last executing test programs: 10.695839956s ago: executing program 0 (id=54): r0 = socket(0x2, 0x2, 0x0) getsockopt$auto(r0, 0x0, 0x17, 0xfffffffffffffffc, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/net/ifb0/flags\x00', 0x12aa02, 0x0) r2 = pidfd_open$auto(0x1, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/fs/netfs/requests\x00', 0x40, 0x0) r3 = accept$auto(r2, &(0x7f0000000000)=@nfc={0x27, 0x0, 0x1, 0x5}, &(0x7f0000000040)=0x6) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r2) r4 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x10a) mkdirat$auto(r4, &(0x7f0000000080)='./cgroup\x00', 0x9) sendmsg$auto_NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="30010000", @ANYRESHEX=r1, @ANYBLOB="00022cbd7000fcdbdf25370000000600f700ea023c3c1318537f2f98b40473167785298474613408000012017d804c003e00628fa58946ca6dea0a0c83a19421fd23037e424c5b53e0b0f22cca9a5d69d7d0887ea508a9ea270dbbcc21627202a8f71179b222cf44e52ac632ab17e12ff614b51937e5292e8ee80400dd002000ac800800bc00090000000c00d200010000000000000008005400ac1414aa0400330008009e00e000000100003500ac1e01", @ANYRES32=r2, @ANYBLOB="0400af8014000d00fc010000000000000000000000000000f36375dbbd13047c3be240e9fb1ee7b6442ed32fb7bea4b9ee7a4cfc5c7da0227944278597e3d962136132be4e4956bc04001f8096eac217511c3e25928b330301eecb3c6a147ce6cb497a804c1706967f911bb09ff6dabf598a75e6b174900f19f16de605b80000"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x40045) ioperm$auto(0x7, 0x6, 0x2) readahead$auto(0xffffffffffffffff, 0x9, 0x8) ioctl$auto_IOCTL_VMCI_SET_NOTIFY(r2, 0x7cb, 0x0) setns(r2, 0x20000) sendfile$auto(r1, r1, 0x0, 0x3) ioctl$auto_SNDRV_PCM_IOCTL_WRITEN_FRAMES(r4, 0x40184152, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=&(0x7f0000000140)="4d7d3706de6cf6d50c8f3b7d98b5eab5d13bf9ab6fe5780d2e6c6a47debf81c3b19006828ee6d2", 0xba23}) close_range$auto(0xffffffffffffffff, r0, 0xf) r5 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000003c00), 0x1a9901, 0x0) write$auto(r5, &(0x7f0000004240)='\x01', 0x10000000004) r6 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon0\x00', 0x640, 0x0) read$auto_mon_fops_binary_mon_bin(r6, 0x0, 0x2f) ioctl$auto_MON_IOCG_STATS(r6, 0x80089203, 0x0) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) r7 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r7, 0x7ab, 0x0) clock_getres$auto(0x7f, 0x0) r8 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r8, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb07fd) close_range$auto(0x2, 0x8, 0x0) 9.956687227s ago: executing program 3 (id=58): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match\x00', 0x20080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000280)=""/175, 0xaf) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0xa0942, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x3, 0x6, 0x0, 0x200000000000001, 0x368e, 0x2, {0x100000000, 0x4}, 0xff, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x8000000c, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) r3 = socket(0x15, 0x5, 0x0) ustat$auto(0x801, 0x0) sendmsg$auto(r3, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x23, 0x0) r4 = fsopen$auto(0x0, 0x1) fsconfig$auto(r4, 0x8, 0x0, 0x0, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/cgroup.type\x00', 0x103042, 0x0) sendfile$auto(r5, r5, 0x0, 0x200) listmount$auto(&(0x7f00000001c0)={0x200, @inferred=r0, 0x7f, 0x81, 0x400}, &(0x7f0000000140)=0x10000, 0xf, 0x5) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)) socket(0x11, 0x3, 0x1803) ioctl$auto(r1, 0xc8, 0x10000000000402) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) write$auto(r6, &(0x7f0000000300)='*o\xd3\xa49\xaf\xa9\xe4\xe17\x12\xb3Z\x17I\x82\xdc\xbeiw\xc1\xd1\x8d\x9b\r\x9aR\xe7\x9f\xd8\xab\x16`f\nT\xaa\xfap \xe6\xdaV\xdeD\x8dR5\xd2\xe58\n\xff\x19+\xeb\xb3+\xf6\xc6\a\x00\x00\x00\xf1A\xa5\x95\x1fk\x1f\xff\x99gP\x9e\x88\x97]\x93\xf4\xdd<\xe7p\x0e\xd4C\xdc\x84\v\xafz\xfd\x81\xa3\xb2\xbb\xa4\xd9\xf2P\xa8\xe9\x8f\x13\xa7\x98\x85\xf8\v\aB\xfc\xfa\x14E\xb8y\x884<\xa7\xffyb\x8a\b\xbb\x1b\x13W\xe3\xf7\xd8\x83\xc9\xd7\x8c', 0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={0x24, r8, 0x301, 0x70b52c, 0x25dfdafb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x17}, @CTRL_ATTR_OP={0x8, 0xa, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) r9 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r7) sendmsg$auto_MACSEC_CMD_UPD_TXSA(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002dbd7000fbdb91f2519550cee6aefc354f2911747bb27f353aff37b1df", @ANYRES32=0x0, @ANYBLOB="080002800400a380"], 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x400c8d4) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x2, 0x8000) 9.557621901s ago: executing program 0 (id=59): r0 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1ac}}, 0x40000) r1 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_DELETE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090027bd7000fbdbdf250200000008000800", @ANYRES32=r3, @ANYBLOB="140001800800020006000000080001", @ANYRES64=0x0, @ANYRES16=r0], 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0xc050) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x3, 0x0, 0x7, 0xa505}, 0x8800}, 0x80000000, 0x4008) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, 0x0, 0x880) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000680)='/dev/v4l-subdev5\x00', 0x20281, 0x0) ioctl$auto(r5, 0x40085618, r4) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x800000001, 0x0, 0x2, 0x7) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000) select$auto(0x3, 0x0, &(0x7f0000000100)={[0x8, 0xb, 0x0, 0x9, 0xfffffffffffffffc, 0x83, 0x6, 0x2, 0x9, 0xffff, 0x4000000000000002, 0xd, 0x3, 0xfffffffffffffffe, 0x7, 0x1000000006]}, 0x0, 0x0) syslog$auto(0x2, &(0x7f0000000000)='-#:\x00[\xda\xe2\xc3L\xd30{Q\xecvP\x93\x87\x1e\xdd\x95\x1b\x19qI\vv\xacO*X0V\x93\x85\xff\xb2\xdd\xd8\xd5Kh\xfa\xa3\xc7\x9b}\xec\x1e\xdc\x80\x1fR\xc30\x9a\xae\\\'\x14\x98\x98\xc3iDv\x97\xdfTMt\xe5?\xd0\xcc\xb8\xfa\a\x7f\x7f\x00\x00\x00\x00\x00\x00\x00n_\xb1\x1c\x7f\xb0y\xec\xe2\xcc\x1a/\xfa{d\xe4BN\x9c\xb9\x87.\xfe\xe7&1j\xe6]\xc3\x9anE6\x81\xe4\xec\xfa\xefE\xf7\x17h\xf4pumR\xd55Dd(\x0f(b\x1aD\xf4\x03\xc3\\\xdf\x8f\xa8\x82\xab\x102\xd1\xaf\xcaT\x86\x171\x11Q4\x94\x9d\xf5\x9c\xe3\xaa\xf3\xd26i\xf9\xb2\xd9T\xc9\xfd\xba\x91^\x19\x95\xde\xbc \xa8\x98\xc3\xed\xe9,{\xd4\xa1\xe4p\xcf\b\f\xb4\xbe_\xf2\xbe\xef\v\xf1d\xdd\x0e\xfc\xc3\xeaqt\x94\xe7\xce\xf1\xc5\x94~\xf6Cx\x0e\x98\xc7gE>*\x9c%\xa0\\\x14\t\tv.\x1c\x1a\xf1\xba\xc0>\xf4Hc\xc3\xfa\x033\x8f\xb9(\n/\xcdo\xc2', 0xcf) close_range$auto(0x2, 0x8, 0x0) shmget$auto(0x400, 0x10563, 0x568c12f2) io_cancel$auto(0x3, &(0x7f0000000000)={0x5, 0x9, 0x0, 0xf, 0x8, 0xffffffffffffffff, 0xff, 0x7, 0x7ff, 0x0, 0x3}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="010026bd7000fddbdf2507"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000800) r6 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="720100", @ANYBLOB="1c00"], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) 9.302404799s ago: executing program 1 (id=60): openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x500, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020007, 0xffffffffffffffff, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) prctl$auto(0x1000000003b, 0x1, 0x4, 0x9, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) fanotify_init$auto(0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x49e0c2, 0x0) socketpair$auto(0x1e, 0x7, 0x8000000000000000, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x602, 0x1) r0 = open(&(0x7f0000000000)='./file1\x00', 0x10d2c2, 0xe1d2b27bdc14aa98) fanotify_mark$auto(0x400000000000, 0x105, 0xf2b, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x45) fanotify_mark$auto(0x0, 0x451, 0xa, r1, 0x0) open(&(0x7f00000000c0)='./file1\x00', 0x109301, 0x438) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd8\x00', 0x2400, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r3, 0x4, 0x7ff) ptrace$auto_PTRACE_SET_THREAD_AREA(0x1a, r3, 0x4, 0x8) timer_create$auto(0xfffffffc, 0x0, 0x0) clock_settime$auto(0xfffffffa, 0x0) ioctl$auto_IOC_PR_RELEASE(r2, 0x401070ca, 0x0) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001a40), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_GET_RADIO(r5, &(0x7f0000003300)={0x0, 0x0, &(0x7f00000032c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c621cff", @ANYRES16=r4, @ANYBLOB="01002bbd7000fddbdf250600000008000a0005000000"], 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0xc) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) 9.206257525s ago: executing program 3 (id=61): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x8002, 0x5) mmap$auto(0x0, 0x9, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) adjtimex$auto(&(0x7f00000006c0)={0x7, 0x0, 0x0, 0x8, 0x3, 0x7, 0x9, 0x0, 0x10001, 0x1, 0x0, {0x7, 0x10000}, 0x1, 0xe, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000005, 0x83, 0xffffffffffff628e, 0xa747, 0x5, 0x1800}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r0 = openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/buffer_size_kb\x00', 0x40, 0x0) readv$auto(r0, &(0x7f0000000100)={&(0x7f0000000040), 0x3}, 0x1) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/scsi/sg/def_reserved_size\x00', 0x0, 0x0) lseek$auto(0x3, 0x8, 0x1) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) ioctl$auto_UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{0x0, 0xf2cf, 0x1ff, 0x4}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0x8}) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) mmap$auto(0xfffffffffffffffd, 0x2020009, 0xa45, 0x12, r2, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa2500, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000002c0)=""/106, 0x6a) msgget$auto(0x4, 0x77d9) msgsnd$auto(0x7, &(0x7f0000000140)={0x6, 0x9}, 0x8001, 0x7) unshare$auto(0x40000080) adjtimex$auto(&(0x7f00000002c0)={0x80, 0x0, 0x5, 0x9, 0x8000000000000001, 0x9, 0x4, 0x0, 0x1ff, 0x7, 0x3, {0x6, 0x5}, 0x7, 0x0, 0x3, 0xc68, 0x0, 0x6, 0x4, 0x7fffffff, 0x80, 0x1, 0x10001}) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptyq9\x00', 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) 7.340921809s ago: executing program 3 (id=63): bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0xffffffffffffffff, 0x9) unshare$auto(0x40000080) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) r1 = socket(0x12, 0x4, 0x440a) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20b42, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\x80\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x00\x0e\v9\xb5j\x00\x04\xc8\x1fa\x1c\x1a\x05 \xfdr/D\xbf\x98\x06\xe5\xf6\x8d\x1fX\xe5\xbc\xbc\"}$', 0x7fffffff) ioctl$auto_SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000040)) socket(0x25, 0x5, 0x0) sendfile$auto(0x6, 0x3, 0x0, 0xfdef) openat$auto_rfkill_fops_core(0xffffffffffffff9c, 0x0, 0x400, 0x0) mmap$auto(0x2000000000000, 0xfffffffffffffffe, 0x8, 0x810, r0, 0x5d63) io_setup$auto(0x80002, 0x0) r3 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x20400, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_FORWARD2(r3, 0x40084149, &(0x7f0000001080)=0x7) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) socket(0x11, 0x80003, 0x300) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NFC_CMD_STOP_POLL(r1, &(0x7f0000001200)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000011c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="44000000b005340aebe5fa82cc2cfe070efe7393c78775a7fbd06451a308b2d75dbbc9314b37f854d5b05ee476d92d1c76c634d55ec71ff7edaeb9bf870880443128469ecac1b937af2434186513ea1de2def6266f268232ae88a517c5deaaa2de423a78b504169c1bebb902000000604ce722008ad319166a88d492ae3a921f7fc0d05390e545cdac589a1717", @ANYRES16=0x0, @ANYBLOB="20002bbd7000fedbdf250700000005000a0006000000060011000600000005000f00ff00000008000d000900000005001000bd0000000800150000004005"], 0x44}, 0x1, 0x0, 0x0, 0x20008050}, 0x4048041) socket(0x10, 0x2, 0xc) getpeername$auto(0x3, 0x0, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/usb/usbmon/36u\x00', 0x26040, 0x0) getpriority$auto(0x5, 0x7ff) io_pgetevents$auto(0x4, 0x8, 0xa31f, 0x0, 0x0, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r4, 0x4b49, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) 7.28405906s ago: executing program 0 (id=64): unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) bpf$auto(0x83, 0x0, 0x80000001) getsockopt$auto_SO_PASSCRED(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) mbind$auto(0x2001, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ipv6_route\x00', 0x101000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket(0xa, 0x3, 0x3b) getsockopt$auto(r3, 0x29, 0x3e, 0x0, 0x0) sendmsg$auto_NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0xc}, 0x0) keyctl$auto(0x6, 0x7ffffffffffffffd, 0x0, 0x0, 0x3) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) socket(0x10, 0x2, 0x6) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x103841, 0x0) write$auto(r5, &(0x7f0000000080)='\x00 \xa72\xd8\xc1,\xf0\x9f(\x19(\xa0>\xccS\xa57\xc0\xd2\x99\xe4\xa4\xccuH07Rh\x12\'\xa0f\x01$\xbf\bRR\xf0\xaa\xec-\xcf\x18\xda\x9b\x13\x88\x9e\xf5\x8f? \xe6)\xcc\xca]\xdf/\x03:\xcce\x0fQQ', 0x7f) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000) renameat2$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8) mincore$auto(0x20000001000, 0x8, 0x0) socket(0x11, 0x80003, 0x300) unshare$auto(0x40000080) 7.211959493s ago: executing program 2 (id=65): mmap$auto(0x7fff, 0x400008, 0xda, 0x9b72, 0x2, 0x480000000008001) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0xfff, 0x2091d2, 0x4, 0x0, 0x6, 0x93) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mknod$auto(&(0x7f0000000040)='.\x00', 0xc7, 0xc8) write$auto(0x3, 0x0, 0xfffffdef) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) fstat$auto(r0, &(0x7f0000000200)={0x4, 0x1a0000000000, 0x7f, 0x77d508f7, 0x0, 0xee01, 0x0, 0x8, 0x5, 0x8, 0x100000000, 0x7, 0x7fffffff, 0x10, 0x9, 0x4, 0xd}) semctl$auto_SETALL(0x2, 0x6, 0x11, 0xb1c) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) close_range$auto(0x2, 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x15) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x6044814}, 0x81) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1300"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x101000, 0x0) mseal$auto(0xfffffffffffffffd, 0x7, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffefffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x8001, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x3, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x9}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/cpu0/uevent\x00', 0x22340, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000000c0)=""/4096, 0x1000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) 6.902122744s ago: executing program 1 (id=66): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) unshare$auto(0x40000080) openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x88041, 0x0) r1 = socket(0x10, 0x2, 0x0) read$auto(r1, 0x0, 0x10001) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = socket(0x2, 0x6, 0x0) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) quotactl_fd$auto(0xffffffffffffffff, 0x1, 0x0, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1007ffd, 0x0, 0xfe, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) socket(0xa, 0x1, 0x6) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) epoll_create$auto(0x4) setsockopt$auto(0x3, 0x0, 0x13, 0xffffffffffffffff, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/kcm_stats\x00', 0x8282, 0x0) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0xc8042, 0x0) lseek$auto(r5, 0x7fffffffffffffff, 0x2) read$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f0000000180)=""/8, 0x8) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/irq/5/name\x00', 0x20800, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop7/trace/act_mask\x00', 0x402, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000540)=""/4093, 0xffd) mmap$auto(0x5, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/nfs/net/nfs_client/identifier\x00', 0x80, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/bonding/bond0\x00', 0xc0000, 0x0) setsockopt$auto(r2, 0x10d, 0x1000008e, 0x0, 0x17) futex_requeue$auto(&(0x7f0000000040)={0x3, 0x6, 0x102, 0x2000000}, 0x80, 0x2, 0x101) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="671d26e6688a2b5ad99a26690a4aa53d0431d62cfcc8b8b16e59a86a3cb599cd5445acc8d7b41f200fce22b956f09392914e71150cdaa0b0abadff41dca9c423311a48d0915776e8d01d6a21e8d5080087b1b97e4074c2882f7dfc82e8ac06b5b3116ebc2f921d98e2de373b9a1db8cc407828f9e8c7131e7bc092fc9a79331b29ee", 0x82) 5.498186209s ago: executing program 2 (id=67): ioperm$auto(0x7, 0x6, 0x1) r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x500, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0x0, 0x91d2, 0x4, 0x0, 0x6, 0x2) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r1, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) write$auto(0x3, 0x0, 0xfffffdef) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) madvise$auto(0x108000, 0x800034, 0x200000b) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0004, 0x19) madvise$auto(0x5, 0x2, 0x0) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x4, 0xfffe, 0x0, 0x8004) unshare$auto(0x40000080) close_range$auto(r2, r0, 0xfffe) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/flags\x00', 0x101142, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) execve$auto(0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/cache/index2/level\x00', 0x10002, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) write$auto(0x3, 0x0, 0x100082) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, 0x4, 0x200, 0x1001, 0x0, 0xf, 0xffffffffffffffff, 0x1400000, 0x5}, 0x6f4) 4.766308446s ago: executing program 3 (id=68): openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyud\x00', 0x88041, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/pcrypt/pencrypt/serial_cpumask\x00', 0xa001, 0x0) write$auto(r0, &(0x7f0000000040)=',\x00^\xa2\x02\x00\x00\x00\x00\x00\xd8l\x00\x00\x00\x00\x00\x00\xb2s\x83\xbd\xc5_%\xc1\xa3\xd0\x95Hq\xf4zG\x01[{\x17\x05I\xe0\xb1d)\x06z8L\xe6&[\xa9X6\x7f\xec\x94\xdal\xa1\xbb\x86\x9c\xc2\xef\x02\r9%\x06\xc5\'b%m_\x96A\"\xdd\xe40\xa7\xc3\x9ah\xf3B\xc2\xec\xf8\r\f[\xe5\x9dK\xe1\x99\x86\xfc\xac\x9f\x8a', 0x1000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/ocfs2/active_cluster_plugin\x00', 0x22100, 0x0) read$auto(0x3, 0x0, 0x30) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x7, 0x1, 0x1007181, 0x8a0d, 0x7, 0x7, 0x7, 0x89, 0x26, 0x4, 0x200000000001, 0xfffffffffffff343, 0xfffffffffffffffa, 0x500000000000000, 0x0, 0x30, 0x0, 0x864, 0xe, 0x22000, 0x9, 0x0, 0x84, [0x200, 0x2, 0x4, 0xfffffffffffffffe, 0x0, 0x401ffc, 0x0, 0xe, 0x1, 0x400, 0xfffffffffffffffd, 0x7, 0x8, 0x4, 0x6, 0x0, 0x10000000000008, 0xc329, 0x7fffffff, 0x0, 0xffffffffffffffff, 0x4, 0x31, 0x40, 0x100, 0x3006, 0x400000000005b8, 0xfffc, 0x10, 0x100, 0x4, 0x6, 0x5, 0x88e, 0x40, 0xff, 0x8, 0xa38, 0x1c0000000000000, 0x4, 0xfffffffffffffffc, 0x2, 0x8, 0x10000000006, 0xc567, 0x8200000000]}, 0x9, 0xd) r1 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000000c0), r2) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000f9dbdf250100000006000200010000000500070058000000080009000800000008000a000800000008001700", @ANYRES32=r1, @ANYBLOB="0dc0e97dae26a36e6cb0e4057ff6"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x20) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/snd/controlC2\x00', 0x8080, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r6 = socket(0x2, 0x1, 0x0) syz_clone(0xa0100000, &(0x7f0000000080)="0b80731acc362068bf8c79256e14b4e4e33bfbfb0a3f7806d4ea49c8272bc1c25f432307582f778d49815586bea4963a110017c317f480f0b71b1bc1d8208b0853c3a1832785116a562f56eb98", 0x4d, &(0x7f0000000100), &(0x7f0000000180), 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6e) sendmmsg$auto(r6, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) io_uring_setup$auto(0x1, 0x0) socket(0x29, 0x2, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) sendfile$auto(0x1, 0x3, 0x0, 0x74c) unshare$auto(0x40000080) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x3b87, 0xa) 4.641629531s ago: executing program 1 (id=69): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) getsockopt$auto(0xffffffffffffffff, 0x24, 0xfffffffd, 0x0, 0x0) syz_genetlink_get_family_id$auto_macsec(&(0x7f00000003c0), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), r0) r1 = semctl$auto_SEM_STAT_ANY(0xe, 0xfffffffb, 0x14, 0x7) sendmsg$auto_OVS_VPORT_CMD_GET(r0, 0x0, 0x20000004) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket(0x2, 0x1, 0x106) sendmsg$auto_OVS_VPORT_CMD_SET(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4100}, 0x20000000) socket(0xa, 0x2, 0x0) sendto$auto(0xffffffffffffffff, 0x0, 0x11, 0xffff, &(0x7f0000000040)=@ax25={0x3, @bcast, 0x6}, 0x16) getpgid(r1) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) flock$auto(0xffffffffffffffff, 0x4) socket(0x2, 0x3, 0x6) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000000) unshare$auto(0x40000080) socket(0x2b, 0x3, 0x1) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) r3 = open(&(0x7f0000000000)='./file0\x00', 0x44243, 0xe1d2b27bdc14aabc) flock$auto(r3, 0x5) 4.561464566s ago: executing program 0 (id=70): mmap$auto(0x5, 0x20009, 0x13, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001140)='/sys/devices/platform/vhci_hcd.6/usb22/22-0:1.0/usb22-port7/power/runtime_suspended_time\x00', 0x683, 0x0) socket(0x1e, 0x1, 0x900) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x60042, 0x0) shmctl$auto_SHM_STAT(0x6, 0xd, 0x0) openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000000000), 0x395100, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$auto_BCH_IOCTL_FSCK_OFFLINE(r1, 0x4018bc13, 0x0) writev$auto(0x3, &(0x7f0000000340)={0x0, 0x7111}, 0x8) setsockopt$auto(r0, 0x0, 0x29, 0x0, 0x29) mmap$auto(0x240000, 0x20005, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000080)={{@raw=0x8, 0x3, 0x3, 0x2f, "984e784f697ebcc30053822c357eb55df43e9e037b650dfc7a3df9aa20e32749384f515111de5da4403cab68", @raw=0x7}, 0x200000, 0x1, 0x4, @raw=0x3, @enumerated={0x8, 0x0, "3544fac47a801d819cb534605db6a893115890fe4787b8119b09b2312883af26fc4d92993388ddddba247c0c9dad68e873f1359a4c377e7310a5f19b224938a6", 0xfffffffffffff000}, "b210e8ae72f3052d09004297cc39fbd4fe51f972eb62ed41cec2ea5c1e45264907d818e9711e2b57cd159b796ab9e6c81a2f47680e3d2a7f677dccfd260d82fe"}) r2 = socket(0x10, 0x2, 0x0) recvmmsg$auto(r2, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto_VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000080)=0xffffffffffffffff) mmap$auto(0x0, 0x80000001, 0xdf, 0x9b7f, r3, 0x7fffffffffffffff) ioctl$auto(0x4000000000000c8, 0x400454d9, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x0, 0x0) r4 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r4, &(0x7f0000000040)=""/4096, 0xfffffe82) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) ioctl$auto_IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000080)={0x2, 0x3, 0x86}) r5 = socket(0x28, 0x1, 0x0) setsockopt$auto(r5, 0x28, 0x1, 0x0, 0x8) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) 3.304688479s ago: executing program 2 (id=71): r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x48180, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000280)={{0x3, 0x1000, 0x1, 0x87, 0xfffffffe}, "65546d06b4823e7b31bdb2e1325b6a29ba16184410ba9f74e82a3fb6c3cc6664"}) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ipv6_route\x00', 0x101000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0xe8) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x40008, 0xb3, 0x9b72, r1, 0x28000) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000000), 0x181000, 0x0) r3 = openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSTI2(r4, 0x5412, &(0x7f0000000040)="9105") socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x4, 0x2020009, 0x5, 0xeb1, 0xffffffffffffffff, 0x7) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r6, 0x0, 0x20) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) getsockopt$auto_SO_BUF_LOCK(r5, 0x5, 0x48, 0x0, 0x0) unshare$auto(0x40000080) socket(0x2, 0x801, 0x100) getsockopt$auto(0x100000006, 0x0, 0x1f, 0x0, 0x0) write$auto_vga_arb_device_fops_vgaarb(r3, &(0x7f00000005c0)="d06f0b0b4950fa2645c5a15eea0b104db2ce9ae78d314ca52c728e27440d1e2aedf6559febee2b79f2beba9981e0659269ce6def59c8e06ce6ec059aa7fd8abd21cb", 0x42) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/net_prio.ifpriomap\x00', 0x10b142, 0x0) sendfile$auto(r7, r7, 0x0, 0x5) 3.250107828s ago: executing program 0 (id=72): mmap$auto(0x0, 0x6, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) mmap$auto(0x0, 0x1, 0xdf, 0x20009b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_fops_blob_file(0xffffffffffffff9c, &(0x7f0000011500), 0x40002, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x20c40, 0x0) socket(0x2, 0x801, 0x6) openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, 0x0, 0x80a01, 0x0) write$auto(0x3, 0x0, 0xfdef) openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, 0x0, 0x121080, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x20400, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x103400, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42dc0, 0x10a) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x8102, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/tty17\x00', 0x0, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptye4\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto_TIOCSTI2(r0, 0x5412, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd70002374dd51034a7f25bca62eb300000008000400b70a00000600070000", @ANYRES32, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100000000000000000008000200", @ANYRES32, @ANYBLOB="060006ff05000000080003009b"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) 2.699098449s ago: executing program 1 (id=73): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = open(0x0, 0x64842, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/ptyq3\x00', 0x40001, 0x0) msgctl$auto(0x6, 0x3, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff, 0xee01, 0x6, 0x0, 0x6, 0x3}, 0x0, 0x0, 0x8, 0x9, 0x6, 0x205, 0x5b73, 0x49, 0x9, 0x2}) pwrite64$auto(0xc8, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/231, 0xfdf2, 0x3a) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x3, 0x0, 0x5c8) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto_FIOASYNC(r1, 0x5452, r1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x1, 0x84) bind$auto(r0, 0x0, 0x6a) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) socket(0x10, 0x2, 0x6) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socketpair$auto(0x5, 0x5, 0xffffffff, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) connect$auto(0x3, &(0x7f00000000c0), 0x55) write$auto(0x3, 0x0, 0xbc0d) ioctl$auto_SNDCTL_SEQ_PANIC(r0, 0x5111, &(0x7f0000000100)="b68856ede41d25a205ab8cc14886939532867ed2da6ff8c8a0bf1cedf777e7784074053457edbe5886c190fe8418a8d8c6a7e2c5b273702d6c2e7bd84eccd25178aa641a6a4d217d0350b8e0a307724bbb1b85d1db") connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sysfs$auto(0x2, 0x4d, 0x0) 2.301402773s ago: executing program 3 (id=74): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000640)='/sys/devices/platform/dummy_hcd.1/usb2/bmAttributes\x00', 0x0, 0x0) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) mmap$auto(0x2000, 0x9, 0x8, 0x8000000008011, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x9a, 0x4, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) kcmp$auto(0x0, 0x0, 0x40000000, 0x7ff, r2) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x80102, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYRES16=0x0, @ANYBLOB="2f212abd7800fddbdf25"], 0x14}}, 0x4000000) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) ustat$auto(0x801, 0x0) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto_fuse_dev_operations_fuse_i(0xffffffffffffffff, &(0x7f0000000000)="1100000000000000", 0x8) write$auto(r1, &(0x7f00000000c0)='/dev?au\xea\xf7\xc8\xba\x00', 0xa3dc) r4 = socket(0x10, 0x3, 0xa) sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r4, 0x0, 0x10) select$auto(0xfffffffe, 0x0, 0x0, &(0x7f0000000180)={[0xf1, 0x7, 0xd, 0x1, 0x948b, 0x0, 0x401, 0xff, 0x80, 0x300000000000000, 0x40000080000001, 0x7, 0x6d3c, 0x5, 0x3ff, 0x7ff]}, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) ioperm$auto(0x7, 0x6, 0x2) open$dir(&(0x7f0000000000)='./file0\x00', 0x42, 0x20) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x20000000) 2.256787997s ago: executing program 0 (id=75): r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dri/card0\x00', 0xd5b841, 0x0) mlockall$auto(0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto(r1, 0x405c5503, 0x81) close_range$auto(r0, r1, 0x7f000002) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0xffffffffffffffff, 0x4, 0x3, 0xa) madvise$auto(0x0, 0xffffffffffff0005, 0x19) setfsgid$auto(0xee01) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unlink$auto(0x0) prctl$auto(0xae1, 0x1, 0x4, 0x400005, 0x7) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x23, 0x0) r2 = fsopen$auto(0x0, 0x1) fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0x10004010) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000000), r3) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/rxrpc/peers\x00', 0x1014a0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f0000000000)=""/223, 0xdf) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x100, 0x0) read$auto_proc_reg_file_ops_compat_inode(r5, &(0x7f0000000040)=""/183, 0xb7) 2.151425111s ago: executing program 2 (id=76): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x5, 0x2000000000002) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) splice$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0xb) ioctl$auto(0x3, 0x400c4d01, r0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) mmap$auto(0x0, 0x20009, 0xe0, 0xeb1, 0xffffffffffffffff, 0x4) readv$auto(r1, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) madvise$auto(0x0, 0xffffffffffff0005, 0x17) socket(0x10, 0x2, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_DEL_PMK(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fbdbdf857000000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) r5 = prctl$auto_PR_SET_CHILD_SUBREAPER(0x24, 0x8, 0xffffffffffffffff, 0x2, 0x7fffffff) io_cancel$auto(0x101, &(0x7f0000000240)={0x7, 0x9, 0x776c, 0x2, 0x7fff, 0xffffffffffffffff, 0xf73, 0x0, 0x6, 0x0, 0x0, r5}, &(0x7f0000000280)={0x400, 0x8, 0xb9b7, 0x2}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) bpf$auto(0x9, 0x0, 0x6f3) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/block/nbd6/queue/zoned\x00', 0x6a980, 0x0) read$auto(r6, 0x0, 0x6) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) pread64$auto(0xffffffffffffffff, 0x0, 0x100000009, 0xa4000000000002) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) 2.041030265s ago: executing program 1 (id=77): unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0) mmap$auto(0x0, 0x60009, 0x7f, 0xeb1, 0x40000000000a5, 0x8000) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) arch_prctl$auto(0x1024, 0x0) lstat$auto(&(0x7f0000000200)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) ioctl$auto(0x3, 0x5420, 0x38) getrandom$auto(0x0, 0x6000000, 0x3) ioctl$auto(0x3, 0x5404, 0x38) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_FLUSH(0xffffffffffffffff, 0x0, 0x4) r1 = io_uring_setup$auto(0x6, 0x0) close_range$auto(r1, 0x8, 0x3) epoll_create$auto(0x4) semtimedop$auto(0x8000, &(0x7f00000000c0)={0x6713, 0x5e, 0xffff}, 0x3e, &(0x7f0000000180)={0xfffffffffffffff8, 0xb87}) epoll_ctl$auto(r0, 0x1, 0x8000000000000000, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, 0x0, 0x600000, 0x0) mlock$auto(0x4, 0x0) readv$auto(0x3, &(0x7f0000000600)={0x0, 0xc}, 0x1da) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, 0x0, 0x40, 0x0) select$auto(0x7, 0x0, &(0x7f0000000cc0)={[0x9, 0x1, 0x1, 0x8, 0x6, 0x14b, 0x6, 0x745ad93d, 0x9, 0x5, 0x7, 0x9, 0x6, 0x1, 0x6, 0x9]}, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x80102, 0x0) close_range$auto(0x2, 0x8, 0x0) bpf$auto(0x0, 0x0, 0xee) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) 702.825662ms ago: executing program 2 (id=78): write$auto(0x800000000000c8, 0x0, 0x1a) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) shutdown$auto(0x200000003, 0x2) set_mempolicy$auto(0x8003, &(0x7f0000000280)=0x200000007b, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r1 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000100), 0x20400, 0x0) ioctl$auto_TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000140)=0xbc) r2 = epoll_create$auto(0x3e) r3 = socket(0xa, 0x2, 0x3a) epoll_ctl$auto(r2, 0x1, r0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x802, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(r4, 0x8, 0x1) fcntl$auto(r4, 0x10, 0x2) bind$auto(0x3, 0x0, 0x68) renameat2$auto(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x4000) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PVERSION(r2, 0x80045700, &(0x7f0000000200)=0xfff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x800eb1, r3, 0x8000) r5 = openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) io_uring_setup$auto(0x7, &(0x7f0000000040)={0x5, 0x3ff, 0x5968, 0xfffffffd, 0x1, 0x8, r5, [0xf5, 0x1, 0xf76], {0x3, 0x8, 0x5, 0x9, 0xfffffffa, 0x5, 0x156c, 0x7, 0x83}, {0x7ff, 0x13, 0x3b, 0x8, 0x5, 0x553, 0x3, 0x9, 0x4}}) keyctl$auto(0x7ff, 0x0, 0xee01, 0x0, 0x0) keyctl$auto(0x15, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) mmap$auto(0x1, 0x20009, 0x4000000000e3, 0x17, 0x401, 0x8003) 389.491162ms ago: executing program 1 (id=79): mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) r0 = setfsuid$auto(0x0) keyctl$auto_KEYCTL_PKEY_QUERY(0x18, r0, 0x0, 0x0, 0x6) shmctl$auto_SHM_STAT(0x9, 0xd, &(0x7f0000000440)={{0x7fffffff, 0x0, 0xffffffffffffffff, 0x3, 0x9}, 0xd, 0x1, 0x1ff, 0x5, @raw=0x7fffffff, @inferred, 0x3, 0x0, &(0x7f0000000240)="84e587c342ebf965e3800b1a645f135225695a5bf4861e16646769789382df80ae52f9aca9fa2377a9dd2fc600462f223353c8be07a96b046d48e33629be66901676fdecc24010e950d1eb4eed03e444537bb4ad12cbee74cdf35653571f030622f3b77830cadf7b176f873586861c76d9a113820203cc8ddff6153c8518bcf1d916d05be4db1a233aa4bee96d134caa177abb7a46603fff4e795d2e3c597beb8e7f93fd551b7464f7e46f5fec77080cbf92476bf6933ccf602072e6856af28adcbe382b2390ea65af4029bfd06dc2a47e543d956e3a26a3e6", &(0x7f0000000340)="c1a0a7d8b805445826c59d892611d181cdef6230839b18f57c803f82076a158cd2a9702f308a516393d908f8da8750bf5a8f8a2aba527e93c2a6edf309e53f4fdaf1f5f30011b68eb290852c4d8dade38260d5b638328ee5f0c8c0476d69288e8900e0c1e94a19eb24ee7aeb6becc2be52ce23b19e608050fad1760e184089a37b39c476c0a91330b9753e828788e515da9045b37837"}) keyctl$auto(0xf, 0x400, r0, r1, 0x4) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$auto_KVM_GET_EMULATED_CPUID(r2, 0xc008ae09, &(0x7f0000000140)={0x5}) r3 = userfaultfd$auto(0x7) landlock_create_ruleset$auto(&(0x7f0000000200)={0xfffffffffffffffc, 0x9, 0x7f}, 0xb951, 0x6) ioctl$auto_SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfe, &(0x7f0000000080)="e452ad5fabf059362213b2a0579e2dda48347315a0") r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto_UDMABUF_CREATE_LIST(r3, 0x40087543, &(0x7f0000000180)={0x9, 0x9, [{r2, 0x0, 0x7f, 0x4}, {r3, 0x0, 0x2, 0xc87}, {0xffffffffffffffff, 0x0, 0x8, 0x4}]}) epoll_ctl$auto_EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0xa287, 0x6}) bind$auto(r4, &(0x7f0000000100)=@nl, 0x3) socket(0xa, 0x5, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000000) r6 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0x1c8300, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, 0x0) ioctl$auto(r6, 0xc004510e, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r7 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/1/msr\x00', 0xf82, 0x0) mmap$auto(0x0, 0x20009, 0xe0, 0xeb1, 0xffffffffffffffff, 0x4) readv$auto(r7, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x1010001, 0x100000003) setsockopt$auto(0x3, 0x10000000084, 0x72, 0x0, 0xc) 116.739006ms ago: executing program 3 (id=80): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0xffff, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) io_setup$auto(0x1, 0x0) io_pgetevents$auto(0x4, 0x8, 0xa31f, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020007, 0xffffffffffffffff, 0x8000000000000eb1, 0xffffffffffffffff, 0x8000) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/cpuset\x00', 0x181100, 0x0) lseek$auto(0x3, 0x20000, 0x1) madvise$auto(0x0, 0xffffffffffff0004, 0x17) r0 = memfd_create$auto(&(0x7f0000000000)='@%![#@}-\x00', 0xff) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) write$auto(r1, &(0x7f00000005c0)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1yE\xfb\xfd\xc1\x85eA@k\x8c\xa2f\x88\x05\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x19\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8a\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x17\xcb\xc0\xbc\xc3\t\xf5\xeb\x98\x88\x19\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\b\x00\x00\x00\x00\x00\x00\x00H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xc2m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x8a\xd4\x17~\xd8\xd7M\xc3k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x00\x00$\xd4\xf4\xb5\xe6\xd0 \xb9\x00\xfd@\x94\xc9\xec\xd8l\x14\\\xb91\xeb\v\x84w\x1a\x10\x82\xd3\xee\xae\x04!\xb8\x95Y\xad.X3\x86-\b\xa7XK\xb4\xc3\x05&\x10\xb3#\xa3\xe9\x92\xd2Y\xdc\xc5\xceV\xae\x88\x04\x81\xae\x9a+,\x8c\x83\xea\xc1\x8d\x99\xbb\x0f\xdb;\xbfLej\x14C\xb1XX\xefK+5\xdf\x14+1\x92\x14\x99\x03\xd5_\xe5\xf2tJ=\xeb\x18\xb7\xcf\xc4\xe6 =\"\x8b#m]\x17+Lm\xce6\xb7\x01\xc2\xed\xd1U1#\xed\xd1\x11\x9c\"\x0f\xfb3\x8c\xaa\xb6', 0x1) mmap$auto(0xffffffffffffffff, 0x0, 0xdf, 0x400000009b7e, r0, 0x0) mmap$auto(0x0, 0x5, 0x1, 0x8010, 0x3, 0x8000) sendfile$auto(0x6, 0x3, 0x0, 0x8000) mmap$auto(0x0, 0x5, 0xe936, 0x1010, r0, 0x8000008000) unshare$auto(0x40000080) mmap$auto(0x5, 0x20009, 0x6, 0x19, 0x401, 0x4000088000) socket(0x11, 0x3, 0x8) r2 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r2, 0x0, 0x26, 0x0, 0xc) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x189002, 0x0) mount$auto(0x0, 0x0, 0x0, 0x104, 0x0) statfs$auto(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ipvlan1\x00'}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = socket(0x2, 0xa, 0xa) sendmmsg$auto(r3, &(0x7f0000000200)={{&(0x7f0000000140), 0x101, 0x0, 0x7, 0x0, 0x3, 0x1}, 0x7}, 0x8, 0x7fff) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 2 (id=81): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000080), 0x101400, 0x0) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="bfd8001e8a8acb120e775acb0809aff51a00", @ANYRES16=0x0, @ANYBLOB="251729bd7000fcdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x41000}, 0x64810) socket$nl_generic(0x10, 0x3, 0x10) rseq$auto(&(0x7f0000000300)={0xb, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x8) mmap$auto(0x80000000000, 0x400008, 0xe0, 0x9b72, 0x2, 0x8000) r0 = epoll_create$auto(0x2) epoll_pwait2$auto(r0, 0x0, 0x8, &(0x7f0000002780)={0x0, 0x6}, 0x0, 0x8) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop12/queue/nr_requests\x00', 0x80302, 0x0) clock_nanosleep$auto(0x4, 0xfff, &(0x7f0000000240)={0x1, 0xfffffffffffffbff}, &(0x7f0000000280)={0x78f4, 0x1}) sendfile$auto(r1, r1, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x9, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) close_range$auto(0x0, 0x5, 0x0) pipe$auto(0x0) mmap$auto(0x0, 0x7, 0x72, 0x8b72, 0x8f1, 0x2000) io_uring_setup$auto(0x3ff, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r2 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) sendto$auto(0x3, 0x0, 0xfffffffffffffdef, 0x101, 0x0, 0x1c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.135' (ED25519) to the list of known hosts. [ 80.868472][ T5828] cgroup: Unknown subsys name 'net' [ 80.981647][ T5828] cgroup: Unknown subsys name 'cpuset' [ 80.991389][ T5828] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.634601][ T5828] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.530767][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.547891][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.556323][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.564302][ T5855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.579038][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.580444][ T5853] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.586529][ T5855] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.601860][ T5855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.609288][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.609852][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.629142][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.629457][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.636727][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.643610][ T5855] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.658743][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.666172][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.678491][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.685924][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.693522][ T5146] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.704017][ T5855] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.027889][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 85.075898][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 85.153264][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 85.216001][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 85.231892][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.239746][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.247044][ T5838] bridge_slave_0: entered allmulticast mode [ 85.254118][ T5838] bridge_slave_0: entered promiscuous mode [ 85.276858][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.284130][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.291547][ T5838] bridge_slave_1: entered allmulticast mode [ 85.298333][ T5838] bridge_slave_1: entered promiscuous mode [ 85.354762][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.363246][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.370493][ T5837] bridge_slave_0: entered allmulticast mode [ 85.377181][ T5837] bridge_slave_0: entered promiscuous mode [ 85.405209][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.412419][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.420058][ T5839] bridge_slave_0: entered allmulticast mode [ 85.426834][ T5839] bridge_slave_0: entered promiscuous mode [ 85.434578][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.441804][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.449149][ T5839] bridge_slave_1: entered allmulticast mode [ 85.455877][ T5839] bridge_slave_1: entered promiscuous mode [ 85.462982][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.470213][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.477352][ T5837] bridge_slave_1: entered allmulticast mode [ 85.484183][ T5837] bridge_slave_1: entered promiscuous mode [ 85.492713][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.505578][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.587317][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.599140][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.611741][ T5838] team0: Port device team_slave_0 added [ 85.617903][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.625762][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.633697][ T5840] bridge_slave_0: entered allmulticast mode [ 85.641469][ T5840] bridge_slave_0: entered promiscuous mode [ 85.649124][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.656260][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.663581][ T5840] bridge_slave_1: entered allmulticast mode [ 85.670524][ T5840] bridge_slave_1: entered promiscuous mode [ 85.678764][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.690016][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.707898][ T5838] team0: Port device team_slave_1 added [ 85.761326][ T5837] team0: Port device team_slave_0 added [ 85.769887][ T5839] team0: Port device team_slave_0 added [ 85.785790][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.796980][ T5837] team0: Port device team_slave_1 added [ 85.806997][ T5839] team0: Port device team_slave_1 added [ 85.813578][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.823023][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.850419][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.863968][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.902902][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.912436][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.940192][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.967660][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.974805][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.001025][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.030209][ T5840] team0: Port device team_slave_0 added [ 86.037488][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.044982][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.071609][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.083417][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.093325][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.120209][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.139737][ T5840] team0: Port device team_slave_1 added [ 86.153188][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.160412][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.187266][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.217974][ T5838] hsr_slave_0: entered promiscuous mode [ 86.224298][ T5838] hsr_slave_1: entered promiscuous mode [ 86.286368][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.293458][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.320035][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.332624][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.339875][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.366225][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.392371][ T5837] hsr_slave_0: entered promiscuous mode [ 86.398928][ T5837] hsr_slave_1: entered promiscuous mode [ 86.404964][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.413107][ T5837] Cannot create hsr debugfs directory [ 86.441407][ T5839] hsr_slave_0: entered promiscuous mode [ 86.447750][ T5839] hsr_slave_1: entered promiscuous mode [ 86.454048][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.462080][ T5839] Cannot create hsr debugfs directory [ 86.555371][ T5840] hsr_slave_0: entered promiscuous mode [ 86.563174][ T5840] hsr_slave_1: entered promiscuous mode [ 86.569401][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.576970][ T5840] Cannot create hsr debugfs directory [ 86.711052][ T5838] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.727834][ T5838] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.735142][ T5842] Bluetooth: hci3: command tx timeout [ 86.735146][ T5855] Bluetooth: hci1: command tx timeout [ 86.735480][ T5842] Bluetooth: hci0: command tx timeout [ 86.774996][ T5838] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.804235][ T5838] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.811300][ T5842] Bluetooth: hci2: command tx timeout [ 86.869275][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.888999][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.904363][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.920282][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.959102][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.978507][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.002347][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.024916][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.046365][ T5840] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.070618][ T5840] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.085082][ T5840] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.095351][ T5840] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.185170][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.232469][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.246774][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.263209][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.270553][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.309735][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.316856][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.327607][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.348921][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.356076][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.394393][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.401532][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.423944][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.475648][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.484844][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.512552][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.530663][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.537818][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.560811][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.567975][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.593265][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.600455][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.624289][ T4064] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.631579][ T4064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.755727][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.896496][ T5838] veth0_vlan: entered promiscuous mode [ 87.934545][ T5838] veth1_vlan: entered promiscuous mode [ 87.945317][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.021095][ T5838] veth0_macvtap: entered promiscuous mode [ 88.041590][ T5838] veth1_macvtap: entered promiscuous mode [ 88.055405][ T5837] veth0_vlan: entered promiscuous mode [ 88.076980][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.094237][ T5837] veth1_vlan: entered promiscuous mode [ 88.114537][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.125340][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.152020][ T5838] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.161090][ T5838] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.171496][ T5838] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.180591][ T5838] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.219658][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.232370][ T5837] veth0_macvtap: entered promiscuous mode [ 88.244843][ T5837] veth1_macvtap: entered promiscuous mode [ 88.310782][ T5839] veth0_vlan: entered promiscuous mode [ 88.316854][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.337341][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.351487][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.382267][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.393159][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.404127][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.415355][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.445228][ T5839] veth1_vlan: entered promiscuous mode [ 88.450929][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.460250][ T5837] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.472088][ T5837] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.481021][ T5837] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.491825][ T5837] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.511453][ T5840] veth0_vlan: entered promiscuous mode [ 88.539438][ T5840] veth1_vlan: entered promiscuous mode [ 88.568173][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.580648][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.587027][ T5839] veth0_macvtap: entered promiscuous mode [ 88.639695][ T5839] veth1_macvtap: entered promiscuous mode [ 88.653841][ T5840] veth0_macvtap: entered promiscuous mode [ 88.694013][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.707972][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.728041][ T5840] veth1_macvtap: entered promiscuous mode [ 88.746647][ T5838] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 88.785258][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.796146][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.806128][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.817690][ T5842] Bluetooth: hci0: command tx timeout [ 88.820092][ T55] Bluetooth: hci1: command tx timeout [ 88.823573][ T5842] Bluetooth: hci3: command tx timeout [ 88.833179][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.845711][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.863241][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.874174][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.878102][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.892079][ T5842] Bluetooth: hci2: command tx timeout [ 88.892168][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.906058][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.916789][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.948357][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.961657][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.976916][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.996090][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.010380][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.021468][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.032069][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.047509][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.063695][ T5840] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.074170][ T5840] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.083782][ T5840] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.096039][ T5840] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.110523][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.124695][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.135170][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.146813][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.156992][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.168957][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.180196][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.212389][ T5839] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.224376][ T5839] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.236361][ T5839] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.245326][ T5839] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.371377][ T5910] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.487474][ T4064] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.509651][ T4064] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.537027][ T5910] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 89.582597][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.619780][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.767401][ T5913] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 89.803399][ T4064] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.860118][ T4064] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.087748][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.122034][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.888887][ T5842] Bluetooth: hci3: command tx timeout [ 90.898411][ T5842] Bluetooth: hci1: command tx timeout [ 90.898809][ T55] Bluetooth: hci0: command tx timeout [ 90.969008][ T55] Bluetooth: hci2: command tx timeout [ 91.086756][ T5947] FAULT_INJECTION: forcing a failure. [ 91.086756][ T5947] name fail_futex, interval 1, probability 0, space 0, times 1 [ 91.138796][ T5947] CPU: 0 UID: 0 PID: 5947 Comm: syz.1.2 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 91.138838][ T5947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 91.138859][ T5947] Call Trace: [ 91.138867][ T5947] [ 91.138881][ T5947] dump_stack_lvl+0x16c/0x1f0 [ 91.138918][ T5947] should_fail_ex+0x512/0x640 [ 91.138964][ T5947] get_futex_key+0x49e/0x1000 [ 91.138996][ T5947] ? __pfx_get_futex_key+0x10/0x10 [ 91.139024][ T5947] ? stack_trace_save+0x8e/0xc0 [ 91.139052][ T5947] ? __pfx_stack_trace_save+0x10/0x10 [ 91.139079][ T5947] ? stack_depot_save_flags+0x29/0x9c0 [ 91.139113][ T5947] ? __lock_acquire+0xaa4/0x1ba0 [ 91.139151][ T5947] futex_wait_setup+0x78/0x290 [ 91.139187][ T5947] ? kasan_save_free_info+0x3b/0x60 [ 91.139219][ T5947] ? __x64_sys_openat+0x174/0x210 [ 91.139249][ T5947] __futex_wait+0x266/0x3c0 [ 91.139287][ T5947] ? __pfx___futex_wait+0x10/0x10 [ 91.139328][ T5947] ? __pfx_futex_wake_mark+0x10/0x10 [ 91.139374][ T5947] futex_wait+0xe8/0x380 [ 91.139410][ T5947] ? __pfx_futex_wait+0x10/0x10 [ 91.139452][ T5947] ? kmem_cache_free+0x2d4/0x4d0 [ 91.139487][ T5947] ? fd_install+0x1db/0x670 [ 91.139521][ T5947] ? putname+0x154/0x1a0 [ 91.139549][ T5947] do_futex+0x229/0x350 [ 91.139579][ T5947] ? __pfx_do_futex+0x10/0x10 [ 91.139615][ T5947] __x64_sys_futex+0x1e0/0x4c0 [ 91.139647][ T5947] ? __x64_sys_openat+0x174/0x210 [ 91.139675][ T5947] ? __pfx___x64_sys_futex+0x10/0x10 [ 91.139709][ T5947] ? rcu_is_watching+0x12/0xc0 [ 91.139741][ T5947] do_syscall_64+0xcd/0x260 [ 91.139769][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.139796][ T5947] RIP: 0033:0x7f31b278d169 [ 91.139817][ T5947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.139851][ T5947] RSP: 002b:00007f31b359e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 91.139877][ T5947] RAX: ffffffffffffffda RBX: 00007f31b29a5fa8 RCX: 00007f31b278d169 [ 91.139895][ T5947] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f31b29a5fa8 [ 91.139912][ T5947] RBP: 00007f31b29a5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 91.139929][ T5947] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f31b29a5fac [ 91.139952][ T5947] R13: 0000000000000000 R14: 00007fff7d3f51b0 R15: 00007fff7d3f5298 [ 91.139980][ T5947] [ 91.921503][ T55] Bluetooth: hci0: unexpected event 0x1d length: 6 > 5 [ 92.355195][ T5952] mmap: syz.3.9 (5952) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 92.968391][ T55] Bluetooth: hci1: command tx timeout [ 92.969416][ T5842] Bluetooth: hci3: command tx timeout [ 92.978394][ T55] Bluetooth: hci0: command tx timeout [ 93.048662][ T55] Bluetooth: hci2: command tx timeout [ 95.125175][ T5984] FAULT_INJECTION: forcing a failure. [ 95.125175][ T5984] name failslab, interval 1, probability 0, space 0, times 0 [ 95.214111][ T5984] CPU: 0 UID: 0 PID: 5984 Comm: syz.3.13 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 95.214156][ T5984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 95.214176][ T5984] Call Trace: [ 95.214186][ T5984] [ 95.214197][ T5984] dump_stack_lvl+0x16c/0x1f0 [ 95.214232][ T5984] should_fail_ex+0x512/0x640 [ 95.214272][ T5984] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 95.214322][ T5984] should_failslab+0xc2/0x120 [ 95.214370][ T5984] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 95.214417][ T5984] ? sock_alloc_inode+0x25/0x1c0 [ 95.214473][ T5984] ? __pfx_sock_alloc_inode+0x10/0x10 [ 95.214521][ T5984] sock_alloc_inode+0x25/0x1c0 [ 95.214557][ T5984] alloc_inode+0x61/0x240 [ 95.214583][ T5984] sock_alloc+0x40/0x280 [ 95.214617][ T5984] __sock_create+0xc1/0x8d0 [ 95.214642][ T5984] udp_sock_create4+0xa6/0x450 [ 95.214675][ T5984] ? __pfx_udp_sock_create4+0x10/0x10 [ 95.214709][ T5984] ? lockdep_hardirqs_on+0x7c/0x110 [ 95.214747][ T5984] ? crng_make_state+0x48e/0x6d0 [ 95.214783][ T5984] rxrpc_open_socket+0x4f5/0x6b0 [ 95.214814][ T5984] ? __pfx_rxrpc_open_socket+0x10/0x10 [ 95.214852][ T5984] ? __pfx_rxrpc_client_conn_reap_timeout+0x10/0x10 [ 95.214886][ T5984] ? rcu_is_watching+0x12/0xc0 [ 95.214911][ T5984] rxrpc_lookup_local+0xa01/0x1220 [ 95.214945][ T5984] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 95.214981][ T5984] ? __local_bh_enable_ip+0xa4/0x120 [ 95.215011][ T5984] rxrpc_sendmsg+0x375/0x5f0 [ 95.215047][ T5984] ____sys_sendmsg+0xa8d/0xc60 [ 95.215069][ T5984] ? copy_msghdr_from_user+0x10a/0x160 [ 95.215100][ T5984] ? __pfx_____sys_sendmsg+0x10/0x10 [ 95.215126][ T5984] ? try_to_wake_up+0xa2f/0x1680 [ 95.215153][ T5984] ___sys_sendmsg+0x134/0x1d0 [ 95.215185][ T5984] ? __pfx____sys_sendmsg+0x10/0x10 [ 95.215241][ T5984] __sys_sendmsg+0x16d/0x220 [ 95.215272][ T5984] ? __pfx___sys_sendmsg+0x10/0x10 [ 95.215303][ T5984] ? __x64_sys_futex+0x1e0/0x4c0 [ 95.215335][ T5984] ? rcu_is_watching+0x12/0xc0 [ 95.215363][ T5984] do_syscall_64+0xcd/0x260 [ 95.215386][ T5984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.215409][ T5984] RIP: 0033:0x7ff95038d169 [ 95.215427][ T5984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.215449][ T5984] RSP: 002b:00007ff951124038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.215470][ T5984] RAX: ffffffffffffffda RBX: 00007ff9505a5fa0 RCX: 00007ff95038d169 [ 95.215493][ T5984] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000006 [ 95.215508][ T5984] RBP: 00007ff95040e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 95.215522][ T5984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.215536][ T5984] R13: 0000000000000000 R14: 00007ff9505a5fa0 R15: 00007fff032bb798 [ 95.215560][ T5984] [ 95.301135][ T5984] socket: no more sockets [ 95.838742][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.255031][ T5992] Invalid ELF header magic: != ELF [ 96.318426][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.795064][ T5992] Zero length message leads to an empty skb [ 96.864024][ T5998] FAULT_INJECTION: forcing a failure. [ 96.864024][ T5998] name fail_futex, interval 1, probability 0, space 0, times 0 [ 96.912345][ T5998] CPU: 1 UID: 0 PID: 5998 Comm: syz.0.16 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 96.912401][ T5998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 96.912421][ T5998] Call Trace: [ 96.912430][ T5998] [ 96.912441][ T5998] dump_stack_lvl+0x16c/0x1f0 [ 96.912483][ T5998] should_fail_ex+0x512/0x640 [ 96.912541][ T5998] get_futex_key+0x49e/0x1000 [ 96.912580][ T5998] ? __pfx_get_futex_key+0x10/0x10 [ 96.912617][ T5998] ? __lock_acquire+0x5ca/0x1ba0 [ 96.912665][ T5998] futex_wake+0xe7/0x4e0 [ 96.912716][ T5998] ? __pfx_futex_wake+0x10/0x10 [ 96.912766][ T5998] ? task_mm_cid_work+0x6b9/0x910 [ 96.912803][ T5998] do_futex+0x1e3/0x350 [ 96.912841][ T5998] ? __pfx_do_futex+0x10/0x10 [ 96.912878][ T5998] ? __pfx_task_mm_cid_work+0x10/0x10 [ 96.912911][ T5998] ? __pfx___might_resched+0x10/0x10 [ 96.912952][ T5998] __x64_sys_futex+0x1e0/0x4c0 [ 96.912990][ T5998] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 96.913032][ T5998] ? __pfx___x64_sys_futex+0x10/0x10 [ 96.913082][ T5998] ? rcu_is_watching+0x12/0xc0 [ 96.913119][ T5998] do_syscall_64+0xcd/0x260 [ 96.913151][ T5998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.913181][ T5998] RIP: 0033:0x7f2afa38d169 [ 96.913204][ T5998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.913233][ T5998] RSP: 002b:00007f2afb16c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 96.913263][ T5998] RAX: ffffffffffffffda RBX: 00007f2afa5a5fa8 RCX: 00007f2afa38d169 [ 96.913283][ T5998] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2afa5a5fac [ 96.913302][ T5998] RBP: 00007f2afa5a5fa0 R08: 00007f2afb16d000 R09: 0000000000000000 [ 96.913321][ T5998] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f2afa5a5fac [ 96.913340][ T5998] R13: 0000000000000000 R14: 00007ffddfc379f0 R15: 00007ffddfc37ad8 [ 96.913379][ T5998] [ 97.213884][ T24] cfg80211: failed to load regulatory.db [ 98.995287][ T6015] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78408 [ 99.018405][ T6015] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 99.079539][ T6015] memcg:ffff888032fd6481 [ 99.084085][ T6015] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 99.114753][ T6015] page_type: f5(slab) [ 99.137050][ T6015] raw: 00fff00000000040 ffff88814040aa00 ffffea0001e10000 0000000000000003 [ 99.188802][ T6015] raw: 0000000000000000 00000000000c000c 00000000f5000000 ffff888032fd6481 [ 99.223755][ T6015] head: 00fff00000000040 ffff88814040aa00 ffffea0001e10000 0000000000000003 [ 99.252751][ T6015] head: 0000000000000000 00000000000c000c 00000000f5000000 ffff888032fd6481 [ 99.281642][ T6015] head: 00fff00000000002 ffffea0001e10201 ffffffffffffffff 0000000000000000 [ 99.318606][ T6015] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 99.337975][ T6015] page dumped because: unmovable page [ 99.369462][ T6015] page_owner tracks the page as allocated [ 99.383118][ T6015] page last allocated via order 2, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_RECLAIMABLE), pid 5736, tgid 5736 (dhcpcd-run-hook), ts 68946699962, free_ts 33171190712 [ 99.429496][ T6015] post_alloc_hook+0x181/0x1b0 [ 99.441189][ T6015] get_page_from_freelist+0x10c4/0x34c0 [ 99.457764][ T6015] __alloc_frozen_pages_noprof+0x223/0x24d0 [ 99.467923][ T6015] alloc_pages_mpol+0x1fb/0x540 [ 99.485504][ T6015] new_slab+0x23c/0x330 [ 99.498070][ T6015] ___slab_alloc+0xd9c/0x1940 [ 99.528299][ T6015] __slab_alloc.constprop.0+0x56/0xb0 [ 99.538565][ T6015] kmem_cache_alloc_lru_noprof+0xf4/0x3b0 [ 99.554569][ T6015] alloc_inode+0xc3/0x240 [ 99.571599][ T6015] create_pipe_files+0x4c/0x930 [ 99.576574][ T6015] do_pipe2+0xaf/0x1c0 [ 99.597934][ T6015] __x64_sys_pipe2+0x54/0x80 [ 99.612960][ T6015] do_syscall_64+0xcd/0x260 [ 99.617573][ T6015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.644000][ T6015] page last free pid 1 tgid 1 stack trace: [ 99.660414][ T6015] free_frozen_pages+0x6d8/0xf40 [ 99.666502][ T6015] free_contig_range+0x133/0x3f0 [ 99.681828][ T6015] destroy_args+0x66f/0x830 [ 99.688884][ T6015] debug_vm_pgtable+0x130e/0x2d50 [ 99.696594][ T6015] do_one_initcall+0x120/0x6e0 [ 99.714317][ T6015] kernel_init_freeable+0x5c2/0x900 [ 99.725088][ T6015] kernel_init+0x1c/0x2b0 [ 99.752892][ T6015] ret_from_fork+0x45/0x80 [ 99.757411][ T6015] ret_from_fork_asm+0x1a/0x30 [ 101.058660][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 103.595310][ T6073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28'. [ 104.132057][ T6084] zero sized request [ 105.721958][ T6105] FAULT_INJECTION: forcing a failure. [ 105.721958][ T6105] name failslab, interval 1, probability 0, space 0, times 0 [ 105.738486][ T6105] CPU: 0 UID: 0 PID: 6105 Comm: syz.2.34 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 105.738546][ T6105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 105.738565][ T6105] Call Trace: [ 105.738575][ T6105] [ 105.738587][ T6105] dump_stack_lvl+0x16c/0x1f0 [ 105.738623][ T6105] should_fail_ex+0x512/0x640 [ 105.738661][ T6105] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 105.738712][ T6105] should_failslab+0xc2/0x120 [ 105.738763][ T6105] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 105.738808][ T6105] ? __proc_create+0xc3/0x8c0 [ 105.738839][ T6105] ? __proc_create+0x2ce/0x8c0 [ 105.738875][ T6105] __proc_create+0x2ce/0x8c0 [ 105.738907][ T6105] ? __pfx___proc_create+0x10/0x10 [ 105.738945][ T6105] ? _raw_write_unlock+0x28/0x50 [ 105.738993][ T6105] ? proc_register+0x314/0x5f0 [ 105.739029][ T6105] proc_create_reg+0x7d/0x180 [ 105.739066][ T6105] proc_create_seq_private+0x8e/0x1d0 [ 105.739113][ T6105] ? __pfx_proc_create_seq_private+0x10/0x10 [ 105.739153][ T6105] ? __pfx_uevent_net_rcv+0x10/0x10 [ 105.739195][ T6105] ? __pfx_dev_proc_net_init+0x10/0x10 [ 105.739229][ T6105] dev_proc_net_init+0xa8/0x220 [ 105.739264][ T6105] ops_init+0x1df/0x5f0 [ 105.739312][ T6105] setup_net+0x21e/0x850 [ 105.739359][ T6105] ? __pfx_setup_net+0x10/0x10 [ 105.739404][ T6105] ? lockdep_init_map_type+0x5c/0x280 [ 105.739449][ T6105] ? __pfx_down_read_killable+0x10/0x10 [ 105.739488][ T6105] ? debug_mutex_init+0x37/0x70 [ 105.739522][ T6105] copy_net_ns+0x2a6/0x5f0 [ 105.739573][ T6105] create_new_namespaces+0x3ea/0xad0 [ 105.739619][ T6105] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 105.739661][ T6105] ksys_unshare+0x45b/0xa40 [ 105.739703][ T6105] ? __pfx_ksys_unshare+0x10/0x10 [ 105.739744][ T6105] ? xfd_validate_state+0x5d/0x180 [ 105.739772][ T6105] ? rcu_is_watching+0x12/0xc0 [ 105.739806][ T6105] __x64_sys_unshare+0x31/0x40 [ 105.739846][ T6105] do_syscall_64+0xcd/0x260 [ 105.739876][ T6105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.739907][ T6105] RIP: 0033:0x7fbf74b8d169 [ 105.739930][ T6105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.739960][ T6105] RSP: 002b:00007fbf75926038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 105.739989][ T6105] RAX: ffffffffffffffda RBX: 00007fbf74da5fa0 RCX: 00007fbf74b8d169 [ 105.740009][ T6105] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 105.740028][ T6105] RBP: 00007fbf74c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 105.740045][ T6105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.740062][ T6105] R13: 0000000000000000 R14: 00007fbf74da5fa0 R15: 00007ffc8dc1e3e8 [ 105.740104][ T6105] [ 106.094773][ T6110] FAULT_INJECTION: forcing a failure. [ 106.094773][ T6110] name fail_futex, interval 1, probability 0, space 0, times 0 [ 106.109194][ T6110] CPU: 1 UID: 0 PID: 6110 Comm: syz.2.34 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 106.109237][ T6110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 106.109255][ T6110] Call Trace: [ 106.109264][ T6110] [ 106.109276][ T6110] dump_stack_lvl+0x16c/0x1f0 [ 106.109323][ T6110] should_fail_ex+0x512/0x640 [ 106.109367][ T6110] get_futex_key+0x49e/0x1000 [ 106.109403][ T6110] ? __pfx_get_futex_key+0x10/0x10 [ 106.109436][ T6110] ? kfree+0x252/0x4d0 [ 106.109485][ T6110] futex_wake+0xe7/0x4e0 [ 106.109530][ T6110] ? __pfx_futex_wake+0x10/0x10 [ 106.109572][ T6110] ? __pfx_vfs_writev+0x10/0x10 [ 106.109615][ T6110] ? do_writev+0x218/0x330 [ 106.109660][ T6110] do_futex+0x1e3/0x350 [ 106.109697][ T6110] ? __pfx_do_futex+0x10/0x10 [ 106.109730][ T6110] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 106.109771][ T6110] __x64_sys_futex+0x1e0/0x4c0 [ 106.109808][ T6110] ? fput+0x70/0xf0 [ 106.109835][ T6110] ? __pfx___x64_sys_futex+0x10/0x10 [ 106.109872][ T6110] ? __pfx_do_writev+0x10/0x10 [ 106.109910][ T6110] ? rcu_is_watching+0x12/0xc0 [ 106.109947][ T6110] do_syscall_64+0xcd/0x260 [ 106.109979][ T6110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.110010][ T6110] RIP: 0033:0x7fbf74b8d169 [ 106.110033][ T6110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.110064][ T6110] RSP: 002b:00007fbf729f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 106.110093][ T6110] RAX: ffffffffffffffda RBX: 00007fbf74da6168 RCX: 00007fbf74b8d169 [ 106.110113][ T6110] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fbf74da616c [ 106.110133][ T6110] RBP: 00007fbf74da6160 R08: 00007fbf75927000 R09: 0000000000000000 [ 106.110152][ T6110] R10: 0000000000000007 R11: 0000000000000246 R12: 00007fbf74da616c [ 106.110172][ T6110] R13: 0000000000000000 R14: 00007ffc8dc1e300 R15: 00007ffc8dc1e3e8 [ 106.110205][ T6110] [ 106.311285][ C1] vkms_vblank_simulate: vblank timer overrun [ 106.786588][ T6100] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 106.794504][ T6100] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 106.814557][ T6100] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 106.826012][ T6100] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 106.833437][ T6100] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 106.849531][ T6100] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 106.860760][ T6100] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 106.866904][ T6100] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 106.874581][ T6100] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 106.885069][ T6100] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 106.895655][ T6100] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 106.909361][ T6100] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 107.265516][ T6124] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 107.528428][ T55] Bluetooth: hci1: command 0x0c1a tx timeout [ 107.674209][ T55] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18 [ 108.888507][ T55] Bluetooth: hci0: command 0x0c1a tx timeout [ 108.894648][ T55] Bluetooth: hci3: command 0x0c1a tx timeout [ 108.894675][ T5842] Bluetooth: hci2: command 0x0c1a tx timeout [ 109.609612][ T5842] Bluetooth: hci1: command 0x0c1a tx timeout [ 110.451440][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.548333][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 110.965448][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.975718][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.984292][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.985936][ T5842] Bluetooth: hci2: command 0x0c1a tx timeout [ 110.999199][ T55] Bluetooth: hci3: command 0x0c1a tx timeout [ 110.999250][ T55] Bluetooth: hci0: command 0x0c1a tx timeout [ 111.468768][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.518425][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.688403][ T55] Bluetooth: hci1: command 0x0c1a tx timeout [ 111.832334][ T6187] process 'syz.0.43' launched './file0' with NULL argv: empty string added [ 112.306207][ T6210] syz.2.46 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 113.048359][ T55] Bluetooth: hci2: command 0x0c1a tx timeout [ 113.054557][ T55] Bluetooth: hci3: command 0x0c1a tx timeout [ 113.061526][ T5855] Bluetooth: hci0: command 0x0c1a tx timeout [ 113.257337][ T6219] capability: warning: `syz.1.48' uses 32-bit capabilities (legacy support in use) [ 113.341414][ T6218] db_root: cannot open: ffffff81000000 T srso_alias_untrain_ret [ 113.341414][ T6218] ffffffff81000000 T _stext [ 113.341414][ T6218] ffffffff81000000 T _text [ 113.341414][ T6218] ffffffff81000010 T __entry_text_start [ 113.341414][ T6218] ffffffff81000040 T mds_verw_sel [ 113.341414][ T6218] ffffffff81000080 T entry_SYSCALL_64 [ 113.341414][ T6218] ffffffff810000ab T entry_SYSCALL_64_safe_stack [ 113.341414][ T6218] ffffffff810000b9 T entry_SYSCALL_64_after_hwframe [ 113.341414][ T6218] ffffffff81000138 t syscall_return_via_sysret [ 113.341414][ T6218] ffffffff810001bf T entry_SYSRETQ_unsafe_stack [ 113.341414][ T6218] ffffffff810001cc T entry_SYSRETQ_end [ 113.341414][ T6218] ffffffff810001d0 T xen_error_entry [ 113.341414][ T6218] ffffffff81000230 T irq_entries_start [ 113.341414][ T6218] ffffffff81000230 T __irqentry_text_start [ 113.341414][ T6218] ffffffff81000ee0 T spurious_entries_start [ 113.341414][ T6218] ffffffff81001030 T asm_exc_divide_error [ 113.341414][ T6218] ffffffff81001050 T asm_exc_overflow [ 113.341414][ T6218] ffffffff81001070 T asm_exc_bounds [ 113.341414][ T6218] ffffffff81001090 T asm_exc_device_not_available [ 113.341414][ T6218] ffffffff810010b0 T asm_exc_coproc_segment_overrun [ 113.341414][ T6218] ffffffff810010d0 T asm_exc_spurious_interrupt_bug [ 113.341414][ T6218] ffffffff810010f0 T asm_exc_coprocessor_error [ 113.341414][ T6218] ffffffff81001110 T asm_exc_simd_coprocessor_error [ 113.341414][ T6218] ffffffff81001130 T asm_exc_invalid_tss [ 113.341414][ T6218] ffffffff81001160 T asm_exc_seg [ 113.565496][ T6224] vcan0: tx drop: invalid da for name 0x000000000000003f [ 113.723499][ T6229] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 116.435618][ T6281] busy [ 117.608756][ T6301] kernel read not supported for file /\*)A (pid: 6301 comm: syz.3.61) [ 117.691722][ T30] audit: type=1800 audit(6038056469.522:2): pid=6301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.61" name="\*)A" dev="mqueue" ino=8610 res=0 errno=0 [ 119.081586][ T6341] FAULT_INJECTION: forcing a failure. [ 119.081586][ T6341] name failslab, interval 1, probability 0, space 0, times 0 [ 119.131438][ T6341] CPU: 1 UID: 0 PID: 6341 Comm: syz.0.64 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 119.131483][ T6341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 119.131501][ T6341] Call Trace: [ 119.131510][ T6341] [ 119.131522][ T6341] dump_stack_lvl+0x16c/0x1f0 [ 119.131557][ T6341] should_fail_ex+0x512/0x640 [ 119.131594][ T6341] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 119.131638][ T6341] should_failslab+0xc2/0x120 [ 119.131687][ T6341] __kmalloc_cache_noprof+0x6a/0x3e0 [ 119.131740][ T6341] ? __v4l2_subdev_state_alloc+0x53/0x400 [ 119.131791][ T6341] __v4l2_subdev_state_alloc+0x53/0x400 [ 119.131838][ T6341] subdev_open+0xa6/0x560 [ 119.131882][ T6341] v4l2_open+0x222/0x490 [ 119.131912][ T6341] ? __pfx_v4l2_open+0x10/0x10 [ 119.131941][ T6341] chrdev_open+0x231/0x6a0 [ 119.131989][ T6341] ? __pfx_apparmor_file_open+0x10/0x10 [ 119.132036][ T6341] ? __pfx_chrdev_open+0x10/0x10 [ 119.132087][ T6341] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 119.132149][ T6341] do_dentry_open+0x741/0x1c10 [ 119.132192][ T6341] ? __pfx_chrdev_open+0x10/0x10 [ 119.132239][ T6341] ? inode_permission+0xdd/0x5f0 [ 119.132275][ T6341] vfs_open+0x82/0x3f0 [ 119.132302][ T6341] ? may_open+0x1f2/0x400 [ 119.132337][ T6341] path_openat+0x1e5e/0x2d40 [ 119.132391][ T6341] ? __pfx_path_openat+0x10/0x10 [ 119.132442][ T6341] do_filp_open+0x20b/0x470 [ 119.132487][ T6341] ? __pfx_do_filp_open+0x10/0x10 [ 119.132529][ T6341] ? find_held_lock+0x2b/0x80 [ 119.132576][ T6341] ? alloc_fd+0x420/0x760 [ 119.132642][ T6341] do_sys_openat2+0x11b/0x1d0 [ 119.132674][ T6341] ? __pfx_do_sys_openat2+0x10/0x10 [ 119.132725][ T6341] __x64_sys_openat+0x174/0x210 [ 119.132771][ T6341] ? __pfx___x64_sys_openat+0x10/0x10 [ 119.132805][ T6341] ? rcu_is_watching+0x12/0xc0 [ 119.132842][ T6341] do_syscall_64+0xcd/0x260 [ 119.132874][ T6341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.132904][ T6341] RIP: 0033:0x7f2afa38d169 [ 119.132927][ T6341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.132958][ T6341] RSP: 002b:00007f2afb14b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 119.132987][ T6341] RAX: ffffffffffffffda RBX: 00007f2afa5a6080 RCX: 00007f2afa38d169 [ 119.133007][ T6341] RDX: 0000000000000280 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 119.133026][ T6341] RBP: 00007f2afa40e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 119.133044][ T6341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.133062][ T6341] R13: 0000000000000000 R14: 00007f2afa5a6080 R15: 00007ffddfc37ad8 [ 119.133094][ T6341] [ 123.069186][ T6426] FAULT_INJECTION: forcing a failure. [ 123.069186][ T6426] name failslab, interval 1, probability 0, space 0, times 0 [ 123.130952][ T6426] CPU: 1 UID: 0 PID: 6426 Comm: syz.2.71 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 123.131001][ T6426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 123.131020][ T6426] Call Trace: [ 123.131030][ T6426] [ 123.131042][ T6426] dump_stack_lvl+0x16c/0x1f0 [ 123.131096][ T6426] should_fail_ex+0x512/0x640 [ 123.131137][ T6426] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 123.131183][ T6426] should_failslab+0xc2/0x120 [ 123.131236][ T6426] __kmalloc_cache_noprof+0x6a/0x3e0 [ 123.131290][ T6426] ? __debugfs_file_get+0x2ad/0x840 [ 123.131347][ T6426] __debugfs_file_get+0x2ad/0x840 [ 123.131397][ T6426] ? __pfx___debugfs_file_get+0x10/0x10 [ 123.131447][ T6426] ? __pfx_apparmor_file_open+0x10/0x10 [ 123.131501][ T6426] full_proxy_open_regular+0x4f/0x360 [ 123.131535][ T6426] do_dentry_open+0x741/0x1c10 [ 123.131580][ T6426] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 123.131613][ T6426] ? inode_permission+0xdd/0x5f0 [ 123.131649][ T6426] vfs_open+0x82/0x3f0 [ 123.131678][ T6426] ? may_open+0x1f2/0x400 [ 123.131716][ T6426] path_openat+0x1e5e/0x2d40 [ 123.131771][ T6426] ? __pfx_path_openat+0x10/0x10 [ 123.131824][ T6426] do_filp_open+0x20b/0x470 [ 123.131871][ T6426] ? __pfx_do_filp_open+0x10/0x10 [ 123.131917][ T6426] ? find_held_lock+0x2b/0x80 [ 123.131967][ T6426] ? alloc_fd+0x420/0x760 [ 123.132020][ T6426] do_sys_openat2+0x11b/0x1d0 [ 123.132052][ T6426] ? __pfx_do_sys_openat2+0x10/0x10 [ 123.132087][ T6426] ? __pfx___might_resched+0x10/0x10 [ 123.132133][ T6426] __x64_sys_openat+0x174/0x210 [ 123.132167][ T6426] ? __pfx___x64_sys_openat+0x10/0x10 [ 123.132202][ T6426] ? rcu_is_watching+0x12/0xc0 [ 123.132241][ T6426] do_syscall_64+0xcd/0x260 [ 123.132282][ T6426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.132314][ T6426] RIP: 0033:0x7fbf74b8d169 [ 123.132347][ T6426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.132377][ T6426] RSP: 002b:00007fbf75905038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 123.132408][ T6426] RAX: ffffffffffffffda RBX: 00007fbf74da6080 RCX: 00007fbf74b8d169 [ 123.132429][ T6426] RDX: 0000000000181000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 123.132450][ T6426] RBP: 00007fbf74c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 123.132470][ T6426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.132489][ T6426] R13: 0000000000000000 R14: 00007fbf74da6080 R15: 00007ffc8dc1e3e8 [ 123.132523][ T6426] [ 124.103083][ T6441] zero sized request [ 125.589693][ T6445] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 125.606490][ T6445] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 125.623721][ T6445] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 125.639062][ T6445] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 126.349914][ T6464] [ 126.352317][ T6464] ====================================================== [ 126.359368][ T6464] WARNING: possible circular locking dependency detected [ 126.366417][ T6464] 6.14.0-syzkaller-05877-g1a9239bb4253 #0 Not tainted [ 126.373227][ T6464] ------------------------------------------------------ [ 126.380281][ T6464] syz.2.81/6464 is trying to acquire lock: [ 126.386120][ T6464] ffff8881447b9958 (&q->elevator_lock){+.+.}-{4:4}, at: queue_requests_store+0x1c7/0x310 [ 126.396079][ T6464] [ 126.396079][ T6464] but task is already holding lock: [ 126.403495][ T6464] ffff8881447b9428 (&q->q_usage_counter(io)#29){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 126.414837][ T6464] [ 126.414837][ T6464] which lock already depends on the new lock. [ 126.414837][ T6464] [ 126.425281][ T6464] [ 126.425281][ T6464] the existing dependency chain (in reverse order) is: [ 126.434312][ T6464] [ 126.434312][ T6464] -> #2 (&q->q_usage_counter(io)#29){++++}-{0:0}: [ 126.442971][ T6464] blk_alloc_queue+0x619/0x760 [ 126.448292][ T6464] blk_mq_alloc_queue+0x179/0x290 [ 126.453874][ T6464] __blk_mq_alloc_disk+0x29/0x120 [ 126.459455][ T6464] loop_add+0x496/0xb70 [ 126.464155][ T6464] loop_init+0x164/0x270 [ 126.468945][ T6464] do_one_initcall+0x120/0x6e0 [ 126.474259][ T6464] kernel_init_freeable+0x5c2/0x900 [ 126.480013][ T6464] kernel_init+0x1c/0x2b0 [ 126.484889][ T6464] ret_from_fork+0x45/0x80 [ 126.489853][ T6464] ret_from_fork_asm+0x1a/0x30 [ 126.495173][ T6464] [ 126.495173][ T6464] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 126.502424][ T6464] fs_reclaim_acquire+0x102/0x150 [ 126.507999][ T6464] blk_mq_alloc_and_init_hctx+0x503/0x11c0 [ 126.514352][ T6464] blk_mq_realloc_hw_ctxs+0x8f6/0xc00 [ 126.520268][ T6464] blk_mq_init_allocated_queue+0x3af/0x1230 [ 126.526711][ T6464] blk_mq_alloc_queue+0x1c2/0x290 [ 126.532287][ T6464] __blk_mq_alloc_disk+0x29/0x120 [ 126.537869][ T6464] loop_add+0x496/0xb70 [ 126.542563][ T6464] loop_init+0x164/0x270 [ 126.547354][ T6464] do_one_initcall+0x120/0x6e0 [ 126.552664][ T6464] kernel_init_freeable+0x5c2/0x900 [ 126.558413][ T6464] kernel_init+0x1c/0x2b0 [ 126.563287][ T6464] ret_from_fork+0x45/0x80 [ 126.568242][ T6464] ret_from_fork_asm+0x1a/0x30 [ 126.573571][ T6464] [ 126.573571][ T6464] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 126.581418][ T6464] __lock_acquire+0x1173/0x1ba0 [ 126.586812][ T6464] lock_acquire+0x179/0x350 [ 126.591869][ T6464] __mutex_lock+0x19a/0xb00 [ 126.596926][ T6464] queue_requests_store+0x1c7/0x310 [ 126.602662][ T6464] queue_attr_store+0x270/0x310 [ 126.608069][ T6464] sysfs_kf_write+0x117/0x170 [ 126.613300][ T6464] kernfs_fop_write_iter+0x349/0x510 [ 126.619129][ T6464] iter_file_splice_write+0x91c/0x1150 [ 126.625139][ T6464] direct_splice_actor+0x18f/0x6c0 [ 126.630801][ T6464] splice_direct_to_actor+0x342/0xa30 [ 126.636725][ T6464] do_splice_direct+0x174/0x240 [ 126.642124][ T6464] do_sendfile+0xafd/0xe50 [ 126.647083][ T6464] __x64_sys_sendfile64+0x1d8/0x220 [ 126.652820][ T6464] do_syscall_64+0xcd/0x260 [ 126.657873][ T6464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.664305][ T6464] [ 126.664305][ T6464] other info that might help us debug this: [ 126.664305][ T6464] [ 126.674545][ T6464] Chain exists of: [ 126.674545][ T6464] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#29 [ 126.674545][ T6464] [ 126.688341][ T6464] Possible unsafe locking scenario: [ 126.688341][ T6464] [ 126.695799][ T6464] CPU0 CPU1 [ 126.701179][ T6464] ---- ---- [ 126.706552][ T6464] lock(&q->q_usage_counter(io)#29); [ 126.711959][ T6464] lock(fs_reclaim); [ 126.718508][ T6464] lock(&q->q_usage_counter(io)#29); [ 126.726434][ T6464] lock(&q->elevator_lock); [ 126.731078][ T6464] [ 126.731078][ T6464] *** DEADLOCK *** [ 126.731078][ T6464] [ 126.739226][ T6464] 5 locks held by syz.2.81/6464: [ 126.744171][ T6464] #0: ffff888024432420 (sb_writers#7){.+.+}-{0:0}, at: splice_direct_to_actor+0x342/0xa30 [ 126.754260][ T6464] #1: ffff88807a658c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x287/0x510 [ 126.764052][ T6464] #2: ffff88814479e008 (kn->active#98){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2aa/0x510 [ 126.774112][ T6464] #3: ffff8881447b9428 (&q->q_usage_counter(io)#29){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 126.785835][ T6464] #4: ffff8881447b9460 (&q->q_usage_counter(queue)#20){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 126.797821][ T6464] [ 126.797821][ T6464] stack backtrace: [ 126.803728][ T6464] CPU: 1 UID: 0 PID: 6464 Comm: syz.2.81 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 126.803763][ T6464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 126.803778][ T6464] Call Trace: [ 126.803786][ T6464] [ 126.803795][ T6464] dump_stack_lvl+0x116/0x1f0 [ 126.803822][ T6464] print_circular_bug+0x275/0x350 [ 126.803863][ T6464] check_noncircular+0x14c/0x170 [ 126.803900][ T6464] __lock_acquire+0x1173/0x1ba0 [ 126.803937][ T6464] ? __lock_acquire+0xaa4/0x1ba0 [ 126.803972][ T6464] lock_acquire+0x179/0x350 [ 126.804006][ T6464] ? queue_requests_store+0x1c7/0x310 [ 126.804031][ T6464] ? __pfx___might_resched+0x10/0x10 [ 126.804065][ T6464] __mutex_lock+0x19a/0xb00 [ 126.804090][ T6464] ? queue_requests_store+0x1c7/0x310 [ 126.804114][ T6464] ? mark_held_locks+0x49/0x80 [ 126.804148][ T6464] ? queue_requests_store+0x1c7/0x310 [ 126.804171][ T6464] ? lockdep_hardirqs_on+0x7c/0x110 [ 126.804212][ T6464] ? __pfx___mutex_lock+0x10/0x10 [ 126.804236][ T6464] ? blk_mq_freeze_queue_wait+0xad/0x1b0 [ 126.804277][ T6464] ? __pfx_autoremove_wake_function+0x10/0x10 [ 126.804314][ T6464] ? queue_requests_store+0x1c7/0x310 [ 126.804337][ T6464] queue_requests_store+0x1c7/0x310 [ 126.804362][ T6464] ? __pfx_queue_requests_store+0x10/0x10 [ 126.804388][ T6464] ? __mutex_trylock_common+0xe9/0x250 [ 126.804426][ T6464] ? __pfx_queue_requests_store+0x10/0x10 [ 126.804450][ T6464] queue_attr_store+0x270/0x310 [ 126.804492][ T6464] ? __pfx_queue_attr_store+0x10/0x10 [ 126.804533][ T6464] ? __lock_acquire+0x5ca/0x1ba0 [ 126.804568][ T6464] ? kernfs_fop_write_iter+0x287/0x510 [ 126.804605][ T6464] ? __pfx_queue_attr_store+0x10/0x10 [ 126.804645][ T6464] sysfs_kf_write+0x117/0x170 [ 126.804678][ T6464] kernfs_fop_write_iter+0x349/0x510 [ 126.804707][ T6464] ? __pfx_sysfs_kf_write+0x10/0x10 [ 126.804740][ T6464] iter_file_splice_write+0x91c/0x1150 [ 126.804785][ T6464] ? __pfx_iter_file_splice_write+0x10/0x10 [ 126.804831][ T6464] ? __pfx_copy_splice_read+0x10/0x10 [ 126.804871][ T6464] ? __pfx_iter_file_splice_write+0x10/0x10 [ 126.804909][ T6464] direct_splice_actor+0x18f/0x6c0 [ 126.804947][ T6464] splice_direct_to_actor+0x342/0xa30 [ 126.804982][ T6464] ? __pfx_direct_splice_actor+0x10/0x10 [ 126.805022][ T6464] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 126.805061][ T6464] do_splice_direct+0x174/0x240 [ 126.805097][ T6464] ? __pfx_do_splice_direct+0x10/0x10 [ 126.805132][ T6464] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 126.805168][ T6464] ? rw_verify_area+0xcf/0x680 [ 126.805199][ T6464] do_sendfile+0xafd/0xe50 [ 126.805233][ T6464] ? __pfx_do_sendfile+0x10/0x10 [ 126.805265][ T6464] ? __rseq_handle_notify_resume+0x69a/0x10c0 [ 126.805305][ T6464] __x64_sys_sendfile64+0x1d8/0x220 [ 126.805329][ T6464] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 126.805352][ T6464] ? rcu_is_watching+0x12/0xc0 [ 126.805381][ T6464] do_syscall_64+0xcd/0x260 [ 126.805406][ T6464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.805432][ T6464] RIP: 0033:0x7fbf74b8d169 [ 126.805452][ T6464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.805477][ T6464] RSP: 002b:00007fbf75926038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 126.805501][ T6464] RAX: ffffffffffffffda RBX: 00007fbf74da5fa0 RCX: 00007fbf74b8d169 [ 126.805518][ T6464] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 126.805533][ T6464] RBP: 00007fbf74c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 126.805549][ T6464] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 126.805564][ T6464] R13: 0000000000000000 R14: 00007fbf74da5fa0 R15: 00007ffc8dc1e3e8 [ 126.805586][ T6464] [ 127.179734][ T55] Bluetooth: hci1: command 0x0c1a tx timeout [ 127.351163][ T6467] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.471042][ T6470] syz.3.80 uses obsolete (PF_INET,SOCK_PACKET) [ 127.608298][ T55] Bluetooth: hci2: command 0x0c1a tx timeout [ 127.688367][ T55] Bluetooth: hci0: command 0x0c1a tx timeout [ 127.688388][ T5855] Bluetooth: hci3: command 0x0c1a tx timeout