last executing test programs: 9.664082871s ago: executing program 1 (id=4745): mmap$auto(0x0, 0x402000a, 0xdf, 0x17, 0x401, 0x8000) mmap$auto(0xfffffffffffffff8, 0x4080000000, 0x4, 0xab1, 0xffffffffffffffff, 0x200000100a6) socket(0x1, 0x80000, 0x0) get_robust_list$auto(0x1, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$namespace(0x0, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_ADD_LINK_STA(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES16=r0], 0x14}, 0x1, 0x0, 0x0, 0x854}, 0x20004014) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x48024}, 0x2400c090) r1 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r1, 0x29, 0x3e, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x110) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) read$auto_proc_tid_children_operations_internal(0xffffffffffffffff, &(0x7f00000005c0)=""/34, 0x22) r2 = pidfd_open$auto(0x1, 0x0) setns(r2, 0x60020000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) setreuid$auto(0x0, 0x20000000004) syz_clone3(&(0x7f0000000300)={0x193104480, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000200)={0x0, 0x19, 0x3800, 0x2, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x10, 0x8c48, 0xd, 0x3, 0x7f, 0x0, 0x6, 0xfffffffffffffffd}, {0x100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x4, 0x100000000}}) socket(0x37, 0x5, 0x0) mprotect$auto(0x1ffffffff000, 0x100018, 0x4) io_uring_register$auto(0x2, 0x0, 0x0, 0x3) keyctl$auto(0x1f, 0x0, 0x6, 0x3, 0x3ff) 9.212700075s ago: executing program 2 (id=4747): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dmmidi2\x00', 0x1, 0x0) ioctl$auto_FICLONERANGE(r0, 0x4020940d, 0xffffffffffff8000) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/amidi2\x00', 0x50843, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/ram15/queue/rotational\x00', 0x420c61, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000140), 0x0) write$auto(r0, &(0x7f0000000380)='\xa3\xaa\xb1\xa6\x01\xc2B#\xb5\xa7\xee$\x8d\xc4\xe9h5\xf7\xb3\xfdld\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\x89C\xce\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4\xdb\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\x9e\x98\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xb8&t9-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00'/149, 0xc65d) unshare$auto(0x40000080) madvise$auto(0x0, 0x2003f0, 0x18) unshare$auto(0x40000080) pwrite64$auto(r1, 0x0, 0x0, 0x6) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x4, 0x7fffffffffffffff, 0xa) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) futex_wake$auto(0x0, 0xe414, 0x6, 0x3) bpf$auto(0x6, &(0x7f0000000280)=@task_fd_query={0x19, r0, 0x4, 0x1002, 0x8, 0x40d, 0xffffffffffffffff, 0x0, 0x7ff}, 0x9) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xf7s\x1cJ\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0xe, 0x4) read$auto_v4l2_fops_v4l2_dev(0xffffffffffffffff, &(0x7f0000000000)=""/33, 0x21) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r3, &(0x7f0000000e80)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x44, r2, 0x1, 0x70bd29, 0x25dfdc02, {}, [@ETHTOOL_A_MODULE_EEPROM_I2C_ADDRESS={0x5, 0x6, 0x9}, @ETHTOOL_A_MODULE_EEPROM_LENGTH={0x8, 0x3, 0xb}, @ETHTOOL_A_MODULE_EEPROM_OFFSET={0x8, 0x2, 0xf7}, @ETHTOOL_A_MODULE_EEPROM_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004084}, 0x82) getsockopt$auto_SO_PEERPIDFD(0xffffffffffffffff, 0x2, 0x4d, &(0x7f0000000080)='/dev\x00\x00\x00\x12\xb1\xfb', &(0x7f0000000180)=0xc32) r4 = timerfd_create$auto(0x8, 0x800) timerfd_settime$auto(r4, 0x0, &(0x7f0000000080)={{0x8, 0x4}, {0x0, 0x5}}, 0x0) unshare$auto(0x800) keyctl$auto(0x1f, 0x0, 0x6, 0x0, 0x8000000000000000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 7.7529585s ago: executing program 1 (id=4749): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0xb201, &(0x7f00000000c0)=@bpf_attr_5={@target_fd=r0, 0xffffffffffffffff, 0x8, 0x2, 0xffffffffffffffff, @relative_fd=0xffffffffffffffff, 0x3}, 0xf) mmap$auto(0xffffffffffffffff, 0xd1, 0x8000000000000005, 0xeb2, r1, 0x8003) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0xffffffffffffff1c) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) select$auto(0x0, 0x0, &(0x7f0000000080)={[0x400000209c, 0x8, 0x4, 0x8001, 0x3, 0x100000004, 0x2c2, 0x800002017d, 0x7, 0x102000008000000, 0xd, 0x80000000000d59, 0x562, 0xff, 0xffffffffffffffff, 0x100000005]}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0xfffbffff}, 0x6, 0x0) getuid() sendmsg$auto_MACSEC_CMD_DEL_TXSA(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000004c0)=ANY=[@ANYBLOB="08040000", @ANYRES16=0x0, @ANYBLOB="000429bd7000fedbdf25050000001b0003800800f100", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="4f0103805837fe46c80694882c412a294692171bdf820f3081b7c42f5a1382e0648888f6622564b697def165e9ae21fb9a8f890faeebb972723b9a2baa2f97299eabb108002400", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="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", @ANYBLOB], 0x408}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000025) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) ioctl$auto_SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000300)={0x80000000, 0x3, 0x8, 0x5, 0x1d6110cb}) unshare$auto(0x40000080) socket(0x11, 0x3, 0x9) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x2, 0x5) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000280)='/dev/tty41\x00', 0x109401, 0x0) ioctl$auto(r5, 0x540d, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$auto_binder_features_fops_(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/features/freeze_notification\x00', 0x40000, 0x0) mprotect$auto(0x200000000000, 0x806121, 0x8) mq_notify$auto(0xffffffffffffffff, &(0x7f00000000c0)={@sival_int, @inferred, 0x2, @_sigev_thread={0x0, 0x0}}) futex$auto(&(0x7f00000001c0)=0x7, 0x4, 0x3, 0x0, &(0x7f00000002c0)=0x80000001, 0x5d5d06cd) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) fcntl$auto_F_GETOWNER_UIDS(r3, 0x11, 0x1) 7.679507414s ago: executing program 3 (id=4750): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dmmidi2\x00', 0x1, 0x0) ioctl$auto_FICLONERANGE(r0, 0x4020940d, 0xffffffffffff8000) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/amidi2\x00', 0x50843, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/ram15/queue/rotational\x00', 0x420c61, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000140), 0x0) write$auto(r0, &(0x7f0000000380)='\xa3\xaa\xb1\xa6\x01\xc2B#\xb5\xa7\xee$\x8d\xc4\xe9h5\xf7\xb3\xfdld\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\x89C\xce\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4\xdb\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\x9e\x98\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xb8&t9-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00'/149, 0xc65d) unshare$auto(0x40000080) madvise$auto(0x0, 0x2003f0, 0x18) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) pwrite64$auto(r1, 0x0, 0x0, 0x6) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x4, 0x7fffffffffffffff, 0xa) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) futex_wake$auto(0x0, 0xe414, 0x6, 0x3) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xf7s\x1cJ\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0xe, 0x4) read$auto_v4l2_fops_v4l2_dev(0xffffffffffffffff, &(0x7f0000000000)=""/33, 0x21) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto_SO_PEERPIDFD(0xffffffffffffffff, 0x2, 0x4d, &(0x7f0000000080)='/dev\x00\x00\x00\x12\xb1\xfb', &(0x7f0000000180)=0xc32) r2 = timerfd_create$auto(0x8, 0x800) timerfd_settime$auto(r2, 0x0, &(0x7f0000000080)={{0x8, 0x4}, {0x0, 0x5}}, 0x0) unshare$auto(0x800) keyctl$auto(0x1f, 0x0, 0x6, 0x0, 0x8000000000000000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 7.405463596s ago: executing program 2 (id=4751): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0xb201, &(0x7f00000000c0)=@bpf_attr_5={@target_fd=r0, 0xffffffffffffffff, 0x8, 0x2, 0xffffffffffffffff, @relative_fd=0xffffffffffffffff, 0x3}, 0xf) mmap$auto(0xffffffffffffffff, 0xd1, 0x8000000000000005, 0xeb2, r1, 0x8003) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0xffffffffffffff1c) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) select$auto(0x0, 0x0, &(0x7f0000000080)={[0x400000209c, 0x8, 0x4, 0x8001, 0x3, 0x100000004, 0x2c2, 0x800002017d, 0x7, 0x102000008000000, 0xd, 0x80000000000d59, 0x562, 0xff, 0xffffffffffffffff, 0x100000005]}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0xfffbffff}, 0x6, 0x0) getuid() sendmsg$auto_MACSEC_CMD_DEL_TXSA(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4000025) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) ioctl$auto_SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000300)={0x80000000, 0x3, 0x8, 0x5, 0x1d6110cb}) unshare$auto(0x40000080) socket(0x11, 0x3, 0x9) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x2, 0x5) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000280)='/dev/tty41\x00', 0x109401, 0x0) ioctl$auto(r5, 0x540d, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$auto_binder_features_fops_(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/features/freeze_notification\x00', 0x40000, 0x0) mprotect$auto(0x200000000000, 0x806121, 0x8) mq_notify$auto(0xffffffffffffffff, &(0x7f00000000c0)={@sival_int, @inferred, 0x2, @_sigev_thread={0x0, 0x0}}) futex$auto(&(0x7f00000001c0)=0x7, 0x4, 0x3, 0x0, &(0x7f00000002c0)=0x80000001, 0x5d5d06cd) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) fcntl$auto_F_GETOWNER_UIDS(r3, 0x11, 0x1) 7.398003688s ago: executing program 0 (id=4752): unshare$auto(0x40000080) ioctl$auto_FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0xffffffffffff8000) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x50843, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x420c61, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, 0x0, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000380)='\xa3\xaa\xb1\xa6\x01\xc2B#\xb5\xa7\xee$\x8d\xc4\xe9h5\xf7\xb3\xfdld\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\x89C\xce\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4\xdb\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\x9e\x98\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xb8&t9-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00'/149, 0xc65d) unshare$auto(0x40000080) madvise$auto(0x0, 0x2003f0, 0x18) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) pwrite64$auto(r0, 0x0, 0x0, 0x6) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x4, 0x7fffffffffffffff, 0xa) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) futex_wake$auto(0x0, 0xe414, 0x6, 0x3) r1 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x44, r1, 0x1, 0x70bd29, 0x25dfdc02, {}, [@ETHTOOL_A_MODULE_EEPROM_I2C_ADDRESS={0x5, 0x6, 0x9}, @ETHTOOL_A_MODULE_EEPROM_PAGE={0x5, 0x4, 0xe9}, @ETHTOOL_A_MODULE_EEPROM_OFFSET={0x8, 0x2, 0xf7}, @ETHTOOL_A_MODULE_EEPROM_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004084}, 0x82) timerfd_create$auto(0x8, 0x800) unshare$auto(0x800) keyctl$auto(0x1f, 0x0, 0x6, 0x0, 0x8000000000000000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 6.722230457s ago: executing program 3 (id=4753): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/statistics/tx_compressed\x00', 0x80000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) fcntl$auto_F_SETFL(r2, 0x4, 0x7) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/filter\x00', 0x2, 0x0) mmap$auto(0x0, 0x3, 0xde, 0x8000000000000011, 0x2, 0x800008000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r3 = io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3, @loopback}, 0x54) read$auto(0x3, 0x0, 0x8080) write$auto(0x3, 0x0, 0xffd8) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_BLKTRACESETUP32(r3, 0xc0401273, &(0x7f0000000180)={"ce16de939bd2948fb9725b60c64a7221ad7e7e965fe525ab7fa2b07434763cb3", 0x6, 0x40, 0x3, 0x1, 0xffffffffffffffff, 0x0}) prctl$auto(0x41, 0x80000000000001, r4, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0x4070aea0, r0) 6.536080065s ago: executing program 3 (id=4754): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D1\x00', 0x1, 0x0) ioctl$auto_FICLONERANGE(r0, 0x4020940d, 0xffffffffffff8000) r1 = socket(0x27, 0x2, 0x40006) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snd/midiC2D2\x00', 0x1f9d42, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/ram15/queue/rotational\x00', 0x420c61, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000080)='-)', 0x2) unshare$auto(0x40000080) madvise$auto(0x809, 0x2003ef, 0xaafa) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) pwrite64$auto(r2, 0x0, 0x0, 0x6) select$auto(0x8a, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x4, 0x7fffffffffffffff, 0x1) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) futex_wake$auto(0x0, 0xe414, 0x6, 0x3) bpf$auto(0x0, 0x0, 0x6f4) read$auto_v4l2_fops_v4l2_dev(0xffffffffffffffff, &(0x7f0000000000)=""/33, 0x21) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/random/urandom_min_reseed_secs\x00', 0x80a02, 0x0) sendfile$auto(r3, r3, 0x0, 0x7ffff000) getsockopt$auto_SO_OOBINLINE(0xffffffffffffffff, 0x11, 0xa, 0x0, 0x0) sendfile$auto(r1, r1, &(0x7f00000000c0)=0x3, 0x7e) r4 = timerfd_create$auto(0x8, 0x800) timerfd_settime$auto(r4, 0x0, &(0x7f0000000080)={{0x8, 0x4}, {0x0, 0x5}}, 0x0) getsockopt$auto_SO_TXREHASH(r2, 0x100c6dd, 0x4a, &(0x7f0000000040)='X1\xf0\x03x\xf9\xcd\xf6\xf2v\xf7\xf5\xac\xb8\x88\x00~y#\xf9\x9b\xf1CN\xed\xdc\xb81\x87\xdd\xefi\x88\xa6u\xb2&\x10 \a\xfd\xf24\xd8\xa4\xda', &(0x7f0000000280)=0x5) keyctl$auto(0x1f, 0x0, 0x6, 0x0, 0x8000000000000000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 6.358432497s ago: executing program 1 (id=4755): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0xa, 0x0) r1 = socket(0x2, 0x1, 0x106) setsockopt$auto(r1, 0x6, 0xd, 0x0, 0x4) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x8000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram10\x00', 0x14fe02, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(r0, 0x0, 0x800) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nbd5\x00', 0x26000, 0x0) ioctl$auto_BLKTRACESETUP(r2, 0xc0481273, &(0x7f00000000c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700000000000300", 0x3ff, 0x408, 0xfff, 0x400004, 0x200000000040000d}) ioctl$auto_BLKTRACETEARDOWN(r2, 0x1276, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)={0x2, 0x80, 0xffff, 0x5, &(0x7f00000001c0)="444699f3ee605b9d3f00", 0x4b47, 0x3, 0x80005, @stream_id=0x7, 0x2004b, 0xb, 0x0, [{0x0, 0x9, 0x5}]}) pselect6$auto(0x1, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) msgctl$auto_IPC_STAT(0x5f, 0x2, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/pci/00/03.0\x00', 0x0, 0x0) pread64$auto(r3, 0x0, 0x2, 0x5) ioctl$auto_SNDRV_PCM_IOCTL_READN_FRAMES2(0xffffffffffffffff, 0x80184153, &(0x7f0000000500)={0x4, &(0x7f00000004c0)=&(0x7f00000003c0), 0x80000000}) io_getevents$auto(0x80000005, 0x5, 0x7, 0x0, &(0x7f0000000080)={0x6, 0xfffffffffffffbff}) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), r1) r5 = setfsuid$auto(0xee00) ioprio_set$auto(0x2, r5, 0x4b34) sendmsg$auto_NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000001a80)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001a40)={&(0x7f0000000540)={0x14cc, r4, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'team0\x00'}, @NL80211_ATTR_TIMED_OUT={0x4}, @NL80211_ATTR_QOS_MAP={0xb2, 0xc7, "812499383dc09ef32272766ca273c299a60d7a6086003b11149dc46c2b3fb0b569955393b130ba11bdb13d00a65e3ca03e0e376c3b38a34f4412cadd2e6b1a88bde78dfe6554d0b3232988010cffcaedf7d4f3070437d00e51b5a4e5826fa035bcffc94415fbc1b2ee8d5807f076023bc9e03c65cb13488d9a3c6568459b2b9319ca49fb74e1d200e093539f44b5886a2cff38fa36c78e4fe5ace95bca7599fd434f346640ef00df53c1bbb538c2"}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x3}, @NL80211_ATTR_RADAR_BACKGROUND={0x4}, @NL80211_ATTR_BSS_SELECT={0x139a, 0xe3, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r5}, @generic="d800f8e17518089262c038cc363abd6cc32f", @nested={0x122e, 0xce, 0x0, 0x1, [@nested={0x4, 0x1d}, @typed={0x14, 0x8f, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @generic="8c81c60aaa464878297cd5c55fba37997d99c523783cee4f3e7cfb59e6ce69b0d264d563065fe569672604acec14582bd735090e4be577f477c93ace33d83a55bd166d3e1f6cf2b50807e5fb13220ab50b893e707d2d473c3c306685f118d4a4e84dc09c2e1a4e765bd7cf74c2ce1aff729447a04133c6f0c497cce2c5948f6a2d663033fa99749c56f9e358c799270961c02cc1f76f5e6806ba197f28e63227291c536ade2f7d490eea937aeb24c534e7dfb7781404476aa39358f5ea1a9f509b38eecae5d6e067b136a09f88188f324a1b4e3a27c37a20b1f5c279029597c44e08643f2c2e4708b2fd197c648ec94cd0ca5a37108ddcd94da26fe5651b0445df589eeefb637dcc4e57d45303a46a5fab86f1876aa293da352f137a7d85f697f91a8c867d8a22e067bb3e6835fe0b74b438d461649f9c090ddbb0dce50899aeeccdc513119dc05f752613507bdd3fa7d6cfe53df0018b4dfd0011ece10e22da3af742b0f83f2bd45ca7e7e8b8a97f193451c5986a11bfd923a479c12863749c4ca1eca70eabb5dcd586751f3b0f2191aedd485780f1b9b520683c60adec1388a835f0e5eec7f415a19ce32612bfade582e7dec7c1ee446193c63782df8f38a6fb491b8111f371898ffcdf098ab4cd41ccb97cf974f8bedf94b3baf822d41fc9d371667a3a0ebc598087882845ed011a80ffd3c30c8b4d210202b1d05ac27cc4331031a9fe1dd1dd305930f4a1d2fb4adf39c9bb2e7b5fc4368c46e84af15b29d1bd5ff1804b18ace3c791d4b349bc305465debcf48cf01893dd8df8321bc48266b5186277123a2101e3f303bb6598254426b96cb92c7f94174b8e9b87e669cb289dda8f84397ab5cad2c570a619a7a074ff1bbaece78e6a505701ceb6225a527e09b5cbf7507b27ff285166d6808f4bd255b0388d85a02ca51055a8f77664dea71b1b68c473a7c1bd05644f82b7a21e12e7a66e13350431460721d53fe663953342840ce210649f39623af950fa8eaa3a42ea5db4d7e336205cdfa59d191ffba8fcec7792e89415d8770b829149de818900325eea9977c3139906b10e77142a36d369b1f38ad45c0b967c9cf420f763a3eb8945ad45877470884f1a0f41229783cd03af920fe310fad62ccf00d923a6441ff886b5fa6cc9a1a64193694a0d0a38b9a50bea3b94a216ad5af287fc68954cc0ec28ef54eb87c471c9591ec0aa777ee314b5cf37f9cdebeb9f913ff2451552192544321714afe4de4d42f69db1a0bb018699440fc7f5258ebf36cdc1960e8b526b196b94598802b005366f702e7b199769c1d54de51652b860d085361d3bad8c590b6a50c0a5c1cff2455da491dc1655979ead3e0960d82eefda7ebe0097e7f9daef1ea2e98843b323635cc496da4b27eaf80969b3b9bc967b1bb5beaacdd8f1546d694b9eb57e14d7b86fa4d286b67ae52025deaf185ff7bf1970bc5d9612149a2ba037ec672243185b2b2cc6f2adbf6c9a381fce17715091d9cfdd82ef51ffc677a751ee77c3b5cf4ea420a3f717ab9a33957153ed512acf86806b658d0a0b7db196385d97a4c77db5b503c09ca67e6aeb45c0311be1f4666a2b1a0a8ab1489f43312efb2f5a32d4e9829b1b16d3b10ba5904ac4f77776b2008bb3ce050699bd7a2534285bd3b387f2519144fdc3a3b5e32ba6b55b6cf5b3c09b079573a1d30422ee55e1fd61e154e8b7ef0246d8881cde44e4058b788740995f054506dc320f84863ba85ab8d9fda6fcd8107ea19dc5d23f99c9e9b19419fae3ec106830fb5f787da99559c9113e7391199d51e9f35919e1110d5bbbe2645a7012c3e56e5ce8f9562a10f51f81ccffffd35290d897217d3c05d625c95d3d6856bad70135971c20721b56ee7350f52ef2eed82aeb3d7659603c66c6eecf37609782a12cf7490984cc0c35678658dbdefe95959c6174bd703c6b94692e206472d5ac6764872fc31830cd35a2a4300f76ab4db18d57b4f73252153ff6058601d5c2a5416036cc38c1a0fc14659eb80a1c4b99be06bfaba4a8b6bad73e082da50eefba2790beb0cca437172d79cd354ed280467e1457b589d459e723cde9017294dafc055560fecc4ff55893ea69c5c9373610a6000763cb54944e31cee8770fca6793e79cd10db630669922cb99b6cb886a1267290099bd35c663bfe81229e2c4aaaf544bde42ffc369a1b6cf2aad28c1ff01efda3a06fb9537608be8230e5b4bbdff6b398ab3863f1f258e1ad9edc09a2ded942228208f258a25d41284ef6baaed9dbbb01b40abe0a4fef1e4dbc688a7056a0957a7dd6a2f637b24945e46714b9a5b2ca8b0fca05ea828d2b7ac467c909f9c9f1523f4cafc37fee4a6f2360ade532e3c028d1e2c9f83408c03abd4d4a6f6659c580bd1ffcd33f4e9658f6e3f8b87b027c8123c5d3be013527b0685e25a12b057cd0f289b116569330f6d34a079ec8bd1305cf6f8bb0355177dffbeebf530f613d8066ca45c99ba500b601bc555ea0415ac99c4ddf189bca90481706a615cab90ab3f86f0e2d61bf58ec04d776690008608fd05bcac8aa86021c9661299b4adf52dd3fb2044a76e2c2e566a4687c64408cc0c4a8b81d1e0ba43c221b45724ce7e0dd74f85c6d9e80f3faef3e8a4863d56c51e87980dcf207e9e24c362fdc48aefa4a474598cf1b25aadc73f20f8b9c95077b390d6c159737143152b45711fecec053fd179dc647e4e9c14e9afd24a769dd4ac40153c188ded58f7e865fdcc2b58284004778ddbe9077bd3e3356c29979294a21556cbda685b70be6a4c3e211d4c893dd0ad99a6757c809c6bf7b8077914dffcd240ccdf9b0cd7407caa4bc79e1928e453284bd0424b1c030193ae9a71564aa43f2d4458ae1fefc46b3711efa80bd5573e6c93ab60fbb232267f591c833c4e5c0c2b28f90494c3c30f1ff8ad0f14ddbe86d91694ad754a233cfaec96b902562b9f4a169c3b5996f320a17d976c450f2fd89e1fcf02aea3bbd2eb1ceb0b6a4f1a8d7fec60fbb3a8f6797c52b7ed67575edbbc5e718f0990c807880cac19d6cee6a338c32ea781845aef0120f9a8a48b7eaf260e21e55c9551717703718b2676b8c5119802f299278ad483dcc0df98c5f43c669f62eda072476393529a87dc7469ece41c8ccdcee2415b8a3bd632ef3a720d44b947fefcbab72fb6e7994dc5fd85dd2f55c1792c29c718fb9754a68e38d3c7cf78cac441ff0d4a5afd7a04a1a74711f3ac8c5d46f6f1d7a8891437ca621ca30d60384213ae5d03f7bec217711e12b4794da6fedc02371581910973504b77f71d90912c1302f763890c837f3f71d4b741dc6bab2a75080e312ae2aa9209c2cffbe4d0ed46bab1b9758b82ad19ded40cca27db79072f13253347c87cb6aad50a705507558974f56de00c533df5655c1b874706d2b1d3f7daa13cb9a247a9ca07e7df325bd6d8efa176c8640275b1d50930f7eedb281eb606c99bd2ef98fdc53e8cea801132471a7279091a16a4b74d8d4a36c0e18bc536a96058dd8a2c80e9c379d5cee67a95226253440527aaa3ca49cf9e2db84212e6fca1d6d3865205cfffba93d40f16401377eb450df27b3b79e803e806b81c39e873472629d22de1abbe9ece9593d819d92743d121a6cc6d78726fe7c894b3d119aa4118dc0ea0aeefc04e1fc3237f786d2fcd880a1e524d1eb7c4fd2b9e04547ea2af50aa9da724c4fc02121fb6c82d769cbccc9c39f53648f0145492f0dd0a25e9ca65348e82711d409f7687d72b3956927e50cb05ca12b6013369599c194d8315658e1b671ab4eb36311cf47c1cd40ff2c637f6bbf87248151e841a8bf1caf8901f0d35a911a489732800fa9c7ee3f0a222b4a73d3fb28b452aece534ba28c196c530f7826e03920aebbbc5c97254cdbeb60c72b35913242186a77d506bd58423824deda9b22952f057f083894e94835d001261f9fd0bcae097bd866d36a0159654ac24a5b87078df8866d6a62b639c7bc5e2ae064796cd90db2a9c64761a7464621a0410e13e7bbc2cb7e6c54e6a01d091db66a10c268c1e150f99ef4c469168c6222f99562614ee308fc16d9d129fd99f29554b44ee35b8a98f6f65adb9051e25d003679c11da56514d97a69e3b0e1ca78c7ca5ad9525968e467463d9634ed82388c41b51420ad491c5966d9e10b00c21e90d5ad8ee6b2d139dc71ff125e2411da9e288c5bb4244faee726145a3836e1ca2bb4e88e5b0549a047901cc920824eaea305de714bdfb9a31416ea8b095a2a2186dede7ca1e1a51f28d779c692e6efb6fafb95c231a0c00b80353295a76fbebe74f625b873282e845cbaca8049a4cf8d201f9f7c34957cb18ceb8b551138ea06ec3c95c05fdc2164847616c610dfcd4a36dda87305a4666a91117f9987dc7a96841aeb3ab874a5b597028d73567a2a66562b8a6dc2547b2ea1faf3060bd7daed414aad5cf0e18d73647dea68585e600c9fc822df0add4863e22477f87e148f04777cfd514834a3e19e14b78b8e55035849b1d549d5574b65169f3dc46931c612ea6166970f9ced2bd639bc21db2605dcc86b57e9deb6e3f32548f4d67c19f0db9e2d7bf0eac57988dde4f6b6a8c4ed451303ebfa52650ca22dba43a22248775b5effb709e15f065f4ce5bbb2bc5fb31be8087a1d3014f36466eaa4bac5bf4a5f22ba82ca53838911b44f51d22eb960920916006e4fa5b82e2e24a8f99a6bc009f0f40ac83087443b04c89e077e7d9be98f131ccef0fe97ddb11b9b63920c3094657c6edab52e1eee3fa7dec7ebbff149612f3d7059cde3adfe3bebd5a9268b4075f5fc471bcbd043858565045f71129d27acc1a4daf977faddd734242014bc9afcf4419fb8088ff23a29962f3ec4462f457580e50d0b00225de30b57988772c9b26a843e1bc6b834f41b63a6daf593f90c8fd3d7d5e2a5e942b00ae61f7528ab318caa4b45594fdae9801495286e76f11217ee99a64fda430337d8a7a8734db50f6ded3e53bb4963e86b50889fb480f39d0403d7b73a7b5fc626d6b6c38e7e43f1859760d0114edfe655fcf2eed789e887bf1646fe93327037c8998a1910838c46e1946b7399560fce3afdc98be90a731fdf7556a7fa2a6851ff539761a8af12b85d9fbea0a61dc0b53ae23e4a71c33b9ffb4ea08b8529af23724d76279a7e763f86d7a0a888424068b8cc257a68b3ab60156220dc888d6d3f00ea764d39880ec9cd6d2170fc5dfc60f49d44f3fd6ef368956747442e732103a9c31dfba95aca3a30a04959b2c09724eb6651d1c2edc8e54cd8468286e56a3ff7116f8ea5d2d543a9dcc4c963560a572d1863448f71c873546ba5288dcd320f617892a9a762ee6e1f6936de5a316867bac3670cabdb8776d4b7b2959f206003262fb9ba65c77b65039b0374a45651998248a1ecd96b36bf497f6617c4047418eb2c790cdfa3281603bff10c682c00653e8f425ef655968032ebe6c0703b73ca11ed2011f3346972d6e966b5ae59774e0db20fe714b4871b327acfd3a41a74ab59e5a7ed94d0e5f612c592341496edee85446c3f882c778c4ff5275660a6607511b256913a72a4af7adda2a820c38225cd1858f3d9230721d68c6e2018da1f180c583f512491c46fd7702c65530ca2d8d261aeddfcf2cbe977a10a174d60ced300b10f885d0363bed183e41262ca6aef94fb60d0a1430a72055eb7ce315e23d18b414877f11a6eccb4f413bdb880076b9590b756efd6b853fef47631de7c8f5b63026bfe7f658de1fb12c3795dd4147b76cd0aaf4e5ec40b38db70f", @generic="9019468581715749cc35994c4cf67aefe042d7044e773d0b530049d5640d6bb2f384dd627b59cbb65046d613fa219e423ef1a9a8cd4a2f6d17d76be9091310e1f9e14c4759e5568a61ca2934ad11273f0caa84cd47f777d68950c59b4356694ceb6781f5d7cc314736910ab68b0ac6074ab72eb3e4fabbd928414d1759cd289158189547a0192ebeb54b1952d143dd98f59fa3a92a1146021cfae780ba19f023025165899494c733242c1185982599dd987af362b783bf873791102607c9fc0097bda1b38aa58b00cc7ef36cfb42c3dcf287ed04545e6f4830", @generic="83220e993a12eb38c50a1ba10e904485e290275916ac1c4e42edc384acaba31a54a5eb8041b8cd65bb08223927de80d94e45c24e4c62a07ace798ede7f12f0ebd529c99ae6f7cb029fc5a624ec4a93b6bb0724f12da0bb4d2d381242249bc2006ced289e74a1ed444e29c2e6bd5088a3344f7829791d6c6b15ef99c17ff9c18bb1ee5968cdbf72159a412af936c44fd661c516709fd45ba6e53d25994a645077be8ec202a8698930d31740520696d7b9723e649c72333994b8eb62a071ddf8168d", @generic, @generic="1fa56348540ac10388ce0b56982982175c3ff7247e86eba38ca12eb3a05d765fae0a7fe46c3ba814021f5c684330f01cd6fd1e3445d56e88e4b45cb70ae2179d7ab545a8450619b4ed3b27612cd8189536da3889a0e5fab89c148a22bd14d31224fe72c4eae540814c9a79906fdb6fcf38ca5a7cc9fdbd63"]}, @generic="fadf207aa9ce542bc75d293f543f0241719c302c63dc91f7d3a2d01aa85ec67a342391f061d5c7f9", @generic="7055e1719839331602994b089805dc290943bfa3eddd6c3866f719450e812bdd39aba5c4c18dd84d7ef97f9ab4e4cc", @generic="7d37d7ffb0f376e021774b995cd100f45211577b0384572a7280e1cc821f5d7dbe7b927a0f76c36b9b11a528b451f7d2d3604119fa4ea9f529e497602b5073368c4c70f5b35e92d102db0991b2aad7595c6784583139d64bccfcc508d0a55a37f2afe34a1fdb8c48378716184b21d953ff6035f35d9f97af2d2800200ad8ef8d8ceac16ddfc85b06490e390b9495348f7e847497939a5b9083ebf2ae3c81e3571b44fa81fad004494de9c43f803f1a865405ca86692850bde993d74dd5f664513f78c84b8c3d3ebca7617487fafce7c6c4ac0868f8a83d9c05ef1c9f80ca702823462da05c6c3de01a2456dec72a766be33a71676b"]}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x8000}, @NL80211_ATTR_S1G_CAPABILITY={0x37, 0x128, "fc3ac88c3555bc09bea5aab0cb641012f21811a321e438c1fa45a1e19660803de942a8b215b43145ac997be929908114d0f6bc"}]}, 0x14cc}}, 0x20000000) 5.619296969s ago: executing program 0 (id=4756): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/vivid.0/video4linux/video62/name\x00', 0x100, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101c40, 0x0) close_range$auto(0x0, 0x5, 0x0) pipe$auto(0x0) write$auto(0x1, 0x0, 0x80000000) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r1 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) sendmsg$auto_NET_SHAPER_CMD_CAP_GET2(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NET_SHAPER_A_CAPS_IFINDEX={0x8}, @NET_SHAPER_A_CAPS_IFINDEX={0x8}, @NET_SHAPER_A_CAPS_IFINDEX={0x8}, @NET_SHAPER_A_CAPS_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004010}, 0x8000) getpid() write$auto(r1, 0x0, 0x6) 5.391015519s ago: executing program 2 (id=4757): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) acct$auto(&(0x7f0000000100)='./cgroup/cgroup.subtree_control\x00') acct$auto(&(0x7f00000004c0)='/sys/kernel/config/nullb/features\x00') write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) fadvise64$auto(r1, 0x20000008002, 0x9, 0x3) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f00000003c0), r2) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r3 = socket(0xa, 0x1, 0x0) mknod$auto(0x0, 0xc3, 0x5) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000380), r3) sendmsg$auto_NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="70eeaf00", @ANYRES16=r4, @ANYBLOB], 0xffffffffffffffaf}, 0x1, 0x0, 0x0, 0x1}, 0x95) listen$auto(r3, 0x1) prctl$auto(0x59616d61, 0xdaffffffffffffff, 0x1, 0x4, 0xfffffffffffffffb) prctl$auto(0x59616d61, 0x1, 0x1, 0xfffffffffffffffb, 0xffffffffffffffe5) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x4, 0x24, 0x1001, 0x1, 0x717e, 0x9, 0x4, 0xf6b, 0x0, 0xffff0331, 0x4080001, 0x4, 0x7, 0x224a, 0x5, 0x7, 0x6, 0x7f, 0x10, 0x2, 0xa, 0x1004, 0x200, 0x2000067, 0x84, 0x9, 0x0, 0x0, 0x4, 0xfffffffc, [0x80000000002, 0x0, 0x10000000000300, 0x4000401, 0x0, 0x7, 0xffffffffffffff81, 0xffffffff80000000, 0x0, 0x4, 0xfffffffffffffffe, 0x1, 0x0, 0x80002000000000, 0x8, 0x4, 0xed000000000000, 0x6, 0x3, 0x2, 0xffffffffffffffee, 0x821, 0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x14, 0xffffffffffffffff, 0xfffffe, 0x5, 0x1000000000000000, 0x7ff, 0x83, 0x400, 0xefd1, 0x0, 0x0, 0xb457195, 0xa, 0x20007, 0x4000000000002]}, 0x800000000001fe, 0x807ff) write$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffffff, 0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x402) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/config/nullb/features\x00', 0x200, 0x0) unshare$auto(0xffffffff) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 5.35656761s ago: executing program 0 (id=4758): mmap$auto(0x0, 0x402000a, 0xdf, 0x17, 0x401, 0x8000) mmap$auto(0xfffffffffffffff8, 0x4080000000, 0x4, 0xab1, 0xffffffffffffffff, 0x200000100a6) socket(0x1, 0x80000, 0x0) get_robust_list$auto(0x1, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_ADD_LINK_STA(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES16], 0x14}, 0x1, 0x0, 0x0, 0x854}, 0x20004014) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) r0 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r0, 0x29, 0x3e, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x110) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) read$auto_proc_tid_children_operations_internal(0xffffffffffffffff, &(0x7f00000005c0)=""/34, 0x22) r1 = pidfd_open$auto(0x1, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) setreuid$auto(0x0, 0x20000000004) syz_clone3(&(0x7f0000000300)={0x193104480, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 4.364771518s ago: executing program 1 (id=4759): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dmmidi2\x00', 0x1, 0x0) ioctl$auto_FICLONERANGE(r0, 0x4020940d, 0xffffffffffff8000) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/amidi2\x00', 0x50843, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/ram15/queue/rotational\x00', 0x420c61, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000140), 0x0) write$auto(r0, &(0x7f0000000380)='\xa3\xaa\xb1\xa6\x01\xc2B#\xb5\xa7\xee$\x8d\xc4\xe9h5\xf7\xb3\xfdld\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\x89C\xce\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4\xdb\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\x9e\x98\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xb8&t9-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00'/149, 0xc65d) unshare$auto(0x40000080) madvise$auto(0x0, 0x2003f0, 0x18) unshare$auto(0x40000080) pwrite64$auto(r1, 0x0, 0x0, 0x6) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x4, 0x7fffffffffffffff, 0xa) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) futex_wake$auto(0x0, 0xe414, 0x6, 0x3) bpf$auto(0x6, &(0x7f0000000280)=@task_fd_query={0x19, r0, 0x4, 0x1002, 0x8, 0x40d, 0xffffffffffffffff, 0x0, 0x7ff}, 0x9) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xf7s\x1cJ\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0xe, 0x4) read$auto_v4l2_fops_v4l2_dev(0xffffffffffffffff, &(0x7f0000000000)=""/33, 0x21) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r3, &(0x7f0000000e80)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x44, r2, 0x1, 0x70bd29, 0x25dfdc02, {}, [@ETHTOOL_A_MODULE_EEPROM_I2C_ADDRESS={0x5, 0x6, 0x9}, @ETHTOOL_A_MODULE_EEPROM_LENGTH={0x8, 0x3, 0xb}, @ETHTOOL_A_MODULE_EEPROM_OFFSET={0x8, 0x2, 0xf7}, @ETHTOOL_A_MODULE_EEPROM_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004084}, 0x82) getsockopt$auto_SO_PEERPIDFD(0xffffffffffffffff, 0x2, 0x4d, &(0x7f0000000080)='/dev\x00\x00\x00\x12\xb1\xfb', &(0x7f0000000180)=0xc32) r4 = timerfd_create$auto(0x8, 0x800) timerfd_settime$auto(r4, 0x0, &(0x7f0000000080)={{0x8, 0x4}, {0x0, 0x5}}, 0x0) unshare$auto(0x800) keyctl$auto(0x1f, 0x0, 0x6, 0x0, 0x8000000000000000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 4.306044819s ago: executing program 3 (id=4760): openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, 0x0, 0x115200, 0x0) pselect6$auto(0x1, 0x0, 0x0, 0x0, 0x0, 0x0) write$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffffff, &(0x7f0000000280)="65a90950735e7b19172f", 0xa) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) move_pages$auto(0x0, 0x8, 0x0, 0x0, 0x0, 0x1) msgctl$auto_IPC_STAT(0x5f, 0x2, 0x0) read$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffffff, 0x0, 0x0) fcntl$auto(0x0, 0x407, 0x8100000) openat$auto_dfs_sched_itmt_fops_itmt(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim5/ports/1/bpf_map_accept\x00', 0x1a1001, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/pci/00/03.0\x00', 0x0, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC0D0c\x00', 0x2000, 0x0) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) write$auto(0x3, 0x0, 0xfdef) r1 = socket(0x1, 0x5, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D0\x00', 0x48a501, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) setns(0xc9, 0x0) r2 = socket(0x27, 0x2, 0x1) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r2) select$auto(0xb, 0x0, 0x0, &(0x7f0000000240)={[0x10000000000001ff, 0x8001, 0xff1, 0x20, 0x15, 0x100000000000004, 0x3c2a19d5, 0xa2f9, 0x1, 0x9, 0xb, 0x3, 0x3, 0x5, 0xa, 0x5]}, 0x0) pread64$auto(r0, 0x0, 0x2, 0x5) syz_genetlink_get_family_id$auto_netdev(&(0x7f00000000c0), r1) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x82000, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 3.544771581s ago: executing program 2 (id=4761): mmap$auto(0x0, 0x402000a, 0xdf, 0x17, 0x401, 0x8000) mmap$auto(0xfffffffffffffff8, 0x4080000000, 0x4, 0xab1, 0xffffffffffffffff, 0x200000100a6) socket(0x1, 0x80000, 0x0) get_robust_list$auto(0x1, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_ADD_LINK_STA(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES16], 0x14}, 0x1, 0x0, 0x0, 0x854}, 0x20004014) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) r0 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r0, 0x29, 0x3e, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x110) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) read$auto_proc_tid_children_operations_internal(0xffffffffffffffff, &(0x7f00000005c0)=""/34, 0x22) r1 = pidfd_open$auto(0x1, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) setreuid$auto(0x0, 0x20000000004) syz_clone3(&(0x7f0000000300)={0x193104480, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 3.458414424s ago: executing program 0 (id=4762): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dmmidi2\x00', 0x1, 0x0) ioctl$auto_FICLONERANGE(r0, 0x4020940d, 0xffffffffffff8000) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/amidi2\x00', 0x50843, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/ram15/queue/rotational\x00', 0x420c61, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000140), 0x0) write$auto(r0, &(0x7f0000000380)='\xa3\xaa\xb1\xa6\x01\xc2B#\xb5\xa7\xee$\x8d\xc4\xe9h5\xf7\xb3\xfdld\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\x89C\xce\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4\xdb\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\x9e\x98\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xb8&t9-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00'/149, 0xc65d) unshare$auto(0x40000080) madvise$auto(0x0, 0x2003f0, 0x18) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) pwrite64$auto(r1, 0x0, 0x0, 0x6) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x4, 0x7fffffffffffffff, 0xa) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) futex_wake$auto(0x0, 0xe414, 0x6, 0x3) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xf7s\x1cJ\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0xe, 0x4) read$auto_v4l2_fops_v4l2_dev(0xffffffffffffffff, &(0x7f0000000000)=""/33, 0x21) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto_SO_PEERPIDFD(0xffffffffffffffff, 0x2, 0x4d, &(0x7f0000000080)='/dev\x00\x00\x00\x12\xb1\xfb', &(0x7f0000000180)=0xc32) r2 = timerfd_create$auto(0x8, 0x800) timerfd_settime$auto(r2, 0x0, &(0x7f0000000080)={{0x8, 0x4}, {0x0, 0x5}}, 0x0) unshare$auto(0x800) keyctl$auto(0x1f, 0x0, 0x6, 0x0, 0x8000000000000000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 2.633883674s ago: executing program 1 (id=4763): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D1\x00', 0x1, 0x0) ioctl$auto_FICLONERANGE(r0, 0x4020940d, 0xffffffffffff8000) r1 = socket(0x10, 0x2, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/amidi2\x00', 0x50843, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/ram15/queue/rotational\x00', 0x420c61, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000080)='-)', 0x2) unshare$auto(0x40000080) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0x0, 0x2003f0, 0x18) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) pwrite64$auto(r2, 0x0, 0x9, 0x9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x4, 0x7fffffffffffffff, 0x1) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) futex_wake$auto(0x0, 0xe414, 0x6, 0x3) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x19, 0x4, 0x4, 0xfff, 0x8, 0x40d, 0xffffffffffffffff, 0x5f, 0x7ff}, 0x6f4) read$auto_v4l2_fops_v4l2_dev(0xffffffffffffffff, &(0x7f0000000000)=""/33, 0x21) getsockopt$auto_SO_OOBINLINE(0xffffffffffffffff, 0x11, 0xa, 0x0, 0x0) sendfile$auto(r1, r1, &(0x7f00000000c0)=0x3, 0x7e) getsockopt$auto_SO_PEERPIDFD(0xffffffffffffffff, 0x2, 0x4d, &(0x7f0000000080)='/dev\x00\x00\x00\x12\xb1\xfb', &(0x7f0000000180)=0xc32) timerfd_settime$auto(0xffffffffffffffff, 0x0, &(0x7f0000000080)={{0x8, 0x4}, {0x0, 0x5}}, 0x0) r3 = socket(0x2, 0x2, 0x1) setsockopt$auto(r3, 0x0, 0x80, 0x0, 0x78) keyctl$auto(0x1f, 0x0, 0x6, 0x0, 0x8000000000000000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 2.432249513s ago: executing program 3 (id=4764): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D1\x00', 0x1, 0x0) ioctl$auto_FICLONERANGE(r0, 0x4020940d, 0xffffffffffff8000) r1 = socket(0x10, 0x2, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/amidi2\x00', 0x50843, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/ram15/queue/rotational\x00', 0x420c61, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000080)='-)', 0x2) unshare$auto(0x40000080) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0x0, 0x2003f0, 0x18) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) pwrite64$auto(r2, 0x0, 0x9, 0x9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x4, 0x7fffffffffffffff, 0x1) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) futex_wake$auto(0x0, 0xe414, 0x6, 0x3) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x19, 0x4, 0x4, 0xfff, 0x8, 0x40d, 0xffffffffffffffff, 0x5f, 0x7ff}, 0x6f4) read$auto_v4l2_fops_v4l2_dev(0xffffffffffffffff, &(0x7f0000000000)=""/33, 0x21) getsockopt$auto_SO_OOBINLINE(0xffffffffffffffff, 0x11, 0xa, 0x0, 0x0) sendfile$auto(r1, r1, &(0x7f00000000c0)=0x3, 0x7e) getsockopt$auto_SO_PEERPIDFD(0xffffffffffffffff, 0x2, 0x4d, &(0x7f0000000080)='/dev\x00\x00\x00\x12\xb1\xfb', &(0x7f0000000180)=0xc32) timerfd_settime$auto(0xffffffffffffffff, 0x0, &(0x7f0000000080)={{0x8, 0x4}, {0x0, 0x5}}, 0x0) r3 = socket(0x2, 0x2, 0x1) setsockopt$auto(r3, 0x0, 0x80, 0x0, 0x78) keyctl$auto(0x1f, 0x0, 0x6, 0x0, 0x8000000000000000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 1.666517851s ago: executing program 2 (id=4765): unshare$auto(0x40000080) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptyua\x00', 0x80800, 0x0) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/cmdline\x00', 0x101000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/amidi2\x00', 0x8b0000, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) bind$auto(r0, &(0x7f0000000180)=@tipc=@name={0x1e, 0x2, 0x1, {{0x42, 0x4}, 0x2}}, 0x6) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000001140), 0x9}, 0x7) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00n', @ANYRES16=r1, @ANYBLOB="010329bd7000fbdbdf250a000000060001004002000005000200000000000800020048535200"], 0x2c}, 0x1, 0x0, 0x0, 0x400c859}, 0x4010) fchmod$auto(r2, 0x9) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@l2={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4, 0x1}, 0xe) r3 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/user\x00') r4 = syz_clone(0x18002400, &(0x7f0000000340)="411e93cfa117c3afadd6bd7e569a6c68de776e386407a4cac4d5227e73b9f6b30693b6f0c102048568680ff933988852b5f7bd700fafd982bd51a015baa9dcc91d0dfc388af29c7b3864b12bd3d1bede501b22056e1192b0b810b3857ffe1a08e36729e873bd301d1e6ed24b3e89c3abba57817a12a214084788ce4e37d2ca33595181a30ad3cdf64ac6827f63a41b475642c1b0a9d5fdd08a4ecf8e9d4b34bc64f946475b49d0ea", 0xfffffd8f, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)="da8f26731a0946c0403e130a7c65f94dc713a3bff1e1386b84ab105934de966a7e4bd4fc62c2b60f49ed3ee69a55400048af48c95bf72ef2e051853d547ac7d229e2b4dc9c0ae51fd76cc3be863135569345d7506859c6471fa3f8ddb89a295d0e8991b28fb3f82dc048d7d6735d2611af34928457edcd9988eca581c778973c6ba991ac766b296d64a5805288c7e744278b011f2aa1a24b8845950a5c5b034b73917ce706841f82761fe69807737a718bb2924e772c32c469656ede9a4a4f4ed19d18044e25ac1bae931bf4cfb58a1bc6d8f6c261c0f2a4") ioctl$auto_RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000200)={0x0, 0xc, {0xfffffffc, 0x5, 0xa, 0x80000000, 0x5, 0xff, 0xfffffe93, 0x1, 0x7}}) ioctl$auto_SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) prctl$auto(0x9, 0x1, r4, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) (fail_nth: 2) 1.519747587s ago: executing program 0 (id=4766): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0xb201, &(0x7f00000000c0)=@bpf_attr_5={@target_fd=r0, 0xffffffffffffffff, 0x8, 0x2, 0xffffffffffffffff, @relative_fd=0xffffffffffffffff, 0x3}, 0xf) mmap$auto(0xffffffffffffffff, 0xd1, 0x8000000000000005, 0xeb2, r1, 0x8003) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0xffffffffffffff1c) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) select$auto(0x0, 0x0, &(0x7f0000000080)={[0x400000209c, 0x8, 0x4, 0x8001, 0x3, 0x100000004, 0x2c2, 0x800002017d, 0x7, 0x102000008000000, 0xd, 0x80000000000d59, 0x562, 0xff, 0xffffffffffffffff, 0x100000005]}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0xfffbffff}, 0x6, 0x0) getuid() sendmsg$auto_MACSEC_CMD_DEL_TXSA(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000900)={0x0, 0x408}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000025) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) ioctl$auto_SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000300)={0x80000000, 0x3, 0x8, 0x5, 0x1d6110cb}) unshare$auto(0x40000080) socket(0x11, 0x3, 0x9) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x2, 0x5) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000280)='/dev/tty41\x00', 0x109401, 0x0) ioctl$auto(r5, 0x540d, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$auto_binder_features_fops_(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/features/freeze_notification\x00', 0x40000, 0x0) mprotect$auto(0x200000000000, 0x806121, 0x8) mq_notify$auto(0xffffffffffffffff, &(0x7f00000000c0)={@sival_int, @inferred, 0x2, @_sigev_thread={0x0, 0x0}}) futex$auto(&(0x7f00000001c0)=0x7, 0x4, 0x3, 0x0, &(0x7f00000002c0)=0x80000001, 0x5d5d06cd) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) fcntl$auto_F_GETOWNER_UIDS(r3, 0x11, 0x1) 534.996232ms ago: executing program 1 (id=4767): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dmmidi2\x00', 0x1, 0x0) ioctl$auto_FICLONERANGE(r0, 0x4020940d, 0xffffffffffff8000) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/amidi2\x00', 0x50843, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/ram15/queue/rotational\x00', 0x420c61, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000140), 0x0) write$auto(r0, &(0x7f0000000380)='\xa3\xaa\xb1\xa6\x01\xc2B#\xb5\xa7\xee$\x8d\xc4\xe9h5\xf7\xb3\xfdld\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\x89C\xce\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4\xdb\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\x9e\x98\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xb8&t9-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00'/149, 0xc65d) unshare$auto(0x40000080) madvise$auto(0x0, 0x2003f0, 0x18) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) pwrite64$auto(r1, 0x0, 0x0, 0x6) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x4, 0x7fffffffffffffff, 0xa) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) futex_wake$auto(0x0, 0xe414, 0x6, 0x3) bpf$auto(0x6, &(0x7f0000000280)=@task_fd_query={0x19, r0, 0x4, 0x1002, 0x8, 0x40d, 0xffffffffffffffff, 0x0, 0x7ff}, 0x9) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xf7s\x1cJ\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0xe, 0x4) read$auto_v4l2_fops_v4l2_dev(0xffffffffffffffff, &(0x7f0000000000)=""/33, 0x21) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r3, &(0x7f0000000e80)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x34, r2, 0x1, 0x70bd29, 0x25dfdc02, {}, [@ETHTOOL_A_MODULE_EEPROM_I2C_ADDRESS={0x5, 0x6, 0x9}, @ETHTOOL_A_MODULE_EEPROM_LENGTH={0x8, 0x3, 0xb}, @ETHTOOL_A_MODULE_EEPROM_PAGE={0x5, 0x4, 0xe9}, @ETHTOOL_A_MODULE_EEPROM_OFFSET={0x8, 0x2, 0xf7}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004084}, 0x82) getsockopt$auto_SO_OOBINLINE(0xffffffffffffffff, 0x11, 0xa, 0x0, &(0x7f0000000200)=0x20809) getsockopt$auto_SO_PEERPIDFD(0xffffffffffffffff, 0x2, 0x4d, &(0x7f0000000080)='/dev\x00\x00\x00\x12\xb1\xfb', &(0x7f0000000180)=0xc32) r4 = timerfd_create$auto(0x8, 0x800) timerfd_settime$auto(r4, 0x0, &(0x7f0000000080)={{0x8, 0x4}, {0x0, 0x5}}, 0x0) unshare$auto(0x800) keyctl$auto(0x1f, 0x0, 0x6, 0x0, 0x8000000000000000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 377.235881ms ago: executing program 3 (id=4768): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0xa, 0x0) r1 = socket(0x2, 0x1, 0x106) setsockopt$auto(r1, 0x6, 0xd, 0x0, 0x4) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x8000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram10\x00', 0x14fe02, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(r0, 0x0, 0x800) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nbd5\x00', 0x26000, 0x0) ioctl$auto_BLKTRACESETUP(r2, 0xc0481273, &(0x7f00000000c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700000000000300", 0x3ff, 0x408, 0xfff, 0x400004, 0x200000000040000d}) ioctl$auto_BLKTRACETEARDOWN(r2, 0x1276, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)={0x2, 0x80, 0xffff, 0x5, &(0x7f00000001c0)="444699f3ee605b9d3f00", 0x4b47, 0x3, 0x80005, @stream_id=0x7, 0x2004b, 0xb, 0x0, [{0x0, 0x9, 0x5}]}) pselect6$auto(0x1, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) msgctl$auto_IPC_STAT(0x5f, 0x2, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/pci/00/03.0\x00', 0x0, 0x0) pread64$auto(r3, 0x0, 0x2, 0x5) ioctl$auto_SNDRV_PCM_IOCTL_READN_FRAMES2(0xffffffffffffffff, 0x80184153, &(0x7f0000000500)={0x4, &(0x7f00000004c0)=&(0x7f00000003c0), 0x80000000}) io_getevents$auto(0x80000005, 0x5, 0x7, 0x0, &(0x7f0000000080)={0x6, 0xfffffffffffffbff}) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), r1) r5 = setfsuid$auto(0xee00) ioprio_set$auto(0x2, r5, 0x4b34) sendmsg$auto_NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000001a80)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001a40)={&(0x7f0000000540)={0x14cc, r4, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'team0\x00'}, @NL80211_ATTR_TIMED_OUT={0x4}, @NL80211_ATTR_QOS_MAP={0xb2, 0xc7, "812499383dc09ef32272766ca273c299a60d7a6086003b11149dc46c2b3fb0b569955393b130ba11bdb13d00a65e3ca03e0e376c3b38a34f4412cadd2e6b1a88bde78dfe6554d0b3232988010cffcaedf7d4f3070437d00e51b5a4e5826fa035bcffc94415fbc1b2ee8d5807f076023bc9e03c65cb13488d9a3c6568459b2b9319ca49fb74e1d200e093539f44b5886a2cff38fa36c78e4fe5ace95bca7599fd434f346640ef00df53c1bbb538c2"}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x3}, @NL80211_ATTR_RADAR_BACKGROUND={0x4}, @NL80211_ATTR_BSS_SELECT={0x139a, 0xe3, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r5}, @generic="d800f8e17518089262c038cc363abd6cc32f", @nested={0x122e, 0xce, 0x0, 0x1, [@nested={0x4, 0x1d}, @typed={0x14, 0x8f, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @generic="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", @generic="9019468581715749cc35994c4cf67aefe042d7044e773d0b530049d5640d6bb2f384dd627b59cbb65046d613fa219e423ef1a9a8cd4a2f6d17d76be9091310e1f9e14c4759e5568a61ca2934ad11273f0caa84cd47f777d68950c59b4356694ceb6781f5d7cc314736910ab68b0ac6074ab72eb3e4fabbd928414d1759cd289158189547a0192ebeb54b1952d143dd98f59fa3a92a1146021cfae780ba19f023025165899494c733242c1185982599dd987af362b783bf873791102607c9fc0097bda1b38aa58b00cc7ef36cfb42c3dcf287ed04545e6f4830", @generic="83220e993a12eb38c50a1ba10e904485e290275916ac1c4e42edc384acaba31a54a5eb8041b8cd65bb08223927de80d94e45c24e4c62a07ace798ede7f12f0ebd529c99ae6f7cb029fc5a624ec4a93b6bb0724f12da0bb4d2d381242249bc2006ced289e74a1ed444e29c2e6bd5088a3344f7829791d6c6b15ef99c17ff9c18bb1ee5968cdbf72159a412af936c44fd661c516709fd45ba6e53d25994a645077be8ec202a8698930d31740520696d7b9723e649c72333994b8eb62a071ddf8168d", @generic, @generic="1fa56348540ac10388ce0b56982982175c3ff7247e86eba38ca12eb3a05d765fae0a7fe46c3ba814021f5c684330f01cd6fd1e3445d56e88e4b45cb70ae2179d7ab545a8450619b4ed3b27612cd8189536da3889a0e5fab89c148a22bd14d31224fe72c4eae540814c9a79906fdb6fcf38ca5a7cc9fdbd63"]}, @generic="fadf207aa9ce542bc75d293f543f0241719c302c63dc91f7d3a2d01aa85ec67a342391f061d5c7f9", @generic="7055e1719839331602994b089805dc290943bfa3eddd6c3866f719450e812bdd39aba5c4c18dd84d7ef97f9ab4e4cc", @generic="7d37d7ffb0f376e021774b995cd100f45211577b0384572a7280e1cc821f5d7dbe7b927a0f76c36b9b11a528b451f7d2d3604119fa4ea9f529e497602b5073368c4c70f5b35e92d102db0991b2aad7595c6784583139d64bccfcc508d0a55a37f2afe34a1fdb8c48378716184b21d953ff6035f35d9f97af2d2800200ad8ef8d8ceac16ddfc85b06490e390b9495348f7e847497939a5b9083ebf2ae3c81e3571b44fa81fad004494de9c43f803f1a865405ca86692850bde993d74dd5f664513f78c84b8c3d3ebca7617487fafce7c6c4ac0868f8a83d9c05ef1c9f80ca702823462da05c6c3de01a2456dec72a766be33a71676b"]}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x8000}, @NL80211_ATTR_S1G_CAPABILITY={0x37, 0x128, "fc3ac88c3555bc09bea5aab0cb641012f21811a321e438c1fa45a1e19660803de942a8b215b43145ac997be929908114d0f6bc"}]}, 0x14cc}}, 0x20000000) 146.487019ms ago: executing program 2 (id=4769): sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/conf/team_slave_1/enhanced_dad\x00', 0x101002, 0x0) sendfile$auto(r0, r0, 0x0, 0x8) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0) pselect6$auto(0x8a6d, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) unshare$auto(0x40000080) ioctl$auto_SNDRV_PCM_IOCTL_READN_FRAMES2(0xffffffffffffffff, 0x80184153, &(0x7f00000012c0)={0x4, &(0x7f0000001280)=&(0x7f0000000280)="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", 0x10000}) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x22) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) close_range$auto(0xffffffffffffffff, 0x8, 0x0) r2 = setfsgid$auto(0xee01) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), 0xffffffffffffffff) set_mempolicy$auto(0x8004, 0x0, 0x80000000000003) mseal$auto(0x0, 0x7ddd, 0x40000) r3 = socket(0x1, 0x1, 0x1) writev$auto(0x3, 0x0, 0x8) syz_genetlink_get_family_id$auto_batadv(0x0, r3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r1, 0x4000102) pipe$auto(0x0) pipe$auto(0x0) epoll_pwait2$auto(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000080)={0x5, 0x750c}, &(0x7f00000000c0)={0xfff}, 0x8) pwrite64$auto(0xc8, &(0x7f0000000180)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\xfc\x00/\x00\x06\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\xff\x01\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea!,[\x91\x8e\x1b\x95\xafQ?CL\"\x01\x0e#\xae\xa9|8W\xe5Iq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0\x12\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12mwU&[\xde?\x9a$\xb2\xd5\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00', 0xfdee, 0x1) keyctl$auto(0x1f, 0x1, 0x6, r2, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 0s ago: executing program 0 (id=4770): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:0a/power/control\x00', 0x8522, 0x0) r1 = inotify_init1$auto(0x3000000000000) clone3$auto(0x0, 0x7ff) pselect6$auto(0x1, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) getsockopt$auto_SO_TIMESTAMPNS_NEW(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) rseq$auto(0x0, 0x20, 0x0, 0x8000006) fcntl$auto(0xffffffffffffffff, 0x402, 0x1) setns(0xc9, 0x0) r2 = socket(0x2a, 0x2, 0x1) connect$auto(r2, &(0x7f0000000000)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, 0xd) sendmsg$auto_NL802154_CMD_TRIGGER_SCAN(r1, 0x0, 0x4044810) ioctl$auto(0xffffffffffffffff, 0x5412, 0xffffffffffffffff) ioctl$auto_SNDRV_PCM_IOCTL_READN_FRAMES2(0xffffffffffffffff, 0x80184153, 0x0) bpf$auto_BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)=@bpf_attr_5={@target_ifindex, 0xffffffffffffffff, 0x6576fa89, 0x4f, 0xffffffffffffffff, @relative_id=0x2009, 0x7e}, 0x8) r3 = socket(0xa, 0x2, 0x0) setsockopt$auto(r3, 0x29, 0x31, 0x0, 0x110) close_range$auto(0x2, 0x8, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x37f) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) write$auto(r0, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92\x90|l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xe7\xa9\xbf\xd0$\xb9\xd8\x00'/507, 0x1098c7) kernel console output (not intermixed with test programs): 'syz.0.1846': attribute type 11 has an invalid length. [ 869.848762][T21151] netlink: 'syz.0.1846': attribute type 11 has an invalid length. [ 869.848780][T21151] netlink: 'syz.0.1846': attribute type 11 has an invalid length. [ 869.848797][T21151] netlink: 'syz.0.1846': attribute type 11 has an invalid length. [ 870.134199][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.134240][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 873.736382][T21215] kafs: addr_prefs: Invalid Command [ 878.559365][T14347] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 880.895194][T21350] netlink: 'syz.0.1863': attribute type 11 has an invalid length. [ 880.895216][T21350] netlink: 'syz.0.1863': attribute type 11 has an invalid length. [ 880.895226][T21350] netlink: 'syz.0.1863': attribute type 11 has an invalid length. [ 880.895235][T21350] netlink: 'syz.0.1863': attribute type 11 has an invalid length. [ 882.547456][T14347] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 884.625420][T14347] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 885.157262][T21437] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1873'. [ 926.210370][T22245] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1979'. [ 931.563628][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.563698][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 942.592487][T22559] netlink: 'syz.0.2021': attribute type 11 has an invalid length. [ 942.592516][T22559] netlink: 'syz.0.2021': attribute type 11 has an invalid length. [ 942.592531][T22559] netlink: 'syz.0.2021': attribute type 11 has an invalid length. [ 942.592545][T22559] netlink: 'syz.0.2021': attribute type 11 has an invalid length. [ 947.536145][T22664] netlink: 'syz.3.2034': attribute type 11 has an invalid length. [ 947.536175][T22664] netlink: 'syz.3.2034': attribute type 11 has an invalid length. [ 947.536192][T22664] netlink: 'syz.3.2034': attribute type 11 has an invalid length. [ 947.536209][T22664] netlink: 'syz.3.2034': attribute type 11 has an invalid length. [ 968.824787][T23092] netlink: 'syz.2.2084': attribute type 11 has an invalid length. [ 968.824812][T23092] netlink: 'syz.2.2084': attribute type 11 has an invalid length. [ 968.824828][T23092] netlink: 'syz.2.2084': attribute type 11 has an invalid length. [ 974.115546][T23196] netlink: 'syz.3.2098': attribute type 11 has an invalid length. [ 974.115571][T23196] netlink: 'syz.3.2098': attribute type 11 has an invalid length. [ 974.115588][T23196] netlink: 'syz.3.2098': attribute type 11 has an invalid length. [ 979.105733][T23294] netlink: 'syz.3.2111': attribute type 11 has an invalid length. [ 979.105759][T23294] netlink: 'syz.3.2111': attribute type 11 has an invalid length. [ 979.105776][T23294] netlink: 'syz.3.2111': attribute type 11 has an invalid length. [ 993.009957][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.010022][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.590984][T23600] netlink: 'syz.3.2148': attribute type 11 has an invalid length. [ 994.591011][T23600] netlink: 'syz.3.2148': attribute type 11 has an invalid length. [ 994.591028][T23600] netlink: 'syz.3.2148': attribute type 11 has an invalid length. [ 1000.210389][T23707] netlink: 'syz.1.2161': attribute type 11 has an invalid length. [ 1000.210415][T23707] netlink: 'syz.1.2161': attribute type 11 has an invalid length. [ 1000.210432][T23707] netlink: 'syz.1.2161': attribute type 11 has an invalid length. [ 1006.547303][T23827] netlink: 'syz.2.2175': attribute type 11 has an invalid length. [ 1006.547330][T23827] netlink: 'syz.2.2175': attribute type 11 has an invalid length. [ 1006.547418][T23827] netlink: 'syz.2.2175': attribute type 11 has an invalid length. [ 1015.267827][T23993] netlink: 'syz.0.2193': attribute type 11 has an invalid length. [ 1015.267860][T23993] netlink: 'syz.0.2193': attribute type 11 has an invalid length. [ 1015.267877][T23993] netlink: 'syz.0.2193': attribute type 11 has an invalid length. [ 1015.267894][T23993] netlink: 'syz.0.2193': attribute type 11 has an invalid length. [ 1020.538008][T24083] netlink: 'syz.3.2206': attribute type 11 has an invalid length. [ 1020.538040][T24083] netlink: 'syz.3.2206': attribute type 11 has an invalid length. [ 1020.538058][T24083] netlink: 'syz.3.2206': attribute type 11 has an invalid length. [ 1020.538074][T24083] netlink: 'syz.3.2206': attribute type 11 has an invalid length. [ 1027.153166][T24217] netlink: 'syz.1.2228': attribute type 11 has an invalid length. [ 1027.153198][T24217] netlink: 'syz.1.2228': attribute type 11 has an invalid length. [ 1027.153216][T24217] netlink: 'syz.1.2228': attribute type 11 has an invalid length. [ 1027.153233][T24217] netlink: 'syz.1.2228': attribute type 11 has an invalid length. [ 1032.784924][T24317] netlink: 'syz.3.2235': attribute type 11 has an invalid length. [ 1032.784958][T24317] netlink: 'syz.3.2235': attribute type 11 has an invalid length. [ 1032.784976][T24317] netlink: 'syz.3.2235': attribute type 11 has an invalid length. [ 1032.784994][T24317] netlink: 'syz.3.2235': attribute type 11 has an invalid length. [ 1039.484847][T24451] netlink: 'syz.3.2251': attribute type 11 has an invalid length. [ 1039.484869][T24451] netlink: 'syz.3.2251': attribute type 11 has an invalid length. [ 1039.484886][T24451] netlink: 'syz.3.2251': attribute type 11 has an invalid length. [ 1039.484902][T24451] netlink: 'syz.3.2251': attribute type 11 has an invalid length. [ 1054.443004][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.443074][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1060.377084][T24818] netlink: 'syz.0.2296': attribute type 11 has an invalid length. [ 1060.377110][T24818] netlink: 'syz.0.2296': attribute type 11 has an invalid length. [ 1060.377128][T24818] netlink: 'syz.0.2296': attribute type 11 has an invalid length. [ 1060.377144][T24818] netlink: 'syz.0.2296': attribute type 11 has an invalid length. [ 1071.541693][T25026] netlink: 'syz.0.2322': attribute type 11 has an invalid length. [ 1071.541721][T25026] netlink: 'syz.0.2322': attribute type 11 has an invalid length. [ 1071.541737][T25026] netlink: 'syz.0.2322': attribute type 11 has an invalid length. [ 1071.541752][T25026] netlink: 'syz.0.2322': attribute type 11 has an invalid length. [ 1078.074451][T25141] netlink: 'syz.1.2336': attribute type 11 has an invalid length. [ 1078.074480][T25141] netlink: 'syz.1.2336': attribute type 11 has an invalid length. [ 1078.074497][T25141] netlink: 'syz.1.2336': attribute type 11 has an invalid length. [ 1078.074514][T25141] netlink: 'syz.1.2336': attribute type 11 has an invalid length. [ 1078.883164][T25157] netlink: 'syz.0.2338': attribute type 11 has an invalid length. [ 1078.883191][T25157] netlink: 'syz.0.2338': attribute type 11 has an invalid length. [ 1078.883208][T25157] netlink: 'syz.0.2338': attribute type 11 has an invalid length. [ 1078.883224][T25157] netlink: 'syz.0.2338': attribute type 11 has an invalid length. [ 1094.610908][T25423] netlink: 'syz.2.2372': attribute type 11 has an invalid length. [ 1094.610937][T25423] netlink: 'syz.2.2372': attribute type 11 has an invalid length. [ 1094.610953][T25423] netlink: 'syz.2.2372': attribute type 11 has an invalid length. [ 1094.610970][T25423] netlink: 'syz.2.2372': attribute type 11 has an invalid length. [ 1099.442043][T25525] netlink: 'syz.3.2384': attribute type 11 has an invalid length. [ 1099.442062][T25525] netlink: 'syz.3.2384': attribute type 11 has an invalid length. [ 1099.442072][T25525] netlink: 'syz.3.2384': attribute type 11 has an invalid length. [ 1099.442081][T25525] netlink: 'syz.3.2384': attribute type 11 has an invalid length. [ 1105.160087][T25636] netlink: 'syz.0.2397': attribute type 11 has an invalid length. [ 1105.160116][T25636] netlink: 'syz.0.2397': attribute type 11 has an invalid length. [ 1105.160132][T25636] netlink: 'syz.0.2397': attribute type 11 has an invalid length. [ 1105.160148][T25636] netlink: 'syz.0.2397': attribute type 11 has an invalid length. [ 1110.759568][T25745] netlink: 'syz.1.2410': attribute type 11 has an invalid length. [ 1110.759597][T25745] netlink: 'syz.1.2410': attribute type 11 has an invalid length. [ 1110.759614][T25745] netlink: 'syz.1.2410': attribute type 11 has an invalid length. [ 1110.759629][T25745] netlink: 'syz.1.2410': attribute type 11 has an invalid length. [ 1115.886829][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.886903][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.067360][T25838] FAULT_INJECTION: forcing a failure. [ 1116.067360][T25838] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1116.067409][T25838] CPU: 1 UID: 0 PID: 25838 Comm: syz.1.2425 Not tainted syzkaller #0 PREEMPT(full) [ 1116.067441][T25838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1116.067459][T25838] Call Trace: [ 1116.067467][T25838] [ 1116.067477][T25838] dump_stack_lvl+0x100/0x190 [ 1116.067527][T25838] should_fail_ex.cold+0x5/0xa [ 1116.067559][T25838] ? prepare_alloc_pages+0x16d/0x5b0 [ 1116.067696][T25838] should_fail_alloc_page+0xeb/0x140 [ 1116.067743][T25838] prepare_alloc_pages+0x1f0/0x5b0 [ 1116.067790][T25838] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 1116.067829][T25838] ? find_held_lock+0x2b/0x80 [ 1116.067863][T25838] ? __hrtimer_rearm_deferred+0x23c/0x7b0 [ 1116.067929][T25838] ? __hrtimer_rearm_deferred+0x23c/0x7b0 [ 1116.067963][T25838] ? find_held_lock+0x2b/0x80 [ 1116.067999][T25838] ? __lock_acquire+0x5c0/0x1f40 [ 1116.068042][T25838] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1116.068080][T25838] ? __css_rstat_updated+0x1ce/0x590 [ 1116.068130][T25838] ? lock_acquire+0x1d1/0x380 [ 1116.068172][T25838] ? do_raw_spin_lock+0x128/0x260 [ 1116.068201][T25838] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1116.068231][T25838] ? find_held_lock+0x2b/0x80 [ 1116.068273][T25838] ? __lock_acquire+0x5c0/0x1f40 [ 1116.068312][T25838] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1116.068356][T25838] ? policy_nodemask+0xed/0x4f0 [ 1116.068470][T25838] alloc_pages_mpol+0x201/0x550 [ 1116.068514][T25838] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1116.068568][T25838] folio_alloc_mpol_noprof+0x36/0x260 [ 1116.068603][T25838] shmem_alloc_folio+0x135/0x160 [ 1116.068649][T25838] shmem_alloc_and_add_folio+0x371/0xd40 [ 1116.068690][T25838] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1116.068725][T25838] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 1116.068766][T25838] shmem_get_folio_gfp+0x75b/0x1980 [ 1116.068804][T25838] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1116.068839][T25838] ? filemap_map_pages+0x1155/0x2060 [ 1116.068949][T25838] shmem_fault+0x1fb/0xa30 [ 1116.068980][T25838] ? __pfx_shmem_fault+0x10/0x10 [ 1116.069013][T25838] ? __pfx_filemap_map_pages+0x10/0x10 [ 1116.069058][T25838] ? find_held_lock+0x2b/0x80 [ 1116.069095][T25838] ? __pfx_filemap_map_pages+0x10/0x10 [ 1116.069134][T25838] __do_fault+0x10b/0x440 [ 1116.069170][T25838] do_fault+0xb3f/0x1830 [ 1116.069213][T25838] ? __pfx_do_fault+0x10/0x10 [ 1116.069249][T25838] ? rcu_read_unlock+0x2d/0xb0 [ 1116.069276][T25838] ? rcu_read_unlock+0x2d/0xb0 [ 1116.069305][T25838] ? __pte_offset_map+0x179/0x310 [ 1116.069348][T25838] __handle_mm_fault+0x150b/0x2f60 [ 1116.069385][T25838] ? __pfx___handle_mm_fault+0x10/0x10 [ 1116.069414][T25838] ? pte_offset_map_lock+0x174/0x320 [ 1116.069451][T25838] ? find_held_lock+0x2b/0x80 [ 1116.069483][T25838] ? find_held_lock+0x2b/0x80 [ 1116.069515][T25838] ? follow_page_pte+0x536/0x1050 [ 1116.069575][T25838] handle_mm_fault+0x363/0xa20 [ 1116.069613][T25838] __get_user_pages+0x8ae/0x2c30 [ 1116.069666][T25838] ? __pfx___get_user_pages+0x10/0x10 [ 1116.069720][T25838] faultin_page_range+0x1f1/0x9e0 [ 1116.069761][T25838] ? lock_acquire+0x1d1/0x380 [ 1116.069806][T25838] madvise_do_behavior+0x354/0x510 [ 1116.069840][T25838] ? __pfx_madvise_do_behavior+0x10/0x10 [ 1116.069871][T25838] ? down_read+0x13b/0x4c0 [ 1116.069940][T25838] do_madvise+0x238/0x290 [ 1116.069969][T25838] ? __pfx_do_madvise+0x10/0x10 [ 1116.069995][T25838] ? do_futex+0x190/0x440 [ 1116.070036][T25838] ? __fget_files+0x21f/0x3d0 [ 1116.070099][T25838] __x64_sys_madvise+0xa9/0x110 [ 1116.070127][T25838] ? lockdep_hardirqs_on+0x7d/0x110 [ 1116.070163][T25838] do_syscall_64+0x121/0x770 [ 1116.070202][T25838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.070236][T25838] RIP: 0033:0x7efd55f9e199 [ 1116.070261][T25838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1116.070289][T25838] RSP: 002b:00007efd56e63028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1116.070318][T25838] RAX: ffffffffffffffda RBX: 00007efd56225fa0 RCX: 00007efd55f9e199 [ 1116.070338][T25838] RDX: 0000000000000016 RSI: 00000000002003f0 RDI: 0000000000000000 [ 1116.070356][T25838] RBP: 00007efd560358e0 R08: 0000000000000000 R09: 0000000000000000 [ 1116.070374][T25838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1116.070390][T25838] R13: 00007efd56226038 R14: 00007efd56225fa0 R15: 00007ffdba065da8 [ 1116.070430][T25838] [ 1116.335503][T25838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2425'. [ 1116.851767][T25846] FAULT_INJECTION: forcing a failure. [ 1116.851767][T25846] name failslab, interval 1, probability 0, space 0, times 0 [ 1116.851811][T25846] CPU: 0 UID: 0 PID: 25846 Comm: syz.1.2425 Not tainted syzkaller #0 PREEMPT(full) [ 1116.851847][T25846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1116.851865][T25846] Call Trace: [ 1116.851875][T25846] [ 1116.851886][T25846] dump_stack_lvl+0x100/0x190 [ 1116.851933][T25846] should_fail_ex.cold+0x5/0xa [ 1116.851970][T25846] should_failslab+0xc2/0x120 [ 1116.852014][T25846] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1116.852048][T25846] ? __pfx_map_id_range_down+0x10/0x10 [ 1116.852091][T25846] ? security_inode_alloc+0x3b/0x2c0 [ 1116.852137][T25846] security_inode_alloc+0x3b/0x2c0 [ 1116.852167][T25846] inode_init_always_gfp+0xc6f/0xfb0 [ 1116.852214][T25846] alloc_inode+0x8e/0x250 [ 1116.852245][T25846] new_inode+0x22/0x1c0 [ 1116.852277][T25846] __debugfs_create_file+0xfb/0x500 [ 1116.852459][T25846] debugfs_create_file_full+0x41/0x60 [ 1116.852509][T25846] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 1116.852544][T25846] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1116.852607][T25846] ? kasan_save_track+0x14/0x30 [ 1116.852643][T25846] ? __kasan_kmalloc+0xaa/0xb0 [ 1116.852681][T25846] ? lockdep_init_map_type+0x5c/0x250 [ 1116.852731][T25846] preinit_net+0x252/0x920 [ 1116.852767][T25846] copy_net_ns+0x1dd/0x7a0 [ 1116.852840][T25846] create_new_namespaces+0x3ea/0xac0 [ 1116.852892][T25846] unshare_nsproxy_namespaces+0xf2/0x220 [ 1116.852934][T25846] ksys_unshare+0x4a2/0xa70 [ 1116.852963][T25846] ? __pfx_ksys_unshare+0x10/0x10 [ 1116.852993][T25846] __x64_sys_unshare+0x31/0x40 [ 1116.853010][T25846] do_syscall_64+0x121/0x770 [ 1116.853032][T25846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.853049][T25846] RIP: 0033:0x7efd55f9e199 [ 1116.853063][T25846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1116.853081][T25846] RSP: 002b:00007efd56e21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1116.853097][T25846] RAX: ffffffffffffffda RBX: 00007efd56226180 RCX: 00007efd55f9e199 [ 1116.853108][T25846] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1116.853117][T25846] RBP: 00007efd560358e0 R08: 0000000000000000 R09: 0000000000000000 [ 1116.853134][T25846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1116.853143][T25846] R13: 00007efd56226218 R14: 00007efd56226180 R15: 00007ffdba065da8 [ 1116.853164][T25846] [ 1116.859332][T25846] debugfs: out of free dentries, can not create file 'net_refcnt@ffff888077415240' [ 1119.420696][T25894] FAULT_INJECTION: forcing a failure. [ 1119.420696][T25894] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1119.420737][T25894] CPU: 0 UID: 0 PID: 25894 Comm: syz.3.2430 Not tainted syzkaller #0 PREEMPT(full) [ 1119.420770][T25894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1119.420787][T25894] Call Trace: [ 1119.420797][T25894] [ 1119.420807][T25894] dump_stack_lvl+0x100/0x190 [ 1119.420850][T25894] should_fail_ex.cold+0x5/0xa [ 1119.420888][T25894] _copy_to_user+0x32/0xd0 [ 1119.420932][T25894] simple_read_from_buffer+0xcb/0x170 [ 1119.420971][T25894] proc_fail_nth_read+0x1af/0x230 [ 1119.421009][T25894] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1119.421053][T25894] ? rw_verify_area+0xce/0x6d0 [ 1119.421083][T25894] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1119.421116][T25894] vfs_read+0x1e4/0xb40 [ 1119.421151][T25894] ? lock_acquire+0x1d1/0x380 [ 1119.421189][T25894] ? __fget_files+0x34/0x3d0 [ 1119.421224][T25894] ? __pfx_vfs_read+0x10/0x10 [ 1119.421254][T25894] ? find_held_lock+0x2b/0x80 [ 1119.421286][T25894] ? __fget_files+0x215/0x3d0 [ 1119.421327][T25894] ? __fget_files+0x21f/0x3d0 [ 1119.421373][T25894] ksys_read+0x12a/0x250 [ 1119.421406][T25894] ? __pfx_ksys_read+0x10/0x10 [ 1119.421445][T25894] do_syscall_64+0x121/0x770 [ 1119.421485][T25894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1119.421514][T25894] RIP: 0033:0x7f06cdd5e9ce [ 1119.421537][T25894] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1119.421562][T25894] RSP: 002b:00007f06cbf71fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1119.421590][T25894] RAX: ffffffffffffffda RBX: 00007f06cbf726c0 RCX: 00007f06cdd5e9ce [ 1119.421609][T25894] RDX: 000000000000000f RSI: 00007f06cbf720a0 RDI: 0000000000000007 [ 1119.421627][T25894] RBP: 00007f06cbf72090 R08: 0000000000000000 R09: 0000000000000000 [ 1119.421643][T25894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1119.421659][T25894] R13: 00007f06ce0264e8 R14: 00007f06ce026450 R15: 00007ffc0b8d7928 [ 1119.421698][T25894] [ 1130.250248][T26098] ecryptfs_miscdev_write: Invalid packet size [102] [ 1130.259513][T26099] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1130.276977][T26100] ecryptfs_miscdev_write: Invalid packet size [101] [ 1131.216785][T26126] netlink: 'syz.1.2461': attribute type 11 has an invalid length. [ 1131.216813][T26126] netlink: 'syz.1.2461': attribute type 11 has an invalid length. [ 1131.216822][T26126] netlink: 'syz.1.2461': attribute type 11 has an invalid length. [ 1131.216831][T26126] netlink: 'syz.1.2461': attribute type 11 has an invalid length. [ 1139.573363][T26276] FAULT_INJECTION: forcing a failure. [ 1139.573363][T26276] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1139.573402][T26276] CPU: 0 UID: 0 PID: 26276 Comm: syz.3.2480 Not tainted syzkaller #0 PREEMPT(full) [ 1139.573431][T26276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1139.573447][T26276] Call Trace: [ 1139.573456][T26276] [ 1139.573466][T26276] dump_stack_lvl+0x100/0x190 [ 1139.573509][T26276] should_fail_ex.cold+0x5/0xa [ 1139.573546][T26276] _copy_to_user+0x32/0xd0 [ 1139.573588][T26276] simple_read_from_buffer+0xcb/0x170 [ 1139.573625][T26276] proc_fail_nth_read+0x1af/0x230 [ 1139.573659][T26276] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1139.573693][T26276] ? rw_verify_area+0xce/0x6d0 [ 1139.573720][T26276] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1139.573751][T26276] vfs_read+0x1e4/0xb40 [ 1139.573784][T26276] ? lock_acquire+0x1d1/0x380 [ 1139.573822][T26276] ? __fget_files+0x34/0x3d0 [ 1139.573855][T26276] ? __pfx_vfs_read+0x10/0x10 [ 1139.573885][T26276] ? find_held_lock+0x2b/0x80 [ 1139.573917][T26276] ? __fget_files+0x215/0x3d0 [ 1139.573955][T26276] ? __fget_files+0x21f/0x3d0 [ 1139.573998][T26276] ksys_read+0x12a/0x250 [ 1139.574029][T26276] ? __pfx_ksys_read+0x10/0x10 [ 1139.574071][T26276] do_syscall_64+0x121/0x770 [ 1139.574118][T26276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1139.574146][T26276] RIP: 0033:0x7f06cdd5e9ce [ 1139.574167][T26276] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1139.574193][T26276] RSP: 002b:00007f06cbfd4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1139.574217][T26276] RAX: ffffffffffffffda RBX: 00007f06cbfd56c0 RCX: 00007f06cdd5e9ce [ 1139.574233][T26276] RDX: 000000000000000f RSI: 00007f06cbfd50a0 RDI: 0000000000000005 [ 1139.574249][T26276] RBP: 00007f06cbfd5090 R08: 0000000000000000 R09: 0000000000000000 [ 1139.574266][T26276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1139.574282][T26276] R13: 00007f06ce026218 R14: 00007f06ce026180 R15: 00007ffc0b8d7928 [ 1139.574319][T26276] [ 1141.107195][T26319] FAULT_INJECTION: forcing a failure. [ 1141.107195][T26319] name failslab, interval 1, probability 0, space 0, times 0 [ 1141.107235][T26319] CPU: 1 UID: 0 PID: 26319 Comm: syz.0.2485 Not tainted syzkaller #0 PREEMPT(full) [ 1141.107262][T26319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1141.107272][T26319] Call Trace: [ 1141.107277][T26319] [ 1141.107283][T26319] dump_stack_lvl+0x100/0x190 [ 1141.107309][T26319] should_fail_ex.cold+0x5/0xa [ 1141.107330][T26319] should_failslab+0xc2/0x120 [ 1141.107353][T26319] __kmalloc_cache_noprof+0x91/0x6d0 [ 1141.107370][T26319] ? kvm_init_irq_routing+0x43/0xf0 [ 1141.107391][T26319] ? kvm_dev_ioctl+0xb48/0x1b50 [ 1141.107410][T26319] kvm_dev_ioctl+0xb48/0x1b50 [ 1141.107431][T26319] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1141.107449][T26319] ? __fget_files+0x21f/0x3d0 [ 1141.107470][T26319] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1141.107487][T26319] __x64_sys_ioctl+0x18e/0x210 [ 1141.107505][T26319] do_syscall_64+0x121/0x770 [ 1141.107526][T26319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1141.107541][T26319] RIP: 0033:0x7f698a59e199 [ 1141.107554][T26319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1141.107568][T26319] RSP: 002b:00007f698b4a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1141.107582][T26319] RAX: ffffffffffffffda RBX: 00007f698a826450 RCX: 00007f698a59e199 [ 1141.107592][T26319] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000006 [ 1141.107601][T26319] RBP: 00007f698b4a2090 R08: 0000000000000000 R09: 0000000000000000 [ 1141.107610][T26319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1141.107619][T26319] R13: 00007f698a8264e8 R14: 00007f698a826450 R15: 00007ffe9e09dde8 [ 1141.107638][T26319] [ 1142.726499][T26347] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1142.726548][T26347] vhci_hcd vhci_hcd.1: SetHubDepth req not supported for USB 2.0 roothub [ 1144.070601][T26367] sysfs_service_op_store: Client not running :-5: [ 1148.666601][T26456] FAULT_INJECTION: forcing a failure. [ 1148.666601][T26456] name failslab, interval 1, probability 0, space 0, times 0 [ 1148.666639][T26456] CPU: 0 UID: 0 PID: 26456 Comm: syz.0.2505 Not tainted syzkaller #0 PREEMPT(full) [ 1148.666670][T26456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1148.666695][T26456] Call Trace: [ 1148.666704][T26456] [ 1148.666714][T26456] dump_stack_lvl+0x100/0x190 [ 1148.666754][T26456] should_fail_ex.cold+0x5/0xa [ 1148.666790][T26456] should_failslab+0xc2/0x120 [ 1148.666830][T26456] __kvmalloc_node_noprof+0x113/0x9b0 [ 1148.666869][T26456] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 1148.666911][T26456] __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 1148.666957][T26456] mmu_topup_memory_caches+0x25/0x170 [ 1148.666988][T26456] kvm_mmu_load+0xe8/0x2580 [ 1148.667032][T26456] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 1148.667066][T26456] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 1148.667103][T26456] ? __pfx_kvm_mmu_load+0x10/0x10 [ 1148.667144][T26456] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 1148.667183][T26456] ? kvm_check_and_inject_events+0x896/0x1050 [ 1148.667219][T26456] vcpu_run+0x419f/0x61a0 [ 1148.667247][T26456] ? wakeup_preempt_fair+0x5c3/0xdc0 [ 1148.667307][T26456] ? vmx_vcpu_load_vmcs+0x21d/0x760 [ 1148.667356][T26456] ? __pfx_vcpu_run+0x10/0x10 [ 1148.667390][T26456] ? lock_acquire+0x1d1/0x380 [ 1148.667425][T26456] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1dd0 [ 1148.667457][T26456] ? fpu_swap_kvm_fpstate+0x217/0x460 [ 1148.667488][T26456] ? __local_bh_enable_ip+0xa5/0x120 [ 1148.667531][T26456] ? kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 1148.667579][T26456] kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 1148.667621][T26456] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1148.667652][T26456] ? lock_acquire+0x1d1/0x380 [ 1148.667697][T26456] ? do_raw_write_lock+0x11e/0x260 [ 1148.667726][T26456] ? find_held_lock+0x2b/0x80 [ 1148.667756][T26456] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 1148.667787][T26456] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 1148.667828][T26456] kvm_vcpu_ioctl+0x730/0x1700 [ 1148.667866][T26456] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1148.667900][T26456] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1148.667943][T26456] ? do_vfs_ioctl+0x226/0x13e0 [ 1148.667974][T26456] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1148.668013][T26456] ? __fget_files+0x34/0x3d0 [ 1148.668048][T26456] ? find_held_lock+0x2b/0x80 [ 1148.668078][T26456] ? hook_file_ioctl_common+0x140/0x440 [ 1148.668118][T26456] ? __fget_files+0x21f/0x3d0 [ 1148.668153][T26456] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1148.668189][T26456] __x64_sys_ioctl+0x18e/0x210 [ 1148.668223][T26456] do_syscall_64+0x121/0x770 [ 1148.668262][T26456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1148.668287][T26456] RIP: 0033:0x7f698a59e199 [ 1148.668310][T26456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1148.668333][T26456] RSP: 002b:00007f698b547028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1148.668359][T26456] RAX: ffffffffffffffda RBX: 00007f698a825fa0 RCX: 00007f698a59e199 [ 1148.668377][T26456] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000004 [ 1148.668392][T26456] RBP: 00007f698b547090 R08: 0000000000000000 R09: 0000000000000000 [ 1148.668408][T26456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1148.668424][T26456] R13: 00007f698a826038 R14: 00007f698a825fa0 R15: 00007ffe9e09dde8 [ 1148.668463][T26456] [ 1150.113814][T26493] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2511'. [ 1158.413650][T26617] netlink: 'syz.0.2528': attribute type 11 has an invalid length. [ 1158.413682][T26617] netlink: 'syz.0.2528': attribute type 11 has an invalid length. [ 1158.413699][T26617] netlink: 'syz.0.2528': attribute type 11 has an invalid length. [ 1158.413715][T26617] netlink: 'syz.0.2528': attribute type 11 has an invalid length. [ 1158.492940][T26620] FAULT_INJECTION: forcing a failure. [ 1158.492940][T26620] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1158.492979][T26620] CPU: 1 UID: 0 PID: 26620 Comm: syz.3.2529 Not tainted syzkaller #0 PREEMPT(full) [ 1158.493016][T26620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1158.493033][T26620] Call Trace: [ 1158.493041][T26620] [ 1158.493052][T26620] dump_stack_lvl+0x100/0x190 [ 1158.493093][T26620] should_fail_ex.cold+0x5/0xa [ 1158.493124][T26620] ? prepare_alloc_pages+0x16d/0x5b0 [ 1158.493167][T26620] should_fail_alloc_page+0xeb/0x140 [ 1158.493210][T26620] prepare_alloc_pages+0x1f0/0x5b0 [ 1158.493250][T26620] ? stack_depot_save_flags+0x27/0x9f0 [ 1158.493293][T26620] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 1158.493328][T26620] ? kasan_save_track+0x14/0x30 [ 1158.493361][T26620] ? kasan_save_free_info+0x3b/0x70 [ 1158.493387][T26620] ? __kasan_slab_free+0x5f/0x80 [ 1158.493423][T26620] ? kfree+0x22b/0x6d0 [ 1158.493447][T26620] ? tomoyo_check_open_permission+0x1a2/0x3c0 [ 1158.493478][T26620] ? tomoyo_file_open+0x6b/0x90 [ 1158.493515][T26620] ? security_file_open+0xb5/0x1e0 [ 1158.493545][T26620] ? do_dentry_open+0x588/0x14d0 [ 1158.493578][T26620] ? vfs_open+0x82/0x3f0 [ 1158.493616][T26620] ? path_openat+0x19fa/0x2440 [ 1158.493733][T26620] ? do_file_open+0x20e/0x430 [ 1158.493766][T26620] ? do_sys_openat2+0x10f/0x1e0 [ 1158.493790][T26620] ? __x64_sys_openat+0x12d/0x210 [ 1158.493815][T26620] ? do_syscall_64+0x121/0x770 [ 1158.493847][T26620] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1158.493884][T26620] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1158.493947][T26620] ? kasan_quarantine_put+0x104/0x240 [ 1158.493980][T26620] ? lockdep_hardirqs_on+0x7d/0x110 [ 1158.494015][T26620] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1158.494056][T26620] ? policy_nodemask+0xed/0x4f0 [ 1158.494097][T26620] alloc_pages_mpol+0x201/0x550 [ 1158.494138][T26620] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1158.494180][T26620] ? __mutex_lock+0x26c/0x1bd0 [ 1158.494215][T26620] ? trace_array_get+0x1e/0x140 [ 1158.494266][T26620] ___kmalloc_large_node+0xe8/0x130 [ 1158.494311][T26620] __kmalloc_large_node_noprof+0x1c/0x70 [ 1158.494356][T26620] __kmalloc_noprof+0x5a8/0x840 [ 1158.494390][T26620] ? __seq_open_private+0x22/0xd0 [ 1158.494427][T26620] __seq_open_private+0x22/0xd0 [ 1158.494458][T26620] __tracing_open+0x99/0xa80 [ 1158.494493][T26620] tracing_open+0x26b/0x4d0 [ 1158.494526][T26620] do_dentry_open+0x6ab/0x14d0 [ 1158.494560][T26620] ? __pfx_tracing_open+0x10/0x10 [ 1158.494599][T26620] vfs_open+0x82/0x3f0 [ 1158.494644][T26620] path_openat+0x19fa/0x2440 [ 1158.494686][T26620] ? __pfx_path_openat+0x10/0x10 [ 1158.494734][T26620] do_file_open+0x20e/0x430 [ 1158.494773][T26620] ? __pfx_do_file_open+0x10/0x10 [ 1158.494835][T26620] ? _raw_spin_unlock+0x28/0x50 [ 1158.494865][T26620] ? alloc_fd+0x471/0x7a0 [ 1158.494911][T26620] do_sys_openat2+0x10f/0x1e0 [ 1158.494937][T26620] ? __pfx_do_sys_openat2+0x10/0x10 [ 1158.494965][T26620] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1158.495003][T26620] ? __fget_files+0x21f/0x3d0 [ 1158.495042][T26620] __x64_sys_openat+0x12d/0x210 [ 1158.495070][T26620] ? __pfx___x64_sys_openat+0x10/0x10 [ 1158.495096][T26620] ? ksys_write+0x1ac/0x250 [ 1158.495135][T26620] do_syscall_64+0x121/0x770 [ 1158.495168][T26620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1158.495194][T26620] RIP: 0033:0x7f06cdd9e199 [ 1158.495214][T26620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1158.495238][T26620] RSP: 002b:00007f06cbfd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1158.495274][T26620] RAX: ffffffffffffffda RBX: 00007f06ce026180 RCX: 00007f06cdd9e199 [ 1158.495291][T26620] RDX: 0000000000082000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1158.495307][T26620] RBP: 00007f06cbfd5090 R08: 0000000000000000 R09: 0000000000000000 [ 1158.495323][T26620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1158.495338][T26620] R13: 00007f06ce026218 R14: 00007f06ce026180 R15: 00007ffc0b8d7928 [ 1158.495371][T26620] [ 1165.894373][T26747] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1165.894682][T26747] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1165.894935][T26747] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1165.895193][T26747] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1166.167407][T26767] netlink: 'syz.2.2547': attribute type 11 has an invalid length. [ 1166.167436][T26767] netlink: 'syz.2.2547': attribute type 11 has an invalid length. [ 1166.167451][T26767] netlink: 'syz.2.2547': attribute type 11 has an invalid length. [ 1166.167467][T26767] netlink: 'syz.2.2547': attribute type 11 has an invalid length. [ 1167.883685][T14347] Bluetooth: hci3: command 0x0406 tx timeout [ 1167.962273][T14347] Bluetooth: hci0: command 0x041b tx timeout [ 1167.962319][T14347] Bluetooth: hci2: command 0x0c1a tx timeout [ 1167.962348][T14347] Bluetooth: hci1: command 0x0c1a tx timeout [ 1168.137466][T26797] FAULT_INJECTION: forcing a failure. [ 1168.137466][T26797] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1168.137507][T26797] CPU: 0 UID: 0 PID: 26797 Comm: syz.1.2551 Not tainted syzkaller #0 PREEMPT(full) [ 1168.137541][T26797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1168.137560][T26797] Call Trace: [ 1168.137570][T26797] [ 1168.137581][T26797] dump_stack_lvl+0x100/0x190 [ 1168.137626][T26797] should_fail_ex.cold+0x5/0xa [ 1168.137655][T26797] ? prepare_alloc_pages+0x16d/0x5b0 [ 1168.137699][T26797] should_fail_alloc_page+0xeb/0x140 [ 1168.137738][T26797] prepare_alloc_pages+0x1f0/0x5b0 [ 1168.137783][T26797] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 1168.137821][T26797] ? __pfx_clockevents_program_event+0x10/0x10 [ 1168.137851][T26797] ? __lock_acquire+0x5c0/0x1f40 [ 1168.137876][T26797] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1168.137906][T26797] ? __css_rstat_updated+0x1ce/0x590 [ 1168.137933][T26797] ? lock_acquire+0x1d1/0x380 [ 1168.137956][T26797] ? do_raw_spin_lock+0x128/0x260 [ 1168.137973][T26797] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1168.137988][T26797] ? find_held_lock+0x2b/0x80 [ 1168.138011][T26797] ? __lock_acquire+0x5c0/0x1f40 [ 1168.138033][T26797] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1168.138057][T26797] ? policy_nodemask+0xed/0x4f0 [ 1168.138081][T26797] alloc_pages_mpol+0x201/0x550 [ 1168.138105][T26797] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1168.138132][T26797] folio_alloc_mpol_noprof+0x36/0x260 [ 1168.138150][T26797] shmem_alloc_folio+0x135/0x160 [ 1168.138174][T26797] shmem_alloc_and_add_folio+0x371/0xd40 [ 1168.138195][T26797] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1168.138213][T26797] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 1168.138236][T26797] shmem_get_folio_gfp+0x75b/0x1980 [ 1168.138257][T26797] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1168.138275][T26797] ? ktime_get_coarse_real_ts64_mg+0x235/0x300 [ 1168.138294][T26797] ? lockdep_hardirqs_on+0x7d/0x110 [ 1168.138326][T26797] ? ktime_get_coarse_real_ts64_mg+0x249/0x300 [ 1168.138362][T26797] shmem_fault+0x1fb/0xa30 [ 1168.138380][T26797] ? current_time+0x29f/0x3b0 [ 1168.138406][T26797] ? __pfx_shmem_fault+0x10/0x10 [ 1168.138422][T26797] ? __lock_acquire+0x5c0/0x1f40 [ 1168.138444][T26797] ? __pfx___up_read+0x10/0x10 [ 1168.138458][T26797] ? fault_dirty_shared_page+0x496/0x5a0 [ 1168.138476][T26797] ? inode_to_bdi+0x9e/0x160 [ 1168.138570][T26797] ? fault_dirty_shared_page+0x496/0x5a0 [ 1168.138590][T26797] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 1168.138638][T26797] __do_fault+0x10b/0x440 [ 1168.138659][T26797] do_fault+0x585/0x1830 [ 1168.138680][T26797] ? __pfx_filemap_map_pages+0x10/0x10 [ 1168.138707][T26797] ? __pfx_do_fault+0x10/0x10 [ 1168.138727][T26797] ? rcu_read_unlock+0x2d/0xb0 [ 1168.138741][T26797] ? rcu_read_unlock+0x2d/0xb0 [ 1168.138757][T26797] ? __pte_offset_map+0x179/0x310 [ 1168.138780][T26797] __handle_mm_fault+0x150b/0x2f60 [ 1168.138809][T26797] ? __pfx___handle_mm_fault+0x10/0x10 [ 1168.138834][T26797] ? pte_offset_map_lock+0x174/0x320 [ 1168.138867][T26797] ? find_held_lock+0x2b/0x80 [ 1168.138904][T26797] ? find_held_lock+0x2b/0x80 [ 1168.138940][T26797] ? follow_page_pte+0x536/0x1050 [ 1168.139000][T26797] handle_mm_fault+0x363/0xa20 [ 1168.139039][T26797] __get_user_pages+0x8ae/0x2c30 [ 1168.139092][T26797] ? __pfx___get_user_pages+0x10/0x10 [ 1168.139131][T26797] ? __pfx_down_read_killable+0x10/0x10 [ 1168.139185][T26797] faultin_page_range+0x1f1/0x9e0 [ 1168.139232][T26797] madvise_do_behavior+0x354/0x510 [ 1168.139264][T26797] ? __pfx_madvise_do_behavior+0x10/0x10 [ 1168.139295][T26797] ? down_read+0x13b/0x4c0 [ 1168.139352][T26797] do_madvise+0x238/0x290 [ 1168.139379][T26797] ? __pfx_do_madvise+0x10/0x10 [ 1168.139405][T26797] ? do_futex+0x190/0x440 [ 1168.139443][T26797] ? find_held_lock+0x2b/0x80 [ 1168.139495][T26797] __x64_sys_madvise+0xa9/0x110 [ 1168.139523][T26797] ? lockdep_hardirqs_on+0x7d/0x110 [ 1168.139555][T26797] do_syscall_64+0x121/0x770 [ 1168.139594][T26797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.139624][T26797] RIP: 0033:0x7efd55f9e199 [ 1168.139648][T26797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1168.139675][T26797] RSP: 002b:00007efd56e42028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1168.139703][T26797] RAX: ffffffffffffffda RBX: 00007efd56226090 RCX: 00007efd55f9e199 [ 1168.139723][T26797] RDX: 0000000000000017 RSI: ffffffffffff0005 RDI: 0000000000000000 [ 1168.139741][T26797] RBP: 00007efd560358e0 R08: 0000000000000000 R09: 0000000000000000 [ 1168.139758][T26797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1168.139775][T26797] R13: 00007efd56226128 R14: 00007efd56226090 R15: 00007ffdba065da8 [ 1168.139814][T26797] [ 1168.354296][T26801] FAULT_INJECTION: forcing a failure. [ 1168.354296][T26801] name failslab, interval 1, probability 0, space 0, times 0 [ 1168.354334][T26801] CPU: 1 UID: 0 PID: 26801 Comm: syz.0.2552 Not tainted syzkaller #0 PREEMPT(full) [ 1168.354373][T26801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1168.354389][T26801] Call Trace: [ 1168.354398][T26801] [ 1168.354408][T26801] dump_stack_lvl+0x100/0x190 [ 1168.354451][T26801] should_fail_ex.cold+0x5/0xa [ 1168.354487][T26801] should_failslab+0xc2/0x120 [ 1168.354530][T26801] __kmalloc_cache_noprof+0x91/0x6d0 [ 1168.354562][T26801] ? ima_d_path+0xc9/0x260 [ 1168.354596][T26801] ima_d_path+0xc9/0x260 [ 1168.354624][T26801] ? __pfx_ima_d_path+0x10/0x10 [ 1168.354657][T26801] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 1168.354703][T26801] process_measurement+0x1b25/0x2350 [ 1168.354755][T26801] ? trace_array_get+0x1e/0x140 [ 1168.354793][T26801] ? __pfx_process_measurement+0x10/0x10 [ 1168.354837][T26801] ? rcu_is_watching+0x13/0xc0 [ 1168.354868][T26801] ? trace_contention_end+0x126/0x160 [ 1168.354910][T26801] ? __mutex_lock+0x26c/0x1bd0 [ 1168.354946][T26801] ? trace_array_get+0x1e/0x140 [ 1168.354985][T26801] ? trace_array_get+0x10c/0x140 [ 1168.355056][T26801] ? trace_array_get+0x10c/0x140 [ 1168.355100][T26801] ima_file_check+0xcc/0x120 [ 1168.355140][T26801] ? __pfx_ima_file_check+0x10/0x10 [ 1168.355191][T26801] security_file_post_open+0xc4/0x210 [ 1168.355221][T26801] path_openat+0x5cd/0x2440 [ 1168.355264][T26801] ? __pfx_path_openat+0x10/0x10 [ 1168.355310][T26801] do_file_open+0x20e/0x430 [ 1168.355349][T26801] ? __pfx_do_file_open+0x10/0x10 [ 1168.355417][T26801] ? _raw_spin_unlock+0x28/0x50 [ 1168.355444][T26801] ? alloc_fd+0x471/0x7a0 [ 1168.355490][T26801] do_sys_openat2+0x10f/0x1e0 [ 1168.355517][T26801] ? __pfx_do_sys_openat2+0x10/0x10 [ 1168.355544][T26801] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1168.355580][T26801] ? __fget_files+0x21f/0x3d0 [ 1168.355620][T26801] __x64_sys_openat+0x12d/0x210 [ 1168.355647][T26801] ? __pfx___x64_sys_openat+0x10/0x10 [ 1168.355673][T26801] ? ksys_write+0x1ac/0x250 [ 1168.355717][T26801] do_syscall_64+0x121/0x770 [ 1168.355754][T26801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.355782][T26801] RIP: 0033:0x7f698a59e199 [ 1168.355803][T26801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1168.355828][T26801] RSP: 002b:00007f698b4c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1168.355854][T26801] RAX: ffffffffffffffda RBX: 00007f698a826360 RCX: 00007f698a59e199 [ 1168.355871][T26801] RDX: 0000000000042802 RSI: 0000200000001c40 RDI: ffffffffffffff9c [ 1168.355889][T26801] RBP: 00007f698b4c3090 R08: 0000000000000000 R09: 0000000000000000 [ 1168.355905][T26801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1168.355921][T26801] R13: 00007f698a8263f8 R14: 00007f698a826360 R15: 00007ffe9e09dde8 [ 1168.355958][T26801] [ 1171.414991][T26849] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2558'. [ 1173.595732][T26889] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2564'. [ 1176.239329][T26920] ubi0: attaching mtd0 [ 1176.296373][T26920] ubi0: scanning is finished [ 1176.296438][T26920] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1176.617575][T26920] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1177.324063][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.327572][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1184.370935][T27069] hub 1-0:1.0: USB hub found [ 1184.387080][T27069] hub 1-0:1.0: 1 port detected [ 1187.794053][T27136] vivid-008: ================= START STATUS ================= [ 1187.794076][T27136] vivid-008: Enable Output Cropping: true [ 1187.794107][T27136] vivid-008: Enable Output Composing: true [ 1187.794134][T27136] vivid-008: Enable Output Scaler: true [ 1187.794160][T27136] vivid-008: Tx RGB Quantization Range: Automatic [ 1187.794195][T27136] vivid-008: Transmit Mode: HDMI [ 1187.794222][T27136] vivid-008: Hotplug Present: 0x00000000 [ 1187.794249][T27136] vivid-008: RxSense Present: 0x00000000 [ 1187.794276][T27136] vivid-008: EDID Present: 0x00000000 [ 1187.794303][T27136] vivid-008: ================== END STATUS ================== [ 1200.429836][T27366] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1203.996648][T27433] netlink: 'syz.1.2630': attribute type 11 has an invalid length. [ 1203.996678][T27433] netlink: 'syz.1.2630': attribute type 11 has an invalid length. [ 1203.996693][T27433] netlink: 'syz.1.2630': attribute type 11 has an invalid length. [ 1203.996707][T27433] netlink: 'syz.1.2630': attribute type 11 has an invalid length. [ 1210.880260][T27558] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2647'. [ 1213.819449][T27623] FAULT_INJECTION: forcing a failure. [ 1213.819449][T27623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1213.819487][T27623] CPU: 1 UID: 0 PID: 27623 Comm: syz.2.2656 Not tainted syzkaller #0 PREEMPT(full) [ 1213.819517][T27623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1213.819533][T27623] Call Trace: [ 1213.819542][T27623] [ 1213.819552][T27623] dump_stack_lvl+0x100/0x190 [ 1213.819593][T27623] should_fail_ex.cold+0x5/0xa [ 1213.819629][T27623] _copy_from_user+0x2e/0xd0 [ 1213.819670][T27623] kvm_arch_vcpu_ioctl+0x1ae4/0x3a10 [ 1213.819706][T27623] ? tomoyo_path_number_perm+0x46d/0x580 [ 1213.819737][T27623] ? stack_trace_save+0x8e/0xc0 [ 1213.819771][T27623] ? __pfx_stack_trace_save+0x10/0x10 [ 1213.819802][T27623] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 1213.819835][T27623] ? stack_depot_save_flags+0x27/0x9f0 [ 1213.819861][T27623] ? __lock_acquire+0x5c0/0x1f40 [ 1213.819900][T27623] ? tomoyo_path_number_perm+0x46d/0x580 [ 1213.819929][T27623] ? kasan_save_stack+0x3f/0x50 [ 1213.819968][T27623] ? __lock_acquire+0x5c0/0x1f40 [ 1213.820019][T27623] ? lock_acquire+0x1d1/0x380 [ 1213.820054][T27623] ? kvm_vcpu_ioctl+0x322/0x1700 [ 1213.820095][T27623] ? rcu_is_watching+0x13/0xc0 [ 1213.820126][T27623] ? trace_contention_end+0x126/0x160 [ 1213.820170][T27623] ? __mutex_lock+0x26c/0x1bd0 [ 1213.820207][T27623] ? kvm_vcpu_ioctl+0x322/0x1700 [ 1213.820248][T27623] ? __pfx___mutex_lock+0x10/0x10 [ 1213.820281][T27623] ? kasan_quarantine_put+0x104/0x240 [ 1213.820323][T27623] ? lockdep_hardirqs_on+0x7d/0x110 [ 1213.820361][T27623] ? tomoyo_path_number_perm+0x28f/0x580 [ 1213.820400][T27623] ? tomoyo_path_number_perm+0x188/0x580 [ 1213.820435][T27623] ? kvm_vcpu_ioctl+0x8a0/0x1700 [ 1213.820467][T27623] kvm_vcpu_ioctl+0x8a0/0x1700 [ 1213.820505][T27623] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1213.820541][T27623] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1213.820585][T27623] ? do_vfs_ioctl+0x226/0x13e0 [ 1213.820617][T27623] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1213.820655][T27623] ? __fget_files+0x34/0x3d0 [ 1213.820691][T27623] ? find_held_lock+0x2b/0x80 [ 1213.820722][T27623] ? hook_file_ioctl_common+0x140/0x440 [ 1213.820763][T27623] ? __fget_files+0x21f/0x3d0 [ 1213.820800][T27623] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1213.820837][T27623] __x64_sys_ioctl+0x18e/0x210 [ 1213.820871][T27623] do_syscall_64+0x121/0x770 [ 1213.820909][T27623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1213.820938][T27623] RIP: 0033:0x7f383739e199 [ 1213.820961][T27623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1213.820987][T27623] RSP: 002b:00007f3838353028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1213.821014][T27623] RAX: ffffffffffffffda RBX: 00007f3837625fa0 RCX: 00007f383739e199 [ 1213.821033][T27623] RDX: 0000200000000040 RSI: 000000004008ae8a RDI: 0000000000000004 [ 1213.821050][T27623] RBP: 00007f3838353090 R08: 0000000000000000 R09: 0000000000000000 [ 1213.821067][T27623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1213.821084][T27623] R13: 00007f3837626038 R14: 00007f3837625fa0 R15: 00007ffe10854ae8 [ 1213.821123][T27623] [ 1216.778068][T27667] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2661'. [ 1220.027485][T27708] zswap: compressor 000 not available [ 1221.376866][T27745] FAULT_INJECTION: forcing a failure. [ 1221.376866][T27745] name failslab, interval 1, probability 0, space 0, times 0 [ 1221.376905][T27745] CPU: 1 UID: 0 PID: 27745 Comm: syz.0.2672 Not tainted syzkaller #0 PREEMPT(full) [ 1221.376937][T27745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1221.376954][T27745] Call Trace: [ 1221.376963][T27745] [ 1221.376972][T27745] dump_stack_lvl+0x100/0x190 [ 1221.377013][T27745] should_fail_ex.cold+0x5/0xa [ 1221.377049][T27745] should_failslab+0xc2/0x120 [ 1221.377087][T27745] __kmalloc_noprof+0xfc/0x840 [ 1221.377120][T27745] ? __pfx_dynamic_dname+0x10/0x10 [ 1221.377149][T27745] ? tomoyo_encode2+0xfb/0x3c0 [ 1221.377189][T27745] tomoyo_encode2+0xfb/0x3c0 [ 1221.377228][T27745] tomoyo_encode+0x29/0x50 [ 1221.377257][T27745] tomoyo_realpath_from_path+0x18c/0x690 [ 1221.377301][T27745] tomoyo_path_number_perm+0x23c/0x580 [ 1221.377329][T27745] ? tomoyo_path_number_perm+0x22e/0x580 [ 1221.377360][T27745] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1221.377403][T27745] ? __lock_acquire+0x5c0/0x1f40 [ 1221.377458][T27745] ? __fget_files+0x34/0x3d0 [ 1221.377493][T27745] ? find_held_lock+0x2b/0x80 [ 1221.377523][T27745] ? hook_file_ioctl_common+0x140/0x440 [ 1221.377563][T27745] ? __fget_files+0x21f/0x3d0 [ 1221.377603][T27745] security_file_ioctl+0xd3/0x230 [ 1221.377631][T27745] __x64_sys_ioctl+0xb7/0x210 [ 1221.377663][T27745] do_syscall_64+0x121/0x770 [ 1221.377701][T27745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1221.377727][T27745] RIP: 0033:0x7f698a59e199 [ 1221.377757][T27745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1221.377781][T27745] RSP: 002b:00007f698b4c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1221.377807][T27745] RAX: ffffffffffffffda RBX: 00007f698a826360 RCX: 00007f698a59e199 [ 1221.377825][T27745] RDX: 000000000000007f RSI: 000000000000541b RDI: 0000000000000003 [ 1221.377845][T27745] RBP: 00007f698b4c3090 R08: 0000000000000000 R09: 0000000000000000 [ 1221.377861][T27745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1221.377878][T27745] R13: 00007f698a8263f8 R14: 00007f698a826360 R15: 00007ffe9e09dde8 [ 1221.377916][T27745] [ 1221.381552][T27745] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1223.542761][T27778] bond0: option fail_over_mac: invalid value (û) [ 1238.763664][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.763730][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1246.163787][T28192] bridge0: port 3(syz_tun) entered blocking state [ 1246.163905][T28192] bridge0: port 3(syz_tun) entered disabled state [ 1246.191222][T28192] syz_tun: entered allmulticast mode [ 1246.212208][T28192] syz_tun: entered promiscuous mode [ 1246.218310][T28192] bridge0: port 3(syz_tun) entered blocking state [ 1246.219871][T28192] bridge0: port 3(syz_tun) entered forwarding state [ 1251.206398][T28272] FAULT_INJECTION: forcing a failure. [ 1251.206398][T28272] name failslab, interval 1, probability 0, space 0, times 0 [ 1251.206425][T28272] CPU: 0 UID: 0 PID: 28272 Comm: syz.3.2743 Not tainted syzkaller #0 PREEMPT(full) [ 1251.206443][T28272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1251.206453][T28272] Call Trace: [ 1251.206458][T28272] [ 1251.206464][T28272] dump_stack_lvl+0x100/0x190 [ 1251.206488][T28272] should_fail_ex.cold+0x5/0xa [ 1251.206508][T28272] should_failslab+0xc2/0x120 [ 1251.206531][T28272] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 1251.206551][T28272] ? __alloc_skb+0x5b7/0x710 [ 1251.206567][T28272] ? __alloc_skb+0x140/0x710 [ 1251.206584][T28272] __alloc_skb+0x140/0x710 [ 1251.206596][T28272] ? __alloc_skb+0x5b7/0x710 [ 1251.206608][T28272] ? __pfx___alloc_skb+0x10/0x10 [ 1251.206623][T28272] ? aa_sk_perm+0x389/0xab0 [ 1251.206643][T28272] netlink_alloc_large_skb+0x69/0x150 [ 1251.206668][T28272] netlink_sendmsg+0x680/0xda0 [ 1251.206692][T28272] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1251.206715][T28272] ? apparmor_socket_sendmsg+0x165/0x280 [ 1251.206741][T28272] ____sys_sendmsg+0xa4d/0xbe0 [ 1251.206763][T28272] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1251.206788][T28272] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1251.206808][T28272] ? _kstrtoull+0x144/0x200 [ 1251.206823][T28272] ? __pfx__kstrtoull+0x10/0x10 [ 1251.206842][T28272] ___sys_sendmsg+0x190/0x1e0 [ 1251.206862][T28272] ? __pfx____sys_sendmsg+0x10/0x10 [ 1251.206889][T28272] ? __fget_files+0x34/0x3d0 [ 1251.206921][T28272] __sys_sendmmsg+0x20c/0x440 [ 1251.206939][T28272] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1251.206953][T28272] ? ksys_write+0x190/0x250 [ 1251.206986][T28272] ? fput+0x7c/0x100 [ 1251.207005][T28272] ? ksys_write+0x1ac/0x250 [ 1251.207021][T28272] ? __pfx_ksys_write+0x10/0x10 [ 1251.207037][T28272] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 1251.207057][T28272] __x64_sys_sendmmsg+0x9c/0x100 [ 1251.207071][T28272] ? lockdep_hardirqs_on+0x7d/0x110 [ 1251.207090][T28272] do_syscall_64+0x121/0x770 [ 1251.207111][T28272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1251.207126][T28272] RIP: 0033:0x7f06cdd9e199 [ 1251.207139][T28272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1251.207153][T28272] RSP: 002b:00007f06ceb9d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1251.207167][T28272] RAX: ffffffffffffffda RBX: 00007f06ce025fa0 RCX: 00007f06cdd9e199 [ 1251.207177][T28272] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 1251.207186][T28272] RBP: 00007f06ceb9d090 R08: 0000000000000000 R09: 0000000000000000 [ 1251.207195][T28272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1251.207203][T28272] R13: 00007f06ce026038 R14: 00007f06ce025fa0 R15: 00007ffc0b8d7928 [ 1251.207222][T28272] [ 1255.428119][T28366] FAULT_INJECTION: forcing a failure. [ 1255.428119][T28366] name failslab, interval 1, probability 0, space 0, times 0 [ 1255.428160][T28366] CPU: 0 UID: 0 PID: 28366 Comm: syz.2.2753 Not tainted syzkaller #0 PREEMPT(full) [ 1255.428193][T28366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1255.428209][T28366] Call Trace: [ 1255.428218][T28366] [ 1255.428228][T28366] dump_stack_lvl+0x100/0x190 [ 1255.428271][T28366] should_fail_ex.cold+0x5/0xa [ 1255.428307][T28366] should_failslab+0xc2/0x120 [ 1255.428347][T28366] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1255.428384][T28366] ? security_file_alloc+0x34/0x2c0 [ 1255.428422][T28366] security_file_alloc+0x34/0x2c0 [ 1255.428461][T28366] init_file+0x95/0x480 [ 1255.428499][T28366] alloc_empty_file+0x79/0x1c0 [ 1255.428540][T28366] alloc_file_pseudo+0x183/0x290 [ 1255.428583][T28366] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1255.428625][T28366] ? alloc_fd+0x471/0x7a0 [ 1255.428666][T28366] sock_alloc_file+0x50/0x210 [ 1255.428699][T28366] __sys_socket+0x1c0/0x260 [ 1255.428737][T28366] ? __pfx___sys_socket+0x10/0x10 [ 1255.428785][T28366] __x64_sys_socket+0x72/0xb0 [ 1255.428820][T28366] ? lockdep_hardirqs_on+0x7d/0x110 [ 1255.428855][T28366] do_syscall_64+0x121/0x770 [ 1255.428893][T28366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1255.428922][T28366] RIP: 0033:0x7f383739fa07 [ 1255.428949][T28366] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1255.428975][T28366] RSP: 002b:00007f38382acf98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 1255.429002][T28366] RAX: ffffffffffffffda RBX: 00007f3837626450 RCX: 00007f383739fa07 [ 1255.429021][T28366] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1255.429038][T28366] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 1255.429054][T28366] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000001 [ 1255.429071][T28366] R13: 00007f38376264e8 R14: 00007f3837626450 R15: 00007ffe10854ae8 [ 1255.429109][T28366] [ 1256.783927][T28382] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1259.693788][T19127] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1259.710350][T19127] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1259.719254][T19127] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1259.735951][T19127] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1259.740270][T19127] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1260.125930][ T8975] bridge0: port 3(syz_tun) entered disabled state [ 1260.164645][ T8975] syz_tun (unregistering): left allmulticast mode [ 1260.164677][ T8975] syz_tun (unregistering): left promiscuous mode [ 1260.167027][ T8975] bridge0: port 3(syz_tun) entered disabled state [ 1260.551320][T25160] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.768971][T25160] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.910699][T25160] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1261.097270][T25160] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1261.802323][T26789] Bluetooth: hci4: command tx timeout [ 1262.403131][T25160] bridge_slave_1: left allmulticast mode [ 1262.403188][T25160] bridge_slave_1: left promiscuous mode [ 1262.403433][T25160] bridge0: port 2(bridge_slave_1) entered disabled state [ 1262.410919][T25160] bridge_slave_0: left allmulticast mode [ 1262.410953][T25160] bridge_slave_0: left promiscuous mode [ 1262.411195][T25160] bridge0: port 1(bridge_slave_0) entered disabled state [ 1262.770338][T25160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1262.783545][T25160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1262.785545][T25160] bond0 (unregistering): Released all slaves [ 1263.296157][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1263.802102][T28432] bridge0: port 1(bridge_slave_0) entered blocking state [ 1263.802217][T28432] bridge0: port 1(bridge_slave_0) entered disabled state [ 1263.802390][T28432] bridge_slave_0: entered allmulticast mode [ 1263.808673][T28432] bridge_slave_0: entered promiscuous mode [ 1263.882326][T26789] Bluetooth: hci4: command tx timeout [ 1263.895082][T28432] bridge0: port 2(bridge_slave_1) entered blocking state [ 1263.895203][T28432] bridge0: port 2(bridge_slave_1) entered disabled state [ 1263.895387][T28432] bridge_slave_1: entered allmulticast mode [ 1263.903954][T28432] bridge_slave_1: entered promiscuous mode [ 1264.181072][T28432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1264.190239][T28432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1264.309603][T28432] team0: Port device team_slave_0 added [ 1264.336982][T28432] team0: Port device team_slave_1 added [ 1264.746485][T28432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1264.746507][T28432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1264.746540][T28432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1264.969130][T28432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1264.969152][T28432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1264.969185][T28432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1265.529215][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1265.673347][T28432] hsr_slave_0: entered promiscuous mode [ 1265.675850][T28432] hsr_slave_1: entered promiscuous mode [ 1265.677262][T28432] debugfs: 'hsr0' already exists in 'hsr' [ 1265.677287][T28432] Cannot create hsr debugfs directory [ 1265.850585][T28554] netlink: 'syz.3.2778': attribute type 11 has an invalid length. [ 1265.850615][T28554] netlink: 'syz.3.2778': attribute type 11 has an invalid length. [ 1265.850630][T28554] netlink: 'syz.3.2778': attribute type 11 has an invalid length. [ 1265.850646][T28554] netlink: 'syz.3.2778': attribute type 11 has an invalid length. [ 1265.961627][T26789] Bluetooth: hci4: command tx timeout [ 1266.950416][ T5288] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1268.045984][T26789] Bluetooth: hci4: command tx timeout [ 1268.801099][T25160] hsr_slave_0: left promiscuous mode [ 1268.807366][T25160] hsr_slave_1: left promiscuous mode [ 1268.808046][T25160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1268.808062][T25160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1268.808709][T25160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1268.808730][T25160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1268.834124][T25160] veth1_macvtap: left promiscuous mode [ 1268.834180][T25160] veth0_macvtap: left promiscuous mode [ 1268.835957][T25160] veth1_vlan: left promiscuous mode [ 1268.836056][T25160] veth0_vlan: left promiscuous mode [ 1269.048050][T25160] team0 (unregistering): Port device team_slave_1 removed [ 1269.065377][T25160] team0 (unregistering): Port device team_slave_0 removed [ 1270.115352][T28432] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1270.136518][T28432] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1270.814812][T28432] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1270.839879][T28432] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1270.840797][T28432] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1270.872503][T28432] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1270.876066][T28432] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1270.936092][T28432] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1271.960648][T28432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1271.980286][T28432] 8021q: adding VLAN 0 to HW filter on device team0 [ 1271.988280][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1271.988405][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1271.997288][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1271.997406][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1275.065585][T28432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1275.925412][T28432] veth0_vlan: entered promiscuous mode [ 1275.968844][T28432] veth1_vlan: entered promiscuous mode [ 1277.351234][T28432] veth0_macvtap: entered promiscuous mode [ 1277.363110][T28432] veth1_macvtap: entered promiscuous mode [ 1277.376561][T28432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1277.380991][T28432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1277.472408][ T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1277.473204][ T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1277.473253][ T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1277.473293][ T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1277.608139][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1277.608166][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1277.670273][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1277.670299][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1277.825814][T28803] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1280.306350][T28862] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2802'. [ 1283.430597][T28930] process 'syz.3.2809' launched ':,' with NULL argv: empty string added [ 1284.737607][T28919] Process accounting resumed [ 1289.222632][T29025] FAULT_INJECTION: forcing a failure. [ 1289.222632][T29025] name failslab, interval 1, probability 0, space 0, times 0 [ 1289.222676][T29025] CPU: 0 UID: 0 PID: 29025 Comm: syz.2.2822 Not tainted syzkaller #0 PREEMPT(full) [ 1289.222708][T29025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1289.222725][T29025] Call Trace: [ 1289.222734][T29025] [ 1289.222752][T29025] dump_stack_lvl+0x100/0x190 [ 1289.222794][T29025] should_fail_ex.cold+0x5/0xa [ 1289.222832][T29025] should_failslab+0xc2/0x120 [ 1289.222874][T29025] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 1289.222913][T29025] ? __d_alloc+0x35/0xa50 [ 1289.222960][T29025] __d_alloc+0x35/0xa50 [ 1289.223003][T29025] d_alloc_pseudo+0x1c/0xc0 [ 1289.223033][T29025] alloc_file_pseudo+0x118/0x290 [ 1289.223078][T29025] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1289.223129][T29025] __shmem_file_setup+0x205/0x460 [ 1289.223171][T29025] ? __pfx___shmem_file_setup+0x10/0x10 [ 1289.223214][T29025] ? vm_area_alloc+0x1f/0x160 [ 1289.223244][T29025] shmem_zero_setup+0x96/0x1b0 [ 1289.223277][T29025] __mmap_region+0x26b6/0x32e0 [ 1289.223316][T29025] ? __pfx___mmap_region+0x10/0x10 [ 1289.223355][T29025] ? __lock_acquire+0x5c0/0x1f40 [ 1289.223403][T29025] ? process_measurement+0x1567/0x2350 [ 1289.223452][T29025] ? do_raw_spin_lock+0x128/0x260 [ 1289.223482][T29025] ? find_held_lock+0x2b/0x80 [ 1289.223514][T29025] ? debug_object_activate+0x343/0x4b0 [ 1289.223627][T29025] ? debug_object_activate+0x343/0x4b0 [ 1289.223672][T29025] ? __pfx_debug_object_activate+0x10/0x10 [ 1289.223720][T29025] ? hrtimer_start_range_ns_common+0x778/0x16f0 [ 1289.223828][T29025] mmap_region+0x3db/0x6d0 [ 1289.223862][T29025] ? rcu_is_watching+0x13/0xc0 [ 1289.223893][T29025] ? __pfx_mmap_region+0x10/0x10 [ 1289.223930][T29025] ? cap_mmap_addr+0x4b/0x120 [ 1289.223969][T29025] ? bpf_lsm_mmap_addr+0x9/0x30 [ 1289.224010][T29025] ? security_mmap_addr+0x71/0x1e0 [ 1289.224042][T29025] ? __get_unmapped_area+0x255/0x3e0 [ 1289.224087][T29025] do_mmap+0x12c7/0x1c30 [ 1289.224135][T29025] ? __pfx_do_mmap+0x10/0x10 [ 1289.224188][T29025] ? __pfx_down_write_killable+0x10/0x10 [ 1289.224226][T29025] ? find_held_lock+0x2b/0x80 [ 1289.224263][T29025] vm_mmap_pgoff+0x28d/0x470 [ 1289.224306][T29025] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1289.224339][T29025] ? lock_acquire+0x1d1/0x380 [ 1289.224382][T29025] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1289.224426][T29025] ksys_mmap_pgoff+0xe4/0x610 [ 1289.224467][T29025] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1289.224502][T29025] ? fput+0x7c/0x100 [ 1289.224537][T29025] ? ksys_write+0x1ac/0x250 [ 1289.224567][T29025] ? __pfx_ksys_write+0x10/0x10 [ 1289.224600][T29025] __x64_sys_mmap+0x125/0x190 [ 1289.224631][T29025] do_syscall_64+0x121/0x770 [ 1289.224667][T29025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1289.224696][T29025] RIP: 0033:0x7f383739e199 [ 1289.224719][T29025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1289.224752][T29025] RSP: 002b:00007f38382f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1289.224780][T29025] RAX: ffffffffffffffda RBX: 00007f3837626270 RCX: 00007f383739e199 [ 1289.224799][T29025] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 1289.224816][T29025] RBP: 00007f38382f0090 R08: fffffffffffffffa R09: 0000000000008000 [ 1289.224834][T29025] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000001 [ 1289.224851][T29025] R13: 00007f3837626308 R14: 00007f3837626270 R15: 00007ffe10854ae8 [ 1289.224890][T29025] [ 1293.063639][T19127] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1293.067100][T19127] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1293.071673][T19127] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1293.098111][T19127] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1293.100253][T19127] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1293.783721][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1294.356563][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1294.539760][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1294.668498][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1295.162084][T26789] Bluetooth: hci3: command tx timeout [ 1295.294780][ T12] bridge_slave_1: left allmulticast mode [ 1295.294810][ T12] bridge_slave_1: left promiscuous mode [ 1295.295050][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1295.329464][ T12] bridge_slave_0: left allmulticast mode [ 1295.329496][ T12] bridge_slave_0: left promiscuous mode [ 1295.329766][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1295.746990][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1295.750029][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1295.774138][ T12] bond0 (unregistering): Released all slaves [ 1296.484640][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1296.648072][T29083] bridge0: port 1(bridge_slave_0) entered blocking state [ 1296.648224][T29083] bridge0: port 1(bridge_slave_0) entered disabled state [ 1296.648311][T29083] bridge_slave_0: entered allmulticast mode [ 1296.649374][T29083] bridge_slave_0: entered promiscuous mode [ 1296.838488][T29083] bridge0: port 2(bridge_slave_1) entered blocking state [ 1296.838558][T29083] bridge0: port 2(bridge_slave_1) entered disabled state [ 1296.838649][T29083] bridge_slave_1: entered allmulticast mode [ 1296.839694][T29083] bridge_slave_1: entered promiscuous mode [ 1296.997737][T29083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1297.009279][T29083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1297.221319][T29083] team0: Port device team_slave_0 added [ 1297.226511][T29083] team0: Port device team_slave_1 added [ 1297.241873][T26789] Bluetooth: hci3: command tx timeout [ 1297.274463][T29083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1297.274485][T29083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1297.274517][T29083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1297.276731][T29083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1297.276749][T29083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1297.276779][T29083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1297.413826][T29083] hsr_slave_0: entered promiscuous mode [ 1297.422105][T29083] hsr_slave_1: entered promiscuous mode [ 1297.422890][T29083] debugfs: 'hsr0' already exists in 'hsr' [ 1297.422912][T29083] Cannot create hsr debugfs directory [ 1297.714787][T29183] netlink: 'syz.2.2838': attribute type 11 has an invalid length. [ 1297.714805][T29183] netlink: 'syz.2.2838': attribute type 11 has an invalid length. [ 1297.714814][T29183] netlink: 'syz.2.2838': attribute type 11 has an invalid length. [ 1298.341499][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1299.321955][T26789] Bluetooth: hci3: command tx timeout [ 1300.138836][T29228] netlink: 'syz.1.2841': attribute type 11 has an invalid length. [ 1300.138865][T29228] netlink: 'syz.1.2841': attribute type 11 has an invalid length. [ 1300.138882][T29228] netlink: 'syz.1.2841': attribute type 11 has an invalid length. [ 1300.208164][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.208231][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.401944][T26789] Bluetooth: hci3: command tx timeout [ 1301.819083][T29083] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1301.823848][T29083] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1301.919343][T29083] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1301.927821][T29083] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1302.038919][T29083] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1302.060421][T29083] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1302.061365][T29083] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1302.081185][T29083] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1302.914802][T29083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1303.257701][ T12] hsr_slave_0: left promiscuous mode [ 1303.258450][ T12] hsr_slave_1: left promiscuous mode [ 1303.259414][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1303.259437][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1303.260279][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1303.260301][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1303.326140][ T12] veth1_macvtap: left promiscuous mode [ 1303.326205][ T12] veth0_macvtap: left promiscuous mode [ 1303.326326][ T12] veth1_vlan: left promiscuous mode [ 1303.326410][ T12] veth0_vlan: left promiscuous mode [ 1303.771165][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1303.794380][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1304.224583][T29083] 8021q: adding VLAN 0 to HW filter on device team0 [ 1304.593957][ T3350] bridge0: port 1(bridge_slave_0) entered blocking state [ 1304.594025][ T3350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1304.659795][ T3350] bridge0: port 2(bridge_slave_1) entered blocking state [ 1304.659885][ T3350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1305.196672][T29083] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1306.718090][T29083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1307.388488][T29083] veth0_vlan: entered promiscuous mode [ 1307.474161][T29083] veth1_vlan: entered promiscuous mode [ 1308.582310][T29083] veth0_macvtap: entered promiscuous mode [ 1308.622910][T29083] veth1_macvtap: entered promiscuous mode [ 1308.901377][T29083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1308.918235][T29083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1310.343414][T25160] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.343622][T25160] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.343822][T25160] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.344154][T25160] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.489892][T25160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1310.489920][T25160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1310.685444][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1310.685471][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1316.795125][T29525] Process accounting paused [ 1325.720146][T29720] FAULT_INJECTION: forcing a failure. [ 1325.720146][T29720] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1325.720185][T29720] CPU: 0 UID: 0 PID: 29720 Comm: syz.2.2895 Not tainted syzkaller #0 PREEMPT(full) [ 1325.720217][T29720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1325.720234][T29720] Call Trace: [ 1325.720243][T29720] [ 1325.720253][T29720] dump_stack_lvl+0x100/0x190 [ 1325.720299][T29720] should_fail_ex.cold+0x5/0xa [ 1325.720337][T29720] _copy_to_user+0x32/0xd0 [ 1325.720382][T29720] keyctl_capabilities+0x5a/0x160 [ 1325.720430][T29720] __do_sys_keyctl+0x427/0x5a0 [ 1325.720459][T29720] do_syscall_64+0x121/0x770 [ 1325.720501][T29720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1325.720530][T29720] RIP: 0033:0x7f383739e199 [ 1325.720560][T29720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1325.720586][T29720] RSP: 002b:00007f38382ae028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1325.720613][T29720] RAX: ffffffffffffffda RBX: 00007f3837626450 RCX: 00007f383739e199 [ 1325.720636][T29720] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 000000000000001f [ 1325.720654][T29720] RBP: 00007f38382ae090 R08: 0000000080000000 R09: 0000000000000000 [ 1325.720673][T29720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1325.720691][T29720] R13: 00007f38376264e8 R14: 00007f3837626450 R15: 00007ffe10854ae8 [ 1325.720730][T29720] [ 1329.530932][T29780] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2906'. [ 1329.590063][T29780] veth1_macvtap: left promiscuous mode [ 1332.170345][T29827] FAULT_INJECTION: forcing a failure. [ 1332.170345][T29827] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1332.170385][T29827] CPU: 1 UID: 0 PID: 29827 Comm: syz.0.2911 Not tainted syzkaller #0 PREEMPT(full) [ 1332.170418][T29827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1332.170445][T29827] Call Trace: [ 1332.170454][T29827] [ 1332.170465][T29827] dump_stack_lvl+0x100/0x190 [ 1332.170508][T29827] should_fail_ex.cold+0x5/0xa [ 1332.170545][T29827] _copy_from_user+0x2e/0xd0 [ 1332.170587][T29827] copy_msghdr_from_user+0x9f/0x4c0 [ 1332.170629][T29827] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1332.170672][T29827] ? rcu_is_watching+0x13/0xc0 [ 1332.170707][T29827] ? ___sys_recvmsg+0x177/0x1a0 [ 1332.170741][T29827] ? kfree+0x1e5/0x6d0 [ 1332.170777][T29827] ___sys_recvmsg+0xdd/0x1a0 [ 1332.170815][T29827] ? __pfx____sys_recvmsg+0x10/0x10 [ 1332.170852][T29827] ? lock_acquire+0x1d1/0x380 [ 1332.170910][T29827] ? __pfx___might_resched+0x10/0x10 [ 1332.170954][T29827] do_recvmmsg+0x2f3/0x740 [ 1332.170996][T29827] ? __pfx_do_recvmmsg+0x10/0x10 [ 1332.171033][T29827] ? lock_acquire+0x1d1/0x380 [ 1332.171075][T29827] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1332.171120][T29827] ? __fget_files+0x21f/0x3d0 [ 1332.171165][T29827] __x64_sys_recvmmsg+0x22a/0x280 [ 1332.171197][T29827] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1332.171239][T29827] do_syscall_64+0x121/0x770 [ 1332.171277][T29827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1332.171305][T29827] RIP: 0033:0x7fc14b99e199 [ 1332.171327][T29827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1332.171352][T29827] RSP: 002b:00007fc14c8a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1332.171377][T29827] RAX: ffffffffffffffda RBX: 00007fc14bc25fa0 RCX: 00007fc14b99e199 [ 1332.171396][T29827] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1332.171412][T29827] RBP: 00007fc14c8a5090 R08: 0000000000000000 R09: 0000000000000000 [ 1332.171427][T29827] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000001 [ 1332.171449][T29827] R13: 00007fc14bc26038 R14: 00007fc14bc25fa0 R15: 00007ffcc8dd0d38 [ 1332.171482][T29827] [ 1334.704864][T29891] netlink: 'syz.0.2920': attribute type 11 has an invalid length. [ 1334.704898][T29891] netlink: 'syz.0.2920': attribute type 11 has an invalid length. [ 1334.704916][T29891] netlink: 'syz.0.2920': attribute type 11 has an invalid length. [ 1334.704934][T29891] netlink: 'syz.0.2920': attribute type 11 has an invalid length. [ 1340.593842][T30002] netlink: 'syz.1.2935': attribute type 11 has an invalid length. [ 1340.593874][T30002] netlink: 'syz.1.2935': attribute type 11 has an invalid length. [ 1340.593892][T30002] netlink: 'syz.1.2935': attribute type 11 has an invalid length. [ 1340.593909][T30002] netlink: 'syz.1.2935': attribute type 11 has an invalid length. [ 1348.540305][T30103] Process accounting resumed [ 1349.002879][T30136] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1350.813494][T19127] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1350.815064][T19127] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1350.816810][T19127] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1350.818902][T19127] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1350.819595][T19127] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1351.378692][T25160] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1351.904273][T25160] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1352.146568][T25160] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1352.296100][T25160] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1352.842125][T19127] Bluetooth: hci0: command tx timeout [ 1353.098179][T25160] bridge_slave_1: left allmulticast mode [ 1353.098211][T25160] bridge_slave_1: left promiscuous mode [ 1353.098453][T25160] bridge0: port 2(bridge_slave_1) entered disabled state [ 1353.124629][T25160] bridge_slave_0: left allmulticast mode [ 1353.124659][T25160] bridge_slave_0: left promiscuous mode [ 1353.124949][T25160] bridge0: port 1(bridge_slave_0) entered disabled state [ 1353.376872][T25160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1353.380452][T25160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1353.395705][T25160] bond0 (unregistering): Released all slaves [ 1353.956105][T30218] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1354.107389][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1354.931964][T19127] Bluetooth: hci0: command tx timeout [ 1355.641591][T30167] bridge0: port 1(bridge_slave_0) entered blocking state [ 1355.643263][T30167] bridge0: port 1(bridge_slave_0) entered disabled state [ 1355.643435][T30167] bridge_slave_0: entered allmulticast mode [ 1355.655326][T30167] bridge_slave_0: entered promiscuous mode [ 1355.678178][T30167] bridge0: port 2(bridge_slave_1) entered blocking state [ 1355.682245][T30167] bridge0: port 2(bridge_slave_1) entered disabled state [ 1355.682462][T30167] bridge_slave_1: entered allmulticast mode [ 1355.694939][T30167] bridge_slave_1: entered promiscuous mode [ 1356.118702][T30167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1356.138685][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1356.223330][T30167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1356.346444][T25160] hsr_slave_0: left promiscuous mode [ 1356.346925][T25160] hsr_slave_1: left promiscuous mode [ 1356.347465][T25160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1356.347481][T25160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1356.348077][T25160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1356.348094][T25160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1356.364923][T25160] veth1_macvtap: left promiscuous mode [ 1356.364968][T25160] veth0_macvtap: left promiscuous mode [ 1356.366578][T25160] veth1_vlan: left promiscuous mode [ 1356.366666][T25160] veth0_vlan: left promiscuous mode [ 1356.583118][T25160] team0 (unregistering): Port device team_slave_1 removed [ 1356.602738][T25160] team0 (unregistering): Port device team_slave_0 removed [ 1356.768010][T30167] team0: Port device team_slave_0 added [ 1356.771044][T30167] team0: Port device team_slave_1 added [ 1356.844506][T30167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1356.844527][T30167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1356.844559][T30167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1356.850461][T30167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1356.850481][T30167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1356.850510][T30167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1357.001669][T19127] Bluetooth: hci0: command tx timeout [ 1357.030735][T30167] hsr_slave_0: entered promiscuous mode [ 1357.033664][T30167] hsr_slave_1: entered promiscuous mode [ 1358.348118][ T5288] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1359.094195][T19127] Bluetooth: hci0: command tx timeout [ 1360.299574][T30167] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1360.313947][T30167] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1360.484753][T30167] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1360.501653][T30167] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1360.784389][T30167] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1360.790959][T30167] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1360.866060][T30167] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1360.873672][T30167] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1361.646813][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.646878][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.196474][T30167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1363.774744][T30167] 8021q: adding VLAN 0 to HW filter on device team0 [ 1363.850716][T25160] bridge0: port 1(bridge_slave_0) entered blocking state [ 1363.850839][T25160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1364.171863][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 1364.171980][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1366.631871][T30167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1367.709972][T30167] veth0_vlan: entered promiscuous mode [ 1368.159259][T30167] veth1_vlan: entered promiscuous mode [ 1368.235353][T30167] veth0_macvtap: entered promiscuous mode [ 1368.240548][T30167] veth1_macvtap: entered promiscuous mode [ 1368.297876][T30167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1368.314155][T30167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1368.340790][T25160] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.340980][T25160] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.404751][ T3295] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.497657][T25160] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1369.051837][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1369.051868][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1369.656718][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1369.656742][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1372.811617][T30604] netlink: 'syz.2.2993': attribute type 11 has an invalid length. [ 1372.811648][T30604] netlink: 'syz.2.2993': attribute type 11 has an invalid length. [ 1372.811664][T30604] netlink: 'syz.2.2993': attribute type 11 has an invalid length. [ 1372.811679][T30604] netlink: 'syz.2.2993': attribute type 11 has an invalid length. [ 1380.161942][T30698] Process accounting paused [ 1382.090306][T30739] blktrace: Concurrent blktraces are not allowed on nbd5 [ 1382.802644][T30767] netlink: 'syz.0.3017': attribute type 11 has an invalid length. [ 1382.802665][T30767] netlink: 'syz.0.3017': attribute type 11 has an invalid length. [ 1382.802674][T30767] netlink: 'syz.0.3017': attribute type 11 has an invalid length. [ 1382.802687][T30767] netlink: 'syz.0.3017': attribute type 11 has an invalid length. [ 1384.211506][T19127] Bluetooth: hci4: command 0x0406 tx timeout [ 1396.572368][T30967] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1400.096632][T31043] netlink: 'syz.1.3054': attribute type 11 has an invalid length. [ 1400.096667][T31043] netlink: 'syz.1.3054': attribute type 11 has an invalid length. [ 1400.096685][T31043] netlink: 'syz.1.3054': attribute type 11 has an invalid length. [ 1400.096703][T31043] netlink: 'syz.1.3054': attribute type 11 has an invalid length. [ 1401.719754][T31061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3057'. [ 1404.493518][T31109] FAULT_INJECTION: forcing a failure. [ 1404.493518][T31109] name failslab, interval 1, probability 0, space 0, times 0 [ 1404.493558][T31109] CPU: 1 UID: 0 PID: 31109 Comm: syz.1.3064 Not tainted syzkaller #0 PREEMPT(full) [ 1404.493589][T31109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1404.493606][T31109] Call Trace: [ 1404.493614][T31109] [ 1404.493625][T31109] dump_stack_lvl+0x100/0x190 [ 1404.493670][T31109] should_fail_ex.cold+0x5/0xa [ 1404.493707][T31109] should_failslab+0xc2/0x120 [ 1404.493750][T31109] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 1404.493789][T31109] ? shmem_alloc_inode+0x25/0x50 [ 1404.493827][T31109] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 1404.493865][T31109] shmem_alloc_inode+0x25/0x50 [ 1404.493899][T31109] alloc_inode+0x68/0x250 [ 1404.493928][T31109] new_inode+0x22/0x1c0 [ 1404.493961][T31109] shmem_get_inode+0x1e3/0xf70 [ 1404.494003][T31109] ? __pfx_shmem_get_inode+0x10/0x10 [ 1404.494042][T31109] ? do_raw_spin_unlock+0x145/0x1e0 [ 1404.494074][T31109] ? _raw_spin_unlock+0x28/0x50 [ 1404.494110][T31109] shmem_mknod+0x217/0x480 [ 1404.494152][T31109] ? __pfx_shmem_mknod+0x10/0x10 [ 1404.494187][T31109] ? bpf_lsm_inode_create+0x9/0x10 [ 1404.494234][T31109] ? __pfx_shmem_create+0x10/0x10 [ 1404.494270][T31109] lookup_open+0x1255/0x1990 [ 1404.494317][T31109] path_openat+0xa2c/0x2440 [ 1404.494361][T31109] ? __pfx_path_openat+0x10/0x10 [ 1404.494409][T31109] do_file_open+0x20e/0x430 [ 1404.494450][T31109] ? __pfx_do_file_open+0x10/0x10 [ 1404.494521][T31109] ? _raw_spin_unlock+0x28/0x50 [ 1404.494551][T31109] ? alloc_fd+0x471/0x7a0 [ 1404.494597][T31109] do_sys_openat2+0x10f/0x1e0 [ 1404.494626][T31109] ? __pfx_do_sys_openat2+0x10/0x10 [ 1404.494654][T31109] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1404.494693][T31109] ? __fget_files+0x21f/0x3d0 [ 1404.494735][T31109] __x64_sys_openat+0x12d/0x210 [ 1404.494762][T31109] ? __pfx___x64_sys_openat+0x10/0x10 [ 1404.494786][T31109] ? ksys_write+0x1ac/0x250 [ 1404.494830][T31109] do_syscall_64+0x121/0x770 [ 1404.494868][T31109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1404.494894][T31109] RIP: 0033:0x7fbd7b99e199 [ 1404.494918][T31109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1404.494943][T31109] RSP: 002b:00007fbd7c7cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1404.494970][T31109] RAX: ffffffffffffffda RBX: 00007fbd7bc26180 RCX: 00007fbd7b99e199 [ 1404.494987][T31109] RDX: 0000000000020342 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 1404.495004][T31109] RBP: 00007fbd7c7cf090 R08: 0000000000000000 R09: 0000000000000000 [ 1404.495020][T31109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1404.495037][T31109] R13: 00007fbd7bc26218 R14: 00007fbd7bc26180 R15: 00007ffc732410d8 [ 1404.495073][T31109] [ 1410.516629][T31176] Process accounting resumed [ 1420.041653][T26789] Bluetooth: hci3: command 0x0406 tx timeout [ 1423.085637][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.085705][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1430.862773][T31578] netlink: 'syz.0.3122': attribute type 11 has an invalid length. [ 1430.862807][T31578] netlink: 'syz.0.3122': attribute type 11 has an invalid length. [ 1430.862825][T31578] netlink: 'syz.0.3122': attribute type 11 has an invalid length. [ 1430.862842][T31578] netlink: 'syz.0.3122': attribute type 11 has an invalid length. [ 1438.828960][T31716] sctp: [Deprecated]: syz.3.3141 (pid 31716) Use of int in maxseg socket option. [ 1438.828960][T31716] Use struct sctp_assoc_value instead [ 1440.988540][T31722] Process accounting paused [ 1456.568069][T32040] netlink: 'syz.2.3180': attribute type 11 has an invalid length. [ 1456.568098][T32040] netlink: 'syz.2.3180': attribute type 11 has an invalid length. [ 1456.568115][T32040] netlink: 'syz.2.3180': attribute type 11 has an invalid length. [ 1456.568130][T32040] netlink: 'syz.2.3180': attribute type 11 has an invalid length. [ 1459.796311][T32101] netlink: 'syz.3.3187': attribute type 11 has an invalid length. [ 1459.796343][T32101] netlink: 'syz.3.3187': attribute type 11 has an invalid length. [ 1459.796359][T32101] netlink: 'syz.3.3187': attribute type 11 has an invalid length. [ 1459.799310][T32101] netlink: 'syz.3.3187': attribute type 11 has an invalid length. [ 1465.795559][T32202] netlink: 'syz.0.3199': attribute type 11 has an invalid length. [ 1465.795602][T32202] netlink: 'syz.0.3199': attribute type 11 has an invalid length. [ 1465.795619][T32202] netlink: 'syz.0.3199': attribute type 11 has an invalid length. [ 1465.795636][T32202] netlink: 'syz.0.3199': attribute type 11 has an invalid length. [ 1472.344647][T32281] Process accounting resumed [ 1472.552441][T32303] netlink: 'syz.1.3212': attribute type 11 has an invalid length. [ 1472.552474][T32303] netlink: 'syz.1.3212': attribute type 11 has an invalid length. [ 1472.552492][T32303] netlink: 'syz.1.3212': attribute type 11 has an invalid length. [ 1472.552509][T32303] netlink: 'syz.1.3212': attribute type 11 has an invalid length. [ 1476.362674][T32321] Bluetooth: hci0: command 0x0406 tx timeout [ 1478.567309][T32414] netlink: 'syz.1.3226': attribute type 11 has an invalid length. [ 1478.567342][T32414] netlink: 'syz.1.3226': attribute type 11 has an invalid length. [ 1478.567360][T32414] netlink: 'syz.1.3226': attribute type 11 has an invalid length. [ 1478.567378][T32414] netlink: 'syz.1.3226': attribute type 11 has an invalid length. [ 1482.280739][T32469] blktrace: Concurrent blktraces are not allowed on nbd5 [ 1484.297924][T32501] netlink: 'syz.0.3239': attribute type 11 has an invalid length. [ 1484.297953][T32501] netlink: 'syz.0.3239': attribute type 11 has an invalid length. [ 1484.297971][T32501] netlink: 'syz.0.3239': attribute type 11 has an invalid length. [ 1484.297986][T32501] netlink: 'syz.0.3239': attribute type 11 has an invalid length. [ 1484.527510][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.527580][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1490.528927][T32618] netlink: 'syz.1.3252': attribute type 11 has an invalid length. [ 1490.528959][T32618] netlink: 'syz.1.3252': attribute type 11 has an invalid length. [ 1490.528975][T32618] netlink: 'syz.1.3252': attribute type 11 has an invalid length. [ 1490.529023][T32618] netlink: 'syz.1.3252': attribute type 11 has an invalid length. [ 1498.705511][T32745] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 1502.235899][ T364] FAULT_INJECTION: forcing a failure. [ 1502.235899][ T364] name failslab, interval 1, probability 0, space 0, times 0 [ 1502.235941][ T364] CPU: 0 UID: 0 PID: 364 Comm: syz.2.3283 Not tainted syzkaller #0 PREEMPT(full) [ 1502.235973][ T364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1502.235990][ T364] Call Trace: [ 1502.235999][ T364] [ 1502.236010][ T364] dump_stack_lvl+0x100/0x190 [ 1502.236055][ T364] should_fail_ex.cold+0x5/0xa [ 1502.236094][ T364] should_failslab+0xc2/0x120 [ 1502.236136][ T364] __kmalloc_cache_noprof+0x91/0x6d0 [ 1502.236171][ T364] ? kvm_dev_ioctl+0xb48/0x1b50 [ 1502.236215][ T364] kvm_dev_ioctl+0xb48/0x1b50 [ 1502.236257][ T364] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1502.236291][ T364] ? __fget_files+0x21f/0x3d0 [ 1502.236336][ T364] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1502.236368][ T364] __x64_sys_ioctl+0x18e/0x210 [ 1502.236402][ T364] do_syscall_64+0x121/0x770 [ 1502.236444][ T364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1502.236473][ T364] RIP: 0033:0x7fef3cb9e199 [ 1502.236496][ T364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1502.236523][ T364] RSP: 002b:00007fef3d98d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1502.236550][ T364] RAX: ffffffffffffffda RBX: 00007fef3ce26450 RCX: 00007fef3cb9e199 [ 1502.236569][ T364] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000006 [ 1502.236586][ T364] RBP: 00007fef3d98d090 R08: 0000000000000000 R09: 0000000000000000 [ 1502.236603][ T364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1502.236620][ T364] R13: 00007fef3ce264e8 R14: 00007fef3ce26450 R15: 00007fff2bc92d38 [ 1502.236658][ T364] [ 1503.848536][ T367] Process accounting paused [ 1506.136715][ T448] netlink: 'syz.1.3294': attribute type 11 has an invalid length. [ 1506.136751][ T448] netlink: 'syz.1.3294': attribute type 11 has an invalid length. [ 1506.136768][ T448] netlink: 'syz.1.3294': attribute type 11 has an invalid length. [ 1506.136785][ T448] netlink: 'syz.1.3294': attribute type 11 has an invalid length. [ 1508.387181][ T482] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[30167] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[482] [ 1520.744127][ T691] FAULT_INJECTION: forcing a failure. [ 1520.744127][ T691] name failslab, interval 1, probability 0, space 0, times 0 [ 1520.744168][ T691] CPU: 0 UID: 0 PID: 691 Comm: syz.2.3329 Not tainted syzkaller #0 PREEMPT(full) [ 1520.744200][ T691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1520.744217][ T691] Call Trace: [ 1520.744226][ T691] [ 1520.744237][ T691] dump_stack_lvl+0x100/0x190 [ 1520.744280][ T691] should_fail_ex.cold+0x5/0xa [ 1520.744316][ T691] should_failslab+0xc2/0x120 [ 1520.744354][ T691] __kmalloc_noprof+0xfc/0x840 [ 1520.744386][ T691] ? __pfx_dynamic_dname+0x10/0x10 [ 1520.744414][ T691] ? tomoyo_encode2+0xfb/0x3c0 [ 1520.744456][ T691] tomoyo_encode2+0xfb/0x3c0 [ 1520.744493][ T691] tomoyo_encode+0x29/0x50 [ 1520.744524][ T691] tomoyo_realpath_from_path+0x18c/0x690 [ 1520.744566][ T691] tomoyo_path_number_perm+0x23c/0x580 [ 1520.744594][ T691] ? tomoyo_path_number_perm+0x22e/0x580 [ 1520.744624][ T691] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1520.744668][ T691] ? __lock_acquire+0x5c0/0x1f40 [ 1520.744726][ T691] ? __fget_files+0x34/0x3d0 [ 1520.744760][ T691] ? find_held_lock+0x2b/0x80 [ 1520.744790][ T691] ? hook_file_ioctl_common+0x140/0x440 [ 1520.744839][ T691] ? __fget_files+0x21f/0x3d0 [ 1520.744878][ T691] security_file_ioctl+0xd3/0x230 [ 1520.744909][ T691] __x64_sys_ioctl+0xb7/0x210 [ 1520.744941][ T691] do_syscall_64+0x121/0x770 [ 1520.744978][ T691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1520.745006][ T691] RIP: 0033:0x7fef3cb9e199 [ 1520.745032][ T691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1520.745057][ T691] RSP: 002b:00007fef3da32028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1520.745083][ T691] RAX: ffffffffffffffda RBX: 00007fef3ce25fa0 RCX: 00007fef3cb9e199 [ 1520.745101][ T691] RDX: 0000000000000000 RSI: 000000004038ae7a RDI: 0000000000000003 [ 1520.745117][ T691] RBP: 00007fef3da32090 R08: 0000000000000000 R09: 0000000000000000 [ 1520.745133][ T691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1520.745149][ T691] R13: 00007fef3ce26038 R14: 00007fef3ce25fa0 R15: 00007fff2bc92d38 [ 1520.745185][ T691] [ 1520.748602][ T691] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1529.089467][ T829] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1529.089597][ T829] vhci_hcd vhci_hcd.2: invalid port number 0 [ 1529.110903][ T829] netlink: 330 bytes leftover after parsing attributes in process `syz.0.3347'. [ 1529.256741][ T835] hub 1-0:1.0: USB hub found [ 1529.256966][ T835] hub 1-0:1.0: 1 port detected [ 1534.258209][ T899] Process accounting resumed [ 1534.791159][ T955] netlink: 'syz.3.3357': attribute type 11 has an invalid length. [ 1534.791192][ T955] netlink: 'syz.3.3357': attribute type 11 has an invalid length. [ 1534.791209][ T955] netlink: 'syz.3.3357': attribute type 11 has an invalid length. [ 1534.791225][ T955] netlink: 'syz.3.3357': attribute type 11 has an invalid length. [ 1534.910281][ T963] netlink: 'syz.2.3360': attribute type 11 has an invalid length. [ 1534.910319][ T963] netlink: 'syz.2.3360': attribute type 11 has an invalid length. [ 1534.910336][ T963] netlink: 'syz.2.3360': attribute type 11 has an invalid length. [ 1534.910352][ T963] netlink: 'syz.2.3360': attribute type 11 has an invalid length. [ 1540.676224][ T1074] netlink: 'syz.2.3372': attribute type 11 has an invalid length. [ 1540.676253][ T1074] netlink: 'syz.2.3372': attribute type 11 has an invalid length. [ 1540.676270][ T1074] netlink: 'syz.2.3372': attribute type 11 has an invalid length. [ 1540.676286][ T1074] netlink: 'syz.2.3372': attribute type 11 has an invalid length. [ 1545.967374][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.967442][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1564.705783][ T1452] Process accounting paused [ 1565.214494][ T1502] hub 1-0:1.0: USB hub found [ 1565.218579][ T1502] hub 1-0:1.0: 1 port detected [ 1569.168155][ T1564] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1569.168188][ T1564] vhci_hcd vhci_hcd.2: invalid port number 0 [ 1570.677807][ T1591] netlink: 'syz.3.3442': attribute type 11 has an invalid length. [ 1570.677843][ T1591] netlink: 'syz.3.3442': attribute type 11 has an invalid length. [ 1570.677860][ T1591] netlink: 'syz.3.3442': attribute type 11 has an invalid length. [ 1570.677892][ T1591] netlink: 'syz.3.3442': attribute type 11 has an invalid length. [ 1574.858771][ T1654] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1574.858939][ T1654] vhci_hcd vhci_hcd.2: invalid port number 0 [ 1577.811475][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c2!!! [ 1578.309876][ T1715] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1578.309927][ T1715] vhci_hcd vhci_hcd.2: invalid port number 0 [ 1578.359583][ T1715] netlink: 330 bytes leftover after parsing attributes in process `syz.2.3459'. [ 1578.858030][ T1737] netlink: 'syz.1.3460': attribute type 11 has an invalid length. [ 1578.858060][ T1737] netlink: 'syz.1.3460': attribute type 11 has an invalid length. [ 1578.858078][ T1737] netlink: 'syz.1.3460': attribute type 11 has an invalid length. [ 1578.858094][ T1737] netlink: 'syz.1.3460': attribute type 11 has an invalid length. [ 1586.346333][ T1855] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1586.346385][ T1855] vhci_hcd vhci_hcd.2: invalid port number 0 [ 1589.153064][ T1919] futex_wake_op: syz.2.3484 tries to shift op by -2048; fix this program [ 1589.280944][ T1915] 0x000000000001-0x000000020000 : "" [ 1589.338912][ T1915] ftl_cs: FTL header corrupt! [ 1590.566661][ T1933] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1590.566709][ T1933] vhci_hcd vhci_hcd.2: invalid port number 0 [ 1596.026184][ T2010] Process accounting resumed [ 1607.406797][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.406867][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.318196][ T2227] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3523'. [ 1608.354962][ T2227] bond0: (slave bond_slave_0): Releasing backup interface [ 1610.337291][ T2264] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1610.337349][ T2264] vhci_hcd vhci_hcd.2: invalid port number 0 [ 1615.132348][ T2342] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1615.132398][ T2342] vhci_hcd vhci_hcd.2: invalid port number 0 [ 1621.441690][ T2449] netlink: 'syz.1.3550': attribute type 11 has an invalid length. [ 1621.441722][ T2449] netlink: 'syz.1.3550': attribute type 11 has an invalid length. [ 1621.441740][ T2449] netlink: 'syz.1.3550': attribute type 11 has an invalid length. [ 1621.441758][ T2449] netlink: 'syz.1.3550': attribute type 11 has an invalid length. [ 1626.728076][ T2534] Process accounting paused [ 1629.277057][ T2614] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1629.277090][ T2614] vhci_hcd vhci_hcd.2: invalid port number 0 [ 1629.298539][ T2614] netlink: 330 bytes leftover after parsing attributes in process `syz.3.3571'. [ 1633.216186][ T2707] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1633.216242][ T2707] vhci_hcd vhci_hcd.2: invalid port number 0 [ 1633.219011][ T2707] netlink: 330 bytes leftover after parsing attributes in process `syz.0.3581'. [ 1633.623025][ T2725] kafs: addr_prefs: Invalid Command [ 1637.124534][ T2787] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1637.124580][ T2787] vhci_hcd vhci_hcd.2: invalid port number 0 [ 1645.117562][ T2958] raw_sendmsg: syz.1.3606 forgot to set AF_INET. Fix it! [ 1648.476809][ T3013] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1648.476840][ T3013] vhci_hcd vhci_hcd.2: invalid port number 0 [ 1648.627568][ T3000] netlink: 'syz.0.3614': attribute type 11 has an invalid length. [ 1648.627589][ T3000] netlink: 'syz.0.3614': attribute type 11 has an invalid length. [ 1648.627599][ T3000] netlink: 'syz.0.3614': attribute type 11 has an invalid length. [ 1648.627608][ T3000] netlink: 'syz.0.3614': attribute type 11 has an invalid length. [ 1657.023094][ T3137] Process accounting resumed [ 1668.845592][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.846344][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1670.000993][ T3399] kafs: addr_prefs: Invalid Command [ 1677.880283][ T3516] netlink: 330 bytes leftover after parsing attributes in process `syz.2.3679'. [ 1680.456034][ T31] audit: type=1800 audit(1791399618.381:2): pid=3563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3684" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 1687.232979][ T3647] Process accounting paused [ 1691.934304][ T3747] FAULT_INJECTION: forcing a failure. [ 1691.934304][ T3747] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1691.934334][ T3747] CPU: 0 UID: 0 PID: 3747 Comm: syz.3.3707 Tainted: G L syzkaller #0 PREEMPT(full) [ 1691.934355][ T3747] Tainted: [L]=SOFTLOCKUP [ 1691.934360][ T3747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1691.934369][ T3747] Call Trace: [ 1691.934374][ T3747] [ 1691.934380][ T3747] dump_stack_lvl+0x100/0x190 [ 1691.934408][ T3747] should_fail_ex.cold+0x5/0xa [ 1691.934429][ T3747] _copy_from_user+0x2e/0xd0 [ 1691.934453][ T3747] generic_map_update_batch+0x4b8/0x860 [ 1691.934541][ T3747] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1691.934562][ T3747] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1691.934579][ T3747] bpf_map_do_batch+0x66f/0x6d0 [ 1691.934603][ T3747] __sys_bpf+0x4ce/0x4a30 [ 1691.934624][ T3747] ? __pfx___sys_bpf+0x10/0x10 [ 1691.934640][ T3747] ? find_held_lock+0x2b/0x80 [ 1691.934658][ T3747] ? get_pid_task+0xfc/0x250 [ 1691.934673][ T3747] ? get_pid_task+0xfc/0x250 [ 1691.934694][ T3747] ? find_held_lock+0x2b/0x80 [ 1691.934714][ T3747] ? rcu_read_lock_any_held+0x6a/0x90 [ 1691.934733][ T3747] ? find_held_lock+0x2b/0x80 [ 1691.934748][ T3747] ? ksys_write+0x190/0x250 [ 1691.934767][ T3747] ? ksys_write+0x190/0x250 [ 1691.934784][ T3747] ? lock_acquire+0x1d1/0x380 [ 1691.934819][ T3747] ? fput+0x7c/0x100 [ 1691.934838][ T3747] ? ksys_write+0x1ac/0x250 [ 1691.934857][ T3747] ? __x64_sys_bpf+0xce/0x140 [ 1691.934872][ T3747] __x64_sys_bpf+0xce/0x140 [ 1691.934890][ T3747] ? do_syscall_64+0xae/0x770 [ 1691.934911][ T3747] do_syscall_64+0x121/0x770 [ 1691.934930][ T3747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1691.934946][ T3747] RIP: 0033:0x7f06cdd9e199 [ 1691.934958][ T3747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1691.934972][ T3747] RSP: 002b:00007f06cbfd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1691.934988][ T3747] RAX: ffffffffffffffda RBX: 00007f06ce026180 RCX: 00007f06cdd9e199 [ 1691.934997][ T3747] RDX: 0000000000000081 RSI: 0000200000000380 RDI: 000000000000001a [ 1691.935006][ T3747] RBP: 00007f06cbfd5090 R08: 0000000000000000 R09: 0000000000000000 [ 1691.935015][ T3747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1691.935023][ T3747] R13: 00007f06ce026218 R14: 00007f06ce026180 R15: 00007ffc0b8d7928 [ 1691.935052][ T3747] [ 1696.175030][T32321] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1696.192589][T32321] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1696.193915][T32321] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1696.195156][T32321] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1696.195867][T32321] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1697.126439][T25160] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1697.274495][T25160] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1697.428037][T25160] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1697.595745][T25160] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1698.282058][T19127] Bluetooth: hci1: command tx timeout [ 1698.937710][ T3800] bridge0: port 1(bridge_slave_0) entered blocking state [ 1698.937780][ T3800] bridge0: port 1(bridge_slave_0) entered disabled state [ 1698.937889][ T3800] bridge_slave_0: entered allmulticast mode [ 1698.938964][ T3800] bridge_slave_0: entered promiscuous mode [ 1698.952997][ T3800] bridge0: port 2(bridge_slave_1) entered blocking state [ 1698.953105][ T3800] bridge0: port 2(bridge_slave_1) entered disabled state [ 1698.953232][ T3800] bridge_slave_1: entered allmulticast mode [ 1698.955005][ T3800] bridge_slave_1: entered promiscuous mode [ 1699.016130][T25160] bridge_slave_1: left allmulticast mode [ 1699.016161][T25160] bridge_slave_1: left promiscuous mode [ 1699.016369][T25160] bridge0: port 2(bridge_slave_1) entered disabled state [ 1699.032147][T25160] bridge_slave_0: left allmulticast mode [ 1699.032178][T25160] bridge_slave_0: left promiscuous mode [ 1699.032391][T25160] bridge0: port 1(bridge_slave_0) entered disabled state [ 1699.276177][T25160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1699.278104][T25160] bond0 (unregistering): Released all slaves [ 1699.367589][ T3800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1699.379423][ T3800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1699.604158][ T3800] team0: Port device team_slave_0 added [ 1699.607563][ T3800] team0: Port device team_slave_1 added [ 1699.680679][ T3800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1699.680701][ T3800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1699.680730][ T3800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1699.695786][ T3800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1699.695808][ T3800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1699.695838][ T3800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1699.768464][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1699.987630][ T3800] hsr_slave_0: entered promiscuous mode [ 1699.988728][ T3800] hsr_slave_1: entered promiscuous mode [ 1699.989463][ T3800] debugfs: 'hsr0' already exists in 'hsr' [ 1699.989486][ T3800] Cannot create hsr debugfs directory [ 1700.361664][T19127] Bluetooth: hci1: command tx timeout [ 1701.085314][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1702.441637][T19127] Bluetooth: hci1: command tx timeout [ 1703.623455][T25160] hsr_slave_0: left promiscuous mode [ 1703.625802][T25160] hsr_slave_1: left promiscuous mode [ 1703.626717][T25160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1703.626741][T25160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1703.627659][T25160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1703.627679][T25160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1703.674570][T25160] veth0_macvtap: left promiscuous mode [ 1703.680390][T25160] veth1_vlan: left promiscuous mode [ 1703.680475][T25160] veth0_vlan: left promiscuous mode [ 1704.022156][T25160] team0 (unregistering): Port device team_slave_1 removed [ 1704.055716][T25160] team0 (unregistering): Port device team_slave_0 removed [ 1704.251331][ T3800] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1704.279738][ T3800] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1704.281353][ T3800] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1704.321200][ T3800] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1704.360007][ T3800] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1704.392869][ T3800] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1704.396718][ T3800] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1704.425731][ T3800] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1704.521683][T19127] Bluetooth: hci1: command tx timeout [ 1707.312717][ T3800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1707.561389][ T3800] 8021q: adding VLAN 0 to HW filter on device team0 [ 1707.782817][ T3295] bridge0: port 1(bridge_slave_0) entered blocking state [ 1707.782932][ T3295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1707.862702][ T3295] bridge0: port 2(bridge_slave_1) entered blocking state [ 1707.862771][ T3295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1711.150029][ T3800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1712.180642][ T3800] veth0_vlan: entered promiscuous mode [ 1712.196962][ T3800] veth1_vlan: entered promiscuous mode [ 1712.279962][ T3800] veth0_macvtap: entered promiscuous mode [ 1712.292132][ T3800] veth1_macvtap: entered promiscuous mode [ 1712.332068][ T3800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1712.344768][ T3800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1712.382585][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1712.382641][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1712.382685][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1712.382729][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1712.574626][ T4111] cougar: G6 mapped to F18 [ 1712.903124][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1712.903150][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1713.160110][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1713.160137][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1722.945694][ T4273] tipc: can't start tipc receive workqueue [ 1730.285893][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.285958][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1780.184563][ T5291] blktrace: Concurrent blktraces are not allowed on nbd5 [ 1791.726458][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.726498][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1794.096878][ T5558] blktrace: Concurrent blktraces are not allowed on nbd5 [ 1819.409629][T19127] Bluetooth: hci1: command 0x0406 tx timeout [ 1822.503051][ T6042] blktrace: Concurrent blktraces are not allowed on nbd5 [ 1836.909367][ T6303] blktrace: Concurrent blktraces are not allowed on nbd5 [ 1853.167219][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.167286][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1881.275544][ T7076] blktrace: Concurrent blktraces are not allowed on nbd5 [ 1914.604012][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.604079][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1933.771291][ T7935] blktrace: Concurrent blktraces are not allowed on nbd5 [ 1976.043599][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.043667][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1984.448881][T32321] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 1989.004910][ T8891] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 2014.645468][ T9335] blktrace: Concurrent blktraces are not allowed on nbd5 [ 2037.483756][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.483824][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 2093.380317][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2093.502107][T19127] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2093.509626][T19127] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2093.510841][T19127] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2093.536083][T19127] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2093.544314][T19127] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2093.762583][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2093.889494][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2094.322430][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2095.437004][ T12] bridge_slave_1: left allmulticast mode [ 2095.437037][ T12] bridge_slave_1: left promiscuous mode [ 2095.437260][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 2095.465912][ T12] bridge_slave_0: left allmulticast mode [ 2095.465941][ T12] bridge_slave_0: left promiscuous mode [ 2095.466178][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 2095.642388][T32321] Bluetooth: hci2: command tx timeout [ 2095.935397][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2095.937573][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2095.938789][ T12] bond0 (unregistering): Released all slaves [ 2096.139761][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 2096.620420][ T12] hsr_slave_0: left promiscuous mode [ 2096.627938][ T12] hsr_slave_1: left promiscuous mode [ 2096.628883][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2096.628906][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2096.643281][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2096.643306][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2096.690001][ T12] veth1_macvtap: left promiscuous mode [ 2096.690031][ T12] veth0_macvtap: left promiscuous mode [ 2096.690105][ T12] veth1_vlan: left promiscuous mode [ 2096.690147][ T12] veth0_vlan: left promiscuous mode [ 2097.273685][ T12] team0 (unregistering): Port device team_slave_1 removed [ 2097.297960][ T12] team0 (unregistering): Port device team_slave_0 removed [ 2097.597114][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 2097.721642][T32321] Bluetooth: hci2: command tx timeout [ 2097.919612][T10710] bridge0: port 1(bridge_slave_0) entered blocking state [ 2097.919828][T10710] bridge0: port 1(bridge_slave_0) entered disabled state [ 2097.919960][T10710] bridge_slave_0: entered allmulticast mode [ 2097.922999][T10710] bridge_slave_0: entered promiscuous mode [ 2098.101550][T10710] bridge0: port 2(bridge_slave_1) entered blocking state [ 2098.101664][T10710] bridge0: port 2(bridge_slave_1) entered disabled state [ 2098.101826][T10710] bridge_slave_1: entered allmulticast mode [ 2098.103928][T10710] bridge_slave_1: entered promiscuous mode [ 2098.550448][T10710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2098.929210][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.929286][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.031402][T10710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2099.253830][ T5288] 8021q: adding VLAN 0 to HW filter on device eth3 [ 2099.533600][T10710] team0: Port device team_slave_0 added [ 2099.536972][T10710] team0: Port device team_slave_1 added [ 2099.727452][T10710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2099.727473][T10710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2099.727505][T10710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2099.729654][T10710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2099.729671][T10710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2099.729700][T10710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2099.801606][T32321] Bluetooth: hci2: command tx timeout [ 2099.829091][T10710] hsr_slave_0: entered promiscuous mode [ 2099.831652][T10710] hsr_slave_1: entered promiscuous mode [ 2099.832366][T10710] debugfs: 'hsr0' already exists in 'hsr' [ 2099.832388][T10710] Cannot create hsr debugfs directory [ 2101.882486][T32321] Bluetooth: hci2: command tx timeout [ 2102.628739][T10710] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2102.646276][T10710] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2102.647277][T10710] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2102.666370][T10710] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2102.732096][T10710] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2102.736138][T10710] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2102.737071][T10710] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2102.764846][T10710] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2105.430514][T10710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2106.294974][T10710] 8021q: adding VLAN 0 to HW filter on device team0 [ 2106.312619][ T3350] bridge0: port 1(bridge_slave_0) entered blocking state [ 2106.312687][ T3350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2106.386354][ T3350] bridge0: port 2(bridge_slave_1) entered blocking state [ 2106.386467][ T3350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2108.087441][T10710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2109.659947][T10710] veth0_vlan: entered promiscuous mode [ 2109.897060][T10710] veth1_vlan: entered promiscuous mode [ 2110.388975][T10710] veth0_macvtap: entered promiscuous mode [ 2110.647390][T10710] veth1_macvtap: entered promiscuous mode [ 2111.335918][T10710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2111.870852][T10710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2112.511815][ T3350] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2112.511882][ T3350] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2112.661989][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2112.663539][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2112.973314][ T4832] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2112.973339][ T4832] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2113.528645][ T4832] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2113.528662][ T4832] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2116.885840][T11177] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 2122.687185][T11252] FAULT_INJECTION: forcing a failure. [ 2122.687185][T11252] name failslab, interval 1, probability 0, space 0, times 0 [ 2122.687232][T11252] CPU: 1 UID: 0 PID: 11252 Comm: syz.2.4676 Tainted: G L syzkaller #0 PREEMPT(full) [ 2122.687271][T11252] Tainted: [L]=SOFTLOCKUP [ 2122.687282][T11252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2122.687300][T11252] Call Trace: [ 2122.687309][T11252] [ 2122.687323][T11252] dump_stack_lvl+0x100/0x190 [ 2122.687376][T11252] should_fail_ex.cold+0x5/0xa [ 2122.687418][T11252] should_failslab+0xc2/0x120 [ 2122.687465][T11252] __kmalloc_cache_noprof+0x91/0x6d0 [ 2122.687497][T11252] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2122.687538][T11252] ? cgroup_file_open+0x90/0x470 [ 2122.687586][T11252] cgroup_file_open+0x90/0x470 [ 2122.687626][T11252] ? __pfx_cgroup_file_open+0x10/0x10 [ 2122.687668][T11252] kernfs_fop_open+0x8bb/0xd50 [ 2122.687792][T11252] do_dentry_open+0x6ab/0x14d0 [ 2122.687827][T11252] ? __pfx_kernfs_fop_open+0x10/0x10 [ 2122.687863][T11252] vfs_open+0x82/0x3f0 [ 2122.687910][T11252] path_openat+0x19fa/0x2440 [ 2122.687968][T11252] ? __pfx_path_openat+0x10/0x10 [ 2122.688018][T11252] do_file_open+0x20e/0x430 [ 2122.688061][T11252] ? __pfx_do_file_open+0x10/0x10 [ 2122.688127][T11252] ? _raw_spin_unlock+0x28/0x50 [ 2122.688158][T11252] ? alloc_fd+0x471/0x7a0 [ 2122.688207][T11252] do_sys_openat2+0x10f/0x1e0 [ 2122.688236][T11252] ? __pfx_do_sys_openat2+0x10/0x10 [ 2122.688266][T11252] ? __fget_files+0x21f/0x3d0 [ 2122.688308][T11252] __x64_sys_openat+0x12d/0x210 [ 2122.688335][T11252] ? __pfx___x64_sys_openat+0x10/0x10 [ 2122.688379][T11252] do_syscall_64+0x121/0x770 [ 2122.688419][T11252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2122.688450][T11252] RIP: 0033:0x7fef3cb9e199 [ 2122.688475][T11252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2122.688503][T11252] RSP: 002b:00007fef3da11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2122.688531][T11252] RAX: ffffffffffffffda RBX: 00007fef3ce26090 RCX: 00007fef3cb9e199 [ 2122.688551][T11252] RDX: 0000000000080200 RSI: 0000200000000840 RDI: ffffffffffffff9c [ 2122.688570][T11252] RBP: 00007fef3cc358e0 R08: 0000000000000000 R09: 0000000000000000 [ 2122.688588][T11252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2122.688606][T11252] R13: 00007fef3ce26128 R14: 00007fef3ce26090 R15: 00007fff2bc92d38 [ 2122.688645][T11252] [ 2126.470182][T11322] blktrace: Concurrent blktraces are not allowed on nbd5 [ 2156.748828][T11838] Process accounting resumed [ 2159.017601][T11904] FAULT_INJECTION: forcing a failure. [ 2159.017601][T11904] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2159.017642][T11904] CPU: 1 UID: 0 PID: 11904 Comm: syz.2.4765 Tainted: G L syzkaller #0 PREEMPT(full) [ 2159.017680][T11904] Tainted: [L]=SOFTLOCKUP [ 2159.017690][T11904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2159.017706][T11904] Call Trace: [ 2159.017714][T11904] [ 2159.017724][T11904] dump_stack_lvl+0x100/0x190 [ 2159.017768][T11904] should_fail_ex.cold+0x5/0xa [ 2159.017805][T11904] _copy_to_user+0x32/0xd0 [ 2159.017849][T11904] simple_read_from_buffer+0xcb/0x170 [ 2159.017889][T11904] proc_fail_nth_read+0x1af/0x230 [ 2159.017925][T11904] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2159.017960][T11904] ? rw_verify_area+0xce/0x6d0 [ 2159.017990][T11904] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2159.018022][T11904] vfs_read+0x1e4/0xb40 [ 2159.018054][T11904] ? lock_acquire+0x1d1/0x380 [ 2159.018093][T11904] ? __fget_files+0x34/0x3d0 [ 2159.018127][T11904] ? __pfx_vfs_read+0x10/0x10 [ 2159.018156][T11904] ? find_held_lock+0x2b/0x80 [ 2159.018188][T11904] ? __fget_files+0x215/0x3d0 [ 2159.018228][T11904] ? __fget_files+0x21f/0x3d0 [ 2159.018273][T11904] ksys_read+0x12a/0x250 [ 2159.018305][T11904] ? __pfx_ksys_read+0x10/0x10 [ 2159.018345][T11904] do_syscall_64+0x121/0x770 [ 2159.018390][T11904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2159.018420][T11904] RIP: 0033:0x7fef3cb5e9ce [ 2159.018440][T11904] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2159.018473][T11904] RSP: 002b:00007fef3d98cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2159.018494][T11904] RAX: ffffffffffffffda RBX: 00007fef3d98d6c0 RCX: 00007fef3cb5e9ce [ 2159.018504][T11904] RDX: 000000000000000f RSI: 00007fef3d98d0a0 RDI: 0000000000000002 [ 2159.018513][T11904] RBP: 00007fef3d98d090 R08: 0000000000000000 R09: 0000000000000000 [ 2159.018521][T11904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2159.018529][T11904] R13: 00007fef3ce264e8 R14: 00007fef3ce26450 R15: 00007fff2bc92d38 [ 2159.018549][T11904] [ 2160.385294][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.385337][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.666878][T11939] BUG: unable to handle page fault for address: ffffc900167e2fe8 [ 2160.674642][T11939] #PF: supervisor write access in kernel mode [ 2160.680698][T11939] #PF: error_code(0x0002) - not-present page [ 2160.686729][T11939] PGD 13fe12067 P4D 13fe12067 PUD 1d2ca067 PMD 5ff25067 PTE 0 [ 2160.694204][T11939] Oops: Oops: 0002 [#1] SMP KASAN PTI [ 2160.699568][T11939] CPU: 1 UID: 0 PID: 11939 Comm: syz.0.4770 Tainted: G L syzkaller #0 PREEMPT(full) [ 2160.710495][T11939] Tainted: [L]=SOFTLOCKUP [ 2160.714807][T11939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2160.724864][T11939] RIP: 0010:write_comp_data+0x7c/0xa0 [ 2160.730285][T11939] Code: 00 8b bf 1c 17 00 00 48 8b 30 48 c1 e7 03 4c 8d 1c b5 00 00 00 00 4a 8d 14 dd 28 00 00 00 48 39 d7 72 1b 48 83 c6 01 48 89 30 <4c> 89 44 10 e0 4c 89 4c 10 e8 4c 89 54 10 f0 4a 89 4c d8 20 c3 cc [ 2160.749988][T11939] RSP: 0018:ffffc90004f77e80 EFLAGS: 00050257 [ 2160.756070][T11939] RAX: ffffc900167e3000 RBX: 0000000000000000 RCX: ffffffff8249a585 [ 2160.764054][T11939] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000400000 [ 2160.772011][T11939] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000002 [ 2160.781191][T11939] R10: 0000000000000001 R11: fffffffffffffffc R12: 0000000000000020 [ 2160.789158][T11939] R13: 0000000000000000 R14: 00007ffffffff000 R15: 0000000000000001 [ 2160.797124][T11939] FS: 00007fd9009966c0(0000) GS:ffff888123c52000(0000) knlGS:0000000000000000 [ 2160.806056][T11939] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2160.812632][T11939] CR2: ffffc900167e2fe8 CR3: 00000000621a4000 CR4: 00000000003526f0 [ 2160.820596][T11939] Call Trace: [ 2160.823866][T11939] [ 2160.826782][T11939] rseq_register+0x115/0x350 [ 2160.831454][T11939] __x64_sys_rseq+0x1b8/0x2e0 [ 2160.836127][T11939] do_syscall_64+0x121/0x770 [ 2160.840711][T11939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2160.846596][T11939] RIP: 0033:0x7fd8ffb9e199 [ 2160.850998][T11939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2160.870596][T11939] RSP: 002b:00007fd900996028 EFLAGS: 00000246 ORIG_RAX: 000000000000014e [ 2160.879000][T11939] RAX: ffffffffffffffda RBX: 00007fd8ffe26450 RCX: 00007fd8ffb9e199 [ 2160.886979][T11939] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000000000000000 [ 2160.894931][T11939] RBP: 00007fd8ffc358e0 R08: 0000000000000000 R09: 0000000000000000 [ 2160.902893][T11939] R10: 0000000008000006 R11: 0000000000000246 R12: 0000000000000000 [ 2160.910853][T11939] R13: 00007fd8ffe264e8 R14: 00007fd8ffe26450 R15: 00007ffec1d37578 [ 2160.918823][T11939] [ 2160.921888][T11939] Modules linked in: [ 2160.925777][T11939] CR2: ffffc900167e2fe8 [ 2160.929928][T11939] ---[ end trace 0000000000000000 ]--- [ 2160.935362][T11939] RIP: 0010:write_comp_data+0x7c/0xa0 [ 2160.935390][T11939] Code: 00 8b bf 1c 17 00 00 48 8b 30 48 c1 e7 03 4c 8d 1c b5 00 00 00 00 4a 8d 14 dd 28 00 00 00 48 39 d7 72 1b 48 83 c6 01 48 89 30 <4c> 89 44 10 e0 4c 89 4c 10 e8 4c 89 54 10 f0 4a 89 4c d8 20 c3 cc [ 2160.935405][T11939] RSP: 0018:ffffc90004f77e80 EFLAGS: 00050257 [ 2160.935417][T11939] RAX: ffffc900167e3000 RBX: 0000000000000000 RCX: ffffffff8249a585 [ 2160.935427][T11939] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000400000 [ 2160.935436][T11939] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000002 [ 2160.935445][T11939] R10: 0000000000000001 R11: fffffffffffffffc R12: 0000000000000020 [ 2160.935454][T11939] R13: 0000000000000000 R14: 00007ffffffff000 R15: 0000000000000001 [ 2160.935464][T11939] FS: 00007fd9009966c0(0000) GS:ffff888123c52000(0000) knlGS:0000000000000000 [ 2160.935479][T11939] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2160.935488][T11939] CR2: ffffc900167e2fe8 CR3: 00000000621a4000 CR4: 00000000003526f0 [ 2160.935500][T11939] Kernel panic - not syncing: Fatal exception [ 2161.035854][T11939] Kernel Offset: disabled [ 2161.040172][T11939] Rebooting in 86400 seconds..