address: [ 1338.292394][T24866] ffff88807ad2d380: 00 00 00 04 fc fc fc fc fc fc fc fc fc fc fc fc [ 1338.292407][T24866] ffff88807ad2d400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1338.292420][T24866] >ffff88807ad2d480: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1338.292430][T24866] ^ [ 1338.292441][T24866] ffff88807ad2d500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1338.292454][T24866] ffff88807ad2d580: 00 00 00 00 00 00 00 07 fc fc fc fc fc fc fc fc [ 1338.292464][T24866] ================================================================== [ 1338.326107][T24866] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1338.326129][T24866] CPU: 0 UID: 0 PID: 24866 Comm: syz.1.4225 Tainted: G L syzkaller #0 PREEMPT(full) [ 1338.326156][T24866] Tainted: [L]=SOFTLOCKUP [ 1338.326164][T24866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1338.326175][T24866] Call Trace: [ 1338.326182][T24866] [ 1338.326190][T24866] dump_stack_lvl+0x100/0x190 [ 1338.326215][T24866] vpanic+0x552/0x970 [ 1338.326233][T24866] ? __pfx_vpanic+0x10/0x10 [ 1338.326258][T24866] ? fbcon_prepare_logo+0x94e/0xc60 [ 1338.326279][T24866] panic+0xd1/0xe0 [ 1338.326296][T24866] ? __pfx_panic+0x10/0x10 [ 1338.326314][T24866] ? fbcon_prepare_logo+0x94e/0xc60 [ 1338.326334][T24866] ? preempt_schedule_common+0x42/0xc0 [ 1338.326359][T24866] check_panic_on_warn.cold+0x19/0x34 [ 1338.326379][T24866] end_report.part.0+0x3a/0x90 [ 1338.326406][T24866] kasan_report.cold+0xe/0x18 [ 1338.326433][T24866] ? fbcon_prepare_logo+0x94e/0xc60 [ 1338.326454][T24866] kasan_check_range+0x10f/0x1e0 [ 1338.326481][T24866] __asan_memcpy+0x23/0x60 [ 1338.326508][T24866] fbcon_prepare_logo+0x94e/0xc60 [ 1338.326531][T24866] fbcon_init+0x1065/0x1830 [ 1338.326553][T24866] visual_init+0x320/0x620 [ 1338.326575][T24866] do_bind_con_driver.isra.0+0x636/0x9c0 [ 1338.326604][T24866] store_bind+0x609/0x730 [ 1338.326631][T24866] ? __pfx_store_bind+0x10/0x10 [ 1338.326655][T24866] dev_attr_store+0x58/0x80 [ 1338.326678][T24866] ? __pfx_dev_attr_store+0x10/0x10 [ 1338.326699][T24866] sysfs_kf_write+0xf2/0x150 [ 1338.326729][T24866] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1338.326754][T24866] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1338.326783][T24866] vfs_write+0x6ac/0x1070 [ 1338.326804][T24866] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1338.326831][T24866] ? __pfx_vfs_write+0x10/0x10 [ 1338.326857][T24866] ksys_write+0x12a/0x250 [ 1338.326878][T24866] ? __pfx_ksys_write+0x10/0x10 [ 1338.326899][T24866] ? rcu_is_watching+0x12/0xc0 [ 1338.326922][T24866] do_syscall_64+0x10b/0xf80 [ 1338.326952][T24866] ? clear_bhb_loop+0x40/0x90 [ 1338.326973][T24866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1338.326993][T24866] RIP: 0033:0x7f2874f9cdd9 [ 1338.327010][T24866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1338.327029][T24866] RSP: 002b:00007f2875e4d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1338.327048][T24866] RAX: ffffffffffffffda RBX: 00007f2875216180 RCX: 00007f2874f9cdd9 [ 1338.327061][T24866] RDX: 000000000008083a RSI: 00002000000000c0 RDI: 0000000000000002 [ 1338.327074][T24866] RBP: 00007f2875032d69 R08: 0000000000000000 R09: 0000000000000000 [ 1338.327086][T24866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1338.327098][T24866] R13: 00007f2875216218 R14: 00007f2875216180 R15: 00007fff35696378 [ 1338.327115][T24866] [ 1338.327182][T24866] Kernel Offset: disabled