last executing test programs: 15m22.119042465s ago: executing program 2 (id=401): openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) mmap$auto(0x0, 0x4000005, 0xfffffffffffffe01, 0x8051, 0x3, 0x10000000008000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/cpu1/power/pm_qos_resume_latency_us\x00', 0x183042, 0x0) prctl$auto(0x1000000001d, 0xffff, 0x2, 0x9, 0x1) sendfile$auto(r0, r0, 0x0, 0x3) unshare$auto(0x40000080) sync_file_range$auto(r0, 0x4, 0x6, 0xe2) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r1 = openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll$auto(&(0x7f0000000280)={r1, 0x3}, 0x2, 0x2) r2 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D1p\x00', 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_LINK(r2, 0x40044160, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x48041, 0x0) write$auto(r3, 0x0, 0x6) 15m21.384898086s ago: executing program 2 (id=405): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x88) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/workqueue/nf_ft_offload_del/nice\x00', 0x4aaa2, 0x0) mmap$auto(0x0, 0x400008, 0xdd, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) pidfd_open$auto(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001140)='/sys/devices/virtual/block/zram0/comp_algorithm\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) read$auto(0x3, 0x0, 0x1f40) 15m21.043114714s ago: executing program 2 (id=408): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x6000000, 0x200007, 0x19) 15m20.917050611s ago: executing program 2 (id=410): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x1c, 0x0, 0x301, 0x70bd2c, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4818}, 0x44040) 15m20.593968536s ago: executing program 2 (id=412): sendmsg$auto_NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="e8040000", @ANYRES16=0x0, @ANYBLOB="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"], 0x4e8}, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x84182, 0x0) mmap$auto(0x0, 0xa00006, 0x0, 0x40eb1, 0x602, 0x300000000004) r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/set_event\x00', 0x40, 0x0) mmap$auto(0x0, 0xf1e, 0xdf, 0x4000000000000eb1, 0x401, 0x4) readv$auto(r1, &(0x7f0000000a80)={0x0, 0xffff}, 0x455) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, 0x0) r3 = socket(0xa, 0x1, 0x0) mmap$auto(0x9, 0x9, 0x3ff57697, 0x9b72, r0, 0x8000000000008000) r4 = io_uring_setup$auto(0x6, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) setsockopt$auto(0x3, 0x0, 0x33, 0x0, 0x4) listen$auto(r3, 0x1) ioctl$auto_PPPIOCSPASS(r4, 0x40107447, &(0x7f00000000c0)={0xffff, &(0x7f0000000000)={0x30, 0xf0, 0xb0, @inferred=r2}}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x4000080) ioctl$auto_TIOCVHANGUP2(0xffffffffffffffff, 0x5437, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$auto(0x0, 0x0, 0x6f4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.6/usb7/power/wakeup_active_count\x00') ioctl$auto_SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f00000003c0)="f7adf898131e1c821b6e38ac714bc4e4360f442a58d6e80304615265be903438c197110e804faf48dde709fac969cbc48c13cc9f1eea748bb712e826dcf8749751faabfe04715fb50eefbffdb8f62ea71565c71871b20f6baf09632076a5420ec3bef93a13b7e34af8aabca677b06d0df5e2938d25a93b23ef0e19ee604d65ace765be251bf1739454e6b547e47e3d9ac9a74847a729b6c13775703229766e29bccc21fb21336253b81e6bb65798a8c6bedbc6d24835466482ff1e2e052dd5d8680c50d9b92e7211b67076526bf27db0a3e2bbb14162dea4a77142cad86ab0f58b8c1260b532cfd9a0aa87c1e6f1dd817f6ce403704648a5518804d5766f8a668f30a8aba1f6634fd2889ff594089c33bef806b168dcbddd8c109e92d772c0b52a9d2fdb3207b45a8cabec575b01d6b0c59a1f2339ae4fff14cc4ce017eeb21aad4f3890c5d858f2a0ddb23d0c3bb7d8054a3777b8ae96268b43cc93b6f5b45e03f682f0a69d02533dfb1b8155045733c39953f0c9566747baaa49dd60374f65537bfa71a5407b9bb2e19ac1ab757832fecd570cf5274158f50041e10a4fa74b35bc35820a92eb2b8d88da59377156d8eb9986500a4f59e368c55f6a08198271549936b39b50c69f4590c0275e2588ed131edcff2c1b45d3746795f512b99a49a7f89a35edd918ee4206617cd6aea61859b3fd1beea20361cfce6305c28fd7d64b263e1bcf6e1acffb9fde5553d35356a8e1a88169d1f751dc9535f934ed75c19863cc2006f88a1632543dccec2cb3c75ce736dea6e68548c8a2a3a1ac83550c3f797ff033dde24377ae1446c7c3f600c392e25ec67374a649f152e44a6e71af86fee34b96d431b294c4ef3edf7ad9ea6d4821dbc78fa007b59060d9128a3c18cad5a8d33f799f442ec4a413462cfcdb79201a185b19cb33ae9a0876ba200cc92ca9cb5c7d54dd5047b5fefad838f7bdb1fcd4a63419fd9a34f1a950fe797f1996e5d39908ed9a528d256bd71b75267753e7265b5dd673b5ae5e7f2075c3d26f53d244f7f1a0b099b929ae79734f5463f0f03f415ea39a5064b3398af345d862e57aaf1f4f50f6bc7f3a84ba9e6b5596b212f8865115d29dce1acde48328acbb62f9ba62afdbe2adc252e7a0ebb19e18a353140e83e59c3288741f15379d213f536e48ec1076c026f24f638a938a04d578237def377b8334cb7b848bb6522a85316b3d83552ac3462ee9e6e7ece7a22fa78caf4b2854b2bdc33356c7b0a03003879d2454e27be92db2a2e8bcdbe83a01b3e9f8e1828f79b3107ba4bc02f947a92bb1b0e0f0b40c6c1160d815b272f911146421840a147b68931348b4ef8c97fbb433ed7b44376d3b964f72fe5455ad43b2e9d59df06f3454fcd702cc0e6bdb7af34d58cc9cd872269748202a96edf5d03dabde391f33f8a59afb0ab8c91a9b891f257249d44ace28d93e0d70fc491dc4fc6ccbb96ea8335f81dfa58cd320dca92fe9c693d718b5172d8f412c0a0c16c0da3ff8e77df4af57145748f95986fa46103d8901e79cd3df38e9f1f5c4ddb57af2508a368f14d78ff4565526196b6050fbb63f4c5d524b7ed3aad1d75e09a9d366d9eda7544d7ba0db63e21ad461a83a9274adb543b36ae41200ff43f363678cebbe7bcb3b68c4b2cf5644953f31f57a7b32da2bbf64d2f16124c26c7ff8fa0a3c0d107754645a565d6344238424217f0ff7b0b8583bc7102c8352282fc8760543d50eb40ae53e23ccf6298489916e77185abc15168fb36318a1ea48f90a46549a0e65b4e6680c20c0a0bfda4ba2b7217a09085c8efc833f5b98f6e2f1c1d84c85f4cca763d2e40319828f0bea7c63b3a9cf05d4a608fac184edb6c002fa982f915644236a4ace6476acb0b6efdc7c69921e37ea872d8e6880c3d1bb49ade9eb36507fe8a581ec37937273e53a9d409bf5a270d98785d157ca7911f4916e011263f33d916130ef1a98a18e55ff0bc40bcc213b9c8237fa3df2c204cecc737a4b8ea783309ae0e5f359311636e014a2bafb33ab8c41fc8eb70233e0d81f44076d9ef82211a742989e6ce5af78bea97d2b76799165a217aa883f434a310a2653c90bbe43d80d0bf98a43834a02c85fccfea2682af130f412f1c5b5b2056dc4932261113c3ea59042c4dfbd5dec4140b472054bee5668f2d41d8099b5724c44b4cc869b8d12710a641753a34de66e88bc8c80736f11ded00e7b538b81e36197bf159d7f6df543db5df79886bac52bdd758c7dea22e1fcdc7165ac97d746a4e5acb9157158571d7fd328648a7b9bd6e5360911a899533273a9c576a0e26f2e58613d07c15bdf82bbe553366f05e4156d1831fb298714aa17481da9dacd986115cb9e4bc508b991318f0f953bbc5d54c6b98b8917a96acd6ec01edc4b26db14968f950a866a3aa1198c820d575af9437f940224dd448064f3c16c493ebc0e81677de4046321e6b21eb785ec225e1f93b261e63eb974868b78f00b8b42c63e662fecb8bd1d336559f4a6e2480a4af236633e0e543b3dfca37881a3e9a12adde53b4af08015c342bac3483180c5bc39966ec3c3c33654e64e381a919ba5cb7cafe58dff618e277af61df3da717c100b75d00fd8705a958484f73f769882cfb3cf7231109ae39e084908fc32056c7122e95c0726c21dcee753a0bf2ec15a6d6d5cae32bcfddd50fc261776c34805acccec910c0b0d0d9501e77d7c6940ed2f07dfad9daa87404cf15f787bbfca5991bd75dd7f5ebd83af90e61f9a0fd267f7060b3eb1f0db09ff4eecb9a6539050306178553185377b60f1c0727056fc1e4beb684492f8f6616fa6b1530d5a0ed893bc194573490540ffa31ead5caa48f0f02a930efeef8ec1ea0f67706b493ca279a65309e9e8ec68aa7562e7aba91528e269363dd0dc06774de43f3c16ee899919e8866367c16a117b655a654c8874cbf7c760ea37cf82070e61f147c25d14e6a893dc7ce330688c7f576e080fb99024827ecf08f270e9ad983a14c7bc1e34f66f11f384e5365c893907fa1e257dcbbbdfbe679d288dc24f303ff1b8b812d20e41dcf5183bb22f6def2ecd3492c94ec9e90d63aba7a98a7a03d9dd457414f0fab25be555391a94aa2248ced0dd2856a1a036a2219695d015dacc10ba48ff9a4e03cdeb4247c299755d31c2957f1cf472c05fb9da923946935ae2aca5c5a6c50203615981758e217d7619bef971b734dc71f4d1e4e4bf0e0efa91d5adbdf1e5054e45f04d998807372bb77d278e4795637d8d3de29ff46e57a24b8eee6ab9006f2225e9cb40f5ba4bf8b1d800a9602c46a79a5003476c248bf82e8312eb38aad3ea8b7ac1d07689f78d99d9e1534ea0da240fc3c934a04e9bf2d84c15eb57c4da17b8e10e1647ac26a93cb2966ba5bf5ed3554d3e75654c1fcbf4ca434fa64388f4752c2b61ecc317367f770b4953b89e8bf0c183189c4057e7e54cc10e04465fd55ede728417031ffe88d11cbc0d97c0ae82ce1665d4fd33b26c50ca02e394c8c48992a94759b29efc2e6dcfe80a5a07bb5f7c1dff45a0e97183483958c722a03eacf0c5e59f47dc954260290f0693f50ae30ef62bfdcf6d6fd59139b83b10c69ae6d15143a242be9ee0b170bc8f59dc0b5a83a23d749106861770237b1e97c5c5f5e36e67d66fce4862befe4566d74c5b8a6a7bc3375729f2a905e55bb838bf02c0e0c44d4cac242f16dcdfbd33299afd7d9979b05e377306f50a452b90f019817718acb12108f81154c0f8be0080a6434ef6b2ea1dbef90be878c985f43ed8475ab8b400df77c885265916cbc4713a4f556064fbe4f3d27827c63a685e396132686ca5b48029c0af56ee5c7a9e28c8dda466d0e36ec49c5a134f8d3af00307d1a106b44dc15d373aad8a7647ce9e74872b26bb360aa9e3ddede626e2ba199be4b178b7cf2fb290183fb7db03a7910baea258986f6f1a4ab57287d53dff014651ef384811bfa7f1b63da66f610fdcb1fc3c0768e613b71c8baf9afa7056de5caaf79ccb65d6e9ee3848adf040709157247fd076a8ae69c9b1f50883a50a68dbadb40be009e5b5cd43b0a2769c9095a9b4d4a5c5835c5aa6b605c399d1a33977e0eeca3201b896622a831d988cc0f36da7be5ab8a12079aa449f422ab1bf70a2cc2c1a37a7a569b7abe3e92229b13be673985dff20246b6ff70938454f75975cc5ca1630da84db816c52081a8808395e70f531a145021c1b99fb6cd9b33e794081bfb27d178f946ed80daaba33fa4fd65c1fe07b199ae1292b05f1da1c8b5693eab35688a8fa21df6255f930799b58a58ba535915410869a756400c5df4a07676a8c15dcaf728f19d2878f43e3d5c0afc820059d1d0ef35a5d0608a952f6d7a03a8fe64fc299b1b44af97e8304ca5e99bc27159c1106c05b71818206b86210d0041545b515f08afe0b121e178a39ff72bebcab37ddd95324a3d4e95bb1ad562f8f8626e967c61af987677680292b8044d2649008a792be1c7a9ba798b72486b9638a2dc18e10efc10d029e8791890ccb2c36a8dd6effcf5b60b0c944da61713ea7535cab4ccd499b85d3e9f679781095da5f43c78f12f7e176769733aa7922bad589a1e2c24efb2e6f59f32bda33e5bc8e78719d9bd689a05651d62faf72d2963014d3e05b9062664f851cbc9e8ec5a6e84a18526c9bcc9a062990618fb3fc8a0df74ae9127dd135f064c07b640812e40bd05df94a740fea2c2215c934e6dc9151ced4525f7a462e08e77d5077f16a5ecc614a1d596b7d8fa2311f613d1d65424a35dfe5cbc396d89b285c85ae4a6ebf725cadb425303a407193e75c178b805161f705bcf685ca09624a444b6a8e5f526c97ef0cfc1fe2a6a82261e6d707882a3c6f2ff6de9181f765288be808487caa383300d670f8daa0b715864492f964ba803816b2c323cd120c032766d56f0b26124d19e007a674ffa0496dba99b2f0f083a592447f25752165930f24f49ee7ca79304242033bf93fceb284a5eb4bd6b1e9a8b01943048d3484407400e1ea58462f8e14f405c7ff5a6f88ca6b3136eb8b70ff7bf3d6471d38ed0f43196ac8116d803e9890eb2f996a315d3d74badd4894a4be4e7488dfe2e8f7d7dc48c483bd39b1324aeded40a47133f9c29adbcd85541223e9f3187b4bdfe59b6299fc96c2f1e880c634f5515e0c3c9bee3bcfb5b1d84b88385d27b5490dc700d7ca32d73a4871679422cbeae028106af39741422f99e252e6b1a6aed42d9f27a565b036a04552510b40fc9fedf378e72e444b191980c07de916c6faf7e6b3d62d107e926c23762b6ff48b164870e7f65fd8142b9f9aac393680a622a0fc6717ca96e619f7c25414ad39d73e42efbd0d2cc6497a574b55a7f1d053f2fd06426d3a152ef71602e891861f181260eee54d844e625328ff9a8c3a60c24f62852e587e44e442cbc5ebb3c60a05cd2894af8543ee928d83e7f721215bdee65d08c4248818a89f9ad70d155be94b12803939ce068cba971aee4d8412a67e4fa7f3f74fb56028a1736e9e2b75558ee515520975fdf14df921d0e83369d9b2c7874f70fd175344e29abda9a88183d1369f762fdcca0bb10f698c1745baf49d1118e8108dba6a88aca1fcfa2d70401d233d765fbf88e3831679eb7a3136d6049377881cd56cdd8eb9d88cdc6e320e47013b68799b32449bfee3ce1a7be8667a561fabbb2b41ca67737e0b329c4532a089c9481fc8fda19d6e443331840a8ccb5935a71848f5350fc5258f7f567d62c92e92b51cc8b1cc0f92b1973bfe444a43e5") openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x200, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000240)={0x0, 0xfffffffd}, 0x6, 0xc, 0x1) 15m19.411232062s ago: executing program 2 (id=417): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) fsetxattr$auto(0xffffffffffffffff, &(0x7f0000002200)='*){\x85,\x00', 0x0, 0x8, 0x0) r0 = socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(r0, 0x1, 0x21, 0x0, 0x9) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) ioctl$auto(0xffffffffffffffff, 0x4b44, 0x1) pwrite64$auto(0xc8, 0x0, 0x4e, 0x3) mmap$auto(0xfffffffffffffffc, 0x40009, 0xe2, 0x9b72, 0x7, 0x27fff) madvise$auto(0x0, 0xffffff7fffff0001, 0x8) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, 0x0, 0x2dc08f24db163610, 0x0) openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x40901, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x9, 0x81, 0xdfffffffffff628e, 0x6, 0xdeb1, 0x808}) socket(0x2b, 0x1, 0x1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3db) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x4a801, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, 0x0, 0x12000, 0x0) socket(0x3, 0x5, 0x5) r2 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x2000, 0x0) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, 0x0, 0x810) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x800) ioctl$auto_MTDFILEMODE(r2, 0x4d13, 0x0) 15m4.097282031s ago: executing program 32 (id=417): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) fsetxattr$auto(0xffffffffffffffff, &(0x7f0000002200)='*){\x85,\x00', 0x0, 0x8, 0x0) r0 = socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(r0, 0x1, 0x21, 0x0, 0x9) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) ioctl$auto(0xffffffffffffffff, 0x4b44, 0x1) pwrite64$auto(0xc8, 0x0, 0x4e, 0x3) mmap$auto(0xfffffffffffffffc, 0x40009, 0xe2, 0x9b72, 0x7, 0x27fff) madvise$auto(0x0, 0xffffff7fffff0001, 0x8) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, 0x0, 0x2dc08f24db163610, 0x0) openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x40901, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x9, 0x81, 0xdfffffffffff628e, 0x6, 0xdeb1, 0x808}) socket(0x2b, 0x1, 0x1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3db) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x4a801, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, 0x0, 0x12000, 0x0) socket(0x3, 0x5, 0x5) r2 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x2000, 0x0) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, 0x0, 0x810) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x800) ioctl$auto_MTDFILEMODE(r2, 0x4d13, 0x0) 13m56.029327656s ago: executing program 0 (id=725): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_SMC_PNETID_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0e0327bd7000ffdbdf2501000000ad393c0e7be99c07d9750021d773f5fb05d90794b9a85ef440660b6b63c3a9a33038e1dc6fa9841f3692c8f2e867245fb7ce5e0a3b53abe30cd575b013d9d29f01054986b833c5f595739119ecc982132909ecfadfb1517df4066a83f88eab0793e6370e3de98ddb66ab2c770bea3787050332cfe20645b0a811730b57b561a8dd3d1fb0606b659297c0338e0a5b8a5179c06bb36dd79f3673b1034a453e19fa"], 0x14}, 0x1, 0x0, 0xffffffffffffffa6, 0x1}, 0x4804) openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/trap_flow_action_cookie\x00', 0x2202, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x1d, 0x2, 0x6) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video52\x00', 0x0, 0x0) setsockopt$auto(0x3, 0x0, 0x7, 0x0, 0x28) write$auto(0xca, &(0x7f00000000c0)='\x04>\x01\r\x00\x00\xf3_L\xc8\xbe\x94\xf2\xa2\x00\x00', 0x10) socket(0x18, 0x2, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf91d, 0x0, 0x3, 0x0, 0xd4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x3e8e, 0xc28f, {0x100000000, 0x10000}, 0x5, 0x5, 0xfffffffffffffffd, 0x8, 0x0, 0x80000004, 0x81, 0xffffffffffff628e, 0xa747, 0x7a47a350, 0x804}) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snd/pcmC1D0p\x00', 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) sendmsg$auto_CTRL_CMD_GETFAMILY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x400c0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x4040, 0x0) sendmsg$auto_CTRL_CMD_GETFAMILY(0xffffffffffffffff, 0x0, 0x1) msgctl$auto_IPC_SET(0x38d3, 0x1, 0x0) socket(0x2, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffd]}, 0x0) socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, 0x0, 0xfd}, 0x6a) io_uring_setup$auto(0x6, 0x0) read$auto(0x3, 0x0, 0x80) close_range$auto(0x2, 0x8000, 0x0) 13m55.284981417s ago: executing program 0 (id=729): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(0x3, 0x0, 0x7fffffff) sendmsg$auto_NL80211_CMD_GET_MPP(0xffffffffffffffff, 0x0, 0x880) munmap$auto(0x8000, 0xffffffff) close_range$auto(0x2, 0x8, 0xf4ff) write$auto(0xffffffffffffffff, 0x0, 0xa070) 13m54.815987011s ago: executing program 0 (id=731): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) adjtimex$auto(&(0x7f00000005c0)={0xf332b6e, 0x0, 0x0, 0x80, 0x4400000000, 0x7, 0x9, 0x0, 0x10001, 0x101, 0x2, {0x8, 0x10000}, 0x1, 0x4, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x84, 0xffffffffffff628e, 0xa747, 0x20000000000005, 0x1800}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r2 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r2, 0x405c5503, 0x0) ioctl$auto_UI_DEV_CREATE(r2, 0x5501, 0x0) r3 = openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace_marker\x00', 0x201, 0x0) write$auto_tracing_mark_fops_trace(r3, 0x0, 0x1f00) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x1}, 0x800009}, 0x5, 0x20000000) r4 = socket(0x2, 0x1, 0x0) getsockopt$auto(r4, 0x0, 0xcf, 0x0, 0x0) capset$auto(0x0, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) eventfd$auto(0x200) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) memfd_create$auto(0x0, 0x12) sendmsg$auto_L2TP_CMD_SESSION_CREATE(r5, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x64, r6, 0x300, 0x70bd28, 0x8, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_NONE={0x19, 0x0, "d3273d7947e97af129a1c5d4950c2673d6a7c71600"}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x3}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xb6f2}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xfc}]}, 0x64}, 0x1, 0x0, 0x0, 0x4048015}, 0x8) r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty12\x00', 0x800, 0x0) r8 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r7, 0x541c, r8) 13m53.528152533s ago: executing program 0 (id=735): r0 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000d80), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL802154_CMD_SET_PAN_ID(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000140)=ANY=[@ANYBLOB="000000003c00fba82c11412389a2c3421f8d066a85578f50fe74f6445f8aaa9d3a2f26212be071a5a25c853572f69d996eb433ae479d5580287795ae5badb1036c1c4d75a5780ce3b256f38efad5b7d5ea948e532537132ded51512fc6e51dbbb4b61a5fd6fd5053a14d10", @ANYRES16=r0, @ANYBLOB="010029bd7000fddbdf250a0000000c000600443f000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x2000001}, 0x4880) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010027bd7000fddbdf250a0005000700000000000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4088}, 0x20000010) sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010072e0fa60fddbdf2500000000000000003c1b73"], 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x2) syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000100), r2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vimc.0/video4linux/v4l-subdev7/name\x00', 0xe00, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x170, 0xfffffffffffffffa, 0x8000) eventfd$auto(0x7fffffff) (async) eventfd$auto(0x7fffffff) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) write$auto(0x4, 0x0, 0x100082) poll$auto(0x0, 0x8, 0x7fff) setreuid$auto(0x9, 0x1) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) setuid$auto(0xe) swapon$auto(0x0, 0x5259) futex_waitv$auto(&(0x7f0000000000)={0x6, 0x8, 0x6, 0x4}, 0xb, 0xfffffffc, 0x0, 0x62bd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000) close_range$auto(0x2, 0xffffffffffffffff, 0x3) (async) close_range$auto(0x2, 0xffffffffffffffff, 0x3) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) (async) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) 13m52.863062306s ago: executing program 0 (id=739): openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) mmap$auto(0x0, 0x4000005, 0xfffffffffffffe01, 0x8051, 0x3, 0x10000000008000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/cpu1/power/pm_qos_resume_latency_us\x00', 0x183042, 0x0) prctl$auto(0x1000000001d, 0xffff, 0x2, 0x9, 0x1) sendfile$auto(r0, r0, 0x0, 0x3) sync_file_range$auto(r0, 0x4, 0x6, 0xe2) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r1 = openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll$auto(&(0x7f0000000280)={r1, 0x3}, 0x2, 0x2) r2 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D1p\x00', 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_LINK(r2, 0x40044160, 0x0) r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) ioctl$auto_PROCMAP_QUERY(r3, 0xc0686611, &(0x7f0000000340)={0x18, 0x0, 0x4, 0x1, 0x8, 0x1, 0x0, 0x6, 0x5, 0x200, 0xffff7ffe, 0x80000000, 0x7ff, 0x7, 0x9}) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x48041, 0x0) write$auto(r4, 0x0, 0x6) 13m52.652595458s ago: executing program 0 (id=741): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x2) bpf$auto(0x0, &(0x7f0000000040)=@iter_create={r0, 0xfffffff9}, 0x800a3) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) socket(0x28, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000de, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) io_uring_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x3c, 0x0, 0x9) fstatfs$auto(0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x2) (async) bpf$auto(0x0, &(0x7f0000000040)=@iter_create={r0, 0xfffffff9}, 0x800a3) (async) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0x401, 0x8000) (async) unshare$auto(0x40000080) (async) socket(0x28, 0x1, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000de, 0xeb1, 0x401, 0x8000) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) ioctl$auto(0x3, 0x400454ca, 0x38) (async) io_uring_setup$auto(0x1, 0x0) (async) setsockopt$auto(0x3, 0x1, 0x3c, 0x0, 0x9) (async) fstatfs$auto(0xffffffffffffffff, 0x0) (async) 13m37.440896504s ago: executing program 33 (id=741): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x2) bpf$auto(0x0, &(0x7f0000000040)=@iter_create={r0, 0xfffffff9}, 0x800a3) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) socket(0x28, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000de, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) io_uring_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x3c, 0x0, 0x9) fstatfs$auto(0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x2) (async) bpf$auto(0x0, &(0x7f0000000040)=@iter_create={r0, 0xfffffff9}, 0x800a3) (async) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0x401, 0x8000) (async) unshare$auto(0x40000080) (async) socket(0x28, 0x1, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000de, 0xeb1, 0x401, 0x8000) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) ioctl$auto(0x3, 0x400454ca, 0x38) (async) io_uring_setup$auto(0x1, 0x0) (async) setsockopt$auto(0x3, 0x1, 0x3c, 0x0, 0x9) (async) fstatfs$auto(0xffffffffffffffff, 0x0) (async) 7m48.036518988s ago: executing program 1 (id=2130): socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x0, @my=0x1}, 0x55) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/ext4/sda1/options\x00', 0x800, 0x0) openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) socket(0x11, 0x80003, 0x5) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) write$auto(r0, &(0x7f00000001c0)='/dev/audio1\x00JR\xe7\xae\xd27M0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r2, 0xffffffffffffffff, 0x4, 0x1ff, 0xffffffffffffffff, @relative_fd, 0xe5fd}, 0xf) bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x3}, 0xc) 7m29.060524069s ago: executing program 1 (id=2133): mq_notify$auto(0x1, 0xffffffffffffffff) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/neigh/veth0_to_batadv/app_solicit\x00', 0x80000, 0x0) read$auto(r0, &(0x7f0000000000)='V\xcf8\xa0\x0fZu\x00\x00\x00\x007\xe0\xfc\xfd\x95\xc5\xf9\x02\x00\x00\x00\xbe\xc5\x02 \xefi\xf5\xc2\xbd\x7f', 0x6) 7m28.739728694s ago: executing program 1 (id=2183): socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0x4, 0x0, 0x804) mount_setattr$auto(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={0x100030, 0x7f}, 0x287) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) r2 = socket(0x2, 0x80802, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) setsockopt$auto(r2, 0x11, 0x67, 0x0, 0x8) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x800000000000000, 0x9}, 0x7}, 0x3, 0x0) 7m28.265342336s ago: executing program 1 (id=2186): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x14, r0, 0x200, 0x70bd30, 0x25dfdbff}, 0x14}, 0x1, 0x68, 0x0, 0x4000800}, 0x0) 7m27.917362096s ago: executing program 1 (id=2188): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) adjtimex$auto(&(0x7f00000005c0)={0xf332b6e, 0x0, 0x0, 0x80, 0x4400000000, 0x7, 0x9, 0x0, 0x10001, 0x101, 0x2, {0x8, 0x10000}, 0x1, 0x4, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x84, 0xffffffffffff628e, 0xa747, 0x20000000000005, 0x1800}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r2 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r2, 0x405c5503, 0x0) ioctl$auto_UI_DEV_CREATE(r2, 0x5501, 0x0) r3 = openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace_marker\x00', 0x201, 0x0) write$auto_tracing_mark_fops_trace(r3, 0x0, 0x1f00) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x1}, 0x800009}, 0x5, 0x20000000) r4 = socket(0x2, 0x1, 0x0) getsockopt$auto(r4, 0x0, 0xcf, 0x0, 0x0) capset$auto(0x0, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) connect$auto(0x3, 0x0, 0x55) eventfd$auto(0x200) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) memfd_create$auto(0x0, 0x12) sendmsg$auto_L2TP_CMD_SESSION_CREATE(r5, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x5c, r6, 0x300, 0x70bd28, 0x8, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_NONE={0x19, 0x0, "d3273d7947e97af129a1c5d4950c2673d6a7c71600"}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x3}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xb6f2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4048015}, 0x8) r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty12\x00', 0x800, 0x0) r8 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r7, 0x541c, r8) 7m24.970044144s ago: executing program 1 (id=2193): r0 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x8a581, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000001240), 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB='\rV'], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYRES32=r1, @ANYBLOB='v'], 0x1ac}, 0x1, 0x0, 0x0, 0x90}, 0x8080) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000340)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x6, 0x1}, 0x5}, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(0xc8, 0x400454d4, 0xe) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f00000000c0), r3) socket(0x18, 0x2, 0x4) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x4, 0x6, 0x0, 0x5, 0x10, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x10001, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) socket(0x11, 0xa, 0x4001) writev$auto(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x9}, 0xff) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) rename$auto(&(0x7f0000000180)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) sendmsg$auto_NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYRES16=0x0], 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x80) ppoll$auto(0x0, 0x4007f, 0x0, &(0x7f00000001c0)={0x6}, 0x8) mount$auto(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f00000001c0)) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x400900, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/der/audio1\x00', 0xa3d9) mmap$auto(0x0, 0x2, 0xffffffffffffffff, 0x40eb1, 0x602, 0x300000000000) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop6\x00', 0x0, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r4, 0x4c02, 0xfffffffffffffffd) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, 0x0, 0x800) move_pages$auto(0x0, 0x8001002, 0x0, 0x0, 0x0, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x48180, 0x0) 7m9.617761067s ago: executing program 34 (id=2193): r0 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x8a581, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000001240), 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB='\rV'], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYRES32=r1, @ANYBLOB='v'], 0x1ac}, 0x1, 0x0, 0x0, 0x90}, 0x8080) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000340)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x6, 0x1}, 0x5}, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(0xc8, 0x400454d4, 0xe) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f00000000c0), r3) socket(0x18, 0x2, 0x4) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x4, 0x6, 0x0, 0x5, 0x10, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x10001, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) socket(0x11, 0xa, 0x4001) writev$auto(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x9}, 0xff) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) rename$auto(&(0x7f0000000180)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) sendmsg$auto_NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYRES16=0x0], 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x80) ppoll$auto(0x0, 0x4007f, 0x0, &(0x7f00000001c0)={0x6}, 0x8) mount$auto(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f00000001c0)) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x400900, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/der/audio1\x00', 0xa3d9) mmap$auto(0x0, 0x2, 0xffffffffffffffff, 0x40eb1, 0x602, 0x300000000000) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop6\x00', 0x0, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r4, 0x4c02, 0xfffffffffffffffd) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, 0x0, 0x800) move_pages$auto(0x0, 0x8001002, 0x0, 0x0, 0x0, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x48180, 0x0) 3m27.723723707s ago: executing program 5 (id=3003): socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) lsm_list_modules$auto(0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) r1 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/aid\x00', 0x20000, 0x0) read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r1, 0x0, 0x0) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x89\x06s\x1cJ\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x10, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/usb/drivers/usbtouchscreen/new_id\x00', 0xbce02, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f00000001c0), r0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x6082, 0x0) r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x40080, 0x0) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) r3 = socket(0x2, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x13}}, 0x54) getsockopt$auto(r3, 0x84, 0x66, 0x0, &(0x7f00000002c0)=0x8) ioctl$auto_MON_IOCQ_URB_LEN(r2, 0x9201, 0x0) 3m26.670643139s ago: executing program 5 (id=3009): socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) lsm_list_modules$auto(0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) r2 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/aid\x00', 0x20000, 0x0) read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r2, 0x0, 0x0) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x89\x06s\x1cJ\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x10, 0x6) ioctl$auto_TIOCSTI2(r1, 0x5412, &(0x7f0000000840)) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/usb/drivers/usbtouchscreen/new_id\x00', 0xbce02, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), r0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x6082, 0x0) r3 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x40080, 0x0) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) r4 = socket(0x2, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x13}}, 0x54) getsockopt$auto(r4, 0x84, 0x66, 0x0, &(0x7f00000002c0)=0x8) ioctl$auto_MON_IOCQ_URB_LEN(r3, 0x9201, 0x0) 3m25.61805841s ago: executing program 5 (id=3016): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf250400000005000b002e0000"], 0x1c}}, 0x4044820) 3m24.906459122s ago: executing program 5 (id=3019): socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) lsm_list_modules$auto(0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) r1 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/aid\x00', 0x20000, 0x0) read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r1, 0x0, 0x0) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x89\x06s\x1cJ\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x10, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/usb/drivers/usbtouchscreen/new_id\x00', 0xbce02, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f00000001c0), r0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x6082, 0x0) r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x40080, 0x0) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) r3 = socket(0x2, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x13}}, 0x54) getsockopt$auto(r3, 0x84, 0x66, 0x0, &(0x7f00000002c0)=0x8) ioctl$auto_MON_IOCQ_URB_LEN(r2, 0x9201, 0x0) 3m23.884520786s ago: executing program 5 (id=3024): socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) lsm_list_modules$auto(0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) r2 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/aid\x00', 0x20000, 0x0) read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r2, 0x0, 0x0) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x89\x06s\x1cJ\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x10, 0x6) ioctl$auto_TIOCSTI2(r1, 0x5412, &(0x7f0000000840)) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/usb/drivers/usbtouchscreen/new_id\x00', 0xbce02, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), r0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x6082, 0x0) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket(0x2, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x13}}, 0x54) ioctl$auto_MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201, 0x0) 3m22.896151407s ago: executing program 5 (id=3027): pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rBBJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), r0) r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f00000000c0), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0xa, 0x2, 0x88) mmap$auto(0x3, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x23, 0x2, 0x0) pipe2$auto(0x0, 0x80) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0xb02, 0x0) listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1) r5 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) r6 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r6, 0xaf01, 0x5) ioctl$auto(r6, 0x4028af11, r5) syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000002c0), r3) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r8, r7, 0x8, 0x401, r4, @relative_fd, 0x6}, 0xf) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000000040)={0x14, r10, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000) sendmsg$auto_NFSD_CMD_LISTENER_SET(r3, &(0x7f0000001b40)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000000340)={0x1784, r10, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x68, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0x9, 0x2, 'C\xc8\']\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0x5, 0x2, '\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0x5, 0x2, '\x00'}, @NFSD_A_SOCK_ADDR={0x3d, 0x1, "a0896e83537cea51e6e9e0e2af8dc1d263a47890b83330d5272c5338bee318b0b818072758cc9a9d3e6823e9fbae570422566a1356d482a3b2"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x5, 0x2, '\x00'}]}, @NFSD_A_SERVER_SOCK_ADDR={0x20, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0xc, 0x2, 'batadv0\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0x10, 0x2, 'H./[$@@U#)&\x00'}]}, @NFSD_A_SERVER_SOCK_ADDR={0x420, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x56, 0x1, "763c01210cd5974925fc040a96ed96fe0d054cfb0dab6f1c0856375a3e00bbe1ae90936333b285a131d5d5f5076bc52ec6faec99315806217feaa62775ce34785b76d063fef67d9c56ae1d5ee2dff94f78ae"}, @NFSD_A_SOCK_ADDR={0xe1, 0x1, "e99160e8a4ba430c979f714e5bff1a59e4466f94e6861ef9cba16377192a5c2702acaa8a0af48206ec362d9c88c93f06bf88dbfab05c218907de10669752e226999eb28f3d790e685b1ade0d37af15c313878dec9b77bcaddf4e341918b85c5dbc93ac80f25bbf8e89f996352620e85000c80cbd2e28d02c32c8b05e82dea00d0a5a4691904d27b37b0795dbfd84bc75d35edbda823dec226eb5ddebbe2ba4a81aac385c0233aa544bded579ca68bf14123e7af0798f4058ac121a3a8039383a271dc360acf06d03fc035a0e97abf308e31b0e859825290062a6a9a423"}, @NFSD_A_SOCK_ADDR={0xe3, 0x1, "2fe5d2b08b29dbd1e0b4c8630d206cb3ae9b635b94cb7a7d9cc1233156fdea01beb88a88ef945fd6c00a6b2875ff5809f88f9219110b3fe4016dc133ee916412c43833c50def4089439f57edcb8c4a585fd1b711485a49aa49e15f1d594652437163232030049a9c5d982f8fcd8e857927f0a3010c325ad336f6d023f44eae1cebaf0c06ac4c22203be24bbcb5e7dddb94cc4e4c723f7cf832c5fd0a76dd7fce43b23e1df166d2511fe2d65a8b5ef14327743fdbe986dfab0e6cb5b7ec4afb8b2f12402105d326cde51316f83e4659145c46fee102596d353f8d203c42b8c5"}, @NFSD_A_SOCK_ADDR={0xab, 0x1, "b91e356aa3bb90fd6d14f6aa46921c3e860d9ca36000f478fcc6ef90b05e49ca32461f31d5abe93a98221de04b866747b0ca47f49649e1b13564c2972f62b5d1d1cd9c8971586d575202f497ab4f8995f5e05be36c7a8731cb36b248f84a74c7a19fa317b4f26365c3675a1930fe618b07dbd9bb9ba5796cb53272ce2e062f6dbf2aaca93f5ffb730863b026505c7298dff4cb25cf6d0d795eef6d1ee133b098aba3a82e36112a"}, @NFSD_A_SOCK_ADDR={0x76, 0x1, "ce06d24daf9a39663e73bf629167e6894f5439a86d1981fb0504c9feb97a7fa0d3c724d07738e872c4fdf329118180a082a7360464ede3be8179ca74d7e726a7ceee00530740e69e6f74b4d1f3d907b7068d6bfbf0a35b5f75703c0ac48360edcbef0d6f6a7cb74844c89b57b3a686f86e45"}, @NFSD_A_SOCK_ADDR={0x2b, 0x1, "1c75c8d7d8a172cd9d81b7801032dd5d795404e7d17f1f13f6dbb2268544115c565ef3f0af553c"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x6, 0x2, '&\x00'}, @NFSD_A_SOCK_ADDR={0x98, 0x1, "751563a1881952859950eef28f60836b4cdabc4b6e224bd66e4a43c6ebd436ffefa3963fece08a8a67d9bb8e83ffb399d869e10e31899bfae73cc76dcd71b5f85e0a2169b0d84c07f8b5b4d691f7e20cd167e7fcb1fa44bbd890a515f069ffbb6c4d827b3637dbf512d7f239915309ff0abbf1399d9a97af8253b7fbe0195e4a1b422adda3c104cbbf6cd4d11801918b78a33871"}, @NFSD_A_SOCK_TRANSPORT_NAME={0xc, 0x2, 'batadv0\x00'}]}, @NFSD_A_SERVER_SOCK_ADDR={0x1010, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0x5, 0x2, '\x00'}, @NFSD_A_SOCK_ADDR={0x1004, 0x1, "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"}]}, @NFSD_A_SERVER_SOCK_ADDR={0x11c, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x2f, 0x1, "249de422d144f8ba6fb1c31f8b589db5f2d395decd9dabf1d53acf8834337cd12a3d2ceeecbf0f427a868d"}, @NFSD_A_SOCK_TRANSPORT_NAME={0xb, 0x2, 'M\'}\'*\xa8\x00'}, @NFSD_A_SOCK_ADDR={0xa8, 0x1, "7474c09cdee17be0dbfa7341d33dff30632f3256d4e0a29bec548e259b87e2cf78d5bf9474ee24dc8dced0033f94adb8de2c66279becd8e62a175e6e3123ea621950e1ef51ce9dc79f61d808266597ce93beadf0efd5a9b4c381497cb4b83b073c6e699dc8eeeba85d091db080026b6022e04cbb6291dcf39535ba293a906320437744060a69344f423485853602b1993fc2a7fa8f807b023ba05781e7dba82b6ae3d59b"}, @NFSD_A_SOCK_ADDR={0x6, 0x1, "fe09"}, @NFSD_A_SOCK_TRANSPORT_NAME={0xe, 0x2, 'TASKSTATS\x00'}, @NFSD_A_SOCK_ADDR={0x1c, 0x1, "7aac73925df4990f321bc60ff81f54be0db3a5e15aae0417"}]}, @NFSD_A_SERVER_SOCK_ADDR={0x198, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x1b, 0x1, "86b12b771d972c3b7f3b29bec752b7c19cbbff25d8f26e"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x9, 0x2, 'l2tp\x00'}, @NFSD_A_SOCK_ADDR={0x55, 0x1, "c10c604361451a701d8d88bb495e74d1fb2e7d14c6226e6e3d6013387057e7f2cbcb4179d5e73f2c1615d99919aac4697c2ace93f6f280558c3d060fe9672fbc6b1ca05e35a0efb5050bdac1cb9ba806db"}, @NFSD_A_SOCK_ADDR={0x69, 0x1, "14e5e172789d9901081f8240e355763941b92c913bafdceebec4551f090699744eac6a42ff77cb465a0b4553eb02d0c9156a0c4136c13ba32adf7108d67fc8282d45685911bb34f44c5630928b78b09608752929050ca0a74d951cf168e2231bcb1f0f624f"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x9, 0x2, '#:{$\x00'}, @NFSD_A_SOCK_ADDR={0x76, 0x1, "e38aa491f3ab3849fc5629af02e8467c43469530bb22ee388f35390ecdfeacfc2a3a71ef7df5c4b1d6301c89ededd17e464732980380ad03323192955503d6afe0713f0e01af59004119e483be4e096d64d76142d23fe0d61b48bd2d9b5376ac52b96a694304c65828ec3eef0ab69e1d22a1"}, @NFSD_A_SOCK_ADDR={0x24, 0x1, "de7a191a02d91e0b4d269f5eac451f15462f2caa4f0e9da482b0e0f5c0dce5ba"}]}, @NFSD_A_SERVER_SOCK_ADDR={0x4}]}, 0x1784}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000001) sendmsg$auto_OVS_DP_CMD_GET(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x3c, r2, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x2}, @OVS_DP_ATTR_NAME={0x6, 0x1, '&\x00'}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x4}, @OVS_DP_ATTR_IFINDEX={0x8, 0x9, r8}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000) sendmsg$auto_TASKSTATS_CMD_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB='\x00\x00\x00\x00A\x00\x00\x00N-N:', @ANYRESHEX], 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000) 3m7.181085574s ago: executing program 35 (id=3027): pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rBBJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), r0) r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f00000000c0), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0xa, 0x2, 0x88) mmap$auto(0x3, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x23, 0x2, 0x0) pipe2$auto(0x0, 0x80) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0xb02, 0x0) listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1) r5 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) r6 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r6, 0xaf01, 0x5) ioctl$auto(r6, 0x4028af11, r5) syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000002c0), r3) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r8, r7, 0x8, 0x401, r4, @relative_fd, 0x6}, 0xf) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000000040)={0x14, r10, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000) sendmsg$auto_NFSD_CMD_LISTENER_SET(r3, &(0x7f0000001b40)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000000340)={0x1784, r10, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x68, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0x9, 0x2, 'C\xc8\']\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0x5, 0x2, '\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0x5, 0x2, '\x00'}, @NFSD_A_SOCK_ADDR={0x3d, 0x1, "a0896e83537cea51e6e9e0e2af8dc1d263a47890b83330d5272c5338bee318b0b818072758cc9a9d3e6823e9fbae570422566a1356d482a3b2"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x5, 0x2, '\x00'}]}, @NFSD_A_SERVER_SOCK_ADDR={0x20, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0xc, 0x2, 'batadv0\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0x10, 0x2, 'H./[$@@U#)&\x00'}]}, @NFSD_A_SERVER_SOCK_ADDR={0x420, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x56, 0x1, "763c01210cd5974925fc040a96ed96fe0d054cfb0dab6f1c0856375a3e00bbe1ae90936333b285a131d5d5f5076bc52ec6faec99315806217feaa62775ce34785b76d063fef67d9c56ae1d5ee2dff94f78ae"}, @NFSD_A_SOCK_ADDR={0xe1, 0x1, "e99160e8a4ba430c979f714e5bff1a59e4466f94e6861ef9cba16377192a5c2702acaa8a0af48206ec362d9c88c93f06bf88dbfab05c218907de10669752e226999eb28f3d790e685b1ade0d37af15c313878dec9b77bcaddf4e341918b85c5dbc93ac80f25bbf8e89f996352620e85000c80cbd2e28d02c32c8b05e82dea00d0a5a4691904d27b37b0795dbfd84bc75d35edbda823dec226eb5ddebbe2ba4a81aac385c0233aa544bded579ca68bf14123e7af0798f4058ac121a3a8039383a271dc360acf06d03fc035a0e97abf308e31b0e859825290062a6a9a423"}, @NFSD_A_SOCK_ADDR={0xe3, 0x1, "2fe5d2b08b29dbd1e0b4c8630d206cb3ae9b635b94cb7a7d9cc1233156fdea01beb88a88ef945fd6c00a6b2875ff5809f88f9219110b3fe4016dc133ee916412c43833c50def4089439f57edcb8c4a585fd1b711485a49aa49e15f1d594652437163232030049a9c5d982f8fcd8e857927f0a3010c325ad336f6d023f44eae1cebaf0c06ac4c22203be24bbcb5e7dddb94cc4e4c723f7cf832c5fd0a76dd7fce43b23e1df166d2511fe2d65a8b5ef14327743fdbe986dfab0e6cb5b7ec4afb8b2f12402105d326cde51316f83e4659145c46fee102596d353f8d203c42b8c5"}, @NFSD_A_SOCK_ADDR={0xab, 0x1, "b91e356aa3bb90fd6d14f6aa46921c3e860d9ca36000f478fcc6ef90b05e49ca32461f31d5abe93a98221de04b866747b0ca47f49649e1b13564c2972f62b5d1d1cd9c8971586d575202f497ab4f8995f5e05be36c7a8731cb36b248f84a74c7a19fa317b4f26365c3675a1930fe618b07dbd9bb9ba5796cb53272ce2e062f6dbf2aaca93f5ffb730863b026505c7298dff4cb25cf6d0d795eef6d1ee133b098aba3a82e36112a"}, @NFSD_A_SOCK_ADDR={0x76, 0x1, "ce06d24daf9a39663e73bf629167e6894f5439a86d1981fb0504c9feb97a7fa0d3c724d07738e872c4fdf329118180a082a7360464ede3be8179ca74d7e726a7ceee00530740e69e6f74b4d1f3d907b7068d6bfbf0a35b5f75703c0ac48360edcbef0d6f6a7cb74844c89b57b3a686f86e45"}, @NFSD_A_SOCK_ADDR={0x2b, 0x1, "1c75c8d7d8a172cd9d81b7801032dd5d795404e7d17f1f13f6dbb2268544115c565ef3f0af553c"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x6, 0x2, '&\x00'}, @NFSD_A_SOCK_ADDR={0x98, 0x1, "751563a1881952859950eef28f60836b4cdabc4b6e224bd66e4a43c6ebd436ffefa3963fece08a8a67d9bb8e83ffb399d869e10e31899bfae73cc76dcd71b5f85e0a2169b0d84c07f8b5b4d691f7e20cd167e7fcb1fa44bbd890a515f069ffbb6c4d827b3637dbf512d7f239915309ff0abbf1399d9a97af8253b7fbe0195e4a1b422adda3c104cbbf6cd4d11801918b78a33871"}, @NFSD_A_SOCK_TRANSPORT_NAME={0xc, 0x2, 'batadv0\x00'}]}, @NFSD_A_SERVER_SOCK_ADDR={0x1010, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0x5, 0x2, '\x00'}, @NFSD_A_SOCK_ADDR={0x1004, 0x1, "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"}]}, @NFSD_A_SERVER_SOCK_ADDR={0x11c, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x2f, 0x1, "249de422d144f8ba6fb1c31f8b589db5f2d395decd9dabf1d53acf8834337cd12a3d2ceeecbf0f427a868d"}, @NFSD_A_SOCK_TRANSPORT_NAME={0xb, 0x2, 'M\'}\'*\xa8\x00'}, @NFSD_A_SOCK_ADDR={0xa8, 0x1, "7474c09cdee17be0dbfa7341d33dff30632f3256d4e0a29bec548e259b87e2cf78d5bf9474ee24dc8dced0033f94adb8de2c66279becd8e62a175e6e3123ea621950e1ef51ce9dc79f61d808266597ce93beadf0efd5a9b4c381497cb4b83b073c6e699dc8eeeba85d091db080026b6022e04cbb6291dcf39535ba293a906320437744060a69344f423485853602b1993fc2a7fa8f807b023ba05781e7dba82b6ae3d59b"}, @NFSD_A_SOCK_ADDR={0x6, 0x1, "fe09"}, @NFSD_A_SOCK_TRANSPORT_NAME={0xe, 0x2, 'TASKSTATS\x00'}, @NFSD_A_SOCK_ADDR={0x1c, 0x1, "7aac73925df4990f321bc60ff81f54be0db3a5e15aae0417"}]}, @NFSD_A_SERVER_SOCK_ADDR={0x198, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x1b, 0x1, "86b12b771d972c3b7f3b29bec752b7c19cbbff25d8f26e"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x9, 0x2, 'l2tp\x00'}, @NFSD_A_SOCK_ADDR={0x55, 0x1, "c10c604361451a701d8d88bb495e74d1fb2e7d14c6226e6e3d6013387057e7f2cbcb4179d5e73f2c1615d99919aac4697c2ace93f6f280558c3d060fe9672fbc6b1ca05e35a0efb5050bdac1cb9ba806db"}, @NFSD_A_SOCK_ADDR={0x69, 0x1, "14e5e172789d9901081f8240e355763941b92c913bafdceebec4551f090699744eac6a42ff77cb465a0b4553eb02d0c9156a0c4136c13ba32adf7108d67fc8282d45685911bb34f44c5630928b78b09608752929050ca0a74d951cf168e2231bcb1f0f624f"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x9, 0x2, '#:{$\x00'}, @NFSD_A_SOCK_ADDR={0x76, 0x1, "e38aa491f3ab3849fc5629af02e8467c43469530bb22ee388f35390ecdfeacfc2a3a71ef7df5c4b1d6301c89ededd17e464732980380ad03323192955503d6afe0713f0e01af59004119e483be4e096d64d76142d23fe0d61b48bd2d9b5376ac52b96a694304c65828ec3eef0ab69e1d22a1"}, @NFSD_A_SOCK_ADDR={0x24, 0x1, "de7a191a02d91e0b4d269f5eac451f15462f2caa4f0e9da482b0e0f5c0dce5ba"}]}, @NFSD_A_SERVER_SOCK_ADDR={0x4}]}, 0x1784}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000001) sendmsg$auto_OVS_DP_CMD_GET(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x3c, r2, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x2}, @OVS_DP_ATTR_NAME={0x6, 0x1, '&\x00'}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x4}, @OVS_DP_ATTR_IFINDEX={0x8, 0x9, r8}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000) sendmsg$auto_TASKSTATS_CMD_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB='\x00\x00\x00\x00A\x00\x00\x00N-N:', @ANYRESHEX], 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000) 2m37.461822053s ago: executing program 6 (id=3219): socket(0x2, 0x2, 0x0) bind$auto(0x3, 0x0, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) lsm_list_modules$auto(0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) r1 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/aid\x00', 0x20000, 0x0) read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r1, 0x0, 0x0) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x89\x06s\x1cJ\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x10, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/usb/drivers/usbtouchscreen/new_id\x00', 0xbce02, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f00000001c0), r0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x6082, 0x0) r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x40080, 0x0) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) r3 = socket(0x2, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x13}}, 0x54) getsockopt$auto(r3, 0x84, 0x66, 0x0, &(0x7f00000002c0)=0x8) ioctl$auto_MON_IOCQ_URB_LEN(r2, 0x9201, 0x0) 2m36.391928903s ago: executing program 6 (id=3225): socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) lsm_list_modules$auto(0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) r2 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/aid\x00', 0x20000, 0x0) read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r2, 0x0, 0x0) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x89\x06s\x1cJ\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x10, 0x6) ioctl$auto_TIOCSTI2(r1, 0x5412, &(0x7f0000000840)) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), r0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x6082, 0x0) r3 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x40080, 0x0) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) r4 = socket(0x2, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x13}}, 0x54) getsockopt$auto(r4, 0x84, 0x66, 0x0, &(0x7f00000002c0)=0x8) ioctl$auto_MON_IOCQ_URB_LEN(r3, 0x9201, 0x0) 2m35.34811587s ago: executing program 6 (id=3227): socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) lsm_list_modules$auto(0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) r2 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/aid\x00', 0x20000, 0x0) read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r2, 0x0, 0x0) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x89\x06s\x1cJ\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x10, 0x6) ioctl$auto_TIOCSTI2(r1, 0x5412, &(0x7f0000000840)) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), r0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x6082, 0x0) r3 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x40080, 0x0) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket(0x2, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x13}}, 0x54) ioctl$auto_MON_IOCQ_URB_LEN(r3, 0x9201, 0x0) 2m34.154643475s ago: executing program 6 (id=3232): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_STATUS322(0xffffffffffffffff, 0x806c4120, &(0x7f0000000100)={0x0, 0x7, 0x95d7, 0x7f, 0x3, 0x1, 0x9, 0x2, 0x0, 0x7, 0xb, 0x8, 0x100, 0x2, 0x3, 0x3ff, 0x400, 0x80000000, "0c1056e3480805f935e214e44f620fa9eba8238cacc3d9e6fc45cf541e509fc2457ae4ae"}) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYRES8, @ANYRES16, @ANYBLOB="0002bb8a45f7149320a7d86e26bd7000fedbdf250300000008000300460200000600", @ANYRES32, @ANYBLOB="0a00050054000000000000000a0600000000000000fc39000a00010070b28ae31a8d37de0700"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x20000010) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x25, 0xa, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r0 = socket(0x15, 0x5, 0x6) socket(0x2, 0x1, 0x106) connect$auto(r0, &(0x7f0000000300)=@phonet={0x23, 0x6, 0x7b, 0xf}, 0x2) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) shutdown$auto(0x200000003, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/pvrusb2/parameters/vbi_nr\x00', 0x200, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) 2m33.539637315s ago: executing program 6 (id=3234): madvise$auto(0x2, 0xfffffffffffffc00, 0x8) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) r0 = socket(0x2, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x13}}, 0x54) getsockopt$auto(r0, 0x84, 0x82, 0x0, &(0x7f00000002c0)=0x1000c0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/platform/dummy_hcd.0/usb1/bmAttributes\x00', 0xa001, 0x0) mmap$auto(0x0, 0x61, 0x100001000000004, 0xfa31, 0x400, 0x1) socket(0x11, 0x80000, 0x7fff) socket(0x2, 0x6, 0x0) r1 = epoll_create$auto(0x4) read$auto_rb_simple_fops_trace(r1, &(0x7f0000000080)=""/113, 0x71) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/bus/pci/resource_alignment\x00', 0x8ea182, 0x0) r3 = openat$auto_dma_buf_debug_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x181000, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/device_info\x00', 0x48041, 0x0) write$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f0000000140)="22edd92f26639ec0023a8686bd579dcf16f50e9bfa20abfa3ae55be8b5f870918621c10d9e916f6fe4fca6d7515871f05cc91f4246f6515662789a97d863c26cfd02b1cf15933b053fbdab9b22b1", 0xffffff20) pread64$auto(r3, &(0x7f0000000040)='\x00', 0x7ff, 0x800) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000000)="42bf466a98f4921b6c0a", 0xa) epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0) epoll_create$auto(0x3e) socket(0x22, 0xa, 0x3ff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) pipe$auto(0x0) dup2$auto(0x5, 0x4) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) 2m32.665711709s ago: executing program 6 (id=3237): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffff7ffffffffffa, 0x8000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r0, 0x4, 0x7ff) r1 = socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x35, 0x1, 0x0, 0x0, 0x0) prctl$auto_PR_SET_NAME(0xf, 0x7b, 0x0, 0x0, 0xee) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket(0x29, 0x2, 0x0) getsockopt$auto(r2, 0x119, 0x6, 0x0, 0x0) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) r4 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@sco, 0x66) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) listen$auto(0x3, 0x8d) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) open(&(0x7f00000001c0)='./file0\x00', 0x4242, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x10000009b72, 0x2, 0x8000) r5 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0) read$auto(r5, 0x0, 0x39b8) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r6, 0x401870cb, r6) open(&(0x7f0000000800)='./file0\x00', 0x22200, 0x154) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) write$auto(0x3, 0x0, 0x100082) wait4$auto(r0, 0x0, 0xa, 0x0) 2m17.339906606s ago: executing program 36 (id=3237): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffff7ffffffffffa, 0x8000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r0, 0x4, 0x7ff) r1 = socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x35, 0x1, 0x0, 0x0, 0x0) prctl$auto_PR_SET_NAME(0xf, 0x7b, 0x0, 0x0, 0xee) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket(0x29, 0x2, 0x0) getsockopt$auto(r2, 0x119, 0x6, 0x0, 0x0) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) r4 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@sco, 0x66) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) listen$auto(0x3, 0x8d) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) open(&(0x7f00000001c0)='./file0\x00', 0x4242, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x10000009b72, 0x2, 0x8000) r5 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0) read$auto(r5, 0x0, 0x39b8) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r6, 0x401870cb, r6) open(&(0x7f0000000800)='./file0\x00', 0x22200, 0x154) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) write$auto(0x3, 0x0, 0x100082) wait4$auto(r0, 0x0, 0xa, 0x0) 6.645180709s ago: executing program 3 (id=3739): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f00000011c0)=@task_fd_query={0x9, 0x21eb, 0x47ff, 0x100, 0xa, 0x1000109, 0xffffffffffffffff, 0x0, 0x3}, 0x6f3) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/pts/ptmx\x00', 0x2140, 0x0) r4 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000180), r2) sendmsg$auto_NFC_CMD_START_POLL(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$auto_NFC_CMD_DEV_UP(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r4, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x2}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x518ef842}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0xc000941) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r5 = socket(0x15, 0x5, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000003f00)='/sys/devices/virtual/net/bond0/bonding/ad_partner_key\x00', 0x60400, 0x0) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000003c0), r5) sendmsg$auto_NL80211_CMD_SET_PMKSA(r5, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f0000000400)={0x1e0, r7, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_STA_FLAGS2={0x73, 0x43, "a27d789db903dbf918d73ac70786d964b2d333628bf3e18ee97ae20da771b8a3a47d6c94286884d85ceeb3b1cc51e8f0dae529269775ae8808be3f70ce5ff297f41a34a8ff1d4f2f49c7553f2346320daee94dfdd22e51f37273accf81a1239abbd3099c0fd9ad19909c03d051e1e3"}, @NL80211_ATTR_HE_BSS_COLOR={0x2c, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x45, 0x17, "d79249783ab32a595d343e942cddca7e7a3a5bdc2d7a5e8a9d4c05202dde92ed68af8ca03d2bcc762ffd45bd4a8cfd0dfd31f958e673f5a06c341ec6f0e7da3beb"}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xc5, 0xbe, "a24f3ad46b0ddc0f5aa0697c120bbf6c13f8ae17f2c05a3114a6202bd76b5d094c1ddcd785dd68e15091fadd87975c02f457ca72471f1a993df0184f2daf0da370c8df3e0cfb1bf315fa595f04ecd6b0b816badbe2c071bb844a6a8094a735c2f0a3b147286f58cc266d501bf63a30f42ca5630f1b8359cb19594b70d2951c368951c72688d81e4f557f6417d3dcfe1425d51101e3f6fec993c09ef7a662341c8fa5f28f7da8aa5c5e68d9b1eae56963dc404cbc743a50577a0f9ff2ebfec5f56a"}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x10001}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x4}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x33}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x2000c055}, 0x90) read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000003f40)=""/156, 0x9c) sendmsg$auto(r5, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000040)={0x2c0, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_UNSOL_BCAST_PROBE_RESP={0x2a8, 0x127, 0x0, 0x1, [@NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x800}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x289, 0x2, "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"}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x7fff}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x10}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x20044000}, 0x40004) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) msgrcv$auto(0x9, 0x0, 0xfffffffffffffffc, 0x7, 0x80008) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) clock_nanosleep$auto(0xfffffff2, 0x5, 0x0, 0x0) ioctl$auto_USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, 0x0) 6.245374712s ago: executing program 4 (id=3743): socket(0x2, 0x2, 0x0) bind$auto(0x3, 0x0, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) lsm_list_modules$auto(0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) r2 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/aid\x00', 0x20000, 0x0) read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r2, 0x0, 0x0) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x89\x06s\x1cJ\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x10, 0x6) ioctl$auto_TIOCSTI2(r1, 0x5412, &(0x7f0000000840)) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/usb/drivers/usbtouchscreen/new_id\x00', 0xbce02, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), r0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x6082, 0x0) r3 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x40080, 0x0) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket(0x2, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x13}}, 0x54) ioctl$auto_MON_IOCQ_URB_LEN(r3, 0x9201, 0x0) 5.468494648s ago: executing program 4 (id=3746): socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) lsm_list_modules$auto(0x0, 0x0, 0x0) syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) r2 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/aid\x00', 0x20000, 0x0) read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r2, 0x0, 0x0) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x89\x06s\x1cJ\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x10, 0x6) ioctl$auto_TIOCSTI2(r1, 0x5412, &(0x7f0000000840)) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/usb/drivers/usbtouchscreen/new_id\x00', 0xbce02, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), r0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x6082, 0x0) r3 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x40080, 0x0) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x13}}, 0x54) getsockopt$auto(0xffffffffffffffff, 0x84, 0x66, 0x0, &(0x7f00000002c0)=0x8) ioctl$auto_MON_IOCQ_URB_LEN(r3, 0x9201, 0x0) 5.338070967s ago: executing program 3 (id=3747): socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) lsm_list_modules$auto(0x0, 0x0, 0x0) syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) r2 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/aid\x00', 0x20000, 0x0) read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r2, 0x0, 0x0) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x89\x06s\x1cJ\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x10, 0x6) ioctl$auto_TIOCSTI2(r1, 0x5412, &(0x7f0000000840)) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/usb/drivers/usbtouchscreen/new_id\x00', 0xbce02, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), r0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x6082, 0x0) r3 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x40080, 0x0) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x13}}, 0x54) getsockopt$auto(0xffffffffffffffff, 0x84, 0x66, 0x0, &(0x7f00000002c0)=0x8) ioctl$auto_MON_IOCQ_URB_LEN(r3, 0x9201, 0x0) 4.226509147s ago: executing program 8 (id=3748): openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/cpu1/power/pm_qos_resume_latency_us\x00', 0x183042, 0x0) prctl$auto(0x1000000001d, 0xffff, 0x2, 0x9, 0x1) sendfile$auto(r0, r0, 0x0, 0x3) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$auto(0x3, 0x541b, 0x10000000000402) unshare$auto(0x40000080) sync_file_range$auto(r0, 0x7, 0xfffffffffffffffe, 0xfffff800) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1ff, 0x7, 0x4, 0x5, 0x80000001) getgroups$auto(0x8, 0x0) r1 = openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll$auto(&(0x7f0000000280)={r1, 0x3, 0x4}, 0x2, 0x2) r2 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D1p\x00', 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_LINK(r2, 0x40044160, 0x0) r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) ioctl$auto_PROCMAP_QUERY(r3, 0xc0686611, &(0x7f0000000340)={0x18, 0x0, 0x4, 0x1, 0x8, 0x1, 0x0, 0x6, 0x5, 0x200, 0xffff7ffe, 0x80000000, 0x7ff, 0x7, 0x10000000009}) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) timer_create$auto(0x9, 0x0, 0x0) timer_settime$auto(0x0, 0x9, &(0x7f00000000c0)={{0x4, 0x10007}, {0x9}}, 0x0) rt_sigaction$auto(0x36, &(0x7f0000000000)={0x0, 0x4, 0x0}, 0x0, 0x8) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x48041, 0x0) write$auto(r4, 0x0, 0x6) 4.218746818s ago: executing program 7 (id=3756): socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) lsm_list_modules$auto(0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) r0 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/aid\x00', 0x20000, 0x0) read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r0, 0x0, 0x0) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x89\x06s\x1cJ\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x10, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/usb/drivers/usbtouchscreen/new_id\x00', 0xbce02, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x6082, 0x0) r1 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x40080, 0x0) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket(0x2, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x13}}, 0x54) ioctl$auto_MON_IOCQ_URB_LEN(r1, 0x9201, 0x0) 3.727578485s ago: executing program 8 (id=3749): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nullb0/queue/physical_block_size\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001600)=""/4098, 0xff70) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/input/event1\x00', 0xc80, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/radio3\x00', 0x0, 0x0) r1 = socket(0x2, 0x3, 0x1) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) landlock_create_ruleset$auto(&(0x7f0000000000)={0x0, 0x3, 0x2e1b}, 0xf4, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.0/usb1/power/wakeup_active_count\x00', 0x0, 0x0) preadv$auto(r2, &(0x7f0000000140)={0x0, 0xb}, 0xb, 0x2000000209, 0x5) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.4/usb5/bNumInterfaces\x00', 0x1a3080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, 0x0, 0x0) socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) poll$auto(&(0x7f0000000d40)={0x3, 0x1, 0xa}, 0x5, 0x400) shutdown$auto(0x200000003, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/zram0/initstate\x00', 0x101000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_wireguard(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x14, 0x944, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0xfff, 0x7, 0x8001, 0x5, 0x5, 0x3, 0x40, 0x7, 0x0, 0x0, 0x6, 0x0, 0x10000, 0x6, [0x0, 0x2, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0xfffffffffffffffd, 0x8, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1590, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x10]}, 0x1fe, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x6, 0x0) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x8b}}, 0x6a) connect$auto(0x3, 0x0, 0x55) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) read$auto(0x3, 0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) 3.551643089s ago: executing program 4 (id=3750): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0xffffffffffff7ffb, 0x1, 0x3fe, 0xeb1, 0xffffffffffffffff, 0x8000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, 0x0) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x30, 0xf1, 0xb0, @raw=0xfffff034}}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x4000080) ioctl$auto_TIOCVHANGUP2(0xffffffffffffffff, 0x5437, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x80000, 0x0) ioctl$auto(r1, 0x80104517, 0xffffffffffffffff) bpf$auto(0x0, 0x0, 0x6f4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.6/usb7/power/wakeup_active_count\x00') mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 3.454802941s ago: executing program 7 (id=3751): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D0c\x00', 0x20000, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_STATUS322(r0, 0x806c4120, &(0x7f0000000100)={0x0, 0x7, 0x95d7, 0x7f, 0x3, 0x1, 0x9, 0x2, 0x0, 0x7, 0xb, 0x8, 0x100, 0x2, 0x3, 0x3ff, 0x400, 0x80000000, "0c1056e3480805f935e214e44f620fa9eba8238cacc3d9e6fc45cf541e509fc2457ae4ae"}) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYRES8=r0, @ANYRES16=r0, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="0a00050054000000000000000a0600000000000000fc39000a00010070b28ae31a8d37de0700"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x20000010) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x25, 0xa, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r1 = socket(0x15, 0x5, 0x6) socket(0x2, 0x1, 0x106) connect$auto(r1, &(0x7f0000000300)=@phonet={0x23, 0x6, 0x7b, 0xf}, 0x2) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) shutdown$auto(0x200000003, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/pvrusb2/parameters/vbi_nr\x00', 0x200, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) 3.411228991s ago: executing program 8 (id=3752): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/1:13/strict_limit\x00', 0xa081, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002640)='/sys/kernel/debug/tracing/set_event_pid\x00', 0x2002, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x123002, 0x0) shmget$auto(0x8, 0x10565, 0x7ff) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) shmctl$auto(0x0, 0x0, 0xfffffffffffffffd) shmdt$auto(&(0x7f0000000000)='(\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000100), r1) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x27, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x11000000, 0x0, 0x7, 0x200000006d3c, 0x5, 0x10, 0xfffffffffffffffd]}, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 3.234823568s ago: executing program 3 (id=3753): socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) lsm_list_modules$auto(0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x201, 0x0) r2 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/aid\x00', 0x20000, 0x0) read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r2, 0x0, 0x0) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x89\x06s\x1cJ\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x10, 0x6) ioctl$auto_TIOCSTI2(r1, 0x5412, &(0x7f0000000840)) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/usb/drivers/usbtouchscreen/new_id\x00', 0xbce02, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), r0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x6082, 0x0) r3 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x40080, 0x0) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) r4 = socket(0x2, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x13}}, 0x54) getsockopt$auto(r4, 0x84, 0x66, 0x0, &(0x7f00000002c0)=0x8) ioctl$auto_MON_IOCQ_URB_LEN(r3, 0x9201, 0x0) 3.193993363s ago: executing program 7 (id=3754): r0 = openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000001680)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x2, 0x0) write$auto_uprobe_events_ops_trace_uprobe(r0, &(0x7f0000000000)="706f3a82d9e5cc7c2ceda8d50bfc94be9fe6c22ffaf8493a38", 0x19) (fail_nth: 9) 3.1333901s ago: executing program 8 (id=3755): socket(0x2, 0x2, 0x0) bind$auto(0x3, 0x0, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) lsm_list_modules$auto(0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) r2 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/aid\x00', 0x20000, 0x0) read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r2, 0x0, 0x0) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x89\x06s\x1cJ\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x10, 0x6) ioctl$auto_TIOCSTI2(r1, 0x5412, &(0x7f0000000840)) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/usb/drivers/usbtouchscreen/new_id\x00', 0xbce02, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), r0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x6082, 0x0) r3 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x40080, 0x0) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket(0x2, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x13}}, 0x54) ioctl$auto_MON_IOCQ_URB_LEN(r3, 0x9201, 0x0) 2.703156802s ago: executing program 7 (id=3757): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x800, 0x100) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0xe0) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x9, 0x4020009, 0xdf, 0xeb1, r0, 0xb) setns(0xffffffffffffffff, 0x0) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x30, 0xf1, 0xb0, @raw=0xfffff034}}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="ea12e528ded30ff1309c8b1613007984cb"], 0x14}}, 0x4000080) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = prctl$auto_PR_SCHED_CORE_SHARE_TO(0x6, 0x2, 0x0, 0x7fff, 0xffffffffffffffff) ioctl$auto_FIOQSIZE(r1, 0x5460, r5) r6 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000140), r5) r7 = semctl$auto_SEM_STAT(0x5, 0x9, 0x12, 0x9) openat$auto_nsim_udp_tunnels_info_reset_fops_udp_tunnels(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/netdevsim/netdevsim1/ports/0/udp_ports_reset\x00', 0x400000, 0x0) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r4, &(0x7f0000004480)={0x0, 0x0, &(0x7f0000004440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38020000", @ANYRES16=r6, @ANYBLOB="01002dbd7000fddbdf250300000017020180ac4ef4057fc1e86e4943361180ebd0adca39c0cb729d21e4c8deca6761e4ece02b6666567e483c5ad1012a80040044800c0007800800bd00", @ANYBLOB="9efb056c9886", @ANYBLOB="0800160000000000ad231215a072d59fda90b93800206a743755b15913acd5f2060f16190e755b7e47050d08aee69c1a34ac24e914ca438dec2e54d20e98a24f76e66e8dfd0ba1e10a4bd9bcbd07c27b51f2cb27824362cc4d99496c0345905ef54830ea45ed538914fbf2b04cddd1c597ae51edd46382253d6db39c625b02791fe11a20004b8008000d00", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="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"], 0x238}, 0x1, 0x0, 0x0, 0x20000840}, 0x20000840) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) fanotify_init$auto(0x8, 0x401) mmap$auto(0x0, 0x5810, 0xffb, 0x8000000008011, 0x3, 0x0) mmap$auto(0x0, 0x400000000004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000004) close_range$auto(0x2, 0x8, 0xfffffffe) socket$nl_generic(0x10, 0x3, 0x10) 2.435226235s ago: executing program 4 (id=3758): socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) lsm_list_modules$auto(0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) r0 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/aid\x00', 0x20000, 0x0) read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r0, 0x0, 0x0) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x89\x06s\x1cJ\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x10, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/usb/drivers/usbtouchscreen/new_id\x00', 0xbce02, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x6082, 0x0) r1 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x40080, 0x0) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket(0x2, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x13}}, 0x54) ioctl$auto_MON_IOCQ_URB_LEN(r1, 0x9201, 0x0) 1.844285653s ago: executing program 3 (id=3759): socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) lsm_list_modules$auto(0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) r0 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/aid\x00', 0x20000, 0x0) read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r0, 0x0, 0x0) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x89\x06s\x1cJ\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x10, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/usb/drivers/usbtouchscreen/new_id\x00', 0xbce02, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x6082, 0x0) r1 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x40080, 0x0) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket(0x2, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x13}}, 0x54) ioctl$auto_MON_IOCQ_URB_LEN(r1, 0x9201, 0x0) 1.65708597s ago: executing program 8 (id=3760): socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) lsm_list_modules$auto(0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) r0 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/aid\x00', 0x20000, 0x0) read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r0, 0x0, 0x0) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x89\x06s\x1cJ\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x10, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/usb/drivers/usbtouchscreen/new_id\x00', 0xbce02, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x6082, 0x0) r1 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x40080, 0x0) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket(0x2, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x13}}, 0x54) ioctl$auto_MON_IOCQ_URB_LEN(r1, 0x9201, 0x0) 1.302833347s ago: executing program 7 (id=3761): socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) lsm_list_modules$auto(0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) r0 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/aid\x00', 0x20000, 0x0) read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r0, 0x0, 0x0) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x89\x06s\x1cJ\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x10, 0x6) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x6082, 0x0) r1 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x40080, 0x0) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket(0x2, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x13}}, 0x54) ioctl$auto_MON_IOCQ_URB_LEN(r1, 0x9201, 0x0) 907.026423ms ago: executing program 4 (id=3762): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nullb0/queue/physical_block_size\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001600)=""/4098, 0xff70) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/input/event1\x00', 0xc80, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/radio3\x00', 0x0, 0x0) r1 = socket(0x2, 0x3, 0x1) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) landlock_create_ruleset$auto(&(0x7f0000000000)={0x0, 0x3, 0x2e1b}, 0xf4, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.0/usb1/power/wakeup_active_count\x00', 0x0, 0x0) preadv$auto(r2, &(0x7f0000000140)={0x0, 0xb}, 0xb, 0x2000000209, 0x5) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.4/usb5/bNumInterfaces\x00', 0x1a3080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, 0x0, 0x0) socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) poll$auto(&(0x7f0000000d40)={0x3, 0x1, 0xa}, 0x5, 0x400) shutdown$auto(0x200000003, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/zram0/initstate\x00', 0x101000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_wireguard(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x14, 0x944, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0xfff, 0x7, 0x8001, 0x5, 0x5, 0x3, 0x40, 0x7, 0x0, 0x0, 0x6, 0x0, 0x10000, 0x6, [0x0, 0x2, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0xfffffffffffffffd, 0x8, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1590, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x10]}, 0x1fe, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x6, 0x0) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x8b}}, 0x6a) connect$auto(0x3, 0x0, 0x55) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) read$auto(0x3, 0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) 377.461528ms ago: executing program 8 (id=3763): socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) lsm_list_modules$auto(0x0, 0x0, 0x0) syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) r2 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/aid\x00', 0x20000, 0x0) read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r2, 0x0, 0x0) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x89\x06s\x1cJ\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x10, 0x6) ioctl$auto_TIOCSTI2(r1, 0x5412, &(0x7f0000000840)) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/usb/drivers/usbtouchscreen/new_id\x00', 0xbce02, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), r0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x6082, 0x0) r3 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x40080, 0x0) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x13}}, 0x54) getsockopt$auto(0xffffffffffffffff, 0x84, 0x66, 0x0, &(0x7f00000002c0)=0x8) ioctl$auto_MON_IOCQ_URB_LEN(r3, 0x9201, 0x0) 377.269789ms ago: executing program 4 (id=3764): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D0c\x00', 0x20000, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_STATUS322(r0, 0x806c4120, &(0x7f0000000100)={0x0, 0x7, 0x95d7, 0x7f, 0x3, 0x1, 0x9, 0x2, 0x0, 0x7, 0xb, 0x8, 0x100, 0x2, 0x3, 0x3ff, 0x400, 0x80000000, "0c1056e3480805f935e214e44f620fa9eba8238cacc3d9e6fc45cf541e509fc2457ae4ae"}) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYRES8=r0, @ANYRES16=r0, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="0a00050054000000000000000a0600000000000000fc39000a00010070b28ae31a8d37de0700"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x20000010) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x25, 0xa, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r1 = socket(0x15, 0x5, 0x6) socket(0x2, 0x1, 0x106) connect$auto(r1, &(0x7f0000000300)=@phonet={0x23, 0x6, 0x7b, 0xf}, 0x2) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) shutdown$auto(0x200000003, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/pvrusb2/parameters/vbi_nr\x00', 0x200, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) 377.18207ms ago: executing program 3 (id=3765): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, 0x0, 0x20000010) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x2, 0x1, 0x106) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) (fail_nth: 2) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x5, 0x0) shutdown$auto(0x200000003, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x200, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) 147.709283ms ago: executing program 3 (id=3766): socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, 0x0, 0x54) lsm_list_modules$auto(0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) r2 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/aid\x00', 0x20000, 0x0) read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r2, 0x0, 0x0) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x89\x06s\x1cJ\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x10, 0x6) ioctl$auto_TIOCSTI2(r1, 0x5412, &(0x7f0000000840)) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/usb/drivers/usbtouchscreen/new_id\x00', 0xbce02, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), r0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x6082, 0x0) r3 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x40080, 0x0) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) r4 = socket(0x2, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x13}}, 0x54) getsockopt$auto(r4, 0x84, 0x66, 0x0, &(0x7f00000002c0)=0x8) ioctl$auto_MON_IOCQ_URB_LEN(r3, 0x9201, 0x0) 0s ago: executing program 7 (id=3767): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf250400000005000b002e0000"], 0x1c}}, 0x4044820) kernel console output (not intermixed with test programs): gister_sysctl_table+0xeaf/0x1910 [ 825.084305][T17236] should_failslab+0xc2/0x120 [ 825.084337][T17236] __kmalloc_noprof+0xcb/0x510 [ 825.084396][T17236] __register_sysctl_table+0xeaf/0x1910 [ 825.084461][T17236] ? __pfx___register_sysctl_table+0x10/0x10 [ 825.084514][T17236] ? is_module_address+0x2a/0x50 [ 825.084560][T17236] ? register_net_sysctl_sz+0x228/0x3e0 [ 825.084609][T17236] ? __asan_memcpy+0x3c/0x60 [ 825.084656][T17236] sctp_sysctl_net_register+0x15d/0x200 [ 825.084709][T17236] ? __pfx_sctp_defaults_init+0x10/0x10 [ 825.084755][T17236] sctp_defaults_init+0x6c4/0xd80 [ 825.084808][T17236] ? __pfx_sctp_defaults_init+0x10/0x10 [ 825.084855][T17236] ops_init+0x1df/0x5f0 [ 825.084904][T17236] setup_net+0x21f/0x860 [ 825.084938][T17236] ? __pfx_setup_net+0x10/0x10 [ 825.084977][T17236] ? down_read_killable+0xcc/0x380 [ 825.085005][T17236] ? __pfx_down_read_killable+0x10/0x10 [ 825.085031][T17236] ? __raw_spin_lock_init+0x3a/0x110 [ 825.085061][T17236] ? debug_mutex_init+0x37/0x70 [ 825.085095][T17236] copy_net_ns+0x2a6/0x5f0 [ 825.085131][T17236] create_new_namespaces+0x3ea/0xad0 [ 825.085187][T17236] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 825.085238][T17236] ksys_unshare+0x45d/0xa40 [ 825.085269][T17236] ? __pfx_ksys_unshare+0x10/0x10 [ 825.085298][T17236] ? xfd_validate_state+0x5d/0x180 [ 825.085352][T17236] __x64_sys_unshare+0x31/0x40 [ 825.085381][T17236] do_syscall_64+0xcd/0x250 [ 825.085427][T17236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.085468][T17236] RIP: 0033:0x7f7cd6d8d169 [ 825.085491][T17236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 825.085518][T17236] RSP: 002b:00007f7cd7b0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 825.085546][T17236] RAX: ffffffffffffffda RBX: 00007f7cd6fa5fa0 RCX: 00007f7cd6d8d169 [ 825.085564][T17236] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 825.085579][T17236] RBP: 00007f7cd6e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 825.085595][T17236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 825.085611][T17236] R13: 0000000000000000 R14: 00007f7cd6fa5fa0 R15: 00007ffe62590838 [ 825.085646][T17236] [ 825.164501][T17236] sysctl could not get directory: /net/sctp -12 [ 827.844570][T17308] Setting dangerous option i915.request_timeout_ms - tainting kernel [ 828.372006][T17320] FAULT_INJECTION: forcing a failure. [ 828.372006][T17320] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 828.385984][T17320] CPU: 0 UID: 0 PID: 17320 Comm: syz.6.2569 Tainted: G U 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 828.386023][T17320] Tainted: [U]=USER [ 828.386031][T17320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 828.386046][T17320] Call Trace: [ 828.386054][T17320] [ 828.386064][T17320] dump_stack_lvl+0x16c/0x1f0 [ 828.386110][T17320] should_fail_ex+0x50a/0x650 [ 828.386142][T17320] _copy_to_iter+0x465/0x1560 [ 828.386181][T17320] ? __pfx__copy_to_iter+0x10/0x10 [ 828.386210][T17320] ? __virt_addr_valid+0x1a4/0x590 [ 828.386244][T17320] ? __virt_addr_valid+0x5e/0x590 [ 828.386274][T17320] ? __phys_addr_symbol+0x30/0x80 [ 828.386301][T17320] ? __check_object_size+0x488/0x710 [ 828.386333][T17320] seq_read_iter+0x725/0x12b0 [ 828.386372][T17320] ? aa_file_perm+0x4d5/0xfe0 [ 828.386420][T17320] seq_read+0x39f/0x4e0 [ 828.386456][T17320] ? __pfx_seq_read+0x10/0x10 [ 828.386513][T17320] ? __pfx_seq_read+0x10/0x10 [ 828.386549][T17320] proc_reg_read+0x23d/0x330 [ 828.386600][T17320] ? __pfx_proc_reg_read+0x10/0x10 [ 828.386645][T17320] vfs_read+0x1df/0xbf0 [ 828.386685][T17320] ? __fget_files+0x1fc/0x3a0 [ 828.386724][T17320] ? __pfx_lock_release+0x10/0x10 [ 828.386764][T17320] ? __pfx_vfs_read+0x10/0x10 [ 828.386806][T17320] ? lock_acquire+0x2f/0xb0 [ 828.386841][T17320] ? __fget_files+0x40/0x3a0 [ 828.386882][T17320] ? __fget_files+0x206/0x3a0 [ 828.386927][T17320] __x64_sys_pread64+0x1f6/0x250 [ 828.386966][T17320] ? __pfx___x64_sys_pread64+0x10/0x10 [ 828.387014][T17320] do_syscall_64+0xcd/0x250 [ 828.387055][T17320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.387094][T17320] RIP: 0033:0x7f464118d169 [ 828.387115][T17320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 828.387140][T17320] RSP: 002b:00007f464201c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 828.387165][T17320] RAX: ffffffffffffffda RBX: 00007f46413a6240 RCX: 00007f464118d169 [ 828.387183][T17320] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000009 [ 828.387199][T17320] RBP: 00007f464201c090 R08: 0000000000000000 R09: 0000000000000000 [ 828.387214][T17320] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001 [ 828.387229][T17320] R13: 0000000000000000 R14: 00007f46413a6240 R15: 00007ffebca60238 [ 828.387263][T17320] [ 830.042117][T17347] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2575'. [ 830.283412][T17356] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2577'. [ 831.165117][T17382] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 832.221637][T17401] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2587'. [ 832.375202][T17407] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2589'. [ 834.555107][T17465] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2600'. [ 834.588392][T17465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 834.673654][T17465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 834.800622][T17465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 834.823705][T17475] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2601'. [ 834.844305][T17465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 836.521663][T17515] FAULT_INJECTION: forcing a failure. [ 836.521663][T17515] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 836.535208][T17515] CPU: 0 UID: 0 PID: 17515 Comm: syz.3.2606 Tainted: G U 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 836.535250][T17515] Tainted: [U]=USER [ 836.535259][T17515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 836.535275][T17515] Call Trace: [ 836.535284][T17515] [ 836.535295][T17515] dump_stack_lvl+0x16c/0x1f0 [ 836.535345][T17515] should_fail_ex+0x50a/0x650 [ 836.535373][T17515] ? __pfx___might_resched+0x10/0x10 [ 836.535429][T17515] should_fail_alloc_page+0xe7/0x130 [ 836.535462][T17515] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 836.535520][T17515] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 836.535576][T17515] ? __pfx_mark_lock+0x10/0x10 [ 836.535630][T17515] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 836.535682][T17515] ? hlock_class+0x4e/0x130 [ 836.535734][T17515] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 836.535786][T17515] ? policy_nodemask+0xea/0x4e0 [ 836.535820][T17515] alloc_pages_mpol+0x1fc/0x540 [ 836.535851][T17515] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 836.535882][T17515] ? find_held_lock+0x2d/0x110 [ 836.535923][T17515] alloc_pages_noprof+0x131/0x390 [ 836.535955][T17515] __pmd_alloc+0x3f/0x870 [ 836.536000][T17515] __handle_mm_fault+0x94a/0x2a40 [ 836.536061][T17515] ? __pfx___handle_mm_fault+0x10/0x10 [ 836.536106][T17515] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 836.536174][T17515] ? find_vma+0xc0/0x140 [ 836.536211][T17515] ? __pfx_find_vma+0x10/0x10 [ 836.536255][T17515] handle_mm_fault+0x3fa/0xaa0 [ 836.536309][T17515] do_user_addr_fault+0x7a3/0x13f0 [ 836.536362][T17515] exc_page_fault+0x5c/0xc0 [ 836.536406][T17515] asm_exc_page_fault+0x26/0x30 [ 836.536449][T17515] RIP: 0010:rep_movs_alternative+0x30/0x70 [ 836.536484][T17515] Code: f9 40 73 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 [ 836.536520][T17515] RSP: 0018:ffffc900041efc40 EFLAGS: 00050246 [ 836.536544][T17515] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000008 [ 836.536561][T17515] RDX: ffffed102865a045 RSI: 0000000000000000 RDI: ffff8881432d0220 [ 836.536580][T17515] RBP: 0000000000000008 R08: 0000000000000001 R09: ffffed102865a044 [ 836.536598][T17515] R10: ffff8881432d0227 R11: 0000000000000000 R12: 0000000000000000 [ 836.536616][T17515] R13: ffff8881432d0220 R14: 0000000000000000 R15: 0000000000000008 [ 836.536653][T17515] _copy_from_user+0x98/0xd0 [ 836.536689][T17515] sctp_setsockopt+0x2050/0xb810 [ 836.536731][T17515] ? __pfx_sctp_setsockopt+0x10/0x10 [ 836.536763][T17515] ? __pfx_aa_sk_perm+0x10/0x10 [ 836.536807][T17515] ? sock_common_setsockopt+0x2e/0xf0 [ 836.536847][T17515] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 836.536885][T17515] do_sock_setsockopt+0x222/0x480 [ 836.536921][T17515] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 836.536960][T17515] ? lock_acquire+0x2f/0xb0 [ 836.537022][T17515] __sys_setsockopt+0x1a0/0x230 [ 836.537078][T17515] __x64_sys_setsockopt+0xbd/0x160 [ 836.537126][T17515] ? do_syscall_64+0x91/0x250 [ 836.537173][T17515] ? lockdep_hardirqs_on+0x7c/0x110 [ 836.537217][T17515] do_syscall_64+0xcd/0x250 [ 836.537267][T17515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.537312][T17515] RIP: 0033:0x7f982538d169 [ 836.537335][T17515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 836.537376][T17515] RSP: 002b:00007f98262ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 836.537419][T17515] RAX: ffffffffffffffda RBX: 00007f98255a5fa0 RCX: 00007f982538d169 [ 836.537438][T17515] RDX: 0000000000000080 RSI: 0000010000000084 RDI: 0000000000000003 [ 836.537456][T17515] RBP: 00007f98262ce090 R08: 0000000000000008 R09: 0000000000000000 [ 836.537473][T17515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 836.537495][T17515] R13: 0000000000000000 R14: 00007f98255a5fa0 R15: 00007ffd0c05fee8 [ 836.537535][T17515] [ 838.649080][T17557] netlink: 93 bytes leftover after parsing attributes in process `syz.4.2616'. [ 838.661777][T17550] netlink: 'syz.5.2614': attribute type 1 has an invalid length. [ 840.544406][T17606] netlink: 346 bytes leftover after parsing attributes in process `syz.5.2623'. [ 841.595350][T17646] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2630'. [ 841.862771][T17652] netlink: 93 bytes leftover after parsing attributes in process `syz.3.2631'. [ 841.897941][T17657] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2633'. [ 842.279365][T17667] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input20 [ 843.061340][T17675] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input21 [ 843.703733][T17688] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input22 [ 844.386353][T17697] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2641'. [ 845.343878][T17718] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2645'. [ 846.084016][T17727] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input23 [ 846.468929][T17734] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input24 [ 847.603574][T17749] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input25 [ 848.078422][T17759] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2656'. [ 848.555049][T17768] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input26 [ 849.115663][T17776] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input27 [ 851.265561][T17817] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2668'. [ 851.705656][T17825] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input28 [ 852.331154][T17844] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input29 [ 852.550531][T17842] FAULT_INJECTION: forcing a failure. [ 852.550531][T17842] name failslab, interval 1, probability 0, space 0, times 0 [ 852.564228][T17842] CPU: 1 UID: 0 PID: 17842 Comm: syz.4.2676 Tainted: G U 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 852.564271][T17842] Tainted: [U]=USER [ 852.564278][T17842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 852.564291][T17842] Call Trace: [ 852.564297][T17842] [ 852.564305][T17842] dump_stack_lvl+0x16c/0x1f0 [ 852.564341][T17842] should_fail_ex+0x50a/0x650 [ 852.564368][T17842] ? fs_reclaim_acquire+0xae/0x150 [ 852.564398][T17842] should_failslab+0xc2/0x120 [ 852.564419][T17842] __kmalloc_node_track_caller_noprof+0xcf/0x510 [ 852.564458][T17842] ? apply_subsystem_event_filter+0x3ec/0x1410 [ 852.564491][T17842] kstrdup+0x53/0x100 [ 852.564518][T17842] apply_subsystem_event_filter+0x3ec/0x1410 [ 852.564553][T17842] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 852.564581][T17842] ? __might_fault+0xe3/0x190 [ 852.564614][T17842] ? __might_fault+0xe3/0x190 [ 852.564638][T17842] ? _copy_from_user+0x59/0xd0 [ 852.564663][T17842] subsystem_filter_write+0x95/0x120 [ 852.564691][T17842] ? __pfx_subsystem_filter_write+0x10/0x10 [ 852.564717][T17842] vfs_write+0x24c/0x1150 [ 852.564746][T17842] ? __fget_files+0x1fc/0x3a0 [ 852.564776][T17842] ? __pfx___mutex_lock+0x10/0x10 [ 852.564807][T17842] ? __pfx_vfs_write+0x10/0x10 [ 852.564842][T17842] ? __fget_files+0x206/0x3a0 [ 852.564878][T17842] ksys_write+0x12b/0x250 [ 852.564906][T17842] ? __pfx_ksys_write+0x10/0x10 [ 852.564941][T17842] do_syscall_64+0xcd/0x250 [ 852.564973][T17842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.565002][T17842] RIP: 0033:0x7f7cd6d8d169 [ 852.565017][T17842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 852.565037][T17842] RSP: 002b:00007f7cd7b0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 852.565055][T17842] RAX: ffffffffffffffda RBX: 00007f7cd6fa5fa0 RCX: 00007f7cd6d8d169 [ 852.565069][T17842] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000006 [ 852.565081][T17842] RBP: 00007f7cd6e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 852.565093][T17842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 852.565106][T17842] R13: 0000000000000000 R14: 00007f7cd6fa5fa0 R15: 00007ffe62590838 [ 852.565132][T17842] [ 853.817214][T17871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2681'. [ 857.509363][ T30] audit: type=1800 audit(6037638903.328:44): pid=17940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2696" name="dbroot" dev="configfs" ino=63422 res=0 errno=0 [ 857.813807][T17945] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input31 [ 858.543176][T17955] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2701'. [ 858.982874][T17969] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2712'. [ 863.003793][T18045] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input34 [ 863.798127][T18060] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input35 [ 865.419193][T18080] zswap: compressor not available [ 866.986494][T18127] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input37 [ 867.149543][T18131] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2736'. [ 867.892710][T18143] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input38 [ 867.965447][T15150] Bluetooth: hci4: unexpected event 0x3e length: 726 > 260 [ 867.985152][T18150] netlink: 350 bytes leftover after parsing attributes in process `syz.4.2741'. [ 869.851569][T18185] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input40 [ 869.907703][T18188] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input41 [ 871.552986][T18211] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input42 [ 872.145725][T18221] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input43 [ 872.595343][T18229] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input44 [ 872.997849][T18234] zswap: compressor not available [ 873.618005][T18255] snd_aloop snd_aloop.0: control 1:6:6:_heR:0 is already present [ 873.773337][T18260] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input45 [ 875.026393][T18279] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input46 [ 875.053254][T18278] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2765'. [ 875.314434][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.332655][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.705815][T18289] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input47 [ 875.926395][T18294] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input48 [ 876.656524][T18301] zswap: compressor not available [ 877.103128][T18322] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2775'. [ 877.444129][T18334] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input51 [ 877.719653][T18342] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input52 [ 877.780162][T18344] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input53 [ 878.257932][T18357] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input54 [ 879.449035][T18375] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2787'. [ 880.436559][T18402] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input57 [ 881.827209][T18435] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input58 [ 882.782468][T18450] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input59 [ 882.820595][T18451] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input60 [ 883.753729][T18468] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input61 [ 885.666009][T18510] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input63 [ 887.220789][T18537] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input65 [ 887.717334][T18549] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input66 [ 887.857994][T18555] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input67 [ 888.266910][T18564] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input68 [ 888.501782][T18572] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input69 [ 889.422900][T18600] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input73 [ 890.481010][T18620] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input74 [ 890.575001][T18625] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input75 [ 891.298309][T18635] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2846'. [ 893.808705][T18695] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input78 [ 893.913342][T18699] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input79 [ 894.883946][T18725] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input81 [ 896.000391][T18746] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2871'. [ 896.167889][T18749] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input82 [ 896.435528][T18755] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input83 [ 900.022054][T18819] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input86 [ 900.572183][T18830] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2890'. [ 901.248255][T15153] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 901.257986][T15153] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 901.265894][T15153] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 901.274626][T15153] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 901.329623][T15153] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 901.342661][T15153] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 902.257199][T18841] chnl_net:caif_netlink_parms(): no params data found [ 902.427354][ T9944] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.746138][ T9944] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.985747][T18868] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input88 [ 903.180198][ T9944] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.216763][T18841] bridge0: port 1(bridge_slave_0) entered blocking state [ 903.228569][T18841] bridge0: port 1(bridge_slave_0) entered disabled state [ 903.245089][T18841] bridge_slave_0: entered allmulticast mode [ 903.261408][T18841] bridge_slave_0: entered promiscuous mode [ 903.383320][T15150] Bluetooth: hci3: command tx timeout [ 903.503680][ T9944] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.567765][T18841] bridge0: port 2(bridge_slave_1) entered blocking state [ 903.582641][T18841] bridge0: port 2(bridge_slave_1) entered disabled state [ 903.590963][T18841] bridge_slave_1: entered allmulticast mode [ 903.602027][T18841] bridge_slave_1: entered promiscuous mode [ 903.754649][T18841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 904.083794][T18841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 904.219853][T18841] team0: Port device team_slave_0 added [ 904.304129][T18841] team0: Port device team_slave_1 added [ 904.437999][T18841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 904.455761][T18841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 904.522632][T18841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 904.544048][T18841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 904.552629][T18841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 904.587047][T18841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 904.615145][ T9944] bridge_slave_1: left allmulticast mode [ 904.631374][ T9944] bridge_slave_1: left promiscuous mode [ 904.641690][ T9944] bridge0: port 2(bridge_slave_1) entered disabled state [ 904.663720][ T9944] bridge_slave_0: left allmulticast mode [ 904.669427][ T9944] bridge_slave_0: left promiscuous mode [ 904.677651][ T9944] bridge0: port 1(bridge_slave_0) entered disabled state [ 905.462643][T15150] Bluetooth: hci3: command tx timeout [ 905.696348][ T9944] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 905.724889][ T9944] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 905.748405][ T9944] bond0 (unregistering): Released all slaves [ 905.993347][T18841] hsr_slave_0: entered promiscuous mode [ 906.006773][T18841] hsr_slave_1: entered promiscuous mode [ 906.971472][T18893] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2900'. [ 907.218648][T18904] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2901'. [ 907.543098][T15150] Bluetooth: hci3: command tx timeout [ 908.292094][T18911] Invalid ELF header magic: != ELF [ 908.700199][T18841] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 908.802356][ T9944] hsr_slave_0: left promiscuous mode [ 908.815050][ T9944] hsr_slave_1: left promiscuous mode [ 908.882423][ T9944] veth1_macvtap: left promiscuous mode [ 908.898542][ T9944] veth0_macvtap: left promiscuous mode [ 908.909034][ T9944] veth1_vlan: left promiscuous mode [ 908.922747][ T9944] veth0_vlan: left promiscuous mode [ 909.623577][T15150] Bluetooth: hci3: command tx timeout [ 911.070407][ T9944] team0 (unregistering): Port device team_slave_1 removed [ 911.314829][ T9944] team0 (unregistering): Port device team_slave_0 removed [ 911.810289][T18841] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 911.827087][T18841] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 911.896646][T18841] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 912.166351][T18841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 912.199504][T18841] 8021q: adding VLAN 0 to HW filter on device team0 [ 912.279688][T18975] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input89 [ 912.289987][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 912.297146][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 912.334849][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 912.342037][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 913.227452][T18841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 914.048204][T18841] veth0_vlan: entered promiscuous mode [ 914.065641][T18841] veth1_vlan: entered promiscuous mode [ 914.264969][T18841] veth0_macvtap: entered promiscuous mode [ 914.305641][T18841] veth1_macvtap: entered promiscuous mode [ 914.365121][T18841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 914.487702][T18841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 914.528643][T18841] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.572645][T18841] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.590090][T18841] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.600675][T18841] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.851447][ T9949] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 914.898928][ T9949] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 915.043968][ T9948] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 915.051873][ T9948] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 916.136830][T19054] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input90 [ 917.733448][T19084] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2924'. [ 921.958773][T19164] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2938'. [ 923.484322][T15153] Bluetooth: hci0: command 0x0406 tx timeout [ 924.779695][T19231] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input93 [ 927.573944][ T30] audit: type=1800 audit(6037638973.398:45): pid=19281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2960" name="SYSV00000400" dev="tmpfs" ino=0 res=0 errno=0 [ 928.189623][T19294] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2964'. [ 928.253126][T19293] netlink: 544 bytes leftover after parsing attributes in process `syz.4.2963'. [ 933.271459][T19388] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input95 [ 933.873538][ T30] audit: type=1800 audit(6037638979.718:46): pid=19404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2984" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 934.678589][T19422] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input96 [ 935.439544][T19443] Line length is too long: Should be less than 4094 [ 936.018317][T19448] netlink: 544 bytes leftover after parsing attributes in process `syz.3.2997'. [ 936.687681][T19462] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2999'. [ 936.749278][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.759028][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 936.812413][T19462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 936.873595][T19462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 936.935975][T19462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 936.952922][T19462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 938.445251][T19500] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3008'. [ 938.962060][T19517] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3011'. [ 939.163225][T19523] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input97 [ 939.649984][T19534] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3017'. [ 939.818128][T19534] FAULT_INJECTION: forcing a failure. [ 939.818128][T19534] name fail_futex, interval 1, probability 0, space 0, times 0 [ 939.832929][T19534] CPU: 1 UID: 0 PID: 19534 Comm: syz.6.3017 Tainted: G U 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 939.832977][T19534] Tainted: [U]=USER [ 939.832987][T19534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 939.833006][T19534] Call Trace: [ 939.833015][T19534] [ 939.833028][T19534] dump_stack_lvl+0x16c/0x1f0 [ 939.833083][T19534] should_fail_ex+0x50a/0x650 [ 939.833123][T19534] get_futex_key+0x4a3/0x1000 [ 939.833167][T19534] ? __pfx_get_futex_key+0x10/0x10 [ 939.833232][T19534] futex_wake+0xe8/0x4e0 [ 939.833284][T19534] ? __pfx_futex_wake+0x10/0x10 [ 939.833346][T19534] do_futex+0x1e5/0x350 [ 939.833387][T19534] ? __pfx_do_futex+0x10/0x10 [ 939.833431][T19534] ? __pfx___might_resched+0x10/0x10 [ 939.833489][T19534] __x64_sys_futex+0x1e1/0x4c0 [ 939.833533][T19534] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 939.833575][T19534] ? __pfx___x64_sys_futex+0x10/0x10 [ 939.833631][T19534] do_syscall_64+0xcd/0x250 [ 939.833686][T19534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.833735][T19534] RIP: 0033:0x7f464118d169 [ 939.833761][T19534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 939.833792][T19534] RSP: 002b:00007f464207f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 939.833821][T19534] RAX: ffffffffffffffda RBX: 00007f46413a5fa8 RCX: 00007f464118d169 [ 939.833841][T19534] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f46413a5fac [ 939.833861][T19534] RBP: 00007f46413a5fa0 R08: 00007f4642080000 R09: 0000000000000000 [ 939.833881][T19534] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f46413a5fac [ 939.833902][T19534] R13: 0000000000000000 R14: 00007ffebca60150 R15: 00007ffebca60238 [ 939.833938][T19534] [ 940.285949][T19534] FAULT_INJECTION: forcing a failure. [ 940.285949][T19534] name fail_futex, interval 1, probability 0, space 0, times 0 [ 940.317388][T19534] CPU: 1 UID: 0 PID: 19534 Comm: syz.6.3017 Tainted: G U 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 940.317432][T19534] Tainted: [U]=USER [ 940.317440][T19534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 940.317455][T19534] Call Trace: [ 940.317463][T19534] [ 940.317473][T19534] dump_stack_lvl+0x16c/0x1f0 [ 940.317532][T19534] should_fail_ex+0x50a/0x650 [ 940.317558][T19534] ? __lock_acquire+0x15a9/0x3c40 [ 940.317618][T19534] get_futex_key+0x1c3/0x1000 [ 940.317656][T19534] ? __pfx_get_futex_key+0x10/0x10 [ 940.317700][T19534] futex_wake+0xe8/0x4e0 [ 940.317744][T19534] ? __pfx_futex_wake+0x10/0x10 [ 940.317790][T19534] ? find_held_lock+0x2d/0x110 [ 940.317830][T19534] do_futex+0x1e5/0x350 [ 940.317866][T19534] ? __pfx_do_futex+0x10/0x10 [ 940.317900][T19534] ? __might_fault+0xe3/0x190 [ 940.317930][T19534] ? __might_fault+0xe3/0x190 [ 940.317963][T19534] mm_release+0x24e/0x300 [ 940.318007][T19534] do_exit+0x886/0x2db0 [ 940.318040][T19534] ? get_signal+0x8f7/0x26c0 [ 940.318084][T19534] ? __pfx_do_exit+0x10/0x10 [ 940.318120][T19534] ? do_raw_spin_lock+0x12d/0x2c0 [ 940.318149][T19534] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 940.318206][T19534] do_group_exit+0xd3/0x2a0 [ 940.318242][T19534] get_signal+0x24ed/0x26c0 [ 940.318331][T19534] ? __pfx_get_signal+0x10/0x10 [ 940.318381][T19534] ? __pfx_do_futex+0x10/0x10 [ 940.318417][T19534] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 940.318469][T19534] arch_do_signal_or_restart+0x90/0x7e0 [ 940.318508][T19534] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 940.318565][T19534] ? __pfx_do_writev+0x10/0x10 [ 940.318611][T19534] syscall_exit_to_user_mode+0x150/0x2a0 [ 940.318655][T19534] do_syscall_64+0xda/0x250 [ 940.318699][T19534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.318740][T19534] RIP: 0033:0x7f464118d169 [ 940.318761][T19534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 940.318788][T19534] RSP: 002b:00007f464207f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 940.318815][T19534] RAX: fffffffffffffe00 RBX: 00007f46413a5fa8 RCX: 00007f464118d169 [ 940.318834][T19534] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f46413a5fa8 [ 940.318852][T19534] RBP: 00007f46413a5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 940.318869][T19534] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f46413a5fac [ 940.318887][T19534] R13: 0000000000000000 R14: 00007ffebca60150 R15: 00007ffebca60238 [ 940.318919][T19534] [ 940.798459][T19555] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input98 [ 942.338508][T19595] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3036'. [ 942.950925][T19603] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3029'. [ 943.069696][T19607] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input99 [ 944.565887][T19647] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3040'. [ 944.710576][T19651] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3042'. [ 947.365156][T19708] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3054'. [ 947.518297][T19712] FAULT_INJECTION: forcing a failure. [ 947.518297][T19712] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 947.557417][T19712] CPU: 1 UID: 0 PID: 19712 Comm: syz.4.3055 Tainted: G U 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 947.557462][T19712] Tainted: [U]=USER [ 947.557472][T19712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 947.557489][T19712] Call Trace: [ 947.557506][T19712] [ 947.557517][T19712] dump_stack_lvl+0x16c/0x1f0 [ 947.557567][T19712] should_fail_ex+0x50a/0x650 [ 947.557601][T19712] _copy_from_user+0x2e/0xd0 [ 947.557637][T19712] copy_msghdr_from_user+0x99/0x160 [ 947.557688][T19712] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 947.557754][T19712] ___sys_sendmsg+0xff/0x1e0 [ 947.557805][T19712] ? __pfx____sys_sendmsg+0x10/0x10 [ 947.557869][T19712] ? __pfx_lock_release+0x10/0x10 [ 947.557911][T19712] ? trace_lock_acquire+0x14e/0x1f0 [ 947.557958][T19712] ? __fget_files+0x206/0x3a0 [ 947.558011][T19712] __sys_sendmsg+0x16e/0x220 [ 947.558041][T19712] ? __pfx___sys_sendmsg+0x10/0x10 [ 947.558091][T19712] do_syscall_64+0xcd/0x250 [ 947.558140][T19712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 947.558183][T19712] RIP: 0033:0x7f9af018d169 [ 947.558207][T19712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 947.558238][T19712] RSP: 002b:00007f9af1027038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 947.558267][T19712] RAX: ffffffffffffffda RBX: 00007f9af03a6080 RCX: 00007f9af018d169 [ 947.558287][T19712] RDX: 000000000400c004 RSI: 0000200000000140 RDI: 0000000000000003 [ 947.558304][T19712] RBP: 00007f9af1027090 R08: 0000000000000000 R09: 0000000000000000 [ 947.558322][T19712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 947.558338][T19712] R13: 0000000000000000 R14: 00007f9af03a6080 R15: 00007ffcff4b2a88 [ 947.558373][T19712] [ 949.917965][T19751] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input100 [ 951.619020][T19787] FAULT_INJECTION: forcing a failure. [ 951.619020][T19787] name failslab, interval 1, probability 0, space 0, times 0 [ 951.647539][T19787] CPU: 0 UID: 0 PID: 19787 Comm: syz.4.3070 Tainted: G U 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 951.647589][T19787] Tainted: [U]=USER [ 951.647599][T19787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 951.647618][T19787] Call Trace: [ 951.647628][T19787] [ 951.647640][T19787] dump_stack_lvl+0x16c/0x1f0 [ 951.647695][T19787] should_fail_ex+0x50a/0x650 [ 951.647727][T19787] ? fs_reclaim_acquire+0xae/0x150 [ 951.647772][T19787] ? __pfx_severities_coverage_open+0x10/0x10 [ 951.647826][T19787] should_failslab+0xc2/0x120 [ 951.647857][T19787] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 951.647909][T19787] ? __pfx___debugfs_file_get+0x10/0x10 [ 951.647954][T19787] ? seq_open+0x55/0x170 [ 951.647989][T19787] ? __pfx_apparmor_file_open+0x10/0x10 [ 951.648035][T19787] ? __pfx_severities_coverage_open+0x10/0x10 [ 951.648089][T19787] seq_open+0x55/0x170 [ 951.648140][T19787] full_proxy_open_regular+0x1b6/0x360 [ 951.648194][T19787] do_dentry_open+0x735/0x1c40 [ 951.648242][T19787] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 951.648294][T19787] ? inode_permission+0xdd/0x5f0 [ 951.648336][T19787] vfs_open+0x82/0x3f0 [ 951.648367][T19787] ? may_open+0x1f2/0x400 [ 951.648409][T19787] path_openat+0x1e88/0x2d80 [ 951.648473][T19787] ? __pfx_path_openat+0x10/0x10 [ 951.648523][T19787] ? __pfx___lock_acquire+0x10/0x10 [ 951.648568][T19787] ? lock_acquire.part.0+0x11b/0x380 [ 951.648616][T19787] ? find_held_lock+0x2d/0x110 [ 951.648660][T19787] do_filp_open+0x20c/0x470 [ 951.648710][T19787] ? __pfx_do_filp_open+0x10/0x10 [ 951.648756][T19787] ? find_held_lock+0x2d/0x110 [ 951.648820][T19787] ? alloc_fd+0x41f/0x760 [ 951.648874][T19787] do_sys_openat2+0x17a/0x1e0 [ 951.648921][T19787] ? __pfx_do_sys_openat2+0x10/0x10 [ 951.649033][T19787] __x64_sys_openat+0x175/0x210 [ 951.649072][T19787] ? __pfx___x64_sys_openat+0x10/0x10 [ 951.649124][T19787] do_syscall_64+0xcd/0x250 [ 951.649179][T19787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.649225][T19787] RIP: 0033:0x7f9af018d169 [ 951.649250][T19787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 951.649282][T19787] RSP: 002b:00007f9af1048038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 951.649312][T19787] RAX: ffffffffffffffda RBX: 00007f9af03a5fa0 RCX: 00007f9af018d169 [ 951.649334][T19787] RDX: 0000000000121200 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 951.649356][T19787] RBP: 00007f9af020e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 951.649376][T19787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 951.649395][T19787] R13: 0000000000000000 R14: 00007f9af03a5fa0 R15: 00007ffcff4b2a88 [ 951.649436][T19787] [ 956.757636][T19852] input input101: cannot allocate more than FF_MAX_EFFECTS effects [ 958.033065][T19867] FAULT_INJECTION: forcing a failure. [ 958.033065][T19867] name failslab, interval 1, probability 0, space 0, times 0 [ 958.072615][T19867] CPU: 0 UID: 0 PID: 19867 Comm: syz.4.3085 Tainted: G U 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 958.072651][T19867] Tainted: [U]=USER [ 958.072659][T19867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 958.072673][T19867] Call Trace: [ 958.072680][T19867] [ 958.072689][T19867] dump_stack_lvl+0x16c/0x1f0 [ 958.072728][T19867] should_fail_ex+0x50a/0x650 [ 958.072750][T19867] ? fs_reclaim_acquire+0xae/0x150 [ 958.072782][T19867] ? apply_subsystem_event_filter+0x4d0/0x1410 [ 958.072817][T19867] should_failslab+0xc2/0x120 [ 958.072839][T19867] __kmalloc_cache_noprof+0x68/0x410 [ 958.072891][T19867] ? append_filter_err+0x41f/0x5e0 [ 958.072923][T19867] apply_subsystem_event_filter+0x4d0/0x1410 [ 958.072963][T19867] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 958.072995][T19867] ? __might_fault+0xe3/0x190 [ 958.073019][T19867] ? __might_fault+0xe3/0x190 [ 958.073048][T19867] ? _copy_from_user+0x59/0xd0 [ 958.073078][T19867] subsystem_filter_write+0x95/0x120 [ 958.073112][T19867] ? __pfx_subsystem_filter_write+0x10/0x10 [ 958.073143][T19867] vfs_write+0x24c/0x1150 [ 958.073178][T19867] ? __fget_files+0x1fc/0x3a0 [ 958.073214][T19867] ? __pfx___mutex_lock+0x10/0x10 [ 958.073251][T19867] ? __pfx_vfs_write+0x10/0x10 [ 958.073299][T19867] ? __fget_files+0x206/0x3a0 [ 958.073343][T19867] ksys_write+0x12b/0x250 [ 958.073376][T19867] ? __pfx_ksys_write+0x10/0x10 [ 958.073419][T19867] do_syscall_64+0xcd/0x250 [ 958.073458][T19867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.073493][T19867] RIP: 0033:0x7f9af018d169 [ 958.073512][T19867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 958.073537][T19867] RSP: 002b:00007f9af1027038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 958.073559][T19867] RAX: ffffffffffffffda RBX: 00007f9af03a6080 RCX: 00007f9af018d169 [ 958.073576][T19867] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 958.073590][T19867] RBP: 00007f9af020e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 958.073605][T19867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 958.073620][T19867] R13: 0000000000000000 R14: 00007f9af03a6080 R15: 00007ffcff4b2a88 [ 958.073649][T19867] [ 958.554174][T15153] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 958.566603][T15153] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 958.575380][T15153] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 958.583910][T15153] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 958.591765][T15153] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 958.599439][T15153] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 958.997186][T19868] chnl_net:caif_netlink_parms(): no params data found [ 959.197268][T19868] bridge0: port 1(bridge_slave_0) entered blocking state [ 959.212696][T19868] bridge0: port 1(bridge_slave_0) entered disabled state [ 959.222824][T19868] bridge_slave_0: entered allmulticast mode [ 959.243053][T19868] bridge_slave_0: entered promiscuous mode [ 959.252209][T19868] bridge0: port 2(bridge_slave_1) entered blocking state [ 959.262748][T19868] bridge0: port 2(bridge_slave_1) entered disabled state [ 959.272785][T19868] bridge_slave_1: entered allmulticast mode [ 959.283548][T19868] bridge_slave_1: entered promiscuous mode [ 959.358572][T19868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 959.383386][T19868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 959.475002][T19868] team0: Port device team_slave_0 added [ 959.503485][T19868] team0: Port device team_slave_1 added [ 959.562886][T19868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 959.569859][T19868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 959.596260][T19868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 959.613649][T19868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 959.623166][T19868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 959.663667][T19868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 959.843811][T19868] hsr_slave_0: entered promiscuous mode [ 959.853152][T19868] hsr_slave_1: entered promiscuous mode [ 959.859136][T19868] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 959.870925][T19868] Cannot create hsr debugfs directory [ 960.330582][T19868] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 960.364476][T19868] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 960.385570][T19868] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 960.405774][T19868] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 960.561353][T19868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 960.616486][T19868] 8021q: adding VLAN 0 to HW filter on device team0 [ 960.643676][ T3534] bridge0: port 1(bridge_slave_0) entered blocking state [ 960.650766][ T3534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 960.662654][T15153] Bluetooth: hci4: command tx timeout [ 960.669923][ T9944] bridge0: port 2(bridge_slave_1) entered blocking state [ 960.677041][ T9944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 961.224447][T19868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 961.933526][T19868] veth0_vlan: entered promiscuous mode [ 961.965281][T19868] veth1_vlan: entered promiscuous mode [ 962.170264][T19868] veth0_macvtap: entered promiscuous mode [ 962.207125][T19868] veth1_macvtap: entered promiscuous mode [ 962.273143][T19868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 962.298314][T19868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 962.380692][T19868] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.396398][T19868] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.414282][T19868] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.432704][T19868] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.698552][ T9944] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 962.713852][ T9944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 962.752576][T15153] Bluetooth: hci4: command tx timeout [ 962.807267][ T9944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 962.834086][ T9944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 964.696175][T19938] netlink: 330 bytes leftover after parsing attributes in process `syz.6.3092'. [ 964.825484][T15153] Bluetooth: hci4: command tx timeout [ 965.258882][T19962] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3098'. [ 965.416478][T19962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 965.433187][T19962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 965.455759][T19962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 965.496249][T19962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 965.905532][T19975] FAULT_INJECTION: forcing a failure. [ 965.905532][T19975] name failslab, interval 1, probability 0, space 0, times 0 [ 965.922633][T19975] CPU: 0 UID: 0 PID: 19975 Comm: syz.6.3101 Tainted: G U 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 965.922680][T19975] Tainted: [U]=USER [ 965.922690][T19975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 965.922706][T19975] Call Trace: [ 965.922714][T19975] [ 965.922726][T19975] dump_stack_lvl+0x16c/0x1f0 [ 965.922778][T19975] should_fail_ex+0x50a/0x650 [ 965.922815][T19975] ? fs_reclaim_acquire+0xae/0x150 [ 965.922876][T19975] ? apply_subsystem_event_filter+0x3cc/0x1410 [ 965.922919][T19975] should_failslab+0xc2/0x120 [ 965.922952][T19975] __kmalloc_cache_noprof+0x68/0x410 [ 965.923002][T19975] apply_subsystem_event_filter+0x3cc/0x1410 [ 965.923052][T19975] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 965.923094][T19975] ? __might_fault+0xe3/0x190 [ 965.923127][T19975] ? __might_fault+0xe3/0x190 [ 965.923166][T19975] ? _copy_from_user+0x59/0xd0 [ 965.923206][T19975] subsystem_filter_write+0x95/0x120 [ 965.923251][T19975] ? __pfx_subsystem_filter_write+0x10/0x10 [ 965.923291][T19975] vfs_write+0x24c/0x1150 [ 965.923339][T19975] ? __fget_files+0x1fc/0x3a0 [ 965.923388][T19975] ? __pfx___mutex_lock+0x10/0x10 [ 965.923438][T19975] ? __pfx_vfs_write+0x10/0x10 [ 965.923497][T19975] ? __fget_files+0x206/0x3a0 [ 965.923556][T19975] ksys_write+0x12b/0x250 [ 965.923606][T19975] ? __pfx_ksys_write+0x10/0x10 [ 965.923667][T19975] do_syscall_64+0xcd/0x250 [ 965.923729][T19975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 965.923784][T19975] RIP: 0033:0x7f464118d169 [ 965.923821][T19975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 965.923852][T19975] RSP: 002b:00007f464205e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 965.923881][T19975] RAX: ffffffffffffffda RBX: 00007f46413a6080 RCX: 00007f464118d169 [ 965.923901][T19975] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 965.923920][T19975] RBP: 00007f464120e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 965.923939][T19975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 965.923958][T19975] R13: 0000000000000000 R14: 00007f46413a6080 R15: 00007ffebca60238 [ 965.924013][T19975] [ 966.912677][T15153] Bluetooth: hci4: command tx timeout [ 967.392979][T19994] netlink: 330 bytes leftover after parsing attributes in process `syz.3.3106'. [ 967.550892][ T30] audit: type=1800 audit(6037639021.390:47): pid=20006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3110" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 969.414372][ T30] audit: type=1800 audit(6037639023.260:48): pid=20050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3119" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 969.566655][T20055] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3120'. [ 969.722411][T20054] netlink: 330 bytes leftover after parsing attributes in process `syz.7.3121'. [ 970.816338][T20091] FAULT_INJECTION: forcing a failure. [ 970.816338][T20091] name failslab, interval 1, probability 0, space 0, times 0 [ 970.882766][T20091] CPU: 1 UID: 0 PID: 20091 Comm: syz.4.3130 Tainted: G U 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 970.882814][T20091] Tainted: [U]=USER [ 970.882823][T20091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 970.882841][T20091] Call Trace: [ 970.882851][T20091] [ 970.882863][T20091] dump_stack_lvl+0x16c/0x1f0 [ 970.882916][T20091] should_fail_ex+0x50a/0x650 [ 970.882946][T20091] ? fs_reclaim_acquire+0xae/0x150 [ 970.882991][T20091] should_failslab+0xc2/0x120 [ 970.883023][T20091] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 970.883075][T20091] ? __pmd_alloc+0xc3/0x870 [ 970.883124][T20091] __pmd_alloc+0xc3/0x870 [ 970.883173][T20091] __handle_mm_fault+0x94a/0x2a40 [ 970.883235][T20091] ? __pfx___handle_mm_fault+0x10/0x10 [ 970.883284][T20091] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 970.883372][T20091] ? find_vma+0xc0/0x140 [ 970.883411][T20091] ? __pfx_find_vma+0x10/0x10 [ 970.883456][T20091] handle_mm_fault+0x3fa/0xaa0 [ 970.883514][T20091] do_user_addr_fault+0x7a3/0x13f0 [ 970.883570][T20091] exc_page_fault+0x5c/0xc0 [ 970.883617][T20091] asm_exc_page_fault+0x26/0x30 [ 970.883662][T20091] RIP: 0010:rep_movs_alternative+0x30/0x70 [ 970.883699][T20091] Code: f9 40 73 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 [ 970.883730][T20091] RSP: 0018:ffffc900051e7c40 EFLAGS: 00050246 [ 970.883755][T20091] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000008 [ 970.883774][T20091] RDX: ffffed10285dc7f5 RSI: 0000000000000000 RDI: ffff888142ee3fa0 [ 970.883795][T20091] RBP: 0000000000000008 R08: 0000000000000001 R09: ffffed10285dc7f4 [ 970.883815][T20091] R10: ffff888142ee3fa7 R11: 0000000000000000 R12: 0000000000000000 [ 970.883836][T20091] R13: ffff888142ee3fa0 R14: 0000000000000000 R15: 0000000000000008 [ 970.883877][T20091] _copy_from_user+0x98/0xd0 [ 970.883916][T20091] sctp_setsockopt+0x2050/0xb810 [ 970.883958][T20091] ? __pfx_sctp_setsockopt+0x10/0x10 [ 970.883991][T20091] ? __pfx_aa_sk_perm+0x10/0x10 [ 970.884038][T20091] ? sock_common_setsockopt+0x2e/0xf0 [ 970.884079][T20091] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 970.884121][T20091] do_sock_setsockopt+0x222/0x480 [ 970.884159][T20091] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 970.884200][T20091] ? lock_acquire+0x2f/0xb0 [ 970.884266][T20091] __sys_setsockopt+0x1a0/0x230 [ 970.884330][T20091] __x64_sys_setsockopt+0xbd/0x160 [ 970.884379][T20091] ? do_syscall_64+0x91/0x250 [ 970.884427][T20091] ? lockdep_hardirqs_on+0x7c/0x110 [ 970.884473][T20091] do_syscall_64+0xcd/0x250 [ 970.884526][T20091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.884571][T20091] RIP: 0033:0x7f9af018d169 [ 970.884596][T20091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 970.884626][T20091] RSP: 002b:00007f9af1027038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 970.884655][T20091] RAX: ffffffffffffffda RBX: 00007f9af03a6080 RCX: 00007f9af018d169 [ 970.884677][T20091] RDX: 0000000000000080 RSI: 0000010000000084 RDI: 0000000000000003 [ 970.884697][T20091] RBP: 00007f9af1027090 R08: 0000000000000008 R09: 0000000000000000 [ 970.884717][T20091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 970.884737][T20091] R13: 0000000000000001 R14: 00007f9af03a6080 R15: 00007ffcff4b2a88 [ 970.884777][T20091] [ 971.340118][T20094] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3131'. [ 972.055324][T20113] : Can't lookup blockdev [ 973.288398][T20142] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3144'. [ 975.924329][T20216] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3163'. [ 977.099079][T20252] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3173'. [ 978.682601][T20288] FAULT_INJECTION: forcing a failure. [ 978.682601][T20288] name fail_futex, interval 1, probability 0, space 0, times 0 [ 978.753300][T20288] CPU: 1 UID: 0 PID: 20288 Comm: syz.3.3183 Tainted: G U 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 978.753346][T20288] Tainted: [U]=USER [ 978.753356][T20288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 978.753372][T20288] Call Trace: [ 978.753381][T20288] [ 978.753393][T20288] dump_stack_lvl+0x16c/0x1f0 [ 978.753446][T20288] should_fail_ex+0x50a/0x650 [ 978.753485][T20288] ? lockdep_hardirqs_on+0x7c/0x110 [ 978.753537][T20288] should_fail_futex+0x4c/0x60 [ 978.753575][T20288] __x64_sys_futex+0x260/0x4c0 [ 978.753620][T20288] ? __pfx___x64_sys_futex+0x10/0x10 [ 978.753662][T20288] ? rcu_is_watching+0x12/0xc0 [ 978.753707][T20288] do_syscall_64+0xcd/0x250 [ 978.753760][T20288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.753805][T20288] RIP: 0033:0x7f982538d169 [ 978.753830][T20288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 978.753860][T20288] RSP: 002b:00007ffd0c060048 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 978.753889][T20288] RAX: ffffffffffffffda RBX: 00000000000eeeda RCX: 00007f982538d169 [ 978.753910][T20288] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f98255a5fac [ 978.753930][T20288] RBP: 0000000000000032 R08: 00007f98262cf000 R09: 0000000b0c06033f [ 978.753951][T20288] R10: 00007ffd0c060140 R11: 0000000000000246 R12: 00007f98255a5fac [ 978.753971][T20288] R13: 00007ffd0c060140 R14: 00000000000eef0c R15: 00007ffd0c060160 [ 978.754010][T20288] [ 979.198121][T20304] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3186'. [ 979.915810][T20317] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 979.948429][T20317] CIFS mount error: No usable UNC path provided in device string! [ 979.948429][T20317] [ 979.959288][T20317] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 984.150394][T20400] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3204'. [ 985.678820][T20438] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3211'. [ 986.407379][ T30] audit: type=1800 audit(6037639048.250:49): pid=20453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3214" name="version" dev="configfs" ino=77335 res=0 errno=0 [ 987.203795][T20466] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3216'. [ 988.052910][T20478] [U] ^@ [ 992.860923][T20583] sd 0:0:1:0: PR command failed: 1026 [ 992.885754][T20583] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 992.930907][T20583] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 993.441276][T20599] Invalid ELF header magic: != ELF [ 998.185207][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.191646][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1008.867313][T15150] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1008.882020][T15150] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1008.894728][T15150] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1008.903809][T15150] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1008.924411][T15150] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1008.933105][T15150] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1010.323717][T20646] chnl_net:caif_netlink_parms(): no params data found [ 1010.802696][T20646] bridge0: port 1(bridge_slave_0) entered blocking state [ 1010.809914][T20646] bridge0: port 1(bridge_slave_0) entered disabled state [ 1010.826360][T20646] bridge_slave_0: entered allmulticast mode [ 1010.846110][T20646] bridge_slave_0: entered promiscuous mode [ 1010.864319][T20646] bridge0: port 2(bridge_slave_1) entered blocking state [ 1010.871468][T20646] bridge0: port 2(bridge_slave_1) entered disabled state [ 1010.882794][T20646] bridge_slave_1: entered allmulticast mode [ 1010.890047][T20646] bridge_slave_1: entered promiscuous mode [ 1010.960077][T20646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1010.979930][T20646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1010.989474][T15150] Bluetooth: hci5: command tx timeout [ 1011.053744][T20686] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3253'. [ 1011.099025][T20646] team0: Port device team_slave_0 added [ 1011.171562][T20646] team0: Port device team_slave_1 added [ 1011.310970][T20646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1011.322792][T20646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1011.385267][T20646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1011.401690][T20691] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3257'. [ 1011.424974][T20646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1011.431970][T20646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1011.492554][T20646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1011.587653][T20646] hsr_slave_0: entered promiscuous mode [ 1011.595746][T20646] hsr_slave_1: entered promiscuous mode [ 1011.601948][T20646] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1011.622254][T20646] Cannot create hsr debugfs directory [ 1011.814165][T15153] Bluetooth: hci4: Malformed LE Event: 0x1d [ 1011.921050][T20705] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3260'. [ 1012.144338][T20646] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1012.164332][T20646] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1012.185903][T20646] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1012.206657][T20646] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1012.325820][T20646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1012.359178][T20646] 8021q: adding VLAN 0 to HW filter on device team0 [ 1012.392584][ T3534] bridge0: port 1(bridge_slave_0) entered blocking state [ 1012.399762][ T3534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1012.450976][ T9942] bridge0: port 2(bridge_slave_1) entered blocking state [ 1012.458156][ T9942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1012.694966][T20646] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1013.045300][T20728] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3265'. [ 1013.072655][T15153] Bluetooth: hci5: command tx timeout [ 1013.984544][T20646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1015.142655][T15153] Bluetooth: hci5: command tx timeout [ 1015.194369][T20646] veth0_vlan: entered promiscuous mode [ 1015.242641][T20646] veth1_vlan: entered promiscuous mode [ 1015.417841][T20646] veth0_macvtap: entered promiscuous mode [ 1015.458913][T20646] veth1_macvtap: entered promiscuous mode [ 1015.717549][T20646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1015.748813][T20646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1015.864326][T20646] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.902517][T20646] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.982929][T20646] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.991825][T20646] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.423483][ T9948] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1016.438730][ T9948] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1016.479181][ T3534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1016.516167][ T3534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1016.748735][T15153] Bluetooth: hci0: Malformed LE Event: 0x1d [ 1017.224131][T15153] Bluetooth: hci5: command tx timeout [ 1018.737364][T20805] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3283'. [ 1021.376006][T20844] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3280'. [ 1021.388495][T20844] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1021.396459][T20846] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1021.405561][T20844] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1021.420247][T20844] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1021.442818][T20844] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1023.056462][T20876] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3289'. [ 1025.867759][T15153] Bluetooth: hci3: command 0x0406 tx timeout [ 1025.901407][T20910] FAULT_INJECTION: forcing a failure. [ 1025.901407][T20910] name failslab, interval 1, probability 0, space 0, times 0 [ 1025.960320][T15153] Bluetooth: hci3: Malformed LE Event: 0x1d [ 1025.978083][T20910] CPU: 0 UID: 0 PID: 20910 Comm: syz.3.3296 Tainted: G U 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 1025.978127][T20910] Tainted: [U]=USER [ 1025.978137][T20910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1025.978153][T20910] Call Trace: [ 1025.978162][T20910] [ 1025.978172][T20910] dump_stack_lvl+0x16c/0x1f0 [ 1025.978221][T20910] should_fail_ex+0x50a/0x650 [ 1025.978258][T20910] ? fs_reclaim_acquire+0xae/0x150 [ 1025.978299][T20910] ? ops_init+0x77/0x5f0 [ 1025.978326][T20910] should_failslab+0xc2/0x120 [ 1025.978356][T20910] __kmalloc_noprof+0xcb/0x510 [ 1025.978401][T20910] ? __raw_spin_lock_init+0x3a/0x110 [ 1025.978435][T20910] ops_init+0x77/0x5f0 [ 1025.978476][T20910] setup_net+0x21f/0x860 [ 1025.978506][T20910] ? __pfx_setup_net+0x10/0x10 [ 1025.978533][T20910] ? down_read_killable+0xcc/0x380 [ 1025.978559][T20910] ? __pfx_down_read_killable+0x10/0x10 [ 1025.978584][T20910] ? __raw_spin_lock_init+0x3a/0x110 [ 1025.978612][T20910] ? debug_mutex_init+0x37/0x70 [ 1025.978644][T20910] copy_net_ns+0x2a6/0x5f0 [ 1025.978680][T20910] create_new_namespaces+0x3ea/0xad0 [ 1025.978734][T20910] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1025.978784][T20910] ksys_unshare+0x45d/0xa40 [ 1025.978814][T20910] ? __pfx_ksys_unshare+0x10/0x10 [ 1025.978841][T20910] ? xfd_validate_state+0x5d/0x180 [ 1025.978892][T20910] __x64_sys_unshare+0x31/0x40 [ 1025.978922][T20910] do_syscall_64+0xcd/0x250 [ 1025.978966][T20910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1025.979005][T20910] RIP: 0033:0x7f982538d169 [ 1025.979026][T20910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1025.979053][T20910] RSP: 002b:00007f98262ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1025.979079][T20910] RAX: ffffffffffffffda RBX: 00007f98255a5fa0 RCX: 00007f982538d169 [ 1025.979098][T20910] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1025.979114][T20910] RBP: 00007f982540e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1025.979130][T20910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1025.979145][T20910] R13: 0000000000000000 R14: 00007f98255a5fa0 R15: 00007ffd0c05fee8 [ 1025.979177][T20910] [ 1026.432522][ T30] audit: type=1800 audit(6037639088.260:50): pid=20913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3297" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 1027.601234][T20926] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3301'. [ 1027.610949][T20920] sd 0:0:1:0: PR command failed: 1026 [ 1027.642669][T20920] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1027.649460][T20920] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1027.908847][T20934] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3303'. [ 1028.963845][T20940] random: crng reseeded on system resumption [ 1031.128059][T20988] FAULT_INJECTION: forcing a failure. [ 1031.128059][T20988] name failslab, interval 1, probability 0, space 0, times 0 [ 1031.162345][T20988] CPU: 1 UID: 0 PID: 20988 Comm: syz.4.3311 Tainted: G U 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 1031.162388][T20988] Tainted: [U]=USER [ 1031.162398][T20988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1031.162413][T20988] Call Trace: [ 1031.162419][T20988] [ 1031.162427][T20988] dump_stack_lvl+0x16c/0x1f0 [ 1031.162477][T20988] should_fail_ex+0x50a/0x650 [ 1031.162504][T20988] ? fs_reclaim_acquire+0xae/0x150 [ 1031.162551][T20988] ? ops_init+0x77/0x5f0 [ 1031.162573][T20988] should_failslab+0xc2/0x120 [ 1031.162593][T20988] __kmalloc_noprof+0xcb/0x510 [ 1031.162625][T20988] ? __raw_spin_lock_init+0x3a/0x110 [ 1031.162648][T20988] ops_init+0x77/0x5f0 [ 1031.162671][T20988] setup_net+0x21f/0x860 [ 1031.162692][T20988] ? __pfx_setup_net+0x10/0x10 [ 1031.162712][T20988] ? down_read_killable+0xcc/0x380 [ 1031.162731][T20988] ? __pfx_down_read_killable+0x10/0x10 [ 1031.162750][T20988] ? __raw_spin_lock_init+0x3a/0x110 [ 1031.162770][T20988] ? debug_mutex_init+0x37/0x70 [ 1031.162794][T20988] copy_net_ns+0x2a6/0x5f0 [ 1031.162819][T20988] create_new_namespaces+0x3ea/0xad0 [ 1031.162862][T20988] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1031.162919][T20988] ksys_unshare+0x45d/0xa40 [ 1031.162943][T20988] ? __pfx_ksys_unshare+0x10/0x10 [ 1031.162987][T20988] ? ksys_mmap_pgoff+0x85/0x5c0 [ 1031.163026][T20988] __x64_sys_unshare+0x31/0x40 [ 1031.163051][T20988] do_syscall_64+0xcd/0x250 [ 1031.163089][T20988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1031.163123][T20988] RIP: 0033:0x7f9af018d169 [ 1031.163142][T20988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1031.163166][T20988] RSP: 002b:00007f9af1048038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1031.163188][T20988] RAX: ffffffffffffffda RBX: 00007f9af03a5fa0 RCX: 00007f9af018d169 [ 1031.163204][T20988] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1031.163219][T20988] RBP: 00007f9af020e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1031.163234][T20988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1031.163248][T20988] R13: 0000000000000000 R14: 00007f9af03a5fa0 R15: 00007ffcff4b2a88 [ 1031.163276][T20988] [ 1032.084986][T20994] netlink: 544 bytes leftover after parsing attributes in process `syz.7.3313'. [ 1032.503220][T21008] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input102 [ 1032.574884][T21009] FAULT_INJECTION: forcing a failure. [ 1032.574884][T21009] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1032.674339][T21009] CPU: 1 UID: 0 PID: 21009 Comm: syz.3.3314 Tainted: G U 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 1032.674390][T21009] Tainted: [U]=USER [ 1032.674401][T21009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1032.674418][T21009] Call Trace: [ 1032.674427][T21009] [ 1032.674439][T21009] dump_stack_lvl+0x16c/0x1f0 [ 1032.674492][T21009] should_fail_ex+0x50a/0x650 [ 1032.674530][T21009] _copy_from_user+0x2e/0xd0 [ 1032.674567][T21009] input_event_from_user+0x134/0x3b0 [ 1032.674611][T21009] ? __pfx_input_event_from_user+0x10/0x10 [ 1032.674663][T21009] ? hlock_class+0x4e/0x130 [ 1032.674708][T21009] uinput_write+0xbb6/0x12b0 [ 1032.674767][T21009] ? __pfx_uinput_write+0x10/0x10 [ 1032.674819][T21009] ? bpf_lsm_file_permission+0x9/0x10 [ 1032.674871][T21009] ? security_file_permission+0x71/0x210 [ 1032.674918][T21009] ? rw_verify_area+0xcf/0x680 [ 1032.674960][T21009] ? __pfx_uinput_write+0x10/0x10 [ 1032.675006][T21009] vfs_write+0x24c/0x1150 [ 1032.675053][T21009] ? __fget_files+0x1fc/0x3a0 [ 1032.675101][T21009] ? __pfx_lock_release+0x10/0x10 [ 1032.675147][T21009] ? __pfx_vfs_write+0x10/0x10 [ 1032.675195][T21009] ? lock_acquire+0x2f/0xb0 [ 1032.675237][T21009] ? __fget_files+0x40/0x3a0 [ 1032.675290][T21009] ? __fget_files+0x206/0x3a0 [ 1032.675349][T21009] ksys_write+0x207/0x250 [ 1032.675392][T21009] ? __pfx_ksys_write+0x10/0x10 [ 1032.675449][T21009] do_syscall_64+0xcd/0x250 [ 1032.675500][T21009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1032.675546][T21009] RIP: 0033:0x7f982538d169 [ 1032.675570][T21009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1032.675598][T21009] RSP: 002b:00007f98262ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1032.675627][T21009] RAX: ffffffffffffffda RBX: 00007f98255a6080 RCX: 00007f982538d169 [ 1032.675653][T21009] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000003 [ 1032.675671][T21009] RBP: 00007f98262ad090 R08: 0000000000000000 R09: 0000000000000000 [ 1032.675690][T21009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1032.675708][T21009] R13: 0000000000000000 R14: 00007f98255a6080 R15: 00007ffd0c05fee8 [ 1032.675748][T21009] [ 1033.253790][T21017] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input103 [ 1035.178332][T21057] random: crng reseeded on system resumption [ 1035.221825][T21051] sd 0:0:1:0: PR command failed: 1026 [ 1035.231951][T21051] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1035.242070][T21051] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1035.901451][T21071] FAULT_INJECTION: forcing a failure. [ 1035.901451][T21071] name failslab, interval 1, probability 0, space 0, times 0 [ 1036.029858][T21071] CPU: 0 UID: 0 PID: 21071 Comm: syz.8.3328 Tainted: G U 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 1036.029907][T21071] Tainted: [U]=USER [ 1036.029917][T21071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1036.029933][T21071] Call Trace: [ 1036.029942][T21071] [ 1036.029952][T21071] dump_stack_lvl+0x16c/0x1f0 [ 1036.030010][T21071] should_fail_ex+0x50a/0x650 [ 1036.030037][T21071] ? fs_reclaim_acquire+0xae/0x150 [ 1036.030081][T21071] ? mirred_init_net+0x56/0x270 [ 1036.030113][T21071] should_failslab+0xc2/0x120 [ 1036.030135][T21071] __kmalloc_cache_noprof+0x68/0x410 [ 1036.030177][T21071] ? __pfx_mirred_init_net+0x10/0x10 [ 1036.030209][T21071] mirred_init_net+0x56/0x270 [ 1036.030240][T21071] ops_init+0x1df/0x5f0 [ 1036.030266][T21071] setup_net+0x21f/0x860 [ 1036.030290][T21071] ? __pfx_setup_net+0x10/0x10 [ 1036.030312][T21071] ? down_read_killable+0xcc/0x380 [ 1036.030335][T21071] ? __pfx_down_read_killable+0x10/0x10 [ 1036.030355][T21071] ? __raw_spin_lock_init+0x3a/0x110 [ 1036.030378][T21071] ? debug_mutex_init+0x37/0x70 [ 1036.030405][T21071] copy_net_ns+0x2a6/0x5f0 [ 1036.030433][T21071] create_new_namespaces+0x3ea/0xad0 [ 1036.030477][T21071] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1036.030517][T21071] ksys_unshare+0x45d/0xa40 [ 1036.030542][T21071] ? __pfx_ksys_unshare+0x10/0x10 [ 1036.030564][T21071] ? xfd_validate_state+0x5d/0x180 [ 1036.030605][T21071] __x64_sys_unshare+0x31/0x40 [ 1036.030628][T21071] do_syscall_64+0xcd/0x250 [ 1036.030664][T21071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.030696][T21071] RIP: 0033:0x7fe9b8b8d169 [ 1036.030713][T21071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1036.030734][T21071] RSP: 002b:00007fe9b9976038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1036.030755][T21071] RAX: ffffffffffffffda RBX: 00007fe9b8da5fa0 RCX: 00007fe9b8b8d169 [ 1036.030770][T21071] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1036.030783][T21071] RBP: 00007fe9b8c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1036.030797][T21071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1036.030810][T21071] R13: 0000000000000000 R14: 00007fe9b8da5fa0 R15: 00007ffdc4741638 [ 1036.030838][T21071] [ 1036.844029][T21081] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3331'. [ 1036.891628][T21084] FAULT_INJECTION: forcing a failure. [ 1036.891628][T21084] name failslab, interval 1, probability 0, space 0, times 0 [ 1036.942698][T21084] CPU: 0 UID: 0 PID: 21084 Comm: syz.3.3330 Tainted: G U 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 1036.942739][T21084] Tainted: [U]=USER [ 1036.942748][T21084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1036.942762][T21084] Call Trace: [ 1036.942770][T21084] [ 1036.942780][T21084] dump_stack_lvl+0x16c/0x1f0 [ 1036.942825][T21084] should_fail_ex+0x50a/0x650 [ 1036.942851][T21084] ? fs_reclaim_acquire+0xae/0x150 [ 1036.942890][T21084] ? __trace_probe_log_err+0xff/0x370 [ 1036.942943][T21084] should_failslab+0xc2/0x120 [ 1036.942976][T21084] __kmalloc_noprof+0xcb/0x510 [ 1036.943025][T21084] ? kmem_cache_free+0x2e2/0x4d0 [ 1036.943071][T21084] ? putname+0x13c/0x180 [ 1036.943104][T21084] __trace_probe_log_err+0xff/0x370 [ 1036.943152][T21084] __trace_uprobe_create+0x9c0/0x1ff0 [ 1036.943199][T21084] ? ksys_write+0x12b/0x250 [ 1036.943248][T21084] ? do_syscall_64+0xcd/0x250 [ 1036.943296][T21084] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.943354][T21084] ? __pfx___trace_uprobe_create+0x10/0x10 [ 1036.943445][T21084] ? trace_kmalloc+0x2d/0xd0 [ 1036.943480][T21084] ? __kmalloc_noprof+0x23b/0x510 [ 1036.943541][T21084] ? argv_split+0x371/0x440 [ 1036.943584][T21084] ? __pfx___trace_uprobe_create+0x10/0x10 [ 1036.943635][T21084] trace_probe_create+0xee/0x110 [ 1036.943678][T21084] ? __pfx_trace_probe_create+0x10/0x10 [ 1036.943738][T21084] create_or_delete_trace_uprobe+0x5a/0xb0 [ 1036.943785][T21084] trace_parse_run_command+0x1a9/0x3c0 [ 1036.943831][T21084] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 1036.943885][T21084] ? __pfx_probes_write+0x10/0x10 [ 1036.943929][T21084] vfs_write+0x24c/0x1150 [ 1036.943976][T21084] ? __fget_files+0x1fc/0x3a0 [ 1036.944024][T21084] ? __pfx___mutex_lock+0x10/0x10 [ 1036.944072][T21084] ? __pfx_vfs_write+0x10/0x10 [ 1036.944137][T21084] ? __fget_files+0x206/0x3a0 [ 1036.944191][T21084] ksys_write+0x12b/0x250 [ 1036.944237][T21084] ? __pfx_ksys_write+0x10/0x10 [ 1036.944287][T21084] do_syscall_64+0xcd/0x250 [ 1036.944334][T21084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.944375][T21084] RIP: 0033:0x7f982538d169 [ 1036.944398][T21084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1036.944434][T21084] RSP: 002b:00007f98262ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1036.944459][T21084] RAX: ffffffffffffffda RBX: 00007f98255a5fa0 RCX: 00007f982538d169 [ 1036.944477][T21084] RDX: 0000000000000019 RSI: 0000200000000000 RDI: 0000000000000003 [ 1036.944493][T21084] RBP: 00007f98262ce090 R08: 0000000000000000 R09: 0000000000000000 [ 1036.944511][T21084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1036.944527][T21084] R13: 0000000000000000 R14: 00007f98255a5fa0 R15: 00007ffd0c05fee8 [ 1036.944561][T21084] [ 1037.761633][T21096] FAULT_INJECTION: forcing a failure. [ 1037.761633][T21096] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1037.795427][T21096] CPU: 0 UID: 0 PID: 21096 Comm: syz.7.3336 Tainted: G U 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 1037.795471][T21096] Tainted: [U]=USER [ 1037.795480][T21096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1037.795496][T21096] Call Trace: [ 1037.795504][T21096] [ 1037.795515][T21096] dump_stack_lvl+0x16c/0x1f0 [ 1037.795563][T21096] should_fail_ex+0x50a/0x650 [ 1037.795597][T21096] _copy_from_user+0x2e/0xd0 [ 1037.795631][T21096] move_addr_to_kernel+0x68/0x160 [ 1037.795672][T21096] __sys_connect+0xb0/0x170 [ 1037.795713][T21096] ? __pfx___sys_connect+0x10/0x10 [ 1037.795767][T21096] ? __pfx_ksys_write+0x10/0x10 [ 1037.795816][T21096] __x64_sys_connect+0x72/0xb0 [ 1037.795857][T21096] ? lockdep_hardirqs_on+0x7c/0x110 [ 1037.795900][T21096] do_syscall_64+0xcd/0x250 [ 1037.795946][T21096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.795988][T21096] RIP: 0033:0x7f9c1478d169 [ 1037.796010][T21096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1037.796037][T21096] RSP: 002b:00007f9c1558a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1037.796064][T21096] RAX: ffffffffffffffda RBX: 00007f9c149a5fa0 RCX: 00007f9c1478d169 [ 1037.796081][T21096] RDX: 0000000000000055 RSI: 00002000000018c0 RDI: 0000000000000003 [ 1037.796097][T21096] RBP: 00007f9c1558a090 R08: 0000000000000000 R09: 0000000000000000 [ 1037.796113][T21096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1037.796128][T21096] R13: 0000000000000000 R14: 00007f9c149a5fa0 R15: 00007ffe8c2a0ba8 [ 1037.796171][T21096] [ 1040.355757][T21144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3346'. [ 1042.059940][T21183] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3351'. [ 1042.811380][T21193] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3362'. [ 1045.465020][T21249] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3365'. [ 1045.792018][T21259] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3366'. [ 1046.485801][T21271] netlink: 504 bytes leftover after parsing attributes in process `syz.4.3370'. [ 1047.625898][T21299] netlink: 342 bytes leftover after parsing attributes in process `syz.8.3377'. [ 1048.288553][T21322] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3380'. [ 1050.061797][T21361] random: crng reseeded on system resumption [ 1050.080385][T21351] FAULT_INJECTION: forcing a failure. [ 1050.080385][T21351] name failslab, interval 1, probability 0, space 0, times 0 [ 1050.112043][T21351] CPU: 0 UID: 0 PID: 21351 Comm: syz.8.3389 Tainted: G U 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 1050.112085][T21351] Tainted: [U]=USER [ 1050.112093][T21351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1050.112107][T21351] Call Trace: [ 1050.112115][T21351] [ 1050.112124][T21351] dump_stack_lvl+0x16c/0x1f0 [ 1050.112181][T21351] should_fail_ex+0x50a/0x650 [ 1050.112209][T21351] ? fs_reclaim_acquire+0xae/0x150 [ 1050.112246][T21351] should_failslab+0xc2/0x120 [ 1050.112274][T21351] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 1050.112315][T21351] ? __pfx_tcp_current_mss+0x10/0x10 [ 1050.112348][T21351] ? __alloc_skb+0x2b1/0x380 [ 1050.112395][T21351] __alloc_skb+0x2b1/0x380 [ 1050.112441][T21351] ? __pfx___alloc_skb+0x10/0x10 [ 1050.112488][T21351] ? hlock_class+0x4e/0x130 [ 1050.112522][T21351] tcp_stream_alloc_skb+0x34/0x570 [ 1050.112557][T21351] tcp_sendmsg_locked+0xf13/0x37c0 [ 1050.112593][T21351] ? __pfx___lock_acquire+0x10/0x10 [ 1050.112648][T21351] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 1050.112683][T21351] ? tcp_sendmsg+0x20/0x50 [ 1050.112712][T21351] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1050.112743][T21351] ? mark_held_locks+0x9f/0xe0 [ 1050.112780][T21351] ? __local_bh_enable_ip+0xa4/0x120 [ 1050.112828][T21351] tcp_sendmsg+0x2e/0x50 [ 1050.112855][T21351] ? __pfx_tcp_sendmsg+0x10/0x10 [ 1050.112884][T21351] inet_sendmsg+0xb9/0x140 [ 1050.112934][T21351] ____sys_sendmsg+0x98c/0xc90 [ 1050.112991][T21351] ? copy_msghdr_from_user+0x10b/0x160 [ 1050.113050][T21351] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1050.113112][T21351] ___sys_sendmsg+0x135/0x1e0 [ 1050.113165][T21351] ? __pfx____sys_sendmsg+0x10/0x10 [ 1050.113237][T21351] ? __pfx_lock_release+0x10/0x10 [ 1050.113278][T21351] ? trace_lock_acquire+0x14e/0x1f0 [ 1050.113331][T21351] ? __fget_files+0x206/0x3a0 [ 1050.113390][T21351] __sys_sendmsg+0x16e/0x220 [ 1050.113422][T21351] ? __pfx___sys_sendmsg+0x10/0x10 [ 1050.113480][T21351] do_syscall_64+0xcd/0x250 [ 1050.113530][T21351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.113576][T21351] RIP: 0033:0x7fe9b8b8d169 [ 1050.113607][T21351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1050.113643][T21351] RSP: 002b:00007fe9b9976038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1050.113673][T21351] RAX: ffffffffffffffda RBX: 00007fe9b8da5fa0 RCX: 00007fe9b8b8d169 [ 1050.113692][T21351] RDX: 000000000400c004 RSI: 0000200000000140 RDI: 0000000000000003 [ 1050.113711][T21351] RBP: 00007fe9b9976090 R08: 0000000000000000 R09: 0000000000000000 [ 1050.113729][T21351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1050.113746][T21351] R13: 0000000000000000 R14: 00007fe9b8da5fa0 R15: 00007ffdc4741638 [ 1050.113786][T21351] [ 1051.400206][T21379] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3392'. [ 1053.243879][T21417] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3400'. [ 1056.227774][T21491] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3414'. [ 1058.597567][T21537] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input104 [ 1058.698590][T21544] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3424'. [ 1059.632880][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.643879][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1060.058027][T21573] FAULT_INJECTION: forcing a failure. [ 1060.058027][T21573] name failslab, interval 1, probability 0, space 0, times 0 [ 1060.102134][T21573] CPU: 1 UID: 0 PID: 21573 Comm: syz.4.3430 Tainted: G U 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 1060.102178][T21573] Tainted: [U]=USER [ 1060.102187][T21573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1060.102203][T21573] Call Trace: [ 1060.102211][T21573] [ 1060.102221][T21573] dump_stack_lvl+0x16c/0x1f0 [ 1060.102267][T21573] should_fail_ex+0x50a/0x650 [ 1060.102294][T21573] ? fs_reclaim_acquire+0xae/0x150 [ 1060.102332][T21573] ? ctrl_dumppolicy_start+0x68e/0xaa0 [ 1060.102362][T21573] should_failslab+0xc2/0x120 [ 1060.102390][T21573] __kmalloc_cache_noprof+0x68/0x410 [ 1060.102431][T21573] ? __radix_tree_lookup+0x21f/0x2c0 [ 1060.102475][T21573] ctrl_dumppolicy_start+0x68e/0xaa0 [ 1060.102503][T21573] ? genl_start+0x6a6/0x960 [ 1060.102530][T21573] ? __pfx_ctrl_dumppolicy_start+0x10/0x10 [ 1060.102560][T21573] ? rcu_is_watching+0x12/0xc0 [ 1060.102589][T21573] ? trace_contention_end+0xee/0x140 [ 1060.102634][T21573] ? __mutex_lock+0x1cc/0xb10 [ 1060.102679][T21573] ? genl_start+0x6a6/0x960 [ 1060.102707][T21573] ? __pfx___mutex_lock+0x10/0x10 [ 1060.102770][T21573] ? __pfx_ctrl_dumppolicy_start+0x10/0x10 [ 1060.102803][T21573] genl_start+0x5fa/0x960 [ 1060.102836][T21573] __netlink_dump_start+0x607/0x970 [ 1060.102887][T21573] genl_family_rcv_msg_dumpit+0x1e1/0x2e0 [ 1060.102958][T21573] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 1060.103007][T21573] ? __pfx_genl_get_cmd+0x10/0x10 [ 1060.103058][T21573] ? __pfx_genl_start+0x10/0x10 [ 1060.103088][T21573] ? __pfx_genl_dumpit+0x10/0x10 [ 1060.103126][T21573] ? __pfx_genl_done+0x10/0x10 [ 1060.103166][T21573] ? __radix_tree_lookup+0x21f/0x2c0 [ 1060.103218][T21573] genl_rcv_msg+0x470/0x800 [ 1060.103258][T21573] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1060.103294][T21573] ? __pfx_ctrl_dumppolicy_start+0x10/0x10 [ 1060.103329][T21573] ? __pfx_ctrl_dumppolicy+0x10/0x10 [ 1060.103362][T21573] ? __pfx_ctrl_dumppolicy_done+0x10/0x10 [ 1060.103431][T21573] netlink_rcv_skb+0x16b/0x440 [ 1060.103482][T21573] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1060.103519][T21573] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1060.103589][T21573] ? down_read+0xc9/0x330 [ 1060.103638][T21573] ? __pfx_down_read+0x10/0x10 [ 1060.103693][T21573] ? netlink_deliver_tap+0x1ae/0xd30 [ 1060.103749][T21573] genl_rcv+0x28/0x40 [ 1060.103778][T21573] netlink_unicast+0x53c/0x7f0 [ 1060.103834][T21573] ? __pfx_netlink_unicast+0x10/0x10 [ 1060.103887][T21573] ? __phys_addr_symbol+0x30/0x80 [ 1060.103920][T21573] ? __check_object_size+0x488/0x710 [ 1060.103958][T21573] netlink_sendmsg+0x8b8/0xd70 [ 1060.104017][T21573] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1060.104085][T21573] ____sys_sendmsg+0xaaf/0xc90 [ 1060.104144][T21573] ? copy_msghdr_from_user+0x10b/0x160 [ 1060.104209][T21573] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1060.104263][T21573] ___sys_sendmsg+0x135/0x1e0 [ 1060.104313][T21573] ? __pfx____sys_sendmsg+0x10/0x10 [ 1060.104378][T21573] ? __pfx_lock_release+0x10/0x10 [ 1060.104419][T21573] ? trace_lock_acquire+0x14e/0x1f0 [ 1060.104466][T21573] ? __fget_files+0x206/0x3a0 [ 1060.104520][T21573] __sys_sendmsg+0x16e/0x220 [ 1060.104548][T21573] ? __pfx___sys_sendmsg+0x10/0x10 [ 1060.104611][T21573] do_syscall_64+0xcd/0x250 [ 1060.104655][T21573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1060.104694][T21573] RIP: 0033:0x7f9af018d169 [ 1060.104716][T21573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1060.104742][T21573] RSP: 002b:00007f9af1048038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1060.104766][T21573] RAX: ffffffffffffffda RBX: 00007f9af03a5fa0 RCX: 00007f9af018d169 [ 1060.104784][T21573] RDX: 0000000000044040 RSI: 0000200000000340 RDI: 0000000000000003 [ 1060.104799][T21573] RBP: 00007f9af1048090 R08: 0000000000000000 R09: 0000000000000000 [ 1060.104814][T21573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1060.104828][T21573] R13: 0000000000000000 R14: 00007f9af03a5fa0 R15: 00007ffcff4b2a88 [ 1060.104861][T21573] [ 1062.036708][T21580] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1062.044087][T21580] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1062.064624][T21580] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1062.075580][T21580] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1062.155060][T21580] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1062.232555][T21580] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1062.326751][T21580] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1062.342699][T21580] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1062.362971][T21580] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1062.398295][T21580] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1062.416022][T21580] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1062.474567][T21580] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1062.815483][T21609] can: request_module (can-proto-0) failed. [ 1063.707734][T15153] Bluetooth: hci2: command 0x0406 tx timeout [ 1064.102650][T15153] Bluetooth: hci0: command 0x0406 tx timeout [ 1064.108731][T15153] Bluetooth: hci1: command 0x0c1a tx timeout [ 1064.182631][T15153] Bluetooth: hci3: command 0x0406 tx timeout [ 1064.342615][T15153] Bluetooth: hci4: command 0x0c1a tx timeout [ 1064.432505][T15153] Bluetooth: hci5: command 0x0c1a tx timeout [ 1066.215811][T15153] Bluetooth: hci0: command 0x0406 tx timeout [ 1066.267881][T15153] Bluetooth: hci3: command 0x0406 tx timeout [ 1066.422540][T15153] Bluetooth: hci4: command 0x0c1a tx timeout [ 1066.514985][T15153] Bluetooth: hci5: command 0x0c1a tx timeout [ 1066.912669][T21692] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3453'. [ 1068.502614][T15153] Bluetooth: hci4: command 0x0c1a tx timeout [ 1068.634399][T15153] Bluetooth: hci5: command 0x0c1a tx timeout [ 1070.034572][T21732] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3470'. [ 1071.533190][T21765] random: crng reseeded on system resumption [ 1076.616212][T21854] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3486'. [ 1077.287589][T21866] FAULT_INJECTION: forcing a failure. [ 1077.287589][T21866] name failslab, interval 1, probability 0, space 0, times 0 [ 1077.332631][T21866] CPU: 0 UID: 0 PID: 21866 Comm: syz.7.3487 Tainted: G U 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 1077.332681][T21866] Tainted: [U]=USER [ 1077.332691][T21866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1077.332710][T21866] Call Trace: [ 1077.332719][T21866] [ 1077.332731][T21866] dump_stack_lvl+0x16c/0x1f0 [ 1077.332785][T21866] should_fail_ex+0x50a/0x650 [ 1077.332816][T21866] ? fs_reclaim_acquire+0xae/0x150 [ 1077.332860][T21866] should_failslab+0xc2/0x120 [ 1077.332893][T21866] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 1077.332949][T21866] ? alloc_empty_file+0x73/0x1e0 [ 1077.332990][T21866] alloc_empty_file+0x73/0x1e0 [ 1077.333028][T21866] path_openat+0xe1/0x2d80 [ 1077.333076][T21866] ? hlock_class+0x4e/0x130 [ 1077.333112][T21866] ? __lock_acquire+0x15a9/0x3c40 [ 1077.333169][T21866] ? __pfx_path_openat+0x10/0x10 [ 1077.333219][T21866] ? __pfx___lock_acquire+0x10/0x10 [ 1077.333264][T21866] ? lock_acquire.part.0+0x11b/0x380 [ 1077.333311][T21866] ? find_held_lock+0x2d/0x110 [ 1077.333350][T21866] do_filp_open+0x20c/0x470 [ 1077.333401][T21866] ? __pfx_do_filp_open+0x10/0x10 [ 1077.333450][T21866] ? find_held_lock+0x2d/0x110 [ 1077.333518][T21866] ? _raw_spin_unlock+0x28/0x50 [ 1077.333561][T21866] ? alloc_fd+0x41f/0x760 [ 1077.333624][T21866] do_sys_openat2+0x17a/0x1e0 [ 1077.333660][T21866] ? __pfx_do_sys_openat2+0x10/0x10 [ 1077.333712][T21866] __x64_sys_open+0x154/0x1e0 [ 1077.333748][T21866] ? __pfx___x64_sys_open+0x10/0x10 [ 1077.333798][T21866] do_syscall_64+0xcd/0x250 [ 1077.333852][T21866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1077.333900][T21866] RIP: 0033:0x7f9c1478d169 [ 1077.333928][T21866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1077.333960][T21866] RSP: 002b:00007f9c15569038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1077.333991][T21866] RAX: ffffffffffffffda RBX: 00007f9c149a6080 RCX: 00007f9c1478d169 [ 1077.334014][T21866] RDX: 0000000000000155 RSI: 0000000000022240 RDI: 0000000000000000 [ 1077.334034][T21866] RBP: 00007f9c1480e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1077.334054][T21866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1077.334073][T21866] R13: 0000000000000000 R14: 00007f9c149a6080 R15: 00007ffe8c2a0ba8 [ 1077.334113][T21866] [ 1081.061810][T21941] FAULT_INJECTION: forcing a failure. [ 1081.061810][T21941] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1081.118420][T21941] CPU: 1 UID: 0 PID: 21941 Comm: syz.8.3504 Tainted: G U 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 1081.118464][T21941] Tainted: [U]=USER [ 1081.118473][T21941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1081.118489][T21941] Call Trace: [ 1081.118497][T21941] [ 1081.118507][T21941] dump_stack_lvl+0x16c/0x1f0 [ 1081.118554][T21941] should_fail_ex+0x50a/0x650 [ 1081.118579][T21941] ? __pfx___might_resched+0x10/0x10 [ 1081.118628][T21941] should_fail_alloc_page+0xe7/0x130 [ 1081.118658][T21941] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 1081.118698][T21941] ? hlock_class+0x4e/0x130 [ 1081.118732][T21941] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 1081.118779][T21941] ? __pfx_mark_lock+0x10/0x10 [ 1081.118817][T21941] ? __pfx_stack_trace_save+0x10/0x10 [ 1081.118850][T21941] ? __memcg_kmem_charge_page+0x1b0/0x2b0 [ 1081.118897][T21941] ? stack_depot_save_flags+0x28/0x9c0 [ 1081.118926][T21941] ? rcu_is_watching+0x12/0xc0 [ 1081.118965][T21941] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1081.119027][T21941] ? hlock_class+0x4e/0x130 [ 1081.119072][T21941] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1081.119121][T21941] ? policy_nodemask+0xea/0x4e0 [ 1081.119152][T21941] alloc_pages_mpol+0x1fc/0x540 [ 1081.119182][T21941] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1081.119221][T21941] alloc_pages_noprof+0x131/0x390 [ 1081.119250][T21941] pte_alloc_one+0x20/0x390 [ 1081.119295][T21941] do_pte_missing+0x1aff/0x3e10 [ 1081.119341][T21941] ? do_raw_spin_unlock+0x172/0x230 [ 1081.119372][T21941] ? __pmd_alloc+0x3c2/0x870 [ 1081.119416][T21941] __handle_mm_fault+0x103c/0x2a40 [ 1081.119472][T21941] ? __pfx___handle_mm_fault+0x10/0x10 [ 1081.119514][T21941] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1081.119576][T21941] ? find_vma+0xc0/0x140 [ 1081.119608][T21941] ? __pfx_find_vma+0x10/0x10 [ 1081.119648][T21941] handle_mm_fault+0x3fa/0xaa0 [ 1081.119698][T21941] do_user_addr_fault+0x7a3/0x13f0 [ 1081.119747][T21941] exc_page_fault+0x5c/0xc0 [ 1081.119789][T21941] asm_exc_page_fault+0x26/0x30 [ 1081.119829][T21941] RIP: 0010:rep_movs_alternative+0x30/0x70 [ 1081.119862][T21941] Code: f9 40 73 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 [ 1081.119889][T21941] RSP: 0018:ffffc90004ebfc40 EFLAGS: 00050246 [ 1081.119911][T21941] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000008 [ 1081.119928][T21941] RDX: ffffed10053b791d RSI: 0000000000000000 RDI: ffff888029dbc8e0 [ 1081.119945][T21941] RBP: 0000000000000008 R08: 0000000000000001 R09: ffffed10053b791c [ 1081.119963][T21941] R10: ffff888029dbc8e7 R11: 0000000000000000 R12: 0000000000000000 [ 1081.119980][T21941] R13: ffff888029dbc8e0 R14: 0000000000000000 R15: 0000000000000008 [ 1081.120028][T21941] _copy_from_user+0x98/0xd0 [ 1081.120063][T21941] sctp_setsockopt+0x2050/0xb810 [ 1081.120101][T21941] ? __pfx_sctp_setsockopt+0x10/0x10 [ 1081.120130][T21941] ? __pfx_aa_sk_perm+0x10/0x10 [ 1081.120172][T21941] ? sock_common_setsockopt+0x2e/0xf0 [ 1081.120208][T21941] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1081.120243][T21941] do_sock_setsockopt+0x222/0x480 [ 1081.120276][T21941] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1081.120310][T21941] ? lock_acquire+0x2f/0xb0 [ 1081.120368][T21941] __sys_setsockopt+0x1a0/0x230 [ 1081.120420][T21941] __x64_sys_setsockopt+0xbd/0x160 [ 1081.120464][T21941] ? do_syscall_64+0x91/0x250 [ 1081.120506][T21941] ? lockdep_hardirqs_on+0x7c/0x110 [ 1081.120547][T21941] do_syscall_64+0xcd/0x250 [ 1081.120592][T21941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.120631][T21941] RIP: 0033:0x7fe9b8b8d169 [ 1081.120653][T21941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1081.120680][T21941] RSP: 002b:00007fe9b9955038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1081.120705][T21941] RAX: ffffffffffffffda RBX: 00007fe9b8da6080 RCX: 00007fe9b8b8d169 [ 1081.120725][T21941] RDX: 0000000000000080 RSI: 0000010000000084 RDI: 0000000000000003 [ 1081.120742][T21941] RBP: 00007fe9b9955090 R08: 0000000000000008 R09: 0000000000000000 [ 1081.120758][T21941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1081.120772][T21941] R13: 0000000000000001 R14: 00007fe9b8da6080 R15: 00007ffdc4741638 [ 1081.120806][T21941] [ 1082.153635][T21949] FAULT_INJECTION: forcing a failure. [ 1082.153635][T21949] name failslab, interval 1, probability 0, space 0, times 0 [ 1082.192677][T21949] CPU: 0 UID: 0 PID: 21949 Comm: syz.3.3507 Tainted: G U 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 1082.192721][T21949] Tainted: [U]=USER [ 1082.192729][T21949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1082.192745][T21949] Call Trace: [ 1082.192753][T21949] [ 1082.192763][T21949] dump_stack_lvl+0x16c/0x1f0 [ 1082.192811][T21949] should_fail_ex+0x50a/0x650 [ 1082.192839][T21949] ? fs_reclaim_acquire+0xae/0x150 [ 1082.192880][T21949] should_failslab+0xc2/0x120 [ 1082.192924][T21949] __kmalloc_node_track_caller_noprof+0xcf/0x510 [ 1082.192997][T21949] ? sysctl_core_net_init+0x42/0x270 [ 1082.193050][T21949] kmemdup_noprof+0x29/0x60 [ 1082.193102][T21949] sysctl_core_net_init+0x42/0x270 [ 1082.193151][T21949] ? __pfx_sysctl_core_net_init+0x10/0x10 [ 1082.193198][T21949] ops_init+0x1df/0x5f0 [ 1082.193235][T21949] setup_net+0x21f/0x860 [ 1082.193272][T21949] ? __pfx_setup_net+0x10/0x10 [ 1082.193303][T21949] ? down_read_killable+0xcc/0x380 [ 1082.193335][T21949] ? __pfx_down_read_killable+0x10/0x10 [ 1082.193366][T21949] ? __raw_spin_lock_init+0x3a/0x110 [ 1082.193400][T21949] ? debug_mutex_init+0x37/0x70 [ 1082.193439][T21949] copy_net_ns+0x2a6/0x5f0 [ 1082.193481][T21949] create_new_namespaces+0x3ea/0xad0 [ 1082.193545][T21949] copy_namespaces+0x468/0x560 [ 1082.193602][T21949] copy_process+0x29fc/0x8c50 [ 1082.193633][T21949] ? plist_add+0x458/0x600 [ 1082.193672][T21949] ? lock_acquire+0x2f/0xb0 [ 1082.193718][T21949] ? schedule+0x1fd/0x350 [ 1082.193761][T21949] ? futex_wait_queue+0x40/0x1f0 [ 1082.193827][T21949] ? __pfx_copy_process+0x10/0x10 [ 1082.193857][T21949] ? __pfx___futex_wait+0x10/0x10 [ 1082.193908][T21949] ? try_to_wake_up+0x158/0x1490 [ 1082.193960][T21949] ? __pfx_futex_wake_mark+0x10/0x10 [ 1082.194029][T21949] kernel_clone+0xfd/0x960 [ 1082.194070][T21949] ? __pfx_kernel_clone+0x10/0x10 [ 1082.194136][T21949] __do_sys_clone+0xcf/0x120 [ 1082.194176][T21949] ? __pfx___do_sys_clone+0x10/0x10 [ 1082.194221][T21949] ? rcu_is_watching+0x12/0xc0 [ 1082.194260][T21949] do_syscall_64+0xcd/0x250 [ 1082.194305][T21949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.194345][T21949] RIP: 0033:0x7f982538d169 [ 1082.194368][T21949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1082.194394][T21949] RSP: 002b:00007f98262ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1082.194420][T21949] RAX: ffffffffffffffda RBX: 00007f98255a5fa0 RCX: 00007f982538d169 [ 1082.194438][T21949] RDX: 0000000000000000 RSI: 000000000000000d RDI: 000000006cb0a3c8 [ 1082.194455][T21949] RBP: 00007f982540e2a0 R08: 0000000000000008 R09: 0000000000000000 [ 1082.194471][T21949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1082.194487][T21949] R13: 0000000000000000 R14: 00007f98255a5fa0 R15: 00007ffd0c05fee8 [ 1082.194522][T21949] [ 1084.090887][T21978] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3512'. [ 1087.763508][T22052] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3527'. [ 1096.794109][T22256] netlink: 'syz.8.3573': attribute type 9 has an invalid length. [ 1096.801924][T22256] netlink: 330 bytes leftover after parsing attributes in process `syz.8.3573'. [ 1097.145827][T22262] FAULT_INJECTION: forcing a failure. [ 1097.145827][T22262] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1097.204945][T22262] CPU: 1 UID: 0 PID: 22262 Comm: syz.8.3577 Tainted: G U 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 1097.204994][T22262] Tainted: [U]=USER [ 1097.205004][T22262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1097.205021][T22262] Call Trace: [ 1097.205030][T22262] [ 1097.205040][T22262] dump_stack_lvl+0x16c/0x1f0 [ 1097.205118][T22262] should_fail_ex+0x50a/0x650 [ 1097.205153][T22262] _copy_from_iter+0x465/0x1560 [ 1097.205193][T22262] ? __pfx__copy_from_iter+0x10/0x10 [ 1097.205224][T22262] ? __virt_addr_valid+0x1a4/0x590 [ 1097.205260][T22262] ? __virt_addr_valid+0x5e/0x590 [ 1097.205291][T22262] ? __phys_addr_symbol+0x30/0x80 [ 1097.205321][T22262] ? __check_object_size+0x488/0x710 [ 1097.205357][T22262] skb_copy_datagram_from_iter+0x124/0x710 [ 1097.205404][T22262] ? __asan_memcpy+0x3c/0x60 [ 1097.205454][T22262] ? eth_header+0x11c/0x1f0 [ 1097.205502][T22262] packet_sendmsg+0x2243/0x5750 [ 1097.205553][T22262] ? __pfx___might_resched+0x10/0x10 [ 1097.205600][T22262] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1097.205656][T22262] ? __pfx_packet_sendmsg+0x10/0x10 [ 1097.205687][T22262] ? aa_label_find_merge+0x3b0/0xa80 [ 1097.205719][T22262] ? __might_fault+0xe3/0x190 [ 1097.205750][T22262] ? __might_fault+0xe3/0x190 [ 1097.205789][T22262] ____sys_sendmsg+0xaaf/0xc90 [ 1097.205839][T22262] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1097.205872][T22262] ? __lock_acquire+0xcc5/0x3c40 [ 1097.205926][T22262] ___sys_sendmsg+0x135/0x1e0 [ 1097.205975][T22262] ? __pfx____sys_sendmsg+0x10/0x10 [ 1097.206035][T22262] ? trace_lock_acquire+0x14e/0x1f0 [ 1097.206089][T22262] __sys_sendmmsg+0x201/0x420 [ 1097.206120][T22262] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1097.206156][T22262] ? __pfx_do_futex+0x10/0x10 [ 1097.206190][T22262] ? cap_validate_magic+0xab/0x200 [ 1097.206243][T22262] ? xfd_validate_state+0x5d/0x180 [ 1097.206283][T22262] ? rcu_is_watching+0x12/0xc0 [ 1097.206318][T22262] __x64_sys_sendmmsg+0x9c/0x100 [ 1097.206344][T22262] ? lockdep_hardirqs_on+0x7c/0x110 [ 1097.206384][T22262] do_syscall_64+0xcd/0x250 [ 1097.206438][T22262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1097.206479][T22262] RIP: 0033:0x7fe9b8b8d169 [ 1097.206500][T22262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1097.206528][T22262] RSP: 002b:00007fe9b9976038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1097.206555][T22262] RAX: ffffffffffffffda RBX: 00007fe9b8da5fa0 RCX: 00007fe9b8b8d169 [ 1097.206573][T22262] RDX: 0000000000000002 RSI: 00002000000001c0 RDI: 0000000000000006 [ 1097.206591][T22262] RBP: 00007fe9b8c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1097.206607][T22262] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000000 [ 1097.206624][T22262] R13: 0000000000000000 R14: 00007fe9b8da5fa0 R15: 00007ffdc4741638 [ 1097.206657][T22262] [ 1098.391741][T22291] zswap: compressor not available [ 1100.256767][T22338] snd_aloop snd_aloop.0: control 1:6:6:_heR:0 is already present [ 1102.945642][T22390] FAULT_INJECTION: forcing a failure. [ 1102.945642][T22390] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1103.009432][T22390] CPU: 0 UID: 0 PID: 22390 Comm: syz.7.3604 Tainted: G U 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 1103.009478][T22390] Tainted: [U]=USER [ 1103.009488][T22390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1103.009504][T22390] Call Trace: [ 1103.009513][T22390] [ 1103.009523][T22390] dump_stack_lvl+0x16c/0x1f0 [ 1103.009572][T22390] should_fail_ex+0x50a/0x650 [ 1103.009605][T22390] get_futex_key+0x4a3/0x1000 [ 1103.009643][T22390] ? __pfx_get_futex_key+0x10/0x10 [ 1103.009681][T22390] ? __pfx_cec_ioctl+0x10/0x10 [ 1103.009719][T22390] futex_wake+0xe8/0x4e0 [ 1103.009762][T22390] ? __pfx_futex_wake+0x10/0x10 [ 1103.009807][T22390] ? kmem_cache_free+0x2e2/0x4d0 [ 1103.009858][T22390] do_futex+0x1e5/0x350 [ 1103.009893][T22390] ? __pfx_do_futex+0x10/0x10 [ 1103.009928][T22390] ? __pfx_lock_release+0x10/0x10 [ 1103.009967][T22390] ? trace_lock_acquire+0x14e/0x1f0 [ 1103.010006][T22390] __x64_sys_futex+0x1e1/0x4c0 [ 1103.010046][T22390] ? __pfx___x64_sys_futex+0x10/0x10 [ 1103.010094][T22390] do_syscall_64+0xcd/0x250 [ 1103.010139][T22390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1103.010179][T22390] RIP: 0033:0x7f9c1478d169 [ 1103.010202][T22390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1103.010229][T22390] RSP: 002b:00007f9c155270e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1103.010262][T22390] RAX: ffffffffffffffda RBX: 00007f9c149a6248 RCX: 00007f9c1478d169 [ 1103.010281][T22390] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9c149a624c [ 1103.010298][T22390] RBP: 00007f9c149a6240 R08: 00007f9c1558b000 R09: 0000000000000000 [ 1103.010316][T22390] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f9c149a624c [ 1103.010334][T22390] R13: 0000000000000000 R14: 00007ffe8c2a0ac0 R15: 00007ffe8c2a0ba8 [ 1103.010367][T22390] [ 1112.880445][T22565] FAULT_INJECTION: forcing a failure. [ 1112.880445][T22565] name failslab, interval 1, probability 0, space 0, times 0 [ 1112.977095][T22565] CPU: 0 UID: 0 PID: 22565 Comm: syz.4.3640 Tainted: G U 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 1112.977148][T22565] Tainted: [U]=USER [ 1112.977159][T22565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1112.977177][T22565] Call Trace: [ 1112.977186][T22565] [ 1112.977198][T22565] dump_stack_lvl+0x16c/0x1f0 [ 1112.977257][T22565] should_fail_ex+0x50a/0x650 [ 1112.977290][T22565] ? fs_reclaim_acquire+0xae/0x150 [ 1112.977344][T22565] ? fib6_net_init+0x3da/0xb00 [ 1112.977381][T22565] should_failslab+0xc2/0x120 [ 1112.977413][T22565] __kmalloc_cache_noprof+0x68/0x410 [ 1112.977458][T22565] ? lockdep_init_map_type+0x16d/0x7d0 [ 1112.977517][T22565] fib6_net_init+0x3da/0xb00 [ 1112.977558][T22565] ? __pfx_fib6_net_init+0x10/0x10 [ 1112.977597][T22565] ops_init+0x1df/0x5f0 [ 1112.977634][T22565] setup_net+0x21f/0x860 [ 1112.977670][T22565] ? __pfx_setup_net+0x10/0x10 [ 1112.977701][T22565] ? down_read_killable+0xcc/0x380 [ 1112.977733][T22565] ? __pfx_down_read_killable+0x10/0x10 [ 1112.977762][T22565] ? __raw_spin_lock_init+0x3a/0x110 [ 1112.977795][T22565] ? debug_mutex_init+0x37/0x70 [ 1112.977833][T22565] copy_net_ns+0x2a6/0x5f0 [ 1112.977873][T22565] create_new_namespaces+0x3ea/0xad0 [ 1112.977954][T22565] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1112.978013][T22565] ksys_unshare+0x45d/0xa40 [ 1112.978048][T22565] ? __pfx_ksys_unshare+0x10/0x10 [ 1112.978080][T22565] ? xfd_validate_state+0x5d/0x180 [ 1112.978141][T22565] __x64_sys_unshare+0x31/0x40 [ 1112.978175][T22565] do_syscall_64+0xcd/0x250 [ 1112.978228][T22565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1112.978286][T22565] RIP: 0033:0x7f9af018d169 [ 1112.978318][T22565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1112.978349][T22565] RSP: 002b:00007f9af1048038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1112.978378][T22565] RAX: ffffffffffffffda RBX: 00007f9af03a5fa0 RCX: 00007f9af018d169 [ 1112.978399][T22565] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1112.978418][T22565] RBP: 00007f9af020e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1112.978436][T22565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1112.978455][T22565] R13: 0000000000000000 R14: 00007f9af03a5fa0 R15: 00007ffcff4b2a88 [ 1112.978495][T22565] [ 1117.365263][T22661] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3656'. [ 1119.910606][T22695] Invalid ELF header magic: != ELF [ 1121.065569][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.072175][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1127.718290][T22844] FAULT_INJECTION: forcing a failure. [ 1127.718290][T22844] name failslab, interval 1, probability 0, space 0, times 0 [ 1127.746563][T22844] CPU: 1 UID: 0 PID: 22844 Comm: syz.8.3693 Tainted: G U 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 1127.746610][T22844] Tainted: [U]=USER [ 1127.746629][T22844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1127.746647][T22844] Call Trace: [ 1127.746655][T22844] [ 1127.746666][T22844] dump_stack_lvl+0x16c/0x1f0 [ 1127.746715][T22844] should_fail_ex+0x50a/0x650 [ 1127.746745][T22844] ? fs_reclaim_acquire+0xae/0x150 [ 1127.746788][T22844] should_failslab+0xc2/0x120 [ 1127.746817][T22844] __kmalloc_node_track_caller_noprof+0xcf/0x510 [ 1127.746877][T22844] ? fib_notifier_ops_register+0x32/0x270 [ 1127.746926][T22844] ? __pfx_fib6_net_init+0x10/0x10 [ 1127.746960][T22844] kmemdup_noprof+0x29/0x60 [ 1127.746996][T22844] fib_notifier_ops_register+0x32/0x270 [ 1127.747043][T22844] ? __pfx_fib6_net_init+0x10/0x10 [ 1127.747078][T22844] fib6_notifier_init+0x1d/0x90 [ 1127.747114][T22844] fib6_net_init+0x22/0xb00 [ 1127.747150][T22844] ? __pfx_fib6_net_init+0x10/0x10 [ 1127.747184][T22844] ops_init+0x1df/0x5f0 [ 1127.747217][T22844] setup_net+0x21f/0x860 [ 1127.747249][T22844] ? __pfx_setup_net+0x10/0x10 [ 1127.747276][T22844] ? down_read_killable+0xcc/0x380 [ 1127.747304][T22844] ? __pfx_down_read_killable+0x10/0x10 [ 1127.747331][T22844] ? __raw_spin_lock_init+0x3a/0x110 [ 1127.747362][T22844] ? debug_mutex_init+0x37/0x70 [ 1127.747395][T22844] copy_net_ns+0x2a6/0x5f0 [ 1127.747431][T22844] create_new_namespaces+0x3ea/0xad0 [ 1127.747483][T22844] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1127.747535][T22844] ksys_unshare+0x45d/0xa40 [ 1127.747566][T22844] ? __pfx_ksys_unshare+0x10/0x10 [ 1127.747594][T22844] ? xfd_validate_state+0x5d/0x180 [ 1127.747654][T22844] __x64_sys_unshare+0x31/0x40 [ 1127.747685][T22844] do_syscall_64+0xcd/0x250 [ 1127.747731][T22844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1127.747772][T22844] RIP: 0033:0x7fe9b8b8d169 [ 1127.747795][T22844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1127.747823][T22844] RSP: 002b:00007fe9b9976038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1127.747849][T22844] RAX: ffffffffffffffda RBX: 00007fe9b8da5fa0 RCX: 00007fe9b8b8d169 [ 1127.747867][T22844] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1127.747884][T22844] RBP: 00007fe9b8c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1127.747900][T22844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1127.747915][T22844] R13: 0000000000000000 R14: 00007fe9b8da5fa0 R15: 00007ffdc4741638 [ 1127.747949][T22844] [ 1129.789101][T22897] IPVS: length: 24 != 25769803800 [ 1130.980231][T22922] FAULT_INJECTION: forcing a failure. [ 1130.980231][T22922] name failslab, interval 1, probability 0, space 0, times 0 [ 1131.002706][T22922] CPU: 1 UID: 0 PID: 22922 Comm: syz.3.3711 Tainted: G U 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 1131.002751][T22922] Tainted: [U]=USER [ 1131.002761][T22922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1131.002778][T22922] Call Trace: [ 1131.002788][T22922] [ 1131.002798][T22922] dump_stack_lvl+0x16c/0x1f0 [ 1131.002848][T22922] should_fail_ex+0x50a/0x650 [ 1131.002876][T22922] ? fs_reclaim_acquire+0xae/0x150 [ 1131.002922][T22922] ? __register_sysctl_table+0xeaf/0x1910 [ 1131.002994][T22922] should_failslab+0xc2/0x120 [ 1131.003027][T22922] __kmalloc_noprof+0xcb/0x510 [ 1131.003090][T22922] __register_sysctl_table+0xeaf/0x1910 [ 1131.003156][T22922] ? __pfx___register_sysctl_table+0x10/0x10 [ 1131.003209][T22922] ? is_module_address+0x2a/0x50 [ 1131.003257][T22922] ? register_net_sysctl_sz+0x228/0x3e0 [ 1131.003316][T22922] ? __asan_memcpy+0x3c/0x60 [ 1131.003367][T22922] xfrm6_net_init+0xf0/0x1c0 [ 1131.003405][T22922] ? __pfx_xfrm6_net_init+0x10/0x10 [ 1131.003441][T22922] ops_init+0x1df/0x5f0 [ 1131.003481][T22922] setup_net+0x21f/0x860 [ 1131.003519][T22922] ? __pfx_setup_net+0x10/0x10 [ 1131.003552][T22922] ? down_read_killable+0xcc/0x380 [ 1131.003585][T22922] ? __pfx_down_read_killable+0x10/0x10 [ 1131.003617][T22922] ? __raw_spin_lock_init+0x3a/0x110 [ 1131.003653][T22922] ? debug_mutex_init+0x37/0x70 [ 1131.003694][T22922] copy_net_ns+0x2a6/0x5f0 [ 1131.003737][T22922] create_new_namespaces+0x3ea/0xad0 [ 1131.003804][T22922] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1131.003865][T22922] ksys_unshare+0x45d/0xa40 [ 1131.003901][T22922] ? __pfx_ksys_unshare+0x10/0x10 [ 1131.003935][T22922] ? xfd_validate_state+0x5d/0x180 [ 1131.003997][T22922] __x64_sys_unshare+0x31/0x40 [ 1131.004031][T22922] do_syscall_64+0xcd/0x250 [ 1131.004085][T22922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1131.004134][T22922] RIP: 0033:0x7f982538d169 [ 1131.004169][T22922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1131.004199][T22922] RSP: 002b:00007f98262ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1131.004227][T22922] RAX: ffffffffffffffda RBX: 00007f98255a5fa0 RCX: 00007f982538d169 [ 1131.004247][T22922] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1131.004264][T22922] RBP: 00007f982540e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1131.004280][T22922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1131.004298][T22922] R13: 0000000000000000 R14: 00007f98255a5fa0 R15: 00007ffd0c05fee8 [ 1131.004345][T22922] [ 1131.004527][T22922] sysctl could not get directory: /net/ipv6 -12 [ 1134.911721][T22999] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input106 [ 1134.931507][T22999] FAULT_INJECTION: forcing a failure. [ 1134.931507][T22999] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1135.036854][T22999] CPU: 1 UID: 0 PID: 22999 Comm: syz.7.3725 Tainted: G U 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 1135.036893][T22999] Tainted: [U]=USER [ 1135.036902][T22999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1135.036918][T22999] Call Trace: [ 1135.036937][T22999] [ 1135.036947][T22999] dump_stack_lvl+0x16c/0x1f0 [ 1135.036993][T22999] should_fail_ex+0x50a/0x650 [ 1135.037018][T22999] ? __pfx___might_resched+0x10/0x10 [ 1135.037066][T22999] should_fail_alloc_page+0xe7/0x130 [ 1135.037096][T22999] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 1135.037140][T22999] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 1135.037186][T22999] ? __pfx_mark_lock+0x10/0x10 [ 1135.037225][T22999] ? __pfx___lock_acquire+0x10/0x10 [ 1135.037274][T22999] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1135.037322][T22999] ? hlock_class+0x4e/0x130 [ 1135.037369][T22999] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1135.037415][T22999] ? policy_nodemask+0xea/0x4e0 [ 1135.037446][T22999] alloc_pages_mpol+0x1fc/0x540 [ 1135.037474][T22999] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1135.037503][T22999] ? find_held_lock+0x2d/0x110 [ 1135.037538][T22999] alloc_pages_noprof+0x131/0x390 [ 1135.037567][T22999] __pmd_alloc+0x3f/0x870 [ 1135.037607][T22999] __handle_mm_fault+0x94a/0x2a40 [ 1135.037659][T22999] ? __pfx___handle_mm_fault+0x10/0x10 [ 1135.037701][T22999] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1135.037762][T22999] ? find_vma+0xc0/0x140 [ 1135.037796][T22999] ? __pfx_find_vma+0x10/0x10 [ 1135.037833][T22999] handle_mm_fault+0x3fa/0xaa0 [ 1135.037883][T22999] do_user_addr_fault+0x7a3/0x13f0 [ 1135.037938][T22999] exc_page_fault+0x5c/0xc0 [ 1135.037977][T22999] asm_exc_page_fault+0x26/0x30 [ 1135.038015][T22999] RIP: 0010:rep_movs_alternative+0x30/0x70 [ 1135.038048][T22999] Code: f9 40 73 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 [ 1135.038073][T22999] RSP: 0018:ffffc90005137b60 EFLAGS: 00050202 [ 1135.038095][T22999] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000018 [ 1135.038111][T22999] RDX: fffff52000a26f95 RSI: 0000000000000000 RDI: ffffc90005137c90 [ 1135.038127][T22999] RBP: 0000000000000018 R08: 0000000000000001 R09: fffff52000a26f94 [ 1135.038143][T22999] R10: ffffc90005137ca7 R11: 0000000000000001 R12: 0000000000000000 [ 1135.038159][T22999] R13: ffffc90005137c90 R14: dffffc0000000000 R15: ffff8880557e9e00 [ 1135.038192][T22999] _copy_from_user+0x98/0xd0 [ 1135.038226][T22999] input_event_from_user+0x134/0x3b0 [ 1135.038265][T22999] ? __pfx_input_event_from_user+0x10/0x10 [ 1135.038302][T22999] ? hlock_class+0x4e/0x130 [ 1135.038335][T22999] uinput_write+0xbb6/0x12b0 [ 1135.038381][T22999] ? __pfx_uinput_write+0x10/0x10 [ 1135.038422][T22999] ? bpf_lsm_file_permission+0x9/0x10 [ 1135.038462][T22999] ? security_file_permission+0x71/0x210 [ 1135.038499][T22999] ? rw_verify_area+0xcf/0x680 [ 1135.038533][T22999] ? __pfx_uinput_write+0x10/0x10 [ 1135.038570][T22999] vfs_write+0x24c/0x1150 [ 1135.038608][T22999] ? __fget_files+0x1fc/0x3a0 [ 1135.038645][T22999] ? __pfx_lock_release+0x10/0x10 [ 1135.038685][T22999] ? __pfx_vfs_write+0x10/0x10 [ 1135.038724][T22999] ? lock_acquire+0x2f/0xb0 [ 1135.038761][T22999] ? __fget_files+0x40/0x3a0 [ 1135.038805][T22999] ? __fget_files+0x206/0x3a0 [ 1135.038857][T22999] ksys_write+0x207/0x250 [ 1135.038895][T22999] ? __pfx_ksys_write+0x10/0x10 [ 1135.038952][T22999] do_syscall_64+0xcd/0x250 [ 1135.038996][T22999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1135.039033][T22999] RIP: 0033:0x7f9c1478d169 [ 1135.039055][T22999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1135.039080][T22999] RSP: 002b:00007f9c1558a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1135.039104][T22999] RAX: ffffffffffffffda RBX: 00007f9c149a5fa0 RCX: 00007f9c1478d169 [ 1135.039121][T22999] RDX: 000000007fffffff RSI: 0000000000000000 RDI: 0000000000000003 [ 1135.039136][T22999] RBP: 00007f9c1558a090 R08: 0000000000000000 R09: 0000000000000000 [ 1135.039152][T22999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1135.039167][T22999] R13: 0000000000000000 R14: 00007f9c149a5fa0 R15: 00007ffe8c2a0ba8 [ 1135.039201][T22999] [ 1137.648439][T23050] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input107 [ 1139.837397][T23088] netlink: 544 bytes leftover after parsing attributes in process `syz.8.3745'. [ 1141.750122][T23121] Invalid ELF header magic: != ELF [ 1141.825760][T23129] FAULT_INJECTION: forcing a failure. [ 1141.825760][T23129] name failslab, interval 1, probability 0, space 0, times 0 [ 1141.848148][T23129] CPU: 1 UID: 0 PID: 23129 Comm: syz.7.3754 Tainted: G U 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 1141.848193][T23129] Tainted: [U]=USER [ 1141.848203][T23129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1141.848220][T23129] Call Trace: [ 1141.848229][T23129] [ 1141.848240][T23129] dump_stack_lvl+0x16c/0x1f0 [ 1141.848288][T23129] should_fail_ex+0x50a/0x650 [ 1141.848323][T23129] ? fs_reclaim_acquire+0xae/0x150 [ 1141.848365][T23129] ? tracing_log_err+0xc5/0x6b0 [ 1141.848403][T23129] should_failslab+0xc2/0x120 [ 1141.848432][T23129] __kmalloc_noprof+0xcb/0x510 [ 1141.848486][T23129] tracing_log_err+0xc5/0x6b0 [ 1141.848536][T23129] __trace_probe_log_err+0x2d1/0x370 [ 1141.848581][T23129] __trace_uprobe_create+0x9c0/0x1ff0 [ 1141.848622][T23129] ? ksys_write+0x12b/0x250 [ 1141.848662][T23129] ? do_syscall_64+0xcd/0x250 [ 1141.848705][T23129] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1141.848758][T23129] ? __pfx___trace_uprobe_create+0x10/0x10 [ 1141.848841][T23129] ? trace_kmalloc+0x2d/0xd0 [ 1141.848874][T23129] ? __kmalloc_noprof+0x23b/0x510 [ 1141.848928][T23129] ? argv_split+0x371/0x440 [ 1141.848967][T23129] ? __pfx___trace_uprobe_create+0x10/0x10 [ 1141.849013][T23129] trace_probe_create+0xee/0x110 [ 1141.849052][T23129] ? __pfx_trace_probe_create+0x10/0x10 [ 1141.849101][T23129] create_or_delete_trace_uprobe+0x5a/0xb0 [ 1141.849144][T23129] trace_parse_run_command+0x1a9/0x3c0 [ 1141.849203][T23129] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 1141.849275][T23129] ? __pfx_probes_write+0x10/0x10 [ 1141.849326][T23129] vfs_write+0x24c/0x1150 [ 1141.849376][T23129] ? __fget_files+0x1fc/0x3a0 [ 1141.849424][T23129] ? __pfx___mutex_lock+0x10/0x10 [ 1141.849474][T23129] ? __pfx_vfs_write+0x10/0x10 [ 1141.849532][T23129] ? __fget_files+0x206/0x3a0 [ 1141.849592][T23129] ksys_write+0x12b/0x250 [ 1141.849637][T23129] ? __pfx_ksys_write+0x10/0x10 [ 1141.849697][T23129] do_syscall_64+0xcd/0x250 [ 1141.849750][T23129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1141.849796][T23129] RIP: 0033:0x7f9c1478d169 [ 1141.849823][T23129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1141.849854][T23129] RSP: 002b:00007f9c1558a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1141.849884][T23129] RAX: ffffffffffffffda RBX: 00007f9c149a5fa0 RCX: 00007f9c1478d169 [ 1141.849905][T23129] RDX: 0000000000000019 RSI: 0000200000000000 RDI: 0000000000000003 [ 1141.849924][T23129] RBP: 00007f9c1558a090 R08: 0000000000000000 R09: 0000000000000000 [ 1141.849942][T23129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1141.849961][T23129] R13: 0000000000000000 R14: 00007f9c149a5fa0 R15: 00007ffe8c2a0ba8 [ 1141.850002][T23129] [ 1142.903473][T23143] netlink: 544 bytes leftover after parsing attributes in process `syz.7.3757'. [ 1144.635277][T23181] FAULT_INJECTION: forcing a failure. [ 1144.635277][T23181] name failslab, interval 1, probability 0, space 0, times 0 [ 1144.648798][T23181] CPU: 1 UID: 0 PID: 23181 Comm: syz.3.3765 Tainted: G U 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 1144.648841][T23181] Tainted: [U]=USER [ 1144.648850][T23181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1144.648868][T23181] Call Trace: [ 1144.648877][T23181] [ 1144.648889][T23181] dump_stack_lvl+0x16c/0x1f0 [ 1144.648974][T23181] should_fail_ex+0x50a/0x650 [ 1144.649005][T23181] ? rcu_is_watching+0x12/0xc0 [ 1144.649044][T23181] should_failslab+0xc2/0x120 [ 1144.649082][T23181] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 1144.649127][T23181] ? lock_acquire+0x2f/0xb0 [ 1144.649170][T23181] ? __inet_hash_connect+0x69f/0x1900 [ 1144.649212][T23181] ? __inet_hash_connect+0x918/0x1900 [ 1144.649260][T23181] __inet_hash_connect+0x918/0x1900 [ 1144.649316][T23181] ? __pfx___inet_check_established+0x10/0x10 [ 1144.649362][T23181] ? __pfx___inet_hash_connect+0x10/0x10 [ 1144.649422][T23181] tcp_v4_connect+0xddc/0x1b80 [ 1144.649468][T23181] ? __pfx_tcp_v4_connect+0x10/0x10 [ 1144.649507][T23181] ? __local_bh_enable_ip+0xa4/0x120 [ 1144.649563][T23181] mptcp_connect+0x488/0xc00 [ 1144.649604][T23181] __inet_stream_connect+0x3c7/0x1020 [ 1144.649638][T23181] ? find_held_lock+0x2d/0x110 [ 1144.649678][T23181] ? __pfx___inet_stream_connect+0x10/0x10 [ 1144.649712][T23181] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1144.649747][T23181] ? __pfx_inet_stream_connect+0x10/0x10 [ 1144.649780][T23181] ? mark_held_locks+0x9f/0xe0 [ 1144.649827][T23181] ? __local_bh_enable_ip+0xa4/0x120 [ 1144.649882][T23181] ? __pfx_inet_stream_connect+0x10/0x10 [ 1144.649914][T23181] inet_stream_connect+0x57/0xa0 [ 1144.649950][T23181] __sys_connect_file+0x13e/0x1a0 [ 1144.650002][T23181] __sys_connect+0x14f/0x170 [ 1144.650056][T23181] ? __pfx___sys_connect+0x10/0x10 [ 1144.650119][T23181] ? __pfx_ksys_write+0x10/0x10 [ 1144.650175][T23181] __x64_sys_connect+0x72/0xb0 [ 1144.650220][T23181] ? lockdep_hardirqs_on+0x7c/0x110 [ 1144.650264][T23181] do_syscall_64+0xcd/0x250 [ 1144.650316][T23181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1144.650356][T23181] RIP: 0033:0x7f982538d169 [ 1144.650374][T23181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1144.650398][T23181] RSP: 002b:00007f98262ce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1144.650420][T23181] RAX: ffffffffffffffda RBX: 00007f98255a5fa0 RCX: 00007f982538d169 [ 1144.650436][T23181] RDX: 0000000000000055 RSI: 00002000000018c0 RDI: 0000000000000003 [ 1144.650451][T23181] RBP: 00007f98262ce090 R08: 0000000000000000 R09: 0000000000000000 [ 1144.650466][T23181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1144.650480][T23181] R13: 0000000000000000 R14: 00007f98255a5fa0 R15: 00007ffd0c05fee8 [ 1144.650508][T23181] [ 1144.742804][ T31] INFO: task :20580 blocked for more than 143 seconds. [ 1145.002533][ T31] Tainted: G U 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 1145.012039][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1145.028337][ T31] task: state:D stack:26944 pid:20580 tgid:20579 ppid:15603 task_flags:0x400140 flags:0x00000004 [ 1145.058871][ T31] Call Trace: [ 1145.062285][ T31] [ 1145.066850][ T31] __schedule+0xf43/0x5890 [ 1145.112604][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 1145.119868][ T31] ? __pfx___schedule+0x10/0x10 [ 1145.127080][ T31] ? schedule+0x298/0x350 [ 1145.158572][ T31] ? __pfx_lock_release+0x10/0x10 [ 1145.166919][ T31] ? __mutex_trylock_common+0x78/0x250 [ 1145.176863][ T31] ? lock_acquire+0x2f/0xb0 [ 1145.184852][ T31] ? schedule+0x1fd/0x350 [ 1145.191115][ T31] schedule+0xe7/0x350 [ 1145.198032][ T31] schedule_preempt_disabled+0x13/0x30 [ 1145.203933][ T31] __mutex_lock+0x6bd/0xb10 [ 1145.208702][ T31] ? nfsd_nl_threads_set_doit+0x694/0xbe0 [ 1145.219193][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1145.224878][ T31] ? __pfx_lock_release+0x10/0x10 [ 1145.230206][ T31] ? nfsd_nl_threads_set_doit+0x694/0xbe0 [ 1145.236460][ T31] nfsd_nl_threads_set_doit+0x694/0xbe0 [ 1145.244378][ T31] genl_family_rcv_msg_doit+0x202/0x2f0 [ 1145.250366][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1145.257864][ T31] ? trace_cap_capable+0x1a2/0x210 [ 1145.263431][ T31] ? bpf_lsm_capable+0x9/0x10 [ 1145.268381][ T31] ? security_capable+0x7e/0x260 [ 1145.273885][ T31] genl_rcv_msg+0x565/0x800 [ 1145.278548][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1145.284890][ T31] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 1145.291812][ T31] netlink_rcv_skb+0x16b/0x440 [ 1145.297587][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1145.302880][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1145.308292][ T31] ? down_read+0xc9/0x330 [ 1145.312737][ T31] ? __pfx_down_read+0x10/0x10 [ 1145.317557][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 1145.326440][ T31] genl_rcv+0x28/0x40 [ 1145.330456][ T31] netlink_unicast+0x53c/0x7f0 [ 1145.335327][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1145.340800][ T31] ? __phys_addr_symbol+0x30/0x80 [ 1145.345922][ T31] ? __check_object_size+0x488/0x710 [ 1145.351260][ T31] netlink_sendmsg+0x8b8/0xd70 [ 1145.356192][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1145.361560][ T31] ____sys_sendmsg+0xaaf/0xc90 [ 1145.366543][ T31] ? copy_msghdr_from_user+0x10b/0x160 [ 1145.372071][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1145.377503][ T31] ___sys_sendmsg+0x135/0x1e0 [ 1145.382243][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1145.387844][ T31] ? __pfx_lock_release+0x10/0x10 [ 1145.394491][ T31] ? trace_lock_acquire+0x14e/0x1f0 [ 1145.399835][ T31] ? __fget_files+0x206/0x3a0 [ 1145.405355][ T31] __sys_sendmsg+0x16e/0x220 [ 1145.409986][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 1145.415234][ T31] ? __x64_sys_futex+0x1e1/0x4c0 [ 1145.420242][ T31] do_syscall_64+0xcd/0x250 [ 1145.424859][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1145.430812][ T31] RIP: 0033:0x7f464118d169 [ 1145.437349][ T31] RSP: 002b:00007f464207f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1145.446751][ T31] RAX: ffffffffffffffda RBX: 00007f46413a5fa0 RCX: 00007f464118d169 [ 1145.454841][ T31] RDX: 0000000000040010 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1145.462925][ T31] RBP: 00007f464120e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1145.471087][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1145.479483][ T31] R13: 0000000000000000 R14: 00007f46413a5fa0 R15: 00007ffebca60238 [ 1145.487721][ T31] [ 1145.491016][ T31] [ 1145.491016][ T31] Showing all locks held in the system: [ 1145.500372][ T31] 1 lock held by khungtaskd/31: [ 1145.535705][ T31] #0: ffffffff8e1bd140 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 [ 1145.539145][T23191] ieee80211 phy83: Selected rate control algorithm 'minstrel_ht' [ 1145.554517][ T31] 3 locks held by kworker/1:1/47: [ 1145.561532][ T31] #0: ffff88801b080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 1145.572832][ T31] #1: ffffc90000b77d18 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 1145.586836][ T31] #2: ffffffff8e1c8480 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x700 [ 1145.599277][ T31] 1 lock held by syz-executor/5829: [ 1145.614170][ T31] 2 locks held by getty/15920: [ 1145.620823][ T31] #0: ffff88814dc3d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1145.636795][ T31] #1: ffffc9000b80b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 [ 1145.648658][ T31] 3 locks held by kworker/1:5/16997: [ 1145.673266][ T31] #0: ffff8880b863ed58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 1145.692643][ T31] #1: ffff8880b8728a88 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x2c1/0x8e0 [ 1145.709997][ T31] #2: ffffffff9aab2308 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_check_no_obj_freed+0x1cf/0x600 [ 1145.730573][ T31] 2 locks held by syz.5.3027/19585: [ 1145.752053][ T31] #0: ffffffff8ff9b450 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1145.772370][ T31] #1: ffffffff8e5c0608 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xe3/0x1b40 [ 1145.811503][ T31] 2 locks held by /20580: [ 1145.824289][ T31] #0: ffffffff8ff9b450 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1145.853845][ T31] #1: ffffffff8e5c0608 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x694/0xbe0 [ 1145.908999][ T31] 4 locks held by kworker/u8:1/20731: [ 1145.922484][ T31] #0: ffff88801bef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 1145.941522][ T31] #1: ffffc90004fb7d18 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 1145.955934][ T31] #2: ffffffff8fee46d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xb30 [ 1145.965394][ T31] #3: ffffffff8e1c85b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a4/0x3b0 [ 1145.975595][ T31] 2 locks held by dhcpcd/23194: [ 1145.980531][ T31] #0: ffff888077828808 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 1145.991360][ T31] #1: ffffffff8e1c85b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x282/0x3b0 [ 1146.001601][ T31] 1 lock held by dhcpcd/23197: [ 1146.006526][ T31] #0: ffff88807e686258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf60 [ 1146.039885][ T31] [ 1146.042278][ T31] ============================================= [ 1146.042278][ T31] [ 1146.058562][ T31] NMI backtrace for cpu 0 [ 1146.058582][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 1146.058618][ T31] Tainted: [U]=USER [ 1146.058627][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1146.058642][ T31] Call Trace: [ 1146.058648][ T31] [ 1146.058656][ T31] dump_stack_lvl+0x116/0x1f0 [ 1146.058690][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1146.058714][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1146.058743][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1146.058769][ T31] watchdog+0xf62/0x12b0 [ 1146.058805][ T31] ? __pfx_watchdog+0x10/0x10 [ 1146.058834][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1146.058864][ T31] ? __kthread_parkme+0x148/0x220 [ 1146.058886][ T31] ? __pfx_watchdog+0x10/0x10 [ 1146.058917][ T31] kthread+0x3af/0x750 [ 1146.058942][ T31] ? __pfx_kthread+0x10/0x10 [ 1146.058970][ T31] ? __pfx_kthread+0x10/0x10 [ 1146.058996][ T31] ret_from_fork+0x45/0x80 [ 1146.059023][ T31] ? __pfx_kthread+0x10/0x10 [ 1146.059047][ T31] ret_from_fork_asm+0x1a/0x30 [ 1146.059079][ T31] [ 1146.059089][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1146.177448][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x1a/0x20 [ 1146.180314][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1146.195415][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 1146.207428][ T31] Tainted: [U]=USER [ 1146.211276][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1146.221396][ T31] Call Trace: [ 1146.224691][ T31] [ 1146.227632][ T31] dump_stack_lvl+0x3d/0x1f0 [ 1146.232253][ T31] panic+0x71d/0x800 [ 1146.236184][ T31] ? __pfx_panic+0x10/0x10 [ 1146.240631][ T31] ? preempt_schedule_thunk+0x1a/0x30 [ 1146.246117][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1146.252131][ T31] ? preempt_schedule_thunk+0x1a/0x30 [ 1146.257542][ T31] ? watchdog+0xdcc/0x12b0 [ 1146.262002][ T31] ? watchdog+0xdbf/0x12b0 [ 1146.266459][ T31] watchdog+0xddd/0x12b0 [ 1146.270745][ T31] ? __pfx_watchdog+0x10/0x10 [ 1146.275460][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1146.280695][ T31] ? __kthread_parkme+0x148/0x220 [ 1146.285750][ T31] ? __pfx_watchdog+0x10/0x10 [ 1146.290469][ T31] kthread+0x3af/0x750 [ 1146.294572][ T31] ? __pfx_kthread+0x10/0x10 [ 1146.299197][ T31] ? __pfx_kthread+0x10/0x10 [ 1146.303827][ T31] ret_from_fork+0x45/0x80 [ 1146.308275][ T31] ? __pfx_kthread+0x10/0x10 [ 1146.312901][ T31] ret_from_fork_asm+0x1a/0x30 [ 1146.317703][ T31] [ 1146.320988][ T31] Kernel Offset: disabled [ 1146.325337][ T31] Rebooting in 86400 seconds..